Dell PC6224F manuel d'utilisation

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356

Aller à la page of

Un bon manuel d’utilisation

Les règles imposent au revendeur l'obligation de fournir à l'acheteur, avec des marchandises, le manuel d’utilisation Dell PC6224F. Le manque du manuel d’utilisation ou les informations incorrectes fournies au consommateur sont à la base d'une plainte pour non-conformité du dispositif avec le contrat. Conformément à la loi, l’inclusion du manuel d’utilisation sous une forme autre que le papier est autorisée, ce qui est souvent utilisé récemment, en incluant la forme graphique ou électronique du manuel Dell PC6224F ou les vidéos d'instruction pour les utilisateurs. La condition est son caractère lisible et compréhensible.

Qu'est ce que le manuel d’utilisation?

Le mot vient du latin "Instructio", à savoir organiser. Ainsi, le manuel d’utilisation Dell PC6224F décrit les étapes de la procédure. Le but du manuel d’utilisation est d’instruire, de faciliter le démarrage, l'utilisation de l'équipement ou l'exécution des actions spécifiques. Le manuel d’utilisation est une collection d'informations sur l'objet/service, une indice.

Malheureusement, peu d'utilisateurs prennent le temps de lire le manuel d’utilisation, et un bon manuel permet non seulement d’apprendre à connaître un certain nombre de fonctionnalités supplémentaires du dispositif acheté, mais aussi éviter la majorité des défaillances.

Donc, ce qui devrait contenir le manuel parfait?

Tout d'abord, le manuel d’utilisation Dell PC6224F devrait contenir:
- informations sur les caractéristiques techniques du dispositif Dell PC6224F
- nom du fabricant et année de fabrication Dell PC6224F
- instructions d'utilisation, de réglage et d’entretien de l'équipement Dell PC6224F
- signes de sécurité et attestations confirmant la conformité avec les normes pertinentes

Pourquoi nous ne lisons pas les manuels d’utilisation?

Habituellement, cela est dû au manque de temps et de certitude quant à la fonctionnalité spécifique de l'équipement acheté. Malheureusement, la connexion et le démarrage Dell PC6224F ne suffisent pas. Le manuel d’utilisation contient un certain nombre de lignes directrices concernant les fonctionnalités spécifiques, la sécurité, les méthodes d'entretien (même les moyens qui doivent être utilisés), les défauts possibles Dell PC6224F et les moyens de résoudre des problèmes communs lors de l'utilisation. Enfin, le manuel contient les coordonnées du service Dell en l'absence de l'efficacité des solutions proposées. Actuellement, les manuels d’utilisation sous la forme d'animations intéressantes et de vidéos pédagogiques qui sont meilleurs que la brochure, sont très populaires. Ce type de manuel permet à l'utilisateur de voir toute la vidéo d'instruction sans sauter les spécifications et les descriptions techniques compliquées Dell PC6224F, comme c’est le cas pour la version papier.

Pourquoi lire le manuel d’utilisation?

Tout d'abord, il contient la réponse sur la structure, les possibilités du dispositif Dell PC6224F, l'utilisation de divers accessoires et une gamme d'informations pour profiter pleinement de toutes les fonctionnalités et commodités.

Après un achat réussi de l’équipement/dispositif, prenez un moment pour vous familiariser avec toutes les parties du manuel d'utilisation Dell PC6224F. À l'heure actuelle, ils sont soigneusement préparés et traduits pour qu'ils soient non seulement compréhensibles pour les utilisateurs, mais pour qu’ils remplissent leur fonction de base de l'information et d’aide.

Table des matières du manuel d’utilisation

  • Page 1

    Dell PowerConnect 6200 Series System CLI Reference Guide Regulatory Models: PC6224, PC6248, PC6224P , PC6248P , and PC6224F[...]

  • Page 2

    Notes NOTE: A NOTE indica tes imp ortan t inf ormat ion t hat hel ps you mak e bett er us e of your co mputer . ________ _________ Information in this publication is subject to change without notice. © 2011 Dell Inc. Al l right s reserve d. Reprodu ctio n of these m ateri als in any manner whatsoe ver with out the w ritte n permission o f Dell Inc[...]

  • Page 3

    Content s 3 Contents 1 Command Groups . . . . . . . . . . . . . . . . . . 59 Introd uction . . . . . . . . . . . . . . . . . . . . . . . 59 Comman d Groups . . . . . . . . . . . . . . . . . . . . 59 Mode T ypes . . . . . . . . . . . . . . . . . . . . . . . 64 Layer 2 Command s . . . . . . . . . . . . . . . . . . . . 65 Layer 3 Command s . . . . . .[...]

  • Page 4

    4 Conte nts aaa au thenticati on login . . . . . . . . . . . . . . . . 194 aaa au thorizatio n network d efault rad ius . . . . . . . 196 enabl e aut henti catio n . . . . . . . . . . . . . . . . . 197 enabl e passwo rd . . . . . . . . . . . . . . . . . . . . 19 8 ip http authenticati on . . . . . . . . . . . . . . . . . 199 ip https authentica tio[...]

  • Page 5

    Content s 5 show ip acce ss-lists . . . . . . . . . . . . . . . . . . . 218 show ma c ac cess-l ist . . . . . . . . . . . . . . . . . . 219 5 Address T able Commands . . . . . . . . . . . 221 bridg e addres s . . . . . . . . . . . . . . . . . . . . . . 222 bridge ag ing-time . . . . . . . . . . . . . . . . . . . . 223 brid ge mu ltic ast addre ss .[...]

  • Page 6

    6 Conte nts 6 CDP Interoperability Commands . . . . . . 241 clea r isdp coun ters . . . . . . . . . . . . . . . . . . 242 clea r isdp table . . . . . . . . . . . . . . . . . . . . . 242 isdp adv ertise-v2 . . . . . . . . . . . . . . . . . . . . 243 isd p enab le . . . . . . . . . . . . . . . . . . . . . . . 243 isdp hol dtime . . . . . . . . . . . [...]

  • Page 7

    Content s 7 8 DHCP Snooping Commands . . . . . . . . . . 261 clear ip dhcp snoopi ng stat isti cs . . . . . . . . . . . . 262 ip dhcp sn ooping . . . . . . . . . . . . . . . . . . . . . 262 ip dhc p snoopi ng bindin g . . . . . . . . . . . . . . . . 263 ip dhc p snoopi ng databas e . . . . . . . . . . . . . . . 264 ip dhc p snoopi ng databa se writ[...]

  • Page 8

    8 Conte nts ip arp inspectio n trust . . . . . . . . . . . . . . . . . 279 ip arp inspection v alidate . . . . . . . . . . . . . . . 280 ip arp inspectio n vlan . . . . . . . . . . . . . . . . . 281 permit ip ho st mac host . . . . . . . . . . . . . . . . 28 2 show a rp acces s-lis t . . . . . . . . . . . . . . . . . . 282 show ip arp in specti on [...]

  • Page 9

    Content s 9 show inte rface s de tail . . . . . . . . . . . . . . . . . . 303 show inte rface s st atus . . . . . . . . . . . . . . . . . 307 show sta tist ics ethe rnet . . . . . . . . . . . . . . . . . 310 show s torm- contr ol . . . . . . . . . . . . . . . . . . . 314 shutd own . . . . . . . . . . . . . . . . . . . . . . . . . 316 speed . . . . [...]

  • Page 10

    10 Conte nts 12 IGMP Snooping Commands . . . . . . . . . . 333 ip igmp snooping (g lobal) . . . . . . . . . . . . . . . 33 4 ip igmp snooping (i nterface) . . . . . . . . . . . . . . 334 ip igmp s noopin g host- time- out . . . . . . . . . . . . 335 ip igmp snooping le ave-time-out . . . . . . . . . . . 336 ip igmp snooping mroute r-time -out . . .[...]

  • Page 11

    Content s 11 ip igmp s nooping q uerier versio n . . . . . . . . . . . . 351 show ig mp snoop ing quer ier . . . . . . . . . . . . . . 352 14 IP Addressing Commands . . . . . . . . . . . 355 clear ho st . . . . . . . . . . . . . . . . . . . . . . . . 356 ip a ddre ss . . . . . . . . . . . . . . . . . . . . . . . . 356 ip a ddress dhcp . . . . . . .[...]

  • Page 12

    12 Conte nts 15 IPv6 Access List Commands . . . . . . . . . 371 {deny | permit} . . . . . . . . . . . . . . . . . . . . . 372 ipv6 acc ess- list . . . . . . . . . . . . . . . . . . . . 374 ipv6 acc ess- list re name . . . . . . . . . . . . . . . . 375 ipv6 traff ic-filter . . . . . . . . . . . . . . . . . . . . 376 show i pv6 acces s-lis ts . . . .[...]

  • Page 13

    Content s 13 18 LACP Commands . . . . . . . . . . . . . . . . . . 393 lacp po rt- priori ty . . . . . . . . . . . . . . . . . . . . . 394 lacp sy stem-p riority . . . . . . . . . . . . . . . . . . . 394 lacp t imeo ut . . . . . . . . . . . . . . . . . . . . . . . 395 show lacp eth ernet . . . . . . . . . . . . . . . . . . . 396 show lacp port -chan[...]

  • Page 14

    14 Conte nts lldp med . . . . . . . . . . . . . . . . . . . . . . . . 413 lldp med config notification . . . . . . . . . . . . . . 414 lldp med fast startrepeatco unt . . . . . . . . . . . . . 414 lldp med transmit- tlv . . . . . . . . . . . . . . . . . . 41 5 lldp notifi cation . . . . . . . . . . . . . . . . . . . . 416 lldp notifi cation-interva[...]

  • Page 15

    Content s 15 21 Port Channel Commands . . . . . . . . . . . . 439 channe l- group . . . . . . . . . . . . . . . . . . . . . . 440 inte rface port -chan nel . . . . . . . . . . . . . . . . . . 441 inte rface rang e port -cha nnel . . . . . . . . . . . . . . 441 hashin g-mode . . . . . . . . . . . . . . . . . . . . . . 442 no hashi ng-mo de . . . . .[...]

  • Page 16

    16 Conte nts cos- queue min -bandw idth . . . . . . . . . . . . . . . 461 cos- queue s trict . . . . . . . . . . . . . . . . . . . . 462 diffser v . . . . . . . . . . . . . . . . . . . . . . . . . 463 drop . . . . . . . . . . . . . . . . . . . . . . . . . . . 464 mark cos . . . . . . . . . . . . . . . . . . . . . . . . 465 mark ip-dscp . . . . . . [...]

  • Page 17

    Content s 17 match src ip6 . . . . . . . . . . . . . . . . . . . . . . . 479 match src l4port . . . . . . . . . . . . . . . . . . . . . 480 match vla n . . . . . . . . . . . . . . . . . . . . . . . . 481 mirror . . . . . . . . . . . . . . . . . . . . . . . . . . . 481 police-simp le . . . . . . . . . . . . . . . . . . . . . . 482 policy- map . . . [...]

  • Page 18

    18 Conte nts 24 RADIUS Commands . . . . . . . . . . . . . . . . 505 aaa acco unt ing net work defaul t start -stop group ra dius . . . . . . . . . . . . . . . . . . . . . . 506 acct- port . . . . . . . . . . . . . . . . . . . . . . . . 506 auth-po rt . . . . . . . . . . . . . . . . . . . . . . . . 507 deadt ime . . . . . . . . . . . . . . . . . . .[...]

  • Page 19

    Content s 19 source-ip . . . . . . . . . . . . . . . . . . . . . . . . . 525 timeo ut . . . . . . . . . . . . . . . . . . . . . . . . . . 525 usage . . . . . . . . . . . . . . . . . . . . . . . . . . . 526 25 Spanning T ree Commands . . . . . . . . . . . 529 clear spanni ng-t ree det ected- prot ocols . . . . . . . . 531 exit (mst) . . . . . . . . [...]

  • Page 20

    20 Conte nts spanni ng-t ree max- hops . . . . . . . . . . . . . . . . 552 spanni ng-t ree mode . . . . . . . . . . . . . . . . . . 553 spanni ng-t ree mst 0 ex ternal -cost . . . . . . . . . . . 553 spanni ng-t ree mst co nfigu ration . . . . . . . . . . . 554 spanni ng-t ree mst co st . . . . . . . . . . . . . . . . . 555 spanni ng-t ree mst po r[...]

  • Page 21

    Content s 21 pr ior ity . . . . . . . . . . . . . . . . . . . . . . . . . . 571 show tacac s . . . . . . . . . . . . . . . . . . . . . . . 572 tacac s-ser ver host . . . . . . . . . . . . . . . . . . . . 573 tacac s-ser ver key . . . . . . . . . . . . . . . . . . . . 573 tacac s-ser ver tim eout . . . . . . . . . . . . . . . . . . 574 timeo ut . . [...]

  • Page 22

    22 Conte nts show vla n associa tion ma c . . . . . . . . . . . . . . 594 show vla n assoc iation su bnet . . . . . . . . . . . . . 595 swi tchport ac cess vlan . . . . . . . . . . . . . . . . 59 6 swit chport forb idden vlan . . . . . . . . . . . . . . . 596 swit chport gene ral accep table-fram e-type tagged -only . . . . . . . . . . . . . . . . [...]

  • Page 23

    Content s 23 vlan p rotocol group re move . . . . . . . . . . . . . . . 612 vlan r outing . . . . . . . . . . . . . . . . . . . . . . . 613 29 V oice VLAN Commands . . . . . . . . . . . . . 615 voice vl an . . . . . . . . . . . . . . . . . . . . . . . . 616 voice vlan (Interface ) . . . . . . . . . . . . . . . . . . 616 voice vl an data prio rity .[...]

  • Page 24

    24 Conte nts dot1x timeou t tx-period . . . . . . . . . . . . . . . . 63 2 show d ot1x . . . . . . . . . . . . . . . . . . . . . . . 633 show do t1x clients . . . . . . . . . . . . . . . . . . . 636 show do t1x etherne t . . . . . . . . . . . . . . . . . . 638 show do t1x statisti cs . . . . . . . . . . . . . . . . . 640 show do t1x users . . . . .[...]

  • Page 25

    Content s 25 ip proxy-arp . . . . . . . . . . . . . . . . . . . . . . . 657 show a rp . . . . . . . . . . . . . . . . . . . . . . . . . 657 32 DHCP and BOOTP Relay Commands . . . 659 boot pdhcprela y cidridoptm ode . . . . . . . . . . . . . 660 bootp dhcp relay maxh opcou nt . . . . . . . . . . . . . . 661 bootpd hcprelay minwa ittime . . . . . . .[...]

  • Page 26

    26 Conte nts show ipv6 dhcp bi ndi ng . . . . . . . . . . . . . . . . 675 show ipv6 dhcp i nte rface . . . . . . . . . . . . . . . 67 6 show ipv6 dhcp po ol . . . . . . . . . . . . . . . . . . 678 show ipv 6 dhcp st atist ics . . . . . . . . . . . . . . . 678 34 DVMRP Commands . . . . . . . . . . . . . . . . 681 ip dvmrp . . . . . . . . . . . . . .[...]

  • Page 27

    Content s 27 ip igmp robustn ess . . . . . . . . . . . . . . . . . . . . 694 ip igmp startu p-query-coun t . . . . . . . . . . . . . . . 694 ip igmp startup-q uery-interval . . . . . . . . . . . . . . 695 ip igmp version . . . . . . . . . . . . . . . . . . . . . . 696 show ip igmp . . . . . . . . . . . . . . . . . . . . . . . 697 show ip i gmp grou[...]

  • Page 28

    28 Conte nts 37 IP Helper Commands . . . . . . . . . . . . . . . 711 clear ip helper sta tistics . . . . . . . . . . . . . . . . 712 ip helper -add ress (global c onfiguration ) . . . . . . . 712 ip helper -add ress (interfa ce configura tion) . . . . . . 714 ip help er enable . . . . . . . . . . . . . . . . . . . . 716 show ip help er- address . .[...]

  • Page 29

    Content s 29 show ip r oute . . . . . . . . . . . . . . . . . . . . . . 734 show ip r oute pre feren ces . . . . . . . . . . . . . . . 735 show i p ro ute summary . . . . . . . . . . . . . . . . . 736 show i p sta ts . . . . . . . . . . . . . . . . . . . . . . . 737 vlan r outing . . . . . . . . . . . . . . . . . . . . . . . 739 39 IPv6 MLD Snoopin[...]

  • Page 30

    30 Conte nts ipv6 pimsm dr-priori ty . . . . . . . . . . . . . . . . . 755 ipv6 pimsm hell o-interval . . . . . . . . . . . . . . . 755 ipv6 pimsm jo in-prune-inter v al . . . . . . . . . . . . 756 ipv6 pi msm regist er - thres hold . . . . . . . . . . . . . 757 ipv6 pimsm rp-add ress . . . . . . . . . . . . . . . . . 757 ipv6 pi msm rp-can didat e[...]

  • Page 31

    Content s 31 ipv6 ml d last- member-query -coun t . . . . . . . . . . . 774 ipv6 ml d last- member-query -inte rval . . . . . . . . . . 774 ipv6 mld- proxy . . . . . . . . . . . . . . . . . . . . . . 775 ipv6 mld-pro xy reset-stat us . . . . . . . . . . . . . . . 776 ipv6 mld-pro xy unsolicit-rprt-in terval . . . . . . . . . . 776 ipv6 mld qu ery-i[...]

  • Page 32

    32 Conte nts ipv6 ro ute di stance . . . . . . . . . . . . . . . . . . . 791 ipv6 un icast-routing . . . . . . . . . . . . . . . . . . 792 ping ipv6 . . . . . . . . . . . . . . . . . . . . . . . . 792 ping ipv6 interfa ce . . . . . . . . . . . . . . . . . . . 79 3 show ipv6 brief . . . . . . . . . . . . . . . . . . . . . 795 show ipv6 interface . .[...]

  • Page 33

    Content s 33 show i pv6 vlan . . . . . . . . . . . . . . . . . . . . . . 819 tracerou te ipv6 . . . . . . . . . . . . . . . . . . . . . . 820 42 Loopback Interface Commands . . . . . . . 823 inte rf ace lo opba ck . . . . . . . . . . . . . . . . . . . . 824 show inte rface s l oopba ck . . . . . . . . . . . . . . . . 824 43 Multicast Commands . . .[...]

  • Page 34

    34 Conte nts ip pimsm ssm . . . . . . . . . . . . . . . . . . . . . . 839 show brid ge mu lticas t ad dre ss-tabl e co unt . . . . . 840 show i p mc ast . . . . . . . . . . . . . . . . . . . . . 841 show ip mc ast boun dary . . . . . . . . . . . . . . . . 842 show ip mcast interface . . . . . . . . . . . . . . . . 843 show ip mc ast mrou te . . . .[...]

  • Page 35

    Content s 35 area ra nge . . . . . . . . . . . . . . . . . . . . . . . . 861 area s tub . . . . . . . . . . . . . . . . . . . . . . . . . 862 area stub no-summa ry . . . . . . . . . . . . . . . . . . 863 area virt ual -lin k . . . . . . . . . . . . . . . . . . . . . 864 area virt ual- lin k au thent icati on . . . . . . . . . . . . . 865 area virt [...]

  • Page 36

    36 Conte nts ip ospf auth ent icati on . . . . . . . . . . . . . . . . . 880 ip ospf cost . . . . . . . . . . . . . . . . . . . . . . . 881 ip ospf dead- inte rva l . . . . . . . . . . . . . . . . . . 881 ip os pf he llo- int erva l . . . . . . . . . . . . . . . . . . 882 ip ospf mtu-ign ore . . . . . . . . . . . . . . . . . . . 883 ip ospf netw or[...]

  • Page 37

    Content s 37 show ip o spf abr . . . . . . . . . . . . . . . . . . . . . 903 show ip o spf area . . . . . . . . . . . . . . . . . . . . 903 show ip o spf asbr . . . . . . . . . . . . . . . . . . . . 905 show ip o spf databa se . . . . . . . . . . . . . . . . . . 906 show i p o spf databa se d atabas e-su mmary . . . . . . . 909 show ip osp f interf[...]

  • Page 38

    38 Conte nts area ns sa no-su mmary . . . . . . . . . . . . . . . . . 931 area ns sa tran slato r-role . . . . . . . . . . . . . . . . 932 area ns sa tran slat or-stab-in tv . . . . . . . . . . . . . 933 area range . . . . . . . . . . . . . . . . . . . . . . . 934 area stub . . . . . . . . . . . . . . . . . . . . . . . . 935 area stu b no-summa ry [...]

  • Page 39

    Content s 39 ipv6 o spf hello-in terval . . . . . . . . . . . . . . . . . 949 ipv6 o spf mtu-i gnore . . . . . . . . . . . . . . . . . . . 950 ipv6 o spf network . . . . . . . . . . . . . . . . . . . . 950 ipv6 o spf priorit y . . . . . . . . . . . . . . . . . . . . . 951 ipv6 o spf retr ansmit- interval . . . . . . . . . . . . . . 952 ipv6 os pf t[...]

  • Page 40

    40 Conte nts show ip v6 ospf databa se databas e-summ ary . . . . . 972 show ipv6 ospf in terface . . . . . . . . . . . . . . . . 973 show ipv6 ospf in terface brief . . . . . . . . . . . . . 974 show ipv6 os pf interface stats . . . . . . . . . . . . . 975 show ipv6 os pf interface vlan . . . . . . . . . . . . . 977 show ip v6 ospf ne ighbor . . .[...]

  • Page 41

    Content s 41 show ip pimsm inte rface . . . . . . . . . . . . . . . . 992 show i p p imsm n eighb or . . . . . . . . . . . . . . . . 993 show i p p imsm rp hash . . . . . . . . . . . . . . . . . . 994 48 Router Discovery Protocol Commands . . . . . . . . . . . . . . . . . . . . . . . 997 ip irdp . . . . . . . . . . . . . . . . . . . . . . . . . . 9[...]

  • Page 42

    42 Conte nts hostr outesac cept . . . . . . . . . . . . . . . . . . . . 1012 ip rip . . . . . . . . . . . . . . . . . . . . . . . . . . 1013 ip rip au then ticat ion . . . . . . . . . . . . . . . . . . 1013 ip rip receive v ersion . . . . . . . . . . . . . . . . . 1014 ip rip se nd versi on . . . . . . . . . . . . . . . . . . . 1015 redistribute . [...]

  • Page 43

    Content s 43 52 Vi rtual Router Redundancy Protocol Commands . . . . . . . . . . . . . . 1031 ip vrrp . . . . . . . . . . . . . . . . . . . . . . . . . 1032 ip vrrp authe ntication . . . . . . . . . . . . . . . . . 1033 ip vrrp ip . . . . . . . . . . . . . . . . . . . . . . . . 1034 ip vrrp mode . . . . . . . . . . . . . . . . . . . . . . 1035 ip v[...]

  • Page 44

    44 Conte nts 54 Captive Portal Commands . . . . . . . . . . 1049 authen tication timeout . . . . . . . . . . . . . . . . . 1051 captiv e-portal . . . . . . . . . . . . . . . . . . . . . 1051 enabl e . . . . . . . . . . . . . . . . . . . . . . . . . 1052 http po rt . . . . . . . . . . . . . . . . . . . . . . . . . 1053 https por t . . . . . . . . . [...]

  • Page 45

    Content s 45 show capti ve-po rtal cli ent st atu s . . . . . . . . . . . 1064 show cap tive- por tal c onf igura tio n cl ient sta tus . . . 1066 show capti ve-po rtal in terfac e cl ient stat us . . . . . 1067 show capti ve-po rtal in terfac e co nfigu rat ion status . . . . . . . . . . . . . . . . . . . . . . . . . . 1069 clear capti ve- porta l[...]

  • Page 46

    46 Conte nts 55 Clock Commands . . . . . . . . . . . . . . . . . 108 3 show cl ock . . . . . . . . . . . . . . . . . . . . . . . 1083 show sntp configura tion . . . . . . . . . . . . . . . . 1084 show sn tp statu s . . . . . . . . . . . . . . . . . . . . 1085 sntp aut henticate . . . . . . . . . . . . . . . . . . . . 1086 sntp aut hentication-k ey [...]

  • Page 47

    Content s 47 copy . . . . . . . . . . . . . . . . . . . . . . . . . . 1101 delete ba ckup-con fig . . . . . . . . . . . . . . . . . 1104 delete ba ckup-ima ge . . . . . . . . . . . . . . . . . 1105 delete st artup-co nfig . . . . . . . . . . . . . . . . . 1106 filedes c r . . . . . . . . . . . . . . . . . . . . . . . . 1106 script apply . . . . . .[...]

  • Page 48

    48 Conte nts dos-co ntrol tcpfra g . . . . . . . . . . . . . . . . . . . 1123 ip icmp echo-reply . . . . . . . . . . . . . . . . . . . 1124 ip icmp error -interval . . . . . . . . . . . . . . . . . 1125 ip unr eachabl es . . . . . . . . . . . . . . . . . . . . 1126 ip redirects . . . . . . . . . . . . . . . . . . . . . . . 1126 ipv6 icmp e rror-in [...]

  • Page 49

    Content s 49 show ma nage ment ac cess- class . . . . . . . . . . . 1143 show ma nage ment ac cess- list . . . . . . . . . . . . 1144 60 Password Management Commands . . . . . . . . . . . . . . . . . . . . . . 1145 password s aging . . . . . . . . . . . . . . . . . . . . 1146 password s history . . . . . . . . . . . . . . . . . . . 1146 password s [...]

  • Page 50

    50 Conte nts power inl ine traps . . . . . . . . . . . . . . . . . . . 1161 power inline usag e-thresh old . . . . . . . . . . . . . 1161 show poe- firmware- version . . . . . . . . . . . . . . 1162 show po wer inline . . . . . . . . . . . . . . . . . . . 1163 show po wer inline ethern et . . . . . . . . . . . . . . 1164 63 RMON Commands . . . . . [...]

  • Page 51

    Content s 51 debug clear . . . . . . . . . . . . . . . . . . . . . . 1190 debug c ons ole . . . . . . . . . . . . . . . . . . . . . 1190 debug dot1x . . . . . . . . . . . . . . . . . . . . . . 1191 debug i gmpsnoo ping . . . . . . . . . . . . . . . . . . 1192 debug i p acl . . . . . . . . . . . . . . . . . . . . . . 1192 debug i p dvmrp . . . . . .[...]

  • Page 52

    52 Conte nts debug r ip . . . . . . . . . . . . . . . . . . . . . . . . 1205 debug sf low . . . . . . . . . . . . . . . . . . . . . . 1205 debug sp anni ng-t ree . . . . . . . . . . . . . . . . . . 1206 show debugg ing . . . . . . . . . . . . . . . . . . . . 1207 65 sFlow Commands . . . . . . . . . . . . . . . . . 120 9 sflow dest ination . . . . .[...]

  • Page 53

    Content s 53 show s nmp vi ews . . . . . . . . . . . . . . . . . . . 1227 show trap flags . . . . . . . . . . . . . . . . . . . . . 1229 snmp-serve r community . . . . . . . . . . . . . . . . 1230 snmp-server commu nity-group . . . . . . . . . . . . 1 232 snmp -server co ntact . . . . . . . . . . . . . . . . . . 1233 snmp-serve r enable traps . . .[...]

  • Page 54

    54 Conte nts ip ssh serv er . . . . . . . . . . . . . . . . . . . . . . 1254 key-string . . . . . . . . . . . . . . . . . . . . . . . . 1254 show cry pto key mypu bkey . . . . . . . . . . . . . . 1256 show c rypto key pubk ey-cha in ssh . . . . . . . . . . 1257 show i p ss h . . . . . . . . . . . . . . . . . . . . . . . 1259 user-key . . . . . . . [...]

  • Page 55

    Content s 55 show loggi ng . . . . . . . . . . . . . . . . . . . . . . 1272 show logg ing file . . . . . . . . . . . . . . . . . . . 1274 show s yslog -serv ers . . . . . . . . . . . . . . . . . . 1275 69 System Management Commands . . . . 1277 asset-ta g . . . . . . . . . . . . . . . . . . . . . . . . 1279 banne r motd . . . . . . . . . . . . . . [...]

  • Page 56

    56 Conte nts show me mory cp u . . . . . . . . . . . . . . . . . . . 1294 show n sf . . . . . . . . . . . . . . . . . . . . . . . . 1295 show p roce ss cp u . . . . . . . . . . . . . . . . . . . 1296 show se ssio ns . . . . . . . . . . . . . . . . . . . . . 1299 show st ack -port . . . . . . . . . . . . . . . . . . . . 1300 show stack -port co unte[...]

  • Page 57

    Content s 57 telnet . . . . . . . . . . . . . . . . . . . . . . . . . . 1325 trac erout e . . . . . . . . . . . . . . . . . . . . . . . 1327 70 T elnet Server Commands . . . . . . . . . . . 1331 ip telnet serv er disable . . . . . . . . . . . . . . . . 1332 ip telnet po rt . . . . . . . . . . . . . . . . . . . . . . 1332 show ip telne t . . . . . .[...]

  • Page 58

    58 Conte nts ip http server . . . . . . . . . . . . . . . . . . . . . . 1346 ip https certificate . . . . . . . . . . . . . . . . . . . 1347 ip https port . . . . . . . . . . . . . . . . . . . . . . . 1347 ip https server . . . . . . . . . . . . . . . . . . . . . 1348 key-ge nerate . . . . . . . . . . . . . . . . . . . . . . 1349 locatio n . . . . [...]

  • Page 59

    Command Grou ps 59 1 Command Groups Introduction The Command Line Interface (CLI) is a network management application operated throug h an ASCII terminal without the use of a Graphic User Interface (GUI) driven software application. By dire ctly entering commands, the user has greater configuration flexib ility . The CLI is a basic command-line int[...]

  • Page 60

    60 Command G roups Address T able Configu res bridgi ng ad dress tab les. CDP Interoperability Configur e s Cisco Discovery P rotocol (CDP). DHCP l2 Relay Enables the Layer 2 DHCP Relay agen t for an inte rf ace. DHCP Snooping Configures DHCP s nooping and whether an interface is trus ted for fi lterin g. Dynamic ARP Ins pecti on Confi gures for re[...]

  • Page 61

    Command Grou ps 61 Span ning T ree Confi gures and r eports on Spanning T re e protoco l. Swi tchpo rt V oice Con figur es the Auto V oIP f eatur e. T ACACS+ Configures and d i splays T ACA CS+ information. VLAN Configures VLAN s and di splays VL AN informat ion. V oice VL AN Configu res voice VLA Ns and d isplay s voi ce VLAN informat ion 802.1x C[...]

  • Page 62

    62 Command G roups Router Dis covery P rotocol (IPv4) Manages router discovery ope rations. Routing Info rmation P rotocol (IPv4) Conf igures RIP ac tivities . T unn el In terf ace ( IPv6) Manag ing t unnel ing operat ions. Vir tu a l L A N Ro u ti n g (IPv 4) Controls virtual LA N routing. Vir tu a l R o u te r Redund anc y (IPv 4) Manag es rou te[...]

  • Page 63

    Command Grou ps 63 SNMP Configures SNMP communities, traps and displays SNMP informat ion. SSH Configu res SSH authentication. Syslog Man ages and d isplays syslo g messages . Sys tem Manage ment Confi gures the sw itch cloc k, name and auth orized u sers. T eln et Serve r Configur es T elnet serv ice on t he switch and dis plays Te l n e t i n f o[...]

  • Page 64

    64 Command G roups Mode T ypes The tables on the following p ages use these abb reviations for Command Mode names. • ARP A — ARP ACL Configuration • CC — Cry pto Co nfiguration • CP — Cap tive P ortal Configuration • CPI — Capti ve P orta l Ins tanc e • CM C — C lass-Map C onfigura tion • GC — G lobal Configuration • IC ?[...]

  • Page 65

    Command Grou ps 65 •S K — S S H P u b l i c K e y - c h a i n • TC — T ACA CS Conf igur ati on • UE — User EX EC • VL AN — V LAN Configurat ion • v6ACL — IPv6 Access List Configurat ion •v 6 C M C • v6D P — IPv6 DHCP Pool Configuration Layer 2 Commands AAA Command Des cripti on Mode* aaa authentication dot1x Specifies one [...]

  • Page 66

    66 Command G roups ACL show authenti cation methods Shows information about authentication methods PE show user accounts Display s information about the local user datab ase PE show users l ogin-hi sto ry Displ ays in forma tion a bout lo gin hi storie s of users PE username Establis hes a use rname-b ased aut hentica tion syst em. GC *NOTE: F or t[...]

  • Page 67

    Command Grou ps 67 Address T able show ip access-l i sts Displays an Access Control List (ACL) and all of the rules t hat ar e defined for the ACL. PE show mac access-li st Displays a MA C access list and all of t h e rules that ar e defined for the A CL. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page[...]

  • Page 68

    68 Command G roups CDP Interope rability show bridge ad dres s-table stati c Displa ys sta ticall y created en tries in the bri dge- forwarding database. PE show b ridge mult icast addr ess-table Displa ys Mult icast MA C addr ess tab le informat ion. PE show b ridge mult icast filterin g Display s the Mult icast filt ering conf iguration. PE show [...]

  • Page 69

    Command Grou ps 69 DHCP l2 Relay DHCP Snooping Comman d Descriptio n Mode* dhcp l2rela y Enables the Lay er 2 DHCP Rela y agent fo r an int erface. GC/I C dhcp l2rela y circu it-id Enables user to set the DH CP Optio n 82 Circuit ID for a VLAN. GC dhcp l2relay remote-id Enables user to s et the DHCP Option 82 Remote ID for a VLAN. GC dhcp l2re lay [...]

  • Page 70

    70 Command G roups Dynamic ARP Inspe ction ip dhcp s nooping trust Configure a port as trusted for DHCP snooping. IC ip dhcp snoopin g verify mac-address Enables the verification of the source MA C address wit h the cl ient MAC address in the received DHCP mes sage. GC show ip dhcp snooping Display s the DHCP snooping global and per port c onfigura[...]

  • Page 71

    Command Grou ps 71 Ethernet Configuration ip arp inspection vlan Enables Dynami c ARP Inspe c tion on a single VLAN or a range of VLA Ns. GC permit ip host ma c host Configures a rule for a valid IP ad d ress an d MAC address combination used in A RP packet validati on. ARP A show arp access-list Displ ays the configu red ARP ACLs with the rules. P[...]

  • Page 72

    72 Command G roups GVRP negotiation Enables auto-negotiation operation for the speed and duplex parameters of a given interfa ce. IC show interfaces advertise Displays information about au to negotiation adver tisemen t. PE show interfa ces configur ation Displa ys the co nfigu ratio n for all confi gured interfa ces. UE show interfa ces coun ters [...]

  • Page 73

    Command Grou ps 73 IGMP Snooping gvrp enable (interface) Enables GVRP on an interface . IC gvrp regis tration- forbid De- regi sters all VLANs, an d pr events d ynamic VLAN registration on the port. IC gvrp vlan-creation-forbid Enables or disables dynamic V LAN creation. IC show gvr p confi guratio n Displa ys GVR P config uratio n informat ion, in[...]

  • Page 74

    74 Command G roups IGMP Snoopi ng Querier ip ig mp snoop ing ( VLAN ) In VLAN Config mo de, ena bles IGMP snoop ing on a particular VLAN or on all interfaces parti cipatin g in a VL AN. VLAN ip igmp snooping fa st-leave Enables or disables IGMP Snooping fast-leave mode on a selected VL A N. VLAN ip igmp sno oping groupmembership-int erval Sets the [...]

  • Page 75

    Command Grou ps 75 IP Addressi ng Comman d Descriptio n Mode* clear host Delete s entries from the host name- to-addr ess cache PE helper address Enabl e forwarding User Datagra m Protocol (UDP) B roadcast pack ets rec eived on an int erface. IC ip addr ess Sets a manage ment IP addre ss on the switch. GC ip address dhcp Acquir es an IP address on [...]

  • Page 76

    76 Command G roups IPv6 ACL IPv6 MLD Snoop ing Comma nd Descriptio n Mode* {deny | permit} Creates a new rule for the current IPv6 access list. v6A C L ipv6 access -list Creat es an IPv6 Access Control List (A CL) consistin g of classi ficati on fields defi ned fo r the IP header of an IP v6 frame. GC ipv6 access-list rename Changes the name of an [...]

  • Page 77

    Command Grou ps 77 IPv6 MLD Snooping Querier iSCSI Optimi zation show ipv6 mld s n ooping Displays MLD Snooping information. PE show ipv6 mld s noopin g groups Display s the MLD Sno oping ent ries in the MFDB table. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Comman d Descriptio n Mode* ipv6 ml[...]

  • Page 78

    78 Command G roups LACP Link Dependen cy Comma nd Descriptio n Mode* lacp port-priority Configu res the priority value for physical ports . IC lacp system-pri ority Configures the system LACP priority . GC lacp timeou t Assigns an admi nistrat ive LA CP timeou t. IC show lacp ethernet Displays LACP information for Ethe rnet ports. P E show lacp por[...]

  • Page 79

    Command Grou ps 79 LLDP no depends-on port- channe l Removes the depend ent port-ch annel s list . Link Depend ency show lin k-depe ndenc y Sho ws the l ink depend encie s config ured on a particular group. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Comman d Descriptio n Mode* clear lld p remo[...]

  • Page 80

    80 Command G roups Port Channel show lldp st atistics Disp lays th e current LLDP traffi c statis tics. PE lldp med Enables/d isables LLDP -MED on an inte rface. IC lldp med tr ansm it- tlv Spwcifie s which o ptiona l TL Vs in the L LDP MED set are trans mitte d in the LLDP DUs. IC lldp me d fastst artrepea tcount Sets the value of th e fast st art[...]

  • Page 81

    Command Grou ps 81 Port Monitor QoS show interfaces port - channe l Displa ys port-c hannel informa tion. P E show statisti cs port-channel Dis plays port-c hannel st atistics . PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Comman d Descriptio n Mode* monit or sessio n Confi gures a port moni tor[...]

  • Page 82

    82 Command G roups conform-color Specifies for each ou tcome, the on ly possible actions ar e drop, setdscp-transmit, set-prec- transm it, o r transmi t PCM C cos-queue min -bandwidth Specifies th e minimu m transmission ban dwidth for each interf ace queue. GC and IC cos-queue stric t Ac tivates t he stri ct prio rity sch eduler mode fo r each spe[...]

  • Page 83

    Command Grou ps 83 match ds tl4port Adds to th e speci fied cl ass def initi on a match condi tion b ased o n the d estin atio n layer 4 port of a packet using a single keywor d, or a n umeric notati on. CMC match et hertyp e Adds to th e speci fied cl ass def initi on a match condi tion base d on the v alue o f the et hertype. CMC match ip6 flowl [...]

  • Page 84

    84 Command G roups match vl an Adds to the spe ci fied cla ss defini tio n a match condit ion bas ed on the va lue of the layer 2 VLAN I den tifier fiel d. CMC mir ror Mirro rs all t he data that ma tches th e class defined to the de stina tion port spe cified PCM C police-simple Establishes the traffic policing s tyle for the specif ied class. PCM[...]

  • Page 85

    Command Grou ps 85 Radius show policy-map Displays all configuration information for the spec ified poli cy . PE show policy-map interfac e Di splays poli cy-orient ed st atistics information for the s pecifie d inte rface and di rection PE show ser vi ce-po lic y D ispl ay s a sum ma ry of policy-orient ed statis tics information for all interface[...]

  • Page 86

    86 Command G roups Spanning T ree radius-server de adtime Improves RADIUS r esponse t imes when ser vers are u n available. Causes the unavailable servers to be skipped. GC radiu s-server h ost Specifi es a R ADIUS serve r host. GC rad ius-serv er ke y Set s the aut hentic ation and encryp tion k ey for all RADIUS communic ation s betw een the swit[...]

  • Page 87

    Command Grou ps 87 instanc e (mst) Maps VLANs to an MST instan ce. MC name (ms t) Defin es the MST co nfigur ation na me. MC revision (ms t) Defines the confi guratio n revisi on number . MC show sp annin g-tree Di splay s span ning tree conf igur ation. PE show sp anning- tree summary Displ ay s span ning t ree sett ings a nd pa ramet ers for th e[...]

  • Page 88

    88 Command G roups spanni ng-tree mst configur ation Enables configu ring a n MST region by en tering the mult iple spanni ng-tree (MST) mode . GC spanni ng-tree mst 0 ext e rn al - co s t Sets the ext ernal co st for the common sp anning tree. IC spanning-t ree mst cost Configu res the path cost for multip le spanning tree (MS T) calcu latio ns. I[...]

  • Page 89

    Command Grou ps 89 Switchport V oice T ACACS+ VLAN Comman d Descriptio n Mode* switch port v oice de tect auto Enables the V oIP Profile on all the in terface s of the sw itch. GC/I C show switchport voice Displays the s t atus of auto-voip on an i n terface or all interfaces. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod [...]

  • Page 90

    90 Command G roups inte rface r ange vl an Enters the inte rface c onfigur ation mo de to confi gure m ultiple VL ANs. GC mode dvla n-tu nnel Enables Doubl e VLAN t unnel ing on th e specif ied inte rface IC name Conf igures a name to a VLAN. IC protocol group Attaches a vlanid to the protocol-based VLAN identi fied by groupid . VLAN protocol vlan [...]

  • Page 91

    Command Grou ps 91 switchport gene ral allowed vlan Adds or removes VLANs from a port in General mode. IC switchport ge neral ingress- filterin g disable Disabl es port in gress filt ering. IC switch port gene ral pvid Co nfigu res the PVID w hen the int erfac e is in general mod e. IC switchport mode Conf igures the VLAN membership mode of a port.[...]

  • Page 92

    92 Command G roups V oice VLAN 802.1x Comma nd Descriptio n Mode* voic e vlan Enables th e voice VLAN cap ability on th e swit ch. GG voic e vlan Enables th e voice VLAN cap ability on th e interfa ce IC voic e vlan data prior ity T rusts or not tr usts the dat a traffic ar riving on the voice VLAN port. IC show voice vl an Displays various propert[...]

  • Page 93

    Command Grou ps 93 dot1x ti meout se rver- timeou t Sets th e number of sec onds the switc h waits for a response from th e authen tica tion se rver be fo re re s e n d i n g t h e r e q u e s t . IC dot1x timeout su pp- timeou t Sets th e number of sec onds the switc h waits for a res p onse to an EAP -request frame from the client before retransm[...]

  • Page 94

    94 Command G roups Layer 3 Commands ARP (IPv4) Comma nd Descriptio n Mode* arp Creat e s an Addr ess Resolution P rotocol (ARP) entry . GC arp cachesize Configu res the maximum number of entri es in the ARP cach e. GC arp dynami crenew Enables the ARP componen t to auto matical ly renew dynamic ARP entri es when they age out . GC arp purge Causes t[...]

  • Page 95

    Command Grou ps 95 DHCP and BOOTP Relay (IP v4) DHCPv6 Comman d Descriptio n Mode* bootpdhcprelay cidridoptmode Enables the circuit ID option and r emote agent ID mode for BootP/DHCP Relay on the system. GC bootpdhcprelay maxhopc ount Configures the maximum allowable relay agent hops for BootP/DHCP Relay on the system. GC bootpdhcprelay minwaitt im[...]

  • Page 96

    96 Command G roups DVMRP service dhcpv6 Enables DHCPv6 con figura tion on t he router . GC show ipv6 dhcp Display s the DHCP v6 server nam e and statu s. PE show ipv6 dhcp binding Dis plays the conf igured DHCP pool. PE show ipv6 dhcp interface Displays DHCPv6 information for all relevant inter faces or a specif ied inte rface. UE show ipv6 dhcp po[...]

  • Page 97

    Command Grou ps 97 IGMP Comman d Descri ption Mode* ip ig mp Sets the ad ministrat ive mod e of IGM P in the syst em to ac tive. GC ip igmp last-member-query- count Sets the nu mber of Group-Specif ic Querie s sent befo re the router assumes th at there are no l ocal me mbers on the inte rface. IC ip igmp last-member-query- interva l Configures the[...]

  • Page 98

    98 Command G roups IGMP Proxy IP He lper show ip igmp int erface membership Displ ays the list of interfac es that have r egister ed in t he multic ast gro up. PE show ip igmp int e rface stats Displays the IGMP st atistical information for the in terface . PE *NOTE: F or the me anin g of eac h Mode abbrevi ation , see "M ode T ypes" on p[...]

  • Page 99

    Command Grou ps 99 IP Routing ip helper e n able Enables r e lay of UDP pack ets. GC show ip helper -addre ss Displays t he IP helper ad dres s configuration . PE show ip helper s tatistics Displays the number of DHCP and other UDP packets processed and relayed by the UDP relay agent. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see &q[...]

  • Page 100

    100 Command G roups IPv6 Mult icast show ip rou te pr efer ences Dis plays det ailed i nforma tion abo ut the route preferences. PE show ip route sum mar y Shows th e number of all rout es, in cluding best and non- best rout es. PE sho w ip stats Displays IP st atistica l information UE *NOTE: F or the me anin g of eac h Mode abbrevi ation , see &q[...]

  • Page 101

    Command Grou ps 101 IPv6 Routin g ipv6 pimsm spt-thr eshold Config ures the Data Thre shold ra te for the last hop router to switc h to th e shorte st pat h. GC ipv6 pi msm s sm D efin es the Source Sp ecific Mu ltica st ( SSM) range of multicast addresses. GC show ipv6 pimsm Displays global st atus of IPv6 PIMSM and its IPv6 routing int erfaces. P[...]

  • Page 102

    102 Command G roups ipv6 host Define s stat ic host na me-to- i pv6 a ddress mapping in the host cache. GC ipv6 mld l ast-member- query-c ount Sets t he numbe r of lis tener-specific quer ies s ent before the router as sumes t hat th ere are no local memb ers on the in terface . IC (VLA N) ipv6 mld l ast-member- query-in terval Sets th e last memb [...]

  • Page 103

    Command Grou ps 103 ipv6 nd ra-inter val Sets th e transmi ssion int erval betwe en rout er advertisements. IC ipv6 nd ra-li fetime Sets th e value that is place d in the Route r Lifetime field of the ro uter advertis ements sent from the int erface. IC ipv6 nd reachable-ti me Sets th e router ad vertis ement t ime to con sider a neigh bor re achab[...]

  • Page 104

    104 Command G roups show ipv6 mld-proxy groups Displays information abou t multicast grou ps that the MLD Proxy reported. PE show ipv6 mld-proxy groups detai l Displays information abou t multicast grou ps that MLD Proxy reported. PE show ipv6 mld-proxy inter face Display s a detailed list of th e host int erface status parameters. PE show ipv6 mld[...]

  • Page 105

    Command Grou ps 105 Loopback Interface Multic ast Comman d Descriptio n Mode* interface loopb ack Ent ers the Inte rface Loopback configuration mode. GC show interface loopback Displays information about configured loopback interface s. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Comman d Descr[...]

  • Page 106

    106 Command G roups ip pimsm rp-address Statically configures the RP address for one or more multicast groups. GC ip pimsm rp-candidate Configu res the router to advertise itself as a PIM ca ndidate rende zvous poin t (RP) t o the bootstrap router (BSR). IC ip pimsm spt-threshold Configures the Data Threshold rate for the last hop router to switc h[...]

  • Page 107

    Command Grou ps 107 OSPF show ip pimsm rp mapping Displays al l group-to-RP mappings of whic h the route r is awar e (either conf igure d or learned from the bootstrap router). PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Command De scrip tio n Mode* area def ault-co st Configures the monetary d[...]

  • Page 108

    108 Command G roups ar ea virtual -link dead- inter val Configures the d ead interval for th e OSPF virtu al inte rface on the vir tual inte rface ide ntifie d by area-id and ne ighbo r router . ROSPF ar ea virtual -link hello - inter val Conf igur es the hell o inte rval for th e OSPF virtu al in terface o n the v irtual in terfac e identi fied by[...]

  • Page 109

    Command Grou ps 109 ip ospf c ost Config ures the co st on an OSPF int e rface. IC ip ospf de ad-inte rval Sets the OSPF d ead inte rval for th e speci fied interfa ce. IC ip ospf hell o-inter val Sets th e OSPF he llo in terval for the spe cified interfa ce. IC ip ospf mtu-igno re Disables OSPF maximum transmission unit (MTU) m ismatch detec tion [...]

  • Page 110

    110 Command G roups passive- interf ace (r outer mode) Sets the in terf ace or tu nnel as pass ive. R OSPF redistribute Configur es OSPF protocol to allow redistribution of routes fr om the spe cified so urce protocol/routers. ROSPF rou ter -id Sets a 4-dig it dotted -decima l number unique ly iden tifying the rou ter OSPF I D. ROSPF router ospf En[...]

  • Page 111

    Command Grou ps 111 OSPFv3 show ip ospf vi rt ual-link Di s plays th e OSPF Virtual Int erface in formation for a specific ar ea and neighbor . PE show ip ospf vi rt ual-link brief Displays the OSPF Virtual Interface informati on for a ll ar eas in th e system . PE timer s spf Confi gures the S PF de lay and hold time. ROS PF trapflags Enables OSPF[...]

  • Page 112

    112 Command G roups ar ea virt ual-link Cr eates t he OSPF virtual interf ace for the specifi ed areaid and neigh bor . ROSV3 ar ea virtual -link dead- inter val Configures the d ead interval for th e OSPF virtu al inte rface on the vir tual inte rface ide ntifie d by areai d and neigh bor . ROSV3 ar ea virtual -link hello - inter val Conf igur es [...]

  • Page 113

    Command Grou ps 113 ipv6 ospf mtu-ignore Dis ables OSPF maximum transmission unit (MTU) m ismatch detec tion . IC ipv6 os pf ne twork Chang es t he d efault OSPF net work type for the interfa ce. IC ipv6 ospf pri ority Sets the OSPF prio rity fo r the spe cified r outer interfa ce. IC ipv6 os pf retran smit- interva l Sets the OSPF retran smit inte[...]

  • Page 114

    114 Command G roups PIM-DM show ipv6 ospf inte rface Dis plays the info rmation fo r the IFO ob ject or virtual inte rface table s. PE show ipv6 ospf interface brief Displays brief information for the IFO object or virtual inte rface table s. PE show ipv6 ospf interface stats Displays the stat istic s for a spec ific inte rface . UE show ipv6 ospf [...]

  • Page 115

    Command Grou ps 115 PIM-SM show ip pimd m interface stats Displ ays th e stati stical infor matio n for PIM- DM on the sp ecifie d interfa ce. UE show ip pimd m n eighbor Displ ays the neighbor informati on for PIM-DM on th e specif ied int erface. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Co[...]

  • Page 116

    116 Command G roups Router Di scovery Pr otocol show ip pimsm Displays th e system -wide informati on for PIM- SM. PE show ip pimsm i nterface Di splays interface information for PIM-SM on the speci fie d interfa ce. PE show ip pimsm neighbor Displays neighbor information for PIM-SM on the speci fie d interfa ce. PE show ip p imsm rphash Dis plays [...]

  • Page 117

    Command Grou ps 117 Routing Inf ormation Proto col Command Descript ion Mode* auto-summary Enables the RIP auto-su mmarization mode. RIP defaul t-inf orma tion origin ate Control s the adver tiseme nt of defau lt route s. RIP default-m etric Sets a d efault for the me tric of di stribu ted routes. RIP dis tance rip Sets th e route prefe rence value[...]

  • Page 118

    118 Command G roups T unnel Inte rface Virtual LAN Rou ting V irtual Router Redund ancy show ip r ip inte rface bri ef Displ ay s general inf ormatio n for each RIP interfa ce. PE spli t-horiz on Set s the RIP split ho rizon mod e. RIP *NOTE: F or the me anin g of eac h Mode abbrevi ation , see "M ode T ypes" on pa ge 64. Comma nd Des cri[...]

  • Page 119

    Command Grou ps 119 ip vrrp authen ticati on Sets the autho rizatio n deta ils valu e for the virtual router conf igured on a spe cifie d int erface. IC ip vrrp ip Se ts the virtual router IP address value for an int erface. IC ip vrrp mode Enabl es the virtu al router configured on an interface. Enabling the s t atus field starts a virtual rout er[...]

  • Page 120

    120 Command G roups Utility Commands Auto Config Captive Por tal Comma nd Descriptio n Mode* boot host auto-save Enables/dis ables automaticall y saving the downlo aded confi gurat ion o n the sw itch. GC boot h ost dhcp Enab les/disables Auto C onfig on t he switch. GC boot host retr y-coun t Se t the nu mber of attempt s to down load a config ura[...]

  • Page 121

    Command Grou ps 121 interface Associates an interface with a captive portal config uratio n. CPI locale Associates an interface with a capt ive portal config uratio n. CPI name Configures the name for a captive portal config uratio n. CPI protocol Configures the prot ocol mode for a captive portal configuration. CPI redirect Enables th e redirect m[...]

  • Page 122

    122 Command G roups show c aptiv e-portal use r Dis plays all con fig ured users o r a spec ific u ser in the captive port al local user databas e. PE user idl e-timeou t Sets the sess ion idle ti meout va lue for a captive portal user . CP user name Mod ifies th e us er name for a local c aptive po rtal user . CP user pass word Creates a lo cal u [...]

  • Page 123

    Command Grou ps 123 Clock Comman d Descriptio n Mode* show clock Displays the time and date of t he system clock. PE show sntp con figurat ion Displays the SNT P config uratio n. PE show sntp st atus Di splay s the SN TP stat us. PE sntp aut hentica te Se t to require auth entic ation fo r received NTP traffic f rom serve rs. GC snt p auth enticati[...]

  • Page 124

    124 Command G roups Configura tion and Image File s Comma nd Descriptio n Mode* boot syste m Spec ifies the sy stem image th at t he swit ch loa ds at startup. PE clear config Restores swi tch to defa ult configu ration PE copy Copies fi les fr om a sou rce t o a dest inati on. PE delete backup-i mage Deletes a file from a flas h memory . PE delete[...]

  • Page 125

    Command Grou ps 125 Denial o f Service Comman d Descriptio n Mode* dos-control firstfr ag Enables Min imum TCP Header Size Denial of Service protection. GC dos-control icmp Enables Maximum ICMP P acket Size De nial of Service protections. GC dos-control l4port Enables L4 P ort Denial of Service protection. GC dos-c ontrol sipd ip Enables S ource IP[...]

  • Page 126

    126 Command G roups Line Management ACL Comma nd Descriptio n Mode* ex e c-timeou t Configu res the in terval that th e syst em wait s for user inpu t. LC histo ry Enables the command his tory fu nction . LC histor y size Changes t he comman d history b uffer size f or a parti cular line . LC line Iden tifies a specifi c line for config uration a n[...]

  • Page 127

    Command Grou ps 127 Password Mana gement PHY Diagnosti cs Comman d Descriptio n Mode* passwords aging Impleme nts aging on th e passwords such that users a re required to change passwords when they e xpir e. GC passwords his tory Enables the admi nistr ator to se t the nu mber of pre vious pass words t hat are stored to ensur e that users d o not r[...]

  • Page 128

    128 Command G roups Power Over Ethernet (PoE ) RMON Command D escri ption Mode* power inli ne Enables /disa bles the a bility of the port to deli ver p ower . IC (Ether net ) power inli ne leg acy Enables /dis ables th e abilit y of the s witc h to support legacy Ethernet powered devices. GC power inline powered- devi ce Add s a comme nt or de scri[...]

  • Page 129

    Command Grou ps 129 Serviceabi lity T racing show rmon alarm-table Di splays the al arms summary table. UE show rmon collection hist ory Displays the r equested group of statistics. UE show rmon eve nts Disp lays the R MON even t tabl e. UE show rmon hi stor y Di splay s RMO N Ether net Stati stics hist ory . UE show rmon log Displ ays th e RMON l [...]

  • Page 130

    130 Command G roups debug ip pimsm T races PIMSM packet reception and tran smis si on. PE debug ip vrrp Enables VRRP debug protocol messages. PE debug ipv6 mcach e T races MDA T Av6 packet r ec eption and tran smis si on. PE debug ipv6 mld T races MLD packet recept ion and tran smission. PE debug ipv6 pimdm T races PIMDMv6 packet reception and tran[...]

  • Page 131

    Command Grou ps 131 sFlow SNMP Comman d Descriptio n Mode* sflow dest inat ion Conf igures sFl ow co llec tor pa ramet ers (owne r string, r eceiver timeout, ip ad dress, a nd port). GC sflow polling Enabl es a new sflow poller instance for the data source if rcvr_idx is val id. GC sflow poll ing ( Inter face Mode) Enable a new sflow poller instanc[...]

  • Page 132

    132 Command G roups SSH snmp-server communi ty Se ts up the co mmunity access st ring to permit access to SNMP protocol. GC snmp-server communi ty- group Maps SNMP v1 an d v2 sec urity mode ls to the group name. GC snmp-server contact Se t s up a system conta ct (sysContact) string . GC snmp-server en able traps Enables SNMP tr aps globally or en a[...]

  • Page 133

    Command Grou ps 133 Syslog ip ssh pu bkey-auth Enabl es public key au thentic ation for incomin g SSH se ssions. GC ip ssh server Enables th e switch to b e configur ed from a SSH server c onnection. GC key-string Manually specif ies a SSH public key . SK show crypto key mypubk ey Displays its own SSH public keys stored on the switch . PE show cryp[...]

  • Page 134

    134 Command G roups System Management logg ing file Limits sy slog messag es sent to t he loggi ng file based on severity . GC logging on Controls error messages loggin g. GC port Spe cifies the port number of s yslog messages. L show logg ing Displays t he state of logging and the syslog messag es stor ed in the inter nal buffe r . PE show logg in[...]

