Manuals / Dell / Computer Equipment / Switch

Dell 5324 manual Spanning-tree mst mstp-rstp, 290

Models: 5324

1 388

Page 290

w w w . d e l l . c o m s u p p o r t . d e l l . c o m

	Address	00:02:4b:19:7a:00
	Path Cost	10000
	Rem hops	19
Bridge ID	Priority	32768
	Address	00:02:4b:29:7a:00
	Hello Time 2 sec	Max Age 20 sec Forward
		Delay 15 sec Max hops 20

Console# show spanning-tree

Spanning tree enabled mode MSTP

Default port cost method: long

###### MST 0 Vlans Mapped: 1-9

CST Root ID	Priority	32768
	Address	00:01:42:97:e0:00
	This switch is root for
	CST and IST master
	Hello Time 2 sec	Max Age 20 sec Forward
		Delay 15 sec Max hops 20

spanning-tree mst mstp-rstp

Use the spanning-tree mst mstp-rstpglobal configuration command to configure the switch to convert STP/RSTP packets to MSTP instances. Use the no form of this command to disable the configuration.

Syntax

spanning-tree mst mstp-rstp

no spanning-tree mst mstp-rstp

This command has no arguments or keywords.

290

Spanning-Tree Commands

Page 290

Image 290

Dell 5324 manual Spanning-tree mst mstp-rstp, 290

Contents

CLI Reference Guide Aug Contents Using the CLI Address Table Commands Clock Ethernet Configuration Commands Igmp Snooping Commands Lacp Commands Management ACL Port Monitor Commands Rmon Commands Spanning-Tree Commands SSH Commands Syslog Commands Tacacs Commands Vlan Commands 32 802.1x Commands 382 Page Introduction Command GroupsCommand Groups Configures commands related to 802.1x security protocol Configures and reports on Spanning Tree protocolConfigures Tacacs commands AAA Commands Address Table CommandsDefines an authentication key for Simple Configures an external time source forConfigures the system to automatically switch Displays statically created entries in the bridgeConfiguration and Image Files Commands Ethernet Configuration Commands Displays the backup configuration file contentsGvrp Commands IP Addressing Igmp Snooping CommandsDefines a default gateway router Sets an IP addressCache Line CommandsDeletes entries from the host name-to-address Lldp Commands Sets the line for automatic baud rate detectionManagement ACL Commands PHY Diagnostics CommandsQoS Commands Port Channel CommandsPort Monitor Commands Radius Commands Enables each port trust stateRmon Commands Snmp CommandsSpanning Tree Commands MST Sets the default path cost method SSH CommandsOverrides the default link-type setting Syslog Commands Reloads the operating system System Management CommandsTacacs Commands Switches the mode to debug User Interface CommandsVlan Commands Disables the default Vlan functionalityReserves a Vlan as the internal usage Vlan of an InterfaceWeb Server Commands 802.1x Commands Command Description Access ModeCommand Groups Command Modes GC Global Configuration ModeDevice Notification operation IC Interface Configuration Mode SntpReserves a Vlan as the internal usage Vlan of an interface An Extensible Authentication Protocol EAP request/identityFrame, from the client, before resending the request Command Description LC Line Configuration ModeEnables the Simple Network Time Protocol Sntp client on an MA Management Access-level Mode PE Privileged User Exec ModeVlan SP SSH Public Key Mode UE User Exec ModeCommand Modes VC Vlan Configuration Mode W . d e l l . c o m s u p p o r t . d e l l . c o m Introduction Using the CLICLI Command Modes User Exec Mode Privileged Exec ModeGlobal Configuration Mode Exit End Ctrl+ZStarting the CLI Consoleconfig# username admin password smith Editing FeaturesEntering Commands Command Completion Terminal Command BufferNegating the Effect of Commands Config#interface ethernetItalic font CLI Command ConventionsKeyboard Shortcuts EnterUsing the CLI Default Configuration AAA CommandsAaa authentication login Command ModeExample Aaa authentication enableFollowing example configures authentication login Login authentication Console config# aaa authentication enable default enableEnable authentication Console config-line#login authentication defaultFollowing example configures the http authentication Ip http authenticationConsole config-line#enable