Manuals / 3Com / Computer Equipment / Switch

3Com 4500 PWR 26-PORT, 4500 PWR 50-PORT, 4500 50-PORT, 4500 26-PORT manual 4500display local-user

Models: 4500 26-PORT 4500 PWR 26-PORT 4500 PWR 50-PORT 4500 50-PORT

1 466

Download 466 pages 21.69 Kb

Page 265

AAA and RADIUS Configuration Commands 259

idle-cut:Configures to display the local users according to the state of idle-cut function. disable means that the user disables the idle-cut function and enable means the user enables the function. This parameter only takes effect on the users configured as lan-access type. For other types of users, the display local-useridle-cut enable and display local-useridle-cut disable commands do not display any information.

service-type:Configures to display local user of a specified type. telnet means that the specified user type is telnet. ftp means that the specified user type is ftp. ssh means the specified user type is ssh. terminal means that the specified user type is terminal which refers to users who use the terminal service (login from the console port). lan-accessmeans that the specified user type is lan-access which mainly refers to Ethernet accessing users, 802.1x supplicants for example.

state { active block }: Configures to display the local users in the specified state. active means that the system allows the user requesting network service and block means the system does not allow the user requesting network service.

user-nameuser-name:Configures to display a user specified with user-name. user-nameis the argument specifying the username. It is a character string not exceeding 80 characters.

vlan vlanid: Configures to display the users bound to the specified VLAN. vlanid is the integer, ranging from 1 to 4094.

Description

Use the display local-usercommand to view the relevant information of all the local users or the specified one(s).

This command displays the relevant information about a specified or all the local users. The output can help you with the fault diagnosis and troubleshooting related to local user.

Related command: local-user.

Example

To display the relevant information of all the local users, enter the following:

<4500>display local-user
The contents of local user xxx:
State:	Active	ServiceType Mask:
Idle Cut:	Disable
AccessLimit:	Disable	Current AccessNum: 0
Bind location:	Disable
Vlan ID:	Disable

Total 1 local user(s) Matched,1 listed.

Image 265

3Com 4500 PWR 26-PORT, 4500 PWR 50-PORT, 4500 50-PORT, 4500 26-PORT manual 4500display local-user

