Force10 Networks S2410s manual

SFT OS Command Reference for the S2410 V ersion 2.4.1.0 Edition 2 April 2008[...]

Copyright 2008 Force10 Networks All rights reserved. Printe d in the USA. April 2008. Force10 Networks reserves the right to change, modify , revi se this publicati on without notice. T rademarks Force10 Networks® and E-Series® ar e registered trademarks of Force10 Networks, In c. Force10, the Force 10 logo, E1200, E600, E60 0i, E300, EtherScale,[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 3 This preface describes SFTOS 2.4.1 by contrasting it to SFT O S 2.3.1.9. Major Changes Most of the differences in SFT OS 2.4.1 reflec t the fact that SFTOS 2.4.1 is dedicated to supporting the S2410 models of the S-Series: • Layer 2 only : The S2410 is limited to Layer 2 functionality , a[...]

4 New Features • The maximum number of LAGs is 12, with a maximum of 12 ports in a LAG (vs. 32 LAGs, with a maximum of eight members each in SFT OS 2.3.1). See Chapter 15, LAG/ Port Channel Commands, on pa ge 249 . • Maximum Jumbo Frame size in creased from 9216 to 1024 0. • IGMP Snooping : The current S2410 hardware does not supp ort IGMP Sn[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 5 New Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Major Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Ot[...]

6 Contents Chapter 3 Using the Command Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Command Syntax Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Command Format . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 7 show interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 show interface ethernet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67 show inter[...]

8 Contents snmp-server enable traps linkmode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 0 snmp-server enable traps multiuse rs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 0 snmp-server enable traps stpmode . . . . . . . . . . . . . . . . . . . . . . . .[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 9 priority (VLAN) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126 protocol group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127 protoc[...]

10 Contents Configuration Scripting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146 script apply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147 script delete . . . . . . . . . . . . . . . . . .[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 11 port-secur ity ma c- ad d re ss move . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166 show port-security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166 show port-se[...]

12 Contents port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190 priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190 single-connection . . . . . . . . . . . . [...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 13 lease . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209 network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

14 Contents gvrp interfacemode enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 228 gvrp interfacemode enable all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229 set gvrp adminmode . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 15 Chapter 15 LAG/Port Channel Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249 addport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249 deletepor[...]

16 Contents spanning-tree mst priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271 spanning-tree mst vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 272 spanning-tre e port mode enable . . . . . . . . . . . . . . . . [...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 17 Figure 1 Force10 Netw orks iSuppor t Websit e . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Figure 2 Examp le of Accessing the Boot Menu with the reload Command . . . . . . . . . . . . . . . . . 32 Figure 3 Example of Configuring the Eth ernet Management [...]

18 Figure 35 Using the copy command to Upload the Event Lo g . . . . . . . . . . . . . . . . . . . . . . . . . . . 141 Figure 36 Using the copy command to Download the CLI Ba nner . . . . . . . . . . . . . . . . . . . . . . . 142 Figure 37 Sample Output from the show logging Command . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153 Figure[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 19 T able 1 Boot Menu Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 T able 2 Network Address Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 T able 3 Command Modes . [...]

20[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 21 This guide describes configura tion commands for SFTOS 2.4 software, which is dedicate d to the S2410 models of the S-Series line of switc hes. The commands can be accessed from the SFTOS Command Line Interface (CLI), access ed through the console port or through a T elnet connection, and [...]

22 About This Guide Audience This guide assumes you are kn owledgeable in Layer 2 and Laye r 3 networking technolog ies, that you have an understanding of the SFT OS software base and have read the appropriate specification for the relevant switch platform. This document is primarily fo r system administrators config uring and operating a system us[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 23 Related Documents and Sour ces of Additional Information The following docu ments prov ide information on using the S2410 switch and SFTOS 2.4 software. All of the docu ments are available on the Documents tab of iS upport (the Force10 Networks support we bsite): http://www .force10network[...]

24 About This Guide Document ation Feedback If appropriate for the issue, pl ease include the following info rmation with your comments: • Document name • Document part number (from the front cover) • Page number • Software release version (from the front cover) The iSupport W e bsite Access to some sections of the iSupport we bsite do not [...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 25 • Documents : User documentation, F AQs, field no tices, technical tips, and white papers • Support Programs : Information on the complete suite of Force10 support and professional support services. For more on using the iSupport we bsite and accessing services, see the Force10 Service[...]

26 About This Guide[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 27 The SFTOS software loaded in every S- Series switch has two purposes: • Assist attached hardware in switching frames, based on Layer 2, 3, or 4 information contained in the frames. • Provide a complete device management portfolio to the network administrator . Switch Management Options[...]

28 SFTOS Overview SFT OS 2.4.1 Features The SFTOS 2.4 .1 so ftware pr ov ides the following features th rough a limited version (no stacking) of its “Layer 2 Package” (also called the “Switching Package”). • BootP (RFC951, 1542) • BootP/DHCP Relay and Server (RFC 2131) • Host Requirements (RFC 1 122) • UDP (RFC 768) • IP (RFC 791)[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 29 Multicast Protocols • IGMP Snooping • Layer 2 Multicast Forwarding Security and Packet Control Features • Ingress Rate Limiting • Login Access Control • RADIUS • IEEE 802.1x • SSH2 Server Support • Port Mirroring • Access Profiles on Routing Protocols • DOS Protection ?[...]

30 SFTOS Overview[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 31 This chapter summarizes the procedures to star t and operate the switch. For more detail, see the Getting S t arted chapter in the SFTOS Config uration Guide (and the rest of that guide) or the S2410 Quick Refer ence . This chapter covers the following topics: • Starting the S witch • [...]

32 Quick Start 5. Press ENTER two times. The prompt of the User Exec mode of the CLI is displayed. 6. Enter enable to switch to the Privileged Exec mode. Y ou can run all show commands from this mode, while some show commands do not run from User Exec mode. 7. Enter configure to access the Global Config mode to enter config uration commands. 8. Ent[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 33 2. At the [Boot Menu] prompt, press the number and Enter of the option that you want. The options are: For details on other Xmodem opt ions, see Uploading from the Switc h through XMODEM on page 37 and Downloading to the Switch through XMODEM on page 37 . In general, for more information o[...]

34 Quick Start Physical Port Data T o get information on the physical port, use the show port all command : User Account Management T o configure switch administrator accounts, use the following commands : Command Syntax Command Mode Purpose show port all Privileged Exec Displays the ports in unit/slot/port format a nd the following data for each p[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 35 Management IP Addr ess In addition to logging into the CLI to view and manage network parameters, you can use the following methods: • Simple Network Manage ment Protocol (SNMP) • S S H • T e l n e t • SFTOS W eb User Inte rface (W eb UI) through a W eb browser (See Using the W eb [...]

36 Quick Start Configuring the Management VLAN IP Address T o configure the management VLAN IP address, use the following commands: For details on command syntax for the co mmands liste d above, see General System Management and Information Commands on page 55 . Configuring the Ethernet Management Port T o configure the IP address of the Ethernet M[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 37 Example of Configuring the Ethernet Management Port Figure 3 Example of Configuring th e Ethernet M anagement Port Uploading fr om the Switch through XMODEM T o copy to a PC thr ough the co nsole port with XMODEM, use the following command. Downloading to the Switch thr ough XMODEM T o dow[...]

38 Quick Start Downloading fr om a TFTP Server 1. Before starting a TFTP server download, c onfigure the management IP address of the switch; see Management IP Address on page 35 . 2. T o download from a TFTP server , use the following command : Using Factory Defaults T o load factory defaults, use either of the following commands : Command Syntax [...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 39 The SFTOS command line interface (CLI) is one of the three major wa ys to manage the S2410, and is t he most comple te. The SFT OS W eb User Interfa ce (W eb UI) is discussed in Chapter 4, Using the W eb User Interface , and SNMP is addressed in SNMP Management Commands on pa ge 94 in the [...]

40 Using the Command Line Inter face The following conventions apply to the command name: • The command name is displayed in bold fo nt. It must be entered exactly as shown. • When you have entered enough letters of a command name to uniquely identify the command, you can press the space bar or Ta b key to cause the system to complete the word.[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 41 W ords in italics (also some times shown in brackets: <param eter> ) indicate that a mandatory parameter mu st be entered in pl ace of the brackets and text inside them . [ parameter ]—square brackets indicate that an optional parameter ma y be entered in place of the brackets and [...]

42 Using the Command Line Inter face unit/slot/port — V alid slot and port number separated by forward slash es. For examp le, 0/1 represents slot number 0 and port number 1. logical unit/ slot/port —Logical unit, slot and port number . This is applicable in the case of a link aggregation group (LAG; also called a port channel). The operator ca[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 43 Keyboard Shortcuts The following key combinations (speedkeys, sp ecial characters) speed up use of the CLI : Backspace —delete previous character Ctrl-A —go to beginning of line Ctrl-B —go backward one character Ctrl-D —delete current character Ctrl-E —go to end of line Ctrl-F ?[...]

44 Using the Command Line Inter face • T ype a partial keyword followed by a ? A display of keywords be gin ning with the partial keyword is listed . Figure 4 illustrates the results of entering ? to get a list of possible keywords. Figure 4 Partial Keyword Example Using Command Modes The CLI of SFT OS follows the industry conv ention of mode-bas[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 45 The following command-mode tree diagram provi des an overview of the names of the mo des and how they relate to each other . The User Ex ec mode at the top of the tree is the mode you enter when you access the CLI. Mode-based T opology As detailed above, the CLI is bu ilt on a mode concept[...]

46 Using the Command Line Inter face Figure 5 CLI Mode Diagram Access to all commands beyond the User Ex ec mode can be restricted through the en able password, which you set with the enable passwd command. See enable passwd on page 142 . Note: In Release 2.4.1, you acce ss the Interf ace VLAN mode from the Global Config mode with the command inter[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 47 The following table shows the relationship of the command mode names to the prompts visible in the mode and the exit method from that mode. The first three rows in the table are organized in the sequence in which you would access the child modes. Beyond the Global Config mode, the modes ar[...]

48 Using the Command Line Inter face Mode-based Command Hierar chy As introduced above, the CLI is divided into va rious modes. Commands in a particular mo de are not available until the operator switches to th at mode, with the exception of the User Exec mode commands. The User Exec mode comman ds may also be executed in the Privileged Exec mode. [...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 49 In this mode, a physical port is set up fo r a specifi c logical connection operation. The Interface Config mode provides access to the router interface configuration commands. Command Prompt : hostna me (Interface )# The resulting prompt sequence for the interface configuration command en[...]

50 Using the Command Line Inter face T ACACS Config Mode. Use this mode to configure th e connection parameters to a T ACACS + user authentication server . VLAN Mode. (formally called the Interface Vlan Config mode, or more simply , the Interface Vlan mode) This mode groups a ll the commands pertaining to VLANs. Command Prompt : hostna me ( conf-if[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 51 This chapter covers the following topics: • Configuring for W eb Access on page 52 • W eb Page Layout on page 5 2 • Start ing the W eb User Interface on page 52 • Command Buttons on page 53 This chapter is a brief introduction to the SFT OS W eb User Interface (W eb UI), enabling y[...]

