Private-vlan, Vlan Configuration | Accton Technology ES3552XA

VLAN Commands 4

3.Use the switchport mode private-vlancommand to configure ports as promiscuous (i.e., having access to all ports in the primary VLAN) or host (i.e., community port).

4.Use the switchport private-vlan host-association command to assign a port to a secondary VLAN.

5.Use the switchport private-vlan mapping command to assign a port to a primary VLAN.

6.Use the show vlan private-vlancommand to verify your configuration settings.

To configure isolated VLANs, follow these steps:

1.Use the private-vlancommand to designate an isolated VLAN that will contain a single promiscuous port and one or more isolated ports.

2.Use the switchport mode private-vlancommand to configure one port as promiscuous (i.e., having access to all ports in the isolated VLAN) one or more ports as host (i.e., isolated port).

3.Use the switchport private-vlan isolated command to assign a port to an isolated VLAN.

4.Use the show vlan private-vlancommand to verify your configuration settings.

private-vlan

Use this command to create a primary, community, or isolated private VLAN. Use the no form to remove the specified private VLAN.

Syntax

private-vlan vlan-id{community primary isolated} no private-vlan vlan-id

•vlan-id- ID of private VLAN. (Range: 1-4094, no leading zeroes).

•community - A VLAN in which traffic is restricted to host members in the same VLAN and to promiscuous ports in the associate primary VLAN.

•primary - A VLAN which can contain one or more community VLANs, and serves to channel traffic between community VLANs and other locations.

•isolated – Specifies an isolated VLAN. Ports assigned to an isolated VLAN can only communicate with the promiscuous port within their own VLAN.

Default Setting

None

Command Mode

VLAN Configuration

Command Usage

•Private VLANs are used to restrict traffic to ports within the same community or isolated VLAN, and channel traffic passing outside the community through promiscuous ports. When using community VLANs, they must be mapped to

4-189

Image 431

Accton Technology ES3552XA, ES3526XA manual Private-vlan, Vlan Configuration

Contents

Powered by Accton Page Fast Ethernet Switch ES3526XA ES3552XA F2.2.6.3 E122006-CS-R02 149100005500H Contents Page Iii Page Command Line Interface Page Vii Viii Contents Page Contents Xii Xiii Appendix a Software SpecificationsAppendix B Troubleshooting Glossary Index Xiv Tables Xvi Xvii Xviii Xix Figures Figures Xxi Xxii Supports standard STP and Rapid Spanning Tree Protocol Rstp Key FeaturesKey Features Feature Description Description of Software Features Description of Software Features Introduction Password super System DefaultsSystem Defaults Function Parameter Default Client Enabled System Defaults Function Parameter Clock Synchronization Disabled Introduction Configuration Options Connecting to the Switch Required Connections Initial Configuration Console Connection Basic ConfigurationRemote Connections Manual Configuration Setting PasswordsSetting an IP Address Dynamic Configuration Community Strings for Snmp version 1 and 2c clients Enabling Snmp Management Access 120 Trap Receivers118 126 Saving Configuration SettingsConfiguring Access for Snmp Version 3 Clients 125 Managing System Files Initial Configuration Using the Web Interface Configuring the Switch Home Navigating the Web Browser Interface Panel Display Configuration Options Menu Description System System Information ConfigurationMain Menu Main Menu ACL Menu Description 148 139Current Table 143 Dscp Priority Status Both IP Precedence Priority Class-of-service value IP Dscp Priority155 164 Configuration Settings Menu Description Igmp Snooping 170 Igmp ConfigurationQuery Igmp Filter Configuration Configuration Settings Igmp Filter/Throttling Trunk Main Menu Field Attributes Displaying System Information Expansion Slot Displaying Switch Hardware/Software VersionsMain Board Management Software Displaying Switch Information Displaying Bridge Extension Capabilities Bridge Extension Configuration 195 Setting the Switch’s IP AddressCLI Enter the following command Command Attributes 245 131244 246 Using DHCP/BOOTP Dhcp Relay and Option 82 Information Command Usage 242 241 Managing Firmware Operation Code Image File Transfer Downloading System Software from a Server 11 Deleting Files Saving or Restoring Configuration Settings 12 Copy Configuration Settings Downloading Configuration Settings from a Server Console Port Settings 14 Console Port Settings Telnet Settings 15 Enabling Telnet System Log Configuration Configuring Event Logging Level Severity Name Description Logging Levels 17 Remote Logs Remote Log Configuration CLI This example shows the event message stored in RAM Displaying Log Messages Sending Simple Mail Transfer Protocol Alerts 19 Enabling and Configuring Smtp Alerts 20 Resetting the System Resetting the System Configuring Sntp Setting the System Clock Configuring NTP 22 NTP Client Configuration Simple Network Management Protocol Setting the Time Zone User defined SNMPv3 Security Models and LevelsLevel Group Read View Write View Notify View Security 117 Setting Community Access StringsCLI The following example enables Snmp on the switch Enabling the Snmp Agent Specifying Trap Managers and Trap Types 25 Configuring Snmp Community Strings Configuring the Switch 122 Configuring SNMPv3 Management Access 123 Setting a Local Engine IDSpecifying a Remote Engine ID CLI This example sets an SNMPv3 engine ID CLI This example specifies a remote SNMPv3 engine ID Configuring SNMPv3 Users 29 Configuring SNMPv3 Users 130 Configuring Remote SNMPv3 Users 30 Configuring Remote SNMPv3 Users Configuring SNMPv3 Groups Supported Notification Messages This trap is sent when the fan failure has Private Traps SwPowerStatusThis trap is sent when the fan fails SwFanRecoverTrap 127 31 Configuring SNMPv3 Groups 32 Configuring SNMPv3 Views Setting SNMPv3 Views Configuring User Accounts User Authentication 33 Access Levels Configuring Local/Remote Logon Authentication Tacacs Settings Radius Settings 34 Authentication Settings Https System Support Configuring Https Address server ip-address Replacing the Default Secure-site Certificate Configuring the Secure Shell Configuring the Switch Generating the Host Key Pair 36 SSH Host-Key Settings SSH server includes basic settings for authentication Configuring the SSH Server Configuring Port Security 38 Configuring Port Security Configuring 802.1X Port Authentication Web Click Security, 802.1X, Information Displaying 802.1X Global Settings802.1X protocol provides client authentication CLI This example shows the default global setting for CLI This example enables 802.1X globally for the switch Configuring 802.1X Global SettingsConfiguring Port Settings for Authorized 41 802.1X Port Configuration Consoleconfig#interface ethernet 1/2 802.1X Statistics Displaying 802.1X Statistics CLI This example displays the 802.1X statistics for port MAC Address Authentication Configuring the MAC Authentication Reauthentication Time Web Click Security, Network Access, Configuration Configuring MAC Authentication for Ports Displaying Secure MAC Address Information Web Click Security, Network Access, Port ConfigurationCLI This example configures MAC authentication for port 45 Network Access MAC Address Information 100 Configuring MAC Address Filters Filtering Addresses for Management Access 47 Creating a Web IP Filter List CLI This example allows Snmp access for a specific client Configuring Access Control Lists Access Control Lists 103 Setting the ACL Name and TypeCLI This example creates a standard IP ACL named david 104 Configuring a Standard IP ACL Configuring an Extended IP ACL 105 50 ACL Configuration Extended IP 111 Configuring a MAC ACL 52 Binding a Port to an ACL Binding a Port to an Access Control List 107 Port ConfigurationDisplaying Connection Status Field Attributes Web Basic Information ConfigurationWeb Click Port, Port Information or Trunk Information 138 Configuring Interface ConnectionsCurrent Status 54 Port/Trunk Configuration 135 Creating Trunk Groups136 55 Configuring Port Trunks Statically Configuring a Trunk 147 Enabling Lacp on Selected Ports 148 56 Lacp Configuration Dynamically Creating a Port Channel Configuring Lacp Parameters 57 Lacp Aggregation Port Lacp Port Counters Displaying Lacp Port CountersYou can display statistics for Lacp protocol messages LACPDUs Illegal Pkts Protocols Ethernet Type Field Description Displaying Lacp Settings and Status for the Local SideLacp Internal Configuration Information 59 Lacp Port Internal Information 10 Lacp Neighbor Configuration Information Displaying Lacp Settings and Status for the Remote Side Console#show lacp 1 neighbors 61 Port Broadcast Control Setting Broadcast Storm Thresholds 140 Configuring Port Mirroring137 142 Configuring Rate LimitsRate Limit Granularity 145 Rate Limit Configuration 144 Showing Port Statistics Protocol Transmit ErrorsErrors FCS Errors Rmon Statistics 11 Port StatisticsParameter Description Fragments Or alignment error 65 Port Statistics 139 Address Table SettingsSetting Static Addresses CLI This example shows statistics for port 157 Displaying the Address Table 158 67 Dynamic Addresses 159 Spanning Tree Algorithm ConfigurationChanging the Aging Time CLI This example sets the aging time to 300 seconds Designated Root Port Bridge For this Region Displaying Global Settings 120 69 STA Information Mstp 176 Basic Configuration of Global Settings Configuring Global SettingsGlobal settings apply to the entire switch Configuration Settings for Rstp Root Device Configuration Configuration Settings for Mstp 70 STA Global Configuration Displaying Interface Settings AD B 71 STA Port Information CLI This example shows the STA attributes for port Configuring Interface Settings 131 CLI This example sets STA attributes for port Configuring Multiple Spanning Trees 133 178 73 Mstp Vlan Configuration 167 74 Mstp Port Information Displaying Interface Settings for Mstp Configuring Interface Settings for Mstp 174 CLI This example sets the Mstp attributes for port175 Assigning Ports to VLANs Vlan ConfigurationIeee 802.1Q VLANs VA Vlan Aware VU Vlan Unaware Forwarding Tagged/Untagged Frames 194 Enabling or Disabling Gvrp Global SettingCLI This example enables Gvrp for the switch Displaying Basic Vlan Information Displaying Current VLANs Command Attributes Web 78 Vlan Current Table Command Attributes CLI 187 Creating VLANs 180 CLI This example creates a new Vlan179 Adding Static Members to VLANs Vlan Index 185 Adding Static Members to VLANs Port Index 81 Vlan Static Membership by Port Configuring Vlan Behavior for Interfaces 82 Vlan Port Configuration 184 Private VLANs182 183 153 Displaying Current Private VLANs 189 Configuring Private VLANsAssociating VLANs 190 Displaying Private Vlan Interface Information 193 Configuring Private Vlan Interfaces 191 87 Private Vlan Port Configuration Setting the Default Priority for Interfaces Class of Service ConfigurationLayer 2 Queue Settings CLI This example assigns a default priority of 5 to port 88 Port Priority Configuration 13 CoS Priority Levels Mapping CoS Values to Egress Queues12 Egress Queue Priority Mapping 203 201 90 Queue Mode Selecting the Queue Mode 202 Setting the Service Weight for Traffic Classes200 204 Layer 3/4 Priority SettingsMapping Layer 3/4 Priorities to CoS Values Selecting IP Precedence/DSCP Priority 14 Mapping IP Precedence Mapping IP Precedence 209 Mapping Dscp Priority15 Mapping Dscp Priority Values 206 210 207 95 IP Port Priority Status Mapping IP Port Priority 205 Mapping CoS Values to ACLs16 Egress Queue Priority Mapping 108 Multicast Filtering Layer 2 Igmp Snooping and Query Configuring Igmp Snooping and Query Parameters 98 Igmp Configuration Enabling Igmp Immediate Leave 100 Displaying Multicast Router Port Information Displaying Interfaces Attached to a Multicast Router 219 Specifying Static Interfaces for a Multicast Router220 215 Displaying Port Members of Multicast Services 103 Igmp Member Port Table Assigning Ports to Multicast Services Enabling Igmp Filtering and Throttling Igmp Filtering and Throttling 104 Enabling Igmp Filtering and Throttling Configuring Igmp Filter Profiles 105 Igmp Profile Configuration Configuring Igmp Filtering and Throttling for Interfaces 106 Igmp Filter and Throttling Port Configuration Multicast Vlan Registration General Configuration Guidelines for MVR 107 MVR Global Configuration Configuring Global MVR Settings 108 MVR Port Information Displaying MVR Interface Status 109 MVR Group IP Information Displaying Port Members of Multicast Groups MVR Vlan Configuring MVR Interface Status Assigning Static Multicast Groups to Interfaces Web Click MVR, Port or Trunk Configuration Configuring General DNS Service Parameters Configuring Domain Name Service 190 237 234235 236 113 DNS Static Host Table Configuring Static DNS Host to Address Entries 238 Displaying the DNS Cache233 Cluster Configuration Switch Clustering 250 Cluster Member ConfigurationAdds Candidate switches to the cluster as Members 249 Cluster Member Information Web Click Cluster, Member ConfigurationDisplays current cluster Member switch information 253 Cluster Candidate Information Configuring the Switch 198 Telnet Connection Using the Command Line InterfaceAccessing the CLI Command Line Interface Keywords and Arguments Entering CommandsCommand Completion Getting Help on Commands CLIMSGPRIVILEGEEXECCMDW2SHOWMVR Showing Commands Partial Keyword Lookup Negating the Effect of CommandsUsing Command History Understanding Command Modes Command Modes Exec Commands Spanning-tree mst-configuration Consoleconfig-mstp# 160 Configuration CommandsConfiguration Modes Command Prompt Consoleconfig-if# 131 Keystroke Function Command Line ProcessingCommand Line Processing Command Groups Description Command Groups Command Line Interface Line Line Commands Example LoginRelated Commands Syntax Login local no login No password is specified PasswordUsername 4-27 password Syntax Password 0 7 password no password Syntax Exec-timeout seconds no exec-timeout Timeout login responseExec-timeout Default value is three attempts Password-threshSilent-time4-16 Timeout login response Syntax Password-thresh threshold no password-thresh Syntax Databits 7 8 no databits Silent-timeDatabits Syntax Silent-time seconds no silent-time Syntax Parity none even odd no parity Parity Syntax Stopbits 1 SpeedStopbits Syntax Speed bps no speed Syntax Show line console vty DisconnectShow line Syntax Disconnect session-id General Commands Function Mode General CommandsEnable To show all lines, enter this command Level DisableDisable Enable password Enable Show history Configure End Reload Quit This command exits the configuration programThis example shows how to quit a CLI session Exit Prompt System Management CommandsDevice Designation Commands Syntax Hostname name no hostname User Access CommandsUser Access Commands Function Mode Hostname Username 10 Default Login Settings Username Access-level PasswordGuest Admin Enable 4-20 authentication enable Enable passwordDefault is level Default password is super Management IP Filter Commands11 IP Filter Commands Function Mode Management Show management Ip http server Web Server CommandsIp http port 13 Https System Support Web Browser Operating System Syntax No ip http secure-server Default SettingIp http secure-server Ip http port Ip http secure-server4-32 Ip http secure-portIp http secure-port4-33 Copy tftp https-certificate Portnumber The UDP port used for HTTPS/SSL. Range Ip telnet server Telnet Server CommandsIp telnet port Sets the SSH server key size Copy tftp public-key Secure Shell Commands15 SSH Commands Function Mode Ip telnet port Command Line Interface Ip ssh crypto host-key generate 4-40 show ssh Syntax No ip ssh server Default SettingIp ssh server Exec-timeout4-14 show ip ssh Ip ssh timeoutIp ssh authentication-retries Syntax Ip ssh timeout seconds no ip ssh timeout Syntax Delete public-key username dsa rsa Ip ssh server-key sizeDelete public-key Syntax Ip ssh crypto zeroize dsa rsa Ip ssh crypto host-key generateIp ssh crypto zeroize Syntax Ip ssh crypto host-key generate dsa rsa Syntax Ip ssh save host-key dsa rsa Ip ssh save host-keyShow ip ssh Terminology Show ssh16 show ssh display description Shows all public keys Show public-keySyntax Show public-key user username host Username Name of an SSH user. Range 1-8 characters Logging on Event Logging Commands17 Event Logging Commands Function Mode Syntax No logging on Default Setting 18 Logging Levels Flash errors level 3 RAM warnings level 6Logging history Hostipaddress The IP address of a syslog server Logging hostLogging facility Syntax No logging host hostipaddress Syntax Clear logging flash ram Logging trapClear logging Syntax Logging trap level no logging trap 19 show logging flash/ram display description Show loggingSyntax Show logging flash ram sendmail trap Show log Facility commandLogging trap command Syntax Show log flash ram login tail Following example shows sample messages stored in RAM Smtp Alert Commands21 Smtp Alert Commands Function Mode Logging sendmail host Syntax Logging sendmail level level Logging sendmail level This example will set the source email john@acme.com Logging sendmail source-emailLogging sendmail destination-email Syntax No logging sendmail source-email email-address Show logging sendmail Syntax No logging sendmail Default SettingLogging sendmail Sntp client Time Commands22 Time Commands Function Mode Syntax No sntp client Default Setting Ip IP address of an NTP time server. Range 1-3 addresses Sntp serverSntp server 4-55 sntp poll 4-56 show sntp Syntax Sntp server ip1 ip2 ip3 Syntax Sntp poll seconds no sntp poll Sntp pollShow sntp Sntp client 4-54 ntp poll 4-58 ntp server Syntax No ntp client Default SettingNtp client Ntp server Syntax Ntp poll seconds no ntp poll Ntp pollVersion number Ntp client 4-57 ntp poll 4-58 show ntp Ntp authentication-key4-59 Ntp authenticateNtp authentication-key Syntax No ntp authenticate Default Setting Show ntp Clock timezone Calendar set hour min sec day month year month day year This command displays the system clockCalendar set Show calendar 23 System Status Commands Function Mode System Status CommandsShow startup-config Show running-config4-65 Show running-config Show startup-config4-63 Show users This command displays system informationShow system Show version Syntax No jumbo frame Default Setting Frame Size Commands24 Frame Size Commands Jumbo frame Enables support for jumbo frames Command Function Mode Copy Flash/File Commands25 Flash/File Commands Flash/File Commands Following example shows how to download a configuration file Delete filename Syntax Dir boot-rom config opcode filenameDelete Dir Column Heading Description WhichbootSyntax whichboot Default Setting 26 File Directory Information Dir 4-73 whichboot Boot systemSyntax Boot system boot-romconfig opcode filename 27 Authentication Commands Command Group Function Authentication CommandsAuthentication Sequence Authentication login Username for setting the local user names and passwords Authentication enable Radius-server host 29 Radius Client Commands Function ModeShow radius-server Shows the current Radius settings Radius Client Radius-server key Radius-server port Radius-server retransmit Radius-server timeout Show radius-server 30 Tacacs Commands Function ModeTACACS+ Client Syntax Tacacs-server port portnumber no tacacs-server port Tacacs-server hostTacacs-server port Tacacs-server key Syntax Tacacs-server key keystring no tacacs-server key Show tacacs-server Interface Configuration Ethernet Port Security Commands31 Port Security Commands Function Mode Status Disabled Action None Maximum Addresses 32 802.1X Port Authentication Command Function Mode 802.1X Port Authentication Syntax No system-auth-control Default Setting Dot1x defaultAcquire a new client Dot1x timeout re-authperiod Be re-authenticated Dot1x timeout tx-period Syntax Dot1x max-req count no dot1x max-req Default Command ModeDot1x max-req Dot1x port-control Interface Dot1x re-authenticateSyntax Dot1x re-authenticate interface Dot1x operation-mode Seconds The number of seconds. Range Dot1x re-authenticationDot1x timeout quiet-period Syntax No dot1x re-authentication Command Mode Show dot1x Dot1x timeout re-authperiodDot1x timeout tx-period Statistics Displays dot1x status for each port Syntax Show dot1x statistics interface interface Backend State Machine Authenticator State MachineReauthentication State Machine State Current state including initialize, reauthenticate Example 33 Network Access Command Function Mode Network AccessNetwork-access mode 1024 Network-access max-mac-count Syntax No network-access mac-filter filter-idmac-address Network-access mac-filter Filter-id- The number that identifies the filter. Range Network-access port-mac-filterNetwork-access dynamic-vlan Syntax No network-access dynamic-vlan Default Setting 1800 Mac-authentication reauth-timeFollowing example enables dynamic Vlan assignment on port Displays the settings for all interfaces Clear network-accessShow network-access Syntax Show network-access interface interface Displays all filters Show network-access mac-filterShow network-access mac-address-table Use this command to display MAC authentication filters 101 Access Control Lists Access Control List Commands Syntax No access-list ip standard extended aclname Access-list ip34 Access Control Lists Command Groups Function 35 IP ACLs Command Function Mode Standard ACL Permit, deny Ip access-group4-107 show ip access-list4-107Syntax No permit deny any source bitmask host source No permit deny tcp Access-list ip Extended ACL Syntax No ip access-group aclname Show ip access-listIp access-group Syntax Show ip access-list standard extended aclname This command shows the ports assigned to IP ACLs Show ip access-groupMap access-list ip Show ip access-list4-107 36 Egress Queue Priority Mapping Example Show map access-list ipQueue cos-map4-201 Show map access-list ip Syntax Show map access-list ip interface MAC ACLs Access-list mac37 MAC ACLs Command Function Mode Syntax No access-list mac aclname Syntax No permit deny Permit, deny MAC ACL Syntax Mac access-group aclname Show mac access-listMac access-group Syntax Show mac access-list aclname This command shows the ports assigned to MAC ACLs Show mac access-groupMap access-list mac Show mac access-list4-112 38 Egress Queue Priority Mapping Show map access-list macQueue cos-map4-201 Show map access-list mac Syntax Show map access-list mac interface ACL Information Show access-listShow access-group 39 ACL Information Command Function Mode 40 Snmp Commands Function Mode Snmp Commands Show snmp Syntax No snmp-server Default SettingSnmp-server Snmp-server community Syntax Snmp-server location text no snmp-server location Snmp-server contactSnmp-server location Syntax Snmp-server contact string no snmp-server contact Host Address None Notification Type Traps Snmp-server host Snmp Version UDP Port Issue authentication and link-up-down traps Snmp-server enable trapsSnmp-server enable traps Snmp-server engine-id Show snmp engine-id This command shows the Snmp engine IDThis example shows the default engine ID This view includes MIB-2 Defaultview includes access to the entire MIB treeSnmp-server view Examples 42 show snmp view display description This command shows information on the Snmp viewsShow snmp view Snmp-server group Show snmp group 43 show snmp group display description Snmp-server user 129 44 show snmp user display description This command shows information on Snmp usersShow snmp user Port-channel channel-idRange Interface Commands45 Interface Commands Function Mode Interface Syntax Description string no description DescriptionSpeed-duplex Negotiation 4-133 capabilities Syntax No negotiation Default SettingNegotiation Capabilities 4-134speed-duplex4-132 Following example configures port 11 to use autonegotiationCapabilities Negotiation 4-133speed-duplex4-132 flowcontrol Syntax No flowcontrol Default SettingFlowcontrol Shutdown Syntax No shutdown Default Setting Clear counters Switchport broadcast packet-rateThis command clears statistics on an interface Port-channel channel-idRange Default Setting Syntax Show interfaces status interface This command displays the status for an interfaceShow interfaces status Following example clears statistics on port Shows the counters for all interfaces This command displays interface statisticsShow interfaces counters Syntax Show interfaces counters interface Shows all interfaces Show interfaces switchportSyntax Show interfaces switchport interface Interfaces Switchport Statistics Interface ethernet unit/port source port Mirror Port Commands47 Mirror Port Commands Function Mode Port monitor Syntax Show port monitor interface This command displays mirror informationFollowing shows mirroring configured from port 6 to port Show port monitor Fast Ethernet255 Gigabit Ethernet30 Rate Limit Commands48 Rate Limit Commands Function Mode Rate-limit Show rate-limit Global Configuration Ethernet, Port ChannelUse this command to display the rate limit granularity Rate-limit granularity 138 Link Aggregation Commands49 Link Aggregation Commands 151 Dynamically Creating a Port Channel Channel-groupGuidelines for Creating Trunks General Guidelines Following example creates trunk 1 and then adds port Syntax No lacp Default SettingLacp 32768 Lacp system-priority Lacp admin-keyEthernet Interface Interface Configuration Port Channel Lacp admin-key Port Channel Show lacp This command displays Lacp informationLacp port-priority Badly formed PDU or an illegal value of Protocol Subtype Port Channel all50 show lacp counters display description Type 51 show lacp internal display description 52 show lacp neighbors display description 53 show lacp sysid display description Address Table Commands54 Address Table Commands Function Mode Action Mac-address-table staticMac-address- MAC address Vlan-id- Vlan ID Range Mac-address- MAC address Mask Bits to match in the address Clear mac-address-table dynamicShow mac-address-table Show mac-address-table aging-time Mac-address-table aging-time 55 Spanning Tree Commands Function Mode Spanning Tree Commands Spanning-tree Spanning-tree modeSyntax No spanning-tree Default Setting Spanning tree is enabled Spanning-tree forward-time Spanning-tree forward-time 4-162spanning-tree max-age Spanning-tree hello-time Spanning-tree forward-time 4-162spanning-tree hello-time Spanning-tree max-ageSpanning-tree priority Long method Spanning-tree pathcost method Count The transmission limit in seconds. Range Spanning-tree mst-configurationThis command limits the maximum transmission rate for BPDUs Spanning-tree transmission-limit No mst instanceid vlan vlan-range MST ConfigurationMst vlan Syntax Name name Mst priorityName Mst instanceid priority priority no mst instanceid priority Max-hopshop-number RevisionMax-hops Syntax Revision number Spanning-tree cost Spanning-tree spanning-disabledSyntax No spanning-tree spanning-disabled Default Setting This example disables the spanning tree algorithm for port Priority The priority for a port. Range 0-240, in steps Spanning-tree port-priority Spanning-tree edge-port Syntax No spanning-tree edge-port Default Setting Spanning-treeedge-port4-172 Syntax No spanning-tree portfast Default SettingSpanning-tree portfast Spanning-tree link-type Auto Spanning-tree mst cost Spanning-tree mst port-priority4-175 Spanning-tree mst port-priority Syntax Spanning-tree protocol-migration interface Port-channel channel-idRange Command ModeSpanning-tree protocol-migration Show spanning-tree 177 Show spanning-tree mst configuration Editing Vlan Groups Vlan Commands56 VLANs Command Groups Function 57 Editing Vlan Groups Command Function Mode Show vlan By default only Vlan 1 exists and is activeVlan Database Configuration Vlan Interface vlan Configuring Vlan Interfaces58 Configuring Vlan Interfaces Command Function Mode Interface vlan Switchport acceptable-frame-types4-182 Switchport modeSwitchport acceptable-frame-types All ports are in hybrid mode with the Pvid set to Vlan Syntax No switchport ingress-filtering Default Setting Switchport ingress-filtering Switchport native vlan Switchport allowed vlan Displaying Vlan Information Switchport forbidden vlan59 Show Vlan Commands Function Mode Shows all VLANs This command shows Vlan informationFollowing example shows how to display information for Vlan Show vlan 60 Private Vlan Commands Configuring Private VLANs Private-vlan Vlan Configuration No private-vlan primary-vlan-idassociation Private vlan association Secondary-vlan-id- ID of secondary VLAN. Range Switchport mode private-vlanSwitchport private-vlan host-association Normal Vlan Isolated-vlan-id- ID of isolated VLAN. Range Switchport private-vlan isolated Syntax Show vlan private-vlan community isolated primary Switchport private-vlan mappingShow vlan private-vlan Bridge-ext gvrp Gvrp and Bridge Extension Commands61 Gvrp and Bridge Extension Commands Function Mode Syntax No bridge-ext gvrp Default Setting Show bridge-ext Switchport gvrpSyntax No switchport gvrp Default Setting Syntax Show gvrp configuration interface Show gvrp configurationGarp timer This command shows if Gvrp is enabled Shows all Garp timers Show garp timerSyntax Show garp timer interface 63 Priority Commands Layer Function Mode Priority CommandsPriority Commands Layer 62 Priority Commands Command Groups Function Syntax Queue mode strict wrr no queue mode Queue modeSwitchport priority default Queue bandwidth Queue bandwidth weight1...weight4 no queue bandwidth Queue cos-mapqueueid cos1 ... cosn no queue cos-map Queue cos-map Show queue cos-map4-203 Show queue modeThis command shows the current queue mode Show queue bandwidth Syntax Show queue cos-map interface This command shows the class of service priority mapShow queue cos-map Syntax No map ip port Default Setting Priority Commands Layer 365 Priority Commands Layer 3 Function Mode Syntax No map ip precedence Default Setting Following example shows how to map Http traffic to CoS value 66 Mapping IP Precedence Values CoS Value Command Mode List below shows the default priority mapping Map ip dscp dscp-value cos cos-value no map ip dscp Syntax No map ip dscp Default Setting 10, 12, 14 18, 20, 22 26, 28, 30, 32, 34 38, 40 Use this command to show the IP port priority mapShow map ip port 67 IP Dscp to CoS Vales IP Dscp Value CoS Value Syntax Show map ip precedence interface This command shows the IP precedence priority mapShow map ip precedence Syntax Show map ip dscp interface This command shows the IP Dscp priority mapShow map ip dscp 69 Igmp Snooping Commands Function Mode Multicast Filtering CommandsIgmp Snooping Commands 68 Multicast Filtering Commands Command Groups Function Ip igmp snooping vlan static Syntax No ip igmp snooping Default SettingFollowing example enables Igmp snooping Ip igmp snooping Igmp Version Following configures the switch to use Igmp VersionIp igmp snooping version Ip igmp snooping immediate-leave Show mac-address-table multicast Show ip igmp snooping 215 Ip igmp snooping querier Igmp Query Commands Layer70 Igmp Query Commands Layer Function Mode Syntax No ip igmp snooping querier Default Setting Ip igmp snooping query-max-response-time4-218 Following shows how to configure the query count toIp igmp snooping query-interval Times Ip igmp snooping router-port-expire-time Seconds The report delay advertised in Igmp queries. RangeIp igmp snooping query-max-response-time Syntax No ip igmp snooping vlan vlan-idmrouter interface Static Multicast Routing Commands71 Static Multicast Routing Commands Function Mode Ip igmp snooping vlan mrouter Multicast router port types displayed include Static Displays multicast router ports for all configured VLANsShow ip igmp snooping mrouter Syntax Show ip igmp snooping mrouter vlan vlan-id 223 Igmp Filtering and Throttling Commands72 Igmp Filtering and Throttling Commands Function Mode Syntax No ip igmp filter Default Setting Syntax No ip igmp profile profile-number Syntax Permit deny Default SettingIp igmp profile Permit, deny Syntax No ip igmp filter profile-number RangeNo range low-ip-address high-ip-address Syntax Ip igmp max-groups number No ip igmp max-groups Ip igmp max-groups Syntax Show ip igmp filter interface Ip igmp max-groups actionShow ip igmp filter Syntax Ip igmp max-groups action replace deny Syntax Show ip igmp throttle interface interface Show ip igmp profileShow ip igmp throttle interface Syntax Show ip igmp profile profile-number Multicast groups assigned to the MVR Vlan Multicast Vlan Registration Commands73 Multicast Vlan Registration Commands Function Mode 229 No mvr group ip-address count vlan vlan-id Command Line Interface Mvr Global Configuration Multicast Filtering Commands Mvr Interface Configuration Unit Stack unit. Range Port Port number. Range Show mvrSyntax Show mvr interface interface members ip-address 75 show mvr interface display description Following shows the global MVR settings74 show mvr display description Are satisfied 76 show mvr members display description Domain Name Service Commands77 DNS Commands Function Mode Syntax Clear host name Ip hostClear host No ip host name address1 address2 … address8 Syntax Ip domain-name name no ip domain-name Ip domain-nameRemoves all entries This example clears all static entries from the DNS table Ip domain-name4-234 Ip domain-listSyntax No ip domain-list name Ip domain-name4-234 ip domain-lookup4-236 Ip name-serverIp domain-lookup Server-address1- IP address of domain-name server Ip domain-name4-234 ip name-server4-236 Show hosts 78 show dns cache display description Show dnsShow dns cache Clear dns cache This command clears all entries in the DNS cache Ip dhcp relay information option Dhcp Commands79 Dhcp Commands Function Mode Syntax No ip dhcp relay information option Default Setting Ip dhcp relay server address1 address2 address3 Ip dhcp relay information policyIp dhcp relay server Syntax Ip dhcp relay information policy drop keep replace Usage Guidelines Show ip dhcp-relay Ip address IP Interface Commands80 IP Interface Commands Function Mode No static route is established Ip default-gatewaySyntax Ip default-gateway gateway no ip default-gateway Gateway IP address of the default gateway Show ip interface Ip dhcp restart Ping Ip default-gateway4-244This command has no default for the host Show ip redirects 247 Cluster Switch Cluster Commands81 Switch Cluster Commands Function Mode Syntax No cluster Default Setting Syntax Cluster ip-pool ip-addressno cluster ip-pool Cluster commanderSyntax No cluster commander Default Setting Cluster ip-pool Cluster member RcommandSyntax Rcommand id member-id Member-id- The ID number of the Member switch. Range Show cluster members This command shows the switch clustering configurationThis command shows the current switch cluster members Show cluster Show cluster candidates Software Features Appendix a Software Specifications Standards Management FeaturesGroups 1, 2, 3, 9 Statistics, History, Alarm, Event Management Information Bases Software Specifications Symptom Action Table B-1 Troubleshooting Chart Using System Logs Differentiated Services Code Point Service Dscp Access Control List ACLBoot Protocol Bootp Class of Service CoS Group Attribute Registration Protocol Garp Garp Vlan Registration Protocol GvrpGeneric Attribute Registration Protocol Garp Generic Multicast Registration Protocol Gmrp In-Band Management Igmp SnoopingIgmp Query Internet Group Management Protocol Igmp MD5 Message-Digest Algorithm Multicast SwitchingPort Authentication Remote Authentication Dial-in User Service Radius Simple Network Management Protocol Snmp Remote Monitoring RmonRapid Spanning Tree Protocol Rstp Secure Shell SSH XModem User Datagram Protocol UDPVirtual LAN Vlan Numerics Index Garp Vlan Registration Protocol See Gateway, default 3-14,4-245 Index-3 Index-4 Page ES3526XA ES3552XA E122006-CS-R02D 149100005500H