Instruction/ maintenance manual of the product PC6224 Dell
Go to page of 1356
Dell PowerConnect 6200 Series System CLI Reference Guide Regulatory Models: PC6224, PC6248, PC6224P , PC6248P , and PC6224F.
Notes NOTE: A NOTE indica tes imp ortan t inf ormat ion t hat hel ps you mak e bett er us e of your co mputer . ________ _________ Information in this publication is subject to change without notice.
Content s 3 Contents 1 Command Groups . . . . . . . . . . . . . . . . . . 59 Introd uction . . . . . . . . . . . . . . . . . . . . . . . 59 Comman d Groups . . . . . . . . . . . . . . . . . . . . 59 Mode T ypes . . . . . . . . . . . . . . . . . . . . .
4 Conte nts aaa au thenticati on login . . . . . . . . . . . . . . . . 194 aaa au thorizatio n network d efault rad ius . . . . . . . 196 enabl e aut henti catio n . . . . . . . . . . . . . . . . . 197 enabl e passwo rd . . . . . . . . . . . . . . . .
Content s 5 show ip acce ss-lists . . . . . . . . . . . . . . . . . . . 218 show ma c ac cess-l ist . . . . . . . . . . . . . . . . . . 219 5 Address T able Commands . . . . . . . . . . . 221 bridg e addres s . . . . . . . . . . . . . . . . . . . . . .
6 Conte nts 6 CDP Interoperability Commands . . . . . . 241 clea r isdp coun ters . . . . . . . . . . . . . . . . . . 242 clea r isdp table . . . . . . . . . . . . . . . . . . . . . 242 isdp adv ertise-v2 . . . . . . . . . . . . . . . . . . . . 243 isd p enab le .
Content s 7 8 DHCP Snooping Commands . . . . . . . . . . 261 clear ip dhcp snoopi ng stat isti cs . . . . . . . . . . . . 262 ip dhcp sn ooping . . . . . . . . . . . . . . . . . . . . . 262 ip dhc p snoopi ng bindin g . . . . . . . . . . . . . . . . 263 ip dhc p snoopi ng databas e .
8 Conte nts ip arp inspectio n trust . . . . . . . . . . . . . . . . . 279 ip arp inspection v alidate . . . . . . . . . . . . . . . 280 ip arp inspectio n vlan . . . . . . . . . . . . . . . . . 281 permit ip ho st mac host . . . . . . . . . . . . . .
Content s 9 show inte rface s de tail . . . . . . . . . . . . . . . . . . 303 show inte rface s st atus . . . . . . . . . . . . . . . . . 307 show sta tist ics ethe rnet . . . . . . . . . . . . . . . . . 310 show s torm- contr ol . . . . . . . . . . .
10 Conte nts 12 IGMP Snooping Commands . . . . . . . . . . 333 ip igmp snooping (g lobal) . . . . . . . . . . . . . . . 33 4 ip igmp snooping (i nterface) . . . . . . . . . . . . . . 334 ip igmp s noopin g host- time- out . . . . . . . . . . . . 335 ip igmp snooping le ave-time-out .
Content s 11 ip igmp s nooping q uerier versio n . . . . . . . . . . . . 351 show ig mp snoop ing quer ier . . . . . . . . . . . . . . 352 14 IP Addressing Commands . . . . . . . . . . . 355 clear ho st . . . . . . . . . . . . . . . . . . . . . . . . 356 ip a ddre ss .
12 Conte nts 15 IPv6 Access List Commands . . . . . . . . . 371 {deny | permit} . . . . . . . . . . . . . . . . . . . . . 372 ipv6 acc ess- list . . . . . . . . . . . . . . . . . . . . 374 ipv6 acc ess- list re name . . . . . . . . . . . . . . . . 375 ipv6 traff ic-filter .
Content s 13 18 LACP Commands . . . . . . . . . . . . . . . . . . 393 lacp po rt- priori ty . . . . . . . . . . . . . . . . . . . . . 394 lacp sy stem-p riority . . . . . . . . . . . . . . . . . . . 394 lacp t imeo ut . . . . . . . . . . . . . . . . .
14 Conte nts lldp med . . . . . . . . . . . . . . . . . . . . . . . . 413 lldp med config notification . . . . . . . . . . . . . . 414 lldp med fast startrepeatco unt . . . . . . . . . . . . . 414 lldp med transmit- tlv . . . . . . . . . . . . . . . .
Content s 15 21 Port Channel Commands . . . . . . . . . . . . 439 channe l- group . . . . . . . . . . . . . . . . . . . . . . 440 inte rface port -chan nel . . . . . . . . . . . . . . . . . . 441 inte rface rang e port -cha nnel . . . . . . . . . . . .
16 Conte nts cos- queue min -bandw idth . . . . . . . . . . . . . . . 461 cos- queue s trict . . . . . . . . . . . . . . . . . . . . 462 diffser v . . . . . . . . . . . . . . . . . . . . . . . . . 463 drop . . . . . . . . . . . . . . . . . . . . . . .
Content s 17 match src ip6 . . . . . . . . . . . . . . . . . . . . . . . 479 match src l4port . . . . . . . . . . . . . . . . . . . . . 480 match vla n . . . . . . . . . . . . . . . . . . . . . . . . 481 mirror . . . . . . . . . . . . . . . . . . . . .
18 Conte nts 24 RADIUS Commands . . . . . . . . . . . . . . . . 505 aaa acco unt ing net work defaul t start -stop group ra dius . . . . . . . . . . . . . . . . . . . . . . 506 acct- port . . . . . . . . . . . . . . . . . . . . . . . . 506 auth-po rt .
Content s 19 source-ip . . . . . . . . . . . . . . . . . . . . . . . . . 525 timeo ut . . . . . . . . . . . . . . . . . . . . . . . . . . 525 usage . . . . . . . . . . . . . . . . . . . . . . . . . . . 526 25 Spanning T ree Commands . . . . . . . . . .
20 Conte nts spanni ng-t ree max- hops . . . . . . . . . . . . . . . . 552 spanni ng-t ree mode . . . . . . . . . . . . . . . . . . 553 spanni ng-t ree mst 0 ex ternal -cost . . . . . . . . . . . 553 spanni ng-t ree mst co nfigu ration . . . . . . . .
Content s 21 pr ior ity . . . . . . . . . . . . . . . . . . . . . . . . . . 571 show tacac s . . . . . . . . . . . . . . . . . . . . . . . 572 tacac s-ser ver host . . . . . . . . . . . . . . . . . . . . 573 tacac s-ser ver key . . . . . . . . . . . .
22 Conte nts show vla n associa tion ma c . . . . . . . . . . . . . . 594 show vla n assoc iation su bnet . . . . . . . . . . . . . 595 swi tchport ac cess vlan . . . . . . . . . . . . . . . . 59 6 swit chport forb idden vlan . . . . . . . . . . . . .
Content s 23 vlan p rotocol group re move . . . . . . . . . . . . . . . 612 vlan r outing . . . . . . . . . . . . . . . . . . . . . . . 613 29 V oice VLAN Commands . . . . . . . . . . . . . 615 voice vl an . . . . . . . . . . . . . . . . . . . . . . .
24 Conte nts dot1x timeou t tx-period . . . . . . . . . . . . . . . . 63 2 show d ot1x . . . . . . . . . . . . . . . . . . . . . . . 633 show do t1x clients . . . . . . . . . . . . . . . . . . . 636 show do t1x etherne t . . . . . . . . . . . . . . . .
Content s 25 ip proxy-arp . . . . . . . . . . . . . . . . . . . . . . . 657 show a rp . . . . . . . . . . . . . . . . . . . . . . . . . 657 32 DHCP and BOOTP Relay Commands . . . 659 boot pdhcprela y cidridoptm ode . . . . . . . . . . . . . 660 bootp dhcp relay maxh opcou nt .
26 Conte nts show ipv6 dhcp bi ndi ng . . . . . . . . . . . . . . . . 675 show ipv6 dhcp i nte rface . . . . . . . . . . . . . . . 67 6 show ipv6 dhcp po ol . . . . . . . . . . . . . . . . . . 678 show ipv 6 dhcp st atist ics . . . . . . . . . . . . .
Content s 27 ip igmp robustn ess . . . . . . . . . . . . . . . . . . . . 694 ip igmp startu p-query-coun t . . . . . . . . . . . . . . . 694 ip igmp startup-q uery-interval . . . . . . . . . . . . . . 695 ip igmp version . . . . . . . . . . . . . . . .
28 Conte nts 37 IP Helper Commands . . . . . . . . . . . . . . . 711 clear ip helper sta tistics . . . . . . . . . . . . . . . . 712 ip helper -add ress (global c onfiguration ) . . . . . . . 712 ip helper -add ress (interfa ce configura tion) . . . .
Content s 29 show ip r oute . . . . . . . . . . . . . . . . . . . . . . 734 show ip r oute pre feren ces . . . . . . . . . . . . . . . 735 show i p ro ute summary . . . . . . . . . . . . . . . . . 736 show i p sta ts . . . . . . . . . . . . . . . . . .
30 Conte nts ipv6 pimsm dr-priori ty . . . . . . . . . . . . . . . . . 755 ipv6 pimsm hell o-interval . . . . . . . . . . . . . . . 755 ipv6 pimsm jo in-prune-inter v al . . . . . . . . . . . . 756 ipv6 pi msm regist er - thres hold . . . . . . . . . .
Content s 31 ipv6 ml d last- member-query -coun t . . . . . . . . . . . 774 ipv6 ml d last- member-query -inte rval . . . . . . . . . . 774 ipv6 mld- proxy . . . . . . . . . . . . . . . . . . . . . . 775 ipv6 mld-pro xy reset-stat us . . . . . . . . .
32 Conte nts ipv6 ro ute di stance . . . . . . . . . . . . . . . . . . . 791 ipv6 un icast-routing . . . . . . . . . . . . . . . . . . 792 ping ipv6 . . . . . . . . . . . . . . . . . . . . . . . . 792 ping ipv6 interfa ce . . . . . . . . . . . . . . .
Content s 33 show i pv6 vlan . . . . . . . . . . . . . . . . . . . . . . 819 tracerou te ipv6 . . . . . . . . . . . . . . . . . . . . . . 820 42 Loopback Interface Commands . . . . . . . 823 inte rf ace lo opba ck . . . . . . . . . . . . . . . . . . .
34 Conte nts ip pimsm ssm . . . . . . . . . . . . . . . . . . . . . . 839 show brid ge mu lticas t ad dre ss-tabl e co unt . . . . . 840 show i p mc ast . . . . . . . . . . . . . . . . . . . . . 841 show ip mc ast boun dary . . . . . . . . . . . . . .
Content s 35 area ra nge . . . . . . . . . . . . . . . . . . . . . . . . 861 area s tub . . . . . . . . . . . . . . . . . . . . . . . . . 862 area stub no-summa ry . . . . . . . . . . . . . . . . . . 863 area virt ual -lin k . . . . . . . . . . . . . .
36 Conte nts ip ospf auth ent icati on . . . . . . . . . . . . . . . . . 880 ip ospf cost . . . . . . . . . . . . . . . . . . . . . . . 881 ip ospf dead- inte rva l . . . . . . . . . . . . . . . . . . 881 ip os pf he llo- int erva l . . . . . . . . . .
Content s 37 show ip o spf abr . . . . . . . . . . . . . . . . . . . . . 903 show ip o spf area . . . . . . . . . . . . . . . . . . . . 903 show ip o spf asbr . . . . . . . . . . . . . . . . . . . . 905 show ip o spf databa se . . . . . . . . . . . . .
38 Conte nts area ns sa no-su mmary . . . . . . . . . . . . . . . . . 931 area ns sa tran slato r-role . . . . . . . . . . . . . . . . 932 area ns sa tran slat or-stab-in tv . . . . . . . . . . . . . 933 area range . . . . . . . . . . . . . . . . . . .
Content s 39 ipv6 o spf hello-in terval . . . . . . . . . . . . . . . . . 949 ipv6 o spf mtu-i gnore . . . . . . . . . . . . . . . . . . . 950 ipv6 o spf network . . . . . . . . . . . . . . . . . . . . 950 ipv6 o spf priorit y . . . . . . . . . . . . .
40 Conte nts show ip v6 ospf databa se databas e-summ ary . . . . . 972 show ipv6 ospf in terface . . . . . . . . . . . . . . . . 973 show ipv6 ospf in terface brief . . . . . . . . . . . . . 974 show ipv6 os pf interface stats . . . . . . . . . . . .
Content s 41 show ip pimsm inte rface . . . . . . . . . . . . . . . . 992 show i p p imsm n eighb or . . . . . . . . . . . . . . . . 993 show i p p imsm rp hash . . . . . . . . . . . . . . . . . . 994 48 Router Discovery Protocol Commands . . . . . . .
42 Conte nts hostr outesac cept . . . . . . . . . . . . . . . . . . . . 1012 ip rip . . . . . . . . . . . . . . . . . . . . . . . . . . 1013 ip rip au then ticat ion . . . . . . . . . . . . . . . . . . 1013 ip rip receive v ersion . . . . . . . . . . .
Content s 43 52 Vi rtual Router Redundancy Protocol Commands . . . . . . . . . . . . . . 1031 ip vrrp . . . . . . . . . . . . . . . . . . . . . . . . . 1032 ip vrrp authe ntication . . . . . . . . . . . . . . . . . 1033 ip vrrp ip . . . . . . . . . . .
44 Conte nts 54 Captive Portal Commands . . . . . . . . . . 1049 authen tication timeout . . . . . . . . . . . . . . . . . 1051 captiv e-portal . . . . . . . . . . . . . . . . . . . . . 1051 enabl e . . . . . . . . . . . . . . . . . . . . . . . . . 1052 http po rt .
Content s 45 show capti ve-po rtal cli ent st atu s . . . . . . . . . . . 1064 show cap tive- por tal c onf igura tio n cl ient sta tus . . . 1066 show capti ve-po rtal in terfac e cl ient stat us . . . . . 1067 show capti ve-po rtal in terfac e co nfigu rat ion status .
46 Conte nts 55 Clock Commands . . . . . . . . . . . . . . . . . 108 3 show cl ock . . . . . . . . . . . . . . . . . . . . . . . 1083 show sntp configura tion . . . . . . . . . . . . . . . . 1084 show sn tp statu s . . . . . . . . . . . . . . . . . . .
Content s 47 copy . . . . . . . . . . . . . . . . . . . . . . . . . . 1101 delete ba ckup-con fig . . . . . . . . . . . . . . . . . 1104 delete ba ckup-ima ge . . . . . . . . . . . . . . . . . 1105 delete st artup-co nfig . . . . . . . . . . . . . . .
48 Conte nts dos-co ntrol tcpfra g . . . . . . . . . . . . . . . . . . . 1123 ip icmp echo-reply . . . . . . . . . . . . . . . . . . . 1124 ip icmp error -interval . . . . . . . . . . . . . . . . . 1125 ip unr eachabl es . . . . . . . . . . . . . . . .
Content s 49 show ma nage ment ac cess- class . . . . . . . . . . . 1143 show ma nage ment ac cess- list . . . . . . . . . . . . 1144 60 Password Management Commands . . . . . . . . . . . . . . . . . . . . . . 1145 password s aging . . . . . . . . . .
50 Conte nts power inl ine traps . . . . . . . . . . . . . . . . . . . 1161 power inline usag e-thresh old . . . . . . . . . . . . . 1161 show poe- firmware- version . . . . . . . . . . . . . . 1162 show po wer inline . . . . . . . . . . . . . . . . .
Content s 51 debug clear . . . . . . . . . . . . . . . . . . . . . . 1190 debug c ons ole . . . . . . . . . . . . . . . . . . . . . 1190 debug dot1x . . . . . . . . . . . . . . . . . . . . . . 1191 debug i gmpsnoo ping . . . . . . . . . . . . . . . . .
52 Conte nts debug r ip . . . . . . . . . . . . . . . . . . . . . . . . 1205 debug sf low . . . . . . . . . . . . . . . . . . . . . . 1205 debug sp anni ng-t ree . . . . . . . . . . . . . . . . . . 1206 show debugg ing . . . . . . . . . . . . . . . . .
Content s 53 show s nmp vi ews . . . . . . . . . . . . . . . . . . . 1227 show trap flags . . . . . . . . . . . . . . . . . . . . . 1229 snmp-serve r community . . . . . . . . . . . . . . . . 1230 snmp-server commu nity-group . . . . . . . . . . . . 1 232 snmp -server co ntact .
54 Conte nts ip ssh serv er . . . . . . . . . . . . . . . . . . . . . . 1254 key-string . . . . . . . . . . . . . . . . . . . . . . . . 1254 show cry pto key mypu bkey . . . . . . . . . . . . . . 1256 show c rypto key pubk ey-cha in ssh . . . . . . . .
Content s 55 show loggi ng . . . . . . . . . . . . . . . . . . . . . . 1272 show logg ing file . . . . . . . . . . . . . . . . . . . 1274 show s yslog -serv ers . . . . . . . . . . . . . . . . . . 1275 69 System Management Commands . . . . 1277 asset-ta g .
56 Conte nts show me mory cp u . . . . . . . . . . . . . . . . . . . 1294 show n sf . . . . . . . . . . . . . . . . . . . . . . . . 1295 show p roce ss cp u . . . . . . . . . . . . . . . . . . . 1296 show se ssio ns . . . . . . . . . . . . . . . . . .
Content s 57 telnet . . . . . . . . . . . . . . . . . . . . . . . . . . 1325 trac erout e . . . . . . . . . . . . . . . . . . . . . . . 1327 70 T elnet Server Commands . . . . . . . . . . . 1331 ip telnet serv er disable . . . . . . . . . . . . . . . .
58 Conte nts ip http server . . . . . . . . . . . . . . . . . . . . . . 1346 ip https certificate . . . . . . . . . . . . . . . . . . . 1347 ip https port . . . . . . . . . . . . . . . . . . . . . . . 1347 ip https server . . . . . . . . . . . . . . .
Command Grou ps 59 1 Command Groups Introduction The Command Line Interface (CLI) is a network management application operated throug h an ASCII terminal without the use of a Graphic User Interface (GUI) driven software application. By dire ctly entering commands, the user has greater configuration flexib ility .
60 Command G roups Address T able Configu res bridgi ng ad dress tab les. CDP Interoperability Configur e s Cisco Discovery P rotocol (CDP). DHCP l2 Relay Enables the Layer 2 DHCP Relay agen t for an inte rf ace. DHCP Snooping Configures DHCP s nooping and whether an interface is trus ted for fi lterin g.
Command Grou ps 61 Span ning T ree Confi gures and r eports on Spanning T re e protoco l. Swi tchpo rt V oice Con figur es the Auto V oIP f eatur e. T ACACS+ Configures and d i splays T ACA CS+ information. VLAN Configures VLAN s and di splays VL AN informat ion.
62 Command G roups Router Dis covery P rotocol (IPv4) Manages router discovery ope rations. Routing Info rmation P rotocol (IPv4) Conf igures RIP ac tivities . T unn el In terf ace ( IPv6) Manag ing t unnel ing operat ions. Vir tu a l L A N Ro u ti n g (IPv 4) Controls virtual LA N routing.
Command Grou ps 63 SNMP Configures SNMP communities, traps and displays SNMP informat ion. SSH Configu res SSH authentication. Syslog Man ages and d isplays syslo g messages . Sys tem Manage ment Confi gures the sw itch cloc k, name and auth orized u sers.
64 Command G roups Mode T ypes The tables on the following p ages use these abb reviations for Command Mode names. • ARP A — ARP ACL Configuration • CC — Cry pto Co nfiguration • CP — Cap .
Command Grou ps 65 •S K — S S H P u b l i c K e y - c h a i n • TC — T ACA CS Conf igur ati on • UE — User EX EC • VL AN — V LAN Configurat ion • v6ACL — IPv6 Access List Configura.
66 Command G roups ACL show authenti cation methods Shows information about authentication methods PE show user accounts Display s information about the local user datab ase PE show users l ogin-hi sto ry Displ ays in forma tion a bout lo gin hi storie s of users PE username Establis hes a use rname-b ased aut hentica tion syst em.
Command Grou ps 67 Address T able show ip access-l i sts Displays an Access Control List (ACL) and all of the rules t hat ar e defined for the ACL. PE show mac access-li st Displays a MA C access list and all of t h e rules that ar e defined for the A CL.
68 Command G roups CDP Interope rability show bridge ad dres s-table stati c Displa ys sta ticall y created en tries in the bri dge- forwarding database. PE show b ridge mult icast addr ess-table Displa ys Mult icast MA C addr ess tab le informat ion.
Command Grou ps 69 DHCP l2 Relay DHCP Snooping Comman d Descriptio n Mode* dhcp l2rela y Enables the Lay er 2 DHCP Rela y agent fo r an int erface. GC/I C dhcp l2rela y circu it-id Enables user to set the DH CP Optio n 82 Circuit ID for a VLAN. GC dhcp l2relay remote-id Enables user to s et the DHCP Option 82 Remote ID for a VLAN.
70 Command G roups Dynamic ARP Inspe ction ip dhcp s nooping trust Configure a port as trusted for DHCP snooping. IC ip dhcp snoopin g verify mac-address Enables the verification of the source MA C address wit h the cl ient MAC address in the received DHCP mes sage.
Command Grou ps 71 Ethernet Configuration ip arp inspection vlan Enables Dynami c ARP Inspe c tion on a single VLAN or a range of VLA Ns. GC permit ip host ma c host Configures a rule for a valid IP ad d ress an d MAC address combination used in A RP packet validati on.
72 Command G roups GVRP negotiation Enables auto-negotiation operation for the speed and duplex parameters of a given interfa ce. IC show interfaces advertise Displays information about au to negotiation adver tisemen t. PE show interfa ces configur ation Displa ys the co nfigu ratio n for all confi gured interfa ces.
Command Grou ps 73 IGMP Snooping gvrp enable (interface) Enables GVRP on an interface . IC gvrp regis tration- forbid De- regi sters all VLANs, an d pr events d ynamic VLAN registration on the port. IC gvrp vlan-creation-forbid Enables or disables dynamic V LAN creation.
74 Command G roups IGMP Snoopi ng Querier ip ig mp snoop ing ( VLAN ) In VLAN Config mo de, ena bles IGMP snoop ing on a particular VLAN or on all interfaces parti cipatin g in a VL AN. VLAN ip igmp snooping fa st-leave Enables or disables IGMP Snooping fast-leave mode on a selected VL A N.
Command Grou ps 75 IP Addressi ng Comman d Descriptio n Mode* clear host Delete s entries from the host name- to-addr ess cache PE helper address Enabl e forwarding User Datagra m Protocol (UDP) B roadcast pack ets rec eived on an int erface. IC ip addr ess Sets a manage ment IP addre ss on the switch.
76 Command G roups IPv6 ACL IPv6 MLD Snoop ing Comma nd Descriptio n Mode* {deny | permit} Creates a new rule for the current IPv6 access list. v6A C L ipv6 access -list Creat es an IPv6 Access Control List (A CL) consistin g of classi ficati on fields defi ned fo r the IP header of an IP v6 frame.
Command Grou ps 77 IPv6 MLD Snooping Querier iSCSI Optimi zation show ipv6 mld s n ooping Displays MLD Snooping information. PE show ipv6 mld s noopin g groups Display s the MLD Sno oping ent ries in the MFDB table. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64.
78 Command G roups LACP Link Dependen cy Comma nd Descriptio n Mode* lacp port-priority Configu res the priority value for physical ports . IC lacp system-pri ority Configures the system LACP priority . GC lacp timeou t Assigns an admi nistrat ive LA CP timeou t.
Command Grou ps 79 LLDP no depends-on port- channe l Removes the depend ent port-ch annel s list . Link Depend ency show lin k-depe ndenc y Sho ws the l ink depend encie s config ured on a particular group. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64.
80 Command G roups Port Channel show lldp st atistics Disp lays th e current LLDP traffi c statis tics. PE lldp med Enables/d isables LLDP -MED on an inte rface. IC lldp med tr ansm it- tlv Spwcifie s which o ptiona l TL Vs in the L LDP MED set are trans mitte d in the LLDP DUs.
Command Grou ps 81 Port Monitor QoS show interfaces port - channe l Displa ys port-c hannel informa tion. P E show statisti cs port-channel Dis plays port-c hannel st atistics . PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64.
82 Command G roups conform-color Specifies for each ou tcome, the on ly possible actions ar e drop, setdscp-transmit, set-prec- transm it, o r transmi t PCM C cos-queue min -bandwidth Specifies th e minimu m transmission ban dwidth for each interf ace queue.
Command Grou ps 83 match ds tl4port Adds to th e speci fied cl ass def initi on a match condi tion b ased o n the d estin atio n layer 4 port of a packet using a single keywor d, or a n umeric notati on. CMC match et hertyp e Adds to th e speci fied cl ass def initi on a match condi tion base d on the v alue o f the et hertype.
84 Command G roups match vl an Adds to the spe ci fied cla ss defini tio n a match condit ion bas ed on the va lue of the layer 2 VLAN I den tifier fiel d. CMC mir ror Mirro rs all t he data that ma tches th e class defined to the de stina tion port spe cified PCM C police-simple Establishes the traffic policing s tyle for the specif ied class.
Command Grou ps 85 Radius show policy-map Displays all configuration information for the spec ified poli cy . PE show policy-map interfac e Di splays poli cy-orient ed st atistics information for the .
86 Command G roups Spanning T ree radius-server de adtime Improves RADIUS r esponse t imes when ser vers are u n available. Causes the unavailable servers to be skipped.
Command Grou ps 87 instanc e (mst) Maps VLANs to an MST instan ce. MC name (ms t) Defin es the MST co nfigur ation na me. MC revision (ms t) Defines the confi guratio n revisi on number . MC show sp annin g-tree Di splay s span ning tree conf igur ation.
88 Command G roups spanni ng-tree mst configur ation Enables configu ring a n MST region by en tering the mult iple spanni ng-tree (MST) mode . GC spanni ng-tree mst 0 ext e rn al - co s t Sets the ext ernal co st for the common sp anning tree. IC spanning-t ree mst cost Configu res the path cost for multip le spanning tree (MS T) calcu latio ns.
Command Grou ps 89 Switchport V oice T ACACS+ VLAN Comman d Descriptio n Mode* switch port v oice de tect auto Enables the V oIP Profile on all the in terface s of the sw itch. GC/I C show switchport voice Displays the s t atus of auto-voip on an i n terface or all interfaces.
90 Command G roups inte rface r ange vl an Enters the inte rface c onfigur ation mo de to confi gure m ultiple VL ANs. GC mode dvla n-tu nnel Enables Doubl e VLAN t unnel ing on th e specif ied inte rface IC name Conf igures a name to a VLAN. IC protocol group Attaches a vlanid to the protocol-based VLAN identi fied by groupid .
Command Grou ps 91 switchport gene ral allowed vlan Adds or removes VLANs from a port in General mode. IC switchport ge neral ingress- filterin g disable Disabl es port in gress filt ering. IC switch port gene ral pvid Co nfigu res the PVID w hen the int erfac e is in general mod e.
92 Command G roups V oice VLAN 802.1x Comma nd Descriptio n Mode* voic e vlan Enables th e voice VLAN cap ability on th e swit ch. GG voic e vlan Enables th e voice VLAN cap ability on th e interfa ce IC voic e vlan data prior ity T rusts or not tr usts the dat a traffic ar riving on the voice VLAN port.
Command Grou ps 93 dot1x ti meout se rver- timeou t Sets th e number of sec onds the switc h waits for a response from th e authen tica tion se rver be fo re re s e n d i n g t h e r e q u e s t .
94 Command G roups Layer 3 Commands ARP (IPv4) Comma nd Descriptio n Mode* arp Creat e s an Addr ess Resolution P rotocol (ARP) entry . GC arp cachesize Configu res the maximum number of entri es in the ARP cach e. GC arp dynami crenew Enables the ARP componen t to auto matical ly renew dynamic ARP entri es when they age out .
Command Grou ps 95 DHCP and BOOTP Relay (IP v4) DHCPv6 Comman d Descriptio n Mode* bootpdhcprelay cidridoptmode Enables the circuit ID option and r emote agent ID mode for BootP/DHCP Relay on the system. GC bootpdhcprelay maxhopc ount Configures the maximum allowable relay agent hops for BootP/DHCP Relay on the system.
96 Command G roups DVMRP service dhcpv6 Enables DHCPv6 con figura tion on t he router . GC show ipv6 dhcp Display s the DHCP v6 server nam e and statu s. PE show ipv6 dhcp binding Dis plays the conf igured DHCP pool. PE show ipv6 dhcp interface Displays DHCPv6 information for all relevant inter faces or a specif ied inte rface.
Command Grou ps 97 IGMP Comman d Descri ption Mode* ip ig mp Sets the ad ministrat ive mod e of IGM P in the syst em to ac tive. GC ip igmp last-member-query- count Sets the nu mber of Group-Specif ic Querie s sent befo re the router assumes th at there are no l ocal me mbers on the inte rface.
98 Command G roups IGMP Proxy IP He lper show ip igmp int erface membership Displ ays the list of interfac es that have r egister ed in t he multic ast gro up. PE show ip igmp int e rface stats Displays the IGMP st atistical information for the in terface .
Command Grou ps 99 IP Routing ip helper e n able Enables r e lay of UDP pack ets. GC show ip helper -addre ss Displays t he IP helper ad dres s configuration . PE show ip helper s tatistics Displays the number of DHCP and other UDP packets processed and relayed by the UDP relay agent.
100 Command G roups IPv6 Mult icast show ip rou te pr efer ences Dis plays det ailed i nforma tion abo ut the route preferences. PE show ip route sum mar y Shows th e number of all rout es, in cluding best and non- best rout es.
Command Grou ps 101 IPv6 Routin g ipv6 pimsm spt-thr eshold Config ures the Data Thre shold ra te for the last hop router to switc h to th e shorte st pat h. GC ipv6 pi msm s sm D efin es the Source Sp ecific Mu ltica st ( SSM) range of multicast addresses.
102 Command G roups ipv6 host Define s stat ic host na me-to- i pv6 a ddress mapping in the host cache. GC ipv6 mld l ast-member- query-c ount Sets t he numbe r of lis tener-specific quer ies s ent before the router as sumes t hat th ere are no local memb ers on the in terface .
Command Grou ps 103 ipv6 nd ra-inter val Sets th e transmi ssion int erval betwe en rout er advertisements. IC ipv6 nd ra-li fetime Sets th e value that is place d in the Route r Lifetime field of the ro uter advertis ements sent from the int erface.
104 Command G roups show ipv6 mld-proxy groups Displays information abou t multicast grou ps that the MLD Proxy reported. PE show ipv6 mld-proxy groups detai l Displays information abou t multicast grou ps that MLD Proxy reported. PE show ipv6 mld-proxy inter face Display s a detailed list of th e host int erface status parameters.
Command Grou ps 105 Loopback Interface Multic ast Comman d Descriptio n Mode* interface loopb ack Ent ers the Inte rface Loopback configuration mode. GC show interface loopback Displays information about configured loopback interface s. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64.
106 Command G roups ip pimsm rp-address Statically configures the RP address for one or more multicast groups. GC ip pimsm rp-candidate Configu res the router to advertise itself as a PIM ca ndidate rende zvous poin t (RP) t o the bootstrap router (BSR).
Command Grou ps 107 OSPF show ip pimsm rp mapping Displays al l group-to-RP mappings of whic h the route r is awar e (either conf igure d or learned from the bootstrap router). PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64.
108 Command G roups ar ea virtual -link dead- inter val Configures the d ead interval for th e OSPF virtu al inte rface on the vir tual inte rface ide ntifie d by area-id and ne ighbo r router .
Command Grou ps 109 ip ospf c ost Config ures the co st on an OSPF int e rface. IC ip ospf de ad-inte rval Sets the OSPF d ead inte rval for th e speci fied interfa ce. IC ip ospf hell o-inter val Sets th e OSPF he llo in terval for the spe cified interfa ce.
110 Command G roups passive- interf ace (r outer mode) Sets the in terf ace or tu nnel as pass ive. R OSPF redistribute Configur es OSPF protocol to allow redistribution of routes fr om the spe cified so urce protocol/routers. ROSPF rou ter -id Sets a 4-dig it dotted -decima l number unique ly iden tifying the rou ter OSPF I D.
Command Grou ps 111 OSPFv3 show ip ospf vi rt ual-link Di s plays th e OSPF Virtual Int erface in formation for a specific ar ea and neighbor . PE show ip ospf vi rt ual-link brief Displays the OSPF Virtual Interface informati on for a ll ar eas in th e system .
112 Command G roups ar ea virt ual-link Cr eates t he OSPF virtual interf ace for the specifi ed areaid and neigh bor . ROSV3 ar ea virtual -link dead- inter val Configures the d ead interval for th e OSPF virtu al inte rface on the vir tual inte rface ide ntifie d by areai d and neigh bor .
Command Grou ps 113 ipv6 ospf mtu-ignore Dis ables OSPF maximum transmission unit (MTU) m ismatch detec tion . IC ipv6 os pf ne twork Chang es t he d efault OSPF net work type for the interfa ce. IC ipv6 ospf pri ority Sets the OSPF prio rity fo r the spe cified r outer interfa ce.
114 Command G roups PIM-DM show ipv6 ospf inte rface Dis plays the info rmation fo r the IFO ob ject or virtual inte rface table s. PE show ipv6 ospf interface brief Displays brief information for the IFO object or virtual inte rface table s. PE show ipv6 ospf interface stats Displays the stat istic s for a spec ific inte rface .
Command Grou ps 115 PIM-SM show ip pimd m interface stats Displ ays th e stati stical infor matio n for PIM- DM on the sp ecifie d interfa ce. UE show ip pimd m n eighbor Displ ays the neighbor informati on for PIM-DM on th e specif ied int erface. PE *NOTE: For the meanin g of ea ch Mode abb reviat ion , see "Mod e T ypes" on page 64.
116 Command G roups Router Di scovery Pr otocol show ip pimsm Displays th e system -wide informati on for PIM- SM. PE show ip pimsm i nterface Di splays interface information for PIM-SM on the speci fie d interfa ce. PE show ip pimsm neighbor Displays neighbor information for PIM-SM on the speci fie d interfa ce.
Command Grou ps 117 Routing Inf ormation Proto col Command Descript ion Mode* auto-summary Enables the RIP auto-su mmarization mode. RIP defaul t-inf orma tion origin ate Control s the adver tiseme nt of defau lt route s. RIP default-m etric Sets a d efault for the me tric of di stribu ted routes.
118 Command G roups T unnel Inte rface Virtual LAN Rou ting V irtual Router Redund ancy show ip r ip inte rface bri ef Displ ay s general inf ormatio n for each RIP interfa ce. PE spli t-horiz on Set s the RIP split ho rizon mod e. RIP *NOTE: F or the me anin g of eac h Mode abbrevi ation , see "M ode T ypes" on pa ge 64.
Command Grou ps 119 ip vrrp authen ticati on Sets the autho rizatio n deta ils valu e for the virtual router conf igured on a spe cifie d int erface. IC ip vrrp ip Se ts the virtual router IP address value for an int erface. IC ip vrrp mode Enabl es the virtu al router configured on an interface.
120 Command G roups Utility Commands Auto Config Captive Por tal Comma nd Descriptio n Mode* boot host auto-save Enables/dis ables automaticall y saving the downlo aded confi gurat ion o n the sw itch. GC boot h ost dhcp Enab les/disables Auto C onfig on t he switch.
Command Grou ps 121 interface Associates an interface with a captive portal config uratio n. CPI locale Associates an interface with a capt ive portal config uratio n. CPI name Configures the name for a captive portal config uratio n. CPI protocol Configures the prot ocol mode for a captive portal configuration.
122 Command G roups show c aptiv e-portal use r Dis plays all con fig ured users o r a spec ific u ser in the captive port al local user databas e. PE user idl e-timeou t Sets the sess ion idle ti meout va lue for a captive portal user . CP user name Mod ifies th e us er name for a local c aptive po rtal user .
Command Grou ps 123 Clock Comman d Descriptio n Mode* show clock Displays the time and date of t he system clock. PE show sntp con figurat ion Displays the SNT P config uratio n. PE show sntp st atus Di splay s the SN TP stat us. PE sntp aut hentica te Se t to require auth entic ation fo r received NTP traffic f rom serve rs.
124 Command G roups Configura tion and Image File s Comma nd Descriptio n Mode* boot syste m Spec ifies the sy stem image th at t he swit ch loa ds at startup. PE clear config Restores swi tch to defa ult configu ration PE copy Copies fi les fr om a sou rce t o a dest inati on.
Command Grou ps 125 Denial o f Service Comman d Descriptio n Mode* dos-control firstfr ag Enables Min imum TCP Header Size Denial of Service protection. GC dos-control icmp Enables Maximum ICMP P acket Size De nial of Service protections. GC dos-control l4port Enables L4 P ort Denial of Service protection.
126 Command G roups Line Management ACL Comma nd Descriptio n Mode* ex e c-timeou t Configu res the in terval that th e syst em wait s for user inpu t. LC histo ry Enables the command his tory fu nction . LC histor y size Changes t he comman d history b uffer size f or a parti cular line .
Command Grou ps 127 Password Mana gement PHY Diagnosti cs Comman d Descriptio n Mode* passwords aging Impleme nts aging on th e passwords such that users a re required to change passwords when they e xpir e.
128 Command G roups Power Over Ethernet (PoE ) RMON Command D escri ption Mode* power inli ne Enables /disa bles the a bility of the port to deli ver p ower . IC (Ether net ) power inli ne leg acy Enables /dis ables th e abilit y of the s witc h to support legacy Ethernet powered devices.
Command Grou ps 129 Serviceabi lity T racing show rmon alarm-table Di splays the al arms summary table. UE show rmon collection hist ory Displays the r equested group of statistics. UE show rmon eve nts Disp lays the R MON even t tabl e. UE show rmon hi stor y Di splay s RMO N Ether net Stati stics hist ory .
130 Command G roups debug ip pimsm T races PIMSM packet reception and tran smis si on. PE debug ip vrrp Enables VRRP debug protocol messages. PE debug ipv6 mcach e T races MDA T Av6 packet r ec eption and tran smis si on. PE debug ipv6 mld T races MLD packet recept ion and tran smission.
Command Grou ps 131 sFlow SNMP Comman d Descriptio n Mode* sflow dest inat ion Conf igures sFl ow co llec tor pa ramet ers (owne r string, r eceiver timeout, ip ad dress, a nd port). GC sflow polling Enabl es a new sflow poller instance for the data source if rcvr_idx is val id.
132 Command G roups SSH snmp-server communi ty Se ts up the co mmunity access st ring to permit access to SNMP protocol. GC snmp-server communi ty- group Maps SNMP v1 an d v2 sec urity mode ls to the group name. GC snmp-server contact Se t s up a system conta ct (sysContact) string .
Command Grou ps 133 Syslog ip ssh pu bkey-auth Enabl es public key au thentic ation for incomin g SSH se ssions. GC ip ssh server Enables th e switch to b e configur ed from a SSH server c onnection. GC key-string Manually specif ies a SSH public key .
134 Command G roups System Management logg ing file Limits sy slog messag es sent to t he loggi ng file based on severity . GC logging on Controls error messages loggin g. GC port Spe cifies the port number of s yslog messages. L show logg ing Displays t he state of logging and the syslog messag es stor ed in the inter nal buffe r .
Command Grou ps 135 no cut-t hrough mod e D isable s the cut-t hrough mo de on the switch . G C no standby Removes standb y configuration in the st ac k. SG ping Sends ICMP echo reque st pack ets to another node on th e netw ork. UE reload R e loads the operating s ystem.
136 Command G roups T elnet Se rver show versi on Disp lays t he syst em ve rsio n inform atio n. U E stack Sets the mode to Stack Global Con figu ration mod e. GC stack-port Sets the mode to Stack Global Configuration mode t o configure St ack ports a s either Stacking ports or as Ethernet ports.