52 Using the Web User Interface Configuring for W eb Access T o enable W eb browser access to the switch: 1. Configure the switch for in-band connectivity . See Management IP Address on page 35 . 2. Enable HTTP W eb access to the switc h with either the ip http server enable command or ip http secure-server enable (for details, see Hypertext T rans[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 53 3. Make your selection by clicking on the appr opriate item in the navigation tree in Frame 2. Command Buttons The following command buttons are used throughout the W eb UI pa nels: Save —Implements and saves the chan ges you just made. Some se ttings may require you t o reset the system[...]

54 Using the Web User Interface[...]

SFTOS Command Reference for the S2410, Version 2.4 . 1.0 55 The comma nds in this chapter either manage the switch in general, configure management interfaces, or show current ma nagement settings. For every conf iguration command, there is a show command that displays the configuration setting. This chapter contains the following major sections: ?[...]

56 System Management Commands dir • network protoc ol on page 62 • protocol on page 63 • serviceport ip on page 63 • serviceport protocol on page 64 • show arp switch on page 64 • show hardware on page 65 • show interface on page 65 • show interface ethernet on pag e 67 • show interface managementethernet o n page 75 • show inte[...]

hostname SFTOS Command Reference for the S2410, Version 2.4 . 1.0 57 Example Figure 7 Example of dir nvram Command Output hostname Change the text that ap pears as part of the CLI prompt. Synt ax ho stname hostname Parameters Default Force10 S50 (For e xample, the User Exec prompt appears as “ (Force10 S50) > ”.) Mode Global Config Command H[...]

58 System Management Commands interface managementethe rnet interface managementethernet This command invokes the Interface ManagementEthernet mode (uses the (Config-if-ma)# prompt), where you can set up a management IP interface. For details on management interfaces, see the Management chapter of the SFTOS Confi guration Guide . Synt ax interface [...]

mac-addr ess SFTOS Command Reference for the S2410, Version 2.4 . 1.0 59 The value for ipaddr is the IP Addres s of the management interface. This is the IP address that you would enter in your W eb browser to access the SFTOS W eb User Interface. The value for subnetmask is a 4-digit dotted-deci mal numb er which represents the subnet mask of the [...]

60 System Management Commands management route de fault Default None Mode Interface ManagementEthernet Command History Related Commands management route default This command sets the IP gate way of the switch. The managemen t IP address (configured with the ip address , above) and the gateway must be on the same subnet. Synt ax man agement route de[...]

mtu SFTOS Command Reference for the S2410, Version 2.4 . 1.0 61 Example Figure 8 Example of Configuring Man agement Address Related Commands mtu This command sets the maximum transmission unit (MTU) size (in bytes) for physical and LAG (port channel) interfaces. Synt ax [ no ] mtu 1518-10240 For the standard implementatio n, the range of the MTU si[...]

62 System Management Commands network ma c-address network mac-address This command is replaced by the mac-address command in V ersion 2.3. Mode Privileged Exec Command History network mac-type This command is replaced by the mac-type command in V ersion 2.3. Mode Privileged Exec Command History network parms Command History network protocol This c[...]

protocol SFTOS Command Reference for the S2410, Version 2.4 . 1.0 63 protocol This command specifies the netw ork configuration protocol t o be used for the management VLAN. Synt ax protocol { none | bootp | dhcp } If you modify this value, the chan ge is effective immediately . The bootp keyword indicates that the switch periodically send s req ue[...]

64 System Management Commands serviceport pr ot oc ol Related Commands serviceport protocol This command specifies the network configuratio n protocol to be used for configuring access to the Ethernet Managemen t port. Synt ax serviceport pro tocol { none | bootp | dhcp } If you modify this value, the ch ange is effective immediately . Use the boot[...]

show hardwa re SFTOS Command Reference for the S2410, Version 2.4 . 1.0 65 MAC Address —A unicast MAC a ddress for which the switch has forwarding and/or fi ltering information. The format is 6 two-digit hexadecimal number s that are separated by colons, for example 01:23:45:67:89:AB IP Address —The IP address assigned to each interface unit/sl[...]

66 System Management Commands show interface Enter the port number of a particular port to query , where unit is the stack member , slot is always 0 (zero), and port is the port numb er . Mode Privileged Exec Web U se r Interface Inventory Information panel, accessed from the System node Usage Information The show interface command accepts oth er k[...]

show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 67 Related Commands show interface ethernet This command displays de tailed statistics for a specific port or for all CPU traffic based upon the ar gument. Synt ax show interface ethernet { switchport | unit/s lot/port | 1-3965 } Parameters Mode Privileged Exec Usage [...]

68 System Management Commands show interface ethernet Example 1 Figure 10 Example of show interface ethern et switchport Output The display fields of show interface ethernet , when the keyword switchport is added, are as follows: Ta b l e 7 Fields in Output of show inte rface ethernet switch port Command Field Description T ota l Packets Received ([...]

show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 69 Example 2 Figure 1 1 Example of show interface ethernet u nit/slot/port Output ( truncated) Broadcast Packets T ran smitted The total number of packets that higher-level protocols requested be transmitted to the Broadcast add ress, including those th at we re disca[...]

70 System Management Commands show interface ethernet The show interface ethe rnet display fields, when the argument is unit/slot/port , are as follows: Ta b l e 8 Fields in Output of show interface ethernet unit/slot/port Command Field Description Packets Received T ype Indicates current type of use of the port, such as “PC Mbr” to indicate p [...]

show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 71 Packets Received 1519-1522 Octets The total number of packets (including bad packets) received that were betw een 1519 and 1 522 octets in length i nclusive (excluding framing bits but including FCS octets). Packets Received > 1522 Octets The total number of pac[...]

72 System Management Commands show interface ethernet Local Traf fic Frames The total number of frames dropped in the forwardin g process because the de st ination add r e ss wa s loca ted off of this port. 802.3x Pause Frames Received A count of MAC Co ntrol frames received on this interface with an opcode indicating the P AUSE operation. This cou[...]

show interface eth ernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 73 Packets T ransmi tted 1024-1518 Octets The total number of p ackets (including bad packets) received that were betw een 1024 and 1 518 octets in length i nclusive (excluding framing bits but including FCS octets) Packets T ransmi tted 1519-1522 Octets The total num[...]

74 System Management Commands show interface ethernet Related Commands VLAN Viable Discards The number of frames discarded on this p ort when a lookup on a particular VLAN occurs while that entry in the VLAN table is being modified, or if the VLAN has no t been configured Protocol S tatistics BPDU's received The count of BPDUs (Bridge Protocol[...]

show interface mana gementethernet SFTOS Command Reference for the S2410, Version 2.4 . 1.0 75 show interface managementethernet This command displays info rmation about the management address of the switch. Synt ax show interface managementet hernet Mode Privileged Exec Command History Usage Information The display parameters of the show interface[...]

76 System Management Commands show interface switchport Related Commands show interface switchport This command displays a summary of statistics on Layer 2 interfaces. Synt ax show interface switchport Mode Privileged Exec Usage Information The display parameters of show interface , when the argument is switchport , are as follows: ip address (mana[...]

show interfaces SFTOS Command Reference for the S2410, Version 2.4 . 1.0 77 Related Commands show interfaces This command displays information about a selected interface or VLAN. Synt ax sho w interfaces { description { unit/s lot/port | 1-3965 } | cos-queue [ unit/slot/port ]} Parameters Mode Privileged Exec Command History VLAN Entries Currently [...]

78 System Management Commands show loggi ng Usage Information The following examp le shows sample output of the show interfaces descri ption command with an interface specified in the unit/slot/port form: Example Figure 12 Output of the show interfaces descriptio n Command Related Commands show logging Related Commands show mac-addr-table This comm[...]

show mac-addr-t able SFTOS Command Reference for the S2410, Version 2.4 . 1.0 79 Parameters Mode Privileged Exec Example Figure 13 Example of Output from the show mac-ad dr-ta ble a ll Command Field Descriptions Mac Address —A unicast MAC addres s for which the switch has forwa rding and or filtering informati on. The format is 6 or 8 two-digit h[...]

80 System Management Commands show msg log Stat ic —The value of the correspo nding instance was added by the system or a user wh en a static MAC filter was defined. It cannot be relearned. Learned —The value of the correspondi ng instance was learned by o bserving the source MAC addresses of incoming traffic, and is currently in use. Managemen[...]

show netw ork SFTOS Command Reference for the S2410, Version 2.4 . 1.0 81 show network Command History Related Commands show running-config This command is used to disp lay/capture the current setting of dif ferent protocol packages supported on the switch. This c ommand disp lays/captures only commands with settings/ configurations with values tha[...]

82 System Management Commands show serviceport Example Figure 16 Using the show run n ing-config comma nd Note : Usage Information Start ing with Release 2.3, show running- config startup-config provides the user the opportunity to captu re the runnin g-config data to the startup-co nfig file as a text file. If a startup-config file is already pres[...]

show sysinfo SFTOS Command Reference for the S2410, Version 2.4 . 1.0 83 Example Figure 17 show serviceport Comma nd Output Related Commands show sysinfo This command displays switch information. Synt ax sho w sysinfo Ta b l e 1 1 Fields in Output of show serviceport command Field Description IP Address The IP address of the Ethernet Man agement po[...]

84 System Management Commands show version Mode Privileged Exec show version This command displays version details of the software/hardware present on the system, which would be used for trouble-shooting . This co mmand provides the de tails shown with the show hardware and show sysinfo commands, along with Interfa ce information, the u-boot versio[...]

show version SFTOS Command Reference for the S2410, Version 2.4 . 1.0 85 Burned in MAC Address Universally assign ed network address Software V ersion The releas e.version.revision number of the code currently running on the switch Additional Packages This displays the add itional packages that are incorporated into this system, such as SFTOS Multi[...]

86 System Management Commands show tech-s upport Related Commands show tech-support This command displays the output of the commands show hardware , sh ow logging , show port all , show running-config , and show versio n . The output for each is separated by a header , as exe mplified here: ----------------- show version -------------------- [The o[...]

vlan participation (management) SFTOS Command Reference for the S2410, Version 2.4 . 1.0 87 Related Commands vlan participation (management) This command assigns the management VLAN of the switc h. Synt ax [ no ] vlan participation vlan_id The value for vlan_id is the VLAN that you want to u se for the manageme nt interface (By default, VLAN 1 is u[...]