  • Page 135

    Command Grou ps 135 no cut-t hrough mod e D isable s the cut-t hrough mo de on the switch . G C no standby Removes standb y configuration in the st ac k. SG ping Sends ICMP echo reque st pack ets to another node on th e netw ork. UE reload R e loads the operating s ystem. PE set de scrip tion Associa tes a text d escrip tion with a sw itch in the s[...]

  • Page 136

    136 Command G roups T elnet Se rver show versi on Disp lays t he syst em ve rsio n inform atio n. U E stack Sets the mode to Stack Global Con figu ration mod e. GC stack-port Sets the mode to Stack Global Configuration mode t o configure St ack ports a s either Stacking ports or as Ethernet ports. GC standb y Conf igure s the stand by in the s tack[...]

  • Page 137

    Command Grou ps 137 Use r Inte rfa ce W eb Server Comman d Descriptio n Mode* enable E nters the privileg ed EXE C mode. UE end Gets th e CLI user contr ol back to th e privileg ed execution mo de or use r execution mod e. Any exit(confi guration ) Ex its any con figurati on mod e to the previou sly highes t mode in th e CLI mode hier archy . (All)[...]

  • Page 138

    138 Command G roups ip https se rver Enabl es the sw itch t o be config ured from a secur ed bro wser . GC key-generate Specif ies the key-ge nerate. CC location Spe cifies the location or city name. C C organization-unit Specif ies the or g anization-unit or department name CC show crypto ce rtifica te mycertificate Displays t he SSL certificate s[...]

  • Page 139

    Using t he CLI 139 2 Using the CLI Introduction This chap ter descri bes the ba sics of enter ing and editi ng the De ll P owerConnect 62xx Series Command Line Interface (CLI) commands and defines the command hierarchy . It also explains h ow to activate the CLI and implement its major functions. This chapter covers the following top ics: • E nte[...]

  • Page 140

    140 Using the CLI • P artial keyword lookup — A command is incomplet e and the <?> k ey is entered in place of a parameter . Th e match ed param eters for this command ar e display ed. The followi n g featur es and conventions ar e applicable to CL I command entry and editing: • H istory B uffer • Negati ng Commands • S how Com ma n[...]

  • Page 141

    Using t he CLI 141 F or information about the command syntax for configuring the command history buffer , see the histo ry-size command in the Line comm and mode chapter of this guide. Negating Commands F or m any co mmands, the pr efi x keyw ord no i s entered to cancel the effect of a command or re set the configuration to the default value. All [...]

  • Page 142

    142 Using the CLI Operating on Multiple Objects (Ran ge) The CLI all ows the user to operate on the s et of objec ts at the sam e time. The guidelines are as follows for range operation: • Operations on objects with four or more ins tances support the range operation. •T h e rang e key word is used to identify the r ange of objects on wh ich to[...]

  • Page 143

    Using t he CLI 143 • Th e range m ay be specified in the following manne r: (#-#) — a range from a particular in stance to a nothe r instance (inclu sive). F or e xample, 1/g1 -g10 indicat es that the oper ation appli es to the gigabit Ethe rnet ports 1 to 1 0 on unit 1. (#, #, #) — a list of non-consecut iv e instances . F or example, (1 /g1[...]

  • Page 144

    144 Using the CLI CLI Command Notati on Conventions When entering commands there are ce rtain command-entry notat ions which apply to all c ommands . The fo llowin g table de scribe s th ese conve ntions as they are used in syntax definiti ons. Interf ace Naming Conventions The conventions for naming interfac es in CLI commands are as follows: • [...]

  • Page 145

    Using t he CLI 145 CLI Command Modes Since the set of CLI commands is very l arge, the CLI is s t ructur ed as a command-tree hierarchy , whe re r elated command s ets are assigned to command modes for easier access. At eac h level, only the commands r elated to that le vel are avail able to the user and o nly those commands ar e shown in the co nt[...]

  • Page 146

    146 Using the CLI The P rivileged EXEC mode provides access to commands t hat can not be ex ecuted i n the User EXEC mode and permi ts access to the switch Co nfig ura tio n mo de. The Global Configuration mode manages switch configuration on a global level. F o r specific inte rface configur ations, command modes e xist at a su b- level. Entering [...]

  • Page 147

    Using t he CLI 147 Global Co nfiguration Mode Global Configuration co m mands apply to featur es that affect the system as a whole, rather than just a specific interface. The Privileged EXEC mode command co nfigure is used to enter the Global Configuration mode. console(config)# Interfa ce and Other Specific Conf iguration Modes Interface configura[...]

  • Page 148

    148 Using the CLI • Po l i c y - m a p — Use the policy-map command to access t h e QoS policy map configura tion mod e to configure the Q oS pol icy map. • P olicy Class — Use the class command to access t h e QoS P olicy-cl a ss mod e to attach or r e mov e a DiffServ cl ass from a policy and to configu re the QoS policy class. • Class-[...]

  • Page 149

    Using t he CLI 149 • MAC Access-List — Conf igures conditions requ ired to allow traffic based on MAC addr esses. The Global Configur ation mode command mac- access-list is us ed to ente r th e M AC A ccess-List con figurat ion mo de. • T ACACS — C onfigures the parameters for the T ACACS server . • Radiu s — C onfigures the parameters [...]

  • Page 150

    150 Using the CLI [ # | >] — The # sign is used to indicate that the system is in the P rivileged EXEC mode. The > symbol indicates that th e system is in the User EXEC mode, which is a r ead-only mode in which the system does not allow configuration. Navigatin g CLI Command Modes The following table describes how to navigate through the CL[...]

  • Page 151

    Using t he CLI 151 Line Interface F rom Global Configurat ion mode, use the line command. console(config- line)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode. Management Access-L ist F rom Global Configurat ion mode, use the manage ment access-list command. con[...]

  • Page 152

    152 Using the CLI MAC Access List F rom Global Conf igurati on mode, use th e mac access-list command. console(config- mac-access- list)# To e x i t t o G l o b a l Confi guratio n mode, us e the exi t c ommand, or press <Ctrl>+< Z> to Privileg ed EXEC mode. SSH P u blic Key- Chain F rom Global Conf igurati on mode, use th e crypto ke y[...]

  • Page 153

    Using t he CLI 153 Radius F rom Global Configurat ion mode, use the radius-se rve r host command. console(config- radius)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode. SNMP Host Configuration F rom Global Configurat ion mode, use the snmp-ser ver command. cons[...]

  • Page 154

    154 Using the CLI Crypto Certificate Gener ation F rom Global Conf igurati on mode, use th e crypto certific ate number genera te command. console(config- crypto-cert)# To e x i t t o G l o b a l Confi guratio n mode, us e the exi t c ommand, or press <Ctrl>+< Z> to Privileg ed EXEC mode. Crypto Certificate Request F rom P riv ileged EX[...]

  • Page 155

    Using t he CLI 155 MST F rom Global Configurat ion mode, use the spanning-t ree mst configuration command. console(config- mst)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode. VLAN Config F rom Global Configurat ion mode, use the vlan databas e co mmand. console[...]

  • Page 156

    156 Using the CLI Router OSPFv3 Config F rom Global Conf igurati on mode, use th e ipv6 router ospf command. console(config- rtr)# To e x i t t o G l o b a l Confi guratio n mode, us e the exi t c ommand, or press <Ctrl>+< Z> to Privileg ed EXEC mode IPv6 DHCP P ool Mode F rom Global Conf igurati on mode, use th e ipv6 dhcp pool command[...]

  • Page 157

    Using t he CLI 157 VLAN F rom Global Configurat ion mode, use the interface vlan command. console(config- if-vlann)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode. T unnel From G lobal Configurat ion mode, use the inte rface t unnel command. console(config- tunn[...]

  • Page 158

    158 Using the CLI Starting the CLI T o begin running the CLI, perform the following steps: NOTE: This procedu re is for u se on the console line onl y. NOTE: The Easy Setup Wi zard is avai lable on ly when the sys tem is i n defa ult s tate with no user conf igu ratio n saved pr evio usly. 1 Sta rt the swit ch a nd wait until the s tartu p p roce d[...]

  • Page 159

    Using t he CLI 159 • Enables CLI log in and HTTP access to use the local auth entication se tting only , whi ch allows user account acces s via these managem e nt int erfaces. The user m ay return later to configure Radius or T A CACS+. • Sets up t he IP address for the management VLAN or enables supp ort for DHCP to conf igure the manag ement [...]

  • Page 160

    160 Using the CLI Since a switch may be powered on in the field without a serial connection, the switch wa its 60 seconds for the user to res pond to the setu p wizard ques tion in in st ance s whe re no co nfi gur at ion file s exist. If ther e is no response, the switch continues normal operation using the defaul t factory configuration. While wa[...]

  • Page 161

    Using t he CLI 161 Figure 2-1 . Easy Setu p Wiza rd T ransfer to CLI mode Copy to Cong DHCP? Request user name, password No Ye s Does th e u ser wa nt to use setup wizard ? No T ransfer to CLI mode No Did the user prev iously save a startu p conguration? Y es T ransfer to C LI mode Ye s Is SNMP Manageme nt Requ i red? Ye s Ye s Save Setup? Di[...]

  • Page 162

    162 Using the CLI Examp le Session This sect io n desc rib es an Easy Setu p Wizard sessi on. Refer to th e sta te diagram in the previous sect ion for gene ral flow . The following values used by the example session are not the only possib le ones: • IP address for th e ma nagemen t VLAN is 192.16 8.2.1:2 55.255.25 5.0. • The user na me is adm[...]

  • Page 163

    Using t he CLI 163 Welcome to Dell Easy Setup Wizard The Setup Wizard guides you through the initial switch configuration, and gets you up and running as quickly as possible. You can skip the setup wizard, and enter CLI mode to manually configure the switch. You must respond to the next question to run the setup wizard within 60 seconds, otherwise [...]

  • Page 164

    164 Using the CLI {public}: public<Enter> Please enter the IP address of the Management System (A.B.C.D) or wildcard (0.0.0.0) to manage from any Management Station. {0.0.0.0}: 192.168.2.1<Enter> Step 2: Now we need to setup your initial privilege (Level 15) user account. This account is used to login to the CLI and Web interface. You m[...]

  • Page 165

    Using t he CLI 165 Please enter the IP address of the device (A.B.C.D) or enter "DHCP" (without the quotes) to automatically request an IP address from the network DHCP server. 192.168.2.1<Enter> Please enter the IP subnet mask (A.B.C.D or /nn): 255.255.255.0<Enter> Step 4: Finally, set up the gateway. Please enter the IP addr[...]

  • Page 166

    166 Using the CLI Unit 1 - Waiting to select management unit)> Applying configuration, please wait ... Welcome to Dell Easy Setup Wizard The Setup Wizard guides you through the initial switch configuration, and gets you up and running as quickly as possible. You can skip the setup wizard, and enter CLI mode to manually configure the switch. You [...]

  • Page 167

    Using t he CLI 167 Please enter the user name. [root]:root Please enter the user password: Please reenter the user password: Step 3: Next, an IP address is setup. The IP address is defined on the default VLAN (VLAN #1), of which all ports are members. This is the IP address you use to access the CLI, Web interface, or SNMP interface for the switch.[...]

  • Page 168

    168 Using the CLI Do you want to select the operational mode as Simple Mode? [Y/N] n Step 6: If the information is correct, please select (Y) to save the configuration, and copy to the start-up configuration file. If the information is incorrect, select (N) to discard configuration and restart the wizard: [Y/N][...]

  • Page 169

    Using t he CLI 169 Using CLI Functio ns and T ools The CLI has been des igned to manage the switch’s configuration file system and to manage sw itch security . A numbe r of resident tools exis t to support these and other functions. Configura tion Management All managed sys tems have softwar e images and datab ases that must be configured, backed[...]

  • Page 170

    170 Using the CLI configuration file. In this cas e, if the local configuration file does not exist, then it is created by the command. If it does exist, it is overwri tten. If there is not enough space on the local file system to accommodate the file, an error is flagged. Refer to the copy command description in the Layer 2 commands section of the[...]

  • Page 171

    Using t he CLI 171 CLI prevents the user from ac cide ntally copying a configuration image onto a softwar e image and vice vers a. Management I nterface Sec urity This section describes the minimum set of management interface security measures implemented by the CLI. Management interface security consists of user account management, user a ccess co[...]

  • Page 172

    172 Using the CLI • Th e user pa ssword is saved internal ly in en crypted form at and never appear s in c lear te xt anyw here on the CLI . • The CLI supports T ACACS+ and Ra dius authenti cation serve rs. • The CLI all ows the user t o confi gure pri mary and second ary authe nt icat ion se rvers . If th e prim ary auth entic atio n serv er[...]

  • Page 173

    Using t he CLI 173 • If a uth en ticatio n se rvers a re used , th e user can iden tify a t leas t tw o remo te servers (the user ma y choose to configu re only one server) and wh at protocol to use with the server , T ACACS+ or Radius. O ne of the servers is primary and the other is the secondary server (the u s er is not r equired to specify a [...]

  • Page 174

    174 Using the CLI • D enie d at temp ts b y extern al m ana ge ment system to access the system. The security log r ecord contai ns the following information: • The user name, if available, or t he protocol being accessed if the event is rel ated to a r emote mana g ement sy stem. • The IP a ddress from which the user is connecting or the IP [...]

  • Page 175

    Using t he CLI 175 T erminal Paging The terminal width and length for CLI displays is 79 char acters and 25 lines, respectively . The length setting is used to control the numb er of lines the CLI will display b efore it pauses. F or example, t he CLI pauses at 24 li nes and prompts the us er with the -more- prom pt on t he 25t h l ine . T he CL I [...]

  • Page 176

    176 Using the CLI total bytes in files: 19,656 Kb # of lost chains: 0 total bytes in lost chains: 0 volume descriptor ptr (pVolDesc): 0x38ff9d0 XBD device block I/O handle: 0x10001 auto disk check on mount: DOS_CHK_REPAIR |DOS_CHK_VERB_2 volume write mode: copyback (DOS_WRITE) max # of simultaneously open files: 52 file descriptors in use: 0 # of d[...]

  • Page 177

    Using t he CLI 177 - first cluster is in sector # 136 - Update last access date for open-rea d-close = FALSE - directory structure: VFAT - file name format: 8-bit (extended-ASCII) - root dir start sector: 121 - # of sectors per root: 15 - max # of entries in root: 240 FAT handler information: ------------------------ - allocation group size: 2 clus[...]

  • Page 178

    178 Using the CLI Adding 0 symbols for standalone. CPU: Motorola E500 : Unknown system version. Processor #0. Memory Size: 0x10000000. BSP version 1.2/0. Created: Jan 4 2010, 03:59:27 ED&R Policy Mode: deployed /DskVol// - disk check in progress ... dosChkLib : CLOCK_REALTIME is being reset to TUE JUN 28 14:29:04 2005 Value obtained from file s[...]

  • Page 179

    Using t he CLI 179 volume descriptor ptr (pVolDesc): 0x348ef70 XBD device block I/O handle: 0x10001 auto disk check on mount: DOS_CHK_REPAIR |DOS_CHK_VERB_2 volume write mode: copyback (DOS_WRITE) max # of simultaneously open files: 52 file descriptors in use: 0 # of different files in use: 0 # of descriptors for deleted files: 0 # of obsolete desc[...]

  • Page 180

    180 Using the CLI - file name format: 8-bit (extended-ASCII) - root dir start sector: 121 - # of sectors per root: 15 - max # of entries in root: 240 FAT handler information: ------------------------ - allocation group size: 2 clusters - free space on volume: 10,852,352 bytes Timebase: 66.666666 MHz, MEM: 266.666664 MHz, PCI: 66.666666 MHz, CPU: 53[...]

  • Page 181

    Using t he CLI 181 <186> JUN 28 14:29:09 0.0.0.0-1 UNKN[268434720]: bootos.c(222) 1 %% Event(0xaaaaaaaa) Instantiating RamCP: as rawFs, device = 0x30001 Formatting RamCP: for DOSFS Instantiating RamCP: as rawFs, device = 0x30001 RamCP:/ - disk check in progress ... RamCP:/ - Volume is OK total # of clusters: 1,975 # of free clusters: 1,973 # [...]

  • Page 182

    182 Using the CLI gets you up and running as quickly as possible. You can skip the setup wizard, and enter CLI mode to manually configure the switch. You must respond to the next question to run the setup wizard within 60 seconds, otherwise the system will continue with normal operation using the default system configuration.Note: You can exit the [...]

  • Page 183

    Using t he CLI 183 Management Standby Preconfig Plugged-in Switch Code SW Status Status Model ID Model ID Status Version ---- --------- -------- ---------- ------------ --------- -------- 1 Mgmt Sw PC6224 PCT6224 OK 3.2.1.3 console> Boot Utility Menu If a user is connected through the seri al interface during t he boot sequence, pressing the <[...]

  • Page 184

    184 Using the CLI 8 - Delete backup image 9 - Reset the system 10 - Restore Configuration to factory defaults (delete config files) 11 - Activate Backup Image 12 - Password Recovery Procedure The boot utility menu pr ovides the following: • Option to set b aud rate of the serial port. [Boot Menu]2 Select baud rate: 1 - 1200 2 - 2400 3 - 4800 4 - [...]

  • Page 185

    Using t he CLI 185 • Option to loa d new operational code using XMODEM [Boot Menu] 4 Ready to receive the file with XMODEM/CRC.... Ready to RECEIVE File xcode.bin in binary mode Send several Control-X characters to cancel before transfer starts. • Option to displa y Boot Image Inform ation. Th is option ca n be u sed to dete rmine which im age [...]

  • Page 186

    186 Using the CLI Operational Compression flag...................2 (lzma) Boot Code Version..............................1 Boot Code Size.................................0x100000 (1048576) Boot Code Offset...............................0x79027c (7930492) Boot Code FLASH flag...........................0 Boot Code CRC.................................[...]

  • Page 187

    Using t he CLI 187 Validating image2....OK Extracting boot code from image...CRC valid Erasing Boot Flash.....^^^^Done. Wrote 0x10000 bytes. Wrote 0x20000 bytes. Wrote 0x30000 bytes. Wrote 0x40000 bytes. Wrote 0x50000 bytes. Wrote 0x60000 bytes. Wrote 0x70000 bytes. Wrote 0x80000 bytes. Wrote 0x90000 bytes. Wrote 0xa0000 bytes. Wrote 0xb0000 bytes.[...]

  • Page 188

    188 Using the CLI • Option to Clear All Fl ash and Res et the System t o Default Setting. User action w ill be confirm ed with a Y/N qu estion before executing the command. Th e following is the procedure to reset the system through Boot Menu: [Boot Menu] 9 Are you SURE you want to reset the system? (y/n):y Boot code...... Boot Menu Version: 3.2.[...]

  • Page 189

    Using t he CLI 189 • Option to use the password recovery procedure. It allows the switch to boot one time witho ut pr om pting for a console password. Note that the ‘enable’ password is not prompted for in this mode. [Boot Menu] 12 Monitoring T raps from CLI It is poss ible to connect to the CLI se ssion and monitor the events or faults that [...]

  • Page 190

    190 Using the CLI[...]

  • Page 191

    AAA Command s 191 3 AAA Commands This chapter exp lains the following commands: • aaa authen tication dot1 x • aaa authen tication enab le • aaa authen tication logi n • a aa aut hor ization ne twork de fau lt radi us • enable au thentication • ena ble password • ip http authe ntica tion • i p http s au then ticat ion • login auth[...]

  • Page 192

    192 AAA Command s aaa authe ntication dot1x Use the aaa authe nticati on dot1x command in Global Configuration mode to create an authen ticat ion login lis t. Syntax aaa auth enticati on dot1 x default method1 no aaa a uthenti cation do t1x def ault • method1 — A t le ast on e from th e follow ing table : Default Conf iguration No authe nticati[...]

  • Page 193

    AAA Command s 193 aaa authe ntication enable Use the aaa aut hentication enable command in Global Configuration mode to set authenti cation for access ing hig her privile ge level s. T o r eturn to the default configuration, use the no form of this command. Syntax aaa authen tication enable { default | list-name } method1 [ method2 ...] no aaa aut [...]

  • Page 194

    194 AAA Command s Create a list by entering the aaa aut h enticat ion enable lis t-n am e m et ho d command where list-name is any chara ct er string used to name this l ist. The method argument identifies the list of method s that the authe nticati on algorithm tr ies in the given s e quence. The additiona l metho ds of authe nticati on are used o[...]

  • Page 195

    AAA Command s 195 • method1 [ method2 ...] — S pecify at least one from the followin g table: Default Conf iguration The default login lists are "defaultList" and "net workList." "defa ultList" is used by the console and only contains the method none . "networ kList" is used by teln e t and SSH and only c[...]

  • Page 196

    196 AAA Command s console(config)# aaa authentication login default radius local enable none aaa autho rization network default ra dius Use the aaa authoriz ation netwo rk default radius command in Globa l Configuration mo de to enab le the s w itch to acc ept VLAN assignment by the RA D I U S s e r ve r . Syntax aaa authoriz ation network defaul t[...]

  • Page 197

    AAA Command s 197 enable au thentication Use the enabl e authe nticat ion command in Li n e Configuration mode to specif y the au thentic ation met hod li st when a ccessing a higher privile ge level from a remot e telnet or cons ole. T o re turn to t he defa ult specifi ed by th e enab le auth ent icati on command, use the no f or m o f t hi s c o[...]

  • Page 198

    198 AAA Command s enable pa ssword Use the enable password command in Global Conf iguration mode to set a lo c a l p a s s w o rd t o c o n t r o l a c ce s s t o t h e p ri v i l e ge d E X E C m o d e . T o re m o v e t h e password re q uirement, use the no form of this command. Syntax enable password passw ord [ encrypted ] no enable passwo rd [...]

  • Page 199

    AAA Command s 199 ip http authentication Use the ip ht tp au thentica tion command in Global Configuration mode to speci fy authen ticatio n methods for http server users. T o r eturn to the def ault, use the no form of this command. Syntax ip ht tp authen ticat ion method1 [ method2 ...] no ip h ttp auth entica tion • method1 [ method2 ...] — [...]

  • Page 200

    200 AAA Command s ip https authentication Use the ip ht tps authe ntica tion command in Global Configuration mode to speci fy authe nticati on method s for htt ps server users. T o r eturn to the de fault configuration, use the no form of this co mmand. Syntax ip http s authen ticatio n method1 [ method2 ...] no ip http s authe ntica tion • metho[...]

  • Page 201

    AAA Command s 201 login authentication Use the login a uthent icati on command in Line Configuration mode to specify the login au thenticat ion metho d list for a line (c onsole, telne t, or SSH). T o return to the defa ult specif ied by the authentica tion login command, use the no form of this c o mmand. Syntax login auth enticati on { defa ult |[...]

  • Page 202

    202 AAA Command s passwor d (Line Configuration) Use the password command in Line Configuration mode to specify a passwor d on a line. T o remove t he passwor d, use the no fo rm of thi s command. Syntax password passw ord [ encrypted ] no password • password — P asswor d for this leve l. (Range: 8 - 64 charact ers) • encrypted — Encrypted [...]

  • Page 203

    AAA Command s 203 Default Conf iguration There is no default configuration for this command. Command Mode User EXEC mode User Guideli nes This command has no user guidelines. Example The following example shows the prompt sequence for ex ecut ing the password command. console>password Enter old password:******** Enter new password:******** Confi[...]

  • Page 204

    204 AAA Command s Example The following example displays the aut hentication configuration. console#show authentication methods Login Authentication Method Lists --------------------------------- defaultList : local Enable Authentication Method Lists ---------------------------------- enableList : local Line Login Method List Enable Method List ---[...]

  • Page 205

    AAA Command s 205 show users accounts Use the show users accounts command in P rivileged EXEC mode to display information about the lo cal user data base. Syntax show use rs accounts [l ong] Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Exam[...]

  • Page 206

    206 AAA Command s show us ers log in-his tor y Use the show users login- history command in Global Co nfiguration mode to display information ab out th e login history of users. Syntax show users login-h istory [long] • name — name of user . (Range : 1-20 characters ) Default Conf iguration This command has no default configuration. Command Mod[...]

  • Page 207

    AAA Command s 207 username Use the us ern ame co mmand in Global Configuration mode to add a new user to the local users database. T o remove a user name use the no form of this command. Syntax username name password passwo rd [ level level ] [ encrypted ] no us ername name • name — The nam e of the u ser . (Range: 1-20 characters) • password[...]

  • Page 208

    208 AAA Command s[...]

  • Page 209

    ACL Commands 209 4 ACL Commands This chapter exp lains the following commands: • access-list •d e n y | p e r m i t • ip access-group • no ip access-group • mac access-group • mac access-list e xtended • mac access-list e xtended r ename • show ip access-lists • show mac access-li st[...]

  • Page 210

    210 ACL Commands access-list Use the access-list com mand in Global Configuration mode to crea te an Access Control List (A CL) that is identified by the parameter list-name . Syntax access-list std-list-num { deny | permit } { srcip srcmask | every } [ log ] [ assign-queue queue-id ] [ redi rect interface | mirror interface ] access-list ext-li st[...]

  • Page 211

    ACL Commands 211 • assign-queue queue-id — Sp ecifies the particu lar hardware queue for handlin g traffic t hat mat ches the rule. (Ra nge: 0 -6) • mirror interface — A llows th e tra ffic match ing th is rule to be copied to the specified interf ace. • redir ect interface — This pa rame ter allows th e traffic mat ching th is rule to [...]

  • Page 212

    212 ACL Commands Syntax {deny | p ermit} { srcmac srcmacmask | any } { dstmac dstmacmask | any | bpdu} [{ ethertyp ekey | 0x060 0-0xFFFF }] [ vlan eq 0-409 5 ] [ cos 0-7 ] [ secondary-vlan eq 0-409 5 ] [ secondary-cos 0-7 ] [ log ] [ assign-queue queue- id ] [{ mirror | redirect } interface ] • srcmac — V alid so urce MAC addr ess in format xxx[...]

  • Page 213

    ACL Commands 213 Default Conf iguration This command has no default configuration. Command Mode Mac-Access-List Config uration mode User Guideli nes The no form of this co mmand is not supp orted, as the rules within a n ACL cannot be deleted individually . Rather the entire ACL must be deleted and res p ecified. The assign-queue and re direct para[...]

  • Page 214

    214 ACL Commands • seqnum — Pr ecedence for t his interface and direction. A lower sequen ce numb er has higher precedence. R ange: 1 – 42949 67295. Defau lt is 1 . Default Conf iguration This command has no default configuration. Command Mode Global and Interface Co nfiguration User Guidel ines Global mode command configures the A CL on all [...]

  • Page 215

    ACL Commands 215 Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode or Interfac e Configuration (Ethernet, VLAN or Po r t C h a n n e l ) m o d e User Guideli nes An optional sequence number may b e specified to indicate the order of this acces s-list relativ e to th e other acce ss-lis ts alrea[...]

  • Page 216

    216 ACL Commands mac access-list exte nded Use the mac access-list exte nded command in Global Configuration mode to create the MAC A cce ss Control List (ACL) identified by the nam e param eter . Syntax mac access -lis t exte nded name no mac access-list extended name • name — Name of the acc ess list. (Rang e: 1-31 chara cters) Default Conf i[...]

  • Page 217

    ACL Commands 217 mac access-list extende d rename Use the mac ac cess-list extend ed rename command in Global Configuration mode to rename the e xisting MAC Access Control List (ACL ). Syntax mac access-list ext ended rename name newname • name — Exis ting n ame of the a ccess l ist. (R ange: 1 -31 cha racte rs) • newname — New name of the [...]

  • Page 218

    218 ACL Commands show ip ac cess-lists Use the show ip access-lists command in P rivileged EXEC mode to display access lists applied on interfaces an d all rules that ar e defined for the access list s. Syntax show ip access-lists accesslistname • accessl istname — The n ame used to identify the AC L. The range i s 1-31 characte rs. Default Con[...]

  • Page 219

    ACL Commands 219 show mac ac cess-list Use the show m ac access- list c o m m a n d i n Pr i v il e g e d E X E C m o d e t o d i s p l a y a MAC access list and all of the rules that ar e defined for the AC L . Syntax show mac access-list name • name — Identif ies a specific M AC access list to display . Default Conf iguration This command has[...]

  • Page 220

    220 ACL Commands[...]

  • Page 221

    Addre ss T a ble Co mmands 221 5 Address T able Commands This chapter exp lains the following commands: • bridge add ress •b r i d g e a g i n g - t i m e • bri dge multicast add ress • bri dge mu lticast filtering • bri dge mult icast forbidden a ddress • bri dge mult icast forbid den forwa rd-unregister ed • bri dge mu lticast forwa[...]

  • Page 222

    222 Address T able C ommands bridge a ddress Use the bridge address command in Interface Configuration mode to add a static MA C-layer statio n source address to the bridge table. T o delete t he MA C addr es s, us e the no for m o f the bridge address command (using the no form of the command witho ut spec ifying a M AC addr es s deletes a ll stat[...]

  • Page 223

    Addre ss T a ble Co mmands 223 bridge aging-time Use the bridge aging- time command in Global Conf iguration mode to set the ag ing time of the address. T o restore the default, use the no form of the brid ge agin g-t ime command. Syntax brid ge agin g-t ime seconds no bridge ag ing-tim e • seconds — Time is t he num ber of seco nds. (R ange: 1[...]

  • Page 224

    224 Address T able C ommands bridge multicast address { mac-multicast-addr ess | ip-multicast -address } [ add | remove ] { ethernet interface- list | port-cha nnel port-channel-number - list } no bridge multica st address { mac-multicast -address | ip-multicast-addres s } • add — Adds p orts to t he group. If no opt ion is specified , this is [...]

  • Page 225

    Addre ss T a ble Co mmands 225 console(config)#interface vlan 8 console(config-if-vlan8)#bridge multicast address 0100.5e02.0203 add ethernet 1/g1-1/g9, 1/g2 bridge multicast filtering Use the bridge mult icast filtering com mand in Global Configuration mode to enable filtering of Multi cast addresses. T o disabl e filtering of Multicast addres ses[...]

  • Page 226

    226 Address T able C ommands bridge multicast forbidden addres s Use the bridge multicast for bidden address co mmand in Interface Configuration mode t o forbid adding a s pecific Multicast addr ess to spec ific ports. T o retu rn to the system default, use the no form of t his command. If routers exist on the VLAN, do not change the unr e gistered[...]

  • Page 227

    Addre ss T a ble Co mmands 227 Examples In this e xample the M AC addr ess 01:00: 5e:02:02:03 is f orbidden on port 2/ g9 withi n VLAN 8. console(config)#interface vlan 8 console(config-if-vlan8)#bridge multicast address 01:00:5e:02:02:03 console(config-if-vlan8)#bridge multicast forbidden address 01:00:5e:02:02:03 add ethernet 2/g9 bridge multicas[...]

  • Page 228

    228 Address T able C ommands bridge multic ast forward-all Use the bridge mu lticast forward-al l command in Interface Configuration mode to enabl e forwar ding of all Multicas t packets. T o restor e the default, us e the no form o f the bri dge mul ticas t forw ard- all command. Syntax bridge multica s t forward-all no bri dge mu lti cast f orwar[...]

  • Page 229

    Addre ss T a ble Co mmands 229 Command Mode Interface Configuration (VLAN) mode User Guideli nes If routers exist on the VLA N, do not cha nge the unregiste red multicast addr e sses sta t e to drop on the routers po rts. NOTE: Do not use the bridge m ulticast forb idden forw ard-unreg istered command with the bridge multic ast forward -unregister [...]

  • Page 230

    230 Address T able C ommands Example In this e xample, the b ridge tables ar e cleared. console#clear bridge port secu rity Use the port security command in Interface Configurat ion mo de to disable the learning of ne w addresses on an interfa ce. T o enable new address learning, use the no form of the p o rt security command. Syntax port security [...]

  • Page 231

    Addre ss T a ble Co mmands 231 Example In this example, frame forwarding is enabl ed withou t learning , and with traps sent eve ry 100 seconds o n port g1. console(config)#interface ethernet 1/g1 console(config-if-1/g1)#port security forward trap 100 port secur ity max Use the port security max command in I n terface Configuration mode to configur[...]

  • Page 232

    232 Address T able C ommands show brid ge address-t able Use the show bridge address -table command in Privileged EXEC mode to display all entries in the bridg e-forwarding data base. Syntax show brid ge address-ta ble [ vlan vlan ] [ ethern et interface | port-ch annel port-channel-number ] • vla n — Sp ecific valid VLAN , such as VLAN 1. • [...]

  • Page 233

    Addre ss T a ble Co mmands 233 show bridg e address- table count Use the show br idge address-table count command in P rivileged EXEC mode to display the number of ad dresses pr esent in the F orwarding Databa se. Syntax show bridge a ddress-table coun t [ vla n vlan | ethernet interface-number | port- channel port-channel-number ] • vla n — Sp[...]

  • Page 234

    234 Address T able C ommands show brid ge address-tab le static Use the show bridge address-t able static command in Privileged EXEC mo de to displ ay static entri es in the bridge-forwar ding databas e. Syntax show bridge address-table stat ic [ vlan vlan ] [ ethernet int erf ac e | port-ch annel port-channel-number ] • vla n — Sp ecific valid[...]

  • Page 235

    Addre ss T a ble Co mmands 235 show brid ge multic ast addr ess-ta ble Use the show br idge mul ticast ad dress- table comm and in P rivileged EXEC mode to display Multicast MA C address table information. Syntax show bridge mult icast addre ss-table [ vlan vlan -id ] [ address mac-multicast- addr e ss | ip-multicast-addr ess ] [ format ip | ma c ][...]

  • Page 236

    236 Address T able C ommands Vlan MAC Address Ports ---- ----------------------- ------------ --------------- 1 0100.5E05.0505 NOTE: A multicast MAC add ress maps t o multi ple IP ad dres ses, as shown abo ve. show bridge m ulticast filtering Use the show bridge multicast f iltering command in P rivileged EXEC mode to display the Multicast filte ri[...]

  • Page 237

    Addre ss T a ble Co mmands 237 show ports security Use the show ports security command in P rivileged EXEC mode to display the por t-lock st atus. Syntax show ports security [ eth ernet interface | port-cha nnel port-channel-number ] • interface — A vali d Et hern et po rt . • port-channel-number — A vali d port- channel nu mber . Default C[...]

  • Page 238

    238 Address T able C ommands The following table describes the fields in this example. show po rts secur ity addr esses Use the sho w ports security addresses command in Priv ilege d EXEC mode to display curr ent dynamic addresses in lock ed ports. Syntax show ports se curity addresses { ethernet int erf ac e | port-ch annel port- chann el- number [...]

  • Page 239

    Addre ss T a ble Co mmands 239 Examples The following exampl e displays dynamic addr esses for port channel number 1/g1 . console#show ports security addresses ethernet 1/g1 Dynamic addresses: 83 Maximum addresses: 100 Learned addresses ------- ---------[...]

  • Page 240

    240 Address T able C ommands[...]

  • Page 241

    CDP Intero p erability Commands 241 6 CDP Interoperability Commands This chapter exp lains the following commands: • clear isdp counters • clear i sdp table • isdp adve rtise- v2 •i s d p e n a b l e •i s d p h o l d t i m e •i s d p t i m e r •s h o w i s d p •s h o w i s d p e n t r y • sh ow isd p inte rface • show isdp nei g[...]

  • Page 242

    242 CDP Intero perability Commands clear isdp counters The clear isdp counters command clears the ISDP counters. Syntax clear isdp counters Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guidel ines There ar e no user gui delines for this command. Example console#clear isdp counter[...]

  • Page 243

    CDP Intero p erability Commands 243 Example console#clear isdp table isdp advertise-v2 The isdp advertise-v2 command enab les the sending of ISDP version 2 pack ets fr om the de vice. Use the “no” form of th is comma nd to disab le sending ISDP ve rsion 2 packets. Syntax isdp advertise-v2 no isdp advertise-v2 Default Conf iguration ISDP se nds [...]

  • Page 244

    244 CDP Intero perability Commands Default Conf iguration ISDP is enab led. Command Mode Glo bal C onf igura tion mode . Interface (Ethernet) configuration mode. User Guidel ines There ar e no user gui delines for this command. Example The following example enables isdp on int erface 1/g1. console(config)#interface ethernet 1/g1 console(config-if-1[...]

  • Page 245

    CDP Intero p erability Commands 245 User Guideli nes There ar e no user gui delines for this command. Example The following exampl e sets is dp holdtime to 40 seconds. console(config)#isdp holdtime 40 isdp timer The isdp timer command s e ts period of time between sending new ISDP packets. The range i s given in seconds. Use the “no” form of th[...]

  • Page 246

    246 CDP Intero perability Commands show isdp The show isdp command displays global ISDP settings. Syntax show isdp •h o s t n a m e — The application w ill check to see if the Hostname configured on the switch is different from the defa ult. If true , it us es the Host name as the device ID. Otherwise, it uses the serial number as th e device I[...]

  • Page 247

    CDP Intero p erability Commands 247 (Switching) #hostname Dell-PC6248 (Dell-PC6248) #show isdp Timer............................... 30 Hold Time......................... 180 Version 2 Advertisements.......... Enabled Neighbors table last time changed. 0 days 00:12:46 Device ID......................... Dell-PC6248 Device ID format capability....... [...]

  • Page 248

    248 CDP Intero perability Commands Example console#show isdp entry Switch Device ID Switch Address(es): IP Address: 172.20.1.18 IP Address: 172.20.1.18 Capability Router IGMP Platform cisco WS-C4948 Interface 1/g1 Port ID GigabitEthernet1/1 Holdtime 64 Advertisement Version 2 Entry last changed time 0 days 00:13:50 Version : Cisco IOS Software, Cat[...]

  • Page 249

    CDP Intero p erability Commands 249 show isdp interface The show isdp int erface command displays ISDP s e ttings for th e specified interface. Syntax show isdp interface { all | ethernet interface } • all — Show ISDP settings for all in terfaces. • interface — Specifies a valid int erface. Th e full syn tax is unit/port. Default Conf igura[...]

  • Page 250

    250 CDP Intero perability Commands 1/g8 Enabled 1/g9 Enabled 1/g10 Enabled 1/g11 Enabled 1/g12 Enabled 1/g13 Enabled 1/g14 Enabled 1/g15 Enabled 1/g16 Enabled 1/g17 Enabled 1/g18 Enabled 1/g19 Enabled 1/g20 Enabled 1/g21 Enabled 1/g22 Enabled 1/g23 Enabled 1/g24 Enabled console#show isdp interface ethernet 1/g1 Interface Mode --------------- ------[...]

  • Page 251

    CDP Intero p erability Commands 251 show isdp ne ighbors The show isdp nei ghbors command displays the list of neighboring devices. Syntax show is dp neig hbo rs { ethernet interface | detail } • interface — S pecifies a va lid inte rface. The fu ll synt ax is u nit/port. • detail — Show detailed information abou t the neighbors. Default Co[...]

  • Page 252

    252 CDP Intero perability Commands console#show isdp neighbors detail Device ID Switch Address(es): IP Address: 172.20.1.18 IP Address: 172.20.1.18 Capability Router IGMP Platform cisco WS-C4 948 Interface 1/g1 Port ID GigabitEthe rnet1/1 Holdtime 162 Advertisement Version 2 Entry last changed time 0 days 00:5 5:20 Version : Cisco IOS Software, Cat[...]

  • Page 253

    CDP Intero p erability Commands 253 Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#show isdp traffic ISDP Packets Received.......................... 4253 ISDP Packets Transmitted....................... 127 ISDPv1 Packets Received........................ 0 ISDPv1 Packets Transmitt[...]

  • Page 254

    254 CDP Intero perability Commands[...]

  • Page 255

    DHCP Layer 2 Re lay Comman ds 255 7 DHCP Layer 2 Relay Commands This chapter exp lains the following commands: • d hcp l2relay ( Globa l Configu ration ) (Glo bal Con figurat ion) • dhcp l2r elay (Int erface Confi guration) (Int erface Confi guration) • d hcp l2relay c ircuit-id • d hcp l2relay remo te-id • d hcp l2relay trus t • d hcp [...]

  • Page 256

    256 DHCP Layer 2 Relay Comman ds dhcp l2relay (Globa l Configuration) Use the dhcp l2relay com mand to enable layer 2 DHCP relay functionality . The subsequent commands mentioned in this section can only be used when the L2-D HCP relay is enable d. Use the "no " form of this com mand to disa ble L2-DHCP relay . Syntax dhcp l2relay no dhcp[...]

  • Page 257

    DHCP Layer 2 Re lay Comman ds 257 Command Mode Interface Configuration (Ethernet) . User Guideli nes There ar e no user gui delines for this command. Example console(config-if-1/g1)#dhcp l2relay dhcp l2relay circuit- id Use the dhcp l2relay circuit-id command to enable setting the DHCP Opti on 82 Circu it ID fo r a VLAN. Whe n enable d, the i nterf[...]

  • Page 258

    258 DHCP Layer 2 Relay Comman ds dhcp l2relay remote-id Use the dhcp l 2relay remo te-id comm and to enable s etting the D HCP Option 82 Remote I D for a VLAN. When enabled, the supplied string is used for the Remote ID in DHCP Option 82. Use the "no" form of t his command to disa ble sett ing the D HCP Opti on 82 Rem ote ID . Syntax dhcp[...]

  • Page 259

    DHCP Layer 2 Re lay Comman ds 259 dhcp l2relay trust Use the dhcp l2relay trust command to configure an interface to mandate Option-82 on r eceiving DHCP packets. Syntax dhcp l2relay trust no dhcp l2relay trust Default Conf iguration DHCP Option 82 is discar ded by default. Configura tion Mode Interface Configuration (Ethernet) . User Guideli nes T[...]

  • Page 260

    260 DHCP Layer 2 Relay Comman ds Default Conf iguration DHCP L2 Relay is disa bled on all VLANs by defa ult . Command Mode Glo bal C onf igura tion mode User Guidel ines There ar e no user gui delines for this command. Example console(config)#dhcp l2relay vlan 10,340-345[...]

  • Page 261

    DHCP Sn ooping Comma nds 261 8 DHCP Snoopin g Commands This chapter exp lains the following commands: • clea r ip dhcp s nooping st atistics •i p d h c p s n o o p i n g • ip dhcp snooping binding • i p dhc p sno opi ng data ba se • ip dhcp snoop ing da taba se write -dela y •i p d h c p s n o o p i n g l i m i t •i p d h c p s n o o [...]

  • Page 262

    262 DHCP Snoo ping Comman ds clear ip dhcp sn ooping statistics Use the clear ip dhcp sn ooping statistics command to clear al l DHCP Snooping statis tics. Syntax clear ip dhcp snooping statistics Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC User Guidel ines There ar e no user gui delines [...]

  • Page 263

    DHCP Sn ooping Comma nds 263 Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config)#ip dhcp snooping console(config-if-vlan1,2,3)#ip dhcp snooping ip dhcp snooping bind ing Use the ip dhcp snoo ping binding command to configure a stat ic DHCP Snooping binding. Use the “no” f[...]

  • Page 264

    264 DHCP Snoo ping Comman ds User Guidel ines There ar e no user gui delines for this command. Example console(config)#ip dhcp snooping binding 00:00:00:00:00:01 vlan 10 10.131.12.134 interface 1/g1 ip dhcp snoop ing database Use the ip dhc p snooping datab ase command to configure the persistent storage location of the DHCP snooping database. Thi [...]

  • Page 265

    DHCP Sn ooping Comma nds 265 The following example configures the storage location of the snooping database as r emote. console(config)#ip dhcp snooping database tftp://10.131.11.1/db.txt ip dhcp snooping da tabase write- delay Use the ip dhcp snoo ping database write-delay comm and to configure the interval in seconds at w hich the DHCP Snooping d[...]

  • Page 266

    266 DHCP Snoo ping Comman ds ip dhcp snooping limit Use the ip dhc p snoo ping li mit command to control the maximum rate of DHCP m essa ges. U se the “ no” for m of t his co mma nd to rese t the li mit to the default. Syntax ip dhcp sn ooping limit { non e | rate pps [ burst inter v al sec ond s ]} no ip dhcp snoopi ng limit • pps — T he m[...]

  • Page 267

    DHCP Sn ooping Comma nds 267 ip dhcp snooping log-inva lid Use the ip dhcp snoo ping log-invalid command to enable logging of DHCP messages filtered by the DHCP S nooping application. Use the “no” form of this com man d to disa ble l ogg ing . Syntax ip dhcp snooping log- invalid no ip dhcp snoopi ng lo g-invali d Default Conf iguration Log gin[...]

  • Page 268

    268 DHCP Snoo ping Comman ds Default Conf iguration P orts ar e unt rusted by default. Command Mode Interface Configuration (Et hernet, port-channel) mode User Guidel ines There ar e no user gui delines for this command. Example console(config-if-1/g1)#ip dhcp snooping trust console(config-if-1/g1)#no ip dhcp snooping trust ip dhcp snoop ing verify[...]

  • Page 269

    DHCP Sn ooping Comma nds 269 Example console(config)#ip dhcp snooping verify mac-address show ip dhcp snooping Use the show ip dhcp snooping command to display the DHCP snooping global and per port configuration. Syntax show ip dhcp snoo ping Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mo[...]

  • Page 270

    270 DHCP Snoo ping Comman ds 1/g2 No Yes 1/g3 No Yes 1/g4 No No 1/g6 No No show ip dh cp snooping b inding Use the show ip dhcp sno oping bi nding com mand to disp lay the DHCP snooping binding entri e s. Syntax show ip dh cp snooping binding [{ static | dynamic }] [ int e rface port ] [ vlan vlan-id ] • static | dynamic — Use these keywor ds t[...]

  • Page 271

    DHCP Sn ooping Comma nds 271 MAC Address IP Address VLAN Interface Lease time(Secs) ------------------ ------------ ---- --------- ------------- 00:02:B3:06:60:80 210.1.1.3 10 1/g1 86400 00:0F:FE:00:13:04 210.1.1.4 10 1/g1 86400 show ip dhcp snooping database Use the show ip dhcp snooping database command to display the DHCP snooping configuration [...]

  • Page 272

    272 DHCP Snoo ping Comman ds show ip dh cp snooping in terfaces Use the show ip dhcp sno oping i nterfaces command to show the DHCP Snooping status of the interfaces . Syntax show ip dh cp snooping interfaces i nterfac e • interfa ce — A v alid phy sical int erface. Default Conf iguration There is no default configuration for this command. Comm[...]

  • Page 273

    DHCP Sn ooping Comma nds 273 console#show ip dhcp snooping interfaces ethernet 1/g15 Interface Trust State Rate Limit Burst Interval (pps) (seconds) ---------- ------------- ------------- - -------------- 1/g15 Yes 15 1 show ip dhcp snooping statistics Use the show ip dhcp snooping stat istics command to display the DHCP snoopin g filtra tion sta t[...]

  • Page 274

    274 DHCP Snoo ping Comman ds Example console#show ip dhcp snooping statistics Interface MAC Verify Client Ifc DHCP Server Failures Mismatch Msgs Rec'd ----------- ---------- ---------- ----------- 1/g2 0 0 0 1/g3 0 0 0 1/g4 0 0 0 1/g5 0 0 0 1/g6 0 0 0 1/g7 0 0 0 1/g8 0 0 0 1/g9 0 0 0 1/g10 0 0 0 1/g11 0 0 0 1/g12 0 0 0 1/g13 0 0 0 1/g14 0 0 0 [...]

  • Page 275

    Dynam ic AR P Inspec tio n Comman ds 275 9 Dynamic ARP Inspec tion Commands This chapter exp lains the following commands: • arp access-list • clear counte rs ip arp inspec tion • ip arp inspect ion filter • ip arp inspection limit • ip arp inspection trust • ip arp inspection validate • ip arp inspection vlan • permit ip host ma c [...]

  • Page 276

    276 Dynamic ARP Ins pecti on Comma nds arp access-list Use the arp access-list com ma nd t o cre ate an ARP ACL . I t wi ll p la ce th e u ser in ARP ACL Configuration mode. Use th e “no” f orm of this comma nd to delete an ARP ACL. Syntax arp access-list acl-name no arp access-list acl- na me • acl-n ame — A v alid ARP A CL name (Range: 1 [...]

  • Page 277

    Dynam ic AR P Inspec tio n Comman ds 277 Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#clear counters ip arp inspection ip arp inspecti on filter Use the ip arp inspection fi lter command to configure the ARP AC L to be used for a single VLAN or a range of VLANs to filter invali[...]

  • Page 278

    278 Dynamic ARP Ins pecti on Comma nds Example console(config)#ip arp inspection filter tier1 vlan 2- 10 static console(config)#ip arp inspection filter tier1 vlan 20-30 ip arp inspection limit Use the ip a rp in spection limit com mand to conf igure the rate limit a nd burst interval v alues for an interface. Configu ring ‘none’ for the limit [...]

  • Page 279

    Dynam ic AR P Inspec tio n Comman ds 279 Example console(config-if-1/g1)#ip arp inspection limit none console(config-if-1/g1)#ip arp inspection limit rate 100 burst interval 2 ip arp inspecti on trus t The ip a rp insp ection tru st co mmand configur es an interface as trusted for Dynami c ARP Inspec tion. Us e the “no” f orm of th is comman d [...]

  • Page 280

    280 Dynamic ARP Ins pecti on Comma nds ip arp inspection validat e Use the ip a rp insp ection val idate command to enable additiona l validation checks like s ource MAC address va lidation, destination MAC addr ess validation or IP address validation on the received ARP packets. Each command overrides the configuratio n of the previous command. F [...]

  • Page 281

    Dynam ic AR P Inspec tio n Comman ds 281 ip arp inspec tion vlan Use the ip arp inspe ction vlan comm and to enab le Dy nam ic A RP Ins pe ctio n on a single VLAN or a range of VLANs. Use the “no” form of this command to disable Dynamic ARP Inspection on a single VLAN or a range of VLANs. Syntax ip arp inspec tion vlan vlan-range [ logging ] no[...]

  • Page 282

    282 Dynamic ARP Ins pecti on Comma nds permit ip ho st mac host Use the permit ip host ma c host command to configure a rule for a valid IP address a nd MA C address comb ination used in ARP packet va lidation. Use the “no” form of this command to delete an ARP A CL rule. Syntax permit ip host sender -ip max host sender -mac no p ermit ip h ost[...]

  • Page 283

    Dynam ic AR P Inspec tio n Comman ds 283 Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC User Guideli nes There ar e no user gui delines for this command. Example console#show arp access-list ARP access list H2 permit ip host 1.1.1.1 mac host 00:01:02:03:04:05 permit ip host 1.1.1.2 mac host [...]

  • Page 284

    284 Dynamic ARP Ins pecti on Comma nds Command Mode P rivileged EXEC User Guidel ines The following fields are displayed for each interface: Example console#show ip arp inspection ethernet Interface Trust State Rate Limit Burst Interval (pps) (seconds) --------------- ----------- ---------- --------- ------ 1/g1 Untrusted 15 1 1/g2 Untrusted 10 10 [...]

  • Page 285

    Dynam ic AR P Inspec tio n Comman ds 285 show ip arp inspection statistics Use the show ip arp inspect ion statistics command to display the statistics of the ARP pac kets proce ssed by Dynamic ARP Ins p ection. Giv en vlan-range argument , it displays the stat istics on all D AI enabled Vlans in th at range. In the case of no ar g ument, it lists [...]

  • Page 286

    286 Dynamic ARP Ins pecti on Comma nds Example console#show ip arp inspection statistics VLAN Forwarded Dropped ---- --------- ------- 10 90 14 20 10 3 console#show ip arp inspection statistics vlan 10,20 VLAN DHCP ACL DHCP ACL Bad Src Bad Dest Invalid Drops Drops Permits Permits MAC MAC IP ---- ---------- ---------- ---------- ---------- ---- ----[...]

  • Page 287

    Dynam ic AR P Inspec tio n Comman ds 287 show ip arp inspection vlan Use the show ip arp inspection vlan command to disp lay the Dynamic ARP Inspection configuration on al l the VLAN s in the given VLAN range. It als o displays the global configuration values fo r source MA C validation, destination MAC validation and invalid IP validation. Syntax [...]

  • Page 288

    288 Dynamic ARP Ins pecti on Comma nds Example console#show ip arp inspection vlan 10-12 Source Mac Validation : Disabled Destination Mac Validation : Disabled IP Address Validation : Disabled Vlan Configuration Log Invalid ACL Name Static flag ---- ------------- ----------- ------- -- ---------- 10 Enabled Enabled H2 Enabled 11 Disabled Enabled 12[...]

  • Page 289

    Ether net Co nfi gurat ion Co mmands 289 10 Ethernet Co nfiguration Comma nds This chapter exp lains the following commands: •c l e a r c o u n t e r s •d e s c r i p t i o n •d u p l e x • flowcontr ol • inter face ethernet • inter face range ethernet •m t u • negotiation • sh ow inte rfaces advertise • sh ow int erfaces config[...]

  • Page 290

    290 Ethe rnet Configu ration Comma nds clear co unters Use the clear counters command in P rivileged EXEC mode to clear stati s tics on an interface. Syntax clear counters [ ethern et interface | port-cha nnel port-channel-number ] • interface — V alid Ethe rnet po rt. The fu ll synt ax is: unit/ port • port- channel -number — V alid port -[...]

  • Page 291

    Ether net Co nfi gurat ion Co mmands 291 Default Conf iguration By default, the interface does not have a description. Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes This command has no user guidelines. Example The following exampl e adds a desc ription t o t he Ethernet port 5. console(config)#interface ethern[...]

  • Page 292

    292 Ethe rnet Configu ration Comma nds User Guidel ines This command has no user guidelines . Example The following example configur es the duplex operation of Ethernet port 5 to force full duplex operation. console(config)# interface ethernet 1/g5 console(config-if-1/g5)# duplex full flowcontrol Use the flowcontrol co mmand in Global Configuration[...]

  • Page 293

    Ether net Co nfi gurat ion Co mmands 293 interfac e ethernet Use the interfac e etherne t command in Glob al Configuration mode to enter the interface configuration mode to co nfigure an Ethernet type interface. Syntax interface ethernet interface • interface — V alid Eth ernet port . The full syntax is unit/ port. Default Conf iguration This c[...]

  • Page 294

    294 Ethe rnet Configu ration Comma nds Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode User Guidel ines Commands under the interface range context ar e ex e cuted independently on each acti ve int erface in the range . If the comm and returns an er ror on one of the active inte rfaces, it doe[...]

  • Page 295

    Ether net Co nfi gurat ion Co mmands 295 Command Mode Interface Configuration (Ethernet) mode User Guideli nes The val ue se t allows an additi onal f our byt es for t he VLAN ta g. Example The following example of the mt u command incr eases maximum packet size to 9216 bytes. console(config-if-1/g5)#mtu 9216 negotiatio n Use the negoti ation comma[...]

  • Page 296

    296 Ethe rnet Configu ration Comma nds Example The following exampl e enables auto nego tia tions on giga bit Ethe rnet por t 5 of unit 1. console(config)#interface ethernet 1/g5 console(config-if-1/g5)#negotiation show inte rfaces advertise Use the show inter faces advertise comm and in P rivileged EXEC mode t o display information ab out auto-neg[...]

  • Page 297

    Ether net Co nfi gurat ion Co mmands 297 console# show interfaces advertise ethernet 1/g1 Port: Ethernet 1/g1 Type: 1G-Copper Link state: Up Auto negotiation: enabled 10h 10f 100h 100f 1000f Admin Local Link ------ ------ ------ ------ ------ Advertisement yes yes yes yes no show interfa ces configuration Use the sh ow inte rfac es con fig urat ion[...]

  • Page 298

    298 Ethe rnet Configu ration Comma nds Example The following example displays the co nfiguration for all configured interfaces: console>show interfaces configuration Port Type Duplex Speed Neg Admin Stat e ----- ------------------------------ ------ ------- ---- ----- 1/g1 Gigabit - Level Full 100 Auto Up 1/g2 Gigabit - Level N/A Unknown Auto Up[...]

  • Page 299

    Ether net Co nfi gurat ion Co mmands 299 The displayed port co nfiguration information includes the follow ing: show interfa ces counters Use the show in terfaces counters command in User EXEC mode to display traff ic seen b y the int erface. Syntax show interfaces counters [ ethe rnet interface | port-cha nnel port-channel- number ] • interface [...]

  • Page 300

    300 Ethe rnet Configu ration Comma nds console>show interfaces counters Port InOctets InUcastPkts ---- ---------- --------- 1/g1 183892 1289 3/g1 123899 1788 Port OutOctets OutUcastPkts ---- ---------- --------- 1/g1 9188 9 2/g1 0 0 3/g1 8789 27 Ch InOctets InUcastPkts ---- ---------- --------- 1 27889 928 Ch OutOctets OutUcastPkts ---- --------[...]

  • Page 301

    Ether net Co nfi gurat ion Co mmands 301 Port OutOctets OutUcastPkts ---- ---------- --------- 1/g1 9188 9 Alignment Errors: 17 FCS Errors: 8 Single Collision Frames: 0 Multiple Collision Frames: 0 Deferred Transmissions: 0 Late Collisions: 0 Excessive Collisions: 0 Oversize Packets: 0 Internal MAC Rx Errors: 0 Received Pause Frames: 0 Transmitted [...]

  • Page 302

    302 Ethe rnet Configu ration Comma nds show interfaces description Use the show interfaces description command in User EXEC mode to display the description for a ll configured interfaces. Syntax show int erfaces descri ption [eth ernet interface | port-cha nnel port-channel- number ] • interface — V alid Ethe rnet port . • port- channel -numb[...]

  • Page 303

    Ether net Co nfi gurat ion Co mmands 303 Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guideli nes This command has no user guidelines. Example The f ollowi ng ex ample di splays the desc riptio n for t he inter face 1/ g1. console>show interfaces description Port Description ---- ------------[...]

