Manuals / Accton Technology / Computer Equipment / Switch

Accton Technology ES4548D, 24/48-Port manual ES4524D Gigabit Ethernet Switch

Models: ES4524D 24/48-Port ES4548D

1 588

Download 588 pages 58.05 Kb

Page 3

Management Guide

ES4524D Gigabit Ethernet Switch

Layer 2 Switch

with 20 10/100/1000BASE-T (RJ-45) Ports, and 4 Gigabit Combination Ports (RJ-45/SFP)

ES4548D Gigabit Ethernet Switch

Layer 2 Switch

with 44 10/100/1000BASE-T (RJ-45) Ports, and 4 Gigabit Combination Ports (RJ-45/SFP)

Image 3

Accton Technology ES4548D, 24/48-Port manual ES4524D Gigabit Ethernet Switch

Contents

Powered by Accton Page ES4524D Gigabit Ethernet Switch ES4524D ES4548D F0.0.0.4 E112006-CS-R01 149100030400A Contents Setting the System Clock 10-1 Vii Access Control Lists 15-1Viii Vlan Configuration 23-1Multicast Filtering 28-1 File Management Commands 35-1 Smtp Alert Commands 38-1 Xii 802.1X Port Authentication 43-1Xiii Access Control List Commands 44-1Xiv Address Table Commands 50-1Private Vlan Commands 53-1 Xvi Quality of Service Commands 56-1Xvii IPv4 Interface Commands 59-1Xviii Xix TablesPage Xxi Xxii Xxiii FiguresXxiv Figures IP Filter 12-14 Port Security 13-2Xxv FiguresXxvi Section I Getting Started Getting Started Introduction Key FeaturesKey Features Feature DescriptionIntroduction Description of Software FeaturesDescription of Software Features Introduction Description of Software Features Password super System DefaultsSystem Defaults Function Parameter DefaultSnmp View defaultviewSystem Log Status Enabled Messages Logged System Defaults Function ParameterTraffic Prioritization Ingress Port Priority Queue Mode Disabled Igmp Snooping Snooping EnabledInitial Configuration Connecting to the SwitchConfiguration Options Remote Connections Required ConnectionsBasic Configuration Setting PasswordsConsole Connection Assigning an IPv4 Address Setting an IP Address59-2 Assigning an IPv6 Address45-1 59-160-10 60-460-12 60-335-2 Obtaining an IPv4 Address59-3 59-460-2 Obtaining an IPv6 Address60-6 Enabling Snmp Management Access40-5 40-340-14 Managing System Files40-10 40-11Saving Configuration Settings Initial Configuration Section II Switch Management Page Using the Web Interface Configuring the SwitchHome Navigating the Web Browser InterfaceAction Web Page Configuration ButtonsPanel Display Apply Revert HelpIPv6 Neighbor Switch Main Menu DescriptionMain Menu System System Information12-13 11-112-8 15-117-1 Lacp23-5 Class-of-service value23-1 Current Table28-4 26-928-2 Query Multicast RouterBasic System Settings Displaying System InformationField Attributes System Information Management Software Displaying Switch Hardware/Software VersionsCLI Specify the hostname, location and contact information Main Board34-8 Switch InformationDisplaying Bridge Extension Capabilities Displaying Bridge Extension ConfigurationCommand Attributes Configuring Support for Jumbo FramesCLI Enter the following command Command UsageCLI This example renumbers all units in the stack Resetting the SystemCLI Use the reload command to restart the switch Renumbering the StackBasic System Settings Setting the Switch’s IP Address IP Version Setting an IP AddressIPv4 Interface Configuration Manual Manual ConfigurationIPv4 Interface Configuration Dhcp Using DHCP/BOOTPConfiguring an IPv6 Address Setting the Switch’s IP Address IP Version 6 IP Address Setting the Switch’s IP Address IP Version 6 Current Address Table IPv6 Interface Configuration Configuring an IPv6 General Network Prefix 60-1360-14 Protocol Settings IPv6 General Prefix ConfigurationCurrent Neighbor Cache Table Adding Static Neighbors IPv6 Neighbor -- Add 60-26 60-22Managing Firmware Managing System FilesCopy Firmware Downloading System Software from a Server35-7 Deleting FilesSaving or Restoring Configuration Settings Downloading Configuration Settings for Start-Up Downloading Configuration Settings from a ServerConsole#copy tftp startup-config Console Port Settings 36-4 36-136-2 36-3Telnet Settings Configuring the Telnet Interface Logging Levels Configuring Event LoggingSystem Log Configuration Error resource exhausted37-5 Remote Log Configuration37-1 37-237-4 37-337-7 Displaying Log MessagesSending Simple Mail Transfer Protocol Alerts CLI This example shows the event message stored in RAMEnabling and Configuring Smtp Alerts 38-4 38-138-2 38-3Configuring Sntp Setting the System Clock39-2 Setting the Time Zone39-1 39-3Snmp Overview Simple Network Management ProtocolUser defined Enabling the Snmp AgentSNMPv3 Security Models and Levels Level Group Read View Write View Notify View SecuritySetting Community Access Strings CLI The following example enables Snmp on the switch40-2 Specifying Trap Managers and Trap Types 11-5 40-7 Configuring SNMPv3 Management Access40-8 Setting a Local Engine IDSpecifying a Remote Engine ID CLI This example sets an SNMPv3 engine IDCLI This example specifies a remote SNMPv3 engine ID Configuring SNMPv3 UsersConfiguring SNMPv3 Users 40-15 Configuring Remote SNMPv3 UsersConfiguring Remote SNMPv3 Users Configuring SNMPv3 Groups Authenticated. While all implementations Topology Change Timer immediatelyAny of its configured ports transitions from That its configuration may have been alteredSupported Notification Messages 40-13 Configuring SNMPv3 GroupsConfiguring SNMPv3 Views Setting SNMPv3 Views11-17 Simple Network Management Protocol 11-18 Configuring User Accounts User Authentication41-1 Configuring Local/Remote Logon AuthenticationTACACS+ server Radius SettingsGlobal Provides globally applicable Radius settings Web TelnetAuthentication Server Settings Tacacs SettingsConfiguring Https Replacing the Default Secure-site Certificate Address server ip-address Copy Https CertificateConfiguring the Secure Shell Authenticating SSH v1.5 Clients Generating the Host Key Pair Authenticating SSH v2 Clients41-20 41-2141-23 SSH server includes basic settings for authentication Configuring the SSH Server41-19 Filtering IP Addresses for Management Access41-17 41-1841-25 41-24Configuring Port Security 42-1 Port SecurityConfiguring 802.1X Port Authentication Web Click Security, 802.1X, Information Displaying 802.1X Global Settings802.1X protocol provides port authentication CLI This example shows the default global setting for43-1 Configuring 802.1X Global SettingsConfiguring Port Settings for CLI This example enables 802.1X globally for the switchAuthorized 802.1X Port Configuration43-2 43-443-5 Displaying 802.1X Statistics 802.1X StatisticsParameter Description CLI This example displays the dot1x statistics for port 802.1X Port StatisticsConfiguring 802.1X Port Authentication 14-8 Access Control Lists Setting an ACL Name and TypeOverview Configuring a Standard IPv4 ACL CLI This example creates a standard IP ACL named bill44-2 ACL Configuration Standard IPv4 Configuring an Extended IPv4 ACL15-4 44-3 ACL Configuration Extended IPv4Configuring a MAC ACL 44-13 Configuring a Standard IPv6 ACL44-8 Configuring an Extended IPv6 ACL15-9 44-9 ACL Configuration Extended IPv644-15 Binding a Port to an Access Control ListThis switch supports ACLs for ingress filtering only 44-6Access Control Lists 15-12 Port Configuration Displaying Connection StatusField Attributes Web Current status ConfigurationField Attributes CLI Basic information45-8 CLI This example shows the connection status for PortConfiguring Interface Connections 45-4 45-245-6 45-3Showing Port Statistics Port Statistics Etherlike StatisticsRmon Statistics Formed Oversize FramesFragments 16-9 45-9 CLI This example shows statistics for portCreating Trunk Groups Static Trunk Configuration Statically Configuring a Trunk46-2 Setting a Load-Balance Mode for TrunksTrunk Load Balance Mode Enabling Lacp on Selected Ports 46-346-11 46-4 Lacp Trunk ConfigurationDynamically Creating a Port Channel Configuring Lacp ParametersLacp Aggregation Port Displaying Lacp Port Counters You can display statistics for Lacp protocol messagesLacp Port Counters Badly formed PDU or an illegal value of Protocol Subtype Parameter Description Marker Unknown PktsType Marker Illegal PktsDisplaying Lacp Settings and Status for the Local Side Lacp Internal Configuration InformationField Description Lacp Port Internal Information Lacp Neighbor Configuration Information Field Description Displaying Lacp Settings and Status for the Remote Side17-14 Broadcast Storm Control Setting Broadcast Storm Thresholds45-10 47-1Configuring Port Mirroring 48-1 Mirror Port ConfigurationCommand Attribute Configuring Rate Limits49-1 Setting Static Addresses Address Table Settings50-1 Displaying the Address Table50-3 Dynamic AddressesChanging the Aging Time CLI This example sets the aging time to 400 seconds50-4 Spanning Tree Algorithm Configuration For this Region Region RDisplaying Global Settings 22-4 STA Information Web Click Spanning Tree, STA, InformationGlobal settings apply to the entire switch Configuring Global SettingsRoot Device Configuration Basic Configuration of Global SettingsConfiguration Settings for Mstp Configuration Settings for RstpSTA Global Configuration Displaying Interface Settings 22-11 STA Port Information Configuring Interface Settings CLI This example shows the STA attributes for port51-18 22-14 CLI This example sets STA attributes for port Configuring Multiple Spanning TreesMstp Vlan Configuration 51-8 Mstp Port Information Displaying Interface Settings for MstpConfiguring Interface Settings for Mstp 51-16 CLI This example sets the Mstp attributes for portAssigning Ports to VLANs Vlan Configuration23-2 Forwarding Tagged/Untagged Frames Enabling or Disabling Gvrp Global Setting CLI This example enables Gvrp for the switchDisplaying Basic Vlan Information Command Attributes Web Displaying Current VLANsMax support Vlan numbers 256 Max support Vlan ID 4093 Command Attributes CLI Creating VLANs52-17 52-6 Adding Static Members to VLANs Vlan IndexCLI This example creates a new Vlan 52-5Vlan Static Table Adding Static Members 52-11 Adding Static Members to VLANs Port IndexConfiguring Vlan Behavior for Interfaces Vlan Port Configuration Configuring Ieee 802.1Q Tunneling QinQ Tunneling Layer 2 Flow for Packets Coming into a Tunnel Access PortLayer 2 Flow for Packets Coming into a Tunnel Uplink Port General Configuration Guidelines for QinQ Configuration Limitations for QinQ52-16 Enabling QinQ Tunneling on the SwitchCLI This example sets the switch to operate in QinQ mode 52-14Adding an Interface to a QinQ Tunnel 52-15 Tunnel Port Configuration53-1 Configuring Private VLANsCLI This example enables private VLANs Enabling Private VLANs53-2 Configuring Uplink and Downlink PortsConfiguring Protocol-Based VLANs Configuring Protocol GroupsCreate a protocol group for one or more protocols 54-1 Mapping Protocols to VLANs54-2 Protocol Vlan Port ConfigurationConfiguring Protocol-Based VLANs 25-4 Class of Service Configuration Layer 2 Queue SettingsSetting the Default Priority for Interfaces 55-3 CLI This example assigns a default priority of 5 to portPriority Level Traffic Type Mapping CoS Values to Egress QueuesMapping CoS Values to Egress Queues CoS Priority LevelsSelecting the Queue Mode 55-455-6 Setting the Service Weight for Traffic Classes 55-255-5 Queue Scheduling 55-8 Layer 3/4 Priority SettingsMapping Layer 3/4 Priorities to CoS Values Selecting IP Precedence/DSCP PriorityMapping IP Precedence Priority Level Traffic Type Mapping IP PrecedenceMapping Dscp Priority Mapping Dscp Priority IP Dscp Value CoS Value10, 12, 14 18, 20, 22 26, 28, 30, 32, 34 38, 40 55-13 55-10IP Port Priority Status Mapping IP Port Priority55-11 Configuring Quality of Service Parameters Quality of ServiceClass map is used for matching packets to a specified class Configuring a Class MapClass Configuration Match Class SettingsConfiguring Class Maps 56-3 Creating QoS PoliciesPolicy Map 56-2Policy Configuration Policy Rule Settings Class SettingsPolicy Options Configuring Policy Maps 56-6 Attaching a Policy Map to Ingress Queues56-4 56-5Quality of Service 27-8 Layer 2 Igmp Snooping and Query Multicast FilteringConfiguring Igmp Snooping and Query Parameters 57-6 57-157-4 57-557-9 Displaying Interfaces Attached to a Multicast Router57-8 Specifying Static Interfaces for a Multicast RouterIP Multicast Registration Table Displaying Port Members of Multicast ServicesIgmp Member Port Table Assigning Ports to Multicast Services28-8 Configuring General DNS Service Parameters Configuring Domain Name Service58-7 58-358-4 58-5Configuring Static DNS Host to Address Entries 58-6 58-1DNS Cache Displaying the DNS Cache29-6 Cluster Configuration Switch Clustering61-1 Cluster Member ConfigurationWeb Click Cluster, Configuration Adds Candidate switches to the cluster as Members61-3 Web Click Cluster, Member ConfigurationDisplays current cluster Member switch information Cluster Member Information61-5 Cluster Candidate InformationSection IIICommand Line Interface Page Using the Command Line Interface Accessing the CLITelnet Connection 31-2 Keywords and Arguments Entering CommandsCommand Completion Getting Help on CommandsShowing Commands Negating the Effect of Commands Using Command HistoryPartial Keyword Lookup Understanding Command Modes Exec CommandsGeneral Command Modes Configuration Commands Consoleconfig-if# 45-1 Configuration Command Modes PromptCommand Line Processing Keystroke CommandsKeystroke Function Using the Command Line Interface 31-10 Command Group Index Description CLI Command GroupsClass of Service 55-157-1 Enable General CommandsExample DisableConfigure Related CommandsNormal Exec, Privileged Exec Show historySyntax Prompt string no prompt PromptEnd ExitThis command exits the configuration program This example shows how to quit a CLI sessionQuit General Commands 33-6 Syntax Hostname name no hostname System Management CommandsSystem Management Commands Function Mode HostnameSwitch renumber Syntax Switch all renumber Default SettingReload Show ipv6 mtu Show startup-configSyntax No jumbo frame Default Setting Jumbo frame34-4 Show running-config34-5 Show running-configShow startup-config34-3 This command displays system information Show systemShow users Show version 34-9 System Management Commands 34-10 Managing Firmware File Management CommandsSaving or Restoring Configuration Settings Flash/File Commands Function ModeCopy 35-3 Delete unit filename This command deletes a file or imageDelete SyntaxDir Delete public-key41-20 This command displays a list of files in flash memorySyntax Dir unit boot-rom config opcode filename DirColumn Heading Description WhichbootSyntax whichboot unit File Directory InformationBoot system Syntax Boot system unit boot-romconfig opcode filenameDir 35-5 whichboot File Management Commands 35-8 Syntax Line console vty Line CommandsLine Commands Function Mode LineSyntax Login local no login LoginNo password is specified PasswordUsername 41-1 password Syntax Password 0 7 password no passwordTimeout login response Exec-timeoutSyntax Exec-timeout seconds no exec-timeout Default value is three attempts Password-threshCLI No timeout Telnet 10 minutes Syntax Password-thresh threshold no password-threshSyntax Databits 7 8 no databits Silent-timeDatabits Syntax Silent-time seconds no silent-timeSyntax Parity none even odd no parity ParitySyntax Stopbits 1 SpeedStopbits Syntax Speed bps no speedSyntax Show line console vty DisconnectShow line Syntax Disconnect session-idTo show all lines, enter this command Logging on Event Logging CommandsEvent Logging Commands Function Mode Syntax No logging on Default SettingFlash errors level 3 RAM warnings level 7 Logging historyLogging history 37-2 logging trap 37-4 clear log Syntax No logging host hostipaddress Default Setting Command ModeLogging host Logging facilityDisabled Level 7 Logging trapSyntax Logging trap level no logging trap Syntax Show logging flash ram sendmail trap Clear logShow logging Syntax Clear log flash ramLogging facility command Show logging flash/ram display descriptionShow logging trap display description Show log Syntax Show log flash ramFollowing example shows the event message stored in RAM Event Logging Commands 37-8 38-4 Smtp Alert CommandsSmtp Alert Commands Function Mode Logging sendmail hostSyntax Logging sendmail source-email email-address Logging sendmail levelLogging sendmail source-email Syntax Logging sendmail level levelSyntax No logging sendmail destination-email email-address Syntax No logging sendmail Default SettingLogging sendmail destination-email Logging sendmailShow logging sendmail Sntp client Time CommandsTime Commands Function Mode Syntax No sntp client Default SettingSntp server Sntp server 39-2 sntp poll 39-3 show sntpSyntax Sntp server ip1 ip2 ip3 Syntax Sntp poll seconds no sntp poll Sntp pollShow sntp Sntp client 39-1 sntp poll 39-3 show sntpClock timezone Calendar set hour min sec day month year month day year This command displays the system clockCalendar set Show calendarTime Commands 39-6 Snmp Commands Function Mode Snmp CommandsSyntax No snmp-server Default Setting Snmp-serverShow snmp Snmp-server community Syntax Snmp-server location text no snmp-server location Snmp-server contactSnmp-server location Syntax Snmp-server contact string no snmp-server contactHost Address None Notification Type Traps Snmp-server hostSnmp Version UDP Port Snmp-server enable traps Snmp-server enable trapsIssue authentication and link-up-down traps Snmp-server engine-id This command shows the Snmp engine ID This example shows the default engine IDShow snmp engine-id This view includes MIB-2 Defaultview includes access to the entire MIB treeSnmp-server view ExamplesShow snmp view display description This command shows information on the Snmp viewsShow snmp view Snmp-server group40-12 Show snmp group Show snmp group display descriptionField Description Groupname Name of an Snmp group Snmp-server user Show snmp user This command shows information on Snmp usersShow snmp user display description User Access Commands Function Mode User Authentication CommandsUser Account Commands Authentication Commands Command Group FunctionEnable password Default Login Settings Username Access-level PasswordGuest Admin Authentication Sequence Authentication loginAuthentication Sequence Commands Function Mode Local Authentication enableTacacs Use Tacacs server password Username for setting the local user names and passwords41-8 Radius Client Commands Function ModeShow radius-server Shows the current Radius settings 41-8 Radius ClientRadius-server port Default Setting Auth-portRetransmit Command Mode Radius-server hostRadius-server key Radius-server retransmitSyntax Radius-server key keystring no radius-server key Show radius-server Radius-server timeoutTacacs-server port TACACS+ Client Commands Function ModeTACACS+ Client Tacacs-server hostTacacs-server key Show tacacs-serverSyntax Tacacs-server key keystring no tacacs-server key Web Server Commands Ip http portIp http server Syntax No ip http secure-server Default Setting Ip http secure-serverIp http port Ip http secure-port Ip http secure-port41-13copy tftp https-certificatePortnumber The UDP port used for HTTPS. Range Telnet Server Commands Telnet Server Commands Function ModeIp telnet server Sets the SSH server key size 41-19 Copy tftp public-key Secure Shell Commands10 Secure Shell Commands Function Mode Configuration Guidelines41-16 Ip ssh server Syntax No ip ssh server Default SettingIp ssh crypto host-key generate 41-20 show ssh Ip ssh timeoutSyntax Ip ssh timeout seconds no ip ssh timeout Exec-timeout36-4 show ip sshBits Ip ssh authentication-retriesIp ssh server-key size Key-size- The size of server key. Range 512-896 bitsSyntax Ip ssh crypto host-key generate dsa rsa Delete public-keyIp ssh crypto host-key generate Syntax Delete public-key username dsa rsaSyntax Ip ssh save host-key dsa rsa Ip ssh crypto zeroizeIp ssh save host-key Syntax Ip ssh crypto zeroize dsa rsaIp ssh crypto host-key generate This command displays the current SSH server connectionsShow ip ssh Show sshShow public-key TerminologySyntax Show public-key user username host 41-25 IP Filter Commands12 IP Filter Commands Function Mode ManagementShow management 41-26 Max-mac-count Port Security CommandsPort Security Commands Function Mode Port securityShutdown 45-6mac-address-table static Dot1x system-auth-control 802.1X Port Authentication802.1X Port Authentication Commands Function Mode Syntax No dot1x system-auth-control Default SettingDot1x port-control Dot1x defaultDefault Command Mode Dot1x max-reqDot1x operation-mode Force-authorizedSingle-host Syntax No dot1x re-authentication Command Mode Dot1x re-authenticateDot1x re-authentication Syntax Dot1x re-authenticate interfaceSeconds The number of seconds. Range Dot1x timeout quiet-periodDot1x timeout re-authperiod Dot1x timeout re-authperiod43-5Statistics Displays dot1x status for each port Interface Dot1x timeout tx-periodShow dot1x Syntax Show dot1x statistics interface interfaceBackend State Machine Authenticator State MachineState- Current state including initialize, reauthenticate Reauthentication State MachineIPv4 ACLs Access Control List CommandsAccess Control List Commands Command Groups Function IPv4 ACL Commands Function ModeSyntax No permit deny any source bitmask host source Access-list ipSyntax No access-list ip standard extended aclname Permit, deny Ip access-group44-6 show ip access-list44-5Access-list ip Standard IPv4 ACLNo permit deny tcp Extended IPv4 ACL Permit, deny Ip access-group44-6 Show ip access-listThis command displays the rules for configured IPv4 ACLs Syntax Show ip access-list standard extended aclnameShow ip access-list44-5 Ip access-groupShow ip access-group Syntax No ip access-group aclnameIPv6 ACLs Access-list ipv6IPv6 ACL Commands Function Mode Syntax No access-list ipv6 standard extended aclnameAccess-list ipv6 Standard IPv6 ACLNew rules are appended to the end of the list Extended IPv6 ACL Syntax No permit denyAny destination-ipv6-address/prefix-length Next-header next-header dscp dscp flow-label flow-labelThis command displays the rules for configured IPv6 ACLs Show ipv6 access-listIpv6 access-group Show ipv6 access-groupSyntax No ipv6 access-group aclname MAC ACLs Access-list macMAC ACL Commands Function Mode Syntax No access-list mac aclnameNo permit deny tagged-802.3 Permit, deny MAC ACLNo permit deny tagged-eth2 No permit deny untagged-eth2Show mac access-list This command displays the rules for configured MAC ACLsSyntax Show mac access-list aclname Mac access-group Show mac access-groupSyntax Mac access-group aclname ACL Information Show access-listShow access-group ACL Information Commands Function Mode44-17 Access Control List Commands 44-18 Port-channel channel-idRange Interface CommandsInterface Commands Function Mode InterfaceDescription Speed-duplexSyntax Description string no description Syntax No negotiation Default Setting NegotiationNegotiation 45-3 capabilities Following example configures port 11 to use autonegotiation CapabilitiesCapabilities 45-4speed-duplex45-2 Negotiation 45-3speed-duplex45-2 flowcontrol Syntax No flowcontrol Default SettingFollowing example enables flow control on port FlowcontrolShutdown Syntax Media-type mode no media-typeSyntax No shutdown Default Setting Media-typePort-channel channel-idRange Default Setting Clear countersSyntax Clear counters interface Shows the status for all interfaces This command displays the status for an interfaceShow interfaces status Syntax Show interfaces status interfaceShows the counters for all interfaces This command displays interface statisticsShow interfaces counters Syntax Show interfaces counters interfaceShow interfaces switchport Syntax Show interfaces switchport interfaceShow interfaces switchport display description Indicates tagged Indicates membership mode as Trunk or HybridIndicates the default priority for untagged frames Allowed VlanInterface Commands 45-12 Link Aggregation Commands Link Aggregation CommandsGuidelines for Creating Trunks Channel-group Dynamically Creating a Port ChannelSyntax Channel-group channel-idno channel-group Src-dst-ip Port channel load-balanceLacp Syntax No lacp Default Setting32768 Lacp system-priorityLacp admin-keyEthernet Interface Lacp admin-key Port Channel Syntax Lacp admin-key key no lacp admin-keyInterface Configuration Port Channel This command displays Lacp information Lacp port-priorityShow lacp LACPDUs Illegal Pkts Port Channel allShow lacp counters display description TypeShow lacp neighbors display description Show lacp internal display descriptionShow lacp sysid display description Show port-channel load-balance46-12 Enabled for all ports Packet-rate limit 500 pps Broadcast Storm Control CommandsSwitchport broadcast packet-rate Broadcast Storm Control Commands Function ModeBroadcast Storm Control Commands 47-2 Port monitor Mirror Port CommandsMirror Port Commands Function Mode Interface Configuration Ethernet, destination portSyntax Show port monitor interface This command displays mirror informationFollowing shows mirroring configured from port 6 to port Show port monitorGigabit Ethernet 1000 Mbps Rate Limit CommandsRate Limit Commands Function Mode Rate-limitRate Limit Commands 49-2 Action Address Table CommandsAddress Table Commands Function Mode Mac-address-table staticClear mac-address-table dynamic Show mac-address-table Mac-address- MAC address Mask Bits to match in the addressShow ipv6 neighbors Show mac-address-table aging-time Mac-address-table aging-timeSpanning Tree Commands Function Mode Spanning Tree CommandsSpanning-tree Spanning-tree modeSyntax No spanning-tree Default Setting Spanning tree is enabledSpanning-tree forward-time Spanning-tree forward-timeSpanning-tree forward-time 51-3spanning-tree max-age Spanning-tree hello-timeSpanning-tree max-age Spanning-tree prioritySpanning-tree forward-time 51-3spanning-tree hello-time Long method Spanning-tree pathcost methodCount The transmission limit in seconds. Range Spanning-tree mst-configurationThis command limits the maximum transmission rate for BPDUs Spanning-tree transmission-limitMST Configuration Mst vlanNo mst instanceid vlan vlan-range Syntax Name name Mst priorityName Mst instanceid priority priority no mst instanceid priorityName RevisionSyntax Revision number Number Revision number of the spanning tree. RangeMax-hops Spanning-tree spanning-disabledSyntax No spanning-tree spanning-disabled Default Setting This example disables the spanning tree algorithm for portSyntax Spanning-tree cost cost no spanning-tree cost Spanning-tree costPriority The priority for a port. Range 0-240, in steps Syntax No spanning-tree edge-port Default SettingSpanning-tree port-priority Spanning-tree edge-portSpanning-tree portfast Syntax No spanning-tree portfast Default SettingSpanning-treeedge-port51-13 Spanning-tree link-typeSpanning-tree mst port-priority51-17 Spanning-tree mst costSpanning-tree mst port-priority Spanning-tree protocol-migrationSyntax Spanning-tree protocol-migration interface Syntax Show spanning-tree interface mst instanceid Show spanning-tree51-19 Show spanning-tree mst configuration Gvrp and Bridge Extension Commands Function Mode Vlan CommandsGvrp and Bridge Extension Commands Vlan Commands Command Groups FunctionSyntax No bridge-ext gvrp Default Setting Bridge-ext gvrpShow bridge-ext Syntax Show gvrp configuration interface Switchport gvrpShow gvrp configuration Syntax No switchport gvrp Default SettingGarp timer Editing Vlan Groups Show garp timerSyntax Show garp timer interface Commands for Editing Vlan Groups Function ModeShow vlan By default only Vlan 1 exists and is activeVlan Database Configuration VlanInterface vlan Configuring Vlan InterfacesCommands for Configuring Vlan Interfaces Function Mode Interface vlanSwitchport acceptable-frame-types52-9 Switchport modeSyntax Switchport mode hybrid trunk no switchport mode All ports are in hybrid mode with the Pvid set to VlanSyntax No switchport ingress-filtering Default Setting Switchport acceptable-frame-typesSwitchport ingress-filtering Switchport modeSwitchport native vlan Switchport allowed vlan No VLANs are included in the forbidden list Switchport forbidden vlan52-14 Ieee 802.1Q Tunneling Commands Function ModeGeneral Configuration Guidelines for QinQ Dot1q-tunnelShow dot1q-tunnel52-16 Show interfaces switchport Syntax No dot1q-tunnel system-tunnel-control Default Setting0x8100 Switchport dot1q-tunnel tpidDisplaying Vlan Information Commands for Displaying Vlan Information Function ModeSyntax Show vlan id vlan-idname vlan-name This command shows Vlan informationFollowing example shows how to display information for Vlan Show vlanVlan Commands 52-18 No private VLANs are defined Private Vlan CommandsPrivate Vlan Commands Function Mode PvlanShow pvlan This command displays the configured private Vlan54-4 Protocol-based Vlan CommandsProtocol-vlan protocol-group Configuring Groups Protocol-based Vlan Commands Function ModeProtocol-vlan protocol-group Configuring No protocol groups are configuredNo protocol groups are mapped for any interface Group-id- Group identifier for a protocol group. Range This shows protocol group 1 configured for IP over EthernetShow protocol-vlan protocol-group Syntax Show protocol-vlan protocol-group group-idMapping for all interfaces is displayed Show interfaces protocol-vlan protocol-groupPriority Commands Layer Function Mode Class of Service CommandsPriority Commands Layer Priority Commands Command Groups FunctionQueue bandwidth 55-4 show queue mode Queue modeSyntax Queue mode strict wrr no queue mode Weighted Round RobinSwitchport priority default Queue cos-mapqueueid cos1 ... cosn no queue cos-map Queue bandwidth weight1...weight4 no queue bandwidthQueue bandwidth Queue cos-mapShow queue cos-map55-6 Show queue modeDefault CoS Priority Levels This command shows the current queue modeSyntax Show queue cos-map interface This command shows the class of service priority mapShow queue bandwidth Show queue cos-mapPriority Commands Layer 3 Priority Commands Layer 3 Function ModeSyntax No map ip port Default Setting Syntax No map ip precedence Default Setting Following example shows how to map Http traffic to CoS valueList below shows the default priority mapping Map ip precedence Interface ConfigurationMap ip dscp dscp-value cos cos-value no map ip dscp Syntax No map ip dscp Default SettingSyntax Show map ip port interface This command shows the IP port priority mapShow map ip port Mapping IP Dscp to CoS Values IP Dscp ValueThis command shows the IP precedence priority map Show map ip precedenceSyntax Show map ip precedence interface This command shows the IP Dscp priority map Show map ip dscpSyntax Show map ip dscp interface 55-14 Quality of Service Commands Function Mode Quality of Service CommandsClass-map Syntax No class-map class-map-namematch-anyShow class map Match Class Map ConfigurationNo class class-map-name Policy-mapClass No policy-mappolicy-map-nameSet Policy Map ConfigurationDrop out-of-profile packets Policy Map Class ConfigurationPolice Syntax No police rate-kbpsburst-byteexceed-action drop setService-policy Syntax No service-policy input policy-map-nameNo policy map is attached to an interface Show policy-mappolicy-map-name class class-map-name Show class-mapShow policy-map Syntax Show class-map class-map-namePort-channel channel-idRange Command Mode Show policy-map interfaceSyntax Show policy-map interface interface input Quality of Service Commands 56-10 Multicast Filtering Commands Igmp Snooping CommandsIp igmp snooping Ip igmp snooping vlan static Ip igmp snooping versionIgmp Version Show mac-address-table multicast Show ip igmp snoopingIp igmp snooping querier Igmp Query CommandsIgmp Query Commands Function Mode Syntax No ip igmp snooping querier Default SettingTimes Following shows how to configure the query count toIp igmp snooping query-count Ip igmp snooping query-intervalIp igmp snooping query-max-response-time Seconds The report delay advertised in Igmp queries. RangeIp igmp snooping router-port-expire-time Switch must use IGMPv2 for this command to take effectIp igmp snooping vlan mrouter Static Multicast Routing CommandsStatic Multicast Routing Commands Function Mode No static multicast router ports are configuredShow ip igmp snooping mrouter Displays multicast router ports for all configured VLANsMulticast Filtering Commands 57-10 No ip host name address1 address2 … address8 Domain