Instruction/ maintenance manual of the product D-Series Enterasys Networks
Go to page of 540
Enterasys ® D-Series Ether net Switches CLI Reference Firmware V ersion 1. 00.01.0005 or Higher P/N 9034394-01.
.
i Notice Enterasys Networks reserves the right to make changes in specifi cations and other information contained in this do cument and its web si te without prior notice.
ii ENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENT BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT. This document is an agreement (“ Agreement”) betwee n the end user (“Y ou”) and Enterasys Networks, Inc.
iii If the Program is exported from the United Stat es pursuant to the License Ex ception TSR und er the U.
iv 10. ENFORCEMENT. You ac knowledge and agree that any breach of Sectio ns 2, 4, or 9 of this Ag reement by You may cause .
v Contents About This Guide Using This Guide ................ ................ ................ ................ ................ ............. ................ . ............... ................ xxi Structure of This Guide .......... ................
vi set prompt ..... ................ ................ ................ ............. ................. ................ ................ .. .................... 2-20 show banner motd ........ ................ ................ ............. ...........
vii clear config ...................... ................. ................ ................ ............. ................ ............... ........... ......... 2-46 Using and Configuring WebView ..... ................ ................ ...............
viii show lldp port local-info ................ ................ ................. ................ ................ ............. ........ .............. 5-18 show lldp port remote-info ......... ................ ................ ................. ..
ix Setting Flow Control ........... ... ... ... .... ... ... ... .... ............ .... ... ... ... .... ... ... ... .... ... ... ... ... ............. .. ........ ................ ... 6-19 Purpose ........... ............. ................ ..........
x set port protected name .................... ................ ................ ................ ............. ................ ....... ............ 6-52 show port protected name ...... ................ ................ ................ .............
xi Purpose ........... ............. ................ ................ ............. ................ ................ ............. ..... .................. ......... 7-28 Commands ............... ................. ............. ................ ....
xii show spantree tctr apsuppres s ...... ................ ................. ................ ................ ................ ............ ....... 8-23 set spantree tctrapsuppress ................ ................ ................ ................ .
xiii show spantree nonforwardingreas on ........ ................ ............. ................ ................. ............ ............ .8 - 5 3 Chapter 9: 802.1Q VLAN Configuration VLAN Configuration Summary ........... ................ ........
xiv Command .............. ... .... ... ............. ... ... .... ... ... ... ... .... ... ... ............. ... .... ... ... ... ... .... ... ... ........ .................. ...... 10-2 set diffserv adminmode ................ ................ ......
xv set cos state ................. ................ ............. ................ ................. ................ ............. ...... ................. 11-19 show cos state ........ ................ ................ ............. ................
xvi set igmpsnooping interfacemode ...................... ................ ................ ................ ................ ........... ..... 13-3 set igmpsnooping groupmembershipi nterval .... ................ ................ ................ ....
xvii Configuring Simple Network Time Protocol (SNTP) ..... ................ ................ ................ ................ .......... .... 14-26 Purpose ........... ............. ................ ................ ............. ................ ...
xviii show rmon filter ............... ................. ................ ............. ................ ................ ................ .. ............... 15-19 set rmon filter ............. ............. ................ ................ .........
xix clear dhcp pool dns-server .. ... ... ... .... ... ... ... ... .... ................ ............. ................ ................ ......... ........ 16-23 set dhcp pool domain-name ......................... ................. ................ ..
xx Configuring Multiple Authentication Methods ........ ............. ................ ............. ................ ................ . .......... 17-33 About Multiple Authentication Ty pes ............... ............. ................ .............
xxi set pwa ipaddress ...... ................ ................ ................ ................. ................ ................ ....... ............. 1 7-67 set pwa protocol ........ ................ ................ ................ .............
xxii 7-18 show snmp view O utput Details ................ ................ ............. ................ ................. ................ ...... ... 7-20 7-19 show snmp targetparams Output Det ails ..... .... ......... ................. ...........
Enterasys D-Series CLI Reference xxi About This Guide We l c o m e to the Enterasys Networks D ‐ Seri es CLI Reference . This manual explains how to .
Related Documents xxii About This Guide Chapter 7 , SNMP Configuration , describes how to configure SNMP users and user groups, access rights, target addresses, and notification parameters.
Conventions Used in This Guide Enterasys D-Series CLI Reference xxiii Conventions Used in This Guide The following conventions are used in the text of this docu.
Getting Help xxiv About This Guide Before calling Enterasys Networks, have the following information ready: •Y o u r Enterasys Networks service contra.
Enterasys D-Series CLI Reference 1-1 1 Introduction This chapter provides an overview of the D ‐ Series’ s unique features and functionality , an .
Factory Default Settings 1-2 Introduction • Remotely using We b V i e w ™ , Enterasys Netw orks’ embedded web server application.
Factory Default Settings Enterasys D-Series CLI Reference 1-3 Link aggregation flow regeneration Disabled. Link aggregation system priority Set to 32768 for all ports.
Factory Default Settings 1-4 Introduction S panning Tree edge port administrative status Edge port administrative status begins with the value set to fals e initially after the device is powered up. If a S panning T r ee BDPU is not rece ived on the port within a few seconds, the status setting changes to true .
Using the Command Line Interface Enterasys D-Series CLI Reference 1-5 Using the Command Line Interface S t arting a CLI Session Connecting Using th e Console Port Connect a terminal to the local console port as described in your D ‐ Series Installation Guide .
Using the Command Line Interface 1-6 Introduction Refer to the instructions included with the Te l n e t application for information about establishing a Te l n e t session.
Using the Command Line Interface Enterasys D-Series CLI Reference 1-7 Figure 1-2 Samp le CLI Default s Description CLI Command Modes Each command description in this guide incl.
Using the Command Line Interface 1-8 Introduction Displaying Scrolling Screens If the CLI screen length has be en set using the set length command a.
Using the Command Line Interface Enterasys D-Series CLI Reference 1-9 Basic Line Editing Commands The CLI supports EMACs ‐ like line editing commands. Ta b l e 1 ‐ 2 lists some commonly used commands.
Using the Command Line Interface 1-10 Introduction.
Enterasys D-Series CLI Reference 2-1 2 Basic Configuration At startup, the D ‐ Series switch is configured wi th many defaul ts and standard features.
Setting User Accounts and Passwords 2-2 Basic Configuration Setting User Account s and Passwords Purpose To change the switch’ s default user login and password setti ngs, and to add new user accounts and passwords.
show system login Enterasys D-Series CLI Reference 2-3 show system login Use this command to display user login account information. Synt ax show system login Parameters None. Default s None. Mode Switch command, super user .
set system login 2-4 Basic Configuration set system login Use this command to create a new user login account, or to disable or enable an exi sting account.
set password Enterasys D-Series CLI Reference 2-5 Mode Switch command, super user . Example This example shows how to remove the “netops” user accou.
set system password length 2-6 Basic Configuration Please enter new password: ******** Please re-enter new password: ****** ** Password changed. D2(su)-> set system p assword length Use this command to set the minimum user login password length.
set system password history Enterasys D-Series CLI Reference 2-7 Example This example shows how to set the system passw ord age time to 45 days: D2(.
set system lockout 2-8 Basic Configuration Example This example shows how to display user lockout settings. In this case, switch defaults have not been changed: D2(su)->show system lockout Lockout attempts: 3 Lockout time: 15 minutes.
Setting Basic Switch Properties Enterasys D-Series CLI Reference 2-9 Setting Basic Switch Properties Purpose To display and set the syste m IP address and other basic system (switch) properties. Commands For information about.
show ip address 2-10 Basic Configuration show ip address Use this command to display the system IP address and subnet mask. Synt ax show ip address Parameters None. Default s None. Mode Switch command, read ‐ only .
clear ip address Enterasys D-Series CLI Reference 2-11 Mode Switch command, read ‐ write. Usage Pa r a m te r s must be entered in the order shown (host IP , then mask, then gateway) for the command to be accepted.
set ip protocol 2-12 Basic Configuration Mode Switch command, read ‐ only . Example This example shows how to display the method used to acquire a.
show system Enterasys D-Series CLI Reference 2-13 Mode Switch command, read ‐ only . Example This example shows how to display system information: D2(su)->show.
show system hardware 2-14 Basic Configuration show system hardware Use this command to display the system’ s hardware c onfiguration. Synt ax show system hardware Parameters None. Default s None. Mode Switch command, read ‐ only .
show system enhancedbuffermode Enterasys D-Series CLI Reference 2-15 Mode Switch command, read ‐ only . Examples This example shows how to display the system’ s.
set system enhancedbuffermode 2-16 Basic Configuration Mode Switch command, read ‐ write. Example This example shows how to display enhanced buffer mode s.
set time Enterasys D-Series CLI Reference 2-17 Mode Switch command, read ‐ only . Example This example shows how to display the current time.
set summertim e 2-18 Basic Configuration Mode Switch command, read ‐ only . Example This example shows how to display daylight savings time settings: D2(s.
set summertime rec urring Enterasys D-Series CLI Reference 2-19 Default s If an offset is not spe cified, none will be applied.
clear summertim e 2-20 Basic Configuration Default s If an offset is not spe cified, none will be applied. Mode Switch command, read ‐ write.
show banner motd Enterasys D-Series CLI Reference 2-21 Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the command pr.
clear banner motd 2-22 Basic Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the message of .
set system name Enterasys D-Series CLI Reference 2-23 Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display ver si on information.
set system location 2-24 Basic Configuration Default s If string is not specif ied, the system name will be cleared.
set width Enterasys D-Series CLI Reference 2-25 Parameters Default s If string is not specif ied, the contact name will be cleared.
set length 2-26 Basic Configuration set length Use this command to set the number of lines the CLI will display . This command is persistent (written to NV ‐ RAM). Synt ax set length screenlength Parameters Default s None.
set logout Enterasys D-Series CLI Reference 2-27 set logout Use this command to set the time (in minutes) an idle console or Te l n e t CLI session will remain connected before timing out.
set console baud 2-28 Basic Configuration ------ ------- ---- ---------- - ----- 9600 Disable 8 1 n one set console baud Use this command to set the console port baud rate. Synt ax set console baud rate Parameters Default s None.
Downloading a Firmware Image Enterasys D-Series CLI Reference 2-29 Downloading from a TFTP Server To perform a TFTP download, proceed as follows : 1.
Downloading a Firmware Image 2-30 Basic Configuration 7 - 57600 8 - 115200 0 - no change 4. T ype 8 to set the switch baud rate to 115200. The following message displays : Setting baud rate to 115200, you mus t change your terminal baud rate.
Reviewing and Selecting a Boot Firmware Image Enterasys D-Series CLI Reference 2-31 2. Load you r previous ve rs i on of cod e on the device, as described in “ Downloading a Firmware Image ” (page 2 ‐ 28).
set boot system 2-32 Basic Configuration set boot system Use this command to set the firmware image the switch loads at startup. Synt ax set boot system filename Parameters Default s None. Mode Switch command, read ‐ write.
set telnet Enterasys D-Series CLI Reference 2-33 Default s None. Mode Switch command, read ‐ only . Example This example shows how to display Te l n e t status: D.
Managing Switch Configuration and Files 2-34 Basic Configuration Parameters Default s If not specified, the default port number 23 will be use d.
show snmp persistmode Enterasys D-Series CLI Reference 2-35 Commands show snmp persistmode Use this command to display the configuration persistence mode setting. Synt ax show snmp persistmode Parameters None. Default s None.
set snmp persistmode 2-36 Basic Configuration Example This example shows how to display the configuration persistence mode setting.
dir Enterasys D-Series CLI Reference 2-37 Mode Switch command, read ‐ write. Example This example shows how to save the run ning configuration: D2(su)->save config dir Use this command to list configuration and image files stored in the file system.
show file 2-38 Basic Configuration current.log 901 29 show file Use this command to display the contents of a file.
configure Enterasys D-Series CLI Reference 2-39 Parameters Default s By default, show config will display all non ‐ default configuration information for all facilities. Mode Switch command, read ‐ only .
copy 2-40 Basic Configuration Parameters Default s If append is not spec ified, the current running configuration will be replaced wi th the contents of the configuration file, which will require an automated reset of the chassis.
delete Enterasys D-Series CLI Reference 2-41 delete Use this command to remove an image or a CLI configuration file from the switch. Synt ax delete filename Parameters Default s None. Mode Switch command, read ‐ write.
set tftp timeout 2-42 Basic Configuration Example This example shows the output of this command. D2(ro)->show tftp settings TFTP packet timeout (seconds): 2 TFTP max ret.
set tftp retry Enterasys D-Series CLI Reference 2-43 Example This example shows how to clear the timeout va l u e to the default of 2 seconds.