Command Grou ps 137 Use r Inte rfa ce W eb Server Comman d Descriptio n Mode* enable E nters the privileg ed EXE C mode. UE end Gets th e CLI user contr ol back to th e privileg ed execution mo de or use r execution mod e. Any exit(confi guration ) Ex its any con figurati on mod e to the previou sly highes t mode in th e CLI mode hier archy .
138 Command G roups ip https se rver Enabl es the sw itch t o be config ured from a secur ed bro wser . GC key-generate Specif ies the key-ge nerate. CC location Spe cifies the location or city name.
Using t he CLI 139 2 Using the CLI Introduction This chap ter descri bes the ba sics of enter ing and editi ng the De ll P owerConnect 62xx Series Command Line Interface (CLI) commands and defines the command hierarchy . It also explains h ow to activate the CLI and implement its major functions.
140 Using the CLI • P artial keyword lookup — A command is incomplet e and the <?> k ey is entered in place of a parameter . Th e match ed param eters for this command ar e display ed.
Using t he CLI 141 F or information about the command syntax for configuring the command history buffer , see the histo ry-size command in the Line comm and mode chapter of this guide. Negating Commands F or m any co mmands, the pr efi x keyw ord no i s entered to cancel the effect of a command or re set the configuration to the default value.
142 Using the CLI Operating on Multiple Objects (Ran ge) The CLI all ows the user to operate on the s et of objec ts at the sam e time. The guidelines are as follows for range operation: • Operations on objects with four or more ins tances support the range operation.
Using t he CLI 143 • Th e range m ay be specified in the following manne r: (#-#) — a range from a particular in stance to a nothe r instance (inclu sive). F or e xample, 1/g1 -g10 indicat es that the oper ation appli es to the gigabit Ethe rnet ports 1 to 1 0 on unit 1.
144 Using the CLI CLI Command Notati on Conventions When entering commands there are ce rtain command-entry notat ions which apply to all c ommands . The fo llowin g table de scribe s th ese conve ntions as they are used in syntax definiti ons.
Using t he CLI 145 CLI Command Modes Since the set of CLI commands is very l arge, the CLI is s t ructur ed as a command-tree hierarchy , whe re r elated command s ets are assigned to command modes for easier access.
146 Using the CLI The P rivileged EXEC mode provides access to commands t hat can not be ex ecuted i n the User EXEC mode and permi ts access to the switch Co nfig ura tio n mo de. The Global Configuration mode manages switch configuration on a global level.
Using t he CLI 147 Global Co nfiguration Mode Global Configuration co m mands apply to featur es that affect the system as a whole, rather than just a specific interface. The Privileged EXEC mode command co nfigure is used to enter the Global Configuration mode.
148 Using the CLI • Po l i c y - m a p — Use the policy-map command to access t h e QoS policy map configura tion mod e to configure the Q oS pol icy map. • P olicy Class — Use the class command to access t h e QoS P olicy-cl a ss mod e to attach or r e mov e a DiffServ cl ass from a policy and to configu re the QoS policy class.
Using t he CLI 149 • MAC Access-List — Conf igures conditions requ ired to allow traffic based on MAC addr esses. The Global Configur ation mode command mac- access-list is us ed to ente r th e M AC A ccess-List con figurat ion mo de. • T ACACS — C onfigures the parameters for the T ACACS server .
150 Using the CLI [ # | >] — The # sign is used to indicate that the system is in the P rivileged EXEC mode. The > symbol indicates that th e system is in the User EXEC mode, which is a r ead-only mode in which the system does not allow configuration.
Using t he CLI 151 Line Interface F rom Global Configurat ion mode, use the line command. console(config- line)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode. Management Access-L ist F rom Global Configurat ion mode, use the manage ment access-list command.
152 Using the CLI MAC Access List F rom Global Conf igurati on mode, use th e mac access-list command. console(config- mac-access- list)# To e x i t t o G l o b a l Confi guratio n mode, us e the exi t c ommand, or press <Ctrl>+< Z> to Privileg ed EXEC mode.
Using t he CLI 153 Radius F rom Global Configurat ion mode, use the radius-se rve r host command. console(config- radius)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode.
154 Using the CLI Crypto Certificate Gener ation F rom Global Conf igurati on mode, use th e crypto certific ate number genera te command. console(config- crypto-cert)# To e x i t t o G l o b a l Confi guratio n mode, us e the exi t c ommand, or press <Ctrl>+< Z> to Privileg ed EXEC mode.
Using t he CLI 155 MST F rom Global Configurat ion mode, use the spanning-t ree mst configuration command. console(config- mst)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode.
156 Using the CLI Router OSPFv3 Config F rom Global Conf igurati on mode, use th e ipv6 router ospf command. console(config- rtr)# To e x i t t o G l o b a l Confi guratio n mode, us e the exi t c omm.
Using t he CLI 157 VLAN F rom Global Configurat ion mode, use the interface vlan command. console(config- if-vlann)# T o e x i t t o G l o b a l Config urati on mode, us e the exi t command , or press <Ctrl> +<Z> to P rivileg ed EXEC mode.
158 Using the CLI Starting the CLI T o begin running the CLI, perform the following steps: NOTE: This procedu re is for u se on the console line onl y. NOTE: The Easy Setup Wi zard is avai lable on ly when the sys tem is i n defa ult s tate with no user conf igu ratio n saved pr evio usly.
Using t he CLI 159 • Enables CLI log in and HTTP access to use the local auth entication se tting only , whi ch allows user account acces s via these managem e nt int erfaces.
160 Using the CLI Since a switch may be powered on in the field without a serial connection, the switch wa its 60 seconds for the user to res pond to the setu p wizard ques tion in in st ance s whe re no co nfi gur at ion file s exist. If ther e is no response, the switch continues normal operation using the defaul t factory configuration.
Using t he CLI 161 Figure 2-1 . Easy Setu p Wiza rd T ransfer to CLI mode Copy to Cong DHCP? Request user name, password No Ye s Does th e u ser wa nt to use setup wizard ? No T ransfer to CLI mode.
162 Using the CLI Examp le Session This sect io n desc rib es an Easy Setu p Wizard sessi on. Refer to th e sta te diagram in the previous sect ion for gene ral flow . The following values used by the example session are not the only possib le ones: • IP address for th e ma nagemen t VLAN is 192.
Using t he CLI 163 Welcome to Dell Easy Setup Wizard The Setup Wizard guides you through the initial switch configuration, and gets you up and running as quickly as possible. You can skip the setup wizard, and enter CLI mode to manually configure the switch.
164 Using the CLI {public}: public<Enter> Please enter the IP address of the Management System (A.B.C.D) or wildcard (0.0.0.0) to manage from any Management Station. {0.0.0.0}: 192.168.2.1<Enter> Step 2: Now we need to setup your initial privilege (Level 15) user account.
Using t he CLI 165 Please enter the IP address of the device (A.B.C.D) or enter "DHCP" (without the quotes) to automatically request an IP address from the network DHCP server. 192.168.2.1<Enter> Please enter the IP subnet mask (A.B.C.
166 Using the CLI Unit 1 - Waiting to select management unit)> Applying configuration, please wait ... Welcome to Dell Easy Setup Wizard The Setup Wizard guides you through the initial switch configuration, and gets you up and running as quickly as possible.
Using t he CLI 167 Please enter the user name. [root]:root Please enter the user password: Please reenter the user password: Step 3: Next, an IP address is setup. The IP address is defined on the default VLAN (VLAN #1), of which all ports are members.
168 Using the CLI Do you want to select the operational mode as Simple Mode? [Y/N] n Step 6: If the information is correct, please select (Y) to save the configuration, and copy to the start-up configuration file.
Using t he CLI 169 Using CLI Functio ns and T ools The CLI has been des igned to manage the switch’s configuration file system and to manage sw itch security .
170 Using the CLI configuration file. In this cas e, if the local configuration file does not exist, then it is created by the command. If it does exist, it is overwri tten. If there is not enough space on the local file system to accommodate the file, an error is flagged.
Using t he CLI 171 CLI prevents the user from ac cide ntally copying a configuration image onto a softwar e image and vice vers a. Management I nterface Sec urity This section describes the minimum set of management interface security measures implemented by the CLI.
172 Using the CLI • Th e user pa ssword is saved internal ly in en crypted form at and never appear s in c lear te xt anyw here on the CLI . • The CLI supports T ACACS+ and Ra dius authenti cation serve rs. • The CLI all ows the user t o confi gure pri mary and second ary authe nt icat ion se rvers .
Using t he CLI 173 • If a uth en ticatio n se rvers a re used , th e user can iden tify a t leas t tw o remo te servers (the user ma y choose to configu re only one server) and wh at protocol to use with the server , T ACACS+ or Radius.
174 Using the CLI • D enie d at temp ts b y extern al m ana ge ment system to access the system. The security log r ecord contai ns the following information: • The user name, if available, or t he protocol being accessed if the event is rel ated to a r emote mana g ement sy stem.
Using t he CLI 175 T erminal Paging The terminal width and length for CLI displays is 79 char acters and 25 lines, respectively . The length setting is used to control the numb er of lines the CLI will display b efore it pauses. F or example, t he CLI pauses at 24 li nes and prompts the us er with the -more- prom pt on t he 25t h l ine .
176 Using the CLI total bytes in files: 19,656 Kb # of lost chains: 0 total bytes in lost chains: 0 volume descriptor ptr (pVolDesc): 0x38ff9d0 XBD device block I/O handle: 0x10001 auto disk check on .
Using t he CLI 177 - first cluster is in sector # 136 - Update last access date for open-rea d-close = FALSE - directory structure: VFAT - file name format: 8-bit (extended-ASCII) - root dir start sec.
178 Using the CLI Adding 0 symbols for standalone. CPU: Motorola E500 : Unknown system version. Processor #0. Memory Size: 0x10000000. BSP version 1.2/0. Created: Jan 4 2010, 03:59:27 ED&R Policy Mode: deployed /DskVol// - disk check in progress .
Using t he CLI 179 volume descriptor ptr (pVolDesc): 0x348ef70 XBD device block I/O handle: 0x10001 auto disk check on mount: DOS_CHK_REPAIR |DOS_CHK_VERB_2 volume write mode: copyback (DOS_WRITE) max.
180 Using the CLI - file name format: 8-bit (extended-ASCII) - root dir start sector: 121 - # of sectors per root: 15 - max # of entries in root: 240 FAT handler information: ------------------------ - allocation group size: 2 clusters - free space on volume: 10,852,352 bytes Timebase: 66.
Using t he CLI 181 <186> JUN 28 14:29:09 0.0.0.0-1 UNKN[268434720]: bootos.c(222) 1 %% Event(0xaaaaaaaa) Instantiating RamCP: as rawFs, device = 0x30001 Formatting RamCP: for DOSFS Instantiating RamCP: as rawFs, device = 0x30001 RamCP:/ - disk check in progress .
182 Using the CLI gets you up and running as quickly as possible. You can skip the setup wizard, and enter CLI mode to manually configure the switch. You must respond to the next question to run the setup wizard within 60 seconds, otherwise the system will continue with normal operation using the default system configuration.
Using t he CLI 183 Management Standby Preconfig Plugged-in Switch Code SW Status Status Model ID Model ID Status Version ---- --------- -------- ---------- ------------ --------- -------- 1 Mgmt Sw PC6224 PCT6224 OK 3.
184 Using the CLI 8 - Delete backup image 9 - Reset the system 10 - Restore Configuration to factory defaults (delete config files) 11 - Activate Backup Image 12 - Password Recovery Procedure The boot utility menu pr ovides the following: • Option to set b aud rate of the serial port.
Using t he CLI 185 • Option to loa d new operational code using XMODEM [Boot Menu] 4 Ready to receive the file with XMODEM/CRC.... Ready to RECEIVE File xcode.bin in binary mode Send several Control-X characters to cancel before transfer starts. • Option to displa y Boot Image Inform ation.
186 Using the CLI Operational Compression flag...................2 (lzma) Boot Code Version..............................1 Boot Code Size.................................0x100000 (1048576) Boot Code Offset...............................0x79027c (7930492) Boot Code FLASH flag.
Using t he CLI 187 Validating image2....OK Extracting boot code from image...CRC valid Erasing Boot Flash.....^^^^Done. Wrote 0x10000 bytes. Wrote 0x20000 bytes. Wrote 0x30000 bytes. Wrote 0x40000 bytes. Wrote 0x50000 bytes. Wrote 0x60000 bytes. Wrote 0x70000 bytes.
188 Using the CLI • Option to Clear All Fl ash and Res et the System t o Default Setting. User action w ill be confirm ed with a Y/N qu estion before executing the command. Th e following is the procedure to reset the system through Boot Menu: [Boot Menu] 9 Are you SURE you want to reset the system? (y/n):y Boot code.
Using t he CLI 189 • Option to use the password recovery procedure. It allows the switch to boot one time witho ut pr om pting for a console password.
190 Using the CLI.
AAA Command s 191 3 AAA Commands This chapter exp lains the following commands: • aaa authen tication dot1 x • aaa authen tication enab le • aaa authen tication logi n • a aa aut hor ization n.
192 AAA Command s aaa authe ntication dot1x Use the aaa authe nticati on dot1x command in Global Configuration mode to create an authen ticat ion login lis t.
AAA Command s 193 aaa authe ntication enable Use the aaa aut hentication enable command in Global Configuration mode to set authenti cation for access ing hig her privile ge level s. T o r eturn to the default configuration, use the no form of this command.
194 AAA Command s Create a list by entering the aaa aut h enticat ion enable lis t-n am e m et ho d command where list-name is any chara ct er string used to name this l ist. The method argument identifies the list of method s that the authe nticati on algorithm tr ies in the given s e quence.
AAA Command s 195 • method1 [ method2 ...] — S pecify at least one from the followin g table: Default Conf iguration The default login lists are "defaultList" and "net workList." "defa ultList" is used by the console and only contains the method none .
196 AAA Command s console(config)# aaa authentication login default radius local enable none aaa autho rization network default ra dius Use the aaa authoriz ation netwo rk default radius command in Globa l Configuration mo de to enab le the s w itch to acc ept VLAN assignment by the RA D I U S s e r ve r .
AAA Command s 197 enable au thentication Use the enabl e authe nticat ion command in Li n e Configuration mode to specif y the au thentic ation met hod li st when a ccessing a higher privile ge level from a remot e telnet or cons ole.
198 AAA Command s enable pa ssword Use the enable password command in Global Conf iguration mode to set a lo c a l p a s s w o rd t o c o n t r o l a c ce s s t o t h e p ri v i l e ge d E X E C m o d e . T o re m o v e t h e password re q uirement, use the no form of this command.
AAA Command s 199 ip http authentication Use the ip ht tp au thentica tion command in Global Configuration mode to speci fy authen ticatio n methods for http server users. T o r eturn to the def ault, use the no form of this command. Syntax ip ht tp authen ticat ion method1 [ method2 .
200 AAA Command s ip https authentication Use the ip ht tps authe ntica tion command in Global Configuration mode to speci fy authe nticati on method s for htt ps server users. T o r eturn to the de fault configuration, use the no form of this co mmand.
AAA Command s 201 login authentication Use the login a uthent icati on command in Line Configuration mode to specify the login au thenticat ion metho d list for a line (c onsole, telne t, or SSH). T o return to the defa ult specif ied by the authentica tion login command, use the no form of this c o mmand.
202 AAA Command s passwor d (Line Configuration) Use the password command in Line Configuration mode to specify a passwor d on a line. T o remove t he passwor d, use the no fo rm of thi s command. Syntax password passw ord [ encrypted ] no password • password — P asswor d for this leve l.
AAA Command s 203 Default Conf iguration There is no default configuration for this command. Command Mode User EXEC mode User Guideli nes This command has no user guidelines. Example The following example shows the prompt sequence for ex ecut ing the password command.
204 AAA Command s Example The following example displays the aut hentication configuration. console#show authentication methods Login Authentication Method Lists --------------------------------- defa.
AAA Command s 205 show users accounts Use the show users accounts command in P rivileged EXEC mode to display information about the lo cal user data base. Syntax show use rs accounts [l ong] Default Conf iguration This command has no default configuration.
206 AAA Command s show us ers log in-his tor y Use the show users login- history command in Global Co nfiguration mode to display information ab out th e login history of users. Syntax show users login-h istory [long] • name — name of user . (Range : 1-20 characters ) Default Conf iguration This command has no default configuration.
AAA Command s 207 username Use the us ern ame co mmand in Global Configuration mode to add a new user to the local users database. T o remove a user name use the no form of this command. Syntax username name password passwo rd [ level level ] [ encrypted ] no us ername name • name — The nam e of the u ser .
208 AAA Command s.
ACL Commands 209 4 ACL Commands This chapter exp lains the following commands: • access-list •d e n y | p e r m i t • ip access-group • no ip access-group • mac access-group • mac access-l.
210 ACL Commands access-list Use the access-list com mand in Global Configuration mode to crea te an Access Control List (A CL) that is identified by the parameter list-name .
ACL Commands 211 • assign-queue queue-id — Sp ecifies the particu lar hardware queue for handlin g traffic t hat mat ches the rule. (Ra nge: 0 -6) • mirror interface — A llows th e tra ffic match ing th is rule to be copied to the specified interf ace.
212 ACL Commands Syntax {deny | p ermit} { srcmac srcmacmask | any } { dstmac dstmacmask | any | bpdu} [{ ethertyp ekey | 0x060 0-0xFFFF }] [ vlan eq 0-409 5 ] [ cos 0-7 ] [ secondary-vlan eq 0-409 5 .
ACL Commands 213 Default Conf iguration This command has no default configuration. Command Mode Mac-Access-List Config uration mode User Guideli nes The no form of this co mmand is not supp orted, as the rules within a n ACL cannot be deleted individually .
214 ACL Commands • seqnum — Pr ecedence for t his interface and direction. A lower sequen ce numb er has higher precedence. R ange: 1 – 42949 67295.
ACL Commands 215 Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode or Interfac e Configuration (Ethernet, VLAN or Po r t C h a n n e l ) m o d e .
216 ACL Commands mac access-list exte nded Use the mac access-list exte nded command in Global Configuration mode to create the MAC A cce ss Control List (ACL) identified by the nam e param eter . Syntax mac access -lis t exte nded name no mac access-list extended name • name — Name of the acc ess list.
ACL Commands 217 mac access-list extende d rename Use the mac ac cess-list extend ed rename command in Global Configuration mode to rename the e xisting MAC Access Control List (ACL ). Syntax mac access-list ext ended rename name newname • name — Exis ting n ame of the a ccess l ist.
218 ACL Commands show ip ac cess-lists Use the show ip access-lists command in P rivileged EXEC mode to display access lists applied on interfaces an d all rules that ar e defined for the access list s. Syntax show ip access-lists accesslistname • accessl istname — The n ame used to identify the AC L.
ACL Commands 219 show mac ac cess-list Use the show m ac access- list c o m m a n d i n Pr i v il e g e d E X E C m o d e t o d i s p l a y a MAC access list and all of the rules that ar e defined for the AC L . Syntax show mac access-list name • name — Identif ies a specific M AC access list to display .
220 ACL Commands.
Addre ss T a ble Co mmands 221 5 Address T able Commands This chapter exp lains the following commands: • bridge add ress •b r i d g e a g i n g - t i m e • bri dge multicast add ress • bri dg.
222 Address T able C ommands bridge a ddress Use the bridge address command in Interface Configuration mode to add a static MA C-layer statio n source address to the bridge table.
Addre ss T a ble Co mmands 223 bridge aging-time Use the bridge aging- time command in Global Conf iguration mode to set the ag ing time of the address. T o restore the default, use the no form of the brid ge agin g-t ime command. Syntax brid ge agin g-t ime seconds no bridge ag ing-tim e • seconds — Time is t he num ber of seco nds.
224 Address T able C ommands bridge multicast address { mac-multicast-addr ess | ip-multicast -address } [ add | remove ] { ethernet interface- list | port-cha nnel port-channel-number - list } no bridge multica st address { mac-multicast -address | ip-multicast-addres s } • add — Adds p orts to t he group.
Addre ss T a ble Co mmands 225 console(config)#interface vlan 8 console(config-if-vlan8)#bridge multicast address 0100.5e02.0203 add ethernet 1/g1-1/g9, 1/g2 bridge multicast filtering Use the bridge mult icast filtering com mand in Global Configuration mode to enable filtering of Multi cast addresses.
226 Address T able C ommands bridge multicast forbidden addres s Use the bridge multicast for bidden address co mmand in Interface Configuration mode t o forbid adding a s pecific Multicast addr ess to spec ific ports. T o retu rn to the system default, use the no form of t his command.
Addre ss T a ble Co mmands 227 Examples In this e xample the M AC addr ess 01:00: 5e:02:02:03 is f orbidden on port 2/ g9 withi n VLAN 8. console(config)#interface vlan 8 console(config-if-vlan8)#brid.
228 Address T able C ommands bridge multic ast forward-all Use the bridge mu lticast forward-al l command in Interface Configuration mode to enabl e forwar ding of all Multicas t packets. T o restor e the default, us e the no form o f the bri dge mul ticas t forw ard- all command.
Addre ss T a ble Co mmands 229 Command Mode Interface Configuration (VLAN) mode User Guideli nes If routers exist on the VLA N, do not cha nge the unregiste red multicast addr e sses sta t e to drop on the routers po rts.
230 Address T able C ommands Example In this e xample, the b ridge tables ar e cleared. console#clear bridge port secu rity Use the port security command in Interface Configurat ion mo de to disable the learning of ne w addresses on an interfa ce. T o enable new address learning, use the no form of the p o rt security command.
Addre ss T a ble Co mmands 231 Example In this example, frame forwarding is enabl ed withou t learning , and with traps sent eve ry 100 seconds o n port g1.
232 Address T able C ommands show brid ge address-t able Use the show bridge address -table command in Privileged EXEC mode to display all entries in the bridg e-forwarding data base. Syntax show brid ge address-ta ble [ vlan vlan ] [ ethern et interface | port-ch annel port-channel-number ] • vla n — Sp ecific valid VLAN , such as VLAN 1.
Addre ss T a ble Co mmands 233 show bridg e address- table count Use the show br idge address-table count command in P rivileged EXEC mode to display the number of ad dresses pr esent in the F orwarding Databa se.
234 Address T able C ommands show brid ge address-tab le static Use the show bridge address-t able static command in Privileged EXEC mo de to displ ay static entri es in the bridge-forwar ding databas e.
Addre ss T a ble Co mmands 235 show brid ge multic ast addr ess-ta ble Use the show br idge mul ticast ad dress- table comm and in P rivileged EXEC mode to display Multicast MA C address table information.
236 Address T able C ommands Vlan MAC Address Ports ---- ----------------------- ------------ --------------- 1 0100.5E05.0505 NOTE: A multicast MAC add ress maps t o multi ple IP ad dres ses, as shown abo ve.
Addre ss T a ble Co mmands 237 show ports security Use the show ports security command in P rivileged EXEC mode to display the por t-lock st atus. Syntax show ports security [ eth ernet interface | port-cha nnel port-channel-number ] • interface — A vali d Et hern et po rt .
238 Address T able C ommands The following table describes the fields in this example. show po rts secur ity addr esses Use the sho w ports security addresses command in Priv ilege d EXEC mode to display curr ent dynamic addresses in lock ed ports.
Addre ss T a ble Co mmands 239 Examples The following exampl e displays dynamic addr esses for port channel number 1/g1 . console#show ports security addresses ethernet 1/g1 Dynamic addresses: 83 Maxi.
240 Address T able C ommands.
CDP Intero p erability Commands 241 6 CDP Interoperability Commands This chapter exp lains the following commands: • clear isdp counters • clear i sdp table • isdp adve rtise- v2 •i s d p e n .
242 CDP Intero perability Commands clear isdp counters The clear isdp counters command clears the ISDP counters. Syntax clear isdp counters Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guidel ines There ar e no user gui delines for this command.
CDP Intero p erability Commands 243 Example console#clear isdp table isdp advertise-v2 The isdp advertise-v2 command enab les the sending of ISDP version 2 pack ets fr om the de vice. Use the “no” form of th is comma nd to disab le sending ISDP ve rsion 2 packets.
244 CDP Intero perability Commands Default Conf iguration ISDP is enab led. Command Mode Glo bal C onf igura tion mode . Interface (Ethernet) configuration mode. User Guidel ines There ar e no user gui delines for this command. Example The following example enables isdp on int erface 1/g1.
CDP Intero p erability Commands 245 User Guideli nes There ar e no user gui delines for this command. Example The following exampl e sets is dp holdtime to 40 seconds. console(config)#isdp holdtime 40 isdp timer The isdp timer command s e ts period of time between sending new ISDP packets.
246 CDP Intero perability Commands show isdp The show isdp command displays global ISDP settings. Syntax show isdp •h o s t n a m e — The application w ill check to see if the Hostname configured on the switch is different from the defa ult. If true , it us es the Host name as the device ID.
CDP Intero p erability Commands 247 (Switching) #hostname Dell-PC6248 (Dell-PC6248) #show isdp Timer............................... 30 Hold Time......................... 180 Version 2 Advertisements.......... Enabled Neighbors table last time changed.
248 CDP Intero perability Commands Example console#show isdp entry Switch Device ID Switch Address(es): IP Address: 172.20.1.18 IP Address: 172.20.1.18 Capability Router IGMP Platform cisco WS-C4948 I.
CDP Intero p erability Commands 249 show isdp interface The show isdp int erface command displays ISDP s e ttings for th e specified interface. Syntax show isdp interface { all | ethernet interface } • all — Show ISDP settings for all in terfaces.
250 CDP Intero perability Commands 1/g8 Enabled 1/g9 Enabled 1/g10 Enabled 1/g11 Enabled 1/g12 Enabled 1/g13 Enabled 1/g14 Enabled 1/g15 Enabled 1/g16 Enabled 1/g17 Enabled 1/g18 Enabled 1/g19 Enabled.
CDP Intero p erability Commands 251 show isdp ne ighbors The show isdp nei ghbors command displays the list of neighboring devices. Syntax show is dp neig hbo rs { ethernet interface | detail } • interface — S pecifies a va lid inte rface. The fu ll synt ax is u nit/port.
252 CDP Intero perability Commands console#show isdp neighbors detail Device ID Switch Address(es): IP Address: 172.20.1.18 IP Address: 172.20.1.18 Capability Router IGMP Platform cisco WS-C4 948 Inte.
CDP Intero p erability Commands 253 Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#show isdp traffic ISDP Packets Received.......................... 4253 ISDP Packets Transmitted...
254 CDP Intero perability Commands.
DHCP Layer 2 Re lay Comman ds 255 7 DHCP Layer 2 Relay Commands This chapter exp lains the following commands: • d hcp l2relay ( Globa l Configu ration ) (Glo bal Con figurat ion) • dhcp l2r elay .
256 DHCP Layer 2 Relay Comman ds dhcp l2relay (Globa l Configuration) Use the dhcp l2relay com mand to enable layer 2 DHCP relay functionality . The subsequent commands mentioned in this section can only be used when the L2-D HCP relay is enable d. Use the "no " form of this com mand to disa ble L2-DHCP relay .
DHCP Layer 2 Re lay Comman ds 257 Command Mode Interface Configuration (Ethernet) . User Guideli nes There ar e no user gui delines for this command. Example console(config-if-1/g1)#dhcp l2relay dhcp l2relay circuit- id Use the dhcp l2relay circuit-id command to enable setting the DHCP Opti on 82 Circu it ID fo r a VLAN.
258 DHCP Layer 2 Relay Comman ds dhcp l2relay remote-id Use the dhcp l 2relay remo te-id comm and to enable s etting the D HCP Option 82 Remote I D for a VLAN. When enabled, the supplied string is used for the Remote ID in DHCP Option 82. Use the "no" form of t his command to disa ble sett ing the D HCP Opti on 82 Rem ote ID .
DHCP Layer 2 Re lay Comman ds 259 dhcp l2relay trust Use the dhcp l2relay trust command to configure an interface to mandate Option-82 on r eceiving DHCP packets. Syntax dhcp l2relay trust no dhcp l2relay trust Default Conf iguration DHCP Option 82 is discar ded by default.
260 DHCP Layer 2 Relay Comman ds Default Conf iguration DHCP L2 Relay is disa bled on all VLANs by defa ult . Command Mode Glo bal C onf igura tion mode User Guidel ines There ar e no user gui delines for this command.
DHCP Sn ooping Comma nds 261 8 DHCP Snoopin g Commands This chapter exp lains the following commands: • clea r ip dhcp s nooping st atistics •i p d h c p s n o o p i n g • ip dhcp snooping bindi.
262 DHCP Snoo ping Comman ds clear ip dhcp sn ooping statistics Use the clear ip dhcp sn ooping statistics command to clear al l DHCP Snooping statis tics. Syntax clear ip dhcp snooping statistics Default Conf iguration There is no default configuration for this command.
DHCP Sn ooping Comma nds 263 Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config)#ip dhcp snooping console(config-if-vlan1,2,3)#ip dhcp snooping ip dhcp snooping bind ing Use the ip dhcp snoo ping binding command to configure a stat ic DHCP Snooping binding.
264 DHCP Snoo ping Comman ds User Guidel ines There ar e no user gui delines for this command. Example console(config)#ip dhcp snooping binding 00:00:00:00:00:01 vlan 10 10.131.12.134 interface 1/g1 ip dhcp snoop ing database Use the ip dhc p snooping datab ase command to configure the persistent storage location of the DHCP snooping database.
DHCP Sn ooping Comma nds 265 The following example configures the storage location of the snooping database as r emote. console(config)#ip dhcp snooping database tftp://10.
266 DHCP Snoo ping Comman ds ip dhcp snooping limit Use the ip dhc p snoo ping li mit command to control the maximum rate of DHCP m essa ges. U se the “ no” for m of t his co mma nd to rese t the li mit to the default.
DHCP Sn ooping Comma nds 267 ip dhcp snooping log-inva lid Use the ip dhcp snoo ping log-invalid command to enable logging of DHCP messages filtered by the DHCP S nooping application.
268 DHCP Snoo ping Comman ds Default Conf iguration P orts ar e unt rusted by default. Command Mode Interface Configuration (Et hernet, port-channel) mode User Guidel ines There ar e no user gui delines for this command.
DHCP Sn ooping Comma nds 269 Example console(config)#ip dhcp snooping verify mac-address show ip dhcp snooping Use the show ip dhcp snooping command to display the DHCP snooping global and per port configuration. Syntax show ip dhcp snoo ping Default Conf iguration There is no default configuration for this command.
270 DHCP Snoo ping Comman ds 1/g2 No Yes 1/g3 No Yes 1/g4 No No 1/g6 No No show ip dh cp snooping b inding Use the show ip dhcp sno oping bi nding com mand to disp lay the DHCP snooping binding entri e s.
DHCP Sn ooping Comma nds 271 MAC Address IP Address VLAN Interface Lease time(Secs) ------------------ ------------ ---- --------- ------------- 00:02:B3:06:60:80 210.
272 DHCP Snoo ping Comman ds show ip dh cp snooping in terfaces Use the show ip dhcp sno oping i nterfaces command to show the DHCP Snooping status of the interfaces . Syntax show ip dh cp snooping interfaces i nterfac e • interfa ce — A v alid phy sical int erface.
DHCP Sn ooping Comma nds 273 console#show ip dhcp snooping interfaces ethernet 1/g15 Interface Trust State Rate Limit Burst Interval (pps) (seconds) ---------- ------------- ------------- - ----------.
274 DHCP Snoo ping Comman ds Example console#show ip dhcp snooping statistics Interface MAC Verify Client Ifc DHCP Server Failures Mismatch Msgs Rec'd ----------- ---------- ---------- ----------.
Dynam ic AR P Inspec tio n Comman ds 275 9 Dynamic ARP Inspec tion Commands This chapter exp lains the following commands: • arp access-list • clear counte rs ip arp inspec tion • ip arp inspect.
276 Dynamic ARP Ins pecti on Comma nds arp access-list Use the arp access-list com ma nd t o cre ate an ARP ACL . I t wi ll p la ce th e u ser in ARP ACL Configuration mode.
Dynam ic AR P Inspec tio n Comman ds 277 Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#clear counters ip arp inspection ip arp in.
278 Dynamic ARP Ins pecti on Comma nds Example console(config)#ip arp inspection filter tier1 vlan 2- 10 static console(config)#ip arp inspection filter tier1 vlan 20-30 ip arp inspection limit Use the ip a rp in spection limit com mand to conf igure the rate limit a nd burst interval v alues for an interface.
Dynam ic AR P Inspec tio n Comman ds 279 Example console(config-if-1/g1)#ip arp inspection limit none console(config-if-1/g1)#ip arp inspection limit rate 100 burst interval 2 ip arp inspecti on trus t The ip a rp insp ection tru st co mmand configur es an interface as trusted for Dynami c ARP Inspec tion.
280 Dynamic ARP Ins pecti on Comma nds ip arp inspection validat e Use the ip a rp insp ection val idate command to enable additiona l validation checks like s ource MAC address va lidation, destination MAC addr ess validation or IP address validation on the received ARP packets.
Dynam ic AR P Inspec tio n Comman ds 281 ip arp inspec tion vlan Use the ip arp inspe ction vlan comm and to enab le Dy nam ic A RP Ins pe ctio n on a single VLAN or a range of VLANs. Use the “no” form of this command to disable Dynamic ARP Inspection on a single VLAN or a range of VLANs.
282 Dynamic ARP Ins pecti on Comma nds permit ip ho st mac host Use the permit ip host ma c host command to configure a rule for a valid IP address a nd MA C address comb ination used in ARP packet va lidation. Use the “no” form of this command to delete an ARP A CL rule.
Dynam ic AR P Inspec tio n Comman ds 283 Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC User Guideli nes There ar e no user gui delines for this command. Example console#show arp access-list ARP access list H2 permit ip host 1.
284 Dynamic ARP Ins pecti on Comma nds Command Mode P rivileged EXEC User Guidel ines The following fields are displayed for each interface: Example console#show ip arp inspection ethernet Interface T.
Dynam ic AR P Inspec tio n Comman ds 285 show ip arp inspection statistics Use the show ip arp inspect ion statistics command to display the statistics of the ARP pac kets proce ssed by Dynamic ARP Ins p ection. Giv en vlan-range argument , it displays the stat istics on all D AI enabled Vlans in th at range.
286 Dynamic ARP Ins pecti on Comma nds Example console#show ip arp inspection statistics VLAN Forwarded Dropped ---- --------- ------- 10 90 14 20 10 3 console#show ip arp inspection statistics vlan 1.
Dynam ic AR P Inspec tio n Comman ds 287 show ip arp inspection vlan Use the show ip arp inspection vlan command to disp lay the Dynamic ARP Inspection configuration on al l the VLAN s in the given VLAN range. It als o displays the global configuration values fo r source MA C validation, destination MAC validation and invalid IP validation.
288 Dynamic ARP Ins pecti on Comma nds Example console#show ip arp inspection vlan 10-12 Source Mac Validation : Disabled Destination Mac Validation : Disabled IP Address Validation : Disabled Vlan Co.
Ether net Co nfi gurat ion Co mmands 289 10 Ethernet Co nfiguration Comma nds This chapter exp lains the following commands: •c l e a r c o u n t e r s •d e s c r i p t i o n •d u p l e x • fl.
290 Ethe rnet Configu ration Comma nds clear co unters Use the clear counters command in P rivileged EXEC mode to clear stati s tics on an interface. Syntax clear counters [ ethern et interface | port-cha nnel port-channel-number ] • interface — V alid Ethe rnet po rt.
Ether net Co nfi gurat ion Co mmands 291 Default Conf iguration By default, the interface does not have a description. Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes This command has no user guidelines. Example The following exampl e adds a desc ription t o t he Ethernet port 5.
292 Ethe rnet Configu ration Comma nds User Guidel ines This command has no user guidelines . Example The following example configur es the duplex operation of Ethernet port 5 to force full duplex operation.
Ether net Co nfi gurat ion Co mmands 293 interfac e ethernet Use the interfac e etherne t command in Glob al Configuration mode to enter the interface configuration mode to co nfigure an Ethernet type interface. Syntax interface ethernet interface • interface — V alid Eth ernet port .
294 Ethe rnet Configu ration Comma nds Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode User Guidel ines Commands under the interface range context ar e ex e cuted independently on each acti ve int erface in the range .
Ether net Co nfi gurat ion Co mmands 295 Command Mode Interface Configuration (Ethernet) mode User Guideli nes The val ue se t allows an additi onal f our byt es for t he VLAN ta g. Example The following example of the mt u command incr eases maximum packet size to 9216 bytes.
296 Ethe rnet Configu ration Comma nds Example The following exampl e enables auto nego tia tions on giga bit Ethe rnet por t 5 of unit 1. console(config)#interface ethernet 1/g5 console(config-if-1/g.
Ether net Co nfi gurat ion Co mmands 297 console# show interfaces advertise ethernet 1/g1 Port: Ethernet 1/g1 Type: 1G-Copper Link state: Up Auto negotiation: enabled 10h 10f 100h 100f 1000f Admin Loc.
298 Ethe rnet Configu ration Comma nds Example The following example displays the co nfiguration for all configured interfaces: console>show interfaces configuration Port Type Duplex Speed Neg Admi.
Ether net Co nfi gurat ion Co mmands 299 The displayed port co nfiguration information includes the follow ing: show interfa ces counters Use the show in terfaces counters command in User EXEC mode to display traff ic seen b y the int erface.
300 Ethe rnet Configu ration Comma nds console>show interfaces counters Port InOctets InUcastPkts ---- ---------- --------- 1/g1 183892 1289 3/g1 123899 1788 Port OutOctets OutUcastPkts ---- ------.
Ether net Co nfi gurat ion Co mmands 301 Port OutOctets OutUcastPkts ---- ---------- --------- 1/g1 9188 9 Alignment Errors: 17 FCS Errors: 8 Single Collision Frames: 0 Multiple Collision Frames: 0 De.
302 Ethe rnet Configu ration Comma nds show interfaces description Use the show interfaces description command in User EXEC mode to display the description for a ll configured interfaces. Syntax show int erfaces descri ption [eth ernet interface | port-cha nnel port-channel- number ] • interface — V alid Ethe rnet port .
Ether net Co nfi gurat ion Co mmands 303 Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guideli nes This command has no user guidelines. Example The f ollowi ng ex ample di splays the desc riptio n for t he inter face 1/ g1.
304 Ethe rnet Configu ration Comma nds • interface — A valid Ethernet port. • port- channel -number — A valid port- channel tru nk inde x. Default Conf iguration There is no default configuration for this command.
Ether net Co nfi gurat ion Co mmands 305 Port Description ---- ------------------------------------------- 1/xg1 ExampleName VLAN Info: --------- VLAN Membership mode: General Operating parameters: PV.
306 Ethe rnet Configu ration Comma nds Acceptable Frame Type: All Port 1/xg1 is statically configured to: VLAN Name Egress rule ---- --------- ----------- 1 default untagged 11 VLAN0011 tagged 19 IPv6.
Ether net Co nfi gurat ion Co mmands 307 show interfa ces status Use the show interfac es status co mmand in User EXEC mode to display the status for al l conf igured interfaces. Syntax show interfaces status [ethernet interface | port-ch annel port-channel- number ] • interface — A vali d Eth erne t por t.
308 Ethe rnet Configu ration Comma nds 1/g9 Gigabit - Level N/A Unknown Auto Down Inactive 1/g10 Gigabit - Level N/A Unknown Auto Down Inactive 1/g11 Gigabit - Level N/A Unknown Auto Down Inactive 1/g.
Ether net Co nfi gurat ion Co mmands 309 ch9 Link Aggregate Down --More-- or (q)uit ch10 Link Aggregate Down ch11 Link Aggregate Down ch12 Link Aggregate Down ch13 Link Aggregate Down ch14 Link Aggreg.
310 Ethe rnet Configu ration Comma nds ch40 Link Aggregate Down ch41 Link Aggregate Down ch42 Link Aggregate Down ch43 Link Aggregate Down ch44 Link Aggregate Down ch45 Link Aggregate Down ch46 Link A.
