Ir para a página of
Manuais similares
-
Switch
Enterasys 2200
62 páginas 1.25 mb -
Switch
Enterasys Enterasys Vertical Horizon VH-8G
110 páginas 1.13 mb -
Switch
Enterasys 6000
231 páginas 2.24 mb -
Switch
Enterasys Enterasys Gold Distributed Forwarding Engine 4G4282-49
90 páginas 1.99 mb -
Switch
Enterasys 6E2xx
430 páginas 4.7 mb -
Switch
Enterasys Enterasys Matrix 6H352-25
56 páginas 1.6 mb -
Switch
Enterasys VH-8G-L3
41 páginas 1.17 mb -
Switch
Enterasys Matrix E1 1G587-09
4 páginas 0.15 mb
Bom manual de uso
As regras impõem ao revendedor a obrigação de fornecer ao comprador o manual com o produto Enterasys D-Series. A falta de manual ou informações incorretas fornecidas ao consumidor são a base de uma queixa por não conformidade do produto com o contrato. De acordo com a lei, pode anexar o manual em uma outra forma de que em papel, o que é frequentemente utilizado, anexando uma forma gráfica ou manual electrónicoEnterasys D-Series vídeos instrutivos para os usuários. A condição é uma forma legível e compreensível.
O que é a instrução?
A palavra vem do latim "Instructio" ou instruir. Portanto, no manual Enterasys D-Series você pode encontrar uma descrição das fases do processo. O objetivo do manual é instruir, facilitar o arranque, a utilização do equipamento ou a execução de determinadas tarefas. O manual é uma coleção de informações sobre o objeto / serviço, um guia.
Infelizmente, pequenos usuários tomam o tempo para ler o manual Enterasys D-Series, e um bom manual não só permite conhecer uma série de funcionalidades adicionais do dispositivo, mas evita a formação da maioria das falhas.
Então, o que deve conter o manual perfeito?
Primeiro, o manual Enterasys D-Series deve conte:
- dados técnicos do dispositivo Enterasys D-Series
- nome do fabricante e ano de fabricação do dispositivo Enterasys D-Series
- instruções de utilização, regulação e manutenção do dispositivo Enterasys D-Series
- sinais de segurança e certificados que comprovam a conformidade com as normas pertinentes
Por que você não ler manuais?
Normalmente, isso é devido à falta de tempo e à certeza quanto à funcionalidade específica do dispositivo adquirido. Infelizmente, a mesma ligação e o arranque Enterasys D-Series não são suficientes. O manual contém uma série de orientações sobre funcionalidades específicas, a segurança, os métodos de manutenção (mesmo sobre produtos que devem ser usados), possíveis defeitos Enterasys D-Series e formas de resolver problemas comuns durante o uso. No final, no manual podemos encontrar as coordenadas do serviço Enterasys na ausência da eficácia das soluções propostas. Atualmente, muito apreciados são manuais na forma de animações interessantes e vídeos de instrução que de uma forma melhor do que o o folheto falam ao usuário. Este tipo de manual é a chance que o usuário percorrer todo o vídeo instrutivo, sem ignorar especificações e descrições técnicas complicadas Enterasys D-Series, como para a versão papel.
Por que ler manuais?
Primeiro de tudo, contem a resposta sobre a construção, as possibilidades do dispositivo Enterasys D-Series, uso dos acessórios individuais e uma gama de informações para desfrutar plenamente todos os recursos e facilidades.
Após a compra bem sucedida de um equipamento / dispositivo, é bom ter um momento para se familiarizar com cada parte do manual Enterasys D-Series. Atualmente, são cuidadosamente preparados e traduzidos para sejam não só compreensíveis para os usuários, mas para cumprir a sua função básica de informação
Índice do manual
-
Página 1
Enterasys ® D-Series Ether net Switches CLI Reference Firmware V ersion 1. 00.01.0005 or Higher P/N 9034394-01[...]
-
Página 2
[...]
-
Página 3
i Notice Enterasys Networks reserves the right to make changes in specifi cations and other information contained in this do cument and its web si te without prior notice. The reader should in all case s consult Enterasys [...]
-
Página 4
ii ENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENT BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT. This document is an agreement (“ Agreement”) betwee n the end user (“Y ou”) and Enterasys Networks, Inc., on behalf of itself [...]
-
Página 5
iii If the Program is exported from the United Stat es pursuant to the License Ex ception TSR und er the U.S. Export Administration Regulations, in addition to the restriction on transfer set forth in Section 1 or [...]
-
Página 6
iv 10. ENFORCEMENT. You ac knowledge and agree that any breach of Sectio ns 2, 4, or 9 of this Ag reement by You may cause Enterasys irreparable damage for which recovery of money damages would be inadequate, and that [...]
-
Página 7
v Contents About This Guide Using This Guide ................ ................ ................ ................ ................ ............. ................ . ............... ................ xxi Structure of This Guide .......... ................ ................ ................ ................. ................ ............ .......... .....[...]
-
Página 8
vi set prompt ..... ................ ................ ................ ............. ................. ................ ................ .. .................... 2-20 show banner motd ........ ................ ................ ............. ................. ................ ................ ......... ............. 2-21 set banner motd ......... ...[...]
-
Página 9
vii clear config ...................... ................. ................ ................ ............. ................ ............... ........... ......... 2-46 Using and Configuring WebView . ................. ................ ................ ................ ................... ............ ........ ......... 2-47 Purpose ........... ......[...]
-
Página 10
viii show lldp port local-info ................ ................ ................. ................ ................ ............. ........ .............. 5-18 show lldp port remote-info ......... ................ ................ ................. ............ ................. .............. ..... ...... 5-20 set lldp tx-interval ....... ........[...]
-
Página 11
ix Setting Flow Control ........... ... ... ... .... ... ... ... .... ............ .... ... ... ... .... ... ... ... .... ... ... ... ... ............. .. ........ ................ ... 6-19 Purpose ........... ............. ................ ................ ............. ................ ................ ............. ..... .................. .....[...]
-
Página 12
x set port protected name ................ ................ ................. ................ ............. ................ .......... ............ 6-52 show port protected name ...... ................ ................ ................ ................ ................. ................ ......... 6-52 clear port protected name .... ..............[...]
-
Página 13
xi Purpose ........... ............. ................ ................ ............. ................ ................ ............. ..... .................. ......... 7-28 Commands ............... ................. ............. ................ ................ ................ ................ ......... ................. ...... 7-29 show newaddr[...]
-
Página 14
xii show spantree tctr apsuppres s ...... ................ ................. ................ ................ ................ ............ ....... 8-23 set spantree tctrapsuppress ................ ................ ................ ................ ................ ................ .... ......... 8-23 clear spantree tctrapsuppres s ...............[...]
-
Página 15
xiii show spantree nonforwardingreas on ........ ................ ............. ................ ................. ............ ............ .8 - 5 3 Chapter 9: 802.1Q VLAN Configuration VLAN Configuration Summary ........... ................ ............. ................ ................ ............. ............... ........... ........ 9-1 Port[...]
-
Página 16
xiv Command .............. ... .... ... ............. ... ... .... ... ... ... ... .... ... ... ............. ... .... ... ... ... ... .... ... ... ........ .................. ...... 10-2 set diffserv adminmode ................ ................ ................. ................ ................ ................ ........ ........... 10-2 Creating D[...]
-
Página 17
xv set cos state ................. ................ ............. ................ ................. ................ ............. ...... ................. 11-19 show cos state ........ ................ ................ ............. ................ ................ ................ ............ ........... .... 11-20 clear cos state . ..........[...]
-
Página 18
xvi set igmpsnooping interfacemode .................. ................. ................ ................ ................ .............. ..... 13-3 set igmpsnooping groupmembershipi nterval .... ................ ................ ................ ............. ................ ... 13- 4 set igmpsnooping maxresponse ....... ................ ........[...]
-
Página 19
xvii Configuring Simple Network Time Protocol (SNTP) ..... ................ ................ ................ ................ .......... .... 14-26 Purpose ........... ............. ................ ................ ............. ................ ................ ............. ..... .................. ....... 14-26 Commands ............... .......[...]
-
Página 20
xviii show rmon filter ............... ................. ................ ............. ................ ................ ................ .. ............... 15-19 set rmon filter ............. ............. ................ ................ ................ ................ ................. ..... .................. 1 5-20 clear rmon filter ......[...]
-
Página 21
xix clear dhcp pool dns-server .. ... ... ... .... ... ... ... ... .... ................ ............. ................ ................ ......... ........ 16-23 set dhcp pool domain-name ......................... ................. ................ ................ ................ ............ ..... 16-24 clear dhcp pool domain-name ..............[...]
-
Página 22
xx Configuring Multiple Authentication Methods ........ ............. ................ ............. ................ ................ . .......... 17-33 About Multiple Authentication Ty pes ............... ............. ................ ................ ............. ................ .. ......... 1 7-33 Configuring Multi-User Authenticati on (U se[...]
-
Página 23
xxi set pwa ipaddress ...... ................ ................ ................ ................. ................ ................ ....... ............. 1 7-67 set pwa protocol ........ ................ ................ ................ ................. ................ ................ ...... .............. 17-67 set pwa guestname ...... .......[...]
-
Página 24
xxii 7-18 show snmp view O utput Details ................ ................ ............. ................ ................. ................ ...... ... 7-20 7-19 show snmp targetparams Output Det ails ..... .... ......... ................. ................ ............. ................ ...... ... 7-23 7-20 show snmp targetaddr Output Details .....[...]
-
Página 25
Enterasys D-Series CLI Reference xxi About This Guide We l c o m e to the Enterasys Networks D ‐ Series CLI Refere nce . This manual explains how to access the device’ s Command Line Interface (CLI) and how to use it to configure Enterasy[...]
-
Página 26
Related Documents xxii About This Guide Chapter 7 , SNMP Configuration , describes how to configure SNMP users and user groups, access rights, target addresses, and notification parameters. Chapter 8 , Spanning Tr e e Configuration , describes how to [...]
-
Página 27
Conventions Used in This Guide Enterasys D-Series CLI Reference xxiii Conventions Used in This Guide The following conventions are used in the text of this document: The following icons are used in this guide: Getting Help For additional support related to this [...]
-
Página 28
Getting Help xxiv About This Guide Before calling Enterasys Networks, have the following information ready: •Y o u r Enterasys Networks service contract number •A description of the failure •A description of any action(s) already take n to [...]
-
Página 29
Enterasys D-Series CLI Reference 1-1 1 Introduction This chapter provides an overview of the D ‐ Series’ s unique features and functionality , an overview of the ta sks that may be accomplish ed using the CLI interf ace, an over view of ?[...]
-
Página 30
Factory Default Settings 1-2 Introduction • Remotely using We b V i e w ™ , Enterasys Netw orks’ embedded web server application. The Installation Gui de for your D ‐ Series device provides setup instructions for connecting a terminal or modem to[...]
-
Página 31
Factory Default Settings Enterasys D-Series CLI Reference 1-3 Link aggregation flow regeneration Disabled. Link aggregation system priority Set to 32768 for all ports. Link aggregation outport algorithm Set to DIP-SIP . Lockout Set to disable Read-Write and Read -Only users, and to lockout the default admin (Super User) account for 15 minutes, afte[...]
-
Página 32
Factory Default Settings 1-4 Introduction S panning Tree edge port administrative status Edge port administrative status begins with the value set to fals e initially after the device is powered up. If a S panning T r ee BDPU is not rece ived on the port within a few seconds, the status setting changes to true . S panning Tree edge port delay Enabl[...]
-
Página 33
Using the Command Line Interface Enterasys D-Series CLI Reference 1-5 Using the Command Line Interface S t arting a CLI Session Connecting Using th e Console Port Connect a terminal to the local console port as described in your D ‐ Series Installation Guide . The startup screen,[...]
-
Página 34
Using the Command Line Interface 1-6 Introduction Refer to the instructions included with the Te l n e t application for information about establishing a Te l n e t session. Logging In By default, the D ‐ Series switch is configured with three user [...]
-
Página 35
Using the Command Line Interface Enterasys D-Series CLI Reference 1-7 Figure 1-2 Samp le CLI Default s Description CLI Command Modes Each command description in this guide includes a section entitled “Mode” which states whether the command is executable in Admin (Su[...]
-
Página 36
Using the Command Line Interface 1-8 Introduction Displaying Scrolling Screens If the CLI screen length has be en set using the set length command as described on page 3 ‐ 26 , CLI output requiring more than one screen will disp lay --More-[...]
-
Página 37
Using the Command Line Interface Enterasys D-Series CLI Reference 1-9 Basic Line Editing Commands The CLI supports EMACs ‐ like line editing commands. Ta b l e 1 ‐ 2 li sts some commonly used commands. T able 1-2 Basic Line Editing Commands Key Sequence Command Ctrl+A Move cursor to beginning [...]
-
Página 38
Using the Command Line Interface 1-10 Introduction[...]
-
Página 39
Enterasys D-Series CLI Reference 2-1 2 Basic Configuration At startup, the D ‐ Series switch is configured wi th many defaul ts and standard features. This chapter describes how to customize basic system settings to adapt to you r wo rk env[...]
-
Página 40
Setting User Accounts and Passwords 2-2 Basic Configuration Setting User Account s and Passwords Purpose To change the switch’ s defaul t user login and passw ord settings, and to add new user accounts and passwords. Commands T able 2-2 Optional CLI Setup Commands T ask CLI comma[...]
-
Página 41
show system login Enterasys D-Series CLI Reference 2-3 show system login Use this command to display user login account information. Synt ax show system login Parameters None. Default s None. Mode Switch command, super user . Example This example shows how to display login acco[...]
-
Página 42
set system login 2-4 Basic Configuration set system login Use this command to create a new user login account, or to disable or enable an exi sting account. The D ‐ Series switch supports up to 16 user accounts, incl uding the admin[...]
-
Página 43
set password Enterasys D-Series CLI Reference 2-5 Mode Switch command, super user . Example This example shows how to remove the “netops” user account: D2(su)->clear system login netops set p assword Use this command to change system default passwords or to ?[...]
-
Página 44
set system password length 2-6 Basic Configuration Please enter new password: ******** Please re-enter new password: ****** ** Password changed. D2(su)-> set system p assword length Use this command to set the minimum user login password length. Synt ax set system password length characters Parameters Defa[...]
-
Página 45
set system password history Enterasys D-Series CLI Reference 2-7 Example This example shows how to set the system passw ord age time to 45 days: D2(su)->set system password aging 45 set system p assword history Use this command to set the number of previously [...]
-
Página 46
set system lockout 2-8 Basic Configuration Example This example shows how to display user lockout settings. In this case, switch defaults have not been changed: D2(su)->show system lockout Lockout attempts: 3 Lockout time: 15 minutes. Ta b l e 2 ‐ 3 provides an exp[...]
-
Página 47
Setting Basic Switch Properties Enterasys D-Series CLI Reference 2-9 Setting Basic Switch Properties Purpose To display and set the system IP address and other basic system (switch) properties. Commands For information about... Refer to p age... show ip address 2-10 set ip address 2-10 clear ip ad[...]
-
Página 48
show ip address 2-10 Basic Configuration show ip address Use this command to display the system IP address and subnet mask. Synt ax show ip address Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display the system[...]
-
Página 49
clear ip address Enterasys D-Series CLI Reference 2-11 Mode Switch command, read ‐ write. Usage Pa r a m te r s must be entered in the order shown (host IP , then mask, then gatew a y) for the command to be accepted. Example This example shows how [...]
-
Página 50
set ip protocol 2-12 Basic Configuration Mode Switch command, read ‐ only . Example This example shows how to display the method used to acquire a netw ork IP address: D2(su)->show ip protocol System IP address acquisition method : dhcp set ip protocol Use this command [...]
-
Página 51
show system Enterasys D-Series CLI Reference 2-13 Mode Switch command, read ‐ only . Example This example shows how to display system information: D2(su)->show system System contact: System location: System name: PWR1-A Status P WR1-B Status ---------- - --------- Ok N ot Installed and/or Not Operating PWR2-[...]
-
Página 52
show system hardware 2-14 Basic Configuration show system hardware Use this command to display the system’ s hardware c onfiguration. Synt ax show system hardware Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display the s[...]
-
Página 53
show system enhancedbuffermode Enterasys D-Series CLI Reference 2-15 Mode Switch command, read ‐ only . Examples This example shows how to display the system’ s CPU utilization: D2(ro)->show system utilization cpu Total CPU Utilization: Switch CPU 5 sec 1 min 5 min ---------------------------------[...]
-
Página 54
set system enhancedbuffermode 2-16 Basic Configuration Mode Switch command, read ‐ write. Example This example shows how to display enhanced buffer mode status: D2(su)->show system enhancedbuffermo de enable Optimized system buffer distribution Disable set system enhancedbuffermode Use this c[...]
-
Página 55
set time Enterasys D-Series CLI Reference 2-17 Mode Switch command, read ‐ only . Example This example shows how to display the current time. The output shows the day of the week , month, day , and the time of day in hours, minutes, [...]
-
Página 56
set summertim e 2-18 Basic Configuration Mode Switch command, read ‐ only . Example This example shows how to display daylight savings time settings: D2(su)->show summertime Summertime is disabled and set to '' Start : SUN APR 04 02:00:00 2004 End : SUN OCT 31 02:00:00 2004 Offset: 60 minut[...]
-
Página 57
set summertime rec urring Enterasys D-Series CLI Reference 2-19 Default s If an offset is not spe cified, none will be applied. Mode Switch command, read ‐ write. Example This example shows how to set a daylight savings time start date of April 4, [...]
-
Página 58
clear summertim e 2-20 Basic Configuration Default s If an offset is not spe cified, none will be applied. Mode Switch command, read ‐ write. Example This example shows how set daylight savings time to recur starting on the fi rst Sunday of [...]
-
Página 59
show banner motd Enterasys D-Series CLI Reference 2-21 Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the command prompt to Switch 1: D2(su)->set prompt “Switch 1” Switch 1(su)-> show banner mot d Use this command to show th[...]
-
Página 60
clear banner motd 2-22 Basic Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the message of the day banner to read: “O Knights of Ni, you are just and fair , and we will ?[...]
-
Página 61
set system name Enterasys D-Series CLI Reference 2-23 Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display ver si on information. Pl ease note that you may see different information displayed, depending on t[...]