Contents

3Com Switch 4500 Family 3Com Corporation Campus Drive Marlborough, MA USA Contents 184 QoS Configuration Commands List 190 Igmp Snooping Configuration CommandsStack Commands 207 Rstp Configuration CommandsAccessing the Bootrom Interface 455 Boot Menu Page Alphabetical Listing of Commands Page Page Page Page Page Page Page Page Page Page Page About this Guide Icons This guide uses the following conventionsText conventions Related About this Guide Using System Access Commands View Authentication-mode SyntaxParameter DescriptionText Specifies the command to be run automatically Auto-execute command SyntaxCommand-privilege level Syntax System ViewDatabits Syntax 4500command-privilege level 0 view system interfaceSets the data bits to Databits 7 Undo databitsDisplay user-interface Syntax SyntaxSummary Display the summary of a user interface Output description of the display user-interfacecommandInformation is displayed in the following format Display the summary information of user interfaceDisplay users Syntax Output description of the display users commandAll Enter to display information on all user interfaces Information displays in the following formatFree user-interface Syntax Flow-control SyntaxUser view 4500free user-interface aux Header SyntaxMode 2 Input in several lines Initial character % is not the header contentsPress the Enter key Idle-timeout Syntax Initial character % is the header contents4500user-interface aux Ui-aux0history-command max-size Idle-timeout minutes seconds Undo idle-timeoutLock Syntax Language-mode SyntaxLanguage-mode chinese english Ui-aux0language-mode chineseParity Syntax To lock the current user interface, enter the followingProtocol inbound Syntax Parity even mark none odd space Undo parityVTY user interface view Configure SSH protocol supported by VTY0 user interfaceQuit Syntax 4500user-interface vty Ui-vty0protocol inbound sshSystem view or higher Return SyntaxScreen-length Syntax Send Syntax Service-type SyntaxView Local-user View Send all number type4500local-user zbr Luser-zbrservice-type telnet level Shell Undo shell Shell SyntaxStopbits Syntax Speed Syntax4500user-interface vty 0 Speed speed-value Undo speedSuper Syntax Sets the stop bits toTo change to user level 3 from the current user level Super levelTo set the password for level 3 to zbr, type the following Super password Syntax4500super password level 3 simple zbr Sysname SyntaxTo enter system view from user view, enter the following System-view SyntaxTelnet Syntax 4500sysname 3ComUser-interface Syntax SW4500system-view User privilege level SyntaxSW4500user-interface 0 User privilege level level Undo user privilege levelEthernet Port Link Aggregation Commands Using Port CommandsUsing Port Commands Copy configuration Syntax Ports on your SwitchInterface command Port to other ports, to ensure consistent configurationDescription Syntax Ethernet Port ViewUndo broadcast-suppression Ethernet1/0/1broadcast-suppression pps4500display interface Ethernet 1/0/1 Display interface SyntaxVlan Output Description of the Display Interface Command4500display loopback-detection Display loopback-detectionDisplay port Syntax Details display in the following formatDisplay unit Syntax Any viewDisplay the port information for all ports on Unit Related command speedDuplex Syntax ParametersFlow-control Undo flow-control Interface SyntaxExternal External loop test Internal Internal loop test Loopback Syntax4500interface ethernet1/0/1 Loopback external internalEthernet1/0/1loopback-detection control enable Enable port loopback detection controlLoopback-detection Syntax Related commands display loopback-detection To enable port loopback detection, enter the following4500loopback-detection interval-time Mdi Syntax Ethernet1/0/1loopback-detection per-vlan enableMdi across auto normal Undo mdi Multicast-suppression Syntax To assign Ethernet port 1/0/1 to VLAN3, enter the following Port access vlan SyntaxPort hybrid pvid vlan Syntax Port hybrid vlan Syntax 4500interface e1/0/1 Port link-type SyntaxAll Enter to add the trunk port to all VLANs Port trunk permit vlan SyntaxPort trunk pvid vlan Syntax Ethernet1/0/1port trunk permit vlan 2 4 50 toEthernet1/0/1port trunk pvid vlan Reset counters interface SyntaxShutdown Syntax Undo form of this command isUnicast-suppression Syntax Related command duplexUnicast-suppression ratio pps pps Undo unicast-suppression Ethernet1/0/1unicast-suppression Debugging lacp packet Syntax 4500debugging link-aggregation error4500debugging link-aggregation event 4500debugging lacp packet interface ethernet1/0/1 Debugging lacp state Syntax4500debugging lacp state all To enable all Lacp state machines debuggingDisplay link-aggregation summary 4500display link-aggregation summary4500display link-aggregation verbose Display link-aggregation verbose aggid4500display link-aggregation interface ethernet4/0/1 Display lacp system-id Syntax Lacp enable SyntaxTo display the local system ID Lacp port-priority Syntax To enable Lacp at Ethernet1/0/1, enter the followingTo set port priority as 64, enter the following Lacp system-priority SyntaxAggid Aggregation group ID, in the range of 1 to To set system priority as 64, enter the following4500lacp system-priority 4500link-aggregation group 22 mode manual Related command display link-aggregation summaryTo create manual aggregation group 22, enter the following Related command display link-aggregation interface Reset lacp statistics Syntax4500reset lacp statistics Using Port Commands Voice Vlan Commands Using Vlan CommandsVlan view VLANs and Vlan interfaces on your systemTo give VLAN1 the description RESEARCH, enter the following Display vlan Syntax Related command interface Vlan-interface4500display interface vlan-interface Display vlan vlanid all static dynamicTo display information about Vlan ExamplesInterface VLAN-interface Syntax Related command display interface vlan-interface For the related command, see display vlanTo enter the interface view of VLAN1, enter the following Port SyntaxVlan Interface View Add Ethernet1/0/2 through Ethernet1/0/4 to VlanRestart interface after shutting down the interface Vlan2port ethernet1/0/2 to ethernet1/0/4Related commands display vlan Is default Vlan and cannot be deletedVlan Syntax 4094 All Delete all VLANsDisplay voice vlan status Display voice vlan status SyntaxVoice vlan aging Syntax Voice vlan enable Syntax4500voice vlan 2 enable Voice vlan vlanid enable Undo voice vlan enableVoice vlan Syntax Voice vlan macaddress SyntaxVoice vlan mode Syntax For the related command, see display voice vlan ouiVoice vlan mode auto Undo voice vlan mode auto To set the Voice Vlan in manual mode, enter the following4500undo voice vlan mode auto By default, the Voice Vlan security mode is enabled4500undo voice vlan enable 4500undo voice vlan mode auto Voice vlan security enable Undo voice vlan security enableCommands Port or all ports on the Switch PoE on your Switch 4500 PWRDisplay poe interface Syntax Any viewDisplay the power information of port Ethernet1/0/10 Display poe power Syntax4500display poe interface power ethernet1/0/10 Display poe Syntax Powersupply Display the power information of all ports4500display poe power Display poe powersupply ViewEnable the PoE feature on the current port Poe enable SyntaxPoe legacy enable Syntax Display the PSE parametersDisable the nonstandard-PD detect function Enable the nonstandard-PD detect functionPoe max-power Syntax Restore the default maximum power on the current port Set the maximum power supplied by current portPoe mode Syntax Set the PoE mode on current port to signalRestore the default management mode Configure the PoE management mode on port to autoPoe priority Syntax Poe update refresh full filename Poe update SyntaxSet the port priority to critical Ethernet1/0/3poe priority critical4500poe update refresh 0290021.s19 Update the PSE processing software onlineDhcp Client Configuration Commands ARP Configuration CommandsDhcp Relay Configuration Commands Access Management Configuration CommandsIP Performance Configuration Commands UDP Helper Configuration CommandsDisplay ip host Syntax Addressing on your SwitchCorresponding IP addresses Ip address Syntax Configure the IP address of interface Vlan interface 1 asVlan Interface view Address Resolution Protocol ARP operations on your Switch Related command display ip hostArp check enable Syntax Ip host SyntaxArp static Syntax 4500undo arp check enableUndo arp static ipaddress 4500arp static 202.38.0.10 00e0-fc01-0000 1 Ethernet1/0/1 Related commands reset arp, display arp, debugging arpArp timer aging agingtime Undo arp timer aging 4500arp static 202.38.0.10 00e0-fc01-0000 1 arp timer agingRelated commands display arp timer aging 4500arp timer agingFor the related commands, see To enable ARP packet debugging, enter the followingOutput Description of the debugging arp packet Command Display arp SyntaxOutput Description of the display arp Command Display arp timer aging SyntaxDisplay arp timer aging 4500display arpReset arp dynamic static interface interfacetype Reset arp SyntaxRelated command arp static, display arp 4500reset arp staticDebugging dhcp xrn xha Syntax Ip address dhcp-alloc Syntax Display dhcp client Syntax4500debugging dhcp xrn xha Display dhcp client verboseDebugging. By default, Dhcp relay debugging is disabled Address using DhcpTo enable Dhcp relay debugging, enter the following Debugging dhcp-relayDhcp-server groupNo Undo dhcp-server Dhcp-server SyntaxDisplay dhcp-server Syntax Dhcp-server ip SyntaxGroupNo Enter a Dhcp Server group number, in the range 0 to Vlanid Enter the Vlan interface number Views4500display dhcp-server Display dhcp-server interface vlan-interface vlanidAm enable Undo am enable Am enable Syntax4500am enable Am ip-pool SyntaxAm trap enable Undo am trap enable Am trap enable SyntaxTo enable the access management trap, enter the following By default, the access management trap is disabled4500am trap enable Display am SyntaxDisplay isolate port Syntax Output Description of the display am CommandTo display port isolation information, enter the following Port isolate SyntaxBy default, UDP Helper debugging is disabled UDP Helper Configuration operations on your SwitchTo enable UDP Helper packet debugging, enter the following Not availableSyntax Server To enable the UDP Helper functionInterface 1, enter the following Udp-helper port SyntaxIp-addressEnter the IP address of the destination server Udp-helper server Syntax4500udp-helper port dns Display fib Syntax Performance Configuration operations on your SwitchHop, current flag, timestamp and outbound interface Longer All FIB entries matched in the natural mask range Display fib ipaddress SyntaxDisplay fib acl Syntax Number Enter the ACL in number form, in the range 2000 to4500display fib acl Display fib ip-prefix SyntaxDisplay fib begin include exclude text 4500display fib beginDisplay icmp statistics Syntax Display fib statistics SyntaxTo view statistics about Icmp packets, enter the following Output Description of the display icmp statistics CommandDisplay ip socket Syntax Sock-typeEnter the type of a socket tcp1, udp 2, raw ip4500display ip socket socktype Display ip statistics SyntaxDisplay ip statistics Related commands display ip interface, reset ip statistics Output Description of the display ip statistics CommandTo view statistics about IP packets, enter the following 4500display ip statisticsDisplay tcp statistics Syntax Related commands display tcp status, reset tcp statisticsTo view statistics about TCP packets, enter the following Display tcp statisticsDisplay tcp status Syntax Output Description of the display tcp status CommandDisplay udp statistics Syntax Reset tcp statistics Syntax Reset ip statistics SyntaxTo clear the IP statistics information, enter the following Tcp timer fin-timeout Syntax Reset udp statistics SyntaxTcp timer syn-timeout Syntax Related commands tcp timer fin-timeout,tcp window Undo tcp timer syn-timeout4500tcp timer syn-timeout Tcp window Syntax4500tcp window Using Network Protocol Commands RIP Configuration Commands Static Route Configuration CommandDisplay ip routing-table Syntax IP Routing Policy CommandsDisplay ip routing-table 4500display ip routing-table Output Description of the display ip routing-tableCommandDisplay ip routing-table acl aclnumber verbose Acl-basic-2000display ip routing-table acl 4500acl number Acl-basic-2000rule permit source 10.1.1.14500display ip routing-table acl 2000 verbose Display ip routing-table ipaddress mask longer-match IpaddressVerbose View 4500display ip routing- .1.1.0 24 2.2.2.0 Ip-prefixDisplay ip routing-table ip-prefix ipprefixname verbose 4500display ip routing-table ip-prefix abc2 verbose 4500display ip routing-table protocol direct Display ip routing-table protocol protocol inactive verbose4500display ip routing-table protocol static Display ip routing-table radix To display the route information, enter the following4500display ip routing-table radix Display ip routing-table statistics4500display ip routing-table statistics CommandDisplay ip routing-table verbose Descriptor Meaning 4500display ip routing-table verboseDelete all the static routes in the router Delete static-routes all SyntaxIp route-static Syntax Description Checkzero Syntax Default cost SyntaxRipdefault cost Undo default costDisplay rip Syntax Display ripFilter-policy export Syntax Output Description of the display rip CommandFilter-policy import Syntax Related commands acl, filter-policy import, ip ip-prefixRipfilter-policy 2000 export Import-route Syntax Host-route SyntaxNetwork Syntax Related commands default costNetworkaddress Enter the IP network address of an interface Ripimport-route static costIpaddress Enter the interface IP address of the peer router Peer SyntaxRipnetwork Undo peer ipaddressReset the RIP system Reset SyntaxPreference Syntax To specify a RIP preference of 20, enter the followingRip authentication-mode Syntax To enable RIP, and enter RIP view, enter the followingRip Syntax Interface ViewRelated command rip version MD5 cipher text authentication key for RIP-2Vlan-interface1rip authentication-mode simple aaa Rip input Syntax Vlan-interface1rip authentication-mode md5 usual aaaRip metricin Syntax Rip input Undo rip inputRip output Syntax Rip metricout SyntaxRip metricout value Undo rip metricout Rip output Undo rip outputRip split-horizon Undo rip split-horizon Rip split-horizon SyntaxRip version Syntax Summary Syntax Rip work SyntaxUndo timers update timeout Timers SyntaxRipundo summary Riptimers update 10 timeout Related command ip ip-prefix These commands operate across all routing protocolsApply cost Syntax Route Policy ViewOutput Description of the display route-policyCommand Output Description of the display ip-ip prefix CommandDisplay route-policy Syntax Routepolicyname Specify displayed Route-policy nameRoute policy view If-match acl ip-prefix SyntaxIf-match cost Syntax If-match cost value Undo if-match costIf-match interface Syntax By default, no match sub-statement is definedUndo if-match interface Route-policyif-match interface Vlan-interfaceIp ip-prefix Syntax If-match ip next-hop SyntaxRoute-policyif-match ip next-hop ip-prefix p1 Description 4500route-policy policy permit node Route-policy SyntaxRoute-policy Using Routing Protocol Commands Using Multicast Protocol Display igmp-snooping Syntax Configuration Igmp configuration commands on your SwitchSnooping configuration information Member port timeoutDisplay statistics information about Igmp Snooping Display the multicast group information about VLAN24500display igmp-snooping group vlan Display igmp-snooping statisticsIgmp-snooping enable disable Enable Igmp Snooping on VlanIgmp-snooping Syntax Set the aging time to 300 seconds Configure to respond to the Igmp Snooping packet within 20s4500igmp-snooping host-aging-time Clear Igmp Snooping statistics information Reset igmp-snooping statistics4500igmp-snooping max-response-time 4500igmp-snooping router-aging-time4500reset igmp-snooping statistics Using Multicast Protocol Commands Logon user’s ACL Control Command QoS Configuration Commands ListAcl Syntax Display acl Syntax Display the content of all the ACLsAll Displays all ACLs Number chosen from 2000 to4500display packet-filter unitid Packet-filter SyntaxDefine or cancel the subrules of user-defined ACL Reset acl counter SyntaxRule Syntax Define or delete the subrules of a basic ACL Define or delete the subrules of an advanced ACLParameters specific to basic ACLs Corresponding ACL ViewParameters specific to advanced ACLs Parameter for user-defined ACL Parameters specific to Layer 2 ACLDisplay mirror Syntax Display COS and Local-precedence map Unit-id Unit ID of the SwitchDisplay qos-interface all Syntax Unit-idUnit ID of the Switch Display all the configurations of QoS parameters for unitDisplay qos-interface 1 all Display qos-interface line-rateDisplay the traffic limit settings Related command mirrored-toLine-rate Syntax Undo line-rate4500interface Ethernet 1/0/1 4500line-rate outbound Mirrored-to SyntaxMirroring-port Syntax Related command display qos-interface mirrored-toMirroring-port inbound outbound both Undo mirroring-port Priority Syntax Monitor-port SyntaxMonitor-port Undo monitor-port 4500interface Ethernet 1/0/4Priority trust Syntax Set the priority of Ethernet1/0/1 port toPriority trust Undo priority Default CoS and Local-precedence table Following is the default CoS and Local Precedence tableUndo qos cos-local-precedence-map 4500qos cos-local-precedence-map 0 1 2 3 4 5 6 Configure CoS and Local Precedence tableQueue-indexindex of output queue, in the range of 0~7 Wred SyntaxBy default, the wred function is disabled Use the undo wred command to restore the default settingsSwitch Local Switch using TelnetSnmp-agent community Syntax Ip http acl SyntaxIp http acl acl-number Undo ip http acl 4500ip http acl4500snmp-agent community read MyCompany acl Snmp-agent group Syntax4500snmp-agent group v1 MyCompany acl Snmp-agent usm-user SyntaxParameter Using QOS/ACL Commands 4500system-view 4500change self-unit to Using Stack CommandsTo change the unit ID from6 to 4, enter the following Change unit-id SyntaxChange unit-id to 1-8 1-8 auto-numbering 4500display ftm topology-databaseDisplay xrn-fabric Syntax Display ftm SyntaxPort display the stacking port information 4500display xrn-fabric Fabric save-unit-id SyntaxFabric save-unit-id Undo fabric save-unit-id 4500fabric save-unit-id4500fabric-port gigabitEthernet1/0/51 enable Fabric-port enable SyntaxFtm stacking-vlan Syntax Ftm stacking-vlan vlan-id Undo ftm stacking-vlanSet Vlan 2 as stacking Vlan 4500xrn-fabric authentication-mode simple helloSet unit name Syntax 4500ftm stacking-vlanSysname sysname Undo sysname You can use this command to set a name for a deviceUnit Name Unit ID First Second Using Rstp Commands To the port command in this guide Configuration commands on your SwitchState of the Switch Related command reset stpReset stp interface interfacelist Reset stp SyntaxDisplay information Stp enable disable Undo stp 4500reset stp interface Ethernet1/0/1 to Ethernet1/0/3Stp Syntax To enable Rstp on a Switch, enter the following Related command stp modeTo disable Rstp on Ethernet1/0/1, enter the following Stp bpdu-protection SyntaxCost Specifies the path cost, ranging from 1 to Stp cost SyntaxStp edged-port Syntax Path cost for ports at different link speedsStp loop-protection Undo stp loop-protection Stp loop-protection SyntaxStp mode stp rstp Undo stp mode Stp mode SyntaxStp mcheck Syntax Stp mcheckStp pathcost-standard Syntax 4500stp mode stpStp port priority Syntax Stp point-to-point Syntax4500stp pathcost-standard dot1d-1998 4500stp pathcost-standard dot1tUndo stp priority Stp priority Syntax4500stp priority Stp root secondary Syntax Stp root primary SyntaxStp root primary Undo stp root 4500stp root primary4500stp root secondary Stp root-protection SyntaxStp root-protection Undo stp root-protection Stp timer forward-delay Syntax Stp timeout-factor SyntaxStp timeout-factor number Undo stp timeout-factor 4500stp timeout-factorUndo stp timer forward-delay Stp timer hello SyntaxRelated commands stp timer hello, stp timer max-age 4500stp timer forward-delayStp transmit-limit Syntax Stp timer max-age SyntaxEthernet1/0/1stptransmit-limit Using Rstp Commands AAA Configuration Commands Using AAA and RadiusRadius Protocol Configuration Commands 235 Display the configuration information SwitchDisplay dot1x Syntax Sessions Displays the session connection informationDot1x Syntax To enable 802.1x globally, enter the following To enable 802.1x on Ethernet 1/0/1, enter the following4500dot1x interface ethernet 1/0/1 Configure 802.1x user to use PAP authentication Related command display dot1xDot1x dhcp-launch Syntax Dot1x max-user Syntax4500dot1x max-user 32 interface ethernet 1/0/2 Dot1x port-control SyntaxDot1x port-method Syntax 4500dot1x port-method portbased interface ethernet 1/0/3 Dot1x quiet-period CommandDot1x quiet-period Undo dot1x quiet-period Related command display dot1x, dot1x timer To enable quiet-period timer, enter the followingDot1x retry Syntax 4500dot1x quiet-period4500dot1x retry Dot1x supp-proxy-check SyntaxDot1x timer Syntax 4500dot1x timer server-timeout Reset dot1x statistics SyntaxReset dot1x statistics interface interface-list Clear the 802.1x statistics on Ethernet 1/0/2 4500reset dot1x statistics interface ethernet 1/0/2Debugging Syntax 4500display mac-authentication Display mac-authenticationOffline detect period Mac-authentication Syntax4500mac-authentication 4500mac-authentication interface Ethernet 1/0/1Undo mac-authentication authmode 4500mac-authentication authmode usernamefixed 4500mac-authentication authusername vipuser 4500mac-authentication authpassword mac4500undo mac-authentication authusername 4500mac-authentication timer server-timeout 4500mac-authentication domain CamsAccess-limit Syntax On your SwitchISP Domain View Current ISP domain, ranging from 1 to4500local-user JohnQ Cut connection SyntaxDisplay connection Syntax All Configures to disconnect all connection4500cut connection domain marlboro.net 4500display connection Display local-user Syntax Display domain SyntaxDisplay domain isp-name 4500display domain4500display local-user Domain Syntax Output description of the display local-usercommandIdle-cut Syntax Idle-cut disable enable minute flowISP Domain View Level Syntax Related command domainLocal User View Local-user SyntaxRelated commands display local-user,server-type By default, no local userTo add a local user named 3Com1, enter the following 4500local-user password-display-mode cipher-force Related commands display local-user,passwordMessenger Syntax 4500domain system Isp-systemmessenger time enable 30 Password SyntaxPassword simple cipher password Undo password 4500local-user 3Com1 Luser-3Com1password simpleScheme Syntax Related commands radius scheme, display radiusChange user password on this Self-service-url SyntaxRelated command radius scheme, display radius Self-service-url enable url-stringself-service-url disableService-type Syntax ISP Domain View Local User View State SyntaxState active block Selection of Radius accounting option Accounting optional SyntaxOtherwise, the user will be disconnected Accounting that uses this Radius schemeUndo data-flow format Radius Scheme View4500radius scheme 3Com Display local-server statistics4500display local-server statistics Display radius Syntax4500display radius Display radius statistics Syntax Troubleshooting Related command radius schemeDisplayed packet information can help with Radius diagnosis Display radius statisticsDisplay stop-accounting-buffer Key Syntax 4500radius scheme 3Com Radius-3Comkey authentication helloNas-ip Syntax Local-server SyntaxRadiuskey accounting ok 4500local-server nas-ip 10.110.1.2 key 3ComPrimary accounting Syntax Ip-addressIP address in dotted decimal formatPrimary authentication Syntax Related commands key, radius scheme, stateRadius Server Group View Radius nas-ip ip-address Undo radius nas-ip Radius nas-ip Syntax4500radius nas-ip Reset radius statistics Reset radius statistics SyntaxRadius scheme Syntax Undo radius scheme radius-scheme-nameTo clear the Radius protocol statistics, enter the following 4500reset radius statisticsUndo retry Retry Syntax4500radius scheme 3Com Radius-3Comretry realtime-accounting Retry stop-accounting Syntax4500radius scheme 3Com Radius-3Comretry stop-accounting Secondary accounting SyntaxServer-type 3com standard Server-type SyntaxUndo server-type Stop-accounting-buffer enable Timer seconds Undo timer Timer SyntaxTimer quiet Syntax Related commands radius scheme, retryTime quiet minutes Undo timer quiet Related commands retry realtime-accounting,radius scheme Timer response-timeout Syntax4500radius scheme 3Com Radius-3Comtimer realtime-accounting Timer response-timeout seconds Undo timer response-timeoutUser-name-format Syntax 4500radius scheme 3Com Radius-3Comtimer response-timeoutUser-name-format with-domain without-domain Related command radius scheme FTP Server Configuration Commands Configuration File Management CommandsTftp Configuration Commands FTP Client CommandsMAC Address Table Management Commands Basic System Configuration and Management Commands Device Management CommandsSystem Status and System Information Display Commands System Debug CommandsSnmp Configuration Commands NTP Configuration Commands Rmon Configuration CommandsSSH Terminal Service Configuration Commands Sftp Server Configuration Commands SSH Client Configuration CommandsSftp Client Configuration Commands Copy Syntax Copy the file test.txt and save it as test.bak Display current directory informationDelete Syntax Delete the file flash/test/test.txtDisplay the information for file flash/test/test.txt Dir SyntaxDisplay information for directory flash/test Execute Syntax Configure the prompt mode of file operation as quietFile prompt Syntax Format flash Format SyntaxMkdir Syntax Directory Directory nameMove Syntax Display contents of file test.txtDisplay the current directory information Rename Syntax Pwd SyntaxFile-pathName of the file to be deleted Reset recycle-bin SyntaxDelete the file from the recycle bin Rmdir SyntaxRecover the deleted file sample.bak File-pathName of the file to be recoveredDelete the directory test Undelete SyntaxDisplay Syntax Current-configuration Files on your SwitchDisplay current-configuration controller interface 4500dir /allConfiguration File Management Commands 4500display current-configuration include user Unit unit-idSpecify the Unit ID of switchDisplay saved-configuration unit unit-id Display this Display this Syntax4500display this Display startup Syntax Reset saved-configurationDisplay startup 4500display startupSave Syntax 4500reset saved-configurationSave filename safely To enable Bootrom access function, enter the following Get the current configuration files stored in flash memoryStartup saved Syntax Configuration 4500startup bootrom-access enableDisplay ftp-user Syntax Display ftp-server SyntaxEnable Start FTP Server Show the configuration of FTP user parametersFtp timeout Syntax Ftp server Syntax4500ftp timeout Set the connection timeout to 36 minutesRelated commands display local-user,service-type New local user added Ascii Syntax Configure to transmit data in the Ascii modeFTP Client view Binary SyntaxBye Syntax Configure to transmit data in the binary modeCd Syntax ByeCdup Syntax Change the working path to flash/tempChange working path to the upper level directory CdupDelete the file temp.c Close SyntaxClose Delete remotefileDisconnect Disconnect SyntaxConnect to FTP Server at the IP address Ftp SyntaxDownload the file temp1.c and saves it as temp.c Get SyntaxLcd Syntax Show local working pathQuery file temp.c Ls SyntaxFtpmkdir flash/lanswitch Set the data transmission to passive modePathname Directory name Passive SyntaxFtppassive Put SyntaxShow the current directory on the remote FTP Server Protocol-commandFTP protocol commandRemotehelp Syntax Pathname Directory name of remote FTP Server Show the syntax of the protocol command userDelete the directory flash/temp1 from FTP Server User SyntaxUse the user command to register an FTP user Username Logon username Password Logon passwordLog in the FTP Server with username tom and password hello Enable verboseRelated command tftp put Tftp server and save it with a different name on the switchVxWorks.app on the local switch Tftp get SyntaxInterface-nameSpecify the interface name Display mac-address SyntaxSW5500tftp 1.1.3.214 put sw5500cfg.txt temp.txt SW4500display mac-address 00e0-fc01-0101 Mac-address SyntaxDisplay mac-address aging-time SW4500display mac-address aging-timeMax-mac-countmac-address max-mac-count count Undo mac-address static dynamic blackhole mac-addressUndo mac-address max-mac-count Mac-address timer SyntaxBoot bootrom Syntax Boot boot-loader SyntaxDisplay cpu Syntax Display boot-loader SyntaxShow device information Display device SyntaxDisplay fan Syntax Display memory Syntax Display power SyntaxDisplay schedule reboot Syntax Show power stateReboot Syntax Schedule reboot at Syntax Reboots the SwitchSchedule reboot at hhmm yyyy/mm/dd Undo schedule reboot SW4500schedule reboot at Schedule reboot delay SyntaxSchedule reboot delay hhhmm mmm Undo schedule reboot SW4500schedule reboot delayDevice Management Commands Default is 235552, 2000/4/1 Commands available on your SwitchRelated command display clock Clock datetime SyntaxClock timezone zonename add minus Hhmmss Undo clock timezone Clock timezone SyntaxDisplay clock Syntax Set the hostname of the Switch to be LANSwitchUnit-idUnit ID of current switch, in the range of 1 to Display config-agent SyntaxView the current system date and clock Display debugging Syntax Show all the enabled debuggingDisplay version Syntax Display the information about the system versionInformation that can be displayed on your Switch Enable IP Packet debugging For the related commands, see display debuggingRequiring periodic testing End-station polling Syntax Ip-addressPing Syntax Configure 202.38.160.244 requiring periodical testingSW4500end-station polling ip-address Ping -a ip-address -c count -d -h tllDescription Remote-ping Purpose Display remote-ping Purpose Related CommandsDisplays the latest test results Displays the test historyNumber Test Connection fail number Remote-ping-agent Purpose enable This command can be used in the following views Any viewRemote-ping-agent enable Undo remote-ping-agent enable Enable remote-ping clientTracert Syntax Tracert -a source-ip -f first-TTL -m max-TTL -p portSW4500tracert Port isDisplay info-center Syntax Show details about the information channelSW4500display channel Display info-centerUndo info-center channel channel-number Show the system log informationChannel Rename channel 0 as execconsoleInfo-center console channel channel-number channel-name Undo info-center console channelSW4500info-center enable Enable the system log functionInfo-center logbuffer Syntax SW4500info-center logbuffer Info-center loghost SyntaxSW4500info-center loghost Related commands info-center enable, display info-centerSW4500info-center loghost source vlan-interface Info-center monitor channel channel-number channel-nameSW4500info-center monitor channel Configure channel 6 as the Snmp information channelChannel-numberChannel number to be set Info-center source SyntaxSW4500info-center snmp channel Level LevelIP module FTP server moduleModule names in logging information Information Channel in Each Output Direction by Default Info-center switch-on Syntax Info-center timestamp Syntax SW4500info-center switch-on 2 trappingSW4500info-center timestamp debugging boot Reset logbuffer SyntaxReset logbuffer Info-center trapbuffer SyntaxClear information in log buffer Reset trapbuffer SyntaxClear information in trap buffer Terminal debugging SyntaxDisable the terminal log display Enable the terminal display debuggingTerminal logging Syntax terminal logging Terminal monitor Syntax terminal monitorEnable trap information display Disable the terminal monitorCommands available on your Switch Terminal trapping SyntaxDisplay the engine ID of current device Display the currently configured community namesGroup Output description of the display snmp-agent group command Display Snmp group name and safe modeGroupname Group name, ranging from 1 to 32 bytes Following table describes the output fieldsDisplay snmp-agent statistics Display the current state of Snmp communicationSW4500display snmp-agent statistics Total number of the input Snmp packets Display the system location Display the character string sysContact system contactDisplay the version information of running Snmp Display the information of all the current usersEnable snmp trap updown Undo enable snmp trap updown Enable snmp trap SyntaxDisplay snmp-proxy unit Syntax View statistics information of Snmp proxy on unitSW4500snmp-agent community read comaccess SW4500undo snmp-agent community comaccess Delete the community name comaccessSW4500snmp-agent community write mgr To create an Snmp group named 3Com, enter the following Configure the ID of a local or remote device asSnmp-agent mib-view Syntax SW4500snmp-agent group v3 3ComSW4500snmp-agent mib-view included mib2 Create a view that consists of all the objects of MIB-IISet the size of Snmp packet to 1042 bytes Location command to restore the default valueSnmp-agent sys-info Syntax Set system location as Building 3/RoomSW4500snmp-agent trap enable Standard authentication coldstart linkdown linkup warmstart Snmp-agent trap enable SyntaxSnmp-agent trap life Syntax Configure the timeout interval of Trap packet as 60 secondsSnmp-agent trap life seconds Undo snmp-agent trap life SW4500snmp-agent trap lifeSnmp-agent trap source Syntax Configure the queue length toVlan-idSpecify the Vlan interface ID, ranging from 1 to SW4500snmp-agent trap queue-sizeSnmp-agent usm-user Syntax Undo snmp-agent Syntax Disable the running Snmp agents of all Snmp versionsUndo snmp-agent SW4500undo snmp-agentDisplay rmon event Syntax Display rmon alarm SyntaxDisplay rmon eventlog Syntax Output description of the display rmon eventlog command For the related commands, see rmon historyDisplay rmon history Syntax Port-numEthernet port namePrialarm-table-entryentry of extended alarm table Display rmon prialarm SyntaxDisplay alarm information about extended Rmon Output description of the display rmon history commandDisplay rmon statistics Syntax Output description of the display rmon prialarm commandPort-numEthernet port number Show Rmon statisticsUndo rmon alarm entry-number Rmon alarm SyntaxSW4500undo rmon alarm Delete the information of entry 15 from the alarm tableRmon event Syntax Delete the entry 15 from the history control table Rmon history SyntaxSW4500rmon event 10 log Undo rmon history entry-numberUndo rmon prialarm entry-number Rmon prialarm SyntaxEntry-numberSpecifies the entry number, ranging from 1 to SW4500interface Ethernet1/0/1Switch 4500 Family provides the following functions Delete line 10 from the extended Rmon alarm tableUDP port 123 is opened only when the NTP feature is enabled UDP port 123 is closed as the NTP feature is disabledDisplay ntp-service sessions verbose View the status of all sessions maintained by NTP servicesSW4500 display ntp-service sessions Verbose Displays detailed NTP session informationDisplay ntp-service status Ntp-service access Syntax Display ntp-service trace SyntaxSW4500 ntp-service access server SW4500 ntp-service access peerSW4500 system-view SW4500 ntp-service authentication enable Enable the NTP authenticationUndo ntp-service authentication-keyid key-id By default, no switch operates in the broadcast client mode Ntp-service Syntax Disable Vlan-interface1 from receiving NTP messagesMax-dynamic-sessionsntp-service max-dynamic-sessions number Undo ntp-service max-dynamic-sessions SW4500-Vlan-interface1ntp-service multicast-client By default, no trusted authentication key is configured Key-id Authentication key ID, in the range of 1 toNtp-service unicast-peer Syntax Ntp-service unicast-server SW4500 ntp-service unicast-server 128.108.22.44 version SW4500debug ssh server all SW4500term debug Debugging ssh server SyntaxDisplay rsa local-key-pair public Related command rsa local-key-pair createSW4500display rsa local-key-pair public Display rsa peer-public-key brief name keyname Display rsa peer-public-keySW4500display rsa peer-public-key Display ssh server SyntaxSW4500display rsa peer-public-key name candy2 Display ssh server status sessionPeer-public-key end Syntax To display SSH sessionsPublic key view Related commands rsa peer-public-key,public-key-code begin Related command user-interface vtyTo quit public key view, enter the following SW4500user-interface vty 0Public key edit view Public-key-code begin SyntaxPublic-key-code end Syntax To generate the local RSA key pair, enter the following Rsa local-key-pair create SyntaxCharacters Rsa peer-public-key SyntaxProgram supporting SSH1.5 Ssh server SyntaxSsh server timeout Syntax By default, it is Related command display ssh serverSsh user assign rsa-key Syntax To associate the key 1 with jsmith, enter the following Related command display ssh user-informationSW4500ssh user jsmith assign rsa-key key1 Display ssh server-info Syntax At the next logonKeys, enter the following Related commands rsa peer-public-key, public-key-code end Related commands rsa peer-public-key, public-key-code beginTo exit the public key view, enter the following SW4500rsa peer-public-key SW4500003Public-key-code end Syntax SW4500rsa peer-public-key SW4500002 Ssh client assign rsa-key SyntaxEnable Ssh2 Syntax SW4500ssh client first-time enableMd596 Hmac algorithm hmac-md5-96 Use the sftp server enable command to start the Sftp server Sftp server enable SyntaxBy default, the Sftp server is shutdown Ssh user service-type SyntaxParticular user By default, the service type is stelnetType Sftp Client ViewTo change the current path to d/temp, enter the following Remote-pathThe name of a path on the serverRemote-fileThe name of a file on the server To view the directory, flash/, enter the following Remote-pathThe name of the directory to viewExit Syntax exit View Sftp-clientdelete temp.cHelp command Command The name of a commandHelp Syntax Sftp-clientget temp1.c temp.cFlash To view the directory flash/, enter the followingSftp-clientput temp.c temp1.c Oldname Original file name Remove SyntaxSftp-clientremove temp.c Sftp Syntax Newname New file nameSftp-clientrename temp1 temp2 Sftp-clientrmdir D/temp1SW4500sftp Display password-control Configuring Password ControlDisplay Syntax Fields in Display Password- Control CommandPassword-control Syntax # Configure the system login password for user test toPassword System view System View return to User View with Ctrl+Z Password-control enable SyntaxPassword-control super Syntax Reset password-control history-record username username # Delete the history password records of all usersReset password-control blacklist username username # Delete the history password records of user testBlacklist Username username Specifies a user name# Delete user test from the blacklist Configuring Password Control Five second countdown timer allowing access to the bootrom Bootrom InterfaceBoot Menu BootEnter Option 1 at the prompt to display the following Current mode is enable bootrom password recovery Download Commands Selecting a Tftp download Selecting an XModem download Selecting a FTP download