  • Page 304

    304 Ethe rnet Configu ration Comma nds • interface — A valid Ethernet port. • port- channel -number — A valid port- channel tru nk inde x. Default Conf iguration There is no default configuration for this command. Command Mode User EXEC mode User Guidel ines The com mand will be show interfa ces detai l {ether net interfa ce | port - channe[...]

  • Page 305

    Ether net Co nfi gurat ion Co mmands 305 Port Description ---- ------------------------------------------- 1/xg1 ExampleName VLAN Info: --------- VLAN Membership mode: General Operating parameters: PVID: 1 (default) Ingress Filtering: Enabled Acceptable Frame Type: All GVRP status: Enabled Protected: Enabled Port 1/xg1 is member in: VLAN Name Egres[...]

  • Page 306

    306 Ethe rnet Configu ration Comma nds Acceptable Frame Type: All Port 1/xg1 is statically configured to: VLAN Name Egress rule ---- --------- ----------- 1 default untagged 11 VLAN0011 tagged 19 IPv6 VLAN untagged 72 VLAN0072 untagged Forbidden VLANS: VLAN Name ---- --------- 73 Out Spanning Tree Info ------------------ Port 1 (1/xg1) enabled Stat[...]

  • Page 307

    Ether net Co nfi gurat ion Co mmands 307 show interfa ces status Use the show interfac es status co mmand in User EXEC mode to display the status for al l conf igured interfaces. Syntax show interfaces status [ethernet interface | port-ch annel port-channel- number ] • interface — A vali d Eth erne t por t. • port-channel-number — A vali d [...]

  • Page 308

    308 Ethe rnet Configu ration Comma nds 1/g9 Gigabit - Level N/A Unknown Auto Down Inactive 1/g10 Gigabit - Level N/A Unknown Auto Down Inactive 1/g11 Gigabit - Level N/A Unknown Auto Down Inactive 1/g12 Gigabit - Level N/A Unknown Auto Down Inactive 1/g13 Gigabit - Level N/A Unknown Auto Down Inactive 1/g14 Gigabit - Level N/A Unknown Auto Down Ina[...]

  • Page 309

    Ether net Co nfi gurat ion Co mmands 309 ch9 Link Aggregate Down --More-- or (q)uit ch10 Link Aggregate Down ch11 Link Aggregate Down ch12 Link Aggregate Down ch13 Link Aggregate Down ch14 Link Aggregate Down ch15 Link Aggregate Down ch16 Link Aggregate Down ch17 Link Aggregate Down ch18 Link Aggregate Down ch19 Link Aggregate Down ch20 Link Aggreg[...]

  • Page 310

    310 Ethe rnet Configu ration Comma nds ch40 Link Aggregate Down ch41 Link Aggregate Down ch42 Link Aggregate Down ch43 Link Aggregate Down ch44 Link Aggregate Down ch45 Link Aggregate Down ch46 Link Aggregate Down ch47 Link Aggregate Down ch48 Link Aggregate Down Flow Control:Disabled console# The displaye d port stat u s info rmation includes t he[...]

  • Page 311

    Ether net Co nfi gurat ion Co mmands 311 • port-type — V alues are g for gigabit Eth ernet port, or xg for 10 gigabit Ethernet p ort. • port — port n umber . V alues are 1-24 or 1-48 for port_type g, and 1-4 for port_type xg. Exam ple: x g2 is the 10 gigabi t Ethe rnet po rt 2. • switchport — Displays stati stics for the entir e switch.[...]

  • Page 312

    312 Ethe rnet Configu ration Comma nds Packets RX and TX 512-1023 Octets.............. 4982 Packets RX and TX 1024-1518 Octets............. 479845 Packets RX and TX 1519-1522 Octets.. ........... 0 Packets RX and TX 1523-2047 Octets.. ........... 0 Packets RX and TX 2048-4095 Octets.. ........... 0 Packets RX and TX 4096-9216 Octets.. ........... 0[...]

  • Page 313

    Ether net Co nfi gurat ion Co mmands 313 Packets Transmitted 128-255 Octets........... .. 245 --More-- or (q)uit Packets Transmitted 256-511 Octets........... .. 25 Packets Transmitted 512-1023 Octets.......... .. 158 Packets Transmitted 1024-1518 Octets......... .. 302 Max Frame Size................................. 1518 Total Packets Transmitted [...]

  • Page 314

    314 Ethe rnet Configu ration Comma nds console#show statistics ethernet switchport Total Packets Received (Octets)............ .... 16877295 Unicast Packets Received................... .... 1608 Multicast Packets Received................. .... 48339 Broadcast Packets Received................. .... 69535 Receive Packets Discarded.................. .[...]

  • Page 315

    Ether net Co nfi gurat ion Co mmands 315 Syntax show storm-contro l [all | int erf ace ] • interface — V alid Ethernet port. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Examples The followi ng ex ample shows storm co ntrol configuratio[...]

  • Page 316

    316 Ethe rnet Configu ration Comma nds shutdown Use the shutdown command in Interface Config uration mode to disable an interface. T o restart a disabled interface, use the no form of this command. Syntax shutdown no shutdown Default Conf iguration The interface is enabled. Command Mode Interface Configuration (Et hernet, P ort-Channel, T unnel, L [...]

  • Page 317

    Ether net Co nfi gurat ion Co mmands 317 no speed • 10 — Configures the port to 10 Mbp s operation. • 100 — Configures the port to 10 0 M bps operation. Default Conf iguration This command has no default setting. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example The following [...]

  • Page 318

    318 Ethe rnet Configu ration Comma nds Default Conf iguration The default value is 5 . Command Mode Interface Configuration (Et hernet) m ode User Guidel ines This command has no user guidelines . Example console(config-if-1/g1)#storm-control broadcast level 5 storm-contr ol multicast Use the storm- contro l multicas t com mand in Interface Configu[...]

  • Page 319

    Ether net Co nfi gurat ion Co mmands 319 Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example console(config-if-1/g1)#storm-control multicast level 5 storm-co ntrol unicast Use the storm-co ntrol un icast command in Interface Configuration mode to enable unknown unicast storm control for[...]

  • Page 320

    320 Ethe rnet Configu ration Comma nds User Guidel ines This command has no user guidelines . Example console(config-if-1/g1)#storm-control unicast level 5[...]

  • Page 321

    GVRP C o mmand s 321 11 GVRP Commands This chapter exp lains the following commands: • clear gvrp statistic s •g a r p t i m e r • gv rp enab le (globa l) • gv rp enable (interface) • gvrp registration-forbid • gv rp vlan-creation-forbid • show gvrp confi guration • sh ow gvrp error-statistics •s h o w g v r p s t a t i s t i c s[...]

  • Page 322

    322 GVRP Com mands clear gvrp statistics Use the clear gvrp statistics command in Priv ilege d EXEC mode to clear all the GVRP statist ics information. Syntax clear gvrp statisti cs [ ethernet interface | port-channel port-channel-number ] • interface — A valid Ethernet interface. • port- channel -number — A valid port -channel i ndex. Defa[...]

  • Page 323

    GVRP C o mmand s 323 • leave — Indicates the tim e in centiseconds th at the device waits before leaving its G ARP s tate. • leaveall — U sed to con firm th e por t wi thin th e VL AN. Th e tim e is th e interval betw een messages sent , measu red in centisec onds. • timer _value — Timer values in cen tiseconds. The ran ge is 10-100 for[...]

  • Page 324

    324 GVRP Com mands gvrp enable (global) Use the gvrp en able (glo b al) command in Gl o bal Configuration mode to enable GVRP g lobally on the s w itch. T o disable GVRP globally on the switch, use the no form of thi s command. Syntax gvrp enable no gvrp en able Default Conf iguration GVRP is globally disabled. Command Mode Glo bal C onf igura tion[...]

  • Page 325

    GVRP C o mmand s 325 Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes An Access port cannot join dy namically to a VLAN because it is a lways a member of only one VLAN . Membership in unt agged VLAN would be propagated in a s ame way as a tagged VL AN. In such cases it is the administra tor ’s respons ibility t[...]

  • Page 326

    326 GVRP Com mands User Guidel ines This command has no user guidelines . Example The following example shows how default dynamic r egistering and deregistering is forbidden for each VLAN on port 1/g8. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#gvrp registration-forbid gvrp v lan-c reation -forbid Use the gvrp vl an-creation-fo[...]

  • Page 327

    GVRP C o mmand s 327 show gvrp configuration Use the show gvrp conf iguration command in Priv ilege d EXEC mode to display GVRP configuration information. T imer values are displa y ed. Other data shows whether GVRP is enabled and which ports ar e running GVRP . Syntax show gvrp configuration [ ethernet interface | port-chan nel port-channel- numbe[...]

  • Page 328

    328 GVRP Com mands 1/g2 20 60 1000 Disabled 1/g3 20 60 1000 Disabled 1/g4 20 60 1000 Disabled 1/g5 20 60 1000 Disabled 1/g6 20 60 1000 Disabled 1/g7 20 60 1000 Disabled 1/g8 20 60 1000 Disabled 1/g9 20 60 1000 Disabled 1/g10 20 60 1000 Disabled 1/g11 20 60 1000 Disabled 1/g12 20 60 1000 Disabled 1/g13 20 60 1000 Disabled 1/g14 20 60 1000 Disabled s[...]

  • Page 329

    GVRP C o mmand s 329 User Guideli nes This command has no user guidelines. Example The fol low ing exam ple dis p lay s GV RP erro r s tat isti cs inf orm at io n. console>show gvrp error-statistics GVRP error statistics: ---------------- Legend: INVPROT: Invalid Protocol Id INVATYP: Invalid Attribute Type INVALEN: Invalid Attribute Length INVAV[...]

  • Page 330

    330 GVRP Com mands show gvrp statistics Use the show gvrp statistics comm and in User EXEC mode to display GVRP statistics . Syntax show gvrp statistics [ eth ernet interface | port -channel port-channel-number ] • interface — A val id Et hernet in terface. • port- channel -number — A valid port chan nel inde x. Default Conf iguration This [...]

  • Page 331

    GVRP C o mmand s 331 Port rJE rJIn rEmp rLIn rLE rLA sJE sJIn sEmp sLIn sLE sLA ---- --- ---- ---- ---- --- --- --- --- --- ---- ---- --- 1/g1 0 0000 0 0 00000 1/g2 0 0000 0 0 00000 1/g3 0 0000 0 0 00000 1/g4 0 0000 0 0 00000 1/g5 0 0000 0 0 00000 1/g6 0 0000 0 0 00000 1/g7 0 0000 0 0 00000 1/g8 0 0000 0 0 00000[...]

  • Page 332

    332 GVRP Com mands[...]

  • Page 333

    IGMP Snoo ping Comma nds 333 12 IGMP Sn ooping Co mman ds This chapter exp lains the following commands: • ip igmp snooping (global) • ip igmp snooping (interface) • ip igmp snooping host-tim e-out • ip igmp snooping leav e-time-ou t • ip igmp snooping mrouter -ti me-out • sh ow ip igm p snooping groups • sh ow ip igm p snooping inter[...]

  • Page 334

    334 IGMP Snooping Command s ip igmp snooping (global) Use the ip igmp snooping command in Global Configurat ion mo de to globally enable Int ernet Group Man agement Protocol (IGMP) snooping. Use the no form of this command to disab le IGMP snooping globally . Syntax ip ig mp snoop ing no ip ig mp snoop ing Default Conf iguration IGMP snooping is di[...]

  • Page 335

    IGMP Snoo ping Comma nds 335 Default Conf iguration IGM P s noop in g is disa ble d. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guideli nes IGMP snooping can be enabled on Ethernet interfaces. Example The following exampl e enables IGMP snooping. console(config-if-1/g1)#ip igmp snooping ip igmp snooping ho st-time-out U[...]

  • Page 336

    336 IGMP Snooping Command s User Guidel ines The timeout should be more than sum of r e sponse time and twice the que ry interval. Example The following example co nfigures the host timeout to 300 s e conds. console(config-if-1/g1)#ip igmp snooping host-time- out 300 ip igmp snooping leav e-time-out Use the ip igmp snoopin g leave- time-out command[...]

  • Page 337

    IGMP Snoo ping Comma nds 337 User Guideli nes The leav e timeout sho uld be s et greater than t he maximum time tha t a host is allowed to r e spond to an IGMP Query . Use immediate l eave only where there is only one host connected to a po rt. Example The following example configur es the host leave-time-ou t to 60 seconds. console(config-if-1/g1)[...]

  • Page 338

    338 IGMP Snooping Command s Example The follow ing example conf igures the mrouter timeou t to 200 sec onds. console(config-if-1/g1)#ip igmp snooping mrouter- time-out 200 show ip igmp snooping groups Use the show ip igm p snooping grou ps command in User EXEC mode to display the Mult icast groups learned by IGMP snooping. Syntax show ip i gmp snoo[...]

  • Page 339

    IGMP Snoo ping Comma nds 339 IGMP Reporters that are forbidden statically: --------------------------------------------- Vlan IP Address Ports ---- ------------------ ------------------- 1 224-239.130|2.2.3 1/g19 show ip igmp snooping interface Use the show ip igm p snoop ing inter face command in Pri vileged EX EC mode to display t he IGMP snoopin[...]

  • Page 340

    340 IGMP Snooping Command s Fast Leave Mode........................... Disabled Group Membership Interval................. 260 Max Response Time......................... 10 Multicast Router Present Expiration Time.. 300 show ip igmp snooping mrouter Use the show ip igmp snoopin g mrouter c o m m a n d i n P r i v i l e g e d E X E C m o d e to disp[...]

  • Page 341

    IGMP Snoo ping Comma nds 341 ip igmp snooping (VLA N) Use the ip igmp snoopin g command in VLAN Configuration mode to enable IGMP snooping on a particular interface or on all interfaces participating in a VLAN. T o disable IGMP snooping use the no form of this command. Syntax ip igmp snooping vlan-id no ip igmp sn oopin g Default Conf iguration IGM[...]

  • Page 342

    342 IGMP Snooping Command s Syntax ip igmp snoopi ng fast- leave vlan -id no ip igmp sno oping f ast-leav e • vla n id — Number a ssigned to the VLAN. Default Conf iguration IGMP snoopin g fast-leav e mode is disabled on VL ANs by default. Command Mode VLAN Configuration mode User Guidel ines This command has no user guidelines . Example The fo[...]

  • Page 343

    IGMP Snoo ping Comma nds 343 Default Conf iguration The default group mem bership interval time is 260 se conds. Command Mode VLAN Configuration mode User Guideli nes This command has no user guidelines. Example The following example configur es an IGMP snooping group membership interval of 520 seconds. console(config-vlan)#ip igmp snooping groupme[...]

  • Page 344

    344 IGMP Snooping Command s Command Mode VLAN Configuration mode User Guidel ines When usin g IGMP Snooping Q uerier , thi s parame ter sho uld be les s than th e value for the IGMP Snooping Q uerier query interval. Example The followi ng e xample sets the maxi mum r esponse time to 60 seconds on VLAN 2. console(config-vlan)#ip igmp snooping maxres[...]

  • Page 345

    IGMP Snoo ping Comma nds 345 User Guideli nes This command has no user guidelines. Example The fo llowing e xampl e sets th e multicas t route r prese nt ex piration time on VLA N 2 to 60 s econ ds. console(config-vlan)#ip igmp mcrtexpiretime 2 60[...]

  • Page 346

    346 IGMP Snooping Command s[...]

  • Page 347

    IGMP Snoo ping Quer ier Co mmands 347 13 IGMP Snoopin g Querier Commands This chapter exp lains the following commands: • ip igmp snooping querier • ip igmp snooping querier election participate • ip igmp snooping querier query -interval • ip igmp snooping querier tim er expiry • ip igmp snooping querier version • sh ow igmp snooping qu[...]

  • Page 348

    348 IGMP Snooping Q uerier Co mmands ip igmp snooping querier This command enables or di sables IGMP Snooping Querie r on the system (Global Configuration mode) or on a VLAN. Using this command, y ou can specify the IP address that th e snooping qu erier switch should use as the source address when generating periodic queries. The no form of t his [...]

  • Page 349

    IGMP Snoo ping Quer ier Co mmands 349 configured, then use the management IP address as the IGMP snooping querier source address. Using all zeros for the querier IP address r emoves it. The VLAN IP address takes pr eced ence over the global IP address. Example The following exampl e enables IG MP snooping q ue rier in VLAN Configuration mode. conso[...]

  • Page 350

    350 IGMP Snooping Q uerier Co mmands Example The following example configures the snooping querier to partic ipate in the quer ier el ectio n. console(config-vlan)#ip igmp snooping querier election participate ip igmp snooping querier query-inte rval This command sets the IGMP Querier Que ry Interval ti m e, which is t he amount of time in seconds [...]

  • Page 351

    IGMP Snoo ping Quer ier Co mmands 351 ip igmp snooping qu erier timer expiry This command sets the IGMP Querier timer expiration period wh ich is the time period that the switch remai ns in Non-Querier mode after it has discovered that there is a Multicast Qu erier in the netw ork. The no form of this command sets the IGMP Querier timer e xpiration[...]

  • Page 352

    352 IGMP Snooping Q uerier Co mmands Syntax ip igmp snooping querier version number no ip igmp snoo ping querier ver sion • number — IG MP ve rsion. (R ange: 1– 2) Default Conf iguration The q u erie r ve rsio n def ault is 2. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The followi[...]

  • Page 353

    IGMP Snoo ping Quer ier Co mmands 353 • Q uer ier Tim eout — Disp lay s the am ount of time to w ait in the N on- Querier opera tional state before moving to a Querier sta te. When yo u specify a v alue for vlan_id , the follow ing information appears: • VL AN A dmin M ode — In dicates wh ether IGM P Snoopin g Querier is activ e on the VLA [...]

  • Page 354

    354 IGMP Snooping Q uerier Co mmands Command Mode P ri vileged E xec mode User Guidel ines This command has no user guidelines . Example The following example shows querier information fo r VLAN 2. console#show ip igmp snooping querier vlan 2 Vlan 2 : IGMP Snooping querier status ---------------------------------------------- IGMP Snooping Querier [...]

  • Page 355

    IP Addr essing C ommands 355 14 IP Addressing Comman d s This chapter exp lains the following commands: •c l e a r h o s t • ip addr ess • ip addr ess dhcp • ip addr ess vl an • ip defau lt-ga tewa y • ip domain-lookup •i p d o m a i n - n a m e •i p h o s t •i p n a m e - s e r v e r • ipv6 addr ess •i p v 6 e n a b l e •i [...]

  • Page 356

    356 IP Addr essing C ommands clear host Use the clear hos t command in Priv ileged EXEC mode to delete entries from the host name-to-address cache. Syntax clear host { name |*} • name — Host name to be del eted from the ho st name-to-a ddress ca che. (Ran ge: 1 -255 chara cter s) • * — Deletes all entri es in the host name-to-addr ess cache[...]

  • Page 357

    IP Addr essing C ommands 357 • mask — Specifies a v alid subnet (network) m ask IP address. • prefix-length — The number of bit s that compri se the IP addr ess pre fix. The prefix length must be preceded by a forward slash (/). (Range: 1-30) Default Conf iguration The switch manage m ent interface obtains an IP addr ess via DHCP by default[...]

  • Page 358

    358 IP Addr essing C ommands Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines The ip address dhcp com ma nd a ll ows th e s witc h t o dy nam ic al ly o bta in a n I P address by u sing th e DHCP pr otocol . Example The following example acquir es an IP addr ess for the sw[...]

  • Page 359

    IP Addr essing C ommands 359 Example The followi ng e xample sets VLAN 5 as management VLAN. console(config)#ip address vlan 5 ip default-gateway Use the ip default-gat eway command in Global Configuration mode to define a defaul t gatewa y (router). Syntax ip default- gateway ip-address • ip-add ress — V alid IP address that s pecifies the IP [...]

  • Page 360

    360 IP Addr essing C ommands ip domain-look up Use the ip domain-l ookup command in Global Config uration mode to enable IP Domain Nami ng System (DNS)-based host name-t o -address translation. T o disable the DNS , use the no form o f this command. Syntax ip domain -lookup no ip domain-look up Default Conf iguration The DNS is enabled. Command Mod[...]

  • Page 361

    IP Addr essing C ommands 361 • name — Defau lt dom ain name u sed to complete an un qualified host name . Do n ot include t he initia l period that separates the u nqua lified h ost name from t he domain name (Rang e: 1-255 ch aracters). Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode Use[...]

  • Page 362

    362 IP Addr essing C ommands User Guidel ines This command has no user guidelines . Example The following example de fines a static host name-to-addr ess mapping in the host cache. console(config)#ip host accounting.dell.com 176.10.23.1 ip name-server Use the ip name -ser ver command in Global Config uration mode to define available IPv4 or IPv6 na[...]

  • Page 363

    IP Addr essing C ommands 363 Example The following example sets the available name server . console(config)#ip name-server 176.16.1.18 ipv6 address Use the ipv6 address command to set the IPv6 addr ess of the management inter face. Use th e "no" for m of thi s comma nd to reset the IPv 6 address to the default. Syntax ipv6 address { prefi[...]

  • Page 364

    364 IP Addr essing C ommands Example console(config)#ipv6 address dhcp console(config)#ipv6 address autoconfig console(config)#ipv6 address 2003::6/64 console(config)#ipv6 address 2001::/64 eui64 console(config)#no ipv6 address dhcp console(config)#no ipv6 address autoconfig console(config)#no ipv6 address 2003::6/64 console(config)#no ipv6 address[...]

  • Page 365

    IP Addr essing C ommands 365 Default Conf iguration IPv6 is enabled on the management interface by default. Command Mode Global Configuration mode User Guideli nes There ar e no user gui delines for this command. Example console(config)#no ipv6 enable ipv6 gateway Use the ipv6 gateway command to configure an IPv6 gateway for the management interfac[...]

  • Page 366

    366 IP Addr essing C ommands Example console(config)#ipv6 gateway 2003::1 console(config)#no ipv6 gateway show ar p switch Use the show arp switch command in Pr ivileged EXEC mode to display the ARP cache entries learned on the management port. Syntax show arp switch Default Conf iguration This command has no default configuration. Command Mode P r[...]

  • Page 367

    IP Addr essing C ommands 367 show hosts Use the show host s command in User EXEC mode to displa y the default domain name, a list of name s e rver hosts, and the static a nd cached list of host names and a dd re sses. The command itself shows host s [hostname]. • Host name. ( Range: 1–255 char acters) Default Conf iguration This command has no [...]

  • Page 368

    368 IP Addr essing C ommands show ip he lper -add ress Use the show ip helper-address command in P rivileged EXEC mode to display IP helper a ddresses configuration. Syntax show ip h elper-address [ intf -address ] • intf -address — IP addr ess of a rout ing interface . (Range: Any v alid IP addr ess) Default Conf iguration This command has no [...]

  • Page 369

    IP Addr essing C ommands 369 show ip interface ma nagement Use the show ip interface manageme nt command to disp lay the management interf ace configuration. Syntax show ip inte rface m anageme nt Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for [...]

  • Page 370

    370 IP Addr essing C ommands[...]

  • Page 371

    IPv6 Acc ess List Comman ds 371 15 IPv6 Access List Co mmands This chapter exp lains the following commands: •{ d e n y | p e r m i t } • ipv6 access-list • ipv6 access-list r ename • ipv 6 traffic-filter • sh ow ipv6 access-lists[...]

  • Page 372

    372 IPv6 Ac cess List C ommands {deny | permit} This command creates a new rule for the cu rrent IPv6 access list. Each rule is appe nded to the li st of co nfigu red rules f or the list. A rule may either deny or per m it traffic accor ding to the specified classification fields. At a minimum, either the 'every' keywor d or the protocol,[...]

  • Page 373

    IPv6 Acc ess List Comman ds 373 • portvalu e — The source layer 4 p ort match con dition for the ACL ru le is specified by the por t value para meter . (Ran ge: 0–6 5535). • destinat ion ipv6 prefix — IPv6 prefix in IPv6 global address forma t. • flow label value — The value to m atch in th e Flow Label field of the IPv6 header (R ang[...]

  • Page 374

    374 IPv6 Ac cess List C ommands console(Config-ipv6-acl)#deny ipv6 2001:DB8::/32 any eq http console(Config-ipv6-acl)#permit ipv6 2001:DB8::/32 any console(Config-ipv6-acl)# ipv6 access-list The ipv6 access-list command creates an IP v6 Access Control List (A C L) consisting of classification fi e lds define d for the IP header of a n IPv6 frame. T[...]

  • Page 375

    IPv6 Acc ess List Comman ds 375 console(config)#ipv6 access-list DELL_IP6 console(Config-ipv6-acl)# ipv6 access-list rename The ipv6 access-list rename command changes the name of an IPv6 Access Control List (A CL ). This command fails if an IPv6 A CL with the new name alr eady exists. Syntax ipv6 access-list rename name newname • name — t he n[...]

  • Page 376

    376 IPv6 Ac cess List C ommands ipv6 traffic-filter The ipv6 traffic-fi lter command either attaches a specific IPv6 Access Co ntr ol Li st (ACL ) to an i nt erf ace or ass oci at es i t w ith a VL AN I D i n a gi ven direction. An optional sequence number ma y be specified to indicate the order of this access lis t re lative to other IPv6 acce ss [...]

  • Page 377

    IPv6 Acc ess List Comman ds 377 Example The following example attaches an IPv6 access control list to an interface. console(config-if-1/g1)#ipv6 traffic-filter DELL_IP6 in show ipv6 access-lists The show ipv6 access-lists command display s an IPv6 access list and all of t he rules that are defined for the I Pv6 ACL. Use the [name] parameter to iden[...]

  • Page 378

    378 IPv6 Ac cess List C ommands console#show ipv6 access-lists STOP_HTTP ACL Name: STOP_HTTP Inbound Interface(s): 1/g1 Rule Number: 1 Action......................................... deny Protocol....................................... 255(ipv6) Source IP Address.............................. 2001:DB8::/32 Destination L4 Port Keyword...............[...]

  • Page 379

    IPv6 Acc ess List Comman ds 379 Destination L4 P ort Key w ord This field dis plays the destinat ion port for this r ule. IP DSCP Thi s fiel d indi cates t he valu e sp ecifie d for IP DSC P . Flow La bel This fi eld in dicate s the v alue sp eci fied for IPv6 Flow Labe l. Lo g Dis plays when you en able loggin g for the rule. Ass ign Queue Disp la[...]

  • Page 380

    380 IPv6 Ac cess List C ommands[...]

  • Page 381

    IPv6 ML D Snoo ping Queri er Comman ds 381 16 IPv6 MLD Snoopin g Quer ier Commands This chapter exp lains the following commands: • ipv6 m ld sn ooping querier • ipv6 m ld sn ooping querier (VL AN mod e) • ipv6 m ld sn ooping querier ad dress • ipv 6 mld sn ooping quer ier election p articipate • ipv 6 mld sn ooping quer ier query-in terv[...]

  • Page 382

    382 IPv6 M LD S noop ing Q uerie r C ommand s ipv6 mld snooping querier Use the ipv6 m ld snoop ing querier command to enable MLD Snooping Querier on the system . Use the "no" form of thi s comma nd to disabl e MLD Snooping Quer ier . Syntax ipv6 mld snooping querier no ipv6 mld snoopin g querier Default Conf iguration MLD Snooping Querie[...]

  • Page 383

    IPv6 ML D Snoo ping Queri er Comman ds 383 Command Mode VLAN Data base mode User Guideli nes There ar e no user gui delines for this command. Example console(config-vlan)#ipv6 mld snooping querier 10 ipv6 mld snooping querier addr ess Use the ipv6 mld snooping querier address co mmand to s et the glo bal MLD Snooping Qu erier address. Use the "[...]

  • Page 384

    384 IPv6 M LD S noop ing Q uerie r C ommand s ipv6 mld snooping querier electio n participate Use the ipv6 mld snooping querier electi on participate command to enable the Snooping Querier to parti cipate in the Querier Electi on process when it disc overs the pr esenc e of a nother Queri er in the VLAN. When thi s mod e is enabled, if the Snooping[...]

  • Page 385

    IPv6 ML D Snoo ping Queri er Comman ds 385 ipv6 mld snooping querier query-in terval Use the ipv6 mld snoopin g querier query-in ter val command to set the ML D Querier Query Interval t ime. It is the amount of time in seconds that the switch waits before sending another g eneral query . Use the "no" form of this comma nd to r eset th e Q[...]

  • Page 386

    386 IPv6 M LD S noop ing Q uerie r C ommand s ipv6 mld snooping querier timer expi ry • timer — The t ime th at the sw itch remains in Non -Querier mo de after it has discovered that there is a multicast querier in the n etwork. (Rang e: 60–3 00 seconds) Default Conf iguration The default timer e xpiration period is 60 seconds. Command Mode G[...]

  • Page 387

    IPv6 ML D Snoo ping Queri er Comman ds 387 User Guideli nes When the optional a rgument vlan vlan-i d is not used, the command shows the following information: When the optional a rgument vlan v lan-id is used, the f o llowing addition al information appe ars: MLD Snooping Querier Mode Indicates whether or not MLD Snooping Querier is active on the [...]

  • Page 388

    388 IPv6 M LD S noop ing Q uerie r C ommand s When the optiona l argument detail is used, the command shows the global information and the information for all Querier e nabled VLANs as well as the following information: Last Que rier Addr ess Indicat es the IP add ress of the most r ecent Querier from whic h a Que ry wa s re cei ved . MLD V ersion [...]

  • Page 389

    iSCSI Op timization Command s 389 17 iSCSI Optimization Commands This chapter exp lains the following commands: • iscsi enable •s h o w i s c s i[...]

  • Page 390

    390 iSCSI Op timization Command s iscsi enable The iscsi enable command g lobally enables i SCSI awareness. T o disable iSCSI awar eness use the no form of this command. Syntax iscsi enable no iscsi ena ble Default Conf iguration The default iSCSI o ptimiza tion mode is disabled. NOTE: Rap id S panni ng T ree Pr ot ocol ( RSTP) and f low-c ont rol [...]

  • Page 391

    iSCSI Op timization Command s 391 Example The followi ng e xample enables iSCSI aw areness. console(config)#iscsi enable show iscsi The show iscsi command output indicates wh e ther iSCS I optimi zation is enabled or disabled. Syntax show iscsi Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC [...]

  • Page 392

    392 iSCSI Op timization Command s[...]

  • Page 393

    LACP Commands 393 18 LACP Co mmands This chapter exp lains the following commands: • lacp port -priority • lacp system-priority •l a c p t i m e o u t • show lacp e thernet • show lacp por t-chann e l[...]

  • Page 394

    394 LACP Comm ands lacp po rt-prior ity Use the lacp port -priori ty command in Interface Configuration mode to configur e the pri o rity va lue for physical po rts. T o r eset to de fault priority valu e, use the no form of this command. Syntax lacp port-priori ty value no lacp port-p riority • val ue — P o rt priority valu e. (Ran ge: 1–65 [...]

  • Page 395

    LACP Commands 395 • val ue — P o rt priority valu e. (Ran ge: 1–65 535) Default Conf iguration The default system priority value is 1. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The following example configur es the system priority to 120. console(config)#lacp system-priority 120 lacp [...]

  • Page 396

    396 LACP Comm ands User Guidel ines This command has no user guidelines . Example The following example a ssigns an administrative LA CP timeout for port 1/g8 to a long t imeout v alue. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#lacp timeout long show lacp ethernet Use the show lacp ethernet command in Privi leged EXEC mode to [...]

  • Page 397

    LACP Commands 397 system priority: 1 system mac addr: 00:00:12:34:56:78 port Admin key: 30 port Oper key: 30 port Oper priority: 1 port Admin timeout: LONG port Oper timeout: LONG LACP Activity: ACTIVE Aggregation: AGGREGATABLE synchronization: FALSE collecting: FALSE distributing: FALSE expired: FALSE Partner system priority: 0 system mac addr: 00[...]

  • Page 398

    398 LACP Comm ands expired: FALSE Port 1/g1 LACP Statistics: LACP PDUs sent: 2 LACP PDUs received: 2 show lacp port-channel Use the show lacp port-chann el command in Priv ileged EXEC mode to display LACP information for a p ort-channel. Syntax show lacp port-cha nnel [ port_channel_number ] • port_ channel_ number — Th e po rt-cha nne l num be[...]

  • Page 399

    LACP Commands 399 Oper Key: 29 Partner System Priority: 0 MAC Address: 000000:000000 Oper Key: 14[...]

  • Page 400

    400 LACP Comm ands[...]

  • Page 401

    Link Depe ndency Co mmands 401 19 Link Depend ency Commands This chapter exp lains the following commands: •l i n k - d e p e n d e n c y g r o u p • no lin k-dependency group • add et hernet • add po rt-chann el • add po rt-chann el • no add port-c hannel • depen ds-on ethernet • no depends-on ethernet • depen ds-on port-channel [...]

  • Page 402

    402 Link Dep endency Command s link-depe ndency group Use the link-d ependency group com mand to enter the li nk-dependency mode to configure a link-dependency group Syntax link-dependency group GroupId • GroupId — Link depend ency grou p identifier . (R ange: 1–1 6) Default Conf iguration This command has no default configuration. Command Mo[...]

  • Page 403

    Link Depe ndency Co mmands 403 Command Mode Global Configuration mode User Guideli nes No specific guideline s Example console(config)#no link-dependency group 1 add et hernet Use the add ether net comm and t o ad d m embe r E ther ne t po rt( s) to the dependency list. Syntax add ethern et intf -list • intf-list — List of Ethern et interfaces.[...]

  • Page 404

    404 Link Dep endency Command s add p ort-channe l Use the add port-chan nel command to add member port-channels to the dependency list. Syntax add port-channel port-channel-list • port-channel-list — Lis t of po rt- chann el int erf aces. Sepa rate nonconsec u tive ports wit h a comma and no spaces. Use a hyphen to designate the ra nge of ports[...]

  • Page 405

    Link Depe ndency Co mmands 405 Default Conf iguration This command has no default configuration. Command Mode Link Dependency mode User Guideli nes No specific guideline s Example console(config-linkDep-group-1)#no add port-channel 2 depends-o n ethernet Use the depends-on e thernet command to add the dependent Ethernet ports list. Syntax depends-o[...]

  • Page 406

    406 Link Dep endency Command s no depe nds-on ether net Use the no de pends- on ethe rnet command to remove the depen dent Ethernet ports list. Syntax no depends -on eth ernet intf -list • intf -l ist — List of Ethern et interfaces. Sepa rate nonconsecutive ports with a comma and no sp aces. Use a hyph e n to des ignate the ran ge of ports. (Ra[...]

  • Page 407

    Link Depe ndency Co mmands 407 Default Conf iguration This command has no default configuration. Command Mode Link Dependency mode User Guideli nes No specific guideline s Example console(config-linkDep-group-1)#depends-on port- channel 6 no depen ds-on port-cha nnel Use the no dep ends- on port- channe l command to remove the dependent port-channe[...]

  • Page 408

    408 Link Dep endency Command s Example console(config-linkDep-group-1)# no depends-on port- channel 6 show link-d ependency Use the show link-depen dency command to show the link dependencies configured for a particul ar group . If no group is specified, then all the configured link-dependency groups ar e displayed. Syntax show link -dependency [ g[...]

  • Page 409

    Link Depe ndency Co mmands 409 The following command shows link dependencies for group 2 only . console#show link-dependency group 2 GroupId Member Ports Ports Depended On ------- ---------------------- ------------------ 2 1/g1-1/g4 1/g8-1/g9[...]

  • Page 410

    410 Link Dep endency Command s[...]

  • Page 411

    LLDP Commands 411 20 LLDP Comm ands This chapter exp lains the following commands: • clea r lldp remot e-data • clea r lldp s tatis tics •l l d p m e d • lldp m ed confignotifica tion • lldp med fast startr ep eatcount •l l d p m e d t r a n s m i t - t l v • lldp not ification • lldp not ification-int erval •l l d p r e c e i v e[...]

  • Page 412

    412 LLDP Co m mands clear lld p remote- data Use the clear lldp remote- data command in P rivileged EXEC mode to delete all LLDP i nformati on from the remote data table. Syntax clear lldp remote-data Default Conf iguration By default, data i s removed only on system r eset. Command Mode P rivileged EXEC mode User Guidel ines This command has no us[...]

  • Page 413

    LLDP Commands 413 User Guideli nes This command has no user guidelines. Example The following exampl e displays how to r eset all LLDP statistics. console#clear lldp statistics lldp med This command is used to enable/disa b le LLDP -MED on an interface. By enabling MED, the t ransmit and receive functions of LLDP are effectively enabled. Syntax Des[...]

  • Page 414

    414 LLDP Co m mands lldp med confignotification This command is used to enable sending the topology change notification. Syntax De scription lldp med confignotification no lldp med confignot ification Para mete r R ange s Not applicab le Command Mode Interface (Ethernet) Configuration Default V alue By default, notifications are disabled on all sup[...]

  • Page 415

    LLDP Commands 415 Command Mode Global Configuration Default V alue 3 Usage Guideli nes No specific guideline s. Example console(config)# lldp med faststartrepeatcount 2 lldp med transmit-tlv This command is used to specify whic h optio nal TL Vs in the LLDP MED set are transmitted in the LLDP DUs. There are certain conditions that have to be m et f[...]

  • Page 416

    416 LLDP Co m mands Para mete r R ange s Not appl icable. Command accepts k eywords only . Command Mode Interface (Ethernet) Configuration Default V alue By defau lt, the capa bilities and network po licy TL Vs ar e included. Example console(config)#interface ethernet 1/g1 console(config-if-1/g1)#lldp med transmit-tlv capabilities console(config-if[...]

  • Page 417

    LLDP Commands 417 Example The following example di sp lays how to enable remote da ta chan ge notifications. console(config-if-1/g3)#lldp notification lldp notification-interv al Use the lldp noti fication -interva l command in Global Configuration mode to limit how frequently remote data ch ange notifications a re sent. T o return the notifi catio[...]

  • Page 418

    418 LLDP Co m mands lldp receive Use the lldp receive command i n Interface Configuration mode to enable the LLDP receive capability . T o disable r eception of LL DPDUs, use the no fo rm of this command. Syntax lldp receive no lldp receive Default Conf iguration The default lldp receiv e mode is disabled. Command Mode Interface Configuration (Et h[...]

  • Page 419

    LLDP Commands 419 • transmi t-interv al — The interva l in second s at w hich to tran smit l ocal data LLD PDUs. ( Range: 5–327 68 seco nds) • hold-mu ltipl ier — Multiplier on the transmit interval used to set the T TL in loca l data LLD PDU s. (Range : 2–10) • reinit-delay — The delay in seconds befor e re -initializat ion. (Ran g[...]

  • Page 420

    420 LLDP Co m mands lldp transmit Use the lldp tran smit command in Interface Configuration mode to enable the LLD P adve rtise (t ransm it) ca pabili ty . T o disabl e local da ta tran smis sion, use the no form of this co mmand. Syntax lldp tran smit no lldp t ransmi t Default Conf iguration LLDP is disabled on al l supported interfaces. Command [...]

  • Page 421

    LLDP Commands 421 Default Conf iguration By default, management address information is not included. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example The following example displ ay s how to include management information in the LL DPDU. console(config-if-1/g3)#lldp transmit-mgmt lldp[...]

  • Page 422

    422 LLDP Co m mands User Guidel ines This command has no user guidelines . Example The following example shows how to include the system description TL V in local data transmit . console(config-if-1/g3)#lldp transmit-tlv sys-desc show lldp Use the show l ldp co mma nd in Privile ge d EX EC mod e t o di spl ay th e curre nt LLDP configuration summar[...]

  • Page 423

    LLDP Commands 423 console#show lldp LLDP transmit and receive disabled on all interfaces show lldp interface Use the show ll dp interface com mand in P rivileged EXEC mode to display the current LLDP inte rface state. Syntax show lldp inter face { int erf ac e | all } • interface — S pecifies a va lid phys ical interf ace on t he swit ch or uni[...]

  • Page 424

    424 LLDP Co m mands System Capability console# show lldp interface 1/g1 Interface Link Transmit Receive Notify TLVs Mgmt --------- ---- -------- -------- -------- ------ ---- 1/g1 Up Enabled Enabled Enabled 0,1,2,3 Y TLV Codes: 0 – Port Description, 1 – System Name, 2 – System Description, 3 – System Capability show lldp local-device Use th[...]

  • Page 425

    LLDP Commands 425 Interface Port ID Port Description --------- -------------------- -------------------- 1/g1 00:62:48:00:00:02 console# show lldp local-device detail 1/g1 LLDP Local Device Detail Interface: 1/g1 Chassis ID Subtype: MAC Address Chassis ID: 00:62:48:00:00:00 Port ID Subtype: MAC Address Port ID: 00:62:48:00:00:02 System Name: System[...]

  • Page 426

    426 LLDP Co m mands show lldp med This command displays a s umm ary of the curr e nt LLDP MED configuration. Syntax De scription show lldp med Para mete r R ange s Not applicab le Command Mode P rivileged EXEC Default V alue Not applicab le Usage Guideli nes No specific guideline s. Example console(config)#show lldp med LLDP MED Global Configuratio[...]

  • Page 427

    LLDP Commands 427 • All — Indicat es all val id LLDP interface s. Parameter Rang es Not applicab le Command Mode P rivileged EXEC. Default V alue Not applicab le Example console#show lldp med interface all LLDP MED Interface Configuration Interface Link configMED operMED ConfigNotify TLVsTx --------- ------ -------- -------- -------- ------- 1/[...]

  • Page 428

    428 LLDP Co m mands show lldp med local-device This command displays the advertised LLDP local data. This command can display summary informat ion or detail for each interface. Syntax De scription show lldp med local-de vice detail < unit/port > • unit/p ort — Indicates a specific physical interface. • detail — Includes a deta iled ve[...]

  • Page 429

    LLDP Commands 429 DSCP: 1 Unknown: False Tagged: True Media Policy Application Type : streamingvideo Vlan ID: 20 Priority: 1 DSCP: 2 Unknown: False Tagged: True Inventory Hardware Rev: xxx xxx xxx Firmware Rev: xxx xxx xxx Software Rev: xxx xxx xxx Serial Num: xxx xxx xxx Mfg Name: xxx xxx xxx Model Name: xxx xxx xxx Asset ID: xxx xxx xxx Location [...]

  • Page 430

    430 LLDP Co m mands Extended POE PSE Available: 0.3 watts Source: primary Priority: critical Extended POE PD Required: 0.2 watts Source: local Priority: low show lldp med remote-device This comma nd display s the current LLDP ME D remote data. This comm and can display s umm ary informati on or detail for each interface. Syntax De scription show ll[...]

  • Page 431

    LLDP Commands 431 Default V alue Not applicab le Example Console#show lldp med remote-device all LLDP MED Remote Device Summary Local InterfaceDevice Class --------------------- 1/g1Class I 1/g2 Not Defined 1/g3Class II 1/g4Class III 1/g5Network Con Console#show lldp med remote-device detail 1/g1 LLDP MED Remote Device Detail Local Interface: 1/g1 [...]

  • Page 432

    432 LLDP Co m mands Network Policies Media Policy Application Type : voice Vlan ID: 10 Priority: 5 DSCP: 1 Unknown: False Tagged: True Media Policy Application Type : streamingvideo Vlan ID: 20 Priority: 1 DSCP: 2 Unknown: False Tagged: True Inventory Hardware Rev: xxx xxx xxx Firmware Rev: xxx xxx xxx Software Rev: xxx xxx xxx Serial Num: xxx xxx [...]

  • Page 433

    LLDP Commands 433 Subtype: elin Info: xxx xxx xxx Extended POE Device Type: pseDevice Extended POE PSE Available: 0.3 Watts Source: primary Priority: critical Extended POE PD Required: 0.2 Watts Source: local Priority: low show lldp remote-device Use the lldp remo te-devi ce command in P rivileged EXEC mode to display the current LLDP re mot e data[...]

  • Page 434

    434 LLDP Co m mands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Examples These examples show current LLDP remote data, including a deta iled version . console#show lldp remote-device Local Remote Interface Device ID Port ID TTL --------- ----------------- ----------------- ---------- 1/g1 01:23:45:67:89[...]

  • Page 435

    LLDP Commands 435 show lldp statistics Use the show lldp statistics command in P rivileged EXEC mode to display the cu rren t LLDP tra ffic sta tistics. Syntax show lldp statistics { int erf ac e | all } • interface — S pecifies a va lid phys ical interf ace on t he swit ch or unit/port . Default Conf iguration This command has no default confi[...]

  • Page 436

    436 LLDP Co m mands Total Ageouts.............................. .. 1 Tx Rx TLV TLV TLV TLV TLV Interface Total Total Discards Errors Ageout Discards Unknowns MED 802.1 802.3 --------- ----- ----- -------- ----- - ------ -------- -------- ---- ----- ----- 1/g11 29395 82562 0 0 1 0 0 0 1 4 The following table explains the fields in this example. Para[...]

  • Page 437

    LLDP Commands 437 Errors Number of non-valid LLDP frames received on the indic ated port. Ageout s Number of times a remote data entry on the indic ated port has b een delete d due to TTL exp i ra ti o n . TL V Dis c ar ds Numb er LLDP TL Vs ( T ype, Length, V alue sets) receive d on the in dica ted por t and di sca rded for any re ason by the LLDP[...]

  • Page 438

    438 LLDP Co m mands[...]

  • Page 439

    Port Channe l Comman ds 439 21 Port Channel Comman ds This chapter exp lains the following commands: • channel -group • interfa ce port-chann el • interfa ce range port- channel • hashing -mode •n o h a s h i n g - m o d e • sh ow interfaces port -channel • show statis tics port-c hannel[...]

  • Page 440

    440 Port Ch annel Comma nds channel- group Use the channel-gr oup command in Interface Co nfiguration mode to configure a port-to-port channel. T o remove the channel-group configuration from the interface, use the no form of this command. Syntax channel-grou p port-channel-number mode { on | auto } no chann el-grou p • port- channel -number — [...]

  • Page 441

    Port Channe l Comman ds 441 interface por t-channel Use the interfac e port-chann el command in Global Configuration mode to configure a port-channel type a nd e n ter port-channel configuration mode. Syntax interface port- channel port-channel-number • port-channel-number — A valid port -channel tr unk inde x. Default Conf iguration This comma[...]

  • Page 442

    442 Port Ch annel Comma nds Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines Commands in the inte rface range context are ex ecuted indep endently on each interface in the range. I f the command returns an error on one of the interfaces, it stops the ex ecution of th e com[...]

  • Page 443

    Port Channe l Comman ds 443 Default Conf iguration This command has no default configuration. Command Mode Interface Configuration (port-channel) User Guideli nes No specific guideline s. Example console(config)#interface port-channel l console(config-if-ch1)#hashing-mode 4 no hashing -mode Use the no has hing-mo de command to set the hashing algor[...]

  • Page 444

    444 Port Ch annel Comma nds show inte rfaces port- channel Use the show interfa ces port-channel command to show port-channel information. Syntax De scription show int erfaces p ort-chann el [ port-channel number ] •[ port- channel -number ] — Numb er of the port cha nnel to show . This param e ter i s optional. I f the port cha nnel numbe r is[...]

  • Page 445

    Port Channe l Comman ds 445 Hash algorithm type 1 - Source MAC, VLAN, EtherType, source module and port Id 2 - Destination MAC, VLAN, EtherType, source module and port Id 3 - Source IP and source TCP/UDP port 4 - Destination IP and destination TCP/UDP port 5 - Source/Destination MAC, VLAN, EtherType and source MODID/port 6 - Source/Destination IP a[...]

  • Page 446

    446 Port Ch annel Comma nds Total Packets Received (Octets)................ 0 Packets Received > 1522 Octets................. 0 Packets RX and TX 64 Octets.................... 1064 Packets RX and TX 65-127 Octets................ 140 Packets RX and TX 128-255 Octets............... 201 Packets RX and TX 256-511 Octets............... 418 Packets RX[...]

  • Page 447

    Port Channe l Comman ds 447 Unacceptable Frame Type........................ 0 Multicast Tree Viable Discards................. 0 Reserved Address Discards...................... 0 Broadcast Storm Recovery....................... 0 CFI Discards................................... 0 Upstream Threshold............................. 0 Total Packets Transmit[...]

  • Page 448

    448 Port Ch annel Comma nds GVRP Failed Registrations...................... 0 Time Since Counters Last Cleared............... 0 day 0 hr 17 min 52 sec console#[...]

  • Page 449

    Port Monitor C ommands 449 22 Port Monito r Comman ds This chapter exp lains the following commands: • monitor session • show monito r session[...]

  • Page 450

    450 Port Monitor Commands monitor session Use the monitor session command in Global Configuration mode to configure a probe port and a monitor ed p ort for monitor session (port monitoring). Use the src-interface p aramet er to specify the inte rface to moni tor . Us e rx to monito r only i ngr ess pack ets, or use tx to mo nitor only egress packet[...]

  • Page 451

    Port Monitor C ommands 451 Example The following examples shows variou s port monitoring configurations. console(config)#monitor session 1 source interface 1/g8 console(config)#monitor session 1 destination interface 1/g10 console(config)#monitor session 1 mode show monitor session Use the show mo nitor session co mmand in Privi leg ed EXEC mode to[...]

  • Page 452

    452 Port Monitor Commands[...]

  • Page 453

    QoS Co mm ands 453 23 QoS Commands This chapter exp lains the following commands: •a s s i g n - q u e u e •c l a s s •c l a s s - m a p •c l a s s - m a p r e n a m e • classofservice dot1p-ma pping • classofservice ip-dscp-ma pping • classofservic e trust • conform-color • cos-queue min-bandwidt h •c o s - q u e u e s t r i c [...]

  • Page 454

    454 QoS Comma nds •m a t c h i p t o s • match protocol • match source-addr ess mac •m a t c h s r c i p •m a t c h s r c i p 6 •m a t c h s r c l 4 p o r t • match vlan • mirror •p o l i c e - s i m p l e •p o l i c y - m a p • redir ect •s e r v i c e - p o l i c y •s h o w c l a s s - m a p • show classofservice dot1p[...]

  • Page 455

    QoS Co mm ands 455 assign- queue Use the assign-queue command in P oli cy -Class-Ma p Configuration mode to modify the queue ID to which the associated traffic stream is assigned. Syntax assign-queue < queueid > • queueid — S pecifies a valid queue ID . (Range: integer from 0–6.) Default Conf iguration This command has no default config[...]

  • Page 456

    456 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode P olicy Map Configuration mode User Guidel ines This command causes the specified policy to create a refere nce to the class definition. The command mode is changed to P olicy-Class -Map Configuration when this command is e xecuted successfully . Exampl[...]

  • Page 457

    QoS Co mm ands 457 User Guideli nes There ar e no user gui delines for this command. Example The followi ng e xample creates a class-map named "DE LL" which req uires all ACE’s to be ma tched. console(config)#class-map DELL console(config-cmap)# class-map rename Use the class-map r ename command in Global Configuration mode to change th[...]

  • Page 458

    458 QoS Comma nds console(config)# clas sofser vice dot1p -mappin g Use the classofser vice dot1p-mapping command in Global Configuration mode to map an 802. 1p priority to an interna l traffic class. In Interface Co nfig ura tio n mo de, th e m appi ng is ap pl ied onl y t o pac kets recei ved on th at interface. Use the no form of the command to [...]

  • Page 459

    QoS Co mm ands 459 classofservice ip-dscp-ma pping Use the classofser vice ip-dscp-mapping command in Global Configuration mode to map an IP DS C P value to a n internal traffic class. Syntax classofser vice ip-dscp-mapping ipd scp trafficclass • ipdscp — Sp ecifies the IP D SCP va lue to which you ma p the specified traff ic class . (Ran ge: 0[...]

  • Page 460

    460 QoS Comma nds clas sofser vice trus t Use the classofser vice trust command in either Global Configuration mode or Interfa ce Configura tion mode to set the c lass of ser vice trus t mode of an interface. T o set the inte rface mode to untrusted, use the no form of this command. Syntax classofser vice trust { dot1p | untrusted | ip-dscp } no cl[...]

  • Page 461

    QoS Co mm ands 461 conform-c olor Use the conform -color command in P olicy-Class-Map Config uration mode to specify second-level matc hing for traffic flow , the o nly possible ac tions are drop, setdscp-transmit , set-prec-transmit, o r transmit. In t his two-rate form of the policy command, the conform ac tion defaults to s end, the ex cee d act[...]

  • Page 462

    462 QoS Comma nds • bw-0 — Sp ecifies the m inimum trans mission band width for an int erface. Y o u can specify as many band widths a s there are interfaces (bw-0 through bw-n). (Ra nge: 0–10 0 in in crements of 5) Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode or Interf ace Configura[...]

  • Page 463

    QoS Co mm ands 463 Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode or Interf ace Configuration (Ethernet, P ort- channel) mode User Guideli nes This command has no user guidelines. Example The follow ing example dis play s how to activa te the str ict prior ity sch eduler mode for two queues [...]

  • Page 464

    464 QoS Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following example displays how to s et the Dif fServ oper ational mode to active. console(Config)#diffserv drop Use the drop command in P olicy-Class -Map Configuration mode to spe cify that all pack ets for the ass ociate[...]

  • Page 465

    QoS Co mm ands 465 mark cos Use the mark co s command in P o licy-Class-Map Co nfiguration mode to mark all packets for the associated traffic stream with the specified class of servi ce val ue in the prior ity fie ld of t he 802. 1p header . If the pac ket does no t alre ady contain this header , one is inserted. Syntax mar k cos cos-valu e • co[...]

  • Page 466

    466 QoS Comma nds • dscpval — S pecifies a D SCP value (1 0, 12, 14, 1 8, 20 , 22, 26, 28 , 30, 34, 36, 38, 0 , 8, 16, 24 , 32 , 40, 4 8, 56, 4 6) or a DSC P keywo rd (af11, af1 2, af13 , af21, af2 2, af23 , af31, af32, a f33, a f41, af4 2, af43 , be, cs0, cs1, c s2, cs3, c s4, cs5, cs6, cs7, ef). Default Conf iguration This command has no defa[...]

  • Page 467

    QoS Co mm ands 467 User Guideli nes. This command has no user guidelines. Example The following ex ample displays console(config)#policy-map p1 in console(config-policy-map)#class c1 console(config-policy-classmap)#mark ip-precedence 2 console(config-policy-classmap)# match cl ass-map Use the match c lass-ma p command to add to the specified class [...]

  • Page 468

    468 QoS Comma nds • Any attemp ts to delete the ref cl a ssn a me class wh ile the class is st i ll ref ere nc ed by a ny cla ss-map-name fails. • Th e combined match criteria of class -map-name and re f c l a s s n a m e must be an allowe d combination ba sed on the class type. • Any subsequ ent changes to the re f c l a s s n a m e class ma[...]

  • Page 469

    QoS Co mm ands 469 Command Mode Class-Map Configuration mode User Guideli nes This command has no user guidelines. Example The following exampl e displays adding a match condition to the specified class. console(config-classmap)#match cos 1 match destinatio n-address mac Use the match destination- address mac command in Class-Ma p Configuration mod[...]

  • Page 470

    470 QoS Comma nds Example The following example displays adding a match condition for the specified MAC addr ess and bit mask. console(config-classmap)#match destination-address mac AA:ED:DB:21:11:06 FF:FF:FF:EF:EE:EE match dstip Use the match dstip command in Clas s-Map Configuration mode to add to the specified class definition a match condition [...]

  • Page 471

    QoS Co mm ands 471 match dstip6 The match dstip6 co mmand adds to the specified cla ss definition a mat ch condition based on the destination IPv6 address of a pack et. Syntax match dstip 6 de sti nat io n-ip v6 -pref ix /pref ix- le ngt h • destinat ion-ipv6 -prefix — IPv6 p refix in IPv6 global ad dress format. • prefix-length — IPv6 pref[...]

  • Page 472

    472 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode Class-Map Configuration mode User Guidel ines This command has no user guidelines . Example The following example displays adding a match condition based on the destination laye r 4 port of a pack e t using the " e cho" port name k eyword. con[...]

  • Page 473

    QoS Co mm ands 473 Example The following example displ ay s how to add a match condition based on ethertype. console(config-classmap)#match ethertype arp match ip6flowlbl The match ip6flowlbl command adds to the specified class definition a match condition based on the IPv6 flow label of a pack et. Syntax match ip6flowlb l lab el • label - The va[...]

  • Page 474

    474 QoS Comma nds match ip dscp Use the match ip dscp command in Class-Map Configuration mode t o add to the spec ifie d class defi nition a m atch co ndition based on the value of the IP DiffServ Code P oint (DSCP) field in a pack et. This field is defined as the high-order six bits of the Service T ype octe t in the IP header . The low-order two [...]

  • Page 475

    QoS Co mm ands 475 match ip pr ecedence Use the match ip precedence command in Class-Map Configuration mode to add to the specified class definiti o n a match condition based on the value of the IP precedence field. Syntax match ip prece dence precedence • precedence — S pecifies the precedence field in a packet. This field is the high-order th[...]

  • Page 476

    476 QoS Comma nds Syntax match ip tos tosbit s tosma sk • tosb its — Spe cifies a two-d igit hexadecima l numb er . (Range : 00–ff) • tosmask — Spe cifies the bit positions in the to sbits param eter tha t are used for comparison against t he IP TO S field in a packet. Th is value of t his paramet er is exp ressed a s a two-digi t hexadec[...]

  • Page 477

    QoS Co mm ands 477 • protocol-name — Specifies one of the supp orted p rotocol name keywords. The supported values are icmp , igmp , ip , tcp , and udp . • protocol-number — Specifies the standard value assigned by IANA. (Ran ge 0–25 5) Default Conf iguration This command has no default configuration. Command Mode Class-Map Configuration [...]