authentication default Following example configures https authentication Ip https authenticationShow authentication methods Privileged Exec mode Syntax Show authentication methods Default ConfigurationThis command has no default configuration Following example displays the authentication configurationSyntax Password password encrypted No password PasswordConsole# show authentication methods Following example specifies a password secret on a line Enable passwordNo password is required No user is defined UsernameShow users accounts Syntax Show users accounts Default Configuration Console# show users accountsAAA Commands Bridge address Address Table CommandsInterface configuration Vlan mode Console config# bridge multicast filtering Disabled. All multicast addresses are flooded to all portsThis example, bridge multicast filtering is enabled Bridge multicast filteringFollowing example registers the MAC address No multicast addresses are definedExamples No forbidden addresses are defined Command ModesBridge multicast forbidden address Bridge multicast forbidden forward-all Disable forward-all on the specified interfaceBridge multicast forward-all This example all multicast packets on port g8 are forwardedBridge aging-time SyntaxConsole# clear bridge Clear bridgeSyntax Clear bridge Port security Disabled No port securityInterface Configuration Ethernet, port-channel mode Show bridge address-table Console config-if#port security routed secure-addressPort security routed secure-address Mac-address-Specify a MAC address in the formatPort-channel-number-A valid port-channel number Show bridge address-table static Console# show bridge address-tableSyntax Show bridge address-table count vlan vlan Show bridge address-table countConsole# show bridge address-table static Vlan -Specific VlanShow bridge multicast address-table Console# show bridge address-table countConsole # show bridge multicast address-table Console # show bridge multicast address-table format ipSyntax Show bridge multicast filtering vlan-id Show bridge multicast filteringShow ports security Vlanid-A valid Vlan ID valueConsole # show ports security Clock source ClockClock set Syntax Clock source sntp No clock sourceConsole# clock source sntp Clock timezoneNo external clock source Clock summer-time Sntp authentication-key No authentication key is definedSyntax Sntp authenticate No sntp authenticate Sntp authenticateConsoleconfig# sntp authentication-key 8 md5 ClkKey Sntp trusted-key Sntp client poll timerFollowing example authenticates key Not trustedConsole config# sntp broadcast client enable Sntp broadcast client enableConsole config# sntp client poll timer Console config-if#sntp anycast client enable Sntp anycast client enableSntp client enable interface Syntax Sntp client enable No sntp client enable101 Sntp unicast client enableConsole config# sntp unicast client enable Sntp server Console config# sntp unicast client pollSntp unicast client poll Syntax Sntp unicast client poll no sntp unicast client poll103 Show clockSyntax Show clock detail Console# show clock 104Console# show sntp configuration Show sntp configurationSyntax Show sntp configuration 105Following example shows the status of the Sntp Show sntp statusSyntax Show sntp status 106107 Clock Console# delete startup-config Configuration and Image FilesDelete startup-config CopyUnderstanding Invalid Combinations of Source and Destination 110Copying image file from a Server to Flash Memory Storing the Running or Startup Configuration on a ServerCopy Character Descriptions 111Console# boot system image-1 Boot systemSyntax Boot system image-1 image-2 112Sort type defaults to interface if unspecified Show running-configSyntax Show running-config sort type 113Syntax Show startup-config sort type 114 Show startup-configConsole# show running-config no spanning-tree 115 Syntax Show backup-config 116 Show backup-configConsole# show startup-config no spanning-tree Console# show backup-config software version 117Console# show bootvar Show bootvarSyntax Show bootvar Default Configuration 118Interface range ethernet Ethernet Configuration CommandsInterface ethernet