Enterasys Enterasys Matrix DFE-Gold Series manual
- Read online or download the manual
- 944 pages
- 7.72 mb
Go to page of
Similar user manuals
-
Switch
Enterasys Enterasys Diamond Distributed Forwarding Engine 7KR4297-02
64 pages 1.75 mb -
Switch
Enterasys 2H252-25R
64 pages 1.26 mb -
Switch
Enterasys RBT-8200
50 pages 0.92 mb -
Switch
Enterasys IRM2
88 pages 0.85 mb -
Switch
Enterasys Enterasys Gold Distributed Forwarding Engine 4H4202-72
90 pages 2.55 mb -
Switch
Enterasys 6000
231 pages 2.24 mb -
Switch
Enterasys 6E2xx
430 pages 4.7 mb -
Switch
Enterasys VH-8G-L3
41 pages 1.17 mb
A good user manual
The rules should oblige the seller to give the purchaser an operating instrucion of Enterasys Enterasys Matrix DFE-Gold Series, along with an item. The lack of an instruction or false information given to customer shall constitute grounds to apply for a complaint because of nonconformity of goods with the contract. In accordance with the law, a customer can receive an instruction in non-paper form; lately graphic and electronic forms of the manuals, as well as instructional videos have been majorly used. A necessary precondition for this is the unmistakable, legible character of an instruction.
What is an instruction?
The term originates from the Latin word „instructio”, which means organizing. Therefore, in an instruction of Enterasys Enterasys Matrix DFE-Gold Series one could find a process description. An instruction's purpose is to teach, to ease the start-up and an item's use or performance of certain activities. An instruction is a compilation of information about an item/a service, it is a clue.
Unfortunately, only a few customers devote their time to read an instruction of Enterasys Enterasys Matrix DFE-Gold Series. A good user manual introduces us to a number of additional functionalities of the purchased item, and also helps us to avoid the formation of most of the defects.
What should a perfect user manual contain?
First and foremost, an user manual of Enterasys Enterasys Matrix DFE-Gold Series should contain:
- informations concerning technical data of Enterasys Enterasys Matrix DFE-Gold Series
- name of the manufacturer and a year of construction of the Enterasys Enterasys Matrix DFE-Gold Series item
- rules of operation, control and maintenance of the Enterasys Enterasys Matrix DFE-Gold Series item
- safety signs and mark certificates which confirm compatibility with appropriate standards
Why don't we read the manuals?
Usually it results from the lack of time and certainty about functionalities of purchased items. Unfortunately, networking and start-up of Enterasys Enterasys Matrix DFE-Gold Series alone are not enough. An instruction contains a number of clues concerning respective functionalities, safety rules, maintenance methods (what means should be used), eventual defects of Enterasys Enterasys Matrix DFE-Gold Series, and methods of problem resolution. Eventually, when one still can't find the answer to his problems, he will be directed to the Enterasys service. Lately animated manuals and instructional videos are quite popular among customers. These kinds of user manuals are effective; they assure that a customer will familiarize himself with the whole material, and won't skip complicated, technical information of Enterasys Enterasys Matrix DFE-Gold Series.
Why one should read the manuals?
It is mostly in the manuals where we will find the details concerning construction and possibility of the Enterasys Enterasys Matrix DFE-Gold Series item, and its use of respective accessory, as well as information concerning all the functions and facilities.
After a successful purchase of an item one should find a moment and get to know with every part of an instruction. Currently the manuals are carefully prearranged and translated, so they could be fully understood by its users. The manuals will serve as an informational aid.
Table of contents for the manual
-
Page 1
P/N 9033933-15 Enterasys Matrix ® DFE-Gold Configuration Guide Firmware V ersion 6.11.xx[...]
-
Page 2
[...]
-
Page 3
i Notice Enterasys Networks reserves the right to make changes in specifications and other information contained in this document and its web si te without prior notice. The reader should in all cases co nsult Enterasys Netw orks [...]
-
Page 4
ii Enterasys Networks, Inc. Software Li cense Agreement This document is an agreement (“ Agreement”) betw een Yo u , the end user , and Enterasys Networks, Inc. on behalf of itself and its Affiliates (“Enterasys”) that sets forth your [...]
-
Page 5
iii 5. PROTECTION AND SECURITY .I n the performance of this Agreement or in contemplation thereof, You and your employees and agents may have acce ss to private or confidential information owned or cont rolled by Enterasys rel[...]
-
Page 6
iv 9. UNITED STATES GOVERNMENT RESTRICTED RIGHTS .T h e Licensed Mate rials (i) were de veloped solely at private expense; (ii) contains “restricted computer software” submitted with restri cted rights in accordance with section 52 .227 ?[...]
-
Page 7
v Contents About This Guide Using This Guide ................ ............. ................ ............. ................ ............. ................ ....... ......................... ...xxxiii Structure of This Guide ....... ................ ............. ................ ................ ............. ................ ...... ............. ..[...]
-
Page 8
vi clear ip gratuitous-arp ................ ............. ................ ................ ............. ................ ............. . ............... 2-33 show system ....... ................. ............. ............ ............. ................. ............ ............. ............ .............. ... 2-34 show system hardware ........[...]
-
Page 9
vii set inlinepower psetra p ................. ............. ............. ................ ............. ............. ............. ...... ............. 2-69 clear inlinepower psetrap ........................ ............. ................ ............. ................ ............. ....... ............ 2-69 show port inlinepower ...... ........[...]
-
Page 10
viii Purpose ........... ............. ............. ............. ............ ................. ............. ............ ............. .. ..................... .... 2-101 Commands ............... ............. ................. ............ ............. ................. ............ ............. ...... ..................... 2 -101 show route[...]
-
Page 11
ix clear lldp port trap ......... ............. ............. ................ ............. ................ ............. ............. . .................. 3-35 clear lldp port med-trap ..................... ............ ................. ............. ............ ................. ........... ........... ... 3-35 clear lldp port location-info [...]
-
Page 12
x Purpose ........... ............. ............. ............. ............ ................. ............. ............ ............. .. ..................... ...... 4-27 Commands ............... ............. ................. ............ ............. ................. ............ ............. ...... ....................... 4-27 show port ju[...]
-
Page 13
xi show lacp ... ............. ................ ............. ............. ............. ................ ............. ............. ..... .................... 4-58 set lacp ................... ............. ............. ............ ................. ............. ............ ................. ... ................... ... 4-59 clear lacp state [...]
-
Page 14
xii show snmp context ....... ................ ............. ............. ................ ............. ................ ............. ... ............. 5-23 set snmp view ............ ................ ............. ................ ............. ............. ................ ............. .. ................. 5-24 clear snmp view ............ .[...]
-
Page 15
xiii show spantree vlanlist . ........ ............. ............ ................. ............. ............ ............. ................ .......... ... 6-16 show spantree mstcfgid ....... ............. ................ ............. ............. ............ ............. ................ .. ........... 6-17 set spantree mstcfgid ............[...]
-
Page 16
xiv clear spantree newroottrapenable .......... ............. ................ ............. ................ ................ ........... ..... 6-45 clear spantree default ...... ................. ............ ................. ............. ............ ................. ........... ........... ... 6-46 show spantree debug ................ ......[...]
-
Page 17
xv show spantree nonforwardingreas on ........ ............. ............. ................ ............. ............. ............. ..... .6 - 7 7 Chapter 7: 802.1Q VLAN Configuration VLAN Configuration Summary ........................... ............. ............. ................ ............. ............. ..... ................. .. 7-1 Port [...]
-
Page 18
xvi Purpose ........... ............. ............. ............. ............ ................. ............. ............ ............. .. ..................... ........ 8-2 Commands ............... ............. ................. ............ ............. ................. ............ ............. ...... ....................... .. 8-2 show po[...]
-
Page 19
xvii show route-map ............ ............. ............. ................ ............. ............. ................ ............. .... ............... 8-42 route-map ............... ............. ............. ................ ............. ............. ................ ............. ...... ................ ... 8-43 match ip address .......[...]
-
Page 20
xviii set logging application ..... ............. ................ ............. ................. ............ ............. ............... ..... ......... 10-9 clear logging application ...... ................ ............. ............. ................ ............. ................ ......... .......... . 10-11 show logging local .............[...]
-
Page 21
xix set rmon matrix properties ...... ................ ............. ................ ............. ................ ............. ........ ......... 11-34 set rmon matrix status ............ ................ ............. ................ ................ ............. ................ ... ........... 11-34 clear rmon matrix ............. ........[...]
-
Page 22
xx Chapter 14: Node Alias Configuration Configuring Node Aliases ... ... ...... ................. ............ ............. ............. ................ ............. ...... .................... ... 14-1 Purpose ........... ............. ............. ............. ............ ................. ............. ............ ............. .. ......[...]
-
Page 23
xxi Reviewing and Configuring the ARP Table ........... ............. ................ ............. ............. ............. ........ ......... 16-12 Purpose ........... ............. ............. ............. ............ ................. ............. ............ ............. .. ..................... .... 16-12 Commands ............... .[...]
-
Page 24
xxii Chapter 18: Network Address Tran slation (NAT) Configuration Configuring Network Address Transl ation (NAT) ...................... ............. ................ ............. ................ . ........ 18-1 NAT Configuration Task List and C ommands .............. ................ ................ ................. ............ ........... ..[...]
-
Page 25
xxiii show ip slb conns ............ ............. ................ ............. ................. ............ ............. .............. ......... .... 19-29 show ip slb stats ........ ................ ............. ............. ................ ............. ............. ................ .. ............... 19-30 show ip slb sticky ....... .[...]
-
Page 26
xxiv accept-lifetime ........ ............. ............. ................ ............. ............. ............ ................. ....... ............... . 21-10 send-lifetime ....... ............. ............. ................ ............. ............. ................ ............. .......... ................ . 21-11 ip rip authentication [...]
-
Page 27
xxv Configuring IRDP ... ................ ............. ................ ............. ............. ................ ............. ....... ............... ........... 21-55 Purpose ........... ............. ............. ............. ............ ................. ............. ............ ............. .. ..................... .... 21-55 Comman[...]
-
Page 28
xxvi cache ............... ............. ............. ................ ............. ............. ................ ............. .......... ................ ...... 23-5 faildetect type ......................... ................ ............. ............. ................ ............. ............. ... ................... 23-5 faildetect .......[...]
-
Page 29
xxvii show access-lists ....................... ............. ............. ................ ............. ................ ............. ... .............. 24-15 access-list (standard) ................ ................ ............. ............. ................ ............. ................ .. ............ 24-16 access-list (extended) .........[...]
-
Page 30
xxviii set pwa enhancedmode ...................... ............. ................ ............. ................ ............. .............. ...... 25-20 set pwa guestname ...................... ............. ............. ................ ............. ................ ............. .... .......... 25-21 clear pwa guestname ................... ..[...]
-
Page 31
xxix set authentication login .............. ............. ................ ............. ................ ............. ................ .. ............ 2 5-51 clear authentication login ........... ................ ............. ................ ............. ................ ............. ... ........... 25-52 Configuring RADIUS .... ...........[...]
-
Page 32
xxx clear multiauth mode .............. ............. ................ ............. ................ ................ ............. ...... ............. 27-3 show multiauth ..................... ............. ................ ............. ............. ............ ................. ........ .............. ... 27-3 show multiauth counters .......[...]
-
Page 33
xxxi 4-3 show port advertise Output Details ............... ................. ............. ................ ............. ............ .... ......... 4-34 4-4 show port flow cont rol Output Details .................. ............. ............. ................ ............. .............. ..... ... 4-38 4-5 show linkflap parameters Outp ut Detail[...]
-
Page 34
xxxii 19-1 LSNAT Configuration Task List and Commands . ................ ................ ................ ................ ............. 19- 5 19-2 show ip slb reals Output Details ....... ......... ... ................. ............. ............ ............. ................ . .......... 19-12 19-3 show ip slb vservers Output Details ..........[...]
-
Page 35
Enterasys Matrix DFE-Gold Series Configuratio n Guide xxxiii About This Guide This manual explains how to access the device’ s Command Line Interface (CLI) and how to use it to configure Enterasys Matrix ® DFE ‐ Gold Series switch/router devices. ?[...]
-
Page 36
Structure of This Guide xxxiv About This Guide Protocol, the Cisco Discov ery Protocol, and the IEEE 802.1AB Link Lay er Discov ery Protocol (LLDP) and LLDP Media Endpoint Discov ery Protcol (LLDP ‐ MED). Chapter 4 , Port Configuration , describes how [...]
-
Page 37
Related Documents Enterasys Matrix DFE-Gold Series Configuration Gu ide xxxv Chapter 20 , DHCP Configuration , describes how to configure and display statistics for Dynamic Host Configuration Protocol. Chapter 21 , Routing Protocol Configuration , describe s how to [...]
-
Page 38
Conventions Used in This Guide xxxvi About This Guide Conventions Used in This Guide The following conventions are used in the text of this document: The following icons are used in this guide: Convention Description Bold font Indicates mandatory keywords , parameters or keyboard k[...]
-
Page 39
Getting Help Enterasys Matrix DFE-Gold Series Configuration Guide xxxvii Getting Help For additional support re lated to the product or this document, contact Enterasys Networks using one of the following methods: Before contacting Enterasys Networks for tec[...]
-
Page 40
Getting Help xxxviii About This Guide[...]
-
Page 41
Enterasys Matrix DFE-Gold Series Configuration Gu ide 1-1 1 Introduction This chapter provides an overview of the Enterasys Matrix Series’ unique features and functionality , an overview of th e tasks that may be accomplished using the CLI inte[...]
-
Page 42
Device Management Methods 1-2 Introduction • Configure the device to operate as a Generic Attribute Registration Protocol (GARP) de vice to dynamically create VLANs across a switched network. • Redirect frames according to a port or VLAN [...]
-
Page 43
Enterasys Matrix DFE-Gold Series Configuration Gu ide 2-1 2 S tartup and General Configuration This chapter descri bes factory default settings and the Startup and General Configuration set of commands. S t artup and General Configuration Summary At startup, the Matrix Ser ies [...]
-
Page 44
Startup and General Configuration Summary 2-2 Startup an d General Configuration T able 2-1 Default Device Settings f or Basic Switch Operation Device Feature Default Setting CDP discovery protocol Auto enabled on all ports. CDP authentication code Set to 00-00-00-00 -00-00-00-00 CDP hold time Set to 180 seconds. CDP interval T ransmit frequen cy o[...]
-
Page 45
Startup and General Configuration Summary Enterasys Matrix DFE-Gold Series Configuration Gu ide 2-3 MAC aging time Set to 300 seconds. MAC locking Disabled (globall y and on all ports). Management Authentication Notifi cation Enabled MTU discovery protocol Enabled. NetFlow collection Disabled NetFlow export version V ersion 5 NetFlow V ersion 9 tem[...]
-
Page 46
Startup and General Configuration Summary 2-4 Startup an d General Configuration S panning Tree edge port delay Enabled. S panning Tree forward delay Set to 15 seconds. S panning Tree hello interval Set to 2 sec onds. S panning Tree ID (SID) Set to 0 . S panning Tree legacy path cost Disabled. S panning Tree maximum aging time Set to 20 seconds. S [...]
-
Page 47
Startup and General Configuration Summary Enterasys Matrix DFE-Gold Series Configuration Gu ide 2-5 VLAN ID All ports use a VLAN id entifier of 1 . WebV iew (HTTP) Enabled on TCP port 80. T able 2-2 Default Device Settings f or Router Mode Operation Device Feature Default Setting Access groups (IP security) None confi gured. Access lists (IP securi[...]
-
Page 48
Startup and General Configuration Summary 2-6 Startup an d General Configuration CLI “Default s” Descriptions Each command description in this guide includes a section entitled “Defa ults” which contains different information than the factory default settings on[...]
-
Page 49
Startup and General Configuration Summary Enterasys Matrix DFE-Gold Series Configuration Gu ide 2-7 Using W ebV iew By default We b V i e w (Enterasys Networks’ embedded web server for devi ce configuration and management tasks) is enabled on TCP port number 80 of[...]
-
Page 50
Startup and General Configuration Summary 2-8 Startup an d General Configuration 3. Leave this string blank and press ENTER. The device information and Matrix prompt displays as shown in Figure 2 ‐ 1 . Logging in with Administra tively Configured Account If the device’ [...]
-
Page 51
Startup and General Configuration Summary Enterasys Matrix DFE-Gold Series Configuration Gu ide 2-9 (c) Copyright Enterasys Networks, In c. 2005 ModuleChassis Serial Number: 1234567 ModuleChassis Firmware Revision: 05. 11.00 Matrix DFE Gold(su)-> Getting Help with CLI Syntax The Matrix Ser ies device allows you to di [...]
-
Page 52
Startup and General Configuration Summary 2-10 Startup a nd General Configuration remote Show users with r emote SNMP engine ID volatile Show temporary en tries nonvolatile Show permanent en tries read-only Show r/o entries <cr> Matrix(rw)->show snmp user Entering a question mark ( ? ) without a space after [...]
-
Page 53
Startup and General Configuration Summary Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-11 Abbreviating and Completing Co mmands The Matrix Ser ies device allows you to abbreviate CLI commands and key words down to the number of characters that will allow [...]
-
Page 54
Startup and General Configuration Summary 2-12 Startup a nd General Configuration Ctrl+E Move cursor to end of line. Ctrl+F Move cursor forward one character . Ctrl+H Del ete character to left of cursor . Ctrl+I or T AB Complete word. Ctrl+K Delete all characters after cursor . Ctrl+L or Ctrl+R Re-display line. Ctrl+N Scroll to next command in comm[...]
-
Page 55
show line-editor Startup and General Configuration Summary Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-13 Commands show line-editor Use this command to show current and default line ‐ editor mode and Delete character mode. Synt ax show line-editor Parameters None. Default s None. Mod[...]
-
Page 56
Startup and General Configuration Summary set line-editor 2-14 Startup a nd General Configuration set line-editor Use thi s command to set the current and def ault line editing mode or the wa y the Delete character is treated by the line editor . Yo u ?[...]
-
Page 57
show system login Setting Use r Accounts and Passwords Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-15 Setting User Account s and Passwords Purpose To change the device’ s default user login and passw ord settings, and to add new user accounts and passwords. Commands s[...]
-
Page 58
Setting User Accounts and Passwords set system logi n 2-16 Startup a nd General Configuration admin super-user enabled no ***access always allowed*** bar read-only enabled yes 00:00 24:00 Sun Sat foo read-write enabled no 08:00 17:00 Mon Tue Wed Thu Fri ro read-only enabled no ***access always allowed*** rw read-write enabled no ***access always al[...]
-
Page 59
clear system login Setting User Accounts and Passwords Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-17 Default s allowed ‐ interv al: 00:00 ‐ 24:00 (all hours allowed) allowed ‐ days: Sun, Mo n, Tu e , We d , Thu, Fri, Sat (all days allow ed) local ‐ only: no. Mode Switc[...]
-
Page 60
Setting User Accounts and Passwords set password 2-18 Startup a nd General Configuration Default s The account is removed if no optional parameters are entered. Mode Switch command, Super User . Example This example shows how to remove the “netops” user account:[...]
-
Page 61
show system password Setting User Accounts and Passwords Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-19 The admin passw ord can be reset by toggling dip switch 8 on the device as des cribed in your Matrix Series Installation Gu ide . Examples This ex[...]
-
Page 62
Setting User Accounts and Passwords set system password 2-20 Startup a nd General Configuration Numeric: 0 Special: 0 Password assignment required at acco unt creation : no Allow multiple accounts to share sam e password : yes Length of substrings in previous pas sword(s) not allowed in new password: 0 Allow the same character to appear c onsecutiv[...]
-
Page 63
set system password Setting User Accounts and Passwords Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-21 Default s aging = disable history = 0 passw ords length = 8 characters min ‐ requir ed ‐ chars = 0 characters for all cases require ‐ at ‐ creation = No . P as[...]
-
Page 64
Setting User Accounts and Passwords clear system password 2-22 Startup a nd General Configuration If the require ‐ at ‐ creation option is enabled, the set system login command will interactively prompt for a cleartext password upon creation of a new use[...]
-
Page 65
show system lockout Setting User Accounts and Passwords Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-23 Default s If no options are specified, options are rese t to default va l u e s . Mode Switch comman, Super User . Example This example shows how to reset the [...]
-
Page 66
Setting User Accounts and Passwords set system lockout 2-24 Startup a nd General Configuration Ta b l e 2 ‐ 4 provides an explanation of the command output. These settin gs are configured with the set system lockout command (“ set system lockout ” on pag e[...]
-
Page 67
set system lockout Setting User Accounts and Passwords Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-25 Example This example shows how to set login attempts to 5 and lockout time to 30 minutes and the inactivity timer to 60 days: Matrix(su)->set sys[...]
-
Page 68
Managing the Management Authentication Notification MIB show mgmt-auth-notify 2-26 Startup a nd General Configuration Managing the Management Authentication Notification MIB Purpose This MIB provides controls for enabling/disabling the sending of SNMP notifications when a user login authen[...]
-
Page 69
set mgmt-auth-notify Managing the Management Authentication Notification MIB Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-27 ssh enabled telnet enabled web enabled set mgmt-auth-notify Use this command to either enable or disable the Management Authentication Notification MIB. By se[...]
-
Page 70
Managing the Management Authentication Notification MIB clear mgmt-auth-notify 2-28 Startup a nd General Configuration This example shows how to set only the console and telnet authentication access types to be enabled on the Management Authenti cation Notification [...]
-
Page 71
clear mgmt-auth-notify Managing the Managem ent Authentication Notification MIB Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-29 Matrix(su)->clear mgmt-auth-notify Matrix(su)->show mgmt-auth-notify Management Type Status --------------- -------- console enabled ssh enabled telnet enabled web enabled[...]
-
Page 72
Setting Basic Device Properties clear mgmt-auth-notify 2-30 Startup a nd General Configuration Setting Basic Device Properties Purpose To display and set the system IP address and other basic system (device) properties, including time, contact name and alias, physical ?[...]
-
Page 73
show ip address Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-31 show ip address Use this command to display the system IP address and subnet mask. Synt ax show ip address Parameters None. Default s None. Mode Switch command, Read ‐ Only . Example This ?[...]
-
Page 74
Setting Basic Device Properties clear ip address 2-32 Startup a nd General Configuration Parameters Default s If not specified, ip ‐ mask will be set to the natural mask of the ip ‐ addr ess and ip ‐ gateway wil l be set to the ip ‐ address . Mode Switch [...]
-
Page 75
set ip gratuitous-arp Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-33 Parameters None. Default s None. Mode Switch command, Read ‐ Only . Example This example shows how to display the IP gratui tous ‐ arp process for both requests and repl[...]
-
Page 76
Setting Basic Device Properties show system 2-34 Startup a nd General Configuration Parameters None. Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear the gratuitous ‐ arp processing: Matrix(rw)->clear ip gratuitous-arp show system Use this command ?[...]
-
Page 77
show system hardware Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-35 Temp-Alarm Uptime d,h:m:s Logou t ------------- -------------- ----- -------- off 0,19:40:00 10 mi n PS1-Type PS2-Type ------------- ------------- 6C207-1 not installed Ta b l e 2 ‐ 5 provides an explanation of the ?[...]
-
Page 78
Setting Basic Device Properties show system hardware 2-36 Startup a nd General Configuration Example The following example shows a portion of the information display ed with the show system hardware command. Matrix(rw)->show system hardware CHASSIS HARDWARE INFORMATION -----------------[...]
-
Page 79
show system utilization Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-37 Lookup DDR: 8 MB 8 MB 8 MB Transmit DDR: 8 MB 8 MB 8 MB Receive DDR: 8 MB 8 MB 8 MB Routing DDR: 8 MB 8 MB 8 MB MAC CHIP 0 1 2 Model: FastE net FastEnet FTM1 Revision: 1 1 0 PHY CHIP 0 Model: BCM52 26 Revision: 2 show system utilizatio[...]
-
Page 80
Setting Basic Device Properties show system utilization 2-38 Startup a nd General Configuration Name ProcI D 5 sec 1 min 5 min ------------------------------------ ------------------------ CLI 1 0.0% 0.0% 0.0% Chassis Data Synchronization 2 0.0% 0.0% 0.0% Connection Maintenance 3 1.0% 0.5% 0.5% Hardware Maintenece 4 0.0% 0.0% 0.0% Image & Confi[...]
-
Page 81
set system utilization threshold Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-39 Router OSPF 40 0.0% 0.0% 0.0% Router RIP 41 0.0% 0.0% 0.0% Router VRRP 42 0.0% 0.0% 0.0% Router DVMRP 43 0.0% 0.0% 0.0% Router PIM 44 0.0% 0.0% 0.0% Router PIMDM 45 0.0% 0.0% 0.0% Router ARP 46 0.0% 0.0% 0.0% Router LSNAT 47 0[...]
-
Page 82
Setting Basic Device Properties clear system utilization 2-40 Startup a nd General Configuration clear system utilization Use this command to clear the threshold for sending CPU utilization notification messages. Synt ax clear system utilization Parameters None. Default s None. Mode Switch com[...]
-
Page 83
set time Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-41 set time Use this command to change the time of day on the system clock. Synt ax set time [ mm/dd/yyyy ] [ hh:mm:ss ] Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example [...]
-
Page 84
Setting Basic Device Properties set summertime 2-42 Startup a nd General Configuration End : SUN NOV 04 02:00:00 2007 Offset: 60 minutes (1 hours 0 minute s) Recurring: yes, starting at 2:00 of the second Sunday of March and ending at 2:00 of the first Sunday of November set summertime Use this command to enable or disable ?[...]
-
Page 85
set summertim e recurring Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-43 Default s If an offset is not spe cified, none will be applied. Mode Switch command, Read ‐ Wr i t e . Usage These settings will be non ‐ recurring and will [...]
-
Page 86
Setting Basic Device Properties clear summertime 2-44 Startup a nd General Configuration Mode Switch command, Read ‐ Wr i t e . Usage These se ttings will start and stop daylight savings time at the specified day of the month and hour each yea r and will ?[...]
-
Page 87
set cli compl etion Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-45 Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set the command prompt to Switch 1: Matrix(rw)->set prompt “Switch 1” Switch 1(rw)-> s[...]
-
Page 88
Setting Basic Device Properties show banner 2-46 Startup a nd General Configuration Parameters Default s •I f a delay is not specified , none will be set. •I f not specified, the cursor wi ll not refresh . Mode Switch command, Read ‐ Wr i t e . Example This example ?[...]
-
Page 89
set banner Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-47 set banner Use this command to set the banner message for pre and post session login. Synt ax set banner { login message | motd message } Parameters Default s None. Mode Switch command, Re[...]
-
Page 90
Setting Basic Device Properties clear banner 2-48 Startup a nd General Configuration clear banner Use this command to clear the banner message display ed at pre and post session login to a blank string. Synt ax clear banner { login | motd } Parameters None. Default s None. Mode[...]
-
Page 91
show version Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-49 Bp: 01.00.10 Fw: 05.01.56 2 7G4202-30 GR-A13 Hw: 0 Bp: 01.00.05 Fw: 05.01.56 3 7G4202-30 gr-a5 Hw: 0 Bp: 01.00.10 Fw: 05.01.56 4 7G4202-30 GR-R18 Hw: 0 Bp: 01.00.05 Fw: 05.01.56 5 7K4290-02 0408026231 11 Hw: 2 Bp: 01.00.15 Fw: 05.01.56 6 7H4382-4[...]
-
Page 92
Setting Basic Device Properties set system name 2-50 Startup a nd General Configuration set system name Use this command to configure a name for the system. Synt ax set system name [ string ] Parameters Default s If string is not specif ied, the system name will be cleared.[...]
-
Page 93
set system con tact Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-51 set system cont act Use this command to identify a contact person for the system. Synt ax set system contact [ string ] Parameters Default s If string is not specif ied, the c[...]
-
Page 94
Setting Basic Device Properties set length 2-52 Startup a nd General Configuration set length Use this command to set the number of lines the CLI will display . Synt ax set length screenlength Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example show[...]
-
Page 95
set logout Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-53 set logout Use this command to set the time (in minutes) an idle console or Te l n e t CLI session will remain connected before timing out. Synt ax set logout timeo[...]
-
Page 96
Setting Basic Device Properties set physical alias 2-54 Startup a nd General Configuration Default s If no parameters are specified, all ph ysical alias information will be displayed. Mode Switch command, Read ‐ Only . Example This example shows how to display physical ?[...]
-
Page 97
clear physical alias Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-55 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set the alias for the chassis to “chassisone”: Matrix(rw)->set physical alias chass is chassisone cl[...]
-
Page 98
Setting Basic Device Properties set physical assetid 2-56 Startup a nd General Configuration Parameters Default s None. Mode Switch command, Read ‐ Only . Example This example shows how to display asset ID information for modul e 1. In this case, none has been configu[...]
-
Page 99
clear physical assetid Setting Basic Device Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-57 Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear the asset ID for modul e 1: Matrix(rw)->clear physical assetid m odule 1 [...]
-
Page 100
Activating Licensed Features set license 2-58 Startup a nd General Configuration Activating Licensed Features In order to enable adv anced features, such as redundant management, rou ting protocols, and extended ACLs on a Matrix Series device, yo u must purchase[...]
-
Page 101
show license Activating Licensed Features Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-59 Parameters Default s If not specified, the license will be bound to all modules. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to use license key ?[...]
-
Page 102
Activating Licensed Features clear license 2-60 Startup a nd General Configuration clear license Use this command to clear license key settings. Synt ax clear license { advanced | redundancy } [ slot slot ] Parameters Default s If not specified, the license settings will ?[...]
-
Page 103
show inlinepower Configu ring Power over Ethernet (PoE) Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-61 Configuring Power over Ethernet (PoE) Purpose To review and set PoE parameters, including the pow er available to the chassis, the usage threshold for each module,[...]
-
Page 104
Configuring Power over Ethernet (PoE) set inlinepower mode 2-62 Startup a nd General Configuration Parameters None. Default s None. Mode Switch command, Read ‐ Only . Example This example shows how to display device PoE properties. In this case, only the modules in slots [...]
-
Page 105
clear inlinepower mode Configu ring Power over Ethernet (P oE) Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-63 Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set the chassis pow er allocation mode to manual: Matrix(rw)->set i[...]
-
Page 106
Configuring Power over Ethernet (PoE) clear inlinepower available 2-64 Startup a nd General Configuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Usage If the total power w attage va l u e set with the set inlinepower assigned command (“ set inlinepower ?[...]
-
Page 107
set inlinepower powertrap Configuring Power over Ethernet (PoE) Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-65 set inlinepower powertrap Use this command to disable or enable the se nding of an SNMP trap message whenever the status of the chassis Po E po[...]
-
Page 108
Configuring Power over Ethernet (PoE) set inlinepower assigned 2-66 Startup a nd General Configuration set inlinepower assigned Use this command to manually assign Po we r Sourcing Equipment (PSE) powe r to a modul e in the chassis. Synt ax set inlinepower assigned power-value slot-num[...]
-
Page 109
set inlinepower threshold Configuring Power over Ethernet (PoE) Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-67 Example This example shows how to clear power assignment s to all modules in the chassis: Matrix(rw)->clear inlinepower assign ed set inlinepower threshold Use this [...]
-
Page 110
Configuring Power over Ethernet (PoE) set inlinepower management 2-68 Startup a nd General Configuration Example This example shows how to reset the Po E threshold to 75 on module 1: Matrix(rw)->clear inlinepower thresh old 1 set inlinepower management Use this command to set ?[...]
-
Page 111
set inlinepower psetrap Configuring Power over Ethernet (PoE) Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-69 Example This example shows how to reset the Po E management mode to “realtime” on module 1: Matrix(rw)->clear inlinepower manage ment 1 set inlinepower p setrap Use ?[...]
-
Page 112
Configuring Power over Ethernet (PoE) show port inlinepower 2-70 Startup a nd General Configuration Mode Switch command, Read ‐ Wr i t e . Example This example shows how to reset Po E trap messaging for module 1 to disabled: Matrix(rw)->clear inlinepower psetra p 1 show port inlinepow[...]
-
Page 113
clear port inlinepower Configuring Power over Ethernet (PoE) Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-71 Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to enable Po E on port fe.3.1 with critical priority: Matrix(rw)->set po[...]
-
Page 114
Reviewing and Selecting a Boot Firmware Image clear port inlinepower 2-72 Startup a nd General Configuration Reviewing and Selecting a Boot Firmware Image Downloading a New Firmware Image Yo u can upgrade the operational firmw are in the Matr ix Series device without physically opening the [...]