Clearing and Closing the CLI 2-44 Basic Configuration Clearing and Closing the CLI Purpose To clear the CLI screen or to close your CLI session. Commands cls (clear screen) Use this command to clear the screen for the current CLI session.
Resetting the Switch Enterasys D-Series CLI Reference 2-45 Mode Switch command, read ‐ only . Usage By default, switch timeout occurs after 15 minutes of user inactivity , automatically closing yo u r CLI session.
clear config 2-46 Basic Configuration Do you want to continue (y/n) [n]? clear config Use this command to clear the user ‐ defined configuration parameters.
Using and Configuring WebView Enterasys D-Series CLI Reference 2-47 Using and Configuring W ebV iew Purpose By default, We b V i e w (The Enterasys Networks embedded web .
set webview 2-48 Basic Configuration set webview Use this command to enable or disable We b V i e w on the switch. Synt ax set webview { enable | disable } Parameters Default s None. Mode Switch command, read ‐ write.
set ssl Enterasys D-Series CLI Reference 2-49 set ssl Use this command to enable or disable the use of We b V i e w ov er SSL port 443. By defa ult, SSL is disabled on the swi tch.
set ssl 2-50 Basic Configuration.
Enterasys D-Series CLI Reference 3-1 3 Activating Licensed Features In order to enable the D2 advanced features, such as Po l i c y , yo u must purchase a license.
show license 3-2 Activating Licensed Featu res Usage When you execu te the set license command, you will be prompted to accept the license agreement.
clear license Enterasys D-Series CLI Reference 3-3 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear a licensed feature: D2(rw)->clear license featureId D2Po licy featureID feature The name of the feature being cleared.
clear license 3-4 Activating Licensed Featu res.
Enterasys D-Series CLI Reference 4-1 4 Configuring System Power and PoE The commands in this chapter allow you to review and set system power and .
set inlinepower threshold 4-2 Configuring System Power and PoE Example This example shows how to display system pow er properties: D2(su)->show inlinepower Detection.
show port inlinepower Enterasys D-Series CLI Reference 4-3 Example This example shows how to enable inline power trap messaging on module 1: D2(su)->set inlinepower trap enable 1 show port inlinepower Use this command to display all ports supporting Po E .
set port inlinepower 4-4 Configuring System Power and PoE Mode Switch command, read ‐ write. Example This example shows how to enable Po E on port fe.3.1 with critical priority: D2(su)->set port inlinepower fe .
Enterasys D-Series CLI Reference 5-1 5 Discovery Protocol Configuration This chapter descri bes how to configure discovery protocols. Configuring CDP Purpose To review and configure the En terasys CDP discovery protocol.
show cdp 5-2 Discovery Protocol C onfiguration show cd p Use this command to display the status of the CDP discov ery protocol and message interval on one or more ports.
set cdp state Enterasys D-Series CLI Reference 5-3 set cd p st ate Use this command to enable or disable the CDP discov ery protocol on one or more ports.
set cdp auth 5-4 Discovery Protocol C onfiguration set cd p auth Use this command to set a global CDP authentication code. Synt ax set cdp auth auth-code Parameters Default s None. Mode Switch command, read ‐ write.
set cdp hold-time Enterasys D-Series CLI Reference 5-5 Example This example shows how to set the CDP interv al frequency to 15 seconds: D2(su)->set c.
show neighbors 5-6 Discovery Protocol C onfiguration Mode Switch command, read ‐ write. Example This example shows how to reset the CDP state to auto .
Configuring Cisco Discovery Protocol Enterasys D-Series CLI Reference 5-7 Configuring Cisco Discovery Protocol Purpose To review and configure the Cisco discovery protocol. Discovery pr otocols are used to discov er network topology .
show ciscodp port info 5-8 Discovery Protocol C onfiguration Device ID : 001188554A60 Last Change : WED NOV 08 13:19:56 20 06 Ta b l e 5 ‐ 2 provides an explanation of the command output.
set ciscodp status Enterasys D-Series CLI Reference 5-9 set ciscod p st atus Use this command to enable or disable the Cisco discov ery protocol globally on the switch. Synt ax set ciscodp state { auto | disable | enable } Parameters Default s None.
set ciscodp holdtime 5-10 Discovery Protocol Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the Cisco DP timer to 120 seconds.
set ciscodp port Enterasys D-Series CLI Reference 5-11 Parameters Default s •S t a t u s : ena bled •V o i c e VLAN: none •T r u s t mode: trusted •C o S va lu e : 0 Mode Switch mode, read ‐ write.
clear ciscodp 5-12 Discovery Protocol Configuration •I f the switch port is configured to a Cisco DP trust state of untrusted ( trusted no.
Configuring Link Layer Disc overy Protocol and LLDP-MED Enterasys D-Series CLI Reference 5-13 Examples This example shows how to clear all the Cisco DP parameters back to the default settings.
Configuring Link Layer Disc overy Protocol and LLDP-MED 5-14 Discovery Protocol Configuration Configuration T asks The commands included in this implementation allow you to perform the f ollowing conf iguration tasks: For information about.
show lldp Enterasys D-Series CLI Reference 5-15 show lld p Use this command to display LLDP configuration information. Synt ax show lldp Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to display LLDP configuration information.
show lldp port trap 5-16 Discovery Protocol Configuration Example This example shows how to display LLDP port status information for all ports. D2(ro)->show lldp port status Tx-Enabled Ports : ge.1.1-60; g e.
show lldp port location-info Enterasys D-Series CLI Reference 5-17 Parameters Default s If port ‐ string is not specif ied, TL V configurat ion information will be display ed for all ports. Mode Switch command, read ‐ only .
show lldp port local-info 5-18 Discovery Protocol Configuration Ports Type Location -------- ------------- ----------------------- -- ge.1.1 ELIN 123456789 0 ge.
show lldp port local-info Enterasys D-Series CLI Reference 5-19 PoE Device : PSE device PoE Power Source : prim ary PoE MDI Supported/Enabled : yes/ yes PoE Pair Controllable/Used : fals e/spare PoE P.
show lldp port remote-info 5-20 Discovery Protocol Configuration show lld p port remote-info Use this command to display the remote system information stored for a remote device connected to a local port.
show lldp port remote-info Enterasys D-Series CLI Reference 5-21 Example This example shows how to display the remote system information stored for port ge .
set lldp tx-interval 5-22 Discovery Protocol Configuration set lld p tx-interval Use this command to set the time, in seconds, betw een successive LLDP frame transmissions initiated by changes in the LLDP local sy stem information.
set lldp trap-interval Enterasys D-Series CLI Reference 5-23 set lld p trap-interval Use this command to set the minimum interval betw een LLDP notifications se nt by this device.
set lldp port status 5-24 Discovery Protocol Configuration Example This example sets the numbe r of fast start LLDPDUs to be sent to 4.
set lldp port med-trap Enterasys D-Series CLI Reference 5-25 Default s None. Mode Switch command, read ‐ write. Example This example enables transmitting LLDP traps on ports ge .1.1 through ge .1.6. D2(rw)->set lldp port trap enable ge .
set lldp port tx-tlv 5-26 Discovery Protocol Configuration Parameters all Adds all optional TL Vs to transmitte d LLDPDUs. port ‐ desc Po r t Description optional basic LLDP TL V . Va l u e sent is ifDescr object defined in RFC 2863.
clear lldp Enterasys D-Series CLI Reference 5-27 Default s None. Mode Switch command, read ‐ write. Example This example configures the management address, MED capability , and MED location identification TL Vs to be sent in LLDPDUs by port ge .
clear lldp port trap 5-28 Discovery Protocol Configuration Synt ax clear lldp port status port-string Parameters Default s None. Mode Switch command, read ‐ write.
clear lldp port tx-tlv Enterasys D-Series CLI Reference 5-29 Parameters Default s None. Mode Switch command, read ‐ write. Example This example returns port ge .1.1 to the default LLDP ‐ MED trap state of disabled.
clear lldp port tx-tlv 5-30 Discovery Protocol Configuration Default s None. Mode Switch command, read ‐ write. Example This example disa bles the management address, .
Enterasys D-Series CLI Reference 6-1 6 Port Configuration This chapter descri bes the Po r t Configuration set of commands and how to use them.
Port Configuration Summary 6-2 Port Conf iguration Port Slot/Unit Parameters Used in the CLI The “unit” parameter is often used interchangeably wi th “module” in the standalone switch CLI to indicate a module slot location.
Reviewing Port Status Enterasys D-Series CLI Reference 6-3 Example This example shows how to configure por t ge.2.1 in the D2G124 ‐ 12 to operate with a 100BASE ‐ FX transceiver installed.
show port 6-4 Port Conf iguration show port Use this command to display whether or not one or more ports are enabled for switching .
show port counters Enterasys D-Series CLI Reference 6-5 (truncated) Status Status ------------ -------------- ------ - ------- -------- ------- ----------- -- fe .3.14 up up N/A N/A BaseT RJ45 Ta b l e 6 ‐ 6 provides an explanation of the command output.
show port counters 6-6 Port Conf iguration Examples This example shows how to display all counter statistics, including MIB2 network traffic and traffic through the device for fe .
Disabling / Enabling and Naming Ports Enterasys D-Series CLI Reference 6-7 Disabling / Enabling and Naming Port s Purpose To disable and re ‐ enable one or more ports, and to assign an alias to a port.
show port alias 6-8 Port Conf iguration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to enable fe.1.3: D2(su)->set port enable fe .1.3 show port alias Use this command to display the alias name for one or more po rts.
set port alias Enterasys D-Series CLI Reference 6-9 Parameters Default s If name is not specified, the alias assigned to the port will be cleared.
Setting Speed and Duplex Mode 6-10 Port Configur ation Setting S peed and Duplex Mode Purpose To review and set the operational speed in Mbps and the defaul.
set port speed Enterasys D-Series CLI Reference 6-11 set port speed Use this command to set the default speed of one or more ports. Th is setting only takes effect on ports that hav e auto ‐ negotiation disabled.
set port duplex 6-12 Port Configur ation Example This example shows how to display the default duplex setting for Ethernet port 14 in slot 3: D2(su)->show port duplex ge.3.14 default duplex mode is full on port ge.
Enabling / Disabling Jumbo Frame Support Enterasys D-Series CLI Reference 6-13 Enabling / Disabling Jumbo Frame Support Purpose To review , enable, and disable jumbo frame support on one or more ports.
set port jumbo 6-14 Port Configur ation set port jumbo Use this command to enable or disable jumbo frame support on one or more ports.
Setting Auto-Negotiation and Advertised Ability Enterasys D-Series CLI Reference 6-15 Setting Auto-Negotiation and Advertised Ability Purpose To review , disable or enable aut o ‐ negotiation, and to configure port adv ertisement for speed and duplex.
set port negotiation 6-16 Port Configur ation Example This example shows how to display auto ‐ negotiation status for 1 ‐ Gigabit Ethernet port 14 in sl ot 3: D2(su)->show port negotiation ge.
set port advertise Enterasys D-Series CLI Reference 6-17 Example This example shows how to display adv ertisement status for Gigabit ports 13 and 14: D2(su)->show port advertise ge.1.13- 14 ge.
clear port advertise 6-18 Port Configur ation Mode Switch command, read ‐ write. Example This example shows how to configure port 1 to advertise 1000BASE ‐ T full duplex: D2(su)->set port advertise ge.