88 System Management Commands ip telnet maxsessions • telnetcon maxsessions on page 91 • telnetcon timeout on page 90 ip telnet maxsessions This command specifies the maximum number of T elnet connection sessions that can be established. Synt ax ip telnet ma xsessions 0-5 A value of 0 indicates that no T elnet connec tion can be estab lish ed. [...]

ip telnet server enable SFTOS Command Reference for the S2410, Version 2.4 . 1.0 89 Command History ip telnet server enable Enable or disable T elnet services. Synt ax [no ] telnet server enable Mode Global Config Command History Related Commands session-limit This command specifies the maximum number of simultaneous outbound telnet sessions. A val[...]

90 System Management Commands show telnet The no version of this command sets the outbou nd T elnet session timeout value to the default. Default 1 (minute) Mode Line Config show telnet This command displays the curre nt outbound telnet settings. Synt ax sho w telnet Modes Privileged Exec and User Exec Outbound T elnet Login Timeout (in minutes)—[...]

telnetcon maxsessions SFTOS Command Reference for the S2410, Version 2.4 . 1.0 91 telnetcon maxsessions Command History Serial Commands This section describes the follo wi ng SFT OS system management commands pertaining to console port connections (s erial connections, EIA-232): • lineconfig on page 91 • serial baudrate on page 91 • serial ti[...]

92 System Management Commands serial timeout The no serial baudrate command sets the communic ation rate of the terminal interface to the 9600 default. Default 9600 Mode Line Config serial timeout This command specifies the maximum connect time (in minutes) without console activity . Synt ax seri al timeout 0-1 60 A value of 0 means no console t im[...]

show serial SFTOS Command Reference for the S2410, Version 2.4 . 1.0 93 Ta b l e 1 4 Fields of show serial Command Output Field Description Serial Port Login Timeout (minut es) S pecifies the time, in minutes, of inactivity on a serial port connection, after which the switch will close the connection. Any numeric value betw een 0 and 160 is allowed[...]

94 System Management Commands show serial SNMP Management Commands This section describes the SNMP system ma nagement command s supported by SFTOS: • show snmpcommun ity on page 95 • show snmptrap on page 95 • show trapflags on page 96 • snmp-server on page 97 • snmp-server community on page 97 • no snmp-server community on page 97 • [...]

show snmpcommunity SFTOS Command Reference for the S2410, Version 2.4 . 1.0 95 show snmpcommunity This command displays SNMP community info rmation. Six communitie s are supported. Y ou can add, change, or delete communities. The switc h does n ot have to be reset for changes to take effect. The SNMP agent of the switch complies with SNMP V ersion [...]

96 System Management Commands show trapflags show trapflags This command displays trap co nditions. Configure which traps the switch should generate by enabling or disabling the trap condition. If a trap condition is enabled and the condition is detected, the switch's SNMP agent sends the tr ap to all enabled trap receivers. The switch does no[...]

snmp-server SFTOS Command Reference for the S2410, Version 2.4 . 1.0 97 snmp-server This command sets the name an d the physical location of th e switch, and the organization responsible for the network. The range for name, location, and contact is from 1 to 31 alphanumeric characters. Synt ax snm p-server { sysname name | location loc | contact co[...]

98 System Management Commands snmp-server community ipaddr snmp-server community ipaddr This command sets a client IP address for an SN MP community . The address is the assoc iated community SNMP packet-sen ding address and is used along w ith the client IP mask value to denote a range of IP addresses from which SN MP clients may use that communit[...]

snmp-serve r community ro SFTOS Command Reference for the S2410, Version 2.4 . 1.0 99 status is changed back to Enable.The no version of this comma nd deactivates an SNMP community . If the community is disabled, no SNMP requests using this community are accepted. In this case the SNMP manager associ ated with this commun ity cannot manage the swit[...]

100 System Management Commands snmp-serve r en ab le traps link mode Mode Global Config Command History Related Commands snmp-server enable traps linkmode This command enables Link Up /Down traps for the entire swit c h. When enabled, link traps are sent only if the Link T rap flag setting associated with the po rt is enabled (see ‘snmp trap link[...]

snmp-server enable traps stpmode SFTOS Command Reference for the S2410, Version 2.4.1.0 101 snmp-server enable traps stpmode This command enables the sending of new root traps and topology chan ge notification traps. Synt ax [ no ] snmp-server enable traps stpmode The no version of this command disables the sendi ng of n ew root traps and topolo gy[...]

102 System Management Commands snmptrap Command History snmptrap This command adds an SNMP trap receiver na me and trap receiver IP address. The maximum name length is 16 case-sensitiv e alphanumeric characters. Synt ax [ no ] snmptrap name ip addr The no version of this command deletes the sp ecified trap receiver from the community . Mode Global [...]

snmp trap link-status SFTOS Command Reference for the S2410, Version 2.4.1.0 103 snmp trap link-status This command enables link status traps by interface. Synt ax [ no ] snmp trap link-status The no versi on of this command disabl es link status traps by interface. Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-[...]

104 System Management Commands snmptrap snmpversion[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 105 This chapter provides a detailed explanation of the system co nfiguration commands in the following major sections: • System Configuration Comman ds • V irtual LAN (V LAN) Commands on page 1 20 • System Utility Commands on page 138 • Configuration Scripting on page 146 System Config[...]

106 System Configuration Commands bridge aging-time • show mac-address-table multicast on page 115 • show mac-address-table stats on page 1 16 • show monitor session on pag e 1 16 • show port on page 117 • show port protocol on page 1 19 • shutdown (Interface) on page 1 19 • shutdown all on page 119 MAC Database Commands T o configure[...]

enable SFTOS Command Reference for the S2410, Version 2.4.1.0 107 Synt ax co nfigure Command Mode s Privileged Exec Usage Information Users executing this command enter the Global Config mode, which provides access to many commands within that mode. Also , this mo de is a gateway t o all other more proto col-specific modes except the VLAN mode. For[...]

108 System Configuration Commands interface interface This command accesses the Interface Config mode for a designated logic al or physical interface. The Interface Config mode pr ovide s access to configura tion commands for th e specified interface. Synt ax interface unit/slot/port The unit/slot/port is a valid physical or logical port number . P[...]

interface range SFTOS Command Reference for the S2410, Version 2.4.1.0 109 Defaults This command has no d efault behavior or values. Mode Global Config Command History Usage Information When creating an interface range, interfaces appear in the order they are entered; they are not sorted. The command verifies that interfa ces are present (physica l[...]

110 System Configuration Commands interface range Range and Port Ch annel Range prompts within that mode are displayed in the Link Aggregation chapter (LAGs) in the SFTOS Command Refer ence . Example Figure 21 Commands A vailable in Ethernet Range Mode SFTOS, in contrast to FT OS, does not allow spaces around commas or hyphens in the range statemen[...]

interface range SFTOS Command Reference for the S2410, Version 2.4.1.0 111 Example Figure 22 Bulk Configuratio n W arning Message Figure 23 is an example of a correctly format ted single range bu lk configuration. Example Figure 23 Single Range Bulk Configuration Figure 24 shows how to use commas to add different interface t ypes to the range enabl[...]

112 System Configuration Commands monitor se ssion monitor session This command adds a mirrored port (source port) or probe port (destination port) to a session identified with the session ID of 1. In all released versions of SFT OS, the se ssion is always 1. Synt ax [ no ] monitor session 1 { d estination interface unit/slot/port | source interfac[...]

monitor session 1 m ode SFTOS Command Reference for the S2410, Version 2.4.1.0 113 monitor session 1 mode This command sets the monitor session (port monitoring) mode to enabled . The probe and monitored ports mu st be configured before port monitoring can be enabled. When enabled, the probe port monitors all traffic received an d transmitted on th[...]

114 System Configuration Commands no monitor session 1 no monitor session 1 This command removes all the source ports an d a destination port of the mirroring session and restore the default va lue for mirroring session mode. The 1 or session-id paramete r is an intege r value used to identify the session. In the current version of the software, th[...]

show mac-address-table multicast SFTOS Command Reference for the S2410, Version 2.4.1.0 115 igmpsnooping —Display IGMP Snooping entries in the MFDB table. multicast —Display Multicast Fo rwarding Database T able informatio n. stats —Display MFDB statistics. Mode Privileged Exec Field Descriptions T otal Entries—This displays the total numbe[...]

116 System Configuration Commands show mac-address-table stats Description—The text description of this multicast table entry . Interfaces—The list of interfaces that are designated for forwarding (Fwd:) and filteri ng (Flt:). Forwarding Interfaces—The resultant forwarding list is d erived from combining all the component’s forwarding inter[...]

show port SFTOS Command Reference for the S2410, Version 2.4.1.0 117 Synt ax sho w monitor session 1 Mode Privileged Exec Example Figure 27 Command Exampl e: show monitor session 1 Field Descriptions Session ID—In all released versions of SFTOS, the session is always 1. Admin Mode—Indicates whet her the Port Mirroring fe ature is enab led or di[...]

118 System Configuration Commands show port Example Figure 28 show port a ll Command Output Example Interface—V alid unit, slot and port n umber separated by forward slashes.. This field onl y displays in the show port all report. T ype—If not blank, this fiel d indicate s that this port is a special type of port. The possible values are: Mon?[...]

show port protocol SFTOS Command Reference for the S2410, Version 2.4.1.0 119 show port protocol This command displays th e protocol-based VL AN information for either the entire system, or for the indicated group. Synt ax show port protoc ol groupid Mode Privileged Exec Group Name—This field displays th e group name of an entry in the protocol-b[...]

120 System Configuration Commands shutdown a ll Synt ax [ no ] shutdown all Default enabled Mode Global Config V irtual LAN (VLAN) Commands In SFTOS 2.4.1, the interface vlan command is the starting point for VLAN configuration. Executing the command creates a new VLAN and invokes the Interface VLA N mode, where all VLAN configuration commands resi[...]

clear vl an SFTOS Command Reference for the S2410, Version 2.4.1.0 121 • participation (VLAN) on page 126 • priority (VLAN) on page 126 • protocol grou p on page 127 • protocol vlan group on page 127 • protocol vlan grou p all on page 128 • pvid (VLAN) on page 128 • show vlan on page 129 • show vlan port on pag e 130 • tagged on p[...]

122 System Configuration Commands description Mode Privileged Exec Related Commands description Enter a description for the selec ted interface (port or VLAN). Synt ax [no ] description description The descri ption allows spaces if you surround the stat ement with single or double quotes. Default none Mode Interface VLAN, Interface Config Command H[...]

encapsulation (VLAN) SFTOS Command Reference for the S2410, Version 2.4.1.0 123 encapsulation (VLAN) This command configures the link layer encapsula tion type for the packet within the VLAN. Acceptable encapsulation types are Ethernet and SNAP . Synt ax en capsulation { et hernet | snap } Default ethernet Mode Interface VLAN Restrictions—Routed [...]

124 System Configuration Commands makestatic Usage Information After using this command to access the Interf ace VLAN mode (the pr ompt for the Interface VLAN mode is (conf-if-vl-<vlan-id>)# ) , you can configure the selected VLAN. Y ou can also make configuration changes to a VLAN in the Interface Range mode (see interface range on page 108 [...]

mtu (VLAN) SFTOS Command Reference for the S2410, Version 2.4.1.0 125 Mode Interface VLAN Command History Related Commands mtu (VLAN) This command sets the MTU (Maximum T r ansmission Unit) of the selected VLAN. Synt ax [ no ] mtu 576-1500 Default 1500 Mode Interface VLAN Command History Related Commands name (VLAN) This command changes the name of[...]

126 System Configuration Commands network mg mt_vlan Command History Related Commands network mgmt_vlan Command History participation (VLAN) Configure how ports participate in a specific VLAN. Mode Interface VLAN Command History Related Commands priority (VLAN) Configure the priority for untagged frames. Mode Interface VLAN Command History Related [...]

protocol group SFTOS Command Reference for the S2410, Version 2.4.1.0 127 protocol group This command attaches a group ID to the selected VLAN . A group can only be associated with one VLAN at a time. However , the VLAN association can be changed. The referenced VLAN should be created prior to the creation of the protocol-b ased VL AN, except when [...]

128 System Configuration Commands protocol vlan gr ou p all Command History protocol vlan group all This command adds all physical interfaces to the protocol-based VLAN identified by groupid . A group may have more than one interfa ce associated with it. Each inte rface a nd protocol combin ation can only be associated with one group. If adding an [...]

show vlan SFTOS Command Reference for the S2410, Version 2.4.1.0 129 show vlan This command displays informa tion about VLANs, either detaile d information for a specific VLAN or summary information for all config ured VLANs. The ID is a valid VLAN identification number . Synt ax sho w vlan [ brief | id vlanid | name | port ] Mode Privileged Exec a[...]

130 System Configuration Commands show vlan port Q: “T” indicates that the port is tagged; “U” indicates untagged. Ports:”E” for Ethernet, followed by the po rt numbers (unit/slot/port) in the VLAN The output of the show vlan brief command is shown in the following example: Example Figure 32 Output of the show vlan br ief Command Descri[...]

tagged SFTOS Command Reference for the S2410, Version 2.4.1.0 131 Mode Privileged Exec Command History Example Figure 34 Output of th e show vlan po rt Command tagged This command sets tagging to en abled for a specific port (or ra nge of ports ) in the sele cted VLAN. If tagging is enabled, traffi c is transmitted as tagged frames. Synt ax tagged [...]

132 System Configuration Commands untagged Usage Information The tagged command includes the functionality of the participation include command and the acceptframe vlanOnly command. For details , see the VLAN chapter in the SFTOS Configuration Guide . Related Commands untagged This command adds a Layer 2 interface to the selected VLAN as an untagge[...]

vlan acceptframe SFTOS Command Reference for the S2410, Version 2.4.1.0 133 vlan acceptframe This command sets the frame acceptance mode per interface . Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History vlan database Command History vlan ingres[...]

134 System Configuration Commands vlan participation all Command History Related Commands vlan participation all This command configures the degree of participa tion for all int erfaces in a VLAN. The ID is a valid VLAN identification number . Mode Global Config Command History Related Commands vlan port acceptframe This command sets the frame acce[...]

vlan port tagging all SFTOS Command Reference for the S2410, Version 2.4.1.0 135 Mode Global Config Command History Related Commands vlan port tagging all This command sets the tagg ing behavior for all interfaces in a VLAN to enabled. Command History Related Commands vlan port untagging all This command sets the tagging behavior for all interfaces[...]

136 System Configuration Commands vlan protocol gr ou p vlan protocol group This command adds a protocol-based VLAN group to the system. The groupn ame is a character string of 1 to 16 characters. When it is created, the protocol group will be assigned a unique number that will be used to id entify the group in su bsequent commands. Synt ax vlan p [...]

vlan pvid SFTOS Command Reference for the S2410, Version 2.4.1.0 137 vlan pvid This command changes the VLAN ID per interface. Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History vlan tagging This command sets tagging to enabled for th e selected[...]

138 System Configuration Commands clear config System Utility Commands This section describes system utilities. The comman ds are divided into two functional groups: • Show commands display switch settings, statistics, and other information. • Configuration commands co nfigure featur es and options of the switch. For every configuration command[...]

clear port-channel SFTOS Command Reference for the S2410, Version 2.4.1.0 139 Synt ax clear counters { unit/sl ot/port | all } Mode Privileged Exec clear port-channel This command clears all port-channels (LAGs). Synt ax clear port-channel Mode Privileged Exec clear traplog This command clears the t rap log. Synt ax cl ear traplog Mode Privileged E[...]

140 System Configuration Commands copy • Event log (also called the error l og or the persistent log) ( nvram:errorlog ) • Buffered message log (also called the System log) ( nvram:log ) • startup configuration ( nvram:startup-config ) •t r a p l o g ( nvram:trapl og ) • See also copy (clibanner). Specify a URL for the destination in this[...]

copy (clibanner) SFTOS Command Reference for the S2410, Version 2.4.1.0 141 The following command copies from the swit ch system memory to flash memory: copy system:running-co nfig nvram:startup-config Default None Mode Privileged Exec Command History Example Figure 35 Using the copy co mmand to Upload the Eve nt Log copy (clibanner) This version o[...]

142 System Configuration Commands enable passwd cannot be created on the switch. Instead, create th e banner file using a text editor , put it on your TFTP server , and then download it to the switch. Synt ax co py tftp:// tftp_server_ip_add ress/filepath nvram:clibanner Reversing the sequenc e of the command paramete rs uploads the text file from [...]

logout SFTOS Command Reference for the S2410, Version 2.4.1.0 143 Synt ax en able passwd password Mode Global Config Command History logout Close the curre nt T elnet connectio n or reset the current serial connection. Synt ax logo ut Mode Privileged Exec quit This command duplicates the functionality of the logout command, c losing the cu rrent T [...]

144 System Configuration Commands ping ping This command checks if another computer is on the network and listens for connections. T o use this command, configure the switch for ne twork (in-band) connect ion. The source and target devices must have the ping utility enable d and running on top of TCP/IP . The switch can be pinged from any IP workst[...]

terminal length SFTOS Command Reference for the S2410, Version 2.4.1.0 145 terminal length Configure the number of lines to be displayed on the terminal screen in one page of output of “show” commands. Synt ax termin al length number-of-lines Defaults 24 lines Mode Use Exec or Privileged Exec Command History Usage Information This is a session-[...]

146 System Configuration Commands write write The functionality of this comm and is the same as for the copy system:running-config nvram:startup-config command, to save the running configuration to NVRAM, which would be used while the system is re-booted the next time. The writ e command defaults to write memory . Synt ax write memory Mode Privileg[...]

script apply SFTOS Command Reference for the S2410, Version 2.4.1.0 147 script apply This command applies the commands in the co nfiguration script to the switch. The apply command backs up the running configuration an d then starts applying the commands in the script file. Application of th e comm ands stops at the first failure of a co mmand. The[...]

148 System Configuration Commands script show script show This command displays the contents of a script file. The parameter scriptname is the name of the script file. Synt ax scri pt show scriptname Mode Privileged Exec The format of display is: Line <no>: <Line contents> script validate This command validates a configuration script fi[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 149 This chapter provides a deta iled explanation of the fo llowing Syslog commands: • logging buffered on page 149 • logging buf fered wrap on page 150 • logging cli-co mmand on page 150 • logging console on page 151 • logging host on page 151 • logging host reconfigure on page 152[...]

150 System Log logging buffered wrap Use no logging buffered to disable logging to the in-memory log. Default disabled; critical Mode Global Config logging buffered wrap This command enables wrapping of in-memory logging when full ca pacity is reached. Otherwise when full capacity is reached, logging stops. Synt ax loggin g buffered wrap Use no log[...]

logging console SFTOS Command Reference for the S2410, Version 2.4.1.0 151 logging console This command enables logging of Sy stem log messages to the console. Synt ax logging console [ severitylevel ] The severitylevel value is specified through on e of the following keywords or the ke yword’ s representative integer , as shown here: emergency ([...]

152 System Log logging host reconfigu re logging host reconfigure This command enables you to revise the IP address of a configured syslog host. Synt ax loggin g host reconfigure host-id hostadd ress Use show logging hosts to learn association of host-id wit h ho staddress . Mode Global Config Command History logging host remove This command remove[...]

logging syslog SFTOS Command Reference for the S2410, Version 2.4.1.0 153 logging syslog This command enables logging to any configured syslog server . Synt ax loggin g syslog Use no logging syslog to disable syslog logging. Default disabled; local0 Mode Global Config show logging This comma nd displays a comb ination of the system log and event lo[...]

154 System Log show logging buffered Fields in the report include : Logging Client Local Port—The port on the collector/relay to which syslog m essages are sent CLI Command Logging—The mode for logging CLI comma nds, whether enabled or disabled Console Logging—Th e mode for console logging, whether ena bled or disabled Console Logging Severit[...]

show logging hosts SFTOS Command Reference for the S2410, Version 2.4.1.0 155 Buffered Logging Wrapping Behavior—The behavior of the in-memory log when faced with a log-ful l situation. “On” when wrapping is enabled, “Off” when not. Buffered Log Count—The count of valid entries in the buffered log The System log messages follow the summ[...]

156 System Log show logging traplogs Fields in the report include : Index—An integer from 1 to 8, used for removing the associated syslog host IP Address—IP Address of the configured syslog host Severity—The minimum severity to log to the specified address Port—Server Port Number .This is the port on the local host from which syslog message[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 157 Commands in this chapter manage user accoun ts. The commands are are comprised of two functional groups: • Show commands display switch settings, statistics, and other information. • Configuration commands co nfigure featur es and options of the switch. For every configuration command ,[...]

158 User A ccount Comma nds disconnect disconnect This command closes the designated remote session or all sessions. Synt ax dis connect { sessionID | all } Mode Privileged Exec show loginsession This command displays curre nt telnet and seri al port connections to the switch. It also displays SSH sessions. Synt ax sho w loginsession Mode Privilege[...]

username passwd SFTOS Command Reference for the S2410, Version 2.4.1.0 159 User Access Mode—Shows whether t he operator is able to change parameters on the switch (Read/ Write) or is only able to view them (Read Only). As a factory default, the ‘admin’ user h as Read/Write access. There can only be one Read/Write us er and up to five Read Onl[...]

160 User A ccount Comma nds users snmpv3 accessmode users snmpv3 accessmode This command specifies the SNMP v3 acc ess priv ileges for the spec ified login user . The valid accessmode values are readonly or readwrite . The usernam e is the login user name for which the specified access mode applies. The default is readwr ite for ‘admin’ user; r[...]

users snmpv3 encryption SFTOS Command Reference for the S2410, Version 2.4.1.0 161 If des is specified, the required key ma y b e specified on the comman d line. The ke y may be up to 16 characters long. If the des protocol is specified but a key is not provided, the user will be prompted for the key . When using the de s protocol, the user lo gin [...]

162 User A ccount Comma nds users snmpv3 encryption[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 163 This chapter provides a detaile d explanation of the security commands available in the SFTOS software, presented in the following sections: • Port Security Commands • Port-Based Network Access Control (IEEE 802.1X) on page 168 • RADIUS Commands on page 180 • T ACACS+ Commands on pa[...]

164 Security Commands port-secur ity Implement ation Notes • If port security is enabled on a port, and th en an ACL is applied to the port, the ACL is given precedence and port security is ignored. For example, if port security is applied, and then an ACL with a permit rule for a partic ular source address is applied, frames with that source add[...]

port-security max-static SFTOS Command Reference for the S2410, Version 2.4.1.0 165 Synt ax po rt-security max-dynamic maxvalue no port-security max-dyn amic Default 600 Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History port-security max-static[...]

166 Security Commands port-secur ity ma c-address move no port-security mac-address mac-address vid Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History port-security mac-address move This command converts dynamically locked MA C addresses to stat[...]

show port-security dynamic SFTOS Command Reference for the S2410, Version 2.4.1.0 167 Example Figure 39 Example of show port- s ec ur ity all Co mm a nd Out pu t • • show port-security dynamic This command displays the dynami cally locked MAC addres ses for port. Synt ax sho w port-security dyn amic unit/slot/port Mode Privileged Exec The one r[...]

168 Security Commands show port-s ecurity static show port-security static This command displays the statically locked MAC addres ses for port. Synt ax sho w port-security static unit/slot/port Mode Privileged Exec The one report field is: MAC Address—MAC Address of statically locked MAC show port-security violation This command displays the sour[...]

authentication login SFTOS Command Reference for the S2410, Version 2.4.1.0 169 • dot1x timeout on page 174 • dot1x user on page 1 75 • show authentication on page 175 • show authentication users on page 176 • show dot1x on pag e 176 • show dot1x users on page 179 • show users authentication on page 179 • users defaultlogin on page [...]

170 Security Commands clear dot1x statistics The no version of this command deletes the specif ied authentication login list. The attempt to delete fails if any of the following conditions are true: • The login list name is invalid or does no t match an existing au thentication login list • The specified authentication l ogin list is assigned t[...]

dot1x initialize SFTOS Command Reference for the S2410, Version 2.4.1.0 171 Synt ax do t1x defaultlogin listname Mode Global Config dot1x initialize This command begins the initializ ation sequence on the specifie d port. This command is only valid if the control mode for the specified port is 'auto'. If the control mode is not 'auto[...]

172 Security Commands dot1x port-co n tro l Default 2 Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History dot1x port-control This command sets the authentic ation mode to be used on th e specified port . The control mode may be one of th e follow[...]

dot1x re-authe nticate SFTOS Command Reference for the S2410, Version 2.4.1.0 173 Force-unauthorized—The authenticator P AE un conditionally sets the controlled port to unauthorized. Force-authorized—The authenticator P AE un conditionally sets the controlled port to authorized. Auto—The authenticator P AE sets the controlle d port mode to re[...]

174 Security Commands dot1x system-auth-control Command History dot1x system-auth-control This command is used to enable the dot1x authentication suppor t on the switch. By default, the authentication support is disa bled. While disabled, the dot1x configuration is retained and can be changed, but is not activated. The no version of this command is[...]

dot1x user SFTOS Command Reference for the S2410, Version 2.4.1.0 175 tx-period—Sets the value, in seconds, of the time r used by the authenticator state machine on this port to determine when to send an EAPOL EAP Request/Identity frame to the supplicant. T he quiet-period must be a value in the range 1 - 65535. supp-timeout—Sets the value, in [...]

176 Security Commands show authentication users Synt ax show authentication Mode Privileged Exec Authentication Login List—Thi s displays the authentication login listna me. Method 1—This displays the first method in th e specified authentication login list, if any . Method 2—This displays the second method in the specified authe ntication lo[...]

show dot1x SFTOS Command Reference for the S2410, Version 2.4.1.0 177 If the optional parameter summary { unit/slot/p ort | all } is used, t he dot1x configuration for the specified port or all ports are displayed. Port—The interface whose c onfiguration is displayed. Control Mode—The configured control mode for this port. Possible values are f[...]

178 Security Commands show dot1x Example Figure 40 Example of Outpu t fro m the sh ow do t1 x de tail Command If the optional parameter statistics unit/slot/port is used, the dot1x statistics for the specified port are displayed. Port—The interface whose statistics are displayed. EAPOL Frames Received—The number of valid EAPOL fr ames of any ty[...]

show dot1x users SFTOS Command Reference for the S2410, Version 2.4.1.0 179 show dot1x users This command displa ys 8 02.1x port security us er information for locally configured users. Synt ax show dot1x users unit/slot/port Mode Privileged Exec Example Figure 41 Example of Outpu t fro m the sh ow do t1 x use r s Comm an d User—Users configured [...]

180 Security Commands users defaultlogin users defaultlogin This command assigns the authentication login list to use for non-configured users when attempting to log in to the system. This setting is overridden by the authentication login list assigned to a specific user if the user is conf igured locally . If this value is not configured, users wi[...]

radius accounting mode SFTOS Command Reference for the S2410, Version 2.4.1.0 181 radius accounting mode This command is used to enable the RADIUS accounting function. The no version of this command is used to set the RADIUS accounting fu nction to the default value - i.e. the RADIUS accounting function is disabled. Synt ax radiu s accounting mode [...]

182 Security Commands radius server key If the acct keyword is used, the comma nd config ures the IP addr ess to use for the RADIUS accounting server . Only a single accounting serve r can be config ured. If an accountin g server is currently configured, it must be re moved from th e configuration usi ng the no form of the command before this comma[...]

radius server msgauth SFTOS Command Reference for the S2410, Version 2.4.1.0 183 radius server msgauth This command enables the message authen ticator attribute for a specified server . Synt ax radiu s server msgauth ipaddr Mode Global Config radius server primary This command is used to co nfigure the primary RADIUS au thentication server for this[...]

184 Security Commands radius server time out radius server timeout This command sets the timeout value (in seconds) after which a request must be retransmitted to the RADIUS server if no res ponse is received . The timeout va lue is an int eger in the range of 1 to 30. Synt ax radiu s server timeout seconds The no radius server timeout command sets[...]

show radius accounting statistics SFTOS Command Reference for the S2410, Version 2.4.1.0 185 show radius accounting statistics This command is used to display the conf igured RADIUS accounting mode, accounting server , and the statistic s for the configured accounting server . Synt ax sho w radius accounting [ statistics IP address ] Mode Privilege[...]

186 Security Commands show radius statistics (authentication) show radius statistics (authentication) This command is used to displa y the statistics for RADIUS or configured server . T o show the configured RADIUS server statistic, the IP Addr ess specified must match that of a previously configured RADIUS server . On executi on, the following fie[...]

show radius statistics (authentication) SFTOS Command Reference for the S2410, Version 2.4.1.0 187 Round Tr ip T ime—The time interval, in hundredths of a secon d, between the most rece nt Access-Reply | Access-Challenge and the Access-Request th at ma tched it from the RADIUS authentication server . Access Requests—The number of RADIUS Access-[...]

188 Security Commands tacacs-server host tacacs-server host Configure a T ACACS+ server and ente r into T ACACS+ Configuration mode. Synt ax tacacs -server host ip-address T o remove a T ACACS+ server host, use the no tacacs-server host { hostname | ip-address } command. Default Not configured Mode CONFIGURA TION Usage Information In CONFIGURA TION[...]

tacacs-server timeout SFTOS Command Reference for the S2410, Version 2.4.1.0 189 Default Not configured. Command Mode s CONFIGUR A TION Usage Information The key configured with this command must match the key configured on the T ACACS+ daemon. tacacs-server timeout Specify a global timeout va lue for all T ACACS+ hosts. Synt ax tac acs-server time[...]

190 Security Commands port Default If unspecified, the key-string defaults to the global value. Command Mode T ACACS Configuration port Specify a server port number for a particular T ACACS host. Synt ax po rt port-number Default If unspecified, the port number defaults to 49. Command Mode T ACACS Configuration priority Use the priority command to [...]

single-connection SFTOS Command Reference for the S2410, Version 2.4.1.0 191 single-connection Configure the client to maintain a single open connection with the T ACACS server . Synt ax [ no ] single-connection Default Use multiple connections. In other words, the c lient will use a separate connection for each authentication session. Command Mode[...]

192 Security Commands ip ssh maxsessions Secure Shell (SSH) Commands The commands in this section are: • ip ssh maxsessions on page 192 • ip ssh protoc ol o n page 193 • ip ssh server enable on page 193 • ip ssh timeout on page 194 • show ip ssh on page 194 • sshcon maxsessions on page 195 • sshcon timeout on page 195 This section pro[...]

ip ssh prot ocol SFTOS Command Reference for the S2410, Version 2.4.1.0 193 ip ssh protocol This command is used to set or remove protoc ol levels (or versions ) for SSH. Either SSH1 (1), SSH2 (2), or bot h SSH 1 and SSH 2 (1 and 2) can be set. Synt ax ip ssh protocol [1] [2] Default 1 and 2 Mode Global Config Command History ip ssh server enable E[...]

194 Security Commands ip ssh timeout ip ssh timeout This command sets the SSH connection session tim eout value, in minutes. A session is active as long as the session has been idle for the value set. Changing the timeout value for active sessions does not become effectiv e until the session is reaccessed. Any keystroke will also activate the new t[...]

sshcon maxsessions SFTOS Command Reference for the S2410, Version 2.4.1.0 195 SSH Sessions Currently Active Max SSH Sessions Allowed SSH T i meout—SSH login timeout confi gured by ip ssh timeout command sshcon maxsessions Command History sshcon timeout Command History Hypertext T ransfer Protocol (HTTP) Commands The commands in this section are: [...]

196 Security Commands ip http javamode enable ip http javamode enable Enable Java mode for th e W eb interface to SFT OS. Synt ax ip http javamo de enable Use no ip http jav amode enable to disable Java mode. Default disabled Mode Global Config Command History ip http secure-port This command is used to set the SSL T port. Synt ax ip http secure-po[...]

ip http secure-ser ve r enable SFTOS Command Reference for the S2410, Version 2.4.1.0 197 ip http secure-server enable This command is used to enable the secure socket layer for secure HTTP . The no version of this command is used to disable the secure socket layer for secure HTTP . Synt ax [ no ] ip http secure-server enable Default disabled Mode [...]

198 Security Commands show ip http show ip http This command displays the HTTP settings for the switch. Synt ax show ip http Mode Privileged Exec The report fields are: HTTP Mode (Unsecure) — This field indica tes whether basic HTTP is enabled or disabled on the switch. HTTP Mode (Secure) — This field indicates whether the administrative mode o[...]

show storm-control SFTOS Command Reference for the S2410, Version 2.4.1.0 199 Broadcast S t orm Control Commands This section contains the following commands: • show storm-control • storm-control broadcast o n pa ge 200 • storm-control flowcontrol on p age 200 show storm-control This command displays switch configuration information. Synt ax [...]

200 Security Commands storm-control broadcast Related Commands storm-control broadcast This command enables broa dcast storm recovery mode . If the mode is enabled, broa dcast storm recovery with high and low thresholds is implemented. The threshold implementation fo llows a percentage pattern. If th e broadcast traffic o n any Ethernet port exceed[...]

storm-control flowcontrol SFTOS Command Reference for the S2410, Version 2.4.1.0 201 The no version of this command disables 802.3x flow control for th e switch. Default disabled Mode Global Config Note: This command only applies to full-duplex mode port s. Note: 802.3x flow control works by pausing a port when the port becomes oversubscribed and d[...]

202 Security Commands storm-control flowcontrol[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 203 These commands configure th e Dynamic Ho st Configuration Protocol (DHCP) Server parameters and address pools. The following comm a nd s are covered in this chapter: • bootfile on page 204 • clear ip dhcp binding on page 204 • clear ip dhcp server statistics on page 204 • clear ip d[...]

204 DHCP Server Commands bootfile bootfile The command specifies the name of the defau lt boot image for a DHCP client. The filename specifies the boot image file. The no version of this command deletes the boot image name. Synt ax bo otfile filename no bootfile Default none Mode DHCP Pool Config clear ip dhcp binding This command deletes an automa[...]

clear ip dhcp conflict SFTOS Command Reference for the S2410, Version 2.4.1.0 205 clear ip dhcp conflict The command is used to clear an address co nflict from the DHCP Server database. The server detects conflicts using a ping. DHCP server clear s all conflicts If the asterisk (*) character is used as the address parameter . Synt ax cl ear ip dhcp[...]

206 DHCP Server Commands default-router default-router This command specifies the default router list for a DHCP client. { address1 , addres s2 … address8 } are va lid IP addresses, each made up of fo ur decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid. The no version of this command remo ves the default router list. Synt ax def[...]

hardware-add ress SFTOS Command Reference for the S2410, Version 2.4.1.0 207 hardware-address This command specifies the hardware address of a DHCP client. The hardware-address is the MAC address of the hard ware platform of the client consisting of 6 bytes in dotted hexadecimal format. The type indicates the protocol of the hardware plat form. It [...]

208 DHCP Server Commands ip dhcp bootp automatic ip dhcp bootp automatic This command enables the allocation of the ad dresses to the bootp client. The addresses are from the automatic address pool. The no version of this command disables the allocation of the addresses to the bootp client. The address are from the automatic address pool. Synt ax i[...]

ip dhcp ping packets SFTOS Command Reference for the S2410, Version 2.4.1.0 209 ip dhcp ping packets This command is used to spec ify the number in a range from 2-10, of packets a DHCP server sends to a pool address as part of a ping operation. Setting the nu mber of ping packets to 0 is the same as ‘no ip dhcp ping packets’ an d will prevent t[...]

210 DHCP Server Commands network network This command is used to conf igure the subnet number and mask for a DHCP address pool on the server . Network-number is a vali d IP addre ss, made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid. Mask is the IP subnet mask for the specified address pool. The prefix-length is an [...]

next-server SFTOS Command Reference for the S2410, Version 2.4.1.0 211 • h-node—Hybrid (recommend ed) The no version of this command re moves the NetBIOS node type. Synt ax netb ios-node-type type Default none Mode DHCP Pool Config next-server This command configures the next server in the boot process of a DHCP client. Address is the IP addres[...]

212 DHCP Server Commands service dhcp no option code Default none Mode DHCP Pool Config service dhcp This command enables the DHCP server and relay agent features on the router . The no version of this command disables the DHCP server and relay agent features. Synt ax service dh cp Default disabled Mode Global Config show ip dhcp binding This comma[...]

show ip dhcp global co nfiguration SFTOS Command Reference for the S2410, Version 2.4.1.0 213 show ip dhcp global configuration This command displays address bindings for th e specific IP address on the DHCP server . If no IP address is specified, the bindings corr esponding to all the addresses are displayed. Synt ax sho w ip dhcp global configura[...]

214 DHCP Server Commands show ip dhc p server statisti cs show ip dhcp server statistics This command displays DHCP server statistics. Synt ax sho w ip dhcp server statistics Mode Privileged Exec and User Exec Address Pool—The number of configured address pools in the DHCP server . Automatic Bindings—The number of IP addresses that have been au[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 215 This section provides a detailed explanation of the Simple Network T ime Protocol (SNTP) commands. The commands are comp rised of two functional groups: • Configuration Commands confi gure f eatures and options of the switch. • Show commands display settings, statistic s, and other i nf[...]

216 SNTP Commands sntp client mode sntp client mode This command enables the Simple Network T ime Protocol (SNT P) client, and optionally sets the mode to either broadcast or unicast. Synt ax sntp client m ode [ broadcast | unicast ] Use the no sntp client mode command to disable SNTP client mode. Default Disabled (No SNTP requests are sent from th[...]

sntp unicast client poll-interval SFTOS Command Reference for the S2410, Version 2.4.1.0 217 sntp unicast client poll-interval This command sets the poll inte rval for SNTP unicast clients in seconds as a power of two where poll-interval can be a value from 6 to 16. Synt ax sntp u nicast client poll-interval po ll-interval Use the no sntp unicast c[...]

218 SNTP Commands sntp server Default 1 retry Mode Global Config sntp server This command configures an SNTP server connection (with a maximum of th ree). Synt ax sntp s erver ipaddress [ priority [ version [ portid ]]] Use the no sntp server remove ipaddress command to delete the server from the list of SNTP servers. Mode Global Config show sntp T[...]

show sntp client SFTOS Command Reference for the S2410, Version 2.4.1.0 219 Field Descriptions Last Update T ime—Time of last clock update Last Attempt T ime —Time of last transmit query (in unicast mode). Last Attempt S tatus—S tatus of the last SNTP requ est (in unicast mode) or unsolicited me ssage (in broadcast mode). Broadcast Count—Cu[...]

220 SNTP Commands show sntp server show sntp server This command is used to display SNTP server settings and configured servers. Synt ax sho w sntp server Mode Privileged Exec Example Figure 49 show sntp ser ver Command Example Field Descriptions Server IP Address—IP address of configured SNTP server Server T ype—Address type of server Server S[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 221 VLAN-Stack commands, also called Double VLAN tagging , QinQ , and VLAN tunneling . W ith this feature, you can “stack” VLANs in to one tunnel and switch them through the network. The commands in th is chapter , in order, are: • dvlan-tunnel ethertyp e on page 221 • mode dot1q-tunnel[...]

222 VLAN-Stack Commands mode dot1q-tunn el mode dot1q-tunnel This command is used to enable Double VL AN T unneling on the sp ecified interface. By default, Double VLAN T unneling is disabled. This command performs the same function as mode dvlan-tunn el . The no version of this command is used to disa ble Double VLAN T unneling on the specified in[...]

show dot1q-tunne l SFTOS Command Reference for the S2410, Version 2.4.1.0 223 show dot1q-tunnel This command displays whether an interface is enabled for Double VLAN Tunnelin g, along with the system-configured etherT ype and detailed information about Double VLAN T unneling for the specified interface, or a list of interfaces and their tunneling s[...]

224 VLAN-Stack Commands show dvlan-tunnel show dvlan-tunnel This command displays whether an interface is enabled for Double VLAN Tunnelin g, along with the system-configured etherT ype and detailed information about Double VLAN T unneling for the specified interface, or a list of interfaces and their tunneling status. This command performs the sam[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 225 This chapter provides a detailed explanation of the General Attribu te Registration Protocol (GARP) commands, including GVRP and GMRP commands. The commands are divided into two functional groups: • Show commands display switch settings, statistics, and other information. • Configuratio[...]

226 GARP, GVRP, and GMRP Commands set garp timer leave This command has an effect only when GVRP is enabled. The time is from 10 to 100 (centiseconds). the value 20 centiseconds is 0.2 seconds. Synt ax set garp timer join 10-100 no set garp timer join The no version of this command sets the GVRP join time per port and per GARP to 20 centiseconds (0[...]

set garp timer leaveall SFTOS Command Reference for the S2410, Version 2.4.1.0 227 set garp timer leaveall This command sets how frequently Leave All PDUs are generated per port. A Leave All PDU indicates that all registrations w ill be unregistered. Participants would need to rejoin in order to maintain registration. Th e value applies p er port a[...]

228 GARP, GVRP, and GMRP Commands gvrp adminmode enable GARP VLAN Registration Pr otocol (GVRP) Commands This section provides a detailed ex planation of the GVRP commands: • gvrp adminm ode enable o n page 228 • gvrp interfacemode enable on p age 228 ] • gvrp interfacemode enable all on page 229 • set gvrp adminmod e on page 229 • set gv[...]

gvrp interfacemode enable all SFTOS Command Reference for the S2410, Version 2.4.1.0 229 gvrp interfacemode enable all This command enables GVRP (GARP VLAN Registration Protocol) for all ports. Synt ax se t gvrp interfac emode enable all Use no set gvrp interfacemode enable all to disable GVRP for all ports. If GVRP is disabled, Join T ime, Leave T[...]

230 GARP, GVRP, and GMRP Commands show gvrp c onfiguration Example Figure 50 show gvrp configur ation Command Output Example Interface V alid unit, slot and port number separated by forward slashes. Join T imer—S pecifies the int erv al be tw e en th e tra ns m i ssio n of GARP PDU s re gi st ering (or re-registering) membership for an a ttri but[...]

gmrp adminmode SFTOS Command Reference for the S2410, Version 2.4.1.0 231 GARP Multicast Registration Pr otocol (GMRP) Commands This section provides details on GMRP comma nds. The commands in this sections are: • gmrp adminmode on pa ge 231 • set gmrp adminmod e on page 232 • gmrp interfacemode en able all on page 232 • set gmrp interfacem[...]

232 GARP, GVRP, and GMRP Commands set gmrp adminmode Use no gmrp adminmod e enable to disable GARP Multicast Registration Protocol (GMRP) on the system. Mode Global Config Command History set gmrp adminmode Command History gmrp interfacemode enable all This command enables GARP Multicast Regist ration Protocol on all interfaces. If an interface whi[...]

set gmrp interfacem ode SFTOS Command Reference for the S2410, Version 2.4.1.0 233 set gmrp interfacemode This command enables GARP Multicast Registration Protocol on a selected interface. If an interface which has GARP enable d is enabled for routing or is enlisted as a member of a port-channel (LAG), GARP functionality w ill be disabl ed on that [...]

