Dell PC6248 manuale d’uso

Dell PowerConnect 6200 Series System CLI Reference Guide Regulatory Models: PC6224, PC6248, PC6224P , PC6248P , and PC6224F[...]

Notes NOTE: A NOTE indica tes imp ortan t inf ormat ion t hat hel ps you mak e bett er us e of your co mputer . ________ _________ Information in this publication is subject to change without notice. © 2011 Dell Inc. Al l right s reserve d. Reprodu ctio n of these m ateri als in any manner whatsoe ver with out the w ritte n permission o f Dell Inc[...]

Content s 3 Contents 1 Command Groups . . . . . . . . . . . . . . . . . . 59 Introd uction . . . . . . . . . . . . . . . . . . . . . . . 59 Comman d Groups . . . . . . . . . . . . . . . . . . . . 59 Mode T ypes . . . . . . . . . . . . . . . . . . . . . . . 64 Layer 2 Command s . . . . . . . . . . . . . . . . . . . . 65 Layer 3 Command s . . . . . .[...]

4 Conte nts aaa au thenticati on login . . . . . . . . . . . . . . . . 194 aaa au thorizatio n network d efault rad ius . . . . . . . 196 enabl e aut henti catio n . . . . . . . . . . . . . . . . . 197 enabl e passwo rd . . . . . . . . . . . . . . . . . . . . 19 8 ip http authenticati on . . . . . . . . . . . . . . . . . 199 ip https authentica tio[...]

Content s 5 show ip acce ss-lists . . . . . . . . . . . . . . . . . . . 218 show ma c ac cess-l ist . . . . . . . . . . . . . . . . . . 219 5 Address T able Commands . . . . . . . . . . . 221 bridg e addres s . . . . . . . . . . . . . . . . . . . . . . 222 bridge ag ing-time . . . . . . . . . . . . . . . . . . . . 223 brid ge mu ltic ast addre ss .[...]

6 Conte nts 6 CDP Interoperability Commands . . . . . . 241 clea r isdp coun ters . . . . . . . . . . . . . . . . . . 242 clea r isdp table . . . . . . . . . . . . . . . . . . . . . 242 isdp adv ertise-v2 . . . . . . . . . . . . . . . . . . . . 243 isd p enab le . . . . . . . . . . . . . . . . . . . . . . . 243 isdp hol dtime . . . . . . . . . . . [...]

Content s 7 8 DHCP Snooping Commands . . . . . . . . . . 261 clear ip dhcp snoopi ng stat isti cs . . . . . . . . . . . . 262 ip dhcp sn ooping . . . . . . . . . . . . . . . . . . . . . 262 ip dhc p snoopi ng bindin g . . . . . . . . . . . . . . . . 263 ip dhc p snoopi ng databas e . . . . . . . . . . . . . . . 264 ip dhc p snoopi ng databa se writ[...]

8 Conte nts ip arp inspectio n trust . . . . . . . . . . . . . . . . . 279 ip arp inspection v alidate . . . . . . . . . . . . . . . 280 ip arp inspectio n vlan . . . . . . . . . . . . . . . . . 281 permit ip ho st mac host . . . . . . . . . . . . . . . . 28 2 show a rp acces s-lis t . . . . . . . . . . . . . . . . . . 282 show ip arp in specti on [...]

Content s 9 show inte rface s de tail . . . . . . . . . . . . . . . . . . 303 show inte rface s st atus . . . . . . . . . . . . . . . . . 307 show sta tist ics ethe rnet . . . . . . . . . . . . . . . . . 310 show s torm- contr ol . . . . . . . . . . . . . . . . . . . 314 shutd own . . . . . . . . . . . . . . . . . . . . . . . . . 316 speed . . . . [...]

10 Conte nts 12 IGMP Snooping Commands . . . . . . . . . . 333 ip igmp snooping (g lobal) . . . . . . . . . . . . . . . 33 4 ip igmp snooping (i nterface) . . . . . . . . . . . . . . 334 ip igmp s noopin g host- time- out . . . . . . . . . . . . 335 ip igmp snooping le ave-time-out . . . . . . . . . . . 336 ip igmp snooping mroute r-time -out . . .[...]

Content s 11 ip igmp s nooping q uerier versio n . . . . . . . . . . . . 351 show ig mp snoop ing quer ier . . . . . . . . . . . . . . 352 14 IP Addressing Commands . . . . . . . . . . . 355 clear ho st . . . . . . . . . . . . . . . . . . . . . . . . 356 ip a ddre ss . . . . . . . . . . . . . . . . . . . . . . . . 356 ip a ddress dhcp . . . . . . .[...]

12 Conte nts 15 IPv6 Access List Commands . . . . . . . . . 371 {deny | permit} . . . . . . . . . . . . . . . . . . . . . 372 ipv6 acc ess- list . . . . . . . . . . . . . . . . . . . . 374 ipv6 acc ess- list re name . . . . . . . . . . . . . . . . 375 ipv6 traff ic-filter . . . . . . . . . . . . . . . . . . . . 376 show i pv6 acces s-lis ts . . . .[...]

Content s 13 18 LACP Commands . . . . . . . . . . . . . . . . . . 393 lacp po rt- priori ty . . . . . . . . . . . . . . . . . . . . . 394 lacp sy stem-p riority . . . . . . . . . . . . . . . . . . . 394 lacp t imeo ut . . . . . . . . . . . . . . . . . . . . . . . 395 show lacp eth ernet . . . . . . . . . . . . . . . . . . . 396 show lacp port -chan[...]

14 Conte nts lldp med . . . . . . . . . . . . . . . . . . . . . . . . 413 lldp med config notification . . . . . . . . . . . . . . 414 lldp med fast startrepeatco unt . . . . . . . . . . . . . 414 lldp med transmit- tlv . . . . . . . . . . . . . . . . . . 41 5 lldp notifi cation . . . . . . . . . . . . . . . . . . . . 416 lldp notifi cation-interva[...]

Content s 15 21 Port Channel Commands . . . . . . . . . . . . 439 channe l- group . . . . . . . . . . . . . . . . . . . . . . 440 inte rface port -chan nel . . . . . . . . . . . . . . . . . . 441 inte rface rang e port -cha nnel . . . . . . . . . . . . . . 441 hashin g-mode . . . . . . . . . . . . . . . . . . . . . . 442 no hashi ng-mo de . . . . .[...]

16 Conte nts cos- queue min -bandw idth . . . . . . . . . . . . . . . 461 cos- queue s trict . . . . . . . . . . . . . . . . . . . . 462 diffser v . . . . . . . . . . . . . . . . . . . . . . . . . 463 drop . . . . . . . . . . . . . . . . . . . . . . . . . . . 464 mark cos . . . . . . . . . . . . . . . . . . . . . . . . 465 mark ip-dscp . . . . . . [...]

Content s 17 match src ip6 . . . . . . . . . . . . . . . . . . . . . . . 479 match src l4port . . . . . . . . . . . . . . . . . . . . . 480 match vla n . . . . . . . . . . . . . . . . . . . . . . . . 481 mirror . . . . . . . . . . . . . . . . . . . . . . . . . . . 481 police-simp le . . . . . . . . . . . . . . . . . . . . . . 482 policy- map . . . [...]

18 Conte nts 24 RADIUS Commands . . . . . . . . . . . . . . . . 505 aaa acco unt ing net work defaul t start -stop group ra dius . . . . . . . . . . . . . . . . . . . . . . 506 acct- port . . . . . . . . . . . . . . . . . . . . . . . . 506 auth-po rt . . . . . . . . . . . . . . . . . . . . . . . . 507 deadt ime . . . . . . . . . . . . . . . . . . .[...]

Content s 19 source-ip . . . . . . . . . . . . . . . . . . . . . . . . . 525 timeo ut . . . . . . . . . . . . . . . . . . . . . . . . . . 525 usage . . . . . . . . . . . . . . . . . . . . . . . . . . . 526 25 Spanning T ree Commands . . . . . . . . . . . 529 clear spanni ng-t ree det ected- prot ocols . . . . . . . . 531 exit (mst) . . . . . . . . [...]

20 Conte nts spanni ng-t ree max- hops . . . . . . . . . . . . . . . . 552 spanni ng-t ree mode . . . . . . . . . . . . . . . . . . 553 spanni ng-t ree mst 0 ex ternal -cost . . . . . . . . . . . 553 spanni ng-t ree mst co nfigu ration . . . . . . . . . . . 554 spanni ng-t ree mst co st . . . . . . . . . . . . . . . . . 555 spanni ng-t ree mst po r[...]

Content s 21 pr ior ity . . . . . . . . . . . . . . . . . . . . . . . . . . 571 show tacac s . . . . . . . . . . . . . . . . . . . . . . . 572 tacac s-ser ver host . . . . . . . . . . . . . . . . . . . . 573 tacac s-ser ver key . . . . . . . . . . . . . . . . . . . . 573 tacac s-ser ver tim eout . . . . . . . . . . . . . . . . . . 574 timeo ut . . [...]

22 Conte nts show vla n associa tion ma c . . . . . . . . . . . . . . 594 show vla n assoc iation su bnet . . . . . . . . . . . . . 595 swi tchport ac cess vlan . . . . . . . . . . . . . . . . 59 6 swit chport forb idden vlan . . . . . . . . . . . . . . . 596 swit chport gene ral accep table-fram e-type tagged -only . . . . . . . . . . . . . . . . [...]

Content s 23 vlan p rotocol group re move . . . . . . . . . . . . . . . 612 vlan r outing . . . . . . . . . . . . . . . . . . . . . . . 613 29 V oice VLAN Commands . . . . . . . . . . . . . 615 voice vl an . . . . . . . . . . . . . . . . . . . . . . . . 616 voice vlan (Interface ) . . . . . . . . . . . . . . . . . . 616 voice vl an data prio rity .[...]

24 Conte nts dot1x timeou t tx-period . . . . . . . . . . . . . . . . 63 2 show d ot1x . . . . . . . . . . . . . . . . . . . . . . . 633 show do t1x clients . . . . . . . . . . . . . . . . . . . 636 show do t1x etherne t . . . . . . . . . . . . . . . . . . 638 show do t1x statisti cs . . . . . . . . . . . . . . . . . 640 show do t1x users . . . . .[...]

Content s 25 ip proxy-arp . . . . . . . . . . . . . . . . . . . . . . . 657 show a rp . . . . . . . . . . . . . . . . . . . . . . . . . 657 32 DHCP and BOOTP Relay Commands . . . 659 boot pdhcprela y cidridoptm ode . . . . . . . . . . . . . 660 bootp dhcp relay maxh opcou nt . . . . . . . . . . . . . . 661 bootpd hcprelay minwa ittime . . . . . . .[...]

26 Conte nts show ipv6 dhcp bi ndi ng . . . . . . . . . . . . . . . . 675 show ipv6 dhcp i nte rface . . . . . . . . . . . . . . . 67 6 show ipv6 dhcp po ol . . . . . . . . . . . . . . . . . . 678 show ipv 6 dhcp st atist ics . . . . . . . . . . . . . . . 678 34 DVMRP Commands . . . . . . . . . . . . . . . . 681 ip dvmrp . . . . . . . . . . . . . .[...]

Content s 27 ip igmp robustn ess . . . . . . . . . . . . . . . . . . . . 694 ip igmp startu p-query-coun t . . . . . . . . . . . . . . . 694 ip igmp startup-q uery-interval . . . . . . . . . . . . . . 695 ip igmp version . . . . . . . . . . . . . . . . . . . . . . 696 show ip igmp . . . . . . . . . . . . . . . . . . . . . . . 697 show ip i gmp grou[...]

28 Conte nts 37 IP Helper Commands . . . . . . . . . . . . . . . 711 clear ip helper sta tistics . . . . . . . . . . . . . . . . 712 ip helper -add ress (global c onfiguration ) . . . . . . . 712 ip helper -add ress (interfa ce configura tion) . . . . . . 714 ip help er enable . . . . . . . . . . . . . . . . . . . . 716 show ip help er- address . .[...]

Content s 29 show ip r oute . . . . . . . . . . . . . . . . . . . . . . 734 show ip r oute pre feren ces . . . . . . . . . . . . . . . 735 show i p ro ute summary . . . . . . . . . . . . . . . . . 736 show i p sta ts . . . . . . . . . . . . . . . . . . . . . . . 737 vlan r outing . . . . . . . . . . . . . . . . . . . . . . . 739 39 IPv6 MLD Snoopin[...]

30 Conte nts ipv6 pimsm dr-priori ty . . . . . . . . . . . . . . . . . 755 ipv6 pimsm hell o-interval . . . . . . . . . . . . . . . 755 ipv6 pimsm jo in-prune-inter v al . . . . . . . . . . . . 756 ipv6 pi msm regist er - thres hold . . . . . . . . . . . . . 757 ipv6 pimsm rp-add ress . . . . . . . . . . . . . . . . . 757 ipv6 pi msm rp-can didat e[...]

Content s 31 ipv6 ml d last- member-query -coun t . . . . . . . . . . . 774 ipv6 ml d last- member-query -inte rval . . . . . . . . . . 774 ipv6 mld- proxy . . . . . . . . . . . . . . . . . . . . . . 775 ipv6 mld-pro xy reset-stat us . . . . . . . . . . . . . . . 776 ipv6 mld-pro xy unsolicit-rprt-in terval . . . . . . . . . . 776 ipv6 mld qu ery-i[...]

32 Conte nts ipv6 ro ute di stance . . . . . . . . . . . . . . . . . . . 791 ipv6 un icast-routing . . . . . . . . . . . . . . . . . . 792 ping ipv6 . . . . . . . . . . . . . . . . . . . . . . . . 792 ping ipv6 interfa ce . . . . . . . . . . . . . . . . . . . 79 3 show ipv6 brief . . . . . . . . . . . . . . . . . . . . . 795 show ipv6 interface . .[...]

Content s 33 show i pv6 vlan . . . . . . . . . . . . . . . . . . . . . . 819 tracerou te ipv6 . . . . . . . . . . . . . . . . . . . . . . 820 42 Loopback Interface Commands . . . . . . . 823 inte rf ace lo opba ck . . . . . . . . . . . . . . . . . . . . 824 show inte rface s l oopba ck . . . . . . . . . . . . . . . . 824 43 Multicast Commands . . .[...]

34 Conte nts ip pimsm ssm . . . . . . . . . . . . . . . . . . . . . . 839 show brid ge mu lticas t ad dre ss-tabl e co unt . . . . . 840 show i p mc ast . . . . . . . . . . . . . . . . . . . . . 841 show ip mc ast boun dary . . . . . . . . . . . . . . . . 842 show ip mcast interface . . . . . . . . . . . . . . . . 843 show ip mc ast mrou te . . . .[...]

Content s 35 area ra nge . . . . . . . . . . . . . . . . . . . . . . . . 861 area s tub . . . . . . . . . . . . . . . . . . . . . . . . . 862 area stub no-summa ry . . . . . . . . . . . . . . . . . . 863 area virt ual -lin k . . . . . . . . . . . . . . . . . . . . . 864 area virt ual- lin k au thent icati on . . . . . . . . . . . . . 865 area virt [...]

36 Conte nts ip ospf auth ent icati on . . . . . . . . . . . . . . . . . 880 ip ospf cost . . . . . . . . . . . . . . . . . . . . . . . 881 ip ospf dead- inte rva l . . . . . . . . . . . . . . . . . . 881 ip os pf he llo- int erva l . . . . . . . . . . . . . . . . . . 882 ip ospf mtu-ign ore . . . . . . . . . . . . . . . . . . . 883 ip ospf netw or[...]

Content s 37 show ip o spf abr . . . . . . . . . . . . . . . . . . . . . 903 show ip o spf area . . . . . . . . . . . . . . . . . . . . 903 show ip o spf asbr . . . . . . . . . . . . . . . . . . . . 905 show ip o spf databa se . . . . . . . . . . . . . . . . . . 906 show i p o spf databa se d atabas e-su mmary . . . . . . . 909 show ip osp f interf[...]

38 Conte nts area ns sa no-su mmary . . . . . . . . . . . . . . . . . 931 area ns sa tran slato r-role . . . . . . . . . . . . . . . . 932 area ns sa tran slat or-stab-in tv . . . . . . . . . . . . . 933 area range . . . . . . . . . . . . . . . . . . . . . . . 934 area stub . . . . . . . . . . . . . . . . . . . . . . . . 935 area stu b no-summa ry [...]

Content s 39 ipv6 o spf hello-in terval . . . . . . . . . . . . . . . . . 949 ipv6 o spf mtu-i gnore . . . . . . . . . . . . . . . . . . . 950 ipv6 o spf network . . . . . . . . . . . . . . . . . . . . 950 ipv6 o spf priorit y . . . . . . . . . . . . . . . . . . . . . 951 ipv6 o spf retr ansmit- interval . . . . . . . . . . . . . . 952 ipv6 os pf t[...]

40 Conte nts show ip v6 ospf databa se databas e-summ ary . . . . . 972 show ipv6 ospf in terface . . . . . . . . . . . . . . . . 973 show ipv6 ospf in terface brief . . . . . . . . . . . . . 974 show ipv6 os pf interface stats . . . . . . . . . . . . . 975 show ipv6 os pf interface vlan . . . . . . . . . . . . . 977 show ip v6 ospf ne ighbor . . .[...]

Content s 41 show ip pimsm inte rface . . . . . . . . . . . . . . . . 992 show i p p imsm n eighb or . . . . . . . . . . . . . . . . 993 show i p p imsm rp hash . . . . . . . . . . . . . . . . . . 994 48 Router Discovery Protocol Commands . . . . . . . . . . . . . . . . . . . . . . . 997 ip irdp . . . . . . . . . . . . . . . . . . . . . . . . . . 9[...]

42 Conte nts hostr outesac cept . . . . . . . . . . . . . . . . . . . . 1012 ip rip . . . . . . . . . . . . . . . . . . . . . . . . . . 1013 ip rip au then ticat ion . . . . . . . . . . . . . . . . . . 1013 ip rip receive v ersion . . . . . . . . . . . . . . . . . 1014 ip rip se nd versi on . . . . . . . . . . . . . . . . . . . 1015 redistribute . [...]

Content s 43 52 Vi rtual Router Redundancy Protocol Commands . . . . . . . . . . . . . . 1031 ip vrrp . . . . . . . . . . . . . . . . . . . . . . . . . 1032 ip vrrp authe ntication . . . . . . . . . . . . . . . . . 1033 ip vrrp ip . . . . . . . . . . . . . . . . . . . . . . . . 1034 ip vrrp mode . . . . . . . . . . . . . . . . . . . . . . 1035 ip v[...]

44 Conte nts 54 Captive Portal Commands . . . . . . . . . . 1049 authen tication timeout . . . . . . . . . . . . . . . . . 1051 captiv e-portal . . . . . . . . . . . . . . . . . . . . . 1051 enabl e . . . . . . . . . . . . . . . . . . . . . . . . . 1052 http po rt . . . . . . . . . . . . . . . . . . . . . . . . . 1053 https por t . . . . . . . . . [...]

Content s 45 show capti ve-po rtal cli ent st atu s . . . . . . . . . . . 1064 show cap tive- por tal c onf igura tio n cl ient sta tus . . . 1066 show capti ve-po rtal in terfac e cl ient stat us . . . . . 1067 show capti ve-po rtal in terfac e co nfigu rat ion status . . . . . . . . . . . . . . . . . . . . . . . . . . 1069 clear capti ve- porta l[...]

46 Conte nts 55 Clock Commands . . . . . . . . . . . . . . . . . 108 3 show cl ock . . . . . . . . . . . . . . . . . . . . . . . 1083 show sntp configura tion . . . . . . . . . . . . . . . . 1084 show sn tp statu s . . . . . . . . . . . . . . . . . . . . 1085 sntp aut henticate . . . . . . . . . . . . . . . . . . . . 1086 sntp aut hentication-k ey [...]

Content s 47 copy . . . . . . . . . . . . . . . . . . . . . . . . . . 1101 delete ba ckup-con fig . . . . . . . . . . . . . . . . . 1104 delete ba ckup-ima ge . . . . . . . . . . . . . . . . . 1105 delete st artup-co nfig . . . . . . . . . . . . . . . . . 1106 filedes c r . . . . . . . . . . . . . . . . . . . . . . . . 1106 script apply . . . . . .[...]

48 Conte nts dos-co ntrol tcpfra g . . . . . . . . . . . . . . . . . . . 1123 ip icmp echo-reply . . . . . . . . . . . . . . . . . . . 1124 ip icmp error -interval . . . . . . . . . . . . . . . . . 1125 ip unr eachabl es . . . . . . . . . . . . . . . . . . . . 1126 ip redirects . . . . . . . . . . . . . . . . . . . . . . . 1126 ipv6 icmp e rror-in [...]

Content s 49 show ma nage ment ac cess- class . . . . . . . . . . . 1143 show ma nage ment ac cess- list . . . . . . . . . . . . 1144 60 Password Management Commands . . . . . . . . . . . . . . . . . . . . . . 1145 password s aging . . . . . . . . . . . . . . . . . . . . 1146 password s history . . . . . . . . . . . . . . . . . . . 1146 password s [...]

50 Conte nts power inl ine traps . . . . . . . . . . . . . . . . . . . 1161 power inline usag e-thresh old . . . . . . . . . . . . . 1161 show poe- firmware- version . . . . . . . . . . . . . . 1162 show po wer inline . . . . . . . . . . . . . . . . . . . 1163 show po wer inline ethern et . . . . . . . . . . . . . . 1164 63 RMON Commands . . . . . [...]

Content s 51 debug clear . . . . . . . . . . . . . . . . . . . . . . 1190 debug c ons ole . . . . . . . . . . . . . . . . . . . . . 1190 debug dot1x . . . . . . . . . . . . . . . . . . . . . . 1191 debug i gmpsnoo ping . . . . . . . . . . . . . . . . . . 1192 debug i p acl . . . . . . . . . . . . . . . . . . . . . . 1192 debug i p dvmrp . . . . . .[...]

52 Conte nts debug r ip . . . . . . . . . . . . . . . . . . . . . . . . 1205 debug sf low . . . . . . . . . . . . . . . . . . . . . . 1205 debug sp anni ng-t ree . . . . . . . . . . . . . . . . . . 1206 show debugg ing . . . . . . . . . . . . . . . . . . . . 1207 65 sFlow Commands . . . . . . . . . . . . . . . . . 120 9 sflow dest ination . . . . .[...]

Content s 53 show s nmp vi ews . . . . . . . . . . . . . . . . . . . 1227 show trap flags . . . . . . . . . . . . . . . . . . . . . 1229 snmp-serve r community . . . . . . . . . . . . . . . . 1230 snmp-server commu nity-group . . . . . . . . . . . . 1 232 snmp -server co ntact . . . . . . . . . . . . . . . . . . 1233 snmp-serve r enable traps . . .[...]

54 Conte nts ip ssh serv er . . . . . . . . . . . . . . . . . . . . . . 1254 key-string . . . . . . . . . . . . . . . . . . . . . . . . 1254 show cry pto key mypu bkey . . . . . . . . . . . . . . 1256 show c rypto key pubk ey-cha in ssh . . . . . . . . . . 1257 show i p ss h . . . . . . . . . . . . . . . . . . . . . . . 1259 user-key . . . . . . . [...]

Content s 55 show loggi ng . . . . . . . . . . . . . . . . . . . . . . 1272 show logg ing file . . . . . . . . . . . . . . . . . . . 1274 show s yslog -serv ers . . . . . . . . . . . . . . . . . . 1275 69 System Management Commands . . . . 1277 asset-ta g . . . . . . . . . . . . . . . . . . . . . . . . 1279 banne r motd . . . . . . . . . . . . . . [...]

56 Conte nts show me mory cp u . . . . . . . . . . . . . . . . . . . 1294 show n sf . . . . . . . . . . . . . . . . . . . . . . . . 1295 show p roce ss cp u . . . . . . . . . . . . . . . . . . . 1296 show se ssio ns . . . . . . . . . . . . . . . . . . . . . 1299 show st ack -port . . . . . . . . . . . . . . . . . . . . 1300 show stack -port co unte[...]

Content s 57 telnet . . . . . . . . . . . . . . . . . . . . . . . . . . 1325 trac erout e . . . . . . . . . . . . . . . . . . . . . . . 1327 70 T elnet Server Commands . . . . . . . . . . . 1331 ip telnet serv er disable . . . . . . . . . . . . . . . . 1332 ip telnet po rt . . . . . . . . . . . . . . . . . . . . . . 1332 show ip telne t . . . . . .[...]

58 Conte nts ip http server . . . . . . . . . . . . . . . . . . . . . . 1346 ip https certificate . . . . . . . . . . . . . . . . . . . 1347 ip https port . . . . . . . . . . . . . . . . . . . . . . . 1347 ip https server . . . . . . . . . . . . . . . . . . . . . 1348 key-ge nerate . . . . . . . . . . . . . . . . . . . . . . 1349 locatio n . . . . [...]

Command Grou ps 59 1 Command Groups Introduction The Command Line Interface (CLI) is a network management application operated throug h an ASCII terminal without the use of a Graphic User Interface (GUI) driven software application. By dire ctly entering commands, the user has greater configuration flexib ility . The CLI is a basic command-line int[...]

60 Command G roups Address T able Configu res bridgi ng ad dress tab les. CDP Interoperability Configur e s Cisco Discovery P rotocol (CDP). DHCP l2 Relay Enables the Layer 2 DHCP Relay agen t for an inte rf ace. DHCP Snooping Configures DHCP s nooping and whether an interface is trus ted for fi lterin g. Dynamic ARP Ins pecti on Confi gures for re[...]

Command Grou ps 61 Span ning T ree Confi gures and r eports on Spanning T re e protoco l. Swi tchpo rt V oice Con figur es the Auto V oIP f eatur e. T ACACS+ Configures and d i splays T ACA CS+ information. VLAN Configures VLAN s and di splays VL AN informat ion. V oice VL AN Configu res voice VLA Ns and d isplay s voi ce VLAN informat ion 802.1x C[...]

62 Command G roups Router Dis covery P rotocol (IPv4) Manages router discovery ope rations. Routing Info rmation P rotocol (IPv4) Conf igures RIP ac tivities . T unn el In terf ace ( IPv6) Manag ing t unnel ing operat ions. Vir tu a l L A N Ro u ti n g (IPv 4) Controls virtual LA N routing. Vir tu a l R o u te r Redund anc y (IPv 4) Manag es rou te[...]

Command Grou ps 63 SNMP Configures SNMP communities, traps and displays SNMP informat ion. SSH Configu res SSH authentication. Syslog Man ages and d isplays syslo g messages . Sys tem Manage ment Confi gures the sw itch cloc k, name and auth orized u sers. T eln et Serve r Configur es T elnet serv ice on t he switch and dis plays Te l n e t i n f o[...]

64 Command G roups Mode T ypes The tables on the following p ages use these abb reviations for Command Mode names. • ARP A — ARP ACL Configuration • CC — Cry pto Co nfiguration • CP — Cap tive P ortal Configuration • CPI — Capti ve P orta l Ins tanc e • CM C — C lass-Map C onfigura tion • GC — G lobal Configuration • IC ?[...]

Command Grou ps 65 •S K — S S H P u b l i c K e y - c h a i n • TC — T ACA CS Conf igur ati on • UE — User EX EC • VL AN — V LAN Configurat ion • v6ACL — IPv6 Access List Configurat ion •v 6 C M C • v6D P — IPv6 DHCP Pool Configuration Layer 2 Commands AAA Command Des cripti on Mode* aaa authentication dot1x Specifies one [...]

66 Command G roups ACL show authenti cation methods Shows information about authentication methods PE show user accounts Display s information about the local user datab ase PE show users l ogin-hi sto ry Displ ays in forma tion a bout lo gin hi storie s of users PE username Establis hes a use rname-b ased aut hentica tion syst em. GC *NOTE: F or t[...]

Command Grou ps 67 Address T able show ip access-l i sts Displays an Access Control List (ACL) and all of the rules t hat ar e defined for the ACL. PE show mac access-li st Displays a MA C access list and all of t h e rules that ar e defined for the A CL. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page[...]

68 Command G roups CDP Interope rability show bridge ad dres s-table stati c Displa ys sta ticall y created en tries in the bri dge- forwarding database. PE show b ridge mult icast addr ess-table Displa ys Mult icast MA C addr ess tab le informat ion. PE show b ridge mult icast filterin g Display s the Mult icast filt ering conf iguration. PE show [...]

Command Grou ps 69 DHCP l2 Relay DHCP Snooping Comman d Descriptio n Mode* dhcp l2rela y Enables the Lay er 2 DHCP Rela y agent fo r an int erface. GC/I C dhcp l2rela y circu it-id Enables user to set the DH CP Optio n 82 Circuit ID for a VLAN. GC dhcp l2relay remote-id Enables user to s et the DHCP Option 82 Remote ID for a VLAN. GC dhcp l2re lay [...]

70 Command G roups Dynamic ARP Inspe ction ip dhcp s nooping trust Configure a port as trusted for DHCP snooping. IC ip dhcp snoopin g verify mac-address Enables the verification of the source MA C address wit h the cl ient MAC address in the received DHCP mes sage. GC show ip dhcp snooping Display s the DHCP snooping global and per port c onfigura[...]

Command Grou ps 71 Ethernet Configuration ip arp inspection vlan Enables Dynami c ARP Inspe c tion on a single VLAN or a range of VLA Ns. GC permit ip host ma c host Configures a rule for a valid IP ad d ress an d MAC address combination used in A RP packet validati on. ARP A show arp access-list Displ ays the configu red ARP ACLs with the rules. P[...]

72 Command G roups GVRP negotiation Enables auto-negotiation operation for the speed and duplex parameters of a given interfa ce. IC show interfaces advertise Displays information about au to negotiation adver tisemen t. PE show interfa ces configur ation Displa ys the co nfigu ratio n for all confi gured interfa ces. UE show interfa ces coun ters [...]

Command Grou ps 73 IGMP Snooping gvrp enable (interface) Enables GVRP on an interface . IC gvrp regis tration- forbid De- regi sters all VLANs, an d pr events d ynamic VLAN registration on the port. IC gvrp vlan-creation-forbid Enables or disables dynamic V LAN creation. IC show gvr p confi guratio n Displa ys GVR P config uratio n informat ion, in[...]

74 Command G roups IGMP Snoopi ng Querier ip ig mp snoop ing ( VLAN ) In VLAN Config mo de, ena bles IGMP snoop ing on a particular VLAN or on all interfaces parti cipatin g in a VL AN. VLAN ip igmp snooping fa st-leave Enables or disables IGMP Snooping fast-leave mode on a selected VL A N. VLAN ip igmp sno oping groupmembership-int erval Sets the [...]

Command Grou ps 75 IP Addressi ng Comman d Descriptio n Mode* clear host Delete s entries from the host name- to-addr ess cache PE helper address Enabl e forwarding User Datagra m Protocol (UDP) B roadcast pack ets rec eived on an int erface. IC ip addr ess Sets a manage ment IP addre ss on the switch. GC ip address dhcp Acquir es an IP address on [...]

76 Command G roups IPv6 ACL IPv6 MLD Snoop ing Comma nd Descriptio n Mode* {deny | permit} Creates a new rule for the current IPv6 access list. v6A C L ipv6 access -list Creat es an IPv6 Access Control List (A CL) consistin g of classi ficati on fields defi ned fo r the IP header of an IP v6 frame. GC ipv6 access-list rename Changes the name of an [...]

Command Grou ps 77 IPv6 MLD Snooping Querier iSCSI Optimi zation show ipv6 mld s n ooping Displays MLD Snooping information. PE show ipv6 mld s noopin g groups Display s the MLD Sno oping ent ries in the MFDB table. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Comman d Descriptio n Mode* ipv6 ml[...]

78 Command G roups LACP Link Dependen cy Comma nd Descriptio n Mode* lacp port-priority Configu res the priority value for physical ports . IC lacp system-pri ority Configures the system LACP priority . GC lacp timeou t Assigns an admi nistrat ive LA CP timeou t. IC show lacp ethernet Displays LACP information for Ethe rnet ports. P E show lacp por[...]

Command Grou ps 79 LLDP no depends-on port- channe l Removes the depend ent port-ch annel s list . Link Depend ency show lin k-depe ndenc y Sho ws the l ink depend encie s config ured on a particular group. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Comman d Descriptio n Mode* clear lld p remo[...]

80 Command G roups Port Channel show lldp st atistics Disp lays th e current LLDP traffi c statis tics. PE lldp med Enables/d isables LLDP -MED on an inte rface. IC lldp med tr ansm it- tlv Spwcifie s which o ptiona l TL Vs in the L LDP MED set are trans mitte d in the LLDP DUs. IC lldp me d fastst artrepea tcount Sets the value of th e fast st art[...]

Command Grou ps 81 Port Monitor QoS show interfaces port - channe l Displa ys port-c hannel informa tion. P E show statisti cs port-channel Dis plays port-c hannel st atistics . PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Comman d Descriptio n Mode* monit or sessio n Confi gures a port moni tor[...]

82 Command G roups conform-color Specifies for each ou tcome, the on ly possible actions ar e drop, setdscp-transmit, set-prec- transm it, o r transmi t PCM C cos-queue min -bandwidth Specifies th e minimu m transmission ban dwidth for each interf ace queue. GC and IC cos-queue stric t Ac tivates t he stri ct prio rity sch eduler mode fo r each spe[...]

Command Grou ps 83 match ds tl4port Adds to th e speci fied cl ass def initi on a match condi tion b ased o n the d estin atio n layer 4 port of a packet using a single keywor d, or a n umeric notati on. CMC match et hertyp e Adds to th e speci fied cl ass def initi on a match condi tion base d on the v alue o f the et hertype. CMC match ip6 flowl [...]

84 Command G roups match vl an Adds to the spe ci fied cla ss defini tio n a match condit ion bas ed on the va lue of the layer 2 VLAN I den tifier fiel d. CMC mir ror Mirro rs all t he data that ma tches th e class defined to the de stina tion port spe cified PCM C police-simple Establishes the traffic policing s tyle for the specif ied class. PCM[...]

Command Grou ps 85 Radius show policy-map Displays all configuration information for the spec ified poli cy . PE show policy-map interfac e Di splays poli cy-orient ed st atistics information for the s pecifie d inte rface and di rection PE show ser vi ce-po lic y D ispl ay s a sum ma ry of policy-orient ed statis tics information for all interface[...]

86 Command G roups Spanning T ree radius-server de adtime Improves RADIUS r esponse t imes when ser vers are u n available. Causes the unavailable servers to be skipped. GC radiu s-server h ost Specifi es a R ADIUS serve r host. GC rad ius-serv er ke y Set s the aut hentic ation and encryp tion k ey for all RADIUS communic ation s betw een the swit[...]

Command Grou ps 87 instanc e (mst) Maps VLANs to an MST instan ce. MC name (ms t) Defin es the MST co nfigur ation na me. MC revision (ms t) Defines the confi guratio n revisi on number . MC show sp annin g-tree Di splay s span ning tree conf igur ation. PE show sp anning- tree summary Displ ay s span ning t ree sett ings a nd pa ramet ers for th e[...]

88 Command G roups spanni ng-tree mst configur ation Enables configu ring a n MST region by en tering the mult iple spanni ng-tree (MST) mode . GC spanni ng-tree mst 0 ext e rn al - co s t Sets the ext ernal co st for the common sp anning tree. IC spanning-t ree mst cost Configu res the path cost for multip le spanning tree (MS T) calcu latio ns. I[...]

Command Grou ps 89 Switchport V oice T ACACS+ VLAN Comman d Descriptio n Mode* switch port v oice de tect auto Enables the V oIP Profile on all the in terface s of the sw itch. GC/I C show switchport voice Displays the s t atus of auto-voip on an i n terface or all interfaces. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod [...]

90 Command G roups inte rface r ange vl an Enters the inte rface c onfigur ation mo de to confi gure m ultiple VL ANs. GC mode dvla n-tu nnel Enables Doubl e VLAN t unnel ing on th e specif ied inte rface IC name Conf igures a name to a VLAN. IC protocol group Attaches a vlanid to the protocol-based VLAN identi fied by groupid . VLAN protocol vlan [...]

Command Grou ps 91 switchport gene ral allowed vlan Adds or removes VLANs from a port in General mode. IC switchport ge neral ingress- filterin g disable Disabl es port in gress filt ering. IC switch port gene ral pvid Co nfigu res the PVID w hen the int erfac e is in general mod e. IC switchport mode Conf igures the VLAN membership mode of a port.[...]

92 Command G roups V oice VLAN 802.1x Comma nd Descriptio n Mode* voic e vlan Enables th e voice VLAN cap ability on th e swit ch. GG voic e vlan Enables th e voice VLAN cap ability on th e interfa ce IC voic e vlan data prior ity T rusts or not tr usts the dat a traffic ar riving on the voice VLAN port. IC show voice vl an Displays various propert[...]

Command Grou ps 93 dot1x ti meout se rver- timeou t Sets th e number of sec onds the switc h waits for a response from th e authen tica tion se rver be fo re re s e n d i n g t h e r e q u e s t . IC dot1x timeout su pp- timeou t Sets th e number of sec onds the switc h waits for a res p onse to an EAP -request frame from the client before retransm[...]

94 Command G roups Layer 3 Commands ARP (IPv4) Comma nd Descriptio n Mode* arp Creat e s an Addr ess Resolution P rotocol (ARP) entry . GC arp cachesize Configu res the maximum number of entri es in the ARP cach e. GC arp dynami crenew Enables the ARP componen t to auto matical ly renew dynamic ARP entri es when they age out . GC arp purge Causes t[...]

Command Grou ps 95 DHCP and BOOTP Relay (IP v4) DHCPv6 Comman d Descriptio n Mode* bootpdhcprelay cidridoptmode Enables the circuit ID option and r emote agent ID mode for BootP/DHCP Relay on the system. GC bootpdhcprelay maxhopc ount Configures the maximum allowable relay agent hops for BootP/DHCP Relay on the system. GC bootpdhcprelay minwaitt im[...]

96 Command G roups DVMRP service dhcpv6 Enables DHCPv6 con figura tion on t he router . GC show ipv6 dhcp Display s the DHCP v6 server nam e and statu s. PE show ipv6 dhcp binding Dis plays the conf igured DHCP pool. PE show ipv6 dhcp interface Displays DHCPv6 information for all relevant inter faces or a specif ied inte rface. UE show ipv6 dhcp po[...]

Command Grou ps 97 IGMP Comman d Descri ption Mode* ip ig mp Sets the ad ministrat ive mod e of IGM P in the syst em to ac tive. GC ip igmp last-member-query- count Sets the nu mber of Group-Specif ic Querie s sent befo re the router assumes th at there are no l ocal me mbers on the inte rface. IC ip igmp last-member-query- interva l Configures the[...]

98 Command G roups IGMP Proxy IP He lper show ip igmp int erface membership Displ ays the list of interfac es that have r egister ed in t he multic ast gro up. PE show ip igmp int e rface stats Displays the IGMP st atistical information for the in terface . PE *NOTE: F or the me anin g of eac h Mode abbrevi ation , see "M ode T ypes" on p[...]

Command Grou ps 99 IP Routing ip helper e n able Enables r e lay of UDP pack ets. GC show ip helper -addre ss Displays t he IP helper ad dres s configuration . PE show ip helper s tatistics Displays the number of DHCP and other UDP packets processed and relayed by the UDP relay agent. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see &q[...]

100 Command G roups IPv6 Mult icast show ip rou te pr efer ences Dis plays det ailed i nforma tion abo ut the route preferences. PE show ip route sum mar y Shows th e number of all rout es, in cluding best and non- best rout es. PE sho w ip stats Displays IP st atistica l information UE *NOTE: F or the me anin g of eac h Mode abbrevi ation , see &q[...]

Command Grou ps 101 IPv6 Routin g ipv6 pimsm spt-thr eshold Config ures the Data Thre shold ra te for the last hop router to switc h to th e shorte st pat h. GC ipv6 pi msm s sm D efin es the Source Sp ecific Mu ltica st ( SSM) range of multicast addresses. GC show ipv6 pimsm Displays global st atus of IPv6 PIMSM and its IPv6 routing int erfaces. P[...]

102 Command G roups ipv6 host Define s stat ic host na me-to- i pv6 a ddress mapping in the host cache. GC ipv6 mld l ast-member- query-c ount Sets t he numbe r of lis tener-specific quer ies s ent before the router as sumes t hat th ere are no local memb ers on the in terface . IC (VLA N) ipv6 mld l ast-member- query-in terval Sets th e last memb [...]

Command Grou ps 103 ipv6 nd ra-inter val Sets th e transmi ssion int erval betwe en rout er advertisements. IC ipv6 nd ra-li fetime Sets th e value that is place d in the Route r Lifetime field of the ro uter advertis ements sent from the int erface. IC ipv6 nd reachable-ti me Sets th e router ad vertis ement t ime to con sider a neigh bor re achab[...]

104 Command G roups show ipv6 mld-proxy groups Displays information abou t multicast grou ps that the MLD Proxy reported. PE show ipv6 mld-proxy groups detai l Displays information abou t multicast grou ps that MLD Proxy reported. PE show ipv6 mld-proxy inter face Display s a detailed list of th e host int erface status parameters. PE show ipv6 mld[...]

Command Grou ps 105 Loopback Interface Multic ast Comman d Descriptio n Mode* interface loopb ack Ent ers the Inte rface Loopback configuration mode. GC show interface loopback Displays information about configured loopback interface s. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Comman d Descr[...]

106 Command G roups ip pimsm rp-address Statically configures the RP address for one or more multicast groups. GC ip pimsm rp-candidate Configu res the router to advertise itself as a PIM ca ndidate rende zvous poin t (RP) t o the bootstrap router (BSR). IC ip pimsm spt-threshold Configures the Data Threshold rate for the last hop router to switc h[...]

Command Grou ps 107 OSPF show ip pimsm rp mapping Displays al l group-to-RP mappings of whic h the route r is awar e (either conf igure d or learned from the bootstrap router). PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Command De scrip tio n Mode* area def ault-co st Configures the monetary d[...]

108 Command G roups ar ea virtual -link dead- inter val Configures the d ead interval for th e OSPF virtu al inte rface on the vir tual inte rface ide ntifie d by area-id and ne ighbo r router . ROSPF ar ea virtual -link hello - inter val Conf igur es the hell o inte rval for th e OSPF virtu al in terface o n the v irtual in terfac e identi fied by[...]

Command Grou ps 109 ip ospf c ost Config ures the co st on an OSPF int e rface. IC ip ospf de ad-inte rval Sets the OSPF d ead inte rval for th e speci fied interfa ce. IC ip ospf hell o-inter val Sets th e OSPF he llo in terval for the spe cified interfa ce. IC ip ospf mtu-igno re Disables OSPF maximum transmission unit (MTU) m ismatch detec tion [...]

110 Command G roups passive- interf ace (r outer mode) Sets the in terf ace or tu nnel as pass ive. R OSPF redistribute Configur es OSPF protocol to allow redistribution of routes fr om the spe cified so urce protocol/routers. ROSPF rou ter -id Sets a 4-dig it dotted -decima l number unique ly iden tifying the rou ter OSPF I D. ROSPF router ospf En[...]

Command Grou ps 111 OSPFv3 show ip ospf vi rt ual-link Di s plays th e OSPF Virtual Int erface in formation for a specific ar ea and neighbor . PE show ip ospf vi rt ual-link brief Displays the OSPF Virtual Interface informati on for a ll ar eas in th e system . PE timer s spf Confi gures the S PF de lay and hold time. ROS PF trapflags Enables OSPF[...]

112 Command G roups ar ea virt ual-link Cr eates t he OSPF virtual interf ace for the specifi ed areaid and neigh bor . ROSV3 ar ea virtual -link dead- inter val Configures the d ead interval for th e OSPF virtu al inte rface on the vir tual inte rface ide ntifie d by areai d and neigh bor . ROSV3 ar ea virtual -link hello - inter val Conf igur es [...]

Command Grou ps 113 ipv6 ospf mtu-ignore Dis ables OSPF maximum transmission unit (MTU) m ismatch detec tion . IC ipv6 os pf ne twork Chang es t he d efault OSPF net work type for the interfa ce. IC ipv6 ospf pri ority Sets the OSPF prio rity fo r the spe cified r outer interfa ce. IC ipv6 os pf retran smit- interva l Sets the OSPF retran smit inte[...]

114 Command G roups PIM-DM show ipv6 ospf inte rface Dis plays the info rmation fo r the IFO ob ject or virtual inte rface table s. PE show ipv6 ospf interface brief Displays brief information for the IFO object or virtual inte rface table s. PE show ipv6 ospf interface stats Displays the stat istic s for a spec ific inte rface . UE show ipv6 ospf [...]

Command Grou ps 115 PIM-SM show ip pimd m interface stats Displ ays th e stati stical infor matio n for PIM- DM on the sp ecifie d interfa ce. UE show ip pimd m n eighbor Displ ays the neighbor informati on for PIM-DM on th e specif ied int erface. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64. Co[...]

116 Command G roups Router Di scovery Pr otocol show ip pimsm Displays th e system -wide informati on for PIM- SM. PE show ip pimsm i nterface Di splays interface information for PIM-SM on the speci fie d interfa ce. PE show ip pimsm neighbor Displays neighbor information for PIM-SM on the speci fie d interfa ce. PE show ip p imsm rphash Dis plays [...]

Command Grou ps 117 Routing Inf ormation Proto col Command Descript ion Mode* auto-summary Enables the RIP auto-su mmarization mode. RIP defaul t-inf orma tion origin ate Control s the adver tiseme nt of defau lt route s. RIP default-m etric Sets a d efault for the me tric of di stribu ted routes. RIP dis tance rip Sets th e route prefe rence value[...]

118 Command G roups T unnel Inte rface Virtual LAN Rou ting V irtual Router Redund ancy show ip r ip inte rface bri ef Displ ay s general inf ormatio n for each RIP interfa ce. PE spli t-horiz on Set s the RIP split ho rizon mod e. RIP *NOTE: F or the me anin g of eac h Mode abbrevi ation , see "M ode T ypes" on pa ge 64. Comma nd Des cri[...]

Command Grou ps 119 ip vrrp authen ticati on Sets the autho rizatio n deta ils valu e for the virtual router conf igured on a spe cifie d int erface. IC ip vrrp ip Se ts the virtual router IP address value for an int erface. IC ip vrrp mode Enabl es the virtu al router configured on an interface. Enabling the s t atus field starts a virtual rout er[...]

120 Command G roups Utility Commands Auto Config Captive Por tal Comma nd Descriptio n Mode* boot host auto-save Enables/dis ables automaticall y saving the downlo aded confi gurat ion o n the sw itch. GC boot h ost dhcp Enab les/disables Auto C onfig on t he switch. GC boot host retr y-coun t Se t the nu mber of attempt s to down load a config ura[...]

Command Grou ps 121 interface Associates an interface with a captive portal config uratio n. CPI locale Associates an interface with a capt ive portal config uratio n. CPI name Configures the name for a captive portal config uratio n. CPI protocol Configures the prot ocol mode for a captive portal configuration. CPI redirect Enables th e redirect m[...]

122 Command G roups show c aptiv e-portal use r Dis plays all con fig ured users o r a spec ific u ser in the captive port al local user databas e. PE user idl e-timeou t Sets the sess ion idle ti meout va lue for a captive portal user . CP user name Mod ifies th e us er name for a local c aptive po rtal user . CP user pass word Creates a lo cal u [...]

Command Grou ps 123 Clock Comman d Descriptio n Mode* show clock Displays the time and date of t he system clock. PE show sntp con figurat ion Displays the SNT P config uratio n. PE show sntp st atus Di splay s the SN TP stat us. PE sntp aut hentica te Se t to require auth entic ation fo r received NTP traffic f rom serve rs. GC snt p auth enticati[...]

124 Command G roups Configura tion and Image File s Comma nd Descriptio n Mode* boot syste m Spec ifies the sy stem image th at t he swit ch loa ds at startup. PE clear config Restores swi tch to defa ult configu ration PE copy Copies fi les fr om a sou rce t o a dest inati on. PE delete backup-i mage Deletes a file from a flas h memory . PE delete[...]

Command Grou ps 125 Denial o f Service Comman d Descriptio n Mode* dos-control firstfr ag Enables Min imum TCP Header Size Denial of Service protection. GC dos-control icmp Enables Maximum ICMP P acket Size De nial of Service protections. GC dos-control l4port Enables L4 P ort Denial of Service protection. GC dos-c ontrol sipd ip Enables S ource IP[...]

126 Command G roups Line Management ACL Comma nd Descriptio n Mode* ex e c-timeou t Configu res the in terval that th e syst em wait s for user inpu t. LC histo ry Enables the command his tory fu nction . LC histor y size Changes t he comman d history b uffer size f or a parti cular line . LC line Iden tifies a specifi c line for config uration a n[...]

Command Grou ps 127 Password Mana gement PHY Diagnosti cs Comman d Descriptio n Mode* passwords aging Impleme nts aging on th e passwords such that users a re required to change passwords when they e xpir e. GC passwords his tory Enables the admi nistr ator to se t the nu mber of pre vious pass words t hat are stored to ensur e that users d o not r[...]

128 Command G roups Power Over Ethernet (PoE ) RMON Command D escri ption Mode* power inli ne Enables /disa bles the a bility of the port to deli ver p ower . IC (Ether net ) power inli ne leg acy Enables /dis ables th e abilit y of the s witc h to support legacy Ethernet powered devices. GC power inline powered- devi ce Add s a comme nt or de scri[...]

Command Grou ps 129 Serviceabi lity T racing show rmon alarm-table Di splays the al arms summary table. UE show rmon collection hist ory Displays the r equested group of statistics. UE show rmon eve nts Disp lays the R MON even t tabl e. UE show rmon hi stor y Di splay s RMO N Ether net Stati stics hist ory . UE show rmon log Displ ays th e RMON l [...]

130 Command G roups debug ip pimsm T races PIMSM packet reception and tran smis si on. PE debug ip vrrp Enables VRRP debug protocol messages. PE debug ipv6 mcach e T races MDA T Av6 packet r ec eption and tran smis si on. PE debug ipv6 mld T races MLD packet recept ion and tran smission. PE debug ipv6 pimdm T races PIMDMv6 packet reception and tran[...]

Command Grou ps 131 sFlow SNMP Comman d Descriptio n Mode* sflow dest inat ion Conf igures sFl ow co llec tor pa ramet ers (owne r string, r eceiver timeout, ip ad dress, a nd port). GC sflow polling Enabl es a new sflow poller instance for the data source if rcvr_idx is val id. GC sflow poll ing ( Inter face Mode) Enable a new sflow poller instanc[...]

132 Command G roups SSH snmp-server communi ty Se ts up the co mmunity access st ring to permit access to SNMP protocol. GC snmp-server communi ty- group Maps SNMP v1 an d v2 sec urity mode ls to the group name. GC snmp-server contact Se t s up a system conta ct (sysContact) string . GC snmp-server en able traps Enables SNMP tr aps globally or en a[...]