Setting Flow Control Enterasys D-Series CLI Reference 6-19 Setting Flow Control Purpose To review , enable or disable po rt flow control. Flow control is used to manage the transmissi on between tw o devices as specified by IEEE 802.
set flowcontrol 6-20 Port Configur ation Default s None. Mode Switch command, read ‐ write. Example This example shows how to enable flow control: D2(su)->set .
Setting Port Link Traps and Link Flap Detection Enterasys D-Series CLI Reference 6-21 Setting Port Link T rap s and Link Flap Detection Purpose To disable or re ‐ enable link traps, di splay link trap status, and to configure the link flapping detection function.
set port trap 6-22 Port Configur ation Default s If port ‐ string is not specif ied, the trap status for all ports wi ll be display ed. Mode Switch command, read ‐ write. Example This example shows how to display link trap status for fe.
show linkflap Enterasys D-Series CLI Reference 6-23 Parameters Default s •I f not specified, information about all link flap detection settings will be display ed. •I f port ‐ string is not specif ied, information for all ports will be displayed.
show linkflap 6-24 Port Configur ation Examples This example shows how to display the global status of the link trap detection function: D2(rw)-.
set linkflap globalstate Enterasys D-Series CLI Reference 6-25 set linkflap globalst ate Use this command to globally enable or disable the link flap detection function.
set linkflap interval 6-26 Port Configur ation Mode Switch command, read ‐ write. Example This example shows how to enable the link trap monitoring on all ports.
clear linkflap action Enterasys D-Series CLI Reference 6-27 Default s None. Mode Switch mode, read ‐ write. Example This example shows how to set the link flap violation action on port fe.1.
set linkflap downtime 6-28 Port Configur ation Parameters Default s None. Mode Switch mode, read ‐ write. Example This example shows how to set the link flap threshold on port fe.1.4 to 5.
clear linkflap Enterasys D-Series CLI Reference 6-29 Parameters Default s If port ‐ string is not specif ied, all ports di sabled by a link flap violation will be ma de operational. Mode Switch mode, read ‐ write.
Configuring Broadcast Suppression 6-30 Port Configur ation Configuring Broadcast Suppression Purpose To review and set the broadcast suppression threshold for one or more ports.
set port broadcast Enterasys D-Series CLI Reference 6-31 set port broadcast Use this command to set the broadcast suppression threshold, in packets per se cond, on one or more ports.
clear port broadcast 6-32 Port Configur ation Default s None. Mode Switch command, read ‐ write. Example This example clears the broadcast threshold limit to 14881 pps for ports 1 through 5: D2(su)->clear port broadcast ge.
Port Mirroring Enterasys D-Series CLI Reference 6-33 Port Mirroring The D ‐ Series device allows you to mirror (or redirect) the traffic being switched on a port for the purposes of netw ork traffic analysis and connection assu rance.
set port mirroring 6-34 Port Configur ation Default s None. Mode Switch command, read ‐ only . Example This example shows how to display port mirroring information. In this case, fe.1.4 is configured as a source port and fe.
clear port mirroring Enterasys D-Series CLI Reference 6-35 Usage Note that LAG ports and their underlying physical ports , as described in “ Link Aggregation Control Protocol (LACP) ” on page 6 ‐ 36, cannot be mir rored.
Link Aggregation Control Protocol (LACP) 6-36 Port Configur ation Link Aggregation Control Protocol (LACP) Using multiple links simultaneously to increase bandwidth is .
Link Aggregation Control Protocol (LACP) Enterasys D-Series CLI Reference 6-37 •A means of identifying the set of capabi lities associated wi th each port and with each aggregator , as understood by a given device.
Link Aggregation Control Protocol (LACP) 6-38 Port Configur ation is, will block redundant paths). For information about build ing static aggregations, refer to set lacp static ( page 6 ‐ 42 ).
show lacp Enterasys D-Series CLI Reference 6-39 show lacp Use this command to display information about one or more aggregator ports.
set lacp 6-40 Port Configur ation set lacp Use this command to disable or enable the Link Aggregation Control Protocol (LACP) on the device. Synt ax set lacp {disable | enable} Parameters Default s None.
set lacp asyspr i Enterasys D-Series CLI Reference 6-41 set lacp asyspri Use this command to set the LACP system priority . Synt ax set lacp asyspri value Parameters Default s None. Mode Switch command, read ‐ write.
clear lacp 6-42 Port Configur ation Usage LACP will use this va lu e to form an oper key . Only underlying physical ports with oper keys matching th ose of their aggregators will be allowed to aggregate.
clear lacp static Enterasys D-Series CLI Reference 6-43 Default s If not specified, a key will be assigned according to the specified aggregator . For example a key of 4 wou ld be assigned to lag.
set lacp singleportlag 6-44 Port Configur ation set lacp singleportlag Use this command to enable or disable the formation of single port LAGs. Synt ax set lacp singleportlag { enable | dis able } Parameters Default s None.
show port lacp Enterasys D-Series CLI Reference 6-45 Example This example shows how to reset the single port LAG function back to disabled: D2(s.
set port lacp 6-46 Port Configur ation Port Instance: fe .1.12 ActorPort: 1411 PartnerAdminPort: 1411 ActorSystemPriority: 32768 PartnerOperPort: 1411 ActorPortPriority: 32768 PartnerAdminSystemPriori.
set port lacp Enterasys D-Series CLI Reference 6-47 Default s At least one parameter must be entered per port ‐ string. If enable or disable are not specified, port(s) will be enabled with the LACP parameters entered.
clear port lacp 6-48 Port Configur ation Usage LACP commands and parameters beginning with an “a” (such as aadminkey ) set actor val u e s .
clear port lacp Enterasys D-Series CLI Reference 6-49 Default s None. Mode Switch command, read ‐ write. Usage If you set a port to LACP passiv e using th.
Configuring Protected Ports 6-50 Port Configur ation Configuring Protected Port s The Protected Por t feature is used to prevent por ts from forw arding traffic to each other , even when they are on the same VLAN.
show port protected Enterasys D-Series CLI Reference 6-51 Example This example shows how to assign ports ge .1.1 through ge .1.3 to protected port group 1: D2(rw)->set port protected ge.1.
set port protected name 6-52 Port Configur ation Mode Switch command, read ‐ write. Example This example shows how to clear protected ports ge .1.1 through ge .1.3: D2(rw)->clear port protected ge.1.
clear port protected name Enterasys D-Series CLI Reference 6-53 Example This example shows how to show the name of protected port group 1: D2(ro)-&g.
clear port protected name 6-54 Port Configur ation.
Enterasys D-Series CLI Reference 7-1 7 SNMP Configuration This chapter descri bes the Simple Network Management Protocol (SNMP) set of commands and how to use them.
SNMP Configuration Summary 7-2 SNMP Configuration •S N M P network management applications, such as the Enterasys Ne tSight application, whic h communicate with agents to get statistics and alerts from the managed devices.
Reviewing SNMP Statistics Enterasys D-Series CLI Reference 7-3 Using SNMP Context s to Access S pecific MIBs By default, when operating from the switch CLI, D ‐ Series devices allow access to all SNMP MIBs or contexts.
show snmp engineid 7-4 SNMP Configuration Commands show snmp engineid Use this command to display the SNMP local engine ID. This is the SNMP v3 engine’ s administratively unique identifier .
show snmp counters Enterasys D-Series CLI Reference 7-5 show snmp counters Use this command to display SNMP traffic counter val u e s . Synt ax show snmp counters Parameters None. Default s None. Mode Switch command, read ‐ only .
show snmp counters 7-6 SNMP Configuration usmStatsUnknownEngineIDs = 0 usmStatsWrongDigests = 0 usmStatsDecryptionErrors = 0 Ta b l e 7 ‐ 14 provides an explanation of the command output. T able 7-14 show snmp counters Out put Det ails Output Field What It Displays.
show snmp counters Enterasys D-Series CLI Reference 7-7 snmpOutBadV alues Number of SNMP PDUs generat ed by the SNMP protocol entity with the value of the error-status field as "badV alue." snmpOutGenErrs N umber of SNMP PDUs generated by the SNMP protocol entity with the value of the error-status field as "genErr .
Configuring SNMP Users, Groups, and Communities 7-8 SNMP Configuration Configuring SNMP Users, Group s, and Communities Purpose To review and configure SNMP users, groups, and v1 and v2 communities.
set snmp user Enterasys D-Series CLI Reference 7-9 If user is not specified, information about all SNMP users will be disp layed. If remote is not specified , user information about the local SNMP engine will be displayed.
clear snmp user 7-10 SNMP Configuration Parameters Default s If remote is not specified , the user will be registered for the local SNMP engine. If authenticat ion is not specified, no authentication wi ll be applied.
show snmp group Enterasys D-Series CLI Reference 7-11 Example This example shows how to remove the SNMP user named “bill ” : D2(su)->clear snmp user bill show snmp group Use this command to display an SNMP group configuration.
set snmp group 7-12 SNMP Configuration Ta b l e 7 ‐ 16 provides an explanation of the command output. set snmp group Use this command to create an SNMP group. This associates SNMPv3 users to a group that shares common access privileges.
show snmp community Enterasys D-Series CLI Reference 7-13 Parameters Default s If not specified, settings related t o all security models will be cleared.
set snmp community 7-14 SNMP Configuration set snmp community Use this command to configure an SNMP community group. Synt ax set snmp community community [ securi tynam.
Configuring SNMP Access Rights Enterasys D-Series CLI Reference 7-15 Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete the community name “vip.
show snmp access 7-16 SNMP Configuration Default s If groupname is not specified, access information for all SNMP groups will be displayed. If security ‐ mode l is not specified, access information for all SNMP versions wil l be display ed.
set snmp access Enterasys D-Series CLI Reference 7-17 set snmp access Use this command to set an SNMP access configuration.
clear snmp access 7-18 SNMP Configuration Default s If security lev el is not specif ied, no authentication will be applied. If context is not specified, access will be enabled for the de fault context.
Configuring SNMP MIB Views Enterasys D-Series CLI Reference 7-19 Example This example shows how to clear SNMP ve rs i on 3 access for the “mis ‐ gro.
show snmp cont ext 7-20 SNMP Configuration Example This example shows how to display SNMP MIB view configuration information: D2(su)->show snmp view --- SNMP.
set snmp view Enterasys D-Series CLI Reference 7-21 Mode Switch command, read ‐ only . Usage An SNMP context is a collection of management information that can be accessed by an SNMP agent or entity .
clear snmp view 7-22 SNMP Configuration clear snmp view Use this command to delete an SNMP v3 MIB view . Synt ax clear snmp view viewname subtree Parameters Default s None.
show snmp targetparams Enterasys D-Series CLI Reference 7-23 Parameters Default s If targetPara ms is not specified, entries associated with all target parameters will be displayed. If not specified, entries of all storage types will be display ed.
set snmp targetparams 7-24 SNMP Configuration set snmp t argetp arams Use this command to set SNMP target parameters, a named set of security/authorization criteria used to generate a message to a target.