234 GARP, GVRP, and GMRP Commands show mac-address- table gmrp Leave T imer—S pecifies the period of time to wait af ter receiving an unregister request for an attribu te before deleting the attribute. Current attributes are a VLAN or multic ast group. This may be considered a buffer time for another station to assert registra tion for the same a[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 235 This chapter provides a detaile d explanation of the following IGMP Snoopin g c ommands: • igmp enable (interface) on page 236 • igmp enable (globa l) on page 236 • igmp fast-leav e (interface) on page 237 • igmp groupmem bership-interval (interface) on p age 2 37 • igmp interface[...]

236 IGMP Snooping Commands igmp enable (interface) igmp enable (interface) This command enables IGMP Snooping on a sel ected interfac e. If an interface that has IGMP Snooping enabled is en abled for routing or is enlisted as a member of a LAG (port channel), IGMP Snooping functionality will be disabled on that interface. IGMP Snooping functionalit[...]

igmp fast-leave (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 237 igmp fast-leave (interface) This command enables or disables IGMP Snoo ping fast-leave admin mode on a selected interface. Enabling fast-leave allows the switch to immedi ately remove the Layer 2 LAN interface from its forwarding table entry upon receiving an IGM[...]

238 IGMP Snooping Commands igmp interfacemode enab le all Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range- vlan 10-20)#; Interface VLAN. Command History igmp interfacemode enable all This command enables IGMP Snooping on all interfaces. If an inte rface that has IGMP Snoo[...]

igmp mcrtexpiretime (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 239 Synt ax igmp maxresponse 1-3599 The variable must be less than the IGMP query interval time value. Th e range is 1 to 3599 seconds. The no igmp maxresponse command sets the IGMP Ma ximum Response time on the interface to the default value. Default 10 secon ds[...]

240 IGMP Snooping Commands igmp mrouter (interface) igmp mrouter (interface) This command configures the VLAN ID ( vlanId ) that has the multicast router mode enabled. Synt ax [ no ] igmp mrouter vlanId The no version of this command disables multicas t router mode for a particular VLAN ID ( vlanId ). Mode Interface Config; Interface Range, which i[...]

set igmp (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 241 Related Commands set igmp (interface) Command History Related Commands set igmp (system) Command History Related Commands set igmp fast-leave Command History Related Commands set igmp groupmembership-interval (global) This command sets the IGMP Group Membership Inter v [...]

242 IGMP Snooping Commands set igmp groupmemb ership-interval ( interface) The variable must be greate r than the IGMPv3 maximum response time value. The range is 2 to 3600 seconds. The no igmp gr oupmembership-inte rval command sets the IGMP v3 group membership interval time glob ally to the default value. Default 260 seconds Mode Global Config Re[...]

set igmp maxresponse ( global) SFTOS Command Reference for the S2410, Version 2.4.1.0 243 Related Commands set igmp maxresponse (global) This command sets the IGMP maxi mum respon se time on the system . Synt ax [ no ] set igmp max response 1-3599 The variable is the amount of time in seconds that a switch will wait after sending a query on an inte[...]

244 IGMP Snooping Commands set igmp mcrte xpiretime ( global) set igmp mcrtexpiretime (global) This command sets the Multicast router present expiration time for all routers. Synt ax [ no ] set igmp mcr texpiretime 0-3600 The variable is the amount of time in seconds th at a switch will wait for a query to be received on an interface before the int[...]

set igmp mrouter SFTOS Command Reference for the S2410, Version 2.4.1.0 245 set igmp mrouter Command History Related Commands show igmpsnooping This command displays IGMP Sn ooping inform ation. Configured info rmation is displayed whether or not IGMP Snooping is en abled. Synt ax sho w igmpsnooping [ unit/ slot/port | 1-3965 ] Mode Privileged Exec[...]

246 IGMP Snooping Commands show igmpsnooping fast-leave Max Response T i me—Thi s displays the amount of time the switch will wait after sending a query on an interface because it did not receive a report for a pa rticular group on that interfa ce. T his value may be configured. Multicast Router Present Expiration Time—If a query is not receive[...]

show mac-address-tabl e igmpsnooping SFTOS Command Reference for the S2410, Version 2.4.1.0 247 show mac-address-table igmpsnooping This command displays the IGMP Snooping en tries in the Multicast Forwarding Database (MFDB) table. Synt ax show mac-address-t able igmpsnoo ping Mode Privileged Exec Report Fields Mac Address—A multicast MAC address[...]

248 IGMP Snooping Commands show mac-address- table igmpsnooping[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 249 This section provides syntax details of the Link Aggreg ation Group (LAG) commands (802.3ad), also called port channel, port tr unking, and other terms. The commands in this chapter are: • addport • deleteport (interface config) on page 250 • deleteport (global config ) on page 251 ?[...]

250 LAG/Port Channel Commands deleteport (interface config) In Ethernet Range mode (Interface Range mode for the selected range of physical ports), this command adds the selected ports to the designated LAG . Synt ax addport unit/slot/po rt Specify the LAG ID in its logical slot/port format (e.g., 1/4). Mode Interface Config; Interface Range (speci[...]

deleteport (g lobal config) SFTOS Command Reference for the S2410, Version 2.4.1.0 251 deleteport (global config) This command deletes a ll configured ports from the LAG (port channel). Synt ax deletepo rt { unit/slot/port } all Mode Global Config Related Commands port-channel This command creates a new LAG (port channel) and generates a logical un[...]

252 LAG/Port Channel Commands port-channel enable all (g loba l) port-channel enable all (global) This command enables the administrativ e mode for all LAGs (port channels). The no version of this command disables all LAG s. Synt ax [ no ] port-channel enable all Mode Global Config Command History port-channel enable (interface) This command enable[...]

port-channel name SFTOS Command Reference for the S2410, Version 2.4.1.0 253 Parameters Default enabled Mode Global Config port-channel name This command renames a LAG (port channel) or all LAGs. Synt ax po rt-channel name { unit/slot/port | all } name Parameters Mode Global Config Related Commands port-channel staticcapability Enable/Disable stati[...]

254 LAG/Port Channel Commands port lacpmo de Mode Global Config port lacpmode This command enables Link Aggregation Co ntrol Protocol (LACP) on a p ort. The no version of this command disables Link Aggre gation Control Protocol (LACP) on a port. Synt ax [ no ] port lacpmode Default disabled Mode Interface Config; Interface Range, which is in dicate[...]

port lacptimeout (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 255 The no version of this command removes the Link Aggregation Co ntro l Protocol (LACP) timeout on all ports. Synt ax [ no ] port lacptimeout { short all | lo ng all } Parameters Mode Global Config Related Commands port lacptimeout (interface) This command sets th[...]

256 LAG/Port Channel Commands show port-channel Synt ax sho w port-channel brief Mode Privileged Exec and User Exec Example Figure 51 Example of show port-chann el br ief Command Output S tatic Capability—This field displays whether or not the device has static capability enabled. For each LAG, the following information is displayed: Logical Inte[...]

show port-channel summary SFTOS Command Reference for the S2410, Version 2.4.1.0 257 Admin Mode—May be enabled or disabled . Th e factory default is enabled. Link T rap Mode—This object determines whether or not to send a trap when link status changes. The factory default i s enabled. STP Mode—The Sp anning T ree Protocol Administrative Mo de[...]

258 LAG/Port Channel Commands shutdown shutdown This command disables the selected LAG (port channel). The no version of this command enables the selected LAG . Synt ax [ no ] shutdown Default disabled Mode Interface Config; Interface Range (Port Chan nel Range), which is indicated by the (conf-if-range-interface)# prompt, such as (conf-if-range-po[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 259 This chapter provides a detailed explanation of the Spanning T ree commands. The commands are divided into two functional g roups: • Show commands display switch settings, statistics, and other information. • Configuration commands co nfigure featur es and options of the switch. For eve[...]

260 Spanning Tree (STP) Co mmands show spann ing-tree • spanning-tree max-age on page 269 • spanning-tree max-hops on page 269 • spanning-tree mst on page 269 • no spanning-tree mst on page 270 • spanning-tree mst instance on page 271 • spanning-tree mst priority on pa ge 271 • spanning-tree mst vlan on pa ge 272 • spanning-tree por[...]

show spanning-tree interface SFTOS Command Reference for the S2410, Version 2.4.1.0 261 Bridge Hold T ime—Mini mum time between transmission of Configuration Bridge Protoc ol Data Units (BPDUs) CST Regional Root—Bridge Identifier of the common sp anning tree regional root. It is derived usin g the bridge priority and the base MAC address of the[...]

262 Spanning Tree (STP) Co mmands show spanning-tree mst detailed RST BPDUs Received—Rapid S panning T ree Protoc ol Bridge Protocol Data Units received. MSTP BPDUs T ran smitted—Multiple S panning T r ee Protocol Bridge Protocol Data Units sent MSTP BPDUs Received—Mu ltiple S panning Tree Pr otocol Bridge Protocol Data Units received. show s[...]

show spann ing-tree m st port deta iled SFTOS Command Reference for the S2410, Version 2.4.1.0 263 Mode Privileged Exec and User Exec MST Instance ID—The ID of the MST instance. Port Identifier—The port identifier for t he specified port within the spanning tree. Port Priority—The priority fo r a particular port within the selected MST instan[...]

264 Spanning Tree (STP) Co mmands show spann ing-tree mst port su mmary show spanning-tree mst port summary This command displays the settings of one or a ll ports within the specif ied multiple spanning tree instance. The parameter mstid indicates a particular MST instance. The parameter { unit/slot/port | all } indicates the desired switch port o[...]

show spanning-tre e summary SFTOS Command Reference for the S2410, Version 2.4.1.0 265 show spanning-tree summary This command displays spanning tree settings and parameters for the switch. The following details are displayed on execution of the command. Synt ax sho w spanning-tree sum mary Mode Privileged Exec and User Exec S panning Tree Adminmod[...]

266 Spanning Tree (STP) Co mmands spanning-t ree bpdum igr a tion c h e ck Default disabled Mode Global Config spanning-tree bpdumigrationcheck This command enables BPDU migration check on a given interface, by using unit/slot/port , or all interfaces, by using the all keyword. The no version of this command disables BPDU migration check on all int[...]

spanning-t ree edgep or t SFTOS Command Reference for the S2410, Version 2.4.1.0 267 The no version of this command set s the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using to the default value, in other words, 0. Synt ax span ning-tree configuratio n revision 0-65535 Default 0 M[...]

268 Spanning Tree (STP) Co mmands spanning-t re e fo rwa rd-time Synt ax [ no ] spanning-tree forceversio n 802.1d | 802.1w | 802. 1s Default 802.1s Mode Global Config spanning-tree forward-time This command sets the Bridge Forward Delay parameter to a new value for the common and internal spanning tree. The forward-time value is in seconds within [...]

spanning-tree max- age SFTOS Command Reference for the S2410, Version 2.4.1.0 269 spanning-tree max-age This command sets the Bridge Max Age para meter to a new va lue for the common and internal spanning tree. The max-age value is in seconds within a range of 6 to 40, with the value being less than or equal to "2 times (Bridge Forward Delay -[...]