Following example disables port g5 Syntax Shutdown No shutdown Default ConfigurationInterface is enabled ShutdownSyntax Description string No description DescriptionSpeed Syntax Speed 100 1000 No speed122 DuplexSyntax Duplex half full No duplex Negotiation Consoleconfig# interface ethernet g5Syntax Negotiation No negotiation Default Configuration FlowcontrolSyntax Mdix on auto No mdix MdixSyntax Flowcontrol auto on off No flowcontrol 124125 Syntax Back-pressure No back-pressure Default ConfigurationBack-pressure 126 Port jumbo-frameClear counters Console# clear counters ethernet g1 Show interfaces configurationSet interface active Console# set interface active ethernet g5Interfaces configuration 128Show interfaces status 129130 Console# show interfaces statusShow interfaces description 131132 Show interfaces countersConsole# show interfaces description ethernet g1 133 Console# show interfaces countersFollowing table describes the fields shown in the display Following example displays counters for port g1Console# show interfaces counters ethernet g1 134135 Ieee Std .3, 2000 Edition, section136 Syntax Show ports jumbo-frame Default ConfigurationShow ports jumbo-frame Port storm-control include-multicast Port storm-control broadcast enableConsoleconfig# port storm-control include-multicast Console# show ports jumbo-frameDefault storm control broadcast rate is Broadcast storm control is disabledConsoleconfig-if#port storm-control broadcast enable Port storm-control broadcast rateShow ports storm-control Consoleconfig-if#port storm-control broadcast rateFollowing example displays the storm control configuration Syntax Show ports storm-control interface140 Gvrp enable interface Gvrp CommandsGvrp enable global Syntax Gvrp enable No gvrp enable Default Configuration142 Garp timerFollowing example enables Gvrp on ethernet g8 143 By default, dynamic Vlan creation is enabledGvrp vlan-creation-forbid Gvrp registration-forbid Console config-if#gvrp vlan-creation-forbidConsole config-if#gvrp registration-forbid Clear gvrp statistics145 Show gvrp configurationConsole# clear gvrp statistics ethernet g8 146 Console# show gvrp configurationShow gvrp statistics 147 Show gvrp error-statisticsFollowing example shows Gvrp statistics information Console# show gvrp statistics148 Console# show gvrp-error statisticsFollowing example displays Gvrp statistics information Ip igmp snooping Interface Igmp Snooping CommandsIp igmp snooping Global 149150 Ip igmp snooping mrouterIp igmp snooping host-time-out 151 Console config-if#ip igmp snooping host-time-outIp igmp snooping mrouter-time-out Console config-if#ip igmp snooping leave-time-out Console config-if#ip igmp snooping mrouter-time-outDefault leave-time-out configuration is 10 seconds Ip igmp snooping leave-time-outConsole # show ip igmp snooping mrouter Show ip igmp snooping mrouterShow ip igmp snooping interface Console # show ip igmp snooping interface Show ip igmp snooping groupsExample displays Igmp snooping information 154155 Example shows Igmp snooping informationConsole # show ip igmp snooping groups Igmp Snooping Commands Ip address IP Addressing CommandsClear host dhcp Console# clear host dhcpNo IP address is defined for interfaces Interface configuration Ethernet, VLAN, port-channelIp address dhcp 158No default gateway is defined Ip default-gatewaySyntax Ip default-gateway ip-address No ip default-gateway 159160 Following example defines an ip default gatewayShow ip interface 161 ArpConsole# show ip interface Clear arp-cache Arp timeoutConsole config# arp 198.133.219.232 00000c400fbc ethernet Console# clear arp-cache Syntax Show arp Default ConfigurationShow arp Following example displays entries in the ARP tableSyntax Ip domain-lookup No ip domain-lookup Ip domain-lookupIp domain-name Syntax Ip domain-name name No ip domain-nameNo name server addresses are specified Ip name-serverIp host Following example sets the available name serverNo host is defined Clear hostSyntax Ip host name address No ip host name Syntax Clear host nameSyntax Show hosts name Default Configuration Command ModeShow hosts 167168 Lacp port-priority