Configuring SNMP Target Addresses Enterasys D-Series CLI Reference 7-25 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to cl.
set snmp targetaddr 7-26 SNMP Configuration If not specified, entries of all storage types will be display ed for a target address.
set snmp targetaddr Enterasys D-Series CLI Reference 7-27 Parameters Default s If not specified, udpport will be set to 162 . If not specified, mask will be set to 255.255.255.255 If not specified, timeout will be set to 1500 .
clear snmp targetaddr 7-28 SNMP Configuration clear snmp t argetaddr Use this command to delete an SNMP target address entry . Synt ax clear snmp targetaddr targetAddr Parameters Default s None. Mode Switch command, read ‐ write.
show newaddrtrap Enterasys D-Series CLI Reference 7-29 Commands show newaddrtrap Use this comman d to display the global and port ‐ specif ic status of the SNMP new MAC addresses trap function.
set newaddrtrap 7-30 SNMP Configuration ge.1.1 disabled ge.1.2 disabled ge.1.3 disabled ge.1.4 disabled ge.1.5 disabled set newaddrtrap Use this command to enable or disable .
set snmp notify Enterasys D-Series CLI Reference 7-31 Parameters Default s If a notify name is not specified, all entries will be displayed.
clear snmp notify 7-32 SNMP Configuration command’ s tag parameter can be used to bind each entry to a target address using the set snmp targetaddr command (“ set snmp targetaddr ” on page 7 ‐ 26).
show snmp notifyfilter Enterasys D-Series CLI Reference 7-33 Example This example shows how to clear the SNMP notify configuration fo r “hello”: D2(su)-.
set snmp notifyfilter 7-34 SNMP Configuration set snmp notifyfilter Use this command to create an SN MP notify filter configuration.
show snmp notifypr ofile Enterasys D-Series CLI Reference 7-35 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete the SNMP notify filter “pilot1”: D2(su)->clear snmp notifyfilter pilo t1 subtree 1.
set snmp notifyprofile 7-36 SNMP Configuration Row status = active set snmp notifyprofile Use this command to create an SN MP notify filter profile configuration.
Creating a Basic SNMP Trap Configuration Enterasys D-Series CLI Reference 7-37 Mode Switch command, read ‐ write. Example This example shows how to delete SNMP no.
Creating a Basic SNMP Trap Configuration 7-38 SNMP Configuration Example This example shows how to: • Create an SNMP community called mgmt . • Configure a trap notification called TrapSink .
Enterasys D-Series CLI Reference 8-1 8 Spanning T ree Configuration This chapter describe s the Spanning Tr e e Configuration set of commands and how to use them. Sp anning T ree Configuration Summary Overview: Single, Rapid, and Mult iple S p anning T ree Protocols The IEEE 802.
Spanning Tree Configuration Summary 8-2 Spannin g Tr ee Configuration blocking for all traffic flowing between the tw o switches. The blocking links are effectively used only if the forw arding link goes down.
Configuring Spanning Tree Bridge Parameters Enterasys D-Series CLI Reference 8-3 learning and the priorit y vect or is wor s e than that already held by the port. If a disputed BPDU is receiv ed, the port is forced to the li stening state.
Configuring Spanning Tree Bridge Parameters 8-4 Spannin g Tr ee Configuration Commands For information about... Refer to p age... show spantree stat s 8-5 set spantree 8-7 show spantree version 8-7 se.
show spantree stats Enterasys D-Series CLI Reference 8-5 show sp antree st at s Use this command to display Spanning Tr e e information for one or more ports.
show spantree stats 8-6 Spannin g Tr ee Configuration Example This example shows how to display the device’ s Spanning Tr e e configuration: D2(su)->show s.
set spantree Enterasys D-Series CLI Reference 8-7 set sp antree Use this command to globally enable or disable the Spanning Tr e e protocol on the switch. Synt ax set spantree { disable | enable } Parameters Default s None.
set spantree version 8-8 Spannin g Tr ee Configuration Mode Switch command, read ‐ only . Example This example shows how to display Spanning Tr e e ve r si o .
show spantree bpdu-forwarding Enterasys D-Series CLI Reference 8-9 Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example shows how to r.
show spantree bridgeprioritymode 8-10 Spanning Tree Configura tion Default s By default BP DU forw arding is disabled . Mode Switch command, read ‐ write.
clear spantree bridgeprioritymode Enterasys D-Series CLI Reference 8-11 Parameters Default s None Mode Switch command, read ‐ write. Usage The mode affects the range of .
show spantree mstilist 8-12 Spanning Tree Configura tion show sp antree mstilist Use this command to display a list of Multiple Spanning Tr e e (MST) instances configured on the device. Synt ax show spantree mstilist Parameters None.
clear spantree msti Enterasys D-Series CLI Reference 8-13 clear sp antree msti Use this command to delete one or more Multiple Spanning Tr e e instances.
set spantree mstmap 8-14 Spanning Tree Configura tion set sp antree mstmap Use this command to map one or more filtering database IDs (FIDs) to a SID.
show spantree vlanlist Enterasys D-Series CLI Reference 8-15 D2(su)->clear spantree mstmap 2 show sp antree vlanlist Use this command to display the Spanning Tr e e ID(s) assigned to one or more VLANs.
set spantree mstcfgid 8-16 Spanning Tree Configura tion MAC address) have no t been changed. For information on using the set spantree mstcf gid .
set spantree priority Enterasys D-Series CLI Reference 8-17 Example This example shows how to reset the MST configuration identifier elements to default.
set spantree hello 8-18 Spanning Tree Configura tion Default s If sid is not specifie d, priority will be reset on Spanning Tr e e 0.
set spantree maxage Enterasys D-Series CLI Reference 8-19 Mode Switch command, read ‐ write. Example This example shows how to globally reset the Spanning .
set spantree fwddelay 8-20 Spanning Tree Configura tion Parameters None. Default s None. Mode Switch command, read ‐ write. Example This example shows how to globally .
clear spantree fwddelay Enterasys D-Series CLI Reference 8-21 clear sp antree fwddelay Use this command to reset the Spanning Tr e e forw ard delay to the default setting of 15 seconds. Synt ax clear spantree fwddelay Parameters None.
set spantree backuproot 8-22 Spanning Tree Configura tion set sp antree backuproot Use this command to enable or disable the Spanning Tr e e backup root function on the switch. Synt ax set spantree backuproot sid {disable | enable} Parameters Default s None.
show spantree tctrapsuppress Enterasys D-Series CLI Reference 8-23 Example This example shows how to reset the backup root function to disabled on S.
clear spantree tctrapsuppress 8-24 Spanning Tree Configura tion Usage By default, RSTP non ‐ edge (bridge) ports that transition to forw arding or blocking cause the switch to issue a topology change trap.
show spantree spanguard Enterasys D-Series CLI Reference 8-25 Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the protocol state migration machine on port 20: D2(su)->set spantree protomigration ge.
clear spantree spanguard 8-26 Spanning Tree Configura tion Mode Switch command, read ‐ write. Usage SpanGuard is designed to disable, or lock out an “edge” port when an unexpected BPDU is receiv ed.
show spantree spanguardtimeout Enterasys D-Series CLI Reference 8-27 show sp antree spanguard timeout Use this command to display the Spanning Tr e e SpanGuard timeout setting. Synt ax show spantree spanguardtimeout Parameters None.
clear spantree spanguardtimeout 8-28 Spanning Tree Configura tion clear sp antree spanguard timeout Use this command to reset the Spanning Tr e e SpanGuard timeout to the default val ue of 300 seconds.
clear / set spantree spanguardlock Enterasys D-Series CLI Reference 8-29 clear / set sp antree spanguardlock Use either of these commands to unlock one or more ports locked by the Spanning Tr e e SpanGuard function.
set spantree spanguardtrapenable 8-30 Spanning Tree Configura tion set sp antree sp anguard trapenable Use this command to enable or disable the sending of an SNMP trap message when SpanGuard has locked a port.
show spantree legacypathcost Enterasys D-Series CLI Reference 8-31 show sp antree legacyp athcost Use this command to display the default Spanning Tr e e path cost setting. Synt ax show spantree legacypathcost Parameters None.
clear spantree legacypathcost 8-32 Spanning Tree Configura tion clear sp antree legacyp athcost Use this command to set the Spanning Tr e e default val u e for legacy path cost to 802.1t val u e s .
Configuring Spanning Tree Port Parameters Enterasys D-Series CLI Reference 8-33 Configuring S p anning T ree Port Parameters Purpose To display and set Spanning Tr e e port parameters.
clear spantree portadmin 8-34 Spanning Tree Configura tion Example This example shows how to disable Spanning Tr e e on fe.
show spantree portpr i Enterasys D-Series CLI Reference 8-35 Example This example shows how to display port admin status for ge .
clear spantree portpri 8-36 Spanning Tree Configura tion Parameters Default s If sid is not specifie d, port priority will be set for Spanning Tr e e 0. Mode Switch command, read ‐ write. Example This example shows how to set the priority of fe.
show spantree adminpathcost Enterasys D-Series CLI Reference 8-37 show sp antree adminpathcost Use this command to display the admin path cost for a port on one or more Spanning Tr e e s .
clear spantree adminpathcost 8-38 Spanning Tree Configura tion Example This example shows how to set the admin path cost to 200 for fe.3 .2 on SID 1: D2(su)->set spantree adminpathcost fe .
set spantree adminedge Enterasys D-Series CLI Reference 8-39 Mode Switch command, read ‐ only . Example This example shows how to display the edge port status for fe.3.2: D2(su)->show spantree adminedge port fe .
clear spantree adminedge 8-40 Spanning Tree Configura tion Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset fe.1.11 as a non ‐ edge por t: D2(su)->clear spantree adminedge fe .
Configuring Spannin g Tree Loop Protect Parameters Enterasys D-Series CLI Reference 8-41 Configuring S p anning T ree Loop Protect Parameters Purpose To display and set Spanning Tr.
set spantree lp 8-42 Spanning Tree Configura tion set sp antree lp Use this command to enable or disable the Loop Protect feature per port and optionally , per SID. The Loop Protect feature is disabled by default.
clear spantree lp Enterasys D-Series CLI Reference 8-43 Default s If no port ‐ string is specified, status is displayed for all ports. If no SID is specified, SID 0 is assumed. Mode Switch command, read ‐ only .
clear spantree lplock 8-44 Spanning Tree Configura tion Parameters Default s If no port ‐ string is specified, status is displayed for all ports. If no SID is specified, SID 0 is assumed.
set spantree lpcapablepartner Enterasys D-Series CLI Reference 8-45 set sp antree lpcapablep artner Use this command to specify per port whether the link partner is Loop Protect capable. Se e “Loop Protect” on page 2.
clear spantree lpcapablepartner 8-46 Spanning Tree Configura tion Default s If no port ‐ string is specified, Loop Protect capability for link partners is display ed for all ports. Mode Switch command, read ‐ only .
show spantree lpthreshold Enterasys D-Series CLI Reference 8-47 Default s None. The default ev ent threshold is 3. Mode Switch command, read ‐ write.
set spantree lpwindow 8-48 Spanning Tree Configura tion Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the Loop Pr.
clear spantree lpwindow Enterasys D-Series CLI Reference 8-49 Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows how to di.
show spantree lptrapenable 8-50 Spanning Tree Configura tion Default s None. Mode Switch command, read ‐ write. Usage Loop Protect traps are sent when a Loop .
set spantree disputedbpduthreshold Enterasys D-Series CLI Reference 8-51 Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the Loop Protect ev ent notification state to the default of disabled.
show spantree disputedbpduthreshold 8-52 Spanning Tree Configura tion Example This example shows how to set the disputed BPDU threshold va l u e to 5: D.
show spantree nonforwardingreason Enterasys D-Series CLI Reference 8-53 show sp antree nonforwardingreason Use this command to display the reason for placing a port in a non ‐ forw arding state du e to an exceptional condition.
show spantree nonforwardingreason 8-54 Spanning Tree Configura tion.
Enterasys D-Series CLI Reference 9-1 9 802.1Q VLAN Configuration This chapter descri bes the D ‐ Series system’ s capabilities to implement 802.
Viewing VLANs 9-2 802.1Q VLAN Configuration If the D ‐ Series device is to be configured for multiple VLANs, it may be desirable to configure a management ‐ only VLAN.
show vlan Enterasys D-Series CLI Reference 9-3 Command show vlan Use this command to display all information related to one or more VLANs.
show vlan 9-4 802.1Q VLAN Configuration T able 9-25 show vlan Output Det ails Output Fi eld What It Disp la y s. .. VLAN VLAN ID. NAME Name assigned to the VLAN. S tatus Whether it is enabled or disabled . VLAN T ype Whether i t is perman ent (static) or dynamic .