Ether net Co nfi gurat ion Co mmands 311 • port-type — V alues are g for gigabit Eth ernet port, or xg for 10 gigabit Ethernet p ort. • port — port n umber . V alues are 1-24 or 1-48 for port_type g, and 1-4 for port_type xg. Exam ple: x g2 is the 10 gigabi t Ethe rnet po rt 2.
312 Ethe rnet Configu ration Comma nds Packets RX and TX 512-1023 Octets.............. 4982 Packets RX and TX 1024-1518 Octets............. 479845 Packets RX and TX 1519-1522 Octets.. ........... 0 Packets RX and TX 1523-2047 Octets.. ........... 0 Packets RX and TX 2048-4095 Octets.
Ether net Co nfi gurat ion Co mmands 313 Packets Transmitted 128-255 Octets........... .. 245 --More-- or (q)uit Packets Transmitted 256-511 Octets........... .. 25 Packets Transmitted 512-1023 Octets.......... .. 158 Packets Transmitted 1024-1518 Octets.
314 Ethe rnet Configu ration Comma nds console#show statistics ethernet switchport Total Packets Received (Octets)............ .... 16877295 Unicast Packets Received................... .... 1608 Multicast Packets Received................. .... 48339 Broadcast Packets Received.
Ether net Co nfi gurat ion Co mmands 315 Syntax show storm-contro l [all | int erf ace ] • interface — V alid Ethernet port. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines.
316 Ethe rnet Configu ration Comma nds shutdown Use the shutdown command in Interface Config uration mode to disable an interface. T o restart a disabled interface, use the no form of this command. Syntax shutdown no shutdown Default Conf iguration The interface is enabled.
Ether net Co nfi gurat ion Co mmands 317 no speed • 10 — Configures the port to 10 Mbp s operation. • 100 — Configures the port to 10 0 M bps operation. Default Conf iguration This command has no default setting. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines.
318 Ethe rnet Configu ration Comma nds Default Conf iguration The default value is 5 . Command Mode Interface Configuration (Et hernet) m ode User Guidel ines This command has no user guidelines .
Ether net Co nfi gurat ion Co mmands 319 Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example console(config-if-1/g1)#storm-control multic.
320 Ethe rnet Configu ration Comma nds User Guidel ines This command has no user guidelines . Example console(config-if-1/g1)#storm-control unicast level 5.
GVRP C o mmand s 321 11 GVRP Commands This chapter exp lains the following commands: • clear gvrp statistic s •g a r p t i m e r • gv rp enab le (globa l) • gv rp enable (interface) • gvrp r.
322 GVRP Com mands clear gvrp statistics Use the clear gvrp statistics command in Priv ilege d EXEC mode to clear all the GVRP statist ics information. Syntax clear gvrp statisti cs [ ethernet interface | port-channel port-channel-number ] • interface — A valid Ethernet interface.
GVRP C o mmand s 323 • leave — Indicates the tim e in centiseconds th at the device waits before leaving its G ARP s tate. • leaveall — U sed to con firm th e por t wi thin th e VL AN. Th e tim e is th e interval betw een messages sent , measu red in centisec onds.
324 GVRP Com mands gvrp enable (global) Use the gvrp en able (glo b al) command in Gl o bal Configuration mode to enable GVRP g lobally on the s w itch. T o disable GVRP globally on the switch, use the no form of thi s command. Syntax gvrp enable no gvrp en able Default Conf iguration GVRP is globally disabled.
GVRP C o mmand s 325 Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes An Access port cannot join dy namically to a VLAN because it is a lways a member of only one VLAN . Membership in unt agged VLAN would be propagated in a s ame way as a tagged VL AN.
326 GVRP Com mands User Guidel ines This command has no user guidelines . Example The following example shows how default dynamic r egistering and deregistering is forbidden for each VLAN on port 1/g8.
GVRP C o mmand s 327 show gvrp configuration Use the show gvrp conf iguration command in Priv ilege d EXEC mode to display GVRP configuration information. T imer values are displa y ed. Other data shows whether GVRP is enabled and which ports ar e running GVRP .
328 GVRP Com mands 1/g2 20 60 1000 Disabled 1/g3 20 60 1000 Disabled 1/g4 20 60 1000 Disabled 1/g5 20 60 1000 Disabled 1/g6 20 60 1000 Disabled 1/g7 20 60 1000 Disabled 1/g8 20 60 1000 Disabled 1/g9 2.
GVRP C o mmand s 329 User Guideli nes This command has no user guidelines. Example The fol low ing exam ple dis p lay s GV RP erro r s tat isti cs inf orm at io n.
330 GVRP Com mands show gvrp statistics Use the show gvrp statistics comm and in User EXEC mode to display GVRP statistics . Syntax show gvrp statistics [ eth ernet interface | port -channel port-channel-number ] • interface — A val id Et hernet in terface.
GVRP C o mmand s 331 Port rJE rJIn rEmp rLIn rLE rLA sJE sJIn sEmp sLIn sLE sLA ---- --- ---- ---- ---- --- --- --- --- --- ---- ---- --- 1/g1 0 0000 0 0 00000 1/g2 0 0000 0 0 00000 1/g3 0 0000 0 0 00.
332 GVRP Com mands.
IGMP Snoo ping Comma nds 333 12 IGMP Sn ooping Co mman ds This chapter exp lains the following commands: • ip igmp snooping (global) • ip igmp snooping (interface) • ip igmp snooping host-tim e-.
334 IGMP Snooping Command s ip igmp snooping (global) Use the ip igmp snooping command in Global Configurat ion mo de to globally enable Int ernet Group Man agement Protocol (IGMP) snooping. Use the no form of this command to disab le IGMP snooping globally .
IGMP Snoo ping Comma nds 335 Default Conf iguration IGM P s noop in g is disa ble d. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guideli nes IGMP snooping can be enabled on Ethernet interfaces. Example The following exampl e enables IGMP snooping.
336 IGMP Snooping Command s User Guidel ines The timeout should be more than sum of r e sponse time and twice the que ry interval. Example The following example co nfigures the host timeout to 300 s e conds.
IGMP Snoo ping Comma nds 337 User Guideli nes The leav e timeout sho uld be s et greater than t he maximum time tha t a host is allowed to r e spond to an IGMP Query . Use immediate l eave only where there is only one host connected to a po rt. Example The following example configur es the host leave-time-ou t to 60 seconds.
338 IGMP Snooping Command s Example The follow ing example conf igures the mrouter timeou t to 200 sec onds. console(config-if-1/g1)#ip igmp snooping mrouter- time-out 200 show ip igmp snooping groups Use the show ip igm p snooping grou ps command in User EXEC mode to display the Mult icast groups learned by IGMP snooping.
IGMP Snoo ping Comma nds 339 IGMP Reporters that are forbidden statically: --------------------------------------------- Vlan IP Address Ports ---- ------------------ ------------------- 1 224-239.
340 IGMP Snooping Command s Fast Leave Mode........................... Disabled Group Membership Interval................. 260 Max Response Time.......
IGMP Snoo ping Comma nds 341 ip igmp snooping (VLA N) Use the ip igmp snoopin g command in VLAN Configuration mode to enable IGMP snooping on a particular interface or on all interfaces participating in a VLAN. T o disable IGMP snooping use the no form of this command.
342 IGMP Snooping Command s Syntax ip igmp snoopi ng fast- leave vlan -id no ip igmp sno oping f ast-leav e • vla n id — Number a ssigned to the VLAN. Default Conf iguration IGMP snoopin g fast-leav e mode is disabled on VL ANs by default. Command Mode VLAN Configuration mode User Guidel ines This command has no user guidelines .
IGMP Snoo ping Comma nds 343 Default Conf iguration The default group mem bership interval time is 260 se conds. Command Mode VLAN Configuration mode User Guideli nes This command has no user guidelines. Example The following example configur es an IGMP snooping group membership interval of 520 seconds.
344 IGMP Snooping Command s Command Mode VLAN Configuration mode User Guidel ines When usin g IGMP Snooping Q uerier , thi s parame ter sho uld be les s than th e value for the IGMP Snooping Q uerier query interval. Example The followi ng e xample sets the maxi mum r esponse time to 60 seconds on VLAN 2.
IGMP Snoo ping Comma nds 345 User Guideli nes This command has no user guidelines. Example The fo llowing e xampl e sets th e multicas t route r prese nt ex piration time on VLA N 2 to 60 s econ ds.
346 IGMP Snooping Command s.
IGMP Snoo ping Quer ier Co mmands 347 13 IGMP Snoopin g Querier Commands This chapter exp lains the following commands: • ip igmp snooping querier • ip igmp snooping querier election participate .
348 IGMP Snooping Q uerier Co mmands ip igmp snooping querier This command enables or di sables IGMP Snooping Querie r on the system (Global Configuration mode) or on a VLAN. Using this command, y ou can specify the IP address that th e snooping qu erier switch should use as the source address when generating periodic queries.
IGMP Snoo ping Quer ier Co mmands 349 configured, then use the management IP address as the IGMP snooping querier source address. Using all zeros for the querier IP address r emoves it. The VLAN IP address takes pr eced ence over the global IP address.
350 IGMP Snooping Q uerier Co mmands Example The following example configures the snooping querier to partic ipate in the quer ier el ectio n. console(config-vlan)#ip igmp snooping querier election pa.
IGMP Snoo ping Quer ier Co mmands 351 ip igmp snooping qu erier timer expiry This command sets the IGMP Querier timer expiration period wh ich is the time period that the switch remai ns in Non-Querier mode after it has discovered that there is a Multicast Qu erier in the netw ork.
352 IGMP Snooping Q uerier Co mmands Syntax ip igmp snooping querier version number no ip igmp snoo ping querier ver sion • number — IG MP ve rsion. (R ange: 1– 2) Default Conf iguration The q u erie r ve rsio n def ault is 2. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines .
IGMP Snoo ping Quer ier Co mmands 353 • Q uer ier Tim eout — Disp lay s the am ount of time to w ait in the N on- Querier opera tional state before moving to a Querier sta te.
354 IGMP Snooping Q uerier Co mmands Command Mode P ri vileged E xec mode User Guidel ines This command has no user guidelines . Example The following example shows querier information fo r VLAN 2.
IP Addr essing C ommands 355 14 IP Addressing Comman d s This chapter exp lains the following commands: •c l e a r h o s t • ip addr ess • ip addr ess dhcp • ip addr ess vl an • ip defau lt-.
356 IP Addr essing C ommands clear host Use the clear hos t command in Priv ileged EXEC mode to delete entries from the host name-to-address cache. Syntax clear host { name |*} • name — Host name to be del eted from the ho st name-to-a ddress ca che.
IP Addr essing C ommands 357 • mask — Specifies a v alid subnet (network) m ask IP address. • prefix-length — The number of bit s that compri se the IP addr ess pre fix.
358 IP Addr essing C ommands Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines The ip address dhcp com ma nd a ll ows th e s witc h t o dy nam ic al ly o bta in a n I P address by u sing th e DHCP pr otocol .
IP Addr essing C ommands 359 Example The followi ng e xample sets VLAN 5 as management VLAN. console(config)#ip address vlan 5 ip default-gateway Use the ip default-gat eway command in Global Configuration mode to define a defaul t gatewa y (router).
360 IP Addr essing C ommands ip domain-look up Use the ip domain-l ookup command in Global Config uration mode to enable IP Domain Nami ng System (DNS)-based host name-t o -address translation. T o disable the DNS , use the no form o f this command. Syntax ip domain -lookup no ip domain-look up Default Conf iguration The DNS is enabled.
IP Addr essing C ommands 361 • name — Defau lt dom ain name u sed to complete an un qualified host name . Do n ot include t he initia l period that separates the u nqua lified h ost name from t he domain name (Rang e: 1-255 ch aracters). Default Conf iguration This command has no default configuration.
362 IP Addr essing C ommands User Guidel ines This command has no user guidelines . Example The following example de fines a static host name-to-addr ess mapping in the host cache.
IP Addr essing C ommands 363 Example The following example sets the available name server . console(config)#ip name-server 176.16.1.18 ipv6 address Use the ipv6 address command to set the IPv6 addr ess of the management inter face. Use th e "no" for m of thi s comma nd to reset the IPv 6 address to the default.
364 IP Addr essing C ommands Example console(config)#ipv6 address dhcp console(config)#ipv6 address autoconfig console(config)#ipv6 address 2003::6/64 console(config)#ipv6 address 2001::/64 eui64 cons.
IP Addr essing C ommands 365 Default Conf iguration IPv6 is enabled on the management interface by default. Command Mode Global Configuration mode User Guideli nes There ar e no user gui delines for this command.
366 IP Addr essing C ommands Example console(config)#ipv6 gateway 2003::1 console(config)#no ipv6 gateway show ar p switch Use the show arp switch command in Pr ivileged EXEC mode to display the ARP cache entries learned on the management port. Syntax show arp switch Default Conf iguration This command has no default configuration.
IP Addr essing C ommands 367 show hosts Use the show host s command in User EXEC mode to displa y the default domain name, a list of name s e rver hosts, and the static a nd cached list of host names and a dd re sses. The command itself shows host s [hostname].
368 IP Addr essing C ommands show ip he lper -add ress Use the show ip helper-address command in P rivileged EXEC mode to display IP helper a ddresses configuration. Syntax show ip h elper-address [ intf -address ] • intf -address — IP addr ess of a rout ing interface .
IP Addr essing C ommands 369 show ip interface ma nagement Use the show ip interface manageme nt command to disp lay the management interf ace configuration. Syntax show ip inte rface m anageme nt Default Conf iguration This command has no default configuration.
370 IP Addr essing C ommands.
IPv6 Acc ess List Comman ds 371 15 IPv6 Access List Co mmands This chapter exp lains the following commands: •{ d e n y | p e r m i t } • ipv6 access-list • ipv6 access-list r ename • ipv 6 tr.
372 IPv6 Ac cess List C ommands {deny | permit} This command creates a new rule for the cu rrent IPv6 access list. Each rule is appe nded to the li st of co nfigu red rules f or the list. A rule may either deny or per m it traffic accor ding to the specified classification fields.
IPv6 Acc ess List Comman ds 373 • portvalu e — The source layer 4 p ort match con dition for the ACL ru le is specified by the por t value para meter . (Ran ge: 0–6 5535). • destinat ion ipv6 prefix — IPv6 prefix in IPv6 global address forma t.
374 IPv6 Ac cess List C ommands console(Config-ipv6-acl)#deny ipv6 2001:DB8::/32 any eq http console(Config-ipv6-acl)#permit ipv6 2001:DB8::/32 any console(Config-ipv6-acl)# ipv6 access-list The ipv6 access-list command creates an IP v6 Access Control List (A C L) consisting of classification fi e lds define d for the IP header of a n IPv6 frame.
IPv6 Acc ess List Comman ds 375 console(config)#ipv6 access-list DELL_IP6 console(Config-ipv6-acl)# ipv6 access-list rename The ipv6 access-list rename command changes the name of an IPv6 Access Control List (A CL ). This command fails if an IPv6 A CL with the new name alr eady exists.
376 IPv6 Ac cess List C ommands ipv6 traffic-filter The ipv6 traffic-fi lter command either attaches a specific IPv6 Access Co ntr ol Li st (ACL ) to an i nt erf ace or ass oci at es i t w ith a VL AN I D i n a gi ven direction.
IPv6 Acc ess List Comman ds 377 Example The following example attaches an IPv6 access control list to an interface. console(config-if-1/g1)#ipv6 traffic-filter DELL_IP6 in show ipv6 access-lists The show ipv6 access-lists command display s an IPv6 access list and all of t he rules that are defined for the I Pv6 ACL.
378 IPv6 Ac cess List C ommands console#show ipv6 access-lists STOP_HTTP ACL Name: STOP_HTTP Inbound Interface(s): 1/g1 Rule Number: 1 Action......................................... deny Protocol....................................... 255(ipv6) Source IP Address.
IPv6 Acc ess List Comman ds 379 Destination L4 P ort Key w ord This field dis plays the destinat ion port for this r ule. IP DSCP Thi s fiel d indi cates t he valu e sp ecifie d for IP DSC P . Flow La bel This fi eld in dicate s the v alue sp eci fied for IPv6 Flow Labe l.
380 IPv6 Ac cess List C ommands.
IPv6 ML D Snoo ping Queri er Comman ds 381 16 IPv6 MLD Snoopin g Quer ier Commands This chapter exp lains the following commands: • ipv6 m ld sn ooping querier • ipv6 m ld sn ooping querier (VL AN.
382 IPv6 M LD S noop ing Q uerie r C ommand s ipv6 mld snooping querier Use the ipv6 m ld snoop ing querier command to enable MLD Snooping Querier on the system .
IPv6 ML D Snoo ping Queri er Comman ds 383 Command Mode VLAN Data base mode User Guideli nes There ar e no user gui delines for this command. Example console(config-vlan)#ipv6 mld snooping querier 10 ipv6 mld snooping querier addr ess Use the ipv6 mld snooping querier address co mmand to s et the glo bal MLD Snooping Qu erier address.
384 IPv6 M LD S noop ing Q uerie r C ommand s ipv6 mld snooping querier electio n participate Use the ipv6 mld snooping querier electi on participate command to enable the Snooping Querier to parti cipate in the Querier Electi on process when it disc overs the pr esenc e of a nother Queri er in the VLAN.
IPv6 ML D Snoo ping Queri er Comman ds 385 ipv6 mld snooping querier query-in terval Use the ipv6 mld snoopin g querier query-in ter val command to set the ML D Querier Query Interval t ime. It is the amount of time in seconds that the switch waits before sending another g eneral query .
386 IPv6 M LD S noop ing Q uerie r C ommand s ipv6 mld snooping querier timer expi ry • timer — The t ime th at the sw itch remains in Non -Querier mo de after it has discovered that there is a multicast querier in the n etwork. (Rang e: 60–3 00 seconds) Default Conf iguration The default timer e xpiration period is 60 seconds.
IPv6 ML D Snoo ping Queri er Comman ds 387 User Guideli nes When the optional a rgument vlan vlan-i d is not used, the command shows the following information: When the optional a rgument vlan v lan-i.
388 IPv6 M LD S noop ing Q uerie r C ommand s When the optiona l argument detail is used, the command shows the global information and the information for all Querier e nabled VLANs as well as the following information: Last Que rier Addr ess Indicat es the IP add ress of the most r ecent Querier from whic h a Que ry wa s re cei ved .
iSCSI Op timization Command s 389 17 iSCSI Optimization Commands This chapter exp lains the following commands: • iscsi enable •s h o w i s c s i.
390 iSCSI Op timization Command s iscsi enable The iscsi enable command g lobally enables i SCSI awareness. T o disable iSCSI awar eness use the no form of this command. Syntax iscsi enable no iscsi ena ble Default Conf iguration The default iSCSI o ptimiza tion mode is disabled.
iSCSI Op timization Command s 391 Example The followi ng e xample enables iSCSI aw areness. console(config)#iscsi enable show iscsi The show iscsi command output indicates wh e ther iSCS I optimi zation is enabled or disabled. Syntax show iscsi Default Conf iguration There is no default configuration for this command.
392 iSCSI Op timization Command s.
LACP Commands 393 18 LACP Co mmands This chapter exp lains the following commands: • lacp port -priority • lacp system-priority •l a c p t i m e o u t • show lacp e thernet • show lacp por t.
394 LACP Comm ands lacp po rt-prior ity Use the lacp port -priori ty command in Interface Configuration mode to configur e the pri o rity va lue for physical po rts. T o r eset to de fault priority valu e, use the no form of this command. Syntax lacp port-priori ty value no lacp port-p riority • val ue — P o rt priority valu e.
LACP Commands 395 • val ue — P o rt priority valu e. (Ran ge: 1–65 535) Default Conf iguration The default system priority value is 1. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The following example configur es the system priority to 120.
396 LACP Comm ands User Guidel ines This command has no user guidelines . Example The following example a ssigns an administrative LA CP timeout for port 1/g8 to a long t imeout v alue.
LACP Commands 397 system priority: 1 system mac addr: 00:00:12:34:56:78 port Admin key: 30 port Oper key: 30 port Oper priority: 1 port Admin timeout: LONG port Oper timeout: LONG LACP Activity: ACTIV.
398 LACP Comm ands expired: FALSE Port 1/g1 LACP Statistics: LACP PDUs sent: 2 LACP PDUs received: 2 show lacp port-channel Use the show lacp port-chann el command in Priv ileged EXEC mode to display LACP information for a p ort-channel.
LACP Commands 399 Oper Key: 29 Partner System Priority: 0 MAC Address: 000000:000000 Oper Key: 14.
400 LACP Comm ands.
Link Depe ndency Co mmands 401 19 Link Depend ency Commands This chapter exp lains the following commands: •l i n k - d e p e n d e n c y g r o u p • no lin k-dependency group • add et hernet .
402 Link Dep endency Command s link-depe ndency group Use the link-d ependency group com mand to enter the li nk-dependency mode to configure a link-dependency group Syntax link-dependency group GroupId • GroupId — Link depend ency grou p identifier .
Link Depe ndency Co mmands 403 Command Mode Global Configuration mode User Guideli nes No specific guideline s Example console(config)#no link-dependency group 1 add et hernet Use the add ether net comm and t o ad d m embe r E ther ne t po rt( s) to the dependency list.
404 Link Dep endency Command s add p ort-channe l Use the add port-chan nel command to add member port-channels to the dependency list. Syntax add port-channel port-channel-list • port-channel-list — Lis t of po rt- chann el int erf aces. Sepa rate nonconsec u tive ports wit h a comma and no spaces.
Link Depe ndency Co mmands 405 Default Conf iguration This command has no default configuration. Command Mode Link Dependency mode User Guideli nes No specific guideline s Example console(config-linkDep-group-1)#no add port-channel 2 depends-o n ethernet Use the depends-on e thernet command to add the dependent Ethernet ports list.
406 Link Dep endency Command s no depe nds-on ether net Use the no de pends- on ethe rnet command to remove the depen dent Ethernet ports list. Syntax no depends -on eth ernet intf -list • intf -l ist — List of Ethern et interfaces. Sepa rate nonconsecutive ports with a comma and no sp aces.
Link Depe ndency Co mmands 407 Default Conf iguration This command has no default configuration. Command Mode Link Dependency mode User Guideli nes No specific guideline s Example console(config-linkD.
408 Link Dep endency Command s Example console(config-linkDep-group-1)# no depends-on port- channel 6 show link-d ependency Use the show link-depen dency command to show the link dependencies configured for a particul ar group . If no group is specified, then all the configured link-dependency groups ar e displayed.
Link Depe ndency Co mmands 409 The following command shows link dependencies for group 2 only . console#show link-dependency group 2 GroupId Member Ports Ports Depended On ------- --------------------.
410 Link Dep endency Command s.
LLDP Commands 411 20 LLDP Comm ands This chapter exp lains the following commands: • clea r lldp remot e-data • clea r lldp s tatis tics •l l d p m e d • lldp m ed confignotifica tion • lldp.
412 LLDP Co m mands clear lld p remote- data Use the clear lldp remote- data command in P rivileged EXEC mode to delete all LLDP i nformati on from the remote data table. Syntax clear lldp remote-data Default Conf iguration By default, data i s removed only on system r eset.
LLDP Commands 413 User Guideli nes This command has no user guidelines. Example The following exampl e displays how to r eset all LLDP statistics. console#clear lldp statistics lldp med This command is used to enable/disa b le LLDP -MED on an interface.
414 LLDP Co m mands lldp med confignotification This command is used to enable sending the topology change notification. Syntax De scription lldp med confignotification no lldp med confignot ification.
LLDP Commands 415 Command Mode Global Configuration Default V alue 3 Usage Guideli nes No specific guideline s. Example console(config)# lldp med faststartrepeatcount 2 lldp med transmit-tlv This command is used to specify whic h optio nal TL Vs in the LLDP MED set are transmitted in the LLDP DUs.
416 LLDP Co m mands Para mete r R ange s Not appl icable. Command accepts k eywords only . Command Mode Interface (Ethernet) Configuration Default V alue By defau lt, the capa bilities and network po licy TL Vs ar e included.
LLDP Commands 417 Example The following example di sp lays how to enable remote da ta chan ge notifications. console(config-if-1/g3)#lldp notification lldp notification-interv al Use the lldp noti fication -interva l command in Global Configuration mode to limit how frequently remote data ch ange notifications a re sent.
418 LLDP Co m mands lldp receive Use the lldp receive command i n Interface Configuration mode to enable the LLDP receive capability . T o disable r eception of LL DPDUs, use the no fo rm of this command. Syntax lldp receive no lldp receive Default Conf iguration The default lldp receiv e mode is disabled.
LLDP Commands 419 • transmi t-interv al — The interva l in second s at w hich to tran smit l ocal data LLD PDUs. ( Range: 5–327 68 seco nds) • hold-mu ltipl ier — Multiplier on the transmit interval used to set the T TL in loca l data LLD PDU s.
420 LLDP Co m mands lldp transmit Use the lldp tran smit command in Interface Configuration mode to enable the LLD P adve rtise (t ransm it) ca pabili ty . T o disabl e local da ta tran smis sion, use the no form of this co mmand. Syntax lldp tran smit no lldp t ransmi t Default Conf iguration LLDP is disabled on al l supported interfaces.
LLDP Commands 421 Default Conf iguration By default, management address information is not included. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines. Example The following example displ ay s how to include management information in the LL DPDU.
422 LLDP Co m mands User Guidel ines This command has no user guidelines . Example The following example shows how to include the system description TL V in local data transmit .
LLDP Commands 423 console#show lldp LLDP transmit and receive disabled on all interfaces show lldp interface Use the show ll dp interface com mand in P rivileged EXEC mode to display the current LLDP inte rface state.
424 LLDP Co m mands System Capability console# show lldp interface 1/g1 Interface Link Transmit Receive Notify TLVs Mgmt --------- ---- -------- -------- -------- ------ ---- 1/g1 Up Enabled Enabled E.
LLDP Commands 425 Interface Port ID Port Description --------- -------------------- -------------------- 1/g1 00:62:48:00:00:02 console# show lldp local-device detail 1/g1 LLDP Local Device Detail Int.
426 LLDP Co m mands show lldp med This command displays a s umm ary of the curr e nt LLDP MED configuration. Syntax De scription show lldp med Para mete r R ange s Not applicab le Command Mode P rivileged EXEC Default V alue Not applicab le Usage Guideli nes No specific guideline s.
LLDP Commands 427 • All — Indicat es all val id LLDP interface s. Parameter Rang es Not applicab le Command Mode P rivileged EXEC. Default V alue Not applicab le Example console#show lldp med inte.
428 LLDP Co m mands show lldp med local-device This command displays the advertised LLDP local data. This command can display summary informat ion or detail for each interface. Syntax De scription show lldp med local-de vice detail < unit/port > • unit/p ort — Indicates a specific physical interface.
LLDP Commands 429 DSCP: 1 Unknown: False Tagged: True Media Policy Application Type : streamingvideo Vlan ID: 20 Priority: 1 DSCP: 2 Unknown: False Tagged: True Inventory Hardware Rev: xxx xxx xxx Fir.
430 LLDP Co m mands Extended POE PSE Available: 0.3 watts Source: primary Priority: critical Extended POE PD Required: 0.2 watts Source: local Priority: low show lldp med remote-device This comma nd display s the current LLDP ME D remote data. This comm and can display s umm ary informati on or detail for each interface.
LLDP Commands 431 Default V alue Not applicab le Example Console#show lldp med remote-device all LLDP MED Remote Device Summary Local InterfaceDevice Class --------------------- 1/g1Class I 1/g2 Not D.
432 LLDP Co m mands Network Policies Media Policy Application Type : voice Vlan ID: 10 Priority: 5 DSCP: 1 Unknown: False Tagged: True Media Policy Application Type : streamingvideo Vlan ID: 20 Priori.
LLDP Commands 433 Subtype: elin Info: xxx xxx xxx Extended POE Device Type: pseDevice Extended POE PSE Available: 0.3 Watts Source: primary Priority: critical Extended POE PD Required: 0.
434 LLDP Co m mands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Examples These examples show current LLDP remote data, including a deta iled version .
LLDP Commands 435 show lldp statistics Use the show lldp statistics command in P rivileged EXEC mode to display the cu rren t LLDP tra ffic sta tistics. Syntax show lldp statistics { int erf ac e | all } • interface — S pecifies a va lid phys ical interf ace on t he swit ch or unit/port .
436 LLDP Co m mands Total Ageouts.............................. .. 1 Tx Rx TLV TLV TLV TLV TLV Interface Total Total Discards Errors Ageout Discards Unknowns MED 802.1 802.3 --------- ----- ----- -------- ----- - ------ -------- -------- ---- ----- ----- 1/g11 29395 82562 0 0 1 0 0 0 1 4 The following table explains the fields in this example.
LLDP Commands 437 Errors Number of non-valid LLDP frames received on the indic ated port. Ageout s Number of times a remote data entry on the indic ated port has b een delete d due to TTL exp i ra ti o n .
438 LLDP Co m mands.
Port Channe l Comman ds 439 21 Port Channel Comman ds This chapter exp lains the following commands: • channel -group • interfa ce port-chann el • interfa ce range port- channel • hashing -mod.
440 Port Ch annel Comma nds channel- group Use the channel-gr oup command in Interface Co nfiguration mode to configure a port-to-port channel. T o remove the channel-group configuration from the interface, use the no form of this command.
Port Channe l Comman ds 441 interface por t-channel Use the interfac e port-chann el command in Global Configuration mode to configure a port-channel type a nd e n ter port-channel configuration mode. Syntax interface port- channel port-channel-number • port-channel-number — A valid port -channel tr unk inde x.
442 Port Ch annel Comma nds Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines Commands in the inte rface range context are ex ecuted indep endently on each interface in the range.
Port Channe l Comman ds 443 Default Conf iguration This command has no default configuration. Command Mode Interface Configuration (port-channel) User Guideli nes No specific guideline s.
444 Port Ch annel Comma nds show inte rfaces port- channel Use the show interfa ces port-channel command to show port-channel information. Syntax De scription show int erfaces p ort-chann el [ port-channel number ] •[ port- channel -number ] — Numb er of the port cha nnel to show .
Port Channe l Comman ds 445 Hash algorithm type 1 - Source MAC, VLAN, EtherType, source module and port Id 2 - Destination MAC, VLAN, EtherType, source module and port Id 3 - Source IP and source TCP/.
446 Port Ch annel Comma nds Total Packets Received (Octets)................ 0 Packets Received > 1522 Octets................. 0 Packets RX and TX 64 Octets.................... 1064 Packets RX and TX 65-127 Octets................ 140 Packets RX and TX 128-255 Octets.
Port Channe l Comman ds 447 Unacceptable Frame Type........................ 0 Multicast Tree Viable Discards................. 0 Reserved Address Discards...................... 0 Broadcast Storm Recovery....................... 0 CFI Discards...........
448 Port Ch annel Comma nds GVRP Failed Registrations...................... 0 Time Since Counters Last Cleared............... 0 day 0 hr 17 min 52 sec console#.
Port Monitor C ommands 449 22 Port Monito r Comman ds This chapter exp lains the following commands: • monitor session • show monito r session.
450 Port Monitor Commands monitor session Use the monitor session command in Global Configuration mode to configure a probe port and a monitor ed p ort for monitor session (port monitoring). Use the src-interface p aramet er to specify the inte rface to moni tor .
Port Monitor C ommands 451 Example The following examples shows variou s port monitoring configurations. console(config)#monitor session 1 source interface 1/g8 console(config)#monitor session 1 desti.
452 Port Monitor Commands.
QoS Co mm ands 453 23 QoS Commands This chapter exp lains the following commands: •a s s i g n - q u e u e •c l a s s •c l a s s - m a p •c l a s s - m a p r e n a m e • classofservice dot1p.
454 QoS Comma nds •m a t c h i p t o s • match protocol • match source-addr ess mac •m a t c h s r c i p •m a t c h s r c i p 6 •m a t c h s r c l 4 p o r t • match vlan • mirror •p .
QoS Co mm ands 455 assign- queue Use the assign-queue command in P oli cy -Class-Ma p Configuration mode to modify the queue ID to which the associated traffic stream is assigned. Syntax assign-queue < queueid > • queueid — S pecifies a valid queue ID .
456 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode P olicy Map Configuration mode User Guidel ines This command causes the specified policy to create a refere nce to the class definition. The command mode is changed to P olicy-Class -Map Configuration when this command is e xecuted successfully .
QoS Co mm ands 457 User Guideli nes There ar e no user gui delines for this command. Example The followi ng e xample creates a class-map named "DE LL" which req uires all ACE’s to be ma tched.
458 QoS Comma nds console(config)# clas sofser vice dot1p -mappin g Use the classofser vice dot1p-mapping command in Global Configuration mode to map an 802. 1p priority to an interna l traffic class. In Interface Co nfig ura tio n mo de, th e m appi ng is ap pl ied onl y t o pac kets recei ved on th at interface.
QoS Co mm ands 459 classofservice ip-dscp-ma pping Use the classofser vice ip-dscp-mapping command in Global Configuration mode to map an IP DS C P value to a n internal traffic class. Syntax classofser vice ip-dscp-mapping ipd scp trafficclass • ipdscp — Sp ecifies the IP D SCP va lue to which you ma p the specified traff ic class .
460 QoS Comma nds clas sofser vice trus t Use the classofser vice trust command in either Global Configuration mode or Interfa ce Configura tion mode to set the c lass of ser vice trus t mode of an interface. T o set the inte rface mode to untrusted, use the no form of this command.
QoS Co mm ands 461 conform-c olor Use the conform -color command in P olicy-Class-Map Config uration mode to specify second-level matc hing for traffic flow , the o nly possible ac tions are drop, setdscp-transmit , set-prec-transmit, o r transmit.
462 QoS Comma nds • bw-0 — Sp ecifies the m inimum trans mission band width for an int erface. Y o u can specify as many band widths a s there are interfaces (bw-0 through bw-n). (Ra nge: 0–10 0 in in crements of 5) Default Conf iguration This command has no default configuration.
QoS Co mm ands 463 Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode or Interf ace Configuration (Ethernet, P ort- channel) mode User Guideli nes This command has no user guidelines.
464 QoS Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following example displays how to s et the Dif fServ oper ational mode to active.
QoS Co mm ands 465 mark cos Use the mark co s command in P o licy-Class-Map Co nfiguration mode to mark all packets for the associated traffic stream with the specified class of servi ce val ue in the prior ity fie ld of t he 802. 1p header . If the pac ket does no t alre ady contain this header , one is inserted.
466 QoS Comma nds • dscpval — S pecifies a D SCP value (1 0, 12, 14, 1 8, 20 , 22, 26, 28 , 30, 34, 36, 38, 0 , 8, 16, 24 , 32 , 40, 4 8, 56, 4 6) or a DSC P keywo rd (af11, af1 2, af13 , af21, af2 2, af23 , af31, af32, a f33, a f41, af4 2, af43 , be, cs0, cs1, c s2, cs3, c s4, cs5, cs6, cs7, ef).
QoS Co mm ands 467 User Guideli nes. This command has no user guidelines. Example The following ex ample displays console(config)#policy-map p1 in console(config-policy-map)#class c1 console(config-po.
468 QoS Comma nds • Any attemp ts to delete the ref cl a ssn a me class wh ile the class is st i ll ref ere nc ed by a ny cla ss-map-name fails. • Th e combined match criteria of class -map-name and re f c l a s s n a m e must be an allowe d combination ba sed on the class type.
QoS Co mm ands 469 Command Mode Class-Map Configuration mode User Guideli nes This command has no user guidelines. Example The following exampl e displays adding a match condition to the specified class.
470 QoS Comma nds Example The following example displays adding a match condition for the specified MAC addr ess and bit mask. console(config-classmap)#match destination-address mac AA:ED:DB:21:11:06 .
QoS Co mm ands 471 match dstip6 The match dstip6 co mmand adds to the specified cla ss definition a mat ch condition based on the destination IPv6 address of a pack et. Syntax match dstip 6 de sti nat io n-ip v6 -pref ix /pref ix- le ngt h • destinat ion-ipv6 -prefix — IPv6 p refix in IPv6 global ad dress format.
472 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode Class-Map Configuration mode User Guidel ines This command has no user guidelines . Example The following example displays adding a match condition based on the destination laye r 4 port of a pack e t using the " e cho" port name k eyword.
QoS Co mm ands 473 Example The following example displ ay s how to add a match condition based on ethertype. console(config-classmap)#match ethertype arp match ip6flowlbl The match ip6flowlbl command adds to the specified class definition a match condition based on the IPv6 flow label of a pack et.
474 QoS Comma nds match ip dscp Use the match ip dscp command in Class-Map Configuration mode t o add to the spec ifie d class defi nition a m atch co ndition based on the value of the IP DiffServ Code P oint (DSCP) field in a pack et. This field is defined as the high-order six bits of the Service T ype octe t in the IP header .
QoS Co mm ands 475 match ip pr ecedence Use the match ip precedence command in Class-Map Configuration mode to add to the specified class definiti o n a match condition based on the value of the IP precedence field. Syntax match ip prece dence precedence • precedence — S pecifies the precedence field in a packet.
476 QoS Comma nds Syntax match ip tos tosbit s tosma sk • tosb its — Spe cifies a two-d igit hexadecima l numb er . (Range : 00–ff) • tosmask — Spe cifies the bit positions in the to sbits param eter tha t are used for comparison against t he IP TO S field in a packet.
QoS Co mm ands 477 • protocol-name — Specifies one of the supp orted p rotocol name keywords. The supported values are icmp , igmp , ip , tcp , and udp . • protocol-number — Specifies the standard value assigned by IANA. (Ran ge 0–25 5) Default Conf iguration This command has no default configuration.
478 QoS Comma nds Command Mode Class-Map Configuration mode User Guidel ines This command has no user guidelines . Example The following example adds to t he specified class definition a match condition based on the source MAC addr ess of the packet.
QoS Co mm ands 479 Example The following exampl e displays adding a match condition for the specified IP addres s and address bit mask. console(config-classmap)#match srcip 10.240.1.1 10.240.0.0 match sr cip6 The match srcip6 command adds to the specified class definition a match condition based on the source IPv6 address of a pack et.
480 QoS Comma nds match srcl4port Use the match srcl 4port co m mand in C l ass -Map Co nfiguration mode to add to the specif ied class definition a ma tc h condition based on the source layer 4 port of a packet using a single keyword or a numeric notation.
QoS Co mm ands 481 match vlan Use the match v lan command in Class-Map C onfiguration mode to add to the specified class definition a ma tch condition based on the value of the layer 2 VLAN Identifier field. This field is the only tag in a single tagged packet or the first or outer tag of a double VLAN packet.
482 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode P olicy-Class-Ma p Configuration mo de User Guidel ines The por t identif ied in this com mand is ide ntica l to the destina tion por t of the moni tor command.
QoS Co mm ands 483 • dscpval — DSCP valu e. (Range: 0 – 63 or a k eywor d from this l ist, af11 , af12 , af13 , af21 , af22 , af23 , af31 , af32 , af33 , af41 , af42 , af43 , be , cs0 , cs1 , cs2 , cs3 , cs4 , cs5 , cs6 , cs7 , ef ) Default Conf iguration This command has no default configuration.
484 QoS Comma nds Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines The CLI mode is changed to P olicy-Class-Map Configuration when this command is successfully e xecuted.
QoS Co mm ands 485 User Guideli nes This command has no user guidelines. Example The following exampl e shows how to redir ect incoming packets t o port 1/g1.
486 QoS Comma nds Ensure that no attr ibutes wi thin th e policy definition exceed the capab ilities of the i nterface . When a po licy is at tached to an interf ace succe ssfully , any attempt to cha.
QoS Co mm ands 487 Example The following example dis plays all the configuration inform ation for the cla ss named "Dell". console#show class-map Class L3 Class Name Type Proto Reference Cla.
488 QoS Comma nds console#show class-map stop_http_class Class Name........................... stop_http_class Class Type........................... All Class Layer3 Protocol.
QoS Co mm ands 489 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes If the interf ace is specifie d, the 802. 1p mapping table of the i nterface is displayed. If omit ted, the most re ce nt global configuration settings are displayed.
490 QoS Comma nds The following table lists th e paramete rs in the example and gives a description of each. show classofser vice ip-dscp-mapping Use the show classofser vice ip-dscp-mapping command in P rivileged EXEC mode to disp lay t he cur rent IP D SCP mapp ing to intern al t raffi c cla sses for a spe cifi c in terf ac e.
QoS Co mm ands 491 21 31 41 51 61 71 8(cs1) 0 90 10(af11) 0 11 0 12(af12) 0 13 0 14(af13) 0 15 0 16(cs2) 0 17 0 18(af21) 0 19 0 --More-- or (q)uit 20(af22) 0 21 0 22(af23) 0 23 0 24(cs3) 1 25 1 26(af3.
492 QoS Comma nds 27 1 28(af32) 1 29 1 30(af33) 1 31 1 32(cs4) 2 33 2 34(af41) 2 35 2 36(af42) 2 37 2 38(af43) 2 39 2 40(cs5) 2 41 2 42 2 --More-- or (q)uit 43 2 44 2 45 2 46(ef) 2 47 2 48(cs6) 3 49 3.
QoS Co mm ands 493 52 3 53 3 54 3 55 3 56(cs7) 3 57 3 58 3 59 3 60 3 61 3 62 3 63 3 console# show clas sofservice trust Use the show classofser vice trust command in P rivileged EXEC mode to display the curr ent tru st mode set ting for a specific i nterface.
494 QoS Comma nds • port- channel number — Sp ecifies a valid port-chann el num ber . Range is 1- 8. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines If the inter face is specified, th e port trus t mode of the interface i s displayed.
QoS Co mm ands 495 User Guideli nes This command has no user guidelines. Example The following exampl e displays the DiffServ information. console#show diffserv DiffServ Admin mode........................ Enable Class Table Size Current/Max...........
496 QoS Comma nds Example console#show diffserv service interface ethernet 1/g1 in DiffServ Admin Mode.......................... Enable Interface..................................... 1/g1 Direction..................................... In No policy is attached to this interface in this direction.
QoS Co mm ands 497 Direction................................... In No policy is attached to this interface in this direction show diffserv service brief Use the show diffserv ser vice brief command in Pr ivileged EXEC mode to display all interfaces in the syst em to which a DiffS e rv policy ha s been attached.
498 QoS Comma nds show inte rfaces cos-qu eue Use the show interfaces cos-queue command in Priv ileged EXEC mode to display the class-of-se rvice queue configuration for the specif ied interface.
QoS Co mm ands 499 Global Configuration Interface Shaping Rate......................... 0 Queue Id Min. Bandwidth Scheduler Type Queue Management Type -------- -------------- -------------- ----------.
500 QoS Comma nds The following table lists th e parameters i n the examples and gives a description of each. show policy- map Use the show policy-m ap command in P rivileged EXEC mode to display all configuration information for the specified policy .
QoS Co mm ands 501 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines.
502 QoS Comma nds User Guidel ines This command has no user guidelines . Example The fo llo win g exa mp le d is pla ys the st atis tic s info rm atio n fo r p ort 1/g 1. console#show policy-map interface 1/g1 in Interface.............................
QoS Co mm ands 503 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The followi ng e xample displays a s ummary of policy -oriented statistic s information.
504 QoS Comma nds traffic-shape Use the traffic-shape command in Global Configuration mode and Interface Configuration mode to specify the maximum transmission bandwidth limit for th e in ter face as a w hol e.
RADIUS C ommands 505 24 RADIUS Commands This chapter exp lains the following commands: • aaa account ing network de fault start- stop group radi us •a c c t - p o r t •a u t h - p o r t •d e a.
506 RADIUS C ommands aaa acc ounting network defa ult start-stop group radius Use the aaa accounting network defa ult start-stop group ra dius command to enable RADIUS accoun ting on the swit ch. Use the “no” form of t his command to disable R ADIUS accounting.
RADIUS C ommands 507 Default Conf iguration The default value of the port number is 1813 . Command Mode Radius (accounting) mode User Guideli nes There ar e no user gui delines for this command. Example The followi ng exampl e sets po rt number 56 for accounting requests.
508 RADIUS C ommands Example The f ollowing exampl e sets th e port num ber 2412 f or authe nticati on re q ue s t s . console(config)#radius-server host 192.
RADIUS C ommands 509 key Use the key command to speci fy the enc ryption key which i s shared with the R ADIUS server . Use the "no" form of this co mmand to remove the k ey . Syntax key key -s t ri n g • key -s tr in g — A string specifying the en cryption key (Range: 0 - 128 characte rs).
510 RADIUS C ommands Default Conf iguration The message authenti cator attribute is enabled by default. Command Mode Radius mode User Guidel ines There ar e no user gui delines for this command. Example console(Config-auth-radius)#msgauth name Use the name command t o assign a name to a R ADIUS server .
RADIUS C ommands 511 primary Use the primary command to specify that a configured server should be the primary server in the group of authent ication servers which have the s ame server name. Multiple p rimary servers can be configured for each g roup of servers which have the same name.
512 RADIUS C ommands Default Conf iguration The default priority is 0. Command Mode Radius mode User Guidel ines User must enter the mode corresponding to a specific Radius server before ex ecuting this command. Example The following example specifies a priority of 10 for the designated serve r .
RADIUS C ommands 513 User Guideli nes This command has no user guidelines. Example The following example se t s the interval for which any unavailable Radius servers ar e skippe d over by transaction r equests to 10 minutes.
514 RADIUS C ommands Example The followi ng e xample specifies a Radius server host with the following cha ract er ist ics: Server h ost IP a ddress — 192 .
RADIUS C ommands 515 radius-ser ver retransmit Use the radius-ser ver retransm it command in Global C onfiguration mode to specif y the number of times the R adius cl ient wil l retransmit requests to th e Radius server . T o reset the de fault configuration, use the no form of this command.
516 RADIUS C ommands no radius-ser ver so urce-ip • source — Specifies the source IP address. Default Conf iguration The default I P address is the outg oing IP inter face. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines .
RADIUS C ommands 517 User Guideli nes This command has no user guidelines. Example The following exampl e sets the interval for which a switch waits for a s e rver host to re ply to 5 se conds.
518 RADIUS C ommands show radi us-servers Use the show radius-ser vers command to display the list of configured R ADIUS servers and the values configur ed for the global parameters of the RA D I U S c l i en t .
RADIUS C ommands 519 Example console#show radius-servers IP address Type Port TimeOut Retran. DeadTime Source IP Prio. Usage ------------- ----- ----- ------- ------- -------- ------------- -- --- ----- 10.27.5.157 Auth 1812 Global Global Global 10.27.
520 RADIUS C ommands Retransmit : 3 Deadtime : 0 Source IP : 0.0.0.0 RADIUS Attribute 4 Mode : Disable RADIUS Attribute 4 Value : 0.0.0.0 console#show radius-servers accounting name Server Name Host Address Port Type -------------------------- -------------------- ------ ---------- Default-RADIUS-Server 2.
RADIUS C ommands 521 show radiu s-servers statistics Use the show radius- servers statisti cs command to show the st atistics for an authenti cation or a ccounting s erver .
522 RADIUS C ommands The following fields are displayed for authentication servers: Requ ests The num ber of R ADIUS Ac countin g Request p acket s sent to thi s server not incl uding the retransmi ssion s. Retra nsmis sions The numbe r of RADIUS Accoun ting Re ques t packets retransmitte d to thi s RADIUS accounti ng server .
RADIUS C ommands 523 Example console#show radius-server statistics account ing 192.168.37.200 RADIUS Accounting Server Name................ . Default_RADIUS_Server Host Address................................. . 192.168.37.200 Round Trip Time.........
524 RADIUS C ommands Retransmissions............................ ... 0 Responses.................................. ... 0 Malformed Responses........................... 0 Bad Authenticators......................... ... 0 Pending Requests...............
RADIUS C ommands 525 source-ip Use the source-ip command in Radius mode to specify the source IP addr ess to be used for communication with Radius servers. 0.0.0.0 is int erpreted as a request to use the IP a ddress of the outgoing IP inte rface. Syntax source-ip source • source — A valid sour ce IP addr ess.
526 RADIUS C ommands Default Conf iguration The default value is 3 seconds. Command Mode Radius mode User Guidel ines User must enter the mode corresponding to a specific Radius server before ex ecuting this command. Example The follo wing e xample s pecifi es the time out sett ing for the d esigna ted Radius Server .
RADIUS C ommands 527 User Guideli nes User must enter the mode corresponding to a specific Radius server b efore ex ecuting this command. Example The following example specifies usage type login .
528 RADIUS C ommands.
Spanni ng T ree Com mands 529 25 Spann ing T r ee Co mman ds This chapter exp lains the following commands: • clear span ning-tr ee detected -protocols •e x i t ( m s t ) •i n s t a n c e ( m s .
530 Span ning T ree Com mand s • spa nning-tree portfast bpdufilter defau lt • spa nnin g-tree portfast de fault • spa nning-tree port-priority • spa nning-tree priority • spanning -tre e tc.
Spanni ng T ree Com mands 531 clear spannin g-tree detected-pr otocols Use the clear sp anning -tree dete cted-protoc ols command in P rivileged EXEC m ode to restart the p rotocol migr ation proce ss (force the r enegotiation with neighboring switches) on all interfaces or on the specified interface.
532 Span ning T ree Com mand s Default Conf iguration MST configuration. Command Mode MST mode User Guidel ines This command has no user guidelines . Example The following example shows how to ex it t he MST configuration mode and save change s.
Spanni ng T ree Com mands 533 User Guideli nes Before mapping VLANs to an instance us e the span ning-tree mst enable comma nd to enab le the in stance. All VLANs that are not explicitly map ped to an MST instance are mapped to the common and internal spanning tree (CIST) ins tance (instance 0) and cannot be unmapped from the CIST .
534 Span ning T ree Com mand s Example The f ollowin g exampl e sets the co nfiguration name to “r e gion1”. console(config)#spanning-tree mst configuration console(config-mst)#name region1 revision (mst) Use the revision com mand in MST mode to identify the configuration revision numbe r .
Spanni ng T ree Com mands 535 Syntax show spannin g-tree [ethernet interface-number | port- channel port-channel- number] [ inst anc e instance-id] show sp anning-tre e [detail] [ active | blockedpo rts] | [insta nce inst anc e -id ] show spannin g-tree mst-conf iguratio n • detail — Displays de tailed in formation.
536 Span ning T ree Com mand s Address 80:00:00:FC:E3:90:00:5D This Switch is the Root. Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec TxHoldCount 6 sec Interfaces Name State Prio.Nbr Cost Sts Role PortFast Restricted ------ -------- --------- ---------- ---- ----- -------- ------- 1/g1 Enabled 128.
Spanni ng T ree Com mands 537 1/g19 Enabled 128.19 0 DIS Dis b No No 1/g20 Enabled 128.20 0 DIS Dis b No No --More-- or (q)uit Name State Prio.Nbr Cost Sts Role PortFast Restricted ------ -------- --------- ---------- ---- ----- -------- ------- 1/g21 Enabled 128.
538 Span ning T ree Com mand s Regional Root Path Cost: 0 ROOT ID Address 40:00:00:FC:E3:90:06:0F Path Cost 20000 Root Port 1/g1 Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec TxHoldCount 6 sec Bridge ID Priority 32768 Address 80:00:00:FC:E3:90:00:5D Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Interfaces Name State Prio.
Spanni ng T ree Com mands 539 1/g12 Enabled 128.12 0 DIS Dis b No No 1/g13 Enabled 128.13 0 DIS Dis b No No 1/g14 Enabled 128.14 0 DIS Dis b No No 1/g15 Enabled 128.15 0 DIS Dis b No No 1/g16 Enabled 128.16 0 DIS Dis b No No --More-- or (q)uit Name State Prio.
540 Span ning T ree Com mand s ch6 Enabled 128.631 0 DIS Disb No No ch7 Enabled 128.632 0 DIS Disb No No ch8 Enabled 128.633 0 DIS Disb No No ch9 Enabled 128.634 0 DIS Disb No No ch10 Enabled 128.635 0 DIS Disb No No ch11 Enabled 128.636 0 DIS Disb No No ch12 Enabled 128.
Spanni ng T ree Com mands 541 Priority 32768 Address 80:00:00:FC:E3:90:00:5D Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Interfaces Name State Prio.Nbr Cost Sts Role PortFast RestrictedPort ------ -------- --------- ---------- ---- ----- -------- ------- --More-- or (q)uit Name State Prio.
542 Span ning T ree Com mand s Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Bridge ID Priority 32768 Address 80:00:00:FC:E3:90:00:5D Hello Time 2 Sec Max Age 20 sec Forward Delay 15 sec Interfaces Name State Prio.
Spanni ng T ree Com mands 543 User Guideli nes The following fields are displayed: Example console#show spanning-tree summary Spanning Tree Admin Mode.......... Disabled Spanning Tree Version............. IEEE 802.1s BPDU Protection Mode..............
544 Span ning T ree Com mand s Configuration Revision Level...... 0 Configuration Digest Key.......... 0xac36177f50283cd4b83821d8ab26de62 Configuration Format Selector..... 0 No MST instances to display. spanning- t ree Use the spanning -tree command in Global Configuration mode to enable spanning-tree functionality .
Spanni ng T ree Com mands 545 spanning-tr ee auto-portfast Use the spanning- tree auto -portfas t comm and to set the port to a uto por tfast mode. This enables the port to b e come a portfast port if it does not see a ny BPDUs for 3 s e conds. Use the “no” form of t his command to disable aut o portfast mo de.
546 Span ning T ree Com mand s no span ning-tree bpdu flooding Default Conf iguration This featur e is disabled by default. Command Mode Glo bal C onf igura tion mode Usage Guideli nes There ar e no usa ge guidelines for this command.
Spanni ng T ree Com mands 547 Default Conf iguration BPDU p rotec tion is not en abled. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines.
548 Span ning T ree Com mand s Command Mode Interface Configuration (Et hernet, P ort-Channel) mode User Guidel ines There ar e no user gui delines for this command. Example The following exampl e configures the sp anning-t ree cost o n 1/g5 to 35000.
Spanni ng T ree Com mands 549 console(config-if-1/g5)#spanning-tree disable spanning-tr ee forward-time Use the spann ing-tr ee forward -time com mand in Global Configurat ion mode to configure the sp.
550 Span ning T ree Com mand s spanning- t ree g uard The spanning -tree gua rd command selects whet her loop guard or root guard is en abled on an i nterfa ce. If neith er is en abled , the port ope rates in accordance with the multi p le spanning tree protocol.
Spanni ng T ree Com mands 551 Syntax spanning -tree loopgua rd default no spanning- tree loopgua rd default Default Conf iguration Loop guard is disab led by default. Command Mode Global Configuration mode Usage Guideli nes There ar e no usa ge guidelines for this command.
552 Span ning T ree Com mand s User Guidel ines When configuring the Max-Age t he following relationships should be satisfie d: 2*(F orw ard- Time - 1) >= Max -Age Max-Age >= 2*(Hello- Time + 1) Example The following example configur es the spanning-tree bridge maximum-age to 10 seconds.
Spanni ng T ree Com mands 553 spanning-tr ee mode Use the spanni ng-tree mode command in Global Configuration mode to configure the spanning-tree protocol.
554 Span ning T ree Com mand s This command is us ed to co nfigu re rst p path co st. Use the “no” fo rm of this com mand to reset the external cost t o the default. Syntax span ning-t ree mst 0 extern al-cos t cost no spanning- tree mst 0 external -cost • cost — The external cost of the com mon spanning t r ee (R ange: 0–20 000000 0).
Spanni ng T ree Com mands 555 Syntax spanning -tree mst configuration Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode User Guideli nes F or two or more switches to be i n t he same MST r egion, they must have the same VLAN mapping, the same config uration r evision number and the same name.
556 Span ning T ree Com mand s • cost — The po rt path co st. (Ran ge: 0–20 0,000,0 00) Default Conf iguration The default val ue is 0, which signi fies that the cost will be automatically calculated based on po rt speed.
Spanni ng T ree Com mands 557 • priority — The port priority . (Ran ge: 0–2 40 in m ultiples o f 16) Default Conf iguration The default port-priority for IEEE MSTP is 128. Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes This command has no user guidelines.
558 Span ning T ree Com mand s Command Mode Glo bal C onf igura tion mode User Guidel ines The priority va lue must be a multiple of 4096. Th e s w i t c h w it h t h e l o w e s t pr i o r i t y i s s el e c t e d as t h e r o o t of t h e s p an n in g t ree .
Spanni ng T ree Com mands 559 An interf ace with P or tF ast mode enab le d is moved directly to the spanning tree forwarding s tate whe n linkup o ccurs wi thout wai ting the standa rd forward-time delay . Example The following exampl e enables P ortF ast on 1/g5 .
560 Span ning T ree Com mand s spanning- t ree p ortfast default Use the spanning -tree p ortfast defaul t command to enable P ortfast mode only on access ports.
Spanni ng T ree Com mands 561 Default Conf iguration The default port-priority for IEEE STP is 128. Command Mode Interface Configuration (Ethernet, P ort-Channel) mode User Guideli nes The priority value must be a multiple of 16. Example The following exampl e configures the spanning pri o rity on 1/g5 to 96.
562 Span ning T ree Com mand s User Guidel ines The priority va lue must be a multiple of 4096. The switch with the lowest pri ority is the root of the spanning t ree.
Spanni ng T ree Com mands 563 spanning-tree transmit hold-count Use the spann ing-tr ee trans mit hol d-count command to set the maximum number of BPDUs t hat a bridge is a llowe d to send within a hello time window (2 seconds) . Use the “n o” form of thi s command to reset the hold coun t to the default value.
564 Span ning T ree Com mand s.
Swit chpo rt Voice Comm ands 565 26 Switchport V oice Commands This chapter exp lains the following commands: • sh ow switch port voice • s witc hpo rt vo ice d etect aut o.
566 Switch por t Voice Co mmands show switchpo rt voice Use the show switchport voice command to show the status of auto-voip on an interface or a ll interfaces. Syntax show switchport voice [ inte rfa ce { ethe rnet interface | port-channel index }] • ethernet interface — Speci fies a vali d interface.
Swit chpo rt Voice Comm ands 567 1/g8 Enabled 6 1/g9 Enabled 6 1/g10 Enabled 6 1/g11 Enabled 6 1/g12 Enabled 6 1/g13 Enabled 6 1/g14 Enabled 6 1/g15 Enabled 6 1/g16 Enabled 6 1/g17 Enabled 6 1/g18 Ena.
568 Switch por t Voice Co mmands The command outp ut provides the follow ing information: • Au to V oI P Mo d e —The Au to V oIP mode on the in terface. • T raffic Cl a ss —The Cos Queue or T raffic Class to w hich all V oIP traffic is mapped .
T ACACS+ Com mands 569 27 T ACACS+ Commands This chapter exp lains the following commands: •k e y •p o r t •p r i o r i t y • show tacacs • tacacs-server host •t a c a c s - s e r v e r k .
570 T ACACS+ Comma nds key Use the key command in T ACA CS Configuration mode to specify the authenti cation and e ncryp tion key for all T ACACS communic ations b etween the devi ce and t he T ACACS server . Thi s key must ma tch the key used on the T ACACS da e mon.
T ACACS+ Com mands 571 Default Conf iguration The default port number is 49. Command Mode T ACACS Configuration mode User Guideli nes This command has no user guidelines. Example The following exampl e displays how to specify server po rt number 1200.
572 T ACACS+ Comma nds console(config-tacacs)#priority 10000 show tacac s Use the show tacacs command in P rivileged EXEC mode to display th e configuration and st atistics of a T ACACS+ serve r . Syntax show tacacs [ ip-address ] • ip-addr ess — The nam e or IP address of the host.
T ACACS+ Com mands 573 tacacs-serve r host Use the tacacs-ser ver host command in Global Configuration mode to configure a T A C ACS+ server . This command enters into the T ACACS+ configuration mode. T o delete the specif ied hostname or IP addr ess, use the no form of t his command.
574 T ACACS+ Comma nds Syntax tacacs-server key [ key -s t ri n g ] no tacacs-ser ver key • key-string — S pecifies the au the ntica tion an d en crypt ion key for all T ACACS communications between the switch a nd the T ACACS+ server . This key must match the key used on the T ACACS+ daemon.
T ACACS+ Com mands 575 Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The following example sets the timeo ut value as 30. console(config)#tacacs-server timeout 30 timeout Use the timeo ut command in T A CACS Configuration mode to specify the timeout val ue in seconds.
576 T ACACS+ Comma nds.
VLAN Co mm ands 577 28 VLAN Commands This chapter exp lains the following commands: • dvlan-t unnel e thertyp e •i n t e r f a c e v l a n • interfa ce range vlan • mod e dvlan-tunnel •n a m.
578 VLAN Command s • s witc hpo rt tr unk allo wed v lan •v l a n • vlan associ ation mac • vlan associ ation subnet •v l a n d a t a b a s e •v l a n m a k e s t a t i c • vlan protocol.
VLAN Co mm ands 579 dvlan-tunnel eth ertype Use the dvlan-t unnel ethert ype command in Global Configuratio n mode to configure t he ethertype for the specified interface. T o configure the EtherT yp e on the s pecified in terface to its default value, us e the no form of thi s command.
580 VLAN Command s Syntax interf ace vlan vlan-id • vla n-id — The ID of a valid VLAN (Range: 1–40 93). Default Conf iguration This command has no default configuration. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines .
VLAN Co mm ands 581 Command Mode Global Configuration mode User Guideli nes Commands used in the inte rface range context are ex ecuted independent ly on each interface in the range. If the command r eturns an error on one of the interfaces, an error message is disp layed and e xecution continues on other interfaces.
582 VLAN Command s Example The following example displays how to enable Double VLAN T unneling at ethernet port 1/g1. console(config-if-1/g1)#mode dvlan-tunnel name Use the name command in Interface Configuration mode to add a name to a VLAN. T o remove the VLAN name, us e the no form of this command.
VLAN Co mm ands 583 protocol gr oup Use the proto col gr oup command in V LAN Database mode to attach a VLAN ID to the pro tocol-based group ident ified by groupid . A gr oup may only be ass ociated with o ne VLAN at a ti m e. Howev er , the VLAN a ssociation can be change d.
584 VLAN Command s protocol vla n group Use the protoco l vlan group command in Interface Configuration mode to add the phys ic al u nit /por t int erf ac e to the protocol-b ased gr oup identifi ed by groupid . A gr ou p may h ave more tha n one int erf ace ass oci ate d wit h it .
VLAN Co mm ands 585 console(config-if-1/g1)#protocol vlan group 2 protocol vla n group all Use the pro tocol vlan g roup a ll command in Global C onfiguration mode to add all physical interfaces to the protocol-based group identified by grou pid . A group may have mor e than one interface associated wit h it.
586 VLAN Command s console(config)#protocol vlan group all 2 show dvlan- tunnel Use the sh ow dvlan-tunn el command in Privileged EXEC mode to display all interfaces enabled for Doub le VLAN T unneling. Syntax show dvlan-t unnel Default Conf iguration This command has no default configuration.
VLAN Co mm ands 587 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following exampl e displays detail ed information for unit/port "1/g1.
588 VLAN Command s Syntax show int erfaces swi tchport {ethern et interface | port-chan nel port-channel- number } • Interface — Sp ecific interfa ce, such a s etherne t 1/g8. • port- channel -number — V ali d port-cha nnel trunk i ndex. Default Conf iguration This command has no default configuration.
VLAN Co mm ands 589 8 VLAN008 tagged Dynamic 11 VLAN0011 tagged Static 19 IPv6 VLAN untagged Static 72 VLAN0072 untagged Static Static configuration: PVID: 1 (default) Ingress Filtering: Enabled Accep.
590 VLAN Command s Port 1/g1 is member in: VLAN Name Egress rule Type ---- --------- ----------- ----- 91 IP Telephony tagged Static Static configuration: PVID: 8 Ingress Filtering: Disabled Acceptabl.
VLAN Co mm ands 591 Port 2/g19 is member in: VLAN Name Egress rule Type ---- --------- ----------- ----- 2921 Primary A unt agged Static 2922 Community A1 untagged Static Static configuration: PVID: 2.
592 VLAN Command s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example displays the P rotocol-Based VLAN information for either the ent ire system.
VLAN Co mm ands 593 User Guideli nes This command has no user guidelines. Example The followi ng e xample i dent ifies te st as the pro tecte d group . console#show switchport protected 0 Name......................................... test show vlan Use the show vlan command in P rivileged EXEC mode to display VLAN information.
594 VLAN Command s 2/g1-1/g4 10 VLAN0010 1/g3-1/g4 dynamic Required 11 VLAN0011 1/g1-1/g2 static Required 20 VLAN0020 1/g3-1/g4 static Required 21 VLAN0021 static Required 30 VLAN0030 static Required .
VLAN Co mm ands 595 MAC Address VLAN ID ----------------------- ------- 0001.0001.0001.0001 1 show vlan assoc iation subnet Use the show vlan association subnet command in Privileged EXEC mode to display the VLAN associate d with a specific configured IP -Addres s and netmask.
596 VLAN Command s switchport access vlan Use the switchport access vlan command in Interface Configuration mode to configure the VLAN ID when the inte rface is in access mode.
VLAN Co mm ands 597 Syntax switchport forbidden vlan { add vlan-lis t | remove vlan-list } • add vla n-list — List of v alid VLAN IDs to add to the forbidden l ist. Separa te nonconse cutive VLAN IDs wi th a comma and no spa ces. Use a hyphen to designate a range of IDs.
598 VLAN Command s no switch port gener al acceptabl e-frame-ty pe tagg ed-only Default Conf iguration All frame types ar e accepted at ingr ess. Command Mode Interface Configuration (Et hernet, port-channel) mode User Guidel ines This command has no user guidelines .
VLAN Co mm ands 599 • untagged — Sets the port to tr ansmit untagg ed packe ts for the VLANs. Default Conf iguration Untagged. Command Mode Interface Configuration (Ethernet, port-channel) mode Us.
600 VLAN Command s User Guidel ines This command has no user guidelines . Example The following example shows how to enables port i ngress filtering on 1/g8.
VLAN Co mm ands 601 Example The following example shows how to configure the PVID for 1/g8, w hen the interface is in ge neral mode. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#swi.
602 VLAN Command s User Guidel ines This command has no user guidelines . Example The following example co nfigures 1 / g8 to access mode. console(config)#interface ethernet 1/g8 console(config-if-1/g8)#switchport mode access switchp ort prote cted Use the switchport protected command in Interface Configuration mode to configure a protected port.
VLAN Co mm ands 603 Example The following example configures Ethernet port 1/g1 as a member of protected group 1. console(config)#interface ethernet 1/g1 console(config-if-1/g1)#switchport protected 1.
604 VLAN Command s switchport trun k allowed vla n Use the switchport trun k allowed vlan command in Interface Configuration mode to a dd VLANs to or remove VLA Ns from a trunk port . Syntax switchport trunk allowed vlan { add vlan- list | remove vlan -l ist } • add vla n-list — List of VLAN IDs to add.
VLAN Co mm ands 605 Syntax vlan vlan-range no vla n vlan- ran ge • vla n-range — A list of valid VLAN IDs to be added. List separate, non - consecutive VLAN IDs separated by comm as (without spaces); use a hyphen to designate a range of IDs. (Range: 2–4093) Default Conf iguration This command has no default configuration.
606 VLAN Command s vlanid — VLAN to as sociate with su bnet. (Range: 1-4093 ) Default Conf iguration No assigned MAC addres s . Command Mode VLAN Databas e mode User Guidel ines This command has no user guidelines . Example The followi ng e xample associates MAC addr ess with VLAN ID 1.
VLAN Co mm ands 607 User Guideli nes This command has no user guidelines. Example The following example associates IP address with VLAN ID 100. console(config-vlan)#vlan association subnet 192.245.23.45 255.255.255.0 100 vlan database Use the vlan database command in Global Configuration mode to enter the VLAN database co nfiguration mode.
608 VLAN Command s vlan makestatic This command changes a dy namically created VLAN (one that i s created by GVRP r e gistrati on) to a static VLAN (one that is permanentl y configured and defined). The ID is a v alid VLAN identification number . VLAN range is 2 - 4093.
VLAN Co mm ands 609 existi n g command vlan protoco l group <groupname> is updated to vlan protocol g roup <group id> so that grou pid is used for both configuration and script generation.
610 VLAN Command s T o r emo ve the pro tocol from the prot ocol-based VLAN group identified by groupid , use the no form of this command. Syntax vlan pr otocol gro up add protoc ol < groupid > .
VLAN Co mm ands 611 vlan protocol gro up name This is a new command for a ssigning a group name to vlan protocol group id . Syntax vlan pr otocol gr oup na me < groupid > < groupName > no .
612 VLAN Command s vlan protocol gr oup remove Use the vlan p rotocol gr oup rem ove command in Global Configuration mode to remove the protoco l-based VLAN group identified by groupid .
VLAN Co mm ands 613 vlan routing Use the vlan routing command to enable routing on a VLAN. Use the “no” form of this command to disable routing o n a VLAN. Syntax vlan routing vlan id [ index ] • vla nid — V alid VLAN ID (Range 1–40 93). • index — Internal interface ID.
614 VLAN Command s.
Voice VLAN Com man ds 615 29 V oice VLAN Commands This chapter exp lains the following commands: •v o i c e v l a n •v o i c e v l a n ( I n t e r f a c e ) • v oice vla n da ta pr ior ity •s .
616 V oice VLAN Com mands voice vlan This command is used to enable the voice vlan capability on the s w itch. Syntax voice vlan no voice vlan Para mete r R ange s Not applicab le Command Mode Global Configuration Usage Guideli nes Not applicab le Default V alue This featur e is disabled by default.
Voice VLAN Com man ds 617 • trust — T r ust the d ot1p prio rity o r D SCP valu es co ntain ed in pa ckets arriving on t he voice vlan port. • untrust — Do n ot t rust th e d ot1p pri ority or DS CP v alues con tained in packets arriving on the voice vla n port.
618 V oice VLAN Com mands Command Mode Interface Configurati on Default V alue trust Example console(config-if -1/g1)#voice vlan da ta priori ty untrus t console(config-if -1/g1)#voice vl an data prio.
Voice VLAN Com man ds 619 Example (console) #show voice vlan interface 1/g1 Interface...............................1/g1 Voice VLAN Interface Mode...............Enabled Voice VLAN ID...........................1 Voice VLAN COS Override.................
620 V oice VLAN Com mands.
802.1x Comman ds 621 30 802.1x Commands This chapter exp lains the following commands: • dot1x ma c-auth-byp ass •d o t 1 x m a x - r e q •d o t 1 x m a x - u s e r s • dot1x port-control • .
622 802.1x Comm ands dot1x ma c-au th-bypa ss Use the dot1x m ab-enable command to enabl e MAB on an inte rface. Use the “no” form of this command to dis able MAB on an interface. Syntax dot1x ma c-auth -bypas s no dot1x mac-auth-bypass Default Conf iguration MA C Authe ntication Bypass is disabled by default .
802.1x Comman ds 623 Default Conf iguration The default value for the count parameter is 2. Command Mode Interface Configuration (Ethernet) mode User Guideli nes Change the default value of this comma.
624 802.1x Comm ands Command Mode Interface Configuration (Et hernet) m ode User Guidel ines This command has no user guidelines . Example The following command limits the number of devices that can aut henticate on port 1/ g2 to 3.
802.1x Comman ds 625 Default Conf iguration The default co nfiguration is auto . Command Mode Interface Configuration (Ethernet) mode User Guideli nes It is recommended that you disable the spanning tr ee or enable spanning-tree P o r t Fas t mo d e o n 8 02 .
626 802.1x Comm ands User Guidel ines This command has no user guidelines . Example The following command manually initiates a r e-authentication of the 802.
802.1x Comman ds 627 dot1x system-auth-control Use the dot1x system-a uth-con trol command in Global Configuration mode to enab le 802.1x globally . T o disable 8 02.1x globally , use the no form of t his command. Syntax dot1x system -auth-cont rol no dot1x system-auth- control Default Conf iguration The def ault for this comman d is disabl ed.
628 802.1x Comm ands Default Conf iguration The switch r emains in the quiet s tate for 90 seconds. Command Mode Interface Configuration (Et hernet) m ode User Guidel ines It is recommended t hat the .
802.1x Comman ds 629 Command Mode Interface Configuration (Ethernet) mode User Guideli nes During the quiet period, the switch does not accept or ini tiate any authen tication reques ts.
630 802.1x Comm ands Command Mode Interface Configuration (Et hernet) m ode User Guidel ines This command has no user guidelines . Example The following example sets the number of seconds b etween re-authentication attempt s to 300.
802.1x Comman ds 631 User Guideli nes The actua l timeo ut is th is par amete r or the pro duct of the Radius transm ission ti mes the Radius ti meou t, whichev er is s maller Example The fo llowing e xampl e sets th e time fo r the r etransmis sion to th e authenti cation s erver to 36 00 seconds .
632 802.1x Comm ands Example The following example sets the time for the r e transmission of an EAP -request frame to the cli ent to 3600 seconds. console(config-if-1/g1)# dot1x timeout supp-timeout 3.
802.1x Comman ds 633 Example The following command sets the number of seconds that the switch waits for a r esponse to an EAP -r equest/ identity f rame to 3600 s econds. console(config)# interface ethernet 1/g16 console(config-if-1/g16)# dot1x timeout tx-period 3600 show dot1x Use the show dot1 x command in P rivileged EXEC mode to display 8 0 2.
634 802.1x Comm ands Port Admin Oper Reauth Reauth Mode Mode Control Period ------- ------------------ ------------ -------- ---------- 1/g8 auto Authorized FALSE 3600 User Name...................................... Clark Quiet Period.................
802.1x Comman ds 635 Reauth C ontrol Ind icates whether re-aut hent icatio n is ena bled on t his port. Reauth P eriod The ti mer used by the authen ticator state ma chi ne on th is port to d etermine when reauth entic ation o f the s upplic ant takes pl ace.
636 802.1x Comm ands show dot1x clients Use the show dot1x clients command in P rivileged EXEC mode to disp lay detailed information about the use rs who have successfull y authenticated on the sy st em or on a spec if ied port . Syntax show dot1x clients { all |ethe rnet interface } • all — A ll 802.
802.1x Comman ds 637 User Guideli nes This command has no user guidelines. Example The followi ng ex ample displays informat ion about the 802.1x cl ients authenti cated on port 1 /g9. console#show dot1x clients ethernet 1/g9 Interface................
638 802.1x Comm ands The following table describes the significant fields shown in the display: show dot1x ethernet The show d ot1x ethern et command has been modified to sho w the status of MA C Authe nticatio n Bypass. Th is featu re is an exte nsion of D ot1x Opti on 81 feature added in P ower Connect Release 2.
802.1x Comman ds 639 Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#show dot1x ethernet 1/g1 Administrative Mode.
640 802.1x Comm ands show dot1x statistics Use the show dot1x stat istics command in Priv ileged EXEC mode to display 802.1x st atistics for the s p ecified inte rface. Syntax show dot1x statistics ethe rnet inter fa ce • interface — Etherne t port name.
802.1x Comman ds 641 EAP Request/Id Frames Transmitted.............. 0 EAP Request Frames Transmitted................. 0 Invalid EAPOL Frames Received.................. 0 EAPOL Length Error Frames Received............. 0 The following table descri bes the significant fields shown in the display .
642 802.1x Comm ands show dot1x users Use the show dot1x user s command in P rivileged EXEC mode to display 802.1x a uthentic ated users for the swi tch. Syntax show dot1x users [ use r nam e username ] • usern ame — Suppl icant usernam e (Ra nge: 1–1 60 cha racters ) Default Conf iguration This command has no default configuration.
802.1x Comman ds 643 Example The followi ng exampl e displays 80 2.1x users. console#show dot1x users Port Username --------- --------- 1/g1 Bob 1/g2 John Switch# show dot1x users username Bob Port Username --------- --------- 1/g1 Bob The following table descri bes the significant fields shown in the display : 802.
644 802.1x Comm ands Default Conf iguration The guest VLAN is disabled on t he interface by default. Command Mode Interface Configuration (Et hernet) m ode User Guidel ines Configure the guest VLAN before using this comm and. Example The following exampl e sets the guest VLAN on port 1/g2 to VLAN 1 0.
802.1x Comman ds 645 Example The following example set the unauthenticated VLAN on port 1/g2 to VLAN 20. console(config-if-1/g2)#dot1x unauth-vlan 20 show dot1x a dvanced Use the show dot 1x advance d command in P rivileged EXEC mode to display 802.1x advanced features for the switch or for the specified interface.
646 802.1x Comm ands Example The following example displays 802.1x adv anced featur es for the switch. console#show dot1x advanced Port Guest Unauthenticated VLAN Vlan --------- --------- ------------.
802.1x Comman ds 647 802.1x Option 81 radius-ser ver attribute 4 Use the radius-ser ver at tribute 4 command in Global Configuration mod e to set the network acces s server (NAS) IP address for the R ADI US server . Use the no version of the com mand to s et the value to t he default.
648 802.1x Comm ands.
ARP Co mma nds 649 31 ARP Commands This chapter exp lains the following commands: •a r p • arp cachesize • arp d ynamicrenew •a r p p u r g e •a r p r e s p t i m e •a r p r e t r i e s .
650 ARP Comma nds arp Use the arp command in Global Configuratio n mode to cr eate an Address Resolution Protocol (ARP) entry . Use the no f o rm of the comm and to remove the entry . Syntax arp ip-addr ess mac-address no arp ip-address • ip-add ress — IP add ress of a device on a subn et atta ched to an existin g routing interf ace.
ARP Co mma nds 651 Syntax arp cachesize int eger no arp cachesize • integ er — Maximum number of A RP entries in the ca che. (Range: 256– 1024) Default Conf iguration The def ault integ er value is 896. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines.
652 ARP Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines When an ARP e ntry r eaches its maxi mum age, the syst e m must decide whether to retain or delete the entry . If the entry has recently been used to forwar d data pack ets, the syste m will re n ew the ent ry by sending an ARP request to the neighbor .
ARP Co mma nds 653 Syntax arp purge ip-addr ess • ip-add ress — The IP addr ess to be remov ed from ARP cache. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines.
654 ARP Comma nds User Guidel ines This command has no user guidelines . Example The following example defines a r esponse timeout of 5 seconds. console(config)#arp resptime 5 arp retrie s Use the arp re tri es command in Global Configuration mode to configur e the ARP count of m aximum requests for retries.
ARP Co mma nds 655 arp timeout Use the arp time out command in Globa l Config uration mo de to configure the ARP en try ageout time. Use the no form of t he command to set the ageout tim e to the defaul t. Syntax arp time out integer no arp time out • integ er — The IP AR P entry ageout time.
656 ARP Comma nds Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following exampl e clears all entries ARP of type dynamic, i ncluding gatewa y , f rom ARP ca che.
ARP Co mma nds 657 ip proxy-arp Use the ip prox y-arp command in Interface Configuration mode to enable proxy ARP on a router interface. Without proxy ARP , a device only responds to an ARP request if the target IP address is an address confi gured on the inter face where the ARP reque st arri ved.
658 ARP Comma nds Syntax show arp [brief] [switch] • brief — Display ARP paramet ers and cache. • sw itch — Dis play ARP cache for the switch. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines .
DHCP and B OOTP Relay C o mmands 659 32 DHCP and BOOTP Relay Commands This chapter exp lains the following commands: • bootpdhcprelay cidridoptmode • bootpdhcprel ay maxhopcount • bootpd hcprela.
660 DHCP and BOOT P Relay Commands bootpdhcp relay cidridop tmode Use the bootpdh cprelay ci dridoptm ode com mand in Global Configurat ion mode to enable the circuit ID option and r emote agent ID mode for BootP/DH CP Relay on the syste m.
