End of Support

Setting the PTP Timeout Interval

To set the timeout multiplier for an interface, use the ptp announce timeout command. The timeout multiplier is the number of announcement intervals that the interface waits without receiving a PTP announcement before a timeout occurs.The values range from 2 to 255. The default multiplier is 3, which results in a 6-second timeout interval when setting the announcement interval to the default of 2 seconds.

This command sets timeout multiplier for the interface to 5. The announcement interval has just been set to 2 (4 seconds), and the interface times out if it doesn’t receive a PTP announcement for 20 seconds.

switch(config-if-Et5)# ptp announce timeout 5
switch(config-if-Et5)#

Configuring the PTP Delay Mechanism

To set the delay mechanism used in boundary-mode, use the ptp delay-mechanism command.

Example

This command sets the delay mechanism in boundary clock mode for the interface to peer-to-peer.

switch(config-if-Et5)# ptp delay-mechanism p2p
switch(config-if-Et5)#

Setting the Delay Request Interval

To set the time for the slave devices to send delay request messages, use the ptp delay-req interval command.

Example

This command sets the time the slave devices to send delay request messages to the master state to 3 for the interface.

switch(config-if-Et5)# ptp delay-request interval 3
switch(config-if-Et5)#

Setting the Peer Delay Request Interval

To set the minimum interval between the PTP peer delay-request messages, use the ptp pdelay-req interval command.

Example

This command sets the interval between PTP peer delay-request messages on the interface to 3.

switch(config-if-Et5)# ptp pdelay-request interval 3
switch(config-if-Et5)#

Setting the Peer Link Propagation Threshold

To set the delay threshold for which the peer cannot run generalized Precision Time Protocol (gPTP), use the ptp pdelay-neighbor-threshold command.

Example

This command sets the link propagation delay threshold on the interface to 200000 nanoseconds..

switch(config-if-Et5)# ptp pdelay-neighbor-threshold 200000
switch(config-if-Et5)#

Setting the Interval for Sending Synchronization Messages

To set the interval (in log seconds) for sending synchronization messages, use the ptp sync-message interval command. Value ranges and defaults vary based on the PTP mode of the switch.

Example

This command configures the interval for sending synchronization messages on the interface to 3 (8 seconds).

switch(config-if-Et5)# ptp sync-message interval 3
switch(config-if-Et5)#

Managing the Switch Name

These sections describe how to configure the switch's domain and host name.

Assigning a Name to the Switch describes assigning an FQDN to the switch.
Specifying DNS Addresses describes adding name servers to the configuration.

Assigning a Name to the Switch

A Fully Qualified Domain Name (FQDN) labels the switch and defines its organization ID in the Domain Name System hierarchy. The switch FQDN consists of a host name and domain name.

The host name uniquely associates with one device within an IP-domain. The default host name is localhost. You can configure the prompt to display the host name as described in prompt.

To assign a host name to the switch, use the hostname command. To return the switch host name to the default value of localhost, use the no hostname command.
To specify the domain location of the switch, use the dns domain command.

Examples

This command assigns the string main-host as the switch host name.
```
switch(config)# hostname main-host
main-host(config)#
```
This command configures aristanetworks.com as the switch domain name.
```
switch(config)# dns domain aristanetworks.com
switch(config)#
```
This procedure configures sales1.samplecorp.org as the switch FQDN.
```
switch(config)# dns domain samplecorp.org
switch(config)#
```

The following running-config extract contains the switch host name and IP-domain name:

switch# show running-config
! Command: show running-config
! device: switch (DCS-7150S-64-CL, EOS-4.13.2F)
!

vlan 3-4
!
username john secret 5 $1$a7Hjept9$TIKRX6ytkg8o.ENja.na50
!
hostname sales1
ip name-server vrf default 172.17.0.22
dns domain samplecorp.org
!

end
switch#

Specifying DNS Addresses

The Domain Name Server (DNS) maps FQDN labels to IP addresses and provides addresses for network devices. Each network requires at least one server to resolve addresses. The configuration file can list a maximum of three server addresses.

To add name servers to the configuration, use the ip name-server command. Each command can add multiple servers. All server addresses support multiple VRFs and a priority may be specified for each server named. If all name servers have the default priority (0), the configuration uses the default DNSmasq behavior. It queries all name servers simultaneously and forwards the requests to the first name server for 50 queries or 20 seconds, whichever expires sooner for answering. If any priorities contain non-zero entries, EOS issues queries in order with a five second timeout between unresponsive name servers.

Note: DNSmasq does not fulfill in-flight requests to unresponsive name servers.

Example

Use the following command to display the configuration file:

switch(config)# show ip name-server 
IP Address VRF     Priority
---------- ------- --------
10.0.0.1   default        0
10.0.0.2   default        1
10.0.0.1   vrf1           2
10.0.0.2   vrf1           3
fc00::1    default        4

The switch assigns source IP addresses to outgoing DNS requests. To force the switch to use a single, user-defined source interface for all requests, use the ip domain lookup command.

Examples

Use the following command to force the switch to use VLAN 5 as the source interface for DNS requests originating from the default VRF.
```
switch(config)# ip domain lookup source-interface Vlan5
switch(config)#
```
This command forces the switch to use VLAN 10 as the source interface for DNS requests originating from VRF purple.
```
switch(config)# ip domain lookup vrf purple source-interface Vlan10
switch(config)#
```

This command configures a name server with a priority of 4 on VRF purple.

switch(config)# ip name-server vrf purple 10.1.1.24 priority 4
switch(config)#

This command removes the name servers.

switch(config)# no ip name-server vrf purple 10.1.1.24
switch(config)#

This command removes all configured name in all VRFs.

switch(config)# no ip name-server 
switch(config)#

Note:

NXDOMAIN is considered a valid reply for the query.

System Clock and Time Protocols

The switch uses the system clock to time-stamp all events, logs, and system messages. Setting the system clock to Coordinated Universal Time (UTC) allows the switch to calculate and display the local time for administrative purposes based on the configured time zone. The system clock can be set manually, but the preferred method for synchronization uses Network Time Protocol (NTP). Any properly configured NTP servers on the switch override manually entered clock settings.

Use the following sections for the configuration of the system clock and NTP. For information on the Precision Time Protocol (PTP), see Timing Protocols.

Configuring the Time Zone
Setting the System Clock Manually
Displaying the Time
Network Time Protocol (NTP)

Configuring the Time Zone

EOS uses a fundamental system clock based on UTC and you cannot change the system clock UTC base. Instead, configure the time zone and EOS converts the UTC base time to the local time displayed in the Command Line Interface (CLI). Then, the system clock time stamps the logs with the local time.

To specify the time zone, use the clock timezone command.

Examples

Use the following commands to configure the switch for the United States Pacific Time Zone:

switch(config)# clock timezone US/Pacific
switch(config)# show clock
Tue Nov 11 12:39:16 2025
Timezone: US/Pacific
Clock source: NTP server (1.8.11.24)
switch(config)#

To view the predefined time zone labels, enter clock timezone with a question mark:

switch(config)# clock timezone ? 
            Africa/      Africa timezones
            America/     America timezones
            Antarctica/  Antarctica timezones
            Arctic/      Arctic timezones
            Asia/        Asia timezones
            Atlantic/    Atlantic timezones
            Australia/   Australia timezones
            Brazil/      Brazil timezones
            CET          CET timezone
            CST6CDT      CST6CDT timezone
            Canada/      Canada timezones
            Chile/       Chile timezones
            Cuba         Cuba timezone
            EET          EET timezone
            EST          EST timezone
            EST5EDT      EST5EDT timezone
            Egypt        Egypt timezone
            Eire         Eire timezone
            Etc/         Etc timezones
            Europe/      Europe timezones
           --More--

switch(config)#clock timezone

Use the following command to display all time zone labels that start with America.

switch(config)# clock timezone America/?
America/Adak           America/Anchorage       America/Anguilla      
America/Antigua        America/Araguaina       America/Argentina/    
America/Aruba          America/Asuncion        America/Atikokan      
America/Atka           America/Bahia           America/Bahia_Banderas
America/Barbados       America/Belem           America/Belize        
America/Blanc-Sablon   America/Boa_Vista       America/Bogota        
America/Boise          America/Buenos_Aires    America/Cambridge_Bay
--More--
switch(config)#clock timezone AMERICA

Use the following command to display all time zone labels that begin with Europe:

switch(config)# clock timezone Europe/?
Europe/Amsterdam   Europe/Andorra      Europe/Astrakhan    Europe/Athens    
Europe/Belfast     Europe/Belgrade     Europe/Berlin       Europe/Bratislava
Europe/Brussels    Europe/Bucharest    Europe/Budapest     Europe/Busingen  
Europe/Chisinau    Europe/Copenhagen   Europe/Dublin       Europe/Gibraltar 
Europe/Guernsey    Europe/Helsinki     Europe/Isle_of_Man  Europe/Istanbul  
Europe/Jersey      Europe/Kaliningrad  Europe/Kiev         Europe/Kirov     
Europe/Kyiv        Europe/Lisbon       Europe/Ljubljana    Europe/London    
Europe/Luxembourg  Europe/Madrid       Europe/Malta        Europe/Mariehamn 
Europe/Minsk       Europe/Monaco       Europe/Moscow       Europe/Nicosia   
Europe/Oslo        Europe/Paris        Europe/Podgorica    Europe/Prague    
Europe/Riga        Europe/Rome         Europe/Samara       Europe/San_Marino
Europe/Sarajevo    Europe/Saratov      Europe/Simferopol   Europe/Skopje    
Europe/Sofia       Europe/Stockholm    Europe/Tallinn      Europe/Tirane    
Europe/Tiraspol    Europe/Ulyanovsk    Europe/Uzhgorod     Europe/Vaduz     
Europe/Vatican     Europe/Vienna       Europe/Vilnius      Europe/Volgograd 
Europe/Warsaw      Europe/Zagreb       Europe/Zaporozhye   Europe/Zuric

Setting the System Clock Manually

The clock set command manually configures the system clock time and date in local time. Manually enter anyproperly configured NTP servers on the switch to override the time.

Example

This command manually sets the switch time.

switch# clock set 08:15:24 14 Jan 2026
Mon Jan 14 08:15:25 2013
timezone is US/Central

Displaying the Time

Enter the show clock command to display the local time and configured time zone.

Example

This command displays the switch time.

switch(config)# show clock
Mon Jan 14 16:32:46 2013
timezone is America/Los_Angeles

Network Time Protocol (NTP) Overview

EOS enables Network Time Protocol (NTP) on the switch by default, and time settings from any properly configured NTP server override the manual setting of the system clock.

NTP servers synchronize time settings of systems running an NTP client. The switch supports NTP versions 1 through 4, and uses version 4 by default. After configuring the switch to synchronize with an NTP server, it may take up to ten minutes for the switch to set the clock. Select the configured running-config lists of the NTP servers that the switch uses.

The following sections describe NTP configuration on the switch:

Configuring the NTP Server
Configuring the NTP Source
Configuring the Switch as an NTP Server
Configuring NTP Authentication
Viewing NTP Settings and Status

Overview of Network Time Security (NTS)

Network Time Security (NTS) provides a cryptographic security mechanism for Network Time Protocol (NTP). NTS ensures that a client receives the accurate time from a verified source and the time has not altered in transit. This prevents attacks such as spoofing and Man-in-the-Middle (MITM).

NTS separates key establishment from time synchronization by using a TLS-based NTS Key Establishment (NTS-KE) protocol to negotiate symmetric keys and encrypted cookies. Subsequent NTS packets include the cookies to enable stateless authentication by the server. NTS-KE manages the initial connection, server authentication, and key exchange in the following process:

Secure Connection - The client connects to the NTS-KE server using a TCP connection.
Authentication and Key Exchange - The server and client perform a Transport Layer Security (TLS) handshake and the server proves its identity to the client, providing server authentication.
Key Material and Cookies - During the TLS session, the server and client negotiate cryptographic parameters and exchange the necessary key material in the form of symmetric encryption keys. The server also sends opaque cookies with the per-client state necessary for the next phase.
Close Connection -The TLS connection then closes since it only required the connection for initial setup.

EOS disables the feature by default. To enable it, a valid SSL profile must be provided when configuring NTP.

Configuring the NTP Server

The ntp server command adds a server to the list or modifies the parameters of a previously listed address. When the system contains multiple NTP servers, the prefer keyword can be used to specify a preferred NTP server and uses it as the NTP server.

Note that all NTP servers must be in the same VRF and added in the default VRF if you do notspecify a VRF.

NTP sets the system clock if enabled and if the switch has one properly configured NTP server. NTP overrides the manual setting of the system clock. EOS enables NTP by default. To disable NTP, select the no ntp command.

Example

Use the following commands to add three NTP servers and designate the second server as the preferred NTP server.

switch(config)# ntp server local-NTP
switch(config)# ntp server 172.16.0.23 Prefer
switch(config)# ntp server 172.16.0.25

Configuring the NTP Source

A local interface can be specified as the source in outgoing NTP packets using the ntp local-interface command to control the address to send NTP responses to the switch. The IP address of that interface uses the source address in all outgoing NTP packets unless the switch acts as an NTP server and a server-specific source configured using the source option of the ntp server command.

Example

This command configures the IP address of VLAN interface 25 as the source specified in all outgoing NTP packets.

switch(config)# ntp local-interface vlan 25
switch(config)#

Configuring the Switch as an NTP Server

To configure the switch to accept NTP requests on all interfaces, use the ntp serve all command to enable NTP server mode globally on the switch. To configure an individual interface to accept or deny NTP requests, use the ntp serve command. Interface level settings override the global settings, and changing the settings at either the global or interface level also causes the switch to re-synchronize with its upstream NTP server. Disable the NTP server mode by default.

Examples

This command configures the switch to act as an NTP server, accepting NTP requests.
```
switch(config)# ntp serve all
switch(config)#
```
These commands configure interface ethernet 5 to accept NTP requests regardless of global settings.
```
switch(config)# interface ethernet 5
switch(config-if-Et5)# ntp serve
switch(config-if-Et5)#
```

Configuring NTP Authentication

The switch can be configured to accept NTP packets only from an authenticated server or client. Disable the NTP authentication by default.

To configure the switch to authenticate NTP packets, create one or more authentication keys using the ntp authentication-key command, and specify trusted keys by using the ntp trusted-key command. Use the ntp authenticate command to enable NTP authentication, and specify to use the trusted-key for a specific server. The NTP server must be configured to select the same authentication key and key ID number.

Note: Enable when NTP authentication on a switch. All NTP servers upstream of the switch and all NTP clients of the switch should have matching keys configured, and clients must have NTP authentication enabled.

Example

These commands configure the switch to authenticate NTP packets using key 328 with the plaintext password timeSync.

switch(config)# ntp authentication-key 328 md5 timeSync
switch(config)# ntp trusted key 328
switch(config)# ntp authenticate
switch(config)#

Configuring Network Time Security (NTS)

EOS provides NTS as an optional feature for both client and server modes and disables it by default. To enable it, you must provide a valid SSL profile for the configuration. See insert link to Control Plane Security.

Configuring a Client Connection to an NTP Server

The ntp server command configures a persistent association with a remote server. When specifying an SSL profile with the configuration, the remote server must support NTS.

Note: If the remote server does not support NTS, then synchronization between the switch and server cannot occur on the network.

To specify the SSL profile, use the parameter, ssl profile profile_name and add the profile to the configuration. You must have a configured trust certificate configured for the profile.

Use the following commands to establish an SSL profile, nts_profile, with a certificate, CaCert, and using TLS version 1.3:

switch(config)# mangement security
switch(config-mgmt-security)# ssl profile nts_profile
switch(config-mgmt-sec-ssl-profile-nts_profile)# trust certificate CaCert
switch(config-mgmt-sec-ssl-profile-nts_profile)# tls versions 1.3
switch(config-mgmt-sec-ssl-profile-nts_profile)# ntp server mycompany.com ssl profile nts_profile

Configuring the Switch as an NTP Server

EOS enables an NTP server for all interfaces on the switch using the ntp serve all command, or for individual interfaces by applying the ntp serve command in the Interface Configuration Mode. For both types of server configuration, enable NTS using an SSL profile and applying the command, ntp serve ssl profile profile_name.

switch(config)# management security
switch(config-mgmt-security)# ssl profile nts_profile
switch(config-mgmt-sec-ssl-profile-nts_profile)# certificate serverCert key serverKey
switch(config-mgmt-sec-ssl-profile-nts_profile)# tls versions 1.3
switch(config)# ntp server mycompany.com 
switch(config)# ntp serve all
switch(config)# ntp serve ssl profile nts_profile

Viewing NTP Settings and Status

To display the status of Network Time Protocol (NTP) on the switch, use the show ntp status command. To display the status of connections to NTP servers, use the show ntp associations command.

Note: In the output for show ntp associations, the reference ID identifies the time source of the NTP server as either the IPv4 address of the time source or, if that source has an IPv6 address, the first four octets of the MD5 hash of the IPv6 address. In EOS releases prior to 4.23.2, the show ntp status command identified the system peer by its reference ID as described above. Still, in later releases, it shows the IPv4 address or IPv6 address.

Examples

This command displays the status of the switch’s NTP connection.

switch# show ntp status
synchronised to NTP server (192.168.78.62) at stratum 3
   time correct to within 66 ms
   polling server every 1024 s
switch #

This command displays data about the NTP servers in the configuration.

switch# show ntp associations
remote           refid          st t when  poll reach   delay   offset  jitter 
==============================================================================
+l.ntp.arista.co 125.157.10.11   2 u  539  1024  377  121.748   -0.345   0.893
-3.ntp.arista.co 127.31.152.34   2 u  868  1024  377  101.671    2.434   1.529
+2.ntp.arista.co 176.131.12.185  2 u  676  1024  377  116.505     0.03   0.768
*4.ntp.arista.co 120.181.192.192 2 u  696  1024  377   48.431   -0.416    0.15
switch#

Displaying Network Time Security (NTS)

Use the show ntp status command to display information about the NTS configuration:

switch# show ntp status
synchronised to NTP server (10.0.1.2) at stratum 2
   time correct to within 939 ms
   polling server every 64 s

NTS client sends: 5
NTS client recvs good: 5
NTS client recvs w error: 0
NTS server sends: 0
NTS server recvs good: 0
NTS server recvs w error: 0
NTS-KE serves good: 0
NTS-KE serves bad: 0
NTS-KE client probes good: 1
NTS-KE client probes bad: 0

The output displays the following information about the NTS-KE configuration:

NTS client sends - The number of client requests sent with NTS.
NTS client recvs good - The number of valid responses with NTS received from servers.
NTS client recvs w error - The number of invalid responses with NTS received from servers.
NTS server sends - The number of responses with NTS sent by EOS as a server.
NTS server recvs good - The number of valid client requests with NTS received by EOS as a server.
NTS server recvs w error - The number of invalid client requests with NTS received by EOS as a server.
NTS-KE serves good - The number of successful NTS-KE negotiations performed by the server.
NTS-KE serves bad - The number of unsuccessful NTS-KE negotiations performed by the server.
NTS-KE client probes good - The number of successful NTS-KE negotiations performed by the client.
NTS-KE client probes bad - The number of unsuccessful NTS-KE negotiations performed by the client.

EOS re-attempts unsuccessful negotiations until successfully negotiating with the client or server. NTP synchronization only occurs after a successful NTS-KE negotiation. When operating correctly, the entries for NTS clients and servers increment consistently.

Managing Display Attributes

Display commands control the content of the banner and the command line prompt.

Banners

The switch can display two banners:

Login banner - The login banner precedes the login prompt. Use a login banner to warn against unauthorized network access attempts or other messages to users.
motd banner - After the user logs into the switch, the Message of the Day (MoTD) banner displays.

This output displays both banners in bold:

This is a login banner
switch login: john
Password:
Last login: Mon Jan 14 09:24:36 2013 from aristanetworks.com
This is an motd banner
switch>

Use the following commands to create a login and motd banner:

switch(config)# banner login
Enter TEXT message. Type 'EOF' on its line to end.
This is a login banner
EOF
switch(config)# banner motd
Enter TEXT message. Type 'EOF' on its own line to end.
This is an motd banner
EOF
switch(config)#

Use the following steps to create a banner:

Enter global configuration mode.
```
switch# config
switch(config)# 
```
Enter Banner Configuration Mode by typing the desired command:
- To create a login banner, type banner login.
- To create a motd banner, type banner motd
  The switch responds with instructions about entering the banner text.
```
switch(config)# banner login 
Enter TEXT message. Type 'EOF' on its own line to end. 
```
Enter the banner text.
This is the first line of banner text.

This is the second line of banner text.
Press Enter to place the cursor on a blank line after completing the banner text.
Exit banner edit mode by typing EOF.
```
EOF 
switch(config)# 
```

Configuring the CLI Prompt

The CLI prompt provides an entry point for EOS commands. The prompt command configures the contents of the prompt. The no prompt command returns the prompt to the default of %H%P.

Characters allowed in the prompt include A-Z, a-z, 0-9, and the following additional characters:

! @ # $ % Âˆ & * ( ) - = + f g [ ] ; : < > , . ? / Â˜ n

The prompt supports these control sequences:

%s “ - Space character
%t “ - Tab character
%% “ - Percent character
%H “ - Host Name
%D “ - Time and Date
%D{f_char} “ - time and date, format specified by the BSD strftime (f_char) time conversion function.
%h “ - Host name up to the first.
%P “ - Extended command mode
%p “ - Command mode
%r “ - Redundancy status on modular systems (has no effect on a fixed system)
%R “ - Extended redundancy status on modular systems â€“ includes status and slot number (has no effect on a fixed system)

Examples

Use the following command to create a prompt that displays system 1 and the Command Mode.
```
switch(config)# prompt system%s1%P
system 1(config)#
```
Use the following command to create a prompt that displays the Command Mode.
```
switch(config)# prompt %p
(config)#
```

These equivalent commands create the Default prompt.

% prompt %H%P
host-name.dut103(config)#

%no prompt
host-name.dut103(config)#

7130 Platform Layer 1 Configuration

This section describes the purpose, behavior, and configuration of the 7130 platform and includes the following topics:

7130 Platform Overview

The Arista 7130 Series provides a comprehensive set of platforms to service ultra-low latency networking, in-network applications, and composable custom packet processing. The product family contains a broad selection of powerful hardware, FPGA-based network applications and developer toolkits.

The series contains the following features:

The 7130 Connect Layer 1+ network devices with port-to-port ultra low latencies.
The FPGA-enabled devices of the 7130E and L Series, programmable switches hosting up to 3 FPGAs, and running Arista and third party network applications.
The 7130 network applications which feature capabilities for low latency multiplexing using a MetaMux interface, tapping, tap aggregation, and sub-nanosecond precision timestamping on a MetaWatch interface. Capabilities also include Layer 2 switching on a SwitchApp, filtering on a MetaProtect interface, inline timestamping on an ExchangeApp interface, and segmented multiplexing for multi-tenant environments on a MultiAccess interface. Arista also provides development toolkits and IP Cores for users to develop applications.

This chapter provides information about configuring a 7130 Layer 1 interface to connect on your network.

Page 14 of 17

End of Support

Setting the PTP Timeout Interval

Configuring the PTP Delay Mechanism

Setting the Delay Request Interval

Setting the Peer Delay Request Interval

Setting the Peer Link Propagation Threshold

Setting the Interval for Sending Synchronization Messages

Managing the Switch Name

Assigning a Name to the Switch

Examples

Specifying DNS Addresses

Example

Examples

System Clock and Time Protocols

Configuring the Time Zone

Examples

Setting the System Clock Manually

Example

Displaying the Time

Example

Network Time Protocol (NTP) Overview

Overview of Network Time Security (NTS)

Configuring the NTP Server

Example

Configuring the NTP Source

Example

Configuring the Switch as an NTP Server

Examples

Configuring NTP Authentication

Configuring Network Time Security (NTS)

Configuring a Client Connection to an NTP Server

Configuring the Switch as an NTP Server

Viewing NTP Settings and Status

Examples

Displaying Network Time Security (NTS)

Managing Display Attributes

Banners

Configuring the CLI Prompt

Examples

7130 Platform Layer 1 Configuration

7130 Platform Overview