Lacp CommandsLacp system-priority Syntax Lacp port-priority value No lacp port-priorityDefault port timeout value is long Lacp timeoutSyntax Lacp timeout long short No lacp timeout 170Console# show lacp ethernet g1 statistics Show lacp ethernetShow lacp port-channel Syntax Show lacp port-channel portchannelnumberConsole# show lacp port-channel 172Syntax Line console telnet ssh Line CommandsLine Syntax Speed bpsAutobaud Exec-timeoutSyntax Autobaud No autobaud Default Configuration 174Syntax Show line console telnet ssh Syntax Exec-timeout minutes seconds No exec-timeoutShow line 175Terminal history size Following example displays the line configurationTerminal history Console# show line consoleMaximum for the sum of all buffers is 177Line Commands Lldp enable interface Lldp CommandsLldp enable global SyntaxSyntax Lldp timer seconds No lldp timer Lldp timerInterface configuration Ethernet Default 30 secondsLldp hold-multiplier Lldp reinit-delayDefault Configuraiton Syntax Lldp hold-multiplier number No lldp hold-multiplierSyntax Lldp tx-delay seconds No lldp tx-delay Parameters Lldp tx-delaySyntax Lldp reinit-delay seconds No lldp reinit-delay Default value is 2 secondsUsage Guidelines Lldp optional-tlvLldp management-address No optional TLV is transmittedClear lldp rx 184Switch# show lldp configuration Show lldp configurationSyntax Show lldp configuration ethernet interface Show lldp localShow lldp neighbors 186187 Switch# show lldp neighborsSwitch# show lldp neighbors ethernet g1 Lldp Commands Management ACL Management access-listName-The access list name using up to 32 characters 189190 Console config# management access-class mlistPermit management 191 Management Access-list Configuration modeDeny management Management access-class 192Syntax Show management access-list name Show management access-listShow management access-class Console# show management access-list194 Syntax Show management access-class Default ConfigurationConsole# show management access-class Show copper-ports tdr PHY Diagnostics CommandsTest copper-port tdr Console# test copper-port tdr g3Port must be active and working in 1000M Show copper-ports cable-lengthSyntax Show copper-ports cable-length interface 196197 Show fiber-ports optical-transceiverConsole# show copper-ports cable-length 198 Console# show fiber-ports optical-transceiver199 Console# show fiber-ports optical-transceiver detailedPHY Diagnostics Commands Interface port-channel Port Channel CommandsConsole config# interface port-channel Interface range port-channelPort is not assigned to any port-channel Console config# interface range port-channelChannel-group 202Show interfaces port-channel Console config-if#channel-group 1 mode onPort channel load balance Syntax Show interfaces port-channel port-channel-number204 Interface Configuration mode Port Monitor CommandsDefault is both rx and tx Port monitor206 Syntax Show ports monitor Default ConfigurationShow ports monitor Console# show ports monitor 207Port Monitor Commands Show qos QoS CommandsQos 210 Following example displays a QoS modeWrr-queue cos-map Following example maps CoS 3 to queue Interface Configuration Ethernet, port channel modeWrr-queue bandwidth 211All queues are expedite queues Following example assigns WRR weights to egress queuesPriority-queue out num-of-queues 212Following example sets queue 4, 3 to be expedite queues Console config# priority-queue out num-of-queuesShow qos interface 213214 Qos map dscp-queueConsole# show qos interface ethernet g1 queuing 215 Qos trust GlobalSyntax Qos trust cos dscp No qos trust Qos trust Interface Syntax Qos trust No qos trust Default ConfigurationSyntax Qos cos default-cos No qos cos 216 Qos cos217 Show qos mapSyntax Show qos map dscp-queue Following table describes the fields used above Following example displays the Dscp port-queue mapConsole# show qos map Dscp-queue map D1 x 10 + D2 = Value of DscpRadius-server host Radius CommandsBy default, no Radius host is specified Ip-address-IP address of the Radius server hostRadius-server key TimeoutDefault is an empty string Syntax Radius-server key key-string No radius-server