Command Grou ps 133 Syslog ip ssh pu bkey-auth Enabl es public key au thentic ation for incomin g SSH se ssions. GC ip ssh server Enables th e switch to b e configur ed from a SSH server c onnection. GC key-string Manually specif ies a SSH public key . SK show crypto key mypubk ey Displays its own SSH public keys stored on the switch . PE show cryp[...]

134 Command G roups System Management logg ing file Limits sy slog messag es sent to t he loggi ng file based on severity . GC logging on Controls error messages loggin g. GC port Spe cifies the port number of s yslog messages. L show logg ing Displays t he state of logging and the syslog messag es stor ed in the inter nal buffe r . PE show logg in[...]

Command Grou ps 135 no cut-t hrough mod e D isable s the cut-t hrough mo de on the switch . G C no standby Removes standb y configuration in the st ac k. SG ping Sends ICMP echo reque st pack ets to another node on th e netw ork. UE reload R e loads the operating s ystem. PE set de scrip tion Associa tes a text d escrip tion with a sw itch in the s[...]

136 Command G roups T elnet Se rver show versi on Disp lays t he syst em ve rsio n inform atio n. U E stack Sets the mode to Stack Global Con figu ration mod e. GC stack-port Sets the mode to Stack Global Configuration mode t o configure St ack ports a s either Stacking ports or as Ethernet ports. GC standb y Conf igure s the stand by in the s tack[...]

Command Grou ps 137 Use r Inte rfa ce W eb Server Comman d Descriptio n Mode* enable E nters the privileg ed EXE C mode. UE end Gets th e CLI user contr ol back to th e privileg ed execution mo de or use r execution mod e. Any exit(confi guration ) Ex its any con figurati on mod e to the previou sly highes t mode in th e CLI mode hier archy . (All)[...]

138 Command G roups ip https se rver Enabl es the sw itch t o be config ured from a secur ed bro wser . GC key-generate Specif ies the key-ge nerate. CC location Spe cifies the location or city name. C C organization-unit Specif ies the or g anization-unit or department name CC show crypto ce rtifica te mycertificate Displays t he SSL certificate s[...]

Using t he CLI 139 2 Using the CLI Introduction This chap ter descri bes the ba sics of enter ing and editi ng the De ll P owerConnect 62xx Series Command Line Interface (CLI) commands and defines the command hierarchy . It also explains h ow to activate the CLI and implement its major functions. This chapter covers the following top ics: • E nte[...]

140 Using the CLI • P artial keyword lookup — A command is incomplet e and the <?> k ey is entered in place of a parameter . Th e match ed param eters for this command ar e display ed. The followi n g featur es and conventions ar e applicable to CL I command entry and editing: • H istory B uffer • Negati ng Commands • S how Com ma n[...]

Using t he CLI 141 F or information about the command syntax for configuring the command history buffer , see the histo ry-size command in the Line comm and mode chapter of this guide. Negating Commands F or m any co mmands, the pr efi x keyw ord no i s entered to cancel the effect of a command or re set the configuration to the default value. All [...]

142 Using the CLI Operating on Multiple Objects (Ran ge) The CLI all ows the user to operate on the s et of objec ts at the sam e time. The guidelines are as follows for range operation: • Operations on objects with four or more ins tances support the range operation. •T h e rang e key word is used to identify the r ange of objects on wh ich to[...]

Using t he CLI 143 • Th e range m ay be specified in the following manne r: (#-#) — a range from a particular in stance to a nothe r instance (inclu sive). F or e xample, 1/g1 -g10 indicat es that the oper ation appli es to the gigabit Ethe rnet ports 1 to 1 0 on unit 1. (#, #, #) — a list of non-consecut iv e instances . F or example, (1 /g1[...]

144 Using the CLI CLI Command Notati on Conventions When entering commands there are ce rtain command-entry notat ions which apply to all c ommands . The fo llowin g table de scribe s th ese conve ntions as they are used in syntax definiti ons. Interf ace Naming Conventions The conventions for naming interfac es in CLI commands are as follows: • [...]

Using t he CLI 145 CLI Command Modes Since the set of CLI commands is very l arge, the CLI is s t ructur ed as a command-tree hierarchy , whe re r elated command s ets are assigned to command modes for easier access. At eac h level, only the commands r elated to that le vel are avail able to the user and o nly those commands ar e shown in the co nt[...]

146 Using the CLI The P rivileged EXEC mode provides access to commands t hat can not be ex ecuted i n the User EXEC mode and permi ts access to the switch Co nfig ura tio n mo de. The Global Configuration mode manages switch configuration on a global level. F o r specific inte rface configur ations, command modes e xist at a su b- level. Entering [...]

Using t he CLI 147 Global Co nfiguration Mode Global Configuration co m mands apply to featur es that affect the system as a whole, rather than just a specific interface. The Privileged EXEC mode command co nfigure is used to enter the Global Configuration mode. console(config)# Interfa ce and Other Specific Conf iguration Modes Interface configura[...]

148 Using the CLI • Po l i c y - m a p — Use the policy-map command to access t h e QoS policy map configura tion mod e to configure the Q oS pol icy map. • P olicy Class — Use the class command to access t h e QoS P olicy-cl a ss mod e to attach or r e mov e a DiffServ cl ass from a policy and to configu re the QoS policy class. • Class-[...]

Using t he CLI 149 • MAC Access-List — Conf igures conditions requ ired to allow traffic based on MAC addr esses. The Global Configur ation mode command mac- access-list is us ed to ente r th e M AC A ccess-List con figurat ion mo de. • T ACACS — C onfigures the parameters for the T ACACS server . • Radiu s — C onfigures the parameters [...]

150 Using the CLI [ # | >] — The # sign is used to indicate that the system is in the P rivileged EXEC mode. The > symbol indicates that th e system is in the User EXEC mode, which is a r ead-only mode in which the system does not allow configuration. Navigatin g CLI Command Modes The following table describes how to navigate through the CL[...]

Using t he CLI 151 Line Interface F rom Global Configurat ion mode, use the line command. console(config- line)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode. Management Access-L ist F rom Global Configurat ion mode, use the manage ment access-list command. con[...]

152 Using the CLI MAC Access List F rom Global Conf igurati on mode, use th e mac access-list command. console(config- mac-access- list)# To e x i t t o G l o b a l Confi guratio n mode, us e the exi t c ommand, or press <Ctrl>+< Z> to Privileg ed EXEC mode. SSH P u blic Key- Chain F rom Global Conf igurati on mode, use th e crypto ke y[...]

Using t he CLI 153 Radius F rom Global Configurat ion mode, use the radius-se rve r host command. console(config- radius)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode. SNMP Host Configuration F rom Global Configurat ion mode, use the snmp-ser ver command. cons[...]

154 Using the CLI Crypto Certificate Gener ation F rom Global Conf igurati on mode, use th e crypto certific ate number genera te command. console(config- crypto-cert)# To e x i t t o G l o b a l Confi guratio n mode, us e the exi t c ommand, or press <Ctrl>+< Z> to Privileg ed EXEC mode. Crypto Certificate Request F rom P riv ileged EX[...]

Using t he CLI 155 MST F rom Global Configurat ion mode, use the spanning-t ree mst configuration command. console(config- mst)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode. VLAN Config F rom Global Configurat ion mode, use the vlan databas e co mmand. console[...]

156 Using the CLI Router OSPFv3 Config F rom Global Conf igurati on mode, use th e ipv6 router ospf command. console(config- rtr)# To e x i t t o G l o b a l Confi guratio n mode, us e the exi t c ommand, or press <Ctrl>+< Z> to Privileg ed EXEC mode IPv6 DHCP P ool Mode F rom Global Conf igurati on mode, use th e ipv6 dhcp pool command[...]

Using t he CLI 157 VLAN F rom Global Configurat ion mode, use the interface vlan command. console(config- if-vlann)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode. T unnel From G lobal Configurat ion mode, use the inte rface t unnel command. console(config- tunn[...]

158 Using the CLI Starting the CLI T o begin running the CLI, perform the following steps: NOTE: This procedu re is for u se on the console line onl y. NOTE: The Easy Setup Wi zard is avai lable on ly when the sys tem is i n defa ult s tate with no user conf igu ratio n saved pr evio usly. 1 Sta rt the swit ch a nd wait until the s tartu p p roce d[...]

Using t he CLI 159 • Enables CLI log in and HTTP access to use the local auth entication se tting only , whi ch allows user account acces s via these managem e nt int erfaces. The user m ay return later to configure Radius or T A CACS+. • Sets up t he IP address for the management VLAN or enables supp ort for DHCP to conf igure the manag ement [...]

160 Using the CLI Since a switch may be powered on in the field without a serial connection, the switch wa its 60 seconds for the user to res pond to the setu p wizard ques tion in in st ance s whe re no co nfi gur at ion file s exist. If ther e is no response, the switch continues normal operation using the defaul t factory configuration. While wa[...]

Using t he CLI 161 Figure 2-1 . Easy Setu p Wiza rd T ransfer to CLI mode Copy to Cong DHCP? Request user name, password No Ye s Does th e u ser wa nt to use setup wizard ? No T ransfer to CLI mode No Did the user prev iously save a startu p conguration? Y es T ransfer to C LI mode Ye s Is SNMP Manageme nt Requ i red? Ye s Ye s Save Setup? Di[...]

162 Using the CLI Examp le Session This sect io n desc rib es an Easy Setu p Wizard sessi on. Refer to th e sta te diagram in the previous sect ion for gene ral flow . The following values used by the example session are not the only possib le ones: • IP address for th e ma nagemen t VLAN is 192.16 8.2.1:2 55.255.25 5.0. • The user na me is adm[...]

Using t he CLI 163 Welcome to Dell Easy Setup Wizard The Setup Wizard guides you through the initial switch configuration, and gets you up and running as quickly as possible. You can skip the setup wizard, and enter CLI mode to manually configure the switch. You must respond to the next question to run the setup wizard within 60 seconds, otherwise [...]

164 Using the CLI {public}: public<Enter> Please enter the IP address of the Management System (A.B.C.D) or wildcard (0.0.0.0) to manage from any Management Station. {0.0.0.0}: 192.168.2.1<Enter> Step 2: Now we need to setup your initial privilege (Level 15) user account. This account is used to login to the CLI and Web interface. You m[...]

Using t he CLI 165 Please enter the IP address of the device (A.B.C.D) or enter "DHCP" (without the quotes) to automatically request an IP address from the network DHCP server. 192.168.2.1<Enter> Please enter the IP subnet mask (A.B.C.D or /nn): 255.255.255.0<Enter> Step 4: Finally, set up the gateway. Please enter the IP addr[...]

166 Using the CLI Unit 1 - Waiting to select management unit)> Applying configuration, please wait ... Welcome to Dell Easy Setup Wizard The Setup Wizard guides you through the initial switch configuration, and gets you up and running as quickly as possible. You can skip the setup wizard, and enter CLI mode to manually configure the switch. You [...]

Using t he CLI 167 Please enter the user name. [root]:root Please enter the user password: Please reenter the user password: Step 3: Next, an IP address is setup. The IP address is defined on the default VLAN (VLAN #1), of which all ports are members. This is the IP address you use to access the CLI, Web interface, or SNMP interface for the switch.[...]

168 Using the CLI Do you want to select the operational mode as Simple Mode? [Y/N] n Step 6: If the information is correct, please select (Y) to save the configuration, and copy to the start-up configuration file. If the information is incorrect, select (N) to discard configuration and restart the wizard: [Y/N][...]

Using t he CLI 169 Using CLI Functio ns and T ools The CLI has been des igned to manage the switch’s configuration file system and to manage sw itch security . A numbe r of resident tools exis t to support these and other functions. Configura tion Management All managed sys tems have softwar e images and datab ases that must be configured, backed[...]

170 Using the CLI configuration file. In this cas e, if the local configuration file does not exist, then it is created by the command. If it does exist, it is overwri tten. If there is not enough space on the local file system to accommodate the file, an error is flagged. Refer to the copy command description in the Layer 2 commands section of the[...]

Using t he CLI 171 CLI prevents the user from ac cide ntally copying a configuration image onto a softwar e image and vice vers a. Management I nterface Sec urity This section describes the minimum set of management interface security measures implemented by the CLI. Management interface security consists of user account management, user a ccess co[...]

172 Using the CLI • Th e user pa ssword is saved internal ly in en crypted form at and never appear s in c lear te xt anyw here on the CLI . • The CLI supports T ACACS+ and Ra dius authenti cation serve rs. • The CLI all ows the user t o confi gure pri mary and second ary authe nt icat ion se rvers . If th e prim ary auth entic atio n serv er[...]

Using t he CLI 173 • If a uth en ticatio n se rvers a re used , th e user can iden tify a t leas t tw o remo te servers (the user ma y choose to configu re only one server) and wh at protocol to use with the server , T ACACS+ or Radius. O ne of the servers is primary and the other is the secondary server (the u s er is not r equired to specify a [...]

174 Using the CLI • D enie d at temp ts b y extern al m ana ge ment system to access the system. The security log r ecord contai ns the following information: • The user name, if available, or t he protocol being accessed if the event is rel ated to a r emote mana g ement sy stem. • The IP a ddress from which the user is connecting or the IP [...]

Using t he CLI 175 T erminal Paging The terminal width and length for CLI displays is 79 char acters and 25 lines, respectively . The length setting is used to control the numb er of lines the CLI will display b efore it pauses. F or example, t he CLI pauses at 24 li nes and prompts the us er with the -more- prom pt on t he 25t h l ine . T he CL I [...]

176 Using the CLI total bytes in files: 19,656 Kb # of lost chains: 0 total bytes in lost chains: 0 volume descriptor ptr (pVolDesc): 0x38ff9d0 XBD device block I/O handle: 0x10001 auto disk check on mount: DOS_CHK_REPAIR |DOS_CHK_VERB_2 volume write mode: copyback (DOS_WRITE) max # of simultaneously open files: 52 file descriptors in use: 0 # of d[...]

Using t he CLI 177 - first cluster is in sector # 136 - Update last access date for open-rea d-close = FALSE - directory structure: VFAT - file name format: 8-bit (extended-ASCII) - root dir start sector: 121 - # of sectors per root: 15 - max # of entries in root: 240 FAT handler information: ------------------------ - allocation group size: 2 clus[...]

178 Using the CLI Adding 0 symbols for standalone. CPU: Motorola E500 : Unknown system version. Processor #0. Memory Size: 0x10000000. BSP version 1.2/0. Created: Jan 4 2010, 03:59:27 ED&R Policy Mode: deployed /DskVol// - disk check in progress ... dosChkLib : CLOCK_REALTIME is being reset to TUE JUN 28 14:29:04 2005 Value obtained from file s[...]

Using t he CLI 179 volume descriptor ptr (pVolDesc): 0x348ef70 XBD device block I/O handle: 0x10001 auto disk check on mount: DOS_CHK_REPAIR |DOS_CHK_VERB_2 volume write mode: copyback (DOS_WRITE) max # of simultaneously open files: 52 file descriptors in use: 0 # of different files in use: 0 # of descriptors for deleted files: 0 # of obsolete desc[...]

180 Using the CLI - file name format: 8-bit (extended-ASCII) - root dir start sector: 121 - # of sectors per root: 15 - max # of entries in root: 240 FAT handler information: ------------------------ - allocation group size: 2 clusters - free space on volume: 10,852,352 bytes Timebase: 66.666666 MHz, MEM: 266.666664 MHz, PCI: 66.666666 MHz, CPU: 53[...]

Using t he CLI 181 <186> JUN 28 14:29:09 0.0.0.0-1 UNKN[268434720]: bootos.c(222) 1 %% Event(0xaaaaaaaa) Instantiating RamCP: as rawFs, device = 0x30001 Formatting RamCP: for DOSFS Instantiating RamCP: as rawFs, device = 0x30001 RamCP:/ - disk check in progress ... RamCP:/ - Volume is OK total # of clusters: 1,975 # of free clusters: 1,973 # [...]

182 Using the CLI gets you up and running as quickly as possible. You can skip the setup wizard, and enter CLI mode to manually configure the switch. You must respond to the next question to run the setup wizard within 60 seconds, otherwise the system will continue with normal operation using the default system configuration.Note: You can exit the [...]

Using t he CLI 183 Management Standby Preconfig Plugged-in Switch Code SW Status Status Model ID Model ID Status Version ---- --------- -------- ---------- ------------ --------- -------- 1 Mgmt Sw PC6224 PCT6224 OK 3.2.1.3 console> Boot Utility Menu If a user is connected through the seri al interface during t he boot sequence, pressing the <[...]

184 Using the CLI 8 - Delete backup image 9 - Reset the system 10 - Restore Configuration to factory defaults (delete config files) 11 - Activate Backup Image 12 - Password Recovery Procedure The boot utility menu pr ovides the following: • Option to set b aud rate of the serial port. [Boot Menu]2 Select baud rate: 1 - 1200 2 - 2400 3 - 4800 4 - [...]

Using t he CLI 185 • Option to loa d new operational code using XMODEM [Boot Menu] 4 Ready to receive the file with XMODEM/CRC.... Ready to RECEIVE File xcode.bin in binary mode Send several Control-X characters to cancel before transfer starts. • Option to displa y Boot Image Inform ation. Th is option ca n be u sed to dete rmine which im age [...]

186 Using the CLI Operational Compression flag...................2 (lzma) Boot Code Version..............................1 Boot Code Size.................................0x100000 (1048576) Boot Code Offset...............................0x79027c (7930492) Boot Code FLASH flag...........................0 Boot Code CRC.................................[...]

Using t he CLI 187 Validating image2....OK Extracting boot code from image...CRC valid Erasing Boot Flash.....^^^^Done. Wrote 0x10000 bytes. Wrote 0x20000 bytes. Wrote 0x30000 bytes. Wrote 0x40000 bytes. Wrote 0x50000 bytes. Wrote 0x60000 bytes. Wrote 0x70000 bytes. Wrote 0x80000 bytes. Wrote 0x90000 bytes. Wrote 0xa0000 bytes. Wrote 0xb0000 bytes.[...]

188 Using the CLI • Option to Clear All Fl ash and Res et the System t o Default Setting. User action w ill be confirm ed with a Y/N qu estion before executing the command. Th e following is the procedure to reset the system through Boot Menu: [Boot Menu] 9 Are you SURE you want to reset the system? (y/n):y Boot code...... Boot Menu Version: 3.2.[...]

Using t he CLI 189 • Option to use the password recovery procedure. It allows the switch to boot one time witho ut pr om pting for a console password. Note that the ‘enable’ password is not prompted for in this mode. [Boot Menu] 12 Monitoring T raps from CLI It is poss ible to connect to the CLI se ssion and monitor the events or faults that [...]

190 Using the CLI[...]

AAA Command s 191 3 AAA Commands This chapter exp lains the following commands: • aaa authen tication dot1 x • aaa authen tication enab le • aaa authen tication logi n • a aa aut hor ization ne twork de fau lt radi us • enable au thentication • ena ble password • ip http authe ntica tion • i p http s au then ticat ion • login auth[...]

192 AAA Command s aaa authe ntication dot1x Use the aaa authe nticati on dot1x command in Global Configuration mode to create an authen ticat ion login lis t. Syntax aaa auth enticati on dot1 x default method1 no aaa a uthenti cation do t1x def ault • method1 — A t le ast on e from th e follow ing table : Default Conf iguration No authe nticati[...]

AAA Command s 193 aaa authe ntication enable Use the aaa aut hentication enable command in Global Configuration mode to set authenti cation for access ing hig her privile ge level s. T o r eturn to the default configuration, use the no form of this command. Syntax aaa authen tication enable { default | list-name } method1 [ method2 ...] no aaa aut [...]

194 AAA Command s Create a list by entering the aaa aut h enticat ion enable lis t-n am e m et ho d command where list-name is any chara ct er string used to name this l ist. The method argument identifies the list of method s that the authe nticati on algorithm tr ies in the given s e quence. The additiona l metho ds of authe nticati on are used o[...]

AAA Command s 195 • method1 [ method2 ...] — S pecify at least one from the followin g table: Default Conf iguration The default login lists are "defaultList" and "net workList." "defa ultList" is used by the console and only contains the method none . "networ kList" is used by teln e t and SSH and only c[...]

196 AAA Command s console(config)# aaa authentication login default radius local enable none aaa autho rization network default ra dius Use the aaa authoriz ation netwo rk default radius command in Globa l Configuration mo de to enab le the s w itch to acc ept VLAN assignment by the RA D I U S s e r ve r . Syntax aaa authoriz ation network defaul t[...]

AAA Command s 197 enable au thentication Use the enabl e authe nticat ion command in Li n e Configuration mode to specif y the au thentic ation met hod li st when a ccessing a higher privile ge level from a remot e telnet or cons ole. T o re turn to t he defa ult specifi ed by th e enab le auth ent icati on command, use the no f or m o f t hi s c o[...]

198 AAA Command s enable pa ssword Use the enable password command in Global Conf iguration mode to set a lo c a l p a s s w o rd t o c o n t r o l a c ce s s t o t h e p ri v i l e ge d E X E C m o d e . T o re m o v e t h e password re q uirement, use the no form of this command. Syntax enable password passw ord [ encrypted ] no enable passwo rd [...]

AAA Command s 199 ip http authentication Use the ip ht tp au thentica tion command in Global Configuration mode to speci fy authen ticatio n methods for http server users. T o r eturn to the def ault, use the no form of this command. Syntax ip ht tp authen ticat ion method1 [ method2 ...] no ip h ttp auth entica tion • method1 [ method2 ...] — [...]

200 AAA Command s ip https authentication Use the ip ht tps authe ntica tion command in Global Configuration mode to speci fy authe nticati on method s for htt ps server users. T o r eturn to the de fault configuration, use the no form of this co mmand. Syntax ip http s authen ticatio n method1 [ method2 ...] no ip http s authe ntica tion • metho[...]

AAA Command s 201 login authentication Use the login a uthent icati on command in Line Configuration mode to specify the login au thenticat ion metho d list for a line (c onsole, telne t, or SSH). T o return to the defa ult specif ied by the authentica tion login command, use the no form of this c o mmand. Syntax login auth enticati on { defa ult |[...]

202 AAA Command s passwor d (Line Configuration) Use the password command in Line Configuration mode to specify a passwor d on a line. T o remove t he passwor d, use the no fo rm of thi s command. Syntax password passw ord [ encrypted ] no password • password — P asswor d for this leve l. (Range: 8 - 64 charact ers) • encrypted — Encrypted [...]

AAA Command s 203 Default Conf iguration There is no default configuration for this command. Command Mode User EXEC mode User Guideli nes This command has no user guidelines. Example The following example shows the prompt sequence for ex ecut ing the password command. console>password Enter old password:******** Enter new password:******** Confi[...]

204 AAA Command s Example The following example displays the aut hentication configuration. console#show authentication methods Login Authentication Method Lists --------------------------------- defaultList : local Enable Authentication Method Lists ---------------------------------- enableList : local Line Login Method List Enable Method List ---[...]

AAA Command s 205 show users accounts Use the show users accounts command in P rivileged EXEC mode to display information about the lo cal user data base. Syntax show use rs accounts [l ong] Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Exam[...]

206 AAA Command s show us ers log in-his tor y Use the show users login- history command in Global Co nfiguration mode to display information ab out th e login history of users. Syntax show users login-h istory [long] • name — name of user . (Range : 1-20 characters ) Default Conf iguration This command has no default configuration. Command Mod[...]

AAA Command s 207 username Use the us ern ame co mmand in Global Configuration mode to add a new user to the local users database. T o remove a user name use the no form of this command. Syntax username name password passwo rd [ level level ] [ encrypted ] no us ername name • name — The nam e of the u ser . (Range: 1-20 characters) • password[...]

208 AAA Command s[...]

ACL Commands 209 4 ACL Commands This chapter exp lains the following commands: • access-list •d e n y | p e r m i t • ip access-group • no ip access-group • mac access-group • mac access-list e xtended • mac access-list e xtended r ename • show ip access-lists • show mac access-li st[...]

210 ACL Commands access-list Use the access-list com mand in Global Configuration mode to crea te an Access Control List (A CL) that is identified by the parameter list-name . Syntax access-list std-list-num { deny | permit } { srcip srcmask | every } [ log ] [ assign-queue queue-id ] [ redi rect interface | mirror interface ] access-list ext-li st[...]

ACL Commands 211 • assign-queue queue-id — Sp ecifies the particu lar hardware queue for handlin g traffic t hat mat ches the rule. (Ra nge: 0 -6) • mirror interface — A llows th e tra ffic match ing th is rule to be copied to the specified interf ace. • redir ect interface — This pa rame ter allows th e traffic mat ching th is rule to [...]

212 ACL Commands Syntax {deny | p ermit} { srcmac srcmacmask | any } { dstmac dstmacmask | any | bpdu} [{ ethertyp ekey | 0x060 0-0xFFFF }] [ vlan eq 0-409 5 ] [ cos 0-7 ] [ secondary-vlan eq 0-409 5 ] [ secondary-cos 0-7 ] [ log ] [ assign-queue queue- id ] [{ mirror | redirect } interface ] • srcmac — V alid so urce MAC addr ess in format xxx[...]

ACL Commands 213 Default Conf iguration This command has no default configuration. Command Mode Mac-Access-List Config uration mode User Guideli nes The no form of this co mmand is not supp orted, as the rules within a n ACL cannot be deleted individually . Rather the entire ACL must be deleted and res p ecified. The assign-queue and re direct para[...]

214 ACL Commands • seqnum — Pr ecedence for t his interface and direction. A lower sequen ce numb er has higher precedence. R ange: 1 – 42949 67295. Defau lt is 1 . Default Conf iguration This command has no default configuration. Command Mode Global and Interface Co nfiguration User Guidel ines Global mode command configures the A CL on all [...]

ACL Commands 215 Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode or Interfac e Configuration (Ethernet, VLAN or Po r t C h a n n e l ) m o d e User Guideli nes An optional sequence number may b e specified to indicate the order of this acces s-list relativ e to th e other acce ss-lis ts alrea[...]

216 ACL Commands mac access-list exte nded Use the mac access-list exte nded command in Global Configuration mode to create the MAC A cce ss Control List (ACL) identified by the nam e param eter . Syntax mac access -lis t exte nded name no mac access-list extended name • name — Name of the acc ess list. (Rang e: 1-31 chara cters) Default Conf i[...]

ACL Commands 217 mac access-list extende d rename Use the mac ac cess-list extend ed rename command in Global Configuration mode to rename the e xisting MAC Access Control List (ACL ). Syntax mac access-list ext ended rename name newname • name — Exis ting n ame of the a ccess l ist. (R ange: 1 -31 cha racte rs) • newname — New name of the [...]

218 ACL Commands show ip ac cess-lists Use the show ip access-lists command in P rivileged EXEC mode to display access lists applied on interfaces an d all rules that ar e defined for the access list s. Syntax show ip access-lists accesslistname • accessl istname — The n ame used to identify the AC L. The range i s 1-31 characte rs. Default Con[...]

ACL Commands 219 show mac ac cess-list Use the show m ac access- list c o m m a n d i n Pr i v il e g e d E X E C m o d e t o d i s p l a y a MAC access list and all of the rules that ar e defined for the AC L . Syntax show mac access-list name • name — Identif ies a specific M AC access list to display . Default Conf iguration This command has[...]

220 ACL Commands[...]

Addre ss T a ble Co mmands 221 5 Address T able Commands This chapter exp lains the following commands: • bridge add ress •b r i d g e a g i n g - t i m e • bri dge multicast add ress • bri dge mu lticast filtering • bri dge mult icast forbidden a ddress • bri dge mult icast forbid den forwa rd-unregister ed • bri dge mu lticast forwa[...]

222 Address T able C ommands bridge a ddress Use the bridge address command in Interface Configuration mode to add a static MA C-layer statio n source address to the bridge table. T o delete t he MA C addr es s, us e the no for m o f the bridge address command (using the no form of the command witho ut spec ifying a M AC addr es s deletes a ll stat[...]

Addre ss T a ble Co mmands 223 bridge aging-time Use the bridge aging- time command in Global Conf iguration mode to set the ag ing time of the address. T o restore the default, use the no form of the brid ge agin g-t ime command. Syntax brid ge agin g-t ime seconds no bridge ag ing-tim e • seconds — Time is t he num ber of seco nds. (R ange: 1[...]

224 Address T able C ommands bridge multicast address { mac-multicast-addr ess | ip-multicast -address } [ add | remove ] { ethernet interface- list | port-cha nnel port-channel-number - list } no bridge multica st address { mac-multicast -address | ip-multicast-addres s } • add — Adds p orts to t he group. If no opt ion is specified , this is [...]

Addre ss T a ble Co mmands 225 console(config)#interface vlan 8 console(config-if-vlan8)#bridge multicast address 0100.5e02.0203 add ethernet 1/g1-1/g9, 1/g2 bridge multicast filtering Use the bridge mult icast filtering com mand in Global Configuration mode to enable filtering of Multi cast addresses. T o disabl e filtering of Multicast addres ses[...]

226 Address T able C ommands bridge multicast forbidden addres s Use the bridge multicast for bidden address co mmand in Interface Configuration mode t o forbid adding a s pecific Multicast addr ess to spec ific ports. T o retu rn to the system default, use the no form of t his command. If routers exist on the VLAN, do not change the unr e gistered[...]

Addre ss T a ble Co mmands 227 Examples In this e xample the M AC addr ess 01:00: 5e:02:02:03 is f orbidden on port 2/ g9 withi n VLAN 8. console(config)#interface vlan 8 console(config-if-vlan8)#bridge multicast address 01:00:5e:02:02:03 console(config-if-vlan8)#bridge multicast forbidden address 01:00:5e:02:02:03 add ethernet 2/g9 bridge multicas[...]

228 Address T able C ommands bridge multic ast forward-all Use the bridge mu lticast forward-al l command in Interface Configuration mode to enabl e forwar ding of all Multicas t packets. T o restor e the default, us e the no form o f the bri dge mul ticas t forw ard- all command. Syntax bridge multica s t forward-all no bri dge mu lti cast f orwar[...]

Addre ss T a ble Co mmands 229 Command Mode Interface Configuration (VLAN) mode User Guideli nes If routers exist on the VLA N, do not cha nge the unregiste red multicast addr e sses sta t e to drop on the routers po rts. NOTE: Do not use the bridge m ulticast forb idden forw ard-unreg istered command with the bridge multic ast forward -unregister [...]

230 Address T able C ommands Example In this e xample, the b ridge tables ar e cleared. console#clear bridge port secu rity Use the port security command in Interface Configurat ion mo de to disable the learning of ne w addresses on an interfa ce. T o enable new address learning, use the no form of the p o rt security command. Syntax port security [...]

Addre ss T a ble Co mmands 231 Example In this example, frame forwarding is enabl ed withou t learning , and with traps sent eve ry 100 seconds o n port g1. console(config)#interface ethernet 1/g1 console(config-if-1/g1)#port security forward trap 100 port secur ity max Use the port security max command in I n terface Configuration mode to configur[...]

232 Address T able C ommands show brid ge address-t able Use the show bridge address -table command in Privileged EXEC mode to display all entries in the bridg e-forwarding data base. Syntax show brid ge address-ta ble [ vlan vlan ] [ ethern et interface | port-ch annel port-channel-number ] • vla n — Sp ecific valid VLAN , such as VLAN 1. • [...]

Addre ss T a ble Co mmands 233 show bridg e address- table count Use the show br idge address-table count command in P rivileged EXEC mode to display the number of ad dresses pr esent in the F orwarding Databa se. Syntax show bridge a ddress-table coun t [ vla n vlan | ethernet interface-number | port- channel port-channel-number ] • vla n — Sp[...]

234 Address T able C ommands show brid ge address-tab le static Use the show bridge address-t able static command in Privileged EXEC mo de to displ ay static entri es in the bridge-forwar ding databas e. Syntax show bridge address-table stat ic [ vlan vlan ] [ ethernet int erf ac e | port-ch annel port-channel-number ] • vla n — Sp ecific valid[...]

Addre ss T a ble Co mmands 235 show brid ge multic ast addr ess-ta ble Use the show br idge mul ticast ad dress- table comm and in P rivileged EXEC mode to display Multicast MA C address table information. Syntax show bridge mult icast addre ss-table [ vlan vlan -id ] [ address mac-multicast- addr e ss | ip-multicast-addr ess ] [ format ip | ma c ][...]

236 Address T able C ommands Vlan MAC Address Ports ---- ----------------------- ------------ --------------- 1 0100.5E05.0505 NOTE: A multicast MAC add ress maps t o multi ple IP ad dres ses, as shown abo ve. show bridge m ulticast filtering Use the show bridge multicast f iltering command in P rivileged EXEC mode to display the Multicast filte ri[...]

Addre ss T a ble Co mmands 237 show ports security Use the show ports security command in P rivileged EXEC mode to display the por t-lock st atus. Syntax show ports security [ eth ernet interface | port-cha nnel port-channel-number ] • interface — A vali d Et hern et po rt . • port-channel-number — A vali d port- channel nu mber . Default C[...]

238 Address T able C ommands The following table describes the fields in this example. show po rts secur ity addr esses Use the sho w ports security addresses command in Priv ilege d EXEC mode to display curr ent dynamic addresses in lock ed ports. Syntax show ports se curity addresses { ethernet int erf ac e | port-ch annel port- chann el- number [...]

Addre ss T a ble Co mmands 239 Examples The following exampl e displays dynamic addr esses for port channel number 1/g1 . console#show ports security addresses ethernet 1/g1 Dynamic addresses: 83 Maximum addresses: 100 Learned addresses ------- ---------[...]

240 Address T able C ommands[...]

CDP Intero p erability Commands 241 6 CDP Interoperability Commands This chapter exp lains the following commands: • clear isdp counters • clear i sdp table • isdp adve rtise- v2 •i s d p e n a b l e •i s d p h o l d t i m e •i s d p t i m e r •s h o w i s d p •s h o w i s d p e n t r y • sh ow isd p inte rface • show isdp nei g[...]

242 CDP Intero perability Commands clear isdp counters The clear isdp counters command clears the ISDP counters. Syntax clear isdp counters Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guidel ines There ar e no user gui delines for this command. Example console#clear isdp counter[...]

CDP Intero p erability Commands 243 Example console#clear isdp table isdp advertise-v2 The isdp advertise-v2 command enab les the sending of ISDP version 2 pack ets fr om the de vice. Use the “no” form of th is comma nd to disab le sending ISDP ve rsion 2 packets. Syntax isdp advertise-v2 no isdp advertise-v2 Default Conf iguration ISDP se nds [...]

244 CDP Intero perability Commands Default Conf iguration ISDP is enab led. Command Mode Glo bal C onf igura tion mode . Interface (Ethernet) configuration mode. User Guidel ines There ar e no user gui delines for this command. Example The following example enables isdp on int erface 1/g1. console(config)#interface ethernet 1/g1 console(config-if-1[...]

CDP Intero p erability Commands 245 User Guideli nes There ar e no user gui delines for this command. Example The following exampl e sets is dp holdtime to 40 seconds. console(config)#isdp holdtime 40 isdp timer The isdp timer command s e ts period of time between sending new ISDP packets. The range i s given in seconds. Use the “no” form of th[...]

246 CDP Intero perability Commands show isdp The show isdp command displays global ISDP settings. Syntax show isdp •h o s t n a m e — The application w ill check to see if the Hostname configured on the switch is different from the defa ult. If true , it us es the Host name as the device ID. Otherwise, it uses the serial number as th e device I[...]

CDP Intero p erability Commands 247 (Switching) #hostname Dell-PC6248 (Dell-PC6248) #show isdp Timer............................... 30 Hold Time......................... 180 Version 2 Advertisements.......... Enabled Neighbors table last time changed. 0 days 00:12:46 Device ID......................... Dell-PC6248 Device ID format capability....... [...]

248 CDP Intero perability Commands Example console#show isdp entry Switch Device ID Switch Address(es): IP Address: 172.20.1.18 IP Address: 172.20.1.18 Capability Router IGMP Platform cisco WS-C4948 Interface 1/g1 Port ID GigabitEthernet1/1 Holdtime 64 Advertisement Version 2 Entry last changed time 0 days 00:13:50 Version : Cisco IOS Software, Cat[...]

CDP Intero p erability Commands 249 show isdp interface The show isdp int erface command displays ISDP s e ttings for th e specified interface. Syntax show isdp interface { all | ethernet interface } • all — Show ISDP settings for all in terfaces. • interface — Specifies a valid int erface. Th e full syn tax is unit/port. Default Conf igura[...]

250 CDP Intero perability Commands 1/g8 Enabled 1/g9 Enabled 1/g10 Enabled 1/g11 Enabled 1/g12 Enabled 1/g13 Enabled 1/g14 Enabled 1/g15 Enabled 1/g16 Enabled 1/g17 Enabled 1/g18 Enabled 1/g19 Enabled 1/g20 Enabled 1/g21 Enabled 1/g22 Enabled 1/g23 Enabled 1/g24 Enabled console#show isdp interface ethernet 1/g1 Interface Mode --------------- ------[...]

CDP Intero p erability Commands 251 show isdp ne ighbors The show isdp nei ghbors command displays the list of neighboring devices. Syntax show is dp neig hbo rs { ethernet interface | detail } • interface — S pecifies a va lid inte rface. The fu ll synt ax is u nit/port. • detail — Show detailed information abou t the neighbors. Default Co[...]

252 CDP Intero perability Commands console#show isdp neighbors detail Device ID Switch Address(es): IP Address: 172.20.1.18 IP Address: 172.20.1.18 Capability Router IGMP Platform cisco WS-C4 948 Interface 1/g1 Port ID GigabitEthe rnet1/1 Holdtime 162 Advertisement Version 2 Entry last changed time 0 days 00:5 5:20 Version : Cisco IOS Software, Cat[...]

CDP Intero p erability Commands 253 Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#show isdp traffic ISDP Packets Received.......................... 4253 ISDP Packets Transmitted....................... 127 ISDPv1 Packets Received........................ 0 ISDPv1 Packets Transmitt[...]

254 CDP Intero perability Commands[...]

DHCP Layer 2 Re lay Comman ds 255 7 DHCP Layer 2 Relay Commands This chapter exp lains the following commands: • d hcp l2relay ( Globa l Configu ration ) (Glo bal Con figurat ion) • dhcp l2r elay (Int erface Confi guration) (Int erface Confi guration) • d hcp l2relay c ircuit-id • d hcp l2relay remo te-id • d hcp l2relay trus t • d hcp [...]

256 DHCP Layer 2 Relay Comman ds dhcp l2relay (Globa l Configuration) Use the dhcp l2relay com mand to enable layer 2 DHCP relay functionality . The subsequent commands mentioned in this section can only be used when the L2-D HCP relay is enable d. Use the "no " form of this com mand to disa ble L2-DHCP relay . Syntax dhcp l2relay no dhcp[...]

DHCP Layer 2 Re lay Comman ds 257 Command Mode Interface Configuration (Ethernet) . User Guideli nes There ar e no user gui delines for this command. Example console(config-if-1/g1)#dhcp l2relay dhcp l2relay circuit- id Use the dhcp l2relay circuit-id command to enable setting the DHCP Opti on 82 Circu it ID fo r a VLAN. Whe n enable d, the i nterf[...]

258 DHCP Layer 2 Relay Comman ds dhcp l2relay remote-id Use the dhcp l 2relay remo te-id comm and to enable s etting the D HCP Option 82 Remote I D for a VLAN. When enabled, the supplied string is used for the Remote ID in DHCP Option 82. Use the "no" form of t his command to disa ble sett ing the D HCP Opti on 82 Rem ote ID . Syntax dhcp[...]

DHCP Layer 2 Re lay Comman ds 259 dhcp l2relay trust Use the dhcp l2relay trust command to configure an interface to mandate Option-82 on r eceiving DHCP packets. Syntax dhcp l2relay trust no dhcp l2relay trust Default Conf iguration DHCP Option 82 is discar ded by default. Configura tion Mode Interface Configuration (Ethernet) . User Guideli nes T[...]

260 DHCP Layer 2 Relay Comman ds Default Conf iguration DHCP L2 Relay is disa bled on all VLANs by defa ult . Command Mode Glo bal C onf igura tion mode User Guidel ines There ar e no user gui delines for this command. Example console(config)#dhcp l2relay vlan 10,340-345[...]

DHCP Sn ooping Comma nds 261 8 DHCP Snoopin g Commands This chapter exp lains the following commands: • clea r ip dhcp s nooping st atistics •i p d h c p s n o o p i n g • ip dhcp snooping binding • i p dhc p sno opi ng data ba se • ip dhcp snoop ing da taba se write -dela y •i p d h c p s n o o p i n g l i m i t •i p d h c p s n o o [...]

262 DHCP Snoo ping Comman ds clear ip dhcp sn ooping statistics Use the clear ip dhcp sn ooping statistics command to clear al l DHCP Snooping statis tics. Syntax clear ip dhcp snooping statistics Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC User Guidel ines There ar e no user gui delines [...]

DHCP Sn ooping Comma nds 263 Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config)#ip dhcp snooping console(config-if-vlan1,2,3)#ip dhcp snooping ip dhcp snooping bind ing Use the ip dhcp snoo ping binding command to configure a stat ic DHCP Snooping binding. Use the “no” f[...]

264 DHCP Snoo ping Comman ds User Guidel ines There ar e no user gui delines for this command. Example console(config)#ip dhcp snooping binding 00:00:00:00:00:01 vlan 10 10.131.12.134 interface 1/g1 ip dhcp snoop ing database Use the ip dhc p snooping datab ase command to configure the persistent storage location of the DHCP snooping database. Thi [...]

DHCP Sn ooping Comma nds 265 The following example configures the storage location of the snooping database as r emote. console(config)#ip dhcp snooping database tftp://10.131.11.1/db.txt ip dhcp snooping da tabase write- delay Use the ip dhcp snoo ping database write-delay comm and to configure the interval in seconds at w hich the DHCP Snooping d[...]

266 DHCP Snoo ping Comman ds ip dhcp snooping limit Use the ip dhc p snoo ping li mit command to control the maximum rate of DHCP m essa ges. U se the “ no” for m of t his co mma nd to rese t the li mit to the default. Syntax ip dhcp sn ooping limit { non e | rate pps [ burst inter v al sec ond s ]} no ip dhcp snoopi ng limit • pps — T he m[...]

DHCP Sn ooping Comma nds 267 ip dhcp snooping log-inva lid Use the ip dhcp snoo ping log-invalid command to enable logging of DHCP messages filtered by the DHCP S nooping application. Use the “no” form of this com man d to disa ble l ogg ing . Syntax ip dhcp snooping log- invalid no ip dhcp snoopi ng lo g-invali d Default Conf iguration Log gin[...]

268 DHCP Snoo ping Comman ds Default Conf iguration P orts ar e unt rusted by default. Command Mode Interface Configuration (Et hernet, port-channel) mode User Guidel ines There ar e no user gui delines for this command. Example console(config-if-1/g1)#ip dhcp snooping trust console(config-if-1/g1)#no ip dhcp snooping trust ip dhcp snoop ing verify[...]

DHCP Sn ooping Comma nds 269 Example console(config)#ip dhcp snooping verify mac-address show ip dhcp snooping Use the show ip dhcp snooping command to display the DHCP snooping global and per port configuration. Syntax show ip dhcp snoo ping Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mo[...]

270 DHCP Snoo ping Comman ds 1/g2 No Yes 1/g3 No Yes 1/g4 No No 1/g6 No No show ip dh cp snooping b inding Use the show ip dhcp sno oping bi nding com mand to disp lay the DHCP snooping binding entri e s. Syntax show ip dh cp snooping binding [{ static | dynamic }] [ int e rface port ] [ vlan vlan-id ] • static | dynamic — Use these keywor ds t[...]

DHCP Sn ooping Comma nds 271 MAC Address IP Address VLAN Interface Lease time(Secs) ------------------ ------------ ---- --------- ------------- 00:02:B3:06:60:80 210.1.1.3 10 1/g1 86400 00:0F:FE:00:13:04 210.1.1.4 10 1/g1 86400 show ip dhcp snooping database Use the show ip dhcp snooping database command to display the DHCP snooping configuration [...]

272 DHCP Snoo ping Comman ds show ip dh cp snooping in terfaces Use the show ip dhcp sno oping i nterfaces command to show the DHCP Snooping status of the interfaces . Syntax show ip dh cp snooping interfaces i nterfac e • interfa ce — A v alid phy sical int erface. Default Conf iguration There is no default configuration for this command. Comm[...]

DHCP Sn ooping Comma nds 273 console#show ip dhcp snooping interfaces ethernet 1/g15 Interface Trust State Rate Limit Burst Interval (pps) (seconds) ---------- ------------- ------------- - -------------- 1/g15 Yes 15 1 show ip dhcp snooping statistics Use the show ip dhcp snooping stat istics command to display the DHCP snoopin g filtra tion sta t[...]

274 DHCP Snoo ping Comman ds Example console#show ip dhcp snooping statistics Interface MAC Verify Client Ifc DHCP Server Failures Mismatch Msgs Rec'd ----------- ---------- ---------- ----------- 1/g2 0 0 0 1/g3 0 0 0 1/g4 0 0 0 1/g5 0 0 0 1/g6 0 0 0 1/g7 0 0 0 1/g8 0 0 0 1/g9 0 0 0 1/g10 0 0 0 1/g11 0 0 0 1/g12 0 0 0 1/g13 0 0 0 1/g14 0 0 0 [...]

Dynam ic AR P Inspec tio n Comman ds 275 9 Dynamic ARP Inspec tion Commands This chapter exp lains the following commands: • arp access-list • clear counte rs ip arp inspec tion • ip arp inspect ion filter • ip arp inspection limit • ip arp inspection trust • ip arp inspection validate • ip arp inspection vlan • permit ip host ma c [...]

276 Dynamic ARP Ins pecti on Comma nds arp access-list Use the arp access-list com ma nd t o cre ate an ARP ACL . I t wi ll p la ce th e u ser in ARP ACL Configuration mode. Use th e “no” f orm of this comma nd to delete an ARP ACL. Syntax arp access-list acl-name no arp access-list acl- na me • acl-n ame — A v alid ARP A CL name (Range: 1 [...]

Dynam ic AR P Inspec tio n Comman ds 277 Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#clear counters ip arp inspection ip arp inspecti on filter Use the ip arp inspection fi lter command to configure the ARP AC L to be used for a single VLAN or a range of VLANs to filter invali[...]

278 Dynamic ARP Ins pecti on Comma nds Example console(config)#ip arp inspection filter tier1 vlan 2- 10 static console(config)#ip arp inspection filter tier1 vlan 20-30 ip arp inspection limit Use the ip a rp in spection limit com mand to conf igure the rate limit a nd burst interval v alues for an interface. Configu ring ‘none’ for the limit [...]

Dynam ic AR P Inspec tio n Comman ds 279 Example console(config-if-1/g1)#ip arp inspection limit none console(config-if-1/g1)#ip arp inspection limit rate 100 burst interval 2 ip arp inspecti on trus t The ip a rp insp ection tru st co mmand configur es an interface as trusted for Dynami c ARP Inspec tion. Us e the “no” f orm of th is comman d [...]

280 Dynamic ARP Ins pecti on Comma nds ip arp inspection validat e Use the ip a rp insp ection val idate command to enable additiona l validation checks like s ource MAC address va lidation, destination MAC addr ess validation or IP address validation on the received ARP packets. Each command overrides the configuratio n of the previous command. F [...]

Dynam ic AR P Inspec tio n Comman ds 281 ip arp inspec tion vlan Use the ip arp inspe ction vlan comm and to enab le Dy nam ic A RP Ins pe ctio n on a single VLAN or a range of VLANs. Use the “no” form of this command to disable Dynamic ARP Inspection on a single VLAN or a range of VLANs. Syntax ip arp inspec tion vlan vlan-range [ logging ] no[...]

282 Dynamic ARP Ins pecti on Comma nds permit ip ho st mac host Use the permit ip host ma c host command to configure a rule for a valid IP address a nd MA C address comb ination used in ARP packet va lidation. Use the “no” form of this command to delete an ARP A CL rule. Syntax permit ip host sender -ip max host sender -mac no p ermit ip h ost[...]

Dynam ic AR P Inspec tio n Comman ds 283 Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC User Guideli nes There ar e no user gui delines for this command. Example console#show arp access-list ARP access list H2 permit ip host 1.1.1.1 mac host 00:01:02:03:04:05 permit ip host 1.1.1.2 mac host [...]

284 Dynamic ARP Ins pecti on Comma nds Command Mode P rivileged EXEC User Guidel ines The following fields are displayed for each interface: Example console#show ip arp inspection ethernet Interface Trust State Rate Limit Burst Interval (pps) (seconds) --------------- ----------- ---------- --------- ------ 1/g1 Untrusted 15 1 1/g2 Untrusted 10 10 [...]

Dynam ic AR P Inspec tio n Comman ds 285 show ip arp inspection statistics Use the show ip arp inspect ion statistics command to display the statistics of the ARP pac kets proce ssed by Dynamic ARP Ins p ection. Giv en vlan-range argument , it displays the stat istics on all D AI enabled Vlans in th at range. In the case of no ar g ument, it lists [...]

286 Dynamic ARP Ins pecti on Comma nds Example console#show ip arp inspection statistics VLAN Forwarded Dropped ---- --------- ------- 10 90 14 20 10 3 console#show ip arp inspection statistics vlan 10,20 VLAN DHCP ACL DHCP ACL Bad Src Bad Dest Invalid Drops Drops Permits Permits MAC MAC IP ---- ---------- ---------- ---------- ---------- ---- ----[...]

Dynam ic AR P Inspec tio n Comman ds 287 show ip arp inspection vlan Use the show ip arp inspection vlan command to disp lay the Dynamic ARP Inspection configuration on al l the VLAN s in the given VLAN range. It als o displays the global configuration values fo r source MA C validation, destination MAC validation and invalid IP validation. Syntax [...]

288 Dynamic ARP Ins pecti on Comma nds Example console#show ip arp inspection vlan 10-12 Source Mac Validation : Disabled Destination Mac Validation : Disabled IP Address Validation : Disabled Vlan Configuration Log Invalid ACL Name Static flag ---- ------------- ----------- ------- -- ---------- 10 Enabled Enabled H2 Enabled 11 Disabled Enabled 12[...]

Ether net Co nfi gurat ion Co mmands 289 10 Ethernet Co nfiguration Comma nds This chapter exp lains the following commands: •c l e a r c o u n t e r s •d e s c r i p t i o n •d u p l e x • flowcontr ol • inter face ethernet • inter face range ethernet •m t u • negotiation • sh ow inte rfaces advertise • sh ow int erfaces config[...]

290 Ethe rnet Configu ration Comma nds clear co unters Use the clear counters command in P rivileged EXEC mode to clear stati s tics on an interface. Syntax clear counters [ ethern et interface | port-cha nnel port-channel-number ] • interface — V alid Ethe rnet po rt. The fu ll synt ax is: unit/ port • port- channel -number — V alid port -[...]