Creating and Naming Static VLANs Enterasys D-Series CLI Reference 9-5 Creating and Naming St atic VLANs Purpose To create a new static VLAN, or to enable or disable existi ng VLAN(s). Commands set vlan Use this command to create a new static IEEE 802.
set vlan name 9-6 802.1Q VLAN Configuration set vlan name Use this command to set or change the ASCII name for a new or existing VLAN. Synt ax set vlan name vlan-list vlan-name Parameters Default s None.
clear vlan name Enterasys D-Series CLI Reference 9-7 clear vlan name Use this command to remove the name of a VLAN from the VLAN list. Synt ax clear vlan name vlan-list Parameters Default s None. Mode Switch command, read ‐ write.
Assigning Port VLAN IDs ( PVIDs) and Ingress Filtering 9-8 802.1Q VLAN Configuration Assigning Port VLAN IDs (PVIDs) and Ingress Filtering Purpose To assign default VLAN IDs to .
set port vlan Enterasys D-Series CLI Reference 9-9 fe .2.5 is set to 1 fe .2.6 is set to 1 set port vlan Use this command to configure the PVID (port VLAN identifier) for one or more ports.
show port ingress filter 9-10 802.1Q VLAN Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset ports fe.1.3 throu gh 11 to a VLAN ID of 1 (Host VLAN): D2(su)->clear port vlan fe .
set port ingress filter Enterasys D-Series CLI Reference 9 -11 set port ingress filter Use this command to discard all frames received with a VLAN ID that don’ t match the port’ s VLAN egress list.
set port discard 9-12 802.1Q VLAN Configuration Mode Switch command, read ‐ only . Example This example shows how to display the frame discard mode for fe.
Configuring the VLAN Egress List Enterasys D-Series CLI Reference 9 -13 Configuring the VLAN Egress List Purpose To assign or remove ports on the egress list of a particular VLAN.
set vlan forbidden 9-14 802.1Q VLAN Configuration Mode Switch command, read ‐ write. Example This example shows you how to show VLAN egr ess information for fe.
set vlan egress Enterasys D-Series CLI Reference 9 -15 set vlan egress Use this command to add ports to the VLAN egress list for the device, or to prevent one or mor e ports from participating in a VLAN.
show vlan dynamicegress 9-16 802.1Q VLAN Configuration Synt ax clear vlan egress vlan-list port-string [ for bidden ] Parameters Default s If forbidden is not specified, tagged and untagged settings will be cleared.
set vlan dynamicegress Enterasys D-Series CLI Reference 9 -17 Example This example shows how to display the dynamic egress status for VLANs 50 ‐ 55: D.
Setting the Host VLAN 9-18 802.1Q VLAN Configuration Setting the Host VLAN Purpose To configure a host VLAN that only select devices are allow ed to access. This se cures the host port for management ‐ only tasks.
clear host vlan Enterasys D-Series CLI Reference 9 -19 Parameters Default s None. Mode Switch command, read ‐ write. Usage The host VLAN should be a secure VLAN whe re only designated users ar e allowed access.
Enabling/Disabling GVRP (GARP VLAN Registration Protocol) 9-20 802.1Q VLAN Configuration Enabling/Disabling GVRP (GARP VLAN Registration Protocol) About GARP VLAN Registration Prot ocol (GVRP) The .
Enabling/Disabling GVRP (GARP VLAN Registration Protocol) Enterasys D-Series CLI Reference 9 -21 Figure 9-1 Example of VLAN Propagation via GVRP Purpose To dynamically create VLANs acr oss a switched netw ork.
show gvrp 9-22 802.1Q VLAN Configuration show gvrp Use this command to display GVRP configuration information. Synt ax show gvrp [ port-string ] Parameters Default s If .
set gvrp Enterasys D-Series CLI Reference 9 -23 Example This example shows how to display GARP timer information on ports 1 through 10 in slot 1: D2(su)->show garp timer fe .
clear gvrp 9-24 802.1Q VLAN Configuration Mode Switch command, read ‐ write. Examples This example shows how to enable GVRP globally on the device: D2.
set garp timer Enterasys D-Series CLI Reference 9 -25 Default s None. Mode Switch command, read ‐ write. Usage The setting of these timers is critical and should only be changed by personnel familiar with the 802.
set garp timer 9-26 802.1Q VLAN Configuration.
Enterasys D-Series CLI Reference 10-1 10 Dif ferentiated Services Configuration This chapter descri bes the Differentiated Services (Diffserv) set of commands and how to use them.
Globally Enabling or Disabling Diffserv 10-2 Differentiated Services Configu ration Globally Enabling or Disabling Diffserv Purpose To globally enable or disable Diffserv on the device.
Creating Diffserv Classes and Matching Conditions Enterasys D-Series CLI Reference 10-3 Creating Diffserv Classes and Matching Conditions Purpose To review , create, and configure Diffser v classes and matching conditions.
show diffserv class 10-4 Differentiated Services Configu ration show diffserv class Use this command to display information about Diffserv classes. Synt ax show diffserv class { summary | detai led classname } Parameters Default s None.
set diffserv class delete Enterasys D-Series CLI Reference 10-5 Example This example shows how to create a Diffserv class called “admin”: D2(rw)->set.
set diffserv class match 10-6 Differentiated Services Configu ration Parameters every classname Matches all packets to a specific class. dstmac | scrmac classname macaddr macmask Matches to a specific class based on dest ination or source MAC address.
set diffserv class match Enterasys D-Series CLI Reference 10-7 Default s None. Mode Switch command, read ‐ write. Usage Any policy that is applied must be com posed of rules that come from only one of the foll owing four groups.
set diffserv class rename 10-8 Differentiated Services Configu ration – Destination IP addre ss ( dstip ) –V L A N ID ( vlan) Yo u cannot create and add a class to a policy before adding any rules (match conditions) to the class.
Configuring Diffserv Poli cies and Assigning Classes Enterasys D-Series CLI Reference 10-9 Example This example shows how to rename the Diffserv “a dmin” class .
set diffserv policy create 10-10 Differentiated Services Config uration Example This example shows how to display a summary of Diffserv policy information.
set diffserv policy class Enterasys D-Series CLI Reference 10-11 Mode Switch command, read ‐ write. Usage In order to delete a policy you must first remov.
set diffserv policy police style simple 10-12 Differentiated Services Config uration Parameters Default s None. Mode Switch command, read ‐ write.
set diffserv policy police action conform Enterasys D-Series CLI Reference 10-13 set diffserv policy police action conform Use this command to configure traffic policing actions for pac kets that conform to associated Diffserv classifications.
set diffserv policy rename 10-14 Differentiated Services Config uration Default s None. Mode Switch command, read ‐ write. Example This example shows how to set the .
show diffserv service info Enterasys D-Series CLI Reference 10-15 Commands show diffserv service info Use this command to display information about Diffserv service ports. Synt ax show diffserv service info { summary | detailed port-string } { in } Parameters Default s None.
set diffserv service 10-16 Differentiated Services Config uration Parameters Default s None. Mode Switch command, read ‐ only . Example This example shows how to display a detailed incoming traffic statistics about servic e port ge.
DiffServ Configuration Examples Enterasys D-Series CLI Reference 10-17 DiffServ Configuration Examples Ty p i c a l l y , yo u wo u ld use the Diffserv command set to complete configuration tasks in the following order: 1.
DiffServ Configuration Examples 10-18 Differentiated Services Config uration.
Enterasys D-Series CLI Reference 11-1 11 Policy Classification Configuration This chapter descri bes the Po l i c y Classification set of commands and how to use them.
show policy profile 11-2 Policy Classifica tion Configuration Commands show policy profile Use this command to display policy profil e information.
set policy profile Enterasys D-Series CLI Reference 11-3 :IPDest(13) ,IPFrag(14),UDPSrcPort(15), :UDPDestPor t(16),TCPSrcPort(17),TCPDestPort(18), :ICMPType(1 9),Unknown(20),IPTOS(21), :IPProto(22 ),U.
clear policy profile 11-4 Policy Classifica tion Configuration Parameters Default s If optional parameters are not specified, none will be applied.
clear policy profile Enterasys D-Series CLI Reference 11-5 Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete policy prof.
Configuring Clas sification Rules 11-6 Policy Classifica tion Configuration Configuring Classification Rules Purpose To review , create, assign, and unassign classification rules to policy profiles. This maps user profiles to protocol ‐ based frame filt ering policies.
show policy rule Enterasys D-Series CLI Reference 11-7 Default s If verbose is not s pecified, summary informat ion will be display ed.
show policy capability 11-8 Policy Classifica tion Configuration |admin|Port |ge.1.1 |16|ge.1.1 | A|NV| | 1|?| |admin|Port |ge.1.2 |16|ge.1.2 | A|NV| | 1|?| |admin|Port |ge.1.3 |16|ge.1.3 | A|NV| | 1|?| |admin|Port |ge.1.4 |16|ge.1.4 | A|NV| | 1|?| |admin|Port |ge.
show policy capability Enterasys D-Series CLI Reference 11-9 Mode Switch command, read ‐ only . Usage Use this command to display de tailed policy classification capabilities supported by you r D ‐ Series device.
set policy ru le 11-10 Policy Classification Configur ation |Ether II packet type | | | X | X | X | X | | | | |LLC DSAP/SSAP/CTRL | | | | | | | | | | |VLAN tag | | | | | | | | | | |Replace tci | | | |.
set policy rule Enterasys D-Series CLI Reference 11-11 Default s None. Mode Switch command, read ‐ write. Usage Ta b l e 1 1 ‐ 30 provides the set policy rule data .
clear policy rule 11-12 Policy Classification Configur ation Examples This example shows how to use Ta b l e 1 1 ‐ 30 to assign a rule to policy p.
clear policy rule Enterasys D-Series CLI Reference 11-13 Parameters The following parameters apply to deleting an admin rule. The following parameters apply to deleting a classification rule.
clear policy all-rules 11-14 Policy Classification Configur ation clear policy all-rules Use this command to remove all policy classification rules . Synt ax clear policy all-rules Parameters None. Default s None. Mode Switch command, read ‐ write.
Assigning Ports to Policy Profiles Enterasys D-Series CLI Reference 11-15 Assigning Port s to Policy Profiles Purpose To assign and unassign ports to policy profiles. Commands set policy port Use this command to assign ports to a policy profile.
clear policy port 11-16 Policy Classification Configur ation clear policy port Use this command to remove a poli cy profile from one or more po rts. Synt ax clear policy port port-string profil e-index Parameters Default s None.
Configuring Policy Class of Service (CoS) Enterasys D-Series CLI Reference 11-17 Configuring Policy Class of Service (CoS) The D ‐ Series supports Class of Service (CoS), .
Configuring Policy Clas s of Service (CoS) 11-18 Policy Classification Configur ation ------------------------------------ ---------------------------------- Port Group Name :Users Port Group :1 Port Type :0 Assigned Ports : fe ge.
set cos state Enterasys D-Series CLI Reference 11-19 4. In the CoS settings table, configure a CoS setting for CoS index 1, which has a priority of 0. We enter the IRL refere nce, created in the previous step.
show cos state 11-20 Policy Classification Configur ation Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to enable Class.
set cos settings Enterasys D-Series CLI Reference 11-21 Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear the CoS sta.
clear cos settin g s 11-22 Policy Classification Configur ation •T o S This va l u e can be set per class of service, but is not required.
set cos port-config Enterasys D-Series CLI Reference 11-23 Parameters Default s If not specified, all CoS entries will be display ed.
show cos port-config 11-24 Policy Classification Configur ation Default s None. Mode Switch command, read ‐ write. Usage CoS IRL port groups are identified by group number and the type of ports in the group, in the form of group#.
clear cos port-config Enterasys D-Series CLI Reference 11-25 Default s The show cos port ‐ config command by itsel f will show all Po r t Groups. Mode Switch command, read ‐ only . Example This example shows all inbound rate limiting port groups.
set cos port-resource 11-26 Policy Classification Configur ation Default s None. Mode Switch command, read ‐ write. Usage The default port group 0.0 cannot be deleted. Example This example deletes all Por t Groups except for the Default group 0.
show cos port-resource Enterasys D-Series CLI Reference 11-27 Usage CoS port resources are where actual physical rate limiters are configured. Resources map directly to the number of rate limiters supported by the port type.
clear cos port-resource 11-28 Policy Classification Configur ation Group Index Resource Type Unit Ra te Rate Limit Type Action ----------- -------- ---- ---- ----- ----- --------------- ------ 2.0 1 irl kbps 10000 drop none clear cos port-resource Use this command to set the inbound rate limit in Kbps.
show cos referenc e Enterasys D-Series CLI Reference 11-29 Parameters Default s None. Mode Switch command, read ‐ write. Usage The CoS refere nce table maps the user .
clear cos reference 11-30 Policy Classification Configur ation Parameters Default s If irl is not specified, all CoS reference information is display ed. If a specific port group is not specified, information for all port groups is display ed.
show cos unit Enterasys D-Series CLI Reference 11-31 Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear the CoS inboun.
show cos port-type 11-32 Policy Classification Configur ation Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear the CoS .