-
Page 115
clear port inlinepower Reviewing and Selecting a Boot Firmware Image Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-73 Testing SDRAM.... PASSED. Loading Boot Image: 01.00.02... DONE. Uncompressing Boot Image... DONE. Press any key to enter System Image Loader menu 2. Before the boot up completes, press any key .[...]
-
Page 116
Reviewing and Selecting a Boot Firmware Image show boot system 2-74 Startup a nd General Configuration 9. Set the terminal baud rate back to 9600 and press ENTER. 10. T ype setboot filename to set the device to boot to the new firmware image. In [...]
-
Page 117
set boot system Reviewing and Selecting a Boot Firmware Image Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-75 Usage The system must be reset by software for the ne w boot image to take effect at sta rtup. If the chassis is powered OFF and then[...]
-
Page 118
Starting and Configuring Telnet show telnet 2-76 Startup a nd General Configuration S t arting and Configuring T elnet Purpose To enable or di sable Te l n e t , and to start a Te l n e t session to a remote host. The Mat rix Series device allows a total of [...]
-
Page 119
set telnet Starting and Configuring Telnet Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-77 set telnet Use this command to enable or disable Te l n e t on the device. Synt ax set telnet { enable | disable }{ inboun d | outbound | all } Parameters Default s None. Mode Switch command, Read ‐[...]
-
Page 120
Starting and Configuring Telnet show router telnet 2-78 Startup a nd General Configuration Example This example shows how to start a Te l n e t session to a host at 10.21.42.13: Matrix(rw)->telnet 10.21.42.13 show router telnet Use this command to display the state o[...]
-
Page 121
clear router telnet Starting and Configuring Telnet Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-79 clear router telnet Use this command to reset Te l n e t service to the router to the default st ate of disabled. Synt ax clear router telnet Parameters None. Default s None. Mode[...]
-
Page 122
Managing Configuration and Image Files clear router telnet 2-80 Startup a nd General Configuration Managing Configuration and Image Files Matrix Series devices provide a single configuration interface which allows you to perform both switch and router configuration with the[...]
-
Page 123
dir Managing Configuration and Image Files Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-81 dir Use this command to list files stored in the file system. Synt ax dir [ filename ] Parameters Default s If filename is not specified, all files in the system will ?[...]
-
Page 124
Managing Configuration and Image Files dir 2-82 Startup a nd General Configuration slot6: Filename: 04.21.03 (Active) (Bo ot) Version: 04.21.03 Size: 5494579 (bytes) Date: FRI JUL 30 08:50:40 2 004 CheckSum: f564c266c3a5907a9f375 0dd17db6999 Location: slot1 Compatibility: 7G4202-30, 7G4202-60, 7G4270-09, 7G4270-10, 7G4270- 12, 7G4282-41, 7H4202-72,[...]
-
Page 125
show file Managing Configuration and Image Files Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-83 show file Use this command to display the contents of an image or configuration file. Synt ax show file filename Parameters Default s None. Mode Switch, Read ‐ Only . Example This [...]
-
Page 126
Managing Configuration and Image Files show file 2-84 Startup a nd General Configuration config t write file exit disable exit end router # arp ! # cdp ! # console ! begin ! # ***** NON-DEFAULT CONFIGURATION ** *** ! ! ! # SLOT TYPE # ___ ________________ ! # 1 7G4270-12 # 2 # 3 7H4382-49 # 4 7H4382-49 # 5 7H4382-49 # 6 7H4382-49 # 7 7H4382-49 ! ! [...]
-
Page 127
show config Managing Configuration and Ima ge Files Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-85 ! # cdp ! # console ! show config Use this command to display the system configuration or write the configuration to a file . Synt ax show config [ all ] [ facility ] [ outfile outfil[...]
-
Page 128
Managing Configuration and Image Files configure 2-86 Startup a nd General Configuration interface loopback 1 ip address 2.2.2.2 255.255.255.255 no shutdown . . . end configure Use this command to execute a previously downloaded configuration file stored on the device. Synt ax configure filename [[...]
-
Page 129
delete Managing Configuration and Image Files Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-87 Parameters Default s None. Mode Switch, Read ‐ Wr i t e . Usage The Matrix module to which a configuration file is downloaded must hav e the same hardw are configuration as ?[...]
-
Page 130
Managing Configuration and Image Files script 2-88 Startup a nd General Configuration Default s None. Mode Switch, Read ‐ Wr i t e . Usage Use the show config command as described in “ show config ” (page 2 ‐ 85)to display current image and configuration file names. Exa[...]
-
Page 131
script Managing Configuration and Ima ge Files Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-89 script file requ ires two argu ments, a por t string (%1) and a VLAN id (%2). Finally , the scri pt is executed, by specifying fe.1.1 as the first ?[...]
-
Page 132
Enabling or Disabling the Path MTU Discovery Protocol sh ow mtu 2-90 Startup a nd General Configuration Enabling or Disabling the Path MTU Discovery Protocol Purpose To enable or disable the path MTU (Maximum T ransmission Unit) discovery protocol on the device. Because ports with [...]
-
Page 133
set mtu Enabling or Disabling the Path MTU Discovery Protocol Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-91 set mtu Use this command to disable or re ‐ enable path MTU discov ery protocol on the device. Synt ax set mtu { enable | disable } Parameters Default s None. Mode Switch [...]
-
Page 134
Pausing, Clearing and Closing the CLI cls (clear screen) 2-92 Startup a nd General Configuration Pausing, Clearing and Closing the CLI Purpose To clear the CLI screen or to close you r CLI session. Commands The commands used to clear and close the CLI session are [...]
-
Page 135
exit | quit Pausing, Clearing and Closing the CLI Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-93 Default s None. Mode Switch command, Read ‐ Only . Usage By default, device ti meout occurs after 15 minutes of user inactivity , automatically closing you r CLI session. [...]
-
Page 136
Resetting the Device show reset 2-94 Startup a nd General Configuration Resetting the Device Purpose To reset one or mor e device modules, to clear the user ‐ defined switch and router configuration parameters, or to sched ule a system reset in order t[...]
-
Page 137
reset Resetting the Device Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-95 reset Use this command to reset the device without losing any user ‐ defined configuration settings Synt ax reset {[ mod | system | nemcpu { mod . n emcpu }] [ cancel ]} Parameters Default s None. Mode Read ‐[...]
-
Page 138
Resetting the Device reset at 2-96 Startup a nd General Configuration reset at Use this command to schedule a system reset at a specific futu re time. This feature is useful for loading a new boot image. Synt ax reset at hh:mm [ mm/dd ] [ reason ] Parameters Def[...]
-
Page 139
clear config Resetting the Device Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-97 Parameters Default s If a reason is not specified, none will be applied. Mode Switch command, Read ‐ Wr i t e . Example Matrix(rw) ‐ >reset in 5:20This example shows how to sched[...]
-
Page 140
Gathering Technical Support Inform ation show support 2-98 Startup a nd General Configuration Gathering T echnical Support Information Purpose To gather common technical support information. Command show support Use this command to display output for technical support ‐ related commands. Syn[...]
-
Page 141
show support Gathering Technical Support Information Enterasys Matrix DFE-Gold Series Configuratio n Guide 2-99 Example This example shows how to execute the show support command and save the results to slot 1 as a support3.txt file: Matrix(su)->show support slot1/su[...]
-
Page 142
Preparing the Device for Router Mode show support 2-100 Startup and General Configuration Prep aring the Device for Router Mode Pre-Routing Configuration T asks The following pre ‐ routing tasks, as detailed in “ Startup and General Configuration Summary ” on page 2 ‐ 1 and “ Set[...]
-
Page 143
show support Reviewing and Configuring Routing Enterasys Matrix DFE-Gold Series Configur ation Guide 2-101 The example in Figure 2 ‐ 8 shows how to: •E n a b l e routing for this router . • Configure VLAN 1 on IP address 182.127.63.1 255.255.255.0 as the routing ?[...]
-
Page 144
Reviewing and Configuring Routing show router 2-102 Startup and General Configuration show router Use thi s command to display which module that is currently running routing services. The DFE is a distributed system, which means that even though the [...]
-
Page 145
router Reviewing and Configuring Routing Enterasys Matrix DFE-Gold Series Configur ation Guide 2-103 router Use this command to enter router CLI mode. Synt ax router Parameters None. Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to enable routi[...]
-
Page 146
Reviewing and Configuring Routing router 2-104 Startup and General Configuration Router Configuration Mode Set IP prot ocol parameters. Ty p e router and the protoc ol name (and, for OSPF , the instance ID ) from Global or Interface Configuration mode. Matrix>router (config-router)# Key Chain Configuration Mode Set protocol (RIP) authentication [...]
-
Page 147
router Reviewing and Configuring Routing Enterasys Matrix DFE-Gold Series Configur ation Guide 2-105 DHCP Host Configuration Mode Configure DHCP host parameters. Ty p e clie nt-identifier and the iden tifier , or hardware-addr ess and an address from any DHCP configuration mode. Matrix>router (config-dhcp-host)# Note: T o jump to a lower configu[...]
-
Page 148
Reviewing and Configuring Routing router 2-106 Startup and General Configuration[...]
-
Page 149
Enterasys Matrix DFE-Gold Series Configuration Gu ide 3-1 3 Discovery Protocols Configuration This chapter describes how to configure the discov ery protocols supported by the firmw are using CLI commands. Displaying Neighbors Purpose The show neighbors command displays [...]
-
Page 150
Displaying Neighbors show neighbors 3-2 Discove ry Protocols Configuration Default s If port ‐ string is not specif ied, all Netw ork Neighbor Discov ery information will be display ed. Mode Switch command, Read ‐ Only . Example This example shows how to display Net[...]
-
Page 151
show cdp Enterasys Discov ery Protocol Enterasys Matrix DFE-Gold Series Configuration Gu ide 3-3 Enterasys Discovery Protocol Purpose To enable and configure the Enterasys Discovery Protocol (CDP), used to discover netw ork topology . When enabled, CDP allows Enterasys devi[...]
-
Page 152
Enterasys Discovery Protocol set cdp state 3-4 Discove ry Protocols Configuration CDP Authentication Code : 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 CDP Transmit Frequency : 60 Port Status ----------------- fe.1.1 auto-enable fe.1.2 auto-enable fe.1.3 auto-enable fe.1.4 auto-enable fe.1.5 auto-enable fe.1.6 auto-enable fe.1.7[...]
-
Page 153
set cdp auth Enterasys Discov ery Protocol Enterasys Matrix DFE-Gold Series Configuration Gu ide 3-5 Parameters Default s If port ‐ string is not specif ied, the CDP state will be globally set. Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to global[...]
-
Page 154
Enterasys Discovery Protocol set cdp interval 3-6 Discove ry Protocols Configuration A device with the default authentication code (16 null characters) will recognize all de vices, no matter what their authentication code, and enter them into its CDP[...]
-
Page 155
clear cdp Enterasys Discov ery Protocol Enterasys Matrix DFE-Gold Series Configuration Gu ide 3-7 Example This example shows how to set CDP hold time to 60 seconds: Matrix(rw)->set cdp hold-time 60 clear cd p Use this command to reset CDP discovery protoc ol settings [...]
-
Page 156
Cisco Discovery Protocol show ciscodp 3-8 Discove ry Protocols Configuration Cisco Discovery Protocol Purpose To enable and configure the Cisco Discovery Protocol, use d to discover network topology . When enabled, the Cisco Discov ery Protocol allows Cisco de vices[...]
-
Page 157
show ciscodp port info Cisco Discovery Protocol Enterasys Matrix DFE-Gold Series Configuration Gu ide 3-9 Device ID : 00E06314BD57 Last Change : WED FEB 08 01:07:45 20 06 Ta b l e 3 ‐ 2 provides an explanation of the command output. show ciscod p port info Use this command to display summary inf[...]
-
Page 158
Cisco Discovery Protocol set ciscodp status 3-10 Discovery Protocols Con figuration fe.1.1 enabled none untrus ted 0 fe.1.2 enabled none untrus ted 0 fe.1.3 enabled none untrus ted 0 fe.1.4 enabled none untrus ted 0 fe.1.5 enabled none untrus ted 1 Ta b l e 3 ‐ 3 provides an explanation of the command output. set cisco[...]
-
Page 159
set ciscodp timer Cisco Discovery Protocol Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-11 set ciscod p timer Use this command to set the number of seconds between Cisco Di scovery Pr otocol PDU transmissions. Synt ax set ciscodp timer time Parameters Default s None. Mode Switch [...]
-
Page 160
Cisco Discovery Protocol set ciscodp port 3-12 Discovery Protocols Con figuration set ciscod p port Use this command to set the status, vo i ce VLAN, extended trust mode, and CoS priority for untrusted traffic for the Cisco Discov ery Protocol on one [...]
-
Page 161
clear ciscodp Cisco Discovery Protocol Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-13 •A Cisco DP port trust status of trusted or untrusted is only meaningful when a Cisco IP phone is connected to a switch port and a PC or o[...]
-
Page 162
Cisco Discovery Protocol clear ciscodp 3-14 Discovery Protocols Con figuration Default s None. Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to clear all the Cisco DP parameters back to the default settings: Matrix>clear ciscodp This example sh[...]
-
Page 163
clear ciscodp Link Layer Discovery Protocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-15 Link Layer Discovery Protocol and LLDP-MED The IEEE 802.1AB standard, commonly referre d to as the Link Lay er Discover y Protocol (LLDP), is describe d in “IE EE ?[...]
-
Page 164
Link Layer Discovery Protocol and LLDP-MED clear ciscodp 3-16 Discovery Protocols Con figuration Commands Ste p Ta s k Command(s) 1. Configure global system LLDP p arameters set lldp tx-interval set lldp hold-multiplier set lldp trap-interval set lldp med-fast-repeat clear lldp 2. Enable/disable specific ports to: • T ransmit and process received[...]
-
Page 165
show lldp Link Layer Discovery Protocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-17 show lld p Use this command to display LLDP configuration information. Synt ax show lldp Parameters None. Default s None. Mode Switch command, Read ‐ Only . Example This example shows how [...]
-
Page 166
Link Layer Discovery Protocol and LLDP-MED show lldp port status 3-18 Discovery Protocols Con figuration show lld p port st atus Use this command to display the LLDP status of one or more ports. Synt ax show lldp port status [ port-string ] Parameters Default s If port ‐ string is no[...]
-
Page 167
show lldp port tx-tlv Link Layer Discovery Protocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-19 Mode Switch command, Read ‐ Only . Usage Po r t s are enabled to send LLDP notifications with the set lldp port trap command and to send LLDP ‐ ME[...]
-
Page 168
Link Layer Discovery Protocol and LLDP-MED show lldp port location-info 3-20 Discovery Protocols Con figuration Desc Name Desc Cap Addr Id Id PHY Aggr Frame Cap Pol Loc PoE ------- ---- ---- ---- --- ---- --- - ---- --- --- ---- ---- --- --- --- --- ge.1.1 * * * * * * slg * * * * * * ge.1.2 * * * * * * slg * * * * * * ge.1.3 * * * * * * slg * * * *[...]
-
Page 169
show lldp port local-info Link Layer Discovery Protocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-21 Parameters Default s If port ‐ string is not specif ied, local system information will be displayed for all po rts. Mode Switch command, Read ‐ Only . Usage Y[...]
-
Page 170
Link Layer Discovery Protocol and LLDP-MED show lldp port lo cal-info 3-22 Discovery Protocols Con figuration Sys Name Optional basic LLD P TL V . V alue is the administrative ly assigned name for the system. Sys Desc Optional basic LLDP TL V . V a lue is sysDescr object defined in RFC 3418. Sys Cap Supported/Enabled Optional basic LLDP TL V . Syst[...]
-
Page 171
show lldp port remote-info Link Layer Discovery Protocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-23 show lld p port remote-info Use this command to display the remote sy stem information stored for a remote device connected to a local port. Synt[...]
-
Page 172
Link Layer Discovery Protocol and LLDP-MED show lldp port network-policy 3-24 Discovery Protocols Con figuration Mgmt Addr : 0.0.0.0 Chassis ID : 0.0.0.0 Device Type : Communication Device E ndpoint (class III) Sys Name : AVE0E143D Sys Cap Supported/Enabled : brid ge,telephone/bridge Auto-Neg Supported/Enabled : yes/ yes Auto-Neg Advertised : 10BA [...]
-
Page 173
show lldp port network-policy Link Lay er Discovery Protocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-25 Parameters Default s If port ‐ string is not specif ied, only non ‐ default val u e s wi ll be displayed for all ports that have non ‐ default [...]
-
Page 174
Link Layer Discovery Protocol and LLDP-MED set lldp tx-interva l 3-26 Discovery Protocols Con figuration set lld p tx-interval Use this command to set the time, in seconds, betw een successive LLDP frame transmissions initiated by changes in the LLDP local sy stem ?[...]
-
Page 175
set lldp trap-interval Link Layer Discovery Protocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-27 Example This example sets the transmit inte rval to 20 seconds and the hold multiplier to 5, which will configure a time ‐ to ‐ live of 1[...]
-
Page 176
Link Layer Discovery Protocol and LLDP-MED set lldp port status 3-28 Discovery Protocols Con figuration Mode Switch command, Read ‐ Wr i t e . Usage When an LLDP ‐ MED endpoint device has connected to a port, the network connectivity device starts sending LLDP ‐ MED T[...]
-
Page 177
set lldp port trap Link Layer Discovery Protocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-29 set lld p port trap Use this command to enable or disable sending LLDP notifications (traps) when a remote system change is dete cted. Synt ax set lldp port trap[...]
-
Page 178
Link Layer Discovery Protocol and LLDP-MED set lldp port location-info 3-30 Discovery Protocols Con figuration Example This example enables transmitting LLDP ‐ MED traps on ports ge.1.1 through ge.1.6 . Matrix(rw)->set lldp port med-trap e nable ge.1.1-6 set lld p port location-info Use this comm[...]
-
Page 179
set lldp port tx-tlv Link Layer Discovery Prot ocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-31 Parameters all Add all optional TL Vs to transmitted LLDPDUs. port ‐ desc Po r t Description optional basic LLDP TL V . Va l u e sent is ifDescr object defi[...]
-
Page 180
Link Layer Discovery Protocol and LLDP-MED set lldp port network-policy 3-32 Discovery Protocols Con figuration Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example configures the management address, MED capability , MED netw ork policy , and MED location ident[...]
-
Page 181
set lldp port network-policy Link Layer Discovery Protocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-33 Default s None. Mode Switch command, Read ‐ Wr i t e . Usage As desc ribed in the ANSI/ TIA Standards document 1057, th e Ne twork Pol ic y TL V is “intend[...]
-
Page 182
Link Layer Discovery Protocol and LLDP-MED clear lldp 3-34 Discovery Protocols Con figuration clear lld p Use this command to return LLDP parameters to their defaul t va l ue s . Synt ax clear lldp { all | tx-interval | hold-multipler | trap-interval | med-f ast-repeat } Parameters Default s None. Mode Switch[...]
-
Page 183
clear lldp port trap Link Layer Discovery Protocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-35 Example This example returns port ge.1.1 to the default state of enabled for both transmitting and processing received LLDPDUs. Matrix(rw)->clear lldp port [...]
-
Page 184
Link Layer Discovery Protocol and LLDP-MED clear lldp por t location-info 3-36 Discovery Protocols Con figuration clear lld p port location-info Use this command to return the port ECS ELIN location setting to the def ault va l u e of null. Synt ax clear lldp port location-info elin p [...]
-
Page 185
clear lldp port tx-tlv Link Layer Discovery Protocol and LLDP-MED Enterasys Matrix DFE-Gold Series Configuratio n Guide 3-37 Default s At least one application (or all ) and one policy parameter must be speci fied. Mode Switch command, Read ‐ Wr i t e . Example This example returns ?[...]
-
Page 186
Link Layer Discovery Protocol and LLDP-MED clear lldp port tx-tlv 3-38 Discovery Protocols Con figuration Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example disables the management address, MED capability , MED network policy , and MED location identification[...]
-
Page 187
Enterasys Matrix DFE-Gold Series Configuration Gu ide 4-1 4 Port Configuration This chapter descri bes the Po r t Configuration set of commands and how to use them. Port Configuration Summary Console Port(s) Each Matrix Series module or standalone device includes a [...]
-
Page 188
Port Configuration Summary 4-2 Port Conf iguration Switch Port s The Matrix Ser ies modules and standalone devices have fixed front panel switch ports and, depending on the model, optional expansion module slots. The numbering scheme used to [...]
-
Page 189
Setting Console Port Properties Enterasys Matrix DFE-Gold Series Configuration Gu ide 4-3 fe.1.1-10 This example shows the port ‐ string syntax for specifying the 1 ‐ Gigabit Ethernet port 14 in the module in chassis sl ot 3. ge.3.14 This example shows the p[...]
-
Page 190
Setting Console Port Properties show console 4-4 Port Conf iguration show console Use this command to display properties set for one or more console ports. Synt ax show console [ port-string ] Parameters Default s If port ‐ string is not specif ied, properties for all [...]
-
Page 191
show console baud Setting Console Port Properties Enterasys Matrix DFE-Gold Series Configuration Gu ide 4-5 Parameters Default s If port ‐ string is not specif ied, properties for all console ports will be cleared. Mode Switch command, Read ‐ Only . Example This example shows h[...]
-
Page 192
Setting Console Port Properties clear console baud 4-6 Port Conf iguration Parameters Default s If port ‐ string is not specif ied, baud rate will be set for all console ports. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set the [...]
-
Page 193
set console flowcontrol Setting Console Port Properties Enterasys Matrix DFE-Gold Series Configuration Gu ide 4-7 Default s If port ‐ string is not specif ied, the flow con trol setting for all console port s will be displa yed. Mode Switch command, Read ‐ Only . Example This ?[...]
-
Page 194
Setting Console Port Properties show console bits 4-8 Port Conf iguration Parameters Default s If port ‐ string is not specif ied, flow control will be clea red for all console ports. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear [...]
-
Page 195
clear console bits Setting Console Port Properties Enterasys Matrix DFE-Gold Series Configuration Gu ide 4-9 Parameters Default s If port ‐ string is not specif ied, bits per character will be set for all console ports. Mode Switch command, Read ‐ Wr i t e . Example This exampl[...]
-
Page 196
Setting Console Port Properties set console stopbits 4-10 Port Con figuration Default s If port ‐ string is not specif ied, stop bits per character will be displayed for all console ports. Mode Switch command, Read ‐ Wr i t e . Example This example shows how [...]
-
Page 197
show console parity Setting Console Por t Properties Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-11 Default s If port ‐ string is not specif ied, stop bits per character will be cleared for all console ports. Mode Switch command, Read ‐ Wr i t e . Example This ?[...]
-
Page 198
Setting Console Port Properties clear console parity 4-12 Port Con figuration Default s If port ‐ string is not specif ied, parit y type will be set for all console ports. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to enable even p[...]
-
Page 199
show port Reviewing Port Status Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-13 Reviewing Port St atus Purpose To display operating status, duplex mode, speed, port type, and statistical information abou t traffic received and transmitted through one or all ?[...]
-
Page 200
Reviewing Port Status show port status 4-14 Port Con figuration show port st atus Use this command to display operating and admin status, speed, duplex mode and port type for one or more ports on the device. Synt ax show port status [ port-string ] [ -int eresti[...]
-
Page 201
show port counters Reviewing Port Status Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-15 show port counters Use this command to display port counter statistics detailing traffic through the device and through all MIB2 network devi ces. Synt ax show port counters [ po[...]
-
Page 202
Reviewing Port Status show port counters 4-16 Port Con figuration No counter discontinuity time ------------------------------------ ----------------------------- MIB2 Interface Counters ----------------------- In Octets 0 In Unicast Pkts 0 In Multicast Pkts 0 In Broadcast Pkts 0 In Discards 0 In Errors 0 In Unknown Protocol 0 Out Octets 0 Out Unic[...]
-
Page 203
show port operstatuscause Reviewing Port Status Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-17 show port operst a tuscause Use this command to display the causes configured to place operating status to a down or dormant state for one or more ports. S[...]
-
Page 204
Reviewing Port Status clear port operstatuscause 4-18 Port Con figuration Mode Switch command, Read ‐ Only . Example This example shows how to display operation status causes for ports ge.1.1 through 6. In this case, port ge.1.6 is down due to a ?[...]
-
Page 205
clear port operstatuscause Reviewing Port Status Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-19 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to override al l operational causes on all ports: Matrix(rw)->clear port operstatuscau se[...]
-
Page 206
Disabling / Enabling and Naming Ports set port disable 4-20 Port Con figuration Disabling / Enabling and Naming Port s Purpose To disable and re ‐ enable one or more ports, and to as sign an alias to a port. By default, all ports are enabled at device [...]
-
Page 207
set port enable Disabling / Enabling and Naming Ports Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-21 set port enable Use this command to administratively enable one or more ports. Synt ax set port enable port-string Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example Th[...]
-
Page 208
Disabling / Enabling and Naming Ports set port alias 4-22 Port Con figuration set port alias Use this command to assign an alias name to a port. Synt ax set port alias port-string [ string ] Parameters Default s If string is not specif ied, the alias assigned to the por[...]
-
Page 209
set forcelinkdown Disabling / Enabling and Naming Ports Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-23 set forcelinkdown Use this command to enable or disable the force link down function. When enabled, this forces ports in the “operstatus down” stat[...]
-
Page 210
Setting Speed and Duplex Mode show port speed 4-24 Port Con figuration Setting S peed and Duplex Mode Purpose To review and set the operational speed in Mbps and the default duplex mode: Half , for half duplex, or Full , for full duplex for one or ?[...]
-
Page 211
set port speed Setting Speed and Duplex Mode Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-25 set port speed Use this command to set the default speed of one or more ports. Th is setting only takes effect on ports that hav e auto ‐ negotiation di[...]
-
Page 212
Setting Speed and Duplex Mode set port duplex 4-26 Port Con figuration Example This example shows how to display the default duplex setting for 1 ‐ Gigabit Ethe rnet port 14 in module 3: Matrix(rw)->show port duplex ge.3.14 default duplex mode is full on port ge.3.14. set port[...]
-
Page 213
show port jumbo Enabling / Disabling Jumbo Frame Support Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-27 Enabling / Disabling Jumbo Frame Support Purpose To review , enable, and disable jumbo frame support on one or more ports. This allows Gigabit Ethernet ports to ?[...]
-
Page 214
Enabling / Disabling Jumbo Frame Support set port jumbo 4-28 Port Con figuration set port jumbo Use this command to enable or disable jumbo frame support on one or more ports. Synt ax set port jumbo { enable | disable } [ p ort-string ] Parameters Default s If port ‐ string is no[...]
-
Page 215
clear port jumbo Enabling / Disabling Jumbo Frame Support Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-29 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to reset jumbo frame support status for 1 ‐ Gigabit Ethernet port 14 in module 3: M[...]
-
Page 216
Setting Auto-Negotiation and Advertised Ability show port negotiation 4-30 Port Con figuration Setting Auto-Negotiation and Advertised Ability Purpose To review , disable or enable auto ‐ negotiation, and to review or set a port’ s advertised mode of operation. During auto [...]
-
Page 217
set port negotiation Setting Auto-Negotiation and Advertised Ability Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-31 Mode Switch command, Read ‐ Only . Example This example shows how to display auto ‐ negotiation status for 1 ‐ Gigabit Ethernet po rt 14 in module 3: Ma[...]
-
Page 218
Setting Auto-Negotiation and Advertised Ability set port mdix 4-32 Port Con figuration Default s If port ‐ string is not specif ied, the mode for al l ports will be displayed. Mode Switch command, Read ‐ Only . Example This example shows how to display MDI/ MDIX [...]
-
Page 219
clear port mdix Setting Auto- Negotiation and Advertised Ability Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-33 clear port mdix Use this command to reset MDIX mode to the default setting of auto on one or more ports. Synt ax clear port mdix [ port-string ] Parameters De[...]
-
Page 220
Setting Auto-Negotiation and Advertised Ability set port advertise 4-34 Port Con figuration 10BASE-T yes yes no 10BASE-TFD yes yes no 100BASE-TX yes yes no 100BASE-TXFD yes yes no 1000BASE-X no no no 1000BASE-XFD no no no 1000BASE-T no no no 1000BASE-TFD no no no other no no yes pause yes yes no Apause no no no Spause no no no Bpause no no no Ta b [...]
-
Page 221
clear port advertise Setting Auto-Negotiation and Advertised Ability Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-35 Parameters Default s At least one optional parameter must be specified. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set fe.3.4 [...]
-
Page 222
Setting Auto-Negotiation and Advertised Ability clear port advertise 4-36 Port Con figuration Default s If not specified, all modes of advertised ability will be cleared. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to reset all advertised [...]
-
Page 223
show port flowcontrol Setting Flow Contro l Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-37 Setting Flow Control Purpose To review , enable or disable por t flow control. Flow control is used to manage the transm ission between tw o devices as specified b[...]
-
Page 224
Setting Flow Control set port flowcontrol 4-38 Port Con figuration Ta b l e 4 ‐ 4 provides an explanation of the command output. set port flowcontrol Use this command to enable or disable flow control settings for one or more ports. Synt ax set port flowcontrol po[...]
-
Page 225
show port trap Configuring Link Traps and Link Flap Detection Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-39 Configuring Link T rap s and Link Flap Detection Purpose To disable or re ‐ enable link traps and to configure the link flapping detection function. By default, al[...]
-
Page 226
Configuring Link Traps and Link Flap D etection set port trap 4-40 Port Con figuration Mode Switch command, Read ‐ Wr i t e . Example This example shows how to display link trap status for fe.3.1 through 4: Matrix(rw)->show port trap fe.3.1-4 Link traps enabled on port fe.3.1. Link traps [...]
-
Page 227
show linkflap Configuring Link Traps and Link Flap Detection Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-41 Parameters Default s •I f not specified, information about all link flap detection settings will be display ed. •I f port ‐ string is not specif ied, inform[...]
-
Page 228
Configuring Link Traps and Link Flap D etection show linkflap 4-42 Port Con figuration Linkflap Port Settable Parameter Tab le (X means error occurred) Port LF Status Actions Thresh old Interval Downtime -------- --------- ------- ------ ---- ---------- ---------- ge.1.1 disabled ....... 10 5 300 ge.1.2 enabled D..S..T 3 5 300 ge.1.3 disabled ...S.[...]
-
Page 229
set linkflap globalstate Configuring Link Traps and Link Flap Detection Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-43 set linkflap globalst ate Use this command to globally enable or disable the link flap detection function. By default, the function is disabled [...]
-
Page 230
Configuring Link Traps and Link Flap D etection set linkflap interval 4-44 Port Con figuration set linkflap interval Use this command to set the time interval (in seconds) for accumulating link down transitions. Synt ax set linkflap interval port-string in terval_value Parameters Default s Non[...]
-
Page 231
clear linkflap action Configuring Link Traps and Link Flap Detection Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-45 Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to set the link flap violation action on port fe.1.4 to generating a Sysl[...]
-
Page 232
Configuring Link Traps and Link Flap D etection set linkflap downtime 4-46 Port Con figuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to set the link flap threshold on port fe.1.4 to 5: Matrix(rw)->set linkflap threshold f[...]
-
Page 233
clear linkflap down Configuring Link Traps and Link Flap Detection Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-47 clear linkflap down Use this command to toggle link fl ap disabled ports to operational. Synt ax clear linkflap down [ port-string ] Parameters Default s If port ‐ string is [...]
-
Page 234
Configuring Link Traps and Link Flap D etection clear link flap 4-48 Port Con figuration Examples This example shows how to clear all link flap options on port fe.1 .4: Matrix(rw)->clear linkflap all fe.1. 4[...]
-
Page 235
show port broadcast Configuring Broadcast Supp ression Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-49 Configuring Broadcast Suppression Purpose To review , disable or set the broadcas t thresholds on one or mo re ports. This limits the amount of receiv ed broadc[...]
-
Page 236
Configuring Broadcast Suppression set port broadcast 4-50 Port Con figuration set port broadcast Use this command to set the broadcast suppression limit, in pac kets per second, on one or more ports. This sets a threshold on the broadcast traffic [...]
-
Page 237
clear port broadcast Configuring Broadcast Suppression Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-51 Parameters Default s If not specified, both threshold and peak settings will be cleared. Mode Read ‐ Wr i t e . Example This example shows how to clear all broadcast [...]
-
Page 238
Configuring Port Mirroring show port mirroring 4-52 Port Con figuration Configuring Port Mirroring The Matrix device allows you to mirror (or redirec t) the traffic being switched on a port for the purposes of netw ork traffic analysis and connection [...]