Ether net Co nfi gurat ion Co mmands 291 Default Conf iguration By default, the interface does not have a description. Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes This command has no user guidelines. Example The following exampl e adds a desc ription t o t he Ethernet port 5. console(config)#interface ethern[...]

292 Ethe rnet Configu ration Comma nds User Guidel ines This command has no user guidelines . Example The following example configur es the duplex operation of Ethernet port 5 to force full duplex operation. console(config)# interface ethernet 1/g5 console(config-if-1/g5)# duplex full flowcontrol Use the flowcontrol co mmand in Global Configuration[...]

Ether net Co nfi gurat ion Co mmands 293 interfac e ethernet Use the interfac e etherne t command in Glob al Configuration mode to enter the interface configuration mode to co nfigure an Ethernet type interface. Syntax interface ethernet interface • interface — V alid Eth ernet port . The full syntax is unit/ port. Default Conf iguration This c[...]

294 Ethe rnet Configu ration Comma nds Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode User Guidel ines Commands under the interface range context ar e ex e cuted independently on each acti ve int erface in the range . If the comm and returns an er ror on one of the active inte rfaces, it doe[...]

Ether net Co nfi gurat ion Co mmands 295 Command Mode Interface Configuration (Ethernet) mode User Guideli nes The val ue se t allows an additi onal f our byt es for t he VLAN ta g. Example The following example of the mt u command incr eases maximum packet size to 9216 bytes. console(config-if-1/g5)#mtu 9216 negotiatio n Use the negoti ation comma[...]

296 Ethe rnet Configu ration Comma nds Example The following exampl e enables auto nego tia tions on giga bit Ethe rnet por t 5 of unit 1. console(config)#interface ethernet 1/g5 console(config-if-1/g5)#negotiation show inte rfaces advertise Use the show inter faces advertise comm and in P rivileged EXEC mode t o display information ab out auto-neg[...]

Ether net Co nfi gurat ion Co mmands 297 console# show interfaces advertise ethernet 1/g1 Port: Ethernet 1/g1 Type: 1G-Copper Link state: Up Auto negotiation: enabled 10h 10f 100h 100f 1000f Admin Local Link ------ ------ ------ ------ ------ Advertisement yes yes yes yes no show interfa ces configuration Use the sh ow inte rfac es con fig urat ion[...]

298 Ethe rnet Configu ration Comma nds Example The following example displays the co nfiguration for all configured interfaces: console>show interfaces configuration Port Type Duplex Speed Neg Admin Stat e ----- ------------------------------ ------ ------- ---- ----- 1/g1 Gigabit - Level Full 100 Auto Up 1/g2 Gigabit - Level N/A Unknown Auto Up[...]

Ether net Co nfi gurat ion Co mmands 299 The displayed port co nfiguration information includes the follow ing: show interfa ces counters Use the show in terfaces counters command in User EXEC mode to display traff ic seen b y the int erface. Syntax show interfaces counters [ ethe rnet interface | port-cha nnel port-channel- number ] • interface [...]

300 Ethe rnet Configu ration Comma nds console>show interfaces counters Port InOctets InUcastPkts ---- ---------- --------- 1/g1 183892 1289 3/g1 123899 1788 Port OutOctets OutUcastPkts ---- ---------- --------- 1/g1 9188 9 2/g1 0 0 3/g1 8789 27 Ch InOctets InUcastPkts ---- ---------- --------- 1 27889 928 Ch OutOctets OutUcastPkts ---- --------[...]

Ether net Co nfi gurat ion Co mmands 301 Port OutOctets OutUcastPkts ---- ---------- --------- 1/g1 9188 9 Alignment Errors: 17 FCS Errors: 8 Single Collision Frames: 0 Multiple Collision Frames: 0 Deferred Transmissions: 0 Late Collisions: 0 Excessive Collisions: 0 Oversize Packets: 0 Internal MAC Rx Errors: 0 Received Pause Frames: 0 Transmitted [...]

302 Ethe rnet Configu ration Comma nds show interfaces description Use the show interfaces description command in User EXEC mode to display the description for a ll configured interfaces. Syntax show int erfaces descri ption [eth ernet interface | port-cha nnel port-channel- number ] • interface — V alid Ethe rnet port . • port- channel -numb[...]

Ether net Co nfi gurat ion Co mmands 303 Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guideli nes This command has no user guidelines. Example The f ollowi ng ex ample di splays the desc riptio n for t he inter face 1/ g1. console>show interfaces description Port Description ---- ------------[...]

304 Ethe rnet Configu ration Comma nds • interface — A valid Ethernet port. • port- channel -number — A valid port- channel tru nk inde x. Default Conf iguration There is no default configuration for this command. Command Mode User EXEC mode User Guidel ines The com mand will be show interfa ces detai l {ether net interfa ce | port - channe[...]

Ether net Co nfi gurat ion Co mmands 305 Port Description ---- ------------------------------------------- 1/xg1 ExampleName VLAN Info: --------- VLAN Membership mode: General Operating parameters: PVID: 1 (default) Ingress Filtering: Enabled Acceptable Frame Type: All GVRP status: Enabled Protected: Enabled Port 1/xg1 is member in: VLAN Name Egres[...]

306 Ethe rnet Configu ration Comma nds Acceptable Frame Type: All Port 1/xg1 is statically configured to: VLAN Name Egress rule ---- --------- ----------- 1 default untagged 11 VLAN0011 tagged 19 IPv6 VLAN untagged 72 VLAN0072 untagged Forbidden VLANS: VLAN Name ---- --------- 73 Out Spanning Tree Info ------------------ Port 1 (1/xg1) enabled Stat[...]

Ether net Co nfi gurat ion Co mmands 307 show interfa ces status Use the show interfac es status co mmand in User EXEC mode to display the status for al l conf igured interfaces. Syntax show interfaces status [ethernet interface | port-ch annel port-channel- number ] • interface — A vali d Eth erne t por t. • port-channel-number — A vali d [...]

308 Ethe rnet Configu ration Comma nds 1/g9 Gigabit - Level N/A Unknown Auto Down Inactive 1/g10 Gigabit - Level N/A Unknown Auto Down Inactive 1/g11 Gigabit - Level N/A Unknown Auto Down Inactive 1/g12 Gigabit - Level N/A Unknown Auto Down Inactive 1/g13 Gigabit - Level N/A Unknown Auto Down Inactive 1/g14 Gigabit - Level N/A Unknown Auto Down Ina[...]

Ether net Co nfi gurat ion Co mmands 309 ch9 Link Aggregate Down --More-- or (q)uit ch10 Link Aggregate Down ch11 Link Aggregate Down ch12 Link Aggregate Down ch13 Link Aggregate Down ch14 Link Aggregate Down ch15 Link Aggregate Down ch16 Link Aggregate Down ch17 Link Aggregate Down ch18 Link Aggregate Down ch19 Link Aggregate Down ch20 Link Aggreg[...]

310 Ethe rnet Configu ration Comma nds ch40 Link Aggregate Down ch41 Link Aggregate Down ch42 Link Aggregate Down ch43 Link Aggregate Down ch44 Link Aggregate Down ch45 Link Aggregate Down ch46 Link Aggregate Down ch47 Link Aggregate Down ch48 Link Aggregate Down Flow Control:Disabled console# The displaye d port stat u s info rmation includes t he[...]

Ether net Co nfi gurat ion Co mmands 311 • port-type — V alues are g for gigabit Eth ernet port, or xg for 10 gigabit Ethernet p ort. • port — port n umber . V alues are 1-24 or 1-48 for port_type g, and 1-4 for port_type xg. Exam ple: x g2 is the 10 gigabi t Ethe rnet po rt 2. • switchport — Displays stati stics for the entir e switch.[...]

312 Ethe rnet Configu ration Comma nds Packets RX and TX 512-1023 Octets.............. 4982 Packets RX and TX 1024-1518 Octets............. 479845 Packets RX and TX 1519-1522 Octets.. ........... 0 Packets RX and TX 1523-2047 Octets.. ........... 0 Packets RX and TX 2048-4095 Octets.. ........... 0 Packets RX and TX 4096-9216 Octets.. ........... 0[...]

Ether net Co nfi gurat ion Co mmands 313 Packets Transmitted 128-255 Octets........... .. 245 --More-- or (q)uit Packets Transmitted 256-511 Octets........... .. 25 Packets Transmitted 512-1023 Octets.......... .. 158 Packets Transmitted 1024-1518 Octets......... .. 302 Max Frame Size................................. 1518 Total Packets Transmitted [...]

314 Ethe rnet Configu ration Comma nds console#show statistics ethernet switchport Total Packets Received (Octets)............ .... 16877295 Unicast Packets Received................... .... 1608 Multicast Packets Received................. .... 48339 Broadcast Packets Received................. .... 69535 Receive Packets Discarded.................. .[...]

Ether net Co nfi gurat ion Co mmands 315 Syntax show storm-contro l [all | int erf ace ] • interface — V alid Ethernet port. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Examples The followi ng ex ample shows storm co ntrol configuratio[...]

316 Ethe rnet Configu ration Comma nds shutdown Use the shutdown command in Interface Config uration mode to disable an interface. T o restart a disabled interface, use the no form of this command. Syntax shutdown no shutdown Default Conf iguration The interface is enabled. Command Mode Interface Configuration (Et hernet, P ort-Channel, T unnel, L [...]

Ether net Co nfi gurat ion Co mmands 317 no speed • 10 — Configures the port to 10 Mbp s operation. • 100 — Configures the port to 10 0 M bps operation. Default Conf iguration This command has no default setting. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example The following [...]

318 Ethe rnet Configu ration Comma nds Default Conf iguration The default value is 5 . Command Mode Interface Configuration (Et hernet) m ode User Guidel ines This command has no user guidelines . Example console(config-if-1/g1)#storm-control broadcast level 5 storm-contr ol multicast Use the storm- contro l multicas t com mand in Interface Configu[...]

Ether net Co nfi gurat ion Co mmands 319 Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example console(config-if-1/g1)#storm-control multicast level 5 storm-co ntrol unicast Use the storm-co ntrol un icast command in Interface Configuration mode to enable unknown unicast storm control for[...]

320 Ethe rnet Configu ration Comma nds User Guidel ines This command has no user guidelines . Example console(config-if-1/g1)#storm-control unicast level 5[...]

GVRP C o mmand s 321 11 GVRP Commands This chapter exp lains the following commands: • clear gvrp statistic s •g a r p t i m e r • gv rp enab le (globa l) • gv rp enable (interface) • gvrp registration-forbid • gv rp vlan-creation-forbid • show gvrp confi guration • sh ow gvrp error-statistics •s h o w g v r p s t a t i s t i c s[...]

322 GVRP Com mands clear gvrp statistics Use the clear gvrp statistics command in Priv ilege d EXEC mode to clear all the GVRP statist ics information. Syntax clear gvrp statisti cs [ ethernet interface | port-channel port-channel-number ] • interface — A valid Ethernet interface. • port- channel -number — A valid port -channel i ndex. Defa[...]

GVRP C o mmand s 323 • leave — Indicates the tim e in centiseconds th at the device waits before leaving its G ARP s tate. • leaveall — U sed to con firm th e por t wi thin th e VL AN. Th e tim e is th e interval betw een messages sent , measu red in centisec onds. • timer _value — Timer values in cen tiseconds. The ran ge is 10-100 for[...]

324 GVRP Com mands gvrp enable (global) Use the gvrp en able (glo b al) command in Gl o bal Configuration mode to enable GVRP g lobally on the s w itch. T o disable GVRP globally on the switch, use the no form of thi s command. Syntax gvrp enable no gvrp en able Default Conf iguration GVRP is globally disabled. Command Mode Glo bal C onf igura tion[...]

GVRP C o mmand s 325 Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes An Access port cannot join dy namically to a VLAN because it is a lways a member of only one VLAN . Membership in unt agged VLAN would be propagated in a s ame way as a tagged VL AN. In such cases it is the administra tor ’s respons ibility t[...]

326 GVRP Com mands User Guidel ines This command has no user guidelines . Example The following example shows how default dynamic r egistering and deregistering is forbidden for each VLAN on port 1/g8. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#gvrp registration-forbid gvrp v lan-c reation -forbid Use the gvrp vl an-creation-fo[...]

GVRP C o mmand s 327 show gvrp configuration Use the show gvrp conf iguration command in Priv ilege d EXEC mode to display GVRP configuration information. T imer values are displa y ed. Other data shows whether GVRP is enabled and which ports ar e running GVRP . Syntax show gvrp configuration [ ethernet interface | port-chan nel port-channel- numbe[...]

328 GVRP Com mands 1/g2 20 60 1000 Disabled 1/g3 20 60 1000 Disabled 1/g4 20 60 1000 Disabled 1/g5 20 60 1000 Disabled 1/g6 20 60 1000 Disabled 1/g7 20 60 1000 Disabled 1/g8 20 60 1000 Disabled 1/g9 20 60 1000 Disabled 1/g10 20 60 1000 Disabled 1/g11 20 60 1000 Disabled 1/g12 20 60 1000 Disabled 1/g13 20 60 1000 Disabled 1/g14 20 60 1000 Disabled s[...]

GVRP C o mmand s 329 User Guideli nes This command has no user guidelines. Example The fol low ing exam ple dis p lay s GV RP erro r s tat isti cs inf orm at io n. console>show gvrp error-statistics GVRP error statistics: ---------------- Legend: INVPROT: Invalid Protocol Id INVATYP: Invalid Attribute Type INVALEN: Invalid Attribute Length INVAV[...]

330 GVRP Com mands show gvrp statistics Use the show gvrp statistics comm and in User EXEC mode to display GVRP statistics . Syntax show gvrp statistics [ eth ernet interface | port -channel port-channel-number ] • interface — A val id Et hernet in terface. • port- channel -number — A valid port chan nel inde x. Default Conf iguration This [...]

GVRP C o mmand s 331 Port rJE rJIn rEmp rLIn rLE rLA sJE sJIn sEmp sLIn sLE sLA ---- --- ---- ---- ---- --- --- --- --- --- ---- ---- --- 1/g1 0 0000 0 0 00000 1/g2 0 0000 0 0 00000 1/g3 0 0000 0 0 00000 1/g4 0 0000 0 0 00000 1/g5 0 0000 0 0 00000 1/g6 0 0000 0 0 00000 1/g7 0 0000 0 0 00000 1/g8 0 0000 0 0 00000[...]

332 GVRP Com mands[...]

IGMP Snoo ping Comma nds 333 12 IGMP Sn ooping Co mman ds This chapter exp lains the following commands: • ip igmp snooping (global) • ip igmp snooping (interface) • ip igmp snooping host-tim e-out • ip igmp snooping leav e-time-ou t • ip igmp snooping mrouter -ti me-out • sh ow ip igm p snooping groups • sh ow ip igm p snooping inter[...]

334 IGMP Snooping Command s ip igmp snooping (global) Use the ip igmp snooping command in Global Configurat ion mo de to globally enable Int ernet Group Man agement Protocol (IGMP) snooping. Use the no form of this command to disab le IGMP snooping globally . Syntax ip ig mp snoop ing no ip ig mp snoop ing Default Conf iguration IGMP snooping is di[...]

IGMP Snoo ping Comma nds 335 Default Conf iguration IGM P s noop in g is disa ble d. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guideli nes IGMP snooping can be enabled on Ethernet interfaces. Example The following exampl e enables IGMP snooping. console(config-if-1/g1)#ip igmp snooping ip igmp snooping ho st-time-out U[...]

336 IGMP Snooping Command s User Guidel ines The timeout should be more than sum of r e sponse time and twice the que ry interval. Example The following example co nfigures the host timeout to 300 s e conds. console(config-if-1/g1)#ip igmp snooping host-time- out 300 ip igmp snooping leav e-time-out Use the ip igmp snoopin g leave- time-out command[...]

IGMP Snoo ping Comma nds 337 User Guideli nes The leav e timeout sho uld be s et greater than t he maximum time tha t a host is allowed to r e spond to an IGMP Query . Use immediate l eave only where there is only one host connected to a po rt. Example The following example configur es the host leave-time-ou t to 60 seconds. console(config-if-1/g1)[...]

338 IGMP Snooping Command s Example The follow ing example conf igures the mrouter timeou t to 200 sec onds. console(config-if-1/g1)#ip igmp snooping mrouter- time-out 200 show ip igmp snooping groups Use the show ip igm p snooping grou ps command in User EXEC mode to display the Mult icast groups learned by IGMP snooping. Syntax show ip i gmp snoo[...]

IGMP Snoo ping Comma nds 339 IGMP Reporters that are forbidden statically: --------------------------------------------- Vlan IP Address Ports ---- ------------------ ------------------- 1 224-239.130|2.2.3 1/g19 show ip igmp snooping interface Use the show ip igm p snoop ing inter face command in Pri vileged EX EC mode to display t he IGMP snoopin[...]

340 IGMP Snooping Command s Fast Leave Mode........................... Disabled Group Membership Interval................. 260 Max Response Time......................... 10 Multicast Router Present Expiration Time.. 300 show ip igmp snooping mrouter Use the show ip igmp snoopin g mrouter c o m m a n d i n P r i v i l e g e d E X E C m o d e to disp[...]

IGMP Snoo ping Comma nds 341 ip igmp snooping (VLA N) Use the ip igmp snoopin g command in VLAN Configuration mode to enable IGMP snooping on a particular interface or on all interfaces participating in a VLAN. T o disable IGMP snooping use the no form of this command. Syntax ip igmp snooping vlan-id no ip igmp sn oopin g Default Conf iguration IGM[...]

342 IGMP Snooping Command s Syntax ip igmp snoopi ng fast- leave vlan -id no ip igmp sno oping f ast-leav e • vla n id — Number a ssigned to the VLAN. Default Conf iguration IGMP snoopin g fast-leav e mode is disabled on VL ANs by default. Command Mode VLAN Configuration mode User Guidel ines This command has no user guidelines . Example The fo[...]

IGMP Snoo ping Comma nds 343 Default Conf iguration The default group mem bership interval time is 260 se conds. Command Mode VLAN Configuration mode User Guideli nes This command has no user guidelines. Example The following example configur es an IGMP snooping group membership interval of 520 seconds. console(config-vlan)#ip igmp snooping groupme[...]

344 IGMP Snooping Command s Command Mode VLAN Configuration mode User Guidel ines When usin g IGMP Snooping Q uerier , thi s parame ter sho uld be les s than th e value for the IGMP Snooping Q uerier query interval. Example The followi ng e xample sets the maxi mum r esponse time to 60 seconds on VLAN 2. console(config-vlan)#ip igmp snooping maxres[...]

IGMP Snoo ping Comma nds 345 User Guideli nes This command has no user guidelines. Example The fo llowing e xampl e sets th e multicas t route r prese nt ex piration time on VLA N 2 to 60 s econ ds. console(config-vlan)#ip igmp mcrtexpiretime 2 60[...]

346 IGMP Snooping Command s[...]

IGMP Snoo ping Quer ier Co mmands 347 13 IGMP Snoopin g Querier Commands This chapter exp lains the following commands: • ip igmp snooping querier • ip igmp snooping querier election participate • ip igmp snooping querier query -interval • ip igmp snooping querier tim er expiry • ip igmp snooping querier version • sh ow igmp snooping qu[...]

348 IGMP Snooping Q uerier Co mmands ip igmp snooping querier This command enables or di sables IGMP Snooping Querie r on the system (Global Configuration mode) or on a VLAN. Using this command, y ou can specify the IP address that th e snooping qu erier switch should use as the source address when generating periodic queries. The no form of t his [...]

IGMP Snoo ping Quer ier Co mmands 349 configured, then use the management IP address as the IGMP snooping querier source address. Using all zeros for the querier IP address r emoves it. The VLAN IP address takes pr eced ence over the global IP address. Example The following exampl e enables IG MP snooping q ue rier in VLAN Configuration mode. conso[...]

350 IGMP Snooping Q uerier Co mmands Example The following example configures the snooping querier to partic ipate in the quer ier el ectio n. console(config-vlan)#ip igmp snooping querier election participate ip igmp snooping querier query-inte rval This command sets the IGMP Querier Que ry Interval ti m e, which is t he amount of time in seconds [...]

IGMP Snoo ping Quer ier Co mmands 351 ip igmp snooping qu erier timer expiry This command sets the IGMP Querier timer expiration period wh ich is the time period that the switch remai ns in Non-Querier mode after it has discovered that there is a Multicast Qu erier in the netw ork. The no form of this command sets the IGMP Querier timer e xpiration[...]

352 IGMP Snooping Q uerier Co mmands Syntax ip igmp snooping querier version number no ip igmp snoo ping querier ver sion • number — IG MP ve rsion. (R ange: 1– 2) Default Conf iguration The q u erie r ve rsio n def ault is 2. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The followi[...]

IGMP Snoo ping Quer ier Co mmands 353 • Q uer ier Tim eout — Disp lay s the am ount of time to w ait in the N on- Querier opera tional state before moving to a Querier sta te. When yo u specify a v alue for vlan_id , the follow ing information appears: • VL AN A dmin M ode — In dicates wh ether IGM P Snoopin g Querier is activ e on the VLA [...]

354 IGMP Snooping Q uerier Co mmands Command Mode P ri vileged E xec mode User Guidel ines This command has no user guidelines . Example The following example shows querier information fo r VLAN 2. console#show ip igmp snooping querier vlan 2 Vlan 2 : IGMP Snooping querier status ---------------------------------------------- IGMP Snooping Querier [...]

IP Addr essing C ommands 355 14 IP Addressing Comman d s This chapter exp lains the following commands: •c l e a r h o s t • ip addr ess • ip addr ess dhcp • ip addr ess vl an • ip defau lt-ga tewa y • ip domain-lookup •i p d o m a i n - n a m e •i p h o s t •i p n a m e - s e r v e r • ipv6 addr ess •i p v 6 e n a b l e •i [...]

356 IP Addr essing C ommands clear host Use the clear hos t command in Priv ileged EXEC mode to delete entries from the host name-to-address cache. Syntax clear host { name |*} • name — Host name to be del eted from the ho st name-to-a ddress ca che. (Ran ge: 1 -255 chara cter s) • * — Deletes all entri es in the host name-to-addr ess cache[...]

IP Addr essing C ommands 357 • mask — Specifies a v alid subnet (network) m ask IP address. • prefix-length — The number of bit s that compri se the IP addr ess pre fix. The prefix length must be preceded by a forward slash (/). (Range: 1-30) Default Conf iguration The switch manage m ent interface obtains an IP addr ess via DHCP by default[...]

358 IP Addr essing C ommands Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines The ip address dhcp com ma nd a ll ows th e s witc h t o dy nam ic al ly o bta in a n I P address by u sing th e DHCP pr otocol . Example The following example acquir es an IP addr ess for the sw[...]

IP Addr essing C ommands 359 Example The followi ng e xample sets VLAN 5 as management VLAN. console(config)#ip address vlan 5 ip default-gateway Use the ip default-gat eway command in Global Configuration mode to define a defaul t gatewa y (router). Syntax ip default- gateway ip-address • ip-add ress — V alid IP address that s pecifies the IP [...]

360 IP Addr essing C ommands ip domain-look up Use the ip domain-l ookup command in Global Config uration mode to enable IP Domain Nami ng System (DNS)-based host name-t o -address translation. T o disable the DNS , use the no form o f this command. Syntax ip domain -lookup no ip domain-look up Default Conf iguration The DNS is enabled. Command Mod[...]

IP Addr essing C ommands 361 • name — Defau lt dom ain name u sed to complete an un qualified host name . Do n ot include t he initia l period that separates the u nqua lified h ost name from t he domain name (Rang e: 1-255 ch aracters). Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode Use[...]

362 IP Addr essing C ommands User Guidel ines This command has no user guidelines . Example The following example de fines a static host name-to-addr ess mapping in the host cache. console(config)#ip host accounting.dell.com 176.10.23.1 ip name-server Use the ip name -ser ver command in Global Config uration mode to define available IPv4 or IPv6 na[...]

IP Addr essing C ommands 363 Example The following example sets the available name server . console(config)#ip name-server 176.16.1.18 ipv6 address Use the ipv6 address command to set the IPv6 addr ess of the management inter face. Use th e "no" for m of thi s comma nd to reset the IPv 6 address to the default. Syntax ipv6 address { prefi[...]

364 IP Addr essing C ommands Example console(config)#ipv6 address dhcp console(config)#ipv6 address autoconfig console(config)#ipv6 address 2003::6/64 console(config)#ipv6 address 2001::/64 eui64 console(config)#no ipv6 address dhcp console(config)#no ipv6 address autoconfig console(config)#no ipv6 address 2003::6/64 console(config)#no ipv6 address[...]

IP Addr essing C ommands 365 Default Conf iguration IPv6 is enabled on the management interface by default. Command Mode Global Configuration mode User Guideli nes There ar e no user gui delines for this command. Example console(config)#no ipv6 enable ipv6 gateway Use the ipv6 gateway command to configure an IPv6 gateway for the management interfac[...]

366 IP Addr essing C ommands Example console(config)#ipv6 gateway 2003::1 console(config)#no ipv6 gateway show ar p switch Use the show arp switch command in Pr ivileged EXEC mode to display the ARP cache entries learned on the management port. Syntax show arp switch Default Conf iguration This command has no default configuration. Command Mode P r[...]

IP Addr essing C ommands 367 show hosts Use the show host s command in User EXEC mode to displa y the default domain name, a list of name s e rver hosts, and the static a nd cached list of host names and a dd re sses. The command itself shows host s [hostname]. • Host name. ( Range: 1–255 char acters) Default Conf iguration This command has no [...]

368 IP Addr essing C ommands show ip he lper -add ress Use the show ip helper-address command in P rivileged EXEC mode to display IP helper a ddresses configuration. Syntax show ip h elper-address [ intf -address ] • intf -address — IP addr ess of a rout ing interface . (Range: Any v alid IP addr ess) Default Conf iguration This command has no [...]

IP Addr essing C ommands 369 show ip interface ma nagement Use the show ip interface manageme nt command to disp lay the management interf ace configuration. Syntax show ip inte rface m anageme nt Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for [...]

370 IP Addr essing C ommands[...]

IPv6 Acc ess List Comman ds 371 15 IPv6 Access List Co mmands This chapter exp lains the following commands: •{ d e n y | p e r m i t } • ipv6 access-list • ipv6 access-list r ename • ipv 6 traffic-filter • sh ow ipv6 access-lists[...]

372 IPv6 Ac cess List C ommands {deny | permit} This command creates a new rule for the cu rrent IPv6 access list. Each rule is appe nded to the li st of co nfigu red rules f or the list. A rule may either deny or per m it traffic accor ding to the specified classification fields. At a minimum, either the 'every' keywor d or the protocol,[...]

IPv6 Acc ess List Comman ds 373 • portvalu e — The source layer 4 p ort match con dition for the ACL ru le is specified by the por t value para meter . (Ran ge: 0–6 5535). • destinat ion ipv6 prefix — IPv6 prefix in IPv6 global address forma t. • flow label value — The value to m atch in th e Flow Label field of the IPv6 header (R ang[...]

374 IPv6 Ac cess List C ommands console(Config-ipv6-acl)#deny ipv6 2001:DB8::/32 any eq http console(Config-ipv6-acl)#permit ipv6 2001:DB8::/32 any console(Config-ipv6-acl)# ipv6 access-list The ipv6 access-list command creates an IP v6 Access Control List (A C L) consisting of classification fi e lds define d for the IP header of a n IPv6 frame. T[...]

IPv6 Acc ess List Comman ds 375 console(config)#ipv6 access-list DELL_IP6 console(Config-ipv6-acl)# ipv6 access-list rename The ipv6 access-list rename command changes the name of an IPv6 Access Control List (A CL ). This command fails if an IPv6 A CL with the new name alr eady exists. Syntax ipv6 access-list rename name newname • name — t he n[...]

376 IPv6 Ac cess List C ommands ipv6 traffic-filter The ipv6 traffic-fi lter command either attaches a specific IPv6 Access Co ntr ol Li st (ACL ) to an i nt erf ace or ass oci at es i t w ith a VL AN I D i n a gi ven direction. An optional sequence number ma y be specified to indicate the order of this access lis t re lative to other IPv6 acce ss [...]

IPv6 Acc ess List Comman ds 377 Example The following example attaches an IPv6 access control list to an interface. console(config-if-1/g1)#ipv6 traffic-filter DELL_IP6 in show ipv6 access-lists The show ipv6 access-lists command display s an IPv6 access list and all of t he rules that are defined for the I Pv6 ACL. Use the [name] parameter to iden[...]

378 IPv6 Ac cess List C ommands console#show ipv6 access-lists STOP_HTTP ACL Name: STOP_HTTP Inbound Interface(s): 1/g1 Rule Number: 1 Action......................................... deny Protocol....................................... 255(ipv6) Source IP Address.............................. 2001:DB8::/32 Destination L4 Port Keyword...............[...]

IPv6 Acc ess List Comman ds 379 Destination L4 P ort Key w ord This field dis plays the destinat ion port for this r ule. IP DSCP Thi s fiel d indi cates t he valu e sp ecifie d for IP DSC P . Flow La bel This fi eld in dicate s the v alue sp eci fied for IPv6 Flow Labe l. Lo g Dis plays when you en able loggin g for the rule. Ass ign Queue Disp la[...]

380 IPv6 Ac cess List C ommands[...]

IPv6 ML D Snoo ping Queri er Comman ds 381 16 IPv6 MLD Snoopin g Quer ier Commands This chapter exp lains the following commands: • ipv6 m ld sn ooping querier • ipv6 m ld sn ooping querier (VL AN mod e) • ipv6 m ld sn ooping querier ad dress • ipv 6 mld sn ooping quer ier election p articipate • ipv 6 mld sn ooping quer ier query-in terv[...]

382 IPv6 M LD S noop ing Q uerie r C ommand s ipv6 mld snooping querier Use the ipv6 m ld snoop ing querier command to enable MLD Snooping Querier on the system . Use the "no" form of thi s comma nd to disabl e MLD Snooping Quer ier . Syntax ipv6 mld snooping querier no ipv6 mld snoopin g querier Default Conf iguration MLD Snooping Querie[...]

IPv6 ML D Snoo ping Queri er Comman ds 383 Command Mode VLAN Data base mode User Guideli nes There ar e no user gui delines for this command. Example console(config-vlan)#ipv6 mld snooping querier 10 ipv6 mld snooping querier addr ess Use the ipv6 mld snooping querier address co mmand to s et the glo bal MLD Snooping Qu erier address. Use the "[...]

384 IPv6 M LD S noop ing Q uerie r C ommand s ipv6 mld snooping querier electio n participate Use the ipv6 mld snooping querier electi on participate command to enable the Snooping Querier to parti cipate in the Querier Electi on process when it disc overs the pr esenc e of a nother Queri er in the VLAN. When thi s mod e is enabled, if the Snooping[...]

IPv6 ML D Snoo ping Queri er Comman ds 385 ipv6 mld snooping querier query-in terval Use the ipv6 mld snoopin g querier query-in ter val command to set the ML D Querier Query Interval t ime. It is the amount of time in seconds that the switch waits before sending another g eneral query . Use the "no" form of this comma nd to r eset th e Q[...]

386 IPv6 M LD S noop ing Q uerie r C ommand s ipv6 mld snooping querier timer expi ry • timer — The t ime th at the sw itch remains in Non -Querier mo de after it has discovered that there is a multicast querier in the n etwork. (Rang e: 60–3 00 seconds) Default Conf iguration The default timer e xpiration period is 60 seconds. Command Mode G[...]

IPv6 ML D Snoo ping Queri er Comman ds 387 User Guideli nes When the optional a rgument vlan vlan-i d is not used, the command shows the following information: When the optional a rgument vlan v lan-id is used, the f o llowing addition al information appe ars: MLD Snooping Querier Mode Indicates whether or not MLD Snooping Querier is active on the [...]

388 IPv6 M LD S noop ing Q uerie r C ommand s When the optiona l argument detail is used, the command shows the global information and the information for all Querier e nabled VLANs as well as the following information: Last Que rier Addr ess Indicat es the IP add ress of the most r ecent Querier from whic h a Que ry wa s re cei ved . MLD V ersion [...]

iSCSI Op timization Command s 389 17 iSCSI Optimization Commands This chapter exp lains the following commands: • iscsi enable •s h o w i s c s i[...]

390 iSCSI Op timization Command s iscsi enable The iscsi enable command g lobally enables i SCSI awareness. T o disable iSCSI awar eness use the no form of this command. Syntax iscsi enable no iscsi ena ble Default Conf iguration The default iSCSI o ptimiza tion mode is disabled. NOTE: Rap id S panni ng T ree Pr ot ocol ( RSTP) and f low-c ont rol [...]

iSCSI Op timization Command s 391 Example The followi ng e xample enables iSCSI aw areness. console(config)#iscsi enable show iscsi The show iscsi command output indicates wh e ther iSCS I optimi zation is enabled or disabled. Syntax show iscsi Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC [...]

392 iSCSI Op timization Command s[...]

LACP Commands 393 18 LACP Co mmands This chapter exp lains the following commands: • lacp port -priority • lacp system-priority •l a c p t i m e o u t • show lacp e thernet • show lacp por t-chann e l[...]

394 LACP Comm ands lacp po rt-prior ity Use the lacp port -priori ty command in Interface Configuration mode to configur e the pri o rity va lue for physical po rts. T o r eset to de fault priority valu e, use the no form of this command. Syntax lacp port-priori ty value no lacp port-p riority • val ue — P o rt priority valu e. (Ran ge: 1–65 [...]

LACP Commands 395 • val ue — P o rt priority valu e. (Ran ge: 1–65 535) Default Conf iguration The default system priority value is 1. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The following example configur es the system priority to 120. console(config)#lacp system-priority 120 lacp [...]

396 LACP Comm ands User Guidel ines This command has no user guidelines . Example The following example a ssigns an administrative LA CP timeout for port 1/g8 to a long t imeout v alue. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#lacp timeout long show lacp ethernet Use the show lacp ethernet command in Privi leged EXEC mode to [...]

LACP Commands 397 system priority: 1 system mac addr: 00:00:12:34:56:78 port Admin key: 30 port Oper key: 30 port Oper priority: 1 port Admin timeout: LONG port Oper timeout: LONG LACP Activity: ACTIVE Aggregation: AGGREGATABLE synchronization: FALSE collecting: FALSE distributing: FALSE expired: FALSE Partner system priority: 0 system mac addr: 00[...]

398 LACP Comm ands expired: FALSE Port 1/g1 LACP Statistics: LACP PDUs sent: 2 LACP PDUs received: 2 show lacp port-channel Use the show lacp port-chann el command in Priv ileged EXEC mode to display LACP information for a p ort-channel. Syntax show lacp port-cha nnel [ port_channel_number ] • port_ channel_ number — Th e po rt-cha nne l num be[...]

LACP Commands 399 Oper Key: 29 Partner System Priority: 0 MAC Address: 000000:000000 Oper Key: 14[...]

400 LACP Comm ands[...]

Link Depe ndency Co mmands 401 19 Link Depend ency Commands This chapter exp lains the following commands: •l i n k - d e p e n d e n c y g r o u p • no lin k-dependency group • add et hernet • add po rt-chann el • add po rt-chann el • no add port-c hannel • depen ds-on ethernet • no depends-on ethernet • depen ds-on port-channel [...]

402 Link Dep endency Command s link-depe ndency group Use the link-d ependency group com mand to enter the li nk-dependency mode to configure a link-dependency group Syntax link-dependency group GroupId • GroupId — Link depend ency grou p identifier . (R ange: 1–1 6) Default Conf iguration This command has no default configuration. Command Mo[...]

Link Depe ndency Co mmands 403 Command Mode Global Configuration mode User Guideli nes No specific guideline s Example console(config)#no link-dependency group 1 add et hernet Use the add ether net comm and t o ad d m embe r E ther ne t po rt( s) to the dependency list. Syntax add ethern et intf -list • intf-list — List of Ethern et interfaces.[...]

404 Link Dep endency Command s add p ort-channe l Use the add port-chan nel command to add member port-channels to the dependency list. Syntax add port-channel port-channel-list • port-channel-list — Lis t of po rt- chann el int erf aces. Sepa rate nonconsec u tive ports wit h a comma and no spaces. Use a hyphen to designate the ra nge of ports[...]

Link Depe ndency Co mmands 405 Default Conf iguration This command has no default configuration. Command Mode Link Dependency mode User Guideli nes No specific guideline s Example console(config-linkDep-group-1)#no add port-channel 2 depends-o n ethernet Use the depends-on e thernet command to add the dependent Ethernet ports list. Syntax depends-o[...]

406 Link Dep endency Command s no depe nds-on ether net Use the no de pends- on ethe rnet command to remove the depen dent Ethernet ports list. Syntax no depends -on eth ernet intf -list • intf -l ist — List of Ethern et interfaces. Sepa rate nonconsecutive ports with a comma and no sp aces. Use a hyph e n to des ignate the ran ge of ports. (Ra[...]

Link Depe ndency Co mmands 407 Default Conf iguration This command has no default configuration. Command Mode Link Dependency mode User Guideli nes No specific guideline s Example console(config-linkDep-group-1)#depends-on port- channel 6 no depen ds-on port-cha nnel Use the no dep ends- on port- channe l command to remove the dependent port-channe[...]

408 Link Dep endency Command s Example console(config-linkDep-group-1)# no depends-on port- channel 6 show link-d ependency Use the show link-depen dency command to show the link dependencies configured for a particul ar group . If no group is specified, then all the configured link-dependency groups ar e displayed. Syntax show link -dependency [ g[...]

Link Depe ndency Co mmands 409 The following command shows link dependencies for group 2 only . console#show link-dependency group 2 GroupId Member Ports Ports Depended On ------- ---------------------- ------------------ 2 1/g1-1/g4 1/g8-1/g9[...]

410 Link Dep endency Command s[...]

LLDP Commands 411 20 LLDP Comm ands This chapter exp lains the following commands: • clea r lldp remot e-data • clea r lldp s tatis tics •l l d p m e d • lldp m ed confignotifica tion • lldp med fast startr ep eatcount •l l d p m e d t r a n s m i t - t l v • lldp not ification • lldp not ification-int erval •l l d p r e c e i v e[...]

412 LLDP Co m mands clear lld p remote- data Use the clear lldp remote- data command in P rivileged EXEC mode to delete all LLDP i nformati on from the remote data table. Syntax clear lldp remote-data Default Conf iguration By default, data i s removed only on system r eset. Command Mode P rivileged EXEC mode User Guidel ines This command has no us[...]

LLDP Commands 413 User Guideli nes This command has no user guidelines. Example The following exampl e displays how to r eset all LLDP statistics. console#clear lldp statistics lldp med This command is used to enable/disa b le LLDP -MED on an interface. By enabling MED, the t ransmit and receive functions of LLDP are effectively enabled. Syntax Des[...]

414 LLDP Co m mands lldp med confignotification This command is used to enable sending the topology change notification. Syntax De scription lldp med confignotification no lldp med confignot ification Para mete r R ange s Not applicab le Command Mode Interface (Ethernet) Configuration Default V alue By default, notifications are disabled on all sup[...]

LLDP Commands 415 Command Mode Global Configuration Default V alue 3 Usage Guideli nes No specific guideline s. Example console(config)# lldp med faststartrepeatcount 2 lldp med transmit-tlv This command is used to specify whic h optio nal TL Vs in the LLDP MED set are transmitted in the LLDP DUs. There are certain conditions that have to be m et f[...]

416 LLDP Co m mands Para mete r R ange s Not appl icable. Command accepts k eywords only . Command Mode Interface (Ethernet) Configuration Default V alue By defau lt, the capa bilities and network po licy TL Vs ar e included. Example console(config)#interface ethernet 1/g1 console(config-if-1/g1)#lldp med transmit-tlv capabilities console(config-if[...]

LLDP Commands 417 Example The following example di sp lays how to enable remote da ta chan ge notifications. console(config-if-1/g3)#lldp notification lldp notification-interv al Use the lldp noti fication -interva l command in Global Configuration mode to limit how frequently remote data ch ange notifications a re sent. T o return the notifi catio[...]

418 LLDP Co m mands lldp receive Use the lldp receive command i n Interface Configuration mode to enable the LLDP receive capability . T o disable r eception of LL DPDUs, use the no fo rm of this command. Syntax lldp receive no lldp receive Default Conf iguration The default lldp receiv e mode is disabled. Command Mode Interface Configuration (Et h[...]

LLDP Commands 419 • transmi t-interv al — The interva l in second s at w hich to tran smit l ocal data LLD PDUs. ( Range: 5–327 68 seco nds) • hold-mu ltipl ier — Multiplier on the transmit interval used to set the T TL in loca l data LLD PDU s. (Range : 2–10) • reinit-delay — The delay in seconds befor e re -initializat ion. (Ran g[...]

420 LLDP Co m mands lldp transmit Use the lldp tran smit command in Interface Configuration mode to enable the LLD P adve rtise (t ransm it) ca pabili ty . T o disabl e local da ta tran smis sion, use the no form of this co mmand. Syntax lldp tran smit no lldp t ransmi t Default Conf iguration LLDP is disabled on al l supported interfaces. Command [...]

LLDP Commands 421 Default Conf iguration By default, management address information is not included. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example The following example displ ay s how to include management information in the LL DPDU. console(config-if-1/g3)#lldp transmit-mgmt lldp[...]

422 LLDP Co m mands User Guidel ines This command has no user guidelines . Example The following example shows how to include the system description TL V in local data transmit . console(config-if-1/g3)#lldp transmit-tlv sys-desc show lldp Use the show l ldp co mma nd in Privile ge d EX EC mod e t o di spl ay th e curre nt LLDP configuration summar[...]

LLDP Commands 423 console#show lldp LLDP transmit and receive disabled on all interfaces show lldp interface Use the show ll dp interface com mand in P rivileged EXEC mode to display the current LLDP inte rface state. Syntax show lldp inter face { int erf ac e | all } • interface — S pecifies a va lid phys ical interf ace on t he swit ch or uni[...]

424 LLDP Co m mands System Capability console# show lldp interface 1/g1 Interface Link Transmit Receive Notify TLVs Mgmt --------- ---- -------- -------- -------- ------ ---- 1/g1 Up Enabled Enabled Enabled 0,1,2,3 Y TLV Codes: 0 – Port Description, 1 – System Name, 2 – System Description, 3 – System Capability show lldp local-device Use th[...]

LLDP Commands 425 Interface Port ID Port Description --------- -------------------- -------------------- 1/g1 00:62:48:00:00:02 console# show lldp local-device detail 1/g1 LLDP Local Device Detail Interface: 1/g1 Chassis ID Subtype: MAC Address Chassis ID: 00:62:48:00:00:00 Port ID Subtype: MAC Address Port ID: 00:62:48:00:00:02 System Name: System[...]

426 LLDP Co m mands show lldp med This command displays a s umm ary of the curr e nt LLDP MED configuration. Syntax De scription show lldp med Para mete r R ange s Not applicab le Command Mode P rivileged EXEC Default V alue Not applicab le Usage Guideli nes No specific guideline s. Example console(config)#show lldp med LLDP MED Global Configuratio[...]

LLDP Commands 427 • All — Indicat es all val id LLDP interface s. Parameter Rang es Not applicab le Command Mode P rivileged EXEC. Default V alue Not applicab le Example console#show lldp med interface all LLDP MED Interface Configuration Interface Link configMED operMED ConfigNotify TLVsTx --------- ------ -------- -------- -------- ------- 1/[...]

428 LLDP Co m mands show lldp med local-device This command displays the advertised LLDP local data. This command can display summary informat ion or detail for each interface. Syntax De scription show lldp med local-de vice detail < unit/port > • unit/p ort — Indicates a specific physical interface. • detail — Includes a deta iled ve[...]

LLDP Commands 429 DSCP: 1 Unknown: False Tagged: True Media Policy Application Type : streamingvideo Vlan ID: 20 Priority: 1 DSCP: 2 Unknown: False Tagged: True Inventory Hardware Rev: xxx xxx xxx Firmware Rev: xxx xxx xxx Software Rev: xxx xxx xxx Serial Num: xxx xxx xxx Mfg Name: xxx xxx xxx Model Name: xxx xxx xxx Asset ID: xxx xxx xxx Location [...]

430 LLDP Co m mands Extended POE PSE Available: 0.3 watts Source: primary Priority: critical Extended POE PD Required: 0.2 watts Source: local Priority: low show lldp med remote-device This comma nd display s the current LLDP ME D remote data. This comm and can display s umm ary informati on or detail for each interface. Syntax De scription show ll[...]

LLDP Commands 431 Default V alue Not applicab le Example Console#show lldp med remote-device all LLDP MED Remote Device Summary Local InterfaceDevice Class --------------------- 1/g1Class I 1/g2 Not Defined 1/g3Class II 1/g4Class III 1/g5Network Con Console#show lldp med remote-device detail 1/g1 LLDP MED Remote Device Detail Local Interface: 1/g1 [...]

432 LLDP Co m mands Network Policies Media Policy Application Type : voice Vlan ID: 10 Priority: 5 DSCP: 1 Unknown: False Tagged: True Media Policy Application Type : streamingvideo Vlan ID: 20 Priority: 1 DSCP: 2 Unknown: False Tagged: True Inventory Hardware Rev: xxx xxx xxx Firmware Rev: xxx xxx xxx Software Rev: xxx xxx xxx Serial Num: xxx xxx [...]

LLDP Commands 433 Subtype: elin Info: xxx xxx xxx Extended POE Device Type: pseDevice Extended POE PSE Available: 0.3 Watts Source: primary Priority: critical Extended POE PD Required: 0.2 Watts Source: local Priority: low show lldp remote-device Use the lldp remo te-devi ce command in P rivileged EXEC mode to display the current LLDP re mot e data[...]

434 LLDP Co m mands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Examples These examples show current LLDP remote data, including a deta iled version . console#show lldp remote-device Local Remote Interface Device ID Port ID TTL --------- ----------------- ----------------- ---------- 1/g1 01:23:45:67:89[...]

LLDP Commands 435 show lldp statistics Use the show lldp statistics command in P rivileged EXEC mode to display the cu rren t LLDP tra ffic sta tistics. Syntax show lldp statistics { int erf ac e | all } • interface — S pecifies a va lid phys ical interf ace on t he swit ch or unit/port . Default Conf iguration This command has no default confi[...]

436 LLDP Co m mands Total Ageouts.............................. .. 1 Tx Rx TLV TLV TLV TLV TLV Interface Total Total Discards Errors Ageout Discards Unknowns MED 802.1 802.3 --------- ----- ----- -------- ----- - ------ -------- -------- ---- ----- ----- 1/g11 29395 82562 0 0 1 0 0 0 1 4 The following table explains the fields in this example. Para[...]

LLDP Commands 437 Errors Number of non-valid LLDP frames received on the indic ated port. Ageout s Number of times a remote data entry on the indic ated port has b een delete d due to TTL exp i ra ti o n . TL V Dis c ar ds Numb er LLDP TL Vs ( T ype, Length, V alue sets) receive d on the in dica ted por t and di sca rded for any re ason by the LLDP[...]

438 LLDP Co m mands[...]

Port Channe l Comman ds 439 21 Port Channel Comman ds This chapter exp lains the following commands: • channel -group • interfa ce port-chann el • interfa ce range port- channel • hashing -mode •n o h a s h i n g - m o d e • sh ow interfaces port -channel • show statis tics port-c hannel[...]

440 Port Ch annel Comma nds channel- group Use the channel-gr oup command in Interface Co nfiguration mode to configure a port-to-port channel. T o remove the channel-group configuration from the interface, use the no form of this command. Syntax channel-grou p port-channel-number mode { on | auto } no chann el-grou p • port- channel -number — [...]

Port Channe l Comman ds 441 interface por t-channel Use the interfac e port-chann el command in Global Configuration mode to configure a port-channel type a nd e n ter port-channel configuration mode. Syntax interface port- channel port-channel-number • port-channel-number — A valid port -channel tr unk inde x. Default Conf iguration This comma[...]

442 Port Ch annel Comma nds Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines Commands in the inte rface range context are ex ecuted indep endently on each interface in the range. I f the command returns an error on one of the interfaces, it stops the ex ecution of th e com[...]

Port Channe l Comman ds 443 Default Conf iguration This command has no default configuration. Command Mode Interface Configuration (port-channel) User Guideli nes No specific guideline s. Example console(config)#interface port-channel l console(config-if-ch1)#hashing-mode 4 no hashing -mode Use the no has hing-mo de command to set the hashing algor[...]

444 Port Ch annel Comma nds show inte rfaces port- channel Use the show interfa ces port-channel command to show port-channel information. Syntax De scription show int erfaces p ort-chann el [ port-channel number ] •[ port- channel -number ] — Numb er of the port cha nnel to show . This param e ter i s optional. I f the port cha nnel numbe r is[...]

Port Channe l Comman ds 445 Hash algorithm type 1 - Source MAC, VLAN, EtherType, source module and port Id 2 - Destination MAC, VLAN, EtherType, source module and port Id 3 - Source IP and source TCP/UDP port 4 - Destination IP and destination TCP/UDP port 5 - Source/Destination MAC, VLAN, EtherType and source MODID/port 6 - Source/Destination IP a[...]

446 Port Ch annel Comma nds Total Packets Received (Octets)................ 0 Packets Received > 1522 Octets................. 0 Packets RX and TX 64 Octets.................... 1064 Packets RX and TX 65-127 Octets................ 140 Packets RX and TX 128-255 Octets............... 201 Packets RX and TX 256-511 Octets............... 418 Packets RX[...]

Port Channe l Comman ds 447 Unacceptable Frame Type........................ 0 Multicast Tree Viable Discards................. 0 Reserved Address Discards...................... 0 Broadcast Storm Recovery....................... 0 CFI Discards................................... 0 Upstream Threshold............................. 0 Total Packets Transmit[...]

448 Port Ch annel Comma nds GVRP Failed Registrations...................... 0 Time Since Counters Last Cleared............... 0 day 0 hr 17 min 52 sec console#[...]

Port Monitor C ommands 449 22 Port Monito r Comman ds This chapter exp lains the following commands: • monitor session • show monito r session[...]

450 Port Monitor Commands monitor session Use the monitor session command in Global Configuration mode to configure a probe port and a monitor ed p ort for monitor session (port monitoring). Use the src-interface p aramet er to specify the inte rface to moni tor . Us e rx to monito r only i ngr ess pack ets, or use tx to mo nitor only egress packet[...]

Port Monitor C ommands 451 Example The following examples shows variou s port monitoring configurations. console(config)#monitor session 1 source interface 1/g8 console(config)#monitor session 1 destination interface 1/g10 console(config)#monitor session 1 mode show monitor session Use the show mo nitor session co mmand in Privi leg ed EXEC mode to[...]