keyRadius-server source-ip Console config# radius-server retransmitRadius-server retransmit 221222 Radius-server timeoutConsole config# radius-server timeout Radius-server deadtime Console config# radius-server deadtimeSyntax Show radius-servers Default Configuration Show radius-serversConsole# show radius-servers Following example displays the Radius server settings224 Console# show rmon statistics ethernet g1 Rmon CommandsShow rmon statistics 225226 Field DescriptionRmon collection history 227Following example displays all Rmon group statistics Console config-if#rmon collection history 1 intervalShow rmon collection history Console# show rmon collection historyShow rmon history 229Console# show rmon history 5 throughput Console# show rmon history 5 errors230 Console# show rmon history 5 other 231Rmon alarm 232Show rmon alarm-table 233Console# show rmon alarm-table Show rmon alarmSyntax Show rmon alarm-table Default Configuration Syntax Show rmon alarm number235 Following example displays Rmon 1 alarmsConsole# show rmon alarm Rmon event 236Show rmon events Following example configures an event with the trap indexSyntax Show rmon events Default Configuration Following example displays the Rmon event tableSyntax Show rmon log event Show rmon logConsole# show rmon events Event-Event index. Range 0239 Following example displays the Rmon logging tableConsole# show rmon log History table size is Log table size is Console config# rmon table-size historyRmon table-size 240Snmp-server community Snmp CommandsThere are no default communities defined No snmp-server community community ip-addressSnmp-server view Default SettingDefault and DefaultSuper views exists 242243 Snmp-server filterProduct specific Included Snmp-server contactSnmp-server location Syntax Snmp-server contact text No snmp-server contactSyntax Snmp-server location text No snmp-server location Snmp-server enable trapsConsole config# snmp-server enable traps 245Snmp-server host Snmp-server trap authenticationConsole config# snmp-server trap authentication 246Snmp-server set 247Snmp-server group 248No group entry exists Console config# snmp-server group user-groupv3 priv readSnmp-server user Router context is translated to context in the MIB250 Snmp-server v3-host Following example configures a new Snmp Version 3 userConsole config# snmp-server user 251252 Following example configures an SNMPv3 hostSnmp-server engineID local Show snmp engineid Syntax Show snmp engineID Default SettingConsoleconfig # snmp-server engineID local default 253Console# sh snmp Syntax Show snmp Default ConfigurationShow snmp 254255 Show snmp viewsSyntax Show snmp views viewname 256 Show snmp groupsSyntax Show snmp groups groupname 257 Show snmp filtersSyntax Show snmp filters filtername 258 Show snmp usersSyntax Show snmp users username 259 Snmp Commands Syntax Spanning-tree No spanning-tree Default Configuration Spanning-Tree CommandsSpanning-tree mode Spanning-treeSpanning-tree forward-time Consoleconfig# spanning-tree mode rstpConsoleconfig# spanning-tree forward-time Seconds-Time in seconds. Range 4Spanning-tree hello-time 263264 Consoleconfig# spanning-tree hello-timeSpanning-tree max-age Consoleconfig# spanning-tree priority Spanning-tree disableConsoleconfig# spanning-tree max-age Spanning-tree prioritySyntax Spanning-tree cost cost No spanning-tree cost Following example disables spanning-tree on g5Spanning-tree cost Cost-The port path cost Range 1 200,000,000Spanning-tree portfast Consoleconfig-if#spanning-tree port-prioritySpanning-tree port-priority 267Spanning-tree link-type Consoleconfig-if#spanning-tree portfastConsoleconfig-if#spanning-tree link-type shared 268Spanning-tree mst priority Default number of hops isConsole config # spanning-tree mst 1 priority Spanning-tree mst max-hopsSpanning-tree mst port-priority Console config # spanning-tree mst max-hopsConsoleconfig-if#spanning-tree mst 1 port-priority 270Interface Long Short Spanning-tree mst configurationSpanning-tree mst cost 271Syntax Instance instance-id add remove vlan vlan-range Syntax Spanning-tree mst configuration Default SettingInstance mst 272Syntