Manuals / Allied Telesis / Computer Equipment / Webcam

Allied Telesis management software layer 2+ fast ethernet switches manual Port Mirroring Commands

Models: management software layer 2+ fast ethernet switches

1 573

Download 573 pages 5.81 Kb

Page 219

Image 219

Chapter 13

Port Mirroring Commands

This chapter contains the following commands:

❑SET SWITCH MIRROR on page 220

❑SET SWITCH PORT MIRROR on page 221

❑SHOW SWITCH MIRROR on page 222

Note

Remember to save your changes with the SAVE CONFIGURATION command.

Note

Refer to the AT-S62 Management Software Menus Interface User’s

Guide for background information and guidelines on port mirroring.

219

Page 219

Image 219

Allied Telesis management software layer 2+ fast ethernet switches manual Port Mirroring Commands

Contents

Command Line User’s Guide Page Table of Contents 101 103 181 232 326 389 462 532 Preface AT-S62 Command Line User’s Guide This document uses the following conventions Contacting Allied Telesyn Starting a Command Line Management Session Starting a Management Session Command Line Interface Features Command Formatting Basic Command Line Commands Clear screen This command clears the screenFollowing command clears the screen Clear ScreenFollowing command displays the Main Menu ExitExit Following command displays the CLI keywords HelpHelp Following command ends a management session Logoff Logout QuitLogoff Following command displays the AT-S62 Main Menu MenuMenu Save configuration Save ConfigurationPrompt Set prompt=Sales SwitchSET Prompt Set prompt=promptSET Switch Consolemode Set switch consolemode=menucliSet switch consolemode=menu Show user Show UserGuide for background information on enhanced stacking Enhanced Stacking CommandsEither of the following formats Access SwitchAccess switch number=numbermacaddress=macaddress MacaddressAccess switch macaddress=003084520211 Access switch number=12Stackmode SET Switch StackmodeSet switch stackmode=masterslaveunavailable Possible settings areSet switch stackmode=master Show remotelist Following command displays the switches sorted by nameShow Remotelist Show remotelist sorted by=macaddressnameBasic Switch Commands AT-S62 Command Line User’s Guide Disable dhcpbootp Disable DhcpbootpDisable ip remoteassign Disable IP RemoteassignDisable Telnet Disable telnetFollowing command deactivates the Telnet server Enable bootp Enable BootpEnable dhcp Enable DhcpEnable ip remoteassign Enable IP RemoteassignEnable Telnet Enable telnetFollowing command activates the Telnet server Drive AT-8500 Series switch supports only oneFormat Device Format drive=flashBasic Switch Commands Ping PingPurge ip ipaddress route Purge IPPurge ip ipaddress netmask route Purge ip ipaddress netmaskReset Switch Reset switchThis command performs the functions described above Reset system name Reset SystemReset system name contact location Reset systemRestart Reboot Restart rebootFollowing command resets the switch Exist on the switch. The value None returns Restart SwitchRestart switch config=nonefilename.cfg ConfigRestart switch config=switch12.cfg Following command resets the switch to its default valuesRestart switch config=none Set asyn speed=115200 SET AsynSET IP Interface Set ip interface=eth0 ipaddress=dhcp Following command sets just the subnet maskFollowing command activates the Dhcp client software Set ip interface=eth0 netmask=255.255.255.252Set ip route ipaddress=140.35.22.12 Following command sets the default gateway toSET IP Route Set ip route ipaddress=ipaddressFollow the prompts to enter the new password SET Password ManagerSet password manager Following command changes the manager’s passwordSET Password Operator Set password operatorFollowing command changes the operator’s password Set switch consoletimer=25 SET Switch ConsoletimerSet switch consoletimer=value Following command sets the console timer to 25 minutesSET System Set system name=name contact=contact location=locationSet system name=PR Office Following command changes the operator’s password to newby SET User PasswordShow user manageroperator password=password PasswordShow asyn Show AsynShow config info Show ConfigShow config dynamic info Show configShow dhcpbootp Show DhcpbootpShow ip interface=eth0 Show IP InterfaceShow ip route Show IP RouteShow switch Show SwitchFollowing command displays the above information Show SystemShow system Guide for background information on Sntp Simple Network Time Protocol Sntp CommandsIpaddress Parameters are equivalent ADD Sntpserver PeeripaddressAdd sntpserver peeripaddress=ipaddress PeerDelete Sntpserver Peeripaddress Delete sntpserver peeripaddress=ipaddressDelete sntpserver ipaddress=148.35.16.248 Disable Sntp Disable sntpFollowing command disables Sntp on the switch Enable Sntp Enable sntpFollowing command enables the Sntp client software Following command resets Sntp Purge SntpPurge sntp Set date=11-03-2004 time=163452 Following command sets just the date to April 2SET Date Time Time in 24-hour formatSET Sntp Set sntp dst=enabled pollinterval=300 utcoffset=-8Following command displays Sntp client software information Show SntpShow sntp Show time This command shows the switch’s current date and timeFollowing command shows the system’s date and time Show TimeGuide for background information on