Manuals / Cisco Systems / Computer Equipment / Switch

Cisco Systems OL-7029-01 manual Proxy status No Client VLAN, No Server Vlan Ssl-proxy#

Models: OL-7029-01

1 342

Download 342 pages 1.49 Kb

Page 261

Image 261

Chapter 3 Commands Specific to the Content Switching Module with SSL

show ssl-proxy service

Proxy status: No Client VLAN, No Server VLAN

ssl-proxy#

Catalyst 6500 Series Switch Content Switching Module with SSL Command Reference

	OL-7029-01	3-39

Page 261

Image 261

Cisco Systems OL-7029-01 manual Proxy status No Client VLAN, No Server Vlan Ssl-proxy#

Contents

Text Part Number OL-7029-01 Corporate HeadquartersPage Iii N T E N T SHw-module csm standby config-sync2-21 Ip slb mode Map cookie Real Script file Vii Show module csm static serverViii Vlan virtual server submodeSsl-proxy policy url-rewrite Acronyms A-1 Audience OrganizationChapter Title Description Convention Description ConventionsBoldface font BoldfaceRelated Documentation Obtaining DocumentationXiii Cisco Product Security Overview Documentation FeedbackCisco Ordering tool Cisco Marketplace XivAn emergency, you can also reach Psirt by telephone 877 408 Obtaining Technical AssistanceXvi Submitting a Service RequestXvii Obtaining Additional Publications and InformationXviii Command Task Using Content Switching Module Commands# prompt is displayed Command ModesRegular Expressions Submodes When you are in a submode, the prompt changes toExpression Meaning Zero or more charactersBackspace Ascii Alert AsciiForm-feed Ascii Newline AsciiContent Switching Module with SSL Commands Arp Defaults Command Modes Command HistoryVlan id Release ModificationCommand Modes Command History Syntax Description DefaultsCapp udp Capp udp No capp udpRelated Commands port Capp UDP submode Options Capp UDP submode Related Commands capp udpNo options ipaddress Encryption MD5Port Capp UDP submode This example shows how to set the port for Capp connectionsPort portnum no port Capp udpSecure No secure Secure Capp UDP submodeClear module csm No dfp password password PasswordDfp Related Commands show module csm dfp Agent DFP submode DfpManager DFP submode Show module csm dfp Manager DFP submode Syntax Description Defaults Command ModesManager port No manager Agent DFP submodeExit ExitFt group Module CSM configuration submodeFt group group-id vlan vlan number No ft groupHeartbeat-time fault tolerant submode Failover fault tolerant submodePreempt fault tolerant submode Priority fault tolerant submodeFailover failover-time Failover fault tolerant submodeNo failover Ft groupHeartbeat-time heartbeat-timeno heartbeat-time Heartbeat-time fault tolerant submodeFt group Show module csm ftPreempt fault tolerant submode Related Commands ft groupPreempt No preempt Priority value alt value No priority Alt Priority fault tolerant submodeCSM ValuePreempt fault tolerant submode Track fault tolerant submodeHw-module csm slot standby config-sync Hw-module csm standby config-syncSyntax Description Defaults Command Modes Command History Ip address Vlan submode priority fault tolerant submodeIp slb mode csm rp no ip slb mode Csm Ip slb modeOn the Catalyst 6500 series switch Keyword to select the route processor Cisco IOS SLB modeModule csm Show ip slb modeCookie Map cookieCookie-map policy submode Match protocol http cookie cookie map submodeMatch protocol http cookie cookie map submode Cookie-valueMap cookie Show module csm map This example shows how to group DNS domains DNS domains can be configured to a mapMap dns Match protocol dns domain DNS map submodeThis example shows how to add domains to a DNS map SLB DNS map configuration submodeMatch protocol dns domain DNS map submode Name Names the DNS domain being mappedMap name header no map name Map headerHeader-map policy submode Insert protocol http header header map submodeInsert protocol http header header map submode Header-value valueHeader-map policy submode map header Show module csm map Match protocol http header header map submode SLB header map configuration submodeHeader-value expression Must be matchedThis command has no default settings CSM module submode Keyword to enter the return error code map submodeMap retcode Map name retcode No map nameMatch protocol http retcode return code map submode Map retcode SLB policy configuration submodeAction count Action logMap url-map-name url no map url-map-name Map urlUrl-map-name Match protocol http url URL map submodeUsage Guidelines Examples Related Commands SLB URL map configuration submodeMatch protocol http url URL map submode Map url Show module csm map url-map policy submodeIp slb mode Slot-number Slot number where the CSM residesModule csm Module csm slot-number No module csm slot-numberNetmask netmask Natpool module CSM submodeNat client serverfarm submode Show module csm natpoolName Default Valid Values Description Variable module CSM submodeVariable name value no variable name Noresetunidirectionalflows AggregatebackupsfstatetovSwitchoverrpaction AdvertiserhifreqShow module csm variable Owner name no owner OwnerBilling-info owner submode Contact-info owner submode Maxconns owner submodeBilling-infobilling-address-information Billing-info owner submodeNo billing-info Contact-info owner submodeContact-info owner submode Contact-info string no contact-infoString Owner’s information Maxconns number no maxconns Maxconns owner submodeNumber Number of maximum connections to the owner object Accept further connectionsPolicy All policies should be configured with a server farmPolicy policy-name no policy policy-name Show module csm ownerClient-group policy submode Ip access-list standardNo client-group Policy Show module csm ownerCookie-mapcookie-map-name Cookie-map policy submodeNo cookie-map Map cookieHeader-map policy submode Specified in the map header commandHeader-map name No header-map Map headerNo nat client Nat client policy submodeStatic Natpool module CSM submodeServerfarm policy submode Serverfarm virtual server submode PolicySet ip dscp policy submode Default is that the CSM does not store Dscp valuesSet ip dscp dscp-valueno set ip dscp Dscp-value Range is from 0 toSticky-group policy submode This example shows how to configure a sticky groupSticky-group group-id No sticky-group Show module csm owner Show module csm sticky StickyUrl-map policy submode Default is no URL mapUrl-mapurl-map-name no url-map Map urlProbe Show module csm probe ProbeNo address ip-address Address probe submodeRouted ProbeSLB Http probe configuration submode Credentials username passwordThis command is for Http probes Credentials probe submodeDescription serverfarm submode Description line No descriptionLine Description text Expect status probe submode Enter the no expect status 34 99 commandRelated Commands probe This command is used for all probe types Default value for the failed interval is 300 secondsFailed probe submode Failed failed-interval no failedHeader field-name field-value Header probe submodeNo header field-name Probe Show module csm probeInterval seconds no interval Interval probe submodeSLB DNS probe configuration submode Name probe submodeName domain-name no name Default value for the open timeout is 10 seconds Open open-timeout no openSLB HTTP/TCP/FTP/Telnet/SMTP probe configuration submode Open probe submodePort probe submode Default value for the port number isPort port-number no port Port-number Sets the port numberDefault value for a receive timeout is 10 seconds Receive receive-timeout no receiveThis command is available for all probe types except TCP Receive probe submodeRecover recovervalue no recover Recover probe submodeDefault value is This command is available for all probe typesMethod get Request probe submodeMethod head Url pathDefault value for retries is Retries probe submodeRetries retry-count no retries Script scriptname Script probe submodeScriptname Specifies a probe script Failed probe submodeSLB serverfarm configuration submode Default is no port translation for the real serverReal Real ip-address port local No real ip-address portCat6k-2config-slb-sfarm# real Cat6k-2config-slb-real# Backup real ip name name port no backup real Backup real real server submodeName name Failaction serverfarm submodeHealth probe probe-nametag string Health probe real server submodeNo health probe TagInservice standby No inservice Standby Inservice real server submodeCommand History Release Modification Real Show module csm realMaxconns max-conns no maxconns Maxconns real server submodeReal server falls below Minconns Minconns real server submodeMinconns real server submode Default value is the set minumum number of connectionsMinconns min-consno minconns Maxconns real server submode real Show module csm realRedirect-vserver real server submode Redirect-vserver name no redirect-vserverTraffic is not redirected to the server Weight weighting-value no weight Weight real server submodeWeighting value default is Predictor serverfarm submodeThis example shows how to name the virtual server Redirect-vserverRedirect-vserver name no redirect-vserver name Advertise active no advertise Advertise redirect virtual server submodeActive Advertise virtual server submodeClient redirect virtual server submode SLB redirect virtual server configuration submodeExclude Optional Specifies that the IP address is disallowedIdle duration Idle redirect virtual server submodeNo idle Redirect-vserver real server submodeInservice redirect virtual server submode Inservice No inserviceRedirect-vserver Show module csm vserver redirect Replicate csrp redirect virtual server submode Replicate csrp No replicate csrpVserver No ssl Ssl redirect virtual server submodeHttps FtpNo virtual vipaddress Virtual redirect virtual server submodeRedirect-vserver real server submode Show module csm vserver redirectVlan redirect virtual server submode Show module csm stickySticky Sticky-group policy submode Webhost backup backup-string301 No webhost backup Webhost backup redirect virtual server submode301 302Webhost relocation redirect virtual server submode Reverse-sticky Reverse-sticky group-idno reverse-stickySticky Sticky-group policy submode No script file Script fileRelated Commands show module csm script 100 Script taskScript name Show module csm scriptServerfarm serverfarm-name No serverfarm serverfarm-name ServerfarmBindid serverfarm submode SLB serverfarm configuration submodeBindid bind-idno bindid DfpCSM release This command was introduced This example shows how to add a descriptionCat6k-2config-slb-sfarm#description Backup Server Farm Failaction serverfarm submode Backup real real server submodeFailaction purge reassign No failaction purge reassign PurgeHealth serverfarm submode Dfp Script task Show module csm serverfarm100 Nat client serverfarm submode Nat client client-pool-name static101 Nat server source-macno nat server Nat server serverfarm submodeSource-mac 102103 Predictor serverfarm submode104 105 106 Probe serverfarm submodeRetcode-mapretcodemapname no retcode-map Retcode-map serverfarm submodeMap retcode Script task Show module csm serverfarmShow module csm This example shows how to display static dataReal static NAT submode StaticRelated Commands arp Mode rp onlyShow module csm arp Show module csm slot arpShow module csm capp udp details Show module csm cappSyntax Description 110111 Show module csm conns State Explanation112 Synsrv Related Commands module csmReqwait 113Show module csm dfp WeightsAgent Manager115 Show module csm ft Mode rp onlyShow module csm slot ft detail 116Url Show module csm mapHeader NameRelated Commands map cookie This example shows how to display return code mapsMap header map url module csm 118Show module csm slot memory vserver vserver-name detail Show module csm memoryParse-length virtual server submode 119Show module csm natpool Ip slb mode rp onlyShow module csm slot natpool name pool-name detail Natpool module CSM submodeShow module csm slot owner name owner-name detail Show module csm ownerOwner virtual server submode 121Show module csm policy Slb mode rp onlyShow module csm slot policy name policy-name 122123 Show module csm probe124 Probe serverfarm submodeShow module csm slot probe script name probe-name detail Show module csm probe scriptProbe serverfarm submode script probe submode 125Show module csm slot pvlan Show module csm pvlan126 Cat6k-2#show module csm 4 pvlanShow module csm slot real sfarm sfarm-name detail Show module csm realSfarm This example shows Cisco IOS SLB real server data128 Field DescriptionShow module csm slot real retcode sfarm sfarm-name detail Show module csm real retcode129 Cat6k-2#show module csm 5 real retcodeShow module csm slot script name fullfileURL code Show module csm scriptCode 130Show module csm script task This example shows how to display a running scriptShow module csm slot script task index script-index detail IndexShow module csm serverfarm For ip slb mode rp onlyShow module csm slot serverfarm name serverfarm-name detail 132Redirect Bind id Field133 Cat6k-2#show mod csm 5 serverfarm detailDrop Show module csm staticNat VirtualShow module csm static server Pass-through135 136 Real static NAT submode staticShow module csm stats This example shows how to display SLB statisticsShow module csm slot stats Statistics counters are 32-bit138 3describes the fields in the displayShow module csm status This example shows how to display CSM statusShow module csm slot status 139Show module csm slot sticky groups client ipaddress Show module csm stickyGroups 1404describes the fields in the display Sticky Sticky virtual server submode141 Show module csm slot tech-script Show module csm tech-script142 Cat6k-2#show module csm 4 tech-script143 Show module csm tech-supportCat6k-2#show module csm 4 tech-support processor 144145 Show module csm variable Variable commandShow module csm slot variable name name detail 146Csm slot variable detail command 147Cat6k-2#show module csm 5 variable detail Client Show module csm vlanServer Vlan-id149 Related Commands vlan virtual server submodeThis example shows how to display the CSM virtual servers Redirect for ip slb mode rp onlyShow module csm vserver redirect Show module csm slot vserver redirect151 Related Commands xml-config This example shows how to display the CSM XML statisticsShow module csm xml stats Show module csm xml statsSnmp enable traps slb ft no snmp enable traps slb ft Snmp enable traps slb ftActive after detecting a failure in its fault tolerant peer This example shows how to enable fault tolerant trapsNat client serverfarm submode StaticShow module csm static 154Real static NAT submode SLB static NAT configuration submodeShow module csm static Static156 StickyCat6k-2config-module-csm#sticky 5 header headername timeout Routerconfig-module-csm#variable Notimeoutipstickyentries157 No cookie offset Cookie offset sticky submodeOffset offset Length lengthCookie secondary sticky submode This example shows how to specify a secondary sticky entryCookie secondary name no cookie secondary Name Specifies a cookie nameHeader offset value length value Header sticky submodeOffset value Length value161 Static sticky submode162 VserverServer as host route Advertise virtual server submodeRedirect-vserver 163Ip access-list standard Client virtual server submode164 Cat6k-2config-slb-vserver#description Backup Server Farm Related Commands vserverDescription virtual server submode 165This example shows how to set a domain name Domain virtual server submode166 This example shows how to specify an idle timer duration Idle virtual server submode167 Inservice virtual server submode Virtual server is not in service168 No owner maxconns Owner virtual server submodeMaxconns Advertise virtual server submodeParse-length virtual server submode Default is SLB virtual server configuration submodeParse-length bytes No parse-length Bytes Number of bytes the range is from 1 toDefault pending timeout is 30 seconds Pending timeout no pendingPending virtual server submode 171Persistent rebalance virtual server submode This example shows how to enable the Http 1.1 persistencePersistent rebalance No persistent rebalance 172Sticky Replicate csrp virtual server submodeConnection 173Reverse-sticky virtual server submode Reverse-sticky group-id No reverse-sticky174 Threshold outservice realvalue inservice realvalue options BackupServerfarm command Serverfarm virtual server submodeCommand Serverfarm policy submode176 Slb-policypolicy-name priority priorityvalue Slb-policy virtual server submodeNo slb-policy policy-name 177Ssl-sticky offset X length Y No ssl-sticky Ssl-sticky virtual server submodeOffset LengthStatus-tracking vservername Status-tracking virtual server submodeVservername Identifies the dependent virtual server 179180 Sticky virtual server submodeFor connection coupling Reverse-sticky virtual server submode181 Default No default unidirectionalRelated Commands show module csm vserver redirect Unidirectional virtual server submodeUrl-hash virtual server submode Predictor serverfarm submode183 184 Virtual virtual server submode185 186 No vlan Vlan virtual server submodeShow module csm vlan Vlan virtual server submode 187Vlan vlan-numberclient server No vlan VlanClient server 188Alias ip-address netmask No alias ip-address netmask Alias Vlan submodeVlan Netmask190 Related Commands show module csm vlan vlan XML submodeIp address Vlan submode SLB Vlan configuration submode Description Vlan submode191 Gateway ip-addressno