  • Page 478

    478 QoS Comma nds Command Mode Class-Map Configuration mode User Guidel ines This command has no user guidelines . Example The following example adds to t he specified class definition a match condition based on the source MAC addr ess of the packet. console(config-classmap)# match source-address mac 10:10:10:10:10:10 11:11:11:11:11:11 match srcip [...]

  • Page 479

    QoS Co mm ands 479 Example The following exampl e displays adding a match condition for the specified IP addres s and address bit mask. console(config-classmap)#match srcip 10.240.1.1 10.240.0.0 match sr cip6 The match srcip6 command adds to the specified class definition a match condition based on the source IPv6 address of a pack et. Syntax match[...]

  • Page 480

    480 QoS Comma nds match srcl4port Use the match srcl 4port co m mand in C l ass -Map Co nfiguration mode to add to the specif ied class definition a ma tc h condition based on the source layer 4 port of a packet using a single keyword or a numeric notation. Syntax matc h srcl 4port { portkey | port-num ber } • portkey — Sp ecifies one of th e s[...]

  • Page 481

    QoS Co mm ands 481 match vlan Use the match v lan command in Class-Map C onfiguration mode to add to the specified class definition a ma tch condition based on the value of the layer 2 VLAN Identifier field. This field is the only tag in a single tagged packet or the first or outer tag of a double VLAN packet. Syntax match vlan < vlan-id > ?[...]

  • Page 482

    482 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode P olicy-Class-Ma p Configuration mo de User Guidel ines The por t identif ied in this com mand is ide ntica l to the destina tion por t of the moni tor command. Example The following examp le displays how to copy a ll the data to ethernet port 1/g5. con[...]

  • Page 483

    QoS Co mm ands 483 • dscpval — DSCP valu e. (Range: 0 – 63 or a k eywor d from this l ist, af11 , af12 , af13 , af21 , af22 , af23 , af31 , af32 , af33 , af41 , af42 , af43 , be , cs0 , cs1 , cs2 , cs3 , cs4 , cs5 , cs6 , cs7 , ef ) Default Conf iguration This command has no default configuration. Command Mode P olicy-Class-Map Configuration [...]

  • Page 484

    484 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines The CLI mode is changed to P olicy-Class-Map Configuration when this command is successfully e xecuted. The policy type dicta tes which of the indivi dual policy attribute comm ands ar e valid wi thin the p[...]

  • Page 485

    QoS Co mm ands 485 User Guideli nes This command has no user guidelines. Example The following exampl e shows how to redir ect incoming packets t o port 1/g1. console( config-policy-classmap )#redirect 1/g1 service-policy Use the ser vice-policy command in either Global Configuration m ode (for all system inte rfaces) or Interface Co n figur ation [...]

  • Page 486

    486 QoS Comma nds Ensure that no attr ibutes wi thin th e policy definition exceed the capab ilities of the i nterface . When a po licy is at tached to an interf ace succe ssfully , any attempt to chang e the pol icy defi nition, such that it would r esult in a violat ion of th e interfa ce capa biliti es, causes the policy chan ge atte mpt to fail[...]

  • Page 487

    QoS Co mm ands 487 Example The following example dis plays all the configuration inform ation for the cla ss named "Dell". console#show class-map Class L3 Class Name Type Proto Reference Class Name --------------------- ----- ----- ----------------------------- ipv4 All ipv4 ipv6 All ipv6 stop_http_class All ipv6 match_icmp6 All ipv6 cons[...]

  • Page 488

    488 QoS Comma nds console#show class-map stop_http_class Class Name........................... stop_http_class Class Type........................... All Class Layer3 Protocol................ ipv6 Match Criteria Values ---------------------------- ----------------------- Source IP Address 2001:DB8::/32 Source Layer 4 Port 80(http/www) show classofse[...]

  • Page 489

    QoS Co mm ands 489 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes If the interf ace is specifie d, the 802. 1p mapping table of the i nterface is displayed. If omit ted, the most re ce nt global configuration settings are displayed. Example The following example di sp lays the d[...]

  • Page 490

    490 QoS Comma nds The following table lists th e paramete rs in the example and gives a description of each. show classofser vice ip-dscp-mapping Use the show classofser vice ip-dscp-mapping command in P rivileged EXEC mode to disp lay t he cur rent IP D SCP mapp ing to intern al t raffi c cla sses for a spe cifi c in terf ac e. Syntax show classof[...]

  • Page 491

    QoS Co mm ands 491 21 31 41 51 61 71 8(cs1) 0 90 10(af11) 0 11 0 12(af12) 0 13 0 14(af13) 0 15 0 16(cs2) 0 17 0 18(af21) 0 19 0 --More-- or (q)uit 20(af22) 0 21 0 22(af23) 0 23 0 24(cs3) 1 25 1 26(af31) 1[...]

  • Page 492

    492 QoS Comma nds 27 1 28(af32) 1 29 1 30(af33) 1 31 1 32(cs4) 2 33 2 34(af41) 2 35 2 36(af42) 2 37 2 38(af43) 2 39 2 40(cs5) 2 41 2 42 2 --More-- or (q)uit 43 2 44 2 45 2 46(ef) 2 47 2 48(cs6) 3 49 3 50 3 51 3[...]

  • Page 493

    QoS Co mm ands 493 52 3 53 3 54 3 55 3 56(cs7) 3 57 3 58 3 59 3 60 3 61 3 62 3 63 3 console# show clas sofservice trust Use the show classofser vice trust command in P rivileged EXEC mode to display the curr ent tru st mode set ting for a specific i nterface. Syntax show classofser vice trust [< unit>/<port-type>< port> | port-cha[...]

  • Page 494

    494 QoS Comma nds • port- channel number — Sp ecifies a valid port-chann el num ber . Range is 1- 8. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines If the inter face is specified, th e port trus t mode of the interface i s displayed. If omitted, the port trust mode for globa[...]

  • Page 495

    QoS Co mm ands 495 User Guideli nes This command has no user guidelines. Example The following exampl e displays the DiffServ information. console#show diffserv DiffServ Admin mode........................ Enable Class Table Size Current/Max............... 5 / 25 Class Rule Table Size Current/Max.......... 6 / 150 Policy Table Size Current/Max......[...]

  • Page 496

    496 QoS Comma nds Example console#show diffserv service interface ethernet 1/g1 in DiffServ Admin Mode.......................... Enable Interface..................................... 1/g1 Direction..................................... In No policy is attached to this interface in this direction. show diffse rv service interface port-channel in Synt[...]

  • Page 497

    QoS Co mm ands 497 Direction................................... In No policy is attached to this interface in this direction show diffserv service brief Use the show diffserv ser vice brief command in Pr ivileged EXEC mode to display all interfaces in the syst em to which a DiffS e rv policy ha s been attached. Syntax show diffser v ser vice brief [...]

  • Page 498

    498 QoS Comma nds show inte rfaces cos-qu eue Use the show interfaces cos-queue command in Priv ileged EXEC mode to display the class-of-se rvice queue configuration for the specif ied interface. Syntax show int erfaces cos- queue [< unit>/< port -type> <port> | port-channel port-channel number ] • <unit>/<por t-type>[...]

  • Page 499

    QoS Co mm ands 499 Global Configuration Interface Shaping Rate......................... 0 Queue Id Min. Bandwidth Scheduler Type Queue Management Type -------- -------------- -------------- --------------------- 0 0 Weighted Tail Drop 1 0 Weighted Tail Drop 2 0 Weighted Tail Drop 3 0 Weighted Tail Drop 4 0 Weighted Tail Drop 5 0 Weighted Tail Drop [...]

  • Page 500

    500 QoS Comma nds The following table lists th e parameters i n the examples and gives a description of each. show policy- map Use the show policy-m ap command in P rivileged EXEC mode to display all configuration information for the specified policy . Syntax show po licy-map [ policyn ame ] • policyname — Sp ecifies the n ame of a valid existi[...]

  • Page 501

    QoS Co mm ands 501 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following exampl e displays the DiffServ information. console#show policy-map Policy Name Policy Type Class Members ----------- ----------- ------------- POLY1 xxx [...]

  • Page 502

    502 QoS Comma nds User Guidel ines This command has no user guidelines . Example The fo llo win g exa mp le d is pla ys the st atis tic s info rm atio n fo r p ort 1/g 1. console#show policy-map interface 1/g1 in Interface.................................... 1/g1 Operational Status........................... Down Policy Name........................[...]

  • Page 503

    QoS Co mm ands 503 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The followi ng e xample displays a s ummary of policy -oriented statistic s information. console#show service-policy Oper Policy Intf Stat Name ------ ----- ------------------------------- 1/g1 Down DELL 1/g2 Down DELL 1/g3 Down DELL [...]

  • Page 504

    504 QoS Comma nds traffic-shape Use the traffic-shape command in Global Configuration mode and Interface Configuration mode to specify the maximum transmission bandwidth limit for th e in ter face as a w hol e. T his pr oc ess, also kno wn a s rate shaping , has the effe ct of smoothin g temporary traff ic bursts ove r time so that th e transmit te[...]

  • Page 505

    RADIUS C ommands 505 24 RADIUS Commands This chapter exp lains the following commands: • aaa account ing network de fault start- stop group radi us •a c c t - p o r t •a u t h - p o r t •d e a d t i m e •k e y •m s g a u t h •n a m e • primary •p r i o r i t y • radius- server de adtime • radius-se rver host • radius- server[...]

  • Page 506

    506 RADIUS C ommands aaa acc ounting network defa ult start-stop group radius Use the aaa accounting network defa ult start-stop group ra dius command to enable RADIUS accoun ting on the swit ch. Use the “no” form of t his command to disable R ADIUS accounting. Syntax aaa accou nting n etwork default s tar t-stop gro up rad ius no aaa accountin[...]

  • Page 507

    RADIUS C ommands 507 Default Conf iguration The default value of the port number is 1813 . Command Mode Radius (accounting) mode User Guideli nes There ar e no user gui delines for this command. Example The followi ng exampl e sets po rt number 56 for accounting requests. console(config)#radius-server host acct 3.2.3.2 console(Config-acct-radius)#a[...]

  • Page 508

    508 RADIUS C ommands Example The f ollowing exampl e sets th e port num ber 2412 f or authe nticati on re q ue s t s . console(config)#radius-server host 192.143.120.123 console(config-radius)#auth-port 2412 deadtime Use the deadti me command in Radius mode to improve Radius resp on se times when a server is unavailable by causing the unavailable s[...]

  • Page 509

    RADIUS C ommands 509 key Use the key command to speci fy the enc ryption key which i s shared with the R ADIUS server . Use the "no" form of this co mmand to remove the k ey . Syntax key key -s t ri n g • key -s tr in g — A string specifying the en cryption key (Range: 0 - 128 characte rs). Default Conf iguration There is no k ey conf[...]

  • Page 510

    510 RADIUS C ommands Default Conf iguration The message authenti cator attribute is enabled by default. Command Mode Radius mode User Guidel ines There ar e no user gui delines for this command. Example console(Config-auth-radius)#msgauth name Use the name command t o assign a name to a R ADIUS server . Use the "no" form of this command t[...]

  • Page 511

    RADIUS C ommands 511 primary Use the primary command to specify that a configured server should be the primary server in the group of authent ication servers which have the s ame server name. Multiple p rimary servers can be configured for each g roup of servers which have the same name. When the R ADIUS client has to perform transac tions with an [...]

  • Page 512

    512 RADIUS C ommands Default Conf iguration The default priority is 0. Command Mode Radius mode User Guidel ines User must enter the mode corresponding to a specific Radius server before ex ecuting this command. Example The following example specifies a priority of 10 for the designated serve r . console(config)#radius-server host 192.143.120.123 c[...]

  • Page 513

    RADIUS C ommands 513 User Guideli nes This command has no user guidelines. Example The following example se t s the interval for which any unavailable Radius servers ar e skippe d over by transaction r equests to 10 minutes. console(config)#radius-server deadtime 10 radius-ser ver host Use the radi us-server host command in Global Configuration mod[...]

  • Page 514

    514 RADIUS C ommands Example The followi ng e xample specifies a Radius server host with the following cha ract er ist ics: Server h ost IP a ddress — 192 .168.1 0.1 console(config)#radius-server host 192.168.10.1 radius-s erver key Use the radius-ser ver key command in Global Configuration mode to set the authen tication an d encryp tion key for[...]

  • Page 515

    RADIUS C ommands 515 radius-ser ver retransmit Use the radius-ser ver retransm it command in Global C onfiguration mode to specif y the number of times the R adius cl ient wil l retransmit requests to th e Radius server . T o reset the de fault configuration, use the no form of this command. Syntax radius-ser ver retra nsmit retr ie s no radius-ser[...]

  • Page 516

    516 RADIUS C ommands no radius-ser ver so urce-ip • source — Specifies the source IP address. Default Conf iguration The default I P address is the outg oing IP inter face. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following example co nfigures the source IP addr ess used for c[...]

  • Page 517

    RADIUS C ommands 517 User Guideli nes This command has no user guidelines. Example The following exampl e sets the interval for which a switch waits for a s e rver host to re ply to 5 se conds. console(config)#radius-server timeout 5 retransmit Use the retransmi t command in Radius mode to specify the number of times the Radius client re transmits [...]

  • Page 518

    518 RADIUS C ommands show radi us-servers Use the show radius-ser vers command to display the list of configured R ADIUS servers and the values configur ed for the global parameters of the RA D I U S c l i en t . Syntax show radius-ser vers [ accounting | authe nticati on ] [ name [ ser vern ame ]] accounting — This opti onal par amete r will cau[...]

  • Page 519

    RADIUS C ommands 519 Example console#show radius-servers IP address Type Port TimeOut Retran. DeadTime Source IP Prio. Usage ------------- ----- ----- ------- ------- -------- ------------- -- --- ----- 10.27.5.157 Auth 1812 Global Global Global 10.27.65.13 0 all Global values Configured Authentication Servers : 1 Configured Accounting Servers : 0 [...]

  • Page 520

    520 RADIUS C ommands Retransmit : 3 Deadtime : 0 Source IP : 0.0.0.0 RADIUS Attribute 4 Mode : Disable RADIUS Attribute 4 Value : 0.0.0.0 console#show radius-servers accounting name Server Name Host Address Port Type -------------------------- -------------------- ------ ---------- Default-RADIUS-Server 2.2.2.2 1813 Secondary console#show radius-se[...]

  • Page 521

    RADIUS C ommands 521 show radiu s-servers statistics Use the show radius- servers statisti cs command to show the st atistics for an authenti cation or a ccounting s erver . Syntax show radius-ser vers statistics [ acco unting | auth entic ation ] { ipaddres s | hostname | name servername } • accounting | authen tica tion — The type of server ([...]

  • Page 522

    522 RADIUS C ommands The following fields are displayed for authentication servers: Requ ests The num ber of R ADIUS Ac countin g Request p acket s sent to thi s server not incl uding the retransmi ssion s. Retra nsmis sions The numbe r of RADIUS Accoun ting Re ques t packets retransmitte d to thi s RADIUS accounti ng server . Responses The n umber[...]

  • Page 523

    RADIUS C ommands 523 Example console#show radius-server statistics account ing 192.168.37.200 RADIUS Accounting Server Name................ . Default_RADIUS_Server Host Address................................. . 192.168.37.200 Round Trip Time.............................. . 0.00 Requests..................................... . 0 Access Ac cepts The [...]

  • Page 524

    524 RADIUS C ommands Retransmissions............................ ... 0 Responses.................................. ... 0 Malformed Responses........................... 0 Bad Authenticators......................... ... 0 Pending Requests........................... ... 0 Timeouts................................... ... 0 Unknown Types.................[...]

  • Page 525

    RADIUS C ommands 525 source-ip Use the source-ip command in Radius mode to specify the source IP addr ess to be used for communication with Radius servers. 0.0.0.0 is int erpreted as a request to use the IP a ddress of the outgoing IP inte rface. Syntax source-ip source • source — A valid sour ce IP addr ess. Default Conf iguration The IP addre[...]

  • Page 526

    526 RADIUS C ommands Default Conf iguration The default value is 3 seconds. Command Mode Radius mode User Guidel ines User must enter the mode corresponding to a specific Radius server before ex ecuting this command. Example The follo wing e xample s pecifi es the time out sett ing for the d esigna ted Radius Server . console(config)#radius-server [...]

  • Page 527

    RADIUS C ommands 527 User Guideli nes User must enter the mode corresponding to a specific Radius server b efore ex ecuting this command. Example The following example specifies usage type login . console(config)#radius-server host 192.143.120.123 console(config-radius)#usage login[...]

  • Page 528

    528 RADIUS C ommands[...]

  • Page 529

    Spanni ng T ree Com mands 529 25 Spann ing T r ee Co mman ds This chapter exp lains the following commands: • clear span ning-tr ee detected -protocols •e x i t ( m s t ) •i n s t a n c e ( m s t ) •n a m e ( m s t ) • revision (mst) • show spanni ng-tree • show spanni ng-tre e summary •s p a n n i n g - t r e e • spanning-t ree a[...]

  • Page 530

    530 Span ning T ree Com mand s • spa nning-tree portfast bpdufilter defau lt • spa nnin g-tree portfast de fault • spa nning-tree port-priority • spa nning-tree priority • spanning -tre e tcnguar d • spanning- tree tr ansmit hold- count[...]

  • Page 531

    Spanni ng T ree Com mands 531 clear spannin g-tree detected-pr otocols Use the clear sp anning -tree dete cted-protoc ols command in P rivileged EXEC m ode to restart the p rotocol migr ation proce ss (force the r enegotiation with neighboring switches) on all interfaces or on the specified interface. Syntax clear spanning- tree detec ted-protocols[...]

  • Page 532

    532 Span ning T ree Com mand s Default Conf iguration MST configuration. Command Mode MST mode User Guidel ines This command has no user guidelines . Example The following example shows how to ex it t he MST configuration mode and save change s. console(config)#spanning-tree mst configuration console(config-mst)#exit instance (mst) Use the instance[...]

  • Page 533

    Spanni ng T ree Com mands 533 User Guideli nes Before mapping VLANs to an instance us e the span ning-tree mst enable comma nd to enab le the in stance. All VLANs that are not explicitly map ped to an MST instance are mapped to the common and internal spanning tree (CIST) ins tance (instance 0) and cannot be unmapped from the CIST . F or two or mor[...]

  • Page 534

    534 Span ning T ree Com mand s Example The f ollowin g exampl e sets the co nfiguration name to “r e gion1”. console(config)#spanning-tree mst configuration console(config-mst)#name region1 revision (mst) Use the revision com mand in MST mode to identify the configuration revision numbe r . T o return to the defaul t setting , use the no form o[...]

  • Page 535

    Spanni ng T ree Com mands 535 Syntax show spannin g-tree [ethernet interface-number | port- channel port-channel- number] [ inst anc e instance-id] show sp anning-tre e [detail] [ active | blockedpo rts] | [insta nce inst anc e -id ] show spannin g-tree mst-conf iguratio n • detail — Displays de tailed in formation. • active — Displays acti[...]

  • Page 536

    536 Span ning T ree Com mand s Address 80:00:00:FC:E3:90:00:5D This Switch is the Root. Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec TxHoldCount 6 sec Interfaces Name State Prio.Nbr Cost Sts Role PortFast Restricted ------ -------- --------- ---------- ---- ----- -------- ------- 1/g1 Enabled 128.1 0 DIS Disb No No 1/g2 Enabled 128.2 0 DIS [...]

  • Page 537

    Spanni ng T ree Com mands 537 1/g19 Enabled 128.19 0 DIS Dis b No No 1/g20 Enabled 128.20 0 DIS Dis b No No --More-- or (q)uit Name State Prio.Nbr Cost Sts Role PortFast Restricted ------ -------- --------- ---------- ---- ----- -------- ------- 1/g21 Enabled 128.21 0 DIS Dis b No No 1/g22 Enabled 128.22 0 DIS Dis b No No 1/g23 Enabled 128.23 0 DIS[...]

  • Page 538

    538 Span ning T ree Com mand s Regional Root Path Cost: 0 ROOT ID Address 40:00:00:FC:E3:90:06:0F Path Cost 20000 Root Port 1/g1 Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec TxHoldCount 6 sec Bridge ID Priority 32768 Address 80:00:00:FC:E3:90:00:5D Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Interfaces Name State Prio.Nbr Cost Sts [...]

  • Page 539

    Spanni ng T ree Com mands 539 1/g12 Enabled 128.12 0 DIS Dis b No No 1/g13 Enabled 128.13 0 DIS Dis b No No 1/g14 Enabled 128.14 0 DIS Dis b No No 1/g15 Enabled 128.15 0 DIS Dis b No No 1/g16 Enabled 128.16 0 DIS Dis b No No --More-- or (q)uit Name State Prio.Nbr Cost Sts Role PortFast Restricted ------ -------- --------- ---------- ---- ----- ----[...]

  • Page 540

    540 Span ning T ree Com mand s ch6 Enabled 128.631 0 DIS Disb No No ch7 Enabled 128.632 0 DIS Disb No No ch8 Enabled 128.633 0 DIS Disb No No ch9 Enabled 128.634 0 DIS Disb No No ch10 Enabled 128.635 0 DIS Disb No No ch11 Enabled 128.636 0 DIS Disb No No ch12 Enabled 128.637 0 DIS Disb No No ch13 Enabled 128.638 0 DIS Disb No No ch14 Enabled 128.63[...]

  • Page 541

    Spanni ng T ree Com mands 541 Priority 32768 Address 80:00:00:FC:E3:90:00:5D Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Interfaces Name State Prio.Nbr Cost Sts Role PortFast RestrictedPort ------ -------- --------- ---------- ---- ----- -------- ------- --More-- or (q)uit Name State Prio.Nbr Cost Sts Role PortFast RestrictedPort ------ --[...]

  • Page 542

    542 Span ning T ree Com mand s Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32768 Address 80:00:00:FC:E3:90:00:5D Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Interfaces Name State Prio.Nbr Cost Sts Role PortFast RestrictedPort ------ -------- --------- ---------- ---- ----- -------- ------- --More-- or (q)uit Nam[...]

  • Page 543

    Spanni ng T ree Com mands 543 User Guideli nes The following fields are displayed: Example console#show spanning-tree summary Spanning Tree Admin Mode.......... Disabled Spanning Tree Version............. IEEE 802.1s BPDU Protection Mode.............. Disabled BPDU Filter Mode.................. Disabled BPDU Flooding Mode................ Disabled C[...]

  • Page 544

    544 Span ning T ree Com mand s Configuration Revision Level...... 0 Configuration Digest Key.......... 0xac36177f50283cd4b83821d8ab26de62 Configuration Format Selector..... 0 No MST instances to display. spanning- t ree Use the spanning -tree command in Global Configuration mode to enable spanning-tree functionality . T o disable spanning-tr ee fun[...]

  • Page 545

    Spanni ng T ree Com mands 545 spanning-tr ee auto-portfast Use the spanning- tree auto -portfas t comm and to set the port to a uto por tfast mode. This enables the port to b e come a portfast port if it does not see a ny BPDUs for 3 s e conds. Use the “no” form of t his command to disable aut o portfast mo de. Syntax spanning -tree a uto-por t[...]

  • Page 546

    546 Span ning T ree Com mand s no span ning-tree bpdu flooding Default Conf iguration This featur e is disabled by default. Command Mode Glo bal C onf igura tion mode Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#spanning-tree bpdu flooding spanning- t ree b pdu-protection Use the spanning -tree bp du-pro tecti[...]

  • Page 547

    Spanni ng T ree Com mands 547 Default Conf iguration BPDU p rotec tion is not en abled. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The following exampl e enables BPDU protection. console(config)#spanning-tree bpdu-protection spanning-tr ee cost Use the spanni ng-tre e cost command in Interfa[...]

  • Page 548

    548 Span ning T ree Com mand s Command Mode Interface Configuration (Et hernet, P ort-Channel) mode User Guidel ines There ar e no user gui delines for this command. Example The following exampl e configures the sp anning-t ree cost o n 1/g5 to 35000. console(config)#interface ethernet 1/g5 console(config-if-1/g5)#spanning-tree cost 35000 spanning-[...]

  • Page 549

    Spanni ng T ree Com mands 549 console(config-if-1/g5)#spanning-tree disable spanning-tr ee forward-time Use the spann ing-tr ee forward -time com mand in Global Configurat ion mode to configure the spanning-tree bridge forwar d time, which is the amount of time a port remains in the listening and lear ning states befor e entering the forwarding sta[...]

  • Page 550

    550 Span ning T ree Com mand s spanning- t ree g uard The spanning -tree gua rd command selects whet her loop guard or root guard is en abled on an i nterfa ce. If neith er is en abled , the port ope rates in accordance with the multi p le spanning tree protocol. Use t he “no” form of this command to disable loop guard or root guar d on the int[...]

  • Page 551

    Spanni ng T ree Com mands 551 Syntax spanning -tree loopgua rd default no spanning- tree loopgua rd default Default Conf iguration Loop guard is disab led by default. Command Mode Global Configuration mode Usage Guideli nes There ar e no usa ge guidelines for this command. Example The following e xample enables s panning-tree l o opguar d functiona[...]

  • Page 552

    552 Span ning T ree Com mand s User Guidel ines When configuring the Max-Age t he following relationships should be satisfie d: 2*(F orw ard- Time - 1) >= Max -Age Max-Age >= 2*(Hello- Time + 1) Example The following example configur es the spanning-tree bridge maximum-age to 10 seconds. console(config)#spanning-tree max-age 10 spanning- t re[...]

  • Page 553

    Spanni ng T ree Com mands 553 spanning-tr ee mode Use the spanni ng-tree mode command in Global Configuration mode to configure the spanning-tree protocol. T o return to the default configuration, use the no form of t his command. Syntax spanning -tree mo de { stp | rstp |mstp } no spanni ng-tree mo de • stp — Spanning T ree Prot ocol (STP) is [...]

  • Page 554

    554 Span ning T ree Com mand s This command is us ed to co nfigu re rst p path co st. Use the “no” fo rm of this com mand to reset the external cost t o the default. Syntax span ning-t ree mst 0 extern al-cos t cost no spanning- tree mst 0 external -cost • cost — The external cost of the com mon spanning t r ee (R ange: 0–20 000000 0). De[...]

  • Page 555

    Spanni ng T ree Com mands 555 Syntax spanning -tree mst configuration Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode User Guideli nes F or two or more switches to be i n t he same MST r egion, they must have the same VLAN mapping, the same config uration r evision number and the same name. E[...]

  • Page 556

    556 Span ning T ree Com mand s • cost — The po rt path co st. (Ran ge: 0–20 0,000,0 00) Default Conf iguration The default val ue is 0, which signi fies that the cost will be automatically calculated based on po rt speed. The default configuration is: • E the rnet ( 10 M bp s) — 2,000,000 • F a st Ethern et (100 Mbp s) — 200,0 00 • [...]

  • Page 557

    Spanni ng T ree Com mands 557 • priority — The port priority . (Ran ge: 0–2 40 in m ultiples o f 16) Default Conf iguration The default port-priority for IEEE MSTP is 128. Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes This command has no user guidelines. Example The followi ng exampl e configur es the po[...]

  • Page 558

    558 Span ning T ree Com mand s Command Mode Glo bal C onf igura tion mode User Guidel ines The priority va lue must be a multiple of 4096. Th e s w i t c h w it h t h e l o w e s t pr i o r i t y i s s el e c t e d as t h e r o o t of t h e s p an n in g t ree . Example The following example co nfigures the spanning tr ee priority of instance 1 to [...]

  • Page 559

    Spanni ng T ree Com mands 559 An interf ace with P or tF ast mode enab le d is moved directly to the spanning tree forwarding s tate whe n linkup o ccurs wi thout wai ting the standa rd forward-time delay . Example The following exampl e enables P ortF ast on 1/g5 . console(config)#interface ethernet 1/g5 console(config-if-1/g5)#spanning-tree portf[...]

  • Page 560

    560 Span ning T ree Com mand s spanning- t ree p ortfast default Use the spanning -tree p ortfast defaul t command to enable P ortfast mode only on access ports. Use the “no” form of this command to disable P ortfast mode on all ports. Syntax spanning-tree portfast de fault no span ning-tree portfast defaul t Default Conf iguration P ortfast mo[...]

  • Page 561

    Spanni ng T ree Com mands 561 Default Conf iguration The default port-priority for IEEE STP is 128. Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes The priority value must be a multiple of 16. Example The following exampl e configures the spanning pri o rity on 1/g5 to 96. console(config)#interface ethernet 1/g5[...]

  • Page 562

    562 Span ning T ree Com mand s User Guidel ines The priority va lue must be a multiple of 4096. The switch with the lowest pri ority is the root of the spanning t ree. Example The following example co nfigures s p anning-tree priority to 12288 . console(config)#spanning-tree priority 12288 spanning- t ree tcngu ard Use the spa nning-tree tcnguard c[...]

  • Page 563

    Spanni ng T ree Com mands 563 spanning-tree transmit hold-count Use the spann ing-tr ee trans mit hol d-count command to set the maximum number of BPDUs t hat a bridge is a llowe d to send within a hello time window (2 seconds) . Use the “n o” form of thi s command to reset the hold coun t to the default value. Syntax spanning -tree tra nsmit h[...]

  • Page 564

    564 Span ning T ree Com mand s[...]

  • Page 565

    Swit chpo rt Voice Comm ands 565 26 Switchport V oice Commands This chapter exp lains the following commands: • sh ow switch port voice • s witc hpo rt vo ice d etect aut o[...]

  • Page 566

    566 Switch por t Voice Co mmands show switchpo rt voice Use the show switchport voice command to show the status of auto-voip on an interface or a ll interfaces. Syntax show switchport voice [ inte rfa ce { ethe rnet interface | port-channel index }] • ethernet interface — Speci fies a vali d interface. The full s yntax is unit/port. • port-c[...]

  • Page 567

    Swit chpo rt Voice Comm ands 567 1/g8 Enabled 6 1/g9 Enabled 6 1/g10 Enabled 6 1/g11 Enabled 6 1/g12 Enabled 6 1/g13 Enabled 6 1/g14 Enabled 6 1/g15 Enabled 6 1/g16 Enabled 6 1/g17 Enabled 6 1/g18 Enabled 6 1/g19 Enabled 6 1/g20 Enabled 6 --More-- or (q)uit console#show switchport voice ethernet 1/g1 Interface Auto VoIP Mode Traffic Class ---------[...]

  • Page 568

    568 Switch por t Voice Co mmands The command outp ut provides the follow ing information: • Au to V oI P Mo d e —The Au to V oIP mode on the in terface. • T raffic Cl a ss —The Cos Queue or T raffic Class to w hich all V oIP traffic is mapped . This is n ot configur able and defau lts to the highest C OS q ueue availab le in the sys tem for[...]

  • Page 569

    T ACACS+ Com mands 569 27 T ACACS+ Commands This chapter exp lains the following commands: •k e y •p o r t •p r i o r i t y • show tacacs • tacacs-server host •t a c a c s - s e r v e r k e y •t a c a c s - s e r v e r t i m e o u t •t i m e o u t[...]

  • Page 570

    570 T ACACS+ Comma nds key Use the key command in T ACA CS Configuration mode to specify the authenti cation and e ncryp tion key for all T ACACS communic ations b etween the devi ce and t he T ACACS server . Thi s key must ma tch the key used on the T ACACS da e mon. Syntax key [key-st rin g] •k e y - s t r i n g — T o speci fy the key name. ([...]

  • Page 571

    T ACACS+ Com mands 571 Default Conf iguration The default port number is 49. Command Mode T ACACS Configuration mode User Guideli nes This command has no user guidelines. Example The following exampl e displays how to specify server po rt number 1200. console(tacacs)#port 1200 priority Use the priority command in T A CACS Configuration mode to spec[...]

  • Page 572

    572 T ACACS+ Comma nds console(config-tacacs)#priority 10000 show tacac s Use the show tacacs command in P rivileged EXEC mode to display th e configuration and st atistics of a T ACACS+ serve r . Syntax show tacacs [ ip-address ] • ip-addr ess — The nam e or IP address of the host. Default Conf iguration This command has no default configurati[...]

  • Page 573

    T ACACS+ Com mands 573 tacacs-serve r host Use the tacacs-ser ver host command in Global Configuration mode to configure a T A C ACS+ server . This command enters into the T ACACS+ configuration mode. T o delete the specif ied hostname or IP addr ess, use the no form of t his command. Syntax tacacs-ser ver host { ip-addr ess | hostname } no tacacs-[...]

  • Page 574

    574 T ACACS+ Comma nds Syntax tacacs-server key [ key -s t ri n g ] no tacacs-ser ver key • key-string — S pecifies the au the ntica tion an d en crypt ion key for all T ACACS communications between the switch a nd the T ACACS+ server . This key must match the key used on the T ACACS+ daemon. (Range: 0–128 c harac ters) Default Conf iguration[...]

  • Page 575

    T ACACS+ Com mands 575 Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The following example sets the timeo ut value as 30. console(config)#tacacs-server timeout 30 timeout Use the timeo ut command in T A CACS Configuration mode to specify the timeout val ue in seconds. If no ti me out value is s[...]

  • Page 576

    576 T ACACS+ Comma nds[...]

  • Page 577

    VLAN Co mm ands 577 28 VLAN Commands This chapter exp lains the following commands: • dvlan-t unnel e thertyp e •i n t e r f a c e v l a n • interfa ce range vlan • mod e dvlan-tunnel •n a m e •p r o t o c o l g r o u p •p r o t o c o l v l a n g r o u p •p r o t o c o l v l a n g r o u p a l l • show dvla n-tunnel • show dvla n[...]

  • Page 578

    578 VLAN Command s • s witc hpo rt tr unk allo wed v lan •v l a n • vlan associ ation mac • vlan associ ation subnet •v l a n d a t a b a s e •v l a n m a k e s t a t i c • vlan protocol group • vlan protocol group add protoco l • vlan protocol group name • vlan protocol group remov e • groupid — The protocol-based VLAN grou[...]

  • Page 579

    VLAN Co mm ands 579 dvlan-tunnel eth ertype Use the dvlan-t unnel ethert ype command in Global Configuratio n mode to configure t he ethertype for the specified interface. T o configure the EtherT yp e on the s pecified in terface to its default value, us e the no form of thi s command. Syntax dvlan-tunnel eth ertype { 802.1 Q | vman | custom < [...]

  • Page 580

    580 VLAN Command s Syntax interf ace vlan vlan-id • vla n-id — The ID of a valid VLAN (Range: 1–40 93). Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The fol low ing examp le co nfig ures the VLA N 1 IP a ddress o f 13[...]

  • Page 581

    VLAN Co mm ands 581 Command Mode Global Configuration mode User Guideli nes Commands used in the inte rface range context are ex ecuted independent ly on each interface in the range. If the command r eturns an error on one of the interfaces, an error message is disp layed and e xecution continues on other interfaces. Example The followi ng exampl e[...]

  • Page 582

    582 VLAN Command s Example The following example displays how to enable Double VLAN T unneling at ethernet port 1/g1. console(config-if-1/g1)#mode dvlan-tunnel name Use the name command in Interface Configuration mode to add a name to a VLAN. T o remove the VLAN name, us e the no form of this command. NOTE: Th is command cannot be configur ed for a[...]

  • Page 583

    VLAN Co mm ands 583 protocol gr oup Use the proto col gr oup command in V LAN Database mode to attach a VLAN ID to the pro tocol-based group ident ified by groupid . A gr oup may only be ass ociated with o ne VLAN at a ti m e. Howev er , the VLAN a ssociation can be change d. The referenced VLAN should be created prior to the creation of the protoc[...]

  • Page 584

    584 VLAN Command s protocol vla n group Use the protoco l vlan group command in Interface Configuration mode to add the phys ic al u nit /por t int erf ac e to the protocol-b ased gr oup identifi ed by groupid . A gr ou p may h ave more tha n one int erf ace ass oci ate d wit h it . Ea ch interface and protocol combination can be associated with on[...]

  • Page 585

    VLAN Co mm ands 585 console(config-if-1/g1)#protocol vlan group 2 protocol vla n group all Use the pro tocol vlan g roup a ll command in Global C onfiguration mode to add all physical interfaces to the protocol-based group identified by grou pid . A group may have mor e than one interface associated wit h it. Each interface and protocol combination[...]

  • Page 586

    586 VLAN Command s console(config)#protocol vlan group all 2 show dvlan- tunnel Use the sh ow dvlan-tunn el command in Privileged EXEC mode to display all interfaces enabled for Doub le VLAN T unneling. Syntax show dvlan-t unnel Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines Thi[...]

  • Page 587

    VLAN Co mm ands 587 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following exampl e displays detail ed information for unit/port "1/g1." console#show dvlan-tunnel interface 1/g1 Interface Mode EtherType --------- -----[...]

  • Page 588

    588 VLAN Command s Syntax show int erfaces swi tchport {ethern et interface | port-chan nel port-channel- number } • Interface — Sp ecific interfa ce, such a s etherne t 1/g8. • port- channel -number — V ali d port-cha nnel trunk i ndex. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode Use[...]

  • Page 589

    VLAN Co mm ands 589 8 VLAN008 tagged Dynamic 11 VLAN0011 tagged Static 19 IPv6 VLAN untagged Static 72 VLAN0072 untagged Static Static configuration: PVID: 1 (default) Ingress Filtering: Enabled Acceptable Frame Type: All Port 1/g1 is statically configured to: VLAN Name Egress rule ---- --------- ----------- 11 VLAN0011 tagged 19 IPv6 VLAN untagged[...]

  • Page 590

    590 VLAN Command s Port 1/g1 is member in: VLAN Name Egress rule Type ---- --------- ----------- ----- 91 IP Telephony tagged Static Static configuration: PVID: 8 Ingress Filtering: Disabled Acceptable Frame Type: All Port 1/g2 is statically configured to: VLAN Name Egress rule ---- --------- ----------- 8 VLAN0072 untagged 91 IP Telephony tagged F[...]

  • Page 591

    VLAN Co mm ands 591 Port 2/g19 is member in: VLAN Name Egress rule Type ---- --------- ----------- ----- 2921 Primary A unt agged Static 2922 Community A1 untagged Static Static configuration: PVID: 2922 Ingress Filtering: Enabled Acceptable Frame Type: Untagged GVRP status: Disabled Port 2/g19 is member in: VLAN Name Egress rule Type ---- --------[...]

  • Page 592

    592 VLAN Command s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example displays the P rotocol-Based VLAN information for either the ent ire system. console#show port protocol all Group Name ID Protocol(s VLAN Interfa[...]

  • Page 593

    VLAN Co mm ands 593 User Guideli nes This command has no user guidelines. Example The followi ng e xample i dent ifies te st as the pro tecte d group . console#show switchport protected 0 Name......................................... test show vlan Use the show vlan command in P rivileged EXEC mode to display VLAN information. Syntax show vlan [ id[...]

  • Page 594

    594 VLAN Command s 2/g1-1/g4 10 VLAN0010 1/g3-1/g4 dynamic Required 11 VLAN0011 1/g1-1/g2 static Required 20 VLAN0020 1/g3-1/g4 static Required 21 VLAN0021 static Required 30 VLAN0030 static Required 31 VLAN0031 static Required 91 VLAN0011 1/g1-1/g2 static Not Required 3964 Guest VLAN 1/g17 Guest - show vlan a s sociation mac Use the show vlan asso[...]

  • Page 595

    VLAN Co mm ands 595 MAC Address VLAN ID ----------------------- ------- 0001.0001.0001.0001 1 show vlan assoc iation subnet Use the show vlan association subnet command in Privileged EXEC mode to display the VLAN associate d with a specific configured IP -Addres s and netmask. If no IP Address and net mas k are specifie d, the VLAN associations of [...]

  • Page 596

    596 VLAN Command s switchport access vlan Use the switchport access vlan command in Interface Configuration mode to configure the VLAN ID when the inte rface is in access mode. T o reconfigur e the default, use t he no form of this command. Syntax switchport access vlan vlan -id no switchport access vlan • vla n-id — A valid VLAN ID of the VLAN[...]

  • Page 597

    VLAN Co mm ands 597 Syntax switchport forbidden vlan { add vlan-lis t | remove vlan-list } • add vla n-list — List of v alid VLAN IDs to add to the forbidden l ist. Separa te nonconse cutive VLAN IDs wi th a comma and no spa ces. Use a hyphen to designate a range of IDs. • remo ve vlan-list — List of valid VLAN IDs to remove from th e forbi[...]

  • Page 598

    598 VLAN Command s no switch port gener al acceptabl e-frame-ty pe tagg ed-only Default Conf iguration All frame types ar e accepted at ingr ess. Command Mode Interface Configuration (Et hernet, port-channel) mode User Guidel ines This command has no user guidelines . Example The following example co nfigures 1 / g8 to discard u ntagged frames at i[...]

  • Page 599

    VLAN Co mm ands 599 • untagged — Sets the port to tr ansmit untagg ed packe ts for the VLANs. Default Conf iguration Untagged. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guideli nes Y ou can use this command to change the egress rule (for e xample, from tagged to untagged) wit hout first removing the VL AN from th e[...]

  • Page 600

    600 VLAN Command s User Guidel ines This command has no user guidelines . Example The following example shows how to enables port i ngress filtering on 1/g8. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#switchport general ingress- filtering disable switchport general pvid Use the switchport general pvid command in Interface Confi[...]

  • Page 601

    VLAN Co mm ands 601 Example The following example shows how to configure the PVID for 1/g8, w hen the interface is in ge neral mode. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#switchport general pvid 234 switchport mode Use the switchport mode command in Interface Configuration mode to configure the VLAN mem bership mode of a p[...]

  • Page 602

    602 VLAN Command s User Guidel ines This command has no user guidelines . Example The following example co nfigures 1 / g8 to access mode. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#switchport mode access switchp ort prote cted Use the switchport protected command in Interface Configuration mode to configure a protected port. T[...]

  • Page 603

    VLAN Co mm ands 603 Example The following example configures Ethernet port 1/g1 as a member of protected group 1. console(config)#interface ethernet 1/g1 console(config-if-1/g1)#switchport protected 1 switchp ort prote cted na me Use the switchport protected nam e command in Global Configuration mode to a dds the p ort to t he prot ected g roup 1 a[...]

  • Page 604

    604 VLAN Command s switchport trun k allowed vla n Use the switchport trun k allowed vlan command in Interface Configuration mode to a dd VLANs to or remove VLA Ns from a trunk port . Syntax switchport trunk allowed vlan { add vlan- list | remove vlan -l ist } • add vla n-list — List of VLAN IDs to add. Separate no n-consecutive VLAN IDs with a[...]

  • Page 605

    VLAN Co mm ands 605 Syntax vlan vlan-range no vla n vlan- ran ge • vla n-range — A list of valid VLAN IDs to be added. List separate, non - consecutive VLAN IDs separated by comm as (without spaces); use a hyphen to designate a range of IDs. (Range: 2–4093) Default Conf iguration This command has no default configuration. Command Mode VLAN Da[...]

  • Page 606

    606 VLAN Command s vlanid — VLAN to as sociate with su bnet. (Range: 1-4093 ) Default Conf iguration No assigned MAC addres s . Command Mode VLAN Databas e mode User Guidel ines This command has no user guidelines . Example The followi ng e xample associates MAC addr ess with VLAN ID 1. console(config-vlan)#vlan association mac 0001.0001.0001 1 v[...]

  • Page 607

    VLAN Co mm ands 607 User Guideli nes This command has no user guidelines. Example The following example associates IP address with VLAN ID 100. console(config-vlan)#vlan association subnet 192.245.23.45 255.255.255.0 100 vlan database Use the vlan database command in Global Configuration mode to enter the VLAN database co nfiguration mode. Syntax v[...]

  • Page 608

    608 VLAN Command s vlan makestatic This command changes a dy namically created VLAN (one that i s created by GVRP r e gistrati on) to a static VLAN (one that is permanentl y configured and defined). The ID is a v alid VLAN identification number . VLAN range is 2 - 4093. Syntax vlan make static vlan -id • vla n-id — V alid v lan ID. R ange is 2 [...]

  • Page 609

    VLAN Co mm ands 609 existi n g command vlan protoco l group <groupname> is updated to vlan protocol g roup <group id> so that grou pid is used for both configuration and script generation. NOTE: If an atte mpt is made to migrat e to the la test i mpleme ntati on wit h any of th e grou pnames delete d prior to savi ng co nfigur atio n on[...]

  • Page 610

    610 VLAN Command s T o r emo ve the pro tocol from the prot ocol-based VLAN group identified by groupid , use the no form of this command. Syntax vlan pr otocol gro up add protoc ol < groupid > ethertype < value > no vlan protocol group add protocol < groupid > ethe rtyp e < val ue > • groupid — The protocol-based VLAN g[...]

  • Page 611

    VLAN Co mm ands 611 vlan protocol gro up name This is a new command for a ssigning a group name to vlan protocol group id . Syntax vlan pr otocol gr oup na me < groupid > < groupName > no vlan proto col grou p name < groupid > • groupid —The protocol-based VLAN group ID, which is automa tically gen erate d w hen y ou c reate a[...]

  • Page 612

    612 VLAN Command s vlan protocol gr oup remove Use the vlan p rotocol gr oup rem ove command in Global Configuration mode to remove the protoco l-based VLAN group identified by groupid . Syntax vlan proto col gro up remo ve groupid • groupid — The protocol-based VLAN gr oup ID, w hich is auto matically generated when y ou create a prot ocol-bas[...]

  • Page 613

    VLAN Co mm ands 613 vlan routing Use the vlan routing command to enable routing on a VLAN. Use the “no” form of this command to disable routing o n a VLAN. Syntax vlan routing vlan id [ index ] • vla nid — V alid VLAN ID (Range 1–40 93). • index — Internal interface ID. This optional pa rameter is listed in t he configurat ion file fo[...]

  • Page 614

    614 VLAN Command s[...]

  • Page 615

    Voice VLAN Com man ds 615 29 V oice VLAN Commands This chapter exp lains the following commands: •v o i c e v l a n •v o i c e v l a n ( I n t e r f a c e ) • v oice vla n da ta pr ior ity •s h o w v o i c e v l a n[...]

  • Page 616

    616 V oice VLAN Com mands voice vlan This command is used to enable the voice vlan capability on the s w itch. Syntax voice vlan no voice vlan Para mete r R ange s Not applicab le Command Mode Global Configuration Usage Guideli nes Not applicab le Default V alue This featur e is disabled by default. Example console(config)#voice vlan console(config[...]

  • Page 617

    Voice VLAN Com man ds 617 • trust — T r ust the d ot1p prio rity o r D SCP valu es co ntain ed in pa ckets arriving on t he voice vlan port. • untrust — Do n ot t rust th e d ot1p pri ority or DS CP v alues con tained in packets arriving on the voice vla n port. •d s c p — The DSCP value (Range: 0–64). Default Conf iguration The defau[...]

  • Page 618

    618 V oice VLAN Com mands Command Mode Interface Configurati on Default V alue trust Example console(config-if -1/g1)#voice vlan da ta priori ty untrus t console(config-if -1/g1)#voice vl an data priority trust show voice vlan show voice vlan [ interface {< unit/port > | all }] Syntax When the interface parameter is n ot specified, onl y the [...]

  • Page 619

    Voice VLAN Com man ds 619 Example (console) #show voice vlan interface 1/g1 Interface...............................1/g1 Voice VLAN Interface Mode...............Enabled Voice VLAN ID...........................1 Voice VLAN COS Override.................False Voice VLAN Port Status..................Disabled[...]

  • Page 620

    620 V oice VLAN Com mands[...]

  • Page 621

    802.1x Comman ds 621 30 802.1x Commands This chapter exp lains the following commands: • dot1x ma c-auth-byp ass •d o t 1 x m a x - r e q •d o t 1 x m a x - u s e r s • dot1x port-control • dot1x r e-aut hentica te • dot1x r e-aut hentica tion • d ot1 x sy ste m-a ut h-co ntro l • dot1x timeout gu est-vlan-period • dot1x timeout q[...]

  • Page 622

    622 802.1x Comm ands dot1x ma c-au th-bypa ss Use the dot1x m ab-enable command to enabl e MAB on an inte rface. Use the “no” form of this command to dis able MAB on an interface. Syntax dot1x ma c-auth -bypas s no dot1x mac-auth-bypass Default Conf iguration MA C Authe ntication Bypass is disabled by default . Command Mode Interface Configurat[...]

  • Page 623

    802.1x Comman ds 623 Default Conf iguration The default value for the count parameter is 2. Command Mode Interface Configuration (Ethernet) mode User Guideli nes Change the default value of this command only to adjust for unusual circumstances, such as unreliable l inks or specific behavio ral problems with certain clients and authentication serv e[...]

  • Page 624

    624 802.1x Comm ands Command Mode Interface Configuration (Et hernet) m ode User Guidel ines This command has no user guidelines . Example The following command limits the number of devices that can aut henticate on port 1/ g2 to 3. console(config-if-1/g2)#dot1x max-users 3 dot1x p ort-control Use the dot1x port-con trol command in Interface Config[...]

  • Page 625

    802.1x Comman ds 625 Default Conf iguration The default co nfiguration is auto . Command Mode Interface Configuration (Ethernet) mode User Guideli nes It is recommended that you disable the spanning tr ee or enable spanning-tree P o r t Fas t mo d e o n 8 02 . 1 x e d g e po r t s ( po rt s i n auto state that ar e co nnected to end stations), in o[...]

  • Page 626

    626 802.1x Comm ands User Guidel ines This command has no user guidelines . Example The following command manually initiates a r e-authentication of the 802.1x- enabled port. console# dot1x re-authenticate ethernet 1/g16 dot1x r e-authentication Use the dot1x re- authentication command in Interface Configuration mode to en abl e pe rio dic re -au t[...]

  • Page 627

    802.1x Comman ds 627 dot1x system-auth-control Use the dot1x system-a uth-con trol command in Global Configuration mode to enab le 802.1x globally . T o disable 8 02.1x globally , use the no form of t his command. Syntax dot1x system -auth-cont rol no dot1x system-auth- control Default Conf iguration The def ault for this comman d is disabl ed. Com[...]

  • Page 628

    628 802.1x Comm ands Default Conf iguration The switch r emains in the quiet s tate for 90 seconds. Command Mode Interface Configuration (Et hernet) m ode User Guidel ines It is recommended t hat the user set the do t1x ti meout guest-v lan-per iod to at least three times the wh ile timer , so that at least three EA P Request s are sent, before ass[...]

  • Page 629

    802.1x Comman ds 629 Command Mode Interface Configuration (Ethernet) mode User Guideli nes During the quiet period, the switch does not accept or ini tiate any authen tication reques ts. Change the default value of this command only to adjust for unusual circumstances, such as unreliable l inks or specific behavio ral problems with certain clients [...]

  • Page 630

    630 802.1x Comm ands Command Mode Interface Configuration (Et hernet) m ode User Guidel ines This command has no user guidelines . Example The following example sets the number of seconds b etween re-authentication attempt s to 300. console(config)# interface ethernet 1/g16 console(config-if-1/g16)# dot1x timeout re-authperiod 300 dot1x timeo ut se[...]

  • Page 631

    802.1x Comman ds 631 User Guideli nes The actua l timeo ut is th is par amete r or the pro duct of the Radius transm ission ti mes the Radius ti meou t, whichev er is s maller Example The fo llowing e xampl e sets th e time fo r the r etransmis sion to th e authenti cation s erver to 36 00 seconds . console(config-if-1/g1)# dot1x timeout server-tim[...]

  • Page 632

    632 802.1x Comm ands Example The following example sets the time for the r e transmission of an EAP -request frame to the cli ent to 3600 seconds. console(config-if-1/g1)# dot1x timeout supp-timeout 3600 dot1x timeout tx-period Use the dot1x timeou t tx-peri od co mmand in Interface Configuration mode to set the numb er of seconds that the sw it ch[...]

  • Page 633

    802.1x Comman ds 633 Example The following command sets the number of seconds that the switch waits for a r esponse to an EAP -r equest/ identity f rame to 3600 s econds. console(config)# interface ethernet 1/g16 console(config-if-1/g16)# dot1x timeout tx-period 3600 show dot1x Use the show dot1 x command in P rivileged EXEC mode to display 8 0 2.1[...]

  • Page 634

    634 802.1x Comm ands Port Admin Oper Reauth Reauth Mode Mode Control Period ------- ------------------ ------------ -------- ---------- 1/g8 auto Authorized FALSE 3600 User Name...................................... Clark Quiet Period................................... 60 Transmit Period................................ 30 Maximum Requests..........[...]

  • Page 635

    802.1x Comman ds 635 Reauth C ontrol Ind icates whether re-aut hent icatio n is ena bled on t his port. Reauth P eriod The ti mer used by the authen ticator state ma chi ne on th is port to d etermine when reauth entic ation o f the s upplic ant takes pl ace. The val ue is expres sed in seco nds and will be in the range of 1 a nd 65 535. User name [...]

  • Page 636

    636 802.1x Comm ands show dot1x clients Use the show dot1x clients command in P rivileged EXEC mode to disp lay detailed information about the use rs who have successfull y authenticated on the sy st em or on a spec if ied port . Syntax show dot1x clients { all |ethe rnet interface } • all — A ll 802.1X clients authenticated on the system • i[...]

  • Page 637

    802.1x Comman ds 637 User Guideli nes This command has no user guidelines. Example The followi ng ex ample displays informat ion about the 802.1x cl ients authenti cated on port 1 /g9. console#show dot1x clients ethernet 1/g9 Interface............................ 1/g9 User Name............................ guest1 Supp MAC Address....................[...]

  • Page 638

    638 802.1x Comm ands The following table describes the significant fields shown in the display: show dot1x ethernet The show d ot1x ethern et command has been modified to sho w the status of MA C Authe nticatio n Bypass. Th is featu re is an exte nsion of D ot1x Opti on 81 feature added in P ower Connect Release 2.1. t o accept a VLAN name as an al[...]

  • Page 639

    802.1x Comman ds 639 Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#show dot1x ethernet 1/g1 Administrative Mode............... Disabled Port Admin Oper Reauth Reauth Mode Mode Control Period ------- ------------------ ------------ -------- ---------- 1/g1 auto Authorized FALSE 3[...]

  • Page 640

    640 802.1x Comm ands show dot1x statistics Use the show dot1x stat istics command in Priv ileged EXEC mode to display 802.1x st atistics for the s p ecified inte rface. Syntax show dot1x statistics ethe rnet inter fa ce • interface — Etherne t port name. T he full synta x is unit/p ort . Default Conf iguration This command has no default config[...]

  • Page 641

    802.1x Comman ds 641 EAP Request/Id Frames Transmitted.............. 0 EAP Request Frames Transmitted................. 0 Invalid EAPOL Frames Received.................. 0 EAPOL Length Error Frames Received............. 0 The following table descri bes the significant fields shown in the display . Field Descr ipti on EapolF ramesRx The numbe r of va[...]

  • Page 642

    642 802.1x Comm ands show dot1x users Use the show dot1x user s command in P rivileged EXEC mode to display 802.1x a uthentic ated users for the swi tch. Syntax show dot1x users [ use r nam e username ] • usern ame — Suppl icant usernam e (Ra nge: 1–1 60 cha racters ) Default Conf iguration This command has no default configuration. Command M[...]

  • Page 643

    802.1x Comman ds 643 Example The followi ng exampl e displays 80 2.1x users. console#show dot1x users Port Username --------- --------- 1/g1 Bob 1/g2 John Switch# show dot1x users username Bob Port Username --------- --------- 1/g1 Bob The following table descri bes the significant fields shown in the display : 802.1x Advanced Features dot1x gu est[...]

  • Page 644

    644 802.1x Comm ands Default Conf iguration The guest VLAN is disabled on t he interface by default. Command Mode Interface Configuration (Et hernet) m ode User Guidel ines Configure the guest VLAN before using this comm and. Example The following exampl e sets the guest VLAN on port 1/g2 to VLAN 1 0. console(config-if-1/g2)#dot1x guest-vlan 10 dot[...]

  • Page 645

    802.1x Comman ds 645 Example The following example set the unauthenticated VLAN on port 1/g2 to VLAN 20. console(config-if-1/g2)#dot1x unauth-vlan 20 show dot1x a dvanced Use the show dot 1x advance d command in P rivileged EXEC mode to display 802.1x advanced features for the switch or for the specified interface. The outp ut of this command h as [...]

  • Page 646

    646 802.1x Comm ands Example The following example displays 802.1x adv anced featur es for the switch. console#show dot1x advanced Port Guest Unauthenticated VLAN Vlan --------- --------- --------------- 1/g1 Disabled Disabled 1/g2 10 20 1/g3 Disabled Disabled 1/g4 Disabled Disabled 1/g5 Disabled Disabled 1/g6 Disabled Disabled console#show dot1x a[...]

  • Page 647

    802.1x Comman ds 647 802.1x Option 81 radius-ser ver attribute 4 Use the radius-ser ver at tribute 4 command in Global Configuration mod e to set the network acces s server (NAS) IP address for the R ADI US server . Use the no version of the com mand to s et the value to t he default. Syntax radius-ser ver attribute 4 ip-addr ess no do t1x guest -v[...]

  • Page 648

    648 802.1x Comm ands[...]

  • Page 649

    ARP Co mma nds 649 31 ARP Commands This chapter exp lains the following commands: •a r p • arp cachesize • arp d ynamicrenew •a r p p u r g e •a r p r e s p t i m e •a r p r e t r i e s •a r p t i m e o u t • clear arp- cache • clear arp -cache manage ment • ip proxy-arp •s h o w a r p[...]

  • Page 650

    650 ARP Comma nds arp Use the arp command in Global Configuratio n mode to cr eate an Address Resolution Protocol (ARP) entry . Use the no f o rm of the comm and to remove the entry . Syntax arp ip-addr ess mac-address no arp ip-address • ip-add ress — IP add ress of a device on a subn et atta ched to an existin g routing interf ace. • mac-ad[...]

  • Page 651

    ARP Co mma nds 651 Syntax arp cachesize int eger no arp cachesize • integ er — Maximum number of A RP entries in the ca che. (Range: 256– 1024) Default Conf iguration The def ault integ er value is 896. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The followi ng ex ample defines an arp c[...]

  • Page 652

    652 ARP Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines When an ARP e ntry r eaches its maxi mum age, the syst e m must decide whether to retain or delete the entry . If the entry has recently been used to forwar d data pack ets, the syste m will re n ew the ent ry by sending an ARP request to the neighbor . If the neighb or r[...]

  • Page 653

    ARP Co mma nds 653 Syntax arp purge ip-addr ess • ip-add ress — The IP addr ess to be remov ed from ARP cache. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example removes the specified IP address from arp cache. c[...]

  • Page 654

    654 ARP Comma nds User Guidel ines This command has no user guidelines . Example The following example defines a r esponse timeout of 5 seconds. console(config)#arp resptime 5 arp retrie s Use the arp re tri es command in Global Configuration mode to configur e the ARP count of m aximum requests for retries. T o return to the default v alue, use th[...]

  • Page 655

    ARP Co mma nds 655 arp timeout Use the arp time out command in Globa l Config uration mo de to configure the ARP en try ageout time. Use the no form of t he command to set the ageout tim e to the defaul t. Syntax arp time out integer no arp time out • integ er — The IP AR P entry ageout time. (Ran ge: 15-21 600 seconds) Default Conf iguration T[...]

  • Page 656

    656 ARP Comma nds Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following exampl e clears all entries ARP of type dynamic, i ncluding gatewa y , f rom ARP ca che. console#clear arp-cache gateway clear ar p-cache manage ment Use the clear arp-cach e managem ent command to clear all entries from[...]

  • Page 657

    ARP Co mma nds 657 ip proxy-arp Use the ip prox y-arp command in Interface Configuration mode to enable proxy ARP on a router interface. Without proxy ARP , a device only responds to an ARP request if the target IP address is an address confi gured on the inter face where the ARP reque st arri ved. With proxy ARP , the dev ice may a lso respond if [...]

  • Page 658

    658 ARP Comma nds Syntax show arp [brief] [switch] • brief — Display ARP paramet ers and cache. • sw itch — Dis play ARP cache for the switch. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example shows sh ow a[...]

  • Page 659

    DHCP and B OOTP Relay C o mmands 659 32 DHCP and BOOTP Relay Commands This chapter exp lains the following commands: • bootpdhcprelay cidridoptmode • bootpdhcprel ay maxhopcount • bootpd hcprelay minwaittime • show bootpdhc prel ay[...]

  • Page 660

    660 DHCP and BOOT P Relay Commands bootpdhcp relay cidridop tmode Use the bootpdh cprelay ci dridoptm ode com mand in Global Configurat ion mode to enable the circuit ID option and r emote agent ID mode for BootP/DH CP Relay on the syste m. Use the no form of the command to disable the ci rcuit ID op tion and remote agent ID mode for BootP/ DHCP Re[...]

  • Page 661

    DHCP and B OOTP Relay C o mmands 661 bootpdhcp relay maxhopco unt Use the boot pdhcprel ay maxho pcount com mand in Global Configuration mode to configure the maximum allowable relay agent hops for Boot P/DHCP Relay on the system. Use the no form of the com mand to set the m aximum hop count to the default value. Syntax bootpdh cprelay maxhopco unt[...]

  • Page 662

    662 DHCP and BOOT P Relay Commands Syntax bootpdhcp relay minw aittiime int eger no bootpdhc pre lay minsho show arpshow arpwshsh o w arposhow arpwsh oshow arpwsh ow arp arp arp asho w arprpwait time • integer — Mi nimum wait time fo r BootP/ DHCP Relay on the system. (Range: 0-100 seconds) Default Conf iguration 0 is the de fault integer confi[...]

  • Page 663

    DHCP and B OOTP Relay C o mmands 663 Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The followi ng ex ample enables the circuit ID and remote ag ent ID options. console(config)#bootpdhcprelay cidridoptmode Circuit Id and Remote Agent Id Mode set Successfully. show bootp dhcprelay Use the show bo[...]

  • Page 664

    664 DHCP and BOOT P Relay Commands Example The following example defines the Boot/DHCP Relay information. console#show bootpdhcprelay Maximum Hop Count.............................. 4 Minimum Wait Time(Seconds)..................... 0 Circuit Id Option Mode......................... Disable[...]

  • Page 665

    DHCPv6 Comman ds 665 33 DHCPv6 Commands This chapter exp lains the following commands: • clear i pv6 dhcp •d n s - s e r v e r • domain- name • ipv6 d hcp pool •i p v 6 d h c p r e l a y • ipv6 d hcp relay-agent -info-opt • ipv6 d hcp relay-agent-info-remote-id-subopt •i p v 6 d h c p s e r v e r • prefix-delegation • s ervice d[...]

  • Page 666

    666 DHCPv6 Comman ds clear ipv6 dhcp Use the clear ipv6 dhcp command in Priv ileged EXEC mode to clear DHCPv6 statistics for al l interfaces or for a specific interface. Syntax clear ipv6 dhcp { statis tics | interf ace vla n vlan -id statistics} • vla n-id — V ali d VLAN ID. • statistics — Indica tes statistics dis play if VL AN is specifi[...]

  • Page 667

    DHCPv6 Comman ds 667 Default Conf iguration This command has no default configuration. Command Mode IPv6 DHCP P ool Configuration mode User Guideli nes DHCPv6 pool can have multiple number of domain names with maximum of 8. Example The following example sets the ipv6 DNS server address of 2020:1::1, which is provided to a DHCPv6 client by th e DHCP[...]

  • Page 668

    668 DHCPv6 Comman ds User Guidel ines DHCPv6 pool can have multiple number of domain names with m aximum of 8. Example The following example sets the DNS domain name "t est", which is provided to a DHCPv6 client by the DHCPv6 server . console(config)#ipv6 dhcp pool addrpool console(config-dhcp6s-pool)#domain-name test console(config-dhcp6[...]

  • Page 669

    DHCPv6 Comman ds 669 Example The following example enters IPv6 DHCP P ool Configuration mode. console(config)#ipv6 dhcp pool addrpool console(config-dhcp6s-pool)# ipv6 dhcp relay Use the ipv6 dhcp relay command in Interface Configuration mode to configure an interface for DHC Pv6 relay functionality . Syntax ipv6 dhcp relay { des tin atio n r elay-[...]

  • Page 670

    670 DHCPv6 Comman ds User Guidel ines If r elay-address is an IPv6 globa l address, then re la y -i n t e r f a c e is not r equired. If r elay-address is a link -local or multicast addr ess, then rela y- in ter fa c e is requir ed. F inally , a value for r e lay-address is not specified, then a value for re l a y - in t er f a c e must be specifie[...]

  • Page 671

    DHCPv6 Comman ds 671 Example The following example configures the number 100 to repr esent the DHCPv6 Relay Agent Information Option. console(config)#ipv6 dhcp relay-agent-info-opt 100 ipv6 dhcp r e lay-agent-i nfo-remote-id-subopt Use the ipv6 dh cp relay-agent- info-remot e-id-subopt command in Global Configuration mode to configure a number to r[...]

  • Page 672

    672 DHCPv6 Comman ds Syntax ipv6 dhcp ser ver pool-na me [rapid-com mit] [preferen ce pref - value ] • pool-name — The name of the DHCPv6 pool containi ng statel e ss and/ or prefix delegation parameters • rapid-commit — Is an option t hat allows f or an abbr eviated e xcha nge between the client and server . • pref -value — Pr eference[...]

  • Page 673

    DHCPv6 Comman ds 673 • DUID — Client DUID (e.g. 00:01:00:0 9:f8:79: 4e:00:0 4:76:73 :43:76 '). • hostna me — Client host name used fo r logging and tracing . (Range: 0- 31 characte rs.) • valid-lifet ime — V alid li fetime fo r delegat ed prefix. (Ran ge: 0-42 949672 95 seconds) • preferr ed -lifetime — Pr eferred lifetim e for[...]

  • Page 674

    674 DHCPv6 Comman ds Default Conf iguration Enabled is the default state. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following exampl e enables DHCPv6 globally . console#configure console(config)#service dhcpv6 console(config)#no service dhcpv6 show ipv6 dhcp Use the show ipv6 dhcp [...]

  • Page 675

    DHCPv6 Comman ds 675 Example The following example displays the DHCPv 6 server name and status. console#show ipv6 dhcp DHCPv6 is disabled Server DUID: show ip v6 dhcp bin ding Use the show ipv6 dhcp binding command in P rivilege d EXEC mode to display the configured DHCP pool. Syntax show ipv6 dhcp binding [ ipv6-addr ] • ipv6 -addr — V alid I [...]

  • Page 676

    676 DHCPv6 Comman ds show ipv6 dhcp interface Use the show ipv6 dhcp interface com mand in User EXEC mode to display DHCPv6 information for a ll relevant interf ace s or a specifie d interface. If an interface is specified, the opti onal statistics parameter is availa ble to view statistics for the specified interfa ce. Syntax show ipv6 dh cp inter[...]

  • Page 677

    DHCPv6 Comman ds 677 Option Flags................................... console> show ipv6 dhcp interface vlan 11 statistics DHCPv6 Interface vlan11 Statistics ------------------------------------ DHCPv6 Solicit Packets Received................ 0 DHCPv6 Request Packets Received................ 0 DHCPv6 Confirm Packets Received................ 0 DHC[...]

  • Page 678

    678 DHCPv6 Comman ds show ipv6 dhcp pool Use the show ipv6 dhcp poo l command in P rivileged EXEC mode to display the configured DHCP pool. Syntax show ipv6 dh cp pool pool-name • pool-name — Nam e of the pool. (Ran ge: 1-32 ch aracter s) Default Conf iguration This command has no default configuration. Command Mode P rivil eged EXEC mode User [...]

  • Page 679

    DHCPv6 Comman ds 679 Command Mode User EXEC mode User Guideli nes This command has no user guidelines. Example The following example displays the DHCPv 6 server name and status. console> show ipv6 dhcp statistics DHCPv6 Interface Global Statistics ------------------------------------ DHCPv6 Solicit Packets Received................ 0 DHCPv6 Reque[...]

  • Page 680

    680 DHCPv6 Comman ds DHCPv6 Relay-forward Packets Transmitted....... 0 Total DHCPv6 Packets Transmitted............... 0[...]

  • Page 681

    DVM RP Co mman ds 681 34 DVMRP Commands This chapter exp lains the following commands: •i p d v m r p • ip dvm rp metric • ip dvm rp trapflags •s h o w i p d v m r p • sh ow ip dvmrp in terface • show ip dvmrp neighbor • show ip dvmr p nextho p •s h o w i p d v m r p p r u n e • show ip dvmrp route[...]

  • Page 682

    682 DVMRP Commands ip dvmrp Use the ip d vm rp co mmand to set the adminis trative mode of DVMRP i n the router to active. IGMP must be en abled befor e D VMRP can be enab led. Syntax ip dvmrp no ip dvmrp Default Conf iguration Disabled is the default configuration. Command Mode Global Configuration Interface Configurati on (VLAN) mode User Guidel [...]

  • Page 683

    DVM RP Co mman ds 683 Default Conf iguration 1 the default v alue. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The following exampl e configures a metric of 5 for VL AN 15. console(config)#interface vlan 15 console(config-if-vlan15)#ip dvmrp metric 5 ip dvmrp trapflags Use the ip dv[...]

  • Page 684

    684 DVMRP Commands console(config)#ip dvmrp trapflags console(config)#no ip dvmrp trapflags show ip dvmrp Use the show ip dvmrp command in P rivileged EXEC mode to display the system-wide i nfo rmation for D VMRP . Syntax show ip dvm rp Default Conf iguration This command has no default condition. Command Mode P rivileged EXEC mode User Guidel ines[...]

  • Page 685

    DVM RP Co mman ds 685 show ip dvmrp interface Use the show ip dvmrp interfac e command in P rivileged EXEC mode t o dis pla y the int erf ace info rm atio n fo r DVMR P on th e sp eci fie d int er face . Syntax show ip dvmrp in terface vlan vlan-id • vla n-id — V alid VLAN I D. Default Conf iguration This command has no default condition. Comma[...]

  • Page 686

    686 DVMRP Commands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example displays the neighbor information for D VMRP . console(config)#show ip dvmrp neighbor No neighbors available. show ip dvmr p nexthop Use the show ip dvmrp nexthop command in P rivileged EXEC mode to display the [...]

  • Page 687

    DVM RP Co mman ds 687 Example The following example displays the ne xt hop information on o utgoing interfaces for routing multicast dat agrams. console(config)#show ip dvmrp nexthop Next Hop Source IP Source Mask Interface Type -------------- -------------- --------- -- ---- show ip dvmrp pr une Use the show ip dvmrp prune com ma nd i n Priv ileg [...]

  • Page 688

    688 DVMRP Commands show ip dvmr p route Use the show ip dvmrp route command in Priv ilege d EXEC mode to display the multicast routing inf ormation for DVMRP . Syntax show ip dvm rp route Default Conf iguration This command has no default condition. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example Th[...]

  • Page 689

    IGMP Commands 689 35 IGMP Commands This chapter exp lains the following commands: •i p i g m p • ip igmp last-member-query-count • ip igmp last-mem ber-q uery -interval • ip igm p query-interval • ip igmp query-max -respons e-time • ip igmp robustness • ip igmp startup-query-count • ip igmp startup-query-int erval • ip igmp versio[...]

  • Page 690

    690 IGMP Commands ip igmp Use the ip igmp command in Global Configuration mode to set the administ rative m ode of IGMP i n the syst em to activ e. Syntax ip igmp no ip igmp Default Conf iguration Disabled is the defa ult state. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following e[...]

  • Page 691

    IGMP Commands 691 Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The followi ng e xample sets 10 as th e number of VLAN 2 Group-Specific Queries. console#configure console(config)#interface vlan 2 console(config-if-vlan2)#ip igmp last-member-query- count 10 console(config-if-vlan2)#no [...]

  • Page 692

    692 IGMP Commands User Guidel ines This command has no user guidelines . Example The following example configures 2 seconds a s the Maximum Res ponse Time inserted in VL AN 15’s Group-Specific Q ueries. console(config)#interface vlan 15 console(config-if-vlan15)#ip igmp last-member-query- interval 20 ip igmp query-inter val Use the ip igmp query-[...]

  • Page 693

    IGMP Commands 693 console(config-if-vlan15)#ip igmp query-interval 10 ip igmp query- max-respon se-time Use the ip igmp query- max-response -time command in Internet Configuration mode to configure the maximum resp onse t ime interval for the specified interface. It is the maximum query response time advertised in IGMPv2 querie s on this interface [...]

  • Page 694

    694 IGMP Commands ip igmp robustness Use the ip igmp robustness command in Interface Configuration mode to configure the robustness that allows tuning of the interface, that is, tuning for the expect e d packet loss on a subnet. If a subnet is expected to have significant loss, the robustnes s variable may be incr eased for the inte rface. Syntax i[...]

  • Page 695

    IGMP Commands 695 no ip igmp st artu p-query-c ount • count — The n umber of startup queries. (Range: 1-20) Default Conf iguration The default count value is 2. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The following exampl e sets for VLAN 15 the nu mber of queries sent out on[...]

  • Page 696

    696 IGMP Commands Command Mode Interface Configurati on (VLAN) mode User Guidel ines This command has no user guidelines . Example The fol lowing example sets a t 10 seconds the inter val be tween g eneral queries sent at st artup for VLAN 15. console(config)#interface vlan 15 console(config-if-vlan15)#ip igmp startup-query- interval 10 ip igmp ver[...]

  • Page 697

    IGMP Commands 697 console(config-if-vlan15)#ip igmp version 2 show ip igmp Use the show ip igmp comm and in P rivileged EXEC mode to display system- wide IGMP information. Syntax show ip igm p Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Ex[...]

  • Page 698

    698 IGMP Commands show ip igmp groups Use the show ip igm p groups command in Pri v ileged EXEC mode to display the registered multicast groups on the interfa ce. If detail is specified, this command displays the registered multicast groups on the interface in detail. Syntax show ip i gmp grou ps in terfa ce vl an vlan id [ detail ] • vla n-id ?[...]

  • Page 699

    IGMP Commands 699 show ip igmp interface Use the show ip igm p in terface command in Pr ivileged EXE C mode to display the I GMP information for the specified interface. Syntax show ip igmp in terfa ce vlan vlan-id • vla n-id — V alid VLAN I D Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode U[...]

  • Page 700

    700 IGMP Commands show ip igmp interface membership Use the show ip igmp in terfa ce membe rshi p command in P rivileged EXEC mode to display the list of interfaces that have r egistered in the multicas t group. If detail is specified, this command displays detailed informat ion about the listed inte rfaces. Syntax show ip i gmp int erface me mber [...]

  • Page 701

    IGMP Commands 701 show ip igmp interface stats Use the show ip igm p in terface st ats command in User EXEC mode to display the IGMP statistical information for the interfac e. The statistics are only displayed when the interfa ce is enabled for IGMP . Syntax show ip i gmp interf ace stats vla n vlan-id • vla n-id — V alid VLAN I D Default Conf[...]

  • Page 702

    702 IGMP Commands[...]

  • Page 703

    IGMP Pro xy Com mands 703 36 IGMP Proxy Commands This chapter exp lains the following commands: •i p i g m p - p r o x y • ip igmp-proxy r eset-status • ip igmp-prox y unsolicited-report-interval • sh ow ip igm p-proxy • sh ow ip igm p-proxy interface • sh ow ip igm p-proxy groups • sh ow ip igm p-proxy groups detail[...]

  • Page 704

    704 IGMP Proxy Comman ds ip igmp-proxy Use the ip igmp-prox y command in Interface Configuration mode to enable the IGMP Proxy on the router . T o enable the IGMP P roxy on the router , multicast forw arding must be enabled and ther e must be no multicas t routing protocols enab led on the router . Syntax ip ig mp-pro xy no ip igmp-p roxy Default C[...]

  • Page 705

    IGMP Pro xy Com mands 705 Default Conf iguration This command has no default configuration. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The foll owing example resets the host inter face st atus pa rameters of the IGMP P roxy router . console(config)#interface vlan 15 console(config-[...]

  • Page 706

    706 IGMP Proxy Comman ds Example The followi ng e xample sets 10 seconds as the unsolicited r eport interval for the IGM P Proxy router . console(config)#interface vlan 15 console(config-if-vlan15)#ip igmp-proxy unsolicited- report-interval 10 show ip igmp-proxy Use the show i p igmp -proxy command in P rivileged EXEC mode to display a summary of t[...]

  • Page 707

    IGMP Pro xy Com mands 707 Operational Mode............................. Enable Version...................................... 3 Number of Multicast Groups................... 0 Unsolicited Report Interval.................. 1 Querier IP Address on Proxy Interface........ 0.0.0.0 Older Version 1 Querier Timeout.............. 0 Older Version 2 Querier T[...]

  • Page 708

    708 IGMP Proxy Comman ds ----------------------------------------------------------------- 1 0 0 0 ----- ----- 20 0 0 0 0 3 0 0 0 ----- ----- show ip igmp- proxy groups Use the show ip igm p-proxy groups command in P rivileged EXEC mode to display a t able of information ab o ut multicas t groups that IGMP Prox y repor ted. It displays status pa ra[...]

  • Page 709

    IGMP Pro xy Com mands 709 show ip igmp-proxy grou ps detail Use the show ip igm p-prox y groups detai l command in P rivileged EXEC mode to dis play com plete informa tion about mult icas t groups th at IGMP Pr o x y h a s re p o r t e d . Syntax show ip igmp- proxy groups detail Default Conf iguration This command has no default configuration. Com[...]

  • Page 710

    710 IGMP Proxy Comman ds[...]

  • Page 711

    IP H elp er Comm ands 711 37 IP Helper Commands This chapter exp lains the following commands: • clea r ip help er statisti cs •i p h e l p e r - a d d r e s s ( g loba l configurat ion) • ip helper-addr e ss (interface configurati on) • ip helper enab le •s h o w i p h e l p e r - a d d r e s s • sh ow ip helper sta tistics[...]

  • Page 712

    712 IP Help er Commands clear ip helper statistics Use the clear ip helper stat istics co mmand to reset to 0 the stati stics displayed in show ip helper statisti cs. Syntax clear ip hel per statistics Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guidel ines There ar e no user gu[...]

  • Page 713

    IP H elp er Comm ands 713 • dest-udp -port — A destinat ion UDP p ort nu mber from 0 to 655 35. • port-name — The destina tion UDP port may be opt ionally sp ecified by its name . Wheth er a port is s pecified by its numb er or its nam e has no effect on behavior . The na mes recognized are as follows: dhcp (port 67), doma in (port 53), isa[...]

  • Page 714

    714 IP Help er Commands To relay UDP packets received on any interface for all default ports (Table 4) to the server at 20.1.1.1, use the following commands: console#config console(config)#ip helper-address 20.1.1.1 ip helper -address (inter face configuration) Use the ip helper-address (interface configuration) co mmand to configure the rela y of [...]

  • Page 715

    IP H elp er Comm ands 715 Default Conf iguration No helper addresses are configured. Command Mode Interface Configuration (VLAN) mode. User Guideli nes This command can be inv oked multiple times on routi ng interface, either to specify multip le server addr esses fo r a given port number or t o specify multiple port numbers handled by a sp ecific [...]

  • Page 716

    716 IP Help er Commands This command takes precedence over an ip helper- address command given in global configuration mode. With the following configuration, the relay agent relays DHCP packets received on any interface other than vlan 5 and vlan 6 to 192.168.40.1, relays DHCP and DNS packets received on vlan 5 to 192.168.40.2, relays SNMP traps ([...]

  • Page 717

    IP H elp er Comm ands 717 Default Conf iguration IP helper is e nabled by default. Command Mode Global Configuration mode. User Guideli nes This com mand can be us ed to tempora rily d isable IP he lper wi thout de leting all IP helper addresses. This command replaces the bootpdhcprelay enable comma nd, but affects not only relay of DHCP packets, b[...]

  • Page 718

    718 IP Help er Commands Example show ip helper-address IP helper is enabled Interface UDP Port Discard Hit Count Se rver Address --------------- ----------- -------- --- ------- ------- -------- vlan 100 dhcp No 10 10.100.1.254 10.100.2.254 vlan 101 any Yes 2 any dhcp No 0 10.200.1.254 show ip he lper statistics Use the show ip help er sta tistics [...]

  • Page 719

    IP H elp er Comm ands 719 Syntax show ip helper stati stics Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes F ield descriptions: DHCP client messages recei ved The number of vali d messages r eceived from a DHCP client . The count i s only i ncrem ented if I P helper is ena bled [...]

  • Page 720

    720 IP Help er Commands Example console#show ip helper statistics DHCP client messages received.................. 8 DHCP client messages relayed................... 2 DHCP server messages received.................. 2 DHCP server messages relayed................... 2 UDP client messages received................... 8 UDP client messages relayed.......[...]

  • Page 721

    IP Routing Comma nds 721 38 IP Routing Co mmands This chapter exp lains the following commands: •e n c a p s u l a t i o n • ip addr ess •i p m t u • ip netdirbcast •i p r o u t e •i p r o u t e d e f a u l t • ip route distance •i p r o u t i n g •r o u t i n g • sh ow ip brief • sh ow ip interfac e • show ip protocols •s[...]

  • Page 722

    722 IP Rou ting Comma nds encapsulatio n Use the encapsulation command in Interface Configuration mode to configure the link layer encapsulation type for the packet. Routed frames are always ethe rnet encapsulated when a frame i s routed to a VLAN. Syntax encapsulation { eth ernet | snap } • ethernet — Specifies Ethernet encapsulation. • snap[...]

  • Page 723

    IP Routing Comma nds 723 no ip addre ss ip-addr ess { subnet-mas k | prefix-length } [ secondar y ] • ip-add ress — IP a ddress of the i nterfac e. • subnet-mask — Subnet mask of t he interfa ce • prefix-length — L eng th of the prefix. Must be preceded by a forward slash (/). (Range: 1-30 bits) • secondary — Indicates the IP ad dre[...]

  • Page 724

    724 IP Rou ting Comma nds stack uses its default IP MTU and ignor es the value set using the ip m tu command. OSPF advertises t he IP MTU in the Database Description packets it sends to it s neighbors during database e xchange. If two OSPF neighbors advertise diffe rent IP MTUs, they will not form an adjacency (unless OSPF has been instructed to ig[...]

  • Page 725

    IP Routing Comma nds 725 no ip n etdirbc ast Default Conf iguration Disabled is the default configuration. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The following exampl e defines the IP addr ess and subnet mask for VLAN 15 . console(config)#interface vlan 15 console(config-if-vla[...]

  • Page 726

    726 IP Rou ting Comma nds • prefix-length — L ength of prefix. Must be preceded with a forward slash (/). (Range: 0-32 bits) • ne xtHopRtr — IP addr ess of the ne xt hop router . • prefer ence — S pecifies the preference value, a.k.a. a dminis trative d istance, of an in dividual st atic rout e. (Range: 1 -255) Default Conf iguration De[...]

  • Page 727

    IP Routing Comma nds 727 • prefer en ce — Specifies th e preference value, a.k.a admin istrativ e distance, of an ind ividual st atic route. (Range: 1-2 55) Default Conf iguration Default value of preference is 1. Command Mode Global Configuration mode User Guideli nes F or routed management traffic: 1 Router ent ries are checked for applicable[...]

  • Page 728

    728 IP Rou ting Comma nds no ip route distance integer • integer — Specifi es the dist ance (prefe rence) of an individ ual static route. (Ran ge 1-255 ) Default Conf iguration Default value of distance is 1. Command Mode Glo bal C onf igura tion mode User Guidel ines Low er route distance values are preferre d when determining the best route. [...]

  • Page 729

    IP Routing Comma nds 729 User Guideli nes Use this command to g lobally enable IPv4 routing . Example console(config)#ip routing routing Use the rout ing command in Int erface Configuration mode to enable IPv4 and IPv6 routing for an interface. View the current value for this function with t he show ip br ief command. The value is labeled Routing M[...]

  • Page 730

    730 IP Rou ting Comma nds show ip br ief Use the show ip brief command in Pri vileged EX EC mode to display all the summary information of the IP . Syntax show ip bri ef Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following ex[...]

  • Page 731

    IP Routing Comma nds 731 • vla n-id — V alid VLAN I D • loopback-id — V alid l oopback ID. (R ange: 0-7) Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Examples The following examp les display all IP information and information specif[...]

  • Page 732

    732 IP Rou ting Comma nds console#show ip interface vlan 15 Primary IP Address............. 192.168.10. 10/255.255.255.0 Secondary IP Address(es)....... 192.168.20. 20/255.255.255.0 Routing Mode............................... .... Disable Administrative Mode........................ .... Disable Forward Net Directed Broadcasts............ .... Disab[...]

  • Page 733

    IP Routing Comma nds 733 Example The following example dis plays parameters and current state of a ctive routing protocols. console#show ip protocols Routing Protocol is "rip" Sending updates every 30 seconds Invalid after 180 seconds, hold down 120, flushed after 300 Redistributing: RIP, Static, OSPF Default version control: send version[...]

  • Page 734

    734 IP Rou ting Comma nds Routing Information Sources: Gateway State 176.1.1.2 Full External Preference: 60 Internal Preference: 20 show ip r oute Use the show ip rou te command in P rivileged EXEC mode to display the routing table. Syntax show ip ro ute [ protocol | address ip-address [ subnet-mask | pr efix-leng th ] [longer -prefixes]] • proto[...]

  • Page 735

    IP Routing Comma nds 735 Example The following example displays the routi ng table. console#show ip route Route Codes: R - RIP Derived, O - OSPF Derive d, C - Connected, S - Static B - BGP Derived, IA - OSPF Inter Area E1 - OSPF External Type 1, E2 - OSPF External Type 2 N1 - OSPF NSSA External Type 1, N2 - OSPF NSSA external type 2 show ip ro ute [...]

  • Page 736

    736 IP Rou ting Comma nds Local.......................................... 0 Static......................................... 1 OSPF Intra-area routes......................... 110 OSPF Inter-area routes......................... 110 OSPF External routes........................... 110 RIP............................................ 120 show ip r oute s[...]

  • Page 737

    IP Routing Comma nds 737 RIP Routes..................................... 0 OSPF Routes.................................... 0 Intra Area Routes.............................. 0 Inter Area Routes.............................. 0 External Type-1 Routes......................... 0 External Type-2 Routes......................... 0 Total routes.............[...]

  • Page 738

    738 IP Rou ting Comma nds IpForwDatagrams................................ 0 IpInUnknownProtos.............................. 0 IpInDiscards................................... 0 IpInDelivers................................... 18467 IpOutRequests.................................. 295 IpOutDiscards.................................. 0 IpOutNoRoutes.....[...]

  • Page 739

    IP Routing Comma nds 739 IcmpInAddrMasks................................ 0 IcmpInAddrMaskReps............................. 0 IcmpOutMsgs.................................... 3 IcmpOutErrors.................................. 0 IcmpOutDestUnreachs............................ 0 IcmpOutTimeExcds............................... 0 IcmpOutParmProbs.........[...]

  • Page 740

    740 IP Rou ting Comma nds User Guidel ines The user is not re q uired to use this command. Routing can still b e enabled using the routing command in VLAN Interface Configuration mode. Example console(config-vlan)# vlan routing 10 1[...]

  • Page 741

    IPv 6 MLD Snoo ping Comma nds 741 39 IPv6 MLD Snooping Commands This chapter exp lains the following commands: • ipv6 mld snoop ing immedia te-leave • ipv6 mld snooping groupmembership-interval • ipv6 mld snoop ing maxresp onse • ipv6 mld snoop ing mcrte xpire time • ipv6 m ld snooping (Globa l) • ipv6 m ld sn ooping (Interface) • ipv[...]

  • Page 742

    742 IPv6 M LD Sn oopi ng Comma nds ipv6 mld snooping immediate-leave The ipv6 mld snooping immedia te-leave command enables or disabl es MLD Snooping snooping immediat e-leave admin mode on a selected interface or VLAN. Enab ling fast -leav e allow s the switch to immedia tely remov e the layer 2 LAN interface from its forwar ding table entry upon [...]

  • Page 743

    IPv 6 MLD Snoo ping Comma nds 743 ipv6 mld snooping groupmembershi p-interval The ipv6 m ld snooping groupm embership -inter val comma nd sets the MLD Group Membership Interv al time on a VLAN or interface. The Group Membership Int erval time is the amount of time in seconds that a sw itch waits for a r eport from a particular group on a p articula[...]

  • Page 744

    744 IPv6 M LD Sn oopi ng Comma nds interface becaus e it did not r eceive a rep o rt for a par t icular group i n that interface. This value must be less than the MLD Query Interval time value. The range is 1 to 3599 seconds. Syntax ipv6 m ld snooping maxre sponse [ vlan-id ] [ seconds ] no ipv6 ml d snooping maxrespo nse [ vlan-id ] • vlan_id ?[...]

  • Page 745

    IPv 6 MLD Snoo ping Comma nds 745 no ipv6 mld snoop ing mcrt expiretime [ vlan-id ] • vla n_id — Specifies a VLAN ID value in VLAN Database mode . • seconds — mu lticast router present expiration time in seconds. (Ra nge: 1–36 00) Default Conf iguration The defaul t multic ast rout er present expir ation time is 300 sec onds. Command Mode[...]

  • Page 746

    746 IPv6 M LD Sn oopi ng Comma nds User Guidel ines There ar e no user gui delines for this command. Example console(config)#ipv6 mld snooping ipv6 mld snooping (Interface) The ipv6 mld snooping (Interface) comm and enables MLD S nooping on an interface. If an interface has MLD Snooping e nabled and it becomes a member of a port-channel (LAG), MLD [...]

  • Page 747

    IPv 6 MLD Snoo ping Comma nds 747 Syntax ipv6 mld snooping vlan-id no ipv6 m ld snoopi ng vlan-id • vla n-id — Spe cifies a VLAN ID valu e. Default Conf iguration MLD Sn oop in g is d isa ble d. Command Mode VLAN Data base mode. User Guideli nes There ar e no user gui delines for this command. Example console(config-vlan)#ipv6 mld snooping 1 sh[...]

  • Page 748

    748 IPv6 M LD Sn oopi ng Comma nds User Guidel ines This command has no user guidelines . Example W ith no optional arguments, the command disp lays the following information: • Admin Mode — Indicat es whether or not MLD S nooping is active on the switch. • In terfaces Enabled for MLD S nooping — Interfaces on which MLD Snooping is en abled[...]

  • Page 749

    IPv 6 MLD Snoo ping Comma nds 749 show ipv6 mld sno oping groups The show ipv6 ml d snooping group s command displays the MLD Snooping entries in the MFDB table. Syntax show ipv6 mld snoop ing groups [{ vlan vlan-id | address ipv6-multicast- addr e ss }] • vla n_id — S pecifies a VL AN ID va lue. • ipv6-mul ticast-add ress — Specifies an IP[...]

  • Page 750

    750 IPv6 M LD Sn oopi ng Comma nds ------------------------------------------- -- Vlan Ipv6 Address Ports ---- ----------------------- ------------ ---------------- ------------ console#show ipv6 mld snooping groups vlan 2 Vlan Ipv6 Addr ess Type Ports ---- ----------------------- ------- --- ---------------- ------------- 2 3333.0000.0004 Dynamic [...]

  • Page 751

    IPv6 Mul ticast Co mman ds 751 40 IPv6 Multicast Commands This chapter exp lains the following commands: • ipv6 pimsm (Glob al conf ig) • ipv6 p imsm ( VLAN Inter face co nfig) • ipv6 p imsm bsr -border • ipv6 pims m bsr -c andidate • ipv6 pims m dr -priori ty • ipv6 pims m hello-i nterval • ipv6 pims m join-p rune-int erval • ipv6 [...]

  • Page 752

    752 IPv6 Multi cast Commands ipv6 pimsm (Global config) Use the ipv6 pimsm com man d to ad mini stra tiv ely en able of PIM SM for IPv 6 multicast routing. Use the "no" f orm of this command to disable PIMSM for IPv6. Syntax ipv6 pimsm no ipv6 pims m Default Conf iguration IPv6 PIMSM i s disabled on the router by default. Command Mode Glo[...]

  • Page 753

    IPv6 Mul ticast Co mman ds 753 Command Mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 pimsm ipv6 pimsm bs r -border Use the ipv6 pi msm bsr-border command to prevent boots trap r out er (BSR ) messages from being sent or received through an interface. [...]

  • Page 754

    754 IPv6 Multi cast Commands ipv6 pimsm bsr -c andidate Use the ipv6 pimsm bsr -candi d ate command to configure the router to announce its candidacy as a bootstrap router (BSR). Use the "no" form of t his command to stop the router from announcing its candidacy as a bootstrap router . Syntax ipv6 pimsm b sr - candid ate vlan vlan-id hash[...]

  • Page 755

    IPv6 Mul ticast Co mman ds 755 ipv6 pimsm dr -priority Use the ipv6 p imsm dr -p riority co mmand to s et th e pri ority va lue f or whi ch a router is elected as the designated route r (DR). Use the "no" form of this command to se t the prio rity to the defa ult. Syntax ipv6 pi msm dr-priority priority no ipv6 p imsm dr-priority • prio[...]

  • Page 756

    756 IPv6 Multi cast Commands Default Conf iguration The default hello interval is 30 seconds. Command Mode Interface Configurati on (VLAN) mode User Guidel ines There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 pimsm hello-interval 45 ipv6 pimsm join-prune-interv al Use the ipv 6 pim sm join -pr une- int er val [...]

  • Page 757

    IPv6 Mul ticast Co mman ds 757 Example console(config-if-vlan3)#ipv6 pimsm join-prune- interval 90 ipv6 pimsm re gister -th reshold Use the ipv6 p imsm reg ister -t hreshold command to configure the Register Thr eshold r ate for the RP rou ter to s witch to the short est path . Use the "no" form of t his comm and to set the register thres[...]

  • Page 758

    758 IPv6 Multi cast Commands Syntax ipv6 pimsm rp-address rp-address group-addr ess/prefixlength [ override ] no ipv6 p imsm rp -address • rp-add ress — An RP address. • group- addres s — The group address to displ ay . • prefixlength — This par amete r specifies the prefix length of t he IP address for the m edia gatew ay . (Range: 1?[...]

  • Page 759

    IPv6 Mul ticast Co mman ds 759 • prefixlen gth — T his param eter s pecifies th e prefix length of th e IP address for the me dia gateway . (Range: 1–32) Default Conf iguration The router does not adverti se itself as a PIM candidat e rendezvous point by default. Command Mode Global Configuration mode User Guideli nes There ar e no user gui d[...]

  • Page 760

    760 IPv6 Multi cast Commands User Guidel ines There ar e no user gui delines for this command. Example console(config)#ipv6 pimsm spt-threshold 1000 ipv6 pimsm ssm Use the ipv6 pimsm ssm command to define th e Source Specific Multicast (SSM) range of multicast addresses. Syntax ipv6 pimsm ssm {default | gr o up-addr ess/pr efixlengt h} • defa ult[...]

  • Page 761

    IPv6 Mul ticast Co mman ds 761 Syntax show ipv6 pimsm Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#show ipv6 pimsm Admin Mode..................................... Enabled Data Threshold Rate (Kbps)......[...]

  • Page 762

    762 IPv6 Multi cast Commands vlan 6 Enabled Operational vlan 9 Enabled Operational show ipv6 pimsm bsr Use the show ipv6 p imsm b sr comma nd to d isp lay the boo tst rap ro uter (B SR) information. The output includes el ected BSR information and information about the locally configured candidate r endezvous point (RP) advertisement. Syntax show i[...]

  • Page 763

    IPv6 Mul ticast Co mman ds 763 show ipv6 pimsm interface Use the show i pv6 pi msm inte rface com mand to displa y interface c onfig parameters. If no interface is specif ied, all interfaces ar e displayed. Syntax show ipv6 pims m interf ace [ vlan vlan-id ] • v lan-id — A valid VL AN ID valu e. Default Conf iguration There is no default config[...]

  • Page 764

    764 IPv6 Multi cast Commands BSR Border..................................... Disabled show ipv6 pimsm neighb or Use the show ipv6 pi ms m neighb or command to display IPv6 PI MSM neighbors learned on the routing interfaces. Syntax show ipv6 p imsm ne ighbor [ all | interfa ce vlan vlan -id ] • vla n-id — A val id VLAN ID va lue. Default Conf ig[...]

  • Page 765

    IPv6 Mul ticast Co mman ds 765 show ipv6 pimsm rphash Use the show ipv6 pimsm rphash command to display which re ndezv ous point (RP) is b eing selected for a sp ecified group. Syntax show ipv6 pims m rphash group-address group-address — Group IP addres s supported by RP . Default Conf iguration There is no default configuration for this command.[...]

  • Page 766

    766 IPv6 Multi cast Commands Syntax show ipv6 p imsm rp m apping [ rp-addr ess ] • rp-add ress — IP addr ess of RP . Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guidel ines There ar e no user gui delines for this command. Example console#show ipv6 pimsm rp mapping Group Addr[...]

  • Page 767

    IPv6 Ro uting Comma nds 767 41 IPv6 Routing Commands This chapter exp lains the following commands: • clea r ipv6 neigh bors • clea r ipv6 st atistics • ipv6 addr ess •i p v 6 e n a b l e • ipv6 fo rwar ding •i p v 6 h o s t •i p v 6 m l d l a s t - m e m b e r - q u e r y - c o u n t •i p v 6 m l d l a s t - m e m b e r - q u e r y[...]

  • Page 768

    768 IPv6 R outin g C ommand s •i p v 6 r o u t e •i p v 6 r o u t e d i s t a n c e • ipv6 unicast -routing • ping ipv 6 • pin g ipv6 inte rface • show ipv6 brief • show ipv6 interface •s h o w i p v 6 m l d g r o u p s • show ipv6 mld int erface •s h o w i p v 6 m l d - p r o x y • show ipv6 mld-proxy groups • show ipv6 mld[...]

  • Page 769

    IPv6 Ro uting Comma nds 769 clear ipv6 neighbors Use the clear ipv6 neighbo rs command in P rivileged EXEC mode to clear all entries in t he IPv6 neighbor tab le or an entry on a speci fic interface. Syntax clear ip v6 neigh bors [ vlan vlan -id ] • vla n-id — V al id VLA N I D. Default Conf iguration This command has no default configuration. [...]

  • Page 770

    770 IPv6 R outin g C ommand s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following example clears IPv6 statistics for VLAN 11. console(config)#clear ipv6 statistics vlan 11 ipv6 address Use the ipv6 address command in Interf[...]

  • Page 771

    IPv6 Ro uting Comma nds 771 • prefix — Consists of t he bits of the add ress t o be configured. • prefix-length — Designa tes how many of the high-or der contig uous bits of the address make up the prefix. • eui64 — The opt ional eui-64 field design ates that IPv6 process ing on the interfaces is enabl ed usin g an EU I-64 int erface ID[...]

  • Page 772

    772 IPv6 R outin g C ommand s Default Conf iguration Disabled is the default configuration. Command Mode Interface Configuration (VLAN, T unnel, L oopback) mod e. User Guidel ines This command has no user guidelines . Example The following example enables I P v6 routing, which has not been configured with an e xplicit IPv6 addr ess. console(config)[...]

  • Page 773

    IPv6 Ro uting Comma nds 773 Example The followi ng ex ample globally enabl es IPv6 forwar ding. console#configure console(config)#ipv6 forwarding console(config)#no ipv6 forwarding ipv6 host The ipv6 host command is used to define stat ic host name-to- ip v6 addres s mapping in the host cache. Syntax ipv6 host name ipv6-address no ipv 6 host name ?[...]

  • Page 774

    774 IPv6 R outin g C ommand s ipv6 mld last-member -query-count The ipv6 ml d last-me mber -query -count command sets the n umber of listener -speci fic queries sent before the router assumes that t here ar e no loca l members on the i nterface. Use the “no” form o f this command to set the last member query count to the default. Syntax ipv6 ml[...]

  • Page 775

    IPv6 Ro uting Comma nds 775 no ipv6 m ld last-m ember-query-interv al • last-member-query-interval — T he last memb er query interva l (Range: 0–65 535 millis econ ds). Default Conf iguration The default last member query interval is 1 second. Command Mode Interface Configuration (VLAN) mode. User Guideli nes There ar e no user gui delines fo[...]

  • Page 776

    776 IPv6 R outin g C ommand s User Guidel ines There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 mld-proxy ipv6 mld-proxy r eset-status Use the ipv6 mld-proxy reset-status command to reset the host inter face status parameters of the MLD P roxy rout er . This command is only valid when MLD Proxy is en abled on t[...]

  • Page 777

    IPv6 Ro uting Comma nds 777 Syntax ipv6 mld-proxy unsoli cited-rep ort-inte rva l interval no ipv6 m ld-proxy un solicited-report -inter val • interva l — Th e interv al betw een unso licited reports (Ran ge: 1–26 0 seconds). Default Conf iguration The unsolicited report i nt erval is 1 se co nd by default. Command Mode Interface Configuratio[...]

  • Page 778

    778 IPv6 R outin g C ommand s Command Mode Interface Configurati on (VLAN) mode. User Guidel ines There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 mld query-interval 130 ipv6 mld query-max-response-time The ipv6 ml d query-max -respon se-time command sets MLD query maximum re sp onse time for the interface. Thi[...]

  • Page 779

    IPv6 Ro uting Comma nds 779 ipv6 mld router The ipv6 mld router co m mand is us ed t o e na ble M LD in the ro ute r i n gl ob al configuration mode and for a sp ecific interface in inter face configuration mode. U se the “no” form of this comma nd to disab le MLD. Syntax ipv6 mld route r no ipv 6 mld ro uter Default Conf iguration MLD is disab[...]

  • Page 780

    780 IPv6 R outin g C ommand s • mtu — Is t he max imum transm ission unit. ( Range: 12 80-150 0) Default Conf iguration The default MTU is 15 00. Command Mode Interface Configuration (VLAN, T unnel, L oopback) mod e User Guidel ines This command has no user guidelines . Example The fo llowing example sets the m aximum tra nsmission unit (MTU) s[...]

  • Page 781

    IPv6 Ro uting Comma nds 781 User Guideli nes This command has no user guidelines. Example The following e xample sets at 10 the number of dup licate address det e ction probes transmit ted while doing neighbor discove ry . console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 nd dad attempts 10 ipv6 nd ma nag ed-config-flag Use the ipv6 [...]

  • Page 782

    782 IPv6 R outin g C ommand s Example In the following example, the end node uses DH CPv6. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 nd managed-config-flag ipv6 nd ns- interv al Use the ipv6 nd ns-in terval command in Interface Configuration mode to set the interval between router advert isement s for advertised neighbor soli[...]

  • Page 783

    IPv6 Ro uting Comma nds 783 ipv6 nd other -config- flag Use the ipv6 nd ot her- config-flag command i n Interface Configuration mode to set the “other stateful configuration” flag in router advertisements sent from the interface. Syntax ipv6 nd other-config-flag no ip v6 nd oth er-config-flag Default Conf iguration F alse is the default configu[...]

  • Page 784

    784 IPv6 R outin g C ommand s ipv6 nd pr efix Use the ipv6 nd prefix command to configur e p arameters associated with prefix es th at the router advertises in its route r advertisements. Syntax ipv6 nd prefi x prefix/ prefix -len gth [{ valid-lifetime | infinite} { preferred- lifetime | infinite}] [ no-autoconfig ] [ off-link ] no ipv6 nd prefix p[...]

  • Page 785

    IPv6 Ro uting Comma nds 785 The ipv6 nd prefix command will allow you to preconfigure R A prefix values before you configure the associated interface address. In or de r for the prefix to be included in R As, you must configure an address that matches the pr efix using the ipv6 address co mmand. P refix es specified using ipv6 nd prefix without an [...]

  • Page 786

    786 IPv6 R outin g C ommand s Example The fo llowing exampl e sets the transmi ssion inte rval betw een rout er advertisement s at 1000 seconds. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 nd ra-interval 1000 ipv6 nd ra-lifetime Use the ipv6 n d ra-l ifetime command in Interface Configuration mode to set the value that is pla c[...]

  • Page 787

    IPv6 Ro uting Comma nds 787 ipv6 nd reacha ble-time Use the ipv6 nd r eachable -time command in Interface Configuration mode to set the router advertisement time t o consider a neighbor r eachab le after neighbor discovery confirmation. Syntax ipv6 nd reachabl e-time mi lli seconds no ipv6 nd reacha ble-tim e • millis econds — R eacha ble-tim e[...]

  • Page 788

    788 IPv6 R outin g C ommand s ipv6 nd suppress-ra Use the ipv6 nd suppress-ra command in Interface Configuration mode to suppr e ss router advertisement transmission on an interface. Syntax ipv6 nd suppress-ra no ipv6 nd suppress-ra Default Conf iguration Disabled is the default configuration. Command Mode Interface Configuration (VLAN, T unnel, L [...]

  • Page 789

    IPv6 Ro uting Comma nds 789 Default Conf iguration IPv6 PIM-DM is disabled by default. Command Mode Global Configuration mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 pimdm ipv6 pimdm hello- interval The ipv6 pimdm h e llo- interval command is used to[...]

  • Page 790

    790 IPv6 R outin g C ommand s Example console(config-if-vlan5)#ipv6 pimdm hello-interval 500 ipv6 route Use the ipv6 route command in Global Configur ation mode to configur e an IPv6 st atic route. Syntax ipv6 route ipv 6-p refi x / prefix-length [ Nu ll | interface { tunnel tunnel-id | vlan vlan-id }] next-hop-a ddress [ prefer ence ] no ipv6 r ou[...]

  • Page 791

    IPv6 Ro uting Comma nds 791 User Guideli nes This command has no user guidelines. Example The following example config ur e an IPv6 static ro ute. console(config)#ipv6 route 2020:1::1/64 2030:1::2 ipv6 rout e dist ance Use the ipv6 route distance command i n Global Configuration mode to set the default distance (prefere nce) for s tatic routes. L o[...]

  • Page 792

    792 IPv6 R outin g C ommand s Example The f ollowin g e xample se ts the de fault dis tance to 80. console(config)#ipv6 route distance 80 ipv6 unicast-routing Use the ipv6 unicast-routin g command in Global Configuration mode to enable forwarding of IPv6 unicas t datagram s. Syntax ipv6 uni cast-r outing no ipv6 unica st-routi ng Default Conf igura[...]

  • Page 793

    IPv6 Ro uting Comma nds 793 through the default VLAN (VLAN 1), as long as ther e is a physical path between the sw itch and the workstation. The termi nal interface sends th ree pings to the ta rget station. Syntax ping ipv6 { ip-addr ess | hostname } [size size ] • ipv6- address — T arget IPv6 add ress to ping. • hostna me — Hostname to pi[...]

  • Page 794

    794 IPv6 R outin g C ommand s is a physical pa th between t he switch and the workstat ion. The terminal interface sends three pings to the target station. Use the interfac e key w o rd to ping an inter face by using the link-lo cal address or t he global IPv6 addr ess of the interface. The source can be a loopback, tunnel, or l o gical interface. [...]

  • Page 795

    IPv6 Ro uting Comma nds 795 show ipv6 brief Use the show ipv6 brief command in P rivileged EXEC mode to display the IPv 6 st at us of for w ardin g mo de and IPv 6 unicast routing mode. Syntax show ipv6 brief Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no use[...]

  • Page 796

    796 IPv6 R outin g C ommand s • tunnel -id — V alid tunn el interfac e ID • vla n-id — V ali d VLAN ID. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Examples The followi ng e xamples show the us ability status of a IPv6 VLAN interf[...]

  • Page 797

    IPv6 Ro uting Comma nds 797 Router Advertisement Suppress Flag........... .. Disabled Prefix 3FF0:1236:C261::1/64 Preferred Lifetime........................... .. 10000 Valid Lifetime............................... .. 100000 Onlink Flag.................................. .. Enabled Autonomous Flag.............................. .. Enabled console#sho[...]

  • Page 798

    798 IPv6 R outin g C ommand s Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guidel ines The following fields are displayed as a table when vlan vlan-id is specifie d: If vla n vlan -id is not specified, the following fields ar e displayed for each multic ast group and each i nterf[...]

  • Page 799

    IPv6 Ro uting Comma nds 799 The following table is displayed t o indicate all the sources associated with thi s group: Example console#show ipv6 mld groups ff1e::5 Interface.................................... .. vlan 6 Group Address................................ .. FF1E::5 Last Reporter................................ .. FE80::200:FF:FE00:22 Up [...]

  • Page 800

    800 IPv6 R outin g C ommand s Group Address.............................. .... FF1E::1 Interface.................................. .... vlan 6 Up Time (hh:mm:ss)......................... .... 00:04:23 Expiry Time (hh:mm:ss)..................... .... ------ Group Address.............................. .... FF1E::2 Interface...........................[...]

  • Page 801

    IPv6 Ro uting Comma nds 801 Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guideli nes The following information is displa y ed for the specified interface: Interface The in terface number i n unit/sl ot/port format. MLD Global Admin Mod e This f ield dis plays the c onfigure d glo[...]

  • Page 802

    802 IPv6 R outin g C ommand s The following information is displayed if the operationa l mode of the MLD interface is e nabled: Example console#show ipv6 mld interface vlan 2 Interface.................................. .... vlan 2 MLD Global Admin Mode...................... .... Enabled MLD Interface Admin Mode................... .... Disabled MLD [...]

  • Page 803

    IPv6 Ro uting Comma nds 803 Last Member Query Interval (milli-secs)...... .. 1111 Last Member Query Count...................... .. 2 show ipv6 mld- prox y Use the show ipv6 ml d-proxy command to display a summary of the host interface status p arameters. Syntax show ipv6 mld-p roxy Command Mode P rivileged EXEC mode Default Conf iguration There is [...]

  • Page 804

    804 IPv6 R outin g C ommand s Example console#show ipv6 mld-proxy Interface Index............................ .... vlan 10 Admin Mode................................. .... Enabled Operational Mode........................... .... Enabled Version.................................... .... 3 Num of Multicast Groups.................... .... 0 Unsolicited[...]

  • Page 805

    IPv6 Ro uting Comma nds 805 Example console#show ipv6 mld-proxy groups Interface................................ vlan 10 Group Address Last Reporter Up Time Member State Filter Mode Sources ------------- -------------- ---------- ------------- ------------- FF1E::1 FE80::100:2.3 00:01:40 DELAY_MEMBER Exclude 2 FF1E::2 FE80::100:2.3 00:02:40 DELAY_M[...]

  • Page 806

    806 IPv6 R outin g C ommand s Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC User Guidel ines The following parameters a re displayed by this command: Example console#show ipv6 igmp-proxy groups Interface................................ vlan 10 Group Address Last Reporter Up Time Member Stat[...]

  • Page 807

    IPv6 Ro uting Comma nds 807 ------------- ---------------- --------- ----------------- -------- ----- ------- FF1E::1 FE80::100:2.3 244 DELAY_MEMBER Exclude 2 Group Source List Expiry Time ------------------ --------------- 2001::1 00:02:40 2001::2 -------- FF1E::2 FE80::100:2.3 243 DELAY_MEMBER Include 1 Group Source List Expiry Time -------------[...]

  • Page 808

    808 IPv6 R outin g C ommand s show ipv 6 mld- proxy inte rface Use the show ipv6 ml d-proxy interfac e command to display a detailed list of the host interface status parameters. Syntax show ipv6 m ld-prox y interf ace Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC User Guidel ines The follo[...]

  • Page 809

    IPv6 Ro uting Comma nds 809 Ver Query Rcvd Report Rcvd Report Sent Leave Rcvd Leave Sent ------------------------------------------------------------------ 1 2 0 0 0 2 2 3 0 4 ----- ----- show ipv6 mld traffic The show ipv 6 mld traffic co mmand is used to display MLD sta t istical information for the router . Syntax show ipv6 ml d traffic Default [...]

  • Page 810

    810 IPv6 R outin g C ommand s Example console#show ipv6 mld traffic Valid MLD Packets Received..................... 52 Valid MLD Packets Sent......................... 7 Queries Received............................... 0 Queries Sent................................... 7 Reports Received............................... 52 Reports Sent..................[...]

  • Page 811

    IPv6 Ro uting Comma nds 811 User Guideli nes This command has no user guidelines. Example The following exampl e displays info rmation about the IPv6 neighbors. console(config)#show ipv6 neighbors Neighbor Last IPv6 Address MAC Address isRtr State Updated Interface -------------------- ----------------- ----- ------- --------- show ipv6 pimdm The s[...]

  • Page 812

    812 IPv6 R outin g C ommand s Admin Mode..................................... Enable PIM-DM INTERFACE STATUS Interface Interface Mode Protocol State --------- -------------- ---------------- vlan 10 Enable Non-Operational vlan 20 Enable Non-Operational show ipv6 pimdm interface The show ipv6 pi mdm inte rface command is used to display PIM-DM Co nf[...]

  • Page 813

    IPv6 Ro uting Comma nds 813 Slot/Port...................................... vlan 10 IP Address..................................... FE80::221:9BFF:FEC3:1216/128 Neighbor Count................................. 0 Hello Interval (secs).......................... 30 Designated Router.............................. Not Supported console#show ipv6 pimdm in[...]

  • Page 814

    814 IPv6 R outin g C ommand s Command Mode P rivileged EXEC User Guidel ines There ar e no user gui delines for this command. Example console#show ipv6 pimdm neighbor interface vlan 10 Up Time Expiry Time Neighbor Addr Interface hh:mm:ss hh:mm:ss --------------- ---------- --------- ----------- show ipv6 route Use the show ipv6 route com mand in P [...]

  • Page 815

    IPv6 Ro uting Comma nds 815 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example displays the IPv6 routing table. console(config)#show ipv6 route IPv6 Routing Table - 0 entries Codes: C - connected, S - static O - OSPF[...]

  • Page 816

    816 IPv6 R outin g C ommand s User Guidel ines This command has no user guidelines . Example The follo wing e xample show s the pr efer enc e value ass ociat ed with the ty pe of route. console#show ipv6 route preferences Local.......................................... 0 Static......................................... 1 OSPF Intra-area routes......[...]

  • Page 817

    IPv6 Ro uting Comma nds 817 User Guideli nes This command has no user guidelines. Example The following example displays a summary of the routing table. console#show ipv6 route summary IPv6 Routing Table Summary - 0 entries Connected Routes............................... 0 Static Routes.................................. 0 OSPF Routes...............[...]

  • Page 818

    818 IPv6 R outin g C ommand s Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guidel ines This command has no user guidelines . Examples The following e xamples s how traffic and s tatistics for IP v6 and ICMPv6, f irst for all inter faces and an individual VLAN. console> show ipv6 traffic IPv6 [...]

  • Page 819

    IPv6 Ro uting Comma nds 819 Multicast Datagrams Transmitted........................... 0 console> show ipv6 traffic vlan 11 Interface...................................... 11 IPv6 STATISTICS Total Datagrams Received.................................. 0 Received Datagrams Locally Delivered...................... 0 Received Datagrams Discarded Due T[...]

  • Page 820

    820 IPv6 R outin g C ommand s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example displays IPv6 VLAN routing interface addre sses. console#show ipv6 vlan MAC Address used by Routing VLANs: 00:02:BC:00:30:68 VLAN ID I[...]

  • Page 821

    IPv6 Ro uting Comma nds 821 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example discovers the packet routes on a hop-b y-hop basis. console#traceroute ipv6 2020:1::1 Tracing route over a maximum of 20 hops 1 * N * N * N[...]

  • Page 822

    822 IPv6 R outin g C ommand s[...]

  • Page 823

    Loop back Inte rface Com mands 823 42 Loopbac k Interface Command s This chapter exp lains the following commands: • interface loopback • show interfaces loopback[...]

  • Page 824

    824 Loopbac k Int erfac e Command s interface loop back Use the interfa ce loopback command in Global C onfiguration mode to enter the Interface L oopback configuration mode. Syntax interface l oopback loopback-id no inter face loop back loopback-id • loopback-id — L oopback identifier . (Range: 0-7) Default Conf iguration This command has no d[...]

  • Page 825

    Loop back Inte rface Com mands 825 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Examples The following exampl es display info rmation about configur e d loopback interfaces. console# show interfaces loopback Loopback Id Interface IP Ad dre[...]

  • Page 826

    826 Loopbac k Int erfac e Command s[...]

  • Page 827

    Multicast Comman ds 827 43 Multicast Commands This chapter exp lains the following commands: • ip mcast boundar y •i p m r o u t e •i p m u l t i c a s t • ip m ulticas t ttl-thresho ld • ip pims m • ip pimsm bsr -border • ip pimsm bsr -candidate • ip pims m dr -priority • ip pims m hello-interval • ip pims m join-prune-interval[...]

  • Page 828

    828 Multi cast Com mands • show ip pi msm rphash • show ip pi msm rp mapping[...]

  • Page 829

    Multicast Comman ds 829 ip mcast boundar y Use the ip mcas t bounda ry command in Interface Configuration mode to add an administra tive scope multicast boundary s pecified by grou pipad dr and mask for which this multica st administrative boundary is applicable. grou pipadd r is a group I P address and mask is a group IP mask. Syntax ip mcast boun[...]

  • Page 830

    830 Multi cast Com mands Syntax ip mro ute source-addr ess source-mask rp f-addr ess pref erence no ip mro ute source-addr ess source • source-addr ess — The IP addre ss of the multicas t data source. • source-mask — The IP subnet ma sk of the multicast data source. • rpf -ad dress — The IP addr ess of the ne xt hop towar ds the source [...]

  • Page 831

    Multicast Comman ds 831 no ip multica s t Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The following example enables IP multicast on the router . console#configure console(config)#ip multicast console(config)#no ip multicast ip [...]

  • Page 832

    832 Multi cast Com mands User Guidel ines This command has no user guidelines . Example The following e xample applies a ttlv alue of 5 to the VLAN 15 routing interface. console(config)#interface vlan 15 console(config-if-vlan15)#ip multicast ttl-threshold 5 ip pimsm The ip pimsm command is us ed to administratively enable PIM-SM multicast routing [...]

  • Page 833

    Multicast Comman ds 833 ip pimsm bsr -bo rder The ip pimsm bsr - border com mand is used to prevent bo otstrap router (B SR) messages from being sent or received through an i nterface. Use t he “no” form of this command to disa ble the interface fro m being the BSR border . Syntax ip pimsm bsr -bord er no ip p imsm bs r -borde r Default Conf ig[...]

  • Page 834

    834 Multi cast Com mands • hash-ma sk-length — The length of a mask that is t o be ANDed with the group address before the h ash func tion is ca lled. All group s with the same seed hash correspond to the same RP . F or e xam ple, if this value is 24, only the first 24 bit s of the group ad dresses matter . This allows you to get one RP for mu [...]

  • Page 835

    Multicast Comman ds 835 Default Conf iguration The defaul t elect ion p riorit y is 1. Command Mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config-if-vlan3)#ip pimsm dr-priority 12 ip pimsm hello-inter val The ip pim sm hel lo-inte rv al command is used to configure the P[...]

  • Page 836

    836 Multi cast Com mands Example console(config-if-vlan3)#ip pimsm hello-interval 60 ip pimsm join-p rune-in terva l The ip pim sm jo in-pru ne-inter v al command is used to configure the interface join/prune interval for the PIM-SM router . Use the “no” form of this command t o set the j oin/prune in terval to the default . This comma nd depre[...]

  • Page 837

    Multicast Comman ds 837 Syntax ip pims m regist er -thresh old thr eshold no ip pi msm regi ster -th r esh old • thr eshold — T he threshold rate ( Range: 0 –2000 Kbps). Default Conf iguration The def ault thr eshold r ate is 0. P r eviously , the default w as 50. Command Mode Global Configuration mode User Guideli nes There ar e no user gui [...]

  • Page 838

    838 Multi cast Com mands Default Conf iguration There ar e no s tatic RP addresses configured by default. Command Mode Global Configuration mode User Guidel ines There ar e no user gui delines for this command. Example console(config)#ip pimsm rp-address 192.168 .20.1 225.1.0.0 255.255.255.0 ip pimsm rp-cand idate The ip pim sm rp-ca ndidate comman[...]

  • Page 839

    Multicast Comman ds 839 User Guideli nes There ar e no user gui delines for this command. Example console(config)#ip pimsm rp-candidate interface vlan 3 225.2.0.0 255.255.0.0 ip pimsm spt-thr eshold The ip pim sm spt-t hreshold command is used to configure the Data Threshold rate for the last -hop rout er to switc h to the sh ortest path. Use the ?[...]

  • Page 840

    840 Multi cast Com mands Syntax ip pimsm ssm { default | group-address group-mask } no ip pimsm ssm • default — Defin es the SSM ra nge access list to 232/8. • group-ad dres s group-mask — defines the SSM range . Default Conf iguration There is no SSM range defined by de fault. Command Mode Global Configuration mode User Guidel ines There a[...]

  • Page 841

    Multicast Comman ds 841 User Guideli nes This command has no user guidelines. Example The following command shows informatio n about the en tries in the multi cast addr ess table. console#show bridge multicast address-table count Capacity: 1024 Used: 4 Static addresses: 2 Dynamic addresses: 1 Forbidden addresses: 1 The following table shows the inf[...]

  • Page 842

    842 Multi cast Com mands Syntax show ip m cast Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example disp lays system-wide multicast information. console#show ip mcast Admin Mode..................................... En[...]

  • Page 843

    Multicast Comman ds 843 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example di sp lays all the configur ed administrative scoped multicast bo undaries. console#show ip mcast boundary all MULTICAST BOUNDARY Interface Group Ip Mask -------- ------ --------------- show ip mcast interfa[...]

  • Page 844

    844 Multi cast Com mands Example The following example displays the multicast information for VLAN 1 5. console#show ip mcast interface vlan 15 Interface TTL --------- ----- show ip mcast mroute Use the show ip mcast mro ute command in Priv ileged EXEC mode to display a summ ary or all the de tails of the mult icas t table . Syntax show i p mc ast [...]

  • Page 845

    Multicast Comman ds 845 Expiry Up Time Source Ip Group Ip Time(secs) (s ecs) RPF Neighbor Flags --------- ----------- ---------- ----------- --------------- ----- show ip mcast mroute group Use the show ip mcast mrou te gro up command in P rivileged EXEC mode to display the multic ast confi guration settings s uch as flags, timer sett ings, incomin[...]

  • Page 846

    846 Multi cast Com mands console#show ip mcast mroute group 224.5.5.5 detail Multicast Route Table Expiry Up Time Source Ip Group Ip Time(secs) (secs) RPF Neighbor Flags --------- --------- ----------- --------- --------------- ----- show ip mcast mroute so urce Use the sh ow ip mcast mr oute source command in Privilege d EXEC mode to display th e [...]

  • Page 847

    Multicast Comman ds 847 console#show ip mcast mroute source 10.1.1.1 224.5.5.5 Multicast Route Table Expiry Up Time Source IP Group IP Time(secs) (secs) RPF Neighbor Flags --------- --------- ----------- ----------- ------------ ----- show ip mcast mroute static Use the show ip mc ast mr oute sta tic command in P rivileged EXEC mode to display all [...]

  • Page 848

    848 Multi cast Com mands show ip pimsm bsr The show ip pimsm bsr command displays the bootstrap router (BSR) information. The output includes el ected BSR information and information about the locally configur e d candidate rendezvous point (R P) advertisement. This command deprecat es the show ip pimsm componenttable command. Syntax show ip p imsm[...]

  • Page 849

    Multicast Comman ds 849 Example console#show ip pimsm bsr BSR Address.................................. .. 1.1.1.1 BSR Priority................................. .. 20 BSR Hash Mask Length......................... .. 10 Next bootstrap message(hh:mm:ss)............. .. 00:00:11 Next Candidate RP advertisement(hh:mm:ss).... .. 00:00:00 show ip pimsm i[...]

  • Page 850

    850 Multi cast Com mands Example console#show ip pimsm interface vlan 3 Slot/Port.................................. .... vlan 3 IP Address................................. .... 1.1.1.1 Subnet Mask................................ .. 255.255.255.0 Hello Interval (secs)...................... .... 30 Join Prune Interval (secs)................. .... 60 [...]

  • Page 851

    Multicast Comman ds 851 Example console#show ip pimsm rphash 225.1.0.5 RP Type Address ---------------- ----- 1.1.1.1 Static show ip pimsm r p mapping The show ip pimsm rp mappin g command is used to dis play all group-to-RP mappings of which t he router is awar e (either configured or learned from the bootstrap router (BSR)). If no RP is specified[...]

  • Page 852

    852 Multi cast Com mands Example console#show ip pimsm rp mapping Group Address.......................... 225.1.0.0 Group Mask............................. 255.255.255.0 RP Address............................. 1.1.1.1 origin................................. Static Group Address.......................... 225.2.0.0 Group Mask.........................[...]

  • Page 853

    OSPF Commands 853 44 OSPF Commands This chapter exp lains the following commands: • are a default-cos t •a r e a n s s a • are a nssa defaul t-info-o riginat e • are a nssa no-r edistribu te • are a nssa no-summary • a rea ns sa t ran slat or-role • a rea ns sa t rans lato r -s tab -intv •a r e a r a n g e •a r e a s t u b • are[...]

  • Page 854

    854 OSPF Commands • exit-ov erf low-interval • external-lsdb-limit • ip ospf area • ip ospf auth entic atio n • ip ospf cost • ip os pf dead-i nterval • ip ospf hello-interval • ip ospf mtu-ign ore • ip ospf network • ip ospf priority • ip ospf retransmit-interval • ip ospf transmit-delay • maximum- paths • passive -inte[...]

  • Page 855

    OSPF Commands 855 • sh ow ip osp f interfac e • sh ow ip osp f interface brief • sh ow ip osp f interfac e stats • show ip ospf neigh bor •s h o w i p o s p f r a n g e • sh ow ip osp f statistics • show ip ospf stub table • show ip ospf v irtual- link • show ip ospf v irtual- link brie f •t i m e r s s p f • 1583comp atibilit[...]

  • Page 856

    856 OSPF Commands area de fault-cost Use the area default-cost command in Router OSPF Configuration mode to configure the monetary default cost for the stub area. Use the no form of the comma nd to r eturn t he cost to the de fault val ue. Syntax area ar ea-id default-cost integer no area ar ea-id default-cost • ar ea-id — Ident ifies the O SPF[...]

  • Page 857

    OSPF Commands 857 Syntax area area- id nssa no are a area- id nssa • ar ea-id — Identifies the OS PF not -so-stubb y-area. (Range: 0–4294 967295 ) Default Conf iguration This command has no default configuration. Command Mode Router OSPF Configuration mode . User Guideli nes This command has no user guidelines. Example The following exampl e [...]

  • Page 858

    858 OSPF Commands • integer — Specifies the metric of the de fault route a dvertised to the NSSA. (R ange: 1–1 67772 14) • compar abl e — A metric type of nssa-ex ternal 1 • non-comparable — A metric typ e of nssa-ext ernal 2 Default Conf iguration If no metric is define d, 10 is the default configuration. Command Mode Router OSPF Con[...]

  • Page 859

    OSPF Commands 859 Command Mode Router OSPF Configuration mode . User Guideli nes This command has no user guidelines. Example The following example configur es the NSSA ABR. console(config-router)#area 20 nssa no-redistribute area nssa no-summary Use the area n ssa no-s ummary command in Router OSPF Configuration mode to configure the NSSA so that [...]

  • Page 860

    860 OSPF Commands area nssa translator -role Use the area nss a tra nslator-role command in Router OSPF Configuration mode to conf igure the transl ator role of the NSSA . Syntax area area-i d nssa translator-role {always | candidate} no area area -id nssa translato r -ro le • ar ea-id — Ident ifies the O SPF NSSA to co n figure. (Range: IP add[...]

  • Page 861

    OSPF Commands 861 Syntax area area- id nssa translator-stab-intv integer no are a area- id nssa translator-stab-intv • ar ea-id — Ident ifies the O SPF NSSA to configu re. (Range: IP address or decim al from 0–42 949672 95) • integ er — The period of time that an el ected transl ator continues to perform it s duties aft er it determin es [...]

  • Page 862

    862 OSPF Commands Syntax area ar e a-id rang e ip -add ress su bnet -m ask {summa rylink | ns saexternall ink} [advertise |n ot-advert ise] no area area -id range ip-addr ess subnet-mask {summaryl ink | nssaext ernallink} • ar ea-id — Ident ifies the O SPF NSSA to co n figure. (Range: IP add ress or decim al from 0–429 49672 95) • ip-add re[...]

  • Page 863

    OSPF Commands 863 External LSA s and Summary LSAs can s ignificantly r e duce the link st ate database of routers within the stub area. Use the no f o rm of the command to remo ve the stu b area . Syntax area area- id stub no are a area- id stub • ar ea-id — Ident ifies the a rea identifier of the O SPF stub . (Ran ge: IP address or dec imal fr[...]

  • Page 864

    864 OSPF Commands no area area -id stub no-summary • ar ea-id — Ident ifies the O SPF area to configure. (Ra nge: IP ad dress or decim al from 0–429 49672 95) Default Conf iguration Disabled is the default configuration. Command Mode Router OSPF Configuration mode. User Guidel ines This command has no user guidelines . Example The following e[...]

  • Page 865

    OSPF Commands 865 Command Mode Router OSPF Configuration mode . User Guideli nes This command has no user guidelines. Example The following e xample cr eates an OSPF virtual int erface for are a 10 and neighbor router . console(config-router)#area 10 virtual-link 192.168.2.2 area virtu al-link authentication Use the area virtua l-link authe ntica t[...]

  • Page 866

    866 OSPF Commands Default Conf iguration This command has no default configuration. Command Mode Router OSPF Configuration mode. User Guidel ines Unauthe nticated i nterfaces do not need an authentic ation key . Example The follow ing example conf igures the authenti cation ty pe and key for the area 10 OSPF virtual interface and neighbor ID . cons[...]

  • Page 867

    OSPF Commands 867 Command Mode Router OSPF Configuration mode . User Guideli nes This command has no user guidelines. Example The following example configures the dead interval for the area 10 OSPF virtual interface on the virt u al interface and neighbor router . console(config-router)#area 10 virtual-link 192.168.2.2 dead-interval 655555 area vir[...]

  • Page 868

    868 OSPF Commands User Guidel ines This command has no user guidelines . Example The following exampl e configures a 50-second wait interval. console(config-router)#area 10 virtual-link 192.168.2.2 hello-interval 50 area virtual-link retransmit-int erval Use the are a vi rtua l-li nk r etr ansm it- inte r val command in Router OSPF Configuration mo[...]

  • Page 869

    OSPF Commands 869 Example The following exampl e configures a 500-second retransmit wait interval. console(config-router)#area 10 virtual-link 192.168.2.2 retransmit-interval 500 area virtu al-link transmit-delay Use the are a vi rtua l-li nk t rans mit-de lay command in Router OSPF Configuration mode to configure the transmit delay for the OSPF vi[...]

  • Page 870

    870 OSPF Commands console(config-router)#area 10 virtual-link 192.168.2.2 transmit-delay 40 auto-cost By default, OSPF computes t he link cost of each interface from the interface bandwidth. The link cost is computed as the ratio of a “reference ban dwidth” to the interface b andwidth (ref_bw / interface bandwi dth), where interface bandwidth i[...]

  • Page 871

    OSPF Commands 871 bandwidth By default, O SPF com putes the li nk cost of an int erface as the ratio of the refer ence bandw idth to the interface bandwidth. Reference bandwidth is specifi ed with th e auto-cost command. F o r the purpose of the OSPF link c ost calculation, the bandwidth command specifies the interface bandwidth. The bandwidth is s[...]

  • Page 872

    872 OSPF Commands no capabil ity opa que Default Conf iguration Opaque Capability is enabled by default. Command Mode Router Configuration mode. User Guidel ines There ar e no user gui delines for this command. Example console(config-router)#capability opaque clear ip ospf Use the clear ip ospf command to reset sp ecific OSPF states. If no paramete[...]

  • Page 873

    OSPF Commands 873 Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no user gui delines for this command. Example The following example shows the options for the clear ip ospf command. console#clear ip ospf ? <cr> Press enter to execute the command. confi[...]

  • Page 874

    874 OSPF Commands Default Conf iguration The default metric is none and the default type is 2. Command Mode Router OSPF Configuration mode. User Guidel ines This command has no user guidelines . Example The following example always advertises default route s. console(config-router)#default-information originate always metric 100 metric-type 1 defau[...]

  • Page 875

    OSPF Commands 875 Example The following exampl e sets a value of 50 for the defau lt metric. console(config-router)#default-metric 50 distance ospf The distance ospf command se ts the preference values of OSPF route types in t he rout er . Lowe r rout e pre fere nce val ues ar e pr efer red when de termi ning the b est route . The typ e of OSPF rou[...]

  • Page 876

    876 OSPF Commands distribute-list out Use the distrib ute-list ou t command in Router OSPF C onfiguration mode to specify the access lis t to filter routes received from the source protocol. Use the no form of the command to re m ove the specified source prot ocol from the access list. Syntax distribute -list acc essl ist nam e out { rip|s tatic [...]

  • Page 877

    OSPF Commands 877 enable Use the enabl e command in Router OSPF Configuration mode to re set the default administrative mod e of OSPF in the router (active). Use th e no form of the comm and to disabl e the adminis trative mo de for OSPF . Syntax enable no ena ble Default Conf iguration Enabled is the default configuration. Command Mode Router OSPF[...]

  • Page 878

    878 OSPF Commands • seconds — Number of secon ds after enteri ng overflow st ate that a rout er will wait b efore attempting to l eave the overflow state. (Range: 0–21 474836 47) Default Conf iguration 0 seconds is the default configuration. Command Mode Router OSPF Configuration mode. User Guidel ines This command has no user guidelines . Ex[...]

  • Page 879

    OSPF Commands 879 Command Mode Router OSPF Configuration mode . User Guideli nes The exter nal LSD B limi t MUS T be set i dentica lly i n all r outers a ttach ed to the OSPF backbone and/or any r egular OSPF area. Example The following example configures the e xterna l LSDB limit for OSPF with the number of non-default ASexternal- LSAs set at 20. [...]

  • Page 880

    880 OSPF Commands Example console(config-if-vlan1)#ip ospf area 192.168.1.10 ip ospf authentication Use the ip ospf authe nticati on comm an d in the Inte rfac e C onf igu rat ion mode to s et the OSPF Authentication T y pe and Key for the specif ied interface. Use the no form of the comm and to return the authenti cation type to the default v alue[...]

  • Page 881

    OSPF Commands 881 console(config-if-vlan15)#ip ospf authentication encrypt test123 100 ip ospf cost Use the ip ospf co st command in Interface Config uration mode to configure the cost on an OSPF interface. Use the no form of the co mmand to r e turn the cost to the defa ult value. Syntax ip ospf co st integer no ip osp f cost • integ er — Spec[...]

  • Page 882

    882 OSPF Commands Syntax ip ospf dea d-inter val seconds no ip osp f dead-inte rva l • seconds — Number of seconds that a router's Hello pack ets have not been seen before its neighbor routers d ecl are that the router is dow n. (Range: 1–65 535) Default Conf iguration 40 is the default number of seconds. Command Mode Interface Configura[...]

  • Page 883

    OSPF Commands 883 Default Conf iguration 10 is the default number of seconds. Command Mode Interface Configuration (VLAN) mode. User Guideli nes The value for the length of time must be t he same for all routers attached t o a network. Example The followi ng e xample sets the O SPF hello interval at 30 seconds. console(config-if-vlan15)#ip ospf hel[...]

  • Page 884

    884 OSPF Commands User Guidel ines This command has no user guidelines . Example The following exampl e disables OSPF MTU mismatch detecti o n on VLAN interface 15 . console(config-if-vlan15)#ip ospf mtu-ignore ip ospf network Use the ip ospf network co mmand to c onfigure OSPF to treat an inte rface as a point-t o-point rat her than bro adcast i n[...]

  • Page 885

    OSPF Commands 885 Example The following example shows the options for the ip ospf network command. console(config-if-vlan1)#ip ospf network ? broadcast Set the OSPF network type to Broadcast point-to-point Set the OSPF network type to Point-to-Point ip ospf prior ity Use the ip ospf priority co mmand in Interface Configuration mo de to set t he OSP[...]

  • Page 886

    886 OSPF Commands ip ospf retransmit-inter val Use the ip ospf retransmi t-inter val command in Interface Configuration mode to set the OSP F retransm it Int erval for the spec ified in terfac e. Use th e no fo rm of the command to re turn the interva l to the default value . Syntax ip ospf ret ransmi t-inter val seconds no ip osp f retran smit-int[...]

  • Page 887

    OSPF Commands 887 Syntax ip ospf tran smit-dela y seconds no ip osp f trans mit-delay • seconds — Se ts the estim ate d num b er of secon ds it takes to t rans mit a link state update packet over this interface. (Range: 1– 3600 seconds) Default Conf iguration 1 is the default number of seconds. Command Mode Interface Configuration (VLAN) mode[...]

  • Page 888

    888 OSPF Commands Command Mode Router OSPF Configuration mode. User Guidel ines OSPF is only enabled on an interfa ce if the prima ry IPv4 addr ess on the interface matc he s a network ar ea range. Any indiv idual interface can only be attached to a s ingle are a. If an interface addr ess matches multiple ne twork area ranges, the interface is assi[...]

  • Page 889

    OSPF Commands 889 Default Conf iguration OSPFv2 is disabled Command Mode Router OSPF Configuration mode . User Guideli nes OSPF is only enabled on an interface if the primary IPv4 addr ess on the interface matc h es a network ar ea range. Any indiv idual interface can only be attached to a single area. If an interface addr ess matches multiple netw[...]

  • Page 890

    890 OSPF Commands planned-only — This keywor d indicates tha t OSPF should only perform a graceful restart when the restart is planned (i.e., when the restart is a result of the ini t iate fa ilo ver co mm and ). Default Conf iguration Graceful re start is disabled by default Command Mode Router OSPF Configuration mode User Guidel ines Graceful r[...]

  • Page 891

    OSPF Commands 891 no ns f helpe r • planned-only — This keywor d indicates that OSPF should only help a rest arting router p erforming a planne d r estart. Default Conf iguration OSPF may act as a helpful neighbor for bo th planned and unplanned restarts Command Mode Router OSPF Configuration mode User Guideli nes The grace LS A announcing the [...]

  • Page 892

    892 OSPF Commands Default Conf iguration A helpful neighbor exits help er mode when a topology change occurs. Command Mode Router OSPF Configuration mode User Guidel ines The restarting r outer i s unabl e to react to topology chan ges. In pa rticula r , the restar t ing router will not immediate ly upda te its fo rwarding table; therefore, a topol[...]

  • Page 893

    OSPF Commands 893 Default Conf iguration The default r estart interva l is 120 seconds. Command Mode Rout er OSPF User Guideli nes The grace period must be set long enough to allow the restarting router to reest ablish all of its adjacencie s and complete a full dat abase ex change with each of those neighbors. Example – passive-inte rface defaul[...]

  • Page 894

    894 OSPF Commands Example console(config-router)#passive-interface passive-interface Use the passive-interface command to set the int e rface as passive. It overrides the global passive mod e that is currently effective on the interface. Use the “no” form of this command to set the interface as non-passive. Syntax passive-interface vlan vlan -i[...]

  • Page 895

    OSPF Commands 895 Syntax redistribute { rip | s tatic | connecte d} [metric integ er ] [ metr ic-type {1 | 2}] [tag integer ] [subnets] no redist ribute {rip | static | conn ected} [metri c integer ] [met ric-type {1 | 2}] [tag integer ] [subnets] • rip — Specifies RIP as the source protocol. • static — Specifies that the source is a static[...]

  • Page 896

    896 OSPF Commands router -id Use the router-id command in Router OSPF Configuration mode to set a 4- digit dotted-dec imal number uniquely identifyi ng the router OSPF ID. Syntax router-id ip-address • ip-add ress — IP address that u niquely id entifies the rou ter OSPF ID . Default Conf iguration This command has no default configuration. Comm[...]

  • Page 897

    OSPF Commands 897 Command Mode Global Configuration mode. User Guideli nes The command prompt changes when the router osp f command ex e cutes. Example The following example enters into router OSPF mode. console(config)#router ospf console(config-router)# show ip ospf Use the show ip ospf command to display information relevant to the OSPF router .[...]

  • Page 898

    898 OSPF Commands RFC 1583 Compatibility This confi gur ation op tion cont rols th e preference rules u sed when choosing among multiple e xternal LSAs advertising the same d estinati on. When enabled, the pre feren ce rules remain those spe cif ied by RFC 158 3. When disabl ed, the preferenc e rules are t hose stat ed in Se ction 16 .4.1 of RFC 23[...]

  • Page 899

    OSPF Commands 899 Number of Active Areas The number of OSPF areas to whic h the rout er is atta ched o n interfaces that are u p. ABR Stat us Sh ows whe ther the route r is an OS PF Area Border Rout er . ASBR Status Indicate s whether the router is an au tonomous system bord er router . Router aut omatically becomes an A SBR when it is configure d [...]

  • Page 900

    900 OSPF Commands LSA Hi gh W ater Mark The maximum num ber of LSAs that have be en in the link state database since OSPF began operation. Retra nsmit Li st Entries The current number of entries on all neighbors ’ retran s mit lists. Maximum Number of Retransmit Entries The maximum num ber of entrie s that can be on neigh bors’ retran smit list[...]

  • Page 901

    OSPF Commands 901 Example The following ex ample displays OSPF router information. console#show ip ospf Router ID.................................... .. 1.1.1.1 OSPF Admin Mode.............................. .. Enable RFC 1583 Compatibility....................... .. Enable External LSDB Limit.......................... .. No Limit Exit Overflow Inter[...]

  • Page 902

    902 OSPF Commands ASBR Status................................ .... Disable Stub Router................................ .... FALSE External LSDB Overflow..................... .... FALSE External LSA Count......................... .... 0 External LSA Checksum...................... .... 0 AS_OPAQUE LSA Count........................ .... 0 AS_OPAQUE LS[...]

  • Page 903

    OSPF Commands 903 show ip ospf abr The show ip os pf abr command displays the internal OSPF routing table entries to Area Border Routers (ABR). This command tak e s no options. Syntax show ip ospf a br Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no user gui deline[...]

  • Page 904

    904 OSPF Commands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following example displays OSPF router information. console#show ip ospf area 10 AreaID..................................... .... 0.0.0.10 External Routing........[...]

  • Page 905

    OSPF Commands 905 Default Metric............................... .. 250 Default Metric Type......................... Non-Comparable Translator Role.............................. .. Candidate Translator Stability Interval................ .. 2000 Translator State............................. .. Disabled show ip ospf asbr The show ip os pf asbr comma n[...]

  • Page 906

    906 OSPF Commands show ip ospf database Use the show ip ospf database command in Priv ileged EXE C mode to display information ab o ut the link state databas e when OSPF is enabled. If para meters are e nter ed, th e comman d displ ays t he LSA h eaders . Use th e optiona l para meter s to spe cify the typ e of li nk stat e adve rtise ments to disp[...]

  • Page 907

    OSPF Commands 907 Example The followi ng e xample displays informat ion about the link st ate database when OSPF is enable d. console#show ip ospf database Router Link States (Area 0.0.0.0) Link Id Adv Router Age Sequence Chksm Options Rtr Opt --------------- --------------- ----- -------- ------ ------- ----- 5.2.0.0 0.0.0.0 1360 80000006 3a1f ---[...]

  • Page 908

    908 OSPF Commands Link Opaque States (Area 0.0.0.0) Link Id Adv Router Age Sequence Chksm Options Rtr Opt --------------- --------------- ----- -------- ------ ------- ----- 5.2.0.0 0.0.0.0 1361 80000005 ef59 ------ Area Opaque States (Area 0.0.0.0) Link Id Adv Router Age Sequence Chksm Options Rtr Opt --------------- --------------- ----- --------[...]

  • Page 909

    OSPF Commands 909 show ip ospf database database-s ummary Use the show ip osp f data base databa se-sum mary command to display the number of each type of L SA in the database for each area and for the router . The c o mma nd also di splays the total n umber of L SAs in the databas e . Th is comm and has be en mod ified . Syntax show ip o spf datab[...]

  • Page 910

    910 OSPF Commands Example The follo wing e xampl e disp lays t he numb er of each t ype of LSA in t he database for each area and for the router . console#show ip ospf database database-summary OSPF Router with ID (5.5.5.5) Area 0.0.0.0 database summary Router......................................... 0 Network.......................................[...]

  • Page 911

    OSPF Commands 911 Router......................................... 0 Network........................................ 0 Summary Net.................................... 0 Summary ASBR................................... 0 Type-7 Ext..................................... 0 Opaque Link.................................... 0 Opaque Area.....................[...]

  • Page 912

    912 OSPF Commands Example The following exampl e displays the information for the IFO object or v i rtual interface ta bles associat e d with VLAN 3 . console#show ip ospf interface vlan 10 IP Address.......................... 1.1.1. 1 Subnet Mask......................... 255.25 5.255.0 Secondary IP Address(es)............. OSPF Admin Mode.........[...]

  • Page 913

    OSPF Commands 913 show ip ospf interface brief Use the sh ow ip osp f inter fac e brief command in Pri v ileged EXEC mode to display bri e f information for the I FO objec t or virtua l interfa ce table s. Syntax show ip ospf int erface bri ef Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User[...]

  • Page 914

    914 OSPF Commands Syntax show ip osp f interf ace stats vlan vlan -id • vla n-id — V ali d VLAN ID. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following ex ample displays the ospf s tatistics for VLAN 15. console>show[...]

  • Page 915

    OSPF Commands 915 • vla n-id — V alid VLAN I D. • ip-add ress — V alid I P address of the neighb or . Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The followi ng ex amples display informatio n about OSPF neighbors o n the s[...]

  • Page 916

    916 OSPF Commands Field D escriptions Interface — The name of the inte rface on which the adjacency is formed. Neighbor IP Address — The IPv4 address on the neighbor's interface used to form the adjacency . Interface Inde x — The SNMP interfac e index. Ar e a Id — The OSPF area in which the a djacency is formed Opti ons — The options[...]

  • Page 917

    OSPF Commands 917 – So ftware res tart ( 1) –S o f t w a r e r e l o a d / u p g r a d e ( 2 ) – Swit ch to redun dan t co ntro l pr oce ssor (3 ) – Unrecog nized - a val ue not defined i n RFC 3623 When F ASTP A TH sends a grace LSA, it sets the Restart Reas on to Softwa re Rest art on a planne d warm resta rt (when the " initiate fai[...]

  • Page 918

    918 OSPF Commands show ip ospf range Use the show ip os pf range command in Privi leged EXE C mode to display information about t he area ranges fo r the specified ar ea-id. Syntax show ip osp f rang e area- id • ar ea-id — Ident ifies the O SPF area whose ranges a re being displayed . (Range: IP address o r decima l from 0–429 496729 5) Defa[...]

  • Page 919

    OSPF Commands 919 Syntax show ip ospf s tatis tics Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example console>show ip ospf statistics Area 0.0.0.0: SPF algorithm executed 0 times Delta T SPF Duration (msec) Reason -------- -----------[...]

  • Page 920

    920 OSPF Commands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following example displays the OSPF stub table. console(config)#show ip ospf stub table AreaId TypeofService Metric Val Import SummaryLSA ------------- -----------[...]

  • Page 921

    OSPF Commands 921 Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The following example displays the OSPF Virtual Interface information for area 10 and its neighbor . console#show ip ospf virtual-link 10 192.168.2.2 Area ID........................................ 10 Neighbor Router ID...............[...]

  • Page 922

    922 OSPF Commands Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following exampl e displays the OSPF V irtual Interface information in the syst em. console#show ipv6 ospf virtual-link brief Hello Dead Retransmit Transit Area ID Neighbor Interval Interval Interval Delay ------- -------- ------[...]

  • Page 923

    OSPF Commands 923 User Guideli nes This command has no user guidelines. Example The following example configur es the SPF delay and hold time. console(config-router)#timers spf 20 30 1583compatibility Use the 1583co mpatibili ty command in Router OSPF Configuration mode to enable OSPF 1583 compatibility . Use the no form of the command to disable i[...]

  • Page 924

    924 OSPF Commands[...]

  • Page 925

    OSPF v3 Co mm ands 925 45 OSPFv3 Commands This chapter exp lains the following commands: • are a default-cos t •a r e a n s s a • are a nssa defaul t-info-o riginat e • are a nssa no-r edistribu te • are a nssa no-summary • a rea ns sa t ran slat or-role • a rea ns sa t rans lato r -s tab -intv •a r e a r a n g e •a r e a s t u b [...]

  • Page 926

    926 OSPFv3 C ommand s • ipv6 ospf h ello-interva l • ipv6 ospf m tu-ignore • ipv6 ospf n etwork • ipv6 ospf p riority • ipv6 ospf retransmit-in terval • ipv6 ospf t ransmit-delay •i p v 6 r o u t e r o s p f • maximum- paths •n s f •n s f h e l p e r • nsf helper strict-lsa-checking • nsf r estart-in terval •p a s s i v e [...]

  • Page 927

    OSPF v3 Co mm ands 927 • sh ow ip v6 ospf virtual-lin k • sh ow ip v6 ospf virtual-lin k brief[...]

  • Page 928

    928 OSPFv3 C ommand s area de fault-cost Use the area default-cost command in Router OSPF v3 Configuration mo de to configure the monetary default cost for the stub area. The operator must specify the area id and an integer va lu e between 1-1677 7215. Use the no form of the com mand to return th e cost to t he default va lue. Syntax area areaid de[...]

  • Page 929

    OSPF v3 Co mm ands 929 Syntax area areaid nssa no are a areai d nssa • ar eaid — V alid O SPFv3 area ident ifier . Default Conf iguration This command has no default configuration. Command Mode Router OSPFv3 Configuration mo de. User Guideli nes This command has no user guidelines. Example The following exampl e configures area 1 to function as[...]

  • Page 930

    930 OSPFv3 C ommand s • compar abl e — Metric T ype (nssa-e xternal 1). • non-comparable — Met ric T ype (ns sa-e xte rnal 2). Default Conf iguration If no metric is define d, 10 is the default configuration. Command Mode Router OSPFv3 Configuration mode . User Guidel ines This command has no user guidelines . Example The following example [...]

  • Page 931

    OSPF v3 Co mm ands 931 Command Mode Router OSPFv3 Configuration mo de. User Guideli nes This command has no user guidelines. Example The following e xample configur es the area 1 NSSA ABR so that le arned external ro utes will not be redistrib uted to the N SSA. console(config)#ipv6 router ospf console(config-rtr)#area 1 nssa no-redistribute area n[...]

  • Page 932

    932 OSPFv3 C ommand s Example The following example configures the area 1 NSSA so that sum mary LSAs are not ad vertised int o the NSSA. console(config)#ipv6 router ospf console(config-rtr)#area 1 nssa no-summary area nssa translator -role Use the area nssa translat or -r ole command in Router OSPFv3 Configuration mode to conf igure the translat or[...]

  • Page 933

    OSPF v3 Co mm ands 933 console(config-rtr)#area 1 nssa translator-role always area nssa translator -sta b-intv Use the area nssa tra nslat or -s tab-i ntv command in Router OSPFv3 Configuration mode to configure the translator s tability interval of the NSSA. The stabil ity interval is the period of time that an elected tr anslator continues to per[...]

  • Page 934

    934 OSPFv3 C ommand s area r ange Use the area rang e command in Route r OSPF Configuration mode to configure a summary prefix for routes learned in a given area. There ar e two types of area range s. An area ra ng e can be configured to summar ize intra-ar ea routes. An ABR advertises the ra nge rather than the specific intra-area route as a type [...]

  • Page 935

    OSPF v3 Co mm ands 935 Example The following example creates an area r a nge for the area 1 NSSA. console(config)#ipv6 router ospf console(config-rtr)#area 1 range 2020:1::1/64 summarylink area stub Use the area stub command in Rout er OSPFv3 Configuration mo de to create a stub ar ea for the specified ar ea ID. A stub a rea is charact e rized by t[...]

  • Page 936

    936 OSPFv3 C ommand s area stub no-summary Use the area stu b no-sum mary command in Router OSPF v3 Configuration mode to disable the i mport of Summary LSA s for the stub area identified by ar eaid. Syntax area areaid stub no-summary no area area id stub no-summary • ar eaid — V alid OSPF v3 area identifier . Default Conf iguration This comman[...]

  • Page 937

    OSPF v3 Co mm ands 937 no are a areai d vir tua l-li nk neighbor -id • ar eaid — V alid O SPFv3 area identifier (or d ecimal value in the ra nge of 0- 4294 96729 5). • neighbor -id — Ident ifies the R outer ID or IP address of the n eighbor . Default Conf iguration This command has no default configuration. Command Mode Router OSPFv3 Config[...]

  • Page 938

    938 OSPFv3 C ommand s Default Conf iguration 40 is the default value for seconds . Command Mode Router OSPFv3 Configuration mode . User Guidel ines This command has no user guidelines . Example The following example configures a 20-second dead interval for t he OSPF virtual interface on t he virtual interfac e identified by area 1 and its neig hbor[...]

  • Page 939

    OSPF v3 Co mm ands 939 User Guideli nes This command has no user guidelines. Example The following example configur es a hello interval of 20 seconds for the OSPF virtual inte rface on the virtu al interface identifi ed by area 1 and its neighbor . console(config)#ipv6 router ospf console(config-rtr)#area 1 virtual-link 2 hello- interval 20 area vi[...]

  • Page 940

    940 OSPFv3 C ommand s Example The following example configur es the re transmit interva l of 20 seconds for the OSPF v irtual interface on t he virtual i nterface identifi ed by area 1 and its neighbor . (config)#ipv6 router ospf (config-rtr)#area 1 virtual-link 2 retransmit- interval 20 area virtual-link transmit-delay Use the area virtua l-link t[...]

  • Page 941

    OSPF v3 Co mm ands 941 console(config-rtr)#area 1 virtual-link 2 transmit- delay 20 default-information origi nate Use the defau lt-inf orma tion ori ginat e command in Router OSPFv3 Configuration mode to control the adve rtisement of default routes . Use the no form of the comm and to return the defa ult route a dvertis ement s etting s to the def[...]

  • Page 942

    942 OSPFv3 C ommand s console(config-rtr)#default-information originate metric 100 metric-type 2 default-metric Use the defaul t-metric command in Rout er OSPFv3 Configuration mode to set a defaul t for the metr ic of distribut ed routes. Syntax default-me tric metric no defau lt-metri c • metric — Met ric valu e used for d istribut ion (Ran ge[...]

  • Page 943

    OSPF v3 Co mm ands 943 Syntax distance ospf { external | inte r - are a | intra-ar ea } distance no distance ospf { extern al | inter -area | intr a-area } distance • distan ce — Used to select the best path when there ar e two or more routes to the sa me de stination from two d ifferent routing protocols (Ra nge: 1–25 5). Default Conf igurat[...]

  • Page 944

    944 OSPFv3 C ommand s Command Mode Router OSPFv3 Configuration mode . User Guidel ines This command has no user guidelines . Example The followi ng e xampl e enabl es ad minist rativ e mode o f OSPF in the router (active). console(config)#ipv6 router ospf console(config-rtr)#enable exit-over flow-interval Use the exit -over flow-in ter val com mand[...]

  • Page 945

    OSPF v3 Co mm ands 945 Example The following example configur es the exit overflow interval for OSPF at 100 seconds. console(config)#ipv6 router ospf console(config-rtr)#exit-overflow-interval 100 extern al-lsdb-limit Use the exter nal-lsdb- lim it command in Router OSPFv3 Configuration mode to configure the external LSDB limit for OSPF . If the va[...]

  • Page 946

    946 OSPFv3 C ommand s Example The fo llowing exampl e sets the exte rnal LSDB limit at 100 for OS PF . console(config)#ipv6 router ospf console(config-rtr)#external-lsdb-limit 100 ipv6 ospf Use the ipv6 ospf command in Interface Configuration mode to enable OSPF on a router interface or loopback inte rface. Syntax ipv6 ospf no ipv6 ospf Default Con[...]

  • Page 947

    OSPF v3 Co mm ands 947 Syntax ipv6 ospf ar eaid areaid no ipv6 osp f areai d areai d • ar eaid — Is a 32 -bit int eger , for matted as a 4- digit dot ted-decimal number or a decim al valu e. It un iquely id en tifies the area to w hich th e interface connects. A ssigning a n area id w hich d oes not e xist on an interface causes the area to be [...]

  • Page 948

    948 OSPFv3 C ommand s Command Mode Interface Configuration (VLAN, T unnel, L oopback) mod e. User Guidel ines This command has no user guidelines . Example The following example configures a cost of 100. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 ospf cost 100 ipv6 ospf de ad-i nterval Use the ipv6 ospf dead-inter val command [...]

  • Page 949

    OSPF v3 Co mm ands 949 Example The followi ng e xample sets the O SPF dead interval at 100 seconds. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 ospf dead-interval 100 ipv6 ospf hello- interval Use the ipv6 ospf hello-in terval command in Interface Configuration mode to se t the OSPF hello int erval f or the sp ecified i nter fa[...]

  • Page 950

    950 OSPFv3 C ommand s ipv6 ospf mtu -ignore Use the ipv6 o spf mtu -ignore comm and in Interface Configuration mode to disable OSPF maximum transmi ssion unit (MTU) mismatch detection. OSPF Dat abase Desc ription packe ts specify th e size of the largest IP packet that can be sent without fragment ation on the interface. When a router receiv es a D[...]

  • Page 951

    OSPF v3 Co mm ands 951 default to point-to-point. When an E thernet port is used as a single large bandwidth IP network between two router s , the network type ca n be point-t o- point since there are only two routers. Using poin t-to-point as the network type eliminates the ov erhead of the OSPF designa ted router election. It is normally not usef[...]

  • Page 952

    952 OSPFv3 C ommand s Syntax ipv6 ospf priority prior ity no ipv6 ospf priority • priority — O SPF priority for specified interface. (Range : 0-255. A v alue of 0 indicates that th e router is not eligible t o become th e designated router on th is n etwo rk) Default Conf iguration 1, the highest rout er priority , i s the default value. Comman[...]

  • Page 953

    OSPF v3 Co mm ands 953 Default Conf iguration 5 seconds is the default value. Command Mode Interface Configuration (VLAN, T unnel, Loop back) mode. User Guideli nes This command has no user guidelines. Example The fo llowing e xampl e sets the OSPF re transmit i nterval at 100 secon ds. console(config)#interface vlan 15 console(config-if-vlan15)#ip[...]

  • Page 954

    954 OSPFv3 C ommand s User Guidel ines This command has no user guidelines . Example The followi ng e xample sets the O SPF T ransmit Delay at 100 seconds for VLAN 15. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 ospf transmit-delay 100 ipv6 router osp f Use the ipv6 router ospf co mmand in Global Configuration m ode to enter Ro[...]

  • Page 955

    OSPF v3 Co mm ands 955 Syntax maxi mum-pat hs maxpaths no ma ximum-p aths • maxpath s — Nu mber of path s that can be reported. (Range: 1-2) Default Conf iguration 2 is the default value for maxpaths . Command Mode Router OSPFv3 Configuration mo de. User Guideli nes This command has no user guidelines. Example The following example sets the num[...]

  • Page 956

    956 OSPFv3 C ommand s Default Conf iguration Graceful re start is disabled by default Command Mode Router OSPFv3 Configuration mode User Guidel ines Graceful restart works in conce rt with nonstop forwarding to enable the hardwar e to continue forwarding IPv6 packets usi ng OSPFv 3 routes while a backup unit takes over management unit r esponsibili[...]

  • Page 957

    OSPF v3 Co mm ands 957 Default Conf iguration OSPF may act as a helpful neighbor for bo th planned and unplanned restarts Command Mode Router OSPFv3 Configuration mode User Guideli nes The grace LS A announcing the graceful re start includes a r estart reas on. Reasons 1 (software r estart) and 2 (softwar e reload/upg rade) are consi dered planned [...]

  • Page 958

    958 OSPFv3 C ommand s Command Mode Router OSPFv3 Configuration mode User Guidel ines The restarting r outer i s unabl e to react to topology chan ges. In pa rticula r , the restar t ing router will not immediate ly upda te its fo rwarding table; therefore, a topology chang e may introduce forwar ding loops or b lack holes that pers ist until the gr[...]

  • Page 959

    OSPF v3 Co mm ands 959 Command Mode Router OSPFv3 Configuration mode User Guideli nes The grace period must be set long enough to allow the restarting router to reest ablish all of its adjacencie s and complete a full dat abase ex change with each of those neighbors. Example – passive-interface Use the passive-interface command to set the interfa[...]

  • Page 960

    960 OSPFv3 C ommand s Example console(config-router)#passive-interface vlan 1 passive-inte rface default The passive-interface default command enables the global pass ive mode b y default for all interfaces. It overrides any int erface level passive mode. Use the “no” form of this command to disa ble the global passive mode by default for all i[...]

  • Page 961

    OSPF v3 Co mm ands 961 Syntax redistribute {static | connected} [metric met ric ] [metric- type {1 | 2}] [ ta g tag ] no re distri bute { static | connected} [ metric ] [metric-type] [ tag ] • metric — Met ric valu e used for defau lt rout es. (Ran ge: 0-167772 14) • tag — T ag. (Ran ge: 0-429 49672 95) Default Conf iguration 2 is the defau[...]

  • Page 962

    962 OSPFv3 C ommand s Command Mode Router OSPFv3 Configuration mode . User Guidel ines This command has no user guidelines . Example The followi ng e xample sets a 4 -digit dotted- decima l numbe r ident ifying the Router OS PF ID as 2.3.4 .5. console(config)#ipv6 router ospf console(config-rtr)#router-id 2.3.4.5 show ipv6 ospf Use the show ipv6 os[...]

  • Page 963

    OSPF v3 Co mm ands 963 External LSDB Limit Shows th e maximu m number of no n-def ault externa l LSAs entr ies that can be stored in t he link-s tate da tabase. Exit Overflow Interval Shows the number of s econds that, after en tering OverflowState, as defined by RFC 1765, a router will attempt to leave OverflowSt at e. Au toCost Ref B W The co nfi[...]

  • Page 964

    964 OSPFv3 C ommand s Stub Rout er OSPF enters stub rou ter mod e, as desc ribed in RFC 3 137, when it enco unter s a resource limi tati on that preven ts it from compu ting a co mplete ro uting tab le. In th is state, O SPF sets the link met rics of non-st ub link s in its own rout er LSAs to t he largest possible value, discouragi ng other router[...]

  • Page 965

    OSPF v3 Co mm ands 965 Example The followi ng e xample enables OSP F traps. console#show ipv6 ospf Router ID...................................... 0.0.0.2 OSPF Admin Mode................................ Enable ASBR Mode...................................... Disable ABR Status..................................... Disable Exit Overflow Interval......[...]

  • Page 966

    966 OSPFv3 C ommand s New LSAs Originated............................ 0 LSAs Received.................................. 0 External LSDB Limit............................ No Limit Default Metric................................. Not Configured Maximum Paths.................................. 2 Default Route Advertise........................ Disabled A[...]

  • Page 967

    OSPF v3 Co mm ands 967 Example console#show ipv6 ospf abr Type Router Id Cost Area ID Next Hop Next Hop Intf ---- -------- ---- -------- ----------------------- ----- INTRA 3.3.3.3 10 0.0.0.1 FE80::211:88FF:FE2A:3CB3 vlan11 INTRA 4.4.4.4 10 0.0.0.1 FE80::210:18FF:FE82:8E1 vlan12 show ipv6 osp f area Use the show ipv6 osp f area command in P rivileg[...]

  • Page 968

    968 OSPFv3 C ommand s Area LSA Count................................. 0 Area LSA Checksum.............................. 0 Stub Mode...................................... Disable Import Summary LSAs............................ Enable show ipv6 ospf asbr The show ipv6 osp f asbr comm and displa ys the inte rnal O SPFv3 routes to reach A utono mous Sy[...]

  • Page 969

    OSPF v3 Co mm ands 969 show ipv6 osp f databa se Use the show ipv6 osp f database command in P rivileged EXEC mo de to display informati on about the link st ate database wh en OSPFv3 is enabled. If no parameters ar e entered, the command displays the LSA headers. Optional parameters specify the type of link state adve rtisements to dis play . The [...]

  • Page 970

    970 OSPFv3 C ommand s User Guidel ines This command has no user guidelines . Example The followi ng ex ample displays informatio n about the link st ate database when OSPF v3 is enabled. console#show ipv6 ospf database Router Link States (Area 0.0.0.0) Adv Router Link Id Age Sequence Csum Options Rtr Opt -------------- --------------- ----- -------[...]

  • Page 971

    OSPF v3 Co mm ands 971 Intra Prefix States (Area 0.0.0.0) Adv Router Link Id Age Sequence Csum Options Rtr Opt -------------- --------------- ----- -------- ---- ------- ------- 1.1.1.1 0 1 8000003C 9F31 2.2.2.2 0 2 8000004D 9126 Router Link States (Area 0.0.0.1) Adv Router Link Id Age Sequence Csum Options Rtr Opt -------------- --------------- --[...]

  • Page 972

    972 OSPFv3 C ommand s -------------- --------------- ----- -------- ---- ------- ------- 1.1.1.1 0 6 8000003A 37C4 2.2.2.2 0 1 8000004F 439A 1.1.1.1 10634 434 80000002 440A show ipv6 ospf data base database-sum mary Use the show ipv6 osp f database database -summ ary command in Priv ileged EXEC mode to display the number of each type of LSA in t he[...]

  • Page 973

    OSPF v3 Co mm ands 973 Type-7 Ext..................................... 0 Link........................................... 0 Intra-area Prefix.............................. 0 Link Unknown................................... 0 Area Unknown................................... 0 AS Unknown..................................... 0 Type-5 Ext.................[...]

  • Page 974

    974 OSPFv3 C ommand s Example The following example displays the information in VLAN 1 1’s virtual interface t ables. console#show ipv6 ospf interface vlan 11 IP Address..................................... Err ifIndex........................................ 1 OSPF Admin Mode................................ Enable OSPF Area ID....................[...]

  • Page 975

    OSPF v3 Co mm ands 975 User Guideli nes This command has no user guidelines. Example The followi ng exampl e displays brief ospf inte rface informat ion. console#show ipv6 ospf interface brief Hello Dead Retrax LSA Admin Router Int. Int. Int. Retrax Ack Interface Mode Area ID Prior. Cost Val. Val. Val. Delay Intval --------- -------- -------- -----[...]

  • Page 976

    976 OSPFv3 C ommand s Example The fo llowin g exampl e displ ays the inte rface st atist ics for VLA N 5. console>show ipv6 ospf interface stats v lan 5 OSPFv3 Area ID............................. .... 0.0.0.1 Spf Runs................................... .... 265 Area Border Router Count................... .... 1 AS Border Router Count...........[...]

  • Page 977

    OSPF v3 Co mm ands 977 LS Request 4 4 LS Update 521 398 LS Acknowledgement 209 282 show ipv6 ospf in terface vlan Use the show ip v6 osp f inter face vlan c o m ma n d i n Pr i v i l eg e d E X E C m od e t o display OSPFv3 configurat ion and status information for a specifi c vlan. Syntax show ipv6 ospf interface vlan { vlan-id | brief } • vla n[...]

  • Page 978

    978 OSPFv3 C ommand s Hello Interval........................... 1 0 Dead Interval............................ 4 0 LSA Ack Interval......................... 1 Iftransit Delay Interval................. 1 Authentication Type...................... N one Metric Cost.............................. 1 0 (computed) OSPF Mtu-ignore.......................... D[...]

  • Page 979

    OSPF v3 Co mm ands 979 Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Examples The followi ng ex amples display informatio n about OSPF neighbors, i n the first case in a summary tab le, and in the second in a table specific to tunne l 1. console#show ipv6 ospf neighbor Router ID Priority Intf Interface St[...]

  • Page 980

    980 OSPFv3 C ommand s show ipv6 ospf range Use the show ipv6 osp f range command in Pri vileged EX EC mode to display information about the area range s for the specified ar ea identifier . Syntax show ipv6 o spf ran ge ar eaid • ar eaid — Ident ifies the O SPF area whose ranges a re being displayed . Default Conf iguration This command has no [...]

  • Page 981

    OSPF v3 Co mm ands 981 Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The following example displays the OSPF stub table. console#show ipv6 ospf stub table AreaId TypeofService Metric Val Import SummaryLSA ------------ ------------- ---------- ----------------- 0.0.0.10 Normal 1 Enable show ipv6 os[...]

  • Page 982

    982 OSPFv3 C ommand s Example The following exampl e displays the OSPF V irtual Interface information for ar ea 1 and its neighbor . console#show ipv6 ospf virtual-link 1 1.1.1 .1 Area ID.................................... .... 1 Neighbor Router ID......................... .... 1.1.1.1 Hello Interval............................. .... 10 Dead Inter[...]

  • Page 983

    OSPF v3 Co mm ands 983 Example The following example displays the OSPF stub table. console(config)#show ipv6 ospf virtual-link brief Hello Dead Retransmit Transit Area ID Neighbor Interval Interval Interval Delay ----------- ----------- ---------- ---------- ---------- --------[...]

  • Page 984

    984 OSPFv3 C ommand s[...]

  • Page 985

    PIM-DM Commands 985 46 PIM-DM Commands This chapter exp lains the following commands: • ip pimd m •s h o w i p p i m d m • show ip pimdm i nterface • show ip pimdm nei ghbor[...]

  • Page 986

    986 PIM- DM C om mands ip pimdm Use the ip pimdm command in Global Configuration mode to enable the administrative mode of P IM-DM in t he router . Syntax ip pimdm no ip pi mdm Default Conf iguration Disabled is the defa ult state. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The followi [...]

  • Page 987

    PIM-DM Commands 987 User Guideli nes This command has no user guidelines. Example The followi ng ex ample displays sy stem-wide information for PIM-DM. console(config)#show ip pimdm Admin Mode.................................. Disable PIM-DM INTERFACE STATUS Interface Interface Mode Protocol State --------- --------------- --------------- show ip p[...]

  • Page 988

    988 PIM- DM C om mands Interface Mode................................. Disable Hello Interval (secs).......................... 30 show ip pimdm neighbor Use the show ip pimdm neigh bor com mand in P rivileged EXEC mode to display the n eighbor information for PIM-DM on the specified interface. Syntax show ip p imdm neigh bor [ interface vla n vlan-[...]

  • Page 989

    PIM-SM C ommands 989 47 PIM-SM Commands This chapter exp lains the following commands: • ip pims m • ip pimsm spt-thr eshold • ip pim-tra pflags •s h o w i p p i m s m • show ip pimsm int erface • show ip pimsm nei ghbor • show ip pimsm rp hash[...]

  • Page 990

    990 PIM- SM C omm ands ip pimsm Use the ip pimsm command in Global Configuration mode to set administrative mode of PIM-SM mult icast routing across the router to enabled. IGMP must be enabled before PIM-SM can be en abled. Syntax ip pimsm no ip pimsm Default Conf iguration PIM-SM is di sabled by default. Command Mode Glo bal C onfi gura tion mode [...]

  • Page 991

    PIM-SM C ommands 991 Default Conf iguration 50 kilobits/s ec is the default rate. Command Mode Global Configuration mode. User Guideli nes This command has no user guidelines. Example The following exampl e configures a t hreshold rate of 10 0 kilobits/sec. console(config)#ip pimsm spt-threshold 100 ip pim-trapflags Use the ip pim-trapflags c omman[...]

  • Page 992

    992 PIM- SM C omm ands show ip pimsm Use the show ip pimsm command in P rivileged EXEC mo de to display the system-wide i nformation for PIM-SM. Syntax show ip p imsm Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following exam[...]

  • Page 993

    PIM-SM C ommands 993 Syntax show ip pimsm interfac e [ vlan vlan -id ] • vla n-id — V alid VLAN I D Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The followi ng ex ample displays int erface information for VLAN 11 PIM-SM. consol[...]

  • Page 994

    994 PIM- SM C omm ands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following example displays neighb or information for PIM-SM on all interfaces. console#show ip pimsm neighbor all NEIGHBOR TABLE Interface IP Address Up Time [...]

  • Page 995

    PIM-SM C ommands 995 User Guideli nes This command has no user guidelines. Example The following example displays the RP router be ing selected from the set of active RP routers. console#show ip pimsm rphash 224.5.5.5 There are no static RPs for that group on the router.[...]

  • Page 996

    996 PIM- SM C omm ands[...]

  • Page 997

    Rout er Discover y Protocol Comma nds 997 48 Router Disc overy Protocol Commands Routers can be configured to periodica lly send router discovery messages to announce their presence to locally a ttached hosts. The router discovery message adverti ses one or more IP addr e sses on the router that hosts can use as their defa ult gateway . Hosts can s[...]

  • Page 998

    998 Route r Di scover y P roto col Co mmands ip irdp Use the ip irdp command in Interface Configuration mode to enable Router Discovery on an interfa ce. Use the no form of the co mmand to disable R outer Disco very . Syntax ip irdp no ip ird p Default Conf iguration Disabled is the default configuration. Command Mode Interface Configurati on (VLAN[...]