Enterasys D-Series CLI Reference 12-1 12 Port Priority and Rate Limiting Configuration This chapter describes the Po r t Priority and Rate Lim iting set of commands and how to use them.
show port priority 12-2 Port Priority and Rate Limiting Configura tion •D i s p l a y the current traffic class m apping ‐ to ‐ priority of each port. •S e t each port to transmit frames according to 802.
clear port priority Enterasys D-Series CLI Reference 12-3 Synt ax set port priority port-string priori ty Parameters Default s None. Mode Switch command, read ‐ write. Usage The set port priority command will not change the 802.
Configuring Priority to Transmit Queue Mapping 12-4 Port Priority and Rate Limiting Configura tion Example This example shows how to reset fe.
set port priority-queue Enterasys D-Series CLI Reference 12-5 Example This example shows how to dis play priority queue information for ge .
clear port priority-queue 12-6 Port Priority and Rate Limiting Configura tion clear port priority-queue Use this command to reset port priority queue setting s back to defaults for one or more ports.
set port txq Enterasys D-Series CLI Reference 12-7 Parameters Default s If the port ‐ string is not specified, the QoS setting of all physical ports will be displayed. Mode Switch command, read ‐ only .
clear port txq 12-8 Port Priority and Rate Limiting Configura tion Usage Queues can be set for strict priority (SP) or weig h te d round ‐ robin (WRR). If set for WRR mode, wei gh ts may be assigned to those queues with this command.
clear port txq Enterasys D-Series CLI Reference 12-9 Example This example shows how to clear transmit queue va l u e s on ge .
Configuring Port Traffic Rate Limiting 12-10 Port Priority and Ra te Limiting Configuration Configuring Port T raffic Rate Limiting Purpose To limit the rate of inbound traffi c on the D ‐ Series device on a per port/priority basis.
show port ratelimit Enterasys D-Series CLI Reference 12-11 Example This example shows how to display the current rate li miting information for fe.2.1: D2(su)-> show port ratelimit fe.2.1 Global Ratelimiting status is disabl ed.
set port ratelimit 12-12 Port Priority and Ra te Limiting Configuration set port ratelimit Use this command to configure the traffic rate limiting status and threshold (in kilobytes per second) for one or more ports.
clear port ratelimit Enterasys D-Series CLI Reference 12-13 clear port ratelimit Use this command to clear rate limiting parameters for one or more ports.
clear port ratelimit 12-14 Port Priority and Ra te Limiting Configuration.
Enterasys D-Series CLI Reference 13-1 13 IGMP Configuration This chapter descri bes the IGMP Configuration set of commands and how to use them.
Configuring IGMP at Layer 2 13-2 IGMP Config uration multicast switch/router it passes through to ensure that traffic is only passed to the hosts that subscribed to this service.
set igmpsnooping adminmode Enterasys D-Series CLI Reference 13-3 the system, refer to “ set igmpsnooping adminmode ” on page 13 ‐ 3.
set igmpsnooping groupmembershipinterval 13-4 IGMP Config uration Parameters Default s None. Mode Switch command, read ‐ write. Usage In order for IGMP snooping to be.
set igmpsnooping maxresponse Enterasys D-Series CLI Reference 13-5 Example This example shows how to set the IGMP group member ship interv al to 250 .
set igmpsnooping add-static 13-6 IGMP Config uration Default s None. Mode Switch command, read ‐ write. Usage This timer is for expiring the switch from the multicast database.
set igmpsnooping remove-static Enterasys D-Series CLI Reference 13-7 set igmp snooping remove-st atic This command deletes a static IGMP entry or removes one or mor e new ports from an existing entry .
show igmpsnooping mfdb 13-8 IGMP Config uration Example This example displays the static IGMP ports for VLAN 20. D2(su)->show igmpsnooping static 20 ------------------------------------ ----------------------------------------- --- Vlan Id = 20 Static Multicast Group Addr ess = 233.
clear igmpsnooping Enterasys D-Series CLI Reference 13-9 Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear all IGMP snooping entries: D2(su)->clear igmpsnooping Are you sure you want to clear all I GMP snooping entries? (y/n) y IGMP Snooping Entries Cleared.
clear igmpsnooping 13-10 IGMP Configuration.
Enterasys D-Series CLI Reference 14-1 14 Logging and Network Management This chapter descri bes switch ‐ related logging and netw ork management commands and how to use them.
show logging ser ver 14-2 Logging and Network Manageme nt show logging server Use this command to display the Syslog configuration for a particul ar serv er .
set logging server Enterasys D-Series CLI Reference 14-3 set logging server Use this command to configure a Syslog server .
clear logging server 14-4 Logging and Network Manageme nt Example This command shows how to enable a Syslog serv er configuration for index 1, IP address 134.
set logging default Enterasys D-Series CLI Reference 14-5 Example This command shows how to display the Syslog serv er default val u e s. For an explanation of the command output, refer back to Ta b l e 1 4 ‐ 32 on page 14 ‐ 2.
clear logging default 14-6 Logging and Network Manageme nt clear logging default Use this command to reset logg ing default va lu e s . Synt ax clear logging default {[ facility ] [ severity ] [ port ]} Parameters Default s At least one optional parameter must be enter ed.
set logging application Enterasys D-Series CLI Reference 14-7 Mode Switch command, read ‐ only . Example This example shows how to display system logging information pertaining to the SNMP application.
clear logging application 14-8 Logging and Network Manageme nt Default s If level is not specified, none will be applied.
show logging local Enterasys D-Series CLI Reference 14-9 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the logging severity lev el to 6 for SNMP .
clear logging local 14-10 Logging and Network Manage ment Parameters Default s None. Mode Switch command, read ‐ write. Example This command shows how to enable loggi.
show logging buffer Enterasys D-Series CLI Reference 14-11 Default s None. Mode Switch command, read ‐ only . Example This example shows a porti on of the information display ed with the show logging buffer command: D2(su)->show logging buffer <165>Sep 4 07:43:09 10.
Monitoring Network Events and Status 14-12 Logging and Network Manage ment Monitoring Network Event s and St atus Purpose To display swit ch events and command history , to.
show history Enterasys D-Series CLI Reference 14-13 show history Use this command to display the size (in lines) of the history buffer . Synt ax show history Parameters None. Default s None. Mode Switch command, read ‐ only .
ping 14-14 Logging and Network Manage ment ping Use this command to send ICMP echo ‐ request packets to another node on the netw ork from the switch CLI. Synt ax ping host Parameters Default s None.
disconnect Enterasys D-Series CLI Reference 14-15 D2(su)->show users Session User Location -------- ----- ------------------- ------- * telnet rw 134.
Managing Switch Network Addresses and Routes 14-16 Logging and Network Manage ment Managing Switch Network Addresses and Routes Purpose To display or delete switch ARP table entries, and to display MAC address information.
set arp Enterasys D-Series CLI Reference 14-17 Example This example shows how to display the ARP table: D2(su)->show arp LINK LEVEL ARP TABLE IP Address Phys Address Flags Interface ------------------------------------ ----------------- 10.
clear arp 14-18 Logging and Network Manage ment clear arp Use this command to delete a specific entry or all entries from the switch’ s ARP tab le. Synt ax clear arp { ip-address | all } Parameters Default s None.
show mac Enterasys D-Series CLI Reference 14-19 Default s If not specified, waittime will be set to 5 seconds. If not specified, first ‐ tt l will be set to 1 second. If not specified, max ‐ ttl will be set to 30 seconds.
show mac agetime 14-20 Logging and Network Manage ment Default s If no parameters are specified, all MAC addresses for the device will be display ed.
set mac agetime Enterasys D-Series CLI Reference 14-21 Default s None. Mode Switch command, read ‐ only . Example This example shows how to display the MAC ti.
set mac algorithm 14-22 Logging and Network Manage ment Mode Switch command, read ‐ only . Example This example shows how to reset the MAC timeout period to the default val u e of 300 seconds.
clear mac algorithm Enterasys D-Series CLI Reference 14-23 Parameters None. Default s None. Mode Switch command, read ‐ only . Example This example shows the output of this command. D2(su)->show mac algorithm Mac hashing algorithm is mac-crc16-u pperbits.
clear mac address 14-24 Logging and Network Manage ment Parameters Default s If no port ‐ string is defined, the command will apply to all ports.
show mac unreserved-flood Enterasys D-Series CLI Reference 14-25 show mac unreserved-flood Use this command to display the state of multicast flood protection. Synt ax show mac unreserved-flood Parameters None. Default s None.
Configuring Simple Network Time Protocol (SNTP) 14-26 Logging and Network Manage ment Example This example enables multicast flood protection.
show sntp Enterasys D-Series CLI Reference 14-27 Default s None. Mode Switch command, read ‐ only . Example This example shows how to display SNTP client sett.
set sntp clien t 14-28 Logging and Network Manage ment set sntp client Use this command to set the SNTP operation mode. Synt ax set sntp client { broadcast | unicast | disab le } Parameters Default s None. Mode Switch command, read ‐ write.
set sntp server Enterasys D-Series CLI Reference 14-29 Mode Switch command, read ‐ write. Example This example shows how to clear the SNTP client’ s ope.
set sntp poll-interval 14-30 Logging and Network Manage ment Mode Switch command, read ‐ write. Example This example shows how to remov e the serv er at IP address 10.21.1.100 from the SNTP serv er list: D2(su)->clear sntp server 10.
set sntp poll-retry Enterasys D-Series CLI Reference 14-31 Example This example shows how to clear the SNTP poll interval: D2(su)->clear sntp poll-interval set sntp poll-retry Use this command to set the number of poll retries to a unicast SNTP serv er .
set sntp poll-timeout 14-32 Logging and Network Manage ment set sntp poll-timeout Use this command to set the poll timeout (in seconds) for a response to a unicast SNTP request. Synt ax set sntp poll-timeout timeout Parameters Default s None.
set timezone Enterasys D-Series CLI Reference 14-33 Parameters Default s If you enter a timezone name without specifying an offset in hours and minutes, the default is an offset from UTC of 0 hours and 0 minutes.
Configuring Node Aliases 14-34 Logging and Network Manage ment Configuring Node Aliases Purpose To review , disable, and re ‐ enable node (port) alia s functionality , which determines what network protocols are running on one or more ports.
set nodealias Enterasys D-Series CLI Reference 14-35 set nodealias Use this command to enable or disable a node alias agent on one or more ports, or set the maximum number of alias entries per port.
clear nodealias config 14-36 Logging and Network Manage ment Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to reset the node alias configuration on fe .
Enterasys D-Series CLI Reference 15-1 15 RMON Configuration This chapter descri bes the commands used to configure RMON on a D ‐ Series switch.
RMON Monitoring Group Functions 15-2 RMON Configuration History Records periodic st atistical samples from a network. Samp le period, number of samples and item(s) sampled.
Statistics Group Commands Enterasys D-Series CLI Reference 15-3 S t atistics Group Commands Purpose To display , configure, and clear RMON statistics. Commands show rmon st ats Use this command to display RMON statistics measured for one or more ports.
set rmon stats 15-4 RMON Configuration Multicast Pkts = 0 128 - 25 5 Octets = 0 CRC Errors = 0 256 - 51 1 Octets = 0 Undersize Pkts = 0 512 - 102 3 Octets = 0 Oversize Pkts = 0 1024 - 151 8 Octets = 0 Fragments = 0 Ta b l e 1 5 ‐ 40 provides an explanation of the command output.
clear rmon stats Enterasys D-Series CLI Reference 15-5 Mode Switch command, read ‐ write. Example This example shows how to delete RMON statistics entry 2.