gateway ip-address Gateway Vlan submodeShow module csm vlan Vlan virtual server submode 192No ip address Ip address Vlan submodeAlt 193Gateway Route Vlan submodeGw-ip-address 194Xml-config no xml-config Xml-configClient-group XML submode Credentials XML submode Vlan XML submodeClient-group XML submode Xml-configClient-group 1-99name 196Credentials XML submode Credentials user-name passwordNo credentials user-name Client-group XML submodeDefaults Command Modes Inservice XML submodeThis example shows how to enable XML Xml-configPort port-number Port XML submodeNo port Port-number Sets the CSM portVlan id no vlan Vlan XML submodeVlan name All VLANs are acceptedCommands Specific to the Content Switching Module with SSL Service module Commands Submode Commands Ssl-proxy vlan Ssl-proxy serviceService name Clear ssl-proxy conn service nameSsl-proxy connection command without options Clear ssl-proxy connClear ssl-proxy session Clear ssl-proxy session service nameClear ssl-proxy stats Terminal Crypto ca export pemDes 3desImporting CA certificate Crypto ca import pem ExportableUsage-keys Crypto ca export pem Crypto ca export pkcs12 TftpPkcs12filename Page Crypto ca import pkcs12 This example shows how to import a PKCS12 file using SCP Filename TP2? /users/admin-1/pkcs12/TP2.p12Crypto Crypto key export rsa pem Keylabel Name of the keyOptional Specifies that the key can be exported Key nametest-keys UsageGeneral Purpose Key Instead of one general-purpose key pair Crypto key import rsa pemNull-Imports from the null file system System-Imports from the system file systemExamples Debug ssl-proxy This example shows how to turn on FDU debugging This example shows how to turn on App debuggingThis example shows how to turn on IPC debugging This example shows how to turn on PKI debuggingThis example shows how to turn off TCP debugging This example shows how to turn on TCP debuggingSsl-proxy#debug ssl-proxy tcp Ssl-proxy#no debug ssl-proxy tcpDo command Command EXEC-level command to be executedConfiguration mode Show ssl-proxy admin-info Show ssl-proxy admin-infoSsl-proxy#show ssl-proxy admin-info Show ssl-proxy buffers This command has no default settingsShow ssl-proxy buffers Ssl-proxy#show ssl-proxy buffersService name Show ssl-proxy certificate-history service nameOptionally for a specific proxy service Show ssl-proxy certificate-historyRecord 1, Timestamp000051, 163634 UTC Oct 31 Ssl-proxy# show ssl-proxy certificate-historyRelated Commands ssl-proxy service Show ssl-proxy conn Show ssl-proxy conn service name4tuple RemoteSsl-proxy#show ssl-proxy conn 200.200.1438814 58796 Show ssl-proxy crash-info brief details Show ssl-proxy crash-infoBrief Limited to processor registersSsl-proxy#show ssl-proxy crash-info brief Stack top Printing 1024 bytes from stack topShow ssl-proxy mac address Show ssl-proxy mac addressModule with SSL Ssl-proxy#show ssl-proxy mac addressShow ssl-proxy natpool name Show ssl-proxy natpoolName Optional NAT pool name Ssl-proxy#show ssl-proxy natpool NP1Show ssl-proxy policy http-header ssl tcp url-rewrite name Show ssl-proxy policyHttp-header Url-rewriteMSS Show ssl-proxy service name Show ssl-proxy serviceName Optional Service name Ssl-proxy#show ssl-proxy serviceProxy status No Client VLAN, No Server Vlan Ssl-proxy# Show ssl-proxy stats Show ssl-proxy stats typeStats Ssl-proxy#show ssl-proxy stats pki PKI Memory Usage Counters This example shows how to display the PKI statisticsSsl-proxy# show ssl-prox stats fdu This example shows how to display the FDU statisticsShow ssl-proxy status Show ssl-proxy statusShow ssl-proxy status SSL cpu is alive Show ssl-proxy version Show ssl-proxy versionSsl-proxy#show ssl-proxy version Show ssl-proxy vlan vlan-iddebug Show ssl-proxy vlanDebug Optional Displays debug informationThis command has no default settings Exec mode Show ssl-proxy vtsSsl-proxy#show ssl-proxy vlan Defaults Command Modes Command History Examples Snmp-server enableThis example shows how to start a cryptographic self-test Seconds Global configurationSsl-proxy crypto selftest Time-intervalRelated Commands show ssl-proxy mac address Ssl-proxy mac addressSsl-proxy mac address mac-addr This example shows how to define a pool of IP addresses Related Commands show ssl-proxy natpoolSsl-proxy natpool Ssl-proxy pki This example shows how to specify the cache size This example shows how to enable PKI event-historyRelated Commands show ssl-proxy stats Ssl-proxy policy http-header Ssl-proxy policy http-header http-header-policy-nameHttp-header-policy-name Http header policy name Custom custom-string Ssl-proxy policy ssl Timeout session timeout absoluteSsl-proxy policy ssl ssl-policy-name Ssl-policy-name SSL policy nameDefault cipher close-protocol RSAWITHRC4128SHA all No close-protocol enableNo session-cache enable Timeout handshake timeoutThis example shows how to disable session-cache This example shows how to enable session-cacheSsl-proxy config# ssl-proxy policy ssl sslpl1 Ssl-proxyconfig-ssl-policy#cipher RSAWITH3DESEDECBCSHAThis example shows how to print out a help Timeout reassembly is 60 seconds Defaults are as followsSsl-proxy policy tcp Ssl-proxy policy tcp tcp-policy-nameNo timeout reassembly time No timeout syn timeout-in-secondsNo buffer-share rx buffer-limit-in-bytes No buffer-share tx buffer-limit-in-bytesRelated Commands show ssl-proxy policy Ssl-proxy policy url-rewrite url-rewrite-policy-name Ssl-proxy policy url-rewriteSsl-proxyconfig-url-rewrite-policy# Ssl-proxy config# ssl-proxy policy url-rewrite test1Ssl-proxy pool ca This command has no arguments or keywordsSsl-proxy pool ca-pool-name Ca-pool-name Certificate authority pool nameSsl-proxy service ssl-proxy-nameclient Ssl-proxy serviceSsl-proxy service client command Protocol protocol port portno subcommandDefault certificate inservice nat server Authenticate verify all signature-onlyInservice Certificate rsa general-purpose trustpointSsl-proxy config-ssl-proxy# Related Commands show ssl-proxy service Ssl-proxy service client Exits from proxy-client configuration submodeDeclares a proxy client as administratively up Sslv2 keyword enables SSL version Ssl-proxy config# ssl-proxy service S7 clientApplies a URL rewrite policy to the proxy server Ssl-proxy config-ssl-proxy# server policy tcp tcppl1 Ssl-proxy config# no ssl-proxy ssl ratelimit Ssl-proxy config# ssl-proxy ssl ratelimitSsl-proxy ssl ratelimit Ssl-proxyy ssl ratelimitSsl-proxy vlan AdminSsl-proxy vlan vlan Gateway prefix drop forward1Standby delay minimum reload Standby authenticationStandby ip Standby mac-addressSsl-proxyconfig-vlan#ipaddr 208.59.100.18 Ssl-proxyconfig-vlan#route 210.0.207.0 255.0.0.0 gatewaySsl-proxyconfig-vlan#ipaddr 10.1.0.20 Related Commands show ssl-proxy vlan Group-number is String is cisco Standby authenticationMin-delay is 1 second Reload-delay is 5 seconds Standby delay minimum reloadSsl-proxyconfig-vlan#standby delay minimum 30 reload Show standby delayProxy-VLAN configuration submode Hsrp is disabled by defaultStandby ip SecondaryUsed by the hot standby group is learned using Hsrp Standby group-numbermac-addressmac-address Standby mac-addressNo standby group-numbermac-address Mac-address MAC addressSsl-proxyconfig-vlan#standby 1 mac-address That is used in the end nodesShow standby Standby mac-refresh seconds no standby mac-refresh Standby mac-refreshStandby name Hsrp is disabledStandby name group-name No standby name group-name Group-name Specifies the name of the standby groupMinimum delay DelayReload delay Sync delayLeaves any synchronization delay if it was configured Operation returns to the default behaviorSsl-proxyconfig-vlan#standby preempt delay minimum ClientsStandby priority This example shows how to change the router priorityStandby group-numberpriority priority No standby group-numberpriority priorityStandby track Disable EnableTimers Standby redirectsRelated Commands show standby Ssl-proxyconfig-vlan#standby redirects timers 90Show standby redirect Msec Standby timersInterface ethernet Standby track Command commands and take action when the object changesDecrement priority Back upRouter B Configuration Router a ConfigurationRelated Commands standby preempt Standby priorityStandby use-bia Standby use-bia scope interface No standby use-biaScope interface OL-7029-01 Acronym Expansion CCA CbacCDP CEFDsap DramDscp DspuIcmp ICDIDB IDPMdix MD5Mdss MFDOSM OSIOspf PAEROM RmonRommon RPCSVC STPSVI TACACS+WRR Weighted round-robinXNS Xerox Network SystemOL-7029-01 Http Capp UDPCapp IN-1NAT XMLIN-2 IN-3 FTP See FTPGslb IN-4IN-5 Secondary interfaceConfiguration Pool addressesIN-6 IN-7 Gslb HttpIN-8 Real server Backup EnablingIN-9 SmtpTCP URLIN-10 IN-11 IN-12 Credentials Enabling Port Statistics display Vlan