  • Page 999

    Rout er Discover y Protocol Comma nds 999 • ip-add ress — IP addre ss for router discovery advertis ements. (Range: 224.0.0. 1 [all-h osts IP multica st address] or 255.255 .255.25 5 [limit ed broa dc ast ad dress]) Default Conf iguration IP addr ess 224.0.0.1 is the default configuration. Command Mode Interface Configuration (VLAN) mode. User [...]

  • Page 1000

    1000 Route r Di scover y P roto col Co mmands • integer — Integer value in seconds of the the hold time field of the router advertisem ent se nt from this interfa ce. The holdti me must be no less than the maximu m advertisem ent interval and cann ot be greater than 9000 seconds. Default Conf iguration The h oldtime de faults to 3 times the max[...]

  • Page 1001

    Rout er Discover y Protocol Comma nds 1001 Default Conf iguration 600 seconds i s the default value. Command Mode Interface Configuration (VLAN) mode. User Guideli nes The default values of the minimum advertisement interval and the holdtime depend on the va lue of the maximum adv ertisement interva l. Setting the maximum advertisement interval cha[...]

  • Page 1002

    1002 Route r Di scover y P roto col Co mmands • integer — Minimum ti me in seconds allo wed between sen ding router advertisements from the in terface. (Range: 3 to va lue of ma ximum advertisem ent interva l in second s) Default Conf iguration The de fault val ue is 0.75 times the m aximum ad vertisemen t interva l. Command Mode Interface Conf[...]

  • Page 1003

    Rout er Discover y Protocol Comma nds 1003 Command Mode Interface Configuration (VLAN) mode User Guideli nes If a subnet includes any hosts that do not accept IP multi cast packets, send router ad vert iseme nts to the limited br oadcast addres s. Example The following example configur es route r discovery to send to the limited broadcast address: [...]

  • Page 1004

    1004 Route r Di scover y P roto col Co mmands User Guidel ines This command has no user guidelines . Example The following example sets the ip irdp p refer ence to 1000 for VLAN 15. console(config)#interface vlan 15 console(config-if-vlan15)#ip irdp preference 1000 show ip ir dp Use the show ip irdp command in Privi leg ed EXEC mode to display the [...]

  • Page 1005

    Rout er Discover y Protocol Comma nds 1005 Example The following example shows router discovery information for VLAN 15. console#show ip irdp vlan 15 Interface Ad Mode Advertise Address Max Int Min Int Hold Time Preference --------- ------- --------- -------- ------- ------- ----- --- ---------- vlan15 Enable 224.0.0.1 600 450 1800 0[...]

  • Page 1006

    1006 Route r Di scover y P roto col Co mmands[...]

  • Page 1007

    Rout ing Informa tion Protocol Commands 1007 49 Routing Information Protocol Commands This chapter exp lains the following commands: • auto-summar y •d e f a u l t - i n f o r m a tion originat e • default-m etric •d i s t a n c e r i p • dis tribute-list ou t •e n a b l e • hostroutesac cept •i p r i p • ip rip authentica tion ?[...]

  • Page 1008

    1008 Rout ing Informa tion Protocol Commands auto-su mmary Use the auto-s ummary command in Router RIP Configuration mode to enabl e the RIP auto-summ arization mode. Us e the no form of the comm and to disa ble auto -summa riza tion mode . Syntax auto-s ummary no auto-s umma ry Default Conf iguration Disabled is the default configuration. Command [...]

  • Page 1009

    Rout ing Informa tion Protocol Commands 1009 Command Mode Router RIP Configuration mode. User Guideli nes This command has no user guidelines. Example console(config-router)#default-information originate default-metric Use the def ault-metri c command in Router RIP Configuration mode to set a default for the me tric of distribut ed routes. Use t he[...]

  • Page 1010

    1010 Rout ing Informa tion Protocol Commands distance rip Use the distance rip com mand in Router RIP Configuration mode t o set the route preference value of RIP in t he router . L ower route p refer ence values are preferre d when dete rmining th e best route. Use the no form of t he command to return the prefer ence to the default value. Syntax [...]

  • Page 1011

    Rout ing Informa tion Protocol Commands 1011 no distribu te-list accesslistname ou t { ospf | static | connecte d } • access listname — The nam e used to identify the existing ACL. The range is 1-31 c harac ters. • ospf — Apply t he specific access list w hen OSPF is the so urce protocol. • static — App ly the specified access list wh e[...]

  • Page 1012

    1012 Rout ing Informa tion Protocol Commands Default Conf iguration Enabled is the default configuration. Command Mode Router RIP Configuration mode . User Guidel ines This command has no user guidelines . Example console(config-router)#enable hostrou tesaccept Use the hostroutesaccept command in Router RIP Configuration mode to enable the RIP host[...]

  • Page 1013

    Rout ing Informa tion Protocol Commands 1013 ip rip Use the ip rip command in Interface Configuration mode to enable RIP on a router interface. Use the no form of the command to disable RIP on th e interface. Syntax ip rip no ip r ip Default Conf iguration Disabled is the default configuration. Command Mode Interface Configuration (VLAN) mode. User[...]

  • Page 1014

    1014 Rout ing Informa tion Protocol Commands • enc rypt — Sp ecifies the E thernet un it/port of the inte rface to view information . • key -i d — Authent ication key ident ifier for au thentica tion type e ncrypt. (Ran ge: 0-255 ) Default Conf iguration This command has no default configuration. Command Mode Interface Configurati on (VLAN)[...]

  • Page 1015

    Rout ing Informa tion Protocol Commands 1015 Default Conf iguration Both is the default configuration. Command Mode Interface Configuration (VLAN) mode. User Guideli nes This command has no user guidelines. Example The following example allows no RIP cont rol packets to be received by VLAN 11. console(config-if-vlan11)#ip rip receive version none i[...]

  • Page 1016

    1016 Rout ing Informa tion Protocol Commands Command Mode Interface Configurati on (VLAN) mode. User Guidel ines This command has no user guidelines . Example The following exampl e allows no RIP cont rol packets t o be se nt by V LAN 1 1. console(config-if-vlan11)#ip rip send version none redistribute The redistrib ute command configures RIP proto[...]

  • Page 1017

    Rout ing Informa tion Protocol Commands 1017 • connected — Redist rib utes di rectly-connected routes. Default Conf iguration metr ic integer — not configured match — internal Command Mode Router RIP Configuration mode. User Guideli nes This command has no user guidelines. Example console(config-router)#redistribute ospf metric 10 match nss[...]

  • Page 1018

    1018 Rout ing Informa tion Protocol Commands Example The followi ng e xample enter s Router RIP mod e. console(config)#router rip console(config-router)# show ip r ip Use the show ip rip command in P rivileged EXEC mode to display information relevant to the RIP router . Syntax show ip ri p Default Conf iguration The command has no default configur[...]

  • Page 1019

    Rout ing Informa tion Protocol Commands 1019 Default Route Advertise................... 0 Redistributing............................. Source.................................... Co nnected Metric.................................... 2 Distribute List........................... No t configured Redistributing............................ Source.........[...]

  • Page 1020

    1020 Rout ing Informa tion Protocol Commands Example The follow ing example dis plays in formati on related to the VL AN 15 R IP interface. console#show ip rip interface vlan 15 Interface.................................. .... 15 IP Address................................. .... ----- Send version............................... .... RIP-2 Receive ve[...]

  • Page 1021

    Rout ing Informa tion Protocol Commands 1021 User Guideli nes This command has no user guidelines. Example The following example displ a ys general information for each RIP interface. console#show ip rip interface brief Send Receive RIP Link Interface IP Address Version Version Mode State ---------- ---------- -------- - ---------- --------- ------[...]

  • Page 1022

    1022 Rout ing Informa tion Protocol Commands Example The following example does not use split horizon. console(config-router)#split-horizon none[...]

  • Page 1023

    T u nnel Inter face Co mmands 1023 50 T unnel Inte rface Commands This chapter exp lains the following commands: • interfa ce tunnel • show interf aces tunnel • t unne l destin ation • t unnel m ode ipv6ip • tunnel sour ce[...]

  • Page 1024

    1024 T unnel Inte rface Com mands interface tunn el Use the interfa ce tunnel command in Globa l Configuration mo de to enter the interface configuration mode for a tunnel. Syntax interface tu nnel tunnel-id no inter face tunnel tunnel-id • tunnel -id — T unne l identifier . (Range: 0–7) Default Conf iguration This command has no default conf[...]

  • Page 1025

    T u nnel Inter face Co mmands 1025 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Examples The following examples show t he parameters rela t ed to an individual tunnel and to all tunnel interfaces. console#show interfaces tunnel 1 Interface[...]

  • Page 1026

    1026 T unnel Inte rface Com mands Command Mode Interface Configuration (T u nnel) mode. User Guidel ines This command has no user guidelines . Example The following example sp e cifies the destination transp ort address of tunnel 1. console(config)#interface tunnel 1 console(config-if-tunnel1)#tunnel destination 10.1.1.1 tunnel mode ipv6ip Use the [...]

  • Page 1027

    T u nnel Inter face Co mmands 1027 Example The following example specifies ipv6ip mode for tunnel 1. console(config)#interface tunnel 1 console(config-if-tunnel1)#tunnel mode ipv6ip console(config-if-tunnel1)#tunnel mode ipv6ip 6to4 tunnel sour ce Use the tunnel so urce command in Interfa ce Configuration mode to specify the source transport addres[...]

  • Page 1028

    1028 T unnel Inte rface Com mands[...]

  • Page 1029

    Virtual LA N Routin g Comman ds 1029 51 V irtual LAN Routing Comma nds This chapter exp lains the following command: •s h o w i p v l a n[...]

  • Page 1030

    1030 Virtual LA N Routin g Comman ds show ip vlan Use the show ip vlan command in Priv ileged EXEC mode to display the VLAN routing information for al l VLANs wi th r outi ng en abl ed. Syntax show ip vl an Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user[...]

  • Page 1031

    Virtua l Route r Redun danc y Proto col Comma nds 1031 52 V irtual Router Redund ancy Protocol Commands This chapter e xplains the follow i ng Virtual LAN routing commands: • ip vrrp • ip vrrp au then tica tion • ip vrrp ip • ip vrrp mode • ip vrrp preempt • ip vrrp priority • ip vrrp timers advertise • ip vrrp track interfac e • [...]

  • Page 1032

    1032 Virtual Ro uter R edund ancy Protoc ol Co mmands ip vrrp Use the ip vrrp command in Global Configur ation mode to enab le the administrative mode of VRRP for the ro uter . In Interface Config mode, this command enables t he VRRP protocol o n an interface. Us e the no fo r m of t he command to disable the administrative mode of VRRP for the rou[...]

  • Page 1033

    V irtual Rout er Redundan cy Protocol Comm ands 1033 ip vrrp au thentication Use the ip vrrp a uthen ticatio n command in Interface C onfiguration mode to set the authorization details value for the virtual router configured on a specified interface. Use the no form of t he command to return the authenti cation ty pe to the de fault valu e. Syntax [...]

  • Page 1034

    1034 Virtual Ro uter R edund ancy Protoc ol Co mmands ip vrrp ip Use the ip vrrp ip command in Interface Configuration mode to set the virtual router IP address value for an interface. Use the no fo rm o f th e command to remove the secondary IP addr ess. NOTE: In order to be conf igure d on a ro uting i nterf ace, t he VRRP IP add ress must belong[...]

  • Page 1035

    V irtual Rout er Redundan cy Protocol Comm ands 1035 ip vrrp mod e Use the ip vrrp mode command in Interface Configuration mode to enable the virtual router configured on an interf ace. Enabling t he status field starts a virtual router . Use the no form of the command to disable the virtual router . Syntax ip vrrp vr - id mode no ip vrrp vr - id m[...]

  • Page 1036

    1036 Virtual Ro uter R edund ancy Protoc ol Co mmands • vr -id — The virtual router ident ifier . (Range: 1-255) Default Conf iguration Enabled is the default configuration. Command Mode Interface Configurati on (VLAN) mode. User Guidel ines This command has no user guidelines . Example The following example sets the preemption mode value for t[...]

  • Page 1037

    V irtual Rout er Redundan cy Protocol Comm ands 1037 User Guideli nes This command has no user guidelines. Example The following example sets the priority value for the v irtual router for VLAN 15. console(config-if-vlan15)#ip vrrp 5 priority 20 ip vrrp timers advertise Use the ip vrrp t imers advertise co mmand in Interface Co nfiguration mode to [...]

  • Page 1038

    1038 Virtual Ro uter R edund ancy Protoc ol Co mmands console(config-if-vlan15)#ip vrrp 5 timers advertise 10 ip vrrp track interface Use the ip vrrp track i nterface command to alter t he priori ty of the V RRP router based on the availability of its inte rfaces. It is useful for track ing interfa ces that are not conf igured for VRRP . Only IP in[...]

  • Page 1039

    V irtual Rout er Redundan cy Protocol Comm ands 1039 The default decrement priority is 10. Command Mode Interface Configuration (VLAN) mode. User Guideli nes There ar e no user gui delines for this command. Example The following ex ample adds VLAN 2 to th e virtual router track ed list (with a priority decrement value of 20). (config-if-vlan10)#ip [...]

  • Page 1040

    1040 Virtual Ro uter R edund ancy Protoc ol Co mmands Default Conf iguration There ar e no rout es tracked by default. The default decrement priority is 10. Command Mode Interface Configurati on (VLAN) mode. User Guidel ines There ar e no user gui delines for this command. Example The followi ng exampl e adds the route 2. 2.2.0/24 to t he virtual r[...]

  • Page 1041

    V irtual Rout er Redundan cy Protocol Comm ands 1041 Example The following example displays VRRP’s enabled sta tus. console#show ip vrrp Admin Mode..................................... Enable Router Checksum Errors......................... 0 Router Version Errors.......................... 0 Router VRID Errors............................. 0 show i[...]

  • Page 1042

    1042 Virtual Ro uter R edund ancy Protoc ol Co mmands Primary IP Address......................... 192.168.5.55 VMAC Address............................... 0000.5E00.0101 Authentication Type........................ None Priority................................... 60 Advertisement Interval (secs).............. 10 Pre-empt Mode........................[...]

  • Page 1043

    V irtual Rout er Redundan cy Protocol Comm ands 1043 User Guideli nes This command has no user guidelines. Example The followi ng ex ample displays all configuration informatio n about the virtual router on the selected interfa ce. console#show ip vrrp interface brief Interface VRID IP Address Mode State --------- ---- -------------- ------ -------[...]

  • Page 1044

    1044 Virtual Ro uter R edund ancy Protoc ol Co mmands Example The following example displays all s t at istical information about the VLAN 15 virtual router . console#show ip vrrp interface stats vlan 15 5 UpTime..................... 0 days 0 hrs 0 mins 0 secs Protocol....................................... IP State Transitioned to Master..........[...]

  • Page 1045

    Auto conf ig Co mmands 1045 53 Autoconfig Command s This chapter exp lains the following commands: • boot host auto- save • boot host dhcp • boot host r etry-c ount •s h o w b o o t[...]

  • Page 1046

    1046 Autoco nfig Comman ds boot host a uto-save The boot h ost auto -save comma nd en abl es/d isa ble s the opti on to automatically save configuration files do wnloaded to the switch by Auto Config. Syntax boot host aut o-save no boot h ost aut o-save Default Conf iguration The downloaded configuration is no t au tomatical ly saved by defaul t. C[...]

  • Page 1047

    Auto conf ig Co mmands 1047 Command Mode Global Configuration. User Guideli nes This command has no user guidelines Example console#no boot host dhcp boot host retr y-count The boot host retry-count comma nd sets the numb er of atte mpts to download a configuration. Use the "no" form of this command to reset the number to the default. Syn[...]

  • Page 1048

    1048 Autoco nfig Comman ds show boot The show autoconfig comma nd displa ys the current sta tus of the Auto Config proce ss. Syntax show boot Default Conf iguration Not applicab le Command Mode P rivileged EXEC. User Guidel ines This command has no user guidelines . Example console#show boot Config Download via DHCP: enabled Auto Config State : Wai[...]

  • Page 1049

    Capt ive Portal Comm ands 1049 54 Captive Po rtal Commands This chapter exp lains the following commands: Captive P ortal Global Commands • a uth enticat ion tim eou t •c a p t i v e - p o r t a l •e n a b l e • http port • https port • sh ow captive-portal • sh ow captive-portal status Captive P ortal Configuration Comma n ds •b l [...]

  • Page 1050

    1050 Capti ve P ortal Co mmands • show captive-portal int erface client status • show captive-portal interfa ce configuration status Captive P ortal I nterface Commands • clear capt ive-portal users Captive P ortal L ocal U ser Commands • clear capt ive-portal users •n o u s e r • show ca ptive-portal user •u s e r g r o u p •u s e [...]

  • Page 1051

    Capt ive Portal Comm ands 1051 Captive Portal Global Co mmands authentication timeout Use the auth enticati on timeout comma nd to configure the authenti cation timeout. I f the us er does not ente r val id credentials wit hin thi s time li mit, the authenti cation pa ge needs to be served a gain in order for the c lient to gain access to the n etw[...]

  • Page 1052

    1052 Capti ve P ortal Co mmands Syntax captive-portal Default Conf iguration There is no default configuration for this command. Command Mode Global Configuration mode User Guidel ines There ar e no user gui delines for this command. Example console(config)#captive-portal console(config-CP)# enable Use the en able command to globally enab le captiv[...]

  • Page 1053

    Capt ive Portal Comm ands 1053 Example console(config-CP)#enable http port Use the http p ort command to configur e an additional HTTP port for captive portal to monitor . Use the “no” form of this command to remove the additional HT TP port from monito ring. Syntax http p ort port-num no h ttp por t • port-num — The port num ber to mo nito[...]

  • Page 1054

    1054 Capti ve P ortal Co mmands no http s port • port-num — The p ort n umber t o mo nitor (R ange: 1 –6553 5). Default Conf iguration Captiv e portal only m o nitors port 443 by d efault. Command Mode Captive P ortal Configuration mode. User Guidel ines There ar e no user gui delines for this command. Example console(config-CP)#https port 14[...]

  • Page 1055

    Capt ive Portal Comm ands 1055 Example console#show captive-portal Administrative Mode.......... Disabled Operational Status........... Disabled Disable Reason............... Administrator Disabled Captive Portal IP Address.... 1.2.3.4 show captive- portal status Use the show captive-porta l status command t o report the status of all captive porta[...]

  • Page 1056

    1056 Capti ve P ortal Co mmands Configured Captive Portals..................... 1 Active Captive Portals......................... 0 Local Supported Users.......................... 128 Configured Local Users......................... 3 System Supported Users......................... 1024 Authenticated Users............................ 0 Captive Porta[...]

  • Page 1057

    Capt ive Portal Comm ands 1057 configuration Use the configuration command to enter the captive portal instance mode. The captive port al configuration identified by CP ID 1 is the default CP configuration. The system supports a total of ten CP configurations. Use the “no” form of this command to delete a configuration. The default configuratio[...]

  • Page 1058

    1058 Capti ve P ortal Co mmands Default Conf iguration Configurations ar e en abled by default Command Mode Captive P ortal Instance mode. User Guidel ines There ar e no user gui delines for this command. Example console(config-CP 2)#no enable group Use the grou p command to configure the group number for a captive portal configuration. If a group [...]

  • Page 1059

    Capt ive Portal Comm ands 1059 Example console(config-CP 2)#group 2 interface Use the interfa ce command to as sociate an interface with a cap tive portal configuration. Use the “no” form of th is command to remove an association. Syntax interfa ce interface no in terfac e interface interface — An interface or range of i nterfaces. Default Co[...]

  • Page 1060

    1060 Capti ve P ortal Co mmands • web- id — Th e loca le numb er (Ran ge: On ly loca le 1 is suppo rted) Default Conf iguration Locale 1 is configured by default. Command Mode Captive P ortal Instance mode. User Guidel ines There ar e no user gui delines for this command. name Use the name command t o con figure the n ame for a captive portal c[...]

  • Page 1061

    Capt ive Portal Comm ands 1061 protocol Use the proto col command to configur e the protocol mode for a captive portal configuration. Syntax protocol { http | http s } Default Conf iguration The default protocols mode is htt ps. Command Mode Captive P ortal Instance mode. User Guideli nes There ar e no user gui delines for this command. Example con[...]

  • Page 1062

    1062 Capti ve P ortal Co mmands User Guidel ines There ar e no user gui delines for this command. Example console(config-CP 2)#redirect redir ect-url Use the redirect-url command to configure the r edirect URL for a captive portal configuration. Syntax redirect-url url • url — The URL for redir ection (Ran ge: 1–512 charact ers). Default Conf[...]

  • Page 1063

    Capt ive Portal Comm ands 1063 no session-time out • timeout — Se ssion timeou t. 0 in dic ates tim eou t no t en forced ( Ra nge: 0–86 400 se conds ). Default Conf iguration There is no sess ion t imeout by default. Command Mode Captive P ortal Instance mode. User Guideli nes There ar e no user gui delines for this command. Example console(c[...]

  • Page 1064

    1064 Capti ve P ortal Co mmands User Guidel ines There ar e no user gui delines for this command. Example console(config-CP 2)#verification local Captive Portal Client Co nnection Commands captive-portal clien t deauthenticate Use the captive-portal client deauthenticat e command to deaut henticate a specific ca ptive portal client . Syntax captive[...]

  • Page 1065

    Capt ive Portal Comm ands 1065 Syntax show captive- po rtal clien t [ macaddr ] status • macaddr — Client MAC add ress. Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no user gui delines for this command. Example console#show captive-portal client status[...]

  • Page 1066

    1066 Capti ve P ortal Co mmands CP Name................................... cp1 Interface................................. 1/g1 Interface Description..................... Unit: 1 Slot: 0 Port: 1 Gigabit - Level User Name................................. user123 Session Time.............................. 0d:00:00:13 show captive- portal configura tio[...]

  • Page 1067

    Capt ive Portal Comm ands 1067 0002.BC00.1291 10.2 54.96.48 1/g2 2 cp2 0002.BC00.1292 10.2 54.96.49 1/g3 3 cp3 0002.BC00.1293 10.2 54.96.50 1/g4 console#show captive-portal configuration 1 c lient status CP ID..................................... 1 CP Name................................... cp 1 Client Client MAC Address IP Address Interface Interf[...]

  • Page 1068

    1068 Capti ve P ortal Co mmands Command Mode P rivileged EXEC mode. User Guidel ines There ar e no user gui delines for this command. Example console#show captive-portal interface client status Client Client Intf Intf Description MAC Address IP Address ------ ----------------------------------- ----------------- ------ --------- 1/g1 Unit: 1 Slot: [...]

  • Page 1069

    Capt ive Portal Comm ands 1069 Captive Portal Interface Co mmands show captive- portal interface configuration status Use the sh ow cap tiv e-po rta l inte rfa ce co nfig ur atio n sta tus com mand to display the interfa ce to configuratio n assignments for all captive portal configurations or for a speci fic configuration. Syntax show ca ptive-por[...]

  • Page 1070

    1070 Capti ve P ortal Co mmands Interface Interface Description Type --------- ----------------------------------- -------- 1/g1 Unit: 1 Slot: 0 Port: 1 Gigabit ... Physical Captive Portal Local User Command s clear ca ptive-portal users Use the clear capti ve-portal users command to delete a ll capti ve portal user entries. Syntax clear captive-po[...]

  • Page 1071

    Capt ive Portal Comm ands 1071 Default Conf iguration There is no default configuration for this command. Command Mode Captive P ortal Configuration mode. User Guideli nes There ar e no user gui delines for this command. Example console(config-CP)#no user 1 show captive- portal user Use the show captive-portal user command to display all configur e[...]

  • Page 1072

    1072 Capti ve P ortal Co mmands ------- --------------------- ------- ------------ ------------ 1 user123 14400 1 Default 2 user234 0 1 Default 2 group2 console#show captive-portal user 1 User ID........................................ 1 User Name...................................... user123 Password Configured............................ Yes Sess[...]

  • Page 1073

    Capt ive Portal Comm ands 1073 User Guideli nes There ar e no user gui delines for this command. Example console(config-CP)#user 1 group 3 user name Use the user name command to modify the user name for a local captive portal us er . Syntax user user -id name name • user -id — Use r ID (Ra nge: 1–128 ). • name — use r nam e (Ran ge: 1–3[...]

  • Page 1074

    1074 Capti ve P ortal Co mmands • user -i d — U ser ID (Range: 1–128) . • password — User passwor d (Range: 8–6 4 characte rs). • enc-passwor d — User passwor d in encrypted form. Default Conf iguration There ar e no users configured by default. Command Mode Captive P ortal Configuration mode. User Guidel ines There ar e no user gui[...]

  • Page 1075

    Capt ive Portal Comm ands 1075 Command Mode Captive P ortal Configuration mode. User Guideli nes There ar e no user gui delines for this command. Example console(config-CP)#user 1 session-timeout 86400 console(config-CP)#no user 1 session-timeout Captive Portal Status Commands show captive- portal configura tion Use the show captive-port al configu[...]

  • Page 1076

    1076 Capti ve P ortal Co mmands Operational Status........................ Disabled Disable Reason............................ Administrator Disabled Blocked Status............................ Not Blocked Authenticated Users....................... 0 show captive- portal configura tion interface Use the show capt ive-portal con figuration in terface[...]

  • Page 1077

    Capt ive Portal Comm ands 1077 --------- ---------------------------------------- ------------ --- ------ 1/g1 Unit: 1 Slot: 0 Port: 1 Gigabit - Level Disabled Blocked console#show captive-portal configuration 1 i nterface 1/g1 CP ID..................................... 1 CP Name................................... cp 1 Interface....................[...]

  • Page 1078

    1078 Capti ve P ortal Co mmands Example console#show captive-portal configuration 1 locales Locale Code --------------- en show captive- portal configura tion status Use the show captive -portal config uration status command to display information about all configured ca ptive portal config urations or about a specific capt ive portal configuration[...]

  • Page 1079

    Capt ive Portal Comm ands 1079 console#show captive-portal configuration 1 status CP ID.......................................... 1 CP Name........................................ cp1 Mode........................................... Enabled Protocol Mode.................................. https Verification Mode.............................. Guest Gr[...]

  • Page 1080

    1080 Capti ve P ortal Co mmands Client Database Full Traps................. .... Disable Client Disconnection Traps................. .... Disable Captive Portal User Group Comman ds user group Use the user grou p command to create a user group. Use the “no” form of this command to delete a user group. The default user group (1) cannot be delete[...]

  • Page 1081

    Capt ive Portal Comm ands 1081 user gro up moveusers Use the user group moveusers command to move a group's users to a different group. Syntax user group grou p-id move users new-group-id • group-id — Grou p ID (Ra nge: 1– 10). • new-grou p-id — Group ID (Ra nge: 1– 10). Default Conf iguration There is no default configuration for [...]

  • Page 1082

    1082 Capti ve P ortal Co mmands user group name Use the user grou p nam e command to configure a group name. Syntax user group group-id name name • group-id — G roup ID (Range: 1– 10). • name — G roup nam e (Ran ge: 1 –32 c harac ters). Default Conf iguration User groups have no names by default. Command Mode Captive P ortal Configurati[...]

  • Page 1083

    Cloc k Comm ands 1083 55 Clock C ommands This chapter exp lains the following commands: •s h o w c l o c k • show sntp conf iguratio n • show sntp s tatus • s ntp a uth en ticate • s ntp a uth entic ation -key • sntp broadca st client enab le • sn tp client poll timer •s n t p s e r v e r • sntp trus ted-k ey • sntp unica st cli[...]

  • Page 1084

    1084 Clock Comma nds Command Mode User EXEC mode User Guidel ines This command has no user guidelines . Examples The followi ng ex ample displays the time and date from the sy stem clock console>show clock 15:29:03 Jun 17 2002 Time source is SNTP show sntp c onfiguration Use the show sntp configuration command in P rivileged EXEC mode t o show t[...]

  • Page 1085

    Cloc k Comm ands 1085 Polling interval: 64 seconds MD5 Authentication keys: Authentication is not required for synchronization. Trusted keys: No trusted keys. Unicast clients: Disable Unicast servers: Server Key Polling Priority --------- ----------- ----------- ----- ----- 10.27.128.21 Disabled Enabled 1 show sntp status Use the show sntp status c[...]

  • Page 1086

    1086 Clock Comma nds Examples The following example s hows t he status o f the SNTP . console#show sntp status Client Mode: Unicast Last Update Time: MAR 30 21:21:20 2009 Unicast servers: Server Status Last response --------- ----------- ---------------------- ---- 192.168.0.1 Up 21:21:20 Mar 30 2009 sntp authenticate Use the sntp a uthenti cate co[...]

  • Page 1087

    Cloc k Comm ands 1087 Example The follo wing example, after def ining the authe nticati on key for SNTP , gran ts authen tication. console(config)# sntp authentication-key 8 md5 ClkKey console(config)# sntp trusted-key 8 console(config)# sntp authenticate sntp a uthe ntica tion-ke y Use the sntp au thenticati on-key com mand in Global Configuration[...]

  • Page 1088

    1088 Clock Comma nds console(config)# sntp authenticate sntp broadca st client enable Use the sntp broadcast client enable command in Global Configuration mode to enab le a Simple Net work Time Protocol (SNTP) Broadcast client. T o disable an SNTP Broadcast client, use the no form of th is command. Syntax sntp broadcast client enable no sntp broadc[...]

  • Page 1089

    Cloc k Comm ands 1089 • seconds — P olling int erval. (Range: 64-102 4 second s, in pow ers o f 2) Default Conf iguration The polling interval is 64 seconds. Command Mode Global Configuration mode User Guideli nes If a user enters a value whic h is not an exact power of two, the nearest power - of -two value is applied. Example The fo llowing e[...]

  • Page 1090

    1090 Clock Comma nds • priority — Priority assigned to the server . (Range: 1 –8) Default Conf iguration No servers ar e defined. Command Mode Glo bal C onf igura tion mode User Guidel ines Up to 8 SNTP servers can be defined. Use the sntp client e nable command in Global Configuration mode to enable unicast clients globally . P olling time i[...]

  • Page 1091

    Cloc k Comm ands 1091 Default Conf iguration No k eys ar e truste d. Command Mode Global Configuration mode User Guideli nes This command is r elevant for both r eceived Unicast and Broadcas t. Example The following defines SNTP trusted-key . console(config)# sntp authentication-key 8 md5 ClkKey console(config)# sntp trusted-key 8 console(config)# [...]

  • Page 1092

    1092 Clock Comma nds Examples The following example enables the device to use Sim ple Network Time P rot ocol (SNTP) to re q uest and accept SNTP traffic from servers. console(config)# sntp unicast client enable clock timezon e hours-offset Use the clock timezone [ hours-offset ] [minutes minutes-offset ] [ zone acronym ] comm and to se t the of fs[...]

  • Page 1093

    Cloc k Comm ands 1093 Syntax no clock timezon e Default Conf iguration This command has no default configuration. Command Mode Global Configuration User Guideli nes This command has no specific us e r guidelines. Example console(config)#no clock timezone clock summe r -time recurring Use the clock sum mer -time recurring { usa | eu | { week day mon[...]

  • Page 1094

    1094 Clock Comma nds • acronym — The acron ym for the t ime zone to b e displaye d when summe rtime is in effect. (Ran ge: Up to four cha racters) Default V alue No defaul t settin g Command Mode Global Configuration User Guidel ines No specific guideline s Examples console(config)# clock summer-time recurring 1 sun jan 00:10 2 mon mar 10:00 of[...]

  • Page 1095

    Cloc k Comm ands 1095 • acronym — The a cronym for the t ime zone to b e display ed when summ ertime i s in effect. (R ange: Up to four charact ers) Default Conf iguration This command has no default configuration. Command Mode Global Configuration User Guideli nes No specific guideline s Examples console(config)# clock summer-time date 1 Apr 2[...]

  • Page 1096

    1096 Clock Comma nds User Guidel ines No specific guideline s Example console(config)#no clock summer-time show cl ock Use the show clock command to display the time and date from the system clock. Use the show clock detail command to show the time zone and sum mer tim e con fig urat io n. Syntax De scription show cloc k [deta il] Default Conf igur[...]

  • Page 1097

    Cloc k Comm ands 1097 Time source is SNTP Time zone: Acronym is PST Offset is UTC-7 Summertime: Acronym is PDT Recurring every year. Begins at first Sunday of April at 2:00. Ends at last Sunday of October at 2:00. Offset is 60 minutes.[...]

  • Page 1098

    1098 Clock Comma nds[...]

  • Page 1099

    Conf iguration an d Image File Com mands 1099 56 Configuration and Image File Commands This chapter exp lains the following commands: • boot system • clea r config •c o p y • delet e backup-config • delet e backup-image • delet e startup-config • filedescr •s c r i p t a p p l y •s c r i p t d e l e t e •s c r i p t l i s t •s[...]

  • Page 1100

    1100 Confi gurat ion a nd Imag e File Co mmands boot system Use the boot system command in P rivileged EXEC mode to specify the system imag e that t he device loads at start up. Syntax boot system [image1|i mage2] • image1|image2 — Ima ge file. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode [...]

  • Page 1101

    Conf iguration an d Image File Com mands 1101 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example restor es the s w itch to its default configuration. console#clear config copy Use the copy command in Privi le ged EXEC mode to copy files from a source to a d estinatio n. Syntax copy[...]

  • Page 1102

    1102 Confi gurat ion a nd Imag e File Co mmands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines The location of a file system dicta t es the format of the source or destination URL. startu p-co nfig Rep resents th e sta rtup co nfigura tion file. startu p-log Represents the st ar[...]

  • Page 1103

    Conf iguration an d Image File Com mands 1103 The entire copy ing process may take several mi nu tes and differs fro m protocol to pro tocol and from network t o network. Understanding Invalid Combination s of Source and Destination Some combinations of s o urce and destination ar e not valid. Specifically , if the following conditions exist, yo u [...]

  • Page 1104

    1104 Confi gurat ion a nd Imag e File Co mmands Saving the Running Configuration to th e Startup Configuration Use the copy running-con fig startup-con fig command to copy the running configuration to the startup configuration. Backing up the Running Configuration o r Startup Configuration to the B ackup Configuration Use the copy running-con fig b[...]

  • Page 1105

    Conf iguration an d Image File Com mands 1105 Syntax delete backup-config Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following exampl e deletes the backup-config file. console#delete backup-config Delete backup-config (Y/N)?y [...]

  • Page 1106

    1106 Confi gurat ion a nd Imag e File Co mmands Example The following exampl e deletes test file in Flash memory . console#delete backup-image Delete: image2 (y/n)? delete startup-config Use the delete startup-config command in P rivileged EXEC mode to delete the startup-config file. Syntax delete sta rtup-co nfig Default Conf iguration This comman[...]

  • Page 1107

    Conf iguration an d Image File Com mands 1107 Syntax filedesc r {image 1|im age2} description no filedescr {image 1|image2} • image1|image2 — Ima ge file. • descript ion — Block of descriptive text. (Range: 0-12 8 character s) Default Conf iguration No de scr ipt ion is at tach ed t o the f ile . Command Mode P rivileged EXEC mode User Guid[...]

  • Page 1108

    1108 Confi gurat ion a nd Imag e File Co mmands User Guidel ines This command has no user guidelines . Example The following e xample applies the config.scr script to the switch. console#script apply config.scr script delete Use the script delete command in Privi le ged EXEC mode to delete a specified scri pt. Syntax script delete { scriptname | al[...]

  • Page 1109

    Conf iguration an d Image File Com mands 1109 Syntax script list Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example displays all scripts present on the switch. console#script list Configuration Script Name Size(Bytes[...]

  • Page 1110

    1110 Confi gurat ion a nd Imag e File Co mmands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following exampl e displays the contents of the script file config.scr . console#script show config.scr interface ethernet 1/g1 ip address 176.242.100.100 255.255.255.0 exit script validate Use the sc[...]

  • Page 1111

    Conf iguration an d Image File Com mands 1111 Example The following example validates the contents of the s cript file config.scr . console#script validate config.scr show back up-config Use the show backup-config command in P rivileged EXEC mode to display the contents of the backup configuration file. Syntax show backup -config Default Conf igura[...]

  • Page 1112

    1112 Confi gurat ion a nd Imag e File Co mmands interface ethernet 1/g2 ip address 176.243.100.100 255.255.255.0 duplex full speed 1000 exit show bootvar Use the show boot var comman d in User EXEC mode to display the active system imag e file th at the device loads a t startup . Syntax show boot var [ unit ] • unit —Unit numb er . Default Conf[...]

  • Page 1113

    Conf iguration an d Image File Com mands 1113 Images currently available on Flash --------------------------------------------- -------------- -------------- unit image1 image2 current- active next-active --------------------------------------------- -------------- -------------- 1 0.31.0.0 0.31.0.0 image2 image2 show dir Use the show dir command t[...]

  • Page 1114

    1114 Confi gurat ion a nd Imag e File Co mmands --------- --------------- image1 6351288 image2 6363424 fastpath.cfg 321894 show runn ing- config Use the show running-co nfig command in P rivileged EXEC mode to display the contents of the currently running configuration file. The command only displays the configuratio ns that ar e non-default. NOTE[...]

  • Page 1115

    Conf iguration an d Image File Com mands 1115 show startup - config Use the show start up-config command in P rivileged EXEC mode to display the s tartup co nfigurat ion file contents . Syntax show startup-con fig Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has n[...]

  • Page 1116

    1116 Confi gurat ion a nd Imag e File Co mmands 11 : exit 12 : ip address dhcp 13 : ip address vlan 1001 14 : interface vlan 3 15 : routing 16 : exit 17 : username "lvl7" password fb3604df5a109405b2d79ecb06c47ab5 level 15 encrypted 18 : ! 19 : interface ethernet 1/g17 20 : switchport mode general 21 : switchport general pvid 1001 22 : no [...]

  • Page 1117

    Conf iguration an d Image File Com mands 1117 update bo otcode Use the update bootcode command in Pri v ileged EXEC mode to update the bootcode on one or more switches. F or each switch, the bootco de is extracted from the active image an d programmed to flash. Syntax update b ootcode [ uni t ] • unit —Unit numb er . Default Conf iguration This[...]

  • Page 1118

    1118 Confi gurat ion a nd Imag e File Co mmands[...]

  • Page 1119

    Deni al o f Ser vic e Co mmands 1119 57 Denial of Service Commands This chapter exp lains the following commands: • dos-cont rol firstfrag • dos-control icmp • dos-control l4port • dos-control sipdip • dos-control tcpflag • dos-control tcpfrag • ip icmp echo-reply • ip icmp error -in terval • ip unreachables •i p r e d i r e c t[...]

  • Page 1120

    1120 Denia l of Ser vice Comma nds dos-co ntrol firstfrag Use the dos-contro l firstfrag command in Global Configuration mode to enable Mi nimum TCP Header S ize Denia l of S ervice pro tection. If the mode is enabled, D e nial of Service p revention is acti ve for this type of attack. If packets ingress having a T C P Header Size smaller than the [...]

  • Page 1121

    Deni al o f Ser vic e Co mmands 1121 Syntax dos-control icmp [ size ] no dos-con trol icmp • size — M aximum ICMP packet size. (R ange: 0-1023). If size is unspecifi ed, the valu e is 512. Default Conf iguration Denial of Service is disabled. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example Th[...]

  • Page 1122

    1122 Denia l of Ser vice Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The followi ng e xample activates L 4 P ort Denial of Serv ice protection. console(config)# dos-control l4port dos-co ntrol sipdip Use the dos-contro l sipdip command in Global Configuration mode to enable Sou[...]

  • Page 1123

    Deni al o f Ser vic e Co mmands 1123 dos-co ntrol tcpflag Use the dos-co ntrol tcpflag command in Globa l Con figuration mode to enable TCP Flag Denial of Service protections. If the mo de is enab led, Denial of Service prevention is active for this type of attack. If packets ingress having TCP Flag SYN set a nd a sourc e por t less than 102 4, hav[...]

  • Page 1124

    1124 Denia l of Ser vice Comma nds no dos-cont rol tcpfrag Default Conf iguration Denial of Service is di sabled. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following example acti v ates TCP F ragment Denial of Service protection. console(config)# dos-control tcpfrag ip icmp echo-re[...]

  • Page 1125

    Deni al o f Ser vic e Co mmands 1125 Example console(config)#ip icmp echo-reply ip icmp error -interval Use the ip icmp error -interval command to limit the rate at which IP v4 ICMP error messages are s ent. The rate limit is configured as a tok en bucket with two configurable parameters: Burs t-size and burst-interval. T o di sable ICMP r ate limi[...]

  • Page 1126

    1126 Denia l of Ser vice Comma nds ip unreacha bles Use the ip unreachab les comman d to enabl e the gen eration of ICMP Destination Unr eachable mes sages. Use the “no” form o f this comman d to prevent the generation of ICMP Destina tion Unreachable messages. Syntax ip unreachable s no ip unrea chables Default Conf iguration ICMP Destinat ion[...]

  • Page 1127

    Deni al o f Ser vic e Co mmands 1127 Default Conf iguration ICMP Redirect messages are enabled by default. Command Mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config-if-vlan10)#ip redirects ipv6 icmp error -interval Use the icmp err or-in terval command to limit the rate[...]

  • Page 1128

    1128 Denia l of Ser vice Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines There ar e no user gui delines for this command. Example console(config)#ipv6 icmp error-interval 2000 20 ipv6 unreachab les Use the ipv6 unreachab les command to enable the generation of ICMPv6 Destination Unr eachable mes sages. Use the “no” form o [...]

  • Page 1129

    Deni al o f Ser vic e Co mmands 1129 Syntax show dos-contro l Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The following exampl e displays Denial of Servic e configuration information. console# show dos-control SIPDIP Mode.........[...]

  • Page 1130

    1130 Denia l of Ser vice Comma nds[...]

  • Page 1131

    Line Command s 1131 58 Line Comm ands This chapter exp lains the following commands: •e x e c - t i m e o u t •h i s t o r y •h i s t o r y s i z e •l i n e •s h o w l i n e • speed[...]

  • Page 1132

    1132 Line C ommands exec-timeou t Use the exec-tim eout comman d in Line Configuration mode to set the interva l that the sys tem wai ts for user input before timeo ut. T o restore the default sett ing, use th e no form of this command. Syntax exec-tim eout minutes [ seconds ] no exe c-time out • minute s — Integer t hat specifies the numb er o[...]

  • Page 1133

    Line Command s 1133 Syntax histo ry no hist ory Default Conf iguration The default value for this command is ena bled . Command Mode Lin e Interfa ce mode User Guideli nes This command has no user guidelines. Example The following example disables the command history functi on for the current terminal sess ion. console(config-line)# no history hist[...]

  • Page 1134

    1134 Line C ommands Command Mode Line Configuration mode User Guidel ines This command has no user guidelines . Example The following example co nfigures the command history buffer size to 20 commands for the current terminal ses sion. console(config-line)#history size 20 line Use the line command in Global Configuratio n mode to identify a specifi[...]

  • Page 1135

    Line Command s 1135 console(config-line)# show line Use the show line co mmand in User EXEC mode to display line parameters. Syntax show line [console | telnet | ssh ] • console — Cons ole te rmina l line . • teln et — Virtual terminal for remote console a ccess (T eln et). • ssh — Vi rtual terminal for secured r emote cons ole access ([...]

  • Page 1136

    1136 Line C ommands Telnet configuration: Interactive timeout: 10 minutes 10 seconds History: 10 SSH configuration: Interactive timeout: 10 minutes 10 seconds History: 10 speed Use the speed command in Line Configuration mode to set the line baud rate. Us e the no form of the command to restor e th e default settings. Syntax speed { bps } no speed [...]

  • Page 1137

    Manage ment A CL Comma nds 1137 59 Managemen t ACL Commands This chapter exp lains the following commands: • den y (managemen t) • management acce ss-class • management a ccess-list • perm it (management) • show manageme nt access-class • show manageme nt access-lis t[...]

  • Page 1138

    1138 Managem ent A CL Command s deny (manage ment) Use the deny command in Management Access -List Configuration mode to set co nd itio ns fo r the management access list . Syntax deny [ et hernet interface-number | vlan vlan -id | port-channel number ] [ serv ice service ] [ prio rit y priority ] deny ip-source ip- add ress [ ma sk mask | prefix- [...]

  • Page 1139

    Manage ment A CL Comma nds 1139 Example The following example shows how all ports ar e denied in the access-list called mlist . console(config)# management access-list mlist console(config-macal)# deny management acce ss-class Use the managemen t access-class command in Global Configuration mode to rest rict management connections. T o disable rest[...]

  • Page 1140

    1140 Managem ent A CL Command s manageme nt access-list Use the managemen t access-list command in Global Configuration mode to define an access li st for management, and enter the access-l ist for configuration. Once in the access-lis t conf igura tion mode, the denie d or permitted access conditions are configur ed with the deny and permit comman[...]

  • Page 1141

    Manage ment A CL Comma nds 1141 console(config-macal)# permit ethernet 1/g1 priority <1-64> console(config-macal)# permit ethernet 2/g9 priority <1-64> console(config-macal)# exit console(config)#management access-class mlist The following example shows how to configu re all the interfaces to be management interfaces e xcept for two in [...]

  • Page 1142

    1142 Managem ent A CL Command s • vlan vlan-id — A val id V LAN nu mber . • port-channel number — A valid p ort cha nnel number . • ip-add ress — Sourc e IP a ddress. • mask mask — Sp ecifies the netw ork m ask of the source IP a ddress. • mask pr ef ix-length — Specifies the number of bits that comprise the source IP address pr[...]

  • Page 1143

    Manage ment A CL Comma nds 1143 The following example shows how to configu re all the interfaces to be management interfaces e xcept for two in terfaces, Ethernet 1/g1 and Ethernet 2/g9 . console(config)# management access-list mlist console(config-macal)# deny ethernet 1/g1 priority <1-64> console(config-macal)# deny ethernet 2/g9 priority &[...]

  • Page 1144

    1144 Managem ent A CL Command s Management access-class is enabled, using access list mlist show manage ment access-list Use the show m anagement access-list command in Pr ivileged E XEC mode to display management access-list s. Syntax show ma nagement access- list [ nam e ] • name — A valid acce ss list name. (Ra nge: 1–32 cha racters) Defau[...]

  • Page 1145

    Passwor d Manag ement Co mmands 1145 60 Password Mana gement Commands This chapter exp lains the following commands: • password s aging • passwords hist ory •p a s s w o r d s l o c k - o u t • passwor ds min-leng th • show passwor ds configura tion[...]

  • Page 1146

    1146 Passwor d Manage ment Comma nds passwords a ging Use the passwords a ging command in Global Configuration mode to implement expiration date on the passwords. The user is requir ed t o change the pas swords when they expire. Use the no form of this comm and to disabl e the aging functi on. Syntax passwords agin g age no passwords aging • age [...]

  • Page 1147

    Passwor d Manag ement Co mmands 1147 Syntax passwords histo ry historylength no passwords history • history length — Numb er of previous passw ords to be m aintained in the history . (R ange: 0 –10.) Default Conf iguration No passwor d history is maintained. Command Mode Global Configuration mode User Guideli nes This command has no user guid[...]

  • Page 1148

    1148 Passwor d Manage ment Comma nds • attemp ts — Num ber of attempts the user is allowed t o enter a correct password. (Range: 1-5) Default Conf iguration The user lockout feature is disabled. Command Mode Glo bal C onf igura tion mode . User Guidel ines This command has no user guidelines . Example The following example sets t he number of u[...]

  • Page 1149

    Passwor d Manag ement Co mmands 1149 User Guideli nes This command has no user guidelines. Example The following example se t s the minimum passwor d lengt h to 12 characters. console(config)#passwords min-length 12 show passw ords configuration Use the show passwords configuration command in P rivileged EXEC mode to show the parameters for passwor[...]

  • Page 1150

    1150 Passwor d Manage ment Comma nds aging : enabled aging value : 30 days User lockout : enabled User lockout attempts : 3[...]

  • Page 1151

    PHY Di agno stics Co mmands 1151 61 PHY Diagnostics Commands This chapter exp lains the following commands: • show copper -ports cable-length • show copper -ports tdr • sh ow fiber-ports optical-transceiver • test copper-port tdr[...]

  • Page 1152

    1152 PHY Dia gnostics Comm ands show copp er -por ts cable-length Use the show copper-ports cable-length command in P rivileged EXEC mode to display the es timated copper cable length at tached to a port. Syntax show cop per -port s cable-l ength [ interface ] • interface — A val id Ethern et port. Th e full synt ax is unit / port. Default Conf[...]

  • Page 1153

    PHY Di agno stics Co mmands 1153 show copp er -ports tdr Use the show copper-ports tdr command in Privile ged EXE C mode to display the la st Time D omain Reflec tometry (TDR) tests on spe cified ports . Syntax show copper -ports tdr [ interface ] • interface — A valid Ether net port. Th e full syn tax is unit / port. Default Conf iguration Thi[...]

  • Page 1154

    1154 PHY Dia gnostics Comm ands show fiber -ports optical-transceive r Use the show fiber-ports optical-transceiver command in P rivileged EXEC mode to displa y the opt ical tr ansce iver di agnos tics. Syntax show fiber - ports optical-transceiver [ interface ] • interface — A valid Ethernet port. The full syn tax is unit / port. Default Conf [...]

  • Page 1155

    PHY Di agno stics Co mmands 1155 test copper -port tdr Use the test copper -port tdr command in P rivileged EXEC mode to diagnose with Time Dom ain Reflecto metry (T DR) te chnology the quality and characteristics of a copper cable attached to a po rt. Syntax test copper -po rt tdr int erf ace • interface — A valid Ether net port. Th e full syn[...]

  • Page 1156

    1156 PHY Dia gnostics Comm ands[...]

  • Page 1157

    Power Ov er Ethernet Comm ands 1157 62 Power Over Etherne t Commands This chapter exp lains the following commands: •p o w e r i n l i n e • pow er inline legacy •p o w e r i n l i n e p o w e r e d - d e v i c e • pow er inline priority •p o w e r i n l i n e t r a p s • power inli ne usage-thr eshold • sh ow po e-firmware-version ?[...]

  • Page 1158

    1158 Power O ver Eth ernet Commands power inline The power inline command enables/disabl es the ability of th e port to deliver power . Syntax De scription power inline { aut o | never } no powe r inline • auto — Enables t h e device discovery protocol and, if found, supplies power to the d evice. • never — Disables t he device dis covery p[...]

  • Page 1159

    Power Ov er Ethernet Comm ands 1159 Parameter Rang es Not applicab le Command Mode Global Configuration. Usage Guideli nes No specific guideline s. Default V alue L egacy Supp ort is di sabl ed by d efaul t. Examples console(config)# power inline legacy console(config)# no power inline legacy power in line powered- device The power inline powered-d[...]

  • Page 1160

    1160 Power O ver Eth ernet Commands Examples console(config)#interface ethernet 1/g1 console(config-if-1/g1)# power inline powered-device IP-phone power inline priority The power inline pri or ity command configures the port priority level, for the de l i v e r y of p o w e r t o a n at t a c h e d de v i c e . T h e s wi t c h m a y n o t b e a b [...]

  • Page 1161

    Power Ov er Ethernet Comm ands 1161 power inline traps The power inline traps command enables inline power traps. T o disable inline power traps, use the no form of this command. Syntax Descri ption power inline traps enable no po wer inli ne traps enable • enable — E nables trap s on t he specified unit. Command Mode Global Configuration. Usag[...]

  • Page 1162

    1162 Power O ver Eth ernet Commands Syntax De scription power inline usa ge-threshol d < threshold > no powe r inline usag e-thresh old • thr eshold — Power thresh old at w hich trap is ge ner ated. Para mete r R ange s < thr eshol d > — 11–9 9 % Command Mode Glo bal C onfi gura tion. Usage Guideli nes No specific guideline s. D[...]

  • Page 1163

    Power Ov er Ethernet Comm ands 1163 Examples console#show poe-firmware-version image version..............501_4 show powe r inline The show powe r inline command disp lays the to tal availabl e power , the total powe r co nsume d in th e syst em, and the gl oba lly se t usa ge thresho ld. Syntax Descri ption show power inline Parameter Rang es None[...]

  • Page 1164

    1164 Power O ver Eth ernet Commands Power:On Nominal Power:150 watt Consumed Power:120 watts (80%) Global Configuration Usage Threshold:95% Traps:Enabled Port Configuration PortPowered DeviceStatePriorityStatusClassification [w] ----------------------------------------------------- - 1/g1IP Phone Model AAutoHighOn0.44 - 12.95 1/g2Wireless AP ModelA[...]

  • Page 1165

    Power Ov er Ethernet Comm ands 1165 Examples: console#show power inline ethernet 1/g13 Port Powered Device State Priority Status Class[W] Power[mW] ----- ------------------------ ----- -------- ------- -- ------------- --------- 1/g13 auto Low On 3.84 - 6.49 5000 Overload Counter............................... 0 Short Counter.......................[...]

  • Page 1166

    1166 Power O ver Eth ernet Commands[...]

  • Page 1167

    RMON Commands 1167 63 RMON Commands This chapter exp lains the following commands: •r m o n a l a r m • rmon collection hist ory • rmon event • show rmon alarm • show rmon alar m-table • show rmon collection hist ory • sh ow rmon ev ents • show rmon histor y •s h o w r m o n l o g •s h o w r m o n s t a t i s t i c s[...]

  • Page 1168

    1168 RMON Commands rmon alarm Use the rmon alarm comm and in Global Config uration mode to configure alarm conditions. T o re mo ve an ala rm, use the no form of this command. Also see the related show rmon al arm command. Syntax rmon alarm index variable interva l rthreshold fthreshold r event fevent [ type type ] [ startup direction ] [ owner nam[...]

  • Page 1169

    RMON Commands 1169 Default Conf iguration The following parameters have the following default values: • type type — If un speci fied, the t ype is absolu te . • startup dir ection — If unspecified, the startup direction is rising-falling . Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example T[...]

  • Page 1170

    1170 RMON Commands Syntax rmon collect ion history index [ owne r ownername ] [ buck ets bucket-number ] [ interval seconds ] no rmon co llect ion history inde x • index — The reques ted statistics index grou p. (Ran ge: 1–6 5535) • owner ownername — Recor ds the RMON st atistic s group owner na me. If unspecified, the nam e is an empty s[...]

  • Page 1171

    RMON Commands 1171 rmon even t Use the rmon event command in Global Configuration mod e to configure an event. T o remove an event, use the no form of this command. Also see the show rmon events command. Syntax rmon event index type [ community te xt ] [ description text ] [ owner name ] no rmon event index • index — The ev ent in dex. (Range: [...]

  • Page 1172

    1172 RMON Commands show rmon alarm Use the show r mon al arm command in User EXEC mode to display alar m configuration. Also see the rmon al arm command. Syntax show rmon alarm number • number — Alar m index. ( Range: 1 –6553 5) Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guidel ines This[...]

  • Page 1173

    RMON Commands 1173 Falling Event: 1 Owner: CLI The following table descri bes the significant fields shown in the display : Field Descr ipti on Alarm Alarm i ndex. OID Monitored vari able OID. Last Sample Va l u e The statis tic value during th e last sampli ng period. F o r example, if the sample type i s delta, this valu e is the difference bet w[...]

  • Page 1174

    1174 RMON Commands show rmon alarm-table Use the show rmon alar m-table co mmand in User EXE C mode to display the alarms summary t able. Syntax show rmon alarm- table Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guidel ines This command has no user guidelines . Example The followi ng ex ample d[...]

  • Page 1175

    RMON Commands 1175 show rmon colle ction history Use the show rmon co llection history command in User EXEC mode to display the requested group of statistics. Also see the rmon collection histo ry command. Syntax show rmon collecti on history [ ethernet interface | port- channe l port- channel-number ] • interface — V alid Ethernet port. Th e f[...]

  • Page 1176

    1176 RMON Commands The following table describes the significant fields shown in the display: show rmon events Use the show rmo n events command in User EXEC mode to display the RMON e vent t able. Also se e the rmon event command. Syntax show rmon events Default Conf iguration This command has no default configuration. Command Mode User EXEC mode [...]

  • Page 1177

    RMON Commands 1177 The following table descri bes the significant fields shown in the display : show rmon history Use the show rmon h istory comm an d in Use r E XEC mo de to di spl ay R MO N Ethernet Statistics history . Also see the rmo n history command. Syntax show rmon histo ry index [ throughput | errors | othe r ] [ period seconds ] • inde[...]

  • Page 1178

    1178 RMON Commands User Guidel ines This command has no user guidelines . Examples The following example displays RMON Ethe rnet St atis tics histor y for "throughput" on index number 1. console> show rmon history 1 throughput Sample Set: 1 Owner: CLI Interface: 1/g1 interval: 1800 Requested samples: 50 Granted samples: 50 Maximum tabl[...]

  • Page 1179

    RMON Commands 1179 The following example displays RMON Ethernet Statistics history for "other" on index number 1. console> show rmon history 1 other Sample Set: 1 Owner: Me Interface: 1/g1 Interval: 1800 Requested samples: 50 Granted samples: 50 Maximum table size: 270 Time Dropped Collisions ------------------- ----------- -----------[...]

  • Page 1180

    1180 RMON Commands Undersize Th e number of pac kets received du ring thi s sampl ing int erval that were less t han 64 octe ts long (e xclu ding framing bits but i ncluding FCS octets) and we re otherwise we ll formed. Oversize The nu mber of packets received during this sa mpling int erval that were long er than 1518 octet s (e xcl uding fra m in[...]

  • Page 1181

    RMON Commands 1181 show rmon log Use the show rmon log command in User EXEC mode to display the RMON logging ta ble. Syntax show rmon log [ event ] • event — E vent ind ex. (Range: 1– 65535) Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guideli nes This command has no user guidelines. Examp[...]

