Manuals / 3Com / Computer Equipment / Switch

3Com 4500 50-PORT manual Monitor-port Syntax, Priority Syntax, Monitor-port Undo monitor-port

Models: 4500 26-PORT 4500 PWR 26-PORT 4500 PWR 50-PORT 4500 50-PORT

1 466

Download 466 pages 21.69 Kb

Page 202

Image 202

196CHAPTER 8: USING QOS/ACL COMMANDS

the Fabric. You need to configure the monitor port before configuring the monitored port.

Related command: display mirror.

Example

To configure Ethernet1/0/1 as a monitored port, and monitor packets in both directions, enter the following:

<4500>system-view

System View: return to User View with Ctrl+Z

[4500]interface Ethernet 1/0/1

[4500-Ethernet1/0/1] mirroring-port both

[4500-Ethernet1/0/1]

monitor-port Syntax

monitor-port

undo monitor-port

View

Ethernet Port View

Parameter

None

Description

Use the monitor-portcommand to configure a monitor port.

Use the undo monitor-portcommand to remove the setting of monitor port.

The Switch supports one monitor port and one mirroring port. If several Switches form a Fabric, only one monitor port and one mirroring port can be configured in the Fabric. You need to configure monitor port before configuring monitored port.

Related command: display mirror.

Example

To configure the port Ethernet1/0/4 as a monitor port, enter the following:

<4500>system-view

System View: return to User View with Ctrl+Z

[4500]interface Ethernet 1/0/4

[4500-Ethernet1/0/4] monitor-port

[4500-Ethernet1/0/4]

priority Syntax

priority priority-level

undo priority

View

Ethernet Port View

Page 202

Image 202

3Com 4500 50-PORT manual Monitor-port Syntax, Priority Syntax, Monitor-port Undo monitor-port, 4500interface Ethernet 1/0/4

Contents

3Com Switch 4500 Family 3Com Corporation Campus Drive Marlborough, MA USA Contents Stack Commands 207 Igmp Snooping Configuration Commands184 QoS Configuration Commands List 190 Rstp Configuration CommandsAccessing the Bootrom Interface 455 Boot Menu Page Alphabetical Listing of Commands Page Page Page Page Page Page Page Page Page Page Page About this Guide Icons This guide uses the following conventionsText conventions Related About this Guide Using System Access Commands Parameter Authentication-mode SyntaxView DescriptionCommand-privilege level Syntax Auto-execute command SyntaxText Specifies the command to be run automatically System ViewSets the data bits to 4500command-privilege level 0 view system interfaceDatabits Syntax Databits 7 Undo databitsSyntax Display user-interface SyntaxInformation is displayed in the following format Output description of the display user-interfacecommandSummary Display the summary of a user interface Display the summary information of user interfaceAll Enter to display information on all user interfaces Output description of the display users commandDisplay users Syntax Information displays in the following formatFree user-interface Syntax Flow-control SyntaxUser view Header Syntax 4500free user-interface auxMode 2 Input in several lines Initial character % is not the header contentsPress the Enter key 4500user-interface aux Ui-aux0history-command max-size Initial character % is the header contentsIdle-timeout Syntax Idle-timeout minutes seconds Undo idle-timeoutLanguage-mode chinese english Language-mode SyntaxLock Syntax Ui-aux0language-mode chineseProtocol inbound Syntax To lock the current user interface, enter the followingParity Syntax Parity even mark none odd space Undo parityQuit Syntax Configure SSH protocol supported by VTY0 user interfaceVTY user interface view 4500user-interface vty Ui-vty0protocol inbound sshSystem view or higher Return SyntaxScreen-length Syntax View Local-user View Service-type SyntaxSend Syntax Send all number type4500local-user zbr Luser-zbrservice-type telnet level Shell Syntax Shell Undo shell4500user-interface vty 0 Speed SyntaxStopbits Syntax Speed speed-value Undo speedTo change to user level 3 from the current user level Sets the stop bits toSuper Syntax Super level4500super password level 3 simple zbr Super password SyntaxTo set the password for level 3 to zbr, type the following Sysname SyntaxTelnet Syntax System-view SyntaxTo enter system view from user view, enter the following 4500sysname 3ComUser-interface Syntax SW4500user-interface 0 User privilege level SyntaxSW4500system-view User privilege level level Undo user privilege levelUsing Port Commands Ethernet Port Link Aggregation CommandsUsing Port Commands Interface command Ports on your SwitchCopy configuration Syntax Port to other ports, to ensure consistent configurationUndo broadcast-suppression Ethernet Port ViewDescription Syntax Ethernet1/0/1broadcast-suppression ppsDisplay interface Syntax 4500display interface Ethernet 1/0/1Output Description of the Display Interface Command VlanDisplay loopback-detection 4500display loopback-detectionDisplay unit Syntax Details display in the following formatDisplay port Syntax Any viewDuplex Syntax Related command speedDisplay the port information for all ports on Unit ParametersInterface Syntax Flow-control Undo flow-control4500interface ethernet1/0/1 Loopback SyntaxExternal External loop test Internal Internal loop test Loopback external internalEthernet1/0/1loopback-detection control enable Enable port loopback detection controlLoopback-detection Syntax Related commands display loopback-detection To enable port loopback detection, enter the following4500loopback-detection interval-time Mdi Syntax Ethernet1/0/1loopback-detection per-vlan enableMdi across auto normal Undo mdi Multicast-suppression Syntax To assign Ethernet port 1/0/1 to VLAN3, enter the following Port access vlan SyntaxPort hybrid pvid vlan Syntax Port hybrid vlan Syntax Port link-type Syntax 4500interface e1/0/1Port trunk pvid vlan Syntax Port trunk permit vlan SyntaxAll Enter to add the trunk port to all VLANs Ethernet1/0/1port trunk permit vlan 2 4 50 toReset counters interface Syntax Ethernet1/0/1port trunk pvid vlanUndo form of this command is Shutdown SyntaxUnicast-suppression Syntax Related command duplexUnicast-suppression ratio pps pps Undo unicast-suppression Ethernet1/0/1unicast-suppression Debugging lacp packet Syntax 4500debugging link-aggregation error4500debugging link-aggregation event Debugging lacp state Syntax 4500debugging lacp packet interface ethernet1/0/1Display link-aggregation summary To enable all Lacp state machines debugging4500debugging lacp state all 4500display link-aggregation summaryDisplay link-aggregation verbose aggid 4500display link-aggregation verbose4500display link-aggregation interface ethernet4/0/1 Display lacp system-id Syntax Lacp enable SyntaxTo display the local system ID To set port priority as 64, enter the following To enable Lacp at Ethernet1/0/1, enter the followingLacp port-priority Syntax Lacp system-priority SyntaxAggid Aggregation group ID, in the range of 1 to To set system priority as 64, enter the following4500lacp system-priority 4500link-aggregation group 22 mode manual Related command display link-aggregation summaryTo create manual aggregation group 22, enter the following Related command display link-aggregation interface Reset lacp statistics Syntax4500reset lacp statistics Using Port Commands Using Vlan Commands Voice Vlan CommandsVlan view VLANs and Vlan interfaces on your systemTo give VLAN1 the description RESEARCH, enter the following 4500display interface vlan-interface Related command interface Vlan-interfaceDisplay vlan Syntax Display vlan vlanid all static dynamicTo display information about Vlan ExamplesInterface VLAN-interface Syntax To enter the interface view of VLAN1, enter the following For the related command, see display vlanRelated command display interface vlan-interface Port SyntaxRestart interface after shutting down the interface Add Ethernet1/0/2 through Ethernet1/0/4 to VlanVlan Interface View Vlan2port ethernet1/0/2 to ethernet1/0/4Vlan Syntax Is default Vlan and cannot be deletedRelated commands display vlan 4094 All Delete all VLANsDisplay voice vlan status Syntax Display voice vlan statusVoice vlan enable Syntax Voice vlan aging SyntaxVoice vlan Syntax Voice vlan vlanid enable Undo voice vlan enable4500voice vlan 2 enable Voice vlan macaddress SyntaxVoice vlan mode auto Undo voice vlan mode auto For the related command, see display voice vlan ouiVoice vlan mode Syntax To set the Voice Vlan in manual mode, enter the following4500undo voice vlan enable 4500undo voice vlan mode auto By default, the Voice Vlan security mode is enabled4500undo voice vlan mode auto Voice vlan security enable Undo voice vlan security enableCommands Display poe interface Syntax PoE on your Switch 4500 PWRPort or all ports on the Switch Any viewDisplay the power information of port Ethernet1/0/10 Display poe power Syntax4500display poe interface power ethernet1/0/10 4500display poe power Display the power information of all portsDisplay poe Syntax Powersupply Display poe powersupply ViewPoe legacy enable Syntax Poe enable SyntaxEnable the PoE feature on the current port Display the PSE parametersDisable the nonstandard-PD detect function Enable the nonstandard-PD detect functionPoe max-power Syntax Poe mode Syntax Set the maximum power supplied by current portRestore the default maximum power on the current port Set the PoE mode on current port to signalRestore the default management mode Configure the PoE management mode on port to autoPoe priority Syntax Set the port priority to critical Poe update SyntaxPoe update refresh full filename Ethernet1/0/3poe priority criticalUpdate the PSE processing software online 4500poe update refresh 0290021.s19Dhcp Relay Configuration Commands ARP Configuration CommandsDhcp Client Configuration Commands Access Management Configuration CommandsUDP Helper Configuration Commands IP Performance Configuration CommandsDisplay ip host Syntax Addressing on your SwitchCorresponding IP addresses Ip address Syntax Configure the IP address of interface Vlan interface 1 asVlan Interface view Arp check enable Syntax Related command display ip hostAddress Resolution Protocol ARP operations on your Switch Ip host SyntaxArp static Syntax 4500undo arp check enableUndo arp static ipaddress Related commands reset arp, display arp, debugging arp 4500arp static 202.38.0.10 00e0-fc01-0000 1 Ethernet1/0/1Related commands display arp timer aging 4500arp static 202.38.0.10 00e0-fc01-0000 1 arp timer agingArp timer aging agingtime Undo arp timer aging 4500arp timer agingOutput Description of the debugging arp packet Command To enable ARP packet debugging, enter the followingFor the related commands, see Display arp SyntaxDisplay arp timer aging Display arp timer aging SyntaxOutput Description of the display arp Command 4500display arpRelated command arp static, display arp Reset arp SyntaxReset arp dynamic static interface interfacetype 4500reset arp staticDebugging dhcp xrn xha Syntax 4500debugging dhcp xrn xha Display dhcp client SyntaxIp address dhcp-alloc Syntax Display dhcp client verboseTo enable Dhcp relay debugging, enter the following Address using DhcpDebugging. By default, Dhcp relay debugging is disabled Debugging dhcp-relayDhcp-server Syntax Dhcp-server groupNo Undo dhcp-serverDisplay dhcp-server Syntax Dhcp-server ip SyntaxGroupNo Enter a Dhcp Server group number, in the range 0 to 4500display dhcp-server ViewsVlanid Enter the Vlan interface number Display dhcp-server interface vlan-interface vlanid4500am enable Am enable SyntaxAm enable Undo am enable Am ip-pool SyntaxAm trap enable Syntax Am trap enable Undo am trap enable4500am trap enable By default, the access management trap is disabledTo enable the access management trap, enter the following Display am SyntaxTo display port isolation information, enter the following Output Description of the display am CommandDisplay isolate port Syntax Port isolate SyntaxTo enable UDP Helper packet debugging, enter the following UDP Helper Configuration operations on your SwitchBy default, UDP Helper debugging is disabled Not availableInterface 1, enter the following To enable the UDP Helper functionSyntax Server Udp-helper port SyntaxIp-addressEnter the IP address of the destination server Udp-helper server Syntax4500udp-helper port dns Display fib Syntax Performance Configuration operations on your SwitchHop, current flag, timestamp and outbound interface Display fib acl Syntax Display fib ipaddress SyntaxLonger All FIB entries matched in the natural mask range Number Enter the ACL in number form, in the range 2000 toDisplay fib begin include exclude text Display fib ip-prefix Syntax4500display fib acl 4500display fib beginDisplay fib statistics Syntax Display icmp statistics SyntaxDisplay ip socket Syntax Output Description of the display icmp statistics CommandTo view statistics about Icmp packets, enter the following Sock-typeEnter the type of a socket tcp1, udp 2, raw ip4500display ip socket socktype Display ip statistics SyntaxDisplay ip statistics To view statistics about IP packets, enter the following Output Description of the display ip statistics CommandRelated commands display ip interface, reset ip statistics 4500display ip statisticsTo view statistics about TCP packets, enter the following Related commands display tcp status, reset tcp statisticsDisplay tcp statistics Syntax Display tcp statisticsDisplay tcp status Syntax Output Description of the display tcp status CommandDisplay udp statistics Syntax Reset tcp statistics Syntax Reset ip statistics SyntaxTo clear the IP statistics information, enter the following Tcp timer fin-timeout Syntax Reset udp statistics SyntaxTcp timer syn-timeout Syntax 4500tcp timer syn-timeout Undo tcp timer syn-timeoutRelated commands tcp timer fin-timeout,tcp window Tcp window Syntax4500tcp window Using Network Protocol Commands Static Route Configuration Command RIP Configuration CommandsDisplay ip routing-table Syntax IP Routing Policy CommandsDisplay ip routing-table 4500display ip routing-table Output Description of the display ip routing-tableCommandDisplay ip routing-table acl aclnumber verbose Acl-basic-2000display ip routing-table acl 4500acl number Acl-basic-2000rule permit source 10.1.1.14500display ip routing-table acl 2000 verbose Display ip routing-table ipaddress mask longer-match IpaddressVerbose View 4500display ip routing- .1.1.0 24 2.2.2.0 Ip-prefixDisplay ip routing-table ip-prefix ipprefixname verbose 4500display ip routing-table ip-prefix abc2 verbose 4500display ip routing-table protocol direct Display ip routing-table protocol protocol inactive verbose4500display ip routing-table protocol static 4500display ip routing-table radix To display the route information, enter the followingDisplay ip routing-table radix Display ip routing-table statistics4500display ip routing-table statistics CommandDisplay ip routing-table verbose 4500display ip routing-table verbose Descriptor MeaningDelete all the static routes in the router Delete static-routes all SyntaxIp route-static Syntax Description Default cost Syntax Checkzero SyntaxDisplay rip Syntax Undo default costRipdefault cost Display ripOutput Description of the display rip Command Filter-policy export SyntaxFilter-policy import Syntax Related commands acl, filter-policy import, ip ip-prefixRipfilter-policy 2000 export Host-route Syntax Import-route SyntaxNetworkaddress Enter the IP network address of an interface Related commands default costNetwork Syntax Ripimport-route static costRipnetwork Peer SyntaxIpaddress Enter the interface IP address of the peer router Undo peer ipaddressPreference Syntax Reset SyntaxReset the RIP system To specify a RIP preference of 20, enter the followingRip Syntax To enable RIP, and enter RIP view, enter the followingRip authentication-mode Syntax Interface ViewRelated command rip version MD5 cipher text authentication key for RIP-2Vlan-interface1rip authentication-mode simple aaa Rip metricin Syntax Vlan-interface1rip authentication-mode md5 usual aaaRip input Syntax Rip input Undo rip inputRip metricout value Undo rip metricout Rip metricout SyntaxRip output Syntax Rip output Undo rip outputRip split-horizon Syntax Rip split-horizon Undo rip split-horizonRip version Syntax Rip work Syntax Summary SyntaxUndo timers update timeout Timers SyntaxRipundo summary Riptimers update 10 timeout Apply cost Syntax These commands operate across all routing protocolsRelated command ip ip-prefix Route Policy ViewDisplay route-policy Syntax Output Description of the display ip-ip prefix CommandOutput Description of the display route-policyCommand Routepolicyname Specify displayed Route-policy nameIf-match cost Syntax If-match acl ip-prefix SyntaxRoute policy view If-match cost value Undo if-match costUndo if-match interface By default, no match sub-statement is definedIf-match interface Syntax Route-policyif-match interface Vlan-interfaceIp ip-prefix Syntax If-match ip next-hop SyntaxRoute-policyif-match ip next-hop ip-prefix p1 Description Route-policy Syntax 4500route-policy policy permit nodeRoute-policy Using Routing Protocol Commands Using Multicast Protocol Snooping configuration information Igmp configuration commands on your SwitchDisplay igmp-snooping Syntax Configuration Member port timeout4500display igmp-snooping group vlan Display the multicast group information about VLAN2Display statistics information about Igmp Snooping Display igmp-snooping statisticsIgmp-snooping enable disable Enable Igmp Snooping on VlanIgmp-snooping Syntax Set the aging time to 300 seconds Configure to respond to the Igmp Snooping packet within 20s4500igmp-snooping host-aging-time 4500igmp-snooping max-response-time Reset igmp-snooping statisticsClear Igmp Snooping statistics information 4500igmp-snooping router-aging-time4500reset igmp-snooping statistics Using Multicast Protocol Commands QoS Configuration Commands List Logon user’s ACL Control CommandAcl Syntax All Displays all ACLs Display the content of all the ACLsDisplay acl Syntax Number chosen from 2000 toPacket-filter Syntax 4500display packet-filter unitidRule Syntax Define or delete the subrules of a basic ACL Reset acl counter SyntaxDefine or cancel the subrules of user-defined ACL Define or delete the subrules of an advanced ACLParameters specific to basic ACLs Corresponding ACL ViewParameters specific to advanced ACLs Parameters specific to Layer 2 ACL Parameter for user-defined ACLDisplay mirror Syntax Display COS and Local-precedence map Unit-id Unit ID of the SwitchDisplay qos-interface all Syntax Display qos-interface 1 all Display all the configurations of QoS parameters for unitUnit-idUnit ID of the Switch Display qos-interface line-rateLine-rate Syntax Related command mirrored-toDisplay the traffic limit settings Undo line-rateMirrored-to Syntax 4500interface Ethernet 1/0/1 4500line-rate outboundMirroring-port Syntax Related command display qos-interface mirrored-toMirroring-port inbound outbound both Undo mirroring-port Monitor-port Undo monitor-port Monitor-port SyntaxPriority Syntax 4500interface Ethernet 1/0/4Priority trust Syntax Set the priority of Ethernet1/0/1 port toPriority trust Undo priority Default CoS and Local-precedence table Following is the default CoS and Local Precedence tableUndo qos cos-local-precedence-map Configure CoS and Local Precedence table 4500qos cos-local-precedence-map 0 1 2 3 4 5 6Wred Syntax Queue-indexindex of output queue, in the range of 0~7Switch Use the undo wred command to restore the default settingsBy default, the wred function is disabled Local Switch using TelnetIp http acl acl-number Undo ip http acl Ip http acl SyntaxSnmp-agent community Syntax 4500ip http aclSnmp-agent group Syntax 4500snmp-agent community read MyCompany aclSnmp-agent usm-user Syntax 4500snmp-agent group v1 MyCompany aclParameter Using QOS/ACL Commands Using Stack Commands 4500system-view 4500change self-unit toChange unit-id to 1-8 1-8 auto-numbering Change unit-id SyntaxTo change the unit ID from6 to 4, enter the following 4500display ftm topology-databaseDisplay xrn-fabric Syntax Display ftm SyntaxPort display the stacking port information Fabric save-unit-id Undo fabric save-unit-id Fabric save-unit-id Syntax4500display xrn-fabric 4500fabric save-unit-idFtm stacking-vlan Syntax Fabric-port enable Syntax4500fabric-port gigabitEthernet1/0/51 enable Ftm stacking-vlan vlan-id Undo ftm stacking-vlanSet unit name Syntax 4500xrn-fabric authentication-mode simple helloSet Vlan 2 as stacking Vlan 4500ftm stacking-vlanYou can use this command to set a name for a device Sysname sysname Undo sysnameUnit Name Unit ID First Second Using Rstp Commands State of the Switch Configuration commands on your SwitchTo the port command in this guide Related command reset stpReset stp interface interfacelist Reset stp SyntaxDisplay information Stp enable disable Undo stp 4500reset stp interface Ethernet1/0/1 to Ethernet1/0/3Stp Syntax To disable Rstp on Ethernet1/0/1, enter the following Related command stp modeTo enable Rstp on a Switch, enter the following Stp bpdu-protection SyntaxStp edged-port Syntax Stp cost SyntaxCost Specifies the path cost, ranging from 1 to Path cost for ports at different link speedsStp loop-protection Syntax Stp loop-protection Undo stp loop-protectionStp mcheck Syntax Stp mode SyntaxStp mode stp rstp Undo stp mode Stp mcheck4500stp mode stp Stp pathcost-standard Syntax4500stp pathcost-standard dot1d-1998 Stp point-to-point SyntaxStp port priority Syntax 4500stp pathcost-standard dot1tUndo stp priority Stp priority Syntax4500stp priority Stp root primary Undo stp root Stp root primary SyntaxStp root secondary Syntax 4500stp root primary4500stp root secondary Stp root-protection SyntaxStp root-protection Undo stp root-protection Stp timeout-factor number Undo stp timeout-factor Stp timeout-factor SyntaxStp timer forward-delay Syntax 4500stp timeout-factorRelated commands stp timer hello, stp timer max-age Stp timer hello SyntaxUndo stp timer forward-delay 4500stp timer forward-delayStp timer max-age Syntax Stp transmit-limit SyntaxEthernet1/0/1stptransmit-limit Using Rstp Commands Using AAA and Radius AAA Configuration CommandsRadius Protocol Configuration Commands 235 Display dot1x Syntax SwitchDisplay the configuration information Sessions Displays the session connection informationDot1x Syntax To enable 802.1x globally, enter the following To enable 802.1x on Ethernet 1/0/1, enter the following4500dot1x interface ethernet 1/0/1 Dot1x dhcp-launch Syntax Related command display dot1xConfigure 802.1x user to use PAP authentication Dot1x max-user SyntaxDot1x port-control Syntax 4500dot1x max-user 32 interface ethernet 1/0/2Dot1x port-method Syntax 4500dot1x port-method portbased interface ethernet 1/0/3 Dot1x quiet-period CommandDot1x quiet-period Undo dot1x quiet-period Dot1x retry Syntax To enable quiet-period timer, enter the followingRelated command display dot1x, dot1x timer 4500dot1x quiet-periodDot1x supp-proxy-check Syntax 4500dot1x retryDot1x timer Syntax 4500dot1x timer server-timeout Reset dot1x statistics SyntaxReset dot1x statistics interface interface-list Clear the 802.1x statistics on Ethernet 1/0/2 4500reset dot1x statistics interface ethernet 1/0/2Debugging Syntax Display mac-authentication 4500display mac-authenticationMac-authentication Syntax Offline detect period4500mac-authentication 4500mac-authentication interface Ethernet 1/0/1Undo mac-authentication authmode 4500mac-authentication authmode usernamefixed 4500mac-authentication authusername vipuser 4500mac-authentication authpassword mac4500undo mac-authentication authusername 4500mac-authentication domain Cams 4500mac-authentication timer server-timeoutISP Domain View On your SwitchAccess-limit Syntax Current ISP domain, ranging from 1 toCut connection Syntax 4500local-user JohnQDisplay connection Syntax All Configures to disconnect all connection4500cut connection domain marlboro.net 4500display connection Display domain isp-name Display domain SyntaxDisplay local-user Syntax 4500display domain4500display local-user Output description of the display local-usercommand Domain SyntaxIdle-cut Syntax Idle-cut disable enable minute flowISP Domain View Local User View Related command domainLevel Syntax Local-user SyntaxRelated commands display local-user,server-type By default, no local userTo add a local user named 3Com1, enter the following 4500local-user password-display-mode cipher-force Related commands display local-user,passwordMessenger Syntax Password simple cipher password Undo password Password Syntax4500domain system Isp-systemmessenger time enable 30 4500local-user 3Com1 Luser-3Com1password simpleRelated commands radius scheme, display radius Scheme SyntaxRelated command radius scheme, display radius Self-service-url SyntaxChange user password on this Self-service-url enable url-stringself-service-url disableService-type Syntax ISP Domain View Local User View State SyntaxState active block Otherwise, the user will be disconnected Accounting optional SyntaxSelection of Radius accounting option Accounting that uses this Radius scheme4500radius scheme 3Com Radius Scheme ViewUndo data-flow format Display local-server statistics4500display local-server statistics Display radius Syntax4500display radius Displayed packet information can help with Radius diagnosis Troubleshooting Related command radius schemeDisplay radius statistics Syntax Display radius statisticsDisplay stop-accounting-buffer 4500radius scheme 3Com Radius-3Comkey authentication hello Key SyntaxRadiuskey accounting ok Local-server SyntaxNas-ip Syntax 4500local-server nas-ip 10.110.1.2 key 3ComIp-addressIP address in dotted decimal format Primary accounting SyntaxPrimary authentication Syntax Related commands key, radius scheme, stateRadius Server Group View Radius nas-ip ip-address Undo radius nas-ip Radius nas-ip Syntax4500radius nas-ip Radius scheme Syntax Reset radius statistics SyntaxReset radius statistics Undo radius scheme radius-scheme-name4500reset radius statistics To clear the Radius protocol statistics, enter the followingRetry Syntax Undo retryRetry stop-accounting Syntax 4500radius scheme 3Com Radius-3Comretry realtime-accountingSecondary accounting Syntax 4500radius scheme 3Com Radius-3Comretry stop-accountingServer-type Syntax Server-type 3com standardUndo server-type Stop-accounting-buffer enable Timer Syntax Timer seconds Undo timerTimer quiet Syntax Related commands radius scheme, retryTime quiet minutes Undo timer quiet 4500radius scheme 3Com Radius-3Comtimer realtime-accounting Timer response-timeout SyntaxRelated commands retry realtime-accounting,radius scheme Timer response-timeout seconds Undo timer response-timeoutUser-name-format Syntax 4500radius scheme 3Com Radius-3Comtimer response-timeoutUser-name-format with-domain without-domain Related command radius scheme Configuration File Management Commands FTP Server Configuration CommandsTftp Configuration Commands FTP Client CommandsMAC Address Table Management Commands System Status and System Information Display Commands Device Management CommandsBasic System Configuration and Management Commands System Debug CommandsSnmp Configuration Commands NTP Configuration Commands Rmon Configuration CommandsSSH Terminal Service Configuration Commands Sftp Server Configuration Commands SSH Client Configuration CommandsSftp Client Configuration Commands Copy Syntax Delete Syntax Display current directory informationCopy the file test.txt and save it as test.bak Delete the file flash/test/test.txtDisplay the information for file flash/test/test.txt Dir SyntaxDisplay information for directory flash/test Execute Syntax Configure the prompt mode of file operation as quietFile prompt Syntax Mkdir Syntax Format SyntaxFormat flash Directory Directory nameMove Syntax Display contents of file test.txtDisplay the current directory information Pwd Syntax Rename SyntaxDelete the file from the recycle bin Reset recycle-bin SyntaxFile-pathName of the file to be deleted Rmdir SyntaxDelete the directory test File-pathName of the file to be recoveredRecover the deleted file sample.bak Undelete SyntaxDisplay current-configuration controller interface Files on your SwitchDisplay Syntax Current-configuration 4500dir /allConfiguration File Management Commands 4500display current-configuration include user Unit unit-idSpecify the Unit ID of switchDisplay saved-configuration unit unit-id Display this Display this Syntax4500display this Display startup Reset saved-configurationDisplay startup Syntax 4500display startupSave Syntax 4500reset saved-configurationSave filename safely Startup saved Syntax Configuration Get the current configuration files stored in flash memoryTo enable Bootrom access function, enter the following 4500startup bootrom-access enableDisplay ftp-server Syntax Display ftp-user SyntaxFtp timeout Syntax Show the configuration of FTP user parametersEnable Start FTP Server Ftp server SyntaxSet the connection timeout to 36 minutes 4500ftp timeoutRelated commands display local-user,service-type New local user added FTP Client view Configure to transmit data in the Ascii modeAscii Syntax Binary SyntaxCd Syntax Configure to transmit data in the binary modeBye Syntax ByeChange working path to the upper level directory Change the working path to flash/tempCdup Syntax CdupClose Close SyntaxDelete the file temp.c Delete remotefileDisconnect Syntax DisconnectFtp Syntax Connect to FTP Server at the IP addressLcd Syntax Get SyntaxDownload the file temp1.c and saves it as temp.c Show local working pathLs Syntax Query file temp.cPathname Directory name Set the data transmission to passive modeFtpmkdir flash/lanswitch Passive SyntaxPut Syntax FtppassiveShow the current directory on the remote FTP Server Protocol-commandFTP protocol commandRemotehelp Syntax Delete the directory flash/temp1 from FTP Server Show the syntax of the protocol command userPathname Directory name of remote FTP Server User SyntaxLog in the FTP Server with username tom and password hello Username Logon username Password Logon passwordUse the user command to register an FTP user Enable verboseVxWorks.app on the local switch Tftp server and save it with a different name on the switchRelated command tftp put Tftp get SyntaxInterface-nameSpecify the interface name Display mac-address SyntaxSW5500tftp 1.1.3.214 put sw5500cfg.txt temp.txt Display mac-address aging-time Mac-address SyntaxSW4500display mac-address 00e0-fc01-0101 SW4500display mac-address aging-timeUndo mac-address static dynamic blackhole mac-address Max-mac-countmac-address max-mac-count countMac-address timer Syntax Undo mac-address max-mac-countBoot boot-loader Syntax Boot bootrom SyntaxDisplay boot-loader Syntax Display cpu SyntaxShow device information Display device SyntaxDisplay fan Syntax Display power Syntax Display memory SyntaxDisplay schedule reboot Syntax Show power stateReboot Syntax Schedule reboot at Syntax Reboots the SwitchSchedule reboot at hhmm yyyy/mm/dd Undo schedule reboot Schedule reboot delay hhhmm mmm Undo schedule reboot Schedule reboot delay SyntaxSW4500schedule reboot at SW4500schedule reboot delayDevice Management Commands Related command display clock Commands available on your SwitchDefault is 235552, 2000/4/1 Clock datetime SyntaxClock timezone Syntax Clock timezone zonename add minus Hhmmss Undo clock timezoneSet the hostname of the Switch to be LANSwitch Display clock SyntaxUnit-idUnit ID of current switch, in the range of 1 to Display config-agent SyntaxView the current system date and clock Display version Syntax Show all the enabled debuggingDisplay debugging Syntax Display the information about the system versionInformation that can be displayed on your Switch Requiring periodic testing For the related commands, see display debuggingEnable IP Packet debugging End-station polling Syntax Ip-addressSW4500end-station polling ip-address Configure 202.38.160.244 requiring periodical testingPing Syntax Ping -a ip-address -c count -d -h tllDescription Remote-ping Purpose Displays the latest test results Related CommandsDisplay remote-ping Purpose Displays the test historyNumber Test Connection fail number This command can be used in the following views Any view Remote-ping-agent Purpose enableTracert Syntax Enable remote-ping clientRemote-ping-agent enable Undo remote-ping-agent enable Tracert -a source-ip -f first-TTL -m max-TTL -p portPort is SW4500tracertSW4500display channel Show details about the information channelDisplay info-center Syntax Display info-centerShow the system log information Undo info-center channel channel-numberInfo-center console channel channel-number channel-name Rename channel 0 as execconsoleChannel Undo info-center console channelSW4500info-center enable Enable the system log functionInfo-center logbuffer Syntax Info-center loghost Syntax SW4500info-center logbufferSW4500info-center loghost source vlan-interface Related commands info-center enable, display info-centerSW4500info-center loghost Info-center monitor channel channel-number channel-nameConfigure channel 6 as the Snmp information channel SW4500info-center monitor channelSW4500info-center snmp channel Info-center source SyntaxChannel-numberChannel number to be set Level LevelIP module FTP server moduleModule names in logging information Information Channel in Each Output Direction by Default Info-center switch-on Syntax SW4500info-center switch-on 2 trapping Info-center timestamp SyntaxReset logbuffer Reset logbuffer SyntaxSW4500info-center timestamp debugging boot Info-center trapbuffer SyntaxClear information in trap buffer Reset trapbuffer SyntaxClear information in log buffer Terminal debugging SyntaxTerminal logging Syntax terminal logging Enable the terminal display debuggingDisable the terminal log display Terminal monitor Syntax terminal monitorCommands available on your Switch Disable the terminal monitorEnable trap information display Terminal trapping SyntaxDisplay the engine ID of current device Display the currently configured community namesGroup Groupname Group name, ranging from 1 to 32 bytes Display Snmp group name and safe modeOutput description of the display snmp-agent group command Following table describes the output fieldsDisplay snmp-agent statistics Display the current state of Snmp communicationSW4500display snmp-agent statistics Total number of the input Snmp packets Display the version information of running Snmp Display the character string sysContact system contactDisplay the system location Display the information of all the current usersDisplay snmp-proxy unit Syntax Enable snmp trap SyntaxEnable snmp trap updown Undo enable snmp trap updown View statistics information of Snmp proxy on unitSW4500snmp-agent community read comaccess SW4500undo snmp-agent community comaccess Delete the community name comaccessSW4500snmp-agent community write mgr Snmp-agent mib-view Syntax Configure the ID of a local or remote device asTo create an Snmp group named 3Com, enter the following SW4500snmp-agent group v3 3ComCreate a view that consists of all the objects of MIB-II SW4500snmp-agent mib-view included mib2Snmp-agent sys-info Syntax Location command to restore the default valueSet the size of Snmp packet to 1042 bytes Set system location as Building 3/RoomSW4500snmp-agent trap enable Snmp-agent trap enable Syntax Standard authentication coldstart linkdown linkup warmstartSnmp-agent trap life seconds Undo snmp-agent trap life Configure the timeout interval of Trap packet as 60 secondsSnmp-agent trap life Syntax SW4500snmp-agent trap lifeVlan-idSpecify the Vlan interface ID, ranging from 1 to Configure the queue length toSnmp-agent trap source Syntax SW4500snmp-agent trap queue-sizeSnmp-agent usm-user Syntax Undo snmp-agent Disable the running Snmp agents of all Snmp versionsUndo snmp-agent Syntax SW4500undo snmp-agentDisplay rmon alarm Syntax Display rmon event SyntaxDisplay rmon eventlog Syntax Display rmon history Syntax For the related commands, see rmon historyOutput description of the display rmon eventlog command Port-numEthernet port nameDisplay alarm information about extended Rmon Display rmon prialarm SyntaxPrialarm-table-entryentry of extended alarm table Output description of the display rmon history commandPort-numEthernet port number Output description of the display rmon prialarm commandDisplay rmon statistics Syntax Show Rmon statisticsRmon alarm Syntax Undo rmon alarm entry-numberSW4500undo rmon alarm Delete the information of entry 15 from the alarm tableRmon event Syntax SW4500rmon event 10 log Rmon history SyntaxDelete the entry 15 from the history control table Undo rmon history entry-numberEntry-numberSpecifies the entry number, ranging from 1 to Rmon prialarm SyntaxUndo rmon prialarm entry-number SW4500interface Ethernet1/0/1UDP port 123 is opened only when the NTP feature is enabled Delete line 10 from the extended Rmon alarm tableSwitch 4500 Family provides the following functions UDP port 123 is closed as the NTP feature is disabledSW4500 display ntp-service sessions View the status of all sessions maintained by NTP servicesDisplay ntp-service sessions verbose Verbose Displays detailed NTP session informationDisplay ntp-service status Display ntp-service trace Syntax Ntp-service access SyntaxSW4500 ntp-service access server SW4500 ntp-service access peerSW4500 system-view SW4500 ntp-service authentication enable Enable the NTP authenticationUndo ntp-service authentication-keyid key-id By default, no switch operates in the broadcast client mode Ntp-service Syntax Disable Vlan-interface1 from receiving NTP messagesMax-dynamic-sessionsntp-service max-dynamic-sessions number Undo ntp-service max-dynamic-sessions SW4500-Vlan-interface1ntp-service multicast-client Key-id Authentication key ID, in the range of 1 to By default, no trusted authentication key is configuredNtp-service unicast-peer Syntax Ntp-service unicast-server SW4500 ntp-service unicast-server 128.108.22.44 version Debugging ssh server Syntax SW4500debug ssh server all SW4500term debugDisplay rsa local-key-pair public Related command rsa local-key-pair createSW4500display rsa local-key-pair public Display rsa peer-public-key Display rsa peer-public-key brief name keynameSW4500display rsa peer-public-key name candy2 Display ssh server SyntaxSW4500display rsa peer-public-key Display ssh server status sessionPeer-public-key end Syntax To display SSH sessionsPublic key view To quit public key view, enter the following Related command user-interface vtyRelated commands rsa peer-public-key,public-key-code begin SW4500user-interface vty 0Public key edit view Public-key-code begin SyntaxPublic-key-code end Syntax Rsa local-key-pair create Syntax To generate the local RSA key pair, enter the followingProgram supporting SSH1.5 Rsa peer-public-key SyntaxCharacters Ssh server SyntaxSsh server timeout Syntax By default, it is Related command display ssh serverSsh user assign rsa-key Syntax To associate the key 1 with jsmith, enter the following Related command display ssh user-informationSW4500ssh user jsmith assign rsa-key key1 Display ssh server-info Syntax At the next logonKeys, enter the following To exit the public key view, enter the following Related commands rsa peer-public-key, public-key-code beginRelated commands rsa peer-public-key, public-key-code end SW4500rsa peer-public-key SW4500003Public-key-code end Syntax Ssh client assign rsa-key Syntax SW4500rsa peer-public-key SW4500002Enable SW4500ssh client first-time enable Ssh2 SyntaxMd596 Hmac algorithm hmac-md5-96 By default, the Sftp server is shutdown Sftp server enable SyntaxUse the sftp server enable command to start the Sftp server Ssh user service-type SyntaxType By default, the service type is stelnetParticular user Sftp Client ViewTo change the current path to d/temp, enter the following Remote-pathThe name of a path on the serverRemote-fileThe name of a file on the server Exit Syntax exit View Remote-pathThe name of the directory to viewTo view the directory, flash/, enter the following Sftp-clientdelete temp.cHelp Syntax Command The name of a commandHelp command Sftp-clientget temp1.c temp.cTo view the directory flash/, enter the following FlashSftp-clientput temp.c temp1.c Oldname Original file name Remove SyntaxSftp-clientremove temp.c Sftp-clientrename temp1 temp2 Newname New file nameSftp Syntax Sftp-clientrmdir D/temp1SW4500sftp Configuring Password Control Display password-controlFields in Display Password- Control Command Display SyntaxPassword-control Syntax # Configure the system login password for user test toPassword System view Password-control enable Syntax System View return to User View with Ctrl+ZPassword-control super Syntax # Delete the history password records of all users Reset password-control history-record username usernameBlacklist # Delete the history password records of user testReset password-control blacklist username username Username username Specifies a user name# Delete user test from the blacklist Configuring Password Control Bootrom Interface Five second countdown timer allowing access to the bootromBoot Boot MenuEnter Option 1 at the prompt to display the following Current mode is enable bootrom password recovery Download Commands Selecting a Tftp download Selecting a FTP download Selecting an XModem download