-
Page 239
set port mirroring Configuring Port Mirroring Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-53 Parameters None. Default s None. Mode Switch command, Read ‐ Only . Example This example shows how to display port mirroring information. In thi s case, fe.1 .4 is configured [...]
-
Page 240
Configuring Port Mirroring clear port mirroring 4-54 Port Con figuration Default s If not specified, both receiv ed and transmitted frames will be mirrore d. Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to enable port mirroring of transmi[...]
-
Page 241
clear port mirroring Configuring LACP Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-55 Configuring LACP Using multiple links simultaneously to increase bandwidth is a desirable switch feature, which can be accomplished if both sides agree on a set [...]
-
Page 242
Configuring LACP clear port mirroring 4-56 Port Con figuration •A means of identifying the set of capabi lities associated with each port and with each aggregator , as understood by a given device. •A means of identifying a LAG and it[...]
-
Page 243
clear port mirroring Configuring LACP Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-57 by comparing operational keys. Aggregator ports allow only underlying ports with keys matching theirs to join their LAG. LACP uses a system priority va l u e to [...]
-
Page 244
Configuring LACP show lacp 4-58 Port Con figuration show lacp Use this command to display the global LACP enable state, or to display information about one or more aggregator ports. Synt ax show lacp [ state | port-string ] Parameters Default s •I f state is ?[...]
-
Page 245
set lacp Configuring LACP Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-59 Actor Partner System Identifier: 00:e0:63:9d:b5:8 7 00:00:00:00:00:00 System Priority: 3276 8 32768 Admin Key: 3276 8 Oper Key: 3276 8 32768 Attached Ports: None. Ta b l e 4 ‐ 9 provides an explanation of the command output. set lacp U[...]
-
Page 246
Configuring LACP clear lacp state 4-60 Port Con figuration Mode Switch command, Read ‐ Wr i t e . Example This example shows how to disable LACP: Matrix(rw)->set lacp disable clear lacp st ate Use this command to reset LACP to the defa ult state of enabled. Synt ax cle[...]
-
Page 247
set lacp aadminkey Configuring LACP Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-61 Usage Only one LACP system priority can be set on a Matrix Series device, using either this command, or the set port lacp command (“ set port lacp ” ?[...]
-
Page 248
Configuring LACP set lacp static 4-62 Port Con figuration Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear the actor admin key for LAG port 4: Matrix(rw)->clear lacp aadminkey lag .0.484 set lacp st atic Use this command to [...]
-
Page 249
clear lacp static Configuring LACP Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-63 Example This example shows how to add port fe. 1.6 to the LAG of aggregator port 4: Matrix(rw)->set lacp static lag.0.48 4 fe.1.6 clear lacp st atic Use this command to remove s[...]
-
Page 250
Configuring LACP set singleportlag 4-64 Port Con figuration Example This example shows how to display the status of the single port LAG function: Matrix(rw)->show lacp singleportlag Single Port LAGs: enabl ed set singleportlag Use this command to enable or disable th[...]
-
Page 251
show port lacp Configuring LACP Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-65 show port lacp Use this command to display link aggregation informatio n for one or more underlying physical ports. Synt ax show port lacp port port-string {[ status { det ail | summary }] | [ counters ][...]
-
Page 252
Configuring LACP set port lacp 4-66 Port Con figuration Matrix(rw)->show port lacp port fe.1 .12 status summary Port AggrActor System Partner System Pri: Sys tem ID: Key: Pri: System ID : Key: fe.1.12 none [(32768,00e0639db587,32768),(32768,0000000000 00, 1411)] This example shows how to display LACP counters for [...]
-
Page 253
set port lacp Configuring LACP Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-67 Default s •A t least one parameter must be entered per port ‐ string. •I f enable or disable are not specified, port(s) will be enabled with the LACP parameters e[...]
-
Page 254
Configuring LACP clear port lacp 4-68 Port Con figuration partners maintain current status of the other via LACPDUs containing information about their ports’ LACP status and operational state. Example This example shows how to set the actor adm[...]
-
Page 255
show lacp flowRegeneration Configuring LACP Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-69 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear all link aggregation parameters for port ge.3.16: Matrix(rw)->clear port lacp port ge. 3.16 show lacp flowR[...]
-
Page 256
Configuring LACP clear lacp flowRegeneration 4-70 Port Con figuration Usage When enabled and a new port joins a link aggregation group (LAG), LACP will redistri bute all existing flows over the LAG. It wi ll also attempt to load balance e[...]
-
Page 257
set lacp outportAlgorithm Configuring LACP Enterasys Matrix DFE-Gold Series Configuratio n Guide 4-71 Example This example shows how to display the current LACP: Matrix(rw)->show lacp outportAlgorit hmoutport algorithm dip-sip set lacp outportAlgorithm Use this command to set the algorithm [...]
-
Page 258
Configuring LACP clear lacp outportAlgorithm 4-72 Port Con figuration Example This example shows how to reset the LACP outport algorithm to DIP ‐ SIP: Matrix(rw)->clear lacp outportAlgori thm[...]
-
Page 259
Enterasys Matrix DFE-Gold Series Configuration Gu ide 5-1 5 SNMP Configuration This chapter descri bes the Simple Network Management Protocol (SNMP) set of commands and how to use them. SNMP Configuration Summary SNMP is an application ‐ layer protocol that fa[...]
-
Page 260
SNMP Configuration Summary 5-2 SNMP Configuration SNMPv1 and SNMPv2c The components of SNMPv1 and SNMPv2c network management fall into thr ee categories: •M a n a g e d devices (such as a sw itch) •S N M P agents and MIBs, including SNMP traps, c[...]
-
Page 261
SNMP Configuration Summary Enterasys Matrix DFE-Gold Series Configuration Gu ide 5-3 Using SNMP Context s to Access S pecific MIBs By default, when operating from the switch CLI, Matrix Series devices allow access to all SNMP MIBs or contexts. A context is a [...]
-
Page 262
SNMP Configuration Summary 5-4 SNMP Configuration Complete an SNMPv2 trap configuration on a Matrix Series device as follows: 1. Create a commun ity name that will act as an SNMP user password. 2. Create an SNMP target parameters entry to[...]
-
Page 263
show snmp engineid Reviewing SNMP Statistics Enterasys Matrix DFE-Gold Series Configuration Gu ide 5-5 How SNMP Will Use This Configuration In order to send a trap/notification requested by a MIB code, the SNMP agent requires the equiv alent of a trap “door ”, a[...]
-
Page 264
Reviewing SNMP Statistics show snmp counters 5-6 SNMP Configuration Default s None. Mode Switch command, Read ‐ Only . Example This example shows how to display SNMP engine properties: Matrix(rw)->show snmp engineid EngineId: 80:00:15:f8:03:00:e0:63:9d :b5:87 Engine Boots = 12 Engine Time = 162181 Max Ms[...]
-
Page 265
show snmp counters Reviewing SNMP Statistics Enterasys Matrix DFE-Gold Series Configuration Gu ide 5-7 snmpOutPkts = 396601 snmpInBadVersions = 0 snmpInBadCommunityNames = 0 snmpInBadCommunityUses = 0 snmpInASNParseErrs = 0 snmpInTooBigs = 0 snmpInNoSuchNames = 0 snmpInBadValues = 0 snmpInReadOnlys = 0 snmpInGenErrs = 0 snmpInTotalReqVars = 403661 [...]
-
Page 266
Reviewing SNMP Statistics show snmp counters 5-8 SNMP Configuration snmpInGe nErrs Number of SNMP PDUs delivered to the SNMP protocol entit y with the value of t he error-stat us field as “gen Err .” snmpInT otalReqV ars Number of MIB objects retr ieved successfully by the SNMP protocol entity as the result of receiving va lid SNMP Get-Request [...]
-
Page 267
show snmp counters Reviewing SNMP Statistics Enterasys Matrix DFE-Gold Series Configuration Gu ide 5-9 usmS tats NotInTimeWindows Number of packets received by the SN MP engine that were dropped because they appeared outside of the authori tative SNMP engine's window . usmS tat sUnknownUserNames Number of packet s rece ived by the SN MP engine[...]
-
Page 268
Configuring SNMP Users, Groups and Communities show snmp user 5-10 SNMP Configurat ion Configuring SNMP Users, Group s and Communities Purpose To review and configure SNMP users, groups and v1 and v2 communities. These are defined as follows: •U s e r — A person reg[...]
-
Page 269
show snmp user Configuring SNMP Users, Groups and Communities Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-11 •I f user is not specified, information about all SNMP users will be displayed. •I f remote is not specified, user information about the loca[...]
-
Page 270
Configuring SNMP Users, Groups and Communities set snmp user 5-12 SNMP Configurat ion set snmp user Use this command to create a new SNMPv3 user . Synt ax set snmp user user [ remote remoteid ] [ authentica tion { md5 | sha }] [ authpassword ] [ privacy privpassword ] [ volatile | n onvolatile ] Parameters Default s [...]
-
Page 271
show snmp group Configuring SNMP Users, Groups and Communities Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-13 Default s If remote is not specified , the user will be remov ed from the local SNMP eng ine. Mode Switch command, Read ‐ Wr i t e . Example This example [...]
-
Page 272
Configuring SNMP Users, Groups and Communities set snmp group 5-14 SNMP Configurat ion Storage type = nonVolatil e Row status = active Security model = SNMPv1 Security/user name = public.rou ter Group name = Anyone Storage type = nonVolatil e Row status = active Ta b l e 5 ‐ 6 shows a detailed explanation of the comman[...]
-
Page 273
clear snmp group Configuring SNMP Users, Groups and Communities Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-15 Example This example shows how to create an SNMP group called “anyone”, assi gn a user named “public” and assign SNMPv3 security to the[...]
-
Page 274
Configuring SNMP Users, Groups and Communities set snmp community 5-16 SNMP Configurat ion Example This example shows how to displ ay information about the SNMP “public” community name. For a description of this output, refer to “ set snmp community ?[...]
-
Page 275
clear snmp community Configuring SN MP Users, Groups and Communities Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-17 Examples This example shows how to set an SNMP community name called “vip”: Matrix(rw)->set snmp community vip This example shows how to grant SNMP[...]
-
Page 276
Configuring SNMP Access Rights show snmp access 5-18 SNMP Configurat ion Configuring SNMP Access Right s Purpose To review and configure SNMP access rights and assign viewing privileges and security levels to SNMP user groups. Commands show snmp access Use this command [...]
-
Page 277
show snmp access Configuring SNMP Access Rights Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-19 •I f volatile , nonvolatile or read ‐ only are not specif ied, all entries of all storage types wil l be display ed. Mode Switch command, Read ‐ Only . Example T[...]
-
Page 278
Configuring SNMP Access Rights set snmp access 5-20 SNMP Configurat ion set snmp access Use this command to set an SNMP access configuration. Synt ax set snmp access groupname security-m odel { v1 | v2c | usm } [ noauthentication | authentication | privacy ] [ context c ontext ] [ exact | prefix ] [ read read ] [[...]
-
Page 279
clear snmp access Configuring SNMP Access Rights Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-21 •I f write view is not specified, none will be applied. •I f notify view is not specified, none will be applied. •I f storage type is not specif[...]
-
Page 280
Configuring SNMP MIB Views show snmp view 5-22 SNMP Configurat ion Configuring SNMP MIB V iews Purpose To review and configure SNMP MIB views. SNMP views map SNMP objects to access righ ts. Commands show snmp view Use this command to display the MIB configurat ion ?[...]
-
Page 281
show snmp cont ext Configuring SNMP MIB Views Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-23 View Type = included Storage type = nonVolatile Row status = active View Name = All Subtree OID = 0.0 Subtree mask = View Type = included Storage type = nonVolatile Row status = active View Name = Network Subtree OID = 1.3.6.1.2.1 Subtree mask =[...]
-
Page 282
Configuring SNMP MIB Views set snmp view 5-24 SNMP Configurat ion Mode Switch command, Read ‐ Only . Usage An SNMP context is a collection of management information that can be accessed by an SNMP agent or entity . The default context allows all ?[...]
-
Page 283
clear snmp view Configuring SNMP MIB Views Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-25 Example This example shows how to set an SNMP MI B view to “public” with a subtree name of 1.3.6. 1 included: Matrix(rw)->set snmp view viewname p ublic subtree 1.3.6.1 [...]
-
Page 284
Configuring SNMP Target Parameters show snmp targetparams 5-26 SNMP Configurat ion Configuring SNMP T arget Parameters Purpose To review and configure SNMP target parameters. This controls where and under what circumstances SNMP notifications will be se nt. A target [...]
-
Page 285
set snmp targetparams Configuring SNMP Target Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-27 Storage type = nonVolatil e Row status = active Target Parameter Name = v2cExample Params Security Name = public Message Proc. Model = SNMPv2c Security Level = noAuthNoPr iv Storage type = nonVolatil e Row status = active Target Param[...]
-
Page 286
Configuring SNMP Target Parameters clear snmp tar getparams 5-28 SNMP Configurat ion Default s None. •I f not specified, security lev el will be set to noa uthenticatio n. •I f not specified, storage type will be set to nonvolatile . Mode Switch command, Read ?[...]
-
Page 287
show snmp targetaddr Configuring SNMP Target Addresses Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-29 Configuring SNMP T arget Addresses Purpose To review and configure SNMP target addresses which will receive SNMP notifica tion messages. An address conf iguration can b[...]
-
Page 288
Configuring SNMP Target Addresses set snmp targetaddr 5-30 SNMP Configurat ion Retry count = 4 Parameters = v2cParams Storage type = nonVolatil e Row status = active Ta b l e 5 ‐ 10 shows a detailed explanation of the command output. set snmp t arget addr Use this command to configure an SNM[...]
-
Page 289
clear snmp targetaddr Configuring SNMP Target Addresses Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-31 Default s •I f not specified, udpport will be set to 162 . •I f not specified, mask wi ll be set to 255.255.255.255 •I f not specified, timeout will [...]
-
Page 290
Configuring SNMP Target Addresses clear snmp targetaddr 5-32 SNMP Configurat ion Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear SNMP target address entry “tr ”: Matrix(rw)->clear snmp targetaddr tr[...]
-
Page 291
show snmp notify Configuring SNMP Notification Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-33 Configuring SNMP Notification Parameters Purpose To configure SNMP notification parameters and optional filters. Notifications are entities which handle the generation of ?[...]
-
Page 292
Configuring SNMP Notification Parameters show snmp notify 5-34 SNMP Configurat ion Parameters Default s •I f a notify name is not specified, all entries will be displayed. •I f volatile , nonvolatile or read ‐ only are not specif ied, all storage type entr[...]
-
Page 293
set snmp notify Configuring SNMP Notification Par ameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-35 set snmp notify Use this command to set the SNMP notify configuration. Synt ax set snmp notify notify tag tag [ trap | inform ] [ volatile | nonvolatile ] Parameters Default s •I f not sp[...]
-
Page 294
Configuring SNMP Notification Parameters show snmp notifyfilter 5-36 SNMP Configurat ion Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear the SNMP notify configuration fo r “hello”: Matrix(rw)->clear snmp notify hello show snmp notifyfilter Us[...]
-
Page 295
set snmp notifyfilter Configuring SNMP Notifica tion Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-37 set snmp notifyfilter Use this command to create an SN MP notify filter configuration. Synt ax set snmp notifyfilter profile subtre e oid-or-mibobject [ mask mask ] [ included | excluded [...]
-
Page 296
Configuring SNMP Notification Parameters show snmp notifyprofile 5-38 SNMP Configurat ion Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to delete the SNMP notify filter “pilot1”: Matrix(rw)->clear snmp notifyfilter pilot1 subtree 1.3.6 show snmp notifyp[...]
-
Page 297
set snmp notifyprofile Configuring SNMP Notification Para meters Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-39 set snmp notifyprofile Use this command to create an SN MP notify filter profile configuration. Synt ax set snmp notifyprofile profile targe tparam targetparam [ volatile | nonvolati[...]
-
Page 298
Configuring SNMP Notification Parameters clear snmp notifyprofile 5-40 SNMP Configurat ion Example This example shows how to delete SNMP notify profile “area51”: Matrix(rw)->clear snmp notifyprofile area51 targetparam v3ExampleParams[...]
-
Page 299
set snmp timefilter break Configuring SNMP Walk Behavior Enterasys Matrix DFE-Gold Series Configuratio n Guide 5-41 Configuring SNMP W alk Behavior Purpose To configure SNMP wa l k behavior . Commands set snmp timefilter break Use this command to set SNMP to exit the MIB wal k after th[...]
-
Page 300
Configuring SNMP Walk Behavior set snmp timefilter break 5-42 SNMP Configurat ion[...]
-
Page 301
Enterasys Matrix DFE-Gold Series Configuration Gu ide 6-1 6 Spanning T ree Configuration This chapter descri bes the Spanning Tr e e Configuratio n set of command s and how to use them. Overview: Single, Rapid and Multiple S p anning T ree Protocols The IEEE 802.1D Spanning Tr [...]
-
Page 302
Overview: Single, Rapid and Mult iple Spanning T ree Protocols 6-2 Spannin g Tree Configuration For details on creating Spanning Tr e e instances, refe r to “ set spantree msti ” on page 6 ‐ 14. For details on mapping Spanning Tr e e instances to VLANs, re[...]
-
Page 303
Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuration Gu ide 6-3 •D i s a b l i n g a port based on frequency of failure events Po r t forw arding state in the designated port is gated by a timer that is set upon BP[...]
-
Page 304
Configuring Spanning Tree Bridge Parameters 6-4 Spannin g Tree Configuration clear spantree version 6-10 show spantree stpmode 6-10 set spantree stpmode 6-1 1 clear spantree stpmode 6-1 1 show spantree maxconfigurablestps 6-12 set spantree maxconfigurablestps 6-12 clear spantree maxconfigurablestps 6-13 show spantree mstilist 6-13 set spantree msti[...]
-
Page 305
Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuration Gu ide 6-5 set spantree autoedge 6-29 clear spantree autoedge 6-29 show spantree legacypathcost 6-30 set spantree legacypathcost 6-30 clear spantree legacypathcost 6-31 show spantree tctrapsuppress 6-31 set spantree tctrapsuppress 6-32 clear spantree tctrapsu[...]
-
Page 306
Configuring Spanning Tree Bridge Parameters show spantree stats 6-6 Spannin g Tree Configuration show sp antree st at s Use this command to display Spanning Tr e e information for one or more ports. Synt ax show spantree stats [ port port-string ] [ sid sid ] [ ac tive ] Parameters Default s •I f ?[...]
-
Page 307
show spantree stats Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuration Gu ide 6-7 Bridge Max Age - 20 se c Bridge Hello Time - 2 se c Bridge Forward Delay - 15 se c Topology Change Count - 7 Time Since Top Change - 00 da ys 03:19:15 Max Hops - 20 Ta b l e 6 ‐ 1 shows a detailed explanation ?[...]
-
Page 308
Configuring Spanning Tree Bridge Parameters show spantree stats 6-8 Spannin g Tree Configuration This example shows how to display port ‐ specif ic Spanning Tr e e information for port ge.1.1. Ta b l e 6 ‐ 2 describes the port ‐ specific information displayed . Matrix(rw)[...]
-
Page 309
show spantree version Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuration Gu ide 6-9 show sp antree version Use this command to display the current version of the Spanning Tree protocol running on the device. Synt ax show spantree version Paramete[...]
-
Page 310
Configuring Spanning Tree Bridge Parameters clea r spantree version 6-10 Spanning Tr ee Configuration mode will cause the bridge to transmit only 802.1D BPDUs, and will prevent non ‐ edge ports fr om rapidly transitioning to forw arding state. Example This example[...]
-
Page 311
set spantree stpmode Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-11 Example This example shows how to display the STP mod e: Matrix(rw)->show spantree stpmode Bridge Stp Mode is set to ieee8021 set sp antree stpmode Use this command to globall[...]
-
Page 312
Configuring Spanning Tree Bridge Paramete rs show spantree maxconfigurablestps 6-12 Spanning Tr ee Configuration Example This example shows how to reset the STP mode to IEEE 802.1: Matrix(rw)->clear spantree stpmode show sp antree maxconfigurablestp s Use this command to display the[...]
-
Page 313
clear spantree maxconfigurablestps Conf iguring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-13 Example This example shows how to set the STP max configs to 8: Matrix(rw)->set spantree maxconfigur ablestps 8 clear sp antree maxconfigurablestp s Use this ?[...]
-
Page 314
Configuring Spanning Tree Bridge Parameters set spantree msti 6-14 Spanning Tr ee Configuration set sp antree msti Use this command to create or delete a Mult iple Spanning Tr e e instance. Synt ax set spantree msti sid sid { create | delete } Parameters Default s None. Mode Switch command, Read ?[...]
-
Page 315
show spantree mstmap Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-15 show sp antree mstmap Use this command to display the mapping of a filteri ng database ID (FID) to a Spanning Tr e e s . Since VLANs are mapped ?[...]
-
Page 316
Configuring Spanning Tree Bridge Parameters clear spantree mstmap 6-16 Spanning Tr ee Configuration Example This example shows how to map FID 3 to SID 2: Matrix(rw)->set spantree mstmap 3 si d 2 clear sp antree mstmap Use this command to map a FID back to SID 0. [...]
-
Page 317
show spantree mstcfgid Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-17 Example This example shows how to display assignments for all VLANs assigned to any SID other tha n SID 0: Matrix(rw)->show spantree vlanlist Vlan 104 is map[...]
-
Page 318
Configuring Spanning Tree Bridge Parameters clear spantr ee mstcfgid 6-18 Spanning Tr ee Configuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set the MST configuration name to “mstconfig”: Matrix(rw)->set spantree mstconfigid cf[...]
-
Page 319
set spantree bridgeprioritymod e Conf iguring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-19 Default s None. Mode Switch command, Read ‐ Only . Example This example shows how to display the Spanning Tr e e bridge priority mode setting: Matrix(rw)-&[...]
-
Page 320
Configuring Spanning Tree Bridge Parameters show spantree priority 6-20 Spanning Tr ee Configuration Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to reset the bridge priority mode to 802.1t: Matrix(rw)->clear spantree bridgepri oritymode show sp antree[...]
-
Page 321
set spantree priority Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-21 Parameters Default s If sid is not specifie d, priority will be set on Spanning Tr e e 0. Mode Switch command, Read ‐ Wr i t e . Usage The device with th e[...]
-
Page 322
Configuring Spanning Tree Bridge Parameters clear spantree priority 6-22 Spanning Tr ee Configuration clear sp antree priority Use this command to reset the Spanning Tr e e priority to the default va l u e of 32768. Synt ax clear spantree priority [ sid ] Parameters Default s If sid is[...]
-
Page 323
set spantree bridgehellomode Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-23 Example This example shows how to display the Spanning Tr e e bridge hello mode. In this case, a single bridge hello mode has been [...]
-
Page 324
Configuring Spanning Tree Bridge Parameters show spantree hello 6-24 Spanning Tr ee Configuration Example This example shows how to reset the Spanning Tr e e bridge hello mode to enabled: Matrix(rw)->clear spantree bridgehel lomode show sp antree hello Use this command to displa[...]
-
Page 325
clear spantree hello Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-25 Example This example shows how to globally set the Spanning Tr e e hello time to 10 seconds: Matrix(rw)->set spantree hello 10 clear sp antree hello Use this c[...]
-
Page 326
Configuring Spanning Tree Bridge Parameters set spantree maxage 6-26 Spanning Tr ee Configuration set sp antree maxage Use this command to set the bridge maxim um aging time. Synt ax set spantree maxage agingtime Parameters Default s None Mode Switch command, Read ‐ Wr i t e . Usage Maximum agin[...]
-
Page 327
show spantree fwddelay Configuri ng Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-27 Example This example shows how to globally reset the maximum aging time: Matrix(rw)->clear spantree maxage show sp antree fwddelay Use this command to display t[...]
-
Page 328
Configuring Spanning Tree Bridge Parameters clear spantree fwddelay 6-28 Spanning Tr ee Configuration addition, each port needs ti me to listen for conflicting information that wou l d make it return to a blocking state; otherwise, temporar y data loops migh[...]
-
Page 329
set spantree autoedge Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-29 Example This example shows how to display the status of the automatic edge port detection function: Matrix(rw)->show spantree autoedge autoEdge is currently enabled. [...]
-
Page 330
Configuring Spanning Tree Bridge Parame ters show spantree legacypathcost 6-30 Spanning Tr ee Configuration show sp antree legacyp athcost Use this command to display the default Spanning Tr e e path cost setting. Synt ax show spantree legacypathcost Parameters None. Default s None. Mode Switch comman[...]
-
Page 331
clear spantree legacypathcost Confi guring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-31 clear sp antree legacyp athcost Use this command to set the Spanning Tr e e default va l u e for legacy path cost to 802.1t val u e s . Synt ax clear sp[...]
-
Page 332
Configuring Spanning Tree Bridge Para meters set spantree tctrapsuppress 6-32 Spanning Tr ee Configuration set sp antree tctrap suppress Use this command to disable or enable topology change trap suppression on Rapid Spanning Tree edge por ts. Synt ax set spantree tctrapsupress { d[...]
-
Page 333
show spantree txholdcount Configur ing Spanning T ree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-33 Example This example shows how to clear topology change trap suppression settings: Matrix(rw)->clear spantree tctrapsup press show sp antree txholdcount Use this comman[...]
-
Page 334
Configuring Spanning Tree Bridge Pa rameters clear spantree txholdcount 6-34 Spanning Tr ee Configuration Example This example shows how to globally set the transmit hold count to 5: Matrix(rw)->set spantree txholdcount 5 clear sp antree txholdcount Use this command to reset the[...]
-
Page 335
set spantree maxhops Configuring Spanning T ree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-35 set sp antree maxhop s Use this command to set the Spanning Tr e e maximum hop count. Synt ax set spantree maxhops max_hop_count Parameters Default s None. Mode Switch command, [...]
-
Page 336
Configuring Spanning Tree Bridge Parameters show spantree spanguard 6-36 Spanning Tr ee Configuration show sp antree sp anguard Use this command to display the status of the Spanning Tr e e span guard function. Synt ax show spantree spanguard Parameters None. Default s None. Mode Switch comman[...]
-
Page 337
clear spantree spanguard Configuri ng Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-37 Example This example shows how to enable the span guard function: Matrix(rw)->set spantree spanguard e nable clear sp antree sp anguard Use this command to resets [...]
-
Page 338
Configuring Spanning Tree Bridge Parameters set spantree spanguardtimeout 6-38 Spanning Tr ee Configuration set sp antree sp anguard timeout Use this command to set the amount of time (in seconds) an edge port will remain locked by the span guard function. Synt ax s[...]
-
Page 339
show spantree spanguardlock Configur ing Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-39 show sp antree sp anguardlock Use this command to display the span guard lock status of one or more ports. Synt ax show spantree spanguardlock port-str ing Parame[...]
-
Page 340
Configuring Spanning Tree Bridge Parameters show spantree spanguardtrapenable 6-40 Spanning Tr ee Configuration Example This example shows how to unlock port fe.1.16: Matrix(rw)->clear spantree spanguard lock fe.1.16 show sp antree sp anguard trapenable Use this command to displays the state ?[...]
-
Page 341
clear spantree spanguardtrap enable Confi guring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-41 clear sp antree sp anguard trap enable Use this command to reset the Spanning Tree span guard trap function ba ck to the default state of [...]
-
Page 342
Configuring Spanning Tree Bridge Parameters set spantree backuproot 6-42 Spanning Tr ee Configuration set sp antree backuproot Use this command to enable or disable the Spanning Tr e e backup root function. Synt ax set spantree backuproot sid { enable | disable } Parameters Default s None. Mode Sw[...]
-
Page 343
show spantree backuproottrapen dable Confi guring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-43 Example This example shows how to reset the backup root function to disabled on SID 2: Matrix(rw)->clear spantree backuproo t 2 show sp antree backupr[...]
-
Page 344
Configuring Spanning Tree Bridge Parameters clear spantree backuproottrapenable 6-44 Spanning Tr ee Configuration Example This example shows how to enable the backup root trap function: Matrix(rw)->set spantree backuproott rapenable enable clear sp antree backuproottrapenable Use this command t[...]
-
Page 345
set spantree newroottrapenable Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-45 set sp antree newroottrapenable Use this command to enable or disable the Spanning Tr e e new root trap function. Synt ax set spantree newroottrapenable { enab [...]
-
Page 346
Configuring Spanning Tree Bridge Parameters clear spantree default 6-46 Spanning Tr ee Configuration clear sp antree default Use this command to restore default val u e s to a Spanning T ree. Synt ax clear spantree default [ sid ] Parameters Default s If sid is not specifie d, defaults [...]
-
Page 347
show spantree debug Configuring Spanning Tree Bridge Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-47 Example This example shows how to display Spanning Tr e e debug counter s for link aggregation port 3, SID 0: Matrix(rw)->show spantree debug port lag.0.3 STP Diagn[...]
-
Page 348
Configuring Spanning Tree Bridge Parameters cle ar spantree debug 6-48 Spanning Tr ee Configuration clear sp antree debug Use this command to clear Spanning Tr e e debug counters. Synt ax clear spantree debug Parameters None. Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example ?[...]
-
Page 349
clear spantree debug Configu ring Spanning Tree Port Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-49 Configuring S p anning T ree Port Parameters Purpose To display and set Spanning Tr e e port parameters, including enabling or disabling the Spanning Tr e e algorithm [...]
-
Page 350
Configuring Spanning Tree Port Parameters show spantree portenable 6-50 Spanning Tr ee Configuration show sp antree portenable Use this command to display the port status on one or more Spanning Tr e e ports. Synt ax show spantree portenable [ port port- string ] Parameters Default s If po[...]
-
Page 351
clear spantree portenable Configuring Spanning Tree Port Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-51 clear sp antree portenable Use this command to reset the default val u e for one or more Spanning Tr e e ports to enabled. Synt ax clear spantree portenable po[...]
-
Page 352
Configuring Spanning Tree Port Parameters set spantree portadmin 6-52 Spanning Tr ee Configuration set sp antree port admin Use this command to disable or enable the Spanning Tr e e algorit hm on one or more ports. Synt ax set spantree portadmin port-string { disable | enable } Parameters [...]
-
Page 353
set spantree protomigration Configuring Spanning Tree Port Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-53 set sp antree protomigration Use this command to reset the protocol state migration machine for one or more Spanning Tr e e ports. When operating [...]
-
Page 354
Configuring Spanning Tree Port Para meters show spantree blockedports 6-54 Spanning Tr ee Configuration Example This example shows how to display the Spanning Tr e e state for fe.1.7: Matrix(rw)->show spantree portstate port fe.1.7 Port fe.1.7 has a Port State of Forw arding on SID 0 show sp antree blo[...]
-
Page 355
set spantree portpri Configuring Spanning Tree Port Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-55 Parameters Default s •I f port ‐ string is not specif ied, port priority will be display ed for all Spanning Tr e e ports. •I f sid is not specif ied,[...]
-
Page 356
Configuring Spanning Tree Port Parameters clear spantree p ortpri 6-56 Spanning Tr ee Configuration clear sp antree portpri Use this command to reset the bridge priority of a Spanning Tr e e port to a def ault va l u e of 128. Synt ax clear spantree portpri port-string [ si[...]
-
Page 357
clear spantree porthello Configuring Spanning Tree Port Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-57 Usage This command can be executed only if bridge hello mode is disable d. For information on using the set spantree bridgehellomod e command, ?[...]
-
Page 358
Configuring Spanning Tree Port Parameters show spantree a dminpathcost 6-58 Spanning Tr ee Configuration •I f sid is not specif ied, port cost will be display ed for all Spanning T rees. Mode Switch command, Read ‐ Only . Example This example shows how to display ?[...]
-
Page 359
clear spantree adminpathcost Configur ing Spanning Tree Port Par ameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-59 Parameters Default s If sid is not specifie d, admin path cost will be set for Spanning Tr e e 0. Mode Switch command, Read ‐ Wr i t e . Usage By de[...]
-
Page 360
Configuring Spanning Tree Port Pa rameters show spantree adminedge 6-60 Spanning Tr ee Configuration Example This example shows how to reset the admin path cost to 0 for fe.3.2 on SID 1: Matrix(rw)->clear spantree adminpath cost fe.3.2 sid 1 show sp antree adminedge Use this [...]
-
Page 361
clear spantree adminedge Configuring Spanning Tree Port Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-61 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set fe.1.11 as an edge port: Matrix(rw)->set spantree adminedge f e.1.11 true clear sp antree admi[...]