270 Spanning Tree (STP) Co mmands no spanning-tre e mst If the “cost” token is specified, this command sets the path cost for this port within a multiple spanning tree instance or the co mmon and internal spanning tree instance, depending on the mstid parameter . The pathcost can be specified as a number in the range of 1 to 20 0000000 or auto.[...]

spanning-tree mst instance SFTOS Command Reference for the S2410, Version 2.4.1.0 271 If the “port-priority” token is specified, this co mmand sets the priority for this port within a specific multiple spanning tree in stance or the common and inte rnal spanning tree instance, depending o n the mstid parameter, to the default value, in other wo[...]

272 Spanning Tree (STP) Co mmands spanning-t ree mst vlan If 0 (defined as the default CIST ID) is passed as the mstid , then this co mmand sets the Bridge Priority parameter for th e common and internal spanning tree to the default value, in other words, 32768. Synt ax span ning-tree mst priority mstid 0-614 40 no spanning-tree mst prio rity mstid[...]

spanning-tree port mode en able all SFTOS Command Reference for the S2410, Version 2.4.1.0 273 Synt ax [ no ] spanning-tree port mo de enable Default disabled Mode Interface Config; Interface Range, which is in dicated by the (conf -if-range-interface)# prompt, such as (conf-if-range-vlan 10-20)#. Command History spanning-tree port mode enable all [...]

274 Spanning Tree (STP) Co mmands spanning-tree port mode e nable all[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 275 This chapter provides a deta iled explanation of available Quality of Service (QoS) commands. The chapter is divide d into the following sections: • Class of Service (CoS) Commands • Differentiated Services (Dif fS erv) Com ma nds on page 285 • Provisioning (IEEE 802.1p) Commands on p[...]

276 Quality of Service (QoS) Commands classofservice dot1p-mapping By default, SFTOS 2.4.1 co nfig ures all egress queues in weighted round robin mode with equal minimum bandwidths. This means that no egress queue will be given priority over any other . T o change this, in weighted round robin mo de, use the co s-queue min -bandwidt h command to as[...]

classofservice trust SFTOS Command Reference for the S2410, Version 2.4.1.0 277 Command History classofservice trust This command sets the class of service trust m ode of an interface to Dot1p (802.1p). (The ip-precedence and ip-dscp options, for IP Precedence and IP DSCP packet markings, are not available in SFTOS 2.4.1.) Synt ax cl assofservice t[...]

278 Quality of Service (QoS) Commands cos-queue min-bandwidth The no cos-queue max- bandwidth command restores the de fault for each queue's maximum bandwidth value. Modes Global Config Command History cos-queue min-bandwidth This command specifies the minimum transmi ssion bandwidth guarantee for each interface queue. The total number of queu[...]

cos-queue strict SFTOS Command Reference for the S2410, Version 2.4.1.0 279 Usage Specific WRED parameters are configured using the random-detect queue-parms and random-detect exponential-weighting-constant commands. Command History cos-queue strict This command activates the stri ct priority scheduler mode fo r each specified queue (up to four in [...]

280 Quality of Service (QoS) Commands random-dete ct queue-parms random-detect queue-parms This command sets the WRED parameters for each drop precede nce level supported by a queue. The actual number of queue drop prece dence le vels is platfo rm-specific (S2410 has four). Use the no form of this command to restore the default values for the queue[...]

show classofservi ce dot1p-mapping SFTOS Command Reference for the S2410, Version 2.4.1.0 281 show classofservice dot1p-mapping This command displays the curre nt Dot1p (802.1p) priority mapp ing to internal traffic classes for a specific interface. Synt ax sho w classofservice dot1 p-mapping [ unit/s lot/port ] The unit/slot/port parameter is opti[...]

282 Quality of Service (QoS) Commands show interfaces cos-qu eu e Report Fields Non-IP T raffic: Class—The traffic class used for non-IP traffic. This is only displayed when the COS trust mode is set to either 'trust ip-dscp' or 'trust ip-precedence'. Untrusted T raffic Class—The traffic class used for all untrusted traffic.[...]

show interfaces tail-drop-threshold SFTOS Command Reference for the S2410, Version 2.4.1.0 283 Synt ax show interfaces random-detect slot/port The slot/port parameter is optional. If specified , the class-of-service WRED configuration of the interface is displayed. If omitted, the most recent glob al configuration settings are displayed. Mode Privi[...]

284 Quality of Service (QoS) Commands tail-drop queu e-parms Mode Privileged Exec Report Fields Interface — This displays the slot/port of the interface. If displ aying the global configuration, this output line is replaced w ith a Global Confi g indication. The following informatio n is repeated for each queue on the interface. Queue IdQueue ide[...]

traffic-shape SFTOS Command Reference for the S2410, Version 2.4.1.0 285 traf fic-shape This command specifies the maximum transmi ssion bandwidth limit for the interface as a whole. Also known as rate shaping, this has th e ef fect of smoothing temporary traffic bursts over time so that the transmitte d traf fic rate is bounded. Synt ax traffic-sh[...]

286 Quality of Service (QoS) Commands show classofservice dot1pmapping show classofservice dot1pmapping This command displays the current 802.1p prior ity mapping to internal traffic classes for all or specific interfaces. Synt ax sho w classofservice dot1 pmapping [ unit/ slot/port ] Mode Privileged Exec and User Exec vlan port priority all This c[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 287 This chapter covers th e following commands: • {deny|permit} on page 288 • mac access-list extended on page 290 • mac access-list extended rename on page 291 • mac access-group on page 292 • show mac access-lists on page 292 An Access Control List (A CL) ensures that only au thori[...]

288 ACL Comma nd s {deny|permit} Implement ation Notes • If the CPU MA table (This MAC address ta ble is separate from the software MAC address table) is filled so that the ACL logic cannot create another MA table entry , all frames from that source address will be dropped. • If the ACL rules are changed or ACLs are unap plied to the port, all [...]

{deny|permit} SFTOS Command Reference for the S2410, Version 2.4.1.0 289 Usage A rule may either deny or permit traffic acco rding to the specified classification fields. At a minimum, the source and destination MAC value must be specified, each of which may be substituted using the keyword any to indicate a match on a ny value in that field. The r[...]

290 ACL Comma nd s mac access-list extended The assign-queue and redirec t parameters are only valid for a permit rule. Mode Mac Access List Config Related Commands mac access-list extended This command creates a MAC Access Control List (ACL) identified by name , consisting of classification fields defined for the La yer 2 header of an Ethernet fra[...]

mac access- list extended r ename SFTOS Command Reference for the S2410, Version 2.4.1.0 291 mac access-list extended rename This comman d changes the name of an existing MAC ACL. The name parameter is the name of an existing MAC ACL. The newname parameter is a case-sen sitive alphanumeric string from 1 to 31 characters uniquely identifying the MAC[...]

292 ACL Comma nd s mac access-group mac access-group This command attaches a specific MAC Ac cess Control List (ACL) identified by name to an interface in the ingress directio n. This command, when used in Interface Config mode, only affects a single interface, whereas the Global Config mode setting is applied to all interfaces. Synt ax mac access-[...]

show mac acce ss-list s SFTOS Command Reference for the S2410, Version 2.4.1.0 293 When the comman d is used with the nam e option, the report displays details for the identified MAC access list, in the following fields: Field Descriptions Rule Number—The ordered rule num ber identifier defi ned within the ACL. Action—Displays the action associ[...]

294 ACL Comma nd s show mac access-lists[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 295 Index Symbols {deny|permit} 288 Numerics 10/100 Ethernet por t 3, 79 802.3ad 28 802.3x flow control 200 A Access Control Lists (ACLs) 287 accessing DHCP Pool Config mode 209 ACL wildcard masks 287 ACLs 287 addport 249 Address Aging T imeout 114 areaid 41 ARP aging 204–214 audience 22 auth[...]

296 Index config vlan p orts ingressfilte r 134–135 configuration gu id e 23 configuration reset 138 Configuration Scripting 146 configure 106 configure comma nd 47 configuring a range 108 Contact and Patents Informa ti on 23 control characters 43 copy 37–38, 139 copy (clibanner) 141 copy system 34 Copyright 2 CoS Queue Prioritization 276 cos-q[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 297 HTML 51 HTTP 51 I IEEE 802.1Q 133–134 IfIndex 79 igmp enable 236 igmp enable (interface) 236 igmp fast-leave (inter face) 237 igmp groupmembership -interval 237 igmp igmp maxresponse (i nter face) 243 igmp interfacemode enab le all 238 igmp maxresponse 239 igmp mcrtexpiretime 239 igmp mro[...]

298 Index deleting ports from 251 enabling or disablin g 251–252 link traps 252 logical ID 256 name 253 summary information 256 user-assigned name 256 lease 209 leave time 226–227 Line Config mode 47, 49 lineconfig command 47 link aggregate group (LAG) 249 Link Aggregation (IEEE 802.3ad) 28 link aggregations. See LAGs link traps interface 103 L[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 299 setting user 34, 159 user 159 patents 23 PDUs 225, 227 ping 144 p-node (pe er-to-peer) 210 Policy Clas s Mode 49 policy map command 49 Policy Map Mode 49 port (for TACACS+) 190 port channel 249 Port Channel mod e 47 Port Channel Range 109, 252, 257 Port ID format 3 port lacpmo de 253 port l[...]

300 Index script show 148 script validate 148 serial baudrate 91 serial timeout 92 service dhcp 212 service port 79 serviceport commands 3 serviceport ip 37, 63 serviceport pr ot oc ol 64 session-limit 89 sessions closing 143, 158 displaying 158 session-timeout 89 set garp timer join 225 set garp timer leave 226 set garp timer leaveall 227 set gmrp[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 301 show port-channel brief 255 show port-channel summary 257 show port-s ecurity 166 show port-s ecurity dyna mic 167 show port-s ecurity static 168 show port-s ecurity violatio n 168 show radi us 184 show radius accounting statistics 185 show radius statistics (authentication) 186 show runnin[...]

302 Index resetting 144 statistics, related 201 commands 66, 68, 70, 75–77 switch navigation icon in Web UI 53 syntax conventions 39 syslog servers 78, 80 system information and statistics command s 201 commands 97 system utilities 138–144 System Utility Commands 138 T Tab 43 TACACS key 189 port 190 priority 190 show tacacs 191 single-connectio[...]

SFTOS Command Reference for the S2410, Version 2.4.1.0 303 VLAN Range mode 47 vlan tagging 137 vlan tagging co mmand 4 VLAN tunneling 221 vlan untagging 137 vlan untagging com m a nd 4 VLANs adding 108 changing the name of 125 deleting 108, 123 details 77, 129, 280, 282–284 frame acce ptance mode 133–134 GVRP 228–229 IDs 134, 137 ingress filt[...]

304 Index[...]