452 Port Monitor Commands[...]

QoS Co mm ands 453 23 QoS Commands This chapter exp lains the following commands: •a s s i g n - q u e u e •c l a s s •c l a s s - m a p •c l a s s - m a p r e n a m e • classofservice dot1p-ma pping • classofservice ip-dscp-ma pping • classofservic e trust • conform-color • cos-queue min-bandwidt h •c o s - q u e u e s t r i c [...]

454 QoS Comma nds •m a t c h i p t o s • match protocol • match source-addr ess mac •m a t c h s r c i p •m a t c h s r c i p 6 •m a t c h s r c l 4 p o r t • match vlan • mirror •p o l i c e - s i m p l e •p o l i c y - m a p • redir ect •s e r v i c e - p o l i c y •s h o w c l a s s - m a p • show classofservice dot1p[...]

QoS Co mm ands 455 assign- queue Use the assign-queue command in P oli cy -Class-Ma p Configuration mode to modify the queue ID to which the associated traffic stream is assigned. Syntax assign-queue < queueid > • queueid — S pecifies a valid queue ID . (Range: integer from 0–6.) Default Conf iguration This command has no default config[...]

456 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode P olicy Map Configuration mode User Guidel ines This command causes the specified policy to create a refere nce to the class definition. The command mode is changed to P olicy-Class -Map Configuration when this command is e xecuted successfully . Exampl[...]

QoS Co mm ands 457 User Guideli nes There ar e no user gui delines for this command. Example The followi ng e xample creates a class-map named "DE LL" which req uires all ACE’s to be ma tched. console(config)#class-map DELL console(config-cmap)# class-map rename Use the class-map r ename command in Global Configuration mode to change th[...]

458 QoS Comma nds console(config)# clas sofser vice dot1p -mappin g Use the classofser vice dot1p-mapping command in Global Configuration mode to map an 802. 1p priority to an interna l traffic class. In Interface Co nfig ura tio n mo de, th e m appi ng is ap pl ied onl y t o pac kets recei ved on th at interface. Use the no form of the command to [...]

QoS Co mm ands 459 classofservice ip-dscp-ma pping Use the classofser vice ip-dscp-mapping command in Global Configuration mode to map an IP DS C P value to a n internal traffic class. Syntax classofser vice ip-dscp-mapping ipd scp trafficclass • ipdscp — Sp ecifies the IP D SCP va lue to which you ma p the specified traff ic class . (Ran ge: 0[...]

460 QoS Comma nds clas sofser vice trus t Use the classofser vice trust command in either Global Configuration mode or Interfa ce Configura tion mode to set the c lass of ser vice trus t mode of an interface. T o set the inte rface mode to untrusted, use the no form of this command. Syntax classofser vice trust { dot1p | untrusted | ip-dscp } no cl[...]

QoS Co mm ands 461 conform-c olor Use the conform -color command in P olicy-Class-Map Config uration mode to specify second-level matc hing for traffic flow , the o nly possible ac tions are drop, setdscp-transmit , set-prec-transmit, o r transmit. In t his two-rate form of the policy command, the conform ac tion defaults to s end, the ex cee d act[...]

462 QoS Comma nds • bw-0 — Sp ecifies the m inimum trans mission band width for an int erface. Y o u can specify as many band widths a s there are interfaces (bw-0 through bw-n). (Ra nge: 0–10 0 in in crements of 5) Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode or Interf ace Configura[...]

QoS Co mm ands 463 Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode or Interf ace Configuration (Ethernet, P ort- channel) mode User Guideli nes This command has no user guidelines. Example The follow ing example dis play s how to activa te the str ict prior ity sch eduler mode for two queues [...]

464 QoS Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following example displays how to s et the Dif fServ oper ational mode to active. console(Config)#diffserv drop Use the drop command in P olicy-Class -Map Configuration mode to spe cify that all pack ets for the ass ociate[...]

QoS Co mm ands 465 mark cos Use the mark co s command in P o licy-Class-Map Co nfiguration mode to mark all packets for the associated traffic stream with the specified class of servi ce val ue in the prior ity fie ld of t he 802. 1p header . If the pac ket does no t alre ady contain this header , one is inserted. Syntax mar k cos cos-valu e • co[...]

466 QoS Comma nds • dscpval — S pecifies a D SCP value (1 0, 12, 14, 1 8, 20 , 22, 26, 28 , 30, 34, 36, 38, 0 , 8, 16, 24 , 32 , 40, 4 8, 56, 4 6) or a DSC P keywo rd (af11, af1 2, af13 , af21, af2 2, af23 , af31, af32, a f33, a f41, af4 2, af43 , be, cs0, cs1, c s2, cs3, c s4, cs5, cs6, cs7, ef). Default Conf iguration This command has no defa[...]

QoS Co mm ands 467 User Guideli nes. This command has no user guidelines. Example The following ex ample displays console(config)#policy-map p1 in console(config-policy-map)#class c1 console(config-policy-classmap)#mark ip-precedence 2 console(config-policy-classmap)# match cl ass-map Use the match c lass-ma p command to add to the specified class [...]

468 QoS Comma nds • Any attemp ts to delete the ref cl a ssn a me class wh ile the class is st i ll ref ere nc ed by a ny cla ss-map-name fails. • Th e combined match criteria of class -map-name and re f c l a s s n a m e must be an allowe d combination ba sed on the class type. • Any subsequ ent changes to the re f c l a s s n a m e class ma[...]

QoS Co mm ands 469 Command Mode Class-Map Configuration mode User Guideli nes This command has no user guidelines. Example The following exampl e displays adding a match condition to the specified class. console(config-classmap)#match cos 1 match destinatio n-address mac Use the match destination- address mac command in Class-Ma p Configuration mod[...]

470 QoS Comma nds Example The following example displays adding a match condition for the specified MAC addr ess and bit mask. console(config-classmap)#match destination-address mac AA:ED:DB:21:11:06 FF:FF:FF:EF:EE:EE match dstip Use the match dstip command in Clas s-Map Configuration mode to add to the specified class definition a match condition [...]

QoS Co mm ands 471 match dstip6 The match dstip6 co mmand adds to the specified cla ss definition a mat ch condition based on the destination IPv6 address of a pack et. Syntax match dstip 6 de sti nat io n-ip v6 -pref ix /pref ix- le ngt h • destinat ion-ipv6 -prefix — IPv6 p refix in IPv6 global ad dress format. • prefix-length — IPv6 pref[...]

472 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode Class-Map Configuration mode User Guidel ines This command has no user guidelines . Example The following example displays adding a match condition based on the destination laye r 4 port of a pack e t using the " e cho" port name k eyword. con[...]

QoS Co mm ands 473 Example The following example displ ay s how to add a match condition based on ethertype. console(config-classmap)#match ethertype arp match ip6flowlbl The match ip6flowlbl command adds to the specified class definition a match condition based on the IPv6 flow label of a pack et. Syntax match ip6flowlb l lab el • label - The va[...]

474 QoS Comma nds match ip dscp Use the match ip dscp command in Class-Map Configuration mode t o add to the spec ifie d class defi nition a m atch co ndition based on the value of the IP DiffServ Code P oint (DSCP) field in a pack et. This field is defined as the high-order six bits of the Service T ype octe t in the IP header . The low-order two [...]

QoS Co mm ands 475 match ip pr ecedence Use the match ip precedence command in Class-Map Configuration mode to add to the specified class definiti o n a match condition based on the value of the IP precedence field. Syntax match ip prece dence precedence • precedence — S pecifies the precedence field in a packet. This field is the high-order th[...]

476 QoS Comma nds Syntax match ip tos tosbit s tosma sk • tosb its — Spe cifies a two-d igit hexadecima l numb er . (Range : 00–ff) • tosmask — Spe cifies the bit positions in the to sbits param eter tha t are used for comparison against t he IP TO S field in a packet. Th is value of t his paramet er is exp ressed a s a two-digi t hexadec[...]

QoS Co mm ands 477 • protocol-name — Specifies one of the supp orted p rotocol name keywords. The supported values are icmp , igmp , ip , tcp , and udp . • protocol-number — Specifies the standard value assigned by IANA. (Ran ge 0–25 5) Default Conf iguration This command has no default configuration. Command Mode Class-Map Configuration [...]

478 QoS Comma nds Command Mode Class-Map Configuration mode User Guidel ines This command has no user guidelines . Example The following example adds to t he specified class definition a match condition based on the source MAC addr ess of the packet. console(config-classmap)# match source-address mac 10:10:10:10:10:10 11:11:11:11:11:11 match srcip [...]

QoS Co mm ands 479 Example The following exampl e displays adding a match condition for the specified IP addres s and address bit mask. console(config-classmap)#match srcip 10.240.1.1 10.240.0.0 match sr cip6 The match srcip6 command adds to the specified class definition a match condition based on the source IPv6 address of a pack et. Syntax match[...]

480 QoS Comma nds match srcl4port Use the match srcl 4port co m mand in C l ass -Map Co nfiguration mode to add to the specif ied class definition a ma tc h condition based on the source layer 4 port of a packet using a single keyword or a numeric notation. Syntax matc h srcl 4port { portkey | port-num ber } • portkey — Sp ecifies one of th e s[...]

QoS Co mm ands 481 match vlan Use the match v lan command in Class-Map C onfiguration mode to add to the specified class definition a ma tch condition based on the value of the layer 2 VLAN Identifier field. This field is the only tag in a single tagged packet or the first or outer tag of a double VLAN packet. Syntax match vlan < vlan-id > ?[...]

482 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode P olicy-Class-Ma p Configuration mo de User Guidel ines The por t identif ied in this com mand is ide ntica l to the destina tion por t of the moni tor command. Example The following examp le displays how to copy a ll the data to ethernet port 1/g5. con[...]

QoS Co mm ands 483 • dscpval — DSCP valu e. (Range: 0 – 63 or a k eywor d from this l ist, af11 , af12 , af13 , af21 , af22 , af23 , af31 , af32 , af33 , af41 , af42 , af43 , be , cs0 , cs1 , cs2 , cs3 , cs4 , cs5 , cs6 , cs7 , ef ) Default Conf iguration This command has no default configuration. Command Mode P olicy-Class-Map Configuration [...]

484 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines The CLI mode is changed to P olicy-Class-Map Configuration when this command is successfully e xecuted. The policy type dicta tes which of the indivi dual policy attribute comm ands ar e valid wi thin the p[...]

QoS Co mm ands 485 User Guideli nes This command has no user guidelines. Example The following exampl e shows how to redir ect incoming packets t o port 1/g1. console( config-policy-classmap )#redirect 1/g1 service-policy Use the ser vice-policy command in either Global Configuration m ode (for all system inte rfaces) or Interface Co n figur ation [...]

486 QoS Comma nds Ensure that no attr ibutes wi thin th e policy definition exceed the capab ilities of the i nterface . When a po licy is at tached to an interf ace succe ssfully , any attempt to chang e the pol icy defi nition, such that it would r esult in a violat ion of th e interfa ce capa biliti es, causes the policy chan ge atte mpt to fail[...]

QoS Co mm ands 487 Example The following example dis plays all the configuration inform ation for the cla ss named "Dell". console#show class-map Class L3 Class Name Type Proto Reference Class Name --------------------- ----- ----- ----------------------------- ipv4 All ipv4 ipv6 All ipv6 stop_http_class All ipv6 match_icmp6 All ipv6 cons[...]

488 QoS Comma nds console#show class-map stop_http_class Class Name........................... stop_http_class Class Type........................... All Class Layer3 Protocol................ ipv6 Match Criteria Values ---------------------------- ----------------------- Source IP Address 2001:DB8::/32 Source Layer 4 Port 80(http/www) show classofse[...]

QoS Co mm ands 489 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes If the interf ace is specifie d, the 802. 1p mapping table of the i nterface is displayed. If omit ted, the most re ce nt global configuration settings are displayed. Example The following example di sp lays the d[...]

490 QoS Comma nds The following table lists th e paramete rs in the example and gives a description of each. show classofser vice ip-dscp-mapping Use the show classofser vice ip-dscp-mapping command in P rivileged EXEC mode to disp lay t he cur rent IP D SCP mapp ing to intern al t raffi c cla sses for a spe cifi c in terf ac e. Syntax show classof[...]

QoS Co mm ands 491 21 31 41 51 61 71 8(cs1) 0 90 10(af11) 0 11 0 12(af12) 0 13 0 14(af13) 0 15 0 16(cs2) 0 17 0 18(af21) 0 19 0 --More-- or (q)uit 20(af22) 0 21 0 22(af23) 0 23 0 24(cs3) 1 25 1 26(af31) 1[...]

492 QoS Comma nds 27 1 28(af32) 1 29 1 30(af33) 1 31 1 32(cs4) 2 33 2 34(af41) 2 35 2 36(af42) 2 37 2 38(af43) 2 39 2 40(cs5) 2 41 2 42 2 --More-- or (q)uit 43 2 44 2 45 2 46(ef) 2 47 2 48(cs6) 3 49 3 50 3 51 3[...]

QoS Co mm ands 493 52 3 53 3 54 3 55 3 56(cs7) 3 57 3 58 3 59 3 60 3 61 3 62 3 63 3 console# show clas sofservice trust Use the show classofser vice trust command in P rivileged EXEC mode to display the curr ent tru st mode set ting for a specific i nterface. Syntax show classofser vice trust [< unit>/<port-type>< port> | port-cha[...]

494 QoS Comma nds • port- channel number — Sp ecifies a valid port-chann el num ber . Range is 1- 8. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines If the inter face is specified, th e port trus t mode of the interface i s displayed. If omitted, the port trust mode for globa[...]

QoS Co mm ands 495 User Guideli nes This command has no user guidelines. Example The following exampl e displays the DiffServ information. console#show diffserv DiffServ Admin mode........................ Enable Class Table Size Current/Max............... 5 / 25 Class Rule Table Size Current/Max.......... 6 / 150 Policy Table Size Current/Max......[...]

496 QoS Comma nds Example console#show diffserv service interface ethernet 1/g1 in DiffServ Admin Mode.......................... Enable Interface..................................... 1/g1 Direction..................................... In No policy is attached to this interface in this direction. show diffse rv service interface port-channel in Synt[...]

QoS Co mm ands 497 Direction................................... In No policy is attached to this interface in this direction show diffserv service brief Use the show diffserv ser vice brief command in Pr ivileged EXEC mode to display all interfaces in the syst em to which a DiffS e rv policy ha s been attached. Syntax show diffser v ser vice brief [...]

498 QoS Comma nds show inte rfaces cos-qu eue Use the show interfaces cos-queue command in Priv ileged EXEC mode to display the class-of-se rvice queue configuration for the specif ied interface. Syntax show int erfaces cos- queue [< unit>/< port -type> <port> | port-channel port-channel number ] • <unit>/<por t-type>[...]

QoS Co mm ands 499 Global Configuration Interface Shaping Rate......................... 0 Queue Id Min. Bandwidth Scheduler Type Queue Management Type -------- -------------- -------------- --------------------- 0 0 Weighted Tail Drop 1 0 Weighted Tail Drop 2 0 Weighted Tail Drop 3 0 Weighted Tail Drop 4 0 Weighted Tail Drop 5 0 Weighted Tail Drop [...]

500 QoS Comma nds The following table lists th e parameters i n the examples and gives a description of each. show policy- map Use the show policy-m ap command in P rivileged EXEC mode to display all configuration information for the specified policy . Syntax show po licy-map [ policyn ame ] • policyname — Sp ecifies the n ame of a valid existi[...]

QoS Co mm ands 501 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following exampl e displays the DiffServ information. console#show policy-map Policy Name Policy Type Class Members ----------- ----------- ------------- POLY1 xxx [...]

502 QoS Comma nds User Guidel ines This command has no user guidelines . Example The fo llo win g exa mp le d is pla ys the st atis tic s info rm atio n fo r p ort 1/g 1. console#show policy-map interface 1/g1 in Interface.................................... 1/g1 Operational Status........................... Down Policy Name........................[...]

QoS Co mm ands 503 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The followi ng e xample displays a s ummary of policy -oriented statistic s information. console#show service-policy Oper Policy Intf Stat Name ------ ----- ------------------------------- 1/g1 Down DELL 1/g2 Down DELL 1/g3 Down DELL [...]

504 QoS Comma nds traffic-shape Use the traffic-shape command in Global Configuration mode and Interface Configuration mode to specify the maximum transmission bandwidth limit for th e in ter face as a w hol e. T his pr oc ess, also kno wn a s rate shaping , has the effe ct of smoothin g temporary traff ic bursts ove r time so that th e transmit te[...]

RADIUS C ommands 505 24 RADIUS Commands This chapter exp lains the following commands: • aaa account ing network de fault start- stop group radi us •a c c t - p o r t •a u t h - p o r t •d e a d t i m e •k e y •m s g a u t h •n a m e • primary •p r i o r i t y • radius- server de adtime • radius-se rver host • radius- server[...]

506 RADIUS C ommands aaa acc ounting network defa ult start-stop group radius Use the aaa accounting network defa ult start-stop group ra dius command to enable RADIUS accoun ting on the swit ch. Use the “no” form of t his command to disable R ADIUS accounting. Syntax aaa accou nting n etwork default s tar t-stop gro up rad ius no aaa accountin[...]

RADIUS C ommands 507 Default Conf iguration The default value of the port number is 1813 . Command Mode Radius (accounting) mode User Guideli nes There ar e no user gui delines for this command. Example The followi ng exampl e sets po rt number 56 for accounting requests. console(config)#radius-server host acct 3.2.3.2 console(Config-acct-radius)#a[...]

508 RADIUS C ommands Example The f ollowing exampl e sets th e port num ber 2412 f or authe nticati on re q ue s t s . console(config)#radius-server host 192.143.120.123 console(config-radius)#auth-port 2412 deadtime Use the deadti me command in Radius mode to improve Radius resp on se times when a server is unavailable by causing the unavailable s[...]

RADIUS C ommands 509 key Use the key command to speci fy the enc ryption key which i s shared with the R ADIUS server . Use the "no" form of this co mmand to remove the k ey . Syntax key key -s t ri n g • key -s tr in g — A string specifying the en cryption key (Range: 0 - 128 characte rs). Default Conf iguration There is no k ey conf[...]

510 RADIUS C ommands Default Conf iguration The message authenti cator attribute is enabled by default. Command Mode Radius mode User Guidel ines There ar e no user gui delines for this command. Example console(Config-auth-radius)#msgauth name Use the name command t o assign a name to a R ADIUS server . Use the "no" form of this command t[...]

RADIUS C ommands 511 primary Use the primary command to specify that a configured server should be the primary server in the group of authent ication servers which have the s ame server name. Multiple p rimary servers can be configured for each g roup of servers which have the same name. When the R ADIUS client has to perform transac tions with an [...]

512 RADIUS C ommands Default Conf iguration The default priority is 0. Command Mode Radius mode User Guidel ines User must enter the mode corresponding to a specific Radius server before ex ecuting this command. Example The following example specifies a priority of 10 for the designated serve r . console(config)#radius-server host 192.143.120.123 c[...]

RADIUS C ommands 513 User Guideli nes This command has no user guidelines. Example The following example se t s the interval for which any unavailable Radius servers ar e skippe d over by transaction r equests to 10 minutes. console(config)#radius-server deadtime 10 radius-ser ver host Use the radi us-server host command in Global Configuration mod[...]

514 RADIUS C ommands Example The followi ng e xample specifies a Radius server host with the following cha ract er ist ics: Server h ost IP a ddress — 192 .168.1 0.1 console(config)#radius-server host 192.168.10.1 radius-s erver key Use the radius-ser ver key command in Global Configuration mode to set the authen tication an d encryp tion key for[...]

RADIUS C ommands 515 radius-ser ver retransmit Use the radius-ser ver retransm it command in Global C onfiguration mode to specif y the number of times the R adius cl ient wil l retransmit requests to th e Radius server . T o reset the de fault configuration, use the no form of this command. Syntax radius-ser ver retra nsmit retr ie s no radius-ser[...]

516 RADIUS C ommands no radius-ser ver so urce-ip • source — Specifies the source IP address. Default Conf iguration The default I P address is the outg oing IP inter face. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following example co nfigures the source IP addr ess used for c[...]

RADIUS C ommands 517 User Guideli nes This command has no user guidelines. Example The following exampl e sets the interval for which a switch waits for a s e rver host to re ply to 5 se conds. console(config)#radius-server timeout 5 retransmit Use the retransmi t command in Radius mode to specify the number of times the Radius client re transmits [...]

518 RADIUS C ommands show radi us-servers Use the show radius-ser vers command to display the list of configured R ADIUS servers and the values configur ed for the global parameters of the RA D I U S c l i en t . Syntax show radius-ser vers [ accounting | authe nticati on ] [ name [ ser vern ame ]] accounting — This opti onal par amete r will cau[...]

RADIUS C ommands 519 Example console#show radius-servers IP address Type Port TimeOut Retran. DeadTime Source IP Prio. Usage ------------- ----- ----- ------- ------- -------- ------------- -- --- ----- 10.27.5.157 Auth 1812 Global Global Global 10.27.65.13 0 all Global values Configured Authentication Servers : 1 Configured Accounting Servers : 0 [...]

520 RADIUS C ommands Retransmit : 3 Deadtime : 0 Source IP : 0.0.0.0 RADIUS Attribute 4 Mode : Disable RADIUS Attribute 4 Value : 0.0.0.0 console#show radius-servers accounting name Server Name Host Address Port Type -------------------------- -------------------- ------ ---------- Default-RADIUS-Server 2.2.2.2 1813 Secondary console#show radius-se[...]

RADIUS C ommands 521 show radiu s-servers statistics Use the show radius- servers statisti cs command to show the st atistics for an authenti cation or a ccounting s erver . Syntax show radius-ser vers statistics [ acco unting | auth entic ation ] { ipaddres s | hostname | name servername } • accounting | authen tica tion — The type of server ([...]

522 RADIUS C ommands The following fields are displayed for authentication servers: Requ ests The num ber of R ADIUS Ac countin g Request p acket s sent to thi s server not incl uding the retransmi ssion s. Retra nsmis sions The numbe r of RADIUS Accoun ting Re ques t packets retransmitte d to thi s RADIUS accounti ng server . Responses The n umber[...]

RADIUS C ommands 523 Example console#show radius-server statistics account ing 192.168.37.200 RADIUS Accounting Server Name................ . Default_RADIUS_Server Host Address................................. . 192.168.37.200 Round Trip Time.............................. . 0.00 Requests..................................... . 0 Access Ac cepts The [...]

524 RADIUS C ommands Retransmissions............................ ... 0 Responses.................................. ... 0 Malformed Responses........................... 0 Bad Authenticators......................... ... 0 Pending Requests........................... ... 0 Timeouts................................... ... 0 Unknown Types.................[...]

RADIUS C ommands 525 source-ip Use the source-ip command in Radius mode to specify the source IP addr ess to be used for communication with Radius servers. 0.0.0.0 is int erpreted as a request to use the IP a ddress of the outgoing IP inte rface. Syntax source-ip source • source — A valid sour ce IP addr ess. Default Conf iguration The IP addre[...]

526 RADIUS C ommands Default Conf iguration The default value is 3 seconds. Command Mode Radius mode User Guidel ines User must enter the mode corresponding to a specific Radius server before ex ecuting this command. Example The follo wing e xample s pecifi es the time out sett ing for the d esigna ted Radius Server . console(config)#radius-server [...]

RADIUS C ommands 527 User Guideli nes User must enter the mode corresponding to a specific Radius server b efore ex ecuting this command. Example The following example specifies usage type login . console(config)#radius-server host 192.143.120.123 console(config-radius)#usage login[...]

528 RADIUS C ommands[...]

Spanni ng T ree Com mands 529 25 Spann ing T r ee Co mman ds This chapter exp lains the following commands: • clear span ning-tr ee detected -protocols •e x i t ( m s t ) •i n s t a n c e ( m s t ) •n a m e ( m s t ) • revision (mst) • show spanni ng-tree • show spanni ng-tre e summary •s p a n n i n g - t r e e • spanning-t ree a[...]

530 Span ning T ree Com mand s • spa nning-tree portfast bpdufilter defau lt • spa nnin g-tree portfast de fault • spa nning-tree port-priority • spa nning-tree priority • spanning -tre e tcnguar d • spanning- tree tr ansmit hold- count[...]

Spanni ng T ree Com mands 531 clear spannin g-tree detected-pr otocols Use the clear sp anning -tree dete cted-protoc ols command in P rivileged EXEC m ode to restart the p rotocol migr ation proce ss (force the r enegotiation with neighboring switches) on all interfaces or on the specified interface. Syntax clear spanning- tree detec ted-protocols[...]

532 Span ning T ree Com mand s Default Conf iguration MST configuration. Command Mode MST mode User Guidel ines This command has no user guidelines . Example The following example shows how to ex it t he MST configuration mode and save change s. console(config)#spanning-tree mst configuration console(config-mst)#exit instance (mst) Use the instance[...]

Spanni ng T ree Com mands 533 User Guideli nes Before mapping VLANs to an instance us e the span ning-tree mst enable comma nd to enab le the in stance. All VLANs that are not explicitly map ped to an MST instance are mapped to the common and internal spanning tree (CIST) ins tance (instance 0) and cannot be unmapped from the CIST . F or two or mor[...]

534 Span ning T ree Com mand s Example The f ollowin g exampl e sets the co nfiguration name to “r e gion1”. console(config)#spanning-tree mst configuration console(config-mst)#name region1 revision (mst) Use the revision com mand in MST mode to identify the configuration revision numbe r . T o return to the defaul t setting , use the no form o[...]

Spanni ng T ree Com mands 535 Syntax show spannin g-tree [ethernet interface-number | port- channel port-channel- number] [ inst anc e instance-id] show sp anning-tre e [detail] [ active | blockedpo rts] | [insta nce inst anc e -id ] show spannin g-tree mst-conf iguratio n • detail — Displays de tailed in formation. • active — Displays acti[...]

536 Span ning T ree Com mand s Address 80:00:00:FC:E3:90:00:5D This Switch is the Root. Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec TxHoldCount 6 sec Interfaces Name State Prio.Nbr Cost Sts Role PortFast Restricted ------ -------- --------- ---------- ---- ----- -------- ------- 1/g1 Enabled 128.1 0 DIS Disb No No 1/g2 Enabled 128.2 0 DIS [...]

Spanni ng T ree Com mands 537 1/g19 Enabled 128.19 0 DIS Dis b No No 1/g20 Enabled 128.20 0 DIS Dis b No No --More-- or (q)uit Name State Prio.Nbr Cost Sts Role PortFast Restricted ------ -------- --------- ---------- ---- ----- -------- ------- 1/g21 Enabled 128.21 0 DIS Dis b No No 1/g22 Enabled 128.22 0 DIS Dis b No No 1/g23 Enabled 128.23 0 DIS[...]

538 Span ning T ree Com mand s Regional Root Path Cost: 0 ROOT ID Address 40:00:00:FC:E3:90:06:0F Path Cost 20000 Root Port 1/g1 Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec TxHoldCount 6 sec Bridge ID Priority 32768 Address 80:00:00:FC:E3:90:00:5D Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Interfaces Name State Prio.Nbr Cost Sts [...]

Spanni ng T ree Com mands 539 1/g12 Enabled 128.12 0 DIS Dis b No No 1/g13 Enabled 128.13 0 DIS Dis b No No 1/g14 Enabled 128.14 0 DIS Dis b No No 1/g15 Enabled 128.15 0 DIS Dis b No No 1/g16 Enabled 128.16 0 DIS Dis b No No --More-- or (q)uit Name State Prio.Nbr Cost Sts Role PortFast Restricted ------ -------- --------- ---------- ---- ----- ----[...]

540 Span ning T ree Com mand s ch6 Enabled 128.631 0 DIS Disb No No ch7 Enabled 128.632 0 DIS Disb No No ch8 Enabled 128.633 0 DIS Disb No No ch9 Enabled 128.634 0 DIS Disb No No ch10 Enabled 128.635 0 DIS Disb No No ch11 Enabled 128.636 0 DIS Disb No No ch12 Enabled 128.637 0 DIS Disb No No ch13 Enabled 128.638 0 DIS Disb No No ch14 Enabled 128.63[...]

Spanni ng T ree Com mands 541 Priority 32768 Address 80:00:00:FC:E3:90:00:5D Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Interfaces Name State Prio.Nbr Cost Sts Role PortFast RestrictedPort ------ -------- --------- ---------- ---- ----- -------- ------- --More-- or (q)uit Name State Prio.Nbr Cost Sts Role PortFast RestrictedPort ------ --[...]

542 Span ning T ree Com mand s Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32768 Address 80:00:00:FC:E3:90:00:5D Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Interfaces Name State Prio.Nbr Cost Sts Role PortFast RestrictedPort ------ -------- --------- ---------- ---- ----- -------- ------- --More-- or (q)uit Nam[...]

Spanni ng T ree Com mands 543 User Guideli nes The following fields are displayed: Example console#show spanning-tree summary Spanning Tree Admin Mode.......... Disabled Spanning Tree Version............. IEEE 802.1s BPDU Protection Mode.............. Disabled BPDU Filter Mode.................. Disabled BPDU Flooding Mode................ Disabled C[...]

544 Span ning T ree Com mand s Configuration Revision Level...... 0 Configuration Digest Key.......... 0xac36177f50283cd4b83821d8ab26de62 Configuration Format Selector..... 0 No MST instances to display. spanning- t ree Use the spanning -tree command in Global Configuration mode to enable spanning-tree functionality . T o disable spanning-tr ee fun[...]

Spanni ng T ree Com mands 545 spanning-tr ee auto-portfast Use the spanning- tree auto -portfas t comm and to set the port to a uto por tfast mode. This enables the port to b e come a portfast port if it does not see a ny BPDUs for 3 s e conds. Use the “no” form of t his command to disable aut o portfast mo de. Syntax spanning -tree a uto-por t[...]

546 Span ning T ree Com mand s no span ning-tree bpdu flooding Default Conf iguration This featur e is disabled by default. Command Mode Glo bal C onf igura tion mode Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#spanning-tree bpdu flooding spanning- t ree b pdu-protection Use the spanning -tree bp du-pro tecti[...]

Spanni ng T ree Com mands 547 Default Conf iguration BPDU p rotec tion is not en abled. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The following exampl e enables BPDU protection. console(config)#spanning-tree bpdu-protection spanning-tr ee cost Use the spanni ng-tre e cost command in Interfa[...]

548 Span ning T ree Com mand s Command Mode Interface Configuration (Et hernet, P ort-Channel) mode User Guidel ines There ar e no user gui delines for this command. Example The following exampl e configures the sp anning-t ree cost o n 1/g5 to 35000. console(config)#interface ethernet 1/g5 console(config-if-1/g5)#spanning-tree cost 35000 spanning-[...]

Spanni ng T ree Com mands 549 console(config-if-1/g5)#spanning-tree disable spanning-tr ee forward-time Use the spann ing-tr ee forward -time com mand in Global Configurat ion mode to configure the spanning-tree bridge forwar d time, which is the amount of time a port remains in the listening and lear ning states befor e entering the forwarding sta[...]

550 Span ning T ree Com mand s spanning- t ree g uard The spanning -tree gua rd command selects whet her loop guard or root guard is en abled on an i nterfa ce. If neith er is en abled , the port ope rates in accordance with the multi p le spanning tree protocol. Use t he “no” form of this command to disable loop guard or root guar d on the int[...]

Spanni ng T ree Com mands 551 Syntax spanning -tree loopgua rd default no spanning- tree loopgua rd default Default Conf iguration Loop guard is disab led by default. Command Mode Global Configuration mode Usage Guideli nes There ar e no usa ge guidelines for this command. Example The following e xample enables s panning-tree l o opguar d functiona[...]

552 Span ning T ree Com mand s User Guidel ines When configuring the Max-Age t he following relationships should be satisfie d: 2*(F orw ard- Time - 1) >= Max -Age Max-Age >= 2*(Hello- Time + 1) Example The following example configur es the spanning-tree bridge maximum-age to 10 seconds. console(config)#spanning-tree max-age 10 spanning- t re[...]

Spanni ng T ree Com mands 553 spanning-tr ee mode Use the spanni ng-tree mode command in Global Configuration mode to configure the spanning-tree protocol. T o return to the default configuration, use the no form of t his command. Syntax spanning -tree mo de { stp | rstp |mstp } no spanni ng-tree mo de • stp — Spanning T ree Prot ocol (STP) is [...]

554 Span ning T ree Com mand s This command is us ed to co nfigu re rst p path co st. Use the “no” fo rm of this com mand to reset the external cost t o the default. Syntax span ning-t ree mst 0 extern al-cos t cost no spanning- tree mst 0 external -cost • cost — The external cost of the com mon spanning t r ee (R ange: 0–20 000000 0). De[...]

Spanni ng T ree Com mands 555 Syntax spanning -tree mst configuration Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode User Guideli nes F or two or more switches to be i n t he same MST r egion, they must have the same VLAN mapping, the same config uration r evision number and the same name. E[...]

556 Span ning T ree Com mand s • cost — The po rt path co st. (Ran ge: 0–20 0,000,0 00) Default Conf iguration The default val ue is 0, which signi fies that the cost will be automatically calculated based on po rt speed. The default configuration is: • E the rnet ( 10 M bp s) — 2,000,000 • F a st Ethern et (100 Mbp s) — 200,0 00 • [...]

Spanni ng T ree Com mands 557 • priority — The port priority . (Ran ge: 0–2 40 in m ultiples o f 16) Default Conf iguration The default port-priority for IEEE MSTP is 128. Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes This command has no user guidelines. Example The followi ng exampl e configur es the po[...]

558 Span ning T ree Com mand s Command Mode Glo bal C onf igura tion mode User Guidel ines The priority va lue must be a multiple of 4096. Th e s w i t c h w it h t h e l o w e s t pr i o r i t y i s s el e c t e d as t h e r o o t of t h e s p an n in g t ree . Example The following example co nfigures the spanning tr ee priority of instance 1 to [...]

Spanni ng T ree Com mands 559 An interf ace with P or tF ast mode enab le d is moved directly to the spanning tree forwarding s tate whe n linkup o ccurs wi thout wai ting the standa rd forward-time delay . Example The following exampl e enables P ortF ast on 1/g5 . console(config)#interface ethernet 1/g5 console(config-if-1/g5)#spanning-tree portf[...]

560 Span ning T ree Com mand s spanning- t ree p ortfast default Use the spanning -tree p ortfast defaul t command to enable P ortfast mode only on access ports. Use the “no” form of this command to disable P ortfast mode on all ports. Syntax spanning-tree portfast de fault no span ning-tree portfast defaul t Default Conf iguration P ortfast mo[...]

Spanni ng T ree Com mands 561 Default Conf iguration The default port-priority for IEEE STP is 128. Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes The priority value must be a multiple of 16. Example The following exampl e configures the spanning pri o rity on 1/g5 to 96. console(config)#interface ethernet 1/g5[...]

562 Span ning T ree Com mand s User Guidel ines The priority va lue must be a multiple of 4096. The switch with the lowest pri ority is the root of the spanning t ree. Example The following example co nfigures s p anning-tree priority to 12288 . console(config)#spanning-tree priority 12288 spanning- t ree tcngu ard Use the spa nning-tree tcnguard c[...]

Spanni ng T ree Com mands 563 spanning-tree transmit hold-count Use the spann ing-tr ee trans mit hol d-count command to set the maximum number of BPDUs t hat a bridge is a llowe d to send within a hello time window (2 seconds) . Use the “n o” form of thi s command to reset the hold coun t to the default value. Syntax spanning -tree tra nsmit h[...]

564 Span ning T ree Com mand s[...]

Swit chpo rt Voice Comm ands 565 26 Switchport V oice Commands This chapter exp lains the following commands: • sh ow switch port voice • s witc hpo rt vo ice d etect aut o[...]

566 Switch por t Voice Co mmands show switchpo rt voice Use the show switchport voice command to show the status of auto-voip on an interface or a ll interfaces. Syntax show switchport voice [ inte rfa ce { ethe rnet interface | port-channel index }] • ethernet interface — Speci fies a vali d interface. The full s yntax is unit/port. • port-c[...]

Swit chpo rt Voice Comm ands 567 1/g8 Enabled 6 1/g9 Enabled 6 1/g10 Enabled 6 1/g11 Enabled 6 1/g12 Enabled 6 1/g13 Enabled 6 1/g14 Enabled 6 1/g15 Enabled 6 1/g16 Enabled 6 1/g17 Enabled 6 1/g18 Enabled 6 1/g19 Enabled 6 1/g20 Enabled 6 --More-- or (q)uit console#show switchport voice ethernet 1/g1 Interface Auto VoIP Mode Traffic Class ---------[...]

568 Switch por t Voice Co mmands The command outp ut provides the follow ing information: • Au to V oI P Mo d e —The Au to V oIP mode on the in terface. • T raffic Cl a ss —The Cos Queue or T raffic Class to w hich all V oIP traffic is mapped . This is n ot configur able and defau lts to the highest C OS q ueue availab le in the sys tem for[...]

T ACACS+ Com mands 569 27 T ACACS+ Commands This chapter exp lains the following commands: •k e y •p o r t •p r i o r i t y • show tacacs • tacacs-server host •t a c a c s - s e r v e r k e y •t a c a c s - s e r v e r t i m e o u t •t i m e o u t[...]

570 T ACACS+ Comma nds key Use the key command in T ACA CS Configuration mode to specify the authenti cation and e ncryp tion key for all T ACACS communic ations b etween the devi ce and t he T ACACS server . Thi s key must ma tch the key used on the T ACACS da e mon. Syntax key [key-st rin g] •k e y - s t r i n g — T o speci fy the key name. ([...]

T ACACS+ Com mands 571 Default Conf iguration The default port number is 49. Command Mode T ACACS Configuration mode User Guideli nes This command has no user guidelines. Example The following exampl e displays how to specify server po rt number 1200. console(tacacs)#port 1200 priority Use the priority command in T A CACS Configuration mode to spec[...]

572 T ACACS+ Comma nds console(config-tacacs)#priority 10000 show tacac s Use the show tacacs command in P rivileged EXEC mode to display th e configuration and st atistics of a T ACACS+ serve r . Syntax show tacacs [ ip-address ] • ip-addr ess — The nam e or IP address of the host. Default Conf iguration This command has no default configurati[...]

T ACACS+ Com mands 573 tacacs-serve r host Use the tacacs-ser ver host command in Global Configuration mode to configure a T A C ACS+ server . This command enters into the T ACACS+ configuration mode. T o delete the specif ied hostname or IP addr ess, use the no form of t his command. Syntax tacacs-ser ver host { ip-addr ess | hostname } no tacacs-[...]

574 T ACACS+ Comma nds Syntax tacacs-server key [ key -s t ri n g ] no tacacs-ser ver key • key-string — S pecifies the au the ntica tion an d en crypt ion key for all T ACACS communications between the switch a nd the T ACACS+ server . This key must match the key used on the T ACACS+ daemon. (Range: 0–128 c harac ters) Default Conf iguration[...]

T ACACS+ Com mands 575 Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The following example sets the timeo ut value as 30. console(config)#tacacs-server timeout 30 timeout Use the timeo ut command in T A CACS Configuration mode to specify the timeout val ue in seconds. If no ti me out value is s[...]

576 T ACACS+ Comma nds[...]

VLAN Co mm ands 577 28 VLAN Commands This chapter exp lains the following commands: • dvlan-t unnel e thertyp e •i n t e r f a c e v l a n • interfa ce range vlan • mod e dvlan-tunnel •n a m e •p r o t o c o l g r o u p •p r o t o c o l v l a n g r o u p •p r o t o c o l v l a n g r o u p a l l • show dvla n-tunnel • show dvla n[...]

578 VLAN Command s • s witc hpo rt tr unk allo wed v lan •v l a n • vlan associ ation mac • vlan associ ation subnet •v l a n d a t a b a s e •v l a n m a k e s t a t i c • vlan protocol group • vlan protocol group add protoco l • vlan protocol group name • vlan protocol group remov e • groupid — The protocol-based VLAN grou[...]

VLAN Co mm ands 579 dvlan-tunnel eth ertype Use the dvlan-t unnel ethert ype command in Global Configuratio n mode to configure t he ethertype for the specified interface. T o configure the EtherT yp e on the s pecified in terface to its default value, us e the no form of thi s command. Syntax dvlan-tunnel eth ertype { 802.1 Q | vman | custom < [...]

580 VLAN Command s Syntax interf ace vlan vlan-id • vla n-id — The ID of a valid VLAN (Range: 1–40 93). Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The fol low ing examp le co nfig ures the VLA N 1 IP a ddress o f 13[...]

VLAN Co mm ands 581 Command Mode Global Configuration mode User Guideli nes Commands used in the inte rface range context are ex ecuted independent ly on each interface in the range. If the command r eturns an error on one of the interfaces, an error message is disp layed and e xecution continues on other interfaces. Example The followi ng exampl e[...]

582 VLAN Command s Example The following example displays how to enable Double VLAN T unneling at ethernet port 1/g1. console(config-if-1/g1)#mode dvlan-tunnel name Use the name command in Interface Configuration mode to add a name to a VLAN. T o remove the VLAN name, us e the no form of this command. NOTE: Th is command cannot be configur ed for a[...]

VLAN Co mm ands 583 protocol gr oup Use the proto col gr oup command in V LAN Database mode to attach a VLAN ID to the pro tocol-based group ident ified by groupid . A gr oup may only be ass ociated with o ne VLAN at a ti m e. Howev er , the VLAN a ssociation can be change d. The referenced VLAN should be created prior to the creation of the protoc[...]

584 VLAN Command s protocol vla n group Use the protoco l vlan group command in Interface Configuration mode to add the phys ic al u nit /por t int erf ac e to the protocol-b ased gr oup identifi ed by groupid . A gr ou p may h ave more tha n one int erf ace ass oci ate d wit h it . Ea ch interface and protocol combination can be associated with on[...]

VLAN Co mm ands 585 console(config-if-1/g1)#protocol vlan group 2 protocol vla n group all Use the pro tocol vlan g roup a ll command in Global C onfiguration mode to add all physical interfaces to the protocol-based group identified by grou pid . A group may have mor e than one interface associated wit h it. Each interface and protocol combination[...]

586 VLAN Command s console(config)#protocol vlan group all 2 show dvlan- tunnel Use the sh ow dvlan-tunn el command in Privileged EXEC mode to display all interfaces enabled for Doub le VLAN T unneling. Syntax show dvlan-t unnel Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines Thi[...]

VLAN Co mm ands 587 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following exampl e displays detail ed information for unit/port "1/g1." console#show dvlan-tunnel interface 1/g1 Interface Mode EtherType --------- -----[...]

588 VLAN Command s Syntax show int erfaces swi tchport {ethern et interface | port-chan nel port-channel- number } • Interface — Sp ecific interfa ce, such a s etherne t 1/g8. • port- channel -number — V ali d port-cha nnel trunk i ndex. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode Use[...]

VLAN Co mm ands 589 8 VLAN008 tagged Dynamic 11 VLAN0011 tagged Static 19 IPv6 VLAN untagged Static 72 VLAN0072 untagged Static Static configuration: PVID: 1 (default) Ingress Filtering: Enabled Acceptable Frame Type: All Port 1/g1 is statically configured to: VLAN Name Egress rule ---- --------- ----------- 11 VLAN0011 tagged 19 IPv6 VLAN untagged[...]

590 VLAN Command s Port 1/g1 is member in: VLAN Name Egress rule Type ---- --------- ----------- ----- 91 IP Telephony tagged Static Static configuration: PVID: 8 Ingress Filtering: Disabled Acceptable Frame Type: All Port 1/g2 is statically configured to: VLAN Name Egress rule ---- --------- ----------- 8 VLAN0072 untagged 91 IP Telephony tagged F[...]

VLAN Co mm ands 591 Port 2/g19 is member in: VLAN Name Egress rule Type ---- --------- ----------- ----- 2921 Primary A unt agged Static 2922 Community A1 untagged Static Static configuration: PVID: 2922 Ingress Filtering: Enabled Acceptable Frame Type: Untagged GVRP status: Disabled Port 2/g19 is member in: VLAN Name Egress rule Type ---- --------[...]

592 VLAN Command s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example displays the P rotocol-Based VLAN information for either the ent ire system. console#show port protocol all Group Name ID Protocol(s VLAN Interfa[...]

VLAN Co mm ands 593 User Guideli nes This command has no user guidelines. Example The followi ng e xample i dent ifies te st as the pro tecte d group . console#show switchport protected 0 Name......................................... test show vlan Use the show vlan command in P rivileged EXEC mode to display VLAN information. Syntax show vlan [ id[...]

594 VLAN Command s 2/g1-1/g4 10 VLAN0010 1/g3-1/g4 dynamic Required 11 VLAN0011 1/g1-1/g2 static Required 20 VLAN0020 1/g3-1/g4 static Required 21 VLAN0021 static Required 30 VLAN0030 static Required 31 VLAN0031 static Required 91 VLAN0011 1/g1-1/g2 static Not Required 3964 Guest VLAN 1/g17 Guest - show vlan a s sociation mac Use the show vlan asso[...]

VLAN Co mm ands 595 MAC Address VLAN ID ----------------------- ------- 0001.0001.0001.0001 1 show vlan assoc iation subnet Use the show vlan association subnet command in Privileged EXEC mode to display the VLAN associate d with a specific configured IP -Addres s and netmask. If no IP Address and net mas k are specifie d, the VLAN associations of [...]

596 VLAN Command s switchport access vlan Use the switchport access vlan command in Interface Configuration mode to configure the VLAN ID when the inte rface is in access mode. T o reconfigur e the default, use t he no form of this command. Syntax switchport access vlan vlan -id no switchport access vlan • vla n-id — A valid VLAN ID of the VLAN[...]

VLAN Co mm ands 597 Syntax switchport forbidden vlan { add vlan-lis t | remove vlan-list } • add vla n-list — List of v alid VLAN IDs to add to the forbidden l ist. Separa te nonconse cutive VLAN IDs wi th a comma and no spa ces. Use a hyphen to designate a range of IDs. • remo ve vlan-list — List of valid VLAN IDs to remove from th e forbi[...]

598 VLAN Command s no switch port gener al acceptabl e-frame-ty pe tagg ed-only Default Conf iguration All frame types ar e accepted at ingr ess. Command Mode Interface Configuration (Et hernet, port-channel) mode User Guidel ines This command has no user guidelines . Example The following example co nfigures 1 / g8 to discard u ntagged frames at i[...]

VLAN Co mm ands 599 • untagged — Sets the port to tr ansmit untagg ed packe ts for the VLANs. Default Conf iguration Untagged. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guideli nes Y ou can use this command to change the egress rule (for e xample, from tagged to untagged) wit hout first removing the VL AN from th e[...]

600 VLAN Command s User Guidel ines This command has no user guidelines . Example The following example shows how to enables port i ngress filtering on 1/g8. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#switchport general ingress- filtering disable switchport general pvid Use the switchport general pvid command in Interface Confi[...]

VLAN Co mm ands 601 Example The following example shows how to configure the PVID for 1/g8, w hen the interface is in ge neral mode. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#switchport general pvid 234 switchport mode Use the switchport mode command in Interface Configuration mode to configure the VLAN mem bership mode of a p[...]

602 VLAN Command s User Guidel ines This command has no user guidelines . Example The following example co nfigures 1 / g8 to access mode. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#switchport mode access switchp ort prote cted Use the switchport protected command in Interface Configuration mode to configure a protected port. T[...]

VLAN Co mm ands 603 Example The following example configures Ethernet port 1/g1 as a member of protected group 1. console(config)#interface ethernet 1/g1 console(config-if-1/g1)#switchport protected 1 switchp ort prote cted na me Use the switchport protected nam e command in Global Configuration mode to a dds the p ort to t he prot ected g roup 1 a[...]

604 VLAN Command s switchport trun k allowed vla n Use the switchport trun k allowed vlan command in Interface Configuration mode to a dd VLANs to or remove VLA Ns from a trunk port . Syntax switchport trunk allowed vlan { add vlan- list | remove vlan -l ist } • add vla n-list — List of VLAN IDs to add. Separate no n-consecutive VLAN IDs with a[...]

VLAN Co mm ands 605 Syntax vlan vlan-range no vla n vlan- ran ge • vla n-range — A list of valid VLAN IDs to be added. List separate, non - consecutive VLAN IDs separated by comm as (without spaces); use a hyphen to designate a range of IDs. (Range: 2–4093) Default Conf iguration This command has no default configuration. Command Mode VLAN Da[...]

606 VLAN Command s vlanid — VLAN to as sociate with su bnet. (Range: 1-4093 ) Default Conf iguration No assigned MAC addres s . Command Mode VLAN Databas e mode User Guidel ines This command has no user guidelines . Example The followi ng e xample associates MAC addr ess with VLAN ID 1. console(config-vlan)#vlan association mac 0001.0001.0001 1 v[...]

VLAN Co mm ands 607 User Guideli nes This command has no user guidelines. Example The following example associates IP address with VLAN ID 100. console(config-vlan)#vlan association subnet 192.245.23.45 255.255.255.0 100 vlan database Use the vlan database command in Global Configuration mode to enter the VLAN database co nfiguration mode. Syntax v[...]

608 VLAN Command s vlan makestatic This command changes a dy namically created VLAN (one that i s created by GVRP r e gistrati on) to a static VLAN (one that is permanentl y configured and defined). The ID is a v alid VLAN identification number . VLAN range is 2 - 4093. Syntax vlan make static vlan -id • vla n-id — V alid v lan ID. R ange is 2 [...]

VLAN Co mm ands 609 existi n g command vlan protoco l group <groupname> is updated to vlan protocol g roup <group id> so that grou pid is used for both configuration and script generation. NOTE: If an atte mpt is made to migrat e to the la test i mpleme ntati on wit h any of th e grou pnames delete d prior to savi ng co nfigur atio n on[...]

610 VLAN Command s T o r emo ve the pro tocol from the prot ocol-based VLAN group identified by groupid , use the no form of this command. Syntax vlan pr otocol gro up add protoc ol < groupid > ethertype < value > no vlan protocol group add protocol < groupid > ethe rtyp e < val ue > • groupid — The protocol-based VLAN g[...]

VLAN Co mm ands 611 vlan protocol gro up name This is a new command for a ssigning a group name to vlan protocol group id . Syntax vlan pr otocol gr oup na me < groupid > < groupName > no vlan proto col grou p name < groupid > • groupid —The protocol-based VLAN group ID, which is automa tically gen erate d w hen y ou c reate a[...]

612 VLAN Command s vlan protocol gr oup remove Use the vlan p rotocol gr oup rem ove command in Global Configuration mode to remove the protoco l-based VLAN group identified by groupid . Syntax vlan proto col gro up remo ve groupid • groupid — The protocol-based VLAN gr oup ID, w hich is auto matically generated when y ou create a prot ocol-bas[...]

VLAN Co mm ands 613 vlan routing Use the vlan routing command to enable routing on a VLAN. Use the “no” form of this command to disable routing o n a VLAN. Syntax vlan routing vlan id [ index ] • vla nid — V alid VLAN ID (Range 1–40 93). • index — Internal interface ID. This optional pa rameter is listed in t he configurat ion file fo[...]