-
Page 362
Configuring Spanning Tree Port Parameters show spantree adm inpoint 6-62 Spanning Tr ee Configuration Mode Switch command, Read ‐ Only . Example This example shows how to display the edge port status for fe.2.7: Matrix(rw)->show spantree operedge p ort fe.2.7 Port fe.2.7 has a Port Oper Edge [...]
-
Page 363
set spantree adminpoint Configuring Spanning Tree Port Parameters Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-63 Default s If not specified, status will be disp layed for all ports. Mode Switch command, Read ‐ Only . Example This example shows how to display the p[...]
-
Page 364
Configuring Spanning Tree Port Parameters clear spantree adminpoint 6-64 Spanning Tr ee Configuration clear sp antree adminpoint Use this command to reset the administrative poin t ‐ to ‐ point status of the LAN segment attached to a Spanning Tr e e port to auto [...]
-
Page 365
set spantree lp Configuring Spanning Tree Loop Protect Features Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-65 Configuring S p anning T ree Loop Protect Features Purpose To display and set Spanning Tr e e Loop Protect parameters, including the global parameters of Loop Protect [...]
-
Page 366
Configuring Spanning Tree Loop Protect Features show spantree lp 6-66 Spanning Tr ee Configuration Parameters Default s If no SID is specified, SID 0 is assumed. Mode Switch command, Read ‐ Wr i t e . Usage The Loop Protect feature is disabled by default. See “Loop [...]
-
Page 367
clear spantree lp Configuring Spa nning Tree Loop Protect Features Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-67 If no SID is specified, SID 0 is assumed. Mode Switch command, Read ‐ Only . Example This example shows how to display Loop Protect status on [...]
-
Page 368
Configuring Spanning Tree Loop Protect Features clear spantree lplock 6-68 Spanning Tr ee Configuration Parameters Default s If no port ‐ string is specified, status is displayed for all ports. If no SID is specified, SID 0 is assumed. Mode Switch command, Read ?[...]
-
Page 369
set spantree lpcapablepartner Configuri ng Spanning Tree Loop Protect F eatures Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-69 Usage The default state is unlocked. Example This example shows how to clear Loop Protect lock from ge.1.1: Matrix(rw)->show spantree lplock por t ge.1.[...]
-
Page 370
Configuring Spanning Tree Loop Protect Features show spantree lpcapablepartner 6-70 Spanning Tr ee Configuration show sp antree lpcap ablep artner Use this command to the Loop Protect capability of a link partner for one or more ports. Synt ax show spantree lpcapablepartner [ port port[...]
-
Page 371
set spantree lpthreshold Configuring Spa nning Tree Loop Protect Features Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-71 set sp antree lpthreshold Use this command to set the Loop Protect event threshold. Synt ax set spantree lpthreshold value Parameters Default s None. The default ev ent [...]
-
Page 372
Configuring Spanning Tree Loop Protect Features clear spantree lpthreshold 6-72 Spanning Tr ee Configuration Example This example shows how to display the current Loop Protect threshold va l u e : Matrix(rw)->show spantree lpthreshol d LoopProtect event threshold is set t o 4 clear sp antree lpthreshol[...]
-
Page 373
show spantree lpwindow Configuring Spanning Tree Loop Prote ct Features Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-73 counter is not reset until the Loop Protect ev ent threshold is reached. If the thre shold is reach ed, that constitutes a loop protect[...]
-
Page 374
Configuring Spanning Tree Loop Protect Features set spantr ee lptrapenable 6-74 Spanning Tr ee Configuration Example This example shows how to reset the Loop Protect ev ent window to the default of 180 seconds: Matrix(rw)->clear spantree lpwindow set sp antree lptrapenable Use t[...]
-
Page 375
clear spantree lptrapenable Configuring Spanning Tree Loop Prote ct Features Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-75 Example This example shows how to display the current Loop Protect ev ent notification status: Matrix(rw)->show spantree lptrapenab le LoopProtect event traps are [...]
-
Page 376
Configuring Spanning Tree Loop Protect Features show spantree disputedbpduthreshold 6-76 Spanning Tr ee Configuration Usage A disputed BPDU is one in which the flag s field indicates a designated role and learning, and the priority vect o r is wor se than th[...]
-
Page 377
show spantree nonforwardingreason Confi guring Spanning Tree Loop Protect Features Enterasys Matrix DFE-Gold Series Configuratio n Guide 6-77 Parameters None. Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to reset the disputed BPDU threshold to the def[...]
-
Page 378
Configuring Spanning Tree Loop Protect Feat ures show spantree nonforwar dingreason 6-78 Spanning Tr ee Configuration[...]
-
Page 379
Enterasys Matrix DFE-Gold Series Configuration Gu ide 7-1 7 802.1Q VLAN Configuration This chapter descri bes the Enterasys Matrix syste m’ s capabilities to implement 802.1Q virtual LANs (VLANs). It documents how to: •C r e a t e , enable, disable and name [...]
-
Page 380
VLAN Configuration Summary 7-2 802.1Q VLAN Configuration Port Assignment Scheme For information on this device’ s port as signment scheme, refer to “ Por t String Syntax Used in the CLI ” on page 4 ‐ 2. Port String Synt ax Used in the CLI For information on [...]
-
Page 381
show vlan Reviewing Existing VLANs Enterasys Matrix DFE-Gold Series Configuration Gu ide 7-3 3. Add the host port and the desired switch port to the egress list for the VLAN created in Step 1. (“ set vlan egress ” on page 7 ‐ 18) 4. Set a p[...]
-
Page 382
Reviewing Existing VLANs show vlan 7-4 802.1Q VLAN Configuration Parameters Default s If no options ar e specified, all information related to static and dynamic VLANs will be displayed. Mode Switch command, Read ‐ Only . Example This example shows how to disp[...]
-
Page 383
show vlan Reviewing Existing VLANs Enterasys Matrix DFE-Gold Series Configuration Gu ide 7-5 Forbidden Egress Ports Ports prevented fr om transmitted frames for this VLAN. Untagged Ports Port s configured to transmit untagged frames for this VLAN. T able 7-2 show vlan Output Det ails (continued) Output... W hat it displays...[...]
-
Page 384
Creating and Naming Static VLANs set vlan 7-6 802.1Q VLAN Configuration Creating and Naming St atic VLANs Purpose To create a new static VLAN, or to enable or disable exist ing VLAN(s). Commands set vlan Use this command to create a new static IEEE 802.1 Q VLAN,[...]
-
Page 385
set vlan name Creating and Naming Static VLANs Enterasys Matrix DFE-Gold Series Configuration Gu ide 7-7 Examples This example shows how to create VLAN 3: Matrix(rw)->set vlan create 3 This example shows how to disable VLAN 3: Matrix(rw)->set vlan disable 3 set vlan name Use this [...]
-
Page 386
Creating and Naming Static VLANs clear vlan name 7-8 802.1Q VLAN Configuration Example This example shows how to remove a stati c VLAN 9 from the device’ s VLAN list: Matrix(rw)->clear vlan 9 clear vlan name Use this command to remove the name of a VLAN[...]
-
Page 387
show port vlan Assigning Port VLAN IDs (PVIDs) and Ingr ess Filtering Enterasys Matrix DFE-Gold Series Configuration Gu ide 7-9 Assigning Port VLAN IDs (PVIDs) and Ingress Filtering Purpose To assign default VLAN IDs to unt agged frames on one or more ports, to configure MI B ‐ II in[...]
-
Page 388
Assigning Port VLAN IDs ( PVIDs) and Ingress Filtering set port vlan 7-10 802.1Q VLAN Configuration Usage PVID determines the VLAN to which all untagged frames re ceived on one or more ports wil l be classified. Example This example shows how to display PVID[...]
-
Page 389
clear port vlan Assigning Port VLAN ID s (PVIDs) and Ingress Filtering Enterasys Matrix DFE-Gold Series Configuratio n Guide 7-11 Example This example shows how to add fe.1.1 0 to the port VLAN list of VLAN 4 (PVID 4). Since VL AN 4 is a new VLAN, it [...]
-
Page 390
Assigning Port VLAN IDs (PVIDs) and Ingress Filtering set vlan interface 7-12 802.1Q VLAN Configuration Mode Switch command, Read ‐ Only . Example This example shows how to display the interface entry for VLAN 1: Matrix(rw)->show vlan interface 1 VLAN Port Storage Typ e ----------------------[...]
-
Page 391
clear vlan interface Assigning Port VLAN IDs (PVIDs) and Ingr ess Filtering Enterasys Matrix DFE-Gold Series Configuratio n Guide 7-13 clear vlan interface Use this command to clear the MIB ‐ II interface entry mapped to a VLAN. Synt ax clear vlan interface vlan-list Parameters Default s None. Mode [...]
-
Page 392
Assigning Port VLAN IDs (PVIDs) and Ingr ess Filtering set port ingress filter 7-14 802.1Q VLAN Configuration Example This example shows how to di splay the port ingress filter status for Fast Ethernet ports 10 through 15 in module 1. In this case, the ?[...]
-
Page 393
show port discard Assigning Port VLAN IDs (PVIDs) and Ingress F iltering Enterasys Matrix DFE-Gold Series Configuratio n Guide 7-15 show port discard Use this command to display the frame discard mode for one or more ports. Synt ax show port discard [ port-string ] Parameters Default s If [...]
-
Page 394
Assigning Port VLAN IDs (PVIDs) and Ingress Filtering clear port discard 7-16 802.1Q VLAN Configuration Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set Fast Ethernet port 7 in module2 to discard both tagged and untagged frames: Matrix([...]
-
Page 395
show port egress Configuring the VLAN Egress List Enterasys Matrix DFE-Gold Series Configuratio n Guide 7-17 Configuring the VLAN Egress List Purpose To assign or remove ports on the egress li st of a particular VLAN. This determines which ports will be eligible to [...]
-
Page 396
Configuring the VLAN Egress List set vlan egress 7-18 802.1Q VLAN Configuration Example This example shows you how to show VLAN egress information for Fast Ethernet ports 1 through 3 in module 1. In this case, all three ports are allow ed [...]
-
Page 397
clear vlan egress Configuring the VLAN Egress List Enterasys Matrix DFE-Gold Series Configuratio n Guide 7-19 Examples This example shows how to add Fast Ethernet ports 5 through 10 in module 1 to the egress list of VLAN 7. This means that these [...]
-
Page 398
Configuring the VLAN Egress List show vlan dynamic egress 7-20 802.1Q VLAN Configuration show vlan dynamic egress Use this command to display which VLANs are currently enabled for VLAN dynamic egress. Synt ax show vlan dynamicegress [ vlan-list ] Parameters Default s If vlan ‐ list is ?[...]
-
Page 399
set vlan dynamicegress Configuring the VLAN Egress List Enterasys Matrix DFE-Gold Series Configuratio n Guide 7-21 Example This example shows how to enable the dynamic egr ess function on VLAN 7: Matrix(rw)->set vlan dynamicegress 7 enable[...]
-
Page 400
Enabling/Disabling GVRP set vlan dynamicegress 7-22 802.1Q VLAN Configuration Enabling/Disabling GVRP Purpose To dynamically create VLANs acr oss a switched netw ork. The GVRP (GARP VLAN Regist ration Protocol) command set is used to display GVRP configuration i[...]
-
Page 401
set vlan dynamicegress Enabling/Disabling GVRP Enterasys Matrix DFE-Gold Series Configuratio n Guide 7-23 Figure 7-1 Example of VLAN Propaga tion via GVRP Configuring a VLAN on an 802.1Q switch creates a static VLAN entry . The entry will alw ays remain registered and will [...]
-
Page 402
Enabling/Disabling GVRP show gvrp 7-24 802.1Q VLAN Configuration show gvrp Use this command to display GVRP configuration information. Synt ax show gvrp [ port-string ] Parameters Default s If port ‐ string is not specif ied, GVRP configuration information will be displayed f[...]
-
Page 403
show garp timer Enabling/Disabling GVRP Enterasys Matrix DFE-Gold Series Configuratio n Guide 7-25 Parameters Default s If port ‐ string is not specif ied, GARP timer inform ation will be displayed for all ports. Mode Switch command, Read ‐ Only . Example This example shows [...]
-
Page 404
Enabling/Disabling GVRP set gvrp 7-26 802.1Q VLAN Configuration set gvrp Use this command to enable or disable GVRP globally on the device or on one or more ports. Synt ax set gvrp { enable | disable } [ port-st ring ] Parameters Default s If port ‐ string is not [...]
-
Page 405
set garp timer Enabling/Disabling GVRP Enterasys Matrix DFE-Gold Series Configuratio n Guide 7-27 Example This example shows how to clear GVRP status globally on the device: Matrix(rw)->clear gvrp set garp timer Use this command to adjust the va l u e s of the join, [...]
-
Page 406
Enabling/Disabling GVRP clear garp timer 7-28 802.1Q VLAN Configuration Parameters Default s At least one optional parameter must be enter ed. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to reset the GARP leav e timer to 60 centiseconds ?[...]
-
Page 407
Enterasys Matrix DFE-Gold Series Configuration Gu ide 8-1 8 Policy Classification Configuration This chapter descri bes the Po l ic y Classification set of commands and how to use them. Policy Classification Configuration Summary Enterasys Matrix Ser ies devices support policy [...]
-
Page 408
Configuring Policy Profiles show policy profile 8-2 Policy Classification Conf iguration Configuring Policy Profiles Purpose To review , create, change and remove policy pr ofiles for managing netw ork resources. Commands show policy profile Use this command to display policy profi[...]
-
Page 409
set policy profile Configuring Policy Profiles Enterasys Matrix DFE-Gold Series Configuration Gu ide 8-3 Row Status :active Port VID Status :enabled Port VID Override :11 CoS Status :disabled CoS :0 Tagged Egress VLAN List :11 Forbidden VLAN List :none Untagged VLAN List :none Replace TCI Status :enabled Admin Profile Usage :none Oper Profile Usage[...]
-
Page 410
Configuring Policy Profiles set policy profile 8-4 Policy Classification Conf iguration Parameters Default s If optional parameters are not specified, none will be applied. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to create a policy profile ?[...]
-
Page 411
clear policy profile Configuring Policy Profiles Enterasys Matrix DFE-Gold Series Configuration Gu ide 8-5 clear policy profile Use this command to delete a policy profile ent ry . Synt ax clear policy profile profile-index Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This e[...]
-
Page 412
Configuring Policy Profiles set policy invali d action 8-6 Policy Classification Conf iguration set policy invalid action Use this command to assign the action the device will apply to an inv alid or unknown policy . Synt ax set policy invalid action { default-p olicy | drop | forw[...]
-
Page 413
show policy rule Assigning Classification Rules to Policy Profiles Enterasys Matrix DFE-Gold Series Configuration Gu ide 8-7 Assigning Classification Rules to Policy Profiles Purpose To review , assign and unassign classification and admin rules. Classification rules map policy profiles to [...]
-
Page 414
Assigning Classifi cation Rules to Policy Profiles show policy rule 8-8 Policy Classification Conf iguration Default s •I f port ‐ string , rule status, storage type, Syslog state, trap, and usage ‐ list are not specified, all rules related to other specifications [...]
-
Page 415
show policy rule Assigning Classification Rules to Policy Profiles Enterasys Matrix DFE-Gold Series Configuration Gu ide 8-9 |PID |Rule Type |Rule Data |Mk|PortStr |RS|ST|S|T|D|VLAN|CoS |U| | 1 |Ether |32923 (0x809B) |16|All | A|NV|Y|Y| | 105| |?| | 1 |Ether |33011 (0x80F3) |16|All | A|NV|Y|Y| | 105| |?| | 1 |Ether |33079 (0x8137) |16|All | A|NV|Y|[...]
-
Page 416
Assigning Classifi cation Rules to Policy Profiles show policy capa bility 8-10 Policy Classification Con figuration show policy cap ability Use this command to display all policy classification capabilities supported by you r Enterasys Matrix Series device. Synt ax show policy [...]
-
Page 417
set policy classify Assigning Classifica tion Rules to Policy Profiles Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-11 |MAC source address | X | X | X | X | X | X | X | X | X | |MAC destination address | X | X | X | X | X | X | X | X | X | |IPX source address | X | X | X | X | X | X | X | X | X | |IPX destination address | X | X | X | X [...]
-
Page 418
Assigning Classifi cation Rules to Policy Profiles set poli cy classify 8-12 Policy Classification Con figuration Parameters Default s If mask is not s pecified, all data bits will be considered relevant. Mode Switch command, Read ‐ Wr i t e . Usage Classification rules are automatic[...]
-
Page 419
set policy ru le Assigning Classification Rules to Policy Profiles Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-13 Examples This example shows how to use Ta b l e 8 ‐ 3 to create (and enable) a VLAN classification rule to policy 2, classification 65, to [...]
-
Page 420
Assigning Classifi cation Rules to Policy Profiles set policy rule 8-14 Policy Classification Con figuration Default s •I f mask is not sp ecified, all data bits will be considered relevant. •I f port ‐ string is not specif ied, rule will be scoped to all [...]
-
Page 421
clear policy rule Assigning Classification Rules to Policy Profiles Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-15 clear policy rule Use this command to delete one or all policy classification rule entries. Synt ax clear policy rule admin-profil e | profile-index all-pid-entries | ether ipdest[...]
-
Page 422
Assigning Classifi cation Rules to Policy Profiles clear policy all-rules 8-16 Policy Classification Con figuration Default s When applicable, data , mask , and port ‐ string must be speci fied for individual rule s to be cleared. Mode Switch command, Read ‐ Wr i t e . Example This[...]
-
Page 423
set policy port Assigning Classification Rules to Policy Profiles Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-17 set policy port Use this command to assign an administra tive rule to a port. Synt ax set policy port port-name admin-id Parameters Default s None. Mode Switch command, Read ‐[...]
-
Page 424
Assigning Classifi cation Rules to Policy Profiles set policy allowed-type 8-18 Policy Classification Con figuration Example This example shows how to show information about policies allow ed on port ge.1.5: Matrix(rw)->show policy allowed-type ge.1.5 SUPPORTED AND ALLOWED TRAFFIC RULE T YPES o[...]
-
Page 425
clear policy allowed-type Assigning Cl assification Rules to Policy Profiles Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-19 Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to allow only rule type 1 (source MA C address classification) to be [...]
-
Page 426
Assigning Classifi cation Rules to Policy Profiles clear policy port-hit 8-20 Policy Classification Con figuration Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear rule port hit indications on all ports: Matrix(rw)->clear policy port-hit al l[...]
-
Page 427
clear policy port-hit Configuring Policy Class of Service (CoS) Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-21 Configuring Policy Class of Service (CoS) Using Port-Based or Po licy-Based CoS Settings The Enterasys Matrix Series device supports Class of Service (CoS), which allows yo u [...]
-
Page 428
Configuring Policy Clas s of Service (CoS) clear policy port-hit 8-22 Policy Classification Con figuration Purpose To configure policy ‐ based Class of Service. Commands Define IRL or TXQ resources (data rates or transmit priorities). set cos port-resource irl set cos port-resource tx q Bind a CoS reference index ID to a defin[...]
-
Page 429
show cos state C onfiguring Policy Class of Service (CoS) Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-23 show cos st ate Use this command to display the Class of Service enable state. Synt ax show cos state Parameters None. Default s None. Mode Switch command, Read ‐ Only . Example This [...]
-
Page 430
Configuring Policy Clas s of Service (CoS) show cos port-type 8-24 Policy Classification Con figuration show cos port-type Use this command to display Class of Service port type configurations. Synt ax show cos port-type [ irl | txq ] [ inde x-list ] Parameters Default s If not specified, all [...]
-
Page 431
show cos port-type Configuring Policy Class of Service (CoS) Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-25 Gbps 1 DFE-P 4Q 32/4 perc ge.2.1-30; ge.2.1-30; Kbps ge.3.1-30; ge.3.1-30; Mbps ge.4.1-30; ge.4.1-30; Gbps fe.6.1-48; fe.6.1-48; ge.6.1-6; ge.6.1-6; fe.7.1-72 fe.7.1-72 Port type Number of Supp orted Eligible Unselected Index desc[...]
-
Page 432
Configuring Policy Clas s of Service (CoS) show cos unit 8-26 Policy Classification Con figuration show cos unit Use this command to display Class of Service uni ts of measure information, including rate type, minimum and maximum limits of the port groups, a[...]
-
Page 433
show cos port-config C onfiguring Policy Class of Service (CoS) Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-27 show cos port-config Use this command to display Class of Service port gr oup configurations. Synt ax show cos port-config [ irl | txq ] [ gr oup-type-index ] Parameters Default s If [...]
-
Page 434
Configuring Policy Clas s of Service (CoS) set cos port-config irl 8-28 Policy Classification Con figuration Port Group :0 Port Type :1 Assigned Ports :ge.2.1-30;ge.3.1-3 0;ge.4.1-30;fe.6.1-48;ge.6.1-6;fe.7.1-72 Arbiter Mode :Strict Slices/queue :Q [ 0]: 0 Q [ 1 ]: 0 Q [ 2]: 0 Q [ 3]: 32 Percentage/queue :Q [ 0]: 0% Q [ 1 ]: 0% Q [ 2]: 0% Q [ 3]: 1[...]
-
Page 435
clear cos port-config irl Configuring Policy Class of Service (CoS) Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-29 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to create a CoS inbound rate limiting port group entry named “test irl” [...]
-
Page 436
Configuring Policy Clas s of Service (CoS) clear cos port-config txq 8-30 Policy Classification Con figuration Parameters Default s •I f a name is not specifie d, default names described in Ta b l e 8 ‐ 5 will be applied. •I f not specified, this config uration wi ll [...]
-
Page 437
show cos port-resou rce Configuring Policy Class of Service (CoS) Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-31 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear all non ‐ default CoS tra nsmit queue port group entries: Matrix(rw)->clear cos[...]
-
Page 438
Configuring Policy Clas s of Service (CoS) set cos port-re source irl 8-32 Policy Classification Con figuration set cos port-resource irl Use this command to configure a Class of Service inbound rate limit ing port resource entry . Synt ax set cos port-resource irl group-type-index irl-number [...]
-
Page 439
clear cos port-resource irl Configuring Policy Class of Service (CoS) Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-33 clear cos port-resource irl Use this command to clear one or all Class of Service inbound rate limiting port resource configurations: Synt ax clear cos port-[...]
-
Page 440
Configuring Policy Clas s of Service (CoS) clear cos port-resource txq 8-34 Policy Classification Con figuration Parameters Default s •I f a rate is not specified, port defaults will be applied. •I f not specified, no algorithm wi ll be assigned. Mode Switch command, ?[...]
-
Page 441
show cos reference Configuring Policy Class of Service (CoS) Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-35 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear all port resource settings associated with Class of Service transmit queue ?[...]
-
Page 442
Configuring Policy Clas s of Service (CoS) set cos referenc e irl 8-36 Policy Classification Con figuration 0.1 12 txq 3 0.1 13 txq 3 0.1 14 txq 3 0.1 15 txq 3 set cos reference irl Use this command to set a Class of Service inbound rate limiting reference configuration. Synt ax set cos reference [...]
-
Page 443
set cos reference txq C onfiguring Policy Class of Service (CoS) Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-37 Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear all Class of Service inbound rate limiting reference entries: Mat[...]
-
Page 444
Configuring Policy Clas s of Service (CoS) show cos settings 8-38 Policy Classification Con figuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear all Class of Service transmit queue ref erence entries: Matrix(rw)->clear co[...]
-
Page 445
set cos settings Configuring Policy Class of Service (CoS) Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-39 6 6 * 12 * 7 7 * 14 * set cos settings Use this command to configure a Class of Service entry . Synt ax set cos settings cos-list [ priority priority ] [ tos-v alue tos-value ] [ txq-reference txq[...]
-
Page 446
Configuring Policy Clas s of Service (CoS) show cos violation irl 8-40 Policy Classification Con figuration Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear the priority and transmit queue reference va lu es for CoS entry 2: Matri[...]
-
Page 447
clear cos all-entries Configuring Policy Class of Service (CoS) Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-41 Parameters Default s If no options are specified, all information for all types of CoS violations will be displayed . Mode Switch command, Read ‐ Wr i t e . [...]
-
Page 448
Configuring Policy-Based Routing show route- map 8-42 Policy Classification Con figuration Configuring Policy-Based Routing About Policy-Based Routing Normally , IP packets are forwarded according to the route that has been selected by traditional routing protocols, such as [...]
-
Page 449
route-map Configuring Policy-Based Routing Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-43 Parameters Default s None. Mode Router command, Glob al configuration: Matrix>Ro uter(config)# Example This example shows how to display route map list 101. In this case, the ?[...]
-
Page 450
Configuring Policy-Based Routing match ip address 8-44 Policy Classification Con figuration Default s •I f permit or deny is not s pecified, this command will enable route map or policy based routing configuration mode. •I f sequence ‐ number is not s peci[...]
-
Page 451
set next hop Configuring Policy-Based Routing Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-45 set next hop Use this command to set one or mor e next hop IP address for packets matching an extended access list in a configured route map. Synt ax[...]
-
Page 452
Configuring Policy-Based Routing ip policy route-map 8-46 Policy Classification Con figuration Example This example shows how to display policy information: Matrix>Router(config)#show ip policy Interface Route map Priority Load policy Pinger Interval Retries 3 103 first first-available off 3 3 2 102 only roun d-robin [...]
-
Page 453
ip policy priority Configuring Policy-Based Routing Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-47 Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan <vlan_id>))# Usage The “no” form of un ‐ assigns a route map list. Example This example [...]
-
Page 454
Configuring Policy-Based Routing ip policy load-policy 8-48 Policy Classification Con figuration ip policy load-policy Use this command to configure PBR next hop behavior . Synt ax ip policy load-policy {[ first-available ] [ round-robi n ] [ ip-hash { sip | dip | both }]} no ip policy load-policy Parameters Defa[...]
-
Page 455
ip policy pinger Configuring Policy-Based Routing Enterasys Matrix DFE-Gold Series Configuratio n Guide 8-49 Default s •I f not specified, interval will be set to 3 seconds. •I f not specified, retries wil l be set to 3. Mode Router command, Interface configuration:[...]
-
Page 456
Configuring Policy-Based Routing ip policy pinger 8-50 Policy Classification Con figuration[...]
-
Page 457
Enterasys Matrix DFE-Gold Series Configuration Gu ide 9-1 9 IGMP Configuration This chapter descri bes the IGMP Configuration set of commands and how to use them. About IP Multicast Group Management The Internet Group Management Protocol (IGMP) runs between host[...]
-
Page 458
IGMP Configuration Summary show igmp enable 9-2 IGMP C onfiguration Howeve r , note that IGMP neither alters nor routes any IP multicast packets. Since IGMP is not concerned with the deliv ery of IP multicast packets across subnetworks, an ex[...]
-
Page 459
set igmp enable Enabling / Disabling IGMP Enterasys Matrix DFE-Gold Series Configuration Gu ide 9-3 Mode Switch command, Read ‐ Only . Example This example shows how to display the IGMP status for VLAN 104: Matrix(rw)->show igmp enable 104 IGMP Default State for vlan 104 is D isabled set igmp[...]
-
Page 460
Enabling / Disabling IGMP set igmp disable 9-4 IGMP C onfiguration Example This example shows how to disable IGMP on VLAN 104: Matrix(rw)->set igmp disable 104[...]
-
Page 461
show igmp query Configuring IGMP Enterasys Matrix DFE-Gold Series Configuration Gu ide 9-5 Configuring IGMP Purpose To display and set IGMP configuration parameters, including query interval and response time settings, and to create and configure static IGMP entries[...]
-
Page 462
Configuring IGMP set igmp query-enable 9-6 IGMP C onfiguration Default s None. Mode Switch command, Read ‐ Only . Example This example shows how to display the IGMP query state for VLAN 1: Matrix(rw)->show igmp query 1 IGMP querying on vlan 1 is Disabled set igmp query-enable Use [...]
-
Page 463
show igmp grp-full-action Conf iguring IGMP Enterasys Matrix DFE-Gold Series Configuration Gu ide 9-7 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to disable IGMP querying on VL AN 104: Matrix(rw)->set igmp query-disable 1 04 show igmp grp-full-action Use this com[...]
-
Page 464
Configuring IGMP show igmp config 9-8 IGMP C onfiguration Mode Switch command, Read ‐ Wr i t e . Example This example shows how to flood multicast frames to the VLAN when the multicast group table is full: Matrix(rw)->set igmp grp-full-action 2 show igmp config Use [...]
-
Page 465
set igmp config Configuring IGMP Enterasys Matrix DFE-Gold Series Configuration Gu ide 9-9 set igmp config Use this command to configure IGMP settings on one or more VLANs. Synt ax set igmp config vlan-list {[ query-in terva l query-interval ] [ igmp-version igmp- version ] [ max-resp-time max-resp-tim e [...]
-
Page 466
Configuring IGMP set igmp delete 9-10 IGMP C onfiguration Example This example shows how to set the IGMP query interv al time to 250 seconds on VLAN 1: Matrix(rw)->set igmp config 1 query- interval 250 set igmp delete Use this command to remove IGMP configura[...]
-
Page 467
show igmp stat ic Configuring IGMP Enterasys Matrix DFE-Gold Series Configuratio n Guide 9-11 Example This example shows how to display IGMP group information for VLAN 105. In this example, the device knows to forw ard all multicast traffic for IP gr[...]
-
Page 468
Configuring IGMP set igmp remove-static 9-12 IGMP C onfiguration Default s If not specified, the static entry will be created and not modified. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to add port fe. 1.3 to the IGMP group [...]
-
Page 469
show igmp protocols Configuring IGMP Enterasys Matrix DFE-Gold Series Configuratio n Guide 9-13 show igmp protocols Use this command to display the binding of IP protocol id to IGM P classification. Synt ax show igmp protocols Default s None. Mode Switch command, Read ‐ Only . Exampl[...]
-
Page 470
Configuring IGMP clear igmp protocols 9-14 IGMP C onfiguration Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to change IGMP routing protocols to a protocol id of 3: Matrix(rw)->set igmp protocols class ification 2 protocol-id 3 modify cl[...]
-
Page 471
show igmp reporters Configuring IGMP Enterasys Matrix DFE-Gold Series Configuratio n Guide 9-15 Example This example shows how to display igmp information for vlan 12: Matrix(rw)->show igmp vlan 12 IGMP Vlan 12 Info IGMP query state : Enable d QueryInterval(sec.) : 125 Status : Active IGMP Version : 2 Quer[...]
-
Page 472
Configuring IGMP show igmp flows 9-16 IGMP C onfiguration lag.0.2 239.255.12.43 1 Any 253 DYNAMIC lag.0.2 239.255.255.250 1 Any 255 DYNAMIC lag.0.2 239.255.255.250 20 Any 249 DYNAMIC lag.0.4 235.80.68.83 20 Any 237 DYNAMIC lag.0.4 239.255.255.250 20 Any 243 DYNAMIC show igmp flows Use this command to display IGMP flow in[...]
-
Page 473
show igmp number-grou ps Configuring IGMP Enterasys Matrix DFE-Gold Series Configuratio n Guide 9-17 Default s None. Mode Switch command, Read ‐ Only . Example This example shows how to display the IGMP counters: Matrix(rw)->show igmp counters Igmp Counters: Igmp Group Table is Full : false Igmp Version [...]
-
Page 474
Configuring IGMP show igmp number-groups 9-18 IGMP C onfiguration Example This example shows how to display the number of multicast groups supported by the device. Matrix(rw)->show igmp number-groups IGMP current max number of groups = 4096 IGMP stored max number of groups = 4 096[...]
-
Page 475
Enterasys Matrix DFE-Gold Series Configuratio n Guide 10-1 10 System Logging Configuration This chapter descri bes system logging commands and how to use them. Configuring System Logging Purpose To display and configure system logging, including Sysl og server setting s, ?[...]
-
Page 476
Configuring System Logging show logging all 10-2 System Logging Co nfiguration show logging all Use this command to display all configuration information for system logging. Synt ax show logging all Parameters None. Default s None. Mode Switch command, Read ‐ Only . Example This example show[...]
-
Page 477
show logging ser ver Configuring System Logging Enterasys Matrix DFE-Gold Series Configuratio n Guide 10-3 1 80.80.80.252 local7 debugging( 8) N-Series 514 enabled Defaults: local4 debugging( 8) 514 Syslog Console Logging enabled Syslog File Logging disabled Ta b l e 1 0 ‐ 1 provides an explanation of the command outpu[...]
-
Page 478
Configuring System Logging set logging server 10-4 System Logging Co nfiguration Default s If index is not specif ied, all Syslo g server inf ormation will be displayed. Mode Switch command, Read ‐ Only . Example This example shows how to display Syslog serv er co[...]
-
Page 479
clear logging server Configuring System Logging Enterasys Matrix DFE-Gold Series Configuratio n Guide 10-5 Default s •I f ip ‐ addr is not specifie d, an entry in the Syslog server table will be created with the specifie d index number and a message will[...]
-
Page 480
Configuring System Logging set logging default 10-6 System Logging Co nfiguration Default s None. Mode Switch command, Read ‐ Only . Example This command shows how to display the Syslog serv er default va l u e s . For an explanation of the command output, refer b[...]
-
Page 481
clear logging default Configuring System Logging Enterasys Matrix DFE-Gold Series Configuratio n Guide 10-7 Example This example shows how to set the Syslog default facility name to local2 and the se verity level to 4 (error logging): Matrix(rw)->set logging defa[...]
-
Page 482
Configuring System Logging show logging application 10-8 System Logging Co nfiguration Mode Switch command, Read ‐ Only . Usage Mnemonics will var y depe nding on the number and types of applications running on your system. To display a complete list, us e [...]
-
Page 483
set logging application Configuring System Logging Enterasys Matrix DFE-Gold Series Configuratio n Guide 10-9 90 SNMP 6 1-8 1(emergencies) 2(alerts) 3(cr itical) 4(errors) 5(warnings) 6(no tifications) 7(information) 8(debugging) Ta b l e 1 0 ‐ 2 provides an explanation of the command output. set logging application Us[...]
-
Page 484
Configuring System Logging set logging application 10-10 System Logg ing Configuration Default s •I f level is not specified, none will be applied. •I f server is not specified, messages will be sent to all Syslog serv ers. Mode Switch command, Read ‐ Wr i[...]
-
Page 485
clear logging application Con figuring System Logging Enterasys Matrix DFE-Gold Series Configur ation Guide 10-11 clear logging application Use this command to reset the logging sev erity lev el for one or all applic ations to the default va l ue of 6 (notifications [...]
-
Page 486
Configuring System Logging set logging local 10-12 System Logg ing Configuration set logging local Use this command to configure log messages to the console and a persistent file. Synt ax set logging local console { enable | disable } file { enable | disable } Parameters Default s None. Mode Switc[...]
-
Page 487
set logging here Configuring System Logging Enterasys Matrix DFE-Gold Series Configur ation Guide 10-13 set logging here Use this command to enable or disable the current CLI session as a Sy slog destinat ion. Synt ax set logging here { enable | disable } Parameters Default s None. Mode Sw[...]
-
Page 488
Configuring System Logging show logging buffer 10-14 System Logg ing Configuration show logging buffer Use this command to display the last 256 messages logge d on all blades. Synt ax show logging buffer Parameters None. Default s None. Mode Switch command, Read ‐ Only . Example This exa[...]
-
Page 489
Enterasys Matrix DFE-Gold Series Configuratio n Guide 11-1 11 Network Monitoring Configuration This chapter descri bes Network Monitoring comm ands and how to use them. Monitoring Network Event s and S t atus Purpose To display switch ev ents and command history , to set ?[...]
-
Page 490
Monitoring Network Events and Status show history 11-2 Network Mo nitoring Configuration Parameters None. Default s None. Mode Switch command, Read ‐ Only . Usage The command history buffer includes all the switch commands entered up to a maximum of 50, as specified i[...]
-
Page 491
set history Monitoring Network Events and Status Enterasys Matrix DFE-Gold Series Configuratio n Guide 11-3 set history Use this command to set the size of the history buffer . Synt ax set history size [ default ] Parameters Default s If default is not specified, the history settin[...]
-
Page 492
Monitoring Network Events and Status ping 11-4 Network Mo nitoring Configuration Example This example shows how to display statistics for all the current activ e network connections: Matrix(rw)->show netstat Active Internet connections (includi ng servers) PCB Proto Recv-Q Send-Q Local Address [...]
-
Page 493
ping Monitoring Network Events and Status Enterasys Matrix DFE-Gold Series Configuratio n Guide 11-5 Mode Switch command, Read ‐ Wr i t e . Examples Matrix(rw) ‐ >ping 134.141.89.29This example shows how to ping IP address 134.141.89.29. In this case, this host is al[...]
-
Page 494
Monitoring Network Events and Status show users 11-6 Network Mo nitoring Configuration show users Use this command to display information about the active console port or Te l n e t session(s) logged in to the switch. Synt ax show users Parameters None. Default s None. Mode Swi[...]
-
Page 495
disconnect Monitoring Network Events and Status Enterasys Matrix DFE-Gold Series Configuratio n Guide 11-7 Example This example shows how to tell all users about a system reset: Matrix(rw)->tell all system reset sc heduled for 1 p.m. today disconnect Use this command to close an [...]
-
Page 496
Configuring SMON show smon priority 11-8 Network Mo nitoring Configuration Configuring SMON Purpose To configure SMON (Switched Network Monitoring) on the device. Commands show smon priority Use this command to display SMON user priority stati stics. SMON generate s aggrega[...]
-
Page 497
set smon priority Configuring SMON Enterasys Matrix DFE-Gold Series Configuratio n Guide 11-9 ------------------------ Interface = ge.3.14 Owner = none Creation = 0 days 0 hours 6 minutes 39 seconds Status = enabled -------------------- Priority 0 Packets Octe ts ---------- Total 7981308 2332 402460 Overflow 0 0 set smon priority Use this c[...]
-
Page 498
Configuring SMON show smon vlan 11-10 Networ k Monitoring Configuration Parameters Default s If port ‐ string is not specif ied, priorit y statistics will be cleared on all ports. Mode Switch command, Read ‐ Wr i t e . Example This example shows how clear SMON prior[...]
-
Page 499
set smon vlan Configuring SMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-11 Status = enabled -------------------- VLAN 1 Packets Octets Total 8011072 2070785503 Overflow 0 0 NonUnicast 0 0 NonUnicast Overflow 0 0 set smon vlan Use this command to create, start, or stop SNMP VLAN ‐ related sta[...]
-
Page 500
Configuring SMON clear smon vlan 11-12 Networ k Monitoring Configuration Parameters Default s If port ‐ string is not specif ied, VLAN statistics counting configurations will be cleared for all ports. Mode Switch command, Read ‐ Wr i t e . Example This example shows how[...]
-
Page 501
clear smon vlan Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-13 Configuring RMON RMON Monitoring Group Functions and Commands RMON (Remote Network Monitoring) provides comprehensiv e networ k fault diagnosis, planning, and performance tuning information and all[...]
-
Page 502
Configuring RMON clear smon vlan 11-14 Networ k Monitoring Configuration Host Records statistics assoc iated with each host discovered on the network. Host address, packets and bytes received and transmitted, and broadcast, multicast and error packet s. show rmon host (“ show rmon host ” on page 1 1 -27) set rmon host properties (“ se t rmon [...]
-
Page 503
show rmon stats Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-15 show rmon st ats Use this command to display RMON statistics measured for one or more ports. Synt ax show rmon stats [ port-string ] [ wide ] [ bysize ] Parameters Default s If port ‐ string is ?[...]
-
Page 504
Configuring RMON show rmon stats 11-16 Networ k Monitoring Configuration T able 1 1-3 show rmon st at s Output Det ails Output... W hat it displays... Port Port designatio n. Owner Name of the entity that configured thi s entry . Mon itor is default. Data Source Data source of t he statistics being displayed. Drop Events T otal number of time s tha[...]
-
Page 505
set rmon stats Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-17 set rmon st at s Use this command to configure an RMON statistics entry . Synt ax set rmon stats index port-string [ ow ner ] Parameters Default s If owner is not spec ified, monitor will be app[...]
-
Page 506
Configuring RMON show rmon history 11-18 Networ k Monitoring Configuration Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to delete RMON statistics entry 2: Matrix(rw)->clear rmon stats 2 show rmon history Use this command to display RMON [...]
-
Page 507
set rmon history Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-19 Sample 2304 Interval Start: 0 d ays 19 hours 11 minutes 35 seconds Drop Events = 0 Undersize Pkts = 0 Octets = 0 Oversize Pkts = 0 Packets = 0 Fragments = 0 Broadcast Pkts = 0 Jabbers = 0 Multicast Pkts = 0 Collisions = 0 CRC Align Errors = 0 Utilization(%[...]
-
Page 508
Configuring RMON show rmon alarm 11-20 Networ k Monitoring Configuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to delete RMON history entry 1: Matrix(rw)->clear rmon history 1 show rmon alarm Use this command to display RM[...]
-
Page 509
set rmon alarm properties Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-21 Sample Type = delta Startup Alarm = rising Interval = 30 Value = 0 Rising Threshold = 1 Falling Threshold = 0 Rising Event Index = 2 Falling Event Index = 0 Ta b l e 1 1 ‐ 4 provides an explanation of the command outp[...]
-
Page 510
Configuring RMON set rmon alarm status 11-22 Networ k Monitoring Configuration Default s •i n t e r v a l ‐ 3600 seconds •t y p e ‐ absolute •s t a r t u p ‐ risin g •r t h r e s h ‐ 0 •f t h r e s h ‐ 0 •r e v e n t ‐ 0 • fevent ‐ 0 •o w n e r ‐ monitor Mode Swi[...]
-
Page 511
clear rmon alarm Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-23 Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Usage An RMON alarm entry can be created using this command, configured using the set rmon alarm properties comm[...]
-
Page 512
Configuring RMON show rmon event 11-24 Networ k Monitoring Configuration show rmon event Use this command to display RMON event entry properties. Synt ax show rmon event [ index ] Parameters Default s If index is not specif ied, information about all RMON entries will be ?[...]
-
Page 513
set rmon event properties Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-25 set rmon event properties Use this command to configure an RMON event entry , or to create a new event entry with an unused event index number . Synt ax set rm[...]
-
Page 514
Configuring RMON clear rmon event 11-26 Networ k Monitoring Configuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Usage An RMON event entry can be created using this command, configured using the set rmon event properties command (“ set [...]
-
Page 515
show rmon host Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-27 show rmon host Use this command to display RMON properties and statistics associated with each host discovere d on the network. Synt ax show rmon host [ port-string ] [ address | creation ] Para[...]
-
Page 516
Configuring RMON set rmon host properties 11-28 Networ k Monitoring Configuration Out Octets 136 Broadcast Pkts 0 Multicast Pkts 0 set rmon host properties Use this command to configure an RMON host entry . Synt ax set rmon host properties index port- string [ owner ] Parameters Default s If owner is [...]
-
Page 517
clear rmon host Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-29 Example This example shows how to enable RMON host entry 1: Matrix(rw)->set rmon host status 1 e nable clear rmon host Use this command to delete an RMON host entry . Synt ax clear rmon [...]
-
Page 518
Configuring RMON show rmon topN 11-30 Networ k Monitoring Configuration Example This example shows how to display all RMON To p N properties and statistics. A control entry displays first, followed by actual entries corresponding to the control entry[...]
-
Page 519
set rmon topN properties Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-31 set rmon topN properties Use this command to configure an RMON topN entry (report). Synt ax set rmon topn properties index [ hind ex hindex ] [ rate { inpackets | outpackets | inoctets | outoctets | errors | bcas[...]
-
Page 520
Configuring RMON clear rmon topN 11-32 Networ k Monitoring Configuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to enable RMON To p N entry 1: Matrix(rw)->set rmon topN status 1 e nable clear rmon topN Use this command to delet[...]
-
Page 521
show rmon matrix Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-33 Parameters Default s •I f port ‐ string is not specif ied, information about all ports wi ll be display ed. •I f not specified, information about source and destination addre[...]
-
Page 522
Configuring RMON set rmon matrix properties 11-34 Networ k Monitoring Configuration set rmon matrix properties Use this command to configure an RMON matrix entry . Synt ax set rmon matrix properties index por t-string [ owner ] Parameters Default s If owner is not spec ified, monitor will [...]
-
Page 523
clear rmon matrix Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-35 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to enable RMON matrix entry 1: Matrix(rw)->set rmon matrix status 1 enable clear rmon matrix Use this command to delete [...]
-
Page 524
Configuring RMON set rmon channel 11-36 Networ k Monitoring Configuration Example This example shows how to display RMON channel information for fe .2.12: Matrix(rw)->show rmon channel fe.2.1 2 Port fe.2.12 Channel index= 628 EntryStatus= valid ------------------------------------ ---------------------- Co[...]
-
Page 525
clear rmon channel Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-37 Default s •I f an action is not specif ied, packets will be accepted on filter matches. •I f not specified, contr ol will be set to off . •I f onevent and o[...]
-
Page 526
Configuring RMON set rmon filter 11-38 Networ k Monitoring Configuration Parameters Default s If no options are specified, information for all filter entries will be display ed. Mode Switch command, Read ‐ Only . Example This example shows how to display all RMON [...]
-
Page 527
clear rmon filter Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-39 Default s •I f owner is not specif ied, it will be set to monitor . •I f no other options are specifie d, none (0) will be applied. Mode Switch command, Read ?[...]
-
Page 528
Configuring RMON show rmo n capture 11-40 Networ k Monitoring Configuration show rmon capture Use this command to display RMON capture entries and associated buffer control entries. Synt ax show rmon capture [ index ] [ nodata ] Parameters Default s If no options are specified, all[...]
-
Page 529
set rmon capture Configuring RMON Enterasys Matrix DFE-Gold Series Configur ation Guide 11-41 set rmon capture Use this command to configure an RMON capture entry , or to enable or disable an existing ent ry . Synt ax set rmon capture index { channel [ act ion { lock | wrap }] [ slice [...]
-
Page 530
Configuring RMON clear rmon capture 11-42 Networ k Monitoring Configuration clear rmon capture Use this command to clears an RMON capture entry . Synt ax clear rmon capture index Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear [...]
-
Page 531
Enterasys Matrix DFE-Gold Series Configuratio n Guide 12-1 12 Network Address and Route Management Configuration This chapter descri bes switch ‐ related netw ork address and route management commands and how to use them. Managing Switch Network Addresses and Routes Purpose To displa[...]
-
Page 532
Managing Switch Network Addresses and Routes show arp 12-2 Network Add ress and Route Management Configuration show arp Use this command to display the switch’ s ARP table. Synt ax show arp Parameters None. Default s None. Mode Switch command, Read ‐ Only . Example This example shows how t[...]
-
Page 533
set arp Managing Switch Network Addresses and Routes Enterasys Matrix DFE-Gold Series Configuratio n Guide 12-3 set arp Use this command to add mapping entries to the switch’ s ARP table. Synt ax set arp ip-address mac-address [{ tem p | pub | trail }] Parameters Default s •I f temp is not[...]
-
Page 534
Managing Switch Network Addresses and Routes show rad 12-4 Network Add ress and Route Management Configuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to delete entry 10.1.10.10 from the ARP table: Matrix(rw)->clear arp 10.1.10.10 show [...]
-
Page 535
show ip route Managing Switch Network Addresses and Routes Enterasys Matrix DFE-Gold Series Configuratio n Guide 12-5 Default s None. Mode Switch command, Read ‐ Wr i t e . Usage The Enterasys Matrix Series device uses BOOTP/DHCP to obtain an IP address if one hasn’ t been [...]
-
Page 536
Managing Switch Network Addresses and Routes traceroute 12-6 Network Add ress and Route Management Configuration traceroute Use this command to display a hop ‐ by ‐ hop path through an IP network from the device to a specific destination host. Synt ax traceroute [ -[...]
-
Page 537
traceroute Managing Switch Network Addresses and Routes Enterasys Matrix DFE-Gold Series Configuratio n Guide 12-7 Default s •I f not specified, waittime will be set to 5 seconds. •I f not specified, first ‐ tt l will be set to 1 second. •I f not specified, [...]
-
Page 538
Managing Switch Network Addresses and Routes set ip route 12-8 Network Add ress and Route Management Configuration Example This example shows how to use traceroute to display a round trip path to host 192.167.252.17. In this case, hop 1 is the Enterasys [...]
-
Page 539
show port mac Managing Switch Network Addresses and Routes Enterasys Matrix DFE-Gold Series Configuratio n Guide 12-9 Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear the default ga teway: Matrix(rw)->clear ip route default show port mac Use this [...]
-
Page 540
Managing Switch Network Addresses and Routes show mac 12-10 Networ k Address and Route Management Con figuration show mac Use this command to display the timeout period for aging learned MAC addr esses, and to show MAC addresses in the switch’ s filtering data[...]
-
Page 541
set mac Managing Switch Network Addresses and Routes Enterasys Matrix DFE-Gold Series Configur ation Guide 12-11 Matrix(rw)->show mac port-string fe. 1.3 MAC Address FID Port Type Status ----------------- ---- ------------- ------- ------- 00-01-F4-32-88-C5 0 fe.1.3 self 00-00-1D-12-11-88 3 fe.1.3 mgmt perm Ta b l e 1 2 ‐ 3 provides an[...]
-
Page 542
Managing Switch Network Addresses and Routes clear mac 12-12 Networ k Address and Route Management Con figuration Default s If port ‐ string is not defined with the set mac multicast command, then it will apply to all ports. If the set mac unicast command [...]
-
Page 543
show newaddrtraps Managing Switch Ne twork Addresses and Routes Enterasys Matrix DFE-Gold Series Configur ation Guide 12-13 Parameters None. Default s None, except those noted abov e. Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to clear the MAC timeout period: [...]
-
Page 544
Managing Switch Network Addresses and Routes set newaddrtraps 12-14 Networ k Address and Route Management Con figuration Example This example shows how to display the status of MAC address traps on ge.1.1 through 3: Matrix(rw)->show newaddrtrap New Address Traps Globally disabled Port E[...]
-
Page 545
set movedaddrtrap Managing Switch Network Addre sses and Routes Enterasys Matrix DFE-Gold Series Configur ation Guide 12-15 Parameters Default s If port ‐ string is not specif ied, MAC addres s traps for all ports will be display ed. Mode Switch command, Read ‐ Only . Example This [...]
-
Page 546
Managing Switch Network Addresses and Routes set movedaddrtrap 12-16 Networ k Address and Route Management Con figuration Example This example shows how to globally enable MAC address traps: Matrix(rw)->set movedaddrtrap enable[...]
-
Page 547
Enterasys Matrix DFE-Gold Series Configuratio n Guide 13-1 13 SNTP Configuration This chapter descri bes Simple Netw ork Time Protocol (SNTP) commands and how to use them. Configuring Simple Network T ime Protocol (SNTP) Purpose To configure the Simple Network Time Prot[...]
-
Page 548
Configuring Simple Network Time Protocol (SNTP) show sntp 13-2 SNTP Con figuration show sntp Use this command to display SNTP client settings. Synt ax show sntp Parameters None. Default s None. Mode Switch command, Read ‐ Only . Example This example shows how to display SNTP client ?[...]
-
Page 549
set sntp clien t Configuring Simple Network Time Protocol (SNTP) Enterasys Matrix DFE-Gold Series Configuratio n Guide 13-3 set sntp client Use this command to set the SNTP operation mode. Synt ax set sntp client { broadcast | unicast | disab le } Parameters Default s None. Client Mode Whether SNTP client is operatin[...]
-
Page 550
Configuring Simple Network Time Protocol (SNTP) clear sntp client 13-4 SNTP Con figuration Mode Switch command, Read ‐ Wr i t e . Example This example shows how to enable SNTP in broadcast mode: Matrix(rw)->set sntp client broadcas t clear sntp client Use this command to clear the[...]
-
Page 551
clear sntp server C onfiguring Simple Network Time Protocol (SNTP) Enterasys Matrix DFE-Gold Series Configuratio n Guide 13-5 Example This example shows how to set the serv er at IP address 10.21.1.100 as an SNTP serv er: Matrix(rw)->set sntp server 10.21.1. 100 clear sntp server Use ?[...]
-
Page 552
Configuring Simple Network Time Protocol (SNTP) clear sntp broadcast delay 13-6 SNTP Con figuration Example This example shows how to set the SNTP broadcast delay to 12000 microseconds: Matrix(rw)->set sntp broadcastdelay 12000 clear sntp broadcast delay Use this command to clear ?[...]
-
Page 553
clear sntp poll-interval Configuring Simple Net work Time Protocol (SNTP) Enterasys Matrix DFE-Gold Series Configuratio n Guide 13-7 clear sntp poll-interval Use this command to clear the poll interval betw een unicast SNTP requests. Synt ax clear sntp poll-interval Parameters None. Default s None. Mode S[...]
-
Page 554
Configuring Simple Network Time Protocol (SNTP) set sntp poll-timeout 13-8 SNTP Con figuration Parameters None. Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear the number of SNTP poll retries: Matrix(rw)->clear sntp poll-retry set sntp poll-timeo[...]
-
Page 555
show timezone Config uring Simple Network Time Protocol (SNTP) Enterasys Matrix DFE-Gold Series Configuratio n Guide 13-9 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear the SNTP poll timeout: Matrix(rw)->clear sntp poll-timeout show timezone Use this comman[...]
-
Page 556
Configuring Simple Network Time Protocol (SNTP) clear timezone 13-10 SNTP Co nfiguration Default s If offset hours or minutes are not specified, none will be applied. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set the time zone to[...]
-
Page 557
Enterasys Matrix DFE-Gold Series Configuratio n Guide 14-1 14 Node Alias Configuration This chapter descri bes node alias commands and how to use them. Configuring Node Aliases Purpose To review , configure, disable and re ‐ enable node (port) alias functionality , ?[...]
-
Page 558
Configuring Node Aliases show nodealias mac 14-2 Node Alias Con figuration Default s If port ‐ string is not specif ied, node alias properties will be dis played for all ports. Mode Switch command, Read ‐ Only . Usage Node aliases are dynamically assigned upon p[...]
-
Page 559
show nodealias mac Configuring Node Aliases Enterasys Matrix DFE-Gold Series Configuratio n Guide 14-3 Parameters Default s •I f protocol is not specified , node alias entri es for all protocols will be displayed. •I f port ‐ string is not specif ied, node alias e[...]
-
Page 560
Configuring Node Aliases show nodealias protocol 14-4 Node Alias Con figuration Example This example shows how to display node alias entries for BPDU traffic on MAC address es beginning with 00 ‐ e0. Refer back to Ta b l e 1 4 ‐ 1 for a description ?[...]
-
Page 561
show nodealias config Configuring Node Aliases Enterasys Matrix DFE-Gold Series Configuratio n Guide 14-5 Parameters Default s •I f ip ‐ address is not specified for the IP protocol, IP ‐ related entries will be displayed from all source addresses. •I f port ‐ string [...]
-
Page 562
Configuring Node Aliases set nodealias 14-6 Node Alias Con figuration Default s If port ‐ string is not specif ied, node alias configurations will be displ ayed for all ports. Mode Switch command, Read ‐ Only . Example This example shows how to display node [...]
-
Page 563
set nodealias maxentries Configuring Node Aliases Enterasys Matrix DFE-Gold Series Configuratio n Guide 14-7 Default s None. Mode Switch command, Read ‐ Wr i t e . Usage Upon packet reception, node al iases are dynamically assigned to ports enabled with an alias agent, which [...]
-
Page 564
Configuring Node Aliases clear nodealias config 14-8 Node Alias Con figuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear all node alias entries on fe.1.3: Matrix(rw)->clear nodealias port-str ing fe.1.3 clear nodealias config Use[...]
-
Page 565
Enterasys Matrix DFE-Gold Series Configuratio n Guide 15-1 15 NetFlow Configuration This chapter descri bes NetFlow commands and how to use them. Configuring NetFlow NetFlow is a protocol developed for collecting IP traffic information. Network devices (switches[...]
-
Page 566
Configuring NetFlow 15-2 NetF low Configuration •I t has accumulated the maximum number of NetFlow records per packet, which is 30, or •I t has accumulated fewer than 30 NetFlow records and the activ e flow timer has exp ired, [...]
-
Page 567
show netflow Configuring NetFlow Enterasys Matrix DFE-Gold Series Configuratio n Guide 15-3 show net flow Use this command to display NetFlow configuration information and/or statistics. Synt ax show netflow [ config [ port-string ]] [ statistics [ export ]] Parameters Default s If config is entered ?[...]
-
Page 568
Configuring NetFlow set netflow cache 15-4 NetF low Configuration Export Interval: 30 (min) Number of Entries: 196607 Inactive Timer: 40 (sec) Template Refresh-rate: 20 (packets) Template Timeout: 30 (min) Enabled Ports: ----------------- ge.1.11,23 set net flow cache Use this command to enable (create) or disable (f[...]
-
Page 569
set netflow export-destination Configuring N etFlow Enterasys Matrix DFE-Gold Series Configuratio n Guide 15-5 Default s None. Mode Switch command, Read ‐ Wr i t e . Usage When this command is executed, NetFlow is effectiv ely disabled on the system. Example This example shows how ?[...]
-
Page 570
Configuring NetFlow se t netflow export-interval 15-6 NetF low Configuration Parameters Default s Since only one collector address per Enterasys Matrix system is supported, entering the IP address and UDP port information is not required. Executing this [...]
-
Page 571
clear netflow export-interval Configuring N etFlow Enterasys Matrix DFE-Gold Series Configuratio n Guide 15-7 clear net flow export-interval Use this command to clear NetFlow export interv al to its def ault of 30 minutes. Synt ax clear netflow export-interval Parameters None. Default s None. Mode[...]
-
Page 572
Configuring NetFlow clear netflow port 15-8 NetF low Configuration clear net flow port Use this command to return a port to the default NetFlow collection state of disabled. Synt ax clear netflow port port-string Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Examp[...]
-
Page 573
clear netflow export-version Configuring NetFlow Enterasys Matrix DFE-Gold Series Configuratio n Guide 15-9 Example This example shows how to set the flow record format to Ve r s i o n 9: Matrix(rw)->set netflow export-versi on 9 clear net flow export-version Use this command to ret[...]
-
Page 574
Configuring NetFlow set netflow template 15-10 NetF low Configuration Parameters Default s At least one of the ref resh ‐ rate or ti meout parameters must be specified, although both can be specified on one command line. Mode Switch command, Read ‐ Wr i t e [...]
-
Page 575
clear netflow template Configuring NetFlow Enterasys Matrix DFE-Gold Series Configur ation Guide 15-11 clear net flow template Use this command to reset the Ve r s i o n 9 template refresh rate and/or timeout va l u es to their default val u e s. Synt ax clear netflow template {[ r[...]
-
Page 576
Configuring NetFlow clear netflow template 15-12 NetF low Configuration[...]
-
Page 577
Enterasys Matrix DFE-Gold Series Configuratio n Guide 16-1 16 IP Configuration This chapter descri bes the Internet Protocol (IP) configuration set of commands and how to use them. Configuring Routing Interface Settings About Loopback V ers us VLAN Interfaces Loopback interfaces ar[...]
-
Page 578
Configuring Routing Interface Settings show interface 16-2 IP Configuration For details on how to enable all router CLI configuration modes, refer back to Ta b l e 2 ‐ 9 . For details on configur ing routing protocols, refer to Chapter 21 . Purpose To enab[...]
-
Page 579
interface Configuring Routing Inter face Settings Enterasys Matrix DFE-Gold Series Configuratio n Guide 16-3 Mode Router command, Any router mode. Example This example shows how to display information for all interfaces configured on the router . In this case, one ?[...]
-
Page 580
Configuring Routing Interface Settings ip ecm-forwarding-algorithm 16-4 IP Configuration details on configur ation modes supported by the Enterasys Matr ix Series device and their uses, refer to Ta b l e 2 ‐ 9 in “ Enabling Router Configuration Mod es ” on[...]
-
Page 581
show ip interfac e Configuring Routing Interface Settings Enterasys Matrix DFE-Gold Series Configuratio n Guide 16-5 show ip interface Use this command to display information, including administrativ e status, IP address, MTU (Maximum T ransmission Unit) size and bandwidth, and[...]
-
Page 582
Configuring Routing Interface Settings ip address 16-6 IP Configuration ip address Use this command to set, remove, or disable a primary or secondary IP address for an interface. Synt ax ip address ip-address ip-mask [ secondary ] no ip address ip-address ip-mask Parameters Default[...]
-
Page 583
no shutdown C onfiguring Routing Interface Settings Enterasys Matrix DFE-Gold Series Configuratio n Guide 16-7 Usage Each Enterasys Mat rix Series routing module or standalone device supports up to 96 routing interfaces, with up to 50 secondary addresses (200 ma[...]
-
Page 584
Managing Router Configuration Files show running-config 16-8 IP Configuration Managing Router Configuration Files Each Enterasys Matrix Series de vice provides a single configuration interface which allows you to perform both switch and router config uration with th[...]
-
Page 585
write Managing Router Configuration Files Enterasys Matrix DFE-Gold Series Configuratio n Guide 16-9 ip address 192.168.100.1 255.255.2 55.255 no shutdown ! interface vlan 10 ip address 99.99.2.10 255.255.255. 0 no shutdown ! router ospf 1 network 99.99.2.0 0.0.0.255 ar ea 0.0.0.0 network 192.168.100.1 0.0.0.0 area 0.0.0.0 write Use this co[...]
-
Page 586
Managing Router Configuration Files no ip routing 16-10 IP Configura tion interface vlan 2 iP Address 182.127.62.1 255.255.255 .0 no shutdown exit router rip network 182.127.0.0 exit disable exit no ip routing Use this command to disable IP routing on the device and remov e the routi ng config[...]
-
Page 587
no ip routing Performing a Basic Router Configuration Enterasys Matrix DFE-Gold Series Configur ation Guide 16-11 Performing a Basic Router Configuration Using Router-Only Config Files Although the Enterasys Matr ix Series’ single configuration interface provides one set of commands to perfo[...]
-
Page 588
Reviewing and Configuring the ARP Table show ip arp 16-12 IP Configura tion 2. Copy the config file to a place where it can be edited with a file editing program. 3. If you only wa n t the router config, delete all the non ‐ routing config [...]
-
Page 589
show ip arp Reviewing and Configuring the ARP Table Enterasys Matrix DFE-Gold Series Configur ation Guide 16-13 Parameters Default s If no parameters are specified, all entries in the ARP cache will be displayed. Mode Any route r mode. Example This example shows how to [...]
-
Page 590
Reviewing and Configuring the ARP Table arp 16-14 IP Configura tion arp Use this command to add or remove perman ent (static) ARP table entries. Synt ax arp ip-address mac-address arpa no arp ip-address Parameters Default s None. Mode Router command, Glob al configuration: Matrix>Ro[...]
-
Page 591
ip gratuitous-arp Reviewin g and Configuring the ARP Table Enterasys Matrix DFE-Gold Series Configur ation Guide 16-15 ip gratuitous-arp Use this command to override the normal ARP updating process, that occurs by default. Synt ax ip gratuitous-arp { ignore | reply | request } no ip gratuitous-arp[...]
-
Page 592
Reviewing and Configuring the ARP Table ip proxy-arp 16-16 IP Configura tion Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan 1))# Usage This command will be in effect if the i p gratui tous ‐ arp ignore command (“ ip gratuitous ‐ arp ”[...]
-
Page 593
ip mac-address Reviewin g and Configuring the ARP Table Enterasys Matrix DFE-Gold Series Configur ation Guide 16-17 Example This example shows how to enable pro xy ARPMatrix>Router(config)#interf ace vlan 1 on VLAN 1: Matrix>Router(config-if(Vlan 1))#ip proxy-arp ip mac-address Use this [...]
-
Page 594
Reviewing and Configuring the ARP Table clear arp-cache 16-18 IP Configura tion Parameters Default s None. Mode Router command, Glob al configuration: Matrix>Ro uter(config)# Usage The device can support up to 2000 outstanding unresolved ARP en tries. The “no” form of th[...]
-
Page 595
ip directed-broadcast Configuring Broadcast Settings Enterasys Matrix DFE-Gold Series Configur ation Guide 16-19 Configuring Broadcast Settings Applying DHCP/BOOTP Relay DHCP/BOOTP relay functionality is applied with the help of IP broadcast forw arding. A typical situation occurs when[...]
-
Page 596
Configuring Broadcast Settings ip forward-pr otocol 16-20 IP Configura tion Usage The “no” form of this command disables IP directed broadcast globally . Example This example shows how to enable IP directed broadcasts on VLAN 1: Matrix>Router(config)#interfac[...]
-
Page 597
ip helper-address Configuring Broadcast Settings Enterasys Matrix DFE-Gold Series Configur ation Guide 16-21 Example This example shows how to enable forw arding of Domain Naming System UDP datagrams (port 53): Matrix>Router(config)#ip forward-pro tocol udp 53 ip helper-address Use this[...]
-
Page 598
Reviewing IP Traffic and Configuring Routes show ip protocols 16-22 IP Configura tion Reviewing IP T raffic and Configuring Routes Purpose To review IP protocol information about the device, to review IP traffic and configure routes, to enable and send router ICMP ([...]
-
Page 599
show ip traffic Reviewing IP Tr affic and Configuring Routes Enterasys Matrix DFE-Gold Series Configur ation Guide 16-23 Example This example shows how to display IP protocol information. In this case, the routing protocol is RIP (Routing Information Protocol). For [...]
-
Page 600
Reviewing IP Traffic and Configuring Routes clear ip stats 16-24 IP Configura tion Frags: 0 reassembled, 0 timeouts 0 couldn't reassemble 0 fragmented, 0 c ouldn't fragment Bcast: 1 received, 8 sent Mcast: 0 received, 16 sent Sent: 24 generated, 0 forwarded 0 no route ICMP Statistics: Rcvd: 4 total, 0 checksum error s, 0 redirects, 0 unre[...]
-
Page 601
show ip route Reviewing IP Traffic and Configuring Routes Enterasys Matrix DFE-Gold Series Configur ation Guide 16-25 Example This example shows how to clear all IP traffic counters: Matrix>Router#clear ip stats show ip route Use this command to display information about IP rout[...]
-
Page 602
Reviewing IP Traffic and Configuring Routes ip route 16-26 IP Configura tion Example This example shows how to display all IP route information. In this case, there ar e routes directly connected to VLANs 1 and 2, two stati c routes connected [...]
-
Page 603
ip icmp Reviewing IP Traffic and Configuring Routes Enterasys Matrix DFE-Gold Series Configur ation Guide 16-27 Examples This example shows how to set IP address 10.1.2.3 as the next hop gateway to de stination address 10.0.0.0. The route is assigned a tag ?[...]
-
Page 604
Reviewing IP Traffic and Configuring Routes ping 16-28 IP Configura tion ping Use this command to test routing network connectivity by sending IP ping requests. Synt ax ping ip-address Parameters Default s None. Mode Router command, Privileged EXEC: Matrix>Router# Usage The [...]
-
Page 605
traceroute Reviewing IP Traffic and Configuring Routes Enterasys Matrix DFE-Gold Series Configur ation Guide 16-29 Parameters Default s None. Mode Router command, Privileged EXEC: Matrix>Router# Usage Three ICMP probes will be transmitted for each hop between the source and the [...]
-
Page 606
Configuring Debug IP Packet debug ip packet access-group 16-30 IP Configura tion Configuring Debug IP Packet Purpose Debug IP packet is an IP based packet monitor that allows for the monitoring of all IP traffic receiv ed and transmitted from an N ‐ Series[...]
-
Page 607
debug ip packet restart Configuring Debug IP Packet Enterasys Matrix DFE-Gold Series Configur ation Guide 16-31 Mode Router command, Router configuration: Matrix>Router(config)# Router Exec: Matrix>Router# Usage •T o o high a throttle or limit va l u e may requir e a second [...]
-
Page 608
Configuring Debug IP Packet show debugging 16-32 IP Configura tion Parameters None. Default s None. Mode Router command, Router configuration: Matrix>Router(config)# Router Exec: Matrix>Router# Usage By default, 30 packet will be display and then the packet monitor wil l [...]
-
Page 609
no debug ip packet Configuring Debug IP Packet Enterasys Matrix DFE-Gold Series Configur ation Guide 16-33 Parameters None. Default s None. Mode Router command, Router configuration: Matrix>Router(config)# Example This example shows how to disable the debug IP packet utility: Matrix(rw)->[...]
-
Page 610
Configuring Debug IP Packet no debug ip packet 16-34 IP Configura tion[...]
-
Page 611
Enterasys Matrix DFE-Gold Series Configuratio n Guide 17-1 17 PIM Configuration This chapter descri bes the Protocol Independent Multicast (PIM) configura tion set of commands and how to use them. Configuring PIM Purpose To review and configure Protocol Independent [...]
-
Page 612
Configuring PIM ip pim sparse mode 17-2 PIM Configuration ip pim sp arse mode Use this command to enable Protocol Independent Multicast (PIM) Sparse Mode (SM) on a routing interface. Synt ax ip pim sparse-mode no ip pim sparse-mode Parameters None. Default s None. Mode Router command, [...]
-
Page 613
ip pim dr-priority Configuring PIM Enterasys Matrix DFE-Gold Series Configuratio n Guide 17-3 Parameters Default s •A hash ‐ mask ‐ length va l ue of 30 will be automatically applied. •I f priority is not specified, 1 wil l be applied. Mode Router command, Interface [...]
-
Page 614
Configuring PIM ip pim rp-address 17-4 PIM Configuration Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan 1))# Usage The “no” form of this command disables the DR functionality . Example This example sets the DR priority to 20 ?[...]
-
Page 615
ip pim rp-candidate Configuring PIM Enterasys Matrix DFE-Gold Series Configuratio n Guide 17-5 ip pim rp-candidate Use this command to enable the router to advertise itself as a PIM candidate rendezvous point (RP) to the BSR. Synt ax ip pim rp-candidate pim-interface gr[...]
-
Page 616
Configuring PIM show ip pim interface 17-6 PIM Configuration Mode Router command, Privileged EXEC: Matrix>Router# Example This example shows how to display BootStrap Router (BSR) information: Matrix>Router#show ip pim bsr PIMv2 Elected Bootstrap Router Infor mation: BSR Address: 10.0.0.1 Bsr[...]
-
Page 617
show ip pim neighbo r Configuring PIM Enterasys Matrix DFE-Gold Series Configuratio n Guide 17-7 Parameters Default s If not specified, informatio n about all PIM interfaces will be displayed. Mode Router command, Privileged EXEC: Matrix>Router# Example This example shows how ?[...]
-
Page 618
Configuring PIM show ip pim rp 17-8 PIM Configuration Parameters Default s If not specified, informatio n about all PIM interfaces will be displayed. Mode Router command, Privileged EXEC: Matrix>Router# Example This example shows how to display PIM neighbor i[...]
-
Page 619
show ip pim rp Configuring PIM Enterasys Matrix DFE-Gold Series Configuratio n Guide 17-9 Parameters Default s If no optional parameters are spe cified, all active RP s will be di splayed. Mode Router command, Privileged EXEC: Matrix>Router# Examples This example shows how ?[...]
-
Page 620
Configuring PIM show ip pim rp-hash 17-10 PIM Configura tion show ip pim rp-hash Use this command to display the rendezvous point (RP) that is being selected for a specified group. Synt ax show ip pim rp-hash group-address Parameters Default s None. Mode Router command, Privile[...]
-
Page 621
show ip mforward Configuring PIM Enterasys Matrix DFE-Gold Series Configur ation Guide 17-11 Example This example shows a portion of the IP multicast routing table display . In thi s case, it shows there are nine source PIM sparse mode (PIMSM) multic[...]
-
Page 622
Configuring PIM show ip rpf 17-12 PIM Configura tion Example This example shows a porti on of the IP multicast forw arding table display: Matrix>Router#show ip mforward IP Multicast Forwarding Table 1 of 8: (63.63.100.1/32, 225.1.2.3) Sources: 63.63.100.1 Incoming interface: Vlan-999 Outgoing interface[...]
-
Page 623
Enterasys Matrix DFE-Gold Series Configuratio n Guide 18-1 18 Network Address T ranslation (NA T) Configuration This chapter descri bes the Network Address T ranslation (NA T) conf iguration set of commands and how to use them. Configuring Network Address T ranslation (NA T) The En[...]
-
Page 624
Configuring Network Address Translation (NAT) 18-2 Network Add ress Translation (NAT) Configuration NA T wor k s with DNS by having the DNS Application Specific Gatew ay (ALG) translate an address that appears in a Domain Name System response to a na[...]
-
Page 625
ip nat Configuring Network Address Translation (NAT) Enterasys Matrix DFE-Gold Series Configuratio n Guide 18-3 ip nat Use this command to enable NA T on this interf ace. Synt ax ip nat { inside | outside } no ip nat { inside | outside } Parameters Default s None. Mode Router command, Interface configurat[...]
-
Page 626
Configuring Network Address Translation (NAT) ip nat inside source list 18-4 Network Add ress Translation (NAT) Configuration Parameters Default s If no netmask or prefix ‐ length is specif ied, all addresses in the range are used. Mode Router command, Glob al configuration: Matr[...]
-
Page 627
ip nat inside source static (NAT) Confi guring Network Address Tra nslation (NAT) Enterasys Matrix DFE-Gold Series Configuratio n Guide 18-5 Mode Router command, Glob al configuration: Matri x ‐ >Router(conf ig)# Usage Pa c k e ts from addres ses that match those on the specified access l[...]
-
Page 628
Configuring Network Address Translation (NAT) ip nat inside source st atic (NAPT) 18-6 Network Add ress Translation (NAT) Configuration ip nat inside source st atic (NAPT) Use this command to enable static NAPT translation of inside source addresses. Synt ax ip nat inside source static { tcp | udp } loca [...]
-
Page 629
ip nat secure-plus Configuring Network Address Translation (NAT ) Enterasys Matrix DFE-Gold Series Configuratio n Guide 18-7 Default s None. Mode Router command, Glob al configuration: Matri x ‐ >Router(conf ig)# Usage The no ver s io n of the command resets the FTP control port to ?[...]
-
Page 630
Configuring Network Address Translation (NAT) ip nat translation max-entries 18-8 Network Add ress Translation (NAT) Configuration ip nat translation max- entries Use this command to configure the maximum number of translation entries. Synt ax ip nat translation max-entries numbe r no ip nat translation max-e[...]
-
Page 631
show ip nat translatio ns Configuri ng Network Address Translation (NAT) Enterasys Matrix DFE-Gold Series Configuratio n Guide 18-9 Default s If seconds is not specif ied, see the parameter ta ble above fo r the default va l u e . Mode Router command, Glob al configuration: Matri x[...]
-
Page 632
Configuring Network Address Translation (NAT) show ip nat statistics 18-10 Networ k Address Translation (NAT) Configur ation tcp 81.1.1.1:1030 172. 111.1.4:50025 DynOver 3 tcp 81.1.1.1:1031 172. 111.1.4:50026 DynOver 3 tcp 81.1.1.1:1032 172. 111.1.4:50027 DynOver 1 tcp 81.1.1.1:1033 172. 111.1.4:50028 DynOver 1 tcp 81.1.1.1:1034 172. 111.1.4:50029 [...]
-
Page 633
show ip nat statistics Configuring Network Address Translation (NAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 18-11 Examples This example displays the NA T statistics for this router: Matrix->Router(config)#show ip nat s tatistics Nat current status: Active Nat secure plus: Disable Total translations:[...]
-
Page 634
Configuring Network Address Translation (NAT) clear ip nat translation 18-12 Networ k Address Translation (NAT) Configur ation access-list 35 refcount 28 pool vlan 3000: netmask 0.0.0.0 start 85.1.1.1 end 85.1.1.1 type napt, total addresses 1, allo cated 1, max_ports 32000, used_ports 28 ( 0%) , misses 0 clear ip nat translation Use this co[...]
-
Page 635
clear ip nat translation inside (NAPT) Confi guring Netw ork Address Translation (NAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 18-13 Usage This command clears an active translation. Use the no ip nat inside source static command to delete a static NA T con[...]
-
Page 636
Configuring Network Address Translation (NAT) set router lim its (NAT) 18-14 Networ k Address Translation (NAT) Configur ation set router limit s (NA T) Use this command to set NA T configuration limits. Synt ax set router limits { nat-bindings nat- bindings | nat-cache nat-cache | nat-dynamic-configs nat-dynamic-configs[...]
-
Page 637
show router limits (NAT) Configuri ng Network Address Tra nslation (NAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 18-15 Example This example sets the maximum NA T cache size to 1000 : Matrix(rw)->set router limits nat-ca che 1000 show router limit s (NA T) Use this command to d[...]
-
Page 638
Configuring Network Address Translati on (NAT) clear router limits (NAT) 18-16 Networ k Address Translation (NAT) Configur ation Route Table Limit - 12000 (default) TWCB maximum Bindings - 32000 (default) TWCB Cache size - 2000 (default) TWCB maximum Configs - 1 (default) This example displays the NA T cache ‐ size limit ?[...]
-
Page 639
clear router limits (NAT) Configuri ng Network Address Translation (NAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 18-17 Example This example resets the NA T cache router limits setting to the default va l u e : Matrix(rw)->clear router limits nat- cache[...]
-
Page 640
Configuring Network Address Translati on (NAT) clear router limits (NAT) 18-18 Networ k Address Translation (NAT) Configur ation[...]
-
Page 641
Enterasys Matrix DFE-Gold Series Configuratio n Guide 19-1 19 LSNA T Configuration This chapter describes the Load Sharing Network Addres s T ranslation (LSNA T) configuration set of commands and how to us e them. Configuring Load Sharing Network Address T ranslation (LSNA T) A[...]
-
Page 642
Configuring Load Sharing Networ k Address Translatio n (LSNAT) 19-2 LSNAT Co nfiguration •W h e n different virtual serv er IPs (VIPs) share the sa me real serv er in different server farms, the persistence level must be set the same. •I n general, i[...]
-
Page 643
Configuring Load Sharing Network Address Translation (LSNAT) Enterasys Matrix DFE-Gold Series Configuratio n Guide 19-3 wou ld only require the use of one binding hardw are resource (instead of one per service per client). In order to use sticky persistence, the[...]
-
Page 644
Configuring Load Sharing Networ k Address Translatio n (LSNAT) 19-4 LSNAT Co nfiguration the UDP port. If the server responds with an ICMP “P ort Unreachable” message, it is concluded that the port is not activ e and the serv er is reported ?[...]
-
Page 645
Configuring Load Sharing Network Address Translation (LSNAT) Enterasys Matrix DFE-Gold Series Configuratio n Guide 19-5 Purpose To review and configure Load Sharing Network Addr ess T ranslation (LSNA T). LSNA T Configuration T ask List and Commands Ta b l e 1 9 ‐ 1 list s the mandatory and [...]
-
Page 646
Configuring Load Sharing Network Address Tr anslatio n (LSNAT) show ip slb serverfarms 19-6 LSNAT Co nfiguration show ip slb serverfarms Use this command to display server load balancing se rver farm information. Synt ax show ip slb serverfarms [ detail | se rverfarmname [ detail ]] Associate a virtua l serve[...]
-
Page 647
ip slb ftpctrlport Configuring Load Shari ng Network Address Translation (LSNAT ) Enterasys Matrix DFE-Gold Series Configuratio n Guide 19-7 Parameters Default s If no parameter is specified, summary information for all configured server farms will be display ed. Mode Router command, ?[...]
-
Page 648
Configuring Load Sharing Network Addres s Tran slation (LSNAT) ip slb serverfarm 19-8 LSNAT Co nfiguration Example This example shows how to specify port 46 as the FTP control port for serv er load balancing: Matrix>Router(config)#ip slb ftpctrl port 46 ip slb serverfarm Use thi[...]
-
Page 649
predictor Configuring Load Sharing Ne twork Address Tra nslation (LSNAT) Enterasys Matrix DFE-Gold Series Configuratio n Guide 19-9 Default s None. Mode Router command, SLB Serv er Farm Configuration mode: Matrix>Router(config ‐ slb ‐ sf arm) # Usage For backw ards compatibil ity , entering a p[...]
-
Page 650
Configuring Load Sharing Network A ddress Translatio n (LSNAT) sticky 19-10 LSNAT C onfiguration Example This example shows how to specify Least Connections as the serv er selection algorithm for the “httpserver ” serv er farm: Matrix>Router(config)#ip slb serverf arm httpse[...]
-
Page 651
show ip slb reals Configuring Load Shari ng Netw ork Address Translation (LSNAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-11 Parameters Default s If no parameter is specified, summary information ab out all configured server farms wil l be display ed. Mode Router comman[...]
-
Page 652
Configuring Load Sharing Network Address Tran slation (LSNAT) show ip slb reals 19-12 LSNAT C onfiguration Current Connections on this real server: 0 Current state of thi s real server: UP Maximum Connections : Unlimited Real Server Weight : 1 InService real-serv-ip:port server-farm type ins stat wgt maxcon con ns ----------------------------------[...]
-
Page 653
inservice (real server) Configuring Load Shar ing Network Address Translation (LSNAT ) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-13 inservice (real server) Use this command to enable a real LSNA T serv er . Synt ax inservice no inservice Parameters None. Default s None. Mode Router command, [...]
-
Page 654
Configuring Load Sharing Network Address Tr an slation (LSNAT) faildetect (real server) 19-14 LSNAT C onfiguration Parameters Default s If not specified, ping will be chosen as the fail detection type. Unless the UDP option is specified, app defaults to TCP . Mode R[...]
-
Page 655
faildetect acv-command Configuring Load Shar ing Network Address Translation (LSNAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-15 Matrix>Router(config-slb-real)#faild etect type app udp Matrix>Router(config-slb-real)#inser vice This example sets the ACV protocol to TCP for the real se[...]
-
Page 656
Configuring Load Sharing Network Address Tran slation (LSNAT) faildetect acv-reply 19-16 LSNAT C onfiguration faildetect acv-reply Use this command to set the expected va l id at i o n ACV reply string from the server application port. Synt ax faildetect acv-reply “ reply-string ” Para[...]
-
Page 657
faildetect read-till-index Configuring Load Shar ing Network Address Translation (LSNAT ) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-17 Usage A Carriage Return / Line Feed character “rn” is appended to the quit stri ng when it is sent to the server[...]
-
Page 658
Configuring Load Sharing Network A ddress Translation (LSNAT) maxconns 19-18 LSNAT C onfiguration maxconns Use this command to limit the number of connections to a real LSNA T server . Synt ax maxconns maximum-number no maxconns Parameters Default s None. Mode Router command, SLB R[...]
-
Page 659
show ip slb vservers Configuring Load Shar ing Network Address Translation (LSNAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-19 Mode Router command, SLB Real Serv er Configuration mode: Matrix>Router(config ‐ slb ‐ real) # Usage The “no” form of this command resets ?[...]
-
Page 660
Configuring Load Sharing Network Address Tran slation (LSNAT) show ip slb vservers 19-20 LSNAT C onfiguration five 3.3.3.3 80 ten TCP 41 IS test 192.169.10.88 80 big TCP 240 IS ftp This example shows how to display detailed information about the “test” virtua l serv er: Matrix Router(config)#>s[...]
-
Page 661
ip slb vserver Configuring Load Sharing Network Address Translation (LSNAT ) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-21 ip slb vserver Use this command to identify an LSNA T virtual server and to access or enable the virtual server load balance (SLB) co[...]
-
Page 662
Configuring Load Sharing Network Address Tran slation (LSNAT) serverfarm (Virtual Server) 19-22 LSNAT C onfiguration serverfarm (V irtual Server) Use this command to associate a virtual server with an LSNA T server farm. Synt ax serverfarm serverfarm-name no serverfarm serverfarm-name Parameters Defau[...]
-
Page 663
virtual Configuring Load Sharing Network Address Translation (LSNAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-23 Parameters Default s If a TCP servi ce name is not specified, none will be applied. Mode Router command, SLB Vir t u a l Server Configuration mode: M[...]
-
Page 664
Configuring Load Sharing Network Address Tran slation (LSNAT) inservice (virtual server) 19-24 LSNAT C onfiguration inservice (virtual server) Use this command to enable a virtual LSNA T server . Synt ax inservice no inservice Parameters None. Default s None. Mode Router command, SLB Vir t u a l S[...]
-
Page 665
persistence level Configuring Lo ad Sharing Network Address Translation (LSNAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-25 Parameters Default s None. Mode Router command, SLB Vir t u a l Server Configuration mode: Matrix>Router(config ‐ slb ‐ vserver)# Usage If no clients are s[...]
-
Page 666
Configuring Load Sharing Network Addres s Tran slation (LSNAT) persistence level 19-26 LSNAT C onfiguration Parameters Default s If not specified, persistence level is set to TCP . Mode Router command, SLB Vir t u a l Server Configuration mode: Matrix>Router(config ‐ slb ‐ vserver)#[...]
-
Page 667
allow accessservers Configuring Load Shari ng Network Address Tra nslation (LSNAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-27 This example shows how to use sticky session persistence, in conjunction with the sticky server farm parameter . Matrix>Router(config)#i[...]
-
Page 668
Configuring Load Sharing Network Address Tr anslatio n (LSNAT) ip slb allowaccess_all 19-28 LSNAT C onfiguration Example This example shows how to allow clients at 10.24.16.12 through 10.24 .16.42 non ‐ LSNA T access to the virtual serve r named “virtual ‐ http”: Matrix[...]
-
Page 669
show ip slb conns Configuring Load Shari ng Network Address Tra nslation (LSNAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-29 Matrix>Router(config-slb-real)#inser vice Matrix>Router(config-slb-real)#exit Matrix>Router(config-slb-sfarm)#exit Matrix>Router(config)#ip slb vserver virtual-http Matrix>Router(config-slb-vser[...]
-
Page 670
Configuring Load Sharing Network Address Tran slation (LSNAT) show ip slb stats 19-30 LSNAT C onfiguration 1 192.169.1.11 192.168.1.253 23 1249 TCP OUT-SERVR REPLY This example shows how to display detailed information about acti ve server load balancing connections: Matrix>Router#show ip slb c[...]
-
Page 671
show ip slb sticky Configuring Load Shar ing Network Address Tra nslation (LSNAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-31 Parameters None. Default s None. Mode Router command, Any router mode. Example This example shows how to display serv er load balancing connection stati[...]
-
Page 672
Configuring Load Sharing Network Addres s Tran slation (LSNAT) c lear ip slb 19-32 LSNAT C onfiguration clear ip slb Use this command to clear server load balancing counters or to remove serv er load balancing connections. Synt ax clear ip slb {[ counters ] [ connections { all | flowid flo[...]
-
Page 673
set router limits (LSNAT) Configuring Load S haring Network Address Translation (LSNAT ) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-33 Usage This command must be executed from the switch CLI. Examples This example displays all router limit s for this system: Matrix(su[...]
-
Page 674
Configuring Load Sharing Network Address Tran slation (LSNAT) clear router limits (LSNAT) 19-34 LSNAT C onfiguration Default s •I f not specified, maximum bindings wi ll be set to the default va l u e of 5000. •I f not specified, cac he size will be set to t[...]
-
Page 675
clear router limits (LSNAT) Configuring Load Sharing Network Address Tra nslation (LSNAT) Enterasys Matrix DFE-Gold Series Configur ation Guide 19-35 Mode Switch command, Read ‐ Wr i t e . Usage This command must be executed from the switch CLI. Example This example shows how to reset ?[...]
-
Page 676
Configuring Load Sharing Network Address Tran slation (LSNAT) clear router limits (LSNAT) 19-36 LSNAT C onfiguration[...]
-
Page 677
Enterasys Matrix DFE-Gold Series Configuratio n Guide 20-1 20 DHCP Configuration This chapter descri bes the Dynamic Host Configuration Protocol (D HCP) configuration set of commands and how to us e them. DHCP Overview The Dynamic Host Configuration Protocol (DH[...]
-
Page 678
DHCP Overview 20-2 DHCP C onfiguration To configure DHCP on the Enterasys Matr ix ‐ N or standalone device, you must configure an IP address pool, client parameters, and optional stati c IP address for a specifie d scope. Where seve[...]
-
Page 679
DHCP Overview Enterasys Matrix DFE-Gold Series Configuratio n Guide 20-3 Domain Name 15 Swap Server 16 Root Path 17 Extensions Path 18 IP Forwarding Enable/D isable 19 Non Local Source Routing Enabl e/Disable 20 Policy Filter 21 Max Datagram Reassembly Size 22 Default IP T ime-to-live 23 Path MTU Aging T imeout 24 Path MTU Plate au T able 25 Interf[...]
-
Page 680
DHCP Overview 20-4 DHCP C onfiguration DHCP Command Modes Except for clear and sh ow commands, most DHCP configuration commands can be executed in most of the DHCP command modes shown in Ta b l e 2 0 ‐ 2 . CLI examples in this section w[...]
-
Page 681
DHCP Overview Enterasys Matrix DFE-Gold Series Configuratio n Guide 20-5 Commands DHCP Class Configuration Mode Configure a DHCP client class. Ty p e client-class and the client class name from DHCP Pool or Host Configuration Mode. Matrix>Router (config-dhcp-class)# DHCP Host Configuration Mode Configure DHCP host parameters. Ty p e client- iden[...]
-
Page 682
DHCP Overview ip dhcp server 20-6 DHCP C onfiguration ip dhcp server Use this command to enable DHCP server features on a routing interface. Synt ax ip dhcp server no ip dhcp Parameters None. Default s None. Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan[...]
-
Page 683
exclude DHCP Overview Enterasys Matrix DFE-Gold Series Configuratio n Guide 20-7 Default s None. Mode Router command, Glob al configuration: Matrix >Router(config)# Usage The “no” form of this command removes the local addr ess pool. Example This example shows how to [...]
-
Page 684
DHCP Overview ip dhcp ping packets 20-8 DHCP C onfiguration ip dhcp ping p acket s Use this command to specify the number of packets a DHCP server sends to an IP addres s before assigning the address to a requesting client. Synt ax ip dhcp ping packets n[...]
-
Page 685
ip dhcp pool DHCP Overview Enterasys Matrix DFE-Gold Series Configuratio n Guide 20-9 Usage The “no” form of this command resets the ping timeout to the default val u e . Example This example shows how to set the DHCP ping timeout to 900 millisec[...]
-
Page 686
DHCP Overview dns-server 20-10 DHCP C onfiguration Parameters Default s None. Mode Router command, Any DHCP configuration mod e. Usage This command configures DHCP option 15. The “no” form of this command deletes a DHCP domain name. Example This example show[...]
-
Page 687
netbios-name-server DHCP Overview Enterasys Matrix DFE-Gold Series Configur ation Guide 20-11 Example This example shows how to assign a DNS server at 11.12.1.99 to the “localpool” address pool: Matrix>Router(config)#ip dhcp pool l ocalpool Matrix>Router(config-dhcp-pool)#dns- se[...]
-
Page 688
DHCP Overview default-router 20-12 DHCP C onfiguration Parameters Default s None. Mode Router command, Any DHCP configuration mod e. Usage This command configures DHCP option 46. The “no” form of this command deletes the NetBIOS node type. Example This example ?[...]
-
Page 689
bootfile DHCP Overview Enterasys Matrix DFE-Gold Series Configur ation Guide 20-13 Usage This command configures DHCP option 3. The ʺ no ʺ form of this command deletes the default router list. Example This example shows how to assign a default router at [...]
-
Page 690
DHCP Overview option 20-14 DHCP C onfiguration Parameters Default s None. Mode Router command, Any DHCP configuration mod e. Usage The next se rver is the serv er the client will contact for the boot file if the primary serv er is not able to [...]
-
Page 691
lease DHCP Overview Enterasys Matrix DFE-Gold Series Configur ation Guide 20-15 Usage These configuratio n parameters and other control information are carried in tagged data items that are stored in the options field of the DHCP message to networ k [...]
-
Page 692
DHCP Overview host 20-16 DHCP C onfiguration Usage The “no” form of this command resets the lease duration to the default va l u e of 1 day (24 hours). Example This example shows how to set a one ‐ hour leas e to the “localpoo[...]
-
Page 693
client-identifier DHCP Overview Enterasys Matrix DFE-Gold Series Configur ation Guide 20-17 Parameters Default s None. Mode Router command, Any DHCP configuration mod e. Usage Using this command to giv e a set of client class properties a name, allows you to assign [...]
-
Page 694
DHCP Overview client-name 20-18 DHCP C onfiguration Example This example shows how to assign client MAC address 00.01f4.0127 within “clientclass1”: Matrix>Router(config)#ip dhcp pool l ocalpool Matrix>Router(config-dhcp-pool)#clie nt-identifier 0100.01f4.0127 client-class clientclass1 client-nam[...]
-
Page 695
show ip dhcp binding DH CP Overview Enterasys Matrix DFE-Gold Series Configur ation Guide 20-19 Parameters Default s If type is not specified, Ethernet will be applied. Mode Router command, Any DHCP configuration mod e . Usage This command also enables DHCP host configurati[...]
-
Page 696
DHCP Overview clear ip dhcp binding 20-20 DHCP C onfiguration Example This example shows how to display the DHCP binding address parameters, including an associated Ethernet MAC addresses, lease expiration dates, type of address assignments, and whet[...]
-
Page 697
show ip dhcp ser ver statistics DHCP Overview Enterasys Matrix DFE-Gold Series Configur ation Guide 20-21 Mode Router command, Any DHCP configuration mod e. Example This example shows how to display DHCP serv er statistics: Matrix>Router#show ip dhcp server st atistics Memory usage 614874 Addre[...]
-
Page 698
DHCP Overview clear ip dhcp server statistics 20-22 DHCP C onfiguration clear ip dhcp server st atistics Use this command to reset all DHCP server counters. Synt ax clear ip dhcp server statistics Parameters None. Default s None. Mode Router command, Privileged EXEC: Matrix>Router# Example This [...]
-
Page 699
Enterasys Matrix DFE-Gold Series Configuratio n Guide 21-1 21 Routing Protocol Configuration This chapter describes the Routing Protocol Configuration set of command s and how to use the m. Activating Advanced Routing Features In order to enable adv anced routing protoc[...]
-
Page 700
Configuring RIP router rip 21-2 Routing Proto col Configuration router rip Use this command to enable or disable RIP configuration mode. Synt ax router rip no router rip T able 21- 1 RIP Configuration T ask List and Commands T o do this... Use these command s... Enable RIP configuration mode and associa te a netw[...]
-
Page 701
network Configuring RIP Enterasys Matrix DFE-Gold Series Configuratio n Guide 21-3 Parameters None. Default s None. Mode Router command, Glob al configuration: Matrix>Ro uter(config)# Usage Yo u must execute the router rip command to enable the protocol before completing many ?[...]
-
Page 702
Configuring RIP neighbor 21-4 Routing Proto col Configuration Example This example shows how to attach network 192.168.1.0 to the RIP routing process: Matrix>Router(config)#router rip Matrix>Router(config-router)#network 192.168.1.0 neighbor Use this command to instruct the ?[...]
-
Page 703
ip ri p offs et Configuring RIP Enterasys Matrix DFE-Gold Series Configuratio n Guide 21-5 Parameters Default s None. Mode Router command, Router configuration: Matrix>Rout er(config ‐ router)# Usage If sever al routes (coming from different protocols) are presented to the Enterasys ?[...]
-
Page 704
Configuring RIP timers 21-6 Routing Proto col Configuration Default s None. Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan 1))# Usage Adding an offset on an interface is used for the purpose of making an interface a backup. Th[...]
-
Page 705
ip rip send ver sion Configuring RIP Enterasys Matrix DFE-Gold Series Configuratio n Guide 21-7 Example This example shows ho w to set RIP timers to a 5 second update time, a 10 second inv alid interv al, a 20 second holdown time, and a 60 se[...]
-
Page 706
Configuring RIP key chain 21-8 Routing Proto col Configuration Parameters Default s None. Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan 1))# Usage The “no” form of this command restores the default ver s io n of the RIP module update[...]
-
Page 707
key Configuring RIP Enterasys Matrix DFE-Gold Series Configuratio n Guide 21-9 Example This example shows how to create a RIP authentication key chain called “md5key”: Matrix>Router(config)#key chain md5k ey key Use this command to identify a RIP authentication k[...]
-
Page 708
Configuring RIP accept-lifetime 21-10 Routing Prot ocol Configuration Parameters Default s None. Mode Router command, Key chain key config uration: Matrix>Router(config-keychain-key)# Usage The “no” form of this command removes the authentication string. Example This example shows how to ?[...]
-
Page 709
send-lifetime Configuring RIP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-11 Default s None. Mode Router command, Key chain key configuration: Matrix >Router(config ‐ keychain ‐ key)# Usage The “no” form of this command removes the accept ‐ lifetime configuration [...]
-
Page 710
Configuring RIP ip rip authentication keychain 21-12 Routing Prot ocol Configuration Default s None. Mode Router command, Key chain key configuration: Matrix >Router(config ‐ keychain ‐ key)# Usage The “no” form of this command removes the se nd ‐ lifetime configuration fo[...]
-
Page 711
ip rip authentication mod e Configuring RIP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-13 ip rip authentication mode Use this command to set the authentication mode when a key cha in is present. Synt ax ip rip authentication mode { text | md5 } no ip rip authentication mode Param[...]