History Group Commands 15-6 RMON Configuration History Group Commands Purpose To display , configure, and clear RMON history properties and statistics. Commands show rmon history Use this command to display RMON history properties and statistics.
set rmon history Enterasys D-Series CLI Reference 15-7 Sample 2779 Interval Start: 1 days 0 hours 2 minutes 22 seconds Drop Events = 0 Undersiz e Pkts = 0 Octets = 0 Oversize Pkts = 0 Packets = 0 Frag.
clear rmon history 15-8 RMON Configuration Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to delete RMON history .
Alarm Group Commands Enterasys D-Series CLI Reference 15-9 Alarm Group Commands Purpose To display , configure, and clear RMON alarm entries and properties. Commands show rmon alarm Use this command to display RMON alarm entrie s.
set rmon alarm properties 15-10 RMON Configuration set rmon alarm properties Use this command to configure an RMON alarm entr y , or to create a new alarm entry with an unused alarm index number .
set rmon alarm status Enterasys D-Series CLI Reference 15-11 Default s interval ‐ 3600 seconds type ‐ absolute startup ‐ rising rthresh ‐ 0 fthresh ‐ 0 revent ‐ 0 fevent ‐ 0 owner ‐ monitor Mode Switch command, read ‐ write.
clear rmon alarm 15-12 RMON Configuration Parameters Default s None. Mode Switch command, read ‐ write. Usage An RMON alarm entry can be created using this .
Event Group Commands Enterasys D-Series CLI Reference 15-13 Event Group Commands Purpose To display and clear RMON ev ents, and to configure RMON event properties. Commands show rmon event Use this command to display RMON event entry properties.
set rmon event properties 15-14 RMON Configuration set rmon event properties Use this command to configure an RMON event entry , or to create a new eve nt entry with an unused event index number .
set rmon event status Enterasys D-Series CLI Reference 15-15 Example This example shows how to create and enable an RMON event entry called “STP .
clear rmon event 15-16 RMON Configuration Default s None. Mode Switch command, read ‐ write. Example This example shows how to clear RMON event 1: D2(rw)->.
Filter Group Commands Enterasys D-Series CLI Reference 15-17 Filter Group Commands The packet capture and filter function is di sabled by default. Only one interface can be configured for capturing and filtering at a time.
set rmon channel 15-18 RMON Configuration Example This example shows how to display RMON channel information for fe .
clear rmon channel Enterasys D-Series CLI Reference 15-19 Example This example shows how to create an RMON channel entry: D2(rw)->set rmon channel 54313 fe .
set rmon filter 15-20 RMON Configuration D2(rw)->show rmon filter Index= 55508 Channel Index= 628 EntryStatus= valid ------------------------------------ ---------------------- Data Offset 0 PktSta.
clear rmon filter Enterasys D-Series CLI Reference 15-21 Mode Switch command, read ‐ write. Example This example shows how to create RMON filter 1 and .
Packet Capture Commands 15-22 RMON Configuration Packet Capture Commands Note that packet capture filter is sampling only and does not guarantee receipt of back ‐ to ‐ back packets.
set rmon capture Enterasys D-Series CLI Reference 15-23 Owner monitor captureEntry= 1 Buff.control= 28062 ------------------------------------ -------- Pkt ID 9 Pkt time 1 days 0 hours 51 minutes 15 s.
clear rmon capture 15-24 RMON Configuration Mode Switch command, read ‐ write. Example This example shows how to create RMON capture entry 1 to .
Enterasys D-Series CLI Reference 16-1 16 DHCP Server Configuration This chapter descri bes the commands to configure the IPv4 DHCP serv er functionality on a D ‐ Series switch.
DHCP Overview 16-2 DHCP Server Configura tion • Boot file •D H C P options as defined by RFC 2132 Configuring a DHCP Server For DHCP to function on .
Configuring General DHCP Server Parameters Enterasys D-Series CLI Reference 16-3 Configuring General DH CP Server Parame ters Purpose To configure DHCP server parameters, and to display and clear address binding information, server statistics, and conflict information.
set dhcp bootp 16-4 DHCP Server Configura tion Example This example enables DHCP server functionality . D2(rw)->set dhcp enable set dhcp bootp Use this command to enable or disable automatic address allocation for BOOTP clients.
show dhcp conflict Enterasys D-Series CLI Reference 16-5 Example This example enables DHCP conflict logging. D2(rw)->set dhcp conflict logging show dhcp conflict Use this command to display conflict information, for one address or al l addresses.
set dhcp exclude 16-6 DHCP Server Configura tion Default s None. Mode Switch command, read ‐ write. Examples This example disables DHCP conflict logging. D2(rw)->clear dhcp conflict logging This example clears the conflict information for the IP address 192.
clear dhcp exclude Enterasys D-Series CLI Reference 16-7 clear dhcp exclude Use this command to clear the configured IP addresses that the DHCP serv er sh ould not assign to DHCP clients.
clear dhcp ping 16-8 DHCP Server Configura tion clear dhcp ping Use this command to reset the number of ping packets sent by the DHCP server back to the default val u e of 2.
clear dhcp binding Enterasys D-Series CLI Reference 16-9 192.0.0.13 00:33:44:56:22:37 infinite Manual 192.0.0.14 00:33:44:56: 22:38 infinite Manual clear dhcp binding Use this command to clear (delete) one or all DHCP address bindings.
clear dhcp server st atistics 16-10 DHCP Server Configur ation Messages Received ---------- ---------- DHCP DISCOVER 382 DHCP REQUEST 3855 DHCP DECLINE 0 DHCP RELEASE 67 DHCP INFORM 1 Messages Sent --.
Configuring IP Address Pools Enterasys D-Series CLI Reference 16-11 Configuring IP Address Pools Manual Pool Configuration Considerations •T h e subnet of the IP address bein.
set dhcp pool 16-12 DHCP Server Configur ation set dhcp pool Use this command to create and assign a name to a DHCP serv er pool of addres ses. Up to 16 address pools may be configured on a D ‐ Series.
clear dhcp pool Enterasys D-Series CLI Reference 16-13 clear dhcp pool Use this command to delete a DHCP server pool of addresses. Synt ax clear dhcp pool poolname Parameters Default s None. Mode Switch command, read ‐ write.
clear dhcp pool network 16-14 DHCP Server Configur ation Examples This example configures the IP subnet 172.20.28.0 with a prefix length of 24 for the aut omatic DHCP pool named “auto1.
clear dhcp pool hardware-addr ess Enterasys D-Series CLI Reference 16-15 Default s If no type is specified, Ethernet is assumed. Mode Switch command, read ‐ write. Example This example specifies 0001.f401.
clear dhcp pool host 16-16 DHCP Server Configur ation Default s If a mask or prefix is not specified, the class A, B, or C natural mask will be used. Mode Switch command, read ‐ write.
clear dhcp pool client-identifier Enterasys D-Series CLI Reference 16-17 Parameters Default s None. Mode Switch command, read ‐ write. Usage The client identifier is formed by conca tenating the media type and the MAC address.
set dhcp pool client-name 16-18 DHCP Server Configur ation set dhcp pool client-name Use this command to assign a name to a DHCP client when creating an address pool for manual binding.
set dhcp pool bootfile Enterasys D-Series CLI Reference 16-19 set dhcp pool boot file Use this command to specify a default boot image for the DHCP clients who wil l be serv ed by the address pool being configured.
set dhcp pool next- server 16-20 DHCP Server Configur ation set dhcp pool next-server Use this command to specify the file server from which the de fault boot image is to be loaded by the client.
set dhcp pool lease Enterasys D-Series CLI Reference 16-21 set dhcp pool lease Use this command to specify the duration of the lease for an IP address assigned by the DHCP server from the ad dress pool being configured.
set dhcp pool default-rou ter 16-22 DHCP Server Configur ation Mode Switch command, read ‐ write. Example This example restores the default le ase duration of one day for address pool “a uto1.
set dhcp pool dns-server Enterasys D-Series CLI Reference 16-23 Mode Switch command, read ‐ write. Example This example removes the default router from the addres s pool “auto1.
set dhcp pool domain- name 16-24 DHCP Server Configur ation Mode Switch command, read ‐ write. Example This example removes the DNS serv er list from the address pool “a uto1.
set dhcp pool netbios-name-server Enterasys D-Series CLI Reference 16-25 Mode Switch command, read ‐ write. Example This example removes the domain name from the address pool “auto1.
set dhcp pool netbio s-node-type 16-26 DHCP Server Configur ation Mode Switch command, read ‐ write. Example This example removes the NetBIOS name serv er lis t from the address pool auto1.
set dhcp pool option Enterasys D-Series CLI Reference 16-27 Default s None. Mode Switch command, read ‐ write. Example This example removes the NetBIOS node type from the address pool “auto1.
clear dhcp pool option 16-28 DHCP Server Configur ation clear dhcp pool option Use this command to remove a DHCP option from the address pool being configured. Synt ax clear dhcp pool poolname option code Parameters Default s None.
show dhcp pool configuration Enterasys D-Series CLI Reference 16-29 Network 192.0.0.0 255.255.255.0 Lease Time 1 days 0 hrs 0 mins Default Routers 192.0.0.1 Pool: static1 Pool Type Manual Client Name appsvr1 Client Identifier 01:00:01:f4:01:27:10 Host 10.
show dhcp pool configuration 16-30 DHCP Server Configur ation.
Enterasys D-Series CLI Reference 17-1 17 Security Configuration This chapter descri bes the Security Configuration set of commands and how to use them.
Overview of Security Methods 17-2 Security Con figuration on using CLI commands to configure 802 .1X, refer to “ Configuring 802.
Configuring RADIUS Enterasys D-Series CLI Reference 17-3 configured on the switch, the swi tch then dynamically applies the policy profile to the physical port the user/device is authenticati ng on.
show radius 17-4 Security Con figuration show radius Use this command to display the current RADIUS client/server configuration.
set radius Enterasys D-Series CLI Reference 17-5 set radius Use this command to enable, disable, or configure RADIUS authentication.
set radius 17-6 Security Con figuration Default s If secr et ‐ value is not specified, none will be applied. If realm is not specified, the any access realm will be used. Mode Switch command, read ‐ write.
clear radius Enterasys D-Series CLI Reference 17-7 This example shows how to force any management ‐ access to the switch (T elnet, web , SS H) to authenticate through a RADIUS serv er .
set radius accounting 17-8 Security Con figuration Parameters Mode Switch command, read ‐ only . Default s If no parameters are specified, all RA DIUS accounting configuration information will be display ed.
clear radius accounting Enterasys D-Series CLI Reference 17-9 Mode Switch command, read ‐ write. Default s None. Examples This example shows how to enable the RADIUS accounting client for authenticating with the accounting server at IP address 10.
clear radius accounting 17-10 Securit y Configuration Default s None. Example This example shows how to reset the RADIUS accounting timeout to 5 seconds.