614 VLAN Command s[...]

Voice VLAN Com man ds 615 29 V oice VLAN Commands This chapter exp lains the following commands: •v o i c e v l a n •v o i c e v l a n ( I n t e r f a c e ) • v oice vla n da ta pr ior ity •s h o w v o i c e v l a n[...]

616 V oice VLAN Com mands voice vlan This command is used to enable the voice vlan capability on the s w itch. Syntax voice vlan no voice vlan Para mete r R ange s Not applicab le Command Mode Global Configuration Usage Guideli nes Not applicab le Default V alue This featur e is disabled by default. Example console(config)#voice vlan console(config[...]

Voice VLAN Com man ds 617 • trust — T r ust the d ot1p prio rity o r D SCP valu es co ntain ed in pa ckets arriving on t he voice vlan port. • untrust — Do n ot t rust th e d ot1p pri ority or DS CP v alues con tained in packets arriving on the voice vla n port. •d s c p — The DSCP value (Range: 0–64). Default Conf iguration The defau[...]

618 V oice VLAN Com mands Command Mode Interface Configurati on Default V alue trust Example console(config-if -1/g1)#voice vlan da ta priori ty untrus t console(config-if -1/g1)#voice vl an data priority trust show voice vlan show voice vlan [ interface {< unit/port > | all }] Syntax When the interface parameter is n ot specified, onl y the [...]

Voice VLAN Com man ds 619 Example (console) #show voice vlan interface 1/g1 Interface...............................1/g1 Voice VLAN Interface Mode...............Enabled Voice VLAN ID...........................1 Voice VLAN COS Override.................False Voice VLAN Port Status..................Disabled[...]

620 V oice VLAN Com mands[...]

802.1x Comman ds 621 30 802.1x Commands This chapter exp lains the following commands: • dot1x ma c-auth-byp ass •d o t 1 x m a x - r e q •d o t 1 x m a x - u s e r s • dot1x port-control • dot1x r e-aut hentica te • dot1x r e-aut hentica tion • d ot1 x sy ste m-a ut h-co ntro l • dot1x timeout gu est-vlan-period • dot1x timeout q[...]

622 802.1x Comm ands dot1x ma c-au th-bypa ss Use the dot1x m ab-enable command to enabl e MAB on an inte rface. Use the “no” form of this command to dis able MAB on an interface. Syntax dot1x ma c-auth -bypas s no dot1x mac-auth-bypass Default Conf iguration MA C Authe ntication Bypass is disabled by default . Command Mode Interface Configurat[...]

802.1x Comman ds 623 Default Conf iguration The default value for the count parameter is 2. Command Mode Interface Configuration (Ethernet) mode User Guideli nes Change the default value of this command only to adjust for unusual circumstances, such as unreliable l inks or specific behavio ral problems with certain clients and authentication serv e[...]

624 802.1x Comm ands Command Mode Interface Configuration (Et hernet) m ode User Guidel ines This command has no user guidelines . Example The following command limits the number of devices that can aut henticate on port 1/ g2 to 3. console(config-if-1/g2)#dot1x max-users 3 dot1x p ort-control Use the dot1x port-con trol command in Interface Config[...]

802.1x Comman ds 625 Default Conf iguration The default co nfiguration is auto . Command Mode Interface Configuration (Ethernet) mode User Guideli nes It is recommended that you disable the spanning tr ee or enable spanning-tree P o r t Fas t mo d e o n 8 02 . 1 x e d g e po r t s ( po rt s i n auto state that ar e co nnected to end stations), in o[...]

626 802.1x Comm ands User Guidel ines This command has no user guidelines . Example The following command manually initiates a r e-authentication of the 802.1x- enabled port. console# dot1x re-authenticate ethernet 1/g16 dot1x r e-authentication Use the dot1x re- authentication command in Interface Configuration mode to en abl e pe rio dic re -au t[...]

802.1x Comman ds 627 dot1x system-auth-control Use the dot1x system-a uth-con trol command in Global Configuration mode to enab le 802.1x globally . T o disable 8 02.1x globally , use the no form of t his command. Syntax dot1x system -auth-cont rol no dot1x system-auth- control Default Conf iguration The def ault for this comman d is disabl ed. Com[...]

628 802.1x Comm ands Default Conf iguration The switch r emains in the quiet s tate for 90 seconds. Command Mode Interface Configuration (Et hernet) m ode User Guidel ines It is recommended t hat the user set the do t1x ti meout guest-v lan-per iod to at least three times the wh ile timer , so that at least three EA P Request s are sent, before ass[...]

802.1x Comman ds 629 Command Mode Interface Configuration (Ethernet) mode User Guideli nes During the quiet period, the switch does not accept or ini tiate any authen tication reques ts. Change the default value of this command only to adjust for unusual circumstances, such as unreliable l inks or specific behavio ral problems with certain clients [...]

630 802.1x Comm ands Command Mode Interface Configuration (Et hernet) m ode User Guidel ines This command has no user guidelines . Example The following example sets the number of seconds b etween re-authentication attempt s to 300. console(config)# interface ethernet 1/g16 console(config-if-1/g16)# dot1x timeout re-authperiod 300 dot1x timeo ut se[...]

802.1x Comman ds 631 User Guideli nes The actua l timeo ut is th is par amete r or the pro duct of the Radius transm ission ti mes the Radius ti meou t, whichev er is s maller Example The fo llowing e xampl e sets th e time fo r the r etransmis sion to th e authenti cation s erver to 36 00 seconds . console(config-if-1/g1)# dot1x timeout server-tim[...]

632 802.1x Comm ands Example The following example sets the time for the r e transmission of an EAP -request frame to the cli ent to 3600 seconds. console(config-if-1/g1)# dot1x timeout supp-timeout 3600 dot1x timeout tx-period Use the dot1x timeou t tx-peri od co mmand in Interface Configuration mode to set the numb er of seconds that the sw it ch[...]

802.1x Comman ds 633 Example The following command sets the number of seconds that the switch waits for a r esponse to an EAP -r equest/ identity f rame to 3600 s econds. console(config)# interface ethernet 1/g16 console(config-if-1/g16)# dot1x timeout tx-period 3600 show dot1x Use the show dot1 x command in P rivileged EXEC mode to display 8 0 2.1[...]

634 802.1x Comm ands Port Admin Oper Reauth Reauth Mode Mode Control Period ------- ------------------ ------------ -------- ---------- 1/g8 auto Authorized FALSE 3600 User Name...................................... Clark Quiet Period................................... 60 Transmit Period................................ 30 Maximum Requests..........[...]

802.1x Comman ds 635 Reauth C ontrol Ind icates whether re-aut hent icatio n is ena bled on t his port. Reauth P eriod The ti mer used by the authen ticator state ma chi ne on th is port to d etermine when reauth entic ation o f the s upplic ant takes pl ace. The val ue is expres sed in seco nds and will be in the range of 1 a nd 65 535. User name [...]

636 802.1x Comm ands show dot1x clients Use the show dot1x clients command in P rivileged EXEC mode to disp lay detailed information about the use rs who have successfull y authenticated on the sy st em or on a spec if ied port . Syntax show dot1x clients { all |ethe rnet interface } • all — A ll 802.1X clients authenticated on the system • i[...]

802.1x Comman ds 637 User Guideli nes This command has no user guidelines. Example The followi ng ex ample displays informat ion about the 802.1x cl ients authenti cated on port 1 /g9. console#show dot1x clients ethernet 1/g9 Interface............................ 1/g9 User Name............................ guest1 Supp MAC Address....................[...]

638 802.1x Comm ands The following table describes the significant fields shown in the display: show dot1x ethernet The show d ot1x ethern et command has been modified to sho w the status of MA C Authe nticatio n Bypass. Th is featu re is an exte nsion of D ot1x Opti on 81 feature added in P ower Connect Release 2.1. t o accept a VLAN name as an al[...]

802.1x Comman ds 639 Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#show dot1x ethernet 1/g1 Administrative Mode............... Disabled Port Admin Oper Reauth Reauth Mode Mode Control Period ------- ------------------ ------------ -------- ---------- 1/g1 auto Authorized FALSE 3[...]

640 802.1x Comm ands show dot1x statistics Use the show dot1x stat istics command in Priv ileged EXEC mode to display 802.1x st atistics for the s p ecified inte rface. Syntax show dot1x statistics ethe rnet inter fa ce • interface — Etherne t port name. T he full synta x is unit/p ort . Default Conf iguration This command has no default config[...]

802.1x Comman ds 641 EAP Request/Id Frames Transmitted.............. 0 EAP Request Frames Transmitted................. 0 Invalid EAPOL Frames Received.................. 0 EAPOL Length Error Frames Received............. 0 The following table descri bes the significant fields shown in the display . Field Descr ipti on EapolF ramesRx The numbe r of va[...]

642 802.1x Comm ands show dot1x users Use the show dot1x user s command in P rivileged EXEC mode to display 802.1x a uthentic ated users for the swi tch. Syntax show dot1x users [ use r nam e username ] • usern ame — Suppl icant usernam e (Ra nge: 1–1 60 cha racters ) Default Conf iguration This command has no default configuration. Command M[...]

802.1x Comman ds 643 Example The followi ng exampl e displays 80 2.1x users. console#show dot1x users Port Username --------- --------- 1/g1 Bob 1/g2 John Switch# show dot1x users username Bob Port Username --------- --------- 1/g1 Bob The following table descri bes the significant fields shown in the display : 802.1x Advanced Features dot1x gu est[...]

644 802.1x Comm ands Default Conf iguration The guest VLAN is disabled on t he interface by default. Command Mode Interface Configuration (Et hernet) m ode User Guidel ines Configure the guest VLAN before using this comm and. Example The following exampl e sets the guest VLAN on port 1/g2 to VLAN 1 0. console(config-if-1/g2)#dot1x guest-vlan 10 dot[...]

802.1x Comman ds 645 Example The following example set the unauthenticated VLAN on port 1/g2 to VLAN 20. console(config-if-1/g2)#dot1x unauth-vlan 20 show dot1x a dvanced Use the show dot 1x advance d command in P rivileged EXEC mode to display 802.1x advanced features for the switch or for the specified interface. The outp ut of this command h as [...]

646 802.1x Comm ands Example The following example displays 802.1x adv anced featur es for the switch. console#show dot1x advanced Port Guest Unauthenticated VLAN Vlan --------- --------- --------------- 1/g1 Disabled Disabled 1/g2 10 20 1/g3 Disabled Disabled 1/g4 Disabled Disabled 1/g5 Disabled Disabled 1/g6 Disabled Disabled console#show dot1x a[...]

802.1x Comman ds 647 802.1x Option 81 radius-ser ver attribute 4 Use the radius-ser ver at tribute 4 command in Global Configuration mod e to set the network acces s server (NAS) IP address for the R ADI US server . Use the no version of the com mand to s et the value to t he default. Syntax radius-ser ver attribute 4 ip-addr ess no do t1x guest -v[...]

648 802.1x Comm ands[...]

ARP Co mma nds 649 31 ARP Commands This chapter exp lains the following commands: •a r p • arp cachesize • arp d ynamicrenew •a r p p u r g e •a r p r e s p t i m e •a r p r e t r i e s •a r p t i m e o u t • clear arp- cache • clear arp -cache manage ment • ip proxy-arp •s h o w a r p[...]

650 ARP Comma nds arp Use the arp command in Global Configuratio n mode to cr eate an Address Resolution Protocol (ARP) entry . Use the no f o rm of the comm and to remove the entry . Syntax arp ip-addr ess mac-address no arp ip-address • ip-add ress — IP add ress of a device on a subn et atta ched to an existin g routing interf ace. • mac-ad[...]

ARP Co mma nds 651 Syntax arp cachesize int eger no arp cachesize • integ er — Maximum number of A RP entries in the ca che. (Range: 256– 1024) Default Conf iguration The def ault integ er value is 896. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The followi ng ex ample defines an arp c[...]

652 ARP Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines When an ARP e ntry r eaches its maxi mum age, the syst e m must decide whether to retain or delete the entry . If the entry has recently been used to forwar d data pack ets, the syste m will re n ew the ent ry by sending an ARP request to the neighbor . If the neighb or r[...]

ARP Co mma nds 653 Syntax arp purge ip-addr ess • ip-add ress — The IP addr ess to be remov ed from ARP cache. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example removes the specified IP address from arp cache. c[...]

654 ARP Comma nds User Guidel ines This command has no user guidelines . Example The following example defines a r esponse timeout of 5 seconds. console(config)#arp resptime 5 arp retrie s Use the arp re tri es command in Global Configuration mode to configur e the ARP count of m aximum requests for retries. T o return to the default v alue, use th[...]

ARP Co mma nds 655 arp timeout Use the arp time out command in Globa l Config uration mo de to configure the ARP en try ageout time. Use the no form of t he command to set the ageout tim e to the defaul t. Syntax arp time out integer no arp time out • integ er — The IP AR P entry ageout time. (Ran ge: 15-21 600 seconds) Default Conf iguration T[...]

656 ARP Comma nds Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following exampl e clears all entries ARP of type dynamic, i ncluding gatewa y , f rom ARP ca che. console#clear arp-cache gateway clear ar p-cache manage ment Use the clear arp-cach e managem ent command to clear all entries from[...]

ARP Co mma nds 657 ip proxy-arp Use the ip prox y-arp command in Interface Configuration mode to enable proxy ARP on a router interface. Without proxy ARP , a device only responds to an ARP request if the target IP address is an address confi gured on the inter face where the ARP reque st arri ved. With proxy ARP , the dev ice may a lso respond if [...]

658 ARP Comma nds Syntax show arp [brief] [switch] • brief — Display ARP paramet ers and cache. • sw itch — Dis play ARP cache for the switch. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example shows sh ow a[...]

DHCP and B OOTP Relay C o mmands 659 32 DHCP and BOOTP Relay Commands This chapter exp lains the following commands: • bootpdhcprelay cidridoptmode • bootpdhcprel ay maxhopcount • bootpd hcprelay minwaittime • show bootpdhc prel ay[...]

660 DHCP and BOOT P Relay Commands bootpdhcp relay cidridop tmode Use the bootpdh cprelay ci dridoptm ode com mand in Global Configurat ion mode to enable the circuit ID option and r emote agent ID mode for BootP/DH CP Relay on the syste m. Use the no form of the command to disable the ci rcuit ID op tion and remote agent ID mode for BootP/ DHCP Re[...]

DHCP and B OOTP Relay C o mmands 661 bootpdhcp relay maxhopco unt Use the boot pdhcprel ay maxho pcount com mand in Global Configuration mode to configure the maximum allowable relay agent hops for Boot P/DHCP Relay on the system. Use the no form of the com mand to set the m aximum hop count to the default value. Syntax bootpdh cprelay maxhopco unt[...]

662 DHCP and BOOT P Relay Commands Syntax bootpdhcp relay minw aittiime int eger no bootpdhc pre lay minsho show arpshow arpwshsh o w arposhow arpwsh oshow arpwsh ow arp arp arp asho w arprpwait time • integer — Mi nimum wait time fo r BootP/ DHCP Relay on the system. (Range: 0-100 seconds) Default Conf iguration 0 is the de fault integer confi[...]

DHCP and B OOTP Relay C o mmands 663 Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The followi ng ex ample enables the circuit ID and remote ag ent ID options. console(config)#bootpdhcprelay cidridoptmode Circuit Id and Remote Agent Id Mode set Successfully. show bootp dhcprelay Use the show bo[...]

664 DHCP and BOOT P Relay Commands Example The following example defines the Boot/DHCP Relay information. console#show bootpdhcprelay Maximum Hop Count.............................. 4 Minimum Wait Time(Seconds)..................... 0 Circuit Id Option Mode......................... Disable[...]

DHCPv6 Comman ds 665 33 DHCPv6 Commands This chapter exp lains the following commands: • clear i pv6 dhcp •d n s - s e r v e r • domain- name • ipv6 d hcp pool •i p v 6 d h c p r e l a y • ipv6 d hcp relay-agent -info-opt • ipv6 d hcp relay-agent-info-remote-id-subopt •i p v 6 d h c p s e r v e r • prefix-delegation • s ervice d[...]

666 DHCPv6 Comman ds clear ipv6 dhcp Use the clear ipv6 dhcp command in Priv ileged EXEC mode to clear DHCPv6 statistics for al l interfaces or for a specific interface. Syntax clear ipv6 dhcp { statis tics | interf ace vla n vlan -id statistics} • vla n-id — V ali d VLAN ID. • statistics — Indica tes statistics dis play if VL AN is specifi[...]

DHCPv6 Comman ds 667 Default Conf iguration This command has no default configuration. Command Mode IPv6 DHCP P ool Configuration mode User Guideli nes DHCPv6 pool can have multiple number of domain names with maximum of 8. Example The following example sets the ipv6 DNS server address of 2020:1::1, which is provided to a DHCPv6 client by th e DHCP[...]

668 DHCPv6 Comman ds User Guidel ines DHCPv6 pool can have multiple number of domain names with m aximum of 8. Example The following example sets the DNS domain name "t est", which is provided to a DHCPv6 client by the DHCPv6 server . console(config)#ipv6 dhcp pool addrpool console(config-dhcp6s-pool)#domain-name test console(config-dhcp6[...]

DHCPv6 Comman ds 669 Example The following example enters IPv6 DHCP P ool Configuration mode. console(config)#ipv6 dhcp pool addrpool console(config-dhcp6s-pool)# ipv6 dhcp relay Use the ipv6 dhcp relay command in Interface Configuration mode to configure an interface for DHC Pv6 relay functionality . Syntax ipv6 dhcp relay { des tin atio n r elay-[...]

670 DHCPv6 Comman ds User Guidel ines If r elay-address is an IPv6 globa l address, then re la y -i n t e r f a c e is not r equired. If r elay-address is a link -local or multicast addr ess, then rela y- in ter fa c e is requir ed. F inally , a value for r e lay-address is not specified, then a value for re l a y - in t er f a c e must be specifie[...]

DHCPv6 Comman ds 671 Example The following example configures the number 100 to repr esent the DHCPv6 Relay Agent Information Option. console(config)#ipv6 dhcp relay-agent-info-opt 100 ipv6 dhcp r e lay-agent-i nfo-remote-id-subopt Use the ipv6 dh cp relay-agent- info-remot e-id-subopt command in Global Configuration mode to configure a number to r[...]

672 DHCPv6 Comman ds Syntax ipv6 dhcp ser ver pool-na me [rapid-com mit] [preferen ce pref - value ] • pool-name — The name of the DHCPv6 pool containi ng statel e ss and/ or prefix delegation parameters • rapid-commit — Is an option t hat allows f or an abbr eviated e xcha nge between the client and server . • pref -value — Pr eference[...]

DHCPv6 Comman ds 673 • DUID — Client DUID (e.g. 00:01:00:0 9:f8:79: 4e:00:0 4:76:73 :43:76 '). • hostna me — Client host name used fo r logging and tracing . (Range: 0- 31 characte rs.) • valid-lifet ime — V alid li fetime fo r delegat ed prefix. (Ran ge: 0-42 949672 95 seconds) • preferr ed -lifetime — Pr eferred lifetim e for[...]

674 DHCPv6 Comman ds Default Conf iguration Enabled is the default state. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following exampl e enables DHCPv6 globally . console#configure console(config)#service dhcpv6 console(config)#no service dhcpv6 show ipv6 dhcp Use the show ipv6 dhcp [...]

DHCPv6 Comman ds 675 Example The following example displays the DHCPv 6 server name and status. console#show ipv6 dhcp DHCPv6 is disabled Server DUID: show ip v6 dhcp bin ding Use the show ipv6 dhcp binding command in P rivilege d EXEC mode to display the configured DHCP pool. Syntax show ipv6 dhcp binding [ ipv6-addr ] • ipv6 -addr — V alid I [...]

676 DHCPv6 Comman ds show ipv6 dhcp interface Use the show ipv6 dhcp interface com mand in User EXEC mode to display DHCPv6 information for a ll relevant interf ace s or a specifie d interface. If an interface is specified, the opti onal statistics parameter is availa ble to view statistics for the specified interfa ce. Syntax show ipv6 dh cp inter[...]

DHCPv6 Comman ds 677 Option Flags................................... console> show ipv6 dhcp interface vlan 11 statistics DHCPv6 Interface vlan11 Statistics ------------------------------------ DHCPv6 Solicit Packets Received................ 0 DHCPv6 Request Packets Received................ 0 DHCPv6 Confirm Packets Received................ 0 DHC[...]

678 DHCPv6 Comman ds show ipv6 dhcp pool Use the show ipv6 dhcp poo l command in P rivileged EXEC mode to display the configured DHCP pool. Syntax show ipv6 dh cp pool pool-name • pool-name — Nam e of the pool. (Ran ge: 1-32 ch aracter s) Default Conf iguration This command has no default configuration. Command Mode P rivil eged EXEC mode User [...]

DHCPv6 Comman ds 679 Command Mode User EXEC mode User Guideli nes This command has no user guidelines. Example The following example displays the DHCPv 6 server name and status. console> show ipv6 dhcp statistics DHCPv6 Interface Global Statistics ------------------------------------ DHCPv6 Solicit Packets Received................ 0 DHCPv6 Reque[...]

680 DHCPv6 Comman ds DHCPv6 Relay-forward Packets Transmitted....... 0 Total DHCPv6 Packets Transmitted............... 0[...]

DVM RP Co mman ds 681 34 DVMRP Commands This chapter exp lains the following commands: •i p d v m r p • ip dvm rp metric • ip dvm rp trapflags •s h o w i p d v m r p • sh ow ip dvmrp in terface • show ip dvmrp neighbor • show ip dvmr p nextho p •s h o w i p d v m r p p r u n e • show ip dvmrp route[...]

682 DVMRP Commands ip dvmrp Use the ip d vm rp co mmand to set the adminis trative mode of DVMRP i n the router to active. IGMP must be en abled befor e D VMRP can be enab led. Syntax ip dvmrp no ip dvmrp Default Conf iguration Disabled is the default configuration. Command Mode Global Configuration Interface Configurati on (VLAN) mode User Guidel [...]

DVM RP Co mman ds 683 Default Conf iguration 1 the default v alue. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The following exampl e configures a metric of 5 for VL AN 15. console(config)#interface vlan 15 console(config-if-vlan15)#ip dvmrp metric 5 ip dvmrp trapflags Use the ip dv[...]

684 DVMRP Commands console(config)#ip dvmrp trapflags console(config)#no ip dvmrp trapflags show ip dvmrp Use the show ip dvmrp command in P rivileged EXEC mode to display the system-wide i nfo rmation for D VMRP . Syntax show ip dvm rp Default Conf iguration This command has no default condition. Command Mode P rivileged EXEC mode User Guidel ines[...]

DVM RP Co mman ds 685 show ip dvmrp interface Use the show ip dvmrp interfac e command in P rivileged EXEC mode t o dis pla y the int erf ace info rm atio n fo r DVMR P on th e sp eci fie d int er face . Syntax show ip dvmrp in terface vlan vlan-id • vla n-id — V alid VLAN I D. Default Conf iguration This command has no default condition. Comma[...]

686 DVMRP Commands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example displays the neighbor information for D VMRP . console(config)#show ip dvmrp neighbor No neighbors available. show ip dvmr p nexthop Use the show ip dvmrp nexthop command in P rivileged EXEC mode to display the [...]

DVM RP Co mman ds 687 Example The following example displays the ne xt hop information on o utgoing interfaces for routing multicast dat agrams. console(config)#show ip dvmrp nexthop Next Hop Source IP Source Mask Interface Type -------------- -------------- --------- -- ---- show ip dvmrp pr une Use the show ip dvmrp prune com ma nd i n Priv ileg [...]

688 DVMRP Commands show ip dvmr p route Use the show ip dvmrp route command in Priv ilege d EXEC mode to display the multicast routing inf ormation for DVMRP . Syntax show ip dvm rp route Default Conf iguration This command has no default condition. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example Th[...]

IGMP Commands 689 35 IGMP Commands This chapter exp lains the following commands: •i p i g m p • ip igmp last-member-query-count • ip igmp last-mem ber-q uery -interval • ip igm p query-interval • ip igmp query-max -respons e-time • ip igmp robustness • ip igmp startup-query-count • ip igmp startup-query-int erval • ip igmp versio[...]

690 IGMP Commands ip igmp Use the ip igmp command in Global Configuration mode to set the administ rative m ode of IGMP i n the syst em to activ e. Syntax ip igmp no ip igmp Default Conf iguration Disabled is the defa ult state. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following e[...]

IGMP Commands 691 Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The followi ng e xample sets 10 as th e number of VLAN 2 Group-Specific Queries. console#configure console(config)#interface vlan 2 console(config-if-vlan2)#ip igmp last-member-query- count 10 console(config-if-vlan2)#no [...]

692 IGMP Commands User Guidel ines This command has no user guidelines . Example The following example configures 2 seconds a s the Maximum Res ponse Time inserted in VL AN 15’s Group-Specific Q ueries. console(config)#interface vlan 15 console(config-if-vlan15)#ip igmp last-member-query- interval 20 ip igmp query-inter val Use the ip igmp query-[...]

IGMP Commands 693 console(config-if-vlan15)#ip igmp query-interval 10 ip igmp query- max-respon se-time Use the ip igmp query- max-response -time command in Internet Configuration mode to configure the maximum resp onse t ime interval for the specified interface. It is the maximum query response time advertised in IGMPv2 querie s on this interface [...]

694 IGMP Commands ip igmp robustness Use the ip igmp robustness command in Interface Configuration mode to configure the robustness that allows tuning of the interface, that is, tuning for the expect e d packet loss on a subnet. If a subnet is expected to have significant loss, the robustnes s variable may be incr eased for the inte rface. Syntax i[...]

IGMP Commands 695 no ip igmp st artu p-query-c ount • count — The n umber of startup queries. (Range: 1-20) Default Conf iguration The default count value is 2. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The following exampl e sets for VLAN 15 the nu mber of queries sent out on[...]

696 IGMP Commands Command Mode Interface Configurati on (VLAN) mode User Guidel ines This command has no user guidelines . Example The fol lowing example sets a t 10 seconds the inter val be tween g eneral queries sent at st artup for VLAN 15. console(config)#interface vlan 15 console(config-if-vlan15)#ip igmp startup-query- interval 10 ip igmp ver[...]

IGMP Commands 697 console(config-if-vlan15)#ip igmp version 2 show ip igmp Use the show ip igmp comm and in P rivileged EXEC mode to display system- wide IGMP information. Syntax show ip igm p Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Ex[...]

698 IGMP Commands show ip igmp groups Use the show ip igm p groups command in Pri v ileged EXEC mode to display the registered multicast groups on the interfa ce. If detail is specified, this command displays the registered multicast groups on the interface in detail. Syntax show ip i gmp grou ps in terfa ce vl an vlan id [ detail ] • vla n-id ?[...]

IGMP Commands 699 show ip igmp interface Use the show ip igm p in terface command in Pr ivileged EXE C mode to display the I GMP information for the specified interface. Syntax show ip igmp in terfa ce vlan vlan-id • vla n-id — V alid VLAN I D Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode U[...]

700 IGMP Commands show ip igmp interface membership Use the show ip igmp in terfa ce membe rshi p command in P rivileged EXEC mode to display the list of interfaces that have r egistered in the multicas t group. If detail is specified, this command displays detailed informat ion about the listed inte rfaces. Syntax show ip i gmp int erface me mber [...]

IGMP Commands 701 show ip igmp interface stats Use the show ip igm p in terface st ats command in User EXEC mode to display the IGMP statistical information for the interfac e. The statistics are only displayed when the interfa ce is enabled for IGMP . Syntax show ip i gmp interf ace stats vla n vlan-id • vla n-id — V alid VLAN I D Default Conf[...]

702 IGMP Commands[...]

IGMP Pro xy Com mands 703 36 IGMP Proxy Commands This chapter exp lains the following commands: •i p i g m p - p r o x y • ip igmp-proxy r eset-status • ip igmp-prox y unsolicited-report-interval • sh ow ip igm p-proxy • sh ow ip igm p-proxy interface • sh ow ip igm p-proxy groups • sh ow ip igm p-proxy groups detail[...]

704 IGMP Proxy Comman ds ip igmp-proxy Use the ip igmp-prox y command in Interface Configuration mode to enable the IGMP Proxy on the router . T o enable the IGMP P roxy on the router , multicast forw arding must be enabled and ther e must be no multicas t routing protocols enab led on the router . Syntax ip ig mp-pro xy no ip igmp-p roxy Default C[...]

IGMP Pro xy Com mands 705 Default Conf iguration This command has no default configuration. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The foll owing example resets the host inter face st atus pa rameters of the IGMP P roxy router . console(config)#interface vlan 15 console(config-[...]

706 IGMP Proxy Comman ds Example The followi ng e xample sets 10 seconds as the unsolicited r eport interval for the IGM P Proxy router . console(config)#interface vlan 15 console(config-if-vlan15)#ip igmp-proxy unsolicited- report-interval 10 show ip igmp-proxy Use the show i p igmp -proxy command in P rivileged EXEC mode to display a summary of t[...]

IGMP Pro xy Com mands 707 Operational Mode............................. Enable Version...................................... 3 Number of Multicast Groups................... 0 Unsolicited Report Interval.................. 1 Querier IP Address on Proxy Interface........ 0.0.0.0 Older Version 1 Querier Timeout.............. 0 Older Version 2 Querier T[...]

708 IGMP Proxy Comman ds ----------------------------------------------------------------- 1 0 0 0 ----- ----- 20 0 0 0 0 3 0 0 0 ----- ----- show ip igmp- proxy groups Use the show ip igm p-proxy groups command in P rivileged EXEC mode to display a t able of information ab o ut multicas t groups that IGMP Prox y repor ted. It displays status pa ra[...]

IGMP Pro xy Com mands 709 show ip igmp-proxy grou ps detail Use the show ip igm p-prox y groups detai l command in P rivileged EXEC mode to dis play com plete informa tion about mult icas t groups th at IGMP Pr o x y h a s re p o r t e d . Syntax show ip igmp- proxy groups detail Default Conf iguration This command has no default configuration. Com[...]

710 IGMP Proxy Comman ds[...]

IP H elp er Comm ands 711 37 IP Helper Commands This chapter exp lains the following commands: • clea r ip help er statisti cs •i p h e l p e r - a d d r e s s ( g loba l configurat ion) • ip helper-addr e ss (interface configurati on) • ip helper enab le •s h o w i p h e l p e r - a d d r e s s • sh ow ip helper sta tistics[...]

712 IP Help er Commands clear ip helper statistics Use the clear ip helper stat istics co mmand to reset to 0 the stati stics displayed in show ip helper statisti cs. Syntax clear ip hel per statistics Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guidel ines There ar e no user gu[...]

IP H elp er Comm ands 713 • dest-udp -port — A destinat ion UDP p ort nu mber from 0 to 655 35. • port-name — The destina tion UDP port may be opt ionally sp ecified by its name . Wheth er a port is s pecified by its numb er or its nam e has no effect on behavior . The na mes recognized are as follows: dhcp (port 67), doma in (port 53), isa[...]

714 IP Help er Commands To relay UDP packets received on any interface for all default ports (Table 4) to the server at 20.1.1.1, use the following commands: console#config console(config)#ip helper-address 20.1.1.1 ip helper -address (inter face configuration) Use the ip helper-address (interface configuration) co mmand to configure the rela y of [...]

IP H elp er Comm ands 715 Default Conf iguration No helper addresses are configured. Command Mode Interface Configuration (VLAN) mode. User Guideli nes This command can be inv oked multiple times on routi ng interface, either to specify multip le server addr esses fo r a given port number or t o specify multiple port numbers handled by a sp ecific [...]

716 IP Help er Commands This command takes precedence over an ip helper- address command given in global configuration mode. With the following configuration, the relay agent relays DHCP packets received on any interface other than vlan 5 and vlan 6 to 192.168.40.1, relays DHCP and DNS packets received on vlan 5 to 192.168.40.2, relays SNMP traps ([...]

IP H elp er Comm ands 717 Default Conf iguration IP helper is e nabled by default. Command Mode Global Configuration mode. User Guideli nes This com mand can be us ed to tempora rily d isable IP he lper wi thout de leting all IP helper addresses. This command replaces the bootpdhcprelay enable comma nd, but affects not only relay of DHCP packets, b[...]

718 IP Help er Commands Example show ip helper-address IP helper is enabled Interface UDP Port Discard Hit Count Se rver Address --------------- ----------- -------- --- ------- ------- -------- vlan 100 dhcp No 10 10.100.1.254 10.100.2.254 vlan 101 any Yes 2 any dhcp No 0 10.200.1.254 show ip he lper statistics Use the show ip help er sta tistics [...]

IP H elp er Comm ands 719 Syntax show ip helper stati stics Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes F ield descriptions: DHCP client messages recei ved The number of vali d messages r eceived from a DHCP client . The count i s only i ncrem ented if I P helper is ena bled [...]

720 IP Help er Commands Example console#show ip helper statistics DHCP client messages received.................. 8 DHCP client messages relayed................... 2 DHCP server messages received.................. 2 DHCP server messages relayed................... 2 UDP client messages received................... 8 UDP client messages relayed.......[...]

IP Routing Comma nds 721 38 IP Routing Co mmands This chapter exp lains the following commands: •e n c a p s u l a t i o n • ip addr ess •i p m t u • ip netdirbcast •i p r o u t e •i p r o u t e d e f a u l t • ip route distance •i p r o u t i n g •r o u t i n g • sh ow ip brief • sh ow ip interfac e • show ip protocols •s[...]

722 IP Rou ting Comma nds encapsulatio n Use the encapsulation command in Interface Configuration mode to configure the link layer encapsulation type for the packet. Routed frames are always ethe rnet encapsulated when a frame i s routed to a VLAN. Syntax encapsulation { eth ernet | snap } • ethernet — Specifies Ethernet encapsulation. • snap[...]

IP Routing Comma nds 723 no ip addre ss ip-addr ess { subnet-mas k | prefix-length } [ secondar y ] • ip-add ress — IP a ddress of the i nterfac e. • subnet-mask — Subnet mask of t he interfa ce • prefix-length — L eng th of the prefix. Must be preceded by a forward slash (/). (Range: 1-30 bits) • secondary — Indicates the IP ad dre[...]

724 IP Rou ting Comma nds stack uses its default IP MTU and ignor es the value set using the ip m tu command. OSPF advertises t he IP MTU in the Database Description packets it sends to it s neighbors during database e xchange. If two OSPF neighbors advertise diffe rent IP MTUs, they will not form an adjacency (unless OSPF has been instructed to ig[...]

IP Routing Comma nds 725 no ip n etdirbc ast Default Conf iguration Disabled is the default configuration. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The following exampl e defines the IP addr ess and subnet mask for VLAN 15 . console(config)#interface vlan 15 console(config-if-vla[...]

726 IP Rou ting Comma nds • prefix-length — L ength of prefix. Must be preceded with a forward slash (/). (Range: 0-32 bits) • ne xtHopRtr — IP addr ess of the ne xt hop router . • prefer ence — S pecifies the preference value, a.k.a. a dminis trative d istance, of an in dividual st atic rout e. (Range: 1 -255) Default Conf iguration De[...]

IP Routing Comma nds 727 • prefer en ce — Specifies th e preference value, a.k.a admin istrativ e distance, of an ind ividual st atic route. (Range: 1-2 55) Default Conf iguration Default value of preference is 1. Command Mode Global Configuration mode User Guideli nes F or routed management traffic: 1 Router ent ries are checked for applicable[...]

728 IP Rou ting Comma nds no ip route distance integer • integer — Specifi es the dist ance (prefe rence) of an individ ual static route. (Ran ge 1-255 ) Default Conf iguration Default value of distance is 1. Command Mode Glo bal C onf igura tion mode User Guidel ines Low er route distance values are preferre d when determining the best route. [...]

IP Routing Comma nds 729 User Guideli nes Use this command to g lobally enable IPv4 routing . Example console(config)#ip routing routing Use the rout ing command in Int erface Configuration mode to enable IPv4 and IPv6 routing for an interface. View the current value for this function with t he show ip br ief command. The value is labeled Routing M[...]

730 IP Rou ting Comma nds show ip br ief Use the show ip brief command in Pri vileged EX EC mode to display all the summary information of the IP . Syntax show ip bri ef Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following ex[...]

IP Routing Comma nds 731 • vla n-id — V alid VLAN I D • loopback-id — V alid l oopback ID. (R ange: 0-7) Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Examples The following examp les display all IP information and information specif[...]

732 IP Rou ting Comma nds console#show ip interface vlan 15 Primary IP Address............. 192.168.10. 10/255.255.255.0 Secondary IP Address(es)....... 192.168.20. 20/255.255.255.0 Routing Mode............................... .... Disable Administrative Mode........................ .... Disable Forward Net Directed Broadcasts............ .... Disab[...]

IP Routing Comma nds 733 Example The following example dis plays parameters and current state of a ctive routing protocols. console#show ip protocols Routing Protocol is "rip" Sending updates every 30 seconds Invalid after 180 seconds, hold down 120, flushed after 300 Redistributing: RIP, Static, OSPF Default version control: send version[...]

734 IP Rou ting Comma nds Routing Information Sources: Gateway State 176.1.1.2 Full External Preference: 60 Internal Preference: 20 show ip r oute Use the show ip rou te command in P rivileged EXEC mode to display the routing table. Syntax show ip ro ute [ protocol | address ip-address [ subnet-mask | pr efix-leng th ] [longer -prefixes]] • proto[...]

IP Routing Comma nds 735 Example The following example displays the routi ng table. console#show ip route Route Codes: R - RIP Derived, O - OSPF Derive d, C - Connected, S - Static B - BGP Derived, IA - OSPF Inter Area E1 - OSPF External Type 1, E2 - OSPF External Type 2 N1 - OSPF NSSA External Type 1, N2 - OSPF NSSA external type 2 show ip ro ute [...]

736 IP Rou ting Comma nds Local.......................................... 0 Static......................................... 1 OSPF Intra-area routes......................... 110 OSPF Inter-area routes......................... 110 OSPF External routes........................... 110 RIP............................................ 120 show ip r oute s[...]

IP Routing Comma nds 737 RIP Routes..................................... 0 OSPF Routes.................................... 0 Intra Area Routes.............................. 0 Inter Area Routes.............................. 0 External Type-1 Routes......................... 0 External Type-2 Routes......................... 0 Total routes.............[...]

738 IP Rou ting Comma nds IpForwDatagrams................................ 0 IpInUnknownProtos.............................. 0 IpInDiscards................................... 0 IpInDelivers................................... 18467 IpOutRequests.................................. 295 IpOutDiscards.................................. 0 IpOutNoRoutes.....[...]

IP Routing Comma nds 739 IcmpInAddrMasks................................ 0 IcmpInAddrMaskReps............................. 0 IcmpOutMsgs.................................... 3 IcmpOutErrors.................................. 0 IcmpOutDestUnreachs............................ 0 IcmpOutTimeExcds............................... 0 IcmpOutParmProbs.........[...]

740 IP Rou ting Comma nds User Guidel ines The user is not re q uired to use this command. Routing can still b e enabled using the routing command in VLAN Interface Configuration mode. Example console(config-vlan)# vlan routing 10 1[...]

IPv 6 MLD Snoo ping Comma nds 741 39 IPv6 MLD Snooping Commands This chapter exp lains the following commands: • ipv6 mld snoop ing immedia te-leave • ipv6 mld snooping groupmembership-interval • ipv6 mld snoop ing maxresp onse • ipv6 mld snoop ing mcrte xpire time • ipv6 m ld snooping (Globa l) • ipv6 m ld sn ooping (Interface) • ipv[...]

742 IPv6 M LD Sn oopi ng Comma nds ipv6 mld snooping immediate-leave The ipv6 mld snooping immedia te-leave command enables or disabl es MLD Snooping snooping immediat e-leave admin mode on a selected interface or VLAN. Enab ling fast -leav e allow s the switch to immedia tely remov e the layer 2 LAN interface from its forwar ding table entry upon [...]

IPv 6 MLD Snoo ping Comma nds 743 ipv6 mld snooping groupmembershi p-interval The ipv6 m ld snooping groupm embership -inter val comma nd sets the MLD Group Membership Interv al time on a VLAN or interface. The Group Membership Int erval time is the amount of time in seconds that a sw itch waits for a r eport from a particular group on a p articula[...]

744 IPv6 M LD Sn oopi ng Comma nds interface becaus e it did not r eceive a rep o rt for a par t icular group i n that interface. This value must be less than the MLD Query Interval time value. The range is 1 to 3599 seconds. Syntax ipv6 m ld snooping maxre sponse [ vlan-id ] [ seconds ] no ipv6 ml d snooping maxrespo nse [ vlan-id ] • vlan_id ?[...]

IPv 6 MLD Snoo ping Comma nds 745 no ipv6 mld snoop ing mcrt expiretime [ vlan-id ] • vla n_id — Specifies a VLAN ID value in VLAN Database mode . • seconds — mu lticast router present expiration time in seconds. (Ra nge: 1–36 00) Default Conf iguration The defaul t multic ast rout er present expir ation time is 300 sec onds. Command Mode[...]

746 IPv6 M LD Sn oopi ng Comma nds User Guidel ines There ar e no user gui delines for this command. Example console(config)#ipv6 mld snooping ipv6 mld snooping (Interface) The ipv6 mld snooping (Interface) comm and enables MLD S nooping on an interface. If an interface has MLD Snooping e nabled and it becomes a member of a port-channel (LAG), MLD [...]

IPv 6 MLD Snoo ping Comma nds 747 Syntax ipv6 mld snooping vlan-id no ipv6 m ld snoopi ng vlan-id • vla n-id — Spe cifies a VLAN ID valu e. Default Conf iguration MLD Sn oop in g is d isa ble d. Command Mode VLAN Data base mode. User Guideli nes There ar e no user gui delines for this command. Example console(config-vlan)#ipv6 mld snooping 1 sh[...]

748 IPv6 M LD Sn oopi ng Comma nds User Guidel ines This command has no user guidelines . Example W ith no optional arguments, the command disp lays the following information: • Admin Mode — Indicat es whether or not MLD S nooping is active on the switch. • In terfaces Enabled for MLD S nooping — Interfaces on which MLD Snooping is en abled[...]

IPv 6 MLD Snoo ping Comma nds 749 show ipv6 mld sno oping groups The show ipv6 ml d snooping group s command displays the MLD Snooping entries in the MFDB table. Syntax show ipv6 mld snoop ing groups [{ vlan vlan-id | address ipv6-multicast- addr e ss }] • vla n_id — S pecifies a VL AN ID va lue. • ipv6-mul ticast-add ress — Specifies an IP[...]

750 IPv6 M LD Sn oopi ng Comma nds ------------------------------------------- -- Vlan Ipv6 Address Ports ---- ----------------------- ------------ ---------------- ------------ console#show ipv6 mld snooping groups vlan 2 Vlan Ipv6 Addr ess Type Ports ---- ----------------------- ------- --- ---------------- ------------- 2 3333.0000.0004 Dynamic [...]

IPv6 Mul ticast Co mman ds 751 40 IPv6 Multicast Commands This chapter exp lains the following commands: • ipv6 pimsm (Glob al conf ig) • ipv6 p imsm ( VLAN Inter face co nfig) • ipv6 p imsm bsr -border • ipv6 pims m bsr -c andidate • ipv6 pims m dr -priori ty • ipv6 pims m hello-i nterval • ipv6 pims m join-p rune-int erval • ipv6 [...]

752 IPv6 Multi cast Commands ipv6 pimsm (Global config) Use the ipv6 pimsm com man d to ad mini stra tiv ely en able of PIM SM for IPv 6 multicast routing. Use the "no" f orm of this command to disable PIMSM for IPv6. Syntax ipv6 pimsm no ipv6 pims m Default Conf iguration IPv6 PIMSM i s disabled on the router by default. Command Mode Glo[...]

IPv6 Mul ticast Co mman ds 753 Command Mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 pimsm ipv6 pimsm bs r -border Use the ipv6 pi msm bsr-border command to prevent boots trap r out er (BSR ) messages from being sent or received through an interface. [...]

754 IPv6 Multi cast Commands ipv6 pimsm bsr -c andidate Use the ipv6 pimsm bsr -candi d ate command to configure the router to announce its candidacy as a bootstrap router (BSR). Use the "no" form of t his command to stop the router from announcing its candidacy as a bootstrap router . Syntax ipv6 pimsm b sr - candid ate vlan vlan-id hash[...]

IPv6 Mul ticast Co mman ds 755 ipv6 pimsm dr -priority Use the ipv6 p imsm dr -p riority co mmand to s et th e pri ority va lue f or whi ch a router is elected as the designated route r (DR). Use the "no" form of this command to se t the prio rity to the defa ult. Syntax ipv6 pi msm dr-priority priority no ipv6 p imsm dr-priority • prio[...]

756 IPv6 Multi cast Commands Default Conf iguration The default hello interval is 30 seconds. Command Mode Interface Configurati on (VLAN) mode User Guidel ines There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 pimsm hello-interval 45 ipv6 pimsm join-prune-interv al Use the ipv 6 pim sm join -pr une- int er val [...]

IPv6 Mul ticast Co mman ds 757 Example console(config-if-vlan3)#ipv6 pimsm join-prune- interval 90 ipv6 pimsm re gister -th reshold Use the ipv6 p imsm reg ister -t hreshold command to configure the Register Thr eshold r ate for the RP rou ter to s witch to the short est path . Use the "no" form of t his comm and to set the register thres[...]

758 IPv6 Multi cast Commands Syntax ipv6 pimsm rp-address rp-address group-addr ess/prefixlength [ override ] no ipv6 p imsm rp -address • rp-add ress — An RP address. • group- addres s — The group address to displ ay . • prefixlength — This par amete r specifies the prefix length of t he IP address for the m edia gatew ay . (Range: 1?[...]

IPv6 Mul ticast Co mman ds 759 • prefixlen gth — T his param eter s pecifies th e prefix length of th e IP address for the me dia gateway . (Range: 1–32) Default Conf iguration The router does not adverti se itself as a PIM candidat e rendezvous point by default. Command Mode Global Configuration mode User Guideli nes There ar e no user gui d[...]

760 IPv6 Multi cast Commands User Guidel ines There ar e no user gui delines for this command. Example console(config)#ipv6 pimsm spt-threshold 1000 ipv6 pimsm ssm Use the ipv6 pimsm ssm command to define th e Source Specific Multicast (SSM) range of multicast addresses. Syntax ipv6 pimsm ssm {default | gr o up-addr ess/pr efixlengt h} • defa ult[...]

IPv6 Mul ticast Co mman ds 761 Syntax show ipv6 pimsm Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#show ipv6 pimsm Admin Mode..................................... Enabled Data Threshold Rate (Kbps)......[...]

762 IPv6 Multi cast Commands vlan 6 Enabled Operational vlan 9 Enabled Operational show ipv6 pimsm bsr Use the show ipv6 p imsm b sr comma nd to d isp lay the boo tst rap ro uter (B SR) information. The output includes el ected BSR information and information about the locally configured candidate r endezvous point (RP) advertisement. Syntax show i[...]

IPv6 Mul ticast Co mman ds 763 show ipv6 pimsm interface Use the show i pv6 pi msm inte rface com mand to displa y interface c onfig parameters. If no interface is specif ied, all interfaces ar e displayed. Syntax show ipv6 pims m interf ace [ vlan vlan-id ] • v lan-id — A valid VL AN ID valu e. Default Conf iguration There is no default config[...]

764 IPv6 Multi cast Commands BSR Border..................................... Disabled show ipv6 pimsm neighb or Use the show ipv6 pi ms m neighb or command to display IPv6 PI MSM neighbors learned on the routing interfaces. Syntax show ipv6 p imsm ne ighbor [ all | interfa ce vlan vlan -id ] • vla n-id — A val id VLAN ID va lue. Default Conf ig[...]

IPv6 Mul ticast Co mman ds 765 show ipv6 pimsm rphash Use the show ipv6 pimsm rphash command to display which re ndezv ous point (RP) is b eing selected for a sp ecified group. Syntax show ipv6 pims m rphash group-address group-address — Group IP addres s supported by RP . Default Conf iguration There is no default configuration for this command.[...]

766 IPv6 Multi cast Commands Syntax show ipv6 p imsm rp m apping [ rp-addr ess ] • rp-add ress — IP addr ess of RP . Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guidel ines There ar e no user gui delines for this command. Example console#show ipv6 pimsm rp mapping Group Addr[...]

IPv6 Ro uting Comma nds 767 41 IPv6 Routing Commands This chapter exp lains the following commands: • clea r ipv6 neigh bors • clea r ipv6 st atistics • ipv6 addr ess •i p v 6 e n a b l e • ipv6 fo rwar ding •i p v 6 h o s t •i p v 6 m l d l a s t - m e m b e r - q u e r y - c o u n t •i p v 6 m l d l a s t - m e m b e r - q u e r y[...]

768 IPv6 R outin g C ommand s •i p v 6 r o u t e •i p v 6 r o u t e d i s t a n c e • ipv6 unicast -routing • ping ipv 6 • pin g ipv6 inte rface • show ipv6 brief • show ipv6 interface •s h o w i p v 6 m l d g r o u p s • show ipv6 mld int erface •s h o w i p v 6 m l d - p r o x y • show ipv6 mld-proxy groups • show ipv6 mld[...]

IPv6 Ro uting Comma nds 769 clear ipv6 neighbors Use the clear ipv6 neighbo rs command in P rivileged EXEC mode to clear all entries in t he IPv6 neighbor tab le or an entry on a speci fic interface. Syntax clear ip v6 neigh bors [ vlan vlan -id ] • vla n-id — V al id VLA N I D. Default Conf iguration This command has no default configuration. [...]

770 IPv6 R outin g C ommand s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following example clears IPv6 statistics for VLAN 11. console(config)#clear ipv6 statistics vlan 11 ipv6 address Use the ipv6 address command in Interf[...]

IPv6 Ro uting Comma nds 771 • prefix — Consists of t he bits of the add ress t o be configured. • prefix-length — Designa tes how many of the high-or der contig uous bits of the address make up the prefix. • eui64 — The opt ional eui-64 field design ates that IPv6 process ing on the interfaces is enabl ed usin g an EU I-64 int erface ID[...]

772 IPv6 R outin g C ommand s Default Conf iguration Disabled is the default configuration. Command Mode Interface Configuration (VLAN, T unnel, L oopback) mod e. User Guidel ines This command has no user guidelines . Example The following example enables I P v6 routing, which has not been configured with an e xplicit IPv6 addr ess. console(config)[...]

IPv6 Ro uting Comma nds 773 Example The followi ng ex ample globally enabl es IPv6 forwar ding. console#configure console(config)#ipv6 forwarding console(config)#no ipv6 forwarding ipv6 host The ipv6 host command is used to define stat ic host name-to- ip v6 addres s mapping in the host cache. Syntax ipv6 host name ipv6-address no ipv 6 host name ?[...]

774 IPv6 R outin g C ommand s ipv6 mld last-member -query-count The ipv6 ml d last-me mber -query -count command sets the n umber of listener -speci fic queries sent before the router assumes that t here ar e no loca l members on the i nterface. Use the “no” form o f this command to set the last member query count to the default. Syntax ipv6 ml[...]

IPv6 Ro uting Comma nds 775 no ipv6 m ld last-m ember-query-interv al • last-member-query-interval — T he last memb er query interva l (Range: 0–65 535 millis econ ds). Default Conf iguration The default last member query interval is 1 second. Command Mode Interface Configuration (VLAN) mode. User Guideli nes There ar e no user gui delines fo[...]

776 IPv6 R outin g C ommand s User Guidel ines There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 mld-proxy ipv6 mld-proxy r eset-status Use the ipv6 mld-proxy reset-status command to reset the host inter face status parameters of the MLD P roxy rout er . This command is only valid when MLD Proxy is en abled on t[...]

IPv6 Ro uting Comma nds 777 Syntax ipv6 mld-proxy unsoli cited-rep ort-inte rva l interval no ipv6 m ld-proxy un solicited-report -inter val • interva l — Th e interv al betw een unso licited reports (Ran ge: 1–26 0 seconds). Default Conf iguration The unsolicited report i nt erval is 1 se co nd by default. Command Mode Interface Configuratio[...]

778 IPv6 R outin g C ommand s Command Mode Interface Configurati on (VLAN) mode. User Guidel ines There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 mld query-interval 130 ipv6 mld query-max-response-time The ipv6 ml d query-max -respon se-time command sets MLD query maximum re sp onse time for the interface. Thi[...]

IPv6 Ro uting Comma nds 779 ipv6 mld router The ipv6 mld router co m mand is us ed t o e na ble M LD in the ro ute r i n gl ob al configuration mode and for a sp ecific interface in inter face configuration mode. U se the “no” form of this comma nd to disab le MLD. Syntax ipv6 mld route r no ipv 6 mld ro uter Default Conf iguration MLD is disab[...]

780 IPv6 R outin g C ommand s • mtu — Is t he max imum transm ission unit. ( Range: 12 80-150 0) Default Conf iguration The default MTU is 15 00. Command Mode Interface Configuration (VLAN, T unnel, L oopback) mod e User Guidel ines This command has no user guidelines . Example The fo llowing example sets the m aximum tra nsmission unit (MTU) s[...]

IPv6 Ro uting Comma nds 781 User Guideli nes This command has no user guidelines. Example The following e xample sets at 10 the number of dup licate address det e ction probes transmit ted while doing neighbor discove ry . console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 nd dad attempts 10 ipv6 nd ma nag ed-config-flag Use the ipv6 [...]

782 IPv6 R outin g C ommand s Example In the following example, the end node uses DH CPv6. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 nd managed-config-flag ipv6 nd ns- interv al Use the ipv6 nd ns-in terval command in Interface Configuration mode to set the interval between router advert isement s for advertised neighbor soli[...]

IPv6 Ro uting Comma nds 783 ipv6 nd other -config- flag Use the ipv6 nd ot her- config-flag command i n Interface Configuration mode to set the “other stateful configuration” flag in router advertisements sent from the interface. Syntax ipv6 nd other-config-flag no ip v6 nd oth er-config-flag Default Conf iguration F alse is the default configu[...]

784 IPv6 R outin g C ommand s ipv6 nd pr efix Use the ipv6 nd prefix command to configur e p arameters associated with prefix es th at the router advertises in its route r advertisements. Syntax ipv6 nd prefi x prefix/ prefix -len gth [{ valid-lifetime | infinite} { preferred- lifetime | infinite}] [ no-autoconfig ] [ off-link ] no ipv6 nd prefix p[...]

IPv6 Ro uting Comma nds 785 The ipv6 nd prefix command will allow you to preconfigure R A prefix values before you configure the associated interface address. In or de r for the prefix to be included in R As, you must configure an address that matches the pr efix using the ipv6 address co mmand. P refix es specified using ipv6 nd prefix without an [...]

786 IPv6 R outin g C ommand s Example The fo llowing exampl e sets the transmi ssion inte rval betw een rout er advertisement s at 1000 seconds. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 nd ra-interval 1000 ipv6 nd ra-lifetime Use the ipv6 n d ra-l ifetime command in Interface Configuration mode to set the value that is pla c[...]

IPv6 Ro uting Comma nds 787 ipv6 nd reacha ble-time Use the ipv6 nd r eachable -time command in Interface Configuration mode to set the router advertisement time t o consider a neighbor r eachab le after neighbor discovery confirmation. Syntax ipv6 nd reachabl e-time mi lli seconds no ipv6 nd reacha ble-tim e • millis econds — R eacha ble-tim e[...]

788 IPv6 R outin g C ommand s ipv6 nd suppress-ra Use the ipv6 nd suppress-ra command in Interface Configuration mode to suppr e ss router advertisement transmission on an interface. Syntax ipv6 nd suppress-ra no ipv6 nd suppress-ra Default Conf iguration Disabled is the default configuration. Command Mode Interface Configuration (VLAN, T unnel, L [...]

IPv6 Ro uting Comma nds 789 Default Conf iguration IPv6 PIM-DM is disabled by default. Command Mode Global Configuration mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 pimdm ipv6 pimdm hello- interval The ipv6 pimdm h e llo- interval command is used to[...]

790 IPv6 R outin g C ommand s Example console(config-if-vlan5)#ipv6 pimdm hello-interval 500 ipv6 route Use the ipv6 route command in Global Configur ation mode to configur e an IPv6 st atic route. Syntax ipv6 route ipv 6-p refi x / prefix-length [ Nu ll | interface { tunnel tunnel-id | vlan vlan-id }] next-hop-a ddress [ prefer ence ] no ipv6 r ou[...]

IPv6 Ro uting Comma nds 791 User Guideli nes This command has no user guidelines. Example The following example config ur e an IPv6 static ro ute. console(config)#ipv6 route 2020:1::1/64 2030:1::2 ipv6 rout e dist ance Use the ipv6 route distance command i n Global Configuration mode to set the default distance (prefere nce) for s tatic routes. L o[...]

792 IPv6 R outin g C ommand s Example The f ollowin g e xample se ts the de fault dis tance to 80. console(config)#ipv6 route distance 80 ipv6 unicast-routing Use the ipv6 unicast-routin g command in Global Configuration mode to enable forwarding of IPv6 unicas t datagram s. Syntax ipv6 uni cast-r outing no ipv6 unica st-routi ng Default Conf igura[...]

IPv6 Ro uting Comma nds 793 through the default VLAN (VLAN 1), as long as ther e is a physical path between the sw itch and the workstation. The termi nal interface sends th ree pings to the ta rget station. Syntax ping ipv6 { ip-addr ess | hostname } [size size ] • ipv6- address — T arget IPv6 add ress to ping. • hostna me — Hostname to pi[...]

794 IPv6 R outin g C ommand s is a physical pa th between t he switch and the workstat ion. The terminal interface sends three pings to the target station. Use the interfac e key w o rd to ping an inter face by using the link-lo cal address or t he global IPv6 addr ess of the interface. The source can be a loopback, tunnel, or l o gical interface. [...]

IPv6 Ro uting Comma nds 795 show ipv6 brief Use the show ipv6 brief command in P rivileged EXEC mode to display the IPv 6 st at us of for w ardin g mo de and IPv 6 unicast routing mode. Syntax show ipv6 brief Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no use[...]

796 IPv6 R outin g C ommand s • tunnel -id — V alid tunn el interfac e ID • vla n-id — V ali d VLAN ID. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Examples The followi ng e xamples show the us ability status of a IPv6 VLAN interf[...]

IPv6 Ro uting Comma nds 797 Router Advertisement Suppress Flag........... .. Disabled Prefix 3FF0:1236:C261::1/64 Preferred Lifetime........................... .. 10000 Valid Lifetime............................... .. 100000 Onlink Flag.................................. .. Enabled Autonomous Flag.............................. .. Enabled console#sho[...]

798 IPv6 R outin g C ommand s Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guidel ines The following fields are displayed as a table when vlan vlan-id is specifie d: If vla n vlan -id is not specified, the following fields ar e displayed for each multic ast group and each i nterf[...]

IPv6 Ro uting Comma nds 799 The following table is displayed t o indicate all the sources associated with thi s group: Example console#show ipv6 mld groups ff1e::5 Interface.................................... .. vlan 6 Group Address................................ .. FF1E::5 Last Reporter................................ .. FE80::200:FF:FE00:22 Up [...]

800 IPv6 R outin g C ommand s Group Address.............................. .... FF1E::1 Interface.................................. .... vlan 6 Up Time (hh:mm:ss)......................... .... 00:04:23 Expiry Time (hh:mm:ss)..................... .... ------ Group Address.............................. .... FF1E::2 Interface...........................[...]

IPv6 Ro uting Comma nds 801 Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guideli nes The following information is displa y ed for the specified interface: Interface The in terface number i n unit/sl ot/port format. MLD Global Admin Mod e This f ield dis plays the c onfigure d glo[...]

802 IPv6 R outin g C ommand s The following information is displayed if the operationa l mode of the MLD interface is e nabled: Example console#show ipv6 mld interface vlan 2 Interface.................................. .... vlan 2 MLD Global Admin Mode...................... .... Enabled MLD Interface Admin Mode................... .... Disabled MLD [...]

IPv6 Ro uting Comma nds 803 Last Member Query Interval (milli-secs)...... .. 1111 Last Member Query Count...................... .. 2 show ipv6 mld- prox y Use the show ipv6 ml d-proxy command to display a summary of the host interface status p arameters. Syntax show ipv6 mld-p roxy Command Mode P rivileged EXEC mode Default Conf iguration There is [...]

804 IPv6 R outin g C ommand s Example console#show ipv6 mld-proxy Interface Index............................ .... vlan 10 Admin Mode................................. .... Enabled Operational Mode........................... .... Enabled Version.................................... .... 3 Num of Multicast Groups.................... .... 0 Unsolicited[...]

IPv6 Ro uting Comma nds 805 Example console#show ipv6 mld-proxy groups Interface................................ vlan 10 Group Address Last Reporter Up Time Member State Filter Mode Sources ------------- -------------- ---------- ------------- ------------- FF1E::1 FE80::100:2.3 00:01:40 DELAY_MEMBER Exclude 2 FF1E::2 FE80::100:2.3 00:02:40 DELAY_M[...]

806 IPv6 R outin g C ommand s Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC User Guidel ines The following parameters a re displayed by this command: Example console#show ipv6 igmp-proxy groups Interface................................ vlan 10 Group Address Last Reporter Up Time Member Stat[...]

IPv6 Ro uting Comma nds 807 ------------- ---------------- --------- ----------------- -------- ----- ------- FF1E::1 FE80::100:2.3 244 DELAY_MEMBER Exclude 2 Group Source List Expiry Time ------------------ --------------- 2001::1 00:02:40 2001::2 -------- FF1E::2 FE80::100:2.3 243 DELAY_MEMBER Include 1 Group Source List Expiry Time -------------[...]

808 IPv6 R outin g C ommand s show ipv 6 mld- proxy inte rface Use the show ipv6 ml d-proxy interfac e command to display a detailed list of the host interface status parameters. Syntax show ipv6 m ld-prox y interf ace Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC User Guidel ines The follo[...]

IPv6 Ro uting Comma nds 809 Ver Query Rcvd Report Rcvd Report Sent Leave Rcvd Leave Sent ------------------------------------------------------------------ 1 2 0 0 0 2 2 3 0 4 ----- ----- show ipv6 mld traffic The show ipv 6 mld traffic co mmand is used to display MLD sta t istical information for the router . Syntax show ipv6 ml d traffic Default [...]

810 IPv6 R outin g C ommand s Example console#show ipv6 mld traffic Valid MLD Packets Received..................... 52 Valid MLD Packets Sent......................... 7 Queries Received............................... 0 Queries Sent................................... 7 Reports Received............................... 52 Reports Sent..................[...]

IPv6 Ro uting Comma nds 811 User Guideli nes This command has no user guidelines. Example The following exampl e displays info rmation about the IPv6 neighbors. console(config)#show ipv6 neighbors Neighbor Last IPv6 Address MAC Address isRtr State Updated Interface -------------------- ----------------- ----- ------- --------- show ipv6 pimdm The s[...]

812 IPv6 R outin g C ommand s Admin Mode..................................... Enable PIM-DM INTERFACE STATUS Interface Interface Mode Protocol State --------- -------------- ---------------- vlan 10 Enable Non-Operational vlan 20 Enable Non-Operational show ipv6 pimdm interface The show ipv6 pi mdm inte rface command is used to display PIM-DM Co nf[...]

IPv6 Ro uting Comma nds 813 Slot/Port...................................... vlan 10 IP Address..................................... FE80::221:9BFF:FEC3:1216/128 Neighbor Count................................. 0 Hello Interval (secs).......................... 30 Designated Router.............................. Not Supported console#show ipv6 pimdm in[...]

814 IPv6 R outin g C ommand s Command Mode P rivileged EXEC User Guidel ines There ar e no user gui delines for this command. Example console#show ipv6 pimdm neighbor interface vlan 10 Up Time Expiry Time Neighbor Addr Interface hh:mm:ss hh:mm:ss --------------- ---------- --------- ----------- show ipv6 route Use the show ipv6 route com mand in P [...]

IPv6 Ro uting Comma nds 815 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example displays the IPv6 routing table. console(config)#show ipv6 route IPv6 Routing Table - 0 entries Codes: C - connected, S - static O - OSPF[...]

816 IPv6 R outin g C ommand s User Guidel ines This command has no user guidelines . Example The follo wing e xample show s the pr efer enc e value ass ociat ed with the ty pe of route. console#show ipv6 route preferences Local.......................................... 0 Static......................................... 1 OSPF Intra-area routes......[...]

IPv6 Ro uting Comma nds 817 User Guideli nes This command has no user guidelines. Example The following example displays a summary of the routing table. console#show ipv6 route summary IPv6 Routing Table Summary - 0 entries Connected Routes............................... 0 Static Routes.................................. 0 OSPF Routes...............[...]

818 IPv6 R outin g C ommand s Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guidel ines This command has no user guidelines . Examples The following e xamples s how traffic and s tatistics for IP v6 and ICMPv6, f irst for all inter faces and an individual VLAN. console> show ipv6 traffic IPv6 [...]

IPv6 Ro uting Comma nds 819 Multicast Datagrams Transmitted........................... 0 console> show ipv6 traffic vlan 11 Interface...................................... 11 IPv6 STATISTICS Total Datagrams Received.................................. 0 Received Datagrams Locally Delivered...................... 0 Received Datagrams Discarded Due T[...]

820 IPv6 R outin g C ommand s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example displays IPv6 VLAN routing interface addre sses. console#show ipv6 vlan MAC Address used by Routing VLANs: 00:02:BC:00:30:68 VLAN ID I[...]

IPv6 Ro uting Comma nds 821 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example discovers the packet routes on a hop-b y-hop basis. console#traceroute ipv6 2020:1::1 Tracing route over a maximum of 20 hops 1 * N * N * N[...]

822 IPv6 R outin g C ommand s[...]

Loop back Inte rface Com mands 823 42 Loopbac k Interface Command s This chapter exp lains the following commands: • interface loopback • show interfaces loopback[...]

824 Loopbac k Int erfac e Command s interface loop back Use the interfa ce loopback command in Global C onfiguration mode to enter the Interface L oopback configuration mode. Syntax interface l oopback loopback-id no inter face loop back loopback-id • loopback-id — L oopback identifier . (Range: 0-7) Default Conf iguration This command has no d[...]

Loop back Inte rface Com mands 825 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Examples The following exampl es display info rmation about configur e d loopback interfaces. console# show interfaces loopback Loopback Id Interface IP Ad dre[...]

826 Loopbac k Int erfac e Command s[...]

Multicast Comman ds 827 43 Multicast Commands This chapter exp lains the following commands: • ip mcast boundar y •i p m r o u t e •i p m u l t i c a s t • ip m ulticas t ttl-thresho ld • ip pims m • ip pimsm bsr -border • ip pimsm bsr -candidate • ip pims m dr -priority • ip pims m hello-interval • ip pims m join-prune-interval[...]

828 Multi cast Com mands • show ip pi msm rphash • show ip pi msm rp mapping[...]

Multicast Comman ds 829 ip mcast boundar y Use the ip mcas t bounda ry command in Interface Configuration mode to add an administra tive scope multicast boundary s pecified by grou pipad dr and mask for which this multica st administrative boundary is applicable. grou pipadd r is a group I P address and mask is a group IP mask. Syntax ip mcast boun[...]

830 Multi cast Com mands Syntax ip mro ute source-addr ess source-mask rp f-addr ess pref erence no ip mro ute source-addr ess source • source-addr ess — The IP addre ss of the multicas t data source. • source-mask — The IP subnet ma sk of the multicast data source. • rpf -ad dress — The IP addr ess of the ne xt hop towar ds the source [...]

Multicast Comman ds 831 no ip multica s t Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The following example enables IP multicast on the router . console#configure console(config)#ip multicast console(config)#no ip multicast ip [...]

832 Multi cast Com mands User Guidel ines This command has no user guidelines . Example The following e xample applies a ttlv alue of 5 to the VLAN 15 routing interface. console(config)#interface vlan 15 console(config-if-vlan15)#ip multicast ttl-threshold 5 ip pimsm The ip pimsm command is us ed to administratively enable PIM-SM multicast routing [...]

Multicast Comman ds 833 ip pimsm bsr -bo rder The ip pimsm bsr - border com mand is used to prevent bo otstrap router (B SR) messages from being sent or received through an i nterface. Use t he “no” form of this command to disa ble the interface fro m being the BSR border . Syntax ip pimsm bsr -bord er no ip p imsm bs r -borde r Default Conf ig[...]

834 Multi cast Com mands • hash-ma sk-length — The length of a mask that is t o be ANDed with the group address before the h ash func tion is ca lled. All group s with the same seed hash correspond to the same RP . F or e xam ple, if this value is 24, only the first 24 bit s of the group ad dresses matter . This allows you to get one RP for mu [...]

Multicast Comman ds 835 Default Conf iguration The defaul t elect ion p riorit y is 1. Command Mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config-if-vlan3)#ip pimsm dr-priority 12 ip pimsm hello-inter val The ip pim sm hel lo-inte rv al command is used to configure the P[...]

836 Multi cast Com mands Example console(config-if-vlan3)#ip pimsm hello-interval 60 ip pimsm join-p rune-in terva l The ip pim sm jo in-pru ne-inter v al command is used to configure the interface join/prune interval for the PIM-SM router . Use the “no” form of this command t o set the j oin/prune in terval to the default . This comma nd depre[...]

Multicast Comman ds 837 Syntax ip pims m regist er -thresh old thr eshold no ip pi msm regi ster -th r esh old • thr eshold — T he threshold rate ( Range: 0 –2000 Kbps). Default Conf iguration The def ault thr eshold r ate is 0. P r eviously , the default w as 50. Command Mode Global Configuration mode User Guideli nes There ar e no user gui [...]

838 Multi cast Com mands Default Conf iguration There ar e no s tatic RP addresses configured by default. Command Mode Global Configuration mode User Guidel ines There ar e no user gui delines for this command. Example console(config)#ip pimsm rp-address 192.168 .20.1 225.1.0.0 255.255.255.0 ip pimsm rp-cand idate The ip pim sm rp-ca ndidate comman[...]

Multicast Comman ds 839 User Guideli nes There ar e no user gui delines for this command. Example console(config)#ip pimsm rp-candidate interface vlan 3 225.2.0.0 255.255.0.0 ip pimsm spt-thr eshold The ip pim sm spt-t hreshold command is used to configure the Data Threshold rate for the last -hop rout er to switc h to the sh ortest path. Use the ?[...]

840 Multi cast Com mands Syntax ip pimsm ssm { default | group-address group-mask } no ip pimsm ssm • default — Defin es the SSM ra nge access list to 232/8. • group-ad dres s group-mask — defines the SSM range . Default Conf iguration There is no SSM range defined by de fault. Command Mode Global Configuration mode User Guidel ines There a[...]

Multicast Comman ds 841 User Guideli nes This command has no user guidelines. Example The following command shows informatio n about the en tries in the multi cast addr ess table. console#show bridge multicast address-table count Capacity: 1024 Used: 4 Static addresses: 2 Dynamic addresses: 1 Forbidden addresses: 1 The following table shows the inf[...]

842 Multi cast Com mands Syntax show ip m cast Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example disp lays system-wide multicast information. console#show ip mcast Admin Mode..................................... En[...]

Multicast Comman ds 843 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example di sp lays all the configur ed administrative scoped multicast bo undaries. console#show ip mcast boundary all MULTICAST BOUNDARY Interface Group Ip Mask -------- ------ --------------- show ip mcast interfa[...]

844 Multi cast Com mands Example The following example displays the multicast information for VLAN 1 5. console#show ip mcast interface vlan 15 Interface TTL --------- ----- show ip mcast mroute Use the show ip mcast mro ute command in Priv ileged EXEC mode to display a summ ary or all the de tails of the mult icas t table . Syntax show i p mc ast [...]

Multicast Comman ds 845 Expiry Up Time Source Ip Group Ip Time(secs) (s ecs) RPF Neighbor Flags --------- ----------- ---------- ----------- --------------- ----- show ip mcast mroute group Use the show ip mcast mrou te gro up command in P rivileged EXEC mode to display the multic ast confi guration settings s uch as flags, timer sett ings, incomin[...]

846 Multi cast Com mands console#show ip mcast mroute group 224.5.5.5 detail Multicast Route Table Expiry Up Time Source Ip Group Ip Time(secs) (secs) RPF Neighbor Flags --------- --------- ----------- --------- --------------- ----- show ip mcast mroute so urce Use the sh ow ip mcast mr oute source command in Privilege d EXEC mode to display th e [...]

Multicast Comman ds 847 console#show ip mcast mroute source 10.1.1.1 224.5.5.5 Multicast Route Table Expiry Up Time Source IP Group IP Time(secs) (secs) RPF Neighbor Flags --------- --------- ----------- ----------- ------------ ----- show ip mcast mroute static Use the show ip mc ast mr oute sta tic command in P rivileged EXEC mode to display all [...]

848 Multi cast Com mands show ip pimsm bsr The show ip pimsm bsr command displays the bootstrap router (BSR) information. The output includes el ected BSR information and information about the locally configur e d candidate rendezvous point (R P) advertisement. This command deprecat es the show ip pimsm componenttable command. Syntax show ip p imsm[...]

Multicast Comman ds 849 Example console#show ip pimsm bsr BSR Address.................................. .. 1.1.1.1 BSR Priority................................. .. 20 BSR Hash Mask Length......................... .. 10 Next bootstrap message(hh:mm:ss)............. .. 00:00:11 Next Candidate RP advertisement(hh:mm:ss).... .. 00:00:00 show ip pimsm i[...]

850 Multi cast Com mands Example console#show ip pimsm interface vlan 3 Slot/Port.................................. .... vlan 3 IP Address................................. .... 1.1.1.1 Subnet Mask................................ .. 255.255.255.0 Hello Interval (secs)...................... .... 30 Join Prune Interval (secs)................. .... 60 [...]

Multicast Comman ds 851 Example console#show ip pimsm rphash 225.1.0.5 RP Type Address ---------------- ----- 1.1.1.1 Static show ip pimsm r p mapping The show ip pimsm rp mappin g command is used to dis play all group-to-RP mappings of which t he router is awar e (either configured or learned from the bootstrap router (BSR)). If no RP is specified[...]

852 Multi cast Com mands Example console#show ip pimsm rp mapping Group Address.......................... 225.1.0.0 Group Mask............................. 255.255.255.0 RP Address............................. 1.1.1.1 origin................................. Static Group Address.......................... 225.2.0.0 Group Mask.........................[...]

OSPF Commands 853 44 OSPF Commands This chapter exp lains the following commands: • are a default-cos t •a r e a n s s a • are a nssa defaul t-info-o riginat e • are a nssa no-r edistribu te • are a nssa no-summary • a rea ns sa t ran slat or-role • a rea ns sa t rans lato r -s tab -intv •a r e a r a n g e •a r e a s t u b • are[...]

854 OSPF Commands • exit-ov erf low-interval • external-lsdb-limit • ip ospf area • ip ospf auth entic atio n • ip ospf cost • ip os pf dead-i nterval • ip ospf hello-interval • ip ospf mtu-ign ore • ip ospf network • ip ospf priority • ip ospf retransmit-interval • ip ospf transmit-delay • maximum- paths • passive -inte[...]

OSPF Commands 855 • sh ow ip osp f interfac e • sh ow ip osp f interface brief • sh ow ip osp f interfac e stats • show ip ospf neigh bor •s h o w i p o s p f r a n g e • sh ow ip osp f statistics • show ip ospf stub table • show ip ospf v irtual- link • show ip ospf v irtual- link brie f •t i m e r s s p f • 1583comp atibilit[...]

856 OSPF Commands area de fault-cost Use the area default-cost command in Router OSPF Configuration mode to configure the monetary default cost for the stub area. Use the no form of the comma nd to r eturn t he cost to the de fault val ue. Syntax area ar ea-id default-cost integer no area ar ea-id default-cost • ar ea-id — Ident ifies the O SPF[...]

OSPF Commands 857 Syntax area area- id nssa no are a area- id nssa • ar ea-id — Identifies the OS PF not -so-stubb y-area. (Range: 0–4294 967295 ) Default Conf iguration This command has no default configuration. Command Mode Router OSPF Configuration mode . User Guideli nes This command has no user guidelines. Example The following exampl e [...]

858 OSPF Commands • integer — Specifies the metric of the de fault route a dvertised to the NSSA. (R ange: 1–1 67772 14) • compar abl e — A metric type of nssa-ex ternal 1 • non-comparable — A metric typ e of nssa-ext ernal 2 Default Conf iguration If no metric is define d, 10 is the default configuration. Command Mode Router OSPF Con[...]

OSPF Commands 859 Command Mode Router OSPF Configuration mode . User Guideli nes This command has no user guidelines. Example The following example configur es the NSSA ABR. console(config-router)#area 20 nssa no-redistribute area nssa no-summary Use the area n ssa no-s ummary command in Router OSPF Configuration mode to configure the NSSA so that [...]

860 OSPF Commands area nssa translator -role Use the area nss a tra nslator-role command in Router OSPF Configuration mode to conf igure the transl ator role of the NSSA . Syntax area area-i d nssa translator-role {always | candidate} no area area -id nssa translato r -ro le • ar ea-id — Ident ifies the O SPF NSSA to co n figure. (Range: IP add[...]

OSPF Commands 861 Syntax area area- id nssa translator-stab-intv integer no are a area- id nssa translator-stab-intv • ar ea-id — Ident ifies the O SPF NSSA to configu re. (Range: IP address or decim al from 0–42 949672 95) • integ er — The period of time that an el ected transl ator continues to perform it s duties aft er it determin es [...]

862 OSPF Commands Syntax area ar e a-id rang e ip -add ress su bnet -m ask {summa rylink | ns saexternall ink} [advertise |n ot-advert ise] no area area -id range ip-addr ess subnet-mask {summaryl ink | nssaext ernallink} • ar ea-id — Ident ifies the O SPF NSSA to co n figure. (Range: IP add ress or decim al from 0–429 49672 95) • ip-add re[...]

OSPF Commands 863 External LSA s and Summary LSAs can s ignificantly r e duce the link st ate database of routers within the stub area. Use the no f o rm of the command to remo ve the stu b area . Syntax area area- id stub no are a area- id stub • ar ea-id — Ident ifies the a rea identifier of the O SPF stub . (Ran ge: IP address or dec imal fr[...]

864 OSPF Commands no area area -id stub no-summary • ar ea-id — Ident ifies the O SPF area to configure. (Ra nge: IP ad dress or decim al from 0–429 49672 95) Default Conf iguration Disabled is the default configuration. Command Mode Router OSPF Configuration mode. User Guidel ines This command has no user guidelines . Example The following e[...]

OSPF Commands 865 Command Mode Router OSPF Configuration mode . User Guideli nes This command has no user guidelines. Example The following e xample cr eates an OSPF virtual int erface for are a 10 and neighbor router . console(config-router)#area 10 virtual-link 192.168.2.2 area virtu al-link authentication Use the area virtua l-link authe ntica t[...]

866 OSPF Commands Default Conf iguration This command has no default configuration. Command Mode Router OSPF Configuration mode. User Guidel ines Unauthe nticated i nterfaces do not need an authentic ation key . Example The follow ing example conf igures the authenti cation ty pe and key for the area 10 OSPF virtual interface and neighbor ID . cons[...]

OSPF Commands 867 Command Mode Router OSPF Configuration mode . User Guideli nes This command has no user guidelines. Example The following example configures the dead interval for the area 10 OSPF virtual interface on the virt u al interface and neighbor router . console(config-router)#area 10 virtual-link 192.168.2.2 dead-interval 655555 area vir[...]

868 OSPF Commands User Guidel ines This command has no user guidelines . Example The following exampl e configures a 50-second wait interval. console(config-router)#area 10 virtual-link 192.168.2.2 hello-interval 50 area virtual-link retransmit-int erval Use the are a vi rtua l-li nk r etr ansm it- inte r val command in Router OSPF Configuration mo[...]

OSPF Commands 869 Example The following exampl e configures a 500-second retransmit wait interval. console(config-router)#area 10 virtual-link 192.168.2.2 retransmit-interval 500 area virtu al-link transmit-delay Use the are a vi rtua l-li nk t rans mit-de lay command in Router OSPF Configuration mode to configure the transmit delay for the OSPF vi[...]

870 OSPF Commands console(config-router)#area 10 virtual-link 192.168.2.2 transmit-delay 40 auto-cost By default, OSPF computes t he link cost of each interface from the interface bandwidth. The link cost is computed as the ratio of a “reference ban dwidth” to the interface b andwidth (ref_bw / interface bandwi dth), where interface bandwidth i[...]

OSPF Commands 871 bandwidth By default, O SPF com putes the li nk cost of an int erface as the ratio of the refer ence bandw idth to the interface bandwidth. Reference bandwidth is specifi ed with th e auto-cost command. F o r the purpose of the OSPF link c ost calculation, the bandwidth command specifies the interface bandwidth. The bandwidth is s[...]

872 OSPF Commands no capabil ity opa que Default Conf iguration Opaque Capability is enabled by default. Command Mode Router Configuration mode. User Guidel ines There ar e no user gui delines for this command. Example console(config-router)#capability opaque clear ip ospf Use the clear ip ospf command to reset sp ecific OSPF states. If no paramete[...]

OSPF Commands 873 Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no user gui delines for this command. Example The following example shows the options for the clear ip ospf command. console#clear ip ospf ? <cr> Press enter to execute the command. confi[...]

874 OSPF Commands Default Conf iguration The default metric is none and the default type is 2. Command Mode Router OSPF Configuration mode. User Guidel ines This command has no user guidelines . Example The following example always advertises default route s. console(config-router)#default-information originate always metric 100 metric-type 1 defau[...]

OSPF Commands 875 Example The following exampl e sets a value of 50 for the defau lt metric. console(config-router)#default-metric 50 distance ospf The distance ospf command se ts the preference values of OSPF route types in t he rout er . Lowe r rout e pre fere nce val ues ar e pr efer red when de termi ning the b est route . The typ e of OSPF rou[...]

876 OSPF Commands distribute-list out Use the distrib ute-list ou t command in Router OSPF C onfiguration mode to specify the access lis t to filter routes received from the source protocol. Use the no form of the command to re m ove the specified source prot ocol from the access list. Syntax distribute -list acc essl ist nam e out { rip|s tatic [...]

OSPF Commands 877 enable Use the enabl e command in Router OSPF Configuration mode to re set the default administrative mod e of OSPF in the router (active). Use th e no form of the comm and to disabl e the adminis trative mo de for OSPF . Syntax enable no ena ble Default Conf iguration Enabled is the default configuration. Command Mode Router OSPF[...]

878 OSPF Commands • seconds — Number of secon ds after enteri ng overflow st ate that a rout er will wait b efore attempting to l eave the overflow state. (Range: 0–21 474836 47) Default Conf iguration 0 seconds is the default configuration. Command Mode Router OSPF Configuration mode. User Guidel ines This command has no user guidelines . Ex[...]

OSPF Commands 879 Command Mode Router OSPF Configuration mode . User Guideli nes The exter nal LSD B limi t MUS T be set i dentica lly i n all r outers a ttach ed to the OSPF backbone and/or any r egular OSPF area. Example The following example configures the e xterna l LSDB limit for OSPF with the number of non-default ASexternal- LSAs set at 20. [...]

880 OSPF Commands Example console(config-if-vlan1)#ip ospf area 192.168.1.10 ip ospf authentication Use the ip ospf authe nticati on comm an d in the Inte rfac e C onf igu rat ion mode to s et the OSPF Authentication T y pe and Key for the specif ied interface. Use the no form of the comm and to return the authenti cation type to the default v alue[...]

OSPF Commands 881 console(config-if-vlan15)#ip ospf authentication encrypt test123 100 ip ospf cost Use the ip ospf co st command in Interface Config uration mode to configure the cost on an OSPF interface. Use the no form of the co mmand to r e turn the cost to the defa ult value. Syntax ip ospf co st integer no ip osp f cost • integ er — Spec[...]

882 OSPF Commands Syntax ip ospf dea d-inter val seconds no ip osp f dead-inte rva l • seconds — Number of seconds that a router's Hello pack ets have not been seen before its neighbor routers d ecl are that the router is dow n. (Range: 1–65 535) Default Conf iguration 40 is the default number of seconds. Command Mode Interface Configura[...]

OSPF Commands 883 Default Conf iguration 10 is the default number of seconds. Command Mode Interface Configuration (VLAN) mode. User Guideli nes The value for the length of time must be t he same for all routers attached t o a network. Example The followi ng e xample sets the O SPF hello interval at 30 seconds. console(config-if-vlan15)#ip ospf hel[...]

884 OSPF Commands User Guidel ines This command has no user guidelines . Example The following exampl e disables OSPF MTU mismatch detecti o n on VLAN interface 15 . console(config-if-vlan15)#ip ospf mtu-ignore ip ospf network Use the ip ospf network co mmand to c onfigure OSPF to treat an inte rface as a point-t o-point rat her than bro adcast i n[...]

OSPF Commands 885 Example The following example shows the options for the ip ospf network command. console(config-if-vlan1)#ip ospf network ? broadcast Set the OSPF network type to Broadcast point-to-point Set the OSPF network type to Point-to-Point ip ospf prior ity Use the ip ospf priority co mmand in Interface Configuration mo de to set t he OSP[...]

886 OSPF Commands ip ospf retransmit-inter val Use the ip ospf retransmi t-inter val command in Interface Configuration mode to set the OSP F retransm it Int erval for the spec ified in terfac e. Use th e no fo rm of the command to re turn the interva l to the default value . Syntax ip ospf ret ransmi t-inter val seconds no ip osp f retran smit-int[...]

OSPF Commands 887 Syntax ip ospf tran smit-dela y seconds no ip osp f trans mit-delay • seconds — Se ts the estim ate d num b er of secon ds it takes to t rans mit a link state update packet over this interface. (Range: 1– 3600 seconds) Default Conf iguration 1 is the default number of seconds. Command Mode Interface Configuration (VLAN) mode[...]

888 OSPF Commands Command Mode Router OSPF Configuration mode. User Guidel ines OSPF is only enabled on an interfa ce if the prima ry IPv4 addr ess on the interface matc he s a network ar ea range. Any indiv idual interface can only be attached to a s ingle are a. If an interface addr ess matches multiple ne twork area ranges, the interface is assi[...]

OSPF Commands 889 Default Conf iguration OSPFv2 is disabled Command Mode Router OSPF Configuration mode . User Guideli nes OSPF is only enabled on an interface if the primary IPv4 addr ess on the interface matc h es a network ar ea range. Any indiv idual interface can only be attached to a single area. If an interface addr ess matches multiple netw[...]

890 OSPF Commands planned-only — This keywor d indicates tha t OSPF should only perform a graceful restart when the restart is planned (i.e., when the restart is a result of the ini t iate fa ilo ver co mm and ). Default Conf iguration Graceful re start is disabled by default Command Mode Router OSPF Configuration mode User Guidel ines Graceful r[...]

OSPF Commands 891 no ns f helpe r • planned-only — This keywor d indicates that OSPF should only help a rest arting router p erforming a planne d r estart. Default Conf iguration OSPF may act as a helpful neighbor for bo th planned and unplanned restarts Command Mode Router OSPF Configuration mode User Guideli nes The grace LS A announcing the [...]

892 OSPF Commands Default Conf iguration A helpful neighbor exits help er mode when a topology change occurs. Command Mode Router OSPF Configuration mode User Guidel ines The restarting r outer i s unabl e to react to topology chan ges. In pa rticula r , the restar t ing router will not immediate ly upda te its fo rwarding table; therefore, a topol[...]

OSPF Commands 893 Default Conf iguration The default r estart interva l is 120 seconds. Command Mode Rout er OSPF User Guideli nes The grace period must be set long enough to allow the restarting router to reest ablish all of its adjacencie s and complete a full dat abase ex change with each of those neighbors. Example – passive-inte rface defaul[...]

894 OSPF Commands Example console(config-router)#passive-interface passive-interface Use the passive-interface command to set the int e rface as passive. It overrides the global passive mod e that is currently effective on the interface. Use the “no” form of this command to set the interface as non-passive. Syntax passive-interface vlan vlan -i[...]

OSPF Commands 895 Syntax redistribute { rip | s tatic | connecte d} [metric integ er ] [ metr ic-type {1 | 2}] [tag integer ] [subnets] no redist ribute {rip | static | conn ected} [metri c integer ] [met ric-type {1 | 2}] [tag integer ] [subnets] • rip — Specifies RIP as the source protocol. • static — Specifies that the source is a static[...]

896 OSPF Commands router -id Use the router-id command in Router OSPF Configuration mode to set a 4- digit dotted-dec imal number uniquely identifyi ng the router OSPF ID. Syntax router-id ip-address • ip-add ress — IP address that u niquely id entifies the rou ter OSPF ID . Default Conf iguration This command has no default configuration. Comm[...]

OSPF Commands 897 Command Mode Global Configuration mode. User Guideli nes The command prompt changes when the router osp f command ex e cutes. Example The following example enters into router OSPF mode. console(config)#router ospf console(config-router)# show ip ospf Use the show ip ospf command to display information relevant to the OSPF router .[...]

898 OSPF Commands RFC 1583 Compatibility This confi gur ation op tion cont rols th e preference rules u sed when choosing among multiple e xternal LSAs advertising the same d estinati on. When enabled, the pre feren ce rules remain those spe cif ied by RFC 158 3. When disabl ed, the preferenc e rules are t hose stat ed in Se ction 16 .4.1 of RFC 23[...]

OSPF Commands 899 Number of Active Areas The number of OSPF areas to whic h the rout er is atta ched o n interfaces that are u p. ABR Stat us Sh ows whe ther the route r is an OS PF Area Border Rout er . ASBR Status Indicate s whether the router is an au tonomous system bord er router . Router aut omatically becomes an A SBR when it is configure d [...]

900 OSPF Commands LSA Hi gh W ater Mark The maximum num ber of LSAs that have be en in the link state database since OSPF began operation. Retra nsmit Li st Entries The current number of entries on all neighbors ’ retran s mit lists. Maximum Number of Retransmit Entries The maximum num ber of entrie s that can be on neigh bors’ retran smit list[...]

OSPF Commands 901 Example The following ex ample displays OSPF router information. console#show ip ospf Router ID.................................... .. 1.1.1.1 OSPF Admin Mode.............................. .. Enable RFC 1583 Compatibility....................... .. Enable External LSDB Limit.......................... .. No Limit Exit Overflow Inter[...]

902 OSPF Commands ASBR Status................................ .... Disable Stub Router................................ .... FALSE External LSDB Overflow..................... .... FALSE External LSA Count......................... .... 0 External LSA Checksum...................... .... 0 AS_OPAQUE LSA Count........................ .... 0 AS_OPAQUE LS[...]

OSPF Commands 903 show ip ospf abr The show ip os pf abr command displays the internal OSPF routing table entries to Area Border Routers (ABR). This command tak e s no options. Syntax show ip ospf a br Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no user gui deline[...]

904 OSPF Commands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following example displays OSPF router information. console#show ip ospf area 10 AreaID..................................... .... 0.0.0.10 External Routing........[...]

OSPF Commands 905 Default Metric............................... .. 250 Default Metric Type......................... Non-Comparable Translator Role.............................. .. Candidate Translator Stability Interval................ .. 2000 Translator State............................. .. Disabled show ip ospf asbr The show ip os pf asbr comma n[...]

906 OSPF Commands show ip ospf database Use the show ip ospf database command in Priv ileged EXE C mode to display information ab o ut the link state databas e when OSPF is enabled. If para meters are e nter ed, th e comman d displ ays t he LSA h eaders . Use th e optiona l para meter s to spe cify the typ e of li nk stat e adve rtise ments to disp[...]

OSPF Commands 907 Example The followi ng e xample displays informat ion about the link st ate database when OSPF is enable d. console#show ip ospf database Router Link States (Area 0.0.0.0) Link Id Adv Router Age Sequence Chksm Options Rtr Opt --------------- --------------- ----- -------- ------ ------- ----- 5.2.0.0 0.0.0.0 1360 80000006 3a1f ---[...]

908 OSPF Commands Link Opaque States (Area 0.0.0.0) Link Id Adv Router Age Sequence Chksm Options Rtr Opt --------------- --------------- ----- -------- ------ ------- ----- 5.2.0.0 0.0.0.0 1361 80000005 ef59 ------ Area Opaque States (Area 0.0.0.0) Link Id Adv Router Age Sequence Chksm Options Rtr Opt --------------- --------------- ----- --------[...]

OSPF Commands 909 show ip ospf database database-s ummary Use the show ip osp f data base databa se-sum mary command to display the number of each type of L SA in the database for each area and for the router . The c o mma nd also di splays the total n umber of L SAs in the databas e . Th is comm and has be en mod ified . Syntax show ip o spf datab[...]

910 OSPF Commands Example The follo wing e xampl e disp lays t he numb er of each t ype of LSA in t he database for each area and for the router . console#show ip ospf database database-summary OSPF Router with ID (5.5.5.5) Area 0.0.0.0 database summary Router......................................... 0 Network.......................................[...]

OSPF Commands 911 Router......................................... 0 Network........................................ 0 Summary Net.................................... 0 Summary ASBR................................... 0 Type-7 Ext..................................... 0 Opaque Link.................................... 0 Opaque Area.....................[...]

912 OSPF Commands Example The following exampl e displays the information for the IFO object or v i rtual interface ta bles associat e d with VLAN 3 . console#show ip ospf interface vlan 10 IP Address.......................... 1.1.1. 1 Subnet Mask......................... 255.25 5.255.0 Secondary IP Address(es)............. OSPF Admin Mode.........[...]

OSPF Commands 913 show ip ospf interface brief Use the sh ow ip osp f inter fac e brief command in Pri v ileged EXEC mode to display bri e f information for the I FO objec t or virtua l interfa ce table s. Syntax show ip ospf int erface bri ef Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User[...]

914 OSPF Commands Syntax show ip osp f interf ace stats vlan vlan -id • vla n-id — V ali d VLAN ID. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following ex ample displays the ospf s tatistics for VLAN 15. console>show[...]

OSPF Commands 915 • vla n-id — V alid VLAN I D. • ip-add ress — V alid I P address of the neighb or . Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The followi ng ex amples display informatio n about OSPF neighbors o n the s[...]

916 OSPF Commands Field D escriptions Interface — The name of the inte rface on which the adjacency is formed. Neighbor IP Address — The IPv4 address on the neighbor's interface used to form the adjacency . Interface Inde x — The SNMP interfac e index. Ar e a Id — The OSPF area in which the a djacency is formed Opti ons — The options[...]

OSPF Commands 917 – So ftware res tart ( 1) –S o f t w a r e r e l o a d / u p g r a d e ( 2 ) – Swit ch to redun dan t co ntro l pr oce ssor (3 ) – Unrecog nized - a val ue not defined i n RFC 3623 When F ASTP A TH sends a grace LSA, it sets the Restart Reas on to Softwa re Rest art on a planne d warm resta rt (when the " initiate fai[...]

918 OSPF Commands show ip ospf range Use the show ip os pf range command in Privi leged EXE C mode to display information about t he area ranges fo r the specified ar ea-id. Syntax show ip osp f rang e area- id • ar ea-id — Ident ifies the O SPF area whose ranges a re being displayed . (Range: IP address o r decima l from 0–429 496729 5) Defa[...]

OSPF Commands 919 Syntax show ip ospf s tatis tics Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example console>show ip ospf statistics Area 0.0.0.0: SPF algorithm executed 0 times Delta T SPF Duration (msec) Reason -------- -----------[...]

920 OSPF Commands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following example displays the OSPF stub table. console(config)#show ip ospf stub table AreaId TypeofService Metric Val Import SummaryLSA ------------- -----------[...]

OSPF Commands 921 Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The following example displays the OSPF Virtual Interface information for area 10 and its neighbor . console#show ip ospf virtual-link 10 192.168.2.2 Area ID........................................ 10 Neighbor Router ID...............[...]

922 OSPF Commands Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following exampl e displays the OSPF V irtual Interface information in the syst em. console#show ipv6 ospf virtual-link brief Hello Dead Retransmit Transit Area ID Neighbor Interval Interval Interval Delay ------- -------- ------[...]

OSPF Commands 923 User Guideli nes This command has no user guidelines. Example The following example configur es the SPF delay and hold time. console(config-router)#timers spf 20 30 1583compatibility Use the 1583co mpatibili ty command in Router OSPF Configuration mode to enable OSPF 1583 compatibility . Use the no form of the command to disable i[...]

924 OSPF Commands[...]

OSPF v3 Co mm ands 925 45 OSPFv3 Commands This chapter exp lains the following commands: • are a default-cos t •a r e a n s s a • are a nssa defaul t-info-o riginat e • are a nssa no-r edistribu te • are a nssa no-summary • a rea ns sa t ran slat or-role • a rea ns sa t rans lato r -s tab -intv •a r e a r a n g e •a r e a s t u b [...]

926 OSPFv3 C ommand s • ipv6 ospf h ello-interva l • ipv6 ospf m tu-ignore • ipv6 ospf n etwork • ipv6 ospf p riority • ipv6 ospf retransmit-in terval • ipv6 ospf t ransmit-delay •i p v 6 r o u t e r o s p f • maximum- paths •n s f •n s f h e l p e r • nsf helper strict-lsa-checking • nsf r estart-in terval •p a s s i v e [...]

OSPF v3 Co mm ands 927 • sh ow ip v6 ospf virtual-lin k • sh ow ip v6 ospf virtual-lin k brief[...]

928 OSPFv3 C ommand s area de fault-cost Use the area default-cost command in Router OSPF v3 Configuration mo de to configure the monetary default cost for the stub area. The operator must specify the area id and an integer va lu e between 1-1677 7215. Use the no form of the com mand to return th e cost to t he default va lue. Syntax area areaid de[...]

OSPF v3 Co mm ands 929 Syntax area areaid nssa no are a areai d nssa • ar eaid — V alid O SPFv3 area ident ifier . Default Conf iguration This command has no default configuration. Command Mode Router OSPFv3 Configuration mo de. User Guideli nes This command has no user guidelines. Example The following exampl e configures area 1 to function as[...]

930 OSPFv3 C ommand s • compar abl e — Metric T ype (nssa-e xternal 1). • non-comparable — Met ric T ype (ns sa-e xte rnal 2). Default Conf iguration If no metric is define d, 10 is the default configuration. Command Mode Router OSPFv3 Configuration mode . User Guidel ines This command has no user guidelines . Example The following example [...]

OSPF v3 Co mm ands 931 Command Mode Router OSPFv3 Configuration mo de. User Guideli nes This command has no user guidelines. Example The following e xample configur es the area 1 NSSA ABR so that le arned external ro utes will not be redistrib uted to the N SSA. console(config)#ipv6 router ospf console(config-rtr)#area 1 nssa no-redistribute area n[...]

932 OSPFv3 C ommand s Example The following example configures the area 1 NSSA so that sum mary LSAs are not ad vertised int o the NSSA. console(config)#ipv6 router ospf console(config-rtr)#area 1 nssa no-summary area nssa translator -role Use the area nssa translat or -r ole command in Router OSPFv3 Configuration mode to conf igure the translat or[...]

OSPF v3 Co mm ands 933 console(config-rtr)#area 1 nssa translator-role always area nssa translator -sta b-intv Use the area nssa tra nslat or -s tab-i ntv command in Router OSPFv3 Configuration mode to configure the translator s tability interval of the NSSA. The stabil ity interval is the period of time that an elected tr anslator continues to per[...]

934 OSPFv3 C ommand s area r ange Use the area rang e command in Route r OSPF Configuration mode to configure a summary prefix for routes learned in a given area. There ar e two types of area range s. An area ra ng e can be configured to summar ize intra-ar ea routes. An ABR advertises the ra nge rather than the specific intra-area route as a type [...]

OSPF v3 Co mm ands 935 Example The following example creates an area r a nge for the area 1 NSSA. console(config)#ipv6 router ospf console(config-rtr)#area 1 range 2020:1::1/64 summarylink area stub Use the area stub command in Rout er OSPFv3 Configuration mo de to create a stub ar ea for the specified ar ea ID. A stub a rea is charact e rized by t[...]

936 OSPFv3 C ommand s area stub no-summary Use the area stu b no-sum mary command in Router OSPF v3 Configuration mode to disable the i mport of Summary LSA s for the stub area identified by ar eaid. Syntax area areaid stub no-summary no area area id stub no-summary • ar eaid — V alid OSPF v3 area identifier . Default Conf iguration This comman[...]

OSPF v3 Co mm ands 937 no are a areai d vir tua l-li nk neighbor -id • ar eaid — V alid O SPFv3 area identifier (or d ecimal value in the ra nge of 0- 4294 96729 5). • neighbor -id — Ident ifies the R outer ID or IP address of the n eighbor . Default Conf iguration This command has no default configuration. Command Mode Router OSPFv3 Config[...]

938 OSPFv3 C ommand s Default Conf iguration 40 is the default value for seconds . Command Mode Router OSPFv3 Configuration mode . User Guidel ines This command has no user guidelines . Example The following example configures a 20-second dead interval for t he OSPF virtual interface on t he virtual interfac e identified by area 1 and its neig hbor[...]

OSPF v3 Co mm ands 939 User Guideli nes This command has no user guidelines. Example The following example configur es a hello interval of 20 seconds for the OSPF virtual inte rface on the virtu al interface identifi ed by area 1 and its neighbor . console(config)#ipv6 router ospf console(config-rtr)#area 1 virtual-link 2 hello- interval 20 area vi[...]