Name Service CommandsDNS Commands Function Mode Ip hostSyntax Clear host name This command deletes entries from the DNS tableClear host This example maps two address to a host nameIp domain-list58-3 ip name-server58-4 ip domain-lookup58-5 Ip domain-nameIp domain-list Syntax Ip domain-name name no ip domain-nameIp name-server Ip domain-name58-3Server-address1- IP address of domain-name server Syntax No ip domain-lookup Default Setting Ip domain-lookupIp domain-name58-3 ip domain-lookup58-5 Ip domain-name58-3 ip name-server58-4 Show hostsShow dns Show dns cacheShow dns cache display description Clear dns cache This command clears all entries in the DNS cacheIPv4 Interface Commands IPv4 Configuration Commands Function ModeIp address Ip dhcp restart 59-3 ipv6 address Ip default-gatewaySyntax Ip default-gateway gateway no ip default-gateway Gateway IP address of the default gatewayIp dhcp restart Following example defines a default gateway for this deviceShow ip redirects 59-4 ipv6 default-gateway60-12 This command submits an IPv4 Bootp or Dhcp client requestShow ip redirects This command displays the settings of an IPv4 interfaceIp default-gateway59-2 Show ipv6 default-gateway60-12 Show ip interfaceInterface 45-1 ping ipv6 This command has no default for the hostPing Syntax Ping host count countsize size59 IPv4 Interface Commands 59-6 IPv6 Configuration Commands IPv6 Interface CommandsIpv6 address link-local60-9 show ipv6 interface Ipv6 enableSyntax No ipv6 enable Default Setting IPv6 is disabledIpv6 general-prefix No general prefix is definedShow ipv6 general-prefix60-4 No IPv6 addresses are defined This command displays all configured IPv6 general prefixesShow ipv6 general-prefix Ipv6 address60-5 Syntax No ipv6 address autoconfig Default Setting Ipv6 address autoconfigIpv6 address Show ipv6 interface Ipv6 address eui-64Ipv6 address autoconfig 60-6 show ipv6 interface Ipv6 address link-local Ipv6 enable Show ipv6 interface Show ipv6 interfaceShow ipv6 interface display description Field Maximum transmission unit for this interface Show ipv6 interface display descriptionFF022, and solicited nodes FF021FFXXXXXX as described below Appending those bits to the prefixIpv6 default-gateway Show ipv6 default-gatewaySyntax Ipv6 default-gateway ipv6-addressno ipv6 address Syntax Ipv6 mtu size no ipv6 mtu Ipv6 mtuShow ipv6 mtu display description Show ipv6 mtuShow ipv6 traffic Following example shows the MTU cache for this device60-15 Ipv6 rcvd Rcvd total Received in errorFormat errors Errors discovered in processing their IPv6 options, etcIpv6 sent Show ipv6 traffic display descriptionProhibited messages received by the interface Checksum errorsIpv6 icmp input Input Input interface for the messagesIpv6 icmp output Clear ipv6 traffic Ping ipv6 Repeat 5 timeout 2 secondsIpv6 neighbor Ipv6 nd dad attempts Show ipv6 neighbors 60-26mac-address-table staticSyntax Ipv6 nd dad attempts count no ipv6 nd dad attempts Ipv6 nd ns interval 60-25 show ipv6 neighbors Milliseconds is used for neighbor discovery operations Ipv6 nd ns intervalShow ipv6 neighbors Syntax Show ipv6 neighbors vlan vlan-id ipv6-addressShow ipv6 neighbors display description Field Description Show ipv6 neighbors display description Clear ipv6 neighbors60 IPv6 Interface Commands 60-28 Cluster Switch Cluster CommandsSwitch Cluster Commands Function Mode Syntax No cluster Default SettingSyntax Cluster ip-pool ip-addressno cluster ip-pool Cluster commanderSyntax No cluster commander Default Setting Cluster ip-poolNo Members Cluster memberThis command shows the switch clustering configuration RcommandSyntax Rcommand id member-id Member-id- The ID number of the Member switch. RangeThis command shows the current switch cluster members Show cluster membersShow cluster candidates Switch Cluster Commands 61-6 Section IVAppendices Appendices Software Features Appendix a Software SpecificationsIcmp RFC Igmp RFC Management FeaturesGroups 1, 2, 3, 9 Statistics, History, Alarm, Event StandardsManagement Information Bases a Management Information BasesSoftware Specifications Symptom Action Appendix B TroubleshootingProblems Accessing the Management Interface Table B-1 Troubleshooting ChartUsing System Logs Glossary Access Control List ACLSee Generic Attribute Registration Protocol Extended Universal Identifier EUIDefines frame extensions for Vlan tagging Ieee 802.1QSee Port Trunk IP PrecedenceSee Ieee Port MirroringTCP/IP protocol commonly used for software downloads Secure Shell SSHUser Datagram Protocol UDP Glossary Glossary-8 Numerics IndexIndex-2 Index-3 Index-4 Page ES4524D ES4548D E112006-CS-R01 149100030400A