-
Página 62
set system location 2-24 Basic Configuration Default s If string is not specif ied, the system name will be cleared. Mode Switch command, read ‐ write. Example This example shows how to set the system name to Information Systems: D2(su)->set system name[...]
-
Página 63
set width Enterasys D-Series CLI Reference 2-25 Parameters Default s If string is not specif ied, the contact name will be cleared. Mode Switch command, read ‐ write. Example This example shows how to set the system contact stri ng: D2(su)->set system contact ?[...]
-
Página 64
set length 2-26 Basic Configuration set length Use this command to set the number of lines the CLI will display . This command is persistent (written to NV ‐ RAM). Synt ax set length screenlength Parameters Default s None. Mode Switch command, read ‐ write. Exam[...]
-
Página 65
set logout Enterasys D-Series CLI Reference 2-27 set logout Use this command to set the time (in minutes) an idle console or Te l n e t CLI session will remain connected before timing out. Synt ax set logout timeout Parameters Default s None. Mode Switch command[...]
-
Página 66
set console baud 2-28 Basic Configuration ------ ------- ---- ---------- - ----- 9600 Disable 8 1 n one set console baud Use this command to set the console port baud rate. Synt ax set console baud rate Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows [...]
-
Página 67
Downloading a Firmware Image Enterasys D-Series CLI Reference 2-29 Downloading from a TFTP Server To perform a TFTP download, proceed as follows: 1. If you have not already done so, set the switch’ s IP address using the set ip address command as ?[...]
-
Página 68
Downloading a Firmware Image 2-30 Basic Configuration 7 - 57600 8 - 115200 0 - no change 4. T ype 8 to set the switch baud rate to 115200. The following message displays : Setting baud rate to 115200, you mus t change your terminal baud rate. 5. Set the terminal baud rate t[...]
-
Página 69
Reviewing and Selecting a Boot Firmware Image Enterasys D-Series CLI Reference 2-31 2. Load you r previous ve rs i on of cod e on the device, as described in “ Downloading a Firmware Image ” (page 2 ‐ 28). 3. Set this older ver s io n of code to be [...]
-
Página 70
set boot system 2-32 Basic Configuration set boot system Use this command to set the firmware image the switch loads at startup. Synt ax set boot system filename Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to set th[...]
-
Página 71
set telnet Enterasys D-Series CLI Reference 2-33 Default s None. Mode Switch command, read ‐ only . Example This example shows how to display Te l n e t status: D2(su)->show telnet Telnet inbound is currently: ENABLED Telnet outbound is currently: ENABLE D set telnet Use this command to enabl[...]
-
Página 72
Managing Switch Configuration and Files 2-34 Basic Configuration Parameters Default s If not specified, the default port number 23 will be use d. Mode Switch command, read ‐ write. Example This example shows how to start a Te l n e t session to a host [...]
-
Página 73
show snmp persistmode Enterasys D-Series CLI Reference 2-35 Commands show snmp persistmode Use this command to display the configuration persistence mode setting. Synt ax show snmp persistmode Parameters None. Default s None. Mode Switch command, read ‐ only . Usage By default, the mo de [...]
-
Página 74
set snmp persistmode 2-36 Basic Configuration Example This example shows how to display the configuration persistence mode setting. In this case, persistence mode is set to “manual”, which means configur ation changes are not being automa[...]
-
Página 75
dir Enterasys D-Series CLI Reference 2-37 Mode Switch command, read ‐ write. Example This example shows how to save the run ning configuration: D2(su)->save config dir Use this command to list configuration and image files stored in the file system. Syn[...]
-
Página 76
show file 2-38 Basic Configuration current.log 901 29 show file Use this command to display the contents of a file. Synt ax show file filename Parameters Default s None. Mode Switch command, read ‐ only . Example This example shows how to display a text file named [...]
-
Página 77
configure Enterasys D-Series CLI Reference 2-39 Parameters Default s By default, show config will display all non ‐ default configuration information for all facilities. Mode Switch command, read ‐ only . Usage The separate facilities that can be displayed by ?[...]
-
Página 78
copy 2-40 Basic Configuration Parameters Default s If append is not spec ified, the current running configuration will be replaced wi th the contents of the configuration file, which will require an automated reset of the chassis. Mode Switch[...]
-
Página 79
delete Enterasys D-Series CLI Reference 2-41 delete Use this command to remove an image or a CLI configuration file from the switch. Synt ax delete filename Parameters Default s None. Mode Switch command, read ‐ write. Usage Use the dir command ( page 2 ‐ 37 ) ?[...]
-
Página 80
set tftp timeout 2-42 Basic Configuration Example This example shows the output of this command. D2(ro)->show tftp settings TFTP packet timeout (seconds): 2 TFTP max retry: 5 set t ftp timeout Use this command to configure how long TFTP will wait for a reply of e[...]
-
Página 81
set tftp retry Enterasys D-Series CLI Reference 2-43 Example This example shows how to clear the timeout va l u e to the default of 2 seconds. D2(rw)-> clear tftp timeout set t ftp retry Use this command to configure how many times TFTP will resend ?[...]
-
Página 82
Clearing and Closing the CLI 2-44 Basic Configuration Clearing and Closing the CLI Purpose To clear the CLI screen or to close you r CLI session. Commands cls (clear screen) Use this command to clear the screen for the current CLI session. Synt ax cls Parameters Non[...]
-
Página 83
Resetting the Switch Enterasys D-Series CLI Reference 2-45 Mode Switch command, read ‐ only . Usage By default, switch timeout occurs after 15 minutes of user inactivity , automatically closing yo u r CLI session. Use the set logout command ( page 2 ?[...]
-
Página 84
clear config 2-46 Basic Configuration Do you want to continue (y/n) [n]? clear config Use this command to clear the user ‐ defined configuration parameters. Synt ax clear config [ all ] Parameters Default s If all is not specified, stacking configuration parameters will not ?[...]
-
Página 85
Using and Configuring WebView Enterasys D-Series CLI Reference 2-47 Using and Configuring W ebV iew Purpose By default, We b V i e w (The Enterasys Networks embedded web server fo r switch configurat ion and management tasks) is enabled on TCP port number 80 on [...]
-
Página 86
set webview 2-48 Basic Configuration set webview Use this command to enable or disable We b V i e w on the switch. Synt ax set webview { enable | disable } Parameters Default s None. Mode Switch command, read ‐ write. Usage It is good practice for security reasons to [...]
-
Página 87
set ssl Enterasys D-Series CLI Reference 2-49 set ssl Use this command to enable or disable the use of We b V i e w over SSL port 443. By defaul t, SSL is disabled on the swi tch. This command can also be used to rei nitialize [...]
-
Página 88
set ssl 2-50 Basic Configuration[...]
-
Página 89
Enterasys D-Series CLI Reference 3-1 3 Activating Licensed Features In order to enable the D2 advanced features, such as Po l i c y , yo u must purchase a license. If you have purchased a li cense, you can proceed to activate you r licens[...]
-
Página 90
show license 3-2 Activating Licensed Featu res Usage When you execu te the set license command, you will be prompted to accept the license agreement. If you do not accept the license agreement, the licensed feature will not be ena[...]
-
Página 91
clear license Enterasys D-Series CLI Reference 3-3 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear a licensed feature: D2(rw)->clear license featureId D2Po licy featureID feature The name of the feature being cleared.[...]
-
Página 92
clear license 3-4 Activating Licensed Featu res[...]
-
Página 93
Enterasys D-Series CLI Reference 4-1 4 Configuring System Power and PoE The commands in this chapter allow you to review and set system power and PoE parameters, including the power av ailable to the system, the usage threshold for each m[...]
-
Página 94
set inlinepower threshold 4-2 Configuring System Power and PoE Example This example shows how to display system pow er properties: D2(su)->show inlinepower Detection Mode : auto Unit Status Power(W) Consumption(W) U sage(%) Threshold(%) Trap ---- ------ -------- --------- ----- -------- ------------ ---- 1 auto 48[...]
-
Página 95
show port inlinepower Enterasys D-Series CLI Reference 4-3 Example This example shows how to enable inline power trap messaging on module 1: D2(su)->set inlinepower trap enable 1 show port inlinepower Use this command to display all ports supporting Po E . Synt a[...]
-
Página 96
set port inlinepower 4-4 Configuring System Power and PoE Mode Switch command, read ‐ write. Example This example shows how to enable Po E on port fe.3.1 with critical priority: D2(su)->set port inlinepower fe . 3.1 admin auto priority critical[...]
-
Página 97
Enterasys D-Series CLI Reference 5-1 5 Discovery Protocol Configuration This chapter descri bes how to configure discovery protocols. Configuring CDP Purpose To review and configure the Enter asys CDP discovery protocol. This protocol is used to discov er networ[...]
-
Página 98
show cdp 5-2 Discovery Protocol C onfiguration show cd p Use this command to display the status of the CDP discov ery protocol and message interval on one or more ports. Synt ax show cdp [ port-string ] Parameters Default s If port ‐ string is not specif i[...]
-
Página 99
set cdp state Enterasys D-Series CLI Reference 5-3 set cd p st ate Use this command to enable or disable the CDP discov ery protocol on one or more ports. Synt ax set cdp state { auto | disable | enab le } [port-string] Parameters Default s If port ‐ string is not specif [...]
-
Página 100
set cdp auth 5-4 Discovery Protocol C onfiguration set cd p auth Use this command to set a global CDP authentication code. Synt ax set cdp auth auth-code Parameters Default s None. Mode Switch command, read ‐ write. Usage The authentication code va l u e determines a switch’ s [...]
-
Página 101
set cdp hold-time Enterasys D-Series CLI Reference 5-5 Example This example shows how to set the CDP interv al frequency to 15 seconds: D2(su)->set cdp interval 15 set cd p hold-time Use this command to set the hold time va l ue for CDP discovery prot[...]
-
Página 102
show neighbors 5-6 Discovery Protocol C onfiguration Mode Switch command, read ‐ write. Example This example shows how to reset the CDP state to auto ‐ enabled: D2(su)->clear cdp state show neighbors This command displays Neighbor Discov ery information for either ?[...]
-
Página 103
Configuring Cisco Discovery Protocol Enterasys D-Series CLI Reference 5-7 Configuring Cisco Discovery Protocol Purpose To review and configure the Cisco discovery protocol. Disc overy protoc ols are used to discov er network topology . When enabled, they allow Cisc o ?[...]
-
Página 104
show ciscodp port info 5-8 Discovery Protocol C onfiguration Device ID : 001188554A60 Last Change : WED NOV 08 13:19:56 20 06 Ta b l e 5 ‐ 2 provides an explanation of the command output. show ciscod p port info Use this command to display summary information about the Cisco disc[...]
-
Página 105
set ciscodp status Enterasys D-Series CLI Reference 5-9 set ciscod p st atus Use this command to enable or disable the Cisco discov ery protocol globally on the switch. Synt ax set ciscodp state { auto | disable | enable } Parameters Default s None. Mode Switch command, read ‐ write.[...]
-
Página 106
set ciscodp holdtime 5-10 Discovery Protocol Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the Cisco DP timer to 120 seconds. D2(su)->set ciscodp timer 120 set ciscod p hold time Use this command to se[...]
-
Página 107
set ciscodp port Enterasys D-Series CLI Reference 5-11 Parameters Default s •S t a t u s : ena bled •V o i c e VLAN: none •T r u s t mode: trusted •C o S va lu e : 0 Mode Switch mode, read ‐ write. Usage The following points describe how the Cisco DP exten ded trust ?[...]
-
Página 108
clear ciscodp 5-12 Discovery Protocol Configuration •I f the switch port is configured to a Cisco DP trust state of untrusted ( trusted no ), this setting is communicated to the Cisco IP phone instructing it to ove rwrite the 80[...]
-
Página 109
Configuring Link Layer Disc overy Protocol and LLDP-MED Enterasys D-Series CLI Reference 5-13 Examples This example shows how to clear all the Cisco DP parameters back to the default settings. D2(rw)->clear ciscodp This example shows how to clear the Cisco ?[...]
-
Página 110
Configuring Link Layer Disc overy Protocol and LLDP-MED 5-14 Discovery Protocol Configuration Configuration T asks The commands included in this implementation allow you to perform the f ollowing conf iguration tasks: For information about... Refer to p age... show lldp 5-15 show lldp port status [...]
-
Página 111
show lldp Enterasys D-Series CLI Reference 5-15 show lld p Use this command to display LLDP configuration information. Synt ax show lldp Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display LLDP configuration information. D[...]
-
Página 112
show lldp port trap 5-16 Discovery Protocol Configuration Example This example shows how to display LLDP port status information for all ports. D2(ro)->show lldp port status Tx-Enabled Ports : ge.1.1-60; g e.2.1-24; ge.3.1-30; ge.4.1-12 Rx-Enabled Ports : ge.1.1-60; g e.2.1-24; ge.3.1-30; ge.4.1-12[...]
-
Página 113
show lldp port location-info Enterasys D-Series CLI Reference 5-17 Parameters Default s If port ‐ string is not specif ied, TL V configurat ion information will be display ed for all ports. Mode Switch command, read ‐ only . Example This example shows how to display[...]
-
Página 114
show lldp port local-info 5-18 Discovery Protocol Configuration Ports Type Location -------- ------------- ----------------------- -- ge.1.1 ELIN 123456789 0 ge.1.2 ELIN 123456789 0 ge.1.3 ELIN 123456789 0 show lld p port local-info Use this command to display the local system information stored for one ?[...]
-
Página 115
show lldp port local-info Enterasys D-Series CLI Reference 5-19 PoE Device : PSE device PoE Power Source : prim ary PoE MDI Supported/Enabled : yes/ yes PoE Pair Controllable/Used : fals e/spare PoE Power Class : 2 PoE Power Limit (mW) : 1540 0 PoE Power Priority : high Ta b l e 5 ‐ 4 describes the information displayed by [...]
-
Página 116
show lldp port remote-info 5-20 Discovery Protocol Configuration show lld p port remote-info Use this command to display the remote system information stored for a remote device connected to a local port. Yo u can use this information to detect m[...]
-
Página 117
show lldp port remote-info Enterasys D-Series CLI Reference 5-21 Example This example shows how to display the remote system information stored for port ge .3.1. The remote system information was received from an IP phone, which is an LLDP ?[...]
-
Página 118
set lldp tx-interval 5-22 Discovery Protocol Configuration set lld p tx-interval Use this command to set the time, in seconds, betw een successive LLDP frame transmissions initiated by changes in the LLDP local sy stem information. Synt ax set lldp tx-interval f[...]
-
Página 119
set lldp trap-interval Enterasys D-Series CLI Reference 5-23 set lld p trap-interval Use this command to set the minimum interval betw een LLDP notifications se nt by this device. LLDP notifications are se nt when a remote system change has been [...]
-
Página 120
set lldp port status 5-24 Discovery Protocol Configuration Example This example sets the numbe r of fast start LLDPDUs to be sent to 4. D2(rw)->set lldp med-fast-repeat 4 set lld p port st atus Use this command to enable or disable transmitting and processing[...]
-
Página 121
set lldp port med-trap Enterasys D-Series CLI Reference 5-25 Default s None. Mode Switch command, read ‐ write. Example This example enables transmitting LLDP traps on ports ge .1.1 through ge .1.6. D2(rw)->set lldp port trap enable ge .1.1-6 set lld p port med-trap Use this command t[...]
-
Página 122
set lldp port tx-tlv 5-26 Discovery Protocol Configuration Parameters all Adds all optional TL Vs to transmitte d LLDPDUs. port ‐ desc Po r t Description optional basic LLDP TL V . Va l u e sent is ifDescr object defined in RFC 2863. sys ‐ name Syst em Name [...]
-
Página 123
clear lldp Enterasys D-Series CLI Reference 5-27 Default s None. Mode Switch command, read ‐ write. Example This example configures the management address, MED capability , and MED location identification TL Vs to be sent in LLDPDUs by port ge .1.1. D2(rw)-[...]
-
Página 124
clear lldp port trap 5-28 Discovery Protocol Configuration Synt ax clear lldp port status port-string Parameters Default s None. Mode Switch command, read ‐ write. Example This example returns port ge .1.1 to the default state of enabled for both transmitting and processing r[...]
-
Página 125
clear lldp port tx-tlv Enterasys D-Series CLI Reference 5-29 Parameters Default s None. Mode Switch command, read ‐ write. Example This example returns port ge .1.1 to the default LLDP ‐ MED trap state of disabled. D2(rw)->clear lldp port med-trap ge. 1.1 clear lld p port tx-tlv Use [...]
-
Página 126
clear lldp port tx-tlv 5-30 Discovery Protocol Configuration Default s None. Mode Switch command, read ‐ write. Example This example disa bles the management address, MED capability , and MED location identification TL Vs from being sent in LLDPDUs by port ge [...]
-
Página 127
Enterasys D-Series CLI Reference 6-1 6 Port Configuration This chapter descri bes the Po r t Configuration set of commands and how to use them. Port Configuration Summary Port String Synt ax Used in the CLI Commands requiring a port ‐ strin g parameter use the followi[...]
-
Página 128
Port Configuration Summary 6-2 Port Conf iguration Port Slot/Unit Parameters Used in the CLI The “unit” parameter is often used interchangeably wi th “module” in the standalone switch CLI to indicate a module slot location. Examples This example shows ?[...]
-
Página 129
Reviewing Port Status Enterasys D-Series CLI Reference 6-3 Example This example shows how to configure por t ge.2.1 in the D2G124 ‐ 12 to operate with a 100BASE ‐ FX transceiver installed. First, the port status is shown as operating as a[...]
-
Página 130
show port 6-4 Port Conf iguration show port Use this command to display whether or not one or more ports are enabled for switching . Synt ax show port [ port-string ] Parameters Default s If port ‐ string is not specif ied, operational status information f[...]
-
Página 131
show port counters Enterasys D-Series CLI Reference 6-5 (truncated) Status Status ------------ -------------- ------ - ------- -------- ------- ----------- -- fe .3.14 up up N/A N/A BaseT RJ45 Ta b l e 6 ‐ 6 provides an explanation of the command output. show port counters Use this command to display ?[...]
-
Página 132
show port counters 6-6 Port Conf iguration Examples This example shows how to display all counter statistics, including MIB2 network traffic and traffic through the device for fe .3.1: D2(su)->show port counters fe .3.1 Port: fe .3.1 MIB2 Interface: 1 No counter disconti[...]
-
Página 133
Disabling / Enabling and Naming Ports Enterasys D-Series CLI Reference 6-7 Disabling / Enabling and Naming Port s Purpose To disable and re ‐ enable one or more ports, and to assign an alias to a port. By def ault, all ports are enabled at device start[...]
-
Página 134
show port alias 6-8 Port Conf iguration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to enable fe.1.3: D2(su)->set port enable fe .1.3 show port alias Use this command to display the alias name for one or more po rts.[...]
-
Página 135
set port alias Enterasys D-Series CLI Reference 6-9 Parameters Default s If name is not specified, the alias assigned to the port will be cleared. Mode Switch command, read ‐ write. Examples This example shows how to assign the alias “A d m i n ” t[...]
-
Página 136
Setting Speed and Duplex Mode 6-10 Port Configur ation Setting S peed and Duplex Mode Purpose To review and set the operational speed in Mbps and the default duplex mode: Half , for half duplex, or Full , for full duplex for one or more ports[...]
-
Página 137
set port speed Enterasys D-Series CLI Reference 6-11 set port speed Use this command to set the default speed of one or more ports. Th is setting only takes effect on ports that hav e auto ‐ negotiation disabled. Synt ax set port speed port-string { 10 | 1[...]
-
Página 138
set port duplex 6-12 Port Configur ation Example This example shows how to display the default duplex setting for Ethernet port 14 in slot 3: D2(su)->show port duplex ge.3.14 default duplex mode is full on port ge.3.14. set port duplex Use this command to set the [...]
-
Página 139
Enabling / Disabling Jumbo Frame Support Enterasys D-Series CLI Reference 6-13 Enabling / Disabling Jumbo Frame Support Purpose To review , enable, and disable jumbo frame support on one or more ports. This allows Gigabit Ethernet ports to transmit frames up to [...]
-
Página 140
set port jumbo 6-14 Port Configur ation set port jumbo Use this command to enable or disable jumbo frame support on one or more ports. Synt ax set port jumbo { enable | disable }[ po rt-string] Parameters Default s If port ‐ string is not specif ied, jumbo frame s[...]
-
Página 141
Setting Auto-Negotiation and Advertised Ability Enterasys D-Series CLI Reference 6-15 Setting Auto-Negotiation and Advertised Ability Purpose To review , disable or enable auto ‐ negotiation, and to configure port adv ertisement for speed and duplex. During auto ‐ negotiation, the [...]
-
Página 142
set port negotiation 6-16 Port Configur ation Example This example shows how to display auto ‐ negotiation status for 1 ‐ Gigabit Ethernet port 14 in sl ot 3: D2(su)->show port negotiation ge.3.1 4 auto-negotiation is enabled on port ge.3.14. set port negotiation Use this comman[...]
-
Página 143
set port advertise Enterasys D-Series CLI Reference 6-17 Example This example shows how to display adv ertisement status for Gigabit ports 13 and 14: D2(su)->show port advertise ge.1.13- 14 ge.1.13 capability advertise d remote ------------------------------------ ------------- 10BASE-T yes[...]
-
Página 144
clear port advertise 6-18 Port Configur ation Mode Switch command, read ‐ write. Example This example shows how to configure port 1 to advertise 1000BASE ‐ T full duplex: D2(su)->set port advertise ge.1.1 10 00tfd clear port advertise Use this command to configure ?[...]
-
Página 145
Setting Flow Control Enterasys D-Series CLI Reference 6-19 Setting Flow Control Purpose To review , enable or disable por t flow control. Flow control is used to manage the transmis sion between tw o devices as specified by IEEE 802.3x to prevent rec[...]
-
Página 146
set flowcontrol 6-20 Port Configur ation Default s None. Mode Switch command, read ‐ write. Example This example shows how to enable flow control: D2(su)->set flowcontrol enable[...]
-
Página 147
Setting Port Link Traps and Link Flap Detection Enterasys D-Series CLI Reference 6-21 Setting Port Link T rap s and Link Flap Detection Purpose To disable or re ‐ enable link traps, display link trap status, and to configure the link flapping detection function. By defaul[...]
-
Página 148
set port trap 6-22 Port Configur ation Default s If port ‐ string is not specif ied, the trap status for all ports wi ll be display ed. Mode Switch command, read ‐ write. Example This example shows how to display link trap status for fe.3.1 t[...]
-
Página 149
show linkflap Enterasys D-Series CLI Reference 6-23 Parameters Default s •I f not specified, information about all link flap detection settings will be display ed. •I f port ‐ string is not specif ied, information for all ports will be displayed. Mode [...]
-
Página 150
show linkflap 6-24 Port Configur ation Examples This example shows how to display the global status of the link trap detection function: D2(rw)->show linkflap globalstate Linkflap feature globally disabled This example shows how to display ports disabled by ?[...]
-
Página 151
set linkflap globalstate Enterasys D-Series CLI Reference 6-25 set linkflap globalst ate Use this command to globally enable or disable the link flap detection function. Synt ax set linkflap globalstate { disable | enable } Parameters Default s By default, the function is disab[...]
-
Página 152
set linkflap interval 6-26 Port Configur ation Mode Switch command, read ‐ write. Example This example shows how to enable the link trap monitoring on all ports. D2(rw)->set linkflap portstate enabl e set linkflap interval Use this command to set the time inter[...]
-
Página 153
clear linkflap action Enterasys D-Series CLI Reference 6-27 Default s None. Mode Switch mode, read ‐ write. Example This example shows how to set the link flap violation action on port fe.1.4 to generating a Syslog entry . D2(rw)->set linkflap action fe .1 .4 gensy[...]
-
Página 154
set linkflap downtime 6-28 Port Configur ation Parameters Default s None. Mode Switch mode, read ‐ write. Example This example shows how to set the link flap threshold on port fe.1.4 to 5. D2(rw)->set linkflap threshold fe .1.4 5 set linkflap downtime Use this command [...]
-
Página 155
clear linkflap Enterasys D-Series CLI Reference 6-29 Parameters Default s If port ‐ string is not specif ied, all ports di sabled by a link flap violation will be ma de operational. Mode Switch mode, read ‐ write. Example This example shows how to make ?[...]
-
Página 156
Configuring Broadcast Suppression 6-30 Port Configur ation Configuring Broadcast Suppression Purpose To review and set the broadcast suppression threshold for one or more ports. This fe ature limits the numbe r of received broadcast frames the swit ch wi[...]
-
Página 157
set port broadcast Enterasys D-Series CLI Reference 6-31 set port broadcast Use this command to set the broadcast suppression threshold, in packets per se cond, on one or more ports. This sets a threshold on the broadcast traffic that is [...]
-
Página 158
clear port broadcast 6-32 Port Configur ation Default s None. Mode Switch command, read ‐ write. Example This example clears the broadcast threshold limit to 14881 pps for ports 1 through 5: D2(su)->clear port broadcast ge.1.1- 5 threshold[...]
-
Página 159
Port Mirroring Enterasys D-Series CLI Reference 6-33 Port Mirroring The D ‐ Series device allows you to mirror (or redirect) the traffic being switched on a port for the purposes of netw ork traffic analysis and connection assu rance. When [...]
-
Página 160
set port mirroring 6-34 Port Configur ation Default s None. Mode Switch command, read ‐ only . Example This example shows how to display port mirroring information. In this case, fe.1.4 is configured as a source port and fe.1.1 1 is a target an[...]
-
Página 161
clear port mirroring Enterasys D-Series CLI Reference 6-35 Usage Note that LAG ports and their underlying physical ports , as described in “ Link Aggregation Control Protocol (LACP) ” on page 6 ‐ 36, cannot be mir rored. Example This example shows [...]
-
Página 162
Link Aggregation Control Protocol (LACP) 6-36 Port Configur ation Link Aggregation Control Protocol (LACP) Using multiple links simultaneously to increase bandwidth is a desirable switch feature, which can be accomplished if both sides agree on a set of [...]
-
Página 163
Link Aggregation Control Protocol (LACP) Enterasys D-Series CLI Reference 6-37 •A means of identifying the set of capabi lities associated wi th each port and with each aggregator , as understood by a given device. •A means of identifying a L[...]
-
Página 164
Link Aggregation Control Protocol (LACP) 6-38 Port Configur ation is, will block redundant paths). For information about build ing static aggregations, refer to set lacp static ( page 6 ‐ 42 ). Each D ‐ Series modu le provides six virtual link aggregator[...]
-
Página 165
show lacp Enterasys D-Series CLI Reference 6-39 show lacp Use this command to display information about one or more aggregator ports. Synt ax show lacp [ port-string ] Parameters Default s If port ‐ string is not specif ied, link aggregation information for all ?[...]
-
Página 166
set lacp 6-40 Port Configur ation set lacp Use this command to disable or enable the Link Aggregation Control Protocol (LACP) on the device. Synt ax set lacp {disable | enable} Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows ho[...]
-
Página 167
set lacp asyspr i Enterasys D-Series CLI Reference 6-41 set lacp asyspri Use this command to set the LACP system priority . Synt ax set lacp asyspri value Parameters Default s None. Mode Switch command, read ‐ write. Usage LACP uses this va l u e to determine aggregation prec[...]
-
Página 168
clear lacp 6-42 Port Configur ation Usage LACP will use this va lu e to form an oper key . Only underlying physical ports with oper keys matching th ose of their aggregators will be allowed to aggregate. The default admin key [...]
-
Página 169
clear lacp static Enterasys D-Series CLI Reference 6-43 Default s If not specified, a key will be assigned according to the specified aggregator . For example a key of 4 wou ld be assigned to lag.0.4 . Mode Switch command, read ‐ write. Example[...]
-
Página 170
set lacp singleportlag 6-44 Port Configur ation set lacp singleportlag Use this command to enable or disable the formation of single port LAGs. Synt ax set lacp singleportlag { enable | dis able } Parameters Default s None. Mode Switch command, read ‐ write. Usage When single por[...]
-
Página 171
show port lacp Enterasys D-Series CLI Reference 6-45 Example This example shows how to reset the single port LAG function back to disabled: D2(su)->clear lacp singleportlag show port lacp Use this command to display link aggregation informatio n for one ?[...]
-
Página 172
set port lacp 6-46 Port Configur ation Port Instance: fe .1.12 ActorPort: 1411 PartnerAdminPort: 1411 ActorSystemPriority: 32768 PartnerOperPort: 1411 ActorPortPriority: 32768 PartnerAdminSystemPriority: 32768 ActorAdminKey: 32768 PartnerOperSystemPriority: 32768 ActorOperKey: 32768 PartnerAdminPortPriority: 32768 ActorAdminState: -----GlA PartnerO[...]
-
Página 173
set port lacp Enterasys D-Series CLI Reference 6-47 Default s At least one parameter must be entered per port ‐ string. If enable or disable are not specified, port(s) will be enabled with the LACP parameters entered. Mode Switch command, read ‐ [...]
-
Página 174
clear port lacp 6-48 Port Configur ation Usage LACP commands and parameters beginning with an “a” (such as aadminkey ) set actor val u e s . Corresponding commands and parameters beginning with a “p” (such as padminkey ) set corresponding[...]
-
Página 175
clear port lacp Enterasys D-Series CLI Reference 6-49 Default s None. Mode Switch command, read ‐ write. Usage If you set a port to LACP passiv e using the command clear port lacp port < por t ‐ string > aadminstate lacpactive , the command clear p[...]
-
Página 176
Configuring Protected Ports 6-50 Port Configur ation Configuring Protected Port s The Protected Por t feature is used to prevent por ts from forw arding traffic to each other , even when they are on the same VLAN. Por t s may be designated as[...]
-
Página 177
show port protected Enterasys D-Series CLI Reference 6-51 Example This example shows how to assign ports ge .1.1 through ge .1.3 to protected port group 1: D2(rw)->set port protected ge.1.1-3 1 show port protected Use this command to display information about [...]
-
Página 178
set port protected name 6-52 Port Configur ation Mode Switch command, read ‐ write. Example This example shows how to clear protected ports ge .1.1 through ge .1.3: D2(rw)->clear port protected ge.1.1- 3 set port protected name Use this command to assign a name to [...]
-
Página 179
clear port protected name Enterasys D-Series CLI Reference 6-53 Example This example shows how to show the name of protected port group 1: D2(ro)->show port protected name 1 Group ID Group Name ----------------------------- 1 group1 clear port protected name Use this command to [...]
-
Página 180
clear port protected name 6-54 Port Configur ation[...]
-
Página 181
Enterasys D-Series CLI Reference 7-1 7 SNMP Configuration This chapter descri bes the Simple Network Management Protocol (SNMP) set of commands and how to use them. SNMP Configuration Summary SNMP is an application ‐ layer protocol that facilitates the [...]
-
Página 182
SNMP Configuration Summary 7-2 SNMP Configuration •S N M P network management applications, such as the Enterasys Ne tSight application, whic h communicate with agents to get statistics and alerts from the managed devices. SNMPv3 SNMPv3 is an i[...]
-
Página 183
Reviewing SNMP Statistics Enterasys D-Series CLI Reference 7-3 Using SNMP Context s to Access S pecific MIBs By default, when operating from the switch CLI, D ‐ Series devices allow access to all SNMP MIBs or contexts. A context is a collection of MIB [...]
-
Página 184
show snmp engineid 7-4 SNMP Configuration Commands show snmp engineid Use this command to display the SNMP local engine ID. This is the SNMP v3 engine’ s administratively unique identifier . Synt ax show snmp engineid Parameters None. Default s None. Mode Switch comma[...]
-
Página 185
show snmp counters Enterasys D-Series CLI Reference 7-5 show snmp counters Use this command to display SNMP traffic counter val u e s . Synt ax show snmp counters Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display SNMP co[...]
-
Página 186
show snmp counters 7-6 SNMP Configuration usmStatsUnknownEngineIDs = 0 usmStatsWrongDigests = 0 usmStatsDecryptionErrors = 0 Ta b l e 7 ‐ 14 provides an explanation of the command output. T able 7-14 show snmp counters Out put Det ails Output Field What It Displays... snmpInPkts Number of messages delivered to the SNMP[...]
-
Página 187
show snmp counters Enterasys D-Series CLI Reference 7-7 snmpOutBadV alues Number of SNMP PDUs generat ed by the SNMP protocol entity with the value of the error-status field as "badV alue." snmpOutGenErrs N umber of SNMP PDUs generated by the SNMP protocol entity with the value of the error-status field as "genErr ." snmpOutGetR[...]
-
Página 188
Configuring SNMP Users, Groups, and Communities 7-8 SNMP Configuration Configuring SNMP Users, Group s, and Communities Purpose To review and configure SNMP users, groups, and v1 and v2 communities. These are defined as follows: •U s e r — A person registered in[...]
-
Página 189
set snmp user Enterasys D-Series CLI Reference 7-9 If user is not specified, information about all SNMP users will be disp layed. If remote is not specified , user information about the local SNMP engine will be displayed. If not specifie[...]
-
Página 190
clear snmp user 7-10 SNMP Configuration Parameters Default s If remote is not specified , the user will be registered for the local SNMP engine. If authenticat ion is not specified, no authentication wi ll be applied. If privacy is not specif[...]
-
Página 191
show snmp group Enterasys D-Series CLI Reference 7-11 Example This example shows how to remove the SNMP user named “bill ” : D2(su)->clear snmp user bill show snmp group Use this command to display an SNMP group configuration. An SNMP group is a c[...]
-
Página 192
set snmp group 7-12 SNMP Configuration Ta b l e 7 ‐ 16 provides an explanation of the command output. set snmp group Use this command to create an SNMP group. This associates SNMPv3 users to a group that shares common access privileges. Synt ax[...]
-
Página 193
show snmp community Enterasys D-Series CLI Reference 7-13 Parameters Default s If not specified, settings related t o all security models will be cleared. Mode Switch command, read ‐ write. Example This example shows how to clear all se ttings assigned to the “pu blic” user within ?[...]
-
Página 194
set snmp community 7-14 SNMP Configuration set snmp community Use this command to configure an SNMP community group. Synt ax set snmp community community [ securi tyname securityname ] [ context context ] [ transport transport ] [ volatile | no nvolatile ] Parameters Default s If securityname is not s[...]
-
Página 195
Configuring SNMP Access Rights Enterasys D-Series CLI Reference 7-15 Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete the community name “vip.” D2(su)->clear snmp community vip Configuring SNMP Access Right s Purpose To review and configure ?[...]
-
Página 196
show snmp access 7-16 SNMP Configuration Default s If groupname is not specified, access information for all SNMP groups will be displayed. If security ‐ mode l is not specified, access information for all SNMP versions wil l be display ed. If [...]
-
Página 197
set snmp access Enterasys D-Series CLI Reference 7-17 set snmp access Use this command to set an SNMP access configuration. Synt ax set snmp access groupname security-m odel { v1 | v2c | usm } [ noauthentication | authentication | privacy ] [ context c ontext ] [ exact | prefix ] [ read read ] [ write write ] [ n[...]
-
Página 198
clear snmp access 7-18 SNMP Configuration Default s If security lev el is not specif ied, no authentication will be applied. If context is not specified, access will be enabled for the de fault context. If context is specified without a ?[...]
-
Página 199
Configuring SNMP MIB Views Enterasys D-Series CLI Reference 7-19 Example This example shows how to clear SNMP ve rs i on 3 access for the “mis ‐ group” via the authentication protocol: D2(su)->clear snmp access mis-group security-model usm authentication Configuring SNMP MIB V[...]
-
Página 200
show snmp cont ext 7-20 SNMP Configuration Example This example shows how to display SNMP MIB view configuration information: D2(su)->show snmp view --- SNMP MIB View information --- View Name = All Subtree OID = 1 Subtree mask = View Type = included Storage type = nonVolatile Row status = active View Name[...]
-
Página 201
set snmp view Enterasys D-Series CLI Reference 7-21 Mode Switch command, read ‐ only . Usage An SNMP context is a collection of management information that can be accessed by an SNMP agent or entity . The default context allows al l SNMP ag[...]
-
Página 202
clear snmp view 7-22 SNMP Configuration clear snmp view Use this command to delete an SNMP v3 MIB view . Synt ax clear snmp view viewname subtree Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete SNMP MIB view “publi [...]
-
Página 203
show snmp targetparams Enterasys D-Series CLI Reference 7-23 Parameters Default s If targetPara ms is not specified, entries associated with all target parameters will be displayed. If not specified, entries of all storage types will be display ed. Mode Swit[...]
-
Página 204
set snmp targetparams 7-24 SNMP Configuration set snmp t argetp arams Use this command to set SNMP target parameters, a named set of security/authorization criteria used to generate a message to a target. Synt ax set snmp targetparams paramsname user user securi[...]
-
Página 205
Configuring SNMP Target Addresses Enterasys D-Series CLI Reference 7-25 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear SNMP target parameters named “v1ExampleParams”: D2(su)->clear snmp targetparams v1Ex ampleParams Configuring SNMP T arg[...]
-
Página 206
set snmp targetaddr 7-26 SNMP Configuration If not specified, entries of all storage types will be display ed for a target address. Mode Switch command, read ‐ only . Example This example shows how to display SNMP target address infor mation: D2(su[...]
-
Página 207
set snmp targetaddr Enterasys D-Series CLI Reference 7-27 Parameters Default s If not specified, udpport will be set to 162 . If not specified, mask will be set to 255.255.255.255 If not specified, timeout will be set to 1500 . If not specified, [...]
-
Página 208
clear snmp targetaddr 7-28 SNMP Configuration clear snmp t argetaddr Use this command to delete an SNMP target address entry . Synt ax clear snmp targetaddr targetAddr Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear SNMP t[...]
-
Página 209
show newaddrtrap Enterasys D-Series CLI Reference 7-29 Commands show newaddrtrap Use this comman d to display the global and port ‐ specif ic status of the SNMP new MAC addresses trap function. Synt ax show newaddrtrap [ port-string ] Parameters Default s If port ‐ string ?[...]
-
Página 210
set newaddrtrap 7-30 SNMP Configuration ge.1.1 disabled ge.1.2 disabled ge.1.3 disabled ge.1.4 disabled ge.1.5 disabled set newaddrtrap Use this command to enable or disable SNMP trap messaging, globally or on one or mor e ports, when new source MAC addresses ar[...]
-
Página 211
set snmp notify Enterasys D-Series CLI Reference 7-31 Parameters Default s If a notify name is not specified, all entries will be displayed. If volatile , no nvolatile , or read ‐ only are not s pecified, all storage type entries will be di splayed[...]
-
Página 212
clear snmp notify 7-32 SNMP Configuration command’ s tag parameter can be used to bind each entry to a target address using the set snmp targetaddr command (“ set snmp targetaddr ” on page 7 ‐ 26). Synt ax set snmp notify notify tag tag [ trap | [...]
-
Página 213
show snmp notifyfilter Enterasys D-Series CLI Reference 7-33 Example This example shows how to clear the SNMP notify configuration fo r “hello”: D2(su)->clear snmp notify hello show snmp notifyfilter Use this command to display SNMP notify filter information, ide[...]
-
Página 214
set snmp notifyfilter 7-34 SNMP Configuration set snmp notifyfilter Use this command to create an SN MP notify filter configuration. This identifies which management targets should NOT receive notification messages, which is useful for fine ‐ tuning ?[...]
-
Página 215
show snmp notifypr ofile Enterasys D-Series CLI Reference 7-35 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete the SNMP notify filter “pilot1”: D2(su)->clear snmp notifyfilter pilo t1 subtree 1.3.6 show snmp notifyprofile Use this [...]
-
Página 216
set snmp notifyprofile 7-36 SNMP Configuration Row status = active set snmp notifyprofile Use this command to create an SN MP notify filter profile configuration. This associ ates a notificatio n filter , created with the set snmp notifyfilter command (“ s[...]
-
Página 217
Creating a Basic SNMP Trap Configuration Enterasys D-Series CLI Reference 7-37 Mode Switch command, read ‐ write. Example This example shows how to delete SNMP notify profile “area51”: D2(su)->clear snmp notifyprofile are a51 targetparam v3ExampleParams Creating a Basic SNMP T rap Configuration T[...]
-
Página 218
Creating a Basic SNMP Trap Configuration 7-38 SNMP Configuration Example This example shows how to: • Create an SNMP community called mgmt . • Configure a trap notification called TrapSink . This trap notification will be sent with the community [...]
-
Página 219
Enterasys D-Series CLI Reference 8-1 8 Spanning T ree Configuration This chapter describe s the Spanning Tr e e Configuration set of commands and how to use them. Sp anning T ree Configuration Summary Overview: Single, Rapid, and Mult iple S p anning T ree Protocols The IEEE 802.1D [...]
-
Página 220
Spanning Tree Configuration Summary 8-2 Spannin g Tr ee Configuration blocking for all traffic flowing between the tw o switches. The blocking links are effectively used only if the forw arding link goes down. MSTP assigns each VLAN present o[...]
-
Página 221
Configuring Spanning Tree Bridge Parameters Enterasys D-Series CLI Reference 8-3 learning and the priorit y vect or is wor s e than that already held by the port. If a disputed BPDU is receiv ed, the port is forced to the li stening state. ?[...]
-
Página 222
Configuring Spanning Tree Bridge Parameters 8-4 Spannin g Tr ee Configuration Commands For information about... Refer to p age... show spantree stat s 8-5 set spantree 8-7 show spantree version 8-7 set spantree version 8-8 clear spantree version 8-8 show spantree bpdu-forwarding 8-9 set spantree bpdu-forwarding 8-9 show spantree bridgeprioritymode [...]
-
Página 223
show spantree stats Enterasys D-Series CLI Reference 8-5 show sp antree st at s Use this command to display Spanning Tr e e information for one or more ports. Synt ax show spantree stats [ port port-string ] [ sid sid ] [ ac tive ] Parameters Default s If port ‐ string is not specif [...]
-
Página 224
show spantree stats 8-6 Spannin g Tr ee Configuration Example This example shows how to display the device’ s Spanning Tr e e configuration: D2(su)->show spantree stats Spanning tree status - enabl ed Spanning tree instance - 0 Designated Root MacAddr - 00-e0 -63-9d-c1-c8 Designated Root Priority - 0 Des[...]
-
Página 225
set spantree Enterasys D-Series CLI Reference 8-7 set sp antree Use this command to globally enable or disable the Spanning Tr e e protocol on the switch. Synt ax set spantree { disable | enable } Parameters Default s None. Mode Switch command, read ‐ write. Example This example [...]
-
Página 226
set spantree version 8-8 Spannin g Tr ee Configuration Mode Switch command, read ‐ only . Example This example shows how to display Spanning Tr e e ver si o n information for the device: D2(su)->show spantree version Force Version is mstp set sp antree version Use this command [...]
-
Página 227
show spantree bpdu-forwarding Enterasys D-Series CLI Reference 8-9 Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the Spanning Tr e e version: D2(su)->clear spantree version show sp antree bpdu-forwarding Use this command to disp lay the Sp[...]
-
Página 228
show spantree bridgeprioritymode 8-10 Spanning Tree Configura tion Default s By default BP DU forw arding is disabled . Mode Switch command, read ‐ write. Usage The Spanning Tr e e protocol must be disabled ( set spantree disable ) for this feature to take eff[...]
-
Página 229
clear spantree bridgeprioritymode Enterasys D-Series CLI Reference 8-11 Parameters Default s None Mode Switch command, read ‐ write. Usage The mode affects the range of priority val u e s used to determine whi ch device is selected as the Spanning Tr e e root [...]
-
Página 230
show spantree mstilist 8-12 Spanning Tree Configura tion show sp antree mstilist Use this command to display a list of Multiple Spanning Tr e e (MST) instances configured on the device. Synt ax show spantree mstilist Parameters None. Default s None. Mode Switch command, read ?[...]
-
Página 231
clear spantree msti Enterasys D-Series CLI Reference 8-13 clear sp antree msti Use this command to delete one or more Multiple Spanning Tr e e instances. Synt ax clear spantree msti [ sid sid ] Parameters Default s If sid is not specifie d, all MST instances will be [...]
-
Página 232
set spantree mstmap 8-14 Spanning Tree Configura tion set sp antree mstmap Use this command to map one or more filtering database IDs (FIDs) to a SID. Since VLANs are mapped to FIDs, this essentially maps one or more VLAN IDs to a[...]
-
Página 233
show spantree vlanlist Enterasys D-Series CLI Reference 8-15 D2(su)->clear spantree mstmap 2 show sp antree vlanlist Use this command to display the Spanning Tr e e ID(s) assigne d to one or more VLANs. Synt ax show spantree vlanlist [ vlan-list ] Parameters Default s If not specifi[...]
-
Página 234
set spantree mstcfgid 8-16 Spanning Tree Configura tion MAC address) have no t been changed. For information on using the set spantree mstcf gid command to change these settings, refer to “ set spantree mstcfgid ” on page 8 ‐ 16: D2(su)->sho[...]
-
Página 235
set spantree priority Enterasys D-Series CLI Reference 8-17 Example This example shows how to reset the MST configuration identifier elements to default val u e s : D2(su)->clear spantree mstcfgid set sp antree priority Use this command to set the device’ s Spannin[...]
-
Página 236
set spantree hello 8-18 Spanning Tree Configura tion Default s If sid is not specifie d, priority will be reset on Spanning Tr e e 0. Mode Switch command, read ‐ write. Example This example shows how to reset the bridge priority on SID 1: D2(su)-&g[...]
-
Página 237
set spantree maxage Enterasys D-Series CLI Reference 8-19 Mode Switch command, read ‐ write. Example This example shows how to globally reset the Spanning Tr e e hello time: D2(su)->clear spantree hello set sp antree maxage Use this command to set the bridge maxim [...]
-
Página 238
set spantree fwddelay 8-20 Spanning Tree Configura tion Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example shows how to globally reset the maximum aging time: D2(su)->clear spantree maxage set sp antree fwddelay Use this command to set the[...]
-
Página 239
clear spantree fwddelay Enterasys D-Series CLI Reference 8-21 clear sp antree fwddelay Use this command to reset the Spanning Tr e e forward delay to the defaul t setting of 15 seconds. Synt ax clear spantree fwddelay Parameters None. Default s None. Mode Switch command, re[...]
-
Página 240
set spantree backuproot 8-22 Spanning Tree Configura tion set sp antree backuproot Use this command to enable or disable the Spanning Tr e e backup root function on the switch. Synt ax set spantree backuproot sid {disable | enable} Parameters Default s None. Mode Switch command, ?[...]
-
Página 241
show spantree tctrapsuppress Enterasys D-Series CLI Reference 8-23 Example This example shows how to reset the backup root function to disabled on SID 2: D2(rw)->clear spantree backuproot 2 show sp antree tctrap suppress Use this command to display the status of [...]
-
Página 242
clear spantree tctrapsuppress 8-24 Spanning Tree Configura tion Usage By default, RSTP non ‐ edge (bridge) ports that transition to forw arding or blocking cause the switch to issue a topology change trap. When topology change trap suppression [...]
-
Página 243
show spantree spanguard Enterasys D-Series CLI Reference 8-25 Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the protocol state migration machine on port 20: D2(su)->set spantree protomigration ge.1.20 show sp antree sp anguard Use this [...]
-
Página 244
clear spantree spanguard 8-26 Spanning Tree Configura tion Mode Switch command, read ‐ write. Usage SpanGuard is designed to disable, or lock out an “edge” port when an unexpected BPDU is receiv ed. The port can be configured to be re ‐ e[...]
-
Página 245
show spantree spanguardtimeout Enterasys D-Series CLI Reference 8-27 show sp antree spanguard timeout Use this command to display the Spanning Tr e e SpanGuard timeout setting. Synt ax show spantree spanguardtimeout Parameters None. Default s None. Mode Switch command, read ‐ only . Example This [...]
-
Página 246
clear spantree spanguardtimeout 8-28 Spanning Tree Configura tion clear sp antree spanguard timeout Use this command to reset the Spanning Tr e e SpanGuard timeout to the default val u e of 300 seconds. Synt ax clear spantree spanguardtimeout Parameters None. Default s None. Mode Switc[...]
-
Página 247
clear / set spantree spanguardlock Enterasys D-Series CLI Reference 8-29 clear / set sp antree spanguardlock Use either of these commands to unlock one or more ports locked by the Spanning Tr e e SpanGuard function. When SpanGuard is enabled, it locks po[...]
-
Página 248
set spantree spanguardtrapenable 8-30 Spanning Tree Configura tion set sp antree sp anguard trapenable Use this command to enable or disable the sending of an SNMP trap message when SpanGuard has locked a port. Synt ax set spantree spanguardtrapenable { di sable | enable } [...]
-
Página 249
show spantree legacypathcost Enterasys D-Series CLI Reference 8-31 show sp antree legacyp athcost Use this command to display the default Spanning Tr e e path cost setting. Synt ax show spantree legacypathcost Parameters None. Default s None. Mode Switch command, read ‐ only . Example This e[...]
-
Página 250
clear spantree legacypathcost 8-32 Spanning Tree Configura tion clear sp antree legacyp athcost Use this command to set the Spanning Tr e e default va l ue for legacy path cost to 802.1t va l ue s . Synt ax clear spantree legacypathcost Default s None. Mode Switch command, read[...]
-
Página 251
Configuring Spanning Tree Port Parameters Enterasys D-Series CLI Reference 8-33 Configuring S p anning T ree Port Parameters Purpose To display and set Spanning Tr e e port parameters. Commands set sp antree port admin Use this command to disable or enable the Spanning Tr e e algor[...]
-
Página 252
clear spantree portadmin 8-34 Spanning Tree Configura tion Example This example shows how to disable Spanning Tr e e on fe.1 .5: D2(rw)->set spantree portadmin fe .1.5 disable clear sp antree port admin Use this command to reset the default Spanning Tr e e admin status ?[...]
-
Página 253
show spantree portpr i Enterasys D-Series CLI Reference 8-35 Example This example shows how to display port admin status for ge .1.1: D2(ro)->show spantree portadmin port ge.1.1 Port ge.1.1 has portadmin set to ena bled show sp antree portpri Use this command to show the Spanning ?[...]
-
Página 254
clear spantree portpri 8-36 Spanning Tree Configura tion Parameters Default s If sid is not specifie d, port priority will be set for Spanning Tr e e 0. Mode Switch command, read ‐ write. Example This example shows how to set the priority of fe.1.3 [...]
-
Página 255
show spantree adminpathcost Enterasys D-Series CLI Reference 8-37 show sp antree adminpathcost Use this command to display the admin path cost for a port on one or more Spanning Tr e e s . Synt ax show spantree adminpathcost [ port po rt-string ] [ sid sid ] Parameters Default [...]
-
Página 256
clear spantree adminpathcost 8-38 Spanning Tree Configura tion Example This example shows how to set the admin path cost to 200 for fe.3 .2 on SID 1: D2(su)->set spantree adminpathcost fe .3.2 200 si d 1 clear sp antree adminp athcost Use this command to reset th[...]
-
Página 257
set spantree adminedge Enterasys D-Series CLI Reference 8-39 Mode Switch command, read ‐ only . Example This example shows how to display the edge port status for fe.3.2: D2(su)->show spantree adminedge port fe .3.2 Port fe .3.2 has a Port Admin Edge of Edg e-Port set sp antree adminedge Use [...]
-
Página 258
clear spantree adminedge 8-40 Spanning Tree Configura tion Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset fe.1.11 as a non ‐ edge por t: D2(su)->clear spantree adminedge fe .1.11 port ‐ string Specifies port(s) on which to[...]
-
Página 259
Configuring Spannin g Tree Loop Protect Parameters Enterasys D-Series CLI Reference 8-41 Configuring S p anning T ree Loop Protect Parameters Purpose To display and set Spanning Tr e e Loop Protect parameters, including the global parameters of Loop Protect threshold, window , [...]
-
Página 260
set spantree lp 8-42 Spanning Tree Configura tion set sp antree lp Use this command to enable or disable the Loop Protect feature per port and optionally , per SID. The Loop Protect feature is disabled by default. See “Loop Protect” o[...]
-
Página 261
clear spantree lp Enterasys D-Series CLI Reference 8-43 Default s If no port ‐ string is specified, status is displayed for all ports. If no SID is specified, SID 0 is assumed. Mode Switch command, read ‐ only . Example This example shows how to [...]
-
Página 262
clear spantree lplock 8-44 Spanning Tree Configura tion Parameters Default s If no port ‐ string is specified, status is displayed for all ports. If no SID is specified, SID 0 is assumed. Mode Switch command, read ‐ only . Example This example shows [...]
-
Página 263
set spantree lpcapablepartner Enterasys D-Series CLI Reference 8-45 set sp antree lpcapablep artner Use this command to specify per port whether the link partner is Loop Protect capable. Se e “Loop Protect” on page 2. for more information. Synt ax set sp[...]
-
Página 264
clear spantree lpcapablepartner 8-46 Spanning Tree Configura tion Default s If no port ‐ string is specified, Loop Protect capability for link partners is display ed for all ports. Mode Switch command, read ‐ only . Example This example shows how to display [...]
-
Página 265
show spantree lpthreshold Enterasys D-Series CLI Reference 8-47 Default s None. The default ev ent threshold is 3. Mode Switch command, read ‐ write. Usage The LoopPr otect event threshold is a global intege r var ia b l e that provides protection in the case [...]
-
Página 266
set spantree lpwindow 8-48 Spanning Tree Configura tion Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the Loop Protect ev ent threshold to the default of 3: D2(rw)->clear spantree lpthreshold set sp antree lpwindow Use this [...]
-
Página 267
clear spantree lpwindow Enterasys D-Series CLI Reference 8-49 Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display the current Loop Protect window val u e : D2(rw)->show spantree lpwindow The Loop Protect event window is set to 120 [...]
-
Página 268
show spantree lptrapenable 8-50 Spanning Tree Configura tion Default s None. Mode Switch command, read ‐ write. Usage Loop Protect traps are sent when a Loop Protect ev ent occurs, that is, when a port goes to listening due to not receiving BPD[...]
-
Página 269
set spantree disputedbpduthreshold Enterasys D-Series CLI Reference 8-51 Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the Loop Protect ev ent notification state to the default of disabled. D2(rw)->clear spantree lptrapenabl[...]
-
Página 270
show spantree disputedbpduthreshold 8-52 Spanning Tree Configura tion Example This example shows how to set the disputed BPDU threshold va l u e to 5: D2(rw)->set spantree disputedbpduthr eshold 5 show sp antree disputedbp duthreshold Use this command to display the current [...]
-
Página 271
show spantree nonforwardingreason Enterasys D-Series CLI Reference 8-53 show sp antree nonforwardingreason Use this command to display the reason for placing a port in a non ‐ forw arding state du e to an exceptional condition. Synt ax show spantree nonforwardingreaso[...]
-
Página 272
show spantree nonforwardingreason 8-54 Spanning Tree Configura tion[...]
-
Página 273
Enterasys D-Series CLI Reference 9-1 9 802.1Q VLAN Configuration This chapter descri bes the D ‐ Series system’ s capabilities to implement 802.1Q virtual LANs (VLANs). VLAN Configuration Summary Vi rt u a l LANs allow the netw ork administrator to partition net[...]
-
Página 274
Viewing VLANs 9-2 802.1Q VLAN Configuration If the D ‐ Series device is to be configured for multiple VLANs, it may be desirable to configure a management ‐ only VLAN. This allows a station connected to th e management VLAN to [...]
-
Página 275
show vlan Enterasys D-Series CLI Reference 9-3 Command show vlan Use this command to display all information related to one or more VLANs. Synt ax show vlan [ static ] [ vlan-list ] [ portinfo [ vlan vlan-list | vlan-name ] [ port port- string ]] Parameters Default s If no options ar e [...]
-
Página 276
show vlan 9-4 802.1Q VLAN Configuration T able 9-25 show vlan Output Det ails Output Fi eld What It Disp la y s. .. VLAN VLAN ID. NAME Name assigned to the VLAN. S tatus Whether it is enabled or disabled . VLAN T ype Whether i t is perman ent (static) or dynamic . Egress Ports Ports configured to transmit frames for this VLAN. Forbidden Egress Port[...]
-
Página 277
Creating and Naming Static VLANs Enterasys D-Series CLI Reference 9-5 Creating and Naming St atic VLANs Purpose To create a new static VLAN, or to enable or disable exist ing VLAN(s). Commands set vlan Use this command to create a new static IEEE 802.1 Q VLAN, ?[...]
-
Página 278
set vlan name 9-6 802.1Q VLAN Configuration set vlan name Use this command to set or change the ASCII name for a new or existing VLAN. Synt ax set vlan name vlan-list vlan-name Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows ?[...]
-
Página 279
clear vlan name Enterasys D-Series CLI Reference 9-7 clear vlan name Use this command to remove the name of a VLAN from the VLAN list. Synt ax clear vlan name vlan-list Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to cle[...]
-
Página 280
Assigning Port VLAN IDs ( PVIDs) and Ingress Filtering 9-8 802.1Q VLAN Configuration Assigning Port VLAN IDs (PVIDs) and Ingress Filtering Purpose To assign default VLAN IDs to untagged frames on one or more ports, to configure VLAN ingress filtering and constraints, an[...]
-
Página 281
set port vlan Enterasys D-Series CLI Reference 9-9 fe .2.5 is set to 1 fe .2.6 is set to 1 set port vlan Use this command to configure the PVID (port VLAN identifier) for one or more ports. Synt ax set port vlan port-string pvid [ modi fy-egress | no-modify-egress ] Parameters Default s No[...]
-
Página 282
show port ingress filter 9-10 802.1Q VLAN Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset ports fe.1.3 throu gh 11 to a VLAN ID of 1 (Host VLAN): D2(su)->clear port vlan fe .1.3-11 show port ingress filter[...]
-
Página 283
set port ingress filter Enterasys D-Series CLI Reference 9 -11 set port ingress filter Use this command to discard all frames received with a VLAN ID that don’ t match the port’ s VLAN egress list. Synt ax set port ingress-filter port-string {disable | enable} Param[...]
-
Página 284
set port discard 9-12 802.1Q VLAN Configuration Mode Switch command, read ‐ only . Example This example shows how to display the frame discard mode for fe. 2.7. In this case, the port has been set to discar d all tagged frames: D2(su)->show [...]
-
Página 285
Configuring the VLAN Egress List Enterasys D-Series CLI Reference 9 -13 Configuring the VLAN Egress List Purpose To assign or re move ports on the egress list of a particular VLAN. This determines which ports on the switch will be eligible to transmit ?[...]
-
Página 286
set vlan forbidden 9-14 802.1Q VLAN Configuration Mode Switch command, read ‐ write. Example This example shows you how to show VLAN egr ess information for fe.1.1 through 3. In this case, all three ports are allow ed to transmit VLAN 1[...]
-
Página 287
set vlan egress Enterasys D-Series CLI Reference 9 -15 set vlan egress Use this command to add ports to the VLAN egress list for the device, or to prevent one or mor e ports from participating in a VLAN. Th is determines which ports ?[...]
-
Página 288
show vlan dynamicegress 9-16 802.1Q VLAN Configuration Synt ax clear vlan egress vlan-list port-string [ for bidden ] Parameters Default s If forbidden is not specified, tagged and untagged settings will be cleared. Mode Switch command, read ‐ write. Examples This example shows how ?[...]
-
Página 289
set vlan dynamicegress Enterasys D-Series CLI Reference 9 -17 Example This example shows how to display the dynamic egress status for VLANs 50 ‐ 55: D2(rw)->show vlan dynamicegress 50-5 5 VLAN 50 is disabled VLAN 51 is disabled VLAN 52 is disabled VLAN 53 is enabled VLAN 54 is enabled VLAN 55 is [...]
-
Página 290
Setting the Host VLAN 9-18 802.1Q VLAN Configuration Setting the Host VLAN Purpose To configure a host VLAN that only select devices are allow ed to access. This se cures the host port for management ‐ only tasks. Commands show host vlan Use this command ?[...]
-
Página 291
clear host vlan Enterasys D-Series CLI Reference 9 -19 Parameters Default s None. Mode Switch command, read ‐ write. Usage The host VLAN should be a secure VLAN whe re only designated users ar e allowed access. Fo r example, a host VLAN could be specif[...]
-
Página 292
Enabling/Disabling GVRP (GARP VLAN Registration Protocol) 9-20 802.1Q VLAN Configuration Enabling/Disabling GVRP (GARP VLAN Registration Protocol) About GARP VLAN Registration Prot ocol (GVRP) The following sections describe the device operation when its ports are operating under the Generic ?[...]
-
Página 293
Enabling/Disabling GVRP (GARP VLAN Registration Protocol) Enterasys D-Series CLI Reference 9 -21 Figure 9-1 Example of VLAN Propagation via GVRP Purpose To dynamically create VLANs acr oss a switched netw ork. The GVRP command set is used to display GVRP conf iguration informat[...]
-
Página 294
show gvrp 9-22 802.1Q VLAN Configuration show gvrp Use this command to display GVRP configuration information. Synt ax show gvrp [ port-string ] Parameters Default s If port ‐ string is not specif ied, GVRP configuration information will be displayed for all ports [...]
-
Página 295
set gvrp Enterasys D-Series CLI Reference 9 -23 Example This example shows how to display GARP timer information on ports 1 through 10 in slot 1: D2(su)->show garp timer fe .1.1-10 Port based GARP Configuration: (Tim er units are centiseconds) Port Number Join Leave Leaveall -------[...]
-
Página 296
clear gvrp 9-24 802.1Q VLAN Configuration Mode Switch command, read ‐ write. Examples This example shows how to enable GVRP globally on the device: D2(su)->set gvrp enable This example shows how to disable GVRP globally on the device: D2(su)->set gvrp di[...]
-
Página 297
set garp timer Enterasys D-Series CLI Reference 9 -25 Default s None. Mode Switch command, read ‐ write. Usage The setting of these timers is critical and should only be changed by personnel familiar with the 802.1Q standards documentation, which is no[...]
-
Página 298
set garp timer 9-26 802.1Q VLAN Configuration[...]
-
Página 299
Enterasys D-Series CLI Reference 10-1 10 Dif ferentiated Services Configuration This chapter descri bes the Differentiated Services (Diffserv) set of commands and how to use them. D ‐ Series devi ces support Diffserv po licy ‐ base d provisioning of netw ork[...]
-
Página 300
Globally Enabling or Disabling Diffserv 10-2 Differentiated Services Configu ration Globally Enabling or Disabling Diffserv Purpose To globally enable or disable Diffserv on the device. Command set diffserv adminmode Use this command to globally enable or disable Diffserv on th[...]
-
Página 301
Creating Diffserv Classes and Matching Conditions Enterasys D-Series CLI Reference 10-3 Creating Diffserv Classes and Matching Conditions Purpose To review , create, and configure Diffserv classes and match ing conditions. Commands show diffserv info Use this command to display general Dif[...]
-
Página 302
show diffserv class 10-4 Differentiated Services Configu ration show diffserv class Use this command to display information about Diffserv classes. Synt ax show diffserv class { summary | detai led classname } Parameters Default s None. Mode Switch command, read ‐ only . Example This example shows ?[...]
-
Página 303
set diffserv class delete Enterasys D-Series CLI Reference 10-5 Example This example shows how to create a Diffserv class called “admin”: D2(rw)->set diffserv class create al l admin set diffserv class delete Use this command to delete a Diffserv class and remove[...]
-
Página 304
set diffserv class match 10-6 Differentiated Services Configu ration Parameters every classname Matches all packets to a specific class. dstmac | scrmac classname macaddr macmask Matches to a specific class based on dest ination or source MAC address. dstip [...]
-
Página 305
set diffserv class match Enterasys D-Series CLI Reference 10-7 Default s None. Mode Switch command, read ‐ write. Usage Any policy that is applied must be com posed of rules that come from only one of the foll owing four groups. •L a y e r 3: – Destination[...]
-
Página 306
set diffserv class rename 10-8 Differentiated Services Configu ration – Destination IP addre ss ( dstip ) –V L A N ID ( vlan) Yo u cannot create and add a class to a policy before adding any rules (match conditions) to the class. Once a class[...]
-
Página 307
Configuring Diffserv Poli cies and Assigning Classes Enterasys D-Series CLI Reference 10-9 Example This example shows how to rename the Diffserv “a dmin” class to “system”: D2(rw)->set diffserv class rename ad min system Configuring Diffserv Policies and Assigning Classes Purpose To review [...]
-
Página 308
set diffserv policy create 10-10 Differentiated Services Config uration Example This example shows how to display a summary of Diffserv policy information. In this case, there is one policy named “admin”, to which members of the “admin” ?[...]
-
Página 309
set diffserv policy class Enterasys D-Series CLI Reference 10-11 Mode Switch command, read ‐ write. Usage In order to delete a policy you must first remove the service port(s) assigned to the po licy using the set diffserv service remove command ?[...]
-
Página 310
set diffserv policy police style simple 10-12 Differentiated Services Config uration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to mark packets matching the “admin” policy in the “system” class for DSCP expedited ?[...]
-
Página 311
set diffserv policy police action conform Enterasys D-Series CLI Reference 10-13 set diffserv policy police action conform Use this command to configure traffic policing actions for pac kets that conform to associated Diffserv classifications. Synt ax set diffserv policy police action co n[...]
-
Página 312
set diffserv policy rename 10-14 Differentiated Services Config uration Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the policying action to dr op for packets not conforming to the Diffserv policy “admin,” class [...]
-
Página 313
show diffserv service info Enterasys D-Series CLI Reference 10-15 Commands show diffserv service info Use this command to display information about Diffserv service ports. Synt ax show diffserv service info { summary | detailed port-string } { in } Parameters Default s None. Mode Switch command, read ‐ [...]
-
Página 314
set diffserv service 10-16 Differentiated Services Config uration Parameters Default s None. Mode Switch command, read ‐ only . Example This example shows how to display a detailed incoming traffic statistics about servic e port ge.1.1: D2(rw)->show diffserv service stats deta[...]
-
Página 315
DiffServ Configuration Examples Enterasys D-Series CLI Reference 10-17 DiffServ Configuration Examples Ty p i c a l l y , yo u wo u ld use the Diffserv command set to complete configuration tasks in the following order: 1. Enable DiffServ . 2. Create a Class. 3. Create one [...]
-
Página 316
DiffServ Configuration Examples 10-18 Differentiated Services Config uration[...]
-
Página 317
Enterasys D-Series CLI Reference 11-1 11 Policy Classification Configuration This chapter descri bes the Po l i c y Classification set of commands an d how to use them. Policy Classification Configuration Summary D ‐ Series devi ces support policy profile ‐ based provisioni[...]
-
Página 318
show policy profile 11-2 Policy Classifica tion Configuration Commands show policy profile Use this command to display policy profil e information. Synt ax show policy profile { all | profile-i ndex [ consecutive-pids ] [ -verbose ]} Parameters Default s If optional parameters are not specified, ?[...]
-
Página 319
set policy profile Enterasys D-Series CLI Reference 11-3 :IPDest(13) ,IPFrag(14),UDPSrcPort(15), :UDPDestPor t(16),TCPSrcPort(17),TCPDestPort(18), :ICMPType(1 9),Unknown(20),IPTOS(21), :IPProto(22 ),Unknown(23),Unknown(24), :Ether(25), Unknown(26),VLANTag(27), :Unknown(28 ),Unknown(29),Unknown(30), :port(31) Admin Profile Usage : none Oper Profile [...]
-
Página 320
clear policy profile 11-4 Policy Classifica tion Configuration Parameters Default s If optional parameters are not specified, none will be applied. Mode Switch command, read ‐ write. Example This example shows how to create a policy profile 1 named “netadmin[...]
-
Página 321
clear policy profile Enterasys D-Series CLI Reference 11-5 Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete policy profile 8: D2(su)->clear policy profile 8[...]
-
Página 322
Configuring Clas sification Rules 11-6 Policy Classifica tion Configuration Configuring Classification Rules Purpose To review , create, assign, and unassign classification rules to policy profiles. This maps user profiles to protocol ‐ based frame filt ering policies. Co[...]
-
Página 323
show policy rule Enterasys D-Series CLI Reference 11-7 Default s If verbose is not s pecified, summary informat ion will be display ed. Mode Switch command, read ‐ only . Example This example shows how to display policy classification information for Ethernet [...]
-
Página 324
show policy capability 11-8 Policy Classifica tion Configuration |admin|Port |ge.1.1 |16|ge.1.1 | A|NV| | 1|?| |admin|Port |ge.1.2 |16|ge.1.2 | A|NV| | 1|?| |admin|Port |ge.1.3 |16|ge.1.3 | A|NV| | 1|?| |admin|Port |ge.1.4 |16|ge.1.4 | A|NV| | 1|?| |admin|Port |ge.1.5 |16|ge.1.5 | A|NV| | 1|?| |admin|Port |ge.1.6 |16|ge.1.6 | A|NV| | 1|?| |admin|Po[...]
-
Página 325
show policy capability Enterasys D-Series CLI Reference 11-9 Mode Switch command, read ‐ only . Usage Use this command to display de tailed policy classification capabilities supported by you r D ‐ Series device. The output of this command shows a table [...]
-
Página 326
set policy ru le 11-10 Policy Classification Configur ation |Ether II packet type | | | X | X | X | X | | | | |LLC DSAP/SSAP/CTRL | | | | | | | | | | |VLAN tag | | | | | | | | | | |Replace tci | | | | | | | | | | |Port string | X | X | X | X | X | X | | | | ==================================== ========================= set policy rule Use this [...]
-
Página 327
set policy rule Enterasys D-Series CLI Reference 11-11 Default s None. Mode Switch command, read ‐ write. Usage Ta b l e 1 1 ‐ 30 provides the set policy rule data val u e s that can be entered for a particular classification type, and the mask bits that[...]
-
Página 328
clear policy rule 11-12 Policy Classification Configur ation Examples This example shows how to use Ta b l e 1 1 ‐ 30 to assign a rule to policy profile 3 that will filter Ethernet II Ty p e 1526 frames to VLAN 7: D2(su)->set policy rule 3 ether[...]
-
Página 329
clear policy rule Enterasys D-Series CLI Reference 11-13 Parameters The following parameters apply to deleting an admin rule. The following parameters apply to deleting a classification rule. Default s When applicable, data and mask must be specified for[...]
-
Página 330
clear policy all-rules 11-14 Policy Classification Configur ation clear policy all-rules Use this command to remove all policy classification rules . Synt ax clear policy all-rules Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example shows how to remov[...]
-
Página 331
Assigning Ports to Policy Profiles Enterasys D-Series CLI Reference 11-15 Assigning Port s to Policy Profiles Purpose To assign and unassign ports to policy profiles. Commands set policy port Use this command to assign ports to a policy profile. Synt ax set policy port port-string prof[...]
-
Página 332
clear policy port 11-16 Policy Classification Configur ation clear policy port Use this command to remove a poli cy profile from one or more po rts. Synt ax clear policy port port-string profil e-index Parameters Default s None. Mode Switch command, read ‐ write. Example This example [...]
-
Página 333
Configuring Policy Class of Service (CoS) Enterasys D-Series CLI Reference 11-17 Configuring Policy Class of Service (CoS) The D ‐ Series supports Class of Service (CoS), wh ich allows you to assign mission ‐ cr itical data to a higher priority through the device ?[...]
-
Página 334
Configuring Policy Clas s of Service (CoS) 11-18 Policy Classification Configur ation ------------------------------------ ---------------------------------- Port Group Name :Users Port Group :1 Port Type :0 Assigned Ports : fe ge.1.1-46 ------------------------------------ ---------------------------------- Port Group Name :Uplink Port Group :2 Po[...]
-
Página 335
set cos state Enterasys D-Series CLI Reference 11-19 4. In the CoS settings table, configure a CoS setting for CoS index 1, which has a priority of 0. We enter the IRL refere nce, created in the previous step. D2(su)->set cos settings [...]
-
Página 336
show cos state 11-20 Policy Classification Configur ation Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to enable Class of Service: D2(rw)->set cos state enable show cos st ate Use this command to display the Class of Serv[...]
-
Página 337
set cos settings Enterasys D-Series CLI Reference 11-21 Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear the CoS state back to its default setting of disabled: D2(su)->clear cos state set cos settings Use this command t[...]
-
Página 338
clear cos settin g s 11-22 Policy Classification Configur ation •T o S This va l u e can be set per class of service, but is not required. When a frame is assigned to a class of service for which this va l u e is configured, the [...]
-
Página 339
set cos port-config Enterasys D-Series CLI Reference 11-23 Parameters Default s If not specified, all CoS entries will be display ed. Mode Switch command, read ‐ only . Example This example shows how to show all CoS settings: D2(su)->show cos settings CoS Index Priority To[...]
-
Página 340
show cos port-config 11-24 Policy Classification Configur ation Default s None. Mode Switch command, read ‐ write. Usage CoS IRL port groups are identified by group number and the type of ports in the group, in the form of group#.port ‐ type . The ?[...]
-
Página 341
clear cos port-config Enterasys D-Series CLI Reference 11-25 Default s The show cos port ‐ config command by itsel f will show all Po r t Groups. Mode Switch command, read ‐ only . Example This example shows all inbound rate limiting port groups. Note th[...]
-
Página 342
set cos port-resource 11-26 Policy Classification Configur ation Default s None. Mode Switch command, read ‐ write. Usage The default port group 0.0 cannot be deleted. Example This example deletes all Por t Groups except for the Default gro up 0.0: D2(su)->clear co[...]
-
Página 343
show cos port-resource Enterasys D-Series CLI Reference 11-27 Usage CoS port resources are where actual physical rate limiters are configured. Resources map directly to the number of rate limiters supported by the port type. (P ort type 0 [...]
-
Página 344
clear cos port-resource 11-28 Policy Classification Configur ation Group Index Resource Type Unit Ra te Rate Limit Type Action ----------- -------- ---- ---- ----- ----- --------------- ------ 2.0 1 irl kbps 10000 drop none clear cos port-resource Use this command to set the inbound rate limit in Kbps. Synt a[...]
-
Página 345
show cos referenc e Enterasys D-Series CLI Reference 11-29 Parameters Default s None. Mode Switch command, read ‐ write. Usage The CoS refere nce table maps the user ‐ defined IRL references found in the CoS settings table (see “ set cos settings ” on pa[...]
-
Página 346
clear cos reference 11-30 Policy Classification Configur ation Parameters Default s If irl is not specified, all CoS reference information is display ed. If a specific port group is not specified, information for all port groups is display ed. Mode Switc[...]
-
Página 347
show cos unit Enterasys D-Series CLI Reference 11-31 Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear the CoS inbound rate limiting reference configuration for all groups: D2(su)->clear cos reference irl all show cos unit Use this [...]
-
Página 348
show cos port-type 11-32 Policy Classification Configur ation Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear the CoS configuratio n for all entries except entries 0 ‐ 7: D2(su)->clear cos all-entries show cos port-type Use this [...]
-
Página 349
Enterasys D-Series CLI Reference 12-1 12 Port Priority and Rate Limiting Configuration This chapter describes the Po r t Priority and Rate Lim iting set of commands and how to use them. Port Priority Configuration Summary The D ‐ Series device supports Class o[...]
-
Página 350
show port priority 12-2 Port Priority and Rate Limiting Configura tion •D i s p l a y the current traffic class m apping ‐ to ‐ priority of each port. •S e t each port to transmit frames according to 802.1D (802.1p) priority set in the frame header .[...]
-
Página 351
clear port priority Enterasys D-Series CLI Reference 12-3 Synt ax set port priority port-string priori ty Parameters Default s None. Mode Switch command, read ‐ write. Usage The set port priority command will not change the 802.1p priority tag on tagged traffic with a def[...]
-
Página 352
Configuring Priority to Transmit Queue Mapping 12-4 Port Priority and Rate Limiting Configura tion Example This example shows how to reset fe.1.11 to the default priority: D2(rw)->clear port priority fe .1 .11 Configuring Priority to T ransmit Queue Mapping Purpose To perform the following: •[...]
-
Página 353
set port priority-queue Enterasys D-Series CLI Reference 12-5 Example This example shows how to dis play priority queue information for ge .1.1. In this case, frames with a priority of 0 are associated wi th transmit queue 1; frames with [...]
-
Página 354
clear port priority-queue 12-6 Port Priority and Rate Limiting Configura tion clear port priority-queue Use this command to reset port priority queue setting s back to defaults for one or more ports. Synt ax clear port priority-queue port-strin g Parameters Default s None. Mode Switch [...]
-
Página 355
set port txq Enterasys D-Series CLI Reference 12-7 Parameters Default s If the port ‐ string is not specified, the QoS setting of all physical ports will be displayed. Mode Switch command, read ‐ only . Example This example shows how to display the c[...]
-
Página 356
clear port txq 12-8 Port Priority and Rate Limiting Configura tion Usage Queues can be set for strict priority (SP) or weig h te d round ‐ robin (WRR). If set for WRR mode, wei gh ts may be assigned to those queues with this command. We i g[...]
-
Página 357
clear port txq Enterasys D-Series CLI Reference 12-9 Example This example shows how to clear transmit queue va l u e s on ge .1.1: D2(su)->clear port txq ge.1.1[...]
-
Página 358
Configuring Port Traffic Rate Limiting 12-10 Port Priority and Ra te Limiting Configuration Configuring Port T raffic Rate Limiting Purpose To limit the rate of inbound tra ffic on the D ‐ Series device on a per port/priority basis. The allow able range for the ra[...]
-
Página 359
show port ratelimit Enterasys D-Series CLI Reference 12-11 Example This example shows how to display the current rate li miting information for fe.2.1: D2(su)-> show port ratelimit fe.2.1 Global Ratelimiting status is disabl ed. Port Threshold Priority Number Index (kB/s) Ac tion Direction List Sta[...]
-
Página 360
set port ratelimit 12-12 Port Priority and Ra te Limiting Configuration set port ratelimit Use this command to configure the traffic rate limiting status and threshold (in kilobytes per second) for one or more ports. Synt ax set port ratelimit { disable | enable } | por[...]
-
Página 361
clear port ratelimit Enterasys D-Series CLI Reference 12-13 clear port ratelimit Use this command to clear rate limiting parameters for one or more ports. Synt ax clear port ratelimit port-string [ in dex ] Parameters Default s If not specified, all index entries will be ?[...]
-
Página 362
clear port ratelimit 12-14 Port Priority and Ra te Limiting Configuration[...]
-
Página 363
Enterasys D-Series CLI Reference 13-1 13 IGMP Configuration This chapter descri bes the IGMP Configuration set of commands and how to use them. IGMP Overview About IP Multicast Group Management The Internet Group Management Protocol (IGMP) runs between hosts [...]
-
Página 364
Configuring IGMP at Layer 2 13-2 IGMP Config uration multicast switch/router it passes through to ensure that traffic is only passed to the hosts that subscribed to this service. Configuring IGMP at Layer 2 Purpose To configure IGMP snooping fr om the ?[...]
-
Página 365
set igmpsnooping adminmode Enterasys D-Series CLI Reference 13-3 the system, refer to “ set igmpsnooping adminmode ” on page 13 ‐ 3. For information on enabling IGMP on one or more ports , refer to “ set igmpsnooping interfacemode ” on page[...]
-
Página 366
set igmpsnooping groupmembershipinterval 13-4 IGMP Config uration Parameters Default s None. Mode Switch command, read ‐ write. Usage In order for IGMP snooping to be enabled on one or all ports, it must be globally enabled on the device using the [...]
-
Página 367
set igmpsnooping maxresponse Enterasys D-Series CLI Reference 13-5 Example This example shows how to set the IGMP group member ship interv al to 250 seconds: D2(su)->set igmpsnooping groupmember shipinterval 250 set igmp snooping maxresponse Use this command to configure the[...]
-
Página 368
set igmpsnooping add-static 13-6 IGMP Config uration Default s None. Mode Switch command, read ‐ write. Usage This timer is for expiring the switch from the multicast database. If the timer expires, and the only address left is the multicast switch[...]
-
Página 369
set igmpsnooping remove-static Enterasys D-Series CLI Reference 13-7 set igmp snooping remove-st atic This command deletes a static IGMP entry or removes one or mor e new ports from an existing entry . Synt ax set igmpsnooping remove-static group vlan-list [ modify ] [ port-string [...]
-
Página 370
show igmpsnooping mfdb 13-8 IGMP Config uration Example This example displays the static IGMP ports for VLAN 20. D2(su)->show igmpsnooping static 20 ------------------------------------ ----------------------------------------- --- Vlan Id = 20 Static Multicast Group Addr ess = 233.11.22.33 Type = IGMP IGMP Po[...]
-
Página 371
clear igmpsnooping Enterasys D-Series CLI Reference 13-9 Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear all IGMP snooping entries: D2(su)->clear igmpsnooping Are you sure you want to clear all I GMP snooping entries? (y/n) y IGMP Snooping Entries Cleared.[...]
-
Página 372
clear igmpsnooping 13-10 IGMP Configuration[...]
-
Página 373
Enterasys D-Series CLI Reference 14-1 14 Logging and Network Management This chapter descri bes switch ‐ related logging and netw ork management commands and how to use them. Configuring System Logging Purpose To display and configure system logging, including Sys[...]
-
Página 374
show logging ser ver 14-2 Logging and Network Manageme nt show logging server Use this command to display the Syslog configuration for a particul ar serv er . Synt ax show logging server [ index] Parameters Default s If index is not specif ied, all Sy slog serv er informati[...]
-
Página 375
set logging server Enterasys D-Series CLI Reference 14-3 set logging server Use this command to configure a Syslog server . Synt ax s et logging server index [ ip-addr ip-addr ] [ facility facility ] [ severity severity ] [ descr descr ] [ port por t] [ state { en able | disable }] Parameters Default s If ip ‐ addr[...]
-
Página 376
clear logging server 14-4 Logging and Network Manageme nt Example This command shows how to enable a Syslog serv er configuration for index 1, IP address 134.141.89.113, facility local4, severity lev el 3 on port 514: D2(su)->set logging server 1 ip-addr [...]
-
Página 377
set logging default Enterasys D-Series CLI Reference 14-5 Example This command shows how to display the Syslog serv er default val u e s. For an expla nation of the command output, refer back to Ta b l e 1 4 ‐ 32 on page 14 ‐ 2. D2(su)->show logging d[...]
-
Página 378
clear logging default 14-6 Logging and Network Manageme nt clear logging default Use this command to reset logg ing default va lu e s . Synt ax clear logging default {[ facility ] [ severity ] [ port ]} Parameters Default s At least one optional parameter must be enter ed. All three op[...]
-
Página 379
set logging application Enterasys D-Series CLI Reference 14-7 Mode Switch command, read ‐ only . Example This example shows how to display system logging information pertaining to the SNMP application. D2(ro)->show logging application SNM P Application Current Severity Level ---------[...]
-
Página 380
clear logging application 14-8 Logging and Network Manageme nt Default s If level is not specified, none will be applied. Mode Switch command, read ‐ write. Example This example shows how to set the sev erity leve l for SNMP to 4 so that error [...]
-
Página 381
show logging local Enterasys D-Series CLI Reference 14-9 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the logging severity lev el to 6 for SNMP . D2(rw)->clear logging application SN MP show logging local Use this comman[...]
-
Página 382
clear logging local 14-10 Logging and Network Manage ment Parameters Default s None. Mode Switch command, read ‐ write. Example This command shows how to enable logging to the console and disable logging to a persistent file: D2(su)->set logging local console en able file [...]
-
Página 383
show logging buffer Enterasys D-Series CLI Reference 14-11 Default s None. Mode Switch command, read ‐ only . Example This example shows a porti on of the information display ed with the show logging buffer command: D2(su)->show logging buffer <165>Sep 4 07:43:09 10.42.71.13[...]
-
Página 384
Monitoring Network Events and Status 14-12 Logging and Network Manage ment Monitoring Network Event s and St atus Purpose To display switch ev ents and command history , to set the size of the histo ry buffer , and to display and disconnect current user sessions[...]
-
Página 385
show history Enterasys D-Series CLI Reference 14-13 show history Use this command to display the size (in lines) of the history buffer . Synt ax show history Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display [...]
-
Página 386
ping 14-14 Logging and Network Manage ment ping Use this command to send ICMP echo ‐ request packets to another node on the netw ork from the switch CLI. Synt ax ping host Parameters Default s None. Mode Switch command, read ‐ write. Examples This example ?[...]
-
Página 387
disconnect Enterasys D-Series CLI Reference 14-15 D2(su)->show users Session User Location -------- ----- ------------------- ------- * telnet rw 134.141.192.119 telnet rw 134.141.192.18 disconnect Use this command to close an active console port or Te l n e t session from the switch CL[...]
-
Página 388
Managing Switch Network Addresses and Routes 14-16 Logging and Network Manage ment Managing Switch Network Addresses and Routes Purpose To display or delete switch ARP table entries, and to display MAC address information. Commands show arp Use this command to display the s[...]
-
Página 389
set arp Enterasys D-Series CLI Reference 14-17 Example This example shows how to display the ARP table: D2(su)->show arp LINK LEVEL ARP TABLE IP Address Phys Address Flags Interface ------------------------------------ ----------------- 10.20.1.1 00-00-5e-00-01-1 S host 134.142.21.194 00-00-5e-00-01-1 S host 1[...]
-
Página 390
clear arp 14-18 Logging and Network Manage ment clear arp Use this command to delete a specific entry or all entries from the switch’ s ARP tab le. Synt ax clear arp { ip-address | all } Parameters Default s None. Mode Switch command, read ‐ write. Example This example [...]
-
Página 391
show mac Enterasys D-Series CLI Reference 14-19 Default s If not specified, waittime will be set to 5 seconds. If not specified, first ‐ tt l will be set to 1 second. If not specified, max ‐ ttl will be set to 30 seconds. If not s[...]
-
Página 392
show mac agetime 14-20 Logging and Network Manage ment Default s If no parameters are specified, all MAC addresses for the device will be display ed. Mode Switch command, read ‐ only . Example This example shows how to display MAC addre ss information [...]
-
Página 393
set mac agetime Enterasys D-Series CLI Reference 14-21 Default s None. Mode Switch command, read ‐ only . Example This example shows how to display the MAC timeout period: D2(su)->show mac agetime Aging time: 300 seconds set mac agetime Use This command to set the timeout [...]
-
Página 394
set mac algorithm 14-22 Logging and Network Manage ment Mode Switch command, read ‐ only . Example This example shows how to reset the MAC timeout period to the default val u e of 300 seconds. D2(su)->clear mac agetime set mac algorithm Use this command to [...]
-
Página 395
clear mac algorithm Enterasys D-Series CLI Reference 14-23 Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows the output of this command. D2(su)->show mac algorithm Mac hashing algorithm is mac-crc16-u pperbits. clear mac algorithm Use this command to ?[...]
-
Página 396
clear mac address 14-24 Logging and Network Manage ment Parameters Default s If no port ‐ string is defined, the command will apply to all ports. Mode Switch command, read ‐ write. Example This example configures multicast MAC address 01 ‐ 01 ‐ 22 ‐ 33 ‐ 44 ‐ [...]
-
Página 397
show mac unreserved-flood Enterasys D-Series CLI Reference 14-25 show mac unreserved-flood Use this command to display the state of multicast flood protection. Synt ax show mac unreserved-flood Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example displays [...]
-
Página 398
Configuring Simple Network Time Protocol (SNTP) 14-26 Logging and Network Manage ment Example This example enables multicast flood protection. D2(su)->set mac unreserved-flood ena ble Configuring Simple Network T ime Protocol (SNTP) Purpose To configure the Simple Network Time Protocol (SNTP), [...]
-
Página 399
show sntp Enterasys D-Series CLI Reference 14-27 Default s None. Mode Switch command, read ‐ only . Example This example shows how to display SNTP client settings: D2(su)->show sntp SNTP Version: 3 Current Time: TUE SEP 09 16:13:33 20 03 Timezone: 'EST', offset from UTC is -4 hours and 0 minute[...]
-
Página 400
set sntp clien t 14-28 Logging and Network Manage ment set sntp client Use this command to set the SNTP operation mode. Synt ax set sntp client { broadcast | unicast | disab le } Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to enable SN[...]
-
Página 401
set sntp server Enterasys D-Series CLI Reference 14-29 Mode Switch command, read ‐ write. Example This example shows how to clear the SNTP client’ s operational mode: D2(su)->clear sntp client set sntp server Use this command to add a serv er from which the ?[...]
-
Página 402
set sntp poll-interval 14-30 Logging and Network Manage ment Mode Switch command, read ‐ write. Example This example shows how to remov e the serv er at IP address 10.21.1.100 from the SNTP serv er list: D2(su)->clear sntp server 10.21.1.10 0 set sntp poll-interval Use thi[...]
-
Página 403
set sntp poll-retry Enterasys D-Series CLI Reference 14-31 Example This example shows how to clear the SNTP poll interval: D2(su)->clear sntp poll-interval set sntp poll-retry Use this command to set the number of poll retries to a unicast SNTP serv er . [...]
-
Página 404
set sntp poll-timeout 14-32 Logging and Network Manage ment set sntp poll-timeout Use this command to set the poll timeout (in seconds) for a response to a unicast SNTP request. Synt ax set sntp poll-timeout timeout Parameters Default s None. Mode Switch command, read ‐ w[...]
-
Página 405
set timezone Enterasys D-Series CLI Reference 14-33 Parameters Default s If you enter a timezone name without specifying an offset in hours and minutes, the default is an offset from UTC of 0 hours and 0 minutes. Mode Switch command, read[...]
-
Página 406
Configuring Node Aliases 14-34 Logging and Network Manage ment Configuring Node Aliases Purpose To review , disable, and re ‐ enable node (port) alias functionality , which determines what network protocols are running on one or more ports. Commands show nodealias config [...]
-
Página 407
set nodealias Enterasys D-Series CLI Reference 14-35 set nodealias Use this command to enable or disable a node alias agent on one or more ports, or set the maximum number of alias entries per port. Synt ax set nodealias { enable | disable | ma xentr[...]
-
Página 408
clear nodealias config 14-36 Logging and Network Manage ment Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the node alias configuration on fe .1.3 : D2(su)->clear nodealias config fe .1.3 port ‐ string Specifies the port(s) [...]
-
Página 409
Enterasys D-Series CLI Reference 15-1 15 RMON Configuration This chapter descri bes the commands used to configure RMON on a D ‐ Series switch. RMON Monitoring Group Functions RMON (Remote Network Monitoring) provides comprehensiv e network fault diagnosis, planni[...]
-
Página 410
RMON Monitoring Group Functions 15-2 RMON Configuration History Records periodic st atistical samples from a network. Samp le period, number of samples and item(s) sampled. “ show rmon history ” on page 15-6 “ set rmon history ” on page 15-7 “ clear rmon history ” on page 15-7 Alarm Periodically gathers statistical samples from variable[...]
-
Página 411
Statistics Group Commands Enterasys D-Series CLI Reference 15-3 S t atistics Group Commands Purpose To display , configure, and clea r RMON statistics. Commands show rmon st ats Use this command to display RMON statistics measured for one or more ports. Synt ax show rmon st[...]
-
Página 412
set rmon stats 15-4 RMON Configuration Multicast Pkts = 0 128 - 25 5 Octets = 0 CRC Errors = 0 256 - 51 1 Octets = 0 Undersize Pkts = 0 512 - 102 3 Octets = 0 Oversize Pkts = 0 1024 - 151 8 Octets = 0 Fragments = 0 Ta b l e 1 5 ‐ 40 provides an explanation of the command output. set rmon st at s Use this comman[...]
-
Página 413
clear rmon stats Enterasys D-Series CLI Reference 15-5 Mode Switch command, read ‐ write. Example This example shows how to delete RMON statistics entry 2: D2(rw)->clear rmon stats 2[...]
-
Página 414
History Group Commands 15-6 RMON Configuration History Group Commands Purpose To display , configure, and clea r RMON history properties and statistics. Commands show rmon history Use this command to display RMON history properties and statistics. The RMON history ?[...]
-
Página 415
set rmon history Enterasys D-Series CLI Reference 15-7 Sample 2779 Interval Start: 1 days 0 hours 2 minutes 22 seconds Drop Events = 0 Undersiz e Pkts = 0 Octets = 0 Oversize Pkts = 0 Packets = 0 Fragment s = 0 Broadcast Pkts = 0 Jabbers = 0 Multicast Pkts = 0 Collisio ns = 0 CRC Align Errors = 0 Utilizat ion(%) = 0 set rmon history Use this ?[...]
-
Página 416
clear rmon history 15-8 RMON Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete RMON history entry 1: D2(rw)->clear rmon history 1 index ‐ list Specifies one or more history entries to be delete d, [...]
-
Página 417
Alarm Group Commands Enterasys D-Series CLI Reference 15-9 Alarm Group Commands Purpose To display , configure, and clea r RMON alarm entries and properties. Commands show rmon alarm Use this command to display RMON alarm entrie s. The RMON alarm group periodically [...]
-
Página 418
set rmon alarm properties 15-10 RMON Configuration set rmon alarm properties Use this command to configure an RMON alarm entr y , or to create a new alarm entry with an unused alarm index number . Synt ax set rmon alarm properties index [ int erval interval ] [ [...]
-
Página 419
set rmon alarm status Enterasys D-Series CLI Reference 15-11 Default s interval ‐ 3600 seconds type ‐ absolute startup ‐ rising rthresh ‐ 0 fthresh ‐ 0 revent ‐ 0 fevent ‐ 0 owner ‐ monitor Mode Switch command, read ‐ write. Example This example shows how ?[...]
-
Página 420
clear rmon alarm 15-12 RMON Configuration Parameters Default s None. Mode Switch command, read ‐ write. Usage An RMON alarm entry can be created using this command, configured using the set rmon alarm properties command (“ set rmon alarm properties ” ?[...]
-
Página 421
Event Group Commands Enterasys D-Series CLI Reference 15-13 Event Group Commands Purpose To display and clear RMON ev ents, and to configure RMON ev ent properties. Commands show rmon event Use this command to display RMON event entry properties. Synt ax show rmon event [ i[...]
-
Página 422
set rmon event properties 15-14 RMON Configuration set rmon event properties Use this command to configure an RMON event entry , or to create a new eve nt entry with an unused event index number . Synt ax set rmon event properties index [ description description[...]
-
Página 423
set rmon event status Enterasys D-Series CLI Reference 15-15 Example This example shows how to create and enable an RMON event entry called “STP topology change” that will send both a log entry and an SNMP trap message to the [...]
-
Página 424
clear rmon event 15-16 RMON Configuration Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear RMON event 1: D2(rw)->clear rmon event 1[...]
-
Página 425
Filter Group Commands Enterasys D-Series CLI Reference 15-17 Filter Group Commands The packet capture and filter function is di sabled by default. Only one interface can be configured for capturing and filtering at a time. When packet capture is [...]
-
Página 426
set rmon channel 15-18 RMON Configuration Example This example shows how to display RMON channel information for fe .2.12: D2(rw)->show rmon channel fe .2.12 Port fe .2.12 Channel index= 628 EntryStatus= valid ------------------------------------ ---------------------- Control off Accept Type matched OnEve[...]
-
Página 427
clear rmon channel Enterasys D-Series CLI Reference 15-19 Example This example shows how to create an RMON channel entry: D2(rw)->set rmon channel 54313 fe .2.12 accept failed control on descripti on "capture all" clear rmon channel Use this command to clear an RMON channe[...]
-
Página 428
set rmon filter 15-20 RMON Configuration D2(rw)->show rmon filter Index= 55508 Channel Index= 628 EntryStatus= valid ------------------------------------ ---------------------- Data Offset 0 PktSta tus 0 PktStatusMask 0 PktSta tusNotMask 0 Owner ETS,NAC-D ----------------------------- Data ff ff ff ff ff ff ----------------------------- DataMask[...]
-
Página 429
clear rmon filter Enterasys D-Series CLI Reference 15-21 Mode Switch command, read ‐ write. Example This example shows how to create RMON filter 1 and apply it to channel 9: D2(rw)->set rmon filter 1 9 offset 3 0 data 0a154305 dmask ffffffff clear rmon filter Use this comm[...]
-
Página 430
Packet Capture Commands 15-22 RMON Configuration Packet Capture Commands Note that packet capture filter is sampling only and does not guarantee receipt of back ‐ to ‐ back packets. Purpose To display RMON capture entries, configure, enable, or disable ?[...]
-
Página 431
set rmon capture Enterasys D-Series CLI Reference 15-23 Owner monitor captureEntry= 1 Buff.control= 28062 ------------------------------------ -------- Pkt ID 9 Pkt time 1 days 0 hours 51 minutes 15 seconds Pkt Length 93 Pkt status 0 Data: 00 00 5e 00 01 01 00 01 f4 00 7d ce 08 00 45 00 00 4b b4 b9 00 00 40 11 32 5c 0a 15 43 05 86 8d bf e5 00 a1 0e[...]
-
Página 432
clear rmon capture 15-24 RMON Configuration Mode Switch command, read ‐ write. Example This example shows how to create RMON capture entry 1 to “listen” on channel 628: D2(rw)->set rmon capture 1 628 clear rmon capture Use this command to clears an RMON[...]
-
Página 433
Enterasys D-Series CLI Reference 16-1 16 DHCP Server Configuration This chapter descri bes the commands to configure the IPv4 DHCP serv er functionality on a D ‐ Series switch. DHCP Overview Dynamic Host Configuration Protocol (DHCP) for IPv4 is a netw[...]
-
Página 434
DHCP Overview 16-2 DHCP Server Configura tion • Boot file •D H C P options as defined by RFC 2132 Configuring a DHCP Server For DHCP to function on D ‐ Series systems, the system has to “know about” the IP netw ork for which the DHCP ?[...]
-
Página 435
Configuring General DHCP Server Parameters Enterasys D-Series CLI Reference 16-3 Configuring General DH CP Server Parame ters Purpose To configure DHCP server parameters, and to display and clear address binding information, server statistics, and conflict information. Commands set[...]
-
Página 436
set dhcp bootp 16-4 DHCP Server Configura tion Example This example enables DHCP server functionality . D2(rw)->set dhcp enable set dhcp bootp Use this command to enable or disable automatic address allocation for BOOTP clients. By default, address allocation [...]
-
Página 437
show dhcp conflict Enterasys D-Series CLI Reference 16-5 Example This example enables DHCP conflict logging. D2(rw)->set dhcp conflict logging show dhcp conflict Use this command to display conflict information, for one address or al l addresses. Synt ax show dhcp conflict [[...]
-
Página 438
set dhcp exclude 16-6 DHCP Server Configura tion Default s None. Mode Switch command, read ‐ write. Examples This example disables DHCP conflict logging. D2(rw)->clear dhcp conflict logging This example clears the conflict information for the IP address 192.0.0.2. D2(rw)-&[...]
-
Página 439
clear dhcp exclude Enterasys D-Series CLI Reference 16-7 clear dhcp exclude Use this command to clear the configured IP addresses that the DHCP serv er sh ould not assign to DHCP clients. Synt ax clear dhcp exclude low-ipaddr [ high- ipaddr ] Parameters Default s None. Mode Swi[...]
-
Página 440
clear dhcp ping 16-8 DHCP Server Configura tion clear dhcp ping Use this command to reset the number of ping packets sent by the DHCP server back to the default val u e of 2. Synt ax clear dhcp ping packets Parameters None. Default s None. Mode Switch command, ?[...]
-
Página 441
clear dhcp binding Enterasys D-Series CLI Reference 16-9 192.0.0.13 00:33:44:56:22:37 infinite Manual 192.0.0.14 00:33:44:56: 22:38 infinite Manual clear dhcp binding Use this command to clear (delete) one or all DHCP address bindings. Synt ax cle[...]
-
Página 442
clear dhcp server st atistics 16-10 DHCP Server Configur ation Messages Received ---------- ---------- DHCP DISCOVER 382 DHCP REQUEST 3855 DHCP DECLINE 0 DHCP RELEASE 67 DHCP INFORM 1 Messages Sent ---------- ------ DHCP OFFER 381 DHCP ACK 727 DHCP NACK 2 clear dhcp server st atistics Use this command to clear all DHCP s[...]
-
Página 443
Configuring IP Address Pools Enterasys D-Series CLI Reference 16-11 Configuring IP Address Pools Manual Pool Configuration Considerations •T h e subnet of the IP address being is sued should be on the same subnet as the ingres s interface (that is, the subnet [...]
-
Página 444
set dhcp pool 16-12 DHCP Server Configur ation set dhcp pool Use this command to create and assign a name to a DHCP serv er pool of addres ses. Up to 16 address pools may be configured on a D ‐ Series. Not e that entering this ?[...]
-
Página 445
clear dhcp pool Enterasys D-Series CLI Reference 16-13 clear dhcp pool Use this command to delete a DHCP server pool of addresses. Synt ax clear dhcp pool poolname Parameters Default s None. Mode Switch command, read ‐ write. Example This example deletes the address pool [...]
-
Página 446
clear dhcp pool network 16-14 DHCP Server Configur ation Examples This example configures the IP subnet 172.20.28.0 with a prefix length of 24 for the aut omatic DHCP pool named “auto1.” Alternativ ely , the mask could hav e been specified ?[...]
-
Página 447
clear dhcp pool hardware-addr ess Enterasys D-Series CLI Reference 16-15 Default s If no type is specified, Ethernet is assumed. Mode Switch command, read ‐ write. Example This example specifies 0001.f401.2710 as the Ethernet MAC address for the manual address [...]
-
Página 448
clear dhcp pool host 16-16 DHCP Server Configur ation Default s If a mask or prefix is not specified, the class A, B, or C natural mask will be used. Mode Switch command, read ‐ write. Example This example shows how to configure the minimum[...]
-
Página 449
clear dhcp pool client-identifier Enterasys D-Series CLI Reference 16-17 Parameters Default s None. Mode Switch command, read ‐ write. Usage The client identifier is formed by conca tenating the media type and the MAC address. For example, if the client hardw are [...]
-
Página 450
set dhcp pool client-name 16-18 DHCP Server Configur ation set dhcp pool client-name Use this command to assign a name to a DHCP client when creating an address pool for manual binding. Synt ax set dhcp pool poolname client-name n ame Parameters Default s None. Mode Switch [...]
-
Página 451
set dhcp pool bootfile Enterasys D-Series CLI Reference 16-19 set dhcp pool boot file Use this command to specify a default boot image for the DHCP clients who wil l be serv ed by the address pool being configured. Synt ax set dhcp pool poolname bootfile file na[...]
-
Página 452
set dhcp pool next- server 16-20 DHCP Server Configur ation set dhcp pool next-server Use this command to specify the file server from which the de fault boot image is to be loaded by the client. Synt ax set dhcp pool poolname next-server i p-address Parameters Defa[...]
-
Página 453
set dhcp pool lease Enterasys D-Series CLI Reference 16-21 set dhcp pool lease Use this command to specify the duration of the lease for an IP address assigned by the DHCP server from the ad dress pool being configured. Synt ax set dhcp pool poolname lea[...]
-
Página 454
set dhcp pool default-rou ter 16-22 DHCP Server Configur ation Mode Switch command, read ‐ write. Example This example restores the default le ase duration of one day for address pool “a uto1.” D2(rw)->clear dhcp pool auto1 lease set dhcp pool default-router Use this c[...]
-
Página 455
set dhcp pool dns-server Enterasys D-Series CLI Reference 16-23 Mode Switch command, read ‐ write. Example This example removes the default router from the addres s pool “auto1.” D2(rw)->clear dhcp pool auto1 defaul t-router set dhcp pool dns-server Use this command to specify[...]
-
Página 456
set dhcp pool domain- name 16-24 DHCP Server Configur ation Mode Switch command, read ‐ write. Example This example removes the DNS serv er list from the address pool “a uto1.” D2(rw)->clear dhcp pool auto1 dns-se rver set dhcp pool domain-name Use this command to specify [...]
-
Página 457
set dhcp pool netbios-name-server Enterasys D-Series CLI Reference 16-25 Mode Switch command, read ‐ write. Example This example removes the domain name from the address pool “auto1.” D2(rw)->clear dhcp pool auto1 domain -name set dhcp pool netbios-name-server Use this command to [...]
-
Página 458
set dhcp pool netbio s-node-type 16-26 DHCP Server Configur ation Mode Switch command, read ‐ write. Example This example removes the NetBIOS name serv er lis t from the address pool auto1. D2(rw)->clear dhcp pool auto1 netbio s-name-server set dhcp pool netbios-node-type Use this [...]
-
Página 459
set dhcp pool option Enterasys D-Series CLI Reference 16-27 Default s None. Mode Switch command, read ‐ write. Example This example removes the NetBIOS node type from the address pool “auto1.” D2(rw)->clear dhcp pool auto1 netbio s-node-type set dhcp pool option Use this command ?[...]
-
Página 460
clear dhcp pool option 16-28 DHCP Server Configur ation clear dhcp pool option Use this command to remove a DHCP option from the address pool being configured. Synt ax clear dhcp pool poolname option code Parameters Default s None. Mode Switch command, read ‐ write. Example This exam[...]
-
Página 461
show dhcp pool configuration Enterasys D-Series CLI Reference 16-29 Network 192.0.0.0 255.255.255.0 Lease Time 1 days 0 hrs 0 mins Default Routers 192.0.0.1 Pool: static1 Pool Type Manual Client Name appsvr1 Client Identifier 01:00:01:f4:01:27:10 Host 10.1.1.1 255.0.0.0 Lease Time infinite Option 19 hex 01 Pool: static2 Pool Type Manual Hardware Ad[...]
-
Página 462
show dhcp pool configuration 16-30 DHCP Server Configur ation[...]
-
Página 463
Enterasys D-Series CLI Reference 17-1 17 Security Configuration This chapter descri bes the Security Configuration set of commands and how to use them. Overview of Security Methods The following security methods are av ailable for controlling which users are[...]
-
Página 464
Overview of Security Methods 17-2 Security Con figuration on using CLI commands to configure 802 .1X, refer to “ Configuring 802.1X Authentication ” on page 17 ‐ 11. •M A C Authentication – provides a mechanism for administrators to securely authen[...]
-
Página 465
Configuring RADIUS Enterasys D-Series CLI Reference 17-3 configured on the switch, the swi tch then dynamically applies the policy profile to the physical port the user/device is authenticati ng on. Filter-ID Attribute Format s Enterasys Netw orks supports ?[...]
-
Página 466
show radius 17-4 Security Con figuration show radius Use this command to display the current RADIUS client/server configuration. Synt ax show radius [ status | retries | timeout | server [ in dex | all] ] Parameters Default s If no parameters are specified, all RA DIUS configuration ?[...]
-
Página 467
set radius Enterasys D-Series CLI Reference 17-5 set radius Use this command to enable, disable, or configure RADIUS authentication. Synt ax set radius { enable | disable } | { retries number-of-retries } | { timeout timeout } | { server index ip-address port [ secre t-value ] [ realm { management-access | any | [...]
-
Página 468
set radius 17-6 Security Con figuration Default s If secr et ‐ value is not specified, none will be applied. If realm is not specified, the any access realm will be used. Mode Switch command, read ‐ write. Usage The D ‐ Series device allows up [...]
-
Página 469
clear radius Enterasys D-Series CLI Reference 17-7 This example shows how to force any management ‐ access to the switch (T elnet, web , SS H) to authenticate through a RADIUS serv er . The all parameter at the end of the command me[...]
-
Página 470
set radius accounting 17-8 Security Con figuration Parameters Mode Switch command, read ‐ only . Default s If no parameters are specified, all RA DIUS accounting configuration information will be display ed. Example This example shows how to display RADIUS account[...]
-
Página 471
clear radius accounting Enterasys D-Series CLI Reference 17-9 Mode Switch command, read ‐ write. Default s None. Examples This example shows how to enable the RADIUS accounting client for authenticating with the accounting server at IP address 10.2.4.12, UDP ?[...]
-
Página 472
clear radius accounting 17-10 Securit y Configuration Default s None. Example This example shows how to reset the RADIUS accounting timeout to 5 seconds. D2(su)->clear radius accounting time out[...]
-
Página 473
Configuring 802.1X Authentication Enterasys D-Series CLI Reference 17-11 Configuring 802.1X Authentication Purpose To review and configure 802.1X authenti cation for one or more ports us ing EAPOL (Extensible Authentication Protocol). 802.1X controls network access by ?[...]
-
Página 474
show dot1x 17-12 Securit y Configuration If port ‐ string is not specif ied, information for all ports will be displayed. Mode Switch command, read ‐ only . Examples This example shows how to display 802.1X status: D2(su)->show dot1x DOT1X is disabled. This ?[...]
-
Página 475
show dot1x auth-config Enterasys D-Series CLI Reference 17-13 show dot1x auth-config Use this command to display 802.1X authentication configuration settings for one or more ports. Synt ax show dot1x auth-config [ authcontroll ed-portcontrol ] [ maxreq ] [ quietperiod ] [ reauthenabled ] [ reauthp[...]
-
Página 476
set dot1x 17-14 Securit y Configuration Port : 1 Auth-Config PAE state: Initialize Backend auth state: Initialize Admin controlled directions: Both Oper controlled directions: Both Auth controlled port status: Authorized Auth controlled port control: Auto Quiet period: 60 Transmission period: 30 Supplicant timeout: 30 Server timeout: 30 Maximum req[...]
-
Página 477
set dot1x auth-config Enterasys D-Series CLI Reference 17-15 set dot1x auth-config Use this command to configure 802.1X authentica tion. Synt ax set dot1x auth-config {[ authcontroll ed-portcontrol { auto | forced-auth | forced-unauth }] [ maxreq value ] [ quietperiod value ] [ reauthenabled { false | true }] [ reauthperiod [...]
-
Página 478
clear dot1x auth-config 17-16 Securit y Configuration Examples This example shows how to enable reauthenti cation control on ports fe.1.1 ‐ 3: D2(su)->set dot1x auth-config reauth enabled true fe .1.1-3 This example shows how to set the 802.1X quiet period to 1[...]
-
Página 479
show eapol Enterasys D-Series CLI Reference 17-17 This example shows how to reset the 802.1X quiet period to 60 seconds on ports fe.1.1 ‐ 3: D2(su)->clear dot1x auth-config quie tperiod fe .1.1-3 show eapol Use this command to display EAPOL status or se[...]
-
Página 480
show eapol 17-18 Securit y Configuration T able 17-43 show eapol Output Det ails Output Fi eld What It Disp la y s. .. Port Port designa tion. For a detailed description of possible port-string values, refer to “ Port S tring Synt ax Used in the C LI ” on page 6-1. Authentication St ate Current EAPOL authentication state for each po rt. Possibl[...]
-
Página 481
set eapol Enterasys D-Series CLI Reference 17-19 set eapol Use this command to enable or disable EAPOL port ‐ based user authentication with the RADIUS server and to set the authentication mode for one or more ports . Synt ax set eapol [ enable | d[...]
-
Página 482
clear eapol 17-20 Securit y Configuration Parameters Default s If auth ‐ mode is not specif ied, all EAPOL settings will be cleared. If port ‐ string is not specif ied, settings will be cleared for all ports. Mode Switch command, read ‐ write. Example [...]
-
Página 483
Configuring MAC Authentication Enterasys D-Series CLI Reference 17-21 Configuring MAC Authentication Purpose To review , disable, enable and configure MAC authentication. This authentica tion method allows the device to authentica te source MAC addresses in an excha[...]
-
Página 484
show macauthentication 17-22 Securit y Configuration Parameters Default s If port ‐ string is not specif ied, MAC authentication informatio n will be display ed for all ports. Mode Switch command, read ‐ only . Example This example shows how to display MAC a[...]
-
Página 485
show macauthentication session Enterasys D-Series CLI Reference 17-23 show macauthentication session Use this command to display the active MAC authe nticated se ssions. Synt ax show macauthentication session Parameters None. Default s If port ‐ string is not specif ied, MAC sessio n [...]
-
Página 486
set macauthentication 17-24 Securit y Configuration set macauthentication Use this command to globally enable or disable MAC authentica tion. Synt ax set macauthentication { enable | disa ble } Parameters Mode Switch command, read ‐ write. Default s None. Example This example shows how t[...]
-
Página 487
clear macauthentication password Enterasys D-Series CLI Reference 17-25 Example This example shows how to set the MAC authentication password to “macauth”: D2(su)->set macauthentication passwo rd macauth clear macauthentication p assword Use this command to clear the MAC [...]
-
Página 488
set macauthentication portinitialize 17-26 Securit y Configuration Usage Enabling port(s) for MAC authentication requires globally enabling MAC authentication on the switch as described in “ set macauthentication ” on page 17 ‐ 24, and then enabling it[...]
-
Página 489
clear macauthentication portquietperiod Enterasys D-Series CLI Reference 17-27 Default s None. Mode Switch command, read ‐ write. Example This example sets port 1 to wai t 5 seconds after a failed authentication attempt before a new attempt can be made: D2(su)[...]
-
Página 490
set macauthentication reauthenticat ion 17-28 Securit y Configuration Mode Switch command, read ‐ write. Default s None. Example This example shows how to force the MAC authentication session for address 00 ‐ 60 ‐ 97 ‐ b5 ‐ 4c ‐ 07 to re ‐ initialize: D2(su)->set macauthen[...]
-
Página 491
set macauthentication macreauthenticate Enterasys D-Series CLI Reference 17-29 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to force ge .2.1 though 5 to reauthenticate: D2(su)->set macauthentication portre authentication ge.2.1-5 set macauthenticati[...]
-
Página 492
clear macauthentication reauthperiod 17-30 Securit y Configuration Parameters Default s None. Mode Switch command, read ‐ write. Usage Changing the Reauth Pe r i o d with the set macauthentication reauthperiod command does not affect current sessions. New sessions will ?[...]
-
Página 493
set macauthentication significant-bits Enterasys D-Series CLI Reference 17-31 set macauthentication significant-bit s Use this command to set the number of significant bits of the MAC address to use for authentication. Synt ax set macauthentication significant-bi ts number Paramete[...]
-
Página 494
clear macauthentication significant-bits 17-32 Securit y Configuration Mode Switch command, read ‐ write. Example This example resets the MAC authentication significant bits to 48. D2(su)->clear macauthentication sign ificant-bits[...]
-
Página 495
Configuring Multiple Authentication Methods Enterasys D-Series CLI Reference 17-33 Configuring Multiple Authentication Methods About Multiple Authentication T ypes When enabled, multiple authentication types allow users to authenticate using more than one method on the same port. ?[...]
-
Página 496
show multiauth 17-34 Securit y Configuration show multiauth Use this command to display multiple authenticati on system configuration. Synt ax show multiauth Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display multiple aut[...]
-
Página 497
set multiauth mode Enterasys D-Series CLI Reference 17-35 set multiauth mode Use this command to set the system authentication mode to allow multi ple authenticators simultaneously (802.1x, PW A, and MAC Authentica tion) on a single port, or to stric[...]
-
Página 498
set multiauth precedence 17-36 Securit y Configuration Example This example shows how to clear the system authentication mode : D2(rw)->clear multiauth mode set multiauth precedence Use this command to set the system’ s multi ple authentication administrative precedenc[...]
-
Página 499
show multiauth port Enterasys D-Series CLI Reference 17-37 Example This example shows how to clear the multiple authenti cation precedence: D2(rw)->clear multiauth precedence show multiauth port Use this command to display multiple authenticati on properties for one or ?[...]
-
Página 500
clear multiauth port 17-38 Securit y Configuration Parameters Default s None. Mode Switch command, read ‐ write. Examples This example shows how to set the port multipl e authenticati on mode to required on ge .3.14: D2(rw)->set multiauth port mode auth -reqd ge.3.14 This exam[...]
-
Página 501
show multiauth station Enterasys D-Series CLI Reference 17-39 Mode Switch command, read ‐ write. Examples This example shows how to clear the port mult iple authentication mode on port ge .3.1 4: D2(rw)->clear multiauth port mode ge .3.14 This example shows how to [...]
-
Página 502
show multiauth idle-timeout 17-40 Securit y Configuration Parameters Default s If no options are specified, multiple au thentication session entries will be displayed for all sessions, authentication types, MAC addresses, and ports. Mode Switch command, read ‐[...]
-
Página 503
set multiauth idle-timeout Enterasys D-Series CLI Reference 17-41 Example This example shows how to display timeout val u e s for an idle session for all authentication types. D2(su)->show multiauth idle-timeout Authentication type Timeout (sec) ------------------- ------------- dot1x 0[...]
-
Página 504
clear multiauth idle-timeout 17-42 Securit y Configuration clear multiauth idle-timeout Use this command to re set th e maximum number of consecutiv e seconds an authenticated sessi on may be idle before termination of the session to its default va l[...]
-
Página 505
set multiauth session-timeout Enterasys D-Series CLI Reference 17-43 Example This example displays the session timeout val u es for all authentication methods. D2(su)->show multiauth session-timeo ut Authentication type Timeout (sec) ------------------- ------------- dot1x 0 pwa 0 mac 0 set multiauth sessi[...]
-
Página 506
clear multiauth session-timeout 17-44 Securit y Configuration clear multiauth session-timeout Use this command to re set th e maximum number of consecutiv e seconds an authenticated sessi on may last before termination of the sessi on to its default val [...]
-
Página 507
Configuring VLAN Authorization (RFC 3580) Enterasys D-Series CLI Reference 17-45 Configuring VLAN Authorization (RFC 3580) Purpose RFC 3580 T unnel Attributes provide a mechanism to contain an 802.1X authentica ted or a MAC authenticated user to a VLAN regardless of[...]
-
Página 508
set policy maptable response 17-46 Securit y Configuration multiauth port command (page 17 ‐ 37) to set the number of RFC 3580 users (numusers ) allowed per Gigabit port. Up to two users can be configured per Gigabit port. Synt ax show [...]
-
Página 509
set vlanauthorization Enterasys D-Series CLI Reference 17-47 When a user successfully authenticates to the network, the RADI US serv er returns an Access ‐ Accept frame. This frame can have many attributes, two of whi ch are a Filter ID [...]
-
Página 510
set vlanauthorization egress 17-48 Securit y Configuration set vlanauthorization egress Controls the modification of the current VLAN egress list of 802.1x authenticated ports for the VLANs returned in the RADIUS authorization filter id string. Synt ax set v[...]
-
Página 511
show vlanauthorization Enterasys D-Series CLI Reference 17-49 Mode Switch command, read ‐ write. Example This example show how to clear VLAN authorization for all ports on slots 3, 4, and 5: D2(rw)->clear vlanauthorization ge.3 -5.* show vlanauthorization Displays the [...]
-
Página 512
show vlanauthorization 17-50 Securit y Configuration authenticated ma c address If authentication has succeeded, displays the MAC addre ss assig ned for egress. vlan id If authentication has succeeded, displays the assig ned VLAN id for ing ress. T able 17-46 show vlanauthorization Ou tput Det ails (Continued) Output Fi eld What It Disp la y s. ..[...]
-
Página 513
Configuring MAC Locking Enterasys D-Series CLI Reference 17-51 Configuring MAC Locking This feature locks a MAC address to one or more ports, preventing connection of unauthorized devices through the port(s). When source MAC addresses are receiv ed o[...]
-
Página 514
show maclock 17-52 Securit y Configuration show maclock Use this command to display the status of MAC locking on one or more port s. Synt ax show maclock [ port-string ] Parameters Default s If port ‐ string is not specif ied, MAC locking status will be ?[...]
-
Página 515
show maclock stations Enterasys D-Series CLI Reference 17-53 show maclock st ations Use this command to display MAC locking information about end stations connected to the switch. Synt ax show maclock stations [firstarrival | static] [ port-string ] Parameters Default s If no parameter[...]
-
Página 516
set maclock enable 17-54 Securit y Configuration set maclock enable Use this command to enable MAC locking globally or on one or more ports. Synt ax set maclock enable [ port ‐ string ] Parameters Default s If port ‐ string is not specif ied, MAC locking[...]
-
Página 517
set maclock disable Enterasys D-Series CLI Reference 17-55 set maclock disable Use this command to disable MAC locking globally or on one or more ports. Synt ax set maclock disable [ port-string ] Parameters Default s If port ‐ string is not specif ied, MAC locking ?[...]
-
Página 518
clear maclock 17-56 Securit y Configuration Mode Switch command, read ‐ write. Usage Configuring a port for MAC locking requires globally enabling it on the swi tch first using the set maclock enable command as described in “ set maclock [...]
-
Página 519
set maclock static Enterasys D-Series CLI Reference 17-57 Example This example shows how to remove a MAC from the list of static MACs allow ed to communicate on port ge .3.2: D2(rw)->clear maclock 0e-03-ef-d8-44 -55 ge.3.2 set maclock st atic Use this command[...]
-
Página 520
set maclock firs tarrival 17-58 Securit y Configuration Mode Switch command, read ‐ write. Example This example shows how to reset the number of allow able static MACs on fe.2.3: D2(rw)->clear maclock static fe . 2.3 set maclock first arrival Use this command to re[...]
-
Página 521
clear maclock firs tarrival Enterasys D-Series CLI Reference 17-59 clear maclock first arrival Use this command to reset the number of first arrival MAC address es allowed per port to the default val u e of 6 00. Synt ax clear maclock firstarrival port-stri ng Param[...]
-
Página 522
clear maclock agefirstarrival 17-60 Securit y Configuration Example This example enables first arrival ag ing on port ge .1.1. D2(su)-> set maclock agefirstarrival ge.1.1 enable clear maclock agefirst arrival Use this command to reset first arriv a l aging on one or more[...]
-
Página 523
set maclock trap Enterasys D-Series CLI Reference 17-61 Usage If there are more first arrival MACs than the allow ed maximum static MACs, then only the latest first arriv al MACs wil l be mov ed to static entries. For example, if you [...]
-
Página 524
Configuring Port Web Authentication (PWA) 17-62 Securit y Configuration Configuring Port W eb Authentication (PW A) About PW A PW A provides a wa y of authenticating users before allowing general access to the netw ork To log on using PW A , the user makes a [...]
-
Página 525
show pwa Enterasys D-Series CLI Reference 17-63 show pwa Use this command to display port web authentication information for one or more ports. Synt ax show pwa [ port-string ] Parameters Default s If port ‐ string is not specif ied, PW A information w ill be [...]
-
Página 526
set pwa 17-64 Securit y Configuration set pwa Use this command to enable or disable port web authentication. Synt ax set pwa { enable | disable } Parameters Default s None. Mode Switch command, read ‐ write. PW A Enhanced Mode Whether PWA enhanced mode is enabled or disabled. Default state of disabled c[...]
-
Página 527
show pwa banner Enterasys D-Series CLI Reference 17-65 Example This example shows how to enable port web authentication: D2(su)->set pwa enable show pwa banner Use this command to display the port web a uthentication login banner string. Synt ax show pwa banner Param[...]
-
Página 528
clear pwa banner 17-66 Securit y Configuration clear pwa banner Use this command to reset the PW A log in banner to a blank string. Synt ax clear pwa banner Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the[...]
-
Página 529
set pwa ipaddress Enterasys D-Series CLI Reference 17-67 set pwa ip address Use this command to set the PW A IP address. This is the IP addres s of the end statio n from which PW A will prevent network access until the user is authent[...]
-
Página 530
set pwa guestname 17-68 Securit y Configuration set pwa guestname Use this command to set a guest user name for PW A netw orking. PW A will use this name to grant network access to guests without established login names and passw ords. Sy[...]
-
Página 531
set pwa guestpassword Enterasys D-Series CLI Reference 17-69 set pwa guestp assword Use this command to set the guest user password for PW A networking. Synt ax set pwa guestpassword Parameters None. Default s None. Mode Switch command, read ‐ write. Usage PW A will use this [...]
-
Página 532
set pwa initialize 17-70 Securit y Configuration Usage PW A will use a guest passw ord and guest user name to grant network access with default policy privileges to users without establishe d login names and passwords. Example This example sh[...]
-
Página 533
set pwa maxrequest Enterasys D-Series CLI Reference 17-71 Default s If port ‐ string is not specif ied, quiet period will be set for all ports. Mode Switch command, read ‐ write. Example This example shows how to set the PW A quiet period to 30 ?[...]
-
Página 534
show pwa session 17-72 Securit y Configuration Parameters Default s If port ‐ string is not specif ied, PW A will enabled on all ports. Mode Switch command, read ‐ write. Example This example shows how to enable PW A on ports 1 ‐ 22: D2(su)->set pwa portcon[...]
-
Página 535
set pwa enhancedmode Enterasys D-Series CLI Reference 17-73 set pwa enhancedmode This command enables PW A URL redirection. The switch intercepts all HTTP packets on port 80 from the end user , and sends the end user a refresh page destined ?[...]
-
Página 536
Configuring Secure Shell (SSH) 17-74 Securit y Configuration Configuring Secure Shell (SSH) Purpose To review , enable, disable, and configure the Secure Shell (SSH) protocol, which provides secure Te l n e t . Commands show ssh st atus Use this command to display the ?[...]
-
Página 537
set ssh hostkey Enterasys D-Series CLI Reference 17-75 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to disable SSH: D2(su)->set ssh disable set ssh hostkey Use this command to set or reinitialize new SSH authenticati on k[...]
-
Página 538
set ssh hostkey 17-76 Securit y Configuration[...]
-
Página 539
Index-1 Index Numerics 802.1D 8-1 802.1p 11 -1 7 , 12-1 802.1Q 9-1 802.1s 8-1 802.1w 8-1 802.1x 17-5 , 17-19 A Advertised Ability 6-15 Alias node 14-34 Authentication EAPOL 17-19 MAC 17-21 Port web 17-62 RADIUS server 17-5 , 17-8 SSH 17-75 Auto-negotiation 6-15 B banner motd 2-21 Baud Rate 2-28 Broadcast suppression, enabling on ports 6-30 C CDP Di[...]
-
Página 540
Index- 2 profiles 11 -1 , 11 -1 7 Port Mirroring 6-33 Port Priority configuring 12-1 Port String syntax used in the CLI 6-1 Port Trunking 6-36 Port web authenti cation configuring 17-62 Port(s) alias 6-8 assignment scheme 6-1 auto-negotiation and adverti s ed ability 6-15 broadcast suppression 6-30 counters, reviewing statistics 6-5 duplex mode, se[...]