  • Page 1182

    1182 RMON Commands console> show rmon log Maximum table size: 100 (100 after reset) Event Description Time ----- ----------- -------------------- 1 Errors Jan 18 2005 23:48:19 1 Errors Jan 18 2005 23:58:17 2 High Broadcast Jan 18 2005 23:59:48 The following table describes the significant fields shown in the display: show rmon statistics Use the[...]

  • Page 1183

    RMON Commands 1183 User Guideli nes This command has no user guidelines. Example The following ex ample displays RMON Ethernet Statist ics for port 1/g1. console> show rmon statistics ethernet 1/g1 Port 1/g1 Dropped: 8 Octets: 878128 Packets: 978 Broadcast: 7 Multicast: 1 CRC Align Errors: 0 Collisions: 0 Undersize Pkts: 0 Oversize Pkts: 0 Fragm[...]

  • Page 1184

    1184 RMON Commands Broadcast The total number of good pack ets received and d irected to t he Broadc ast addr ess. T his does n ot inclu de Multic ast pack ets. Multicast The total number of good pack ets received and dir ected to a Multic ast address. This number does not i nclude packets directed to th e Broad cast a ddress. CRC Align Errors The [...]

  • Page 1185

    RMON Commands 1185 128 to 2 55 Octet s The total number o f packets (i nclu ding bad packets) recei ved that are be tween 128 and 2 55 octets in l e ngth inclusive (ex clud ing framin g bits but inclu ding FCS octets). 256 to 5 11 Octet s The total number o f packets (i nclu ding bad packets) recei ved that are be tween 256 and 5 11 octets in l e n[...]

  • Page 1186

    1186 RMON Commands[...]

  • Page 1187

    Serv icea bili ty T racing P acket Commands 1187 64 Serviceability T racing Packet Commands This chapter exp lains the following commands: •d e b u g a r p •d e b u g a u t o - v o i p • debu g clear •d e b u g c o n s o l e •d e b u g d o t 1 x • debu g igmpsn ooping •d e b u g i p a c l •d e b u g i p d v m r p •d e b u g i p i [...]

  • Page 1188

    1188 Servi ceab ility T raci ng Pa cket Comm ands •d e b u g r i p •d e b u g s f l o w • debug spa nning-tr ee • show d ebugging NOTE: De bug comm ands are not persi stent acr oss rese ts.[...]

  • Page 1189

    Serv icea bili ty T racing P acket Commands 1189 debug ar p Use the debug arp comm and to enable tracing of ARP packets. Use the “no” form of this command to disable tracing of AR P pack ets. Syntax debug arp no de bug arp Default Conf iguration ARP pack et tracing is disabled by default. Command Mode P rivileged EXEC mode. User Guideli nes The[...]

  • Page 1190

    1190 Servi ceab ility T raci ng Pa cket Comm ands Command Mode P rivileged EXEC mode. User Guidel ines There ar e no usa ge guidelines for this command. Example console#debug auto-voip debug c lear Use the debug clear command to disable all debug traces. Syntax debug clear Default Conf iguration There is no default configuration for this command. C[...]

  • Page 1191

    Serv icea bili ty T racing P acket Commands 1191 appears on all login s essions for which debug console has been enabled. The configuration of this command r e mains in effect for the life of t he log in session. The effe ct of this command is not pers istent across r esets. Syntax debug cons ole Default Conf iguration Display of debug traces is di[...]

  • Page 1192

    1192 Servi ceab ility T raci ng Pa cket Comm ands User Guidel ines There ar e no usa ge guidelines for this command. Example console#debug dot1x packet debug igmp snooping Use the debug igmpsnooping to enable tracing of IG MP Snooping pack e ts transmitted a nd/or received by the switch. IGMP Snoo ping should be enabled on the device and the interf[...]

  • Page 1193

    Serv icea bili ty T racing P acket Commands 1193 Syntax debug ip acl acl no de bug ip acl acl • acl — The number of the IP A CL to debug. Default Conf iguration Display of I P ACL traces is disabled by default. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no usa ge guidelines for this command. Example console#debug ip acl 1 d[...]

  • Page 1194

    1194 Servi ceab ility T raci ng Pa cket Comm ands Command Mode P rivileged EXEC mode. User Guidel ines There ar e no usa ge guidelines for this command. Example console#debug ip dvmrp packet debug ip igmp Use the debug ip igmp comma nd to tr ace IG MP pack et r ecepti on and transmission. The receiv e option traces only received IGMP packets and th[...]

  • Page 1195

    Serv icea bili ty T racing P acket Commands 1195 debug ip mcache Use the debug ip mcache co mmand for tracing MD A T A packet reception and transmissio n. The receive op tion traces only received data packets and the transm it option traces only t ransmitted da ta packets. When neither keywor d is used in the command, then all data packet traces ar[...]

  • Page 1196

    1196 Servi ceab ility T raci ng Pa cket Comm ands Syntax debug ip pimdm packet [re ceive | transmit] no debug ip pimdm packet [receive | transmit] Default Conf iguration Display o f PIMDM traces is disabled by def ault. Command Mode P rivileged EXEC mode. User Guidel ines There ar e no usa ge guidelines for this command. Example console#debug ip pi[...]

  • Page 1197

    Serv icea bili ty T racing P acket Commands 1197 Command Mode P rivileged EXEC mode. User Guideli nes There ar e no usa ge guidelines for this command. Example console#debug ip pimsm packet debug ip vrrp Use the debug ip vrrp command to enable VRRP debug protocol messages. Use the “no” form of this command to disable VRRP debug prot ocol messag[...]

  • Page 1198

    1198 Servi ceab ility T raci ng Pa cket Comm ands debug ipv6 mcache Use the debug ipv6 m cache command to trace MD A T Av6 pack et reception and transmissi o n. The rec eive optio n traces only received data packets and the tra nsmit option traces only transm itted da ta packets. When neit her keywor d is used in the command, then all data packet t[...]

  • Page 1199

    Serv icea bili ty T racing P acket Commands 1199 Syntax debug ipv6 mld packet [ receive | transm it ] no de bug ip v6 mld pa cket [ receive | transmit ] Default Conf iguration Display of M L D traces is disa bled by default. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no usa ge guidelines for this command. Example console#debug [...]

  • Page 1200

    1200 Servi ceab ility T raci ng Pa cket Comm ands Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug ipv6 pimdm packet debug ipv6 pimsm Use the debug ipv6 pimsm command to trace PIMSMv 6 packet reception and transmissi o n. The rec eive optio n traces only received PIMS Mv6 [...]

  • Page 1201

    Serv icea bili ty T racing P acket Commands 1201 debug isdp Use the debug isdp command to trace ISDP packet r eception and transmissio n. The receive op tion traces only received ISD P packets and the transm it opti on traces only transmitte d ISDP p ackets. When neither keyword is used in the command, then all ISDP packet traces are dumped. V ital[...]

  • Page 1202

    1202 Servi ceab ility T raci ng Pa cket Comm ands Default Conf iguration Display o f LACP t races is disable d by default. Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug lacp packet debug mldsno oping Use the debug m ldsnooping command to trace MLD snooping packet recep [...]

  • Page 1203

    Serv icea bili ty T racing P acket Commands 1203 Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug mldsnooping debug osp f Use the debug ospf comma nd to enable traci ng of OSPF packets received and transmitted by the swit ch. Use the “no” form of this command to disable tracin g of OSPF packets. Syntax d[...]

  • Page 1204

    1204 Servi ceab ility T raci ng Pa cket Comm ands Syntax debug ospfv3 packet no debug ospfv3 packe t Default Conf iguration Display of OSPFv3 traces is disabled b y default. Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug ospfv3 packet debug p ing Use the debug ping comma[...]

  • Page 1205

    Serv icea bili ty T racing P acket Commands 1205 Usage Guideli nes There ar e no usa ge guidelines for this command. Example The following ex ample displays. console#debug ping packet debug r ip Use the debug rip comma nd to enable t racin g of RI P requests and respons es. Use the “no ” form of th is comm and to disa ble traci ng of RIP reques[...]

  • Page 1206

    1206 Servi ceab ility T raci ng Pa cket Comm ands Syntax debug sflow packet no debug sflow packet Default Conf iguration Display o f sFlow trace s is disabled by defaul t. Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug sflow packet debug spa nning-tree Use the d ebug spa[...]

  • Page 1207

    Serv icea bili ty T racing P acket Commands 1207 Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug spanning-tree bpdu show debu gging Use the show d ebugg ing command to display pack et tracing configurations. Syntax show debugging no show de bugging Default Conf iguration [...]

  • Page 1208

    1208 Servi ceab ility T raci ng Pa cket Comm ands[...]

  • Page 1209

    sFlow Commands 1209 65 sFlow Comma nds This chapter exp lains the following commands: • sflow destinat ion • sflo w pollin g • sflow poll ing (Interf ace M ode) •s f l o w s a m p l i n g • sflow sampling (Interface M ode) •s h o w s f l o w a g e n t • show sflow dest ination • sh ow sflo w poll ing • show sflow sa mpling[...]

  • Page 1210

    1210 sFlow Command s sflow destination Use the sflow destination co mmand to configure the sF low collector parameters (owner string, receiver ti meout, m axdatagram, ip address and port). Use the “no” form of this com mand to set r eceiver parameters to the default or remove a r eceiver . Syntax sflow rcvr_index destinatio n { ip-addres s [ po[...]

  • Page 1211

    sFlow Commands 1211 Default Conf iguration No receivers ar e configured by default. The default IP addr ess is 0.0.0.0 The default maximum datagram size is 1 400. The default owner string is the empty string. The def ault rece iver timeou t is 0. The default port is 6343. Command Mode Global Configuration mode. User Guideli nes This command has no [...]

  • Page 1212

    1212 sFlow Command s • interfaces — The list of interfaces to poll. • poll-interval — The s Flow instance pollin g interv al. A poll int erval of 0 disables cou nter sampling. A va lue of n means once in n second s a counter samp le is generat ed. (R ange: 0 –8640 0). Default Conf iguration There ar e no p ollers configured by default. Th[...]

  • Page 1213

    sFlow Commands 1213 Default Conf iguration There ar e no p ollers configured by default. The def ault poll i nterval is 0. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example console(config-if-1/g2)#sflow 1 polling 6055 sflow sampling Use the sflow samplin g command to enable a new sflo[...]

  • Page 1214

    1214 sFlow Command s Default Conf iguration There ar e no sam plers configured by default. The default sampling rate is 0. The default maximum header size is 1 28. Command Mode Glo bal C onf igura tion mode . User Guidel ines This command has no user guidelines . Example console(config)#sflow 1 sampling ethernet 1/g2 1500 50 sflow sampling (Interfa[...]

  • Page 1215

    sFlow Commands 1215 Default Conf iguration There ar e no samplers configured by default. The default sampling rate is 0. The default maximum header size is 12 8. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example console(config-if-1/g15)#sflow 1 sampler 1500 50 show sflow ag ent Use th[...]

  • Page 1216

    1216 sFlow Command s Example console#show sflow agent sFlow Version.................................. 1.3;Dell Corp.;10.23.18.28 IP Address..................................... 0.0.0.0 show sflow destination Use the show sflow destination command to display all the configuration information r e lated to the sFlow receivers. Syntax show sflow rcvr -[...]

  • Page 1217

    sFlow Commands 1217 Example console# show sflow 2 destination Receiver Owner Time out Max Datagram Port IP Address Index String Size -------- -------- ---------- ------------ ----- ------------------ 2 0 1400 6343 0.0.0.0 show sflow polling Use the show sflow polling command to disp lay the sFlow polling instances created on the switch. Syntax show[...]

  • Page 1218

    1218 sFlow Command s Example console# show sflow 1 polling Poller Receiver Poller Data Source Index Interval ----------- ------- ------- 1/g1 1 0 show sflow sampling Use the show sflow sampling command to display the sFlow samp ling instances cre ated o n the switch. Syntax show sflow rcvr -index sampling [ eth ernet interfaces ] • rcvr-inde x ?[...]

  • Page 1219

    sFlow Commands 1219 Example console# #show sflow 1 sampling Sampler Receiver Packet Max Header Data Source Index Sampling Rate Size ----------- ------- ------------- ---------- 1/g1 1 0 128 Sampler Data Source The sFlowDataSource (unit/port) for this sFlow sampler . This agent will support Physical ports only . Receiver I ndex The sFlow Receiv er c[...]

  • Page 1220

    1220 sFlow Command s[...]

  • Page 1221

    SNMP Co mm ands 1221 66 SNMP Co mmands This chapter exp lains the following commands: •s h o w s n m p • show snmp engi neID • sh ow sn mp filt ers •s h o w s n m p g r o u p s • show snmp users •s h o w s n m p v i e w s • show trapf lags • snmp-serv er community • sn mp-server comm unity-group • snmp-serv er contact • sn mp-[...]

  • Page 1222

    1222 SNMP Command s show snmp Use the show snmp command in P ri vileged EXEC mode to display the SNMP communications status. Syntax show snmp Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example displays the SNMP comm[...]

  • Page 1223

    SNMP Co mm ands 1223 Target Address Type Community Version UDP Filter TO Retries Port name Sec -------------- ------ --------- ------- ---- ------ --- ----- 192.122.173.42 Trap public =2 162 filt1 15 3 192.122.173.42 Inform public 2 162 filt2 15 3 Version 3 notifications Target Address Type Username Security UDP Filter TO Retries Level Port name Se[...]

  • Page 1224

    1224 SNMP Command s show snmp filters Use the show snmp filters command in Privileged EXEC mode to display the configuration of filters. Syntax show snmp filters filtername • filternam e — Sp ecifies the nam e of the filter . (R ange: 1-30 ) Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode Use[...]

  • Page 1225

    SNMP Co mm ands 1225 Name OID Tree Type ------------------- --------------------------------- - user-filter1 1.3.6.1.2.1.1 Included user-filter1 1.3.6.1.2.1.1.7 Excluded show snmp gr oups Use the show snmp groups command in P rivileged EXEC mode to display the configuration of groups. Syntax show snmp group s [ groupname ] • groupname — Sp ecif[...]

  • Page 1226

    1226 SNMP Command s managers-group V3 NoAuth-priv Default "" "" console# show snmp groups user-group Name Security Views Model Level Read Write Notify ----------------- ------ ------ -------- -------- ------- user-group V3 Auth-Priv Default "" "" The following table contains field descriptions. show snmp use [...]

  • Page 1227

    SNMP Co mm ands 1227 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example displays the configuration of users with the user name specified. Console # show snmp users Name Group Name Auth Priv Meth Meth Remote Engine ID[...]

  • Page 1228

    1228 SNMP Command s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following examples display t he configuration of views with and without a view name spec ified. console# show snmp views Name OID Tree Type ----------- ----------[...]

  • Page 1229

    SNMP Co mm ands 1229 show trapfla gs Use the show tr apflags c ommand to show the status of the configu rable SNMP traps . Syntax show t rapflags [os p f | ospfv3] osp f | ospfv3 — Us e this param eter to show detai led OSPF trap stat us information Default Conf iguration There is no default configuration for this command. Command Mode P rivilege[...]

  • Page 1230

    1230 SNMP Command s console#show trapflags ospf OSPF Traps: errors: all.......................... ....Disabled authentication failure....... ....Enabled bad packet................... ....Enabled config error................. ....Enabled virt authentication failure . ....Disabled virt bad packet.............. ....Disabled virt config error..........[...]

  • Page 1231

    SNMP Co mm ands 1231 Syntax snmp-ser ver comm unity community - string { ro | rw | su } [ ipaddress ipaddress ] [ view viewn ame ] no snmp -serv er commu nity community-string • community -strin g — P ermits access to the SNMP protocol. (Ran ge: 1-20 characte rs) • ro — Indica tes read- only access • rw — Indicates r ead-write access. ?[...]

  • Page 1232

    1232 SNMP Command s Example The following example co nfigures community access string publi c to per mit administrati ve access to SNMP at an administrative statio n with IP addr e ss 192.168.1 .20. console(config)# snmp-server community public su ipaddress 192.168.1.20 snmp-server community-group Use the snmp-ser v er community-g roup command in G[...]

  • Page 1233

    SNMP Co mm ands 1233 Example The following example maps a commu nity access string dell_community to group dell_group. console(config)# snmp-server community-group dell_community dell_group 192.168.29.1 snmp-ser ver contact Use the snmp-se r ver cont act command in Global Configuration mode to set up a system contact (sysContact) st ring. T o remov[...]

  • Page 1234

    1234 SNMP Command s snmp-server enable traps Use the snmp-ser v er ena ble trap s command to enabl e SNMP traps globally or t o e n a b l e s p e c i f i c S N M P t r a p s . U s e t h e “ n o ” f o r m o f t h i s c o m m a n d t o d i s a b l e S N M P t r a p s . S ee G r a n u l ar O S P F v 2 / v 3 T r a p s f o r m or e d et a i l a b ou[...]

  • Page 1235

    SNMP Co mm ands 1235 Command Mode Global Configuration mode. User Guideli nes There ar e no user gui delines for this command. Example The following example displays the opti ons for the snmp-ser ver enabl e traps command. console(config)#snmp-server enable traps ? <cr> Press enter to execute the command. acl acl all Enable/Disable all Traps.[...]

  • Page 1236

    1236 SNMP Command s no snmp -server en able tra ps authen tication Default Conf iguration T ra ps are enabled by default. Command Mode Global Configuration mode User Guidel ines This command has no user guidelines . Example The follow ing example displays the comm and to enable authentica tion faile d SNMP trap s. console(config)# snmp-server enabl[...]

  • Page 1237

    SNMP Co mm ands 1237 Default Conf iguration The engi neID is not configured. Command Mode Global Configuration mode User Guideli nes If you want to use SNMPv3, you need to specify an engine ID for the device. Y ou can specify your own ID or use a defa ult string that is generated using the MAC addr ess of the device. If the SNMPv3 engine ID is dele[...]

  • Page 1238

    1238 SNMP Command s Syntax snmp-ser ver filter filter -name oi d-tree { included | excluded } no snmp-ser ver fi lter filter -name [ oid-tree ] • filter -n ame — Specifies th e label for the filter record that is being updated or created. The name is used to reference the recor d. (Range: 1-30 characte rs.) • oid-tree — Sp ecifies the objec[...]

  • Page 1239

    SNMP Co mm ands 1239 console(config)# snmp-server filter user-filter ifEntry.*.1 included snmp-ser ver group Use the snmp-se rv er group co mma nd in Gl obal Co nfig ura tio n m ode to configure a new Simple Mana g ement P rot ocol (SNMP) group or a table that maps SNMP users t o SNMP view s. T o remove a specified SNMP group, use the no form of th[...]

  • Page 1240

    1240 SNMP Command s • writeview — A str ing that is the name of t he view that enables t he user to enter data and configu re the contents of the agent. If unspecified, nothin g is defined for the w rite view . (Range: 1-30 ch aracters.) Default Conf iguration No group entry exists. There will be some default groups for Read/W rite/Super users.[...]

  • Page 1241

    SNMP Co mm ands 1241 These commands are updated to allow space(s) in host name when specified in double quotes. Example #snmp-server host “host name” #snmp-server v3-host “host name” Syntax snmp-ser ver host { ip-addres s | hostname } community { traps { v1 | v2 } | informs [ time out seconds ] [ retries re t r i e s ]} [ udpport port ] [ f[...]

  • Page 1242

    1242 SNMP Command s Command Mode Global Configuration mode User Guidel ines There ar e no user gui delines for this command. Example The following e xample enables SN MP traps for host 192.16.12.143 . console(config)# snmp-server host 192.16.12.143 Dell_powerconnect traps v2 snmp-server location Use the snmp-se r ver locat ion command in Global Con[...]

  • Page 1243

    SNMP Co mm ands 1243 Example The f ollowin g exam ple sets the devi ce locati on as "N ew_Y ork". console(config)# snmp-server location New_York snmp-serve r user Use the snmp-se rv er user command in Global Configuration mode to configure a new SNMP V ersion 3 us er . T o delete a user , use the no f o r m o f t h i s command. Syntax snm[...]

  • Page 1244

    1244 SNMP Command s • priv-des — The CB C-DES Symme tric Encryption privacy level. Enter a password. • priv-des-key — T he CBC-DE S Symmetric Encryption privacy level. The user should ente r a pregenerated MD5 or SHA key dependi ng on the authen tication le vel sel e cted. • des-k ey — The pregenerated D ES encryption key . L engt h is [...]

  • Page 1245

    SNMP Co mm ands 1245 • view -name — Spe cifies the label for the view record that is being created or updated. Th e nam e is used to reference the recor d. (Ra nge: 1-30 characte rs.) • oid-tree — S pecifies the obje ct identifier of the AS N.1 subt ree to be included or excluded from the view . T o identify th e subtree, specify a text str[...]

  • Page 1246

    1246 SNMP Command s snmp-server v3-host Use the snmp-ser v er v3-host command in Global Configuration mode to specify the recipient of Simple Network Manageme nt Protocol V e rsion 3 notifications. T o remove the specified host, use the no form of this command. Syntax snmp-ser ver v3-host { ip- ad dress | hostname } username { tra ps | info rm s } [...]

  • Page 1247

    SNMP Co mm ands 1247 Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The followi ng e xampl e ident ifies an SNMPv 3 host . console(config)# snmp-server v3-host 192.168.0.20[...]

  • Page 1248

    1248 SNMP Command s[...]

  • Page 1249

    SSH Commands 1249 67 SSH Commands This chapter exp lains the following commands: •c r y p t o k e y g e n e r a t e d s a • cryp to key generate rsa • cryp to key pubkey-chain ssh • ip ssh port • ip ssh pubkey-auth •i p s s h s e r v e r •k e y - s t r i n g • show cr ypto k ey mypubk ey • show cr ypto k ey pubk ey-cha in ssh •s[...]

  • Page 1250

    1250 SSH Commands crypto key ge nerate dsa Use the crypto key generate dsa command in Global Configuration mode to generate DSA key pairs for you r switch. A k ey pair is on e public DS A key and one pri vate DSA k ey . Syntax crypto key gene rate dsa Default Conf iguration DSA k ey pairs do not e xist. Command Mode Glo bal C onf igura tion mode Us[...]

  • Page 1251

    SSH Commands 1251 Default Conf iguration RSA k ey pai rs do not exist . Command Mode Global Configuration mode User Guideli nes RSA k eys ar e gener ated in pa irs: one pub lic RSA k ey and o ne private RSA key . If your switch alr eady has RSA k eys when you is sue this command, you ar e warned and prompt ed to replace the existing keys. The k ey [...]

  • Page 1252

    1252 SSH Commands Example The following example enters t he SSH P ublic Key-chai n configurati on mode. console#configure console(config)#crypto key pubkey-chain ssh console(config-pubkey-chain)#user-key bob rsa console(config-pubkey-key)#key-String AAAAB3NzaC1yc2EAAAADAQABAAABAQCvTnRwPWlAl4kpqIw9GBRon ZQZxjHKcqKL6rMlQ+ZNXfZSkvHG+QusIZ/76ILmFT34v7u[...]

  • Page 1253

    SSH Commands 1253 User Guideli nes This command has no user guidelines. Example The following example specifies the port to be used by the SSH server as 8080. console(config)#ip ssh port 8080 ip ssh pubkey-a uth Use the ip ssh pubkey-auth command in Global Co nfiguration mode to enable public key authentication for in coming SSH sessions. T o disa [...]

  • Page 1254

    1254 SSH Commands ip ssh server Use the ip ssh ser ver command in Global Configur ation mode to e nable the switch to be configur ed from SSH. T o disable this funct ion, use the no form of this command. Syntax ip ssh ser ver no ip ssh se rver Default Conf iguration This command is ena bled by d efau lt. Command Mode Glo bal C onf igura tion mode U[...]

  • Page 1255

    SSH Commands 1255 Default Conf iguration By default, th e key-string is emp ty . Command Mode SSH P ubl ic K e y Configuration mode User Guideli nes Use the key-st ring row command to specify which SSH public k ey you will configure interactively ne xt. T o complete the interact ive command, you must enter key-stri ng row with no chara cters. Examp[...]

  • Page 1256

    1256 SSH Commands console(config)#crypto key pubkey-chain ssh console(config-pubkey-chain)#user-key bob rsa console(config-pubkey-key)#key-string row AAAAB3Nza console(config-pubkey-key)#key-string row C1yc2 show crypto ke y mypubkey Use the show crypto key m ypubkey command in P rivileged EXEC mode t o displ ay the SSH publ ic keys of th e swit ch[...]

  • Page 1257

    SSH Commands 1257 dxUXEAiDHXcWHVr0R/ak1HDQitBzeEv1vVEToEn5ddLmRhtIgRdKU JHgBHJV R2VaSN/WC0IK53j9re4B11AE+O3qAxwJs0KD7cTkvF9I+YdiXeOM8 VE4skkw AiyLDNVWXgNQ6iat8+8Mjth+PIo5t3HykYUCkD8B1v93nzi/sr4hH HJCdx7w wRW3QtgXaGwYt2rdlr3x8ViAF6B7AKYd8xGVVjyJTD6TjrCRRwQHg B/BHsFr z/Rl1SYa0vFjel/7/0qaIDSHfHqWhajYkMa4xPOtIye7oqzAOm1b7 6l28uTB luBEoLQ+PKOKMiK8sQ== F[...]

  • Page 1258

    1258 SSH Commands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following exampl e displays all SSH public k eys stor e d on the switch. console#show crypto key pubkey-chain ssh Username Fingerprint -------- ------------------------------------------- --------- bob 9A:CC:01:C5:78:39:27:86:79:C[...]

  • Page 1259

    SSH Commands 1259 show ip ssh Use the show ip ssh command in Pri vi leged EXEC mode to display the SSH server configuration. Syntax show ip ssh Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example displ a ys the SSH se[...]

  • Page 1260

    1260 SSH Commands user -key Use the user-k e y command in SSH Publi c Key Chain Configuration mode to specify which SSH public key you are configuring manually . T o remove a SSH public key , use the no f orm o f t h is com m and. Syntax user -key username { rsa | dsa } no user - key username • usern ame — Sp ecifies the remote S SH clien t use[...]

  • Page 1261

    Syslog Comma nds 1261 68 Syslog Commands This chapter exp lains the following commands: • clea r logging • clea r logging file •d e s c r i p t i o n • level • logging • logging bu ffered • logging cons ole • logging fa cility • logging fil e • logging on • logging snm p • logging web-session •p o r t • sho w logging •[...]

  • Page 1262

    1262 Syslog C ommand s clear lo gging Use the clear logging command in Priv ileg ed EXEC mode to clear messages from the internal logging buffer . Syntax clear logging Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The followi ng ex [...]

  • Page 1263

    Syslog Comma nds 1263 Command Mode P rivileged EXEC User Guideli nes This command has no user guidelines. Example The following example shows the clear logging fil e command and confirmation response. console#clear logging file Clear logging file [y/n] description Use the description command in Logging mode t o descri be the syslog serve r . Syntax[...]

  • Page 1264

    1264 Syslog C ommand s level Use the level command in Logging mode to specify the importance level of syslog me ssages. T o r eset to t he default value, us e the no form of t he command. Syntax level level no level • level — T he level nu mber for syslog messages. (Range: emergency , alert, crit ica l, e rr or , war ning , no ti ce, i nfo, deb[...]

  • Page 1265

    Syslog Comma nds 1265 Default Conf iguration Disabl ed Command Mode Global Configuration User Guideli nes T o see the CLI commands by using the sh ow loggi ng command. Example console(config)#logging cli-command <189> JAN 13 05:20:27 192.168.2.1-1 UNKN[248900192]: cmd_logger_api.c(87) 2113 %% CLI:EIA- 232:----:vlan 3 <189> JAN 13 05:20:[...]

  • Page 1266

    1266 Syslog C ommand s no logging { ip-address | hostname } • ip-add ress — IP addr ess of the host to be used as a sy slog server . • hostna me — Hostname of the host to be used as a syslog server . (Range: 1- 158 ch arac ters) Default Conf iguration No syslog serv ers defined. Command Mode Glo bal C onf igura tion mode User Guidel ines Up[...]

  • Page 1267

    Syslog Comma nds 1267 Command Mode Global Configuration mode User Guideli nes All the syslog messa ges are logged to the internal buffe r . This command limits the commands displ ayed to the user . Example The following e xample limits sy slog messages display ed from an internal buffer based on t he severity leve l "error ." console(conf[...]

  • Page 1268

    1268 Syslog C ommand s Example The following example limits messages logged to th e console based on severity level "alert". console(config)#logging console alert logging facility Use the logging fa cility command in Global Configuration mode to set the facility for logging messages. T o reset to the default value, use the no form of the [...]

  • Page 1269

    Syslog Comma nds 1269 Syntax logging file level no logging fi le • level — Lim its the loggin g of mess ages to the b uffer to a specified level. (Range: emergency , alert, critical, error , warning, notice, info , debug) Default Conf iguration The default value for level is error . Command Mode Global Configuration mode User Guideli nes This c[...]

  • Page 1270

    1270 Syslog C ommand s Command Mode Glo bal C onf igura tion mode User Guidel ines The logging pro cess controls the dist ribution of logging me ssages to the various dest inations, such as the log ging buffer , logging fil e, or syslog server . Log ging on and off for these destinations can be individually configur ed using the logging b uffered ,[...]

  • Page 1271

    Syslog Comma nds 1271 logging we b-session Use the log gin g w eb -ses sio n command in Global Configuration mode to enable web session logging. T o disable, use the no form of this command. Syntax logging we b-session no logging web-session Default Conf iguration Disabl ed. Command Mode Global Configuration mode User Guideli nes T o see web se ssi[...]

  • Page 1272

    1272 Syslog C ommand s no port • port — The port number for syslog messages. (Ran ge: 1-65535) Default Conf iguration The default port number is 514. Command Mode Log gi ng m od e User Guidel ines After entering the view corresponding to a specific syslog server , the command can be executed to set the port number for th e server . Example The [...]

  • Page 1273

    Syslog Comma nds 1273 Example The following example displays the state of logging and the syslog messages stored in the intern al buffer . console#show logging Logging is enabled. Console logging: level debugging. console Mes sages: 0 Dropped. Buffer logging: level debugging. Buffer Messag es: 11 Logged, 200 Max. File logging: level notifications. [...]

  • Page 1274

    1274 Syslog C ommand s 11-Aug-2005 15:41:43: %LINK-3-UPDOWN: Inte rface Ethernet g1, changed state to up 11-Aug-2005 15:41:43: %LINK-3-UPDOWN: Inte rface Ethernet g1, changed state to up 11-Aug-2005 15:41:43: %LINK-3-UPDOWN: Inte rface Ethernet g2, changed state to up 11-Aug-2005 15:41:43: %LINK-3-UPDOWN: Inte rface Ethernet g3, changed state to up[...]

  • Page 1275

    Syslog Comma nds 1275 User Guideli nes This command has no user guidelines. Example The following example displays the state of logging and syslog mes sages sor te d in th e lo ggi ng fi le. console#show logging file Persistent Logging : enabled Persistent Log Count : 1 <186> JAN 01 00:00:05 0.0.0.0-1 UNKN[268434928]: bootos.c(382) 3 %% Event[...]

  • Page 1276

    1276 Syslog C ommand s IP address Port Severity Facility Description ------------------------------------------- -------------- 192.180.2.275 14 Info local7 7 192.180.2.285 14 Warning local7 7[...]

  • Page 1277

    System Ma nageme nt Comman ds 1277 69 System Ma nageme nt Co mmands This chapter exp lains the following commands: •a s s e t - t a g •b a n n e r m o t d • banner mot d acknowl edge • clear checkp oint statis tics •c u t - t h r o u g h m o d e •h o s t n a m e • initiate fai lover •m e m b e r • mov em anag em ent • no standby[...]

  • Page 1278

    1278 System Ma nage ment Comma nds • show su pported switchtype •s h o w s w i t c h • show system • show system id • show tech-support •s h o w u s e r s •s h o w v e r s i o n •s t a c k •s t a c k - p o r t •s t a n d b y •s w i t c h p r i o r i t y • switch r enumbe r •t e l n e t • traceroute[...]

  • Page 1279

    System Ma nageme nt Comman ds 1279 asset-tag Use the asset -tag command in Global Configur ation mode to sp ecify the switch a sset ta g. T o remove the existing a sset tag , use the no form of the command. Syntax asset-ta g [unit] tag no asset- tag [un it ] • unit — S witch numb er . (Ran ge: 1–1 2) • tag — The switch asset ta g. Default[...]

  • Page 1280

    1280 System Ma nage ment Comma nds Syntax banner m otd no banner motd Default Conf iguration The banne r is disabl ed by defau lt. Command Mode Global Configuration mode User Guidel ines This command has no user guidelines . Example console(config)# banner motd “IMPORTANT: There is a power shutdown at 23:00hrs today, duration 1 hr 30 minutes.” [...]

  • Page 1281

    System Ma nageme nt Comman ds 1281 Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example console(config)# banner motd “ There is a power shutdo wn at 23:00hrs t oday , duration 1 hr 30 minutes.” console(config)# banner motd acknowled[...]

  • Page 1282

    1282 System Ma nage ment Comma nds Command Mode P rivileged EXEC mode User Guidel ines When nonstop forwarding is enabled on a stack, the stack's management unit checkpoints operationa l data to the back up unit. If the backup unit takes over as the management unit, the contro l plane on the ne w management unit uses the checkpointed data when[...]

  • Page 1283

    System Ma nageme nt Comman ds 1283 Example console(config)#cut-through mode The mode (enable) is effective from the next reload of Switch/Stack. hostname Use the host name command in Gl o bal Configuration mode to specify or modify the switch host name. T o re stor e th e default host name, use the no form of the command. Syntax host name name no h[...]

  • Page 1284

    1284 System Ma nage ment Comma nds Syntax This command has no user guidelines . Default Conf iguration There is no default configuration. Command Mode Stack Configuration mode User Guidel ines This command forces a warm restart of the stack. The backup unit t akes over as the new management unit without clea ring the hardware state on any of the st[...]

  • Page 1285

    System Ma nageme nt Comman ds 1285 Syntax membe r unit switchinde x no mem ber unit • unit — The s witch id entifier of th e switch to b e add ed or removed from the stack. (Ran ge: 1–12) • switchind ex — The index into the database of the supported switch types, indicating t he type of t he switch b eing preconfigured. The switch in dex [...]

  • Page 1286

    1286 System Ma nage ment Comma nds Default Conf iguration This command has no default configuration. Command Mode Stack Global Configuration mode User Guidel ines Upon ex ecut ion, the entire stack, including all interfaces in the stack, are unconfigured and r econ figured with the configuration on the new Management Switch. After the r eload is co[...]

  • Page 1287

    System Ma nageme nt Comman ds 1287 Command Mode Stack Global Configuration User Guideli nes No specific guideline s. Example console(config)#stack console(config-stack)#no standby Fastpath will automatically select a standby[...]

  • Page 1288

    1288 System Ma nage ment Comma nds nsf Use this command to enable non-stop forwarding. The “no” form of the command will disable NSF . Syntax nsf no nsf Default Conf iguration Non-stop forwarding is e nabled by default. Command Mode Stack Global Configuration mode User Guidel ines Nonstop forwarding allows the for w arding p lane of stack units[...]

  • Page 1289

    System Ma nageme nt Comman ds 1289 • interva l — The tim e between E cho Requests, in seconds (Ra nge: 1–60 seconds). • size — Nu mber of data bytes in a packet (Ra nge: 0–65 507 by tes). Default Conf iguration The default count is 4. The def ault interv al is 3 sec onds. The def ault size is 0 data by tes. Command Mode User EXEC mode P[...]

  • Page 1290

    1290 System Ma nage ment Comma nds console#ping yahoo.com Pinging yahoo.com [66,217,71,198] with 64 bytes of data; 64 bytes from 10.1.1.1: icmp_seq=0. time=11 ms 64 bytes from 10.1.1.1: icmp_seq=1. time=8 ms 64 bytes from 10.1.1.1: icmp_seq=2. time=8 ms 64 bytes from 10.1.1.1: icmp_seq=3. time=7 ms ----10.1.1.1 PING Statistics---- 4 packets transmi[...]

  • Page 1291

    System Ma nageme nt Comman ds 1291 Management switch has unsaved changes. Would you like to save them now? (y/n) n Configuration Not Saved! Are you sure you want to reload the switch? (y/n) y Reloading management switch 1. set description Use the set desc ription command in Stack Global Configura t ion mode to associate a text description wit h a s[...]

  • Page 1292

    1292 System Ma nage ment Comma nds show boot- version Use the show boot-versi on comm and to displ ay the boot imag e versi on details. The detai ls available to the user include th e build date and time. Syntax show boot -version [unit] • unit — The s witch id entifier . (Ran ge: 1–12 ) Default Conf iguration This command has no default conf[...]

  • Page 1293

    System Ma nageme nt Comman ds 1293 Command Mode P rivileged EXEC mode User Guideli nes When nonstop forwar ding is enabled on a stack, the stack's managem ent unit checkpoints operation al data to the back up unit . If the backup unit takes over as the management unit, the control pl ane on the new managem ent unit uses the checkpointe d data [...]

  • Page 1294

    1294 System Ma nage ment Comma nds Default Conf iguration This command has no default configuration. User Guidel ines No specific guideline s. Example Console#show cut-through mode Current mode : Enable Configured mode : Disable (This mode is effective on next reload) show memory cpu Use the show memory cpu com mand to check the total and av ailabl[...]

  • Page 1295

    System Ma nageme nt Comman ds 1295 Total Memory................................... 262144 KBytes Available Memory Space......................... 121181 KBytes show nsf Use the show nsf command to show the status of non-stop forwarding. Syntax show nsf Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mo[...]

  • Page 1296

    1296 System Ma nage ment Comma nds Copy of Running Configuration to Backup Uni t: Status.................................. .... Stale Time Since Last Copy........................ 0 days 4 hrs 53 mins 22 secs Time Until Next Copy.................... .... 28 seconds Unit NSF Support ---- ----------- 1 Yes 2 Yes 3 Yes show process c pu Use the show pr[...]

  • Page 1297

    System Ma nageme nt Comman ds 1297 status bytes ------ ---------- free 64022608 alloc 151568112 CPU Utilization: PID Name 5 Sec 1 Min 5 Min --------------------------------------------- ------------ 328bb20 tTffsPTask 0.00% 0 .00% 0.02% 3291820 tNetTask 0.00% 0 .00% 0.01% 3295410 tXbdService 0.00% 0 .00% 0.03% 347dcd0 ipnetd 0.00% 0 .00% 0.01% 348a[...]

  • Page 1298

    1298 System Ma nage ment Comma nds 62038a0 dot1s_timer_task 0.00% 0.00% 0.03% 687f360 dot1xTimerTask 0.00% 0.06% 0.07% 6e23370 radius_task 0.00% 0.00% 0.01% 6e2c870 radius_rx_task 0.00% 0.06% 0.03% 7bc9030 spmTask 0.00% 0.09% 0.01% 7c58730 ipMapForwardingTask 0.00% 0.06% 0.03% 7f6eee0 tRtrDiscProcessingTask 0.00% 0.00% 0.01% b1516d0 dnsRxTask 0.00%[...]

  • Page 1299

    System Ma nageme nt Comman ds 1299 show sessions Use the show session s com ma nd i n Priv ile ged EX EC m ode to dis pla y a l ist of the open telnet sess ions to remote hosts. Syntax show sessions Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelin[...]

  • Page 1300

    1300 System Ma nage ment Comma nds show stack- port Use the show stack- port command in P rivileged EXEC mode to display summary stack-port inform ation for all interfaces. Syntax show stack-po rt Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines[...]

  • Page 1301

    System Ma nageme nt Comman ds 1301 show stack- port counters Use the show stac k-port counters command in P rivileged EXEC mo de to display summary dat a counter information for all interfaces. Syntax show stack-po rt counters Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This [...]

  • Page 1302

    1302 System Ma nage ment Comma nds Example The followi ng ex ample displays informatio n about the summary stack -port counters. console#show stack-port counters ----------TX-------------- ----------RX-------------- Data Error Data Error Rate Rate Total Rate Rate Total Unit Interface (Mb/s) (Errors/s) Errors (Mb/s) Errors/s) Errors ----------------[...]

  • Page 1303

    System Ma nageme nt Comman ds 1303 show stack- port diag NOTE: This comma nd is intended only for Fi eld Applica tion Engine ers (F AE) and devel opers. An F AE will adv ise when to run thi s command and ca pture this info rmat ion. Use the show stack- port diag command in P rivileged EXEC mode to display front panel stacking diagnostics for each p[...]

  • Page 1304

    1304 System Ma nage ment Comma nds Legend: RBYT : Received Bytes RPKT : Received Packets TBYT : Transmitted Bytes TPKT : Transmitted Packets RFCS : Received Frame Check Sequence Errors RFRG : Received Fragment Errors RJBR : Received Jabber Errors RUND : Received Underrun Errors ROVR : Received Overrun Errors TFCS : Transmit Frame Check Sequence Err[...]

  • Page 1305

    System Ma nageme nt Comman ds 1305 show stack- standby Use the sho w stack-standby c ommand to show the St andby c onfigured in the stack. The show stack-standby command shows the configured or automatically selected standby u nit number . Syntax show stack-sta ndby Default Conf iguration This command has no default configuration. Command Mode P ri[...]

  • Page 1306

    1306 System Ma nage ment Comma nds show suppor ted switchtype Use the show support ed switchtype c o m m a n d i n U s e r E X E C m o d e t o d i s p l a y information about al l supported switch type s. Syntax show supported sw itchtype [ switchindex ] • switchind ex — Sp ecifies the ind ex into the data base of th e supported switch ty pes, [...]

  • Page 1307

    System Ma nageme nt Comman ds 1307 The following example displays the format of the show supporte d switchtype [ switchinde x ] command. console#show supported switchtype 1 Switch Type....................... 0x73950001 Model Identifier.................. 6224 Switch Description................ PowerConnect 6224 Management Preference............. 1 E[...]

  • Page 1308

    1308 System Ma nage ment Comma nds show switch Use the show switch com mand in User EXEC mode to display information about all unit s in the stack. Use the sho w switch [ unit ] command to display the i nformation a bout a specif ic unit on t he stack. Syntax show switch [ unit ] • unit — The unit number . Default Conf iguration This command ha[...]

  • Page 1309

    System Ma nageme nt Comman ds 1309 Switch Status..................... OK Switch Description................ PCM8024 Expected Code Type................ 0x100b000 Detected Code Version............. I.12.21.1 Detected Code in Flash............ I.12.21.1 Boot Code Version................. I.12.1 Up Time........................... 1 days 0 hrs 16 mins 3[...]

  • Page 1310

    1310 System Ma nage ment Comma nds This examp le displays informatio n about all units i n the stack. console>show switch Switch Management Preconfig Plugged-in Switch Code Status Model ID Model ID Status Version ------------------------------------------------------------- 1 Mgmt Switch PCM8024 PCM8024 1.0.0.0 Differe nt fields in the displa y [...]

  • Page 1311

    System Ma nageme nt Comman ds 1311 Status Parameters for NSF The show switch com mand is used to display which unit is the management unit and which is the backup unit. Gl obal Status P arameters for NSF ar e exp lained as follows: Plugge d-In Mod el Id entif ier This fiel d disp lays t he model ident ifier of the switc h in the s t ack. Mo del Ide[...]

  • Page 1312

    1312 System Ma nage ment Comma nds Last Start up Reason The type of activa tion th at cau sed the so ftware to st art the l ast time. There are four options . “P ower-On” means that t h e switch r ebooted. This coul d have been cause d by a power cycle or an admi nistrati ve “Reload ” command. “ Ad ministra tive Move” means that the adm[...]

  • Page 1313

    System Ma nageme nt Comman ds 1313 (nsf-stack) #show nsf Administrative Status.......................... Enable Operational Status............................. Enable Last Startup Reason............................ Warm Auto-Restart Time Since Last Restart........................ 0 days 16 hrs 52 mins 55 secs Restart In Progress....................[...]

  • Page 1314

    1314 System Ma nage ment Comma nds P er Unit Stat us P arameters ar e explained as follows: show system Use the show system command in User EXEC mode command to display system informati o n. Syntax show system [ unit ] • unit — The unit number . Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User G[...]

  • Page 1315

    System Ma nageme nt Comman ds 1315 Burned In MAC Address: 00FF.F2A3.8888 System Object ID: 1.3.6.1.4.1.674.10895.3011 System Model ID: PCT6248 Machine Type: Dell 48 Port Gigabit Ethernet Temperature Sensors: Unit Temperature (Celsius) Status ---- --------------------- ------ 12 5 O K Fans: Unit Description Status ---- ----------- ------ 1 Fan 1 OK [...]

  • Page 1316

    1316 System Ma nage ment Comma nds show system id Use the show system id command in User EXEC mode to disp lay the system identity information. Syntax show system id [ unit ] • unit — The unit number . Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guidel ines The tag information is on a switc[...]

  • Page 1317

    System Ma nageme nt Comman ds 1317 show tech- support Use the show tech -support comm and to disp lay syst em and con fig urat io n information for use in debugging or co ntacting technical support. The output of the sho w tech-s upport command c ombine s the output of the fol lowing commands: •s h o w v e r s i o n • show sysinfo •s h o w p [...]

  • Page 1318

    1318 System Ma nage ment Comma nds Example console#show tech-support ***************** Show Version ****************** Switch: 2 System Description............................. Powerconnect 6248P, 1.23.0.33 VxWorks 6.5 Machine Type................................... Powerconnect 6248P Machine Model.................................. PCT6248P Serial [...]

  • Page 1319

    System Ma nageme nt Comman ds 1319 System Up Time................................. 0 days 0 hrs 11 mins 47 secs 10/100 Ethernet/802.3 interface(s)............. 4 Gig Ethernet/802.3 interface(s)................ 1 10Gig Ethernet/802.3 interface(s).............. 0 Virtual Ethernet/802.3 interface(s)............ 0 MIBs Supported: --More-- or (q)uit Sel[...]

  • Page 1320

    1320 System Ma nage ment Comma nds Example The followi ng ex ample displays a list of active users a nd the informatio n about the m. console#show users Username Protocol Location -------- -------- ------------ Bob Serial John SSH 172.16.0.1 Robert HTTP 172.16.0.8 Betty Telnet 172.16.1.7 show version Use the show version command in User EXEC mode t[...]

  • Page 1321

    System Ma nageme nt Comman ds 1321 Example The following exampl e displays a system version (this v ersion number is only for demonstration purposes). console>show version Image Descriptions image1 : default image image2 : Images currently available on Flash --------------------------------------------- ------------- unit image1 image2 current-a[...]

  • Page 1322

    1322 System Ma nage ment Comma nds Example The fo llowing example sets the m ode to Stac k Global C onfig. console(config)#stack console(config-stack)# stack-por t Use the stack-port command in Stack Configurat ion mode to configure Sta ck ports a s either St acking ports or as Et hernet ports. This command is used to configure CX -4 ports t o be e[...]

  • Page 1323

    System Ma nageme nt Comman ds 1323 standby Use the standby comma nd to co nfigure the st andby in the stack . This un it come s up a s the master when t he st ack fai lover occur s. Us e the no form of this c ommand t o reset to defau lt, in which case, F ASTP A TH automatically sel ect s a st andb y fro m th e existi ng s tac k units if there no p[...]

  • Page 1324

    1324 System Ma nage ment Comma nds • val ue — The priority of one back up sw itch ov er ano ther . (R ange: 0–1 2) Default Conf iguration The switch priority defaults to the hardwar e management preference value of 1. Command Mode Global Configuration mode User Guidel ines Switche s that do not ha ve the hardware capab ility to b ecome the Ma[...]

  • Page 1325

    System Ma nageme nt Comman ds 1325 User Guideli nes This command is ex ecuted on the Management Switch. Example The following example displ ay s how to reconfigur e switch number “1” to an identifier of “2.” console(config)#switch 1 renumber 2 telnet Use the telnet command in Pri v ileged EXEC mode to log into a host that supports T elnet. [...]

  • Page 1326

    1326 System Ma nage ment Comma nds Keywords T a ble Port T able Options De scription debug Enable teln et debuggi ng mode. line Enabl e teln et lin emod e. loca lecho E nable te ln et loca lech o. <cr> Press ENTER to execute th e command. < port > Enter th e port number . Keywor d D escr iption Port Number bgp Bor der Gateway P rotocol [...]

  • Page 1327

    System Ma nageme nt Comman ds 1327 Example F ollowing is an examp le o f using the telne t command to connect to 176.213.1 0.50. console#telnet 176.213.10.50 Esc U sends telnet EL tracerou te Use the tracero ute command in P rivileged EXEC mod e to discover the IP routes tha t packets actual ly take when trave ling to thei r destinati ons. Y ou can[...]

  • Page 1328

    1328 System Ma nage ment Comma nds •Y o u c a n e n t e r trac eroute to wi thou t spe cify ing th e IP add ress an d hostname, and specify values for the traceroute parameters. Syntax tracer oute [ i p | ip v6 ] ipaddr ess | hostname [ initTtl initTtl ] [ ma xTtl maxTtl ] [ maxF ai l maxF ail ] [ inter v al interval ] [ co unt count ] [ port por[...]

  • Page 1329

    System Ma nageme nt Comman ds 1329 Command Mode P rivileged EXEC mode. User Guideli nes There ar e no user gui delines for this command. Examples The following exampl e discovers the routes that packet s will actually tak e when traveling to the destination spec ified in the command. console#traceroute 192.168.77.171 Tracing route over a maximum of[...]

  • Page 1330

    1330 System Ma nage ment Comma nds Tracing route over a maximum of 20 hops 1 192.168.21.1 30 ms 10 ms 10 ms 2* * * 3* * * 4* * * 5* * *[...]

  • Page 1331

    T e lnet S er ver Co mmands 1331 70 T elnet Serve r Commands This chapter exp lains the following commands: • ip telnet server d isable • ip telnet port •s h o w i p t e l n e t[...]

  • Page 1332

    1332 T e lnet Se rver C ommand s ip telnet server disable The ip telnet server disable com mand is used to enable/disable the T elnet service on the switch. Syntax ip telnet ser v er disable no ip tel net ser ver disa ble Para mete r R ange s Not applicab le Command Mode Global Configuration Usage Guideli nes No specific guideline s. Default V alue[...]

  • Page 1333

    T e lnet S er ver Co mmands 1333 Default Conf iguration This command has no default configuration. Command Mode Global Configuration Usage Guideli nes No specific guideline s. Example console(config)#ip telnet port 45 console(config)#no ip telnet port show ip telnet The show ip te lnet command displ ays the s tatus of the T eln et serv er and the T[...]

  • Page 1334

    1334 T e lnet Se rver C ommand s[...]

  • Page 1335

    User Int erfac e Comman ds 1335 71 User Interface Commands This chapter exp lains the following commands: •e n a b l e •e n d •e x i t •q u i t[...]

  • Page 1336

    1336 User In terface Comman d s enable Use the enable command in User EXEC mode to en ter the Privileged EXEC mode. Syntax enable Default Conf iguration The default privilege lev el is 15. Command Mode User EXEC mode User Guidel ines If there is no authent icatio n method d efined for en able, then a level 1 use r is not allowed to ex e cute this c[...]

  • Page 1337

    User Int erfac e Comman ds 1337 Command Mode All command modes User Guideli nes No specific guideline s. Example console(config)#end console#end console> exit Use the exit command to go to the next lower com mand promp t. Syntax exit Default Conf iguration This command has no default configuration. Command Mode All command modes e xcept User EXE[...]

  • Page 1338

    1338 User In terface Comman d s Example The following example changes the configuration mode from Interface Con figu rat io n mo de to Use r EXE C m ode . console(config-if-1/g1)# exit console(config)# exit console#exit console> quit Use the quit co mmand in User EXEC mode to close an active terminal session by logging off the swit ch. Syntax qu[...]

  • Page 1339

    W eb Serve r Comma nds 1339 72 W eb Server Commands This chapter exp lains the following commands: • common-name •c o u n t r y • cryp to certificate gen erate • cryp to certificate import • cryp to certificate request •d u r a t i o n • ip http port •i p h t t p s e r v e r • ip ht tps certificate •i p h t t p s p o r t •i p [...]

  • Page 1340

    1340 W e b Serv er Comma nds common- name Use the comm on-name command in Crypto Certificate Generation or Crypto Certifica te Request mod e to specify the common-n ame for the switch. Syntax common-n ame common-name • common-name — Spe cifies the fu lly qualified URL or IP address of the switch . If left unspecified , this par ame ter defau lt[...]

  • Page 1341

    W eb Serve r Comma nds 1341 Default Conf iguration This command has no default configuration. Command Mode Crypto Certificate Generation or Crypto Certificate Reques t mode User Guideli nes This command mode is enter ed using the crypto cert ificate request or cr ypto certificate g enerate command. Example The following example di sp lays how to sp[...]

  • Page 1342

    1342 W e b Serv er Comma nds User Guidel ines This command is not sav ed in the router switch configurat ion; however , the certificate and keys generated by thi s command are saved in the private configuration. This saved information is never displayed to the user or back ed up to anothe r switch . If the RSA keys do not exist, the gener ate param[...]

  • Page 1343

    W eb Serve r Comma nds 1343 If the public ke y fo und in the certific ate d oes not match the switch's SSL RSA key , the command fails. This command is not saved in the ro uter configuration; however , the certificate imported by this command is sav ed in the private configurati on (which is never displaye d t o the user or backed up to anothe[...]

  • Page 1344

    1344 W e b Serv er Comma nds crypto certificate reques t Use the crypto certificate re quest com mand in P rivileged EXEC mode to generate and di splay a certificat e request for H T TPS. This command tak es you to Crypto Certi ficate Requ est mode. Syntax crypto certificate number req uest • number — Spe cifies the certifi cate nu mber . (R an[...]

  • Page 1345

    W eb Serve r Comma nds 1345 dura tion Use the duration command in Crypto Certificate Generation mode to specify the du ration. Syntax duration days • days — Specifies t he num ber of da ys a ce rtification w ould be valid. If left unspe cified, the param eter defa ults to 365 days. (Range : 30–3650 da ys) Default Conf iguration This command d[...]

  • Page 1346

    1346 W e b Serv er Comma nds • port-number — P ort number for u se by the HT TP serv er . (Range: 1–65 535) Default Conf iguration This default port num ber is 80 . Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines. However , specifying 0 as the port number effectively disables HT TP access to the[...]

  • Page 1347

    W eb Serve r Comma nds 1347 Example The following example enables the switch to be configured from a browser . console(config)#ip http server ip https certificate Use the ip https certificate comm and in Global Configuration mode to configure the activ e certifi cate for HT TPS. T o return to the default s etting, use the no form of this command. S[...]

  • Page 1348

    1348 W e b Serv er Comma nds Syntax ip https port port-number no ip htt ps port • port-number — P ort number for u se by the secure HT TP server . (Range: 1–65 535) Default Conf iguration This default port number is 443. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following exa[...]

  • Page 1349

    W eb Serve r Comma nds 1349 User Guideli nes Y ou must use the crypto certificate generate command t o gene rate the HTTPS certi fic ate. Example The following example enables the switch to be configured from a browser . console(config)#ip https server key-ge nerate Use the key-gene rate command in Crypto Certificate Generation mode to speci fy the[...]

  • Page 1350

    1350 W e b Serv er Comma nds location Use the location command in Cryp to Cert ificate Generation or C rypto Certifica te Request mode to spec ify the loca tion or city name. Syntax location location • loca tion — Sp ecifies th e locatio n or c ity nam e. (Ra nge: 1– 64 cha racte rs) Default Conf iguration This command has no default configur[...]

  • Page 1351

    W eb Serve r Comma nds 1351 Command Mode Crypto Cert ificate Generation o r Crypto Certificate R equest mode User Guideli nes This command mode is enter ed using the crypto cert ificate request or cr ypto certificate g enerate command. Example The following example displays how to specify t he "general motors" organization-unit. console(c[...]

  • Page 1352

    1352 W e b Serv er Comma nds NnH/xQSGA2ffkRBwU2XIxb7n8VPsTm1xyJ1t11a1GaqchfMqqe0km fhcoHSWr yf1FpD0MWOTgDAwIDAQABo4IBojCCAZ4wEwYJKwYBBAGCNxQCBAYe BABDAEEw CwR0PBAQDAgFGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFAf4 MT9BRD47 ZvKBAEL9Ggp+6MIIBNgYDVR0fBIIBLTCCASkwgdKggc+ggcyGgcls ZGFwOi8v L0VByb3h5JTIwU29mdHdhcmUlMjBSb290JTIwQ2VydGlmaWVyLENO PXNlcnZl -----E[...]

  • Page 1353

    W eb Serve r Comma nds 1353 Example The following example displays the HTTP server configuration. console#show ip http HTTP server enabled. Port: 80 show ip https Use the show ip http command in P rivileged EXEC mode t o display the HTTP S server configuration. Syntax show ip https Default Conf iguration This command has no default configuration. C[...]

  • Page 1354

    1354 W e b Serv er Comma nds Finger print: DC789788 DC88A988 127897BC BB789788 Certificate 2 is inactive Issued by: self-signed Valid from: 8/9/2003 to 8/9/2004 Subject: CN= router.gm.com, 0= General Motors, C= US Finger print: 1873B936 88DC3411 BC8932EF 782134BA The following example dis plays the H TTP S server configuration wi th DH Key excha n [...]

  • Page 1355

    W eb Serve r Comma nds 1355 state Use the state command in Crypto Certificate Generation or Cry p to Cert ific ate Re quest m ode t o speci fy th e state or pr ovince name. Syntax state stat e • state — Specifies th e state or provin ce name. (Range: 1–64 charact ers) Default Conf iguration This command has no default configuration. Command M[...]

  • Page 1356

    1356 W e b Serv er Comma nds[...]