Manuals / Brands / Household Appliance / Plumbing Product / 3Com / Household Appliance / Plumbing Product

3Com 3CRUS2475 - page 54

1 522

Download 522 pages, 3.1 Mb

54 CHAPTER 3: ACL COMMANDS

Contents

Main 3Com Corporation 350 Campus Drive Marlborough, MA 01752-3064 C USING THE CLI AAA C ACL C ADDRESS TABLE COMMANDS ETHERNET CONFIGURATION COMMANDS LINE COMMANDS PHY DIAGNOSTICS COMMANDS PORT CHANNEL COMMANDS QOS COMMANDS CLOCK COMMANDS RMON C IGMP SNOOPING COMMANDS LACP C POWER OVER ETHERNET COMMANDS SPANNING-TREE COMMANDS CONFIGURATION AND IMAGE FILE COMMANDS RADIUS C PORT MONITOR COMMANDS SNMP C IP ADDRESS COMMANDS MANAGEMENT ACL COMMANDS WIRELESS ROGUE AP COMMANDS WIRELESS ESS COMMANDS WIRELESS AP GENERAL COMMANDS SSH C WEB SERVER COMMANDS TACACS+ C SYSLOG COMMANDS WIRELESS AP BSS COMMANDS SYSTEM MANAGEMENT COMMANDS USER INTERFACE COMMANDS GVRP C VLAN C 802.1X COMMANDS WIRELESS AP RADIO COMMANDS WIRELESS WLAN COMMANDS T Page 1 Overview Page Page Starting the CLI Editing Features Page To display the history buffer, see show history. Page Page Page 2 aaa authentication login Page Page login enable authentication ip http authentication ip https authentication show authentication methods Page password enable password username Page Page 3 ip access-list permit (ip) Page Page Page deny (IP) value. ip-precedence value. mac access-list permit (MAC) deny (MAC) service-acl show access-lists show interfaces access-lists Page Page 4 bridge address bridge multicast filtering bridge multicast address bridge multicast forbidden address bridge multicast forward-all bridge multicast forbidden forward-all Page bridge aging-time clear bridge port security port security mode port security routed secure-address show bridge address-table show bridge address-table static show bridge address-table count Page show bridge multicast address-table A multicast MAC address maps to multiple IP addresses as shown above. show bridge multicast filtering show ports security show ports security addresses Page Page 5 interface ethernet interface range ethernet shutdown description speed duplex negotiation flowcontrol mdix clear counters set interface active show interfaces advertise Page Page show interfaces status Page show interfaces description Page Page The following table describes the fields shown in the display. port storm-control include-multicast (GC) port storm-control include-multicast (IC) port storm-control broadcast enable port storm-control broadcast rate show ports storm-control Page 6 line speed autobaud exec-timeout history history size terminal history terminal history size show line Page 7 test copper-port tdr show copper-ports tdr show copper-ports cable-length show fiber-ports optical-transceiver The following example displays the optical transceiver diagnostics results. Page 8 interface interface range channel-group Page The following example displays information on all port-channels. 9 qos show qos class-map Page show class-map match policy-map class show policy-map trust cos-dscp set police service-policy qos aggregate-policer show qos aggregate-policer police aggregate wrr-queue cos-map wrr-queue bandwidth priority-queue out num-of-queues traffic-shape rate-limit interface show qos interface The following example displays the buffer settings for queues on Ethernet port 1. qos map policed-dscp qos map policed-dscp dscp-list to dscp-mark-down no qos map policed-dscp qos map dscp-queue qos trust (Global) qos trust (Interface) qos cos qos dscp-mutation qos map dscp-mutation security-suite security-suite dos protect security-suite deny martian-addresses Page Page 10 clock set clock source clock timezone clock summer-time Page sntp authentication-key sntp authenticate sntp trusted-key sntp client poll timer sntp anycast client sntp client enable sntp unicast client sntp unicast client poll sntp server show clock Page show sntp show sntp status The following example shows the status of the SNTP. Page Page 11 show rmon statistics Page rmon collection history show rmon collection history Page show rmon history Page The following table describes significant fields shown in the example: rmon alarm Page show rmon alarm-table show rmon alarm The following table describes the significant fields shown in the display: rmon event show rmon events show rmon log rmon table-size Page 12 ip igmp snooping (Global) ip igmp snooping ip igmp snooping mrouter learn-pim-dvmrp ip igmp snooping host-time-out ip igmp snooping mrouter-time-out ip igmp snooping leave-time-out show ip igmp snooping mrouter show ip igmp snooping interface show ip igmp snooping groups Page 13 lacp system-priority lacp port-priority lacp timeout show lacp ethernet Page Page show lacp Page Page 14 COMMANDS power inline power inline powered-device power inline power inline usage-threshold power inline traps show power inline Page The following table describes the fields shown in the display: Page Page 15 spanning-tree spanning-tree mode spanning-tree forward-time spanning-tree hello-time spanning-tree max-age spanning-tree spanning-tree disable spanning-tree cost spanning-tree port-priority spanning-tree portfast spanning-tree link-type spanning-tree pathcost method spanning-tree bpdu clear spanning-tree detected-protocols spanning-tree mst spanning-tree mst max-hops spanning-tree mst port-priority spanning-tree mst cost Page instance (mst) name (mst) revision (mst) show (mst) exit (mst) abort (mst) spanning-tree guard root show spanning-tree The following example displays spanning-tree information. Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page Page 16 copy Page Page delete boot system show running-config show startup-config show bootvar Page 17 radius-server host radius-server key radius-server retransmit radius-server source-ip radius-server timeout radius-server deadtime show radius-servers The following example displays RADIUS server settings. Page 18 port monitor show ports monitor Page Page 19 snmp-server community snmp-server view Page snmp-server group snmp-server user Page snmp-server engineID local Page snmp-server enable traps snmp-server filter snmp-server host Page snmp-server v3-host snmp-server trap snmp-server contact snmp-server location snmp-server set show snmp User Guidelines There are no user guidelines for this command. The following example displays the SNMP communications status. The following table describes the significant fields shown in the display. show snmp engineid show snmp views show snmp groups show snmp filters show snmp users Page Page 20 ip address ip address dhcp ip default-gateway show ip interface arp arp timeout clear arp-cache show arp ip domain-name ip name-server Page 21 management access-list permit (Management) deny (Management) management access-class show management access-list show management access-class 22 rogue-detect enable (Radio) rogue-detect rogue-scan-interval wlan rogue-detect rogue-ap clear wlan rogue-ap show wlan rogue-aps show wlan rogue-aps list show wlan rogue-aps neighborhood Page Page 23 wlan ess create wlan ess configure ssid open vlan qos load-balancing mac-filtering action mac-filtering list security suite create Page security suite configure vlan (Security-Suite ESS) timer (Security-Suite ESS) update-gkey-on-lea ve (Security-Suite ESS) wpa2 pre-authentication show wlan ess Page Page show wlan ess mac-filtering lists show wlan ess The following example displays station numbers at ESS enterprise. Page 24 clear wlan ap wlan ap active wlan ap key wlan ap config name tunnel priority wan enable interface ethernet vlan allowed vlan native wlan template ap configure set wlan copy show wlan aps Page The following example displays detailed information on a specific active AP: The following example displays important radio information on all the active APs. 11 g 44 Page show wlan ap interface radio show wlan ap interface ethernet show wlan aps The following example displays information on the AP traffic. InUcastPk ts OutUcastP kts show wlan aps discovered show wlan template aps Page 25 ip ssh port ip ssh server crypto key generate dsa crypto key generate rsa ip ssh pubkey-auth crypto key pubkey-chain ssh user-key key-string Page show ip ssh show crypto key mypubkey show crypto key pubkey-chain ssh Page Page 26 ip http server ip http port ip http exec-timeout ip https server ip https port crypto certificate generate Page crypto certificate request crypto certificate import ip https certificate show crypto certificate mycertificate show ip http show ip https Page 27 tacacs-server host tacacs-server key tacacs-server timeout tacacs-server source-ip show tacacs Page 28 logging on logging logging console logging buffered logging buffered size clear logging logging file clear logging file aaa logging file-system logging management logging show logging Page show logging file Page show syslog-servers Page 29 bss bss enable advertise-ssid data-rates Page 30 ping Page traceroute Page The following table describes significant fields shown above. telnet Page Keywords Table Ports Table resume reload hostname show users show sessions show system show version service cpu-utilization show cpu utilization 31 enable disable login configure exit (Configuration) exit end help terminal data-dump debug-mode show history show privilege Page 32 gvrp enable (Global) gvrp enable garp timer Page gvrp vlan-creation-forbid gvrp registration-forbid clear gvrp statistics show gvrp show gvrp statistics show gvrp error-statistics The following example displays GVRP statistical information. Page 33 vlan database vlan interface vlan interface range vlan name switchport access vlan switchport trunk allowed vlan switchport trunk native vlan switchport general allowed vlan switchport general pvid switchport general ingress-filtering disable switchport general acceptable-frame-ty pe tagged-only switchport forbidden vlan show vlan show vlan internal usage show interfaces switchport The following example displays the switchport configuration for Ethernet port. 34 dot1x system-auth-contro l dot1x port-control dot1x re-authentication dot1x timeout re-authperiod dot1x re-authenticate dot1x timeout quiet-period Page dot1x timeout tx-period dot1x max-req dot1x timeout supp-timeout dot1x timeout server-timeout show dot1x The following example displays the status of 802.1x-enabled Ethernet ports. fThe following table describes the significant fields shown in the display. show dot1x users 802.1x authenticated users for the device. Page show dot1x statistics Page dot1x auth-not-req dot1x multiple-hosts dot1x single-host-violatio n dot1x guest-vlan dot1x guest-vlan show dot1x advanced Page Page 35 interface radio enable (ap radio) channel Page power allow traffic preamble rts threshold antenna beacon period 36 wlan tx-power off wlan country-code Page Page wlan tx-power auto interval wlan tx-power auto signal-strength wlan tx-power auto signal-loss wlan station idle-timeout clear wlan station show wlan show wlan auto-tx-power show wlan logging show wlan stations show wlan stations The following example displays information on WLAN stations. 37 Problem Troubleshooting Solutions Page Page Page Page Console #reload Are you sure you want to reboot the system (y/n)[n]? Autoboot in 2 seconds - press RETURN or Esc. to abort and enter prom.