Configuring 802.1X Authentication Enterasys D-Series CLI Reference 17-11 Configuring 802.1X Authentication Purpose To review and configure 802.1X authe ntication for one or more ports us ing EAPOL (Extensibl e Authentication Protocol).
show dot1x 17-12 Securit y Configuration If port ‐ string is not specif ied, information for all ports will be displayed. Mode Switch command, read ‐ only . Examples This example shows how to display 802.
show dot1x auth-config Enterasys D-Series CLI Reference 17-13 show dot1x auth-config Use this command to display 802.1X authentication configuration settings for one or more ports.
set dot1x 17-14 Securit y Configuration Port : 1 Auth-Config PAE state: Initialize Backend auth state: Initialize Admin controlled directions: Both Oper controlled directions: Both Auth controlled por.
set dot1x auth-config Enterasys D-Series CLI Reference 17-15 set dot1x auth-config Use this command to configure 802.1X authentica tion.
clear dot1x auth-config 17-16 Securit y Configuration Examples This example shows how to enable reauthenti cation control on ports fe.1.1 ‐ 3: D2(su)->set dot1x auth-config reauth enabled true fe .1.1-3 This example shows how to set the 802.
show eapol Enterasys D-Series CLI Reference 17-17 This example shows how to reset the 802.1X quiet period to 60 seconds on ports fe.1.1 ‐ 3: D2(su)->clear dot1x auth-config quie tperiod fe .
show eapol 17-18 Securit y Configuration T able 17-43 show eapol Output Det ails Output Fi eld What It Disp la y s. .. Port Port designa tion. For a detailed description of possible port-string values, refer to “ Port S tring Synt ax Used in the C LI ” on page 6-1.
set eapol Enterasys D-Series CLI Reference 17-19 set eapol Use this command to enable or disable EAPOL port ‐ based user authentication with the RADIUS server and to set the authentication mode for one or more ports .
clear eapol 17-20 Securit y Configuration Parameters Default s If auth ‐ mode is not specif ied, all EAPOL settings will be cleared. If port ‐ string is not specif ied, settings will be cleared for all ports.
Configuring MAC Authentication Enterasys D-Series CLI Reference 17-21 Configuring MAC Authentication Purpose To review , disable, enable and configure MAC authentication.
show macauthentication 17-22 Securit y Configuration Parameters Default s If port ‐ string is not specif ied, MAC authentication informatio n will be display ed for all ports. Mode Switch command, read ‐ only .
show macauthentication session Enterasys D-Series CLI Reference 17-23 show macauthentication session Use this command to display the active MAC authe nticated se ssions. Synt ax show macauthentication session Parameters None.
set macauthentication 17-24 Securit y Configuration set macauthentication Use this command to globally enable or disable MAC authentica tion. Synt ax set macauthentication { enable | disa ble } Parameters Mode Switch command, read ‐ write.
clear macauthentication password Enterasys D-Series CLI Reference 17-25 Example This example shows how to set the MAC authentication password to “macauth.
set macauthentication portinitialize 17-26 Securit y Configuration Usage Enabling port(s) for MAC authentication requires globally enabling MAC authentication o.
clear macauthentication portquietperiod Enterasys D-Series CLI Reference 17-27 Default s None. Mode Switch command, read ‐ write. Example This example sets port 1 to .
set macauthentication reauthenticat ion 17-28 Securit y Configuration Mode Switch command, read ‐ write. Default s None. Example This example shows how to force the .
set macauthentication macreauthenticate Enterasys D-Series CLI Reference 17-29 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to force ge .2.1 though 5 to reauthenticate: D2(su)->set macauthentication portre authentication ge.
clear macauthentication reauthperiod 17-30 Securit y Configuration Parameters Default s None. Mode Switch command, read ‐ write. Usage Changing the Reauth Pe r i o d with the set macauthentication reauthperiod command does not affect current sessions.
set macauthentication significant-bits Enterasys D-Series CLI Reference 17-31 set macauthentication significant-bit s Use this command to set the number of significant bits of the MAC address to use for authentication.
clear macauthentication significant-bits 17-32 Securit y Configuration Mode Switch command, read ‐ write. Example This example resets the MAC authentication significant bits to 48.
Configuring Multiple Authentication Methods Enterasys D-Series CLI Reference 17-33 Configuring Multiple Authentication Methods About Multiple Authentication T ypes When enabled, multiple authentication types allow users to authenticate using more than one method on the same port.
show multiauth 17-34 Securit y Configuration show multiauth Use this command to display multiple authenticati on system configuration. Synt ax show multiauth Parameters None. Default s None. Mode Switch command, read ‐ only .
set multiauth mode Enterasys D-Series CLI Reference 17-35 set multiauth mode Use this command to set the system authentication mode to allow multi ple authenticators simultaneously (802.
set multiauth precedence 17-36 Securit y Configuration Example This example shows how to clear the system authentication mode : D2(rw)->clear multiauth mode set .
show multiauth port Enterasys D-Series CLI Reference 17-37 Example This example shows how to clear the multiple authenti cation precedence: D2(rw)->clear multiau.
clear multiauth port 17-38 Securit y Configuration Parameters Default s None. Mode Switch command, read ‐ write. Examples This example shows how to set the port multipl e authenticati on mode to required on ge .
show multiauth station Enterasys D-Series CLI Reference 17-39 Mode Switch command, read ‐ write. Examples This example shows how to clear the port mult iple authentication mode on port ge .
show multiauth idle-timeout 17-40 Securit y Configuration Parameters Default s If no options are specified, multiple au thentication session entries will be displayed for all sessions, authentication types, MAC addresses, and ports.
set multiauth idle-timeout Enterasys D-Series CLI Reference 17-41 Example This example shows how to display timeout val u e s for an idle session for all authentication types.
clear multiauth idle-timeout 17-42 Securit y Configuration clear multiauth idle-timeout Use this command to re set th e maximum number of consecutiv e seconds .
set multiauth session-timeout Enterasys D-Series CLI Reference 17-43 Example This example displays the session timeout val u es for all authentication methods.
clear multiauth session-timeout 17-44 Securit y Configuration clear multiauth session-timeout Use this command to re set th e maximum number of consecutiv e sec.
Configuring VLAN Authorization (RFC 3580) Enterasys D-Series CLI Reference 17-45 Configuring VLAN Authorization (RFC 3580) Purpose RFC 3580 T unnel Attributes provide a mechanism to contain an 802.
set policy maptable response 17-46 Securit y Configuration multiauth port command (page 17 ‐ 37) to set the number of RFC 3580 users (numusers ) allowed per Gigabit port. Up to two users can be configured per Gigabit port.
set vlanauthorization Enterasys D-Series CLI Reference 17-47 When a user successfully authenticates to the network, the RADI US serv er returns an Access ‐ Accept frame.
set vlanauthorization egress 17-48 Securit y Configuration set vlanauthorization egress Controls the modification of the current VLAN egress list of 802.1x authenticated ports for the VLANs returned in the RADIUS authorization filter id string.
show vlanauthorization Enterasys D-Series CLI Reference 17-49 Mode Switch command, read ‐ write. Example This example show how to clear VLAN authorization for all ports on slots 3, 4, and 5: D2(rw)->clear vlanauthorization ge.
show vlanauthorization 17-50 Securit y Configuration authenticated ma c address If authentication has succeeded, displays the MAC addre ss assig ned for egress. vlan id If authentication has succeeded, displays the assig ned VLAN id for ing ress. T able 17-46 show vlanauthorization Ou tput Det ails (Continued) Output Fi eld What It Disp la y s.
Configuring MAC Locking Enterasys D-Series CLI Reference 17-51 Configuring MAC Locking This feature locks a MAC address to one or more ports, preventing connection of unauthorized devices through the port(s).
show maclock 17-52 Securit y Configuration show maclock Use this command to display the status of MAC locking on one or more port s.
show maclock stations Enterasys D-Series CLI Reference 17-53 show maclock st ations Use this command to display MAC locking information about end stations connected to the switch.
set maclock enable 17-54 Securit y Configuration set maclock enable Use this command to enable MAC locking globally or on one or more ports.
set maclock disable Enterasys D-Series CLI Reference 17-55 set maclock disable Use this command to disable MAC locking globally or on one or more ports.
clear maclock 17-56 Securit y Configuration Mode Switch command, read ‐ write. Usage Configuring a port for MAC locking requires globally enabling it .
set maclock static Enterasys D-Series CLI Reference 17-57 Example This example shows how to remove a MAC from the list of static MACs allow ed to communicate on port ge .3.2: D2(rw)->clear maclock 0e-03-ef-d8-44 -55 ge.
set maclock firs tarrival 17-58 Securit y Configuration Mode Switch command, read ‐ write. Example This example shows how to reset the number of allow able static MACs on fe.2.3: D2(rw)->clear maclock static fe .
clear maclock firs tarrival Enterasys D-Series CLI Reference 17-59 clear maclock first arrival Use this command to reset the number of first arrival MAC address es allowed per port to the default val u e of 6 00.
clear maclock agefirstarrival 17-60 Securit y Configuration Example This example enables first arrival ag ing on port ge .
set maclock trap Enterasys D-Series CLI Reference 17-61 Usage If there are more first arrival MACs than the allow ed maximum static MACs, then only the latest first arriv al MACs wil l be mov ed to static entries.
Configuring Port Web Authentication (PWA) 17-62 Securit y Configuration Configuring Port W eb Authentication (PW A) About PW A PW A provides a wa y of authenticating users .
show pwa Enterasys D-Series CLI Reference 17-63 show pwa Use this command to display port web authentication information for one or more ports.
set pwa 17-64 Securit y Configuration set pwa Use this command to enable or disable port web authentication. Synt ax set pwa { enable | disable } Parameters Default s None. Mode Switch command, read ‐ write.
show pwa banner Enterasys D-Series CLI Reference 17-65 Example This example shows how to enable port web authentication: D2(su)->set pwa enable show pwa banner Use this command to display the port web a uthentication login banner string.
clear pwa banner 17-66 Securit y Configuration clear pwa banner Use this command to reset the PW A log in banner to a blank string. Synt ax clear pwa banner Parameters None. Default s None. Mode Switch command, read ‐ write.
set pwa ipaddress Enterasys D-Series CLI Reference 17-67 set pwa ip address Use this command to set the PW A IP address.
set pwa guestname 17-68 Securit y Configuration set pwa guestname Use this command to set a guest user name for PW A netw orking. PW A will use this name to grant network access to guests without established login names and passw ords.
set pwa guestpassword Enterasys D-Series CLI Reference 17-69 set pwa guestp assword Use this command to set the guest user password for PW A networking. Synt ax set pwa guestpassword Parameters None. Default s None.
set pwa initialize 17-70 Securit y Configuration Usage PW A will use a guest passw ord and guest user name to grant network access with default policy privileges to users without establishe d login names and passwords.
set pwa maxrequest Enterasys D-Series CLI Reference 17-71 Default s If port ‐ string is not specif ied, quiet period will be set for all ports.
show pwa session 17-72 Securit y Configuration Parameters Default s If port ‐ string is not specif ied, PW A will enabled on all ports.
set pwa enhancedmode Enterasys D-Series CLI Reference 17-73 set pwa enhancedmode This command enables PW A URL redirection. The switch intercepts all HTTP p.
Configuring Secure Shell (SSH) 17-74 Securit y Configuration Configuring Secure Shell (SSH) Purpose To review , enable, disable, and configure the Secure Shell (SSH) protocol, which provides secure Te l n e t .
set ssh hostkey Enterasys D-Series CLI Reference 17-75 Parameters Default s None. Mode Switch command, read ‐ write. Example This example shows how to disable SSH.
set ssh hostkey 17-76 Securit y Configuration.
Index-1 Index Numerics 802.1D 8-1 802.1p 11 -1 7 , 12-1 802.1Q 9-1 802.1s 8-1 802.1w 8-1 802.1x 17-5 , 17-19 A Advertised Ability 6-15 Alias node 14-34 Authentication EAPOL 17-19 MAC 17-21 Port web 17.
Index- 2 profiles 11 -1 , 11 -1 7 Port Mirroring 6-33 Port Priority configuring 12-1 Port String syntax used in the CLI 6-1 Port Trunking 6-36 Port web authenti cation configuring 17-62 Port(s) alias .
An important point after buying a device Enterasys Networks D-Series (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Enterasys Networks D-Series yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Enterasys Networks D-Series - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Enterasys Networks D-Series you will learn all the available features of the product, as well as information on its operation. The information that you get Enterasys Networks D-Series will certainly help you make a decision on the purchase.
If you already are a holder of Enterasys Networks D-Series, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Enterasys Networks D-Series.
However, one of the most important roles played by the user manual is to help in solving problems with Enterasys Networks D-Series. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Enterasys Networks D-Series along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