940 OSPFv3 C ommand s Example The following example configur es the re transmit interva l of 20 seconds for the OSPF v irtual interface on t he virtual i nterface identifi ed by area 1 and its neighbor . (config)#ipv6 router ospf (config-rtr)#area 1 virtual-link 2 retransmit- interval 20 area virtual-link transmit-delay Use the area virtua l-link t[...]

OSPF v3 Co mm ands 941 console(config-rtr)#area 1 virtual-link 2 transmit- delay 20 default-information origi nate Use the defau lt-inf orma tion ori ginat e command in Router OSPFv3 Configuration mode to control the adve rtisement of default routes . Use the no form of the comm and to return the defa ult route a dvertis ement s etting s to the def[...]

942 OSPFv3 C ommand s console(config-rtr)#default-information originate metric 100 metric-type 2 default-metric Use the defaul t-metric command in Rout er OSPFv3 Configuration mode to set a defaul t for the metr ic of distribut ed routes. Syntax default-me tric metric no defau lt-metri c • metric — Met ric valu e used for d istribut ion (Ran ge[...]

OSPF v3 Co mm ands 943 Syntax distance ospf { external | inte r - are a | intra-ar ea } distance no distance ospf { extern al | inter -area | intr a-area } distance • distan ce — Used to select the best path when there ar e two or more routes to the sa me de stination from two d ifferent routing protocols (Ra nge: 1–25 5). Default Conf igurat[...]

944 OSPFv3 C ommand s Command Mode Router OSPFv3 Configuration mode . User Guidel ines This command has no user guidelines . Example The followi ng e xampl e enabl es ad minist rativ e mode o f OSPF in the router (active). console(config)#ipv6 router ospf console(config-rtr)#enable exit-over flow-interval Use the exit -over flow-in ter val com mand[...]

OSPF v3 Co mm ands 945 Example The following example configur es the exit overflow interval for OSPF at 100 seconds. console(config)#ipv6 router ospf console(config-rtr)#exit-overflow-interval 100 extern al-lsdb-limit Use the exter nal-lsdb- lim it command in Router OSPFv3 Configuration mode to configure the external LSDB limit for OSPF . If the va[...]

946 OSPFv3 C ommand s Example The fo llowing exampl e sets the exte rnal LSDB limit at 100 for OS PF . console(config)#ipv6 router ospf console(config-rtr)#external-lsdb-limit 100 ipv6 ospf Use the ipv6 ospf command in Interface Configuration mode to enable OSPF on a router interface or loopback inte rface. Syntax ipv6 ospf no ipv6 ospf Default Con[...]

OSPF v3 Co mm ands 947 Syntax ipv6 ospf ar eaid areaid no ipv6 osp f areai d areai d • ar eaid — Is a 32 -bit int eger , for matted as a 4- digit dot ted-decimal number or a decim al valu e. It un iquely id en tifies the area to w hich th e interface connects. A ssigning a n area id w hich d oes not e xist on an interface causes the area to be [...]

948 OSPFv3 C ommand s Command Mode Interface Configuration (VLAN, T unnel, L oopback) mod e. User Guidel ines This command has no user guidelines . Example The following example configures a cost of 100. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 ospf cost 100 ipv6 ospf de ad-i nterval Use the ipv6 ospf dead-inter val command [...]

OSPF v3 Co mm ands 949 Example The followi ng e xample sets the O SPF dead interval at 100 seconds. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 ospf dead-interval 100 ipv6 ospf hello- interval Use the ipv6 ospf hello-in terval command in Interface Configuration mode to se t the OSPF hello int erval f or the sp ecified i nter fa[...]

950 OSPFv3 C ommand s ipv6 ospf mtu -ignore Use the ipv6 o spf mtu -ignore comm and in Interface Configuration mode to disable OSPF maximum transmi ssion unit (MTU) mismatch detection. OSPF Dat abase Desc ription packe ts specify th e size of the largest IP packet that can be sent without fragment ation on the interface. When a router receiv es a D[...]

OSPF v3 Co mm ands 951 default to point-to-point. When an E thernet port is used as a single large bandwidth IP network between two router s , the network type ca n be point-t o- point since there are only two routers. Using poin t-to-point as the network type eliminates the ov erhead of the OSPF designa ted router election. It is normally not usef[...]

952 OSPFv3 C ommand s Syntax ipv6 ospf priority prior ity no ipv6 ospf priority • priority — O SPF priority for specified interface. (Range : 0-255. A v alue of 0 indicates that th e router is not eligible t o become th e designated router on th is n etwo rk) Default Conf iguration 1, the highest rout er priority , i s the default value. Comman[...]

OSPF v3 Co mm ands 953 Default Conf iguration 5 seconds is the default value. Command Mode Interface Configuration (VLAN, T unnel, Loop back) mode. User Guideli nes This command has no user guidelines. Example The fo llowing e xampl e sets the OSPF re transmit i nterval at 100 secon ds. console(config)#interface vlan 15 console(config-if-vlan15)#ip[...]

954 OSPFv3 C ommand s User Guidel ines This command has no user guidelines . Example The followi ng e xample sets the O SPF T ransmit Delay at 100 seconds for VLAN 15. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 ospf transmit-delay 100 ipv6 router osp f Use the ipv6 router ospf co mmand in Global Configuration m ode to enter Ro[...]

OSPF v3 Co mm ands 955 Syntax maxi mum-pat hs maxpaths no ma ximum-p aths • maxpath s — Nu mber of path s that can be reported. (Range: 1-2) Default Conf iguration 2 is the default value for maxpaths . Command Mode Router OSPFv3 Configuration mo de. User Guideli nes This command has no user guidelines. Example The following example sets the num[...]

956 OSPFv3 C ommand s Default Conf iguration Graceful re start is disabled by default Command Mode Router OSPFv3 Configuration mode User Guidel ines Graceful restart works in conce rt with nonstop forwarding to enable the hardwar e to continue forwarding IPv6 packets usi ng OSPFv 3 routes while a backup unit takes over management unit r esponsibili[...]

OSPF v3 Co mm ands 957 Default Conf iguration OSPF may act as a helpful neighbor for bo th planned and unplanned restarts Command Mode Router OSPFv3 Configuration mode User Guideli nes The grace LS A announcing the graceful re start includes a r estart reas on. Reasons 1 (software r estart) and 2 (softwar e reload/upg rade) are consi dered planned [...]

958 OSPFv3 C ommand s Command Mode Router OSPFv3 Configuration mode User Guidel ines The restarting r outer i s unabl e to react to topology chan ges. In pa rticula r , the restar t ing router will not immediate ly upda te its fo rwarding table; therefore, a topology chang e may introduce forwar ding loops or b lack holes that pers ist until the gr[...]

OSPF v3 Co mm ands 959 Command Mode Router OSPFv3 Configuration mode User Guideli nes The grace period must be set long enough to allow the restarting router to reest ablish all of its adjacencie s and complete a full dat abase ex change with each of those neighbors. Example – passive-interface Use the passive-interface command to set the interfa[...]

960 OSPFv3 C ommand s Example console(config-router)#passive-interface vlan 1 passive-inte rface default The passive-interface default command enables the global pass ive mode b y default for all interfaces. It overrides any int erface level passive mode. Use the “no” form of this command to disa ble the global passive mode by default for all i[...]

OSPF v3 Co mm ands 961 Syntax redistribute {static | connected} [metric met ric ] [metric- type {1 | 2}] [ ta g tag ] no re distri bute { static | connected} [ metric ] [metric-type] [ tag ] • metric — Met ric valu e used for defau lt rout es. (Ran ge: 0-167772 14) • tag — T ag. (Ran ge: 0-429 49672 95) Default Conf iguration 2 is the defau[...]

962 OSPFv3 C ommand s Command Mode Router OSPFv3 Configuration mode . User Guidel ines This command has no user guidelines . Example The followi ng e xample sets a 4 -digit dotted- decima l numbe r ident ifying the Router OS PF ID as 2.3.4 .5. console(config)#ipv6 router ospf console(config-rtr)#router-id 2.3.4.5 show ipv6 ospf Use the show ipv6 os[...]

OSPF v3 Co mm ands 963 External LSDB Limit Shows th e maximu m number of no n-def ault externa l LSAs entr ies that can be stored in t he link-s tate da tabase. Exit Overflow Interval Shows the number of s econds that, after en tering OverflowState, as defined by RFC 1765, a router will attempt to leave OverflowSt at e. Au toCost Ref B W The co nfi[...]

964 OSPFv3 C ommand s Stub Rout er OSPF enters stub rou ter mod e, as desc ribed in RFC 3 137, when it enco unter s a resource limi tati on that preven ts it from compu ting a co mplete ro uting tab le. In th is state, O SPF sets the link met rics of non-st ub link s in its own rout er LSAs to t he largest possible value, discouragi ng other router[...]

OSPF v3 Co mm ands 965 Example The followi ng e xample enables OSP F traps. console#show ipv6 ospf Router ID...................................... 0.0.0.2 OSPF Admin Mode................................ Enable ASBR Mode...................................... Disable ABR Status..................................... Disable Exit Overflow Interval......[...]

966 OSPFv3 C ommand s New LSAs Originated............................ 0 LSAs Received.................................. 0 External LSDB Limit............................ No Limit Default Metric................................. Not Configured Maximum Paths.................................. 2 Default Route Advertise........................ Disabled A[...]

OSPF v3 Co mm ands 967 Example console#show ipv6 ospf abr Type Router Id Cost Area ID Next Hop Next Hop Intf ---- -------- ---- -------- ----------------------- ----- INTRA 3.3.3.3 10 0.0.0.1 FE80::211:88FF:FE2A:3CB3 vlan11 INTRA 4.4.4.4 10 0.0.0.1 FE80::210:18FF:FE82:8E1 vlan12 show ipv6 osp f area Use the show ipv6 osp f area command in P rivileg[...]

968 OSPFv3 C ommand s Area LSA Count................................. 0 Area LSA Checksum.............................. 0 Stub Mode...................................... Disable Import Summary LSAs............................ Enable show ipv6 ospf asbr The show ipv6 osp f asbr comm and displa ys the inte rnal O SPFv3 routes to reach A utono mous Sy[...]

OSPF v3 Co mm ands 969 show ipv6 osp f databa se Use the show ipv6 osp f database command in P rivileged EXEC mo de to display informati on about the link st ate database wh en OSPFv3 is enabled. If no parameters ar e entered, the command displays the LSA headers. Optional parameters specify the type of link state adve rtisements to dis play . The [...]

970 OSPFv3 C ommand s User Guidel ines This command has no user guidelines . Example The followi ng ex ample displays informatio n about the link st ate database when OSPF v3 is enabled. console#show ipv6 ospf database Router Link States (Area 0.0.0.0) Adv Router Link Id Age Sequence Csum Options Rtr Opt -------------- --------------- ----- -------[...]

OSPF v3 Co mm ands 971 Intra Prefix States (Area 0.0.0.0) Adv Router Link Id Age Sequence Csum Options Rtr Opt -------------- --------------- ----- -------- ---- ------- ------- 1.1.1.1 0 1 8000003C 9F31 2.2.2.2 0 2 8000004D 9126 Router Link States (Area 0.0.0.1) Adv Router Link Id Age Sequence Csum Options Rtr Opt -------------- --------------- --[...]

972 OSPFv3 C ommand s -------------- --------------- ----- -------- ---- ------- ------- 1.1.1.1 0 6 8000003A 37C4 2.2.2.2 0 1 8000004F 439A 1.1.1.1 10634 434 80000002 440A show ipv6 ospf data base database-sum mary Use the show ipv6 osp f database database -summ ary command in Priv ileged EXEC mode to display the number of each type of LSA in t he[...]

OSPF v3 Co mm ands 973 Type-7 Ext..................................... 0 Link........................................... 0 Intra-area Prefix.............................. 0 Link Unknown................................... 0 Area Unknown................................... 0 AS Unknown..................................... 0 Type-5 Ext.................[...]

974 OSPFv3 C ommand s Example The following example displays the information in VLAN 1 1’s virtual interface t ables. console#show ipv6 ospf interface vlan 11 IP Address..................................... Err ifIndex........................................ 1 OSPF Admin Mode................................ Enable OSPF Area ID....................[...]

OSPF v3 Co mm ands 975 User Guideli nes This command has no user guidelines. Example The followi ng exampl e displays brief ospf inte rface informat ion. console#show ipv6 ospf interface brief Hello Dead Retrax LSA Admin Router Int. Int. Int. Retrax Ack Interface Mode Area ID Prior. Cost Val. Val. Val. Delay Intval --------- -------- -------- -----[...]

976 OSPFv3 C ommand s Example The fo llowin g exampl e displ ays the inte rface st atist ics for VLA N 5. console>show ipv6 ospf interface stats v lan 5 OSPFv3 Area ID............................. .... 0.0.0.1 Spf Runs................................... .... 265 Area Border Router Count................... .... 1 AS Border Router Count...........[...]

OSPF v3 Co mm ands 977 LS Request 4 4 LS Update 521 398 LS Acknowledgement 209 282 show ipv6 ospf in terface vlan Use the show ip v6 osp f inter face vlan c o m ma n d i n Pr i v i l eg e d E X E C m od e t o display OSPFv3 configurat ion and status information for a specifi c vlan. Syntax show ipv6 ospf interface vlan { vlan-id | brief } • vla n[...]

978 OSPFv3 C ommand s Hello Interval........................... 1 0 Dead Interval............................ 4 0 LSA Ack Interval......................... 1 Iftransit Delay Interval................. 1 Authentication Type...................... N one Metric Cost.............................. 1 0 (computed) OSPF Mtu-ignore.......................... D[...]

OSPF v3 Co mm ands 979 Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Examples The followi ng ex amples display informatio n about OSPF neighbors, i n the first case in a summary tab le, and in the second in a table specific to tunne l 1. console#show ipv6 ospf neighbor Router ID Priority Intf Interface St[...]

980 OSPFv3 C ommand s show ipv6 ospf range Use the show ipv6 osp f range command in Pri vileged EX EC mode to display information about the area range s for the specified ar ea identifier . Syntax show ipv6 o spf ran ge ar eaid • ar eaid — Ident ifies the O SPF area whose ranges a re being displayed . Default Conf iguration This command has no [...]

OSPF v3 Co mm ands 981 Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The following example displays the OSPF stub table. console#show ipv6 ospf stub table AreaId TypeofService Metric Val Import SummaryLSA ------------ ------------- ---------- ----------------- 0.0.0.10 Normal 1 Enable show ipv6 os[...]

982 OSPFv3 C ommand s Example The following exampl e displays the OSPF V irtual Interface information for ar ea 1 and its neighbor . console#show ipv6 ospf virtual-link 1 1.1.1 .1 Area ID.................................... .... 1 Neighbor Router ID......................... .... 1.1.1.1 Hello Interval............................. .... 10 Dead Inter[...]

OSPF v3 Co mm ands 983 Example The following example displays the OSPF stub table. console(config)#show ipv6 ospf virtual-link brief Hello Dead Retransmit Transit Area ID Neighbor Interval Interval Interval Delay ----------- ----------- ---------- ---------- ---------- --------[...]

984 OSPFv3 C ommand s[...]

PIM-DM Commands 985 46 PIM-DM Commands This chapter exp lains the following commands: • ip pimd m •s h o w i p p i m d m • show ip pimdm i nterface • show ip pimdm nei ghbor[...]

986 PIM- DM C om mands ip pimdm Use the ip pimdm command in Global Configuration mode to enable the administrative mode of P IM-DM in t he router . Syntax ip pimdm no ip pi mdm Default Conf iguration Disabled is the defa ult state. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The followi [...]

PIM-DM Commands 987 User Guideli nes This command has no user guidelines. Example The followi ng ex ample displays sy stem-wide information for PIM-DM. console(config)#show ip pimdm Admin Mode.................................. Disable PIM-DM INTERFACE STATUS Interface Interface Mode Protocol State --------- --------------- --------------- show ip p[...]

988 PIM- DM C om mands Interface Mode................................. Disable Hello Interval (secs).......................... 30 show ip pimdm neighbor Use the show ip pimdm neigh bor com mand in P rivileged EXEC mode to display the n eighbor information for PIM-DM on the specified interface. Syntax show ip p imdm neigh bor [ interface vla n vlan-[...]

PIM-SM C ommands 989 47 PIM-SM Commands This chapter exp lains the following commands: • ip pims m • ip pimsm spt-thr eshold • ip pim-tra pflags •s h o w i p p i m s m • show ip pimsm int erface • show ip pimsm nei ghbor • show ip pimsm rp hash[...]

990 PIM- SM C omm ands ip pimsm Use the ip pimsm command in Global Configuration mode to set administrative mode of PIM-SM mult icast routing across the router to enabled. IGMP must be enabled before PIM-SM can be en abled. Syntax ip pimsm no ip pimsm Default Conf iguration PIM-SM is di sabled by default. Command Mode Glo bal C onfi gura tion mode [...]

PIM-SM C ommands 991 Default Conf iguration 50 kilobits/s ec is the default rate. Command Mode Global Configuration mode. User Guideli nes This command has no user guidelines. Example The following exampl e configures a t hreshold rate of 10 0 kilobits/sec. console(config)#ip pimsm spt-threshold 100 ip pim-trapflags Use the ip pim-trapflags c omman[...]

992 PIM- SM C omm ands show ip pimsm Use the show ip pimsm command in P rivileged EXEC mo de to display the system-wide i nformation for PIM-SM. Syntax show ip p imsm Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following exam[...]

PIM-SM C ommands 993 Syntax show ip pimsm interfac e [ vlan vlan -id ] • vla n-id — V alid VLAN I D Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The followi ng ex ample displays int erface information for VLAN 11 PIM-SM. consol[...]

994 PIM- SM C omm ands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following example displays neighb or information for PIM-SM on all interfaces. console#show ip pimsm neighbor all NEIGHBOR TABLE Interface IP Address Up Time [...]

PIM-SM C ommands 995 User Guideli nes This command has no user guidelines. Example The following example displays the RP router be ing selected from the set of active RP routers. console#show ip pimsm rphash 224.5.5.5 There are no static RPs for that group on the router.[...]

996 PIM- SM C omm ands[...]

Rout er Discover y Protocol Comma nds 997 48 Router Disc overy Protocol Commands Routers can be configured to periodica lly send router discovery messages to announce their presence to locally a ttached hosts. The router discovery message adverti ses one or more IP addr e sses on the router that hosts can use as their defa ult gateway . Hosts can s[...]

998 Route r Di scover y P roto col Co mmands ip irdp Use the ip irdp command in Interface Configuration mode to enable Router Discovery on an interfa ce. Use the no form of the co mmand to disable R outer Disco very . Syntax ip irdp no ip ird p Default Conf iguration Disabled is the default configuration. Command Mode Interface Configurati on (VLAN[...]

Rout er Discover y Protocol Comma nds 999 • ip-add ress — IP addre ss for router discovery advertis ements. (Range: 224.0.0. 1 [all-h osts IP multica st address] or 255.255 .255.25 5 [limit ed broa dc ast ad dress]) Default Conf iguration IP addr ess 224.0.0.1 is the default configuration. Command Mode Interface Configuration (VLAN) mode. User [...]

1000 Route r Di scover y P roto col Co mmands • integer — Integer value in seconds of the the hold time field of the router advertisem ent se nt from this interfa ce. The holdti me must be no less than the maximu m advertisem ent interval and cann ot be greater than 9000 seconds. Default Conf iguration The h oldtime de faults to 3 times the max[...]

Rout er Discover y Protocol Comma nds 1001 Default Conf iguration 600 seconds i s the default value. Command Mode Interface Configuration (VLAN) mode. User Guideli nes The default values of the minimum advertisement interval and the holdtime depend on the va lue of the maximum adv ertisement interva l. Setting the maximum advertisement interval cha[...]

1002 Route r Di scover y P roto col Co mmands • integer — Minimum ti me in seconds allo wed between sen ding router advertisements from the in terface. (Range: 3 to va lue of ma ximum advertisem ent interva l in second s) Default Conf iguration The de fault val ue is 0.75 times the m aximum ad vertisemen t interva l. Command Mode Interface Conf[...]

Rout er Discover y Protocol Comma nds 1003 Command Mode Interface Configuration (VLAN) mode User Guideli nes If a subnet includes any hosts that do not accept IP multi cast packets, send router ad vert iseme nts to the limited br oadcast addres s. Example The following example configur es route r discovery to send to the limited broadcast address: [...]

1004 Route r Di scover y P roto col Co mmands User Guidel ines This command has no user guidelines . Example The following example sets the ip irdp p refer ence to 1000 for VLAN 15. console(config)#interface vlan 15 console(config-if-vlan15)#ip irdp preference 1000 show ip ir dp Use the show ip irdp command in Privi leg ed EXEC mode to display the [...]

Rout er Discover y Protocol Comma nds 1005 Example The following example shows router discovery information for VLAN 15. console#show ip irdp vlan 15 Interface Ad Mode Advertise Address Max Int Min Int Hold Time Preference --------- ------- --------- -------- ------- ------- ----- --- ---------- vlan15 Enable 224.0.0.1 600 450 1800 0[...]

1006 Route r Di scover y P roto col Co mmands[...]

Rout ing Informa tion Protocol Commands 1007 49 Routing Information Protocol Commands This chapter exp lains the following commands: • auto-summar y •d e f a u l t - i n f o r m a tion originat e • default-m etric •d i s t a n c e r i p • dis tribute-list ou t •e n a b l e • hostroutesac cept •i p r i p • ip rip authentica tion ?[...]

1008 Rout ing Informa tion Protocol Commands auto-su mmary Use the auto-s ummary command in Router RIP Configuration mode to enabl e the RIP auto-summ arization mode. Us e the no form of the comm and to disa ble auto -summa riza tion mode . Syntax auto-s ummary no auto-s umma ry Default Conf iguration Disabled is the default configuration. Command [...]

Rout ing Informa tion Protocol Commands 1009 Command Mode Router RIP Configuration mode. User Guideli nes This command has no user guidelines. Example console(config-router)#default-information originate default-metric Use the def ault-metri c command in Router RIP Configuration mode to set a default for the me tric of distribut ed routes. Use t he[...]

1010 Rout ing Informa tion Protocol Commands distance rip Use the distance rip com mand in Router RIP Configuration mode t o set the route preference value of RIP in t he router . L ower route p refer ence values are preferre d when dete rmining th e best route. Use the no form of t he command to return the prefer ence to the default value. Syntax [...]

Rout ing Informa tion Protocol Commands 1011 no distribu te-list accesslistname ou t { ospf | static | connecte d } • access listname — The nam e used to identify the existing ACL. The range is 1-31 c harac ters. • ospf — Apply t he specific access list w hen OSPF is the so urce protocol. • static — App ly the specified access list wh e[...]

1012 Rout ing Informa tion Protocol Commands Default Conf iguration Enabled is the default configuration. Command Mode Router RIP Configuration mode . User Guidel ines This command has no user guidelines . Example console(config-router)#enable hostrou tesaccept Use the hostroutesaccept command in Router RIP Configuration mode to enable the RIP host[...]

Rout ing Informa tion Protocol Commands 1013 ip rip Use the ip rip command in Interface Configuration mode to enable RIP on a router interface. Use the no form of the command to disable RIP on th e interface. Syntax ip rip no ip r ip Default Conf iguration Disabled is the default configuration. Command Mode Interface Configuration (VLAN) mode. User[...]

1014 Rout ing Informa tion Protocol Commands • enc rypt — Sp ecifies the E thernet un it/port of the inte rface to view information . • key -i d — Authent ication key ident ifier for au thentica tion type e ncrypt. (Ran ge: 0-255 ) Default Conf iguration This command has no default configuration. Command Mode Interface Configurati on (VLAN)[...]

Rout ing Informa tion Protocol Commands 1015 Default Conf iguration Both is the default configuration. Command Mode Interface Configuration (VLAN) mode. User Guideli nes This command has no user guidelines. Example The following example allows no RIP cont rol packets to be received by VLAN 11. console(config-if-vlan11)#ip rip receive version none i[...]

1016 Rout ing Informa tion Protocol Commands Command Mode Interface Configurati on (VLAN) mode. User Guidel ines This command has no user guidelines . Example The following exampl e allows no RIP cont rol packets t o be se nt by V LAN 1 1. console(config-if-vlan11)#ip rip send version none redistribute The redistrib ute command configures RIP proto[...]

Rout ing Informa tion Protocol Commands 1017 • connected — Redist rib utes di rectly-connected routes. Default Conf iguration metr ic integer — not configured match — internal Command Mode Router RIP Configuration mode. User Guideli nes This command has no user guidelines. Example console(config-router)#redistribute ospf metric 10 match nss[...]

1018 Rout ing Informa tion Protocol Commands Example The followi ng e xample enter s Router RIP mod e. console(config)#router rip console(config-router)# show ip r ip Use the show ip rip command in P rivileged EXEC mode to display information relevant to the RIP router . Syntax show ip ri p Default Conf iguration The command has no default configur[...]

Rout ing Informa tion Protocol Commands 1019 Default Route Advertise................... 0 Redistributing............................. Source.................................... Co nnected Metric.................................... 2 Distribute List........................... No t configured Redistributing............................ Source.........[...]

1020 Rout ing Informa tion Protocol Commands Example The follow ing example dis plays in formati on related to the VL AN 15 R IP interface. console#show ip rip interface vlan 15 Interface.................................. .... 15 IP Address................................. .... ----- Send version............................... .... RIP-2 Receive ve[...]

Rout ing Informa tion Protocol Commands 1021 User Guideli nes This command has no user guidelines. Example The following example displ a ys general information for each RIP interface. console#show ip rip interface brief Send Receive RIP Link Interface IP Address Version Version Mode State ---------- ---------- -------- - ---------- --------- ------[...]

1022 Rout ing Informa tion Protocol Commands Example The following example does not use split horizon. console(config-router)#split-horizon none[...]

T u nnel Inter face Co mmands 1023 50 T unnel Inte rface Commands This chapter exp lains the following commands: • interfa ce tunnel • show interf aces tunnel • t unne l destin ation • t unnel m ode ipv6ip • tunnel sour ce[...]

1024 T unnel Inte rface Com mands interface tunn el Use the interfa ce tunnel command in Globa l Configuration mo de to enter the interface configuration mode for a tunnel. Syntax interface tu nnel tunnel-id no inter face tunnel tunnel-id • tunnel -id — T unne l identifier . (Range: 0–7) Default Conf iguration This command has no default conf[...]

T u nnel Inter face Co mmands 1025 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Examples The following examples show t he parameters rela t ed to an individual tunnel and to all tunnel interfaces. console#show interfaces tunnel 1 Interface[...]

1026 T unnel Inte rface Com mands Command Mode Interface Configuration (T u nnel) mode. User Guidel ines This command has no user guidelines . Example The following example sp e cifies the destination transp ort address of tunnel 1. console(config)#interface tunnel 1 console(config-if-tunnel1)#tunnel destination 10.1.1.1 tunnel mode ipv6ip Use the [...]

T u nnel Inter face Co mmands 1027 Example The following example specifies ipv6ip mode for tunnel 1. console(config)#interface tunnel 1 console(config-if-tunnel1)#tunnel mode ipv6ip console(config-if-tunnel1)#tunnel mode ipv6ip 6to4 tunnel sour ce Use the tunnel so urce command in Interfa ce Configuration mode to specify the source transport addres[...]

1028 T unnel Inte rface Com mands[...]

Virtual LA N Routin g Comman ds 1029 51 V irtual LAN Routing Comma nds This chapter exp lains the following command: •s h o w i p v l a n[...]

1030 Virtual LA N Routin g Comman ds show ip vlan Use the show ip vlan command in Priv ileged EXEC mode to display the VLAN routing information for al l VLANs wi th r outi ng en abl ed. Syntax show ip vl an Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user[...]

Virtua l Route r Redun danc y Proto col Comma nds 1031 52 V irtual Router Redund ancy Protocol Commands This chapter e xplains the follow i ng Virtual LAN routing commands: • ip vrrp • ip vrrp au then tica tion • ip vrrp ip • ip vrrp mode • ip vrrp preempt • ip vrrp priority • ip vrrp timers advertise • ip vrrp track interfac e • [...]

1032 Virtual Ro uter R edund ancy Protoc ol Co mmands ip vrrp Use the ip vrrp command in Global Configur ation mode to enab le the administrative mode of VRRP for the ro uter . In Interface Config mode, this command enables t he VRRP protocol o n an interface. Us e the no fo r m of t he command to disable the administrative mode of VRRP for the rou[...]

V irtual Rout er Redundan cy Protocol Comm ands 1033 ip vrrp au thentication Use the ip vrrp a uthen ticatio n command in Interface C onfiguration mode to set the authorization details value for the virtual router configured on a specified interface. Use the no form of t he command to return the authenti cation ty pe to the de fault valu e. Syntax [...]

1034 Virtual Ro uter R edund ancy Protoc ol Co mmands ip vrrp ip Use the ip vrrp ip command in Interface Configuration mode to set the virtual router IP address value for an interface. Use the no fo rm o f th e command to remove the secondary IP addr ess. NOTE: In order to be conf igure d on a ro uting i nterf ace, t he VRRP IP add ress must belong[...]

V irtual Rout er Redundan cy Protocol Comm ands 1035 ip vrrp mod e Use the ip vrrp mode command in Interface Configuration mode to enable the virtual router configured on an interf ace. Enabling t he status field starts a virtual router . Use the no form of the command to disable the virtual router . Syntax ip vrrp vr - id mode no ip vrrp vr - id m[...]

1036 Virtual Ro uter R edund ancy Protoc ol Co mmands • vr -id — The virtual router ident ifier . (Range: 1-255) Default Conf iguration Enabled is the default configuration. Command Mode Interface Configurati on (VLAN) mode. User Guidel ines This command has no user guidelines . Example The following example sets the preemption mode value for t[...]

V irtual Rout er Redundan cy Protocol Comm ands 1037 User Guideli nes This command has no user guidelines. Example The following example sets the priority value for the v irtual router for VLAN 15. console(config-if-vlan15)#ip vrrp 5 priority 20 ip vrrp timers advertise Use the ip vrrp t imers advertise co mmand in Interface Co nfiguration mode to [...]

1038 Virtual Ro uter R edund ancy Protoc ol Co mmands console(config-if-vlan15)#ip vrrp 5 timers advertise 10 ip vrrp track interface Use the ip vrrp track i nterface command to alter t he priori ty of the V RRP router based on the availability of its inte rfaces. It is useful for track ing interfa ces that are not conf igured for VRRP . Only IP in[...]

V irtual Rout er Redundan cy Protocol Comm ands 1039 The default decrement priority is 10. Command Mode Interface Configuration (VLAN) mode. User Guideli nes There ar e no user gui delines for this command. Example The following ex ample adds VLAN 2 to th e virtual router track ed list (with a priority decrement value of 20). (config-if-vlan10)#ip [...]

1040 Virtual Ro uter R edund ancy Protoc ol Co mmands Default Conf iguration There ar e no rout es tracked by default. The default decrement priority is 10. Command Mode Interface Configurati on (VLAN) mode. User Guidel ines There ar e no user gui delines for this command. Example The followi ng exampl e adds the route 2. 2.2.0/24 to t he virtual r[...]

V irtual Rout er Redundan cy Protocol Comm ands 1041 Example The following example displays VRRP’s enabled sta tus. console#show ip vrrp Admin Mode..................................... Enable Router Checksum Errors......................... 0 Router Version Errors.......................... 0 Router VRID Errors............................. 0 show i[...]

1042 Virtual Ro uter R edund ancy Protoc ol Co mmands Primary IP Address......................... 192.168.5.55 VMAC Address............................... 0000.5E00.0101 Authentication Type........................ None Priority................................... 60 Advertisement Interval (secs).............. 10 Pre-empt Mode........................[...]

V irtual Rout er Redundan cy Protocol Comm ands 1043 User Guideli nes This command has no user guidelines. Example The followi ng ex ample displays all configuration informatio n about the virtual router on the selected interfa ce. console#show ip vrrp interface brief Interface VRID IP Address Mode State --------- ---- -------------- ------ -------[...]

1044 Virtual Ro uter R edund ancy Protoc ol Co mmands Example The following example displays all s t at istical information about the VLAN 15 virtual router . console#show ip vrrp interface stats vlan 15 5 UpTime..................... 0 days 0 hrs 0 mins 0 secs Protocol....................................... IP State Transitioned to Master..........[...]

Auto conf ig Co mmands 1045 53 Autoconfig Command s This chapter exp lains the following commands: • boot host auto- save • boot host dhcp • boot host r etry-c ount •s h o w b o o t[...]

1046 Autoco nfig Comman ds boot host a uto-save The boot h ost auto -save comma nd en abl es/d isa ble s the opti on to automatically save configuration files do wnloaded to the switch by Auto Config. Syntax boot host aut o-save no boot h ost aut o-save Default Conf iguration The downloaded configuration is no t au tomatical ly saved by defaul t. C[...]

Auto conf ig Co mmands 1047 Command Mode Global Configuration. User Guideli nes This command has no user guidelines Example console#no boot host dhcp boot host retr y-count The boot host retry-count comma nd sets the numb er of atte mpts to download a configuration. Use the "no" form of this command to reset the number to the default. Syn[...]

1048 Autoco nfig Comman ds show boot The show autoconfig comma nd displa ys the current sta tus of the Auto Config proce ss. Syntax show boot Default Conf iguration Not applicab le Command Mode P rivileged EXEC. User Guidel ines This command has no user guidelines . Example console#show boot Config Download via DHCP: enabled Auto Config State : Wai[...]

Capt ive Portal Comm ands 1049 54 Captive Po rtal Commands This chapter exp lains the following commands: Captive P ortal Global Commands • a uth enticat ion tim eou t •c a p t i v e - p o r t a l •e n a b l e • http port • https port • sh ow captive-portal • sh ow captive-portal status Captive P ortal Configuration Comma n ds •b l [...]

1050 Capti ve P ortal Co mmands • show captive-portal int erface client status • show captive-portal interfa ce configuration status Captive P ortal I nterface Commands • clear capt ive-portal users Captive P ortal L ocal U ser Commands • clear capt ive-portal users •n o u s e r • show ca ptive-portal user •u s e r g r o u p •u s e [...]

Capt ive Portal Comm ands 1051 Captive Portal Global Co mmands authentication timeout Use the auth enticati on timeout comma nd to configure the authenti cation timeout. I f the us er does not ente r val id credentials wit hin thi s time li mit, the authenti cation pa ge needs to be served a gain in order for the c lient to gain access to the n etw[...]

1052 Capti ve P ortal Co mmands Syntax captive-portal Default Conf iguration There is no default configuration for this command. Command Mode Global Configuration mode User Guidel ines There ar e no user gui delines for this command. Example console(config)#captive-portal console(config-CP)# enable Use the en able command to globally enab le captiv[...]

Capt ive Portal Comm ands 1053 Example console(config-CP)#enable http port Use the http p ort command to configur e an additional HTTP port for captive portal to monitor . Use the “no” form of this command to remove the additional HT TP port from monito ring. Syntax http p ort port-num no h ttp por t • port-num — The port num ber to mo nito[...]

1054 Capti ve P ortal Co mmands no http s port • port-num — The p ort n umber t o mo nitor (R ange: 1 –6553 5). Default Conf iguration Captiv e portal only m o nitors port 443 by d efault. Command Mode Captive P ortal Configuration mode. User Guidel ines There ar e no user gui delines for this command. Example console(config-CP)#https port 14[...]

Capt ive Portal Comm ands 1055 Example console#show captive-portal Administrative Mode.......... Disabled Operational Status........... Disabled Disable Reason............... Administrator Disabled Captive Portal IP Address.... 1.2.3.4 show captive- portal status Use the show captive-porta l status command t o report the status of all captive porta[...]

1056 Capti ve P ortal Co mmands Configured Captive Portals..................... 1 Active Captive Portals......................... 0 Local Supported Users.......................... 128 Configured Local Users......................... 3 System Supported Users......................... 1024 Authenticated Users............................ 0 Captive Porta[...]

Capt ive Portal Comm ands 1057 configuration Use the configuration command to enter the captive portal instance mode. The captive port al configuration identified by CP ID 1 is the default CP configuration. The system supports a total of ten CP configurations. Use the “no” form of this command to delete a configuration. The default configuratio[...]

1058 Capti ve P ortal Co mmands Default Conf iguration Configurations ar e en abled by default Command Mode Captive P ortal Instance mode. User Guidel ines There ar e no user gui delines for this command. Example console(config-CP 2)#no enable group Use the grou p command to configure the group number for a captive portal configuration. If a group [...]

Capt ive Portal Comm ands 1059 Example console(config-CP 2)#group 2 interface Use the interfa ce command to as sociate an interface with a cap tive portal configuration. Use the “no” form of th is command to remove an association. Syntax interfa ce interface no in terfac e interface interface — An interface or range of i nterfaces. Default Co[...]

1060 Capti ve P ortal Co mmands • web- id — Th e loca le numb er (Ran ge: On ly loca le 1 is suppo rted) Default Conf iguration Locale 1 is configured by default. Command Mode Captive P ortal Instance mode. User Guidel ines There ar e no user gui delines for this command. name Use the name command t o con figure the n ame for a captive portal c[...]

Capt ive Portal Comm ands 1061 protocol Use the proto col command to configur e the protocol mode for a captive portal configuration. Syntax protocol { http | http s } Default Conf iguration The default protocols mode is htt ps. Command Mode Captive P ortal Instance mode. User Guideli nes There ar e no user gui delines for this command. Example con[...]

1062 Capti ve P ortal Co mmands User Guidel ines There ar e no user gui delines for this command. Example console(config-CP 2)#redirect redir ect-url Use the redirect-url command to configure the r edirect URL for a captive portal configuration. Syntax redirect-url url • url — The URL for redir ection (Ran ge: 1–512 charact ers). Default Conf[...]

Capt ive Portal Comm ands 1063 no session-time out • timeout — Se ssion timeou t. 0 in dic ates tim eou t no t en forced ( Ra nge: 0–86 400 se conds ). Default Conf iguration There is no sess ion t imeout by default. Command Mode Captive P ortal Instance mode. User Guideli nes There ar e no user gui delines for this command. Example console(c[...]

1064 Capti ve P ortal Co mmands User Guidel ines There ar e no user gui delines for this command. Example console(config-CP 2)#verification local Captive Portal Client Co nnection Commands captive-portal clien t deauthenticate Use the captive-portal client deauthenticat e command to deaut henticate a specific ca ptive portal client . Syntax captive[...]

Capt ive Portal Comm ands 1065 Syntax show captive- po rtal clien t [ macaddr ] status • macaddr — Client MAC add ress. Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no user gui delines for this command. Example console#show captive-portal client status[...]

1066 Capti ve P ortal Co mmands CP Name................................... cp1 Interface................................. 1/g1 Interface Description..................... Unit: 1 Slot: 0 Port: 1 Gigabit - Level User Name................................. user123 Session Time.............................. 0d:00:00:13 show captive- portal configura tio[...]

Capt ive Portal Comm ands 1067 0002.BC00.1291 10.2 54.96.48 1/g2 2 cp2 0002.BC00.1292 10.2 54.96.49 1/g3 3 cp3 0002.BC00.1293 10.2 54.96.50 1/g4 console#show captive-portal configuration 1 c lient status CP ID..................................... 1 CP Name................................... cp 1 Client Client MAC Address IP Address Interface Interf[...]

1068 Capti ve P ortal Co mmands Command Mode P rivileged EXEC mode. User Guidel ines There ar e no user gui delines for this command. Example console#show captive-portal interface client status Client Client Intf Intf Description MAC Address IP Address ------ ----------------------------------- ----------------- ------ --------- 1/g1 Unit: 1 Slot: [...]

Capt ive Portal Comm ands 1069 Captive Portal Interface Co mmands show captive- portal interface configuration status Use the sh ow cap tiv e-po rta l inte rfa ce co nfig ur atio n sta tus com mand to display the interfa ce to configuratio n assignments for all captive portal configurations or for a speci fic configuration. Syntax show ca ptive-por[...]

1070 Capti ve P ortal Co mmands Interface Interface Description Type --------- ----------------------------------- -------- 1/g1 Unit: 1 Slot: 0 Port: 1 Gigabit ... Physical Captive Portal Local User Command s clear ca ptive-portal users Use the clear capti ve-portal users command to delete a ll capti ve portal user entries. Syntax clear captive-po[...]

Capt ive Portal Comm ands 1071 Default Conf iguration There is no default configuration for this command. Command Mode Captive P ortal Configuration mode. User Guideli nes There ar e no user gui delines for this command. Example console(config-CP)#no user 1 show captive- portal user Use the show captive-portal user command to display all configur e[...]

1072 Capti ve P ortal Co mmands ------- --------------------- ------- ------------ ------------ 1 user123 14400 1 Default 2 user234 0 1 Default 2 group2 console#show captive-portal user 1 User ID........................................ 1 User Name...................................... user123 Password Configured............................ Yes Sess[...]

Capt ive Portal Comm ands 1073 User Guideli nes There ar e no user gui delines for this command. Example console(config-CP)#user 1 group 3 user name Use the user name command to modify the user name for a local captive portal us er . Syntax user user -id name name • user -id — Use r ID (Ra nge: 1–128 ). • name — use r nam e (Ran ge: 1–3[...]

1074 Capti ve P ortal Co mmands • user -i d — U ser ID (Range: 1–128) . • password — User passwor d (Range: 8–6 4 characte rs). • enc-passwor d — User passwor d in encrypted form. Default Conf iguration There ar e no users configured by default. Command Mode Captive P ortal Configuration mode. User Guidel ines There ar e no user gui[...]

Capt ive Portal Comm ands 1075 Command Mode Captive P ortal Configuration mode. User Guideli nes There ar e no user gui delines for this command. Example console(config-CP)#user 1 session-timeout 86400 console(config-CP)#no user 1 session-timeout Captive Portal Status Commands show captive- portal configura tion Use the show captive-port al configu[...]

1076 Capti ve P ortal Co mmands Operational Status........................ Disabled Disable Reason............................ Administrator Disabled Blocked Status............................ Not Blocked Authenticated Users....................... 0 show captive- portal configura tion interface Use the show capt ive-portal con figuration in terface[...]

Capt ive Portal Comm ands 1077 --------- ---------------------------------------- ------------ --- ------ 1/g1 Unit: 1 Slot: 0 Port: 1 Gigabit - Level Disabled Blocked console#show captive-portal configuration 1 i nterface 1/g1 CP ID..................................... 1 CP Name................................... cp 1 Interface....................[...]

1078 Capti ve P ortal Co mmands Example console#show captive-portal configuration 1 locales Locale Code --------------- en show captive- portal configura tion status Use the show captive -portal config uration status command to display information about all configured ca ptive portal config urations or about a specific capt ive portal configuration[...]

Capt ive Portal Comm ands 1079 console#show captive-portal configuration 1 status CP ID.......................................... 1 CP Name........................................ cp1 Mode........................................... Enabled Protocol Mode.................................. https Verification Mode.............................. Guest Gr[...]

1080 Capti ve P ortal Co mmands Client Database Full Traps................. .... Disable Client Disconnection Traps................. .... Disable Captive Portal User Group Comman ds user group Use the user grou p command to create a user group. Use the “no” form of this command to delete a user group. The default user group (1) cannot be delete[...]

Capt ive Portal Comm ands 1081 user gro up moveusers Use the user group moveusers command to move a group's users to a different group. Syntax user group grou p-id move users new-group-id • group-id — Grou p ID (Ra nge: 1– 10). • new-grou p-id — Group ID (Ra nge: 1– 10). Default Conf iguration There is no default configuration for [...]

1082 Capti ve P ortal Co mmands user group name Use the user grou p nam e command to configure a group name. Syntax user group group-id name name • group-id — G roup ID (Range: 1– 10). • name — G roup nam e (Ran ge: 1 –32 c harac ters). Default Conf iguration User groups have no names by default. Command Mode Captive P ortal Configurati[...]

Cloc k Comm ands 1083 55 Clock C ommands This chapter exp lains the following commands: •s h o w c l o c k • show sntp conf iguratio n • show sntp s tatus • s ntp a uth en ticate • s ntp a uth entic ation -key • sntp broadca st client enab le • sn tp client poll timer •s n t p s e r v e r • sntp trus ted-k ey • sntp unica st cli[...]

1084 Clock Comma nds Command Mode User EXEC mode User Guidel ines This command has no user guidelines . Examples The followi ng ex ample displays the time and date from the sy stem clock console>show clock 15:29:03 Jun 17 2002 Time source is SNTP show sntp c onfiguration Use the show sntp configuration command in P rivileged EXEC mode t o show t[...]

Cloc k Comm ands 1085 Polling interval: 64 seconds MD5 Authentication keys: Authentication is not required for synchronization. Trusted keys: No trusted keys. Unicast clients: Disable Unicast servers: Server Key Polling Priority --------- ----------- ----------- ----- ----- 10.27.128.21 Disabled Enabled 1 show sntp status Use the show sntp status c[...]

1086 Clock Comma nds Examples The following example s hows t he status o f the SNTP . console#show sntp status Client Mode: Unicast Last Update Time: MAR 30 21:21:20 2009 Unicast servers: Server Status Last response --------- ----------- ---------------------- ---- 192.168.0.1 Up 21:21:20 Mar 30 2009 sntp authenticate Use the sntp a uthenti cate co[...]

Cloc k Comm ands 1087 Example The follo wing example, after def ining the authe nticati on key for SNTP , gran ts authen tication. console(config)# sntp authentication-key 8 md5 ClkKey console(config)# sntp trusted-key 8 console(config)# sntp authenticate sntp a uthe ntica tion-ke y Use the sntp au thenticati on-key com mand in Global Configuration[...]

1088 Clock Comma nds console(config)# sntp authenticate sntp broadca st client enable Use the sntp broadcast client enable command in Global Configuration mode to enab le a Simple Net work Time Protocol (SNTP) Broadcast client. T o disable an SNTP Broadcast client, use the no form of th is command. Syntax sntp broadcast client enable no sntp broadc[...]

Cloc k Comm ands 1089 • seconds — P olling int erval. (Range: 64-102 4 second s, in pow ers o f 2) Default Conf iguration The polling interval is 64 seconds. Command Mode Global Configuration mode User Guideli nes If a user enters a value whic h is not an exact power of two, the nearest power - of -two value is applied. Example The fo llowing e[...]

1090 Clock Comma nds • priority — Priority assigned to the server . (Range: 1 –8) Default Conf iguration No servers ar e defined. Command Mode Glo bal C onf igura tion mode User Guidel ines Up to 8 SNTP servers can be defined. Use the sntp client e nable command in Global Configuration mode to enable unicast clients globally . P olling time i[...]

Cloc k Comm ands 1091 Default Conf iguration No k eys ar e truste d. Command Mode Global Configuration mode User Guideli nes This command is r elevant for both r eceived Unicast and Broadcas t. Example The following defines SNTP trusted-key . console(config)# sntp authentication-key 8 md5 ClkKey console(config)# sntp trusted-key 8 console(config)# [...]

1092 Clock Comma nds Examples The following example enables the device to use Sim ple Network Time P rot ocol (SNTP) to re q uest and accept SNTP traffic from servers. console(config)# sntp unicast client enable clock timezon e hours-offset Use the clock timezone [ hours-offset ] [minutes minutes-offset ] [ zone acronym ] comm and to se t the of fs[...]

Cloc k Comm ands 1093 Syntax no clock timezon e Default Conf iguration This command has no default configuration. Command Mode Global Configuration User Guideli nes This command has no specific us e r guidelines. Example console(config)#no clock timezone clock summe r -time recurring Use the clock sum mer -time recurring { usa | eu | { week day mon[...]

1094 Clock Comma nds • acronym — The acron ym for the t ime zone to b e displaye d when summe rtime is in effect. (Ran ge: Up to four cha racters) Default V alue No defaul t settin g Command Mode Global Configuration User Guidel ines No specific guideline s Examples console(config)# clock summer-time recurring 1 sun jan 00:10 2 mon mar 10:00 of[...]

Cloc k Comm ands 1095 • acronym — The a cronym for the t ime zone to b e display ed when summ ertime i s in effect. (R ange: Up to four charact ers) Default Conf iguration This command has no default configuration. Command Mode Global Configuration User Guideli nes No specific guideline s Examples console(config)# clock summer-time date 1 Apr 2[...]

1096 Clock Comma nds User Guidel ines No specific guideline s Example console(config)#no clock summer-time show cl ock Use the show clock command to display the time and date from the system clock. Use the show clock detail command to show the time zone and sum mer tim e con fig urat io n. Syntax De scription show cloc k [deta il] Default Conf igur[...]

Cloc k Comm ands 1097 Time source is SNTP Time zone: Acronym is PST Offset is UTC-7 Summertime: Acronym is PDT Recurring every year. Begins at first Sunday of April at 2:00. Ends at last Sunday of October at 2:00. Offset is 60 minutes.[...]

1098 Clock Comma nds[...]

Conf iguration an d Image File Com mands 1099 56 Configuration and Image File Commands This chapter exp lains the following commands: • boot system • clea r config •c o p y • delet e backup-config • delet e backup-image • delet e startup-config • filedescr •s c r i p t a p p l y •s c r i p t d e l e t e •s c r i p t l i s t •s[...]

1100 Confi gurat ion a nd Imag e File Co mmands boot system Use the boot system command in P rivileged EXEC mode to specify the system imag e that t he device loads at start up. Syntax boot system [image1|i mage2] • image1|image2 — Ima ge file. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode [...]

Conf iguration an d Image File Com mands 1101 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example restor es the s w itch to its default configuration. console#clear config copy Use the copy command in Privi le ged EXEC mode to copy files from a source to a d estinatio n. Syntax copy[...]

1102 Confi gurat ion a nd Imag e File Co mmands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines The location of a file system dicta t es the format of the source or destination URL. startu p-co nfig Rep resents th e sta rtup co nfigura tion file. startu p-log Represents the st ar[...]

Conf iguration an d Image File Com mands 1103 The entire copy ing process may take several mi nu tes and differs fro m protocol to pro tocol and from network t o network. Understanding Invalid Combination s of Source and Destination Some combinations of s o urce and destination ar e not valid. Specifically , if the following conditions exist, yo u [...]

1104 Confi gurat ion a nd Imag e File Co mmands Saving the Running Configuration to th e Startup Configuration Use the copy running-con fig startup-con fig command to copy the running configuration to the startup configuration. Backing up the Running Configuration o r Startup Configuration to the B ackup Configuration Use the copy running-con fig b[...]

Conf iguration an d Image File Com mands 1105 Syntax delete backup-config Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following exampl e deletes the backup-config file. console#delete backup-config Delete backup-config (Y/N)?y [...]

1106 Confi gurat ion a nd Imag e File Co mmands Example The following exampl e deletes test file in Flash memory . console#delete backup-image Delete: image2 (y/n)? delete startup-config Use the delete startup-config command in P rivileged EXEC mode to delete the startup-config file. Syntax delete sta rtup-co nfig Default Conf iguration This comman[...]