DHCP and B OOTP Relay C o mmands 661 bootpdhcp relay maxhopco unt Use the boot pdhcprel ay maxho pcount com mand in Global Configuration mode to configure the maximum allowable relay agent hops for Boot P/DHCP Relay on the system. Use the no form of the com mand to set the m aximum hop count to the default value.
662 DHCP and BOOT P Relay Commands Syntax bootpdhcp relay minw aittiime int eger no bootpdhc pre lay minsho show arpshow arpwshsh o w arposhow arpwsh oshow arpwsh ow arp arp arp asho w arprpwait time • integer — Mi nimum wait time fo r BootP/ DHCP Relay on the system.
DHCP and B OOTP Relay C o mmands 663 Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The followi ng ex ample enables the circuit ID and remote ag ent ID options. console(config)#bootpdhcprelay cidridoptmode Circuit Id and Remote Agent Id Mode set Successfully.
664 DHCP and BOOT P Relay Commands Example The following example defines the Boot/DHCP Relay information. console#show bootpdhcprelay Maximum Hop Count.............................. 4 Minimum Wait Time(Seconds)..................... 0 Circuit Id Option Mode.
DHCPv6 Comman ds 665 33 DHCPv6 Commands This chapter exp lains the following commands: • clear i pv6 dhcp •d n s - s e r v e r • domain- name • ipv6 d hcp pool •i p v 6 d h c p r e l a y •.
666 DHCPv6 Comman ds clear ipv6 dhcp Use the clear ipv6 dhcp command in Priv ileged EXEC mode to clear DHCPv6 statistics for al l interfaces or for a specific interface. Syntax clear ipv6 dhcp { statis tics | interf ace vla n vlan -id statistics} • vla n-id — V ali d VLAN ID.
DHCPv6 Comman ds 667 Default Conf iguration This command has no default configuration. Command Mode IPv6 DHCP P ool Configuration mode User Guideli nes DHCPv6 pool can have multiple number of domain names with maximum of 8.
668 DHCPv6 Comman ds User Guidel ines DHCPv6 pool can have multiple number of domain names with m aximum of 8. Example The following example sets the DNS domain name "t est", which is provided to a DHCPv6 client by the DHCPv6 server .
DHCPv6 Comman ds 669 Example The following example enters IPv6 DHCP P ool Configuration mode. console(config)#ipv6 dhcp pool addrpool console(config-dhcp6s-pool)# ipv6 dhcp relay Use the ipv6 dhcp relay command in Interface Configuration mode to configure an interface for DHC Pv6 relay functionality .
670 DHCPv6 Comman ds User Guidel ines If r elay-address is an IPv6 globa l address, then re la y -i n t e r f a c e is not r equired. If r elay-address is a link -local or multicast addr ess, then rela y- in ter fa c e is requir ed.
DHCPv6 Comman ds 671 Example The following example configures the number 100 to repr esent the DHCPv6 Relay Agent Information Option. console(config)#ipv6 dhcp relay-agent-info-opt 100 ipv6 dhcp r e l.
672 DHCPv6 Comman ds Syntax ipv6 dhcp ser ver pool-na me [rapid-com mit] [preferen ce pref - value ] • pool-name — The name of the DHCPv6 pool containi ng statel e ss and/ or prefix delegation parameters • rapid-commit — Is an option t hat allows f or an abbr eviated e xcha nge between the client and server .
DHCPv6 Comman ds 673 • DUID — Client DUID (e.g. 00:01:00:0 9:f8:79: 4e:00:0 4:76:73 :43:76 '). • hostna me — Client host name used fo r logging and tracing . (Range: 0- 31 characte rs.) • valid-lifet ime — V alid li fetime fo r delegat ed prefix.
674 DHCPv6 Comman ds Default Conf iguration Enabled is the default state. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines .
DHCPv6 Comman ds 675 Example The following example displays the DHCPv 6 server name and status. console#show ipv6 dhcp DHCPv6 is disabled Server DUID: show ip v6 dhcp bin ding Use the show ipv6 dhcp binding command in P rivilege d EXEC mode to display the configured DHCP pool.
676 DHCPv6 Comman ds show ipv6 dhcp interface Use the show ipv6 dhcp interface com mand in User EXEC mode to display DHCPv6 information for a ll relevant interf ace s or a specifie d interface. If an interface is specified, the opti onal statistics parameter is availa ble to view statistics for the specified interfa ce.
DHCPv6 Comman ds 677 Option Flags................................... console> show ipv6 dhcp interface vlan 11 statistics DHCPv6 Interface vlan11 Statistics ------------------------------------ DHCPv6 Solicit Packets Received................ 0 DHCPv6 Request Packets Received.
678 DHCPv6 Comman ds show ipv6 dhcp pool Use the show ipv6 dhcp poo l command in P rivileged EXEC mode to display the configured DHCP pool. Syntax show ipv6 dh cp pool pool-name • pool-name — Nam e of the pool. (Ran ge: 1-32 ch aracter s) Default Conf iguration This command has no default configuration.
DHCPv6 Comman ds 679 Command Mode User EXEC mode User Guideli nes This command has no user guidelines. Example The following example displays the DHCPv 6 server name and status. console> show ipv6 dhcp statistics DHCPv6 Interface Global Statistics ------------------------------------ DHCPv6 Solicit Packets Received.
680 DHCPv6 Comman ds DHCPv6 Relay-forward Packets Transmitted....... 0 Total DHCPv6 Packets Transmitted............... 0.
DVM RP Co mman ds 681 34 DVMRP Commands This chapter exp lains the following commands: •i p d v m r p • ip dvm rp metric • ip dvm rp trapflags •s h o w i p d v m r p • sh ow ip dvmrp in terf.
682 DVMRP Commands ip dvmrp Use the ip d vm rp co mmand to set the adminis trative mode of DVMRP i n the router to active. IGMP must be en abled befor e D VMRP can be enab led. Syntax ip dvmrp no ip dvmrp Default Conf iguration Disabled is the default configuration.
DVM RP Co mman ds 683 Default Conf iguration 1 the default v alue. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines.
684 DVMRP Commands console(config)#ip dvmrp trapflags console(config)#no ip dvmrp trapflags show ip dvmrp Use the show ip dvmrp command in P rivileged EXEC mode to display the system-wide i nfo rmation for D VMRP . Syntax show ip dvm rp Default Conf iguration This command has no default condition.
DVM RP Co mman ds 685 show ip dvmrp interface Use the show ip dvmrp interfac e command in P rivileged EXEC mode t o dis pla y the int erf ace info rm atio n fo r DVMR P on th e sp eci fie d int er face . Syntax show ip dvmrp in terface vlan vlan-id • vla n-id — V alid VLAN I D.
686 DVMRP Commands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example displays the neighbor information for D VMRP .
DVM RP Co mman ds 687 Example The following example displays the ne xt hop information on o utgoing interfaces for routing multicast dat agrams. console(config)#show ip dvmrp nexthop Next Hop Source I.
688 DVMRP Commands show ip dvmr p route Use the show ip dvmrp route command in Priv ilege d EXEC mode to display the multicast routing inf ormation for DVMRP . Syntax show ip dvm rp route Default Conf iguration This command has no default condition. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines .
IGMP Commands 689 35 IGMP Commands This chapter exp lains the following commands: •i p i g m p • ip igmp last-member-query-count • ip igmp last-mem ber-q uery -interval • ip igm p query-interv.
690 IGMP Commands ip igmp Use the ip igmp command in Global Configuration mode to set the administ rative m ode of IGMP i n the syst em to activ e. Syntax ip igmp no ip igmp Default Conf iguration Disabled is the defa ult state. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines .
IGMP Commands 691 Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The followi ng e xample sets 10 as th e number of VLAN 2 Group-Specific Queries.
692 IGMP Commands User Guidel ines This command has no user guidelines . Example The following example configures 2 seconds a s the Maximum Res ponse Time inserted in VL AN 15’s Group-Specific Q ueries.
IGMP Commands 693 console(config-if-vlan15)#ip igmp query-interval 10 ip igmp query- max-respon se-time Use the ip igmp query- max-response -time command in Internet Configuration mode to configure the maximum resp onse t ime interval for the specified interface.
694 IGMP Commands ip igmp robustness Use the ip igmp robustness command in Interface Configuration mode to configure the robustness that allows tuning of the interface, that is, tuning for the expect e d packet loss on a subnet. If a subnet is expected to have significant loss, the robustnes s variable may be incr eased for the inte rface.
IGMP Commands 695 no ip igmp st artu p-query-c ount • count — The n umber of startup queries. (Range: 1-20) Default Conf iguration The default count value is 2. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines.
696 IGMP Commands Command Mode Interface Configurati on (VLAN) mode User Guidel ines This command has no user guidelines . Example The fol lowing example sets a t 10 seconds the inter val be tween g eneral queries sent at st artup for VLAN 15.
IGMP Commands 697 console(config-if-vlan15)#ip igmp version 2 show ip igmp Use the show ip igmp comm and in P rivileged EXEC mode to display system- wide IGMP information. Syntax show ip igm p Default Conf iguration This command has no default configuration.
698 IGMP Commands show ip igmp groups Use the show ip igm p groups command in Pri v ileged EXEC mode to display the registered multicast groups on the interfa ce. If detail is specified, this command displays the registered multicast groups on the interface in detail.
IGMP Commands 699 show ip igmp interface Use the show ip igm p in terface command in Pr ivileged EXE C mode to display the I GMP information for the specified interface. Syntax show ip igmp in terfa ce vlan vlan-id • vla n-id — V alid VLAN I D Default Conf iguration This command has no default configuration.
700 IGMP Commands show ip igmp interface membership Use the show ip igmp in terfa ce membe rshi p command in P rivileged EXEC mode to display the list of interfaces that have r egistered in the multicas t group. If detail is specified, this command displays detailed informat ion about the listed inte rfaces.
IGMP Commands 701 show ip igmp interface stats Use the show ip igm p in terface st ats command in User EXEC mode to display the IGMP statistical information for the interfac e. The statistics are only displayed when the interfa ce is enabled for IGMP .
702 IGMP Commands.
IGMP Pro xy Com mands 703 36 IGMP Proxy Commands This chapter exp lains the following commands: •i p i g m p - p r o x y • ip igmp-proxy r eset-status • ip igmp-prox y unsolicited-report-interva.
704 IGMP Proxy Comman ds ip igmp-proxy Use the ip igmp-prox y command in Interface Configuration mode to enable the IGMP Proxy on the router . T o enable the IGMP P roxy on the router , multicast forw arding must be enabled and ther e must be no multicas t routing protocols enab led on the router .
IGMP Pro xy Com mands 705 Default Conf iguration This command has no default configuration. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The foll owing example resets the host inter face st atus pa rameters of the IGMP P roxy router .
706 IGMP Proxy Comman ds Example The followi ng e xample sets 10 seconds as the unsolicited r eport interval for the IGM P Proxy router . console(config)#interface vlan 15 console(config-if-vlan15)#ip.
IGMP Pro xy Com mands 707 Operational Mode............................. Enable Version...................................... 3 Number of Multicast Groups................... 0 Unsolicited Report Interval.................. 1 Querier IP Address on Proxy Interface.
708 IGMP Proxy Comman ds ----------------------------------------------------------------- 1 0 0 0 ----- ----- 20 0 0 0 0 3 0 0 0 ----- ----- show ip igmp- proxy groups Use the show ip igm p-proxy groups command in P rivileged EXEC mode to display a t able of information ab o ut multicas t groups that IGMP Prox y repor ted.
IGMP Pro xy Com mands 709 show ip igmp-proxy grou ps detail Use the show ip igm p-prox y groups detai l command in P rivileged EXEC mode to dis play com plete informa tion about mult icas t groups th at IGMP Pr o x y h a s re p o r t e d . Syntax show ip igmp- proxy groups detail Default Conf iguration This command has no default configuration.
710 IGMP Proxy Comman ds.
IP H elp er Comm ands 711 37 IP Helper Commands This chapter exp lains the following commands: • clea r ip help er statisti cs •i p h e l p e r - a d d r e s s ( g loba l configurat ion) • ip he.
712 IP Help er Commands clear ip helper statistics Use the clear ip helper stat istics co mmand to reset to 0 the stati stics displayed in show ip helper statisti cs. Syntax clear ip hel per statistics Default Conf iguration There is no default configuration for this command.
IP H elp er Comm ands 713 • dest-udp -port — A destinat ion UDP p ort nu mber from 0 to 655 35. • port-name — The destina tion UDP port may be opt ionally sp ecified by its name . Wheth er a port is s pecified by its numb er or its nam e has no effect on behavior .
714 IP Help er Commands To relay UDP packets received on any interface for all default ports (Table 4) to the server at 20.1.1.1, use the following commands: console#config console(config)#ip helper-address 20.
IP H elp er Comm ands 715 Default Conf iguration No helper addresses are configured. Command Mode Interface Configuration (VLAN) mode. User Guideli nes This command can be inv oked multiple times on r.
716 IP Help er Commands This command takes precedence over an ip helper- address command given in global configuration mode. With the following configuration, the relay agent relays DHCP packets received on any interface other than vlan 5 and vlan 6 to 192.
IP H elp er Comm ands 717 Default Conf iguration IP helper is e nabled by default. Command Mode Global Configuration mode. User Guideli nes This com mand can be us ed to tempora rily d isable IP he lper wi thout de leting all IP helper addresses.
718 IP Help er Commands Example show ip helper-address IP helper is enabled Interface UDP Port Discard Hit Count Se rver Address --------------- ----------- -------- --- ------- ------- -------- vlan 100 dhcp No 10 10.100.1.254 10.100.2.254 vlan 101 any Yes 2 any dhcp No 0 10.
IP H elp er Comm ands 719 Syntax show ip helper stati stics Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes F ield descriptions: DHCP client messages recei ved The number of vali d messages r eceived from a DHCP client .
720 IP Help er Commands Example console#show ip helper statistics DHCP client messages received.................. 8 DHCP client messages relayed................... 2 DHCP server messages received.................. 2 DHCP server messages relayed.......
IP Routing Comma nds 721 38 IP Routing Co mmands This chapter exp lains the following commands: •e n c a p s u l a t i o n • ip addr ess •i p m t u • ip netdirbcast •i p r o u t e •i p r o.
722 IP Rou ting Comma nds encapsulatio n Use the encapsulation command in Interface Configuration mode to configure the link layer encapsulation type for the packet. Routed frames are always ethe rnet encapsulated when a frame i s routed to a VLAN. Syntax encapsulation { eth ernet | snap } • ethernet — Specifies Ethernet encapsulation.
IP Routing Comma nds 723 no ip addre ss ip-addr ess { subnet-mas k | prefix-length } [ secondar y ] • ip-add ress — IP a ddress of the i nterfac e. • subnet-mask — Subnet mask of t he interfa ce • prefix-length — L eng th of the prefix. Must be preceded by a forward slash (/).
724 IP Rou ting Comma nds stack uses its default IP MTU and ignor es the value set using the ip m tu command. OSPF advertises t he IP MTU in the Database Description packets it sends to it s neighbors during database e xchange.
IP Routing Comma nds 725 no ip n etdirbc ast Default Conf iguration Disabled is the default configuration. Command Mode Interface Configuration (VLAN) mode User Guideli nes This command has no user guidelines. Example The following exampl e defines the IP addr ess and subnet mask for VLAN 15 .
726 IP Rou ting Comma nds • prefix-length — L ength of prefix. Must be preceded with a forward slash (/). (Range: 0-32 bits) • ne xtHopRtr — IP addr ess of the ne xt hop router . • prefer ence — S pecifies the preference value, a.k.a. a dminis trative d istance, of an in dividual st atic rout e.
IP Routing Comma nds 727 • prefer en ce — Specifies th e preference value, a.k.a admin istrativ e distance, of an ind ividual st atic route. (Range: 1-2 55) Default Conf iguration Default value of preference is 1.
728 IP Rou ting Comma nds no ip route distance integer • integer — Specifi es the dist ance (prefe rence) of an individ ual static route. (Ran ge 1-255 ) Default Conf iguration Default value of distance is 1. Command Mode Glo bal C onf igura tion mode User Guidel ines Low er route distance values are preferre d when determining the best route.
IP Routing Comma nds 729 User Guideli nes Use this command to g lobally enable IPv4 routing . Example console(config)#ip routing routing Use the rout ing command in Int erface Configuration mode to enable IPv4 and IPv6 routing for an interface. View the current value for this function with t he show ip br ief command.
730 IP Rou ting Comma nds show ip br ief Use the show ip brief command in Pri vileged EX EC mode to display all the summary information of the IP . Syntax show ip bri ef Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines .
IP Routing Comma nds 731 • vla n-id — V alid VLAN I D • loopback-id — V alid l oopback ID. (R ange: 0-7) Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines.
732 IP Rou ting Comma nds console#show ip interface vlan 15 Primary IP Address............. 192.168.10. 10/255.255.255.0 Secondary IP Address(es)....... 192.168.20. 20/255.255.255.0 Routing Mode............................... .... Disable Administrative Mode.
IP Routing Comma nds 733 Example The following example dis plays parameters and current state of a ctive routing protocols. console#show ip protocols Routing Protocol is "rip" Sending update.
734 IP Rou ting Comma nds Routing Information Sources: Gateway State 176.1.1.2 Full External Preference: 60 Internal Preference: 20 show ip r oute Use the show ip rou te command in P rivileged EXEC mode to display the routing table.
IP Routing Comma nds 735 Example The following example displays the routi ng table. console#show ip route Route Codes: R - RIP Derived, O - OSPF Derive d, C - Connected, S - Static B - BGP Derived, IA.
736 IP Rou ting Comma nds Local.......................................... 0 Static......................................... 1 OSPF Intra-area routes......................... 110 OSPF Inter-area routes......................... 110 OSPF External routes.
IP Routing Comma nds 737 RIP Routes..................................... 0 OSPF Routes.................................... 0 Intra Area Routes.............................. 0 Inter Area Routes.............................. 0 External Type-1 Routes....
738 IP Rou ting Comma nds IpForwDatagrams................................ 0 IpInUnknownProtos.............................. 0 IpInDiscards................................... 0 IpInDelivers................................... 18467 IpOutRequests........
IP Routing Comma nds 739 IcmpInAddrMasks................................ 0 IcmpInAddrMaskReps............................. 0 IcmpOutMsgs.................................... 3 IcmpOutErrors.................................. 0 IcmpOutDestUnreachs.......
740 IP Rou ting Comma nds User Guidel ines The user is not re q uired to use this command. Routing can still b e enabled using the routing command in VLAN Interface Configuration mode.
IPv 6 MLD Snoo ping Comma nds 741 39 IPv6 MLD Snooping Commands This chapter exp lains the following commands: • ipv6 mld snoop ing immedia te-leave • ipv6 mld snooping groupmembership-interval .
742 IPv6 M LD Sn oopi ng Comma nds ipv6 mld snooping immediate-leave The ipv6 mld snooping immedia te-leave command enables or disabl es MLD Snooping snooping immediat e-leave admin mode on a selected interface or VLAN.
IPv 6 MLD Snoo ping Comma nds 743 ipv6 mld snooping groupmembershi p-interval The ipv6 m ld snooping groupm embership -inter val comma nd sets the MLD Group Membership Interv al time on a VLAN or interface.
744 IPv6 M LD Sn oopi ng Comma nds interface becaus e it did not r eceive a rep o rt for a par t icular group i n that interface. This value must be less than the MLD Query Interval time value.
IPv 6 MLD Snoo ping Comma nds 745 no ipv6 mld snoop ing mcrt expiretime [ vlan-id ] • vla n_id — Specifies a VLAN ID value in VLAN Database mode . • seconds — mu lticast router present expiration time in seconds. (Ra nge: 1–36 00) Default Conf iguration The defaul t multic ast rout er present expir ation time is 300 sec onds.
746 IPv6 M LD Sn oopi ng Comma nds User Guidel ines There ar e no user gui delines for this command. Example console(config)#ipv6 mld snooping ipv6 mld snooping (Interface) The ipv6 mld snooping (Interface) comm and enables MLD S nooping on an interface.
IPv 6 MLD Snoo ping Comma nds 747 Syntax ipv6 mld snooping vlan-id no ipv6 m ld snoopi ng vlan-id • vla n-id — Spe cifies a VLAN ID valu e. Default Conf iguration MLD Sn oop in g is d isa ble d. Command Mode VLAN Data base mode. User Guideli nes There ar e no user gui delines for this command.
748 IPv6 M LD Sn oopi ng Comma nds User Guidel ines This command has no user guidelines . Example W ith no optional arguments, the command disp lays the following information: • Admin Mode — Indicat es whether or not MLD S nooping is active on the switch.
IPv 6 MLD Snoo ping Comma nds 749 show ipv6 mld sno oping groups The show ipv6 ml d snooping group s command displays the MLD Snooping entries in the MFDB table. Syntax show ipv6 mld snoop ing groups [{ vlan vlan-id | address ipv6-multicast- addr e ss }] • vla n_id — S pecifies a VL AN ID va lue.
750 IPv6 M LD Sn oopi ng Comma nds ------------------------------------------- -- Vlan Ipv6 Address Ports ---- ----------------------- ------------ ---------------- ------------ console#show ipv6 mld snooping groups vlan 2 Vlan Ipv6 Addr ess Type Ports ---- ----------------------- ------- --- ---------------- ------------- 2 3333.
IPv6 Mul ticast Co mman ds 751 40 IPv6 Multicast Commands This chapter exp lains the following commands: • ipv6 pimsm (Glob al conf ig) • ipv6 p imsm ( VLAN Inter face co nfig) • ipv6 p imsm bsr.
752 IPv6 Multi cast Commands ipv6 pimsm (Global config) Use the ipv6 pimsm com man d to ad mini stra tiv ely en able of PIM SM for IPv 6 multicast routing. Use the "no" f orm of this command to disable PIMSM for IPv6. Syntax ipv6 pimsm no ipv6 pims m Default Conf iguration IPv6 PIMSM i s disabled on the router by default.
IPv6 Mul ticast Co mman ds 753 Command Mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 pimsm ipv6 pimsm bs r -border Use the ipv6 pi msm bsr-border command to prevent boots trap r out er (BSR ) messages from being sent or received through an interface.
754 IPv6 Multi cast Commands ipv6 pimsm bsr -c andidate Use the ipv6 pimsm bsr -candi d ate command to configure the router to announce its candidacy as a bootstrap router (BSR). Use the "no" form of t his command to stop the router from announcing its candidacy as a bootstrap router .
IPv6 Mul ticast Co mman ds 755 ipv6 pimsm dr -priority Use the ipv6 p imsm dr -p riority co mmand to s et th e pri ority va lue f or whi ch a router is elected as the designated route r (DR). Use the "no" form of this command to se t the prio rity to the defa ult.
756 IPv6 Multi cast Commands Default Conf iguration The default hello interval is 30 seconds. Command Mode Interface Configurati on (VLAN) mode User Guidel ines There ar e no user gui delines for this command.
IPv6 Mul ticast Co mman ds 757 Example console(config-if-vlan3)#ipv6 pimsm join-prune- interval 90 ipv6 pimsm re gister -th reshold Use the ipv6 p imsm reg ister -t hreshold command to configure the Register Thr eshold r ate for the RP rou ter to s witch to the short est path .
758 IPv6 Multi cast Commands Syntax ipv6 pimsm rp-address rp-address group-addr ess/prefixlength [ override ] no ipv6 p imsm rp -address • rp-add ress — An RP address. • group- addres s — The group address to displ ay . • prefixlength — This par amete r specifies the prefix length of t he IP address for the m edia gatew ay .
IPv6 Mul ticast Co mman ds 759 • prefixlen gth — T his param eter s pecifies th e prefix length of th e IP address for the me dia gateway . (Range: 1–32) Default Conf iguration The router does not adverti se itself as a PIM candidat e rendezvous point by default.
760 IPv6 Multi cast Commands User Guidel ines There ar e no user gui delines for this command. Example console(config)#ipv6 pimsm spt-threshold 1000 ipv6 pimsm ssm Use the ipv6 pimsm ssm command to define th e Source Specific Multicast (SSM) range of multicast addresses.
IPv6 Mul ticast Co mman ds 761 Syntax show ipv6 pimsm Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guideli nes There ar e no user gui delines for this command. Example console#show ipv6 pimsm Admin Mode.
762 IPv6 Multi cast Commands vlan 6 Enabled Operational vlan 9 Enabled Operational show ipv6 pimsm bsr Use the show ipv6 p imsm b sr comma nd to d isp lay the boo tst rap ro uter (B SR) information. The output includes el ected BSR information and information about the locally configured candidate r endezvous point (RP) advertisement.
IPv6 Mul ticast Co mman ds 763 show ipv6 pimsm interface Use the show i pv6 pi msm inte rface com mand to displa y interface c onfig parameters. If no interface is specif ied, all interfaces ar e displayed. Syntax show ipv6 pims m interf ace [ vlan vlan-id ] • v lan-id — A valid VL AN ID valu e.
764 IPv6 Multi cast Commands BSR Border..................................... Disabled show ipv6 pimsm neighb or Use the show ipv6 pi ms m neighb or command to display IPv6 PI MSM neighbors learned on the routing interfaces. Syntax show ipv6 p imsm ne ighbor [ all | interfa ce vlan vlan -id ] • vla n-id — A val id VLAN ID va lue.
IPv6 Mul ticast Co mman ds 765 show ipv6 pimsm rphash Use the show ipv6 pimsm rphash command to display which re ndezv ous point (RP) is b eing selected for a sp ecified group. Syntax show ipv6 pims m rphash group-address group-address — Group IP addres s supported by RP .
766 IPv6 Multi cast Commands Syntax show ipv6 p imsm rp m apping [ rp-addr ess ] • rp-add ress — IP addr ess of RP . Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guidel ines There ar e no user gui delines for this command.
IPv6 Ro uting Comma nds 767 41 IPv6 Routing Commands This chapter exp lains the following commands: • clea r ipv6 neigh bors • clea r ipv6 st atistics • ipv6 addr ess •i p v 6 e n a b l e • .
768 IPv6 R outin g C ommand s •i p v 6 r o u t e •i p v 6 r o u t e d i s t a n c e • ipv6 unicast -routing • ping ipv 6 • pin g ipv6 inte rface • show ipv6 brief • show ipv6 interface .
IPv6 Ro uting Comma nds 769 clear ipv6 neighbors Use the clear ipv6 neighbo rs command in P rivileged EXEC mode to clear all entries in t he IPv6 neighbor tab le or an entry on a speci fic interface. Syntax clear ip v6 neigh bors [ vlan vlan -id ] • vla n-id — V al id VLA N I D.
770 IPv6 R outin g C ommand s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following example clears IPv6 statistics for VLAN 11.
IPv6 Ro uting Comma nds 771 • prefix — Consists of t he bits of the add ress t o be configured. • prefix-length — Designa tes how many of the high-or der contig uous bits of the address make up the prefix.
772 IPv6 R outin g C ommand s Default Conf iguration Disabled is the default configuration. Command Mode Interface Configuration (VLAN, T unnel, L oopback) mod e. User Guidel ines This command has no user guidelines . Example The following example enables I P v6 routing, which has not been configured with an e xplicit IPv6 addr ess.
IPv6 Ro uting Comma nds 773 Example The followi ng ex ample globally enabl es IPv6 forwar ding. console#configure console(config)#ipv6 forwarding console(config)#no ipv6 forwarding ipv6 host The ipv6 host command is used to define stat ic host name-to- ip v6 addres s mapping in the host cache.
774 IPv6 R outin g C ommand s ipv6 mld last-member -query-count The ipv6 ml d last-me mber -query -count command sets the n umber of listener -speci fic queries sent before the router assumes that t here ar e no loca l members on the i nterface. Use the “no” form o f this command to set the last member query count to the default.
IPv6 Ro uting Comma nds 775 no ipv6 m ld last-m ember-query-interv al • last-member-query-interval — T he last memb er query interva l (Range: 0–65 535 millis econ ds). Default Conf iguration The default last member query interval is 1 second. Command Mode Interface Configuration (VLAN) mode.
776 IPv6 R outin g C ommand s User Guidel ines There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 mld-proxy ipv6 mld-proxy r eset-status Use the ipv6 mld-proxy reset-status command to reset the host inter face status parameters of the MLD P roxy rout er .
IPv6 Ro uting Comma nds 777 Syntax ipv6 mld-proxy unsoli cited-rep ort-inte rva l interval no ipv6 m ld-proxy un solicited-report -inter val • interva l — Th e interv al betw een unso licited reports (Ran ge: 1–26 0 seconds). Default Conf iguration The unsolicited report i nt erval is 1 se co nd by default.
778 IPv6 R outin g C ommand s Command Mode Interface Configurati on (VLAN) mode. User Guidel ines There ar e no user gui delines for this command. Example console(config-if-vlan3)#ipv6 mld query-interval 130 ipv6 mld query-max-response-time The ipv6 ml d query-max -respon se-time command sets MLD query maximum re sp onse time for the interface.
IPv6 Ro uting Comma nds 779 ipv6 mld router The ipv6 mld router co m mand is us ed t o e na ble M LD in the ro ute r i n gl ob al configuration mode and for a sp ecific interface in inter face configuration mode. U se the “no” form of this comma nd to disab le MLD.
780 IPv6 R outin g C ommand s • mtu — Is t he max imum transm ission unit. ( Range: 12 80-150 0) Default Conf iguration The default MTU is 15 00. Command Mode Interface Configuration (VLAN, T unnel, L oopback) mod e User Guidel ines This command has no user guidelines .
IPv6 Ro uting Comma nds 781 User Guideli nes This command has no user guidelines. Example The following e xample sets at 10 the number of dup licate address det e ction probes transmit ted while doing neighbor discove ry .
782 IPv6 R outin g C ommand s Example In the following example, the end node uses DH CPv6. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 nd managed-config-flag ipv6 nd ns- interv al.
IPv6 Ro uting Comma nds 783 ipv6 nd other -config- flag Use the ipv6 nd ot her- config-flag command i n Interface Configuration mode to set the “other stateful configuration” flag in router advertisements sent from the interface.
784 IPv6 R outin g C ommand s ipv6 nd pr efix Use the ipv6 nd prefix command to configur e p arameters associated with prefix es th at the router advertises in its route r advertisements.
IPv6 Ro uting Comma nds 785 The ipv6 nd prefix command will allow you to preconfigure R A prefix values before you configure the associated interface address. In or de r for the prefix to be included in R As, you must configure an address that matches the pr efix using the ipv6 address co mmand.
786 IPv6 R outin g C ommand s Example The fo llowing exampl e sets the transmi ssion inte rval betw een rout er advertisement s at 1000 seconds. console(config)#interface vlan 15 console(config-if-vla.
IPv6 Ro uting Comma nds 787 ipv6 nd reacha ble-time Use the ipv6 nd r eachable -time command in Interface Configuration mode to set the router advertisement time t o consider a neighbor r eachab le after neighbor discovery confirmation.
788 IPv6 R outin g C ommand s ipv6 nd suppress-ra Use the ipv6 nd suppress-ra command in Interface Configuration mode to suppr e ss router advertisement transmission on an interface. Syntax ipv6 nd suppress-ra no ipv6 nd suppress-ra Default Conf iguration Disabled is the default configuration.
IPv6 Ro uting Comma nds 789 Default Conf iguration IPv6 PIM-DM is disabled by default. Command Mode Global Configuration mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command.
790 IPv6 R outin g C ommand s Example console(config-if-vlan5)#ipv6 pimdm hello-interval 500 ipv6 route Use the ipv6 route command in Global Configur ation mode to configur e an IPv6 st atic route.
IPv6 Ro uting Comma nds 791 User Guideli nes This command has no user guidelines. Example The following example config ur e an IPv6 static ro ute. console(config)#ipv6 route 2020:1::1/64 2030:1::2 ipv6 rout e dist ance Use the ipv6 route distance command i n Global Configuration mode to set the default distance (prefere nce) for s tatic routes.
792 IPv6 R outin g C ommand s Example The f ollowin g e xample se ts the de fault dis tance to 80. console(config)#ipv6 route distance 80 ipv6 unicast-routing Use the ipv6 unicast-routin g command in Global Configuration mode to enable forwarding of IPv6 unicas t datagram s.
IPv6 Ro uting Comma nds 793 through the default VLAN (VLAN 1), as long as ther e is a physical path between the sw itch and the workstation. The termi nal interface sends th ree pings to the ta rget station. Syntax ping ipv6 { ip-addr ess | hostname } [size size ] • ipv6- address — T arget IPv6 add ress to ping.
794 IPv6 R outin g C ommand s is a physical pa th between t he switch and the workstat ion. The terminal interface sends three pings to the target station. Use the interfac e key w o rd to ping an inter face by using the link-lo cal address or t he global IPv6 addr ess of the interface.
IPv6 Ro uting Comma nds 795 show ipv6 brief Use the show ipv6 brief command in P rivileged EXEC mode to display the IPv 6 st at us of for w ardin g mo de and IPv 6 unicast routing mode. Syntax show ipv6 brief Default Conf iguration This command has no default configuration.
796 IPv6 R outin g C ommand s • tunnel -id — V alid tunn el interfac e ID • vla n-id — V ali d VLAN ID. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines .
IPv6 Ro uting Comma nds 797 Router Advertisement Suppress Flag........... .. Disabled Prefix 3FF0:1236:C261::1/64 Preferred Lifetime........................... .. 10000 Valid Lifetime............................... .. 100000 Onlink Flag...............
798 IPv6 R outin g C ommand s Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guidel ines The following fields are displayed as a tab.
IPv6 Ro uting Comma nds 799 The following table is displayed t o indicate all the sources associated with thi s group: Example console#show ipv6 mld groups ff1e::5 Interface.................................... .. vlan 6 Group Address..................
800 IPv6 R outin g C ommand s Group Address.............................. .... FF1E::1 Interface.................................. .... vlan 6 Up Time (hh:mm:ss)......................... .... 00:04:23 Expiry Time (hh:mm:ss)..................... .... ------ Group Address.
IPv6 Ro uting Comma nds 801 Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode User Guideli nes The following information is displa y ed for the specified interface: Interface The in terface number i n unit/sl ot/port format.
802 IPv6 R outin g C ommand s The following information is displayed if the operationa l mode of the MLD interface is e nabled: Example console#show ipv6 mld interface vlan 2 Interface.................................. .... vlan 2 MLD Global Admin Mode.
IPv6 Ro uting Comma nds 803 Last Member Query Interval (milli-secs)...... .. 1111 Last Member Query Count...................... .. 2 show ipv6 mld- prox y Use the show ipv6 ml d-proxy command to display a summary of the host interface status p arameters.
804 IPv6 R outin g C ommand s Example console#show ipv6 mld-proxy Interface Index............................ .... vlan 10 Admin Mode................................. .... Enabled Operational Mode........................... .... Enabled Version.......
IPv6 Ro uting Comma nds 805 Example console#show ipv6 mld-proxy groups Interface................................ vlan 10 Group Address Last Reporter Up Time Member State Filter Mode Sources ------------- -------------- ---------- ------------- ------------- FF1E::1 FE80::100:2.
806 IPv6 R outin g C ommand s Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC User Guidel ines The following parameters a re displayed by this command: Example console#show ipv6 igmp-proxy groups Interface.
IPv6 Ro uting Comma nds 807 ------------- ---------------- --------- ----------------- -------- ----- ------- FF1E::1 FE80::100:2.3 244 DELAY_MEMBER Exclude 2 Group Source List Expiry Time ------------------ --------------- 2001::1 00:02:40 2001::2 -------- FF1E::2 FE80::100:2.
808 IPv6 R outin g C ommand s show ipv 6 mld- proxy inte rface Use the show ipv6 ml d-proxy interfac e command to display a detailed list of the host interface status parameters. Syntax show ipv6 m ld-prox y interf ace Default Conf iguration There is no default configuration for this command.
IPv6 Ro uting Comma nds 809 Ver Query Rcvd Report Rcvd Report Sent Leave Rcvd Leave Sent ------------------------------------------------------------------ 1 2 0 0 0 2 2 3 0 4 ----- ----- show ipv6 mld traffic The show ipv 6 mld traffic co mmand is used to display MLD sta t istical information for the router .
810 IPv6 R outin g C ommand s Example console#show ipv6 mld traffic Valid MLD Packets Received..................... 52 Valid MLD Packets Sent......................... 7 Queries Received............................... 0 Queries Sent....................
IPv6 Ro uting Comma nds 811 User Guideli nes This command has no user guidelines. Example The following exampl e displays info rmation about the IPv6 neighbors.
812 IPv6 R outin g C ommand s Admin Mode..................................... Enable PIM-DM INTERFACE STATUS Interface Interface Mode Protocol State --------- -------------- ---------------- vlan 10 E.
IPv6 Ro uting Comma nds 813 Slot/Port...................................... vlan 10 IP Address..................................... FE80::221:9BFF:FEC3:1216/128 Neighbor Count................................. 0 Hello Interval (secs)...................
814 IPv6 R outin g C ommand s Command Mode P rivileged EXEC User Guidel ines There ar e no user gui delines for this command. Example console#show ipv6 pimdm neighbor interface vlan 10 Up Time Expiry .
IPv6 Ro uting Comma nds 815 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines.
816 IPv6 R outin g C ommand s User Guidel ines This command has no user guidelines . Example The follo wing e xample show s the pr efer enc e value ass ociat ed with the ty pe of route. console#show ipv6 route preferences Local........................
IPv6 Ro uting Comma nds 817 User Guideli nes This command has no user guidelines. Example The following example displays a summary of the routing table. console#show ipv6 route summary IPv6 Routing Table Summary - 0 entries Connected Routes...........
818 IPv6 R outin g C ommand s Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guidel ines This command has no user guidelines . Examples The following e xamples s how traffic and s tatistics for IP v6 and ICMPv6, f irst for all inter faces and an individual VLAN.
IPv6 Ro uting Comma nds 819 Multicast Datagrams Transmitted........................... 0 console> show ipv6 traffic vlan 11 Interface...................................... 11 IPv6 STATISTICS Total Datagrams Received.................................
820 IPv6 R outin g C ommand s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example displays IPv6 VLAN routing interface addre sses.
IPv6 Ro uting Comma nds 821 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example discovers the packet routes on a hop-b y-hop basis.
822 IPv6 R outin g C ommand s.
Loop back Inte rface Com mands 823 42 Loopbac k Interface Command s This chapter exp lains the following commands: • interface loopback • show interfaces loopback.
824 Loopbac k Int erfac e Command s interface loop back Use the interfa ce loopback command in Global C onfiguration mode to enter the Interface L oopback configuration mode. Syntax interface l oopback loopback-id no inter face loop back loopback-id • loopback-id — L oopback identifier .
Loop back Inte rface Com mands 825 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Examples The following exampl es display info rmation about configur e d loopback interfaces.
826 Loopbac k Int erfac e Command s.
Multicast Comman ds 827 43 Multicast Commands This chapter exp lains the following commands: • ip mcast boundar y •i p m r o u t e •i p m u l t i c a s t • ip m ulticas t ttl-thresho ld • ip.
828 Multi cast Com mands • show ip pi msm rphash • show ip pi msm rp mapping.
Multicast Comman ds 829 ip mcast boundar y Use the ip mcas t bounda ry command in Interface Configuration mode to add an administra tive scope multicast boundary s pecified by grou pipad dr and mask for which this multica st administrative boundary is applicable.
830 Multi cast Com mands Syntax ip mro ute source-addr ess source-mask rp f-addr ess pref erence no ip mro ute source-addr ess source • source-addr ess — The IP addre ss of the multicas t data source. • source-mask — The IP subnet ma sk of the multicast data source.
Multicast Comman ds 831 no ip multica s t Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The following example enables IP multicast on the router .
832 Multi cast Com mands User Guidel ines This command has no user guidelines . Example The following e xample applies a ttlv alue of 5 to the VLAN 15 routing interface.
Multicast Comman ds 833 ip pimsm bsr -bo rder The ip pimsm bsr - border com mand is used to prevent bo otstrap router (B SR) messages from being sent or received through an i nterface. Use t he “no” form of this command to disa ble the interface fro m being the BSR border .
834 Multi cast Com mands • hash-ma sk-length — The length of a mask that is t o be ANDed with the group address before the h ash func tion is ca lled. All group s with the same seed hash correspond to the same RP . F or e xam ple, if this value is 24, only the first 24 bit s of the group ad dresses matter .
Multicast Comman ds 835 Default Conf iguration The defaul t elect ion p riorit y is 1. Command Mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command.
836 Multi cast Com mands Example console(config-if-vlan3)#ip pimsm hello-interval 60 ip pimsm join-p rune-in terva l The ip pim sm jo in-pru ne-inter v al command is used to configure the interface join/prune interval for the PIM-SM router . Use the “no” form of this command t o set the j oin/prune in terval to the default .
Multicast Comman ds 837 Syntax ip pims m regist er -thresh old thr eshold no ip pi msm regi ster -th r esh old • thr eshold — T he threshold rate ( Range: 0 –2000 Kbps). Default Conf iguration The def ault thr eshold r ate is 0. P r eviously , the default w as 50.
838 Multi cast Com mands Default Conf iguration There ar e no s tatic RP addresses configured by default. Command Mode Global Configuration mode User Guidel ines There ar e no user gui delines for this command. Example console(config)#ip pimsm rp-address 192.
Multicast Comman ds 839 User Guideli nes There ar e no user gui delines for this command. Example console(config)#ip pimsm rp-candidate interface vlan 3 225.2.0.0 255.255.0.0 ip pimsm spt-thr eshold The ip pim sm spt-t hreshold command is used to configure the Data Threshold rate for the last -hop rout er to switc h to the sh ortest path.
840 Multi cast Com mands Syntax ip pimsm ssm { default | group-address group-mask } no ip pimsm ssm • default — Defin es the SSM ra nge access list to 232/8. • group-ad dres s group-mask — defines the SSM range . Default Conf iguration There is no SSM range defined by de fault.
Multicast Comman ds 841 User Guideli nes This command has no user guidelines. Example The following command shows informatio n about the en tries in the multi cast addr ess table.
842 Multi cast Com mands Syntax show ip m cast Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following example disp lays system-wide multicast information.
Multicast Comman ds 843 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example di sp lays all the configur ed administrative scoped multicast bo undaries.
844 Multi cast Com mands Example The following example displays the multicast information for VLAN 1 5. console#show ip mcast interface vlan 15 Interface TTL --------- ----- show ip mcast mroute Use the show ip mcast mro ute command in Priv ileged EXEC mode to display a summ ary or all the de tails of the mult icas t table .
Multicast Comman ds 845 Expiry Up Time Source Ip Group Ip Time(secs) (s ecs) RPF Neighbor Flags --------- ----------- ---------- ----------- --------------- ----- show ip mcast mroute group Use the sh.
846 Multi cast Com mands console#show ip mcast mroute group 224.5.5.5 detail Multicast Route Table Expiry Up Time Source Ip Group Ip Time(secs) (secs) RPF Neighbor Flags --------- --------- ----------.
Multicast Comman ds 847 console#show ip mcast mroute source 10.1.1.1 224.5.5.5 Multicast Route Table Expiry Up Time Source IP Group IP Time(secs) (secs) RPF Neighbor Flags --------- --------- --------.
848 Multi cast Com mands show ip pimsm bsr The show ip pimsm bsr command displays the bootstrap router (BSR) information. The output includes el ected BSR information and information about the locally configur e d candidate rendezvous point (R P) advertisement.
Multicast Comman ds 849 Example console#show ip pimsm bsr BSR Address.................................. .. 1.1.1.1 BSR Priority................................. .. 20 BSR Hash Mask Length......................... .. 10 Next bootstrap message(hh:mm:ss).
850 Multi cast Com mands Example console#show ip pimsm interface vlan 3 Slot/Port.................................. .... vlan 3 IP Address................................. .... 1.1.1.1 Subnet Mask................................ .. 255.255.255.0 Hello Interval (secs).
Multicast Comman ds 851 Example console#show ip pimsm rphash 225.1.0.5 RP Type Address ---------------- ----- 1.1.1.1 Static show ip pimsm r p mapping The show ip pimsm rp mappin g command is used to dis play all group-to-RP mappings of which t he router is awar e (either configured or learned from the bootstrap router (BSR)).
852 Multi cast Com mands Example console#show ip pimsm rp mapping Group Address.......................... 225.1.0.0 Group Mask............................. 255.255.255.0 RP Address............................. 1.1.1.1 origin...........................
OSPF Commands 853 44 OSPF Commands This chapter exp lains the following commands: • are a default-cos t •a r e a n s s a • are a nssa defaul t-info-o riginat e • are a nssa no-r edistribu te .
854 OSPF Commands • exit-ov erf low-interval • external-lsdb-limit • ip ospf area • ip ospf auth entic atio n • ip ospf cost • ip os pf dead-i nterval • ip ospf hello-interval • ip osp.
OSPF Commands 855 • sh ow ip osp f interfac e • sh ow ip osp f interface brief • sh ow ip osp f interfac e stats • show ip ospf neigh bor •s h o w i p o s p f r a n g e • sh ow ip osp f st.
856 OSPF Commands area de fault-cost Use the area default-cost command in Router OSPF Configuration mode to configure the monetary default cost for the stub area.
OSPF Commands 857 Syntax area area- id nssa no are a area- id nssa • ar ea-id — Identifies the OS PF not -so-stubb y-area. (Range: 0–4294 967295 ) Default Conf iguration This command has no default configuration. Command Mode Router OSPF Configuration mode .
858 OSPF Commands • integer — Specifies the metric of the de fault route a dvertised to the NSSA. (R ange: 1–1 67772 14) • compar abl e — A metric type of nssa-ex ternal 1 • non-comparable — A metric typ e of nssa-ext ernal 2 Default Conf iguration If no metric is define d, 10 is the default configuration.
OSPF Commands 859 Command Mode Router OSPF Configuration mode . User Guideli nes This command has no user guidelines. Example The following example configur es the NSSA ABR.
860 OSPF Commands area nssa translator -role Use the area nss a tra nslator-role command in Router OSPF Configuration mode to conf igure the transl ator role of the NSSA . Syntax area area-i d nssa translator-role {always | candidate} no area area -id nssa translato r -ro le • ar ea-id — Ident ifies the O SPF NSSA to co n figure.
OSPF Commands 861 Syntax area area- id nssa translator-stab-intv integer no are a area- id nssa translator-stab-intv • ar ea-id — Ident ifies the O SPF NSSA to configu re.
862 OSPF Commands Syntax area ar e a-id rang e ip -add ress su bnet -m ask {summa rylink | ns saexternall ink} [advertise |n ot-advert ise] no area area -id range ip-addr ess subnet-mask {summaryl ink | nssaext ernallink} • ar ea-id — Ident ifies the O SPF NSSA to co n figure.
OSPF Commands 863 External LSA s and Summary LSAs can s ignificantly r e duce the link st ate database of routers within the stub area. Use the no f o rm of the command to remo ve the stu b area . Syntax area area- id stub no are a area- id stub • ar ea-id — Ident ifies the a rea identifier of the O SPF stub .
864 OSPF Commands no area area -id stub no-summary • ar ea-id — Ident ifies the O SPF area to configure. (Ra nge: IP ad dress or decim al from 0–429 49672 95) Default Conf iguration Disabled is the default configuration. Command Mode Router OSPF Configuration mode.
OSPF Commands 865 Command Mode Router OSPF Configuration mode . User Guideli nes This command has no user guidelines. Example The following e xample cr eates an OSPF virtual int erface for are a 10 and neighbor router . console(config-router)#area 10 virtual-link 192.
866 OSPF Commands Default Conf iguration This command has no default configuration. Command Mode Router OSPF Configuration mode. User Guidel ines Unauthe nticated i nterfaces do not need an authentic ation key . Example The follow ing example conf igures the authenti cation ty pe and key for the area 10 OSPF virtual interface and neighbor ID .
OSPF Commands 867 Command Mode Router OSPF Configuration mode . User Guideli nes This command has no user guidelines. Example The following example configures the dead interval for the area 10 OSPF virtual interface on the virt u al interface and neighbor router .
868 OSPF Commands User Guidel ines This command has no user guidelines . Example The following exampl e configures a 50-second wait interval. console(config-router)#area 10 virtual-link 192.
OSPF Commands 869 Example The following exampl e configures a 500-second retransmit wait interval. console(config-router)#area 10 virtual-link 192.168.
870 OSPF Commands console(config-router)#area 10 virtual-link 192.168.2.2 transmit-delay 40 auto-cost By default, OSPF computes t he link cost of each interface from the interface bandwidth.
OSPF Commands 871 bandwidth By default, O SPF com putes the li nk cost of an int erface as the ratio of the refer ence bandw idth to the interface bandwidth. Reference bandwidth is specifi ed with th e auto-cost command. F o r the purpose of the OSPF link c ost calculation, the bandwidth command specifies the interface bandwidth.
872 OSPF Commands no capabil ity opa que Default Conf iguration Opaque Capability is enabled by default. Command Mode Router Configuration mode. User Guidel ines There ar e no user gui delines for this command. Example console(config-router)#capability opaque clear ip ospf Use the clear ip ospf command to reset sp ecific OSPF states.
OSPF Commands 873 Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no user gui delines for this command. Example The following example shows the options for the clear ip ospf command.
874 OSPF Commands Default Conf iguration The default metric is none and the default type is 2. Command Mode Router OSPF Configuration mode. User Guidel ines This command has no user guidelines . Example The following example always advertises default route s.
OSPF Commands 875 Example The following exampl e sets a value of 50 for the defau lt metric. console(config-router)#default-metric 50 distance ospf The distance ospf command se ts the preference values of OSPF route types in t he rout er . Lowe r rout e pre fere nce val ues ar e pr efer red when de termi ning the b est route .
876 OSPF Commands distribute-list out Use the distrib ute-list ou t command in Router OSPF C onfiguration mode to specify the access lis t to filter routes received from the source protocol. Use the no form of the command to re m ove the specified source prot ocol from the access list.
OSPF Commands 877 enable Use the enabl e command in Router OSPF Configuration mode to re set the default administrative mod e of OSPF in the router (active). Use th e no form of the comm and to disabl e the adminis trative mo de for OSPF . Syntax enable no ena ble Default Conf iguration Enabled is the default configuration.
878 OSPF Commands • seconds — Number of secon ds after enteri ng overflow st ate that a rout er will wait b efore attempting to l eave the overflow state. (Range: 0–21 474836 47) Default Conf iguration 0 seconds is the default configuration. Command Mode Router OSPF Configuration mode.
OSPF Commands 879 Command Mode Router OSPF Configuration mode . User Guideli nes The exter nal LSD B limi t MUS T be set i dentica lly i n all r outers a ttach ed to the OSPF backbone and/or any r egular OSPF area. Example The following example configures the e xterna l LSDB limit for OSPF with the number of non-default ASexternal- LSAs set at 20.
880 OSPF Commands Example console(config-if-vlan1)#ip ospf area 192.168.1.10 ip ospf authentication Use the ip ospf authe nticati on comm an d in the Inte rfac e C onf igu rat ion mode to s et the OSPF Authentication T y pe and Key for the specif ied interface.
OSPF Commands 881 console(config-if-vlan15)#ip ospf authentication encrypt test123 100 ip ospf cost Use the ip ospf co st command in Interface Config uration mode to configure the cost on an OSPF interface. Use the no form of the co mmand to r e turn the cost to the defa ult value.
882 OSPF Commands Syntax ip ospf dea d-inter val seconds no ip osp f dead-inte rva l • seconds — Number of seconds that a router's Hello pack ets have not been seen before its neighbor routers d ecl are that the router is dow n. (Range: 1–65 535) Default Conf iguration 40 is the default number of seconds.
OSPF Commands 883 Default Conf iguration 10 is the default number of seconds. Command Mode Interface Configuration (VLAN) mode. User Guideli nes The value for the length of time must be t he same for all routers attached t o a network. Example The followi ng e xample sets the O SPF hello interval at 30 seconds.
884 OSPF Commands User Guidel ines This command has no user guidelines . Example The following exampl e disables OSPF MTU mismatch detecti o n on VLAN interface 15 .
OSPF Commands 885 Example The following example shows the options for the ip ospf network command. console(config-if-vlan1)#ip ospf network ? broadcast Set the OSPF network type to Broadcast point-to-.
886 OSPF Commands ip ospf retransmit-inter val Use the ip ospf retransmi t-inter val command in Interface Configuration mode to set the OSP F retransm it Int erval for the spec ified in terfac e. Use th e no fo rm of the command to re turn the interva l to the default value .
OSPF Commands 887 Syntax ip ospf tran smit-dela y seconds no ip osp f trans mit-delay • seconds — Se ts the estim ate d num b er of secon ds it takes to t rans mit a link state update packet over this interface. (Range: 1– 3600 seconds) Default Conf iguration 1 is the default number of seconds.
888 OSPF Commands Command Mode Router OSPF Configuration mode. User Guidel ines OSPF is only enabled on an interfa ce if the prima ry IPv4 addr ess on the interface matc he s a network ar ea range. Any indiv idual interface can only be attached to a s ingle are a.
OSPF Commands 889 Default Conf iguration OSPFv2 is disabled Command Mode Router OSPF Configuration mode . User Guideli nes OSPF is only enabled on an interface if the primary IPv4 addr ess on the interface matc h es a network ar ea range. Any indiv idual interface can only be attached to a single area.
890 OSPF Commands planned-only — This keywor d indicates tha t OSPF should only perform a graceful restart when the restart is planned (i.e., when the restart is a result of the ini t iate fa ilo ver co mm and ).
OSPF Commands 891 no ns f helpe r • planned-only — This keywor d indicates that OSPF should only help a rest arting router p erforming a planne d r estart.
892 OSPF Commands Default Conf iguration A helpful neighbor exits help er mode when a topology change occurs. Command Mode Router OSPF Configuration mode User Guidel ines The restarting r outer i s unabl e to react to topology chan ges.
OSPF Commands 893 Default Conf iguration The default r estart interva l is 120 seconds. Command Mode Rout er OSPF User Guideli nes The grace period must be set long enough to allow the restarting router to reest ablish all of its adjacencie s and complete a full dat abase ex change with each of those neighbors.
894 OSPF Commands Example console(config-router)#passive-interface passive-interface Use the passive-interface command to set the int e rface as passive. It overrides the global passive mod e that is currently effective on the interface. Use the “no” form of this command to set the interface as non-passive.
OSPF Commands 895 Syntax redistribute { rip | s tatic | connecte d} [metric integ er ] [ metr ic-type {1 | 2}] [tag integer ] [subnets] no redist ribute {rip | static | conn ected} [metri c integer ] [met ric-type {1 | 2}] [tag integer ] [subnets] • rip — Specifies RIP as the source protocol.
896 OSPF Commands router -id Use the router-id command in Router OSPF Configuration mode to set a 4- digit dotted-dec imal number uniquely identifyi ng the router OSPF ID. Syntax router-id ip-address • ip-add ress — IP address that u niquely id entifies the rou ter OSPF ID .
OSPF Commands 897 Command Mode Global Configuration mode. User Guideli nes The command prompt changes when the router osp f command ex e cutes. Example The following example enters into router OSPF mode. console(config)#router ospf console(config-router)# show ip ospf Use the show ip ospf command to display information relevant to the OSPF router .
898 OSPF Commands RFC 1583 Compatibility This confi gur ation op tion cont rols th e preference rules u sed when choosing among multiple e xternal LSAs advertising the same d estinati on. When enabled, the pre feren ce rules remain those spe cif ied by RFC 158 3.
OSPF Commands 899 Number of Active Areas The number of OSPF areas to whic h the rout er is atta ched o n interfaces that are u p. ABR Stat us Sh ows whe ther the route r is an OS PF Area Border Rout er . ASBR Status Indicate s whether the router is an au tonomous system bord er router .
900 OSPF Commands LSA Hi gh W ater Mark The maximum num ber of LSAs that have be en in the link state database since OSPF began operation. Retra nsmit Li st Entries The current number of entries on all neighbors ’ retran s mit lists.
OSPF Commands 901 Example The following ex ample displays OSPF router information. console#show ip ospf Router ID.................................... .. 1.1.1.1 OSPF Admin Mode.............................. .. Enable RFC 1583 Compatibility............
902 OSPF Commands ASBR Status................................ .... Disable Stub Router................................ .... FALSE External LSDB Overflow..................... .... FALSE External LSA Count......................... .... 0 External LSA Checksum.
OSPF Commands 903 show ip ospf abr The show ip os pf abr command displays the internal OSPF routing table entries to Area Border Routers (ABR). This command tak e s no options. Syntax show ip ospf a br Default Conf iguration This command has no default configuration.
904 OSPF Commands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following example displays OSPF router information. console#show ip ospf area 10 AreaID.
OSPF Commands 905 Default Metric............................... .. 250 Default Metric Type......................... Non-Comparable Translator Role.............................. .. Candidate Translator Stability Interval................ .. 2000 Translator State.
906 OSPF Commands show ip ospf database Use the show ip ospf database command in Priv ileged EXE C mode to display information ab o ut the link state databas e when OSPF is enabled. If para meters are e nter ed, th e comman d displ ays t he LSA h eaders .
OSPF Commands 907 Example The followi ng e xample displays informat ion about the link st ate database when OSPF is enable d. console#show ip ospf database Router Link States (Area 0.0.0.0) Link Id Adv Router Age Sequence Chksm Options Rtr Opt --------------- --------------- ----- -------- ------ ------- ----- 5.
908 OSPF Commands Link Opaque States (Area 0.0.0.0) Link Id Adv Router Age Sequence Chksm Options Rtr Opt --------------- --------------- ----- -------- ------ ------- ----- 5.
OSPF Commands 909 show ip ospf database database-s ummary Use the show ip osp f data base databa se-sum mary command to display the number of each type of L SA in the database for each area and for the router . The c o mma nd also di splays the total n umber of L SAs in the databas e .
910 OSPF Commands Example The follo wing e xampl e disp lays t he numb er of each t ype of LSA in t he database for each area and for the router . console#show ip ospf database database-summary OSPF Router with ID (5.5.5.5) Area 0.0.0.0 database summary Router.
OSPF Commands 911 Router......................................... 0 Network........................................ 0 Summary Net.................................... 0 Summary ASBR................................... 0 Type-7 Ext.......................
912 OSPF Commands Example The following exampl e displays the information for the IFO object or v i rtual interface ta bles associat e d with VLAN 3 . console#show ip ospf interface vlan 10 IP Address.......................... 1.1.1. 1 Subnet Mask....
OSPF Commands 913 show ip ospf interface brief Use the sh ow ip osp f inter fac e brief command in Pri v ileged EXEC mode to display bri e f information for the I FO objec t or virtua l interfa ce table s. Syntax show ip ospf int erface bri ef Default Conf iguration This command has no default configuration.
914 OSPF Commands Syntax show ip osp f interf ace stats vlan vlan -id • vla n-id — V ali d VLAN ID. Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines .
OSPF Commands 915 • vla n-id — V alid VLAN I D. • ip-add ress — V alid I P address of the neighb or . Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines.
916 OSPF Commands Field D escriptions Interface — The name of the inte rface on which the adjacency is formed. Neighbor IP Address — The IPv4 address on the neighbor's interface used to form the adjacency . Interface Inde x — The SNMP interfac e index.
OSPF Commands 917 – So ftware res tart ( 1) –S o f t w a r e r e l o a d / u p g r a d e ( 2 ) – Swit ch to redun dan t co ntro l pr oce ssor (3 ) – Unrecog nized - a val ue not defined i n RF.
918 OSPF Commands show ip ospf range Use the show ip os pf range command in Privi leged EXE C mode to display information about t he area ranges fo r the specified ar ea-id. Syntax show ip osp f rang e area- id • ar ea-id — Ident ifies the O SPF area whose ranges a re being displayed .
OSPF Commands 919 Syntax show ip ospf s tatis tics Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example console>show ip ospf statistics Area 0.
920 OSPF Commands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines .
OSPF Commands 921 Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The following example displays the OSPF Virtual Interface information for area 10 and its neighbor . console#show ip ospf virtual-link 10 192.
922 OSPF Commands Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following exampl e displays the OSPF V irtual Interface information in the syst em.
OSPF Commands 923 User Guideli nes This command has no user guidelines. Example The following example configur es the SPF delay and hold time. console(config-router)#timers spf 20 30 1583compatibility Use the 1583co mpatibili ty command in Router OSPF Configuration mode to enable OSPF 1583 compatibility .
924 OSPF Commands.
OSPF v3 Co mm ands 925 45 OSPFv3 Commands This chapter exp lains the following commands: • are a default-cos t •a r e a n s s a • are a nssa defaul t-info-o riginat e • are a nssa no-r edistri.
926 OSPFv3 C ommand s • ipv6 ospf h ello-interva l • ipv6 ospf m tu-ignore • ipv6 ospf n etwork • ipv6 ospf p riority • ipv6 ospf retransmit-in terval • ipv6 ospf t ransmit-delay •i p v .
OSPF v3 Co mm ands 927 • sh ow ip v6 ospf virtual-lin k • sh ow ip v6 ospf virtual-lin k brief.
928 OSPFv3 C ommand s area de fault-cost Use the area default-cost command in Router OSPF v3 Configuration mo de to configure the monetary default cost for the stub area. The operator must specify the area id and an integer va lu e between 1-1677 7215.
OSPF v3 Co mm ands 929 Syntax area areaid nssa no are a areai d nssa • ar eaid — V alid O SPFv3 area ident ifier . Default Conf iguration This command has no default configuration. Command Mode Router OSPFv3 Configuration mo de. User Guideli nes This command has no user guidelines.
930 OSPFv3 C ommand s • compar abl e — Metric T ype (nssa-e xternal 1). • non-comparable — Met ric T ype (ns sa-e xte rnal 2). Default Conf iguration If no metric is define d, 10 is the default configuration. Command Mode Router OSPFv3 Configuration mode .
OSPF v3 Co mm ands 931 Command Mode Router OSPFv3 Configuration mo de. User Guideli nes This command has no user guidelines. Example The following e xample configur es the area 1 NSSA ABR so that le arned external ro utes will not be redistrib uted to the N SSA.
932 OSPFv3 C ommand s Example The following example configures the area 1 NSSA so that sum mary LSAs are not ad vertised int o the NSSA. console(config)#ipv6 router ospf console(config-rtr)#area 1 nss.
OSPF v3 Co mm ands 933 console(config-rtr)#area 1 nssa translator-role always area nssa translator -sta b-intv Use the area nssa tra nslat or -s tab-i ntv command in Router OSPFv3 Configuration mode to configure the translator s tability interval of the NSSA.
934 OSPFv3 C ommand s area r ange Use the area rang e command in Route r OSPF Configuration mode to configure a summary prefix for routes learned in a given area. There ar e two types of area range s. An area ra ng e can be configured to summar ize intra-ar ea routes.
OSPF v3 Co mm ands 935 Example The following example creates an area r a nge for the area 1 NSSA. console(config)#ipv6 router ospf console(config-rtr)#area 1 range 2020:1::1/64 summarylink area stub Use the area stub command in Rout er OSPFv3 Configuration mo de to create a stub ar ea for the specified ar ea ID.
936 OSPFv3 C ommand s area stub no-summary Use the area stu b no-sum mary command in Router OSPF v3 Configuration mode to disable the i mport of Summary LSA s for the stub area identified by ar eaid. Syntax area areaid stub no-summary no area area id stub no-summary • ar eaid — V alid OSPF v3 area identifier .
OSPF v3 Co mm ands 937 no are a areai d vir tua l-li nk neighbor -id • ar eaid — V alid O SPFv3 area identifier (or d ecimal value in the ra nge of 0- 4294 96729 5). • neighbor -id — Ident ifies the R outer ID or IP address of the n eighbor . Default Conf iguration This command has no default configuration.
938 OSPFv3 C ommand s Default Conf iguration 40 is the default value for seconds . Command Mode Router OSPFv3 Configuration mode . User Guidel ines This command has no user guidelines .
OSPF v3 Co mm ands 939 User Guideli nes This command has no user guidelines. Example The following example configur es a hello interval of 20 seconds for the OSPF virtual inte rface on the virtu al interface identifi ed by area 1 and its neighbor .
940 OSPFv3 C ommand s Example The following example configur es the re transmit interva l of 20 seconds for the OSPF v irtual interface on t he virtual i nterface identifi ed by area 1 and its neighbor .
OSPF v3 Co mm ands 941 console(config-rtr)#area 1 virtual-link 2 transmit- delay 20 default-information origi nate Use the defau lt-inf orma tion ori ginat e command in Router OSPFv3 Configuration mode to control the adve rtisement of default routes .
942 OSPFv3 C ommand s console(config-rtr)#default-information originate metric 100 metric-type 2 default-metric Use the defaul t-metric command in Rout er OSPFv3 Configuration mode to set a defaul t for the metr ic of distribut ed routes.
OSPF v3 Co mm ands 943 Syntax distance ospf { external | inte r - are a | intra-ar ea } distance no distance ospf { extern al | inter -area | intr a-area } distance • distan ce — Used to select the best path when there ar e two or more routes to the sa me de stination from two d ifferent routing protocols (Ra nge: 1–25 5).
944 OSPFv3 C ommand s Command Mode Router OSPFv3 Configuration mode . User Guidel ines This command has no user guidelines . Example The followi ng e xampl e enabl es ad minist rativ e mode o f OSPF in the router (active).
OSPF v3 Co mm ands 945 Example The following example configur es the exit overflow interval for OSPF at 100 seconds. console(config)#ipv6 router ospf console(config-rtr)#exit-overflow-interval 100 extern al-lsdb-limit Use the exter nal-lsdb- lim it command in Router OSPFv3 Configuration mode to configure the external LSDB limit for OSPF .
946 OSPFv3 C ommand s Example The fo llowing exampl e sets the exte rnal LSDB limit at 100 for OS PF . console(config)#ipv6 router ospf console(config-rtr)#external-lsdb-limit 100 ipv6 ospf Use the ipv6 ospf command in Interface Configuration mode to enable OSPF on a router interface or loopback inte rface.
OSPF v3 Co mm ands 947 Syntax ipv6 ospf ar eaid areaid no ipv6 osp f areai d areai d • ar eaid — Is a 32 -bit int eger , for matted as a 4- digit dot ted-decimal number or a decim al valu e. It un iquely id en tifies the area to w hich th e interface connects.
948 OSPFv3 C ommand s Command Mode Interface Configuration (VLAN, T unnel, L oopback) mod e. User Guidel ines This command has no user guidelines . Example The following example configures a cost of 100.
OSPF v3 Co mm ands 949 Example The followi ng e xample sets the O SPF dead interval at 100 seconds. console(config)#interface vlan 15 console(config-if-vlan15)#ipv6 ospf dead-interval 100 ipv6 ospf he.
950 OSPFv3 C ommand s ipv6 ospf mtu -ignore Use the ipv6 o spf mtu -ignore comm and in Interface Configuration mode to disable OSPF maximum transmi ssion unit (MTU) mismatch detection. OSPF Dat abase Desc ription packe ts specify th e size of the largest IP packet that can be sent without fragment ation on the interface.
OSPF v3 Co mm ands 951 default to point-to-point. When an E thernet port is used as a single large bandwidth IP network between two router s , the network type ca n be point-t o- point since there are only two routers. Using poin t-to-point as the network type eliminates the ov erhead of the OSPF designa ted router election.
952 OSPFv3 C ommand s Syntax ipv6 ospf priority prior ity no ipv6 ospf priority • priority — O SPF priority for specified interface. (Range : 0-255. A v alue of 0 indicates that th e router is not eligible t o become th e designated router on th is n etwo rk) Default Conf iguration 1, the highest rout er priority , i s the default value.
OSPF v3 Co mm ands 953 Default Conf iguration 5 seconds is the default value. Command Mode Interface Configuration (VLAN, T unnel, Loop back) mode. User Guideli nes This command has no user guidelines. Example The fo llowing e xampl e sets the OSPF re transmit i nterval at 100 secon ds.
954 OSPFv3 C ommand s User Guidel ines This command has no user guidelines . Example The followi ng e xample sets the O SPF T ransmit Delay at 100 seconds for VLAN 15.
OSPF v3 Co mm ands 955 Syntax maxi mum-pat hs maxpaths no ma ximum-p aths • maxpath s — Nu mber of path s that can be reported. (Range: 1-2) Default Conf iguration 2 is the default value for maxpaths . Command Mode Router OSPFv3 Configuration mo de.
956 OSPFv3 C ommand s Default Conf iguration Graceful re start is disabled by default Command Mode Router OSPFv3 Configuration mode User Guidel ines Graceful restart works in conce rt with nonstop for.
OSPF v3 Co mm ands 957 Default Conf iguration OSPF may act as a helpful neighbor for bo th planned and unplanned restarts Command Mode Router OSPFv3 Configuration mode User Guideli nes The grace LS A announcing the graceful re start includes a r estart reas on.
958 OSPFv3 C ommand s Command Mode Router OSPFv3 Configuration mode User Guidel ines The restarting r outer i s unabl e to react to topology chan ges. In pa rticula r , the restar t ing router will no.
OSPF v3 Co mm ands 959 Command Mode Router OSPFv3 Configuration mode User Guideli nes The grace period must be set long enough to allow the restarting router to reest ablish all of its adjacencie s and complete a full dat abase ex change with each of those neighbors.
960 OSPFv3 C ommand s Example console(config-router)#passive-interface vlan 1 passive-inte rface default The passive-interface default command enables the global pass ive mode b y default for all interfaces. It overrides any int erface level passive mode.
OSPF v3 Co mm ands 961 Syntax redistribute {static | connected} [metric met ric ] [metric- type {1 | 2}] [ ta g tag ] no re distri bute { static | connected} [ metric ] [metric-type] [ tag ] • metric — Met ric valu e used for defau lt rout es. (Ran ge: 0-167772 14) • tag — T ag.
962 OSPFv3 C ommand s Command Mode Router OSPFv3 Configuration mode . User Guidel ines This command has no user guidelines . Example The followi ng e xample sets a 4 -digit dotted- decima l numbe r ident ifying the Router OS PF ID as 2.3.4 .5. console(config)#ipv6 router ospf console(config-rtr)#router-id 2.
OSPF v3 Co mm ands 963 External LSDB Limit Shows th e maximu m number of no n-def ault externa l LSAs entr ies that can be stored in t he link-s tate da tabase. Exit Overflow Interval Shows the number of s econds that, after en tering OverflowState, as defined by RFC 1765, a router will attempt to leave OverflowSt at e.
964 OSPFv3 C ommand s Stub Rout er OSPF enters stub rou ter mod e, as desc ribed in RFC 3 137, when it enco unter s a resource limi tati on that preven ts it from compu ting a co mplete ro uting tab le.
OSPF v3 Co mm ands 965 Example The followi ng e xample enables OSP F traps. console#show ipv6 ospf Router ID...................................... 0.0.0.2 OSPF Admin Mode................................ Enable ASBR Mode................................
966 OSPFv3 C ommand s New LSAs Originated............................ 0 LSAs Received.................................. 0 External LSDB Limit............................ No Limit Default Metric................................. Not Configured Maximum Paths.
OSPF v3 Co mm ands 967 Example console#show ipv6 ospf abr Type Router Id Cost Area ID Next Hop Next Hop Intf ---- -------- ---- -------- ----------------------- ----- INTRA 3.
968 OSPFv3 C ommand s Area LSA Count................................. 0 Area LSA Checksum.............................. 0 Stub Mode....................
OSPF v3 Co mm ands 969 show ipv6 osp f databa se Use the show ipv6 osp f database command in P rivileged EXEC mo de to display informati on about the link st ate database wh en OSPFv3 is enabled. If no parameters ar e entered, the command displays the LSA headers.
970 OSPFv3 C ommand s User Guidel ines This command has no user guidelines . Example The followi ng ex ample displays informatio n about the link st ate database when OSPF v3 is enabled.
OSPF v3 Co mm ands 971 Intra Prefix States (Area 0.0.0.0) Adv Router Link Id Age Sequence Csum Options Rtr Opt -------------- --------------- ----- -------- ---- ------- ------- 1.1.1.1 0 1 8000003C 9F31 2.2.2.2 0 2 8000004D 9126 Router Link States (Area 0.
972 OSPFv3 C ommand s -------------- --------------- ----- -------- ---- ------- ------- 1.1.1.1 0 6 8000003A 37C4 2.2.2.2 0 1 8000004F 439A 1.1.1.1 10634 434 80000002 440A show ipv6 ospf data base da.
OSPF v3 Co mm ands 973 Type-7 Ext..................................... 0 Link........................................... 0 Intra-area Prefix.............................. 0 Link Unknown................................... 0 Area Unknown................
974 OSPFv3 C ommand s Example The following example displays the information in VLAN 1 1’s virtual interface t ables. console#show ipv6 ospf interface vlan 11 IP Address..................................... Err ifIndex...............................
OSPF v3 Co mm ands 975 User Guideli nes This command has no user guidelines. Example The followi ng exampl e displays brief ospf inte rface informat ion. console#show ipv6 ospf interface brief Hello Dead Retrax LSA Admin Router Int. Int. Int. Retrax Ack Interface Mode Area ID Prior.
976 OSPFv3 C ommand s Example The fo llowin g exampl e displ ays the inte rface st atist ics for VLA N 5. console>show ipv6 ospf interface stats v lan 5 OSPFv3 Area ID............................. .... 0.0.0.1 Spf Runs..............................
OSPF v3 Co mm ands 977 LS Request 4 4 LS Update 521 398 LS Acknowledgement 209 282 show ipv6 ospf in terface vlan Use the show ip v6 osp f inter face vlan c o m ma n d i n Pr i v i l eg e d E X E C m od e t o display OSPFv3 configurat ion and status information for a specifi c vlan.
978 OSPFv3 C ommand s Hello Interval........................... 1 0 Dead Interval............................ 4 0 LSA Ack Interval......................... 1 Iftransit Delay Interval................. 1 Authentication Type...................... N one Metric Cost.
OSPF v3 Co mm ands 979 Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Examples The followi ng ex amples display informatio n about OSPF neighbors, i n the first case in a summary tab le, and in the second in a table specific to tunne l 1.
980 OSPFv3 C ommand s show ipv6 ospf range Use the show ipv6 osp f range command in Pri vileged EX EC mode to display information about the area range s for the specified ar ea identifier . Syntax show ipv6 o spf ran ge ar eaid • ar eaid — Ident ifies the O SPF area whose ranges a re being displayed .
OSPF v3 Co mm ands 981 Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The following example displays the OSPF stub table. console#show ipv6 ospf stub table AreaId TypeofService Metric Val Import SummaryLSA ------------ ------------- ---------- ----------------- 0.
982 OSPFv3 C ommand s Example The following exampl e displays the OSPF V irtual Interface information for ar ea 1 and its neighbor . console#show ipv6 ospf virtual-link 1 1.1.1 .1 Area ID.................................... .... 1 Neighbor Router ID..
OSPF v3 Co mm ands 983 Example The following example displays the OSPF stub table. console(config)#show ipv6 ospf virtual-link brief Hello Dead Retransmit Transit Area ID Neighbor Interval Interval In.
984 OSPFv3 C ommand s.
PIM-DM Commands 985 46 PIM-DM Commands This chapter exp lains the following commands: • ip pimd m •s h o w i p p i m d m • show ip pimdm i nterface • show ip pimdm nei ghbor.
986 PIM- DM C om mands ip pimdm Use the ip pimdm command in Global Configuration mode to enable the administrative mode of P IM-DM in t he router . Syntax ip pimdm no ip pi mdm Default Conf iguration Disabled is the defa ult state. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines .
PIM-DM Commands 987 User Guideli nes This command has no user guidelines. Example The followi ng ex ample displays sy stem-wide information for PIM-DM.
988 PIM- DM C om mands Interface Mode................................. Disable Hello Interval (secs).......................... 30 show ip pimdm neighbor Use the show ip pimdm neigh bor com mand in P rivileged EXEC mode to display the n eighbor information for PIM-DM on the specified interface.
PIM-SM C ommands 989 47 PIM-SM Commands This chapter exp lains the following commands: • ip pims m • ip pimsm spt-thr eshold • ip pim-tra pflags •s h o w i p p i m s m • show ip pimsm int er.
990 PIM- SM C omm ands ip pimsm Use the ip pimsm command in Global Configuration mode to set administrative mode of PIM-SM mult icast routing across the router to enabled. IGMP must be enabled before PIM-SM can be en abled. Syntax ip pimsm no ip pimsm Default Conf iguration PIM-SM is di sabled by default.
PIM-SM C ommands 991 Default Conf iguration 50 kilobits/s ec is the default rate. Command Mode Global Configuration mode. User Guideli nes This command has no user guidelines. Example The following exampl e configures a t hreshold rate of 10 0 kilobits/sec.
992 PIM- SM C omm ands show ip pimsm Use the show ip pimsm command in P rivileged EXEC mo de to display the system-wide i nformation for PIM-SM. Syntax show ip p imsm Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode.
PIM-SM C ommands 993 Syntax show ip pimsm interfac e [ vlan vlan -id ] • vla n-id — V alid VLAN I D Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines.
994 PIM- SM C omm ands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guidel ines This command has no user guidelines . Example The following example displays neighb or information for PIM-SM on all interfaces.
PIM-SM C ommands 995 User Guideli nes This command has no user guidelines. Example The following example displays the RP router be ing selected from the set of active RP routers. console#show ip pimsm rphash 224.5.5.5 There are no static RPs for that group on the router.
996 PIM- SM C omm ands.
Rout er Discover y Protocol Comma nds 997 48 Router Disc overy Protocol Commands Routers can be configured to periodica lly send router discovery messages to announce their presence to locally a ttached hosts. The router discovery message adverti ses one or more IP addr e sses on the router that hosts can use as their defa ult gateway .
998 Route r Di scover y P roto col Co mmands ip irdp Use the ip irdp command in Interface Configuration mode to enable Router Discovery on an interfa ce. Use the no form of the co mmand to disable R outer Disco very . Syntax ip irdp no ip ird p Default Conf iguration Disabled is the default configuration.
Rout er Discover y Protocol Comma nds 999 • ip-add ress — IP addre ss for router discovery advertis ements. (Range: 224.0.0. 1 [all-h osts IP multica st address] or 255.255 .255.25 5 [limit ed broa dc ast ad dress]) Default Conf iguration IP addr ess 224.
1000 Route r Di scover y P roto col Co mmands • integer — Integer value in seconds of the the hold time field of the router advertisem ent se nt from this interfa ce. The holdti me must be no less than the maximu m advertisem ent interval and cann ot be greater than 9000 seconds.
Rout er Discover y Protocol Comma nds 1001 Default Conf iguration 600 seconds i s the default value. Command Mode Interface Configuration (VLAN) mode. User Guideli nes The default values of the minimum advertisement interval and the holdtime depend on the va lue of the maximum adv ertisement interva l.
1002 Route r Di scover y P roto col Co mmands • integer — Minimum ti me in seconds allo wed between sen ding router advertisements from the in terface. (Range: 3 to va lue of ma ximum advertisem ent interva l in second s) Default Conf iguration The de fault val ue is 0.
Rout er Discover y Protocol Comma nds 1003 Command Mode Interface Configuration (VLAN) mode User Guideli nes If a subnet includes any hosts that do not accept IP multi cast packets, send router ad vert iseme nts to the limited br oadcast addres s.
1004 Route r Di scover y P roto col Co mmands User Guidel ines This command has no user guidelines . Example The following example sets the ip irdp p refer ence to 1000 for VLAN 15.
Rout er Discover y Protocol Comma nds 1005 Example The following example shows router discovery information for VLAN 15. console#show ip irdp vlan 15 Interface Ad Mode Advertise Address Max Int Min Int Hold Time Preference --------- ------- --------- -------- ------- ------- ----- --- ---------- vlan15 Enable 224.