Snmp SNMPv1 and SNMPv2 Community Strings and Trap CommandsPoint. Otherwise, the quotes are optional ADD Snmp CommunityCommunity Must be enclosed in double quotes if it contains aAdd snmp community=public traphost=149.212.10.11 Create Snmp Community Have up to eight IP addresses of management Can use the community string to access the switchThis option applies if you specify the status Community string as closed. a community string canCreate snmp community=serv12 access=read open=yes Delete Snmp Community Delete snmp community=public traphost=149.212.44.45 Destroy Snmp Community Destroy snmp community=communityDestroy snmp community=wind44 Disable Snmp Disable snmpFollowing command disables Snmp on the switch Disable Snmp Authenticatetrap Disable snmp authenticatetrapauthenticatetrapDisable snmp authenticatetrap String must be enclosed in double quotes if it Disable Snmp CommunityDisable snmp community=community Disable snmp community=sw1200Enable Snmp Enable snmpFollowing command activates Snmp on the switch Enable Snmp Authenticatetrap Enable snmp authenticatetrapauthenticatetrapEnable snmp authenticatetrap Enable Snmp Community Enable snmp community=communityEnable snmp community=private Set snmp community=sw44 open=no SET Snmp CommunitySet snmp community=serv12 access=write open=yes Show snmp community=community Otherwise, the quotes are optional. DefaultThis command displays the following Snmp information Show SnmpShow snmp community=private Show snmpSNMPv3 Commands Guide for background information on the SNMPv3 protocol ADD SNMPV3 User This command creates an SNMPv3 User Table entry Entry to the configuration file onSwitch. This is the default Configuration file on the switchClear SNMPV3 Access An optional parameterWriteview Specifies a Write View Name that allows the users Notifyview Assigned to this security group to send trapsParameter Clear snmpv3 community index=421 transporttag Clear SNMPV3 CommunityClear snmpv3 community index=index transporttag Clear snmpv3 community index=1005 transporttagClear snmpv3 notify=hwenginform tag Clear SNMPV3 NotifyClear snmpv3 notify=notify tag Clear snmpv3 notify=hwengtraptag tagClear snmpv3 targetaddr=snmphost79 taglist Clear SNMPV3 TargetaddrClear snmpv3 targetaddr=targetaddr taglist Clear snmpv3 targetaddr=snmphost44 taglistClear snmpv3 view=private subtree=1.3.6.1.4 mask Clear SNMPV3 ViewClear snmpv3 view=view subtree=OIDtext mask Clear snmpv3 view=1.3.6.1.2.1.1 maskCreate SNMPV3 Access Information in the specified View Table. This is an Parameter, then the writeview parameter defaults toNotifyview parameter defaults to none This command creates an SNMPv3 Access Table entry111 Create SNMPV3 Community 113 Create SNMPV3 Group Groupname Specifies a group name configured in the SNMPv3SNMPV3 Access on This command creates an SNMPv3 SecurityToGroup Table entry115 Inform Inform messages are sent, with a NMS or manager. This is the defaultThis command creates an SNMPv3 Notify Table entry Create SNMPV3 Notify117 Create SNMPV3 Targetaddr 119 Create SNMPV3 Targetparams Targetparams Specifies the name of the SNMPv3 TargetUser Table This command creates an SNMPv3 Target Parameters Table entry This command creates an SNMPv3 View Table entry Create SNMPV3 ViewOptions are 123 Delete snmpv3 user=75murthy75 Delete SNMPV3 UserDelete snmpv3 user=user Delete snmpv3 user=wilson890Destroy SNMPv3 Access 126 Destroy snmpv3 community index=index Destroy snmpv3 community index=1001Destroy snmpv3 community index=5 Destroy snmpv3 group username=May securitymodel=v3 Destroy snmpv3 group username=Dave securitymodel=v3Destroy snmpv3 notify=notify Destroy snmpv3 notify=systemtestnotifytrapDestroy snmpv3 notify=engineeringinform1 Destroy snmpv3 targetaddr=target Destroy snmpv3 targetaddr=snmpv3host77Destroy snmpv3 targetaddr=snmpmanager Destroy snmpv3 targetparams=snmpmanager Destroy snmpv3 targetparams=targetparamsTargetparams Destroy snmpv3 targetparams=targetparameter1Text Text name of the view Destroy SNMPV3 ViewDestroy snmpv3 view=view subtree=OIDtext Subtree Specifies the view subtree view. The options areSpecified View SET SNMPV3 AccessSpecified by the View Table entry Information in the specified View TableThis command modifies an SNMPv3 Access Table entry SET SNMPV3 Community This command modifies an SNMPv3 Community Table entry136 SET SNMPV3 Group This command modifies an SNMPv3 SecurityToGroup Table entry138 SET SNMPV3 Notify This command modifies an SNMPv3 Notify Table entry140 Retries Specifies the number of times the switch retries to SET SNMPV3 TargetaddrParameter Udpport This command modifies an SNMPv3 Target Address Table entry Username Specifies the user name Securitymodel SET SNMPV3 TargetparamsThis command modifies a Target Parameters Table entry SET SNMPV3 User 146 This command modifies an SNMPv3 View Table entry SET SNMPV3 ViewName to see the specified subtree Set snmpv3 view=system subtree=1.3.6.1.2.1 type=excluded Set snmpv3 view=internet1 subtree=internet type=includedShow snmpv3 access Show SNMPV3 AccessShow snmpv3 access=access Show snmpv3 access=productionShow snmpv3 community Show SNMPV3 CommunityShow snmpv3 community index=index Show snmpv3 community index=246Show snmpv3 group Show snmpv3 group username=Dave securitymodel=v3Show snmpv3 notify Show SNMPV3 NotifyShow snmpv3 notify=notify Show snmpv3 notify=testengtrap1Show snmpv3 targetaddr Show SNMPV3 TargetaddrShow snmpv3 targetaddr=targetaddr Show snmpv3 targetaddr=snmpv3host55Show snmpv3 targetparams Show SNMPV3 TargetparamsShow snmpv3 targetparams=targetparams Show snmpv3 targetparams=snmpv3manager95Show snmpv3 user Show SNMPV3 UserShow snmpv3 user=user Show snmpv3 user=RobertShow snmpv3 view=view subtree=OIDtext Show SNMPV3 ViewGuide for background information on the port parameters Port Parameter CommandsActivate Switch Port Activate switch port=port autonegotiateActivate switch port=1,4 autonegotiate Disable interface=21 Disable Interface LinktrapDisable interface=port linktrap Following command disables link traps on portDisable switch port=12,24 Disable Switch PortDisable switch port=port Following command disables ports 12Disable Switch Port Flow Disable switch port=port flow=pauseDisable switch port=6 flow=pause Enable interface=21 Enable Interface LinktrapEnable interface=port linktrap Following command enables Snmp link traps on portDisable switch port=1-4 Enable Switch PortEnable switch port=port Following command enables ports 1 toThis command activates flow control on port Enable Switch Port FlowEnable switch port=port flow=pause Port Specifies the port where you want to activate flowReset switch port=5-8 Reset Switch PortReset switch port=port Following command resets ports 5 toMdimode=mdimdixauto SET Switch PortAuto-Negotiation Default settingMdi Sets the port’s configuration to MDI Mdix To the port. This is the default settingDefault is 57,344 cells Is using flow control, the switch portIs not using flow control, neither will Switch portA port’s operating parameters Duplex modeSoftreset Only value isFollowing command resets port Following command disables ports 1 toSet switch port=1-6 status=disabled Set switch port=8 speed=10mhalfSET Switch Port Ratelimit Yes, on, true, enabled Activates multicastNo, off, false, disabled Deactivates multicast Set switch port=all unkucastratelimiting=enabled This command changes the rate limit to 15,000 packets Set switch port=all rate=15000Set switch port=all unkucastratelimiting=disabled Show Interface Show interface=portPort Specifies the port whose interface information you Show interface=21 Following command displays the above information on portShow switch port=14 Show Switch PortShow switch port=port Show switch portGuide for background information on the MAC address table MAC Address Table CommandsADD Switch Fdbfilter 179 Delete switch fdb macaddress=00a0c1112244 vlan=sales Delete Switch FDBDelete switch fdb macaddress=macaddress vlan=namevid Delete switch fdb macaddress=00A0D2181A11 vlan=1Specify more than one port at a time Reset Switch FDBReset switch fdb port=port Reset switch fdb port=5SET Switch Agingtimerageingtimer Set switch agingtimerageingtimer=valueSet switch agingtimer=120 Show Switch Agingtimerageingtimer Show switch agingtimerageingtimerShow switch agingtimer Show Switch FDB Show switch fdbShow switch fdb status=static Show switch fdb vlan=sales Show switch fdb status=multicastShow switch fdb address=00A0D2181A11 Show switch fdb port=2Port Trunking Commands Add switch trunk=load22 port=5 ADD Switch TrunkAdd switch trunk=name port=port Following command adds port 5 to a port trunk called load22Create Switch Trunk Create switch trunk=trunk4 port=15,17,23 Create switch trunk=load22 port=3-6 select=macdestTrunk Specifies the name of the trunk to be modified Port Delete Switch TrunkDelete switch trunk=name port=port Delete switch trunk=Devtrunk port=9Destroy Switch Trunk Destroy switch trunk=nameDestroy switch trunk=load22 SET Switch Trunk Set switch trunk=Load11 select=ipdestTrunk Specifies the name of the port trunk Select Show Switch Trunk Show switch trunkFollowing command displays port trunking information This chapter contains the following commands Networking Stack CommandsDelete ip arp Following command deletes the ARP entry with the IP addressDelete IP ARP Delete ip arp ipaddressallDelete TCP Delete tcp indexnumberDelete tcp Reset ip arp Reset IP ARPSET IP ARP Set ip arp timeout=integerFollowing command sets the timer to 600 seconds Set ip arp timeout=600IP addresses and their corresponding MAC addresses Following command displays the ARP tableShow IP ARP Show ip arpIP address of a destination network, subnetwork, or end node Following command displays the IP route tableShow tcp Show TCPInternal socket ID number assigned to the connection Number of segments transmitted with the RST bit set203 Guide for background information and guidelines on Lacp Lacp CommandsADD Lacp Port Add lacp port=8,22 aggregator=agg1 Add lacp port=6 adminkey=0x1a priority=0x10Create Lacp Aggregator Following command creates an Lacp aggregator named Delete Lacp Port Delete lacp port=port aggregator=nameDelete lacp port=9 Destroy Lacp Aggregator Destroy lacp aggregator=nameadminkey=keyFollowing command deletes an aggregator named agg15 Destroy lacp adminkey=0x1aDisable Lacp Disable lacpFollowing command disables Lacp on the switch Enable Lacp Enable lacpFollowing command enables Lacp Set lacp aggregator=server11trunk adminkey=0x22 SET Lacp AggregatorSet lacp aggregator=agg5 distribution=macsrc SET Lacp Port Set lacp port=6 priority=0x2b Set lacp port=2,5 aggregator=switchtrunkSet lacp port=8-9 adminkey=0x11 Following command changes the priority of port 6 to 0x2BThis is a hexadecimal value from 0x1 to 0xffff. Following command sets the Lacp priority on the switch toSET Lacp Priority Set lacp priority=prioritySet lacp state=enabledisable Set lacp state=enableSET Lacp State Show Lacp Port Mirroring Commands Set switch mirror=0 SET Switch MirrorSet switch mirror=port Set switch mirror=11Set switch port=5,7,10 mirror=none SET Switch Port MirrorSet switch port=port mirror=nonerxtxboth Set switch port=16-17 mirror=rxShow Switch Mirror Show switch mirrorFollowing command displays the ports of a port mirror Guide for background information on statistics Statistics CommandsReset switch port=14-15 counter Reset Switch Port CounterReset switch port=port counter This command returns a port’s statistics counters to zeroShow switch counter Show Switch CounterShow switch port counter Show Switch Port CounterShow switch port=port counter Show switch port=14 counterGuide for background information on the switch’s file system File System CommandsCopy admin.cfg admin2.cfg Copy switch 12.cfg backup.cfgCopy Filename contains spaces, it must be enclosed Create ConfigCreate config=filename.cfg Create config=Switch12.cfgDelete file=SW55a.csr Delete file=Switch 12.cfgDelete File Delete file=filenameRename Switch12.cfg Sw 44a.cfg RenameIf the name contains spaces, enclose it SET Config Set config=filename.cfgSpaces, it must be enclosed in double quotes Set config=switch22.cfg Show file=*.cfg Show FileShow file=filename Show file=File Download and Upload Commands Name in double quotes. These parameters are Load METHOD=LOCALSystem that you want to download into the application Block. If the filename contains a space, encloseLoad method=local destfile=appblock srcfile=ats62v1 3 0.img Load METHOD=TFTP Request AT-S62 configuration filePublic key certificate Public key certificate enrollment240 241 Method Specifies an Xmodem download Destfile As the new active image file on the switchLoad METHOD=XMODEM Load method=xmodem destfile=appblockfilename243 Load method=xmodem destfile=switch12.cfg Load method=xmodem destfile=sw12ssl.cerLoad method=xmodem destfile=appblock Load method=xmodem destfile=ats62v130.img Active AT-S62 image file is stored Upload METHOD=LOCALUpload method=local destfile=sw12 s62 image.img src=appblock Upload METHOD=REMOTESWITCH 249 250 Upload method=remoteswitch srcfile=appblock switchlist=2 252 Upload METHOD=TFTP 254 255 Appblock Switch’s file systemUpload METHOD=XMODEM Specifies the name of a fileUpload method=xmodem srcfile=sw22 boot.cfg Upload method=xmodem srcfile=switchcfgUpload method=xmodem srcfile=sw12sslenroll.csr Event Log and Syslog Server Commands ADD LOG Output Add log output=3 module=estack severity=e Add log output=5 module=all severity=allAdd log output=4 module=stp,vlan severity=e,w Create LOG Output 263 Clock daemon Time- based modules Time system time and Sntp Security Security modules AuthorizationAuthentication modules MessagesLOCAL1 LOCAL2 LOCAL3 LOCAL4 LOCAL5 LOCAL6 LOCAL7 Syslogformat parameter defines the content of the eventsDestroy log output=3 Following command deletes syslog server definition numberDestroy LOG Output Destroy log output=idnumberDisable LOG Disable logFollowing command disables the event log on the switch Disable log output Disable LOG OutputDisable log output=idnumber Disable log output=7Enable log Enable LOGEnable log output Enable LOG OutputEnable log output=idnumber Enable log output=4Purge log=temporary Purge LOGSave LOG Save log=temporary filename=switch 2.log SET LOG Fullaction Set log fullaction temporary=haltwrapSet log fullaction temporary=halt SET LOG Output Normal Sends only the severity, module, Description Module Example, MAC,PACCESS. For a listAccording to its impact on the switch’s operation Address for each event. This isSet log output=11 module=stp,igmpsnooping severity=e,w Set log output=3 server=198.45.12.1Displayed oldest to newest Show LOGModules Reverse Specifies the order in which the events are Newest to oldest. Without it, the events areDenial of service defense Port access control listSwitch configuration Command line interface commandsPower over Ethernet AT-8524POE switch only Management access control list802.1x port-based access control Port configurationEvent Log Example Selects all severity levelsShow log=temporary module=file,qos Following command displays all the entries in the event logShow log=temporary Show log=temporary fullServer definition. If an output ID number is not On the switch are displayedShow LOG Output Show log output=idnumber fullShow log output=5 full Following command displays information about the event logShow log output Show log output=1 fullFollowing command displays event log status information Show LOG StatusShow log status Guide for background information on classifiers Classifier CommandsCreate Classifier You can specify other Layer 2 protocols by entering A specific node or a subnet. To filter using the IPVID number Protocol Specifies a Layer 2 protocol. Options are ARPIpsaddr Create classifier=4 description=IP flow protocol=ip This command creates a classifier for all IP trafficDestroy Classifier Destroy classifier=idnumberDestroy classifier=2,4 This command deletes all classifiers on the switch Purge ClassifierPurge classifier SET Classifier Classifier Specifies the ID number of the classifier to beNumber can be from 1 to Number with You can specify additional Layer 2 protocols byEntering the protocol number in either decimal or Hexadecimal format. For the latter, precedeSet classifier=6 ipprotocol=igmp This command adds the Layer 3 protocol Igmp to classifier IDSet classifier=5 udpdport=any Show classifier=12 Show ClassifierShow classifier=idnumber Show classifierGuide for background information on access control lists ACL ACL CommandsCreate ACL ACL Commands Destroy acl=integer This command deletes an ACL from the switchFollowing command deletes ACL IDs 14 Destroy ACLThis command deletes all ACLs on the switch Purge ACLPurge acl SET ACL Set acl=6 action=permit portlist=4-7 This command changes the description of ACL IDThis command changes the classifiers of ACL ID Set acl=4 description=ARP flowShow acl=22 Show ACLShow acl=integer Show aclQuality of Service QoS Commands 307 ADD QOS Flowgroup Add qos flowgroup=integer classifierlist=integersAdd qos flowgroup=12 classifierlist=4,7 11,12 This command adds the traffic class 16 to policyADD QOS Policy Add qos policy=integer trafficclasslist=integersAdd qos trafficclass=17 flowgrouplist=21 ADD QOS TrafficclassCreate qos flowgroup=integer Create QOS FlowgroupRemarkpriority New value specified with the PriorityWith the Priority parameter 313 Create QOS Policy 14-22 Ingress ports. On switches with 24 ports plusUplinks, ports 1-26 form a port block. On switches This command creates a new QoS policyParts of the policies are Policy 11 CommandsExample 2 Video Application Example 3 Critical Database Policy 32 CommandsPolicy 15 Commands Create qos trafficclass=integer Create QOS TrafficclassPolicy level Specified at the traffic class or policy level. aUsed only if no value has been specified at Flow group level. It will override any value set atIncreases, the excess traffic will be discarded Continue to the point where all the unusedTraffic. However, no unused tokens will Accumulate in the bucket. If the trafficPriority parameter. This is Packets with the new valueSpecified with the Priority Value specified in withDelete qos flowgroup=22 classifierlist=6 Delete QOS FlowgroupDelete qos policy=1 trafficclasslist=17 Delete QOS PolicyDelete qos trafficclass=22 flowgrouplist=5 Delete QOS TrafficclassDestroy qos flowgroup=16-20,23 Destroy QOS FlowgroupDestroy qos flowgroup=integer Destroy qos flowgroup=22Destroy qos policy=5,23 Destroy QOS PolicyDestroy qos policy=integer Destroy qos policy=41Destroy qos trafficclass=16-20,23 Destroy QOS TrafficclassDestroy qos trafficclass=integer Destroy qos trafficclass=22If you specify a new priority in a flow group and a SET QOS FlowgroupTo modify. The range is 0 to If the None option is used, the frame’s currentPackets with the new value specified Set qos flowgroup=15 priority=6Set qos flowgroup=25 classifierlist=23,41 Set qos flowgroup=41 markvalue=none TOS field of the packets. The range is 0 to SET QOS PolicyALL option adds it to all ports To another policy with one commandIngressport 14-22. The None option removes the policySet qos policy=41 trafficclasslist=12,23 This command changes the ingress port for policy 8 to portThis command changes the traffic classes assigned to policy Set qos policy=8 ingressport=8SET QOS Port Set qos port=5-8 type=ingress policy=12Set qos port=1,5 type=egress policy=none Set qos trafficclass=integer SET QOS TrafficclassFlow group, traffic class, and policy. a Dscp value Bucket size without also specifying a maximum When they leave the switchTokens are added. The range is 4 to 512 Kbps This parameter should be used withWith commas e.g., 4,11,13 Set qos trafficclass=42 priority=17Set qos trafficclass=41 maxbandwidth=80 burstsize=400 Show qos flowgroup=12 Show QOS FlowgroupShow qos flowgroup=idnumber Show qos flowgroupShow qos policy=54 Show QOS PolicyShow qos policy=idnumber Show qos policyShow qos trafficclass=14 Show QOS TrafficclassShow qos trafficclass=idnumber Show qos trafficclassGuide for background information on Quality of Service Class of Service CoS CommandsMAP QOS Cosp Map qos cosp=4,5 qid=3 Following command maps priorities 4 and 5, to egress queueFollowing command maps priorities 5 and 6, to egress queue SET QOS CospSet qos cosp=5,6 qid=1 Set qos scheduling=strict Set qos scheduling=strictwrr weights=weightsSet qos scheduling=wrr weights=1,5,10,15 SET QOS SchedulingShow QOS Config Show qos configDisplays the QoS priority queues and scheduling Guide for background information on Power over Ethernet PoE Power Over Ethernet CommandsDisable poe port=5,7 Disable POE PortDisable poe port=port This command disables PoE on port 5Enable poe port=2 Enable POE PortEnable poe port=port This commands activates PoE on portSET POE Port Set poe port=14 powerlimit=12500 Following command disables PoE on ports 4Set poe port=4-5 poefunction=disable This command sets the priority on port 6 and 11 to highSET POE Threshold Set poe threshold=valueSet poe threshold=80 Show poe config port=4 Show POE ConfigShow poe config port=port Show poe configShow poe status port=port Show POE StatusShow poe status port=4 Show poe statusGuide for background information on Igmp Snooping Igmp Snooping CommandsDisable Igmpsnooping Disable igmpsnoopingThis command deactivates Igmp snooping Enable Igmpsnooping Enable igmpsnoopingThis command activates Igmp snooping SET IP Igmp Set ip igmp hoststatus=singlehost Set ip igmp snoopingstatus=disabledShow igmpsnooping Show IgmpsnoopingShow ip igmp hostlist Show IP IgmpShow ip igmp hostlist routerlist Show ip igmpShow ip igmp routerlist Denial of Service DoS Defense Commands SET DOS Set dos ipaddress=ipaddress subnet=mask uplinkport=portSet dos ipaddress=149.11.11.1 subnet=0.0.0.63 Mirrorport Set dos ipoption port=5,7,10 state=enableSET DOS Ipoption Than one port at a timeSet dos land port=port state=enabledisable mirrorport=port Set dos land port=5,7 state=enableSET DOS Land SET DOS Pingofdeath Set dos pingofdeath port=1,5 state=enable Following command activates the defense on ports 1Set dos smurf port=17 state=enable Set dos smurf port=port state=enabledisablePort Specifies the switch ports on which you want to Following command activates this defense on portSET DOS Synflood Set dos synflood port=port state=enabledisableFollowing command activates the defense on ports 18 to Set dos synflood port=18-20 state=enableSET DOS Teardrop Set dos teardrop port=22 state=enable Following command activates the defense on portShow dos ipaddress subnet Show DOSShow dos ipaddress subnet uplinkport Show dos defense port=portShow dos smurf port=4 STP Commands Activate stp Activate STPDisable STP Disable stpFollowing command disables STP Enable STP Enable stpFollowing command enables STP on the switch Purge stp Purge STP32768 SET STPFollowing table. You specify the increment that Represents the desired bridge priority value.Seconds Set stp hellotime=7 forwarddelay=25 Set stp defaultSet stp priority=11 SET STP Port Set stp port=7-10 portcost=auto Set stp port=6 portcost=15 portpriority=12Multicastmode Specifies one of the following SET Switch MulticastmodeSet switch multicastmode=abcd Where the ingress port is a memberSet switch multicastmode=a Show stp port=1-4 Show STPShow stp port=port Show stpRstp Commands Activate rstp Activate RstpDisable Rstp Disable rstpFollowing command disables Rstp Enable Rstp Enable rstpFollowing command enables Rstp Following command resets Rstp Purge RstpPurge rstp Increment that represents the desired bridge priority SET RstpRange is divided into sixteen increments, as Shown in the following table. You specifySeconds ForwarddelaySTP compatible mode Parameter settings, butSet rstp forceversion=stpcompatible Set rstp priority=5 hellotime=5 forwarddelay=20Set rstp default SET Rstp Port Values are equivalent. This is Mbps 20,000 PortpriorityYou specify the increment that corresponds to Port is an edge port.Set rstp port=6-8 edgeport=no Set rstp port=4 portcost=1000000 portpriority=14Show rstp Show rstp portconfig=portportstate=portShow rstp portconfig=1-4 Show RstpShow rstp portstate=15 Following command displays Rstp port status for portMstp Commands 407 Activate mstp Activate MstpAdd mstp mstiid=11 mstivlanassoc=24,44 ADD MstpAdd mstp mstiid=mstiid mstivlanassoc=vids Add mstp mstiid=8 mstivlanassoc=4Create mstp mstiid=8 mstivlanassoc=4 Create MstpCreate mstp mstiid=mstiid mstivlanassoc=vids At a time. The range is 1 toDelete mstp mstiid=11 mstivlanassoc=24,44 Delete MstpDelete mstp mstiid=mstiid mstivlanassoc=vids Delete mstp mstiid=8 mstivlanassoc=4Destroy mstp mstiid=4 Destroy Mstp MstiidDestroy mstp mstiid=mstiid This example deletes the spanning tree instanceDisable Mstp Disable mstpFollowing command disables Mstp Enable Mstp Enable mstpFollowing command enables Mstp Purge mstp Purge MstpSET Mstp Performs the same function as the Reset MstpCommand. The spanning tree protocol must be Disabled to use this parameterMaxhops Specifies the maximum hops counter. Mstp Seconds ForwarddelayThose ports operating in the STP compatible mode ConfignameSet mstp forceversion=forcestpcompatible Set mstp defaultIs divided into sixteen increments, as shown Default value is 32,768, which is incrementSET Mstp Cist Set mstp cist priority=prioritySet mstp cist priority=11 SET Mstp Msti Set mstp msti mstiid=mstiid priority=priorityMsti Priority Value Increments Set mstp msti mstiid=6 priority=2 Set mstp msti mstiid=4 priority=11Set mstp mstivlanassoc mstiid=11 vlanlist=24,44 SET Mstp MstivlanassocSet mstp mstivlanassoc mstiid=mstiid vlanlist=vids Set mstp mstivlanassoc mstiid=8 vlanlist=4SET Mstp Port BPDUs indefinitely. Set the migrationcheck Mbps 20,000 EdgeportConnected to any device running STP or Mstp Selections are Yes, on, true Port is an edge port. TheseMbps ports, and 20,000 for one gigabit ports Default setting is Auto-detect 0, which sets portCost depending on the speed of the port. Default An internal port cost. The range is 0 to 200,000,000Set mstp port=6-8 ptp=yes Set mstp port=14,23 extportcost=500Set mstp port=6-8 edgeport=yes Set mstp port=2-5 extportcost=autoSet mstp port=7,10 intportcost=500 Set mstp port=7,10 portpriority=4 stpid=2Set mstp port=2-5 intportcost=auto Show Mstp Msti priority Regional root ID Show mstp cist Show mstp portconfig=5 stpid=2Show mstp Show mstp portstate=4VLANs and Multiple Vlan Mode Commands Add vlan=name vid=vid port=portsall frame=untaggedtagged ADD VlanAdd vlan=production port=3 frame=tagged Add vlan=Service untaggedports=7-8 taggedports=5Add vlan=sales port=4,7 frame=untagged Add vlan=sales untaggedports=4,7Create vlan=name vid=vid port=portsall frame=untaggedtagged Create VlanFrame parameter Port Specifies the ports on the switch that are eitherThis command creates a new port-based or tagged Vlan Example, 1, 5, 14-22. To specify all ports onCreate vlan=Production vid=22 port=3,6 frame=tagged Create vlan=Service vid=16 port=1,4,5-7 frame=untaggedCreate vlan=Sales vid=3 port=4-8,12-16 frame=untagged Create vlan=Sales vid=3 untaggedports=4-8,12-16438 This parameter must be used with the Frame Delete VlanDelete vlan=name vid=vid port=ports frame=untaggedtagged Vlan Specifies the name of the Vlan to be modified VidDelete vlan=production untaggedports=13 Delete vlan=sales port=4,7 frame=untaggedDelete vlan=sales untaggedports=4,7 Delete vlan=production port=13 frame=taggedDelete vlan=Service untaggedports=6-8 taggedports=2 To 8, the commands would beDestroy vlan vlan=Sales vid=102 Destroy VlanDestroy vlan vlan=nameall vid=vid Destroy vlan vlan=SalesSET Switch Infiltering Set switch infiltering=yesnoonofftruefalseSet switch infiltering=off SET Switch Managementvlan Set switch managementvlan=nameVIDSet switch managementvlan=TechSupport Set switch vlanmode=dotqmultiple uplinkport=4 SET Switch VlanmodeSet switch vlanmode=userconfig SET Vlan Set vlan=name vid=vid type=portbasedSet vlan=gvrpvlan22 type=portbased Show vlan=sales Show VlanShow vlan=namevid Show vlanGuide for background information on the Gvrp Garp Vlan Registration Protocol CommandsDisable Garp Disable garp=gvrp gipDisable garp=gvrp Enable garp=gvrp Enable GarpEnable garp=gvrp gip This commands enables Gvrp on the switchPurge garp=gvrp Purge GarpSet garp=gvrp port=3 mode=normal SET Garp PortSet garp=gvrp port=port mode=normalnone Set garp=gvrp port=1-4 mode=noneSET Garp Timer Set garp=gvrp timer default Following command sets the timers to their default valuesFollowing command displays the above Gvrp information Show GarpShow garp=gvrp Show garp=gvrp counter Show Garp CounterFollowing command displays the above Garp counters Following command displays the Garp database Show Garp DatabaseShow garp=gvrp database Following command displays the GIP-connected ring Show Garp GIPShow garp=gvrp gip Port App Reg Following command displays GID state machinesShow Garp Machine Show garp=gvrp machineProtected Ports Vlan Commands ADD Vlan Group Following command accomplishes the same thing using syntax Add vlan=InternetGroups untaggedports=11 group=uplinkAdd vlan=InternetGroups port=5,6 frame=untagged group=4 Add vlan=InternetGroups untaggedports=5,6 group=4 Create Vlan Portprotected Create vlan=name vid=vid portprotectedCreate vlan=InternetGroups vid=12 portprotected VID Vlan Specifies the name or VID of the Vlan to beDelete vlan=InternetGroups untagged=12 Delete vlan=InternetGroups port=12 frame=untaggedDestroy vlan=InternetGroups Following command deletes the Vlan called InternetGroupsFollowing command deletes all VLANs Destroy vlan=namevidallSet vlan=Sales port=4 frame=untagged Set vlan=namevid port=ports frame=taggeduntaggedFollowing command displays the Sales Vlan Guide for background information on port security MAC Address Security CommandsSnmp trap SET Switch Port IntrusionactionPort Specifies the port where you want to change Set switch port=12,21 intrusionaction=trapSET Switch Port Securitymode Action is set to discard. Options are Trap, and disables the portDisable. This option does not apply when intrusion To the Limited security mode. Intrusion actions areSet switch port=12-24 securitymode=secured Set switch port=8 securitymode=limited learn=5Set switch port=15-16 learn=150 Set switch port=2,6,18 securitymode=lockedShow switch port=12,21 intrusion Show Switch Port IntrusionShow switch port=port intrusion Port Specifies the port where you want to viewShow Switch Port Securitymode Show switch port=port securitymodeShow switch port=1-5 securitymode 802.1x Port-based Access Control Commands Disable portaccess Disable PortaccessportauthDisable portaccessportauth Portaccess and Portauth keywords are equivalentDisable Radiusaccounting Disable radiusaccountingFollowing command disables Radius accounting Enable Portaccessportauth Enable portaccessportauthEnable portaccess Enable radiusaccounting Enable RadiusaccountingControl SET Portaccessportauth Port ROLE=AUTHENTICATORPort-based authentication Control on the portSwitch by using the clients Authentication messagesAuthentication server. Each Access the network isIs disabled by default. The default value is Switch or the switch isReset or power cycled Client before retransmitting the request. The defaultClient’s authentication Authenticator port will handle egress broadcastMulticast traffic when in the unauthorized state. You Client has logged on. This is the defaultThis command sets ports 4 to 6 to the Authenticator role Set portaccess port=4-6 role=authenticatorSet portaccess port=12,15 role=none Port Specifies the port that you want to set to SET Portaccessportauth Port ROLE=SUPPLICANTTo adjust. You can specify more than one port at a To 60 seconds. The default is 30 secondsSet portaccess port=4-6 role=supplicant SET Radiusaccounting Set radiusaccounting updateenable=enabled interval=200 Interim accounting updates to the Radius serverRange is 30 to 300 seconds. The default is Set radiusaccounting status=enabled trigger=stoponlyShow portaccess status Show PortaccessportauthShow portaccessportauth configstatus Show portaccess configShow portaccess port=12 supplicant config Show Portaccessporauth PortSettings you want to view. You can specify more Show portaccess port=10 authenticator statusShow radiusaccounting Show RadiusaccountingGuide for background information on the web server Web Server CommandsDisable Http Server Disable http serverFollowing command disables the web server Enable Http Server Enable http serverFollowing command activates the web server Purge http server Purge Http ServerSecure Https mode Will listen on. The default for non-secure HttpSET Http Server Set http server security=enabled sslkeyid=5 Set http server security=disabledThis command enables the web server enable http server Set http server security=enabled sslkeyid=4503 This command disables the web server disable http server Set system distinguishedname=cn=149.44.44.44Create pki enrollmentrequest=sw24cer keypair=8 Set http server security=enabled sslkeyid=8 Following command displays the status of the web server Show Http ServerShow http server Encryption Key Commands Create Enco KEY Version 2 users SshVersion 1 users Ssh2Syntax 2 Description Create enco key=12 type=rsa length=512Create enco key=12 type=rsa file=public12.key format=ssh Destroy Enco KEY Destroy enco key=key-idDestroy enco key=4 Set enco key=1 descriptionSwitch 22 key SET Enco KEYSet enco key=key-iddescription=description Show enco key=1 This command displays information about encryption keyShow Enco Show enco key=key-idPublic Key Infrastructure PKI Certificate Commands ADD PKI Certificate 517 Create PKI Certificate 519 520 Type Formats the request according to Pkcs #10 Create PKI EnrollmentrequestEnclosed in double quotes. The management Software automatically adds the .csr extensionPKCS10 Create pki enrollmentrequest=Switch12 keypair=4Be enclosed in double quotes. Wildcards are not Delete pki certificate=Switch 12 certificateDelete PKI Certificate Delete pki certificate=namePurge pki Purge PKIYes, on, true Specifies that the certificate is from a Entity EE. This is the defaultSET PKI Certificate Spaces, it must be enclosed in quotesSet pki certificate=Switch 12 certificate trusted=true SET PKI Certstorelimit Set pki certstorelimit=valueSet pki certstorelimit=100 SET System Distinguishedname Set system distinguishedname=nameSet system distinguishedname=cn=169.22.22.22 Show pki Show PKIShow pki certificate Show pki certificate=Switch 12 certificateShow PKI Certificate Show pki certificate=nameSecure Sockets Layer SSL Commands Set ssl cachetimeout=value maxsessions=value Set ssl cachetimeout=180SET SSL Show ssl Show SSLSecure Shell SSH Commands Disable SSH Server Disable ssh serverFollowing command disables the Secure Shell server Enable SSH Server General Configuration Steps for SSH Operation Enable ssh server hostkey=0 serverkey=1Enable ssh server hostkey=1 serverkey=2 SET SSH Server Set ssh server expirytime=1 Show ssh Show SSHTACACS+ and Radius Commands ADD Radiusserver Add radiusserver ipaddress=149.245.22.22 order=1Add radiusserver ipaddress=149.245.22.22 order=3 TACACS+ and Radius Commands Add tacacsserver ipaddress=149.245.22.26 order=3 ADD TacacsserverBeing the first server queried Add tacacsserver ipaddress=149.245.22.20 order=1Delete Radiusserver Delete radiusserver serveripaddress=ipaddressDelete radiusserver ipaddress=149.245.22.22 Delete Tacacsserver Delete tacacsserver serveripaddress=ipaddressDelete tacacsserver ipaddress=149.245.22.20 Disable authentication Disable AuthenticationEnable authentication Enable AuthenticationPurge Authentication Purge authenticationFollowing command disables authentication on your switch SET Authentication Set authentication method=tacacsSet authentication method=tacacs secret=tiger54 Set authentication method=radius secret=leopard09 timeout=15 Show authentication=radius Show AuthenticationShow authentication=tacacsradius Show authenticationGuide for background information on the Management ACL Management ACL CommandsADD Mgmtacl Management ACL Commands Following command deletes an ACE from the Management ACL Delete MgmtaclTcp Transmission control protocol Interface Disable Mgmtacl Disable mgmtaclFollowing command disables the Management ACL Enable Mgmtacl Enable mgmtaclFollowing command enables the Management ACL SET Mgmtacl 561 SET Mgmtacl State Set mgmtacl state=disableenableEnable Enables the Management ACL Disable Set mgmtacl state=enableShow mgmtacl entries Show MgmtaclShow mgmtacl stateentries Show mgmtacl stateIndex Configuring timeout value 198 aging timerCreate PKI Certificate command Clear Screen commandDisable Snmp command Disable Radiusaccounting command 481 Disable Rstp commandModifying 308, 324 Flow groupAging time 182 multicast groups Disabling 480 displaying 493, 494 SET QOS Port command SET Mgmtacl commandSET Mstp command SET Mstp Msti command SET POE Threshold commandShow Switch Port Counter command SET Switch Port commandShow PKI Certificate command 530 Show PKI command Show Switch commandModifying 259 SntpAdding Converting dynamic VLANs Creating System files Deleting Downloading 238