-
Page 712
Configuring RIP ip rip disa ble-triggered-updates 21-14 Routing Prot ocol Configuration Usage This command is necessary for enabling CIDR for RIP on the Enterasys Matrix Series device. By default, RIP versi on 2 supports automatic route summarization, which [...]
-
Page 713
ip split-horizon poison Configuring RIP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-15 ip split-horizon poison Use this command to enable or disable split horizon poison ‐ reverse mode for RIP packets . Synt ax ip split-horizon poison no ip split-horizon poison Parameters None. [...]
-
Page 714
Configuring RIP receive-interface 21-16 Routing Prot ocol Configuration Mode Router command, Router configuration: Matrix>Rout er(config ‐ router)# Usage This command does not prevent RIP from monitoring updates on the interface. The “no” form of this command ?[...]
-
Page 715
distribute-list Configuring RIP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-17 distribute-list Use this command to filter networks rece ived and to suppress netw orks from being advertised in RIP updates. Synt ax distribute-list access-list-number { in vlan vlan-id | out v[...]
-
Page 716
Configuring RIP redistribute 21-18 Routing Prot ocol Configuration Parameters Default s •I f metric value is not s pecified, 1 wil l be applied. •I f subnets is not specified, only non ‐ subnetted routes will be redistributed. Mode Router configuration: Matrix[...]
-
Page 717
redistribute Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-19 Configuring OSPF Underst anding Graceful Rest art OSPF gracef ul restart, sometimes referred to as non ‐ stop forw arding, provides for an OSPF router to remain on the forw arding pa[...]
-
Page 718
Configuring OSPF redistribute 21-20 Routing Prot ocol Configuration own forw arding engine that uses this information to make forw arding decisions locally on the module that receives the frame. These engines independently make forwarding decisions b[...]
-
Page 719
redistribute Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-21 OSPF Configuration T ask List and Commands Ta b l e 2 1 ‐ 2 list s the tasks and commands associated with OSPF configuration. Commands are described in the associated section as shown. .[...]
-
Page 720
Configuring OSPF router ospf 21-22 Routing Prot ocol Configuration router osp f Use this command to enable or disable Open Shortest Pa t h First (OSPF) configuration mode. Synt ax router ospf process-id no router ospf process-id Parameters Default s None. Enable passive OSPF mode on an interface. [...]
-
Page 721
network Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-23 Mode Router command, Glob al configuration: Matrix>Ro uter(config)# Usage Yo u must execute the router ospf command to enable the protocol before completing many OSPF ‐ specific config[...]
-
Page 722
Configuring OSPF router id 21-24 Routing Prot ocol Configuration Example This example shows how to configure IP address 182.127.62.1 0.0.0.31 as OSPF area 0: Matrix>Router(config)#router ospf 1 Matrix>Router(config-router)#network 182.127.62.1 0.0.0.31 area 0 router id Use this comma[...]
-
Page 723
ip ospf priority Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-25 Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan 1))# Usage Each router interface that participates in OSPF routing is assigned a default cost. This ?[...]
-
Page 724
Configuring OSPF timers spf 21-26 Routing Prot ocol Configuration timers sp f Use this command to change OSPF timer va l u e s to fine ‐ tune the OSPF network. Synt ax timers spf spf-delay spf-hold no timers spf Parameters Default s None. Mode Router command, Router configuration: Ma[...]
-
Page 725
ip ospf transmit-delay Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-27 Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan 1))# Usage The “no” form of this command resets the retransmi t interval valu e to th e def[...]
-
Page 726
Configuring OSPF ip ospf hello- interval 21-28 Routing Prot ocol Configuration ip osp f hello-interval Use this command to set the number of seconds a router must wai t before sending a hello packet to neighbor routers on an interface. Synt ax ip ospf he[...]
-
Page 727
ip ospf authentication-key Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-29 Default s None. Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan 1))# Usage The “no” form of this command sets the dead interv al va l u e to ?[...]
-
Page 728
Configuring OSPF ip ospf message digest key md5 21-30 Routing Prot ocol Configuration Example This example shows how to enables an OSPF au thentication key on VLAN 1 with the passw ord “yourpass”: Matrix>Router(config)#interface vlan 1 Matrix>Router(config-if(Vlan 1))#ip ospf[...]
-
Page 729
area range Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-31 Parameters Default s If route type is not specified, the distance va l u e will be applied to all OSPF routes (110). Mode Router command, Router configuration: Matrix>Rout er(conf[...]
-
Page 730
Configuring OSPF area authentication 21-32 Routing Prot ocol Configuration Parameters Default s None. Mode Router command, Router configuration: Matrix>Rout er(config ‐ router)# Usage Each Enterasy s Mat rix Series module or standalone device can support up to 6 OSPF ar ea[...]
-
Page 731
area stub Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-33 Usage The “no” form of this command disables authentication for an OSPF area. Example This example shows how to enable MD5 auth entication on OSPF area 10.0.0.0: Matrix>[...]
-
Page 732
Configuring OSPF area default cost 21-34 Routing Prot ocol Configuration area default cost Use this command to set the cost val u e for the default route that is sent into a stub area by an Area Border Router (ABR). Synt ax area area-id default-cost [...]
-
Page 733
area virtual-link Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-35 Default s If default ‐ information ‐ originate is not specif ied, no default type will be generated. Mode Router command, Router configuration: Matrix>Rout er(config ‐ router)# Usage An [...]
-
Page 734
Configuring OSPF passive-interface 21-36 Routing Prot ocol Configuration Default s None. Mode Router command, Router configuration: Matrix>Rout er(config ‐ router)# Usage The “no” form of this command removes the virtual link. Example This example shows how to configur[...]
-
Page 735
redistribute Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-37 Mode Router command, Router configuration: Matrix ‐ >Rou ter(config ‐ router)# Usage This allows an interface to be included in the OSPF route table, but turns off sending ?[...]
-
Page 736
Configuring OSPF database-overflow 21-38 Routing Prot ocol Configuration Default s •I f metric value is not s pecified, 0 wil l be applied. •I f type value is not specif ied, type 2 (external route) will be applied. •I f subnets is not specifie[...]
-
Page 737
graceful-restart enable Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-39 Mode Router command, Router configuration: Matrix ‐ >Rou ter(config ‐ router)# Usage Setting database overflow allows you to set a limit on the number of external LSA[...]
-
Page 738
Configuring OSPF graceful-restart helper-disable 21-40 Routing Prot ocol Configuration Example This example shows how to enable the graceful restart ability on this router: Matrix->Router(config)#router ospf 1 Matrix->Router(config-router)#gracef ul-restart enable Matrix->Router(config-router[...]
-
Page 739
graceful-restart stri ct-lsa-checking-disable Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-41 Parameters Default s None. Mode Router command, Router configuration: Matrix ‐ >Rou ter(config ‐ router)# Usage The restart intev al sets the maximum amount of time [...]
-
Page 740
Configuring OSPF show ip ospf 21-42 Routing Prot ocol Configuration Example This example shows how to disable strict LSA checking on thi s router: Matrix->Router(config)#router ospf 1 Matrix->Router(config-router)#gracef ul-restart strict-lsa-checking-disable show ip osp f Use this command ?[...]
-
Page 741
show ip ospf database Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-43 Link State Update Interval is 00 :30:00 and due in 00:02:28. Link State Age Interval is 00:00 :00 and due in 00:00:00. Area 0.0.0.2 Number of interfaces in this are a is 3 Area has no authentication SPF algorithm executed 61 times Area ranges are 140.[...]
-
Page 742
Configuring OSPF show ip ospf database 21-44 Routing Prot ocol Configuration Default s If link ‐ state ‐ id is not specified, the specified type of database rec ords will be display ed for all link state IDs. Mode Router command, Any router mode. Example[...]
-
Page 743
show ip ospf border -routers Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-45 show ip osp f border-routers Use this command to display information about OSPF internal entries to Area Border Routers (ABRs) and Autonomous System Boundary Routers ?[...]
-
Page 744
Configuring OSPF show ip ospf interface 21-46 Routing Prot ocol Configuration Parameters Default s If vlan ‐ id is not specified, OSPF statistics will be display ed for all VLANs. Mode Router command, Any router mode. Example This example shows how to display [...]
-
Page 745
show ip ospf neighb or Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-47 show ip osp f neighbor Use this command to display the state of communication betw een an OSPF router and its neighbor routers. Synt ax show ip ospf neighbor [ detail ] [ ip-a ddress ] [[...]
-
Page 746
Configuring OSPF show ip ospf virtual-links 21-48 Routing Prot ocol Configuration Example This example shows how to use the show ospf neighbor comm and: Matrix>Router#show ip ospf neighbor ID Pri State Dead-Int Address Interface 182.127.62.1 1 FULL 40 182.127.63.1 vlan1 Ta b l e 2 1 ‐ 5 provides [...]
-
Page 747
clear ip ospf process Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-49 Hello 10, Dead 40, W ait 40, Retransmit 5 Adjacency State FULL Ta b l e 2 1 ‐ 6 provides an explanation of the command output. clear ip osp f process Use this command to reset the OSPF process.[...]
-
Page 748
Configuring OSPF debug ip ospf 21-50 Routing Prot ocol Configuration debug ip osp f Use this command to enable OSPF protocol debuggi ng output. Synt ax debug ip ospf { subsystem } no debug ip ospf { subsystem } Parameters Default s None. Mode Router command, Privileged EXEC: Matrix>Router# Usage Th[...]
-
Page 749
rfc1583compatible Configuring OSPF Enterasys Matrix DFE-Gold Series Configur ation Guide 21-51 Mode Router command, Router configuration: Matrix>Rout er(config ‐ router)# Usage The “no” form of this command removes OSPF RFC 1583 compatible. Example This example shows how ?[...]
-
Page 750
Configuring DVMRP ip dvmrp 21-52 Routing Prot ocol Configuration Configuring DVMRP Purpose To enable and configure the Distance Ve c t o r Multicast Routing Protocol (DVMRP) on an interface. DVMRP routes multicast traf fic using a technique known as Reverse [...]
-
Page 751
ip dvmrp metric Configuring DVMRP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-53 The “no” form of this command disables DVMRP . Example This example shows how to enable DVMRP on VLAN 1: Matrix>Router(config)#interface vlan 1 Matrix>Router(config-if(Vlan 1))#ip dv[...]
-
Page 752
Configuring DVMRP show ip dvmrp route 21-54 Routing Prot ocol Configuration Mode Router command, Any router mode. Example This example shows how to display DVMRP routing table entries. In this case, the routing table has 5 entries. The first entry ?[...]
-
Page 753
ip irdp Configuring IRDP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-55 Configuring IRDP Purpose To enable and configure the ICMP Router Discovery Protocol (IRDP) on an interface. This protocol enables a host to determine the address of a ro[...]
-
Page 754
Configuring IRDP ip irdp maxadvertinterval 21-56 Routing Prot ocol Configuration ip ird p maxadvertinterval Use this command to set the maximum interv al in seconds between IRDP ad vertise ments. Synt ax ip irdp maxadvertinterval interval no irdp maxadvertinterval Parameters Default s None. Mode Route[...]
-
Page 755
ip irdp holdtime Configurin g IRDP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-57 Usage The “no” form of this command deletes the custom holdtime setting and resets the minimum advertisement interv al to the default va lu e of three ‐ fourths [...]
-
Page 756
Configuring IRDP ip irdp preference 21-58 Routing Prot ocol Configuration ip ird p preference Use this command to set the IRDP preference val u e for an interface. This val u e is used by IRDP to determine the inte rface’ s selection as a default ?[...]
-
Page 757
no ip irdp multicast Configuring IRDP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-59 Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan 1))# Usage The “no” form of this command clears an IP address from being adv ertised. Example Thi[...]
-
Page 758
Configuring IRDP show ip irdp 21-60 Routing Prot ocol Configuration Default s If vlan vlan ‐ id is not specified, IRDP information for all interfaces will be displayed. Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan 1))# Example This ex[...]
-
Page 759
router vrrp Configuring VRRP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-61 Configuring VRRP Purpose To enable and configure the Vi r t u a l Router Redundancy Protocol (VRRP). This protocol eliminates the single point of failure inherent in the static [...]
-
Page 760
Configuring VRRP create 21-62 Routing Prot ocol Configuration Usage Yo u must execute the router vrrp command to enable the protocol before completing other VRRP ‐ specific configuration tasks. For details on enablin g configuration modes, refer to [...]
-
Page 761
address Configuring VRRP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-63 address Use this command to configure a virtual router IP address. Synt ax address vlan vlan-id vrid ip-address owner no address vlan vlan-id vrid ip-address owner Parameters Default s None. Mode Router command, Route[...]
-
Page 762
Configuring VRRP priority 21-64 Routing Prot ocol Configuration Examples This example shows how to configure a virtual router add ress of 182.127.62.1 on VLAN 1, VRID 1, and to set the router connected to the VLAN via this interface a[...]
-
Page 763
master-icmp-reply Configuring VRRP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-65 Example This example shows how set a VRRP priorit y of 200 on VLAN 1, VRID 1: Matrix>Router(config)#router vrrp Matrix>Router(config-router)#priorit y vlan 1 1 200 master-icmp-reply Use thi[...]
-
Page 764
Configuring VRRP advertise-interval 21-66 Routing Prot ocol Configuration advertise-interval Use this command to set the interv al in seconds between VRRP advertisements. Synt ax advertise-interval vlan vlan-id vrid interval no advertise-interval vlan vlan-id vrid interval Parameters Default s None. M[...]
-
Page 765
preempt Configuring VRRP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-67 Parameters Default s If not specified, critical ‐ priority will be set to 10. Mode Router command, Router configuration: Matrix>Rout er(config ‐ router)# Usage A critical IP address defines [...]
-
Page 766
Configuring VRRP preempt-delay 21-68 Routing Prot ocol Configuration Default s None. Mode Router command, Router configuration: Matrix>Rout er(config ‐ router)# Usage The router that owns the virtual router IP address alw ays preempts other routers, reg ardle ss of thi[...]
-
Page 767
enable Configuring VRRP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-69 When preempt mode is enabled this specifies a delay (in seconds) that a higher priority backup router must wai t to preempt a lower priority master . For more [...]
-
Page 768
Configuring VRRP ip vrrp authentication-key 21-70 Routing Prot ocol Configuration ip vrrp authentication-key Use this command to set a VRRP authentication passw ord on an interface. Synt ax ip vrrp authentication-key password no ip vrrp authentication-key Parameters Default s None. Mode Router com[...]
-
Page 769
show ip vrrp Configuring VRRP Enterasys Matrix DFE-Gold Series Configur ation Guide 21-71 Default s None. Mode Router command, Interface configuration: Matrix> Router(config ‐ if(Vlan 1))# Usage The “no” form of this command clears VRRP MD5 authentication. Example This example [...]
-
Page 770
Configuring VRRP show ip vrrp 21-72 Routing Prot ocol Configuration T able 21-7 show ip vrrp Output Details Output... W hat it displays... Vlan S p ecifies the VLAN on which this VRRP session resides. V rid S pecifies the Virtual Router ID associated with the routing interface. S tate S p ecifies the current state of the VRRP session as follows: St[...]
-
Page 771
Enterasys Matrix DFE-Gold Series Configuratio n Guide 22-1 22 Port Priority and Rate Limiting Configuration This chapter describes the Po r t Priority and Rate Limiting set of commands and how to use them. Port Priority Configuration Summary The Enterasys Matrix Series [...]
-
Page 772
Configuring Port Priority show port priority 22-2 Port Priority and Rat e Limiting Configuration Configuring Port Priority Purpose To view or configure port priority characteristics as follows: •D i s p l a y or change the port default Class ‐ of Service (CoS ) transmit pri[...]
-
Page 773
set port priority Configuring Port Priority Enterasys Matrix DFE-Gold Series Configuratio n Guide 22-3 fe.2.5 is set to 0 set port priority Use this command to set the 802.1D (802.1p) Class ‐ of ‐ Service transmit queue priority (0 through 7) on each port. Synt ax set port priority[...]
-
Page 774
Configuring Port Priority clear port priority 22-4 Port Priority and Rat e Limiting Configuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Usage This command will cause all frames received without a priority val ue in its header to be set to ?[...]
-
Page 775
show port priority-queue Configuring Priority to Transmit Queue Mapping Enterasys Matrix DFE-Gold Series Configuratio n Guide 22-5 Configuring Priority to T ransmit Queue Mapping Purpose To perform the following: •V i e w the current priority to transmit queue mapping of each port, which [...]
-
Page 776
Configuring Priority to Transmit Queue Mapping set port p riority-queue 22-6 Port Priority and Rat e Limiting Configuration Examples This example shows how to display priority queue information for fe.1.7. In this case, the frames shown with a priority of 0 or ?[...]
-
Page 777
clear port priority-queue Configuring Priority to Transmit Queue Mapping Enterasys Matrix DFE-Gold Series Configuratio n Guide 22-7 Parameters Default s None. Mode Read ‐ Wr i t e . Usage This command enables you to change the priority queue (0 ‐ 7, depending on port type, with 0 b[...]
-
Page 778
Configuring Priority to Transmit Queue Mapping clear port priority-queue 22-8 Port Priority and Rat e Limiting Configuration Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear the priority queue settings on fe.2.12: Matrix(rw)->clear port priority-queu e fe.2.1[...]
-
Page 779
show port ratelimit Configuring Port Traffic Rate Limiting Enterasys Matrix DFE-Gold Series Configuratio n Guide 22-9 Configuring Port T raffic Rate Limiting Purpose To limit the rate of inbound tra ffic on the Enterasys Matrix Series devi ce on a per port/priority basis. The ?[...]
-
Page 780
Configuring Port Traffic Rate Limiting set port ratelimit 22-10 Port Prior ity and Rate Limiting Configuration ----------- ----- --------- ----- ------- --------- ----------- -------- fe.2.1 1 64125 discard inbound 0 disabled fe.2.1 2 64125 discard inbound 0 disabled fe.2.1 3 64125 discard inbound 0 disabled fe.2.1 4 64125 discard inbound 0 disable[...]
-
Page 781
clear port ratelimit C onfiguring Port Traffic Rate Limiting Enterasys Matrix DFE-Gold Series Configur ation Guide 22-11 Default s •I f not specified, threshold will be applied to inbound traffic on the port/priority . •I f index is not specifie d, settings will be [...]
-
Page 782
Configuring Port Traffic Rate Limiting clear port ratelimit 22-12 Port Prior ity and Rate Limiting Configuration Example This example shows how to clear all rate limiting para meters on port fe.2.: 1Matrix(rw)->clear port ratelimit fe .2.1[...]
-
Page 783
Enterasys Matrix DFE-Gold Series Configuratio n Guide 23-1 23 T ransparent W eb Cache Balancing Configuration This chapter descri bes the T ransparent We b Cache Balancing (TWCB) commands and how to use them. Underst anding T ransp arent W eb Cache Balancing (TWCB) T ransparent We b Ca[...]
-
Page 784
Understanding Transparent Web Cache Balancing (TWCB) 23-2 Transpa rent Web Cache Balancing Configuration farm is configured with 2 cache servers from the 186. 89.0.0 subnet. The s2Server serv er farm is configured with 5 cache servers from the 176.89.0.0 [...]
-
Page 785
ip twcb wcserverfarm Understanding Transparent Web Cache Balancing (TWCB) Enterasys Matrix DFE-Gold Series Configuratio n Guide 23-3 ip twcb wcserverfarm Use this command to create a we b ‐ cache server farm. Synt ax ip twcb wcserverfarm serverfarm-name Parameters Default s None. Mode Router Configuration: [...]
-
Page 786
Understanding Transparent Web Cache Balancing (TWCB) predictor roundrobin 23-4 Transpa rent Web Cache Balancing Configuration predictor roundrobin Use this command to modify the round ‐ robin predictor val u e by applying a list of destination IP addresses for which the ?[...]
-
Page 787
cache Understanding Transparent Web Cache Balancing (TWCB) Enterasys Matrix DFE-Gold Series Configuratio n Guide 23-5 cache Use this command to create a cache server based upon the supplied IP addre ss. Synt ax cache ip-address Parameters Default s None. Mode Router command, Serv er Fa[...]
-
Page 788
Understanding Transparent Web Cache Balancing (TWCB) faildetect 23-6 Transpa rent Web Cache Balancing Configuration Mode Router command, Cach e Serve r Configuration mode: Mat rix(rw) ‐ >Router(config ‐ twcb ‐ cache)# . Usage The application method defaul ts to a check of service [...]
-
Page 789
maxconns Understanding Transparent Web Cache Balancing (TWCB) Enterasys Matrix DFE-Gold Series Configuratio n Guide 23-7 maxconns Use this command to limit the maximum number of connections to the serv er . Synt ax maxconns number Parameters Default s None. Mode Router command, Cach e Serv[...]
-
Page 790
Understanding Transparent Web Cache Balancing (TWCB) ip twcb webcache 23-8 Transpa rent Web Cache Balancing Configuration Examples This example sets the maximum number of connections for cache serv er 186.89.10.51 to 100 and activ ates the server: Matrix(rw)->Router(config)#[...]
-
Page 791
http-port Understanding Transparent Web Cache Balancing (TWCB) Enterasys Matrix DFE-Gold Series Configuratio n Guide 23-9 http-port Use this command to redirect outbound HTTP requests to a non ‐ standard HTTP port number . Synt ax http-port port-number Parameters Default s None. Mode Router [...]
-
Page 792
Understanding Transparent Web Cache Balancing (TWCB) bypass-list range 23-10 Tr ansparent Web Cache Balancin g Configuration Example This example adds the server farm s1Server to the cache1 web ‐ cache: Matrix(rw)->Router(config)#ip twcb w ebcache cache1 Matrix(rw)->Router(config-twcb-webca che)#s[...]
-
Page 793
ip twcb redirect out Understanding Transparent Web Cache Balancing (TWCB) Enterasys Matrix DFE-Gold Series Configur ation Guide 23-11 Parameters Default s None. Mode Router command, Cach e Serve r Configuration mode: Mat rix(rw) ‐ >Router(config ‐ twcb ‐ webcache)# . Usage Yo u can explicitly specify [...]
-
Page 794
Understanding Transparent Web Cache Balanc ing ( TWCB) show ip twcb wcserverfarm 23-12 Tr ansparent Web Cache Balancin g Configuration Example This example associates the cache1 web ‐ cache with vlan 1 for the redirection of HTTP traffic: Matrix(rw)->router Matrix>router>enable [...]
-
Page 795
show ip twcb webcache Understanding Transparent Web Cache Balancing (TWCB) Enterasys Matrix DFE-Gold Series Configur ation Guide 23-13 show ip twcb webcache Use this command to display configuration data associated with the specified web ‐ cache. Synt ax show ip twcb webcache [ webcache-name ] Parameter[...]
-
Page 796
Understanding Transparent Web Cache Balancing (TWCB) show ip twcb stats 23-14 Tr ansparent Web Cache Balancin g Configuration Example This example displays connection data for the all cache serv ers and all clients: Matrix(rw)->Router#show ip twcb conn s flo-id cache-server-ip client-ip cport s[...]
-
Page 797
show limits Understanding Transparent Web Cache Balancing (TWCB) Enterasys Matrix DFE-Gold Series Configur ation Guide 23-15 Default s If no parameter is specified, statistics for all we b ‐ caches, server farms, and cache serv ers are cleared. Mode Router Command: Matrix(rw) ‐[...]
-
Page 798
Understanding Transparent Web Cache Balancing ( TWCB) show router limits (TWCB) 23-16 Tr ansparent Web Cache Balancin g Configuration Parameters Default s None. Mode Switch Command: Matrix(rw) ‐ > . Usage Bindings and cache use v aluable mem ory resources and are shared on a fi rst co[...]
-
Page 799
clear router limits (TWCB) Understanding Transparent Web Cache Balan cing (TWCB) Enterasys Matrix DFE-Gold Series Configur ation Guide 23-17 Mode Switch command mode: Matrix(rw) ‐ > . Examples This example displays all router limit s for this system: Matrix(su)->show router limits LSNAT maximu[...]
-
Page 800
Understanding Transparent Web Cache Balanc ing ( TWCB) clear router limits (TWCB) 23-18 Tr ansparent Web Cache Balancin g Configuration Usage This command must be executed from the switch CLI. Example This example resets the TWCB cache router limits setting to the default ?[...]
-
Page 801
clear router limits (TWCB) TWCB Con figuration Example Enterasys Matrix DFE-Gold Series Configur ation Guide 23-19 TWCB Configuration Example In this TWCB configuration example we will step through the configuration of two serve r farms named s1Server and s2Server . The [...]
-
Page 802
TWCB Configuration Example clear router limits (TWCB) 23-20 Tr ansparent Web Cache Balancin g Configuration Matrix>router Matrix>Router>enable Matrix>Router>#configure Enter configuration commands: Matrix>Router(config)#ip twcb wcserv erfarm s1Server Matrix>Router(config-twcb-wcsfarm)# Configure the end ‐ users th[...]
-
Page 803
clear router limits (TWCB) TWCB Con figuration Example Enterasys Matrix DFE-Gold Series Configur ation Guide 23-21 Matrix>Router(config-twcb-wcsfarm)#e xit Matrix>Router(config)# Configure the cache1 Web Cache Configure the web ‐ cache cache1: Matrix>Router(config)#ip twcb webcac he cache1 Matrix>Router(config-twcb-webcach[...]
-
Page 804
TWCB Configuration Example clear router limits (TWCB) 23-22 Tr ansparent Web Cache Balancin g Configuration[...]
-
Page 805
Enterasys Matrix DFE-Gold Series Configuratio n Guide 24-1 24 Security Configuration This chapter descri bes the Security Configurat ion set of commands and how to use them. Overview of Security Methods The following security methods are av ailable for controlling w[...]
-
Page 806
Configuring MAC Locking show maclock 24-2 Secur ity Configuration •F l o w Setup Throttling (FST) — prevents the effects of DoS attacks by limiting the number of new or established flows that can be programmed on any individual swi tch ?[...]
-
Page 807
show maclock Configuring MAC Locking Enterasys Matrix DFE-Gold Series Configuratio n Guide 24-3 Parameters Default s If port_string is not specified, MAC locking status will be displayed for all ports. Mode Switch command, Read ‐ Only . Example This example shows how to ?[...]
-
Page 808
Configuring MAC Locking show maclock stations 24-4 Secur ity Configuration show maclock st ations Use this command to display MAC locking information about end stations connected to the device. Synt ax show maclock stations [ firstarrival | static ] [ port-string ] Parameters Default s If [...]
-
Page 809
set maclock enable Configu ring MAC Locking Enterasys Matrix DFE-Gold Series Configuratio n Guide 24-5 set maclock enable Use this command to enable MAC locking on one or more por ts. Synt ax set maclock enable [ port_string ] Parameters Default s If port_string is not specified, M[...]
-
Page 810
Configuring MAC Locking set ma clock 24-6 Secur ity Configuration Parameters Default s If port_string is not specified, MAC locking will be disabled on all ports. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to disable MAC locking on ?[...]
-
Page 811
set maclock firs tarrival Configuring MAC Locking Enterasys Matrix DFE-Gold Series Configuratio n Guide 24-7 Example This example shows how to create a MAC locking association between MAC addr ess 00 ‐ a0 ‐ c9 ‐ 0d ‐ 32 ‐ 11 and port fe.2.3: Matrix(rw)->set maclock 00-[...]
-
Page 812
Configuring MAC Locking clear maclock firstarrival 24-8 Secur ity Configuration Mode Switch command, Read ‐ Wr i t e . Example This example shows how to move all current first arrival MA Cs to static entries on fe.1.3: Matrix(rw)->set maclock move fe.1.3 clear maclock firs[...]
-
Page 813
clear maclock static Configuring MAC Locking Enterasys Matrix DFE-Gold Series Configuratio n Guide 24-9 Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to restrict MAC locking to 4 static addresses on fe.2.3: Matrix(rw)->set maclock static fe.[...]
-
Page 814
Configuring MAC Locking clear maclock 24-10 Secu rity Configuration Default s None. Mode Switch command, Read ‐ Wr i t e . Usage When enabled, this authorizes the device to send an SNMP trap message if an end station is connected that exceeds the maximum ?[...]
-
Page 815
show ssh state Configuring Secure Shell (SSH) Enterasys Matrix DFE-Gold Series Configur ation Guide 24-11 Configuring Secure Shell (SSH) Purpose To review , enable, disable, and configure the Secure Shell (SSH) protocol, which provides secure Te l n e t . Commands show ssh st ate Use this [...]
-
Page 816
Configuring Secure Shell (SSH) set ssh hostkey 24-12 Secu rity Configuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to disable SSH: Matrix(rw)->set ssh disable set ssh hostkey Use this command to set or reinitialize new [...]
-
Page 817
set router ssh Configuring Secu re Shell (SSH) Enterasys Matrix DFE-Gold Series Configur ation Guide 24-13 Default s None. Mode Switch command, Read ‐ Only . Example This example shows how to display the state of SSH service to the rout er: Matrix(rw)->show router ssh SSH Server statu[...]
-
Page 818
Configuring Secure Shell (SSH) clear router ssh 24-14 Secu rity Configuration Mode Switch command, Read ‐ Wr i t e . Example This example shows how to reset SSH service to the router to the default state of disabled: Matrix(rw)->clear router ssh[...]
-
Page 819
show access-lists Con figuring Access Lists Enterasys Matrix DFE-Gold Series Configur ation Guide 24-15 Configuring Access List s Purpose To review and configure security access control lists (ACLs), which permit or deny access to routing interfaces based on protocol an[...]
-
Page 820
Configuring Access Lists access-list (standard) 24-16 Secu rity Configuration deny ip 150.136.0.0 0.0.255.255 224. 0.0.0 15.255.255.255 deny ip 11.6.0.0 0.1.255.255 224.0.0 .0 15.255.255.255 2) deny ip 172.24.24.0 0.0.1.255 224.0. 0.0 15.255.255.255 access-list (st andard) Use this command to define a standard IP acc[...]
-
Page 821
access-list (extended) Configuring Access Lists Enterasys Matrix DFE-Gold Series Configur ation Guide 24-17 Default s •I f insert, replace or move are not specifie d, the new entry will be appended to the access list. •I f source2 is not specified with m[...]
-
Page 822
Configuring Access Lists access-list (extended) 24-18 Secu rity Configuration T o apply ACL restrictions to IP , UDP , or ICMP p acket s: access-list access-list-number { deny | permit } protocol source [ source-wildcard ] [ operator [ port ]] destination [ desti nation-wildcard ] [ operator [ port ]] [ tos-extensions ][ icmp-type [ icmp-cod e ] [ [...]
-
Page 823
access-list (extended) Configuring Access Lists Enterasys Matrix DFE-Gold Series Configur ation Guide 24-19 Default s •I f insert , replace , or move are not specif ied, the new entry will be appended to the access list. •I f source2 is not specified with ?[...]
-
Page 824
Configuring Access Lists ip access-group 24-20 Secu rity Configuration Mode Router command, Glob al configuration: Matrix>Ro uter(config)# Usage Va l i d access ‐ list ‐ numbers for extended ACLs are 100 to 199 . For standard ACLs, va l i d va lu e s are 1 to [...]
-
Page 825
ip access-group Configuring Access Lists Enterasys Matrix DFE-Gold Series Configur ation Guide 24-21 Usage ACLs must be applied per routing interface. An entry (rule) can either be applied to inbound or outbound frames. The “no” form of this command [...]
-
Page 826
Configuring Denial of Service (DoS) Prevention show hostdos 24-22 Secu rity Configuration Configuring Denial of Service (DoS) Prevention Purpose To configure Denial of Service (DoS) prev ention, which wi ll protect the router from attacks and notify administrator s via Syslog. [...]
-
Page 827
hostdos Configuring Denial of Service (D oS) Prevention Enterasys Matrix DFE-Gold Series Configur ation Guide 24-23 Disabled IP packet with multicast/broadcast s ource address Always enabled 0 attacks Fragmented ICMP traffic Disabled Large ICMP packet Disabled Ping-of-Death attack Always enabled 0 attacks Port Scanning Disabled host dos Use thi[...]
-
Page 828
Configuring Denial of Service (DoS) Prevention clear hostdos-counters 24-24 Secu rity Configuration Examples This example shows how to globally enable land attack and large ICMP packets protection for packets larger than 2000 bytes: Matrix>Router(config)#hostdos land Mat[...]
-
Page 829
clear hostdos-counters Configur ing Flow Setup Throttling (FST) Enterasys Matrix DFE-Gold Series Configur ation Guide 24-25 Configuring Flow Setup Throttling (FST) About FST Flow Setup Throttling (FST) is a proactive feature designed to mitigate DoS attacks before the virus can wre[...]
-
Page 830
Configuring Flow Setup Throttling (FST) show flowlimit 24-26 Secu rity Configuration show flowlimit Use this command to display flow setup throttling information. Synt ax show flowlimit [ port [ port-string ]] [ stats [ port-str ing ]] Parameters Default s If no optional parameters are specified, [...]
-
Page 831
set flowlimit limit Configuring Flow Setup Throttling (FST) Enterasys Matrix DFE-Gold Series Configur ation Guide 24-27 Example This example shows how to enable FST on Fast Ethernet ports 1 ‐ 5 in modul e 2: Matrix(rw)->set flowlimit fe.2.1-5 e nable set flowlimit limit Use this c[...]
-
Page 832
Configuring Flow Setup Throttling (FST) clear flowlimit limit 24-28 Secu rity Configuration clear flowlimit limit Use this command to remove a flow limit configuration. Synt ax clear flowlimit { limit1 | l imit2 } [ u serport | serverport | aggregateduser | interswitchlink | unspecified ] Parameters Default s If [...]
-
Page 833
clear flowlimit action Configur ing Flow Setup Throttling (FST) Enterasys Matrix DFE-Gold Series Configur ation Guide 24-29 Default s •I f action is not specified, no action will be applied. •I f classification port type is not specif ied, none will be applied. Mode Swi[...]
-
Page 834
Configuring Flow Setup Throttling (FST) show flowlimit class 24-30 Secu rity Configuration Default s •I f not specified, all action types will be removed. •I f not specified, the act ion will be removed from all port classifications. Mode Switch command, Rea[...]
-
Page 835
set flowlimit port Configuring Flow Setup Throttling (FST) Enterasys Matrix DFE-Gold Series Configur ation Guide 24-31 Example This example shows how to show flow limits and associated actions configured for the va r i o us port classifications: Matrix(rw)->show flowlimit class Flow[...]
-
Page 836
Configuring Flow Setup Throttling (FST) clear flowlimit port class 24-32 Secu rity Configuration Default s If port ‐ string is not specif ied, settings will apply to all ports. Mode Switch command, Read ‐ Wr i t e . Usage Once a classification is assigned, these ports w[...]
-
Page 837
set flowlimit notification Configuring Flow Setup T hrottling (FST) Enterasys Matrix DFE-Gold Series Configur ation Guide 24-33 Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Usage When enabled, this allo ws ports configured with a “tra p” action to send an SNM[...]
-
Page 838
Configuring Flow Setup Throttling (FST ) clear flowlimit notification inter val 24-34 Secu rity Configuration clear flowlimit notification interval Use this command to reset the SNMP flow limit notificati on interval to the default val u e of 120 seconds. Synt ax clear flowlimit no[...]
-
Page 839
Enterasys Matrix DFE-Gold Series Configuratio n Guide 25-1 25 Authentication Configuration This chapter descri bes the set of commands for supported authentication methods. Overview of Authentication Methods The following authentication methods are av ailable for controlling wh[...]
-
Page 840
Configuring 802.1X Authentication 25-2 Authentication Co nfiguration •L o c a l user credentials — used for local authentication and authorization of CLI and We b V i e w management sessions. For details, refer to “ Setting User Accounts and Pa s s[...]
-
Page 841
show dot1x Configuring 802.1X Authentication Enterasys Matrix DFE-Gold Series Configuratio n Guide 25-3 selected ports, which results in allowing or denying network access according to RADIUS se rver configuration. Commands show dot1x Use this command to display 802.1X [...]
-
Page 842
Configuring 802.1X Authentication show dot1x 25-4 Authentication Co nfiguration Mode Switch command, Read ‐ Only . Examples This example shows how to display 802.1X status: Matrix(rw)->show dot1x DOT1X is disabled. This example shows how to display authentication diagnostics ?[...]
-
Page 843
show dot1x auth-config Configuring 802.1X Authentication Enterasys Matrix DFE-Gold Series Configuratio n Guide 25-5 Matrix(rw)->show dot1x auth-stats fe .1.1 Port: 1 Auth-Stats: EAPOL Frames Rx: 0 EAPOL Frames Tx: 0 EAPOL Start Frames Rx: 0 EAPOL Logoff Frames Rx: 0 EAPOL RespId Frames Rx: 0 EAPOL Resp Frames Rx: 0 EAPOL ReqId Frames Tx: 0 EAPOL[...]
-
Page 844
Configuring 802.1X Authentication show dot1x auth-config 25-6 Authentication Co nfiguration Default s •I f no parameters are specif ied, all 802.1X settings will be displ ayed. •I f port ‐ string is not specif ied, information for all ports will be displayed. [...]
-
Page 845
set dot1x Configuring 802.1X Authentication Enterasys Matrix DFE-Gold Series Configuratio n Guide 25-7 set dot1x Use this command to ena ble or disable 802.1X authentication, to reauthenticate one or more access entities, or to reinitialize one or more supplican[...]
-
Page 846
Configuring 802.1X Authentication set dot1x auth-config 25-8 Authentication Co nfiguration Parameters Default s If port ‐ string is not specif ied, authentication parameters will be set on all por ts Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to [...]
-
Page 847
clear dot1x auth-config Configuring 802.1X Authentication Enterasys Matrix DFE-Gold Series Configuratio n Guide 25-9 This example shows how to enable reauthenti cation control on ports fe.1.1 ‐ 3: Matrix(rw)->set dot1x auth-config re athenabled true fe.1.1-3 This example shows how to [...]
-
Page 848
Configuring 802.1X Authentication clear dot1x auth-config 25-10 Authenticat ion Configuration Matrix(rw)->clear dot1x auth-config quietperiod fe.1.1-3[...]
-
Page 849
clear dot1x auth-config Configurin g Port Web Authentication (PWA) Enterasys Matrix DFE-Gold Series Configur ation Guide 25-11 Configuring Port W eb Authentication (PW A) About PW A PW A provides a wa y of authenticating users before allowing general access to the netw ork. A PW A user[...]
-
Page 850
Configuring Port Web Authentication (PWA) clear dot1x auth-config 25-12 Authenticat ion Configuration •a l l o w access to a server (at IP 1.2.3.4) that acts as both a DNS and DHCP server , and •b e assigned as the default policy profile for all [...]
-
Page 851
show pwa Configuring Port Web Authentication (PWA) Enterasys Matrix DFE-Gold Series Configur ation Guide 25-13 show pwa Use this command to display port web authentication information for one or more ports. Synt ax show pwa [ port-string ] Parameters Default s If port ‐ string is not[...]
-
Page 852
Configuring Port Web Authentication (PWA) show pwa 25-14 Authenticat ion Configuration T able 25-1 show pwa Output Det ails Output... W hat it displays... PW A S tatus Whether or not port we b authentica tion is enabled or disabled. Default state of disabled can be changed using the set pwa command a s described in “ set pwa ” on page 25-15. PW[...]
-
Page 853
set pwa Configuring Port Web Authen tication (PWA) Enterasys Matrix DFE-Gold Series Configur ation Guide 25-15 set pwa Use this command to enable or disable port web authentication. Synt ax set pwa { enable | disable } Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Usage Po r t We[...]
-
Page 854
Configuring Port Web Authentication (PWA) clear p wa hostname 25-16 Authenticat ion Configuration Example This example shows how to set the PW A host name to “pwa host”: Matrix(rw)->set pwa hostname pwahost clear pwa hostname Use this command to clear the port we b ?[...]
-
Page 855
set pwa banner Configuring Port Web Authentication (PWA) Enterasys Matrix DFE-Gold Series Configur ation Guide 25-17 set pwa banner Use this command to configure a string to be displayed as the PW A login banner . Synt ax set pwa banner string Parameters Default s None. Mode Switch command[...]
-
Page 856
Configuring Port Web Authentication (PWA) set pwa displaylogo 25-18 Authenticat ion Configuration Parameters None. Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to reset the PW A login banner to a blank string Matrix(rw)->clear pwa banner set pw[...]
-
Page 857
set pwa ipaddress Configuring Port Web Authentication (PWA) Enterasys Matrix DFE-Gold Series Configur ation Guide 25-19 Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set the PW A redirect time to 10 seconds: Matrix(rw)->set pwa redirecttime 1[...]
-
Page 858
Configuring Port Web Authentication (PWA) set pwa enhancedmode 25-20 Authenticat ion Configuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set a the PW A protocol to CHAP: Matrix(rw)->set pwa protocol chap set pwa enhancedmode Us[...]
-
Page 859
set pwa guestname Configurin g Port Web Authentication (PWA) Enterasys Matrix DFE-Gold Series Configur ation Guide 25-21 set pwa guestname Use this command to set a guest user name for PW A enhanced mode networking. Synt ax set pwa guestname name Parameters Default s None. Mode Read ‐ Wr i t[...]
-
Page 860
Configuring Port Web Authentication (PWA) set pwa guestpassword 25-22 Authenticat ion Configuration set pwa guestp assword Use this command to set the guest user password for PW A netw orking. Synt ax set pwa guestpassword Parameters None. Default s None. Mode Switch command, Read ‐ Wr i t e[...]
-
Page 861
set pwa initialize Configuring Port Web Authentication (PWA) Enterasys Matrix DFE-Gold Series Configur ation Guide 25-23 Usage When enhanced mode is enabled (as described in “ se t pwa enhance dmode ” on page 25 ‐ 20), PW A will use a guest passw ord and guest [...]
-
Page 862
Configuring Port Web Authentication (PWA) set pwa maxrequests 25-24 Authenticat ion Configuration Default s If port ‐ string is not specif ied, quiet period will be set for all ports. Mode Read ‐ Wr i t e . Example This example shows how to set the PW A quiet pe[...]
-
Page 863
show pwa session C onfiguring Port Web Authentication (PWA) Enterasys Matrix DFE-Gold Series Configur ation Guide 25-25 Parameters Default s Enables or disables all ports if no port is specified. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to enable PW A[...]
-
Page 864
Configuring MAC Authentication show macauthentication 25-26 Authenticat ion Configuration Configuring MAC Authentication Purpose To review , disable, enab le and configure MAC authentication. This allows the device to authenticate source MAC addresses in an exchange wit[...]
-
Page 865
show macauthentication Configuring MAC Authentication Enterasys Matrix DFE-Gold Series Configur ation Guide 25-27 Parameters Default s If port ‐ string is not specif ied, MAC authentication information will be display ed for all ports. Mode Switch command, Read ‐ Only . Examples This ?[...]
-
Page 866
Configuring MAC Authentication show macauthentication session 25-28 Authenticat ion Configuration show macauthentication session Use this command to display the active MAC authe nticated sessi ons. Synt ax show macauthentication session Parameters None. Default s If port ‐ string is not specif i[...]
-
Page 867
set macauthentication Configuring MAC Authentication Enterasys Matrix DFE-Gold Series Configur ation Guide 25-29 set macauthentication Use this command to globally enable or disable MAC authentica tion. Synt ax set macauthentication { enable | disa ble } Parameters Default s Disabled. Mode Switch command, [...]
-
Page 868
Configuring MAC Authentication clear macauthentication passw ord 25-30 Authenticat ion Configuration Default s None. Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to set the MAC authentication password to “macauth”: Matrix(rw)->set macauthentication pa ssword maca[...]
-
Page 869
clear macauthentication significant- bits Configuring MAC Authentication Enterasys Matrix DFE-Gold Series Configur ation Guide 25-31 Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to set the MAC authentication significant bits to 24: Matrix(rw)->set macauthenticati[...]
-
Page 870
Configuring MAC Authentication set macauthentica tion authallocated 25-32 Authenticat ion Configuration Usage Enabling port(s) for MAC authentication requires globally enabling MAC authentication on the device as described in “ set macauthentication ” on page 25 ‐ 29 [...]
-
Page 871
set macauthentication portinitialize Configuring MAC Authentication Enterasys Matrix DFE-Gold Series Configur ation Guide 25-33 Default s If port ‐ string is not specif ied the number of allow ed authentication sessions will be cleared on all ports. Mode Switch command, Read [...]
-
Page 872
Configuring MAC Authentication set macauthe ntication reauthentication 25-34 Authenticat ion Configuration Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to force the MAC authenti cation session for address 00 ‐ 60 ‐ 97 ‐ b5 ‐ 4c ‐ 07 to ?[...]
-
Page 873
set macauthentication macreauthenticate Configuring MAC Authentication Enterasys Matrix DFE-Gold Series Configur ation Guide 25-35 Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to force ge.2.1 though 5 to reauthenticate: Matrix(rw)->set macauthen[...]
-
Page 874
Configuring MAC Authentication clear macauthentication reauthperiod 25-36 Authenticat ion Configuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Usage This is the time lapse betw een attempts to reauthenticate any current MAC addres s authenticated to a ?[...]
-
Page 875
set macauthentication quietperiod Configuring MAC Authentication Enterasys Matrix DFE-Gold Series Configur ation Guide 25-37 set macauthentication quietperiod Use this command to enable a reauthenti cation attempt for failed entries at the period specified in seconds. Synt ax set m[...]
-
Page 876
Configuring MAC Authentication clear macauthentication quietperiod 25-38 Authenticat ion Configuration Usage The default val ue is 0 (never). Example This example shows how to clear the macauthentication quietperiod for port ge.1.1 Matrix(rw)->clear macauthentication quietperiod ge.[...]
-
Page 877
clear macauthentication quietperiod Configuring C onvergence End Points (CEP) Phone De tection Enterasys Matrix DFE-Gold Series Configur ation Guide 25-39 Configuring Convergence End Point s (CEP) Phone Detection About CEP Phone Detection Convergence is a method to detect a remote IP telephony or video ?[...]
-
Page 878
Configuring Convergence End Points (C EP) Phone Detection show cep connections 25-40 Authenticat ion Configuration show cep connections Use this command to display all lear ned CEPs. Synt ax show cep connections port-string Parameters Default s None Mode Read ‐ Only . Example This example shows how to ?[...]
-
Page 879
show cep policy Configuring Convergence End Points (CEP) Phone De tection Enterasys Matrix DFE-Gold Series Configur ation Guide 25-41 Parameters Default s If no detection ‐ id is specified, al l CEP detection parameters are displayed. Mode Read ‐ Only . Examples This example shows how to ?[...]
-
Page 880
Configuring Convergence End Points (CEP) Phone D etection show cep port 25-42 Authenticat ion Configuration Examples This example shows how to display CEP policy information: Matrix>show cep policy CEP default policies CEP Type Policy Index Policy Name -------- ------------ ------------ cisco 13 Cisco IP Pho ne si[...]
-
Page 881
set cep port Configuring Convergence End Points (CEP) Phone Detection Enterasys Matrix DFE-Gold Series Configur ation Guide 25-43 Default s Disabled. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to globally enable CEP detection: Matrix>set cep enable set cep port Use this [...]
-
Page 882
Configuring Convergence End Points (C EP) Phone Detection set cep detection-id 25-44 Authenticat ion Configuration Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Usage This is the policy that will be applied when a phone of the specified type is detected ?[...]
-
Page 883
set cep detection-id type Configuring Convergence End Points (CEP) Phone Detection Enterasys Matrix DFE-Gold Series Configur ation Guide 25-45 Usage This command applies only to Siemens, H.323, and SIP phone detection. Cisco detection uses CiscoDP as its discovery method. Examp[...]
-
Page 884
Configuring Convergence End Points (CEP) Phone D etection set cep detection-id address 25-46 Authenticat ion Configuration set cep detection-id address Use this command to set an H.323, Siemens, or SIP phone detection group’ s IP address or mask. Synt ax set cep detection-id id a[...]
-
Page 885
set cep detection-id porthigh | portlow Configuring Convergence End Points (CEP) Phone De tection Enterasys Matrix DFE-Gold Series Configur ation Guide 25-47 Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Usage This command applies only to Siemens, H.323, and SIP phone detection. [...]
-
Page 886
Configuring Convergence End Points (CEP) Phone D etection set cep initialize 25-48 Authenticat ion Configuration Mode Switch command, Read ‐ Wr i t e . Usage This command applies only to Siemens, H.323, and SIP phone detection. Cisco detection uses CiscoDP as its discover[...]
-
Page 887
clear cep Configuring Convergence End Points (CEP) Phone De tection Enterasys Matrix DFE-Gold Series Configur ation Guide 25-49 clear cep Use this command to clear convergence end points parameters. Synt ax clear cep { all | policy | detection [ detection-id ] | users [ port-string ] | port [ port-string { all | cisc[...]
-
Page 888
RADIUS Filter-ID Attribute and Dynam ic Policy Profile Assignment clear cep 25-50 Authenticat ion Configuration RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment If you configure an authentication method that requires communication with a RADIUS server , you can use the [...]
-
Page 889
show authentication login Setting the Authentication Login Method Enterasys Matrix DFE-Gold Series Configur ation Guide 25-51 show authentication login Use this command to display the current authen tication login method. Synt ax show authentication login Parameters None. Default s None. Mode Switch command, [...]
-
Page 890
Setting the Authentication Login Method clear authentication login 25-52 Authenticat ion Configuration Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to set the authentication login method to use the local password settings: Matrix(rw)-&[...]
-
Page 891
show radius Configuring RADIUS Enterasys Matrix DFE-Gold Series Configur ation Guide 25-53 Configuring RADIUS Purpose To perform the following: •R e v i e w the RADIUS client/server configuration on the device. •E n a b l e or disable the RADIUS client. •S e t local and r[...]
-
Page 892
Configuring RADIUS set radius 25-54 Authenticat ion Configuration Default s If no parameters are specified, all RA DIUS configuration information will be displayed. Mode Switch command, Read ‐ Only . Example This example shows how to display RADIUS configuration i[...]
-
Page 893
clear radius Configuring RADIUS Enterasys Matrix DFE-Gold Series Configur ation Guide 25-55 Default s •I f secret ‐ value is not specified, none will be applied. •I f realm is not specified, any authentication wi ll be allowed. Mode Switch command, Read ‐ Wr i t e .[...]
-
Page 894
Configuring RADIUS show radius accounting 25-56 Authenticat ion Configuration Parameters Default s •I f index or all is not specified for clearing RADIUS server , all RADIUS serv er settings will be deleted. •I f no other optional parameters are specifie[...]
-
Page 895
set radius accounting Configuring RADIUS Enterasys Matrix DFE-Gold Series Configur ation Guide 25-57 Default s If no parameters are specified, all RA DIUS accounting configuration information will be display ed. Mode Switch command, Read ‐ Only . Example This example shows how ?[...]
-
Page 896
Configuring RADIUS clear radius accounting 25-58 Authenticat ion Configuration Default s None. Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to enable the RADIUS accounting client for authenticating with the accounting server 1 at IP addre[...]
-
Page 897
clear radius accounting Configuring RADIUS Enterasys Matrix DFE-Gold Series Configur ation Guide 25-59 Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to reset the RADIUS accounting timeout to 5 seconds on all servers : Matrix(rw)->clear r[...]
-
Page 898
Configuring RFC 3580 show vlanauthorization 25-60 Authenticat ion Configuration Configuring RFC 3580 About RFC 3580 RFC 3580 provides suggestions on how 802.1x Authenticators should lev erage RADIUS as the backend AAA infrastructure. RFC 3580 is divided into sev era[...]
-
Page 899
set vlanauthorization Configuring RFC 3580 Enterasys Matrix DFE-Gold Series Configur ation Guide 25-61 Mode Switch command, Read ‐ Only . Example This example shows how to display VLAN Authorization configuration information for ports ge.1.1 ‐ 3: Matrix(su)->show vlanauthorization g[...]
-
Page 900
Configuring RFC 3580 clear vlanauthorization 25-62 Authenticat ion Configuration Example This example shows how to enable VLAN Authorization: Matrix(su)->set vlanauthorization en able This example shows how to enable VLAN Authorization for port ge.1.1 for tagge d [...]
-
Page 901
show tacacs Configuring TACACS+ Enterasys Matrix DFE-Gold Series Configur ation Guide 25-63 Configuring T ACACS+ Purpose To perform the following: •R e v i e w the T ACACS+ client and server configurations on the device. •E n a b l e or disable the T ACACS+ client. •S e t [...]
-
Page 902
Configuring TACACS+ show tacacs 25-64 Authenticat ion Configuration Mode Switch command, Read ‐ Only . Example This example shows how to display all T ACACS configurat ion information: Matrix(ro)->show tacacs TACACS+ state: enabled TACACS+ session accounting state: disabled TACACS+ command author[...]
-
Page 903
set tacacs Configu ring TACACS+ Enterasys Matrix DFE-Gold Series Configur ation Guide 25-65 set t a cacs Use this command to enable or disable the T ACACS+ client. Synt ax set tacacs { enable | disable } Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Usage The T ACACS+ client [...]
-
Page 904
Configuring TACACS+ set taca cs server 25-66 Authenticat ion Configuration Example This example displays configuration information for all configured T ACACS+ serv ers. Matrix(ro)->show tacacs server all TACACS+ Server IP Address Po rt Timeout Status -------------- --------------- -- --- ------- ------- 1 192.[...]
-
Page 905
clear tacacs serv er Configuring TACACS+ Enterasys Matrix DFE-Gold Series Configur ation Guide 25-67 clear t acacs server Use this command to remove one or all configured T ACACS+ servers, or to return the timeout va l u e to it s default val u e for one or [...]
-
Page 906
Configuring TACACS+ set tacacs session 25-68 Authenticat ion Configuration Matrix(ro)->show tacacs session auth orization TACACS+ service: exec TACACS+ session authorization A-V p airs: access level attribute value read-only 'priv-lvl' '0' read-write 'priv-lvl' '1' super-user 'priv-lvl' '15&[...]
-
Page 907
clear tacacs se ssion Configuring TACACS+ Enterasys Matrix DFE-Gold Series Configur ation Guide 25-69 Mode Switch command, Read ‐ Wr i t e . Usage When session accounting is enabled, the TA C A C S + server will log accounting information, such as start and stop times, ?[...]
-
Page 908
Configuring TACACS+ sh ow tacacs command 25-70 Authenticat ion Configuration Default s At least one of the session authorization parameters must be specified. Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to return only the service name ?[...]
-
Page 909
set tacacs comm and Configuring TACACS+ Enterasys Matrix DFE-Gold Series Configur ation Guide 25-71 set t a cacs command Use this command to enable or disable T ACACS+ accounting or authorization on a per ‐ command basis. Synt ax set tacacs command { accounting | aut horization } { enabl[...]
-
Page 910
Configuring TACACS+ set tacacs singleconnect 25-72 Authenticat ion Configuration Default s If state is not s pecified, all single connection configuration parameters are displayed (which at this time includes only the enabled/disabled state). Mode Switch command, ?[...]
-
Page 911
Enterasys Matrix DFE-Gold Series Configuratio n Guide 26-1 26 RADIUS Snooping Configuration This chapter descri bes the RADIUS Snooping commands and how to use them. Underst anding RADIUS Snooper RADIUS Snooper (RS) allows a netw ork manager to manage downstream con[...]
-
Page 912
Understanding RADIUS Snooper set radius-snooping 26-2 RADIUS Snoop ing Configuration • Globally enable RS on the switch •E n a b l e RS on those ports yo u wish enabled for snooping • Optionally change the period RS will wai t for a RADIUS response[...]
-
Page 913
set radius-snooping timeo ut Understanding RADIUS Snoo per Enterasys Matrix DFE-Gold Series Configuratio n Guide 26-3 Parameters Default s None. Mode Read ‐ Wr i t e . Usage This command does not enable RS on the ports for this device. To enable ports for RS see the comma[...]
-
Page 914
Understanding RADIUS Snooper set radius-snooping port 26-4 RADIUS Snoop ing Configuration Example This example shows how to set the RS timeout to 30 seconds: Matrix(rw)->set radius-snooping time out 30 set radius-snooping port Use this command to enable RS on all or [...]
-
Page 915
set radius-snooping flow Understanding RADIUS Snooper Enterasys Matrix DFE-Gold Series Configuratio n Guide 26-5 Example This example enables RS on ports ge.1.10 through ge.1.15, sets the timeout to 15 seconds and enables drop: Matrix(rw)->set radius-snooping enab le timeout[...]
-
Page 916
Understanding RADIUS Snooper set radius-snooping initialize 26-6 RADIUS Snoop ing Configuration set radius-snooping initialize Use this command to terminate all RS sessions on the system for the spec ified port or MAC address. Syntax set radius-snooping initialize { port port-strin[...]
-
Page 917
clear radius-snooping flow Understanding RADIUS Snooper Enterasys Matrix DFE-Gold Series Configuratio n Guide 26-7 clear radius-snooping flow Use this command to clear all entries or the specified index entry from the RS flow table. Syntax clear radius-snooping flow { all | in dex } Pa[...]
-
Page 918
Understanding RADIUS Snooper show radius-snooping port 26-8 RADIUS Snoop ing Configuration Example This example shows how to display RADIUS configuration information: Matrix(rw)->show radius-snooping RADIUS Snooping: Enabled Number of configured flows: 2 Active sessions: 12 Enabled ports: fe.1.1-fe.1.8; fe.1.2[...]
-
Page 919
show radius-snooping flow Understanding RADIUS Snooper Enterasys Matrix DFE-Gold Series Configuratio n Guide 26-9 show radius-snooping flow Use this command to display information for all flows or the specified index entry in the flow table. Syntax show radius-snooping flow { index[...]
-
Page 920
Understanding RADIUS Snooper show radius-snooping session 26-10 RADIUS Snoo ping Configuration Total RADIUS Access Accepts : 212 Total RADIUS Access Rejects : 26 Invalid RADIUS Request packets : 0 Invalid RADIUS Response packets: 0 Total Dropped Packets : 0 show radius-snooping session Use this command to display an RS s[...]
-
Page 921
show radius-snooping session Understanding RADIUS Snooper Enterasys Matrix DFE-Gold Series Configur ation Guide 26-11 Default s None. Mode Read ‐ Only . Examples This example displays RADIUS configuration information for port fe.1.1 : Matrix(rw)->show radius-snooping ses sion port fe.1.1 Port MAC Address Dur[...]
-
Page 922
Understanding RADIUS Snooper show radius-snooping session 26-12 RADIUS Snoo ping Configuration[...]
-
Page 923
Enterasys Matrix DFE-Gold Series Configuratio n Guide 27-1 27 MultiAuth Configuration This chapter descri bes the MultiA uth set of comman ds and how to use them. Multiple User Multiple Authentication – allows multipl e users on a give n port to ?[...]
-
Page 924
Configuring Multiple Authentication set multiauth mode 27-2 MultiAuth Co nfiguration Commands set multiauth mode Use this command to set the system authentication mode to use multiple authe nticators simultaneously or to strictly adhere to 802.1X. Synt ax set multiauth mode[...]
-
Page 925
clear multiauth mode Configuring Multiple Authentication Enterasys Matrix DFE-Gold Series Configuratio n Guide 27-3 Default s None. Mode Switch command, Read ‐ Wr i t e . Example This example shows how to enable multiple authentication: Matrix(rw)->set multiauth mode multi clear multiauth mode Use this ?[...]
-
Page 926
Configuring Multiple Authentication show multiauth counters 27-4 MultiAuth Co nfiguration Example This example shows how to display multiple authentication session ‐ timeout val u e s , for an active session: Matrix(su)->show multiauth Multiple authentication system confi guration -----------[...]
-
Page 927
set multiauth precedence Configur ing Multiple Authentication Enterasys Matrix DFE-Gold Series Configuratio n Guide 27-5 lag.0.46 0 0 0 0 lag.0.47 0 0 0 0 lag.0.48 0 0 0 0 set multiauth precedence Use this command to set the system’ s multiple authentica tion administrative precedence . Synt ax set multiaut[...]
-
Page 928
Configuring Multiple Authentication show multiauth port 27-6 MultiAuth Co nfiguration Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear the multiple authentication precedence: Matrix(rw)->clear multiauth preceden ce show multiauth port Use this command to [...]
-
Page 929
clear multiauth port Configur ing Multiple Authentication Enterasys Matrix DFE-Gold Series Configuratio n Guide 27-7 Parameters Default s None. Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to set the port multipl e authentication mode to required on ge.3.14:[...]
-
Page 930
Configuring Multiple Authentication show multiauth station 27-8 MultiAuth Co nfiguration show multiauth st ation Use this command to display multiple authenticati on station (end user) entries. Synt ax show multiauth station [ mac address ] [ port port-string ] Parameters Default s If no options a[...]
-
Page 931
show multiauth session Configuring Mu ltiple Authentication Enterasys Matrix DFE-Gold Series Configuratio n Guide 27-9 Mode Switch command, Read ‐ Wr i t e . Example This example shows how to clear the multiple authentication station entry associated with port fe.1.20: Matrix(rw)->[...]
-
Page 932
Configuring Multiple Authentication show multiauth idle-timeout 27-10 MultiAuth C onfiguration Termination time: Not Terminated show multiauth idle-timeout Use this command to display the multiple authentication timeout va l u e for an idle session. Synt ax show multiauth idle-timeout Paramete[...]
-
Page 933
clear multiauth idle-timeout Configuring Multiple Authentication Enterasys Matrix DFE-Gold Series Configur ation Guide 27-11 Default s If no authentica tion method is specified, the timeout va l u e is set for all methods. Mode Switch command, Read ‐ Wr i t e . Usage A val u e of[...]
-
Page 934
Configuring Multiple Authentication show multiauth session-timeout 27-12 MultiAuth C onfiguration Default s If no authentica tion type is specified , the idle timeout va l u e is retur ned to 300 seconds for all authentication types. Mode Switch command, Read ‐ Wr i t[...]
-
Page 935
set multiauth session-timeout Configuring Multiple Authentication Enterasys Matrix DFE-Gold Series Configur ation Guide 27-13 set multiauth session-timeout Use this command to set the maximum number of seconds an authenticate d session may last before termination of the ses[...]
-
Page 936
Configuring Multiple Authentication clear multiauth session-timeout 27-14 MultiAuth C onfiguration clear multiauth session-timeout Use this command to clear session ‐ timeout va l u e s , for one or all authenticati on methods, back to the default va lu e s . Synt ax clear multia[...]
-
Page 937
clear multiauth trap Configur ing Multiple Authentication Enterasys Matrix DFE-Gold Series Configur ation Guide 27-15 Parameters Default s All sending of multiauth traps disabled. Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to enable the multiauth system tr[...]
-
Page 938
Configuring Multiple Authentication show multiauth trap 27-16 MultiAuth C onfiguration Default s None. Mode Switch command, Read ‐ Wr i t e . Examples This example shows how to disable the multiauth system trap setting: Matrix(rw)->clear multiauth trap sys tem This example shows how ?[...]
-
Page 939
show multiauth trap Configuring Multiple Authentication Enterasys Matrix DFE-Gold Series Configur ation Guide 27-17 Matrix(rw)-> This example shows how to display multiple authentication trap system settings: Matrix(rw)->show multiauth trap syst em System : Disabled Matrix(rw)->[...]
-
Page 940
Configuring Multiple Authentication show multiauth trap 27-18 MultiAuth C onfiguration[...]
-
Page 941
Index-1 Index Numerics 802.1D 6-1 802.1Q 7-1 802.1w 6-1 802.1x 25-54 , 25-65 A Access Groups 24-2 0 Access Lists 24-16 to 24-17 Addresses IP, adding to switch routing table 12-8 MAC, adding entri es to routing table 16-6 MAC, setting for IP r outing 16-17 setting the router ID address 21-24 Advertised Ability 4-30 Alias node 14-1 , 15-1 physical 2-[...]
-
Page 942
Index-2 Login administratively configure d 2-8 default 2-7 setting accounts 2-15 via Telnet 2-8 Loop Protect about 6-2 configuring 6-65 Loopback Interfaces 16-1 LSNAT 18-1 , 19-1 M MAC Addresses age time 12-1 1 displaying 12-10 setting in routing mode 16-17 MAC Authentication 25-26 MAC Locking 24-2 Management VLAN 7-2 MD5 Authentication 21-30 Mirro[...]
-
Page 943
Index-3 bridge parameters 6-3 features 6-2 Loop Protect feature 6-2 port parameters 6-49 Rapid Spanning Tree Protocol (RSTP) 6-1 Split Horizon 21- 15 Stub Area s 21-33 Syslog 10-1 System Informati on displaying basic 2-34 setting basic 2-30 T Technical Support 1-2 Telnet disconnecting 11 - 7 enabling in switch mode 2-77 Terminal Settings 2-51 TFTP [...]
-
Page 944
Index-4[...]