1006 Route r Di scover y P roto col Co mmands.
Rout ing Informa tion Protocol Commands 1007 49 Routing Information Protocol Commands This chapter exp lains the following commands: • auto-summar y •d e f a u l t - i n f o r m a tion originat e .
1008 Rout ing Informa tion Protocol Commands auto-su mmary Use the auto-s ummary command in Router RIP Configuration mode to enabl e the RIP auto-summ arization mode. Us e the no form of the comm and to disa ble auto -summa riza tion mode . Syntax auto-s ummary no auto-s umma ry Default Conf iguration Disabled is the default configuration.
Rout ing Informa tion Protocol Commands 1009 Command Mode Router RIP Configuration mode. User Guideli nes This command has no user guidelines. Example console(config-router)#default-information originate default-metric Use the def ault-metri c command in Router RIP Configuration mode to set a default for the me tric of distribut ed routes.
1010 Rout ing Informa tion Protocol Commands distance rip Use the distance rip com mand in Router RIP Configuration mode t o set the route preference value of RIP in t he router . L ower route p refer ence values are preferre d when dete rmining th e best route.
Rout ing Informa tion Protocol Commands 1011 no distribu te-list accesslistname ou t { ospf | static | connecte d } • access listname — The nam e used to identify the existing ACL. The range is 1-31 c harac ters. • ospf — Apply t he specific access list w hen OSPF is the so urce protocol.
1012 Rout ing Informa tion Protocol Commands Default Conf iguration Enabled is the default configuration. Command Mode Router RIP Configuration mode . User Guidel ines This command has no user guidelines .
Rout ing Informa tion Protocol Commands 1013 ip rip Use the ip rip command in Interface Configuration mode to enable RIP on a router interface. Use the no form of the command to disable RIP on th e interface. Syntax ip rip no ip r ip Default Conf iguration Disabled is the default configuration.
1014 Rout ing Informa tion Protocol Commands • enc rypt — Sp ecifies the E thernet un it/port of the inte rface to view information . • key -i d — Authent ication key ident ifier for au thentica tion type e ncrypt. (Ran ge: 0-255 ) Default Conf iguration This command has no default configuration.
Rout ing Informa tion Protocol Commands 1015 Default Conf iguration Both is the default configuration. Command Mode Interface Configuration (VLAN) mode. User Guideli nes This command has no user guidelines. Example The following example allows no RIP cont rol packets to be received by VLAN 11.
1016 Rout ing Informa tion Protocol Commands Command Mode Interface Configurati on (VLAN) mode. User Guidel ines This command has no user guidelines . Example The following exampl e allows no RIP cont rol packets t o be se nt by V LAN 1 1.
Rout ing Informa tion Protocol Commands 1017 • connected — Redist rib utes di rectly-connected routes. Default Conf iguration metr ic integer — not configured match — internal Command Mode Router RIP Configuration mode. User Guideli nes This command has no user guidelines.
1018 Rout ing Informa tion Protocol Commands Example The followi ng e xample enter s Router RIP mod e. console(config)#router rip console(config-router)# show ip r ip Use the show ip rip command in P rivileged EXEC mode to display information relevant to the RIP router .
Rout ing Informa tion Protocol Commands 1019 Default Route Advertise................... 0 Redistributing............................. Source.................................... Co nnected Metric.................................... 2 Distribute List...
1020 Rout ing Informa tion Protocol Commands Example The follow ing example dis plays in formati on related to the VL AN 15 R IP interface. console#show ip rip interface vlan 15 Interface.................................. .... 15 IP Address...........
Rout ing Informa tion Protocol Commands 1021 User Guideli nes This command has no user guidelines. Example The following example displ a ys general information for each RIP interface.
1022 Rout ing Informa tion Protocol Commands Example The following example does not use split horizon. console(config-router)#split-horizon none.
T u nnel Inter face Co mmands 1023 50 T unnel Inte rface Commands This chapter exp lains the following commands: • interfa ce tunnel • show interf aces tunnel • t unne l destin ation • t unnel.
1024 T unnel Inte rface Com mands interface tunn el Use the interfa ce tunnel command in Globa l Configuration mo de to enter the interface configuration mode for a tunnel. Syntax interface tu nnel tunnel-id no inter face tunnel tunnel-id • tunnel -id — T unne l identifier .
T u nnel Inter face Co mmands 1025 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Examples The following examples show t he parameters rela t ed to an individual tunnel and to all tunnel interfaces.
1026 T unnel Inte rface Com mands Command Mode Interface Configuration (T u nnel) mode. User Guidel ines This command has no user guidelines . Example The following example sp e cifies the destination transp ort address of tunnel 1. console(config)#interface tunnel 1 console(config-if-tunnel1)#tunnel destination 10.
T u nnel Inter face Co mmands 1027 Example The following example specifies ipv6ip mode for tunnel 1. console(config)#interface tunnel 1 console(config-if-tunnel1)#tunnel mode ipv6ip console(config-if-.
1028 T unnel Inte rface Com mands.
Virtual LA N Routin g Comman ds 1029 51 V irtual LAN Routing Comma nds This chapter exp lains the following command: •s h o w i p v l a n.
1030 Virtual LA N Routin g Comman ds show ip vlan Use the show ip vlan command in Priv ileged EXEC mode to display the VLAN routing information for al l VLANs wi th r outi ng en abl ed. Syntax show ip vl an Default Conf iguration This command has no default configuration.
Virtua l Route r Redun danc y Proto col Comma nds 1031 52 V irtual Router Redund ancy Protocol Commands This chapter e xplains the follow i ng Virtual LAN routing commands: • ip vrrp • ip vrrp au .
1032 Virtual Ro uter R edund ancy Protoc ol Co mmands ip vrrp Use the ip vrrp command in Global Configur ation mode to enab le the administrative mode of VRRP for the ro uter . In Interface Config mode, this command enables t he VRRP protocol o n an interface.
V irtual Rout er Redundan cy Protocol Comm ands 1033 ip vrrp au thentication Use the ip vrrp a uthen ticatio n command in Interface C onfiguration mode to set the authorization details value for the virtual router configured on a specified interface. Use the no form of t he command to return the authenti cation ty pe to the de fault valu e.
1034 Virtual Ro uter R edund ancy Protoc ol Co mmands ip vrrp ip Use the ip vrrp ip command in Interface Configuration mode to set the virtual router IP address value for an interface. Use the no fo rm o f th e command to remove the secondary IP addr ess.
V irtual Rout er Redundan cy Protocol Comm ands 1035 ip vrrp mod e Use the ip vrrp mode command in Interface Configuration mode to enable the virtual router configured on an interf ace. Enabling t he status field starts a virtual router . Use the no form of the command to disable the virtual router .
1036 Virtual Ro uter R edund ancy Protoc ol Co mmands • vr -id — The virtual router ident ifier . (Range: 1-255) Default Conf iguration Enabled is the default configuration. Command Mode Interface Configurati on (VLAN) mode. User Guidel ines This command has no user guidelines .
V irtual Rout er Redundan cy Protocol Comm ands 1037 User Guideli nes This command has no user guidelines. Example The following example sets the priority value for the v irtual router for VLAN 15.
1038 Virtual Ro uter R edund ancy Protoc ol Co mmands console(config-if-vlan15)#ip vrrp 5 timers advertise 10 ip vrrp track interface Use the ip vrrp track i nterface command to alter t he priori ty of the V RRP router based on the availability of its inte rfaces.
V irtual Rout er Redundan cy Protocol Comm ands 1039 The default decrement priority is 10. Command Mode Interface Configuration (VLAN) mode. User Guideli nes There ar e no user gui delines for this command. Example The following ex ample adds VLAN 2 to th e virtual router track ed list (with a priority decrement value of 20).
1040 Virtual Ro uter R edund ancy Protoc ol Co mmands Default Conf iguration There ar e no rout es tracked by default. The default decrement priority is 10. Command Mode Interface Configurati on (VLAN) mode. User Guidel ines There ar e no user gui delines for this command.
V irtual Rout er Redundan cy Protocol Comm ands 1041 Example The following example displays VRRP’s enabled sta tus. console#show ip vrrp Admin Mode..................................... Enable Router Checksum Errors......................... 0 Router Version Errors.
1042 Virtual Ro uter R edund ancy Protoc ol Co mmands Primary IP Address......................... 192.168.5.55 VMAC Address............................... 0000.5E00.0101 Authentication Type........................ None Priority........................
V irtual Rout er Redundan cy Protocol Comm ands 1043 User Guideli nes This command has no user guidelines. Example The followi ng ex ample displays all configuration informatio n about the virtual router on the selected interfa ce.
1044 Virtual Ro uter R edund ancy Protoc ol Co mmands Example The following example displays all s t at istical information about the VLAN 15 virtual router . console#show ip vrrp interface stats vlan 15 5 UpTime..................... 0 days 0 hrs 0 mins 0 secs Protocol.
Auto conf ig Co mmands 1045 53 Autoconfig Command s This chapter exp lains the following commands: • boot host auto- save • boot host dhcp • boot host r etry-c ount •s h o w b o o t.
1046 Autoco nfig Comman ds boot host a uto-save The boot h ost auto -save comma nd en abl es/d isa ble s the opti on to automatically save configuration files do wnloaded to the switch by Auto Config. Syntax boot host aut o-save no boot h ost aut o-save Default Conf iguration The downloaded configuration is no t au tomatical ly saved by defaul t.
Auto conf ig Co mmands 1047 Command Mode Global Configuration. User Guideli nes This command has no user guidelines Example console#no boot host dhcp boot host retr y-count The boot host retry-count comma nd sets the numb er of atte mpts to download a configuration.
1048 Autoco nfig Comman ds show boot The show autoconfig comma nd displa ys the current sta tus of the Auto Config proce ss. Syntax show boot Default Conf iguration Not applicab le Command Mode P rivileged EXEC. User Guidel ines This command has no user guidelines .
Capt ive Portal Comm ands 1049 54 Captive Po rtal Commands This chapter exp lains the following commands: Captive P ortal Global Commands • a uth enticat ion tim eou t •c a p t i v e - p o r t a l.
1050 Capti ve P ortal Co mmands • show captive-portal int erface client status • show captive-portal interfa ce configuration status Captive P ortal I nterface Commands • clear capt ive-portal u.
Capt ive Portal Comm ands 1051 Captive Portal Global Co mmands authentication timeout Use the auth enticati on timeout comma nd to configure the authenti cation timeout.
1052 Capti ve P ortal Co mmands Syntax captive-portal Default Conf iguration There is no default configuration for this command. Command Mode Global Configuration mode User Guidel ines There ar e no user gui delines for this command.
Capt ive Portal Comm ands 1053 Example console(config-CP)#enable http port Use the http p ort command to configur e an additional HTTP port for captive portal to monitor . Use the “no” form of this command to remove the additional HT TP port from monito ring.
1054 Capti ve P ortal Co mmands no http s port • port-num — The p ort n umber t o mo nitor (R ange: 1 –6553 5). Default Conf iguration Captiv e portal only m o nitors port 443 by d efault. Command Mode Captive P ortal Configuration mode. User Guidel ines There ar e no user gui delines for this command.
Capt ive Portal Comm ands 1055 Example console#show captive-portal Administrative Mode.......... Disabled Operational Status........... Disabled Disable Reason.
1056 Capti ve P ortal Co mmands Configured Captive Portals..................... 1 Active Captive Portals......................... 0 Local Supported Users.......................... 128 Configured Local Users......................... 3 System Supported Users.
Capt ive Portal Comm ands 1057 configuration Use the configuration command to enter the captive portal instance mode. The captive port al configuration identified by CP ID 1 is the default CP configuration. The system supports a total of ten CP configurations.
1058 Capti ve P ortal Co mmands Default Conf iguration Configurations ar e en abled by default Command Mode Captive P ortal Instance mode. User Guidel ines There ar e no user gui delines for this command. Example console(config-CP 2)#no enable group Use the grou p command to configure the group number for a captive portal configuration.
Capt ive Portal Comm ands 1059 Example console(config-CP 2)#group 2 interface Use the interfa ce command to as sociate an interface with a cap tive portal configuration. Use the “no” form of th is command to remove an association. Syntax interfa ce interface no in terfac e interface interface — An interface or range of i nterfaces.
1060 Capti ve P ortal Co mmands • web- id — Th e loca le numb er (Ran ge: On ly loca le 1 is suppo rted) Default Conf iguration Locale 1 is configured by default. Command Mode Captive P ortal Instance mode. User Guidel ines There ar e no user gui delines for this command.
Capt ive Portal Comm ands 1061 protocol Use the proto col command to configur e the protocol mode for a captive portal configuration. Syntax protocol { http | http s } Default Conf iguration The default protocols mode is htt ps. Command Mode Captive P ortal Instance mode.
1062 Capti ve P ortal Co mmands User Guidel ines There ar e no user gui delines for this command. Example console(config-CP 2)#redirect redir ect-url Use the redirect-url command to configure the r edirect URL for a captive portal configuration. Syntax redirect-url url • url — The URL for redir ection (Ran ge: 1–512 charact ers).
Capt ive Portal Comm ands 1063 no session-time out • timeout — Se ssion timeou t. 0 in dic ates tim eou t no t en forced ( Ra nge: 0–86 400 se conds ). Default Conf iguration There is no sess ion t imeout by default. Command Mode Captive P ortal Instance mode.
1064 Capti ve P ortal Co mmands User Guidel ines There ar e no user gui delines for this command. Example console(config-CP 2)#verification local Captive Portal Client Co nnection Commands captive-portal clien t deauthenticate Use the captive-portal client deauthenticat e command to deaut henticate a specific ca ptive portal client .
Capt ive Portal Comm ands 1065 Syntax show captive- po rtal clien t [ macaddr ] status • macaddr — Client MAC add ress. Default Conf iguration There is no default configuration for this command. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no user gui delines for this command.
1066 Capti ve P ortal Co mmands CP Name................................... cp1 Interface................................. 1/g1 Interface Description..................... Unit: 1 Slot: 0 Port: 1 Gigabit - Level User Name................................
Capt ive Portal Comm ands 1067 0002.BC00.1291 10.2 54.96.48 1/g2 2 cp2 0002.BC00.1292 10.2 54.96.49 1/g3 3 cp3 0002.BC00.1293 10.2 54.96.50 1/g4 console#show captive-portal configuration 1 c lient status CP ID..................................... 1 CP Name.
1068 Capti ve P ortal Co mmands Command Mode P rivileged EXEC mode. User Guidel ines There ar e no user gui delines for this command. Example console#show captive-portal interface client status Client.
Capt ive Portal Comm ands 1069 Captive Portal Interface Co mmands show captive- portal interface configuration status Use the sh ow cap tiv e-po rta l inte rfa ce co nfig ur atio n sta tus com mand to display the interfa ce to configuratio n assignments for all captive portal configurations or for a speci fic configuration.
1070 Capti ve P ortal Co mmands Interface Interface Description Type --------- ----------------------------------- -------- 1/g1 Unit: 1 Slot: 0 Port: 1 Gigabit ... Physical Captive Portal Local User Command s clear ca ptive-portal users Use the clear capti ve-portal users command to delete a ll capti ve portal user entries.
Capt ive Portal Comm ands 1071 Default Conf iguration There is no default configuration for this command. Command Mode Captive P ortal Configuration mode.
1072 Capti ve P ortal Co mmands ------- --------------------- ------- ------------ ------------ 1 user123 14400 1 Default 2 user234 0 1 Default 2 group2 console#show captive-portal user 1 User ID........................................ 1 User Name....
Capt ive Portal Comm ands 1073 User Guideli nes There ar e no user gui delines for this command. Example console(config-CP)#user 1 group 3 user name Use the user name command to modify the user name for a local captive portal us er . Syntax user user -id name name • user -id — Use r ID (Ra nge: 1–128 ).
1074 Capti ve P ortal Co mmands • user -i d — U ser ID (Range: 1–128) . • password — User passwor d (Range: 8–6 4 characte rs). • enc-passwor d — User passwor d in encrypted form. Default Conf iguration There ar e no users configured by default.
Capt ive Portal Comm ands 1075 Command Mode Captive P ortal Configuration mode. User Guideli nes There ar e no user gui delines for this command. Example console(config-CP)#user 1 session-timeout 8640.
1076 Capti ve P ortal Co mmands Operational Status........................ Disabled Disable Reason............................ Administrator Disabled Blocked Status.
Capt ive Portal Comm ands 1077 --------- ---------------------------------------- ------------ --- ------ 1/g1 Unit: 1 Slot: 0 Port: 1 Gigabit - Level Disabled Blocked console#show captive-portal configuration 1 i nterface 1/g1 CP ID..................
1078 Capti ve P ortal Co mmands Example console#show captive-portal configuration 1 locales Locale Code --------------- en show captive- portal configura tion status Use the show captive -portal confi.
Capt ive Portal Comm ands 1079 console#show captive-portal configuration 1 status CP ID.......................................... 1 CP Name........................................ cp1 Mode........................................... Enabled Protocol Mode.
1080 Capti ve P ortal Co mmands Client Database Full Traps................. .... Disable Client Disconnection Traps................. .... Disable Captive Portal User Group Comman ds user group Use the user grou p command to create a user group. Use the “no” form of this command to delete a user group.
Capt ive Portal Comm ands 1081 user gro up moveusers Use the user group moveusers command to move a group's users to a different group. Syntax user group grou p-id move users new-group-id • group-id — Grou p ID (Ra nge: 1– 10). • new-grou p-id — Group ID (Ra nge: 1– 10).
1082 Capti ve P ortal Co mmands user group name Use the user grou p nam e command to configure a group name. Syntax user group group-id name name • group-id — G roup ID (Range: 1– 10). • name — G roup nam e (Ran ge: 1 –32 c harac ters). Default Conf iguration User groups have no names by default.
Cloc k Comm ands 1083 55 Clock C ommands This chapter exp lains the following commands: •s h o w c l o c k • show sntp conf iguratio n • show sntp s tatus • s ntp a uth en ticate • s ntp a u.
1084 Clock Comma nds Command Mode User EXEC mode User Guidel ines This command has no user guidelines . Examples The followi ng ex ample displays the time and date from the sy stem clock console>sh.
Cloc k Comm ands 1085 Polling interval: 64 seconds MD5 Authentication keys: Authentication is not required for synchronization. Trusted keys: No trusted keys. Unicast clients: Disable Unicast servers: Server Key Polling Priority --------- ----------- ----------- ----- ----- 10.
1086 Clock Comma nds Examples The following example s hows t he status o f the SNTP . console#show sntp status Client Mode: Unicast Last Update Time: MAR 30 21:21:20 2009 Unicast servers: Server Status Last response --------- ----------- ---------------------- ---- 192.
Cloc k Comm ands 1087 Example The follo wing example, after def ining the authe nticati on key for SNTP , gran ts authen tication. console(config)# sntp authentication-key 8 md5 ClkKey console(config).
1088 Clock Comma nds console(config)# sntp authenticate sntp broadca st client enable Use the sntp broadcast client enable command in Global Configuration mode to enab le a Simple Net work Time Protocol (SNTP) Broadcast client. T o disable an SNTP Broadcast client, use the no form of th is command.
Cloc k Comm ands 1089 • seconds — P olling int erval. (Range: 64-102 4 second s, in pow ers o f 2) Default Conf iguration The polling interval is 64 seconds. Command Mode Global Configuration mode User Guideli nes If a user enters a value whic h is not an exact power of two, the nearest power - of -two value is applied.
1090 Clock Comma nds • priority — Priority assigned to the server . (Range: 1 –8) Default Conf iguration No servers ar e defined. Command Mode Glo bal C onf igura tion mode User Guidel ines Up to 8 SNTP servers can be defined. Use the sntp client e nable command in Global Configuration mode to enable unicast clients globally .
Cloc k Comm ands 1091 Default Conf iguration No k eys ar e truste d. Command Mode Global Configuration mode User Guideli nes This command is r elevant for both r eceived Unicast and Broadcas t.
1092 Clock Comma nds Examples The following example enables the device to use Sim ple Network Time P rot ocol (SNTP) to re q uest and accept SNTP traffic from servers.
Cloc k Comm ands 1093 Syntax no clock timezon e Default Conf iguration This command has no default configuration. Command Mode Global Configuration User Guideli nes This command has no specific us e r guidelines.
1094 Clock Comma nds • acronym — The acron ym for the t ime zone to b e displaye d when summe rtime is in effect. (Ran ge: Up to four cha racters) Default V alue No defaul t settin g Command Mode .
Cloc k Comm ands 1095 • acronym — The a cronym for the t ime zone to b e display ed when summ ertime i s in effect. (R ange: Up to four charact ers) Default Conf iguration This command has no default configuration.
1096 Clock Comma nds User Guidel ines No specific guideline s Example console(config)#no clock summer-time show cl ock Use the show clock command to display the time and date from the system clock. Use the show clock detail command to show the time zone and sum mer tim e con fig urat io n.
Cloc k Comm ands 1097 Time source is SNTP Time zone: Acronym is PST Offset is UTC-7 Summertime: Acronym is PDT Recurring every year. Begins at first Sunday of April at 2:00.
1098 Clock Comma nds.
Conf iguration an d Image File Com mands 1099 56 Configuration and Image File Commands This chapter exp lains the following commands: • boot system • clea r config •c o p y • delet e backup-co.
1100 Confi gurat ion a nd Imag e File Co mmands boot system Use the boot system command in P rivileged EXEC mode to specify the system imag e that t he device loads at start up. Syntax boot system [image1|i mage2] • image1|image2 — Ima ge file. Default Conf iguration This command has no default configuration.
Conf iguration an d Image File Com mands 1101 Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example restor es the s w itch to its default configuration. console#clear config copy Use the copy command in Privi le ged EXEC mode to copy files from a source to a d estinatio n.
1102 Confi gurat ion a nd Imag e File Co mmands Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines The location of a file system dicta t es the format of the source or destination URL.
Conf iguration an d Image File Com mands 1103 The entire copy ing process may take several mi nu tes and differs fro m protocol to pro tocol and from network t o network. Understanding Invalid Combination s of Source and Destination Some combinations of s o urce and destination ar e not valid.
1104 Confi gurat ion a nd Imag e File Co mmands Saving the Running Configuration to th e Startup Configuration Use the copy running-con fig startup-con fig command to copy the running configuration to the startup configuration.
Conf iguration an d Image File Com mands 1105 Syntax delete backup-config Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following exampl e deletes the backup-config file.
1106 Confi gurat ion a nd Imag e File Co mmands Example The following exampl e deletes test file in Flash memory . console#delete backup-image Delete: image2 (y/n)? delete startup-config Use the delete startup-config command in P rivileged EXEC mode to delete the startup-config file.
Conf iguration an d Image File Com mands 1107 Syntax filedesc r {image 1|im age2} description no filedescr {image 1|image2} • image1|image2 — Ima ge file. • descript ion — Block of descriptive text. (Range: 0-12 8 character s) Default Conf iguration No de scr ipt ion is at tach ed t o the f ile .
1108 Confi gurat ion a nd Imag e File Co mmands User Guidel ines This command has no user guidelines . Example The following e xample applies the config.scr script to the switch. console#script apply config.scr script delete Use the script delete command in Privi le ged EXEC mode to delete a specified scri pt.
Conf iguration an d Image File Com mands 1109 Syntax script list Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example displays all scripts present on the switch.
1110 Confi gurat ion a nd Imag e File Co mmands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following exampl e displays the contents of the script file config.scr . console#script show config.scr interface ethernet 1/g1 ip address 176.
Conf iguration an d Image File Com mands 1111 Example The following example validates the contents of the s cript file config.scr . console#script validate config.scr show back up-config Use the show backup-config command in P rivileged EXEC mode to display the contents of the backup configuration file.
1112 Confi gurat ion a nd Imag e File Co mmands interface ethernet 1/g2 ip address 176.243.100.100 255.255.255.0 duplex full speed 1000 exit show bootvar Use the show boot var comman d in User EXEC mode to display the active system imag e file th at the device loads a t startup .
Conf iguration an d Image File Com mands 1113 Images currently available on Flash --------------------------------------------- -------------- -------------- unit image1 image2 current- active next-active --------------------------------------------- -------------- -------------- 1 0.
1114 Confi gurat ion a nd Imag e File Co mmands --------- --------------- image1 6351288 image2 6363424 fastpath.cfg 321894 show runn ing- config Use the show running-co nfig command in P rivileged EXEC mode to display the contents of the currently running configuration file.
Conf iguration an d Image File Com mands 1115 show startup - config Use the show start up-config command in P rivileged EXEC mode to display the s tartup co nfigurat ion file contents . Syntax show startup-con fig Default Conf iguration This command has no default configuration.
1116 Confi gurat ion a nd Imag e File Co mmands 11 : exit 12 : ip address dhcp 13 : ip address vlan 1001 14 : interface vlan 3 15 : routing 16 : exit 17 : username "lvl7" password fb3604df5a.
Conf iguration an d Image File Com mands 1117 update bo otcode Use the update bootcode command in Pri v ileged EXEC mode to update the bootcode on one or more switches. F or each switch, the bootco de is extracted from the active image an d programmed to flash.
1118 Confi gurat ion a nd Imag e File Co mmands.
Deni al o f Ser vic e Co mmands 1119 57 Denial of Service Commands This chapter exp lains the following commands: • dos-cont rol firstfrag • dos-control icmp • dos-control l4port • dos-control.
1120 Denia l of Ser vice Comma nds dos-co ntrol firstfrag Use the dos-contro l firstfrag command in Global Configuration mode to enable Mi nimum TCP Header S ize Denia l of S ervice pro tection. If the mode is enabled, D e nial of Service p revention is acti ve for this type of attack.
Deni al o f Ser vic e Co mmands 1121 Syntax dos-control icmp [ size ] no dos-con trol icmp • size — M aximum ICMP packet size. (R ange: 0-1023). If size is unspecifi ed, the valu e is 512. Default Conf iguration Denial of Service is disabled. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines.
1122 Denia l of Ser vice Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The followi ng e xample activates L 4 P ort Denial of Serv ice protection.
Deni al o f Ser vic e Co mmands 1123 dos-co ntrol tcpflag Use the dos-co ntrol tcpflag command in Globa l Con figuration mode to enable TCP Flag Denial of Service protections. If the mo de is enab led, Denial of Service prevention is active for this type of attack.
1124 Denia l of Ser vice Comma nds no dos-cont rol tcpfrag Default Conf iguration Denial of Service is di sabled. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines . Example The following example acti v ates TCP F ragment Denial of Service protection.
Deni al o f Ser vic e Co mmands 1125 Example console(config)#ip icmp echo-reply ip icmp error -interval Use the ip icmp error -interval command to limit the rate at which IP v4 ICMP error messages are s ent. The rate limit is configured as a tok en bucket with two configurable parameters: Burs t-size and burst-interval.
1126 Denia l of Ser vice Comma nds ip unreacha bles Use the ip unreachab les comman d to enabl e the gen eration of ICMP Destination Unr eachable mes sages. Use the “no” form o f this comman d to prevent the generation of ICMP Destina tion Unreachable messages.
Deni al o f Ser vic e Co mmands 1127 Default Conf iguration ICMP Redirect messages are enabled by default. Command Mode Interface Configuration (VLAN) mode User Guideli nes There ar e no user gui delines for this command.
1128 Denia l of Ser vice Comma nds Command Mode Glo bal C onf igura tion mode User Guidel ines There ar e no user gui delines for this command. Example console(config)#ipv6 icmp error-interval 2000 20 ipv6 unreachab les Use the ipv6 unreachab les command to enable the generation of ICMPv6 Destination Unr eachable mes sages.
Deni al o f Ser vic e Co mmands 1129 Syntax show dos-contro l Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode. User Guideli nes This command has no user guidelines. Example The following exampl e displays Denial of Servic e configuration information.
1130 Denia l of Ser vice Comma nds.
Line Command s 1131 58 Line Comm ands This chapter exp lains the following commands: •e x e c - t i m e o u t •h i s t o r y •h i s t o r y s i z e •l i n e •s h o w l i n e • speed.
1132 Line C ommands exec-timeou t Use the exec-tim eout comman d in Line Configuration mode to set the interva l that the sys tem wai ts for user input before timeo ut.
Line Command s 1133 Syntax histo ry no hist ory Default Conf iguration The default value for this command is ena bled . Command Mode Lin e Interfa ce mode User Guideli nes This command has no user guidelines. Example The following example disables the command history functi on for the current terminal sess ion.
1134 Line C ommands Command Mode Line Configuration mode User Guidel ines This command has no user guidelines . Example The following example co nfigures the command history buffer size to 20 commands for the current terminal ses sion.
Line Command s 1135 console(config-line)# show line Use the show line co mmand in User EXEC mode to display line parameters. Syntax show line [console | telnet | ssh ] • console — Cons ole te rmina l line . • teln et — Virtual terminal for remote console a ccess (T eln et).
1136 Line C ommands Telnet configuration: Interactive timeout: 10 minutes 10 seconds History: 10 SSH configuration: Interactive timeout: 10 minutes 10 seconds History: 10 speed Use the speed command in Line Configuration mode to set the line baud rate.
Manage ment A CL Comma nds 1137 59 Managemen t ACL Commands This chapter exp lains the following commands: • den y (managemen t) • management acce ss-class • management a ccess-list • perm it .
1138 Managem ent A CL Command s deny (manage ment) Use the deny command in Management Access -List Configuration mode to set co nd itio ns fo r the management access list .
Manage ment A CL Comma nds 1139 Example The following example shows how all ports ar e denied in the access-list called mlist . console(config)# management access-list mlist console(config-macal)# deny management acce ss-class Use the managemen t access-class command in Global Configuration mode to rest rict management connections.
1140 Managem ent A CL Command s manageme nt access-list Use the managemen t access-list command in Global Configuration mode to define an access li st for management, and enter the access-l ist for configuration.
Manage ment A CL Comma nds 1141 console(config-macal)# permit ethernet 1/g1 priority <1-64> console(config-macal)# permit ethernet 2/g9 priority <1-64> console(config-macal)# exit console(.
1142 Managem ent A CL Command s • vlan vlan-id — A val id V LAN nu mber . • port-channel number — A valid p ort cha nnel number . • ip-add ress — Sourc e IP a ddress. • mask mask — Sp ecifies the netw ork m ask of the source IP a ddress.
Manage ment A CL Comma nds 1143 The following example shows how to configu re all the interfaces to be management interfaces e xcept for two in terfaces, Ethernet 1/g1 and Ethernet 2/g9 .
1144 Managem ent A CL Command s Management access-class is enabled, using access list mlist show manage ment access-list Use the show m anagement access-list command in Pr ivileged E XEC mode to display management access-list s. Syntax show ma nagement access- list [ nam e ] • name — A valid acce ss list name.
Passwor d Manag ement Co mmands 1145 60 Password Mana gement Commands This chapter exp lains the following commands: • password s aging • passwords hist ory •p a s s w o r d s l o c k - o u t .
1146 Passwor d Manage ment Comma nds passwords a ging Use the passwords a ging command in Global Configuration mode to implement expiration date on the passwords. The user is requir ed t o change the pas swords when they expire. Use the no form of this comm and to disabl e the aging functi on.
Passwor d Manag ement Co mmands 1147 Syntax passwords histo ry historylength no passwords history • history length — Numb er of previous passw ords to be m aintained in the history . (R ange: 0 –10.) Default Conf iguration No passwor d history is maintained.
1148 Passwor d Manage ment Comma nds • attemp ts — Num ber of attempts the user is allowed t o enter a correct password. (Range: 1-5) Default Conf iguration The user lockout feature is disabled. Command Mode Glo bal C onf igura tion mode . User Guidel ines This command has no user guidelines .
Passwor d Manag ement Co mmands 1149 User Guideli nes This command has no user guidelines. Example The following example se t s the minimum passwor d lengt h to 12 characters.
1150 Passwor d Manage ment Comma nds aging : enabled aging value : 30 days User lockout : enabled User lockout attempts : 3.
PHY Di agno stics Co mmands 1151 61 PHY Diagnostics Commands This chapter exp lains the following commands: • show copper -ports cable-length • show copper -ports tdr • sh ow fiber-ports optical.
1152 PHY Dia gnostics Comm ands show copp er -por ts cable-length Use the show copper-ports cable-length command in P rivileged EXEC mode to display the es timated copper cable length at tached to a port. Syntax show cop per -port s cable-l ength [ interface ] • interface — A val id Ethern et port.
PHY Di agno stics Co mmands 1153 show copp er -ports tdr Use the show copper-ports tdr command in Privile ged EXE C mode to display the la st Time D omain Reflec tometry (TDR) tests on spe cified ports . Syntax show copper -ports tdr [ interface ] • interface — A valid Ether net port.
1154 PHY Dia gnostics Comm ands show fiber -ports optical-transceive r Use the show fiber-ports optical-transceiver command in P rivileged EXEC mode to displa y the opt ical tr ansce iver di agnos tics. Syntax show fiber - ports optical-transceiver [ interface ] • interface — A valid Ethernet port.
PHY Di agno stics Co mmands 1155 test copper -port tdr Use the test copper -port tdr command in P rivileged EXEC mode to diagnose with Time Dom ain Reflecto metry (T DR) te chnology the quality and characteristics of a copper cable attached to a po rt.
1156 PHY Dia gnostics Comm ands.
Power Ov er Ethernet Comm ands 1157 62 Power Over Etherne t Commands This chapter exp lains the following commands: •p o w e r i n l i n e • pow er inline legacy •p o w e r i n l i n e p o w e r.
1158 Power O ver Eth ernet Commands power inline The power inline command enables/disabl es the ability of th e port to deliver power . Syntax De scription power inline { aut o | never } no powe r inline • auto — Enables t h e device discovery protocol and, if found, supplies power to the d evice.
Power Ov er Ethernet Comm ands 1159 Parameter Rang es Not applicab le Command Mode Global Configuration. Usage Guideli nes No specific guideline s. Default V alue L egacy Supp ort is di sabl ed by d efaul t.
1160 Power O ver Eth ernet Commands Examples console(config)#interface ethernet 1/g1 console(config-if-1/g1)# power inline powered-device IP-phone power inline priority The power inline pri or ity command configures the port priority level, for the de l i v e r y of p o w e r t o a n at t a c h e d de v i c e .
Power Ov er Ethernet Comm ands 1161 power inline traps The power inline traps command enables inline power traps. T o disable inline power traps, use the no form of this command. Syntax Descri ption power inline traps enable no po wer inli ne traps enable • enable — E nables trap s on t he specified unit.
1162 Power O ver Eth ernet Commands Syntax De scription power inline usa ge-threshol d < threshold > no powe r inline usag e-thresh old • thr eshold — Power thresh old at w hich trap is ge ner ated. Para mete r R ange s < thr eshol d > — 11–9 9 % Command Mode Glo bal C onfi gura tion.
Power Ov er Ethernet Comm ands 1163 Examples console#show poe-firmware-version image version..............501_4 show powe r inline The show powe r inline command disp lays the to tal availabl e power , the total powe r co nsume d in th e syst em, and the gl oba lly se t usa ge thresho ld.
1164 Power O ver Eth ernet Commands Power:On Nominal Power:150 watt Consumed Power:120 watts (80%) Global Configuration Usage Threshold:95% Traps:Enabled Port Configuration PortPowered DeviceStatePriorityStatusClassification [w] ----------------------------------------------------- - 1/g1IP Phone Model AAutoHighOn0.
Power Ov er Ethernet Comm ands 1165 Examples: console#show power inline ethernet 1/g13 Port Powered Device State Priority Status Class[W] Power[mW] ----- ------------------------ ----- -------- ------- -- ------------- --------- 1/g13 auto Low On 3.84 - 6.
1166 Power O ver Eth ernet Commands.
RMON Commands 1167 63 RMON Commands This chapter exp lains the following commands: •r m o n a l a r m • rmon collection hist ory • rmon event • show rmon alarm • show rmon alar m-table • s.
1168 RMON Commands rmon alarm Use the rmon alarm comm and in Global Config uration mode to configure alarm conditions. T o re mo ve an ala rm, use the no form of this command.
RMON Commands 1169 Default Conf iguration The following parameters have the following default values: • type type — If un speci fied, the t ype is absolu te . • startup dir ection — If unspecified, the startup direction is rising-falling . Command Mode Global Configuration mode User Guideli nes This command has no user guidelines.
1170 RMON Commands Syntax rmon collect ion history index [ owne r ownername ] [ buck ets bucket-number ] [ interval seconds ] no rmon co llect ion history inde x • index — The reques ted statistics index grou p. (Ran ge: 1–6 5535) • owner ownername — Recor ds the RMON st atistic s group owner na me.
RMON Commands 1171 rmon even t Use the rmon event command in Global Configuration mod e to configure an event. T o remove an event, use the no form of this command. Also see the show rmon events command. Syntax rmon event index type [ community te xt ] [ description text ] [ owner name ] no rmon event index • index — The ev ent in dex.
1172 RMON Commands show rmon alarm Use the show r mon al arm command in User EXEC mode to display alar m configuration. Also see the rmon al arm command. Syntax show rmon alarm number • number — Alar m index. ( Range: 1 –6553 5) Default Conf iguration This command has no default configuration.
RMON Commands 1173 Falling Event: 1 Owner: CLI The following table descri bes the significant fields shown in the display : Field Descr ipti on Alarm Alarm i ndex. OID Monitored vari able OID. Last Sample Va l u e The statis tic value during th e last sampli ng period.
1174 RMON Commands show rmon alarm-table Use the show rmon alar m-table co mmand in User EXE C mode to display the alarms summary t able. Syntax show rmon alarm- table Default Conf iguration This command has no default configuration. Command Mode User EXEC mode User Guidel ines This command has no user guidelines .
RMON Commands 1175 show rmon colle ction history Use the show rmon co llection history command in User EXEC mode to display the requested group of statistics. Also see the rmon collection histo ry command. Syntax show rmon collecti on history [ ethernet interface | port- channe l port- channel-number ] • interface — V alid Ethernet port.
1176 RMON Commands The following table describes the significant fields shown in the display: show rmon events Use the show rmo n events command in User EXEC mode to display the RMON e vent t able. Also se e the rmon event command. Syntax show rmon events Default Conf iguration This command has no default configuration.
RMON Commands 1177 The following table descri bes the significant fields shown in the display : show rmon history Use the show rmon h istory comm an d in Use r E XEC mo de to di spl ay R MO N Ethernet Statistics history . Also see the rmo n history command.
1178 RMON Commands User Guidel ines This command has no user guidelines . Examples The following example displays RMON Ethe rnet St atis tics histor y for "throughput" on index number 1.
RMON Commands 1179 The following example displays RMON Ethernet Statistics history for "other" on index number 1. console> show rmon history 1 other Sample Set: 1 Owner: Me Interface: 1/g.
1180 RMON Commands Undersize Th e number of pac kets received du ring thi s sampl ing int erval that were less t han 64 octe ts long (e xclu ding framing bits but i ncluding FCS octets) and we re otherwise we ll formed.
RMON Commands 1181 show rmon log Use the show rmon log command in User EXEC mode to display the RMON logging ta ble. Syntax show rmon log [ event ] • event — E vent ind ex. (Range: 1– 65535) Default Conf iguration This command has no default configuration.
1182 RMON Commands console> show rmon log Maximum table size: 100 (100 after reset) Event Description Time ----- ----------- -------------------- 1 Errors Jan 18 2005 23:48:19 1 Errors Jan 18 2005 .
RMON Commands 1183 User Guideli nes This command has no user guidelines. Example The following ex ample displays RMON Ethernet Statist ics for port 1/g1.
1184 RMON Commands Broadcast The total number of good pack ets received and d irected to t he Broadc ast addr ess. T his does n ot inclu de Multic ast pack ets. Multicast The total number of good pack ets received and dir ected to a Multic ast address.
RMON Commands 1185 128 to 2 55 Octet s The total number o f packets (i nclu ding bad packets) recei ved that are be tween 128 and 2 55 octets in l e ngth inclusive (ex clud ing framin g bits but inclu ding FCS octets).
1186 RMON Commands.
Serv icea bili ty T racing P acket Commands 1187 64 Serviceability T racing Packet Commands This chapter exp lains the following commands: •d e b u g a r p •d e b u g a u t o - v o i p • debu g .
1188 Servi ceab ility T raci ng Pa cket Comm ands •d e b u g r i p •d e b u g s f l o w • debug spa nning-tr ee • show d ebugging NOTE: De bug comm ands are not persi stent acr oss rese ts.
Serv icea bili ty T racing P acket Commands 1189 debug ar p Use the debug arp comm and to enable tracing of ARP packets. Use the “no” form of this command to disable tracing of AR P pack ets. Syntax debug arp no de bug arp Default Conf iguration ARP pack et tracing is disabled by default.
1190 Servi ceab ility T raci ng Pa cket Comm ands Command Mode P rivileged EXEC mode. User Guidel ines There ar e no usa ge guidelines for this command. Example console#debug auto-voip debug c lear Use the debug clear command to disable all debug traces.
Serv icea bili ty T racing P acket Commands 1191 appears on all login s essions for which debug console has been enabled. The configuration of this command r e mains in effect for the life of t he log in session. The effe ct of this command is not pers istent across r esets.
1192 Servi ceab ility T raci ng Pa cket Comm ands User Guidel ines There ar e no usa ge guidelines for this command. Example console#debug dot1x packet debug igmp snooping Use the debug igmpsnooping to enable tracing of IG MP Snooping pack e ts transmitted a nd/or received by the switch.
Serv icea bili ty T racing P acket Commands 1193 Syntax debug ip acl acl no de bug ip acl acl • acl — The number of the IP A CL to debug. Default Conf iguration Display of I P ACL traces is disabled by default. Command Mode P rivileged EXEC mode. User Guideli nes There ar e no usa ge guidelines for this command.
1194 Servi ceab ility T raci ng Pa cket Comm ands Command Mode P rivileged EXEC mode. User Guidel ines There ar e no usa ge guidelines for this command. Example console#debug ip dvmrp packet debug ip igmp Use the debug ip igmp comma nd to tr ace IG MP pack et r ecepti on and transmission.
Serv icea bili ty T racing P acket Commands 1195 debug ip mcache Use the debug ip mcache co mmand for tracing MD A T A packet reception and transmissio n. The receive op tion traces only received data packets and the transm it option traces only t ransmitted da ta packets.
1196 Servi ceab ility T raci ng Pa cket Comm ands Syntax debug ip pimdm packet [re ceive | transmit] no debug ip pimdm packet [receive | transmit] Default Conf iguration Display o f PIMDM traces is disabled by def ault. Command Mode P rivileged EXEC mode.
Serv icea bili ty T racing P acket Commands 1197 Command Mode P rivileged EXEC mode. User Guideli nes There ar e no usa ge guidelines for this command. Example console#debug ip pimsm packet debug ip vrrp Use the debug ip vrrp command to enable VRRP debug protocol messages.
1198 Servi ceab ility T raci ng Pa cket Comm ands debug ipv6 mcache Use the debug ipv6 m cache command to trace MD A T Av6 pack et reception and transmissi o n. The rec eive optio n traces only received data packets and the tra nsmit option traces only transm itted da ta packets.
Serv icea bili ty T racing P acket Commands 1199 Syntax debug ipv6 mld packet [ receive | transm it ] no de bug ip v6 mld pa cket [ receive | transmit ] Default Conf iguration Display of M L D traces is disa bled by default. Command Mode P rivileged EXEC mode.
1200 Servi ceab ility T raci ng Pa cket Comm ands Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug ipv6 pimdm packet debug ipv6 pimsm Use the debug ipv6 pimsm command to trace PIMSMv 6 packet reception and transmissi o n.
Serv icea bili ty T racing P acket Commands 1201 debug isdp Use the debug isdp command to trace ISDP packet r eception and transmissio n. The receive op tion traces only received ISD P packets and the transm it opti on traces only transmitte d ISDP p ackets.
1202 Servi ceab ility T raci ng Pa cket Comm ands Default Conf iguration Display o f LACP t races is disable d by default. Command Mode P rivileged EXEC mode.
Serv icea bili ty T racing P acket Commands 1203 Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug mldsnooping debug osp f Use the debug ospf comma nd to enable traci ng of OSPF packets received and transmitted by the swit ch.
1204 Servi ceab ility T raci ng Pa cket Comm ands Syntax debug ospfv3 packet no debug ospfv3 packe t Default Conf iguration Display of OSPFv3 traces is disabled b y default. Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command.
Serv icea bili ty T racing P acket Commands 1205 Usage Guideli nes There ar e no usa ge guidelines for this command. Example The following ex ample displays. console#debug ping packet debug r ip Use the debug rip comma nd to enable t racin g of RI P requests and respons es.
1206 Servi ceab ility T raci ng Pa cket Comm ands Syntax debug sflow packet no debug sflow packet Default Conf iguration Display o f sFlow trace s is disabled by defaul t. Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command.
Serv icea bili ty T racing P acket Commands 1207 Command Mode P rivileged EXEC mode. Usage Guideli nes There ar e no usa ge guidelines for this command. Example console#debug spanning-tree bpdu show debu gging Use the show d ebugg ing command to display pack et tracing configurations.
1208 Servi ceab ility T raci ng Pa cket Comm ands.
sFlow Commands 1209 65 sFlow Comma nds This chapter exp lains the following commands: • sflow destinat ion • sflo w pollin g • sflow poll ing (Interf ace M ode) •s f l o w s a m p l i n g • .
1210 sFlow Command s sflow destination Use the sflow destination co mmand to configure the sF low collector parameters (owner string, receiver ti meout, m axdatagram, ip address and port). Use the “no” form of this com mand to set r eceiver parameters to the default or remove a r eceiver .
sFlow Commands 1211 Default Conf iguration No receivers ar e configured by default. The default IP addr ess is 0.0.0.0 The default maximum datagram size is 1 400. The default owner string is the empty string. The def ault rece iver timeou t is 0. The default port is 6343.
1212 sFlow Command s • interfaces — The list of interfaces to poll. • poll-interval — The s Flow instance pollin g interv al. A poll int erval of 0 disables cou nter sampling. A va lue of n means once in n second s a counter samp le is generat ed.
sFlow Commands 1213 Default Conf iguration There ar e no p ollers configured by default. The def ault poll i nterval is 0. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines.
1214 sFlow Command s Default Conf iguration There ar e no sam plers configured by default. The default sampling rate is 0. The default maximum header size is 1 28. Command Mode Glo bal C onf igura tion mode . User Guidel ines This command has no user guidelines .
sFlow Commands 1215 Default Conf iguration There ar e no samplers configured by default. The default sampling rate is 0. The default maximum header size is 12 8. Command Mode Interface Configuration (Ethernet) mode User Guideli nes This command has no user guidelines.
1216 sFlow Command s Example console#show sflow agent sFlow Version.................................. 1.3;Dell Corp.;10.23.18.28 IP Address..................................... 0.0.0.0 show sflow destination Use the show sflow destination command to display all the configuration information r e lated to the sFlow receivers.
sFlow Commands 1217 Example console# show sflow 2 destination Receiver Owner Time out Max Datagram Port IP Address Index String Size -------- -------- ---------- ------------ ----- ------------------ 2 0 1400 6343 0.0.0.0 show sflow polling Use the show sflow polling command to disp lay the sFlow polling instances created on the switch.
1218 sFlow Command s Example console# show sflow 1 polling Poller Receiver Poller Data Source Index Interval ----------- ------- ------- 1/g1 1 0 show sflow sampling Use the show sflow sampling command to display the sFlow samp ling instances cre ated o n the switch.
sFlow Commands 1219 Example console# #show sflow 1 sampling Sampler Receiver Packet Max Header Data Source Index Sampling Rate Size ----------- ------- ------------- ---------- 1/g1 1 0 128 Sampler Data Source The sFlowDataSource (unit/port) for this sFlow sampler .
1220 sFlow Command s.
SNMP Co mm ands 1221 66 SNMP Co mmands This chapter exp lains the following commands: •s h o w s n m p • show snmp engi neID • sh ow sn mp filt ers •s h o w s n m p g r o u p s • show snmp u.
1222 SNMP Command s show snmp Use the show snmp command in P ri vileged EXEC mode to display the SNMP communications status. Syntax show snmp Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines .
SNMP Co mm ands 1223 Target Address Type Community Version UDP Filter TO Retries Port name Sec -------------- ------ --------- ------- ---- ------ --- ----- 192.
1224 SNMP Command s show snmp filters Use the show snmp filters command in Privileged EXEC mode to display the configuration of filters. Syntax show snmp filters filtername • filternam e — Sp ecifies the nam e of the filter . (R ange: 1-30 ) Default Conf iguration This command has no default configuration.
SNMP Co mm ands 1225 Name OID Tree Type ------------------- --------------------------------- - user-filter1 1.3.6.1.2.1.1 Included user-filter1 1.3.6.1.2.1.1.7 Excluded show snmp gr oups Use the show snmp groups command in P rivileged EXEC mode to display the configuration of groups.
1226 SNMP Command s managers-group V3 NoAuth-priv Default "" "" console# show snmp groups user-group Name Security Views Model Level Read Write Notify ----------------- ------ ------ -------- -------- ------- user-group V3 Auth-Priv Default "" "" The following table contains field descriptions.
SNMP Co mm ands 1227 Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines. Example The following example displays the configuration of users with the user name specified.
1228 SNMP Command s Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following examples display t he configuration of views with and without a view name spec ified.
SNMP Co mm ands 1229 show trapfla gs Use the show tr apflags c ommand to show the status of the configu rable SNMP traps . Syntax show t rapflags [os p f | ospfv3] osp f | ospfv3 — Us e this param eter to show detai led OSPF trap stat us information Default Conf iguration There is no default configuration for this command.
1230 SNMP Command s console#show trapflags ospf OSPF Traps: errors: all.......................... ....Disabled authentication failure....... ....Enabled bad packet................... ....Enabled config error................. ....Enabled virt authentication failure .
SNMP Co mm ands 1231 Syntax snmp-ser ver comm unity community - string { ro | rw | su } [ ipaddress ipaddress ] [ view viewn ame ] no snmp -serv er commu nity community-string • community -strin g — P ermits access to the SNMP protocol. (Ran ge: 1-20 characte rs) • ro — Indica tes read- only access • rw — Indicates r ead-write access.
1232 SNMP Command s Example The following example co nfigures community access string publi c to per mit administrati ve access to SNMP at an administrative statio n with IP addr e ss 192.168.1 .20. console(config)# snmp-server community public su ipaddress 192.
SNMP Co mm ands 1233 Example The following example maps a commu nity access string dell_community to group dell_group. console(config)# snmp-server community-group dell_community dell_group 192.168.29.1 snmp-ser ver contact Use the snmp-se r ver cont act command in Global Configuration mode to set up a system contact (sysContact) st ring.
1234 SNMP Command s snmp-server enable traps Use the snmp-ser v er ena ble trap s command to enabl e SNMP traps globally or t o e n a b l e s p e c i f i c S N M P t r a p s . U s e t h e “ n o ” f o r m o f t h i s c o m m a n d t o d i s a b l e S N M P t r a p s .
SNMP Co mm ands 1235 Command Mode Global Configuration mode. User Guideli nes There ar e no user gui delines for this command. Example The following example displays the opti ons for the snmp-ser ver enabl e traps command. console(config)#snmp-server enable traps ? <cr> Press enter to execute the command.
1236 SNMP Command s no snmp -server en able tra ps authen tication Default Conf iguration T ra ps are enabled by default. Command Mode Global Configuration mode User Guidel ines This command has no user guidelines . Example The follow ing example displays the comm and to enable authentica tion faile d SNMP trap s.
SNMP Co mm ands 1237 Default Conf iguration The engi neID is not configured. Command Mode Global Configuration mode User Guideli nes If you want to use SNMPv3, you need to specify an engine ID for the device. Y ou can specify your own ID or use a defa ult string that is generated using the MAC addr ess of the device.
1238 SNMP Command s Syntax snmp-ser ver filter filter -name oi d-tree { included | excluded } no snmp-ser ver fi lter filter -name [ oid-tree ] • filter -n ame — Specifies th e label for the filter record that is being updated or created. The name is used to reference the recor d.
SNMP Co mm ands 1239 console(config)# snmp-server filter user-filter ifEntry.*.1 included snmp-ser ver group Use the snmp-se rv er group co mma nd in Gl obal Co nfig ura tio n m ode to configure a new Simple Mana g ement P rot ocol (SNMP) group or a table that maps SNMP users t o SNMP view s.
1240 SNMP Command s • writeview — A str ing that is the name of t he view that enables t he user to enter data and configu re the contents of the agent. If unspecified, nothin g is defined for the w rite view . (Range: 1-30 ch aracters.) Default Conf iguration No group entry exists.
SNMP Co mm ands 1241 These commands are updated to allow space(s) in host name when specified in double quotes. Example #snmp-server host “host name” #snmp-server v3-host “host name” Syntax sn.
1242 SNMP Command s Command Mode Global Configuration mode User Guidel ines There ar e no user gui delines for this command. Example The following e xample enables SN MP traps for host 192.
SNMP Co mm ands 1243 Example The f ollowin g exam ple sets the devi ce locati on as "N ew_Y ork". console(config)# snmp-server location New_York snmp-serve r user Use the snmp-se rv er user command in Global Configuration mode to configure a new SNMP V ersion 3 us er .
1244 SNMP Command s • priv-des — The CB C-DES Symme tric Encryption privacy level. Enter a password. • priv-des-key — T he CBC-DE S Symmetric Encryption privacy level. The user should ente r a pregenerated MD5 or SHA key dependi ng on the authen tication le vel sel e cted.
SNMP Co mm ands 1245 • view -name — Spe cifies the label for the view record that is being created or updated. Th e nam e is used to reference the recor d. (Ra nge: 1-30 characte rs.) • oid-tree — S pecifies the obje ct identifier of the AS N.
1246 SNMP Command s snmp-server v3-host Use the snmp-ser v er v3-host command in Global Configuration mode to specify the recipient of Simple Network Manageme nt Protocol V e rsion 3 notifications. T o remove the specified host, use the no form of this command.
SNMP Co mm ands 1247 Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example The followi ng e xampl e ident ifies an SNMPv 3 host .
1248 SNMP Command s.
SSH Commands 1249 67 SSH Commands This chapter exp lains the following commands: •c r y p t o k e y g e n e r a t e d s a • cryp to key generate rsa • cryp to key pubkey-chain ssh • ip ssh por.
1250 SSH Commands crypto key ge nerate dsa Use the crypto key generate dsa command in Global Configuration mode to generate DSA key pairs for you r switch. A k ey pair is on e public DS A key and one pri vate DSA k ey . Syntax crypto key gene rate dsa Default Conf iguration DSA k ey pairs do not e xist.
SSH Commands 1251 Default Conf iguration RSA k ey pai rs do not exist . Command Mode Global Configuration mode User Guideli nes RSA k eys ar e gener ated in pa irs: one pub lic RSA k ey and o ne private RSA key . If your switch alr eady has RSA k eys when you is sue this command, you ar e warned and prompt ed to replace the existing keys.
1252 SSH Commands Example The following example enters t he SSH P ublic Key-chai n configurati on mode. console#configure console(config)#crypto key pubkey-chain ssh console(config-pubkey-chain)#user-.
SSH Commands 1253 User Guideli nes This command has no user guidelines. Example The following example specifies the port to be used by the SSH server as 8080. console(config)#ip ssh port 8080 ip ssh pubkey-a uth Use the ip ssh pubkey-auth command in Global Co nfiguration mode to enable public key authentication for in coming SSH sessions.
1254 SSH Commands ip ssh server Use the ip ssh ser ver command in Global Configur ation mode to e nable the switch to be configur ed from SSH. T o disable this funct ion, use the no form of this command. Syntax ip ssh ser ver no ip ssh se rver Default Conf iguration This command is ena bled by d efau lt.
SSH Commands 1255 Default Conf iguration By default, th e key-string is emp ty . Command Mode SSH P ubl ic K e y Configuration mode User Guideli nes Use the key-st ring row command to specify which SSH public k ey you will configure interactively ne xt.
1256 SSH Commands console(config)#crypto key pubkey-chain ssh console(config-pubkey-chain)#user-key bob rsa console(config-pubkey-key)#key-string row AAAAB3Nza console(config-pubkey-key)#key-string ro.
SSH Commands 1257 dxUXEAiDHXcWHVr0R/ak1HDQitBzeEv1vVEToEn5ddLmRhtIgRdKU JHgBHJV R2VaSN/WC0IK53j9re4B11AE+O3qAxwJs0KD7cTkvF9I+YdiXeOM8 VE4skkw AiyLDNVWXgNQ6iat8+8Mjth+PIo5t3HykYUCkD8B1v93nzi/sr4hH HJCd.
1258 SSH Commands Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines . Example The following exampl e displays all SSH public k eys stor e d on the switch.
SSH Commands 1259 show ip ssh Use the show ip ssh command in Pri vi leged EXEC mode to display the SSH server configuration. Syntax show ip ssh Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guideli nes This command has no user guidelines.
1260 SSH Commands user -key Use the user-k e y command in SSH Publi c Key Chain Configuration mode to specify which SSH public key you are configuring manually .
Syslog Comma nds 1261 68 Syslog Commands This chapter exp lains the following commands: • clea r logging • clea r logging file •d e s c r i p t i o n • level • logging • logging bu ffered .
1262 Syslog C ommand s clear lo gging Use the clear logging command in Priv ileg ed EXEC mode to clear messages from the internal logging buffer . Syntax clear logging Default Conf iguration This command has no default configuration. Command Mode P rivileged EXEC mode User Guidel ines This command has no user guidelines .
Syslog Comma nds 1263 Command Mode P rivileged EXEC User Guideli nes This command has no user guidelines. Example The following example shows the clear logging fil e command and confirmation response. console#clear logging file Clear logging file [y/n] description Use the description command in Logging mode t o descri be the syslog serve r .
1264 Syslog C ommand s level Use the level command in Logging mode to specify the importance level of syslog me ssages. T o r eset to t he default value, us e the no form of t he command. Syntax level level no level • level — T he level nu mber for syslog messages.
Syslog Comma nds 1265 Default Conf iguration Disabl ed Command Mode Global Configuration User Guideli nes T o see the CLI commands by using the sh ow loggi ng command. Example console(config)#logging cli-command <189> JAN 13 05:20:27 192.168.2.1-1 UNKN[248900192]: cmd_logger_api.
1266 Syslog C ommand s no logging { ip-address | hostname } • ip-add ress — IP addr ess of the host to be used as a sy slog server . • hostna me — Hostname of the host to be used as a syslog server . (Range: 1- 158 ch arac ters) Default Conf iguration No syslog serv ers defined.
Syslog Comma nds 1267 Command Mode Global Configuration mode User Guideli nes All the syslog messa ges are logged to the internal buffe r . This command limits the commands displ ayed to the user . Example The following e xample limits sy slog messages display ed from an internal buffer based on t he severity leve l "error .
1268 Syslog C ommand s Example The following example limits messages logged to th e console based on severity level "alert". console(config)#logging console alert logging facility Use the logging fa cility command in Global Configuration mode to set the facility for logging messages.
Syslog Comma nds 1269 Syntax logging file level no logging fi le • level — Lim its the loggin g of mess ages to the b uffer to a specified level. (Range: emergency , alert, critical, error , warning, notice, info , debug) Default Conf iguration The default value for level is error .
1270 Syslog C ommand s Command Mode Glo bal C onf igura tion mode User Guidel ines The logging pro cess controls the dist ribution of logging me ssages to the various dest inations, such as the log ging buffer , logging fil e, or syslog server .
Syslog Comma nds 1271 logging we b-session Use the log gin g w eb -ses sio n command in Global Configuration mode to enable web session logging. T o disable, use the no form of this command. Syntax logging we b-session no logging web-session Default Conf iguration Disabl ed.
1272 Syslog C ommand s no port • port — The port number for syslog messages. (Ran ge: 1-65535) Default Conf iguration The default port number is 514. Command Mode Log gi ng m od e User Guidel ines After entering the view corresponding to a specific syslog server , the command can be executed to set the port number for th e server .
Syslog Comma nds 1273 Example The following example displays the state of logging and the syslog messages stored in the intern al buffer . console#show logging Logging is enabled. Console logging: level debugging. console Mes sages: 0 Dropped. Buffer logging: level debugging.
1274 Syslog C ommand s 11-Aug-2005 15:41:43: %LINK-3-UPDOWN: Inte rface Ethernet g1, changed state to up 11-Aug-2005 15:41:43: %LINK-3-UPDOWN: Inte rface Ethernet g1, changed state to up 11-Aug-2005 1.
Syslog Comma nds 1275 User Guideli nes This command has no user guidelines. Example The following example displays the state of logging and syslog mes sages sor te d in th e lo ggi ng fi le. console#show logging file Persistent Logging : enabled Persistent Log Count : 1 <186> JAN 01 00:00:05 0.
1276 Syslog C ommand s IP address Port Severity Facility Description ------------------------------------------- -------------- 192.180.2.275 14 Info local7 7 192.
System Ma nageme nt Comman ds 1277 69 System Ma nageme nt Co mmands This chapter exp lains the following commands: •a s s e t - t a g •b a n n e r m o t d • banner mot d acknowl edge • clear c.
1278 System Ma nage ment Comma nds • show su pported switchtype •s h o w s w i t c h • show system • show system id • show tech-support •s h o w u s e r s •s h o w v e r s i o n •s t a.
System Ma nageme nt Comman ds 1279 asset-tag Use the asset -tag command in Global Configur ation mode to sp ecify the switch a sset ta g. T o remove the existing a sset tag , use the no form of the command. Syntax asset-ta g [unit] tag no asset- tag [un it ] • unit — S witch numb er .
1280 System Ma nage ment Comma nds Syntax banner m otd no banner motd Default Conf iguration The banne r is disabl ed by defau lt. Command Mode Global Configuration mode User Guidel ines This command has no user guidelines . Example console(config)# banner motd “IMPORTANT: There is a power shutdown at 23:00hrs today, duration 1 hr 30 minutes.
System Ma nageme nt Comman ds 1281 Default Conf iguration This command has no default configuration. Command Mode Global Configuration mode User Guideli nes This command has no user guidelines. Example console(config)# banner motd “ There is a power shutdo wn at 23:00hrs t oday , duration 1 hr 30 minutes.
1282 System Ma nage ment Comma nds Command Mode P rivileged EXEC mode User Guidel ines When nonstop forwarding is enabled on a stack, the stack's management unit checkpoints operationa l data to the back up unit.
System Ma nageme nt Comman ds 1283 Example console(config)#cut-through mode The mode (enable) is effective from the next reload of Switch/Stack. hostname Use the host name command in Gl o bal Configuration mode to specify or modify the switch host name.
1284 System Ma nage ment Comma nds Syntax This command has no user guidelines . Default Conf iguration There is no default configuration. Command Mode Stack Configuration mode User Guidel ines This command forces a warm restart of the stack.
System Ma nageme nt Comman ds 1285 Syntax membe r unit switchinde x no mem ber unit • unit — The s witch id entifier of th e switch to b e add ed or removed from the stack. (Ran ge: 1–12) • switchind ex — The index into the database of the supported switch types, indicating t he type of t he switch b eing preconfigured.
1286 System Ma nage ment Comma nds Default Conf iguration This command has no default configuration. Command Mode Stack Global Configuration mode User Guidel ines Upon ex ecut ion, the entire stack, including all interfaces in the stack, are unconfigured and r econ figured with the configuration on the new Management Switch.
System Ma nageme nt Comman ds 1287 Command Mode Stack Global Configuration User Guideli nes No specific guideline s. Example console(config)#stack console(config-stack)#no standby Fastpath will automa.
1288 System Ma nage ment Comma nds nsf Use this command to enable non-stop forwarding. The “no” form of the command will disable NSF . Syntax nsf no nsf Default Conf iguration Non-stop forwarding is e nabled by default.
System Ma nageme nt Comman ds 1289 • interva l — The tim e between E cho Requests, in seconds (Ra nge: 1–60 seconds). • size — Nu mber of data bytes in a packet (Ra nge: 0–65 507 by tes). Default Conf iguration The default count is 4. The def ault interv al is 3 sec onds.
1290 System Ma nage ment Comma nds console#ping yahoo.com Pinging yahoo.com [66,217,71,198] with 64 bytes of data; 64 bytes from 10.1.1.1: icmp_seq=0. time=11 ms 64 bytes from 10.1.1.1: icmp_seq=1. time=8 ms 64 bytes from 10.1.1.1: icmp_seq=2. time=8 ms 64 bytes from 10.
System Ma nageme nt Comman ds 1291 Management switch has unsaved changes. Would you like to save them now? (y/n) n Configuration Not Saved! Are you sure you want to reload the switch? (y/n) y Reloading management switch 1.
1292 System Ma nage ment Comma nds show boot- version Use the show boot-versi on comm and to displ ay the boot imag e versi on details. The detai ls available to the user include th e build date and time. Syntax show boot -version [unit] • unit — The s witch id entifier .
System Ma nageme nt Comman ds 1293 Command Mode P rivileged EXEC mode User Guideli nes When nonstop forwar ding is enabled on a stack, the stack's managem ent unit checkpoints operation al data to the back up unit .
1294 System Ma nage ment Comma nds Default Conf iguration This command has no default configuration. User Guidel ines No specific guideline s. Example Console#show cut-through mode Current mode : Enab.
System Ma nageme nt Comman ds 1295 Total Memory................................... 262144 KBytes Available Memory Space......................... 121181 KBytes show nsf Use the show nsf command to show the status of non-stop forwarding. Syntax show nsf Default Conf iguration This command has no default configuration.
1296 System Ma nage ment Comma nds Copy of Running Configuration to Backup Uni t: Status.................................. .... Stale Time Since Last Copy........................ 0 days 4 hrs 53 mins 22 secs Time Until Next Copy.................... ..
System Ma nageme nt Comman ds 1297 status bytes ------ ---------- free 64022608 alloc 151568112 CPU Utilization: PID Name 5 Sec 1 Min 5 Min --------------------------------------------- ------------ 328bb20 tTffsPTask 0.00% 0 .00% 0.02% 3291820 tNetTask 0.
1298 System Ma nage ment Comma nds 62038a0 dot1s_timer_task 0.00% 0.00% 0.03% 687f360 dot1xTimerTask 0.00% 0.06% 0.07% 6e23370 radius_task 0.00% 0.00% 0.01% 6e2c870 radius_rx_task 0.00% 0.06% 0.03% 7bc9030 spmTask 0.00% 0.09% 0.01% 7c58730 ipMapForwardingTask 0.
System Ma nageme nt Comman ds 1299 show sessions Use the show session s com ma nd i n Priv ile ged EX EC m ode to dis pla y a l ist of the open telnet sess ions to remote hosts. Syntax show sessions Default Conf iguration This command has no default configuration.
1300 System Ma nage ment Comma nds show stack- port Use the show stack- port command in P rivileged EXEC mode to display summary stack-port inform ation for all interfaces. Syntax show stack-po rt Default Conf iguration This command has no default configuration.
System Ma nageme nt Comman ds 1301 show stack- port counters Use the show stac k-port counters command in P rivileged EXEC mo de to display summary dat a counter information for all interfaces. Syntax show stack-po rt counters Default Conf iguration This command has no default configuration.
1302 System Ma nage ment Comma nds Example The followi ng ex ample displays informatio n about the summary stack -port counters. console#show stack-port counters ----------TX-------------- ----------R.
System Ma nageme nt Comman ds 1303 show stack- port diag NOTE: This comma nd is intended only for Fi eld Applica tion Engine ers (F AE) and devel opers.
1304 System Ma nage ment Comma nds Legend: RBYT : Received Bytes RPKT : Received Packets TBYT : Transmitted Bytes TPKT : Transmitted Packets RFCS : Received Frame Check Sequence Errors RFRG : Received.
System Ma nageme nt Comman ds 1305 show stack- standby Use the sho w stack-standby c ommand to show the St andby c onfigured in the stack. The show stack-standby command shows the configured or automatically selected standby u nit number . Syntax show stack-sta ndby Default Conf iguration This command has no default configuration.
1306 System Ma nage ment Comma nds show suppor ted switchtype Use the show support ed switchtype c o m m a n d i n U s e r E X E C m o d e t o d i s p l a y information about al l supported switch type s.
System Ma nageme nt Comman ds 1307 The following example displays the format of the show supporte d switchtype [ switchinde x ] command. console#show supported switchtype 1 Switch Type....................... 0x73950001 Model Identifier................
1308 System Ma nage ment Comma nds show switch Use the show switch com mand in User EXEC mode to display information about all unit s in the stack. Use the sho w switch [ unit ] command to display the i nformation a bout a specif ic unit on t he stack.
System Ma nageme nt Comman ds 1309 Switch Status..................... OK Switch Description................ PCM8024 Expected Code Type................ 0x100b000 Detected Code Version............. I.12.21.1 Detected Code in Flash............ I.12.21.1 Boot Code Version.
1310 System Ma nage ment Comma nds This examp le displays informatio n about all units i n the stack. console>show switch Switch Management Preconfig Plugged-in Switch Code Status Model ID Model ID Status Version ------------------------------------------------------------- 1 Mgmt Switch PCM8024 PCM8024 1.
System Ma nageme nt Comman ds 1311 Status Parameters for NSF The show switch com mand is used to display which unit is the management unit and which is the backup unit. Gl obal Status P arameters for NSF ar e exp lained as follows: Plugge d-In Mod el Id entif ier This fiel d disp lays t he model ident ifier of the switc h in the s t ack.
1312 System Ma nage ment Comma nds Last Start up Reason The type of activa tion th at cau sed the so ftware to st art the l ast time. There are four options . “P ower-On” means that t h e switch r ebooted. This coul d have been cause d by a power cycle or an admi nistrati ve “Reload ” command.
System Ma nageme nt Comman ds 1313 (nsf-stack) #show nsf Administrative Status.......................... Enable Operational Status............................. Enable Last Startup Reason............................ Warm Auto-Restart Time Since Last Restart.
1314 System Ma nage ment Comma nds P er Unit Stat us P arameters ar e explained as follows: show system Use the show system command in User EXEC mode command to display system informati o n. Syntax show system [ unit ] • unit — The unit number . Default Conf iguration This command has no default configuration.
System Ma nageme nt Comman ds 1315 Burned In MAC Address: 00FF.F2A3.8888 System Object ID: 1.3.6.1.4.1.674.10895.3011 System Model ID: PCT6248 Machine Type: Dell 48 Port Gigabit Ethernet Temperature S.
1316 System Ma nage ment Comma nds show system id Use the show system id command in User EXEC mode to disp lay the system identity information. Syntax show system id [ unit ] • unit — The unit number . Default Conf iguration This command has no default configuration.
System Ma nageme nt Comman ds 1317 show tech- support Use the show tech -support comm and to disp lay syst em and con fig urat io n information for use in debugging or co ntacting technical support.
1318 System Ma nage ment Comma nds Example console#show tech-support ***************** Show Version ****************** Switch: 2 System Description............................. Powerconnect 6248P, 1.23.0.33 VxWorks 6.5 Machine Type....................
System Ma nageme nt Comman ds 1319 System Up Time................................. 0 days 0 hrs 11 mins 47 secs 10/100 Ethernet/802.3 interface(s)............. 4 Gig Ethernet/802.3 interface(s)................ 1 10Gig Ethernet/802.3 interface(s)......
1320 System Ma nage ment Comma nds Example The followi ng ex ample displays a list of active users a nd the informatio n about the m. console#show users Username Protocol Location -------- -------- ------------ Bob Serial John SSH 172.16.0.1 Robert HTTP 172.
System Ma nageme nt Comman ds 1321 Example The following exampl e displays a system version (this v ersion number is only for demonstration purposes). console>show version Image Descriptions image1.
1322 System Ma nage ment Comma nds Example The fo llowing example sets the m ode to Stac k Global C onfig. console(config)#stack console(config-stack)# stack-por t Use the stack-port command in Stack Configurat ion mode to configure Sta ck ports a s either St acking ports or as Et hernet ports.
System Ma nageme nt Comman ds 1323 standby Use the standby comma nd to co nfigure the st andby in the stack . This un it come s up a s the master when t he st ack fai lover occur s.
1324 System Ma nage ment Comma nds • val ue — The priority of one back up sw itch ov er ano ther . (R ange: 0–1 2) Default Conf iguration The switch priority defaults to the hardwar e management preference value of 1.
System Ma nageme nt Comman ds 1325 User Guideli nes This command is ex ecuted on the Management Switch. Example The following example displ ay s how to reconfigur e switch number “1” to an identifier of “2.” console(config)#switch 1 renumber 2 telnet Use the telnet command in Pri v ileged EXEC mode to log into a host that supports T elnet.
1326 System Ma nage ment Comma nds Keywords T a ble Port T able Options De scription debug Enable teln et debuggi ng mode. line Enabl e teln et lin emod e. loca lecho E nable te ln et loca lech o. <cr> Press ENTER to execute th e command. < port > Enter th e port number .
System Ma nageme nt Comman ds 1327 Example F ollowing is an examp le o f using the telne t command to connect to 176.213.1 0.50. console#telnet 176.213.10.50 Esc U sends telnet EL tracerou te Use the tracero ute command in P rivileged EXEC mod e to discover the IP routes tha t packets actual ly take when trave ling to thei r destinati ons.
1328 System Ma nage ment Comma nds •Y o u c a n e n t e r trac eroute to wi thou t spe cify ing th e IP add ress an d hostname, and specify values for the traceroute parameters.
System Ma nageme nt Comman ds 1329 Command Mode P rivileged EXEC mode. User Guideli nes There ar e no user gui delines for this command. Examples The following exampl e discovers the routes that packet s will actually tak e when traveling to the destination spec ified in the command.
1330 System Ma nage ment Comma nds Tracing route over a maximum of 20 hops 1 192.168.21.1 30 ms 10 ms 10 ms 2* * * 3* * * 4* * * 5* * *.
T e lnet S er ver Co mmands 1331 70 T elnet Serve r Commands This chapter exp lains the following commands: • ip telnet server d isable • ip telnet port •s h o w i p t e l n e t.
1332 T e lnet Se rver C ommand s ip telnet server disable The ip telnet server disable com mand is used to enable/disable the T elnet service on the switch. Syntax ip telnet ser v er disable no ip tel net ser ver disa ble Para mete r R ange s Not applicab le Command Mode Global Configuration Usage Guideli nes No specific guideline s.
T e lnet S er ver Co mmands 1333 Default Conf iguration This command has no default configuration. Command Mode Global Configuration Usage Guideli nes No specific guideline s.
1334 T e lnet Se rver C ommand s.
User Int erfac e Comman ds 1335 71 User Interface Commands This chapter exp lains the following commands: •e n a b l e •e n d •e x i t •q u i t.
1336 User In terface Comman d s enable Use the enable command in User EXEC mode to en ter the Privileged EXEC mode. Syntax enable Default Conf iguration The default privilege lev el is 15.
User Int erfac e Comman ds 1337 Command Mode All command modes User Guideli nes No specific guideline s. Example console(config)#end console#end console> exit Use the exit command to go to the next lower com mand promp t. Syntax exit Default Conf iguration This command has no default configuration.
1338 User In terface Comman d s Example The following example changes the configuration mode from Interface Con figu rat io n mo de to Use r EXE C m ode . console(config-if-1/g1)# exit console(config)# exit console#exit console> quit Use the quit co mmand in User EXEC mode to close an active terminal session by logging off the swit ch.
W eb Serve r Comma nds 1339 72 W eb Server Commands This chapter exp lains the following commands: • common-name •c o u n t r y • cryp to certificate gen erate • cryp to certificate import •.
1340 W e b Serv er Comma nds common- name Use the comm on-name command in Crypto Certificate Generation or Crypto Certifica te Request mod e to specify the common-n ame for the switch. Syntax common-n ame common-name • common-name — Spe cifies the fu lly qualified URL or IP address of the switch .
W eb Serve r Comma nds 1341 Default Conf iguration This command has no default configuration. Command Mode Crypto Certificate Generation or Crypto Certificate Reques t mode User Guideli nes This command mode is enter ed using the crypto cert ificate request or cr ypto certificate g enerate command.
1342 W e b Serv er Comma nds User Guidel ines This command is not sav ed in the router switch configurat ion; however , the certificate and keys generated by thi s command are saved in the private configuration. This saved information is never displayed to the user or back ed up to anothe r switch .
W eb Serve r Comma nds 1343 If the public ke y fo und in the certific ate d oes not match the switch's SSL RSA key , the command fails. This command is not saved in the ro uter configuration; how.
1344 W e b Serv er Comma nds crypto certificate reques t Use the crypto certificate re quest com mand in P rivileged EXEC mode to generate and di splay a certificat e request for H T TPS. This command tak es you to Crypto Certi ficate Requ est mode. Syntax crypto certificate number req uest • number — Spe cifies the certifi cate nu mber .
W eb Serve r Comma nds 1345 dura tion Use the duration command in Crypto Certificate Generation mode to specify the du ration. Syntax duration days • days — Specifies t he num ber of da ys a ce rtification w ould be valid. If left unspe cified, the param eter defa ults to 365 days.
1346 W e b Serv er Comma nds • port-number — P ort number for u se by the HT TP serv er . (Range: 1–65 535) Default Conf iguration This default port num ber is 80 . Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines.
W eb Serve r Comma nds 1347 Example The following example enables the switch to be configured from a browser . console(config)#ip http server ip https certificate Use the ip https certificate comm and in Global Configuration mode to configure the activ e certifi cate for HT TPS.
1348 W e b Serv er Comma nds Syntax ip https port port-number no ip htt ps port • port-number — P ort number for u se by the secure HT TP server . (Range: 1–65 535) Default Conf iguration This default port number is 443. Command Mode Glo bal C onf igura tion mode User Guidel ines This command has no user guidelines .
W eb Serve r Comma nds 1349 User Guideli nes Y ou must use the crypto certificate generate command t o gene rate the HTTPS certi fic ate. Example The following example enables the switch to be configured from a browser .
1350 W e b Serv er Comma nds location Use the location command in Cryp to Cert ificate Generation or C rypto Certifica te Request mode to spec ify the loca tion or city name. Syntax location location • loca tion — Sp ecifies th e locatio n or c ity nam e.
W eb Serve r Comma nds 1351 Command Mode Crypto Cert ificate Generation o r Crypto Certificate R equest mode User Guideli nes This command mode is enter ed using the crypto cert ificate request or cr ypto certificate g enerate command. Example The following example displays how to specify t he "general motors" organization-unit.
1352 W e b Serv er Comma nds NnH/xQSGA2ffkRBwU2XIxb7n8VPsTm1xyJ1t11a1GaqchfMqqe0km fhcoHSWr yf1FpD0MWOTgDAwIDAQABo4IBojCCAZ4wEwYJKwYBBAGCNxQCBAYe BABDAEEw CwR0PBAQDAgFGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0O.
W eb Serve r Comma nds 1353 Example The following example displays the HTTP server configuration. console#show ip http HTTP server enabled. Port: 80 show ip https Use the show ip http command in P rivileged EXEC mode t o display the HTTP S server configuration.
1354 W e b Serv er Comma nds Finger print: DC789788 DC88A988 127897BC BB789788 Certificate 2 is inactive Issued by: self-signed Valid from: 8/9/2003 to 8/9/2004 Subject: CN= router.
W eb Serve r Comma nds 1355 state Use the state command in Crypto Certificate Generation or Cry p to Cert ific ate Re quest m ode t o speci fy th e state or pr ovince name. Syntax state stat e • state — Specifies th e state or provin ce name. (Range: 1–64 charact ers) Default Conf iguration This command has no default configuration.
1356 W e b Serv er Comma nds.
An important point after buying a device Dell PC6224 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Dell PC6224 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Dell PC6224 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Dell PC6224 you will learn all the available features of the product, as well as information on its operation. The information that you get Dell PC6224 will certainly help you make a decision on the purchase.
If you already are a holder of Dell PC6224, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Dell PC6224.
However, one of the most important roles played by the user manual is to help in solving problems with Dell PC6224. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Dell PC6224 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