Conf iguration an d Image File Com mands 1107 Syntax filedesc r {image 1|im age2} description no filedescr {image 1|image2} • image1|image2 — Ima ge file. • descript ion — Block of descriptive text. (Range: 0-12 8 character s) Default Conf iguration No de scr ipt ion is at tach ed t o the f ile . Command Mode P rivileged EXEC mode User Guid[...]

1108 Confi gurat ion a nd Imag e File Co mmands User Guidel ines This command has no user guidelines . Example The following e xample applies the config.scr script to the switch. console#script apply config.scr script delete Use the script delete command in Privi le ged EXEC mode to delete a specified scri pt. Syntax script delete { scriptname | al[...]

Conf iguration an d Image File Com mands 1109 Syntax script list Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example displays all scripts present on the switch. console#script list Configuration Script Name Size(Bytes[...]

1110 Confi gurat ion a nd Imag e File Co mmands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following exampl e displays the contents of the script file config.scr . console#script show config.scr interface ethernet 1/g1 ip address 176.242.100.100 255.255.255.0 exit script validate Use the sc[...]

Conf iguration an d Image File Com mands 1111 Example The following example validates the contents of the s cript file config.scr . console#script validate config.scr show back up-config Use the show backup-config command in P rivileged EXEC mode to display the contents of the backup configuration file. Syntax show backup -config Default Conf igura[...]

1112 Confi gurat ion a nd Imag e File Co mmands interface ethernet 1/g2 ip address 176.243.100.100 255.255.255.0 duplex full speed 1000 exit show bootvar Use the show boot var comman d in User EXEC mode to display the active system imag e file th at the device loads a t startup . Syntax show boot var [ unit ] • unit —Unit numb er . Default Conf[...]

Conf iguration an d Image File Com mands 1113 Images currently available on Flash --------------------------------------------- -------------- -------------- unit image1 image2 current- active next-active --------------------------------------------- -------------- -------------- 1 0.31.0.0 0.31.0.0 image2 image2 show dir Use the show dir command t[...]

1114 Confi gurat ion a nd Imag e File Co mmands --------- --------------- image1 6351288 image2 6363424 fastpath.cfg 321894 show runn ing- config Use the show running-co nfig command in P rivileged EXEC mode to display the contents of the currently running configuration file. The command only displays the configuratio ns that ar e non-default. NOTE[...]

Conf iguration an d Image File Com mands 1115 show startup - config Use the show start up-config command in P rivileged EXEC mode to display the s tartup co nfigurat ion file contents . Syntax show startup-con fig Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has n[...]

1116 Confi gurat ion a nd Imag e File Co mmands 11 : exit 12 : ip address dhcp 13 : ip address vlan 1001 14 : interface vlan 3 15 : routing 16 : exit 17 : username "lvl7" password fb3604df5a109405b2d79ecb06c47ab5 level 15 encrypted 18 : ! 19 : interface ethernet 1/g17 20 : switchport mode general 21 : switchport general pvid 1001 22 : no [...]

Conf iguration an d Image File Com mands 1117 update bo otcode Use the update bootcode command in Pri v ileged EXEC mode to update the bootcode on one or more switches. F or each switch, the bootco de is extracted from the active image an d programmed to flash. Syntax update b ootcode [ uni t ] • unit —Unit numb er . Default Conf iguration This[...]

1118 Confi gurat ion a nd Imag e File Co mmands[...]

Deni al o f Ser vic e Co mmands 1119 57 Denial of Service Commands This chapter exp lains the following commands: • dos-cont rol firstfrag • dos-control icmp • dos-control l4port • dos-control sipdip • dos-control tcpflag • dos-control tcpfrag • ip icmp echo-reply • ip icmp error -in terval • ip unreachables •i p r e d i r e c t[...]

1120 Denia l of Ser vice Comma nds dos-co ntrol firstfrag Use the dos-contro l firstfrag command in Global Configuration mode to enable Mi nimum TCP Header S ize Denia l of S ervice pro tection. If the mode is enabled, D e nial of Service p revention is acti ve for this type of attack. If packets ingress having a T C P Header Size smaller than the [...]

Deni al o f Ser vic e Co mmands 1121 Syntax dos-control icmp [ size ] no dos-con trol icmp • size — M aximum ICMP packet size. (R ange: 0-1023). If size is unspecifi ed, the valu e is 512. Default Conf iguration Denial of Service is disabled. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example Th[...]

1122 Denia l of Ser vice Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The followi ng e xample activates L 4 P ort Denial of Serv ice protection. console(config)# dos-control l4port dos-co ntrol sipdip Use the dos-contro l sipdip command in Global Configuration mode to enable Sou[...]

Deni al o f Ser vic e Co mmands 1123 dos-co ntrol tcpflag Use the dos-co ntrol tcpflag command in Globa l Con figuration mode to enable TCP Flag Denial of Service protections. If the mo de is enab led, Denial of Service prevention is active for this type of attack. If packets ingress having TCP Flag SYN set a nd a sourc e por t less than 102 4, hav[...]

1124 Denia l of Ser vice Comma nds no dos-cont rol tcpfrag Default Conf iguration Denial of Service is di sabled. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following example acti v ates TCP F ragment Denial of Service protection. console(config)# dos-control tcpfrag ip icmp echo-re[...]

Deni al o f Ser vic e Co mmands 1125 Example console(config)#ip icmp echo-reply ip icmp error -interval Use the ip icmp error -interval command to limit the rate at which IP v4 ICMP error messages are s ent. The rate limit is configured as a tok en bucket with two configurable parameters: Burs t-size and burst-interval. T o di sable ICMP r ate limi[...]

1126 Denia l of Ser vice Comma nds ip unreacha bles Use the ip unreachab les comman d to enabl e the gen eration of ICMP Destination Unr eachable mes sages. Use the “no” form o f this comman d to prevent the generation of ICMP Destina tion Unreachable messages. Syntax ip unreachable s no ip unrea chables Default Conf iguration ICMP Destinat ion[...]

Deni al o f Ser vic e Co mmands 1127 Default Conf iguration ICMP Redirect messages are enabled by default. Command Mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config-if-vlan10)#ip redirects ipv6 icmp error -interval Use the icmp err or-in terval command to limit the rate[...]

1128 Denia l of Ser vice Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines There ar e no user gui delines for this command. Example console(config)#ipv6 icmp error-interval 2000 20 ipv6 unreachab les Use the ipv6 unreachab les command to enable the generation of ICMPv6 Destination Unr eachable mes sages. Use the “no” form o [...]

Deni al o f Ser vic e Co mmands 1129 Syntax show dos-contro l Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The following exampl e displays Denial of Servic e configuration information. console# show dos-control SIPDIP Mode.........[...]

1130 Denia l of Ser vice Comma nds[...]

Line Command s 1131 58 Line Comm ands This chapter exp lains the following commands: •e x e c - t i m e o u t •h i s t o r y •h i s t o r y s i z e •l i n e •s h o w l i n e • speed[...]

1132 Line C ommands exec-timeou t Use the exec-tim eout comman d in Line Configuration mode to set the interva l that the sys tem wai ts for user input before timeo ut. T o restore the default sett ing, use th e no form of this command. Syntax exec-tim eout minutes [ seconds ] no exe c-time out • minute s — Integer t hat specifies the numb er o[...]

Line Command s 1133 Syntax histo ry no hist ory Default Conf iguration The default value for this command is ena bled . Command Mode Lin e Interfa ce mode User Guideli nes This command has no user guidelines. Example The following example disables the command history functi on for the current terminal sess ion. console(config-line)# no history hist[...]

1134 Line C ommands Command Mode Line Configuration mode User Guidel ines This command has no user guidelines . Example The following example co nfigures the command history buffer size to 20 commands for the current terminal ses sion. console(config-line)#history size 20 line Use the line command in Global Configuratio n mode to identify a specifi[...]

Line Command s 1135 console(config-line)# show line Use the show line co mmand in User EXEC mode to display line parameters. Syntax show line [console | telnet | ssh ] • console — Cons ole te rmina l line . • teln et — Virtual terminal for remote console a ccess (T eln et). • ssh — Vi rtual terminal for secured r emote cons ole access ([...]

1136 Line C ommands Telnet configuration: Interactive timeout: 10 minutes 10 seconds History: 10 SSH configuration: Interactive timeout: 10 minutes 10 seconds History: 10 speed Use the speed command in Line Configuration mode to set the line baud rate. Us e the no form of the command to restor e th e default settings. Syntax speed { bps } no speed [...]

Manage ment A CL Comma nds 1137 59 Managemen t ACL Commands This chapter exp lains the following commands: • den y (managemen t) • management acce ss-class • management a ccess-list • perm it (management) • show manageme nt access-class • show manageme nt access-lis t[...]

1138 Managem ent A CL Command s deny (manage ment) Use the deny command in Management Access -List Configuration mode to set co nd itio ns fo r the management access list . Syntax deny [ et hernet interface-number | vlan vlan -id | port-channel number ] [ serv ice service ] [ prio rit y priority ] deny ip-source ip- add ress [ ma sk mask | prefix- [...]

Manage ment A CL Comma nds 1139 Example The following example shows how all ports ar e denied in the access-list called mlist . console(config)# management access-list mlist console(config-macal)# deny management acce ss-class Use the managemen t access-class command in Global Configuration mode to rest rict management connections. T o disable rest[...]

1140 Managem ent A CL Command s manageme nt access-list Use the managemen t access-list command in Global Configuration mode to define an access li st for management, and enter the access-l ist for configuration. Once in the access-lis t conf igura tion mode, the denie d or permitted access conditions are configur ed with the deny and permit comman[...]

Manage ment A CL Comma nds 1141 console(config-macal)# permit ethernet 1/g1 priority <1-64> console(config-macal)# permit ethernet 2/g9 priority <1-64> console(config-macal)# exit console(config)#management access-class mlist The following example shows how to configu re all the interfaces to be management interfaces e xcept for two in [...]

1142 Managem ent A CL Command s • vlan vlan-id — A val id V LAN nu mber . • port-channel number — A valid p ort cha nnel number . • ip-add ress — Sourc e IP a ddress. • mask mask — Sp ecifies the netw ork m ask of the source IP a ddress. • mask pr ef ix-length — Specifies the number of bits that comprise the source IP address pr[...]

Manage ment A CL Comma nds 1143 The following example shows how to configu re all the interfaces to be management interfaces e xcept for two in terfaces, Ethernet 1/g1 and Ethernet 2/g9 . console(config)# management access-list mlist console(config-macal)# deny ethernet 1/g1 priority <1-64> console(config-macal)# deny ethernet 2/g9 priority &[...]

1144 Managem ent A CL Command s Management access-class is enabled, using access list mlist show manage ment access-list Use the show m anagement access-list command in Pr ivileged E XEC mode to display management access-list s. Syntax show ma nagement access- list [ nam e ] • name — A valid acce ss list name. (Ra nge: 1–32 cha racters) Defau[...]

Passwor d Manag ement Co mmands 1145 60 Password Mana gement Commands This chapter exp lains the following commands: • password s aging • passwords hist ory •p a s s w o r d s l o c k - o u t • passwor ds min-leng th • show passwor ds configura tion[...]

1146 Passwor d Manage ment Comma nds passwords a ging Use the passwords a ging command in Global Configuration mode to implement expiration date on the passwords. The user is requir ed t o change the pas swords when they expire. Use the no form of this comm and to disabl e the aging functi on. Syntax passwords agin g age no passwords aging • age [...]

Passwor d Manag ement Co mmands 1147 Syntax passwords histo ry historylength no passwords history • history length — Numb er of previous passw ords to be m aintained in the history . (R ange: 0 –10.) Default Conf iguration No passwor d history is maintained. Command Mode Global Configuration mode User Guideli nes This command has no user guid[...]

1148 Passwor d Manage ment Comma nds • attemp ts — Num ber of attempts the user is allowed t o enter a correct password. (Range: 1-5) Default Conf iguration The user lockout feature is disabled. Command Mode Glo bal C onf igura tion mode . User Guidel ines This command has no user guidelines . Example The following example sets t he number of u[...]

Passwor d Manag ement Co mmands 1149 User Guideli nes This command has no user guidelines. Example The following example se t s the minimum passwor d lengt h to 12 characters. console(config)#passwords min-length 12 show passw ords configuration Use the show passwords configuration command in P rivileged EXEC mode to show the parameters for passwor[...]

1150 Passwor d Manage ment Comma nds aging : enabled aging value : 30 days User lockout : enabled User lockout attempts : 3[...]

PHY Di agno stics Co mmands 1151 61 PHY Diagnostics Commands This chapter exp lains the following commands: • show copper -ports cable-length • show copper -ports tdr • sh ow fiber-ports optical-transceiver • test copper-port tdr[...]

1152 PHY Dia gnostics Comm ands show copp er -por ts cable-length Use the show copper-ports cable-length command in P rivileged EXEC mode to display the es timated copper cable length at tached to a port. Syntax show cop per -port s cable-l ength [ interface ] • interface — A val id Ethern et port. Th e full synt ax is unit / port. Default Conf[...]

PHY Di agno stics Co mmands 1153 show copp er -ports tdr Use the show copper-ports tdr command in Privile ged EXE C mode to display the la st Time D omain Reflec tometry (TDR) tests on spe cified ports . Syntax show copper -ports tdr [ interface ] • interface — A valid Ether net port. Th e full syn tax is unit / port. Default Conf iguration Thi[...]

1154 PHY Dia gnostics Comm ands show fiber -ports optical-transceive r Use the show fiber-ports optical-transceiver command in P rivileged EXEC mode to displa y the opt ical tr ansce iver di agnos tics. Syntax show fiber - ports optical-transceiver [ interface ] • interface — A valid Ethernet port. The full syn tax is unit / port. Default Conf [...]

PHY Di agno stics Co mmands 1155 test copper -port tdr Use the test copper -port tdr command in P rivileged EXEC mode to diagnose with Time Dom ain Reflecto metry (T DR) te chnology the quality and characteristics of a copper cable attached to a po rt. Syntax test copper -po rt tdr int erf ace • interface — A valid Ether net port. Th e full syn[...]

1156 PHY Dia gnostics Comm ands[...]

Power Ov er Ethernet Comm ands 1157 62 Power Over Etherne t Commands This chapter exp lains the following commands: •p o w e r i n l i n e • pow er inline legacy •p o w e r i n l i n e p o w e r e d - d e v i c e • pow er inline priority •p o w e r i n l i n e t r a p s • power inli ne usage-thr eshold • sh ow po e-firmware-version ?[...]

1158 Power O ver Eth ernet Commands power inline The power inline command enables/disabl es the ability of th e port to deliver power . Syntax De scription power inline { aut o | never } no powe r inline • auto — Enables t h e device discovery protocol and, if found, supplies power to the d evice. • never — Disables t he device dis covery p[...]

Power Ov er Ethernet Comm ands 1159 Parameter Rang es Not applicab le Command Mode Global Configuration. Usage Guideli nes No specific guideline s. Default V alue L egacy Supp ort is di sabl ed by d efaul t. Examples console(config)# power inline legacy console(config)# no power inline legacy power in line powered- device The power inline powered-d[...]

1160 Power O ver Eth ernet Commands Examples console(config)#interface ethernet 1/g1 console(config-if-1/g1)# power inline powered-device IP-phone power inline priority The power inline pri or ity command configures the port priority level, for the de l i v e r y of p o w e r t o a n at t a c h e d de v i c e . T h e s wi t c h m a y n o t b e a b [...]

Power Ov er Ethernet Comm ands 1161 power inline traps The power inline traps command enables inline power traps. T o disable inline power traps, use the no form of this command. Syntax Descri ption power inline traps enable no po wer inli ne traps enable • enable — E nables trap s on t he specified unit. Command Mode Global Configuration. Usag[...]

1162 Power O ver Eth ernet Commands Syntax De scription power inline usa ge-threshol d < threshold > no powe r inline usag e-thresh old • thr eshold — Power thresh old at w hich trap is ge ner ated. Para mete r R ange s < thr eshol d > — 11–9 9 % Command Mode Glo bal C onfi gura tion. Usage Guideli nes No specific guideline s. D[...]

Power Ov er Ethernet Comm ands 1163 Examples console#show poe-firmware-version image version..............501_4 show powe r inline The show powe r inline command disp lays the to tal availabl e power , the total powe r co nsume d in th e syst em, and the gl oba lly se t usa ge thresho ld. Syntax Descri ption show power inline Parameter Rang es None[...]

1164 Power O ver Eth ernet Commands Power:On Nominal Power:150 watt Consumed Power:120 watts (80%) Global Configuration Usage Threshold:95% Traps:Enabled Port Configuration PortPowered DeviceStatePriorityStatusClassification [w] ----------------------------------------------------- - 1/g1IP Phone Model AAutoHighOn0.44 - 12.95 1/g2Wireless AP ModelA[...]

Power Ov er Ethernet Comm ands 1165 Examples: console#show power inline ethernet 1/g13 Port Powered Device State Priority Status Class[W] Power[mW] ----- ------------------------ ----- -------- ------- -- ------------- --------- 1/g13 auto Low On 3.84 - 6.49 5000 Overload Counter............................... 0 Short Counter.......................[...]

1166 Power O ver Eth ernet Commands[...]

RMON Commands 1167 63 RMON Commands This chapter exp lains the following commands: •r m o n a l a r m • rmon collection hist ory • rmon event • show rmon alarm • show rmon alar m-table • show rmon collection hist ory • sh ow rmon ev ents • show rmon histor y •s h o w r m o n l o g •s h o w r m o n s t a t i s t i c s[...]

1168 RMON Commands rmon alarm Use the rmon alarm comm and in Global Config uration mode to configure alarm conditions. T o re mo ve an ala rm, use the no form of this command. Also see the related show rmon al arm command. Syntax rmon alarm index variable interva l rthreshold fthreshold r event fevent [ type type ] [ startup direction ] [ owner nam[...]

RMON Commands 1169 Default Conf iguration The following parameters have the following default values: • type type — If un speci fied, the t ype is absolu te . • startup dir ection — If unspecified, the startup direction is rising-falling . Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example T[...]

1170 RMON Commands Syntax rmon collect ion history index [ owne r ownername ] [ buck ets bucket-number ] [ interval seconds ] no rmon co llect ion history inde x • index — The reques ted statistics index grou p. (Ran ge: 1–6 5535) • owner ownername — Recor ds the RMON st atistic s group owner na me. If unspecified, the nam e is an empty s[...]

RMON Commands 1171 rmon even t Use the rmon event command in Global Configuration mod e to configure an event. T o remove an event, use the no form of this command. Also see the show rmon events command. Syntax rmon event index type [ community te xt ] [ description text ] [ owner name ] no rmon event index • index — The ev ent in dex. (Range: [...]

1172 RMON Commands show rmon alarm Use the show r mon al arm command in User EXEC mode to display alar m configuration. Also see the rmon al arm command. Syntax show rmon alarm number • number — Alar m index. ( Range: 1 –6553 5) Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guidel ines This[...]

RMON Commands 1173 Falling Event: 1 Owner: CLI The following table descri bes the significant fields shown in the display : Field Descr ipti on Alarm Alarm i ndex. OID Monitored vari able OID. Last Sample Va l u e The statis tic value during th e last sampli ng period. F o r example, if the sample type i s delta, this valu e is the difference bet w[...]

1174 RMON Commands show rmon alarm-table Use the show rmon alar m-table co mmand in User EXE C mode to display the alarms summary t able. Syntax show rmon alarm- table Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guidel ines This command has no user guidelines . Example The followi ng ex ample d[...]

RMON Commands 1175 show rmon colle ction history Use the show rmon co llection history command in User EXEC mode to display the requested group of statistics. Also see the rmon collection histo ry command. Syntax show rmon collecti on history [ ethernet interface | port- channe l port- channel-number ] • interface — V alid Ethernet port. Th e f[...]

1176 RMON Commands The following table describes the significant fields shown in the display: show rmon events Use the show rmo n events command in User EXEC mode to display the RMON e vent t able. Also se e the rmon event command. Syntax show rmon events Default Conf iguration This command has no default configuration. Command Mode User EXEC mode [...]

RMON Commands 1177 The following table descri bes the significant fields shown in the display : show rmon history Use the show rmon h istory comm an d in Use r E XEC mo de to di spl ay R MO N Ethernet Statistics history . Also see the rmo n history command. Syntax show rmon histo ry index [ throughput | errors | othe r ] [ period seconds ] • inde[...]

1178 RMON Commands User Guidel ines This command has no user guidelines . Examples The following example displays RMON Ethe rnet St atis tics histor y for "throughput" on index number 1. console> show rmon history 1 throughput Sample Set: 1 Owner: CLI Interface: 1/g1 interval: 1800 Requested samples: 50 Granted samples: 50 Maximum tabl[...]

RMON Commands 1179 The following example displays RMON Ethernet Statistics history for "other" on index number 1. console> show rmon history 1 other Sample Set: 1 Owner: Me Interface: 1/g1 Interval: 1800 Requested samples: 50 Granted samples: 50 Maximum table size: 270 Time Dropped Collisions ------------------- ----------- -----------[...]

1180 RMON Commands Undersize Th e number of pac kets received du ring thi s sampl ing int erval that were less t han 64 octe ts long (e xclu ding framing bits but i ncluding FCS octets) and we re otherwise we ll formed. Oversize The nu mber of packets received during this sa mpling int erval that were long er than 1518 octet s (e xcl uding fra m in[...]

RMON Commands 1181 show rmon log Use the show rmon log command in User EXEC mode to display the RMON logging ta ble. Syntax show rmon log [ event ] • event — E vent ind ex. (Range: 1– 65535) Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guideli nes This command has no user guidelines. Examp[...]

1182 RMON Commands console> show rmon log Maximum table size: 100 (100 after reset) Event Description Time ----- ----------- -------------------- 1 Errors Jan 18 2005 23:48:19 1 Errors Jan 18 2005 23:58:17 2 High Broadcast Jan 18 2005 23:59:48 The following table describes the significant fields shown in the display: show rmon statistics Use the[...]

RMON Commands 1183 User Guideli nes This command has no user guidelines. Example The following ex ample displays RMON Ethernet Statist ics for port 1/g1. console> show rmon statistics ethernet 1/g1 Port 1/g1 Dropped: 8 Octets: 878128 Packets: 978 Broadcast: 7 Multicast: 1 CRC Align Errors: 0 Collisions: 0 Undersize Pkts: 0 Oversize Pkts: 0 Fragm[...]

1184 RMON Commands Broadcast The total number of good pack ets received and d irected to t he Broadc ast addr ess. T his does n ot inclu de Multic ast pack ets. Multicast The total number of good pack ets received and dir ected to a Multic ast address. This number does not i nclude packets directed to th e Broad cast a ddress. CRC Align Errors The [...]

RMON Commands 1185 128 to 2 55 Octet s The total number o f packets (i nclu ding bad packets) recei ved that are be tween 128 and 2 55 octets in l e ngth inclusive (ex clud ing framin g bits but inclu ding FCS octets). 256 to 5 11 Octet s The total number o f packets (i nclu ding bad packets) recei ved that are be tween 256 and 5 11 octets in l e n[...]

1186 RMON Commands[...]

Serv icea bili ty T racing P acket Commands 1187 64 Serviceability T racing Packet Commands This chapter exp lains the following commands: •d e b u g a r p •d e b u g a u t o - v o i p • debu g clear •d e b u g c o n s o l e •d e b u g d o t 1 x • debu g igmpsn ooping •d e b u g i p a c l •d e b u g i p d v m r p •d e b u g i p i [...]

1188 Servi ceab ility T raci ng Pa cket Comm ands •d e b u g r i p •d e b u g s f l o w • debug spa nning-tr ee • show d ebugging NOTE: De bug comm ands are not persi stent acr oss rese ts.[...]

Serv icea bili ty T racing P acket Commands 1189 debug ar p Use the debug arp comm and to enable tracing of ARP packets. Use the “no” form of this command to disable tracing of AR P pack ets. Syntax debug arp no de bug arp Default Conf iguration ARP pack et tracing is disabled by default. Command Mode P rivileged EXEC mode. User Guideli nes The[...]

1190 Servi ceab ility T raci ng Pa cket Comm ands Command Mode P rivileged EXEC mode. User Guidel ines There ar e no usa ge guidelines for this command. Example console#debug auto-voip debug c lear Use the debug clear command to disable all debug traces. Syntax debug clear Default Conf iguration There is no default configuration for this command. C[...]

Serv icea bili ty T racing P acket Commands 1191 appears on all login s essions for which debug console has been enabled. The configuration of this command r e mains in effect for the life of t he log in session. The effe ct of this command is not pers istent across r esets. Syntax debug cons ole Default Conf iguration Display of debug traces is di[...]

1192 Servi ceab ility T raci ng Pa cket Comm ands User Guidel ines There ar e no usa ge guidelines for this command. Example console#debug dot1x packet debug igmp snooping Use the debug igmpsnooping to enable tracing of IG MP Snooping pack e ts transmitted a nd/or received by the switch. IGMP Snoo ping should be enabled on the device and the interf[...]

Serv icea bili ty T racing P acket Commands 1193 Syntax debug ip acl acl no de bug ip acl acl • acl — The number of the IP A CL to debug. Default Conf iguration Display of I P ACL traces is disabled by default. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no usa ge guidelines for this command. Example console#debug ip acl 1 d[...]

1194 Servi ceab ility T raci ng Pa cket Comm ands Command Mode P rivileged EXEC mode. User Guidel ines There ar e no usa ge guidelines for this command. Example console#debug ip dvmrp packet debug ip igmp Use the debug ip igmp comma nd to tr ace IG MP pack et r ecepti on and transmission. The receiv e option traces only received IGMP packets and th[...]

Serv icea bili ty T racing P acket Commands 1195 debug ip mcache Use the debug ip mcache co mmand for tracing MD A T A packet reception and transmissio n. The receive op tion traces only received data packets and the transm it option traces only t ransmitted da ta packets. When neither keywor d is used in the command, then all data packet traces ar[...]

1196 Servi ceab ility T raci ng Pa cket Comm ands Syntax debug ip pimdm packet [re ceive | transmit] no debug ip pimdm packet [receive | transmit] Default Conf iguration Display o f PIMDM traces is disabled by def ault. Command Mode P rivileged EXEC mode. User Guidel ines There ar e no usa ge guidelines for this command. Example console#debug ip pi[...]

Serv icea bili ty T racing P acket Commands 1197 Command Mode P rivileged EXEC mode. User Guideli nes There ar e no usa ge guidelines for this command. Example console#debug ip pimsm packet debug ip vrrp Use the debug ip vrrp command to enable VRRP debug protocol messages. Use the “no” form of this command to disable VRRP debug prot ocol messag[...]

1198 Servi ceab ility T raci ng Pa cket Comm ands debug ipv6 mcache Use the debug ipv6 m cache command to trace MD A T Av6 pack et reception and transmissi o n. The rec eive optio n traces only received data packets and the tra nsmit option traces only transm itted da ta packets. When neit her keywor d is used in the command, then all data packet t[...]

Serv icea bili ty T racing P acket Commands 1199 Syntax debug ipv6 mld packet [ receive | transm it ] no de bug ip v6 mld pa cket [ receive | transmit ] Default Conf iguration Display of M L D traces is disa bled by default. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no usa ge guidelines for this command. Example console#debug [...]

1200 Servi ceab ility T raci ng Pa cket Comm ands Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug ipv6 pimdm packet debug ipv6 pimsm Use the debug ipv6 pimsm command to trace PIMSMv 6 packet reception and transmissi o n. The rec eive optio n traces only received PIMS Mv6 [...]

Serv icea bili ty T racing P acket Commands 1201 debug isdp Use the debug isdp command to trace ISDP packet r eception and transmissio n. The receive op tion traces only received ISD P packets and the transm it opti on traces only transmitte d ISDP p ackets. When neither keyword is used in the command, then all ISDP packet traces are dumped. V ital[...]

1202 Servi ceab ility T raci ng Pa cket Comm ands Default Conf iguration Display o f LACP t races is disable d by default. Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug lacp packet debug mldsno oping Use the debug m ldsnooping command to trace MLD snooping packet recep [...]

Serv icea bili ty T racing P acket Commands 1203 Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug mldsnooping debug osp f Use the debug ospf comma nd to enable traci ng of OSPF packets received and transmitted by the swit ch. Use the “no” form of this command to disable tracin g of OSPF packets. Syntax d[...]

1204 Servi ceab ility T raci ng Pa cket Comm ands Syntax debug ospfv3 packet no debug ospfv3 packe t Default Conf iguration Display of OSPFv3 traces is disabled b y default. Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug ospfv3 packet debug p ing Use the debug ping comma[...]

Serv icea bili ty T racing P acket Commands 1205 Usage Guideli nes There ar e no usa ge guidelines for this command. Example The following ex ample displays. console#debug ping packet debug r ip Use the debug rip comma nd to enable t racin g of RI P requests and respons es. Use the “no ” form of th is comm and to disa ble traci ng of RIP reques[...]

1206 Servi ceab ility T raci ng Pa cket Comm ands Syntax debug sflow packet no debug sflow packet Default Conf iguration Display o f sFlow trace s is disabled by defaul t. Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug sflow packet debug spa nning-tree Use the d ebug spa[...]

Serv icea bili ty T racing P acket Commands 1207 Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug spanning-tree bpdu show debu gging Use the show d ebugg ing command to display pack et tracing configurations. Syntax show debugging no show de bugging Default Conf iguration [...]

1208 Servi ceab ility T raci ng Pa cket Comm ands[...]

sFlow Commands 1209 65 sFlow Comma nds This chapter exp lains the following commands: • sflow destinat ion • sflo w pollin g • sflow poll ing (Interf ace M ode) •s f l o w s a m p l i n g • sflow sampling (Interface M ode) •s h o w s f l o w a g e n t • show sflow dest ination • sh ow sflo w poll ing • show sflow sa mpling[...]

1210 sFlow Command s sflow destination Use the sflow destination co mmand to configure the sF low collector parameters (owner string, receiver ti meout, m axdatagram, ip address and port). Use the “no” form of this com mand to set r eceiver parameters to the default or remove a r eceiver . Syntax sflow rcvr_index destinatio n { ip-addres s [ po[...]

sFlow Commands 1211 Default Conf iguration No receivers ar e configured by default. The default IP addr ess is 0.0.0.0 The default maximum datagram size is 1 400. The default owner string is the empty string. The def ault rece iver timeou t is 0. The default port is 6343. Command Mode Global Configuration mode. User Guideli nes This command has no [...]

1212 sFlow Command s • interfaces — The list of interfaces to poll. • poll-interval — The s Flow instance pollin g interv al. A poll int erval of 0 disables cou nter sampling. A va lue of n means once in n second s a counter samp le is generat ed. (R ange: 0 –8640 0). Default Conf iguration There ar e no p ollers configured by default. Th[...]

sFlow Commands 1213 Default Conf iguration There ar e no p ollers configured by default. The def ault poll i nterval is 0. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example console(config-if-1/g2)#sflow 1 polling 6055 sflow sampling Use the sflow samplin g command to enable a new sflo[...]

1214 sFlow Command s Default Conf iguration There ar e no sam plers configured by default. The default sampling rate is 0. The default maximum header size is 1 28. Command Mode Glo bal C onf igura tion mode . User Guidel ines This command has no user guidelines . Example console(config)#sflow 1 sampling ethernet 1/g2 1500 50 sflow sampling (Interfa[...]

sFlow Commands 1215 Default Conf iguration There ar e no samplers configured by default. The default sampling rate is 0. The default maximum header size is 12 8. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example console(config-if-1/g15)#sflow 1 sampler 1500 50 show sflow ag ent Use th[...]

1216 sFlow Command s Example console#show sflow agent sFlow Version.................................. 1.3;Dell Corp.;10.23.18.28 IP Address..................................... 0.0.0.0 show sflow destination Use the show sflow destination command to display all the configuration information r e lated to the sFlow receivers. Syntax show sflow rcvr -[...]

sFlow Commands 1217 Example console# show sflow 2 destination Receiver Owner Time out Max Datagram Port IP Address Index String Size -------- -------- ---------- ------------ ----- ------------------ 2 0 1400 6343 0.0.0.0 show sflow polling Use the show sflow polling command to disp lay the sFlow polling instances created on the switch. Syntax show[...]

1218 sFlow Command s Example console# show sflow 1 polling Poller Receiver Poller Data Source Index Interval ----------- ------- ------- 1/g1 1 0 show sflow sampling Use the show sflow sampling command to display the sFlow samp ling instances cre ated o n the switch. Syntax show sflow rcvr -index sampling [ eth ernet interfaces ] • rcvr-inde x ?[...]

sFlow Commands 1219 Example console# #show sflow 1 sampling Sampler Receiver Packet Max Header Data Source Index Sampling Rate Size ----------- ------- ------------- ---------- 1/g1 1 0 128 Sampler Data Source The sFlowDataSource (unit/port) for this sFlow sampler . This agent will support Physical ports only . Receiver I ndex The sFlow Receiv er c[...]

1220 sFlow Command s[...]

SNMP Co mm ands 1221 66 SNMP Co mmands This chapter exp lains the following commands: •s h o w s n m p • show snmp engi neID • sh ow sn mp filt ers •s h o w s n m p g r o u p s • show snmp users •s h o w s n m p v i e w s • show trapf lags • snmp-serv er community • sn mp-server comm unity-group • snmp-serv er contact • sn mp-[...]

1222 SNMP Command s show snmp Use the show snmp command in P ri vileged EXEC mode to display the SNMP communications status. Syntax show snmp Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example displays the SNMP comm[...]

SNMP Co mm ands 1223 Target Address Type Community Version UDP Filter TO Retries Port name Sec -------------- ------ --------- ------- ---- ------ --- ----- 192.122.173.42 Trap public =2 162 filt1 15 3 192.122.173.42 Inform public 2 162 filt2 15 3 Version 3 notifications Target Address Type Username Security UDP Filter TO Retries Level Port name Se[...]

1224 SNMP Command s show snmp filters Use the show snmp filters command in Privileged EXEC mode to display the configuration of filters. Syntax show snmp filters filtername • filternam e — Sp ecifies the nam e of the filter . (R ange: 1-30 ) Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode Use[...]

SNMP Co mm ands 1225 Name OID Tree Type ------------------- --------------------------------- - user-filter1 1.3.6.1.2.1.1 Included user-filter1 1.3.6.1.2.1.1.7 Excluded show snmp gr oups Use the show snmp groups command in P rivileged EXEC mode to display the configuration of groups. Syntax show snmp group s [ groupname ] • groupname — Sp ecif[...]

1226 SNMP Command s managers-group V3 NoAuth-priv Default "" "" console# show snmp groups user-group Name Security Views Model Level Read Write Notify ----------------- ------ ------ -------- -------- ------- user-group V3 Auth-Priv Default "" "" The following table contains field descriptions. show snmp use [...]

SNMP Co mm ands 1227 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example displays the configuration of users with the user name specified. Console # show snmp users Name Group Name Auth Priv Meth Meth Remote Engine ID[...]

1228 SNMP Command s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following examples display t he configuration of views with and without a view name spec ified. console# show snmp views Name OID Tree Type ----------- ----------[...]

SNMP Co mm ands 1229 show trapfla gs Use the show tr apflags c ommand to show the status of the configu rable SNMP traps . Syntax show t rapflags [os p f | ospfv3] osp f | ospfv3 — Us e this param eter to show detai led OSPF trap stat us information Default Conf iguration There is no default configuration for this command. Command Mode P rivilege[...]

1230 SNMP Command s console#show trapflags ospf OSPF Traps: errors: all.......................... ....Disabled authentication failure....... ....Enabled bad packet................... ....Enabled config error................. ....Enabled virt authentication failure . ....Disabled virt bad packet.............. ....Disabled virt config error..........[...]

SNMP Co mm ands 1231 Syntax snmp-ser ver comm unity community - string { ro | rw | su } [ ipaddress ipaddress ] [ view viewn ame ] no snmp -serv er commu nity community-string • community -strin g — P ermits access to the SNMP protocol. (Ran ge: 1-20 characte rs) • ro — Indica tes read- only access • rw — Indicates r ead-write access. ?[...]

1232 SNMP Command s Example The following example co nfigures community access string publi c to per mit administrati ve access to SNMP at an administrative statio n with IP addr e ss 192.168.1 .20. console(config)# snmp-server community public su ipaddress 192.168.1.20 snmp-server community-group Use the snmp-ser v er community-g roup command in G[...]

SNMP Co mm ands 1233 Example The following example maps a commu nity access string dell_community to group dell_group. console(config)# snmp-server community-group dell_community dell_group 192.168.29.1 snmp-ser ver contact Use the snmp-se r ver cont act command in Global Configuration mode to set up a system contact (sysContact) st ring. T o remov[...]

1234 SNMP Command s snmp-server enable traps Use the snmp-ser v er ena ble trap s command to enabl e SNMP traps globally or t o e n a b l e s p e c i f i c S N M P t r a p s . U s e t h e “ n o ” f o r m o f t h i s c o m m a n d t o d i s a b l e S N M P t r a p s . S ee G r a n u l ar O S P F v 2 / v 3 T r a p s f o r m or e d et a i l a b ou[...]

SNMP Co mm ands 1235 Command Mode Global Configuration mode. User Guideli nes There ar e no user gui delines for this command. Example The following example displays the opti ons for the snmp-ser ver enabl e traps command. console(config)#snmp-server enable traps ? <cr> Press enter to execute the command. acl acl all Enable/Disable all Traps.[...]

1236 SNMP Command s no snmp -server en able tra ps authen tication Default Conf iguration T ra ps are enabled by default. Command Mode Global Configuration mode User Guidel ines This command has no user guidelines . Example The follow ing example displays the comm and to enable authentica tion faile d SNMP trap s. console(config)# snmp-server enabl[...]

SNMP Co mm ands 1237 Default Conf iguration The engi neID is not configured. Command Mode Global Configuration mode User Guideli nes If you want to use SNMPv3, you need to specify an engine ID for the device. Y ou can specify your own ID or use a defa ult string that is generated using the MAC addr ess of the device. If the SNMPv3 engine ID is dele[...]

1238 SNMP Command s Syntax snmp-ser ver filter filter -name oi d-tree { included | excluded } no snmp-ser ver fi lter filter -name [ oid-tree ] • filter -n ame — Specifies th e label for the filter record that is being updated or created. The name is used to reference the recor d. (Range: 1-30 characte rs.) • oid-tree — Sp ecifies the objec[...]

SNMP Co mm ands 1239 console(config)# snmp-server filter user-filter ifEntry.*.1 included snmp-ser ver group Use the snmp-se rv er group co mma nd in Gl obal Co nfig ura tio n m ode to configure a new Simple Mana g ement P rot ocol (SNMP) group or a table that maps SNMP users t o SNMP view s. T o remove a specified SNMP group, use the no form of th[...]

1240 SNMP Command s • writeview — A str ing that is the name of t he view that enables t he user to enter data and configu re the contents of the agent. If unspecified, nothin g is defined for the w rite view . (Range: 1-30 ch aracters.) Default Conf iguration No group entry exists. There will be some default groups for Read/W rite/Super users.[...]

SNMP Co mm ands 1241 These commands are updated to allow space(s) in host name when specified in double quotes. Example #snmp-server host “host name” #snmp-server v3-host “host name” Syntax snmp-ser ver host { ip-addres s | hostname } community { traps { v1 | v2 } | informs [ time out seconds ] [ retries re t r i e s ]} [ udpport port ] [ f[...]

1242 SNMP Command s Command Mode Global Configuration mode User Guidel ines There ar e no user gui delines for this command. Example The following e xample enables SN MP traps for host 192.16.12.143 . console(config)# snmp-server host 192.16.12.143 Dell_powerconnect traps v2 snmp-server location Use the snmp-se r ver locat ion command in Global Con[...]

SNMP Co mm ands 1243 Example The f ollowin g exam ple sets the devi ce locati on as "N ew_Y ork". console(config)# snmp-server location New_York snmp-serve r user Use the snmp-se rv er user command in Global Configuration mode to configure a new SNMP V ersion 3 us er . T o delete a user , use the no f o r m o f t h i s command. Syntax snm[...]

1244 SNMP Command s • priv-des — The CB C-DES Symme tric Encryption privacy level. Enter a password. • priv-des-key — T he CBC-DE S Symmetric Encryption privacy level. The user should ente r a pregenerated MD5 or SHA key dependi ng on the authen tication le vel sel e cted. • des-k ey — The pregenerated D ES encryption key . L engt h is [...]

SNMP Co mm ands 1245 • view -name — Spe cifies the label for the view record that is being created or updated. Th e nam e is used to reference the recor d. (Ra nge: 1-30 characte rs.) • oid-tree — S pecifies the obje ct identifier of the AS N.1 subt ree to be included or excluded from the view . T o identify th e subtree, specify a text str[...]

1246 SNMP Command s snmp-server v3-host Use the snmp-ser v er v3-host command in Global Configuration mode to specify the recipient of Simple Network Manageme nt Protocol V e rsion 3 notifications. T o remove the specified host, use the no form of this command. Syntax snmp-ser ver v3-host { ip- ad dress | hostname } username { tra ps | info rm s } [...]

SNMP Co mm ands 1247 Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The followi ng e xampl e ident ifies an SNMPv 3 host . console(config)# snmp-server v3-host 192.168.0.20[...]

1248 SNMP Command s[...]

SSH Commands 1249 67 SSH Commands This chapter exp lains the following commands: •c r y p t o k e y g e n e r a t e d s a • cryp to key generate rsa • cryp to key pubkey-chain ssh • ip ssh port • ip ssh pubkey-auth •i p s s h s e r v e r •k e y - s t r i n g • show cr ypto k ey mypubk ey • show cr ypto k ey pubk ey-cha in ssh •s[...]

1250 SSH Commands crypto key ge nerate dsa Use the crypto key generate dsa command in Global Configuration mode to generate DSA key pairs for you r switch. A k ey pair is on e public DS A key and one pri vate DSA k ey . Syntax crypto key gene rate dsa Default Conf iguration DSA k ey pairs do not e xist. Command Mode Glo bal C onf igura tion mode Us[...]

SSH Commands 1251 Default Conf iguration RSA k ey pai rs do not exist . Command Mode Global Configuration mode User Guideli nes RSA k eys ar e gener ated in pa irs: one pub lic RSA k ey and o ne private RSA key . If your switch alr eady has RSA k eys when you is sue this command, you ar e warned and prompt ed to replace the existing keys. The k ey [...]

1252 SSH Commands Example The following example enters t he SSH P ublic Key-chai n configurati on mode. console#configure console(config)#crypto key pubkey-chain ssh console(config-pubkey-chain)#user-key bob rsa console(config-pubkey-key)#key-String AAAAB3NzaC1yc2EAAAADAQABAAABAQCvTnRwPWlAl4kpqIw9GBRon ZQZxjHKcqKL6rMlQ+ZNXfZSkvHG+QusIZ/76ILmFT34v7u[...]

SSH Commands 1253 User Guideli nes This command has no user guidelines. Example The following example specifies the port to be used by the SSH server as 8080. console(config)#ip ssh port 8080 ip ssh pubkey-a uth Use the ip ssh pubkey-auth command in Global Co nfiguration mode to enable public key authentication for in coming SSH sessions. T o disa [...]

1254 SSH Commands ip ssh server Use the ip ssh ser ver command in Global Configur ation mode to e nable the switch to be configur ed from SSH. T o disable this funct ion, use the no form of this command. Syntax ip ssh ser ver no ip ssh se rver Default Conf iguration This command is ena bled by d efau lt. Command Mode Glo bal C onf igura tion mode U[...]

SSH Commands 1255 Default Conf iguration By default, th e key-string is emp ty . Command Mode SSH P ubl ic K e y Configuration mode User Guideli nes Use the key-st ring row command to specify which SSH public k ey you will configure interactively ne xt. T o complete the interact ive command, you must enter key-stri ng row with no chara cters. Examp[...]

1256 SSH Commands console(config)#crypto key pubkey-chain ssh console(config-pubkey-chain)#user-key bob rsa console(config-pubkey-key)#key-string row AAAAB3Nza console(config-pubkey-key)#key-string row C1yc2 show crypto ke y mypubkey Use the show crypto key m ypubkey command in P rivileged EXEC mode t o displ ay the SSH publ ic keys of th e swit ch[...]

SSH Commands 1257 dxUXEAiDHXcWHVr0R/ak1HDQitBzeEv1vVEToEn5ddLmRhtIgRdKU JHgBHJV R2VaSN/WC0IK53j9re4B11AE+O3qAxwJs0KD7cTkvF9I+YdiXeOM8 VE4skkw AiyLDNVWXgNQ6iat8+8Mjth+PIo5t3HykYUCkD8B1v93nzi/sr4hH HJCdx7w wRW3QtgXaGwYt2rdlr3x8ViAF6B7AKYd8xGVVjyJTD6TjrCRRwQHg B/BHsFr z/Rl1SYa0vFjel/7/0qaIDSHfHqWhajYkMa4xPOtIye7oqzAOm1b7 6l28uTB luBEoLQ+PKOKMiK8sQ== F[...]

1258 SSH Commands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following exampl e displays all SSH public k eys stor e d on the switch. console#show crypto key pubkey-chain ssh Username Fingerprint -------- ------------------------------------------- --------- bob 9A:CC:01:C5:78:39:27:86:79:C[...]

SSH Commands 1259 show ip ssh Use the show ip ssh command in Pri vi leged EXEC mode to display the SSH server configuration. Syntax show ip ssh Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example displ a ys the SSH se[...]

1260 SSH Commands user -key Use the user-k e y command in SSH Publi c Key Chain Configuration mode to specify which SSH public key you are configuring manually . T o remove a SSH public key , use the no f orm o f t h is com m and. Syntax user -key username { rsa | dsa } no user - key username • usern ame — Sp ecifies the remote S SH clien t use[...]

Syslog Comma nds 1261 68 Syslog Commands This chapter exp lains the following commands: • clea r logging • clea r logging file •d e s c r i p t i o n • level • logging • logging bu ffered • logging cons ole • logging fa cility • logging fil e • logging on • logging snm p • logging web-session •p o r t • sho w logging •[...]

1262 Syslog C ommand s clear lo gging Use the clear logging command in Priv ileg ed EXEC mode to clear messages from the internal logging buffer . Syntax clear logging Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The followi ng ex [...]

Syslog Comma nds 1263 Command Mode P rivileged EXEC User Guideli nes This command has no user guidelines. Example The following example shows the clear logging fil e command and confirmation response. console#clear logging file Clear logging file [y/n] description Use the description command in Logging mode t o descri be the syslog serve r . Syntax[...]

1264 Syslog C ommand s level Use the level command in Logging mode to specify the importance level of syslog me ssages. T o r eset to t he default value, us e the no form of t he command. Syntax level level no level • level — T he level nu mber for syslog messages. (Range: emergency , alert, crit ica l, e rr or , war ning , no ti ce, i nfo, deb[...]

Syslog Comma nds 1265 Default Conf iguration Disabl ed Command Mode Global Configuration User Guideli nes T o see the CLI commands by using the sh ow loggi ng command. Example console(config)#logging cli-command <189> JAN 13 05:20:27 192.168.2.1-1 UNKN[248900192]: cmd_logger_api.c(87) 2113 %% CLI:EIA- 232:----:vlan 3 <189> JAN 13 05:20:[...]

1266 Syslog C ommand s no logging { ip-address | hostname } • ip-add ress — IP addr ess of the host to be used as a sy slog server . • hostna me — Hostname of the host to be used as a syslog server . (Range: 1- 158 ch arac ters) Default Conf iguration No syslog serv ers defined. Command Mode Glo bal C onf igura tion mode User Guidel ines Up[...]

Syslog Comma nds 1267 Command Mode Global Configuration mode User Guideli nes All the syslog messa ges are logged to the internal buffe r . This command limits the commands displ ayed to the user . Example The following e xample limits sy slog messages display ed from an internal buffer based on t he severity leve l "error ." console(conf[...]

1268 Syslog C ommand s Example The following example limits messages logged to th e console based on severity level "alert". console(config)#logging console alert logging facility Use the logging fa cility command in Global Configuration mode to set the facility for logging messages. T o reset to the default value, use the no form of the [...]

Syslog Comma nds 1269 Syntax logging file level no logging fi le • level — Lim its the loggin g of mess ages to the b uffer to a specified level. (Range: emergency , alert, critical, error , warning, notice, info , debug) Default Conf iguration The default value for level is error . Command Mode Global Configuration mode User Guideli nes This c[...]

1270 Syslog C ommand s Command Mode Glo bal C onf igura tion mode User Guidel ines The logging pro cess controls the dist ribution of logging me ssages to the various dest inations, such as the log ging buffer , logging fil e, or syslog server . Log ging on and off for these destinations can be individually configur ed using the logging b uffered ,[...]

Syslog Comma nds 1271 logging we b-session Use the log gin g w eb -ses sio n command in Global Configuration mode to enable web session logging. T o disable, use the no form of this command. Syntax logging we b-session no logging web-session Default Conf iguration Disabl ed. Command Mode Global Configuration mode User Guideli nes T o see web se ssi[...]

1272 Syslog C ommand s no port • port — The port number for syslog messages. (Ran ge: 1-65535) Default Conf iguration The default port number is 514. Command Mode Log gi ng m od e User Guidel ines After entering the view corresponding to a specific syslog server , the command can be executed to set the port number for th e server . Example The [...]

Syslog Comma nds 1273 Example The following example displays the state of logging and the syslog messages stored in the intern al buffer . console#show logging Logging is enabled. Console logging: level debugging. console Mes sages: 0 Dropped. Buffer logging: level debugging. Buffer Messag es: 11 Logged, 200 Max. File logging: level notifications. [...]

1274 Syslog C ommand s 11-Aug-2005 15:41:43: %LINK-3-UPDOWN: Inte rface Ethernet g1, changed state to up 11-Aug-2005 15:41:43: %LINK-3-UPDOWN: Inte rface Ethernet g1, changed state to up 11-Aug-2005 15:41:43: %LINK-3-UPDOWN: Inte rface Ethernet g2, changed state to up 11-Aug-2005 15:41:43: %LINK-3-UPDOWN: Inte rface Ethernet g3, changed state to up[...]

Syslog Comma nds 1275 User Guideli nes This command has no user guidelines. Example The following example displays the state of logging and syslog mes sages sor te d in th e lo ggi ng fi le. console#show logging file Persistent Logging : enabled Persistent Log Count : 1 <186> JAN 01 00:00:05 0.0.0.0-1 UNKN[268434928]: bootos.c(382) 3 %% Event[...]

1276 Syslog C ommand s IP address Port Severity Facility Description ------------------------------------------- -------------- 192.180.2.275 14 Info local7 7 192.180.2.285 14 Warning local7 7[...]

System Ma nageme nt Comman ds 1277 69 System Ma nageme nt Co mmands This chapter exp lains the following commands: •a s s e t - t a g •b a n n e r m o t d • banner mot d acknowl edge • clear checkp oint statis tics •c u t - t h r o u g h m o d e •h o s t n a m e • initiate fai lover •m e m b e r • mov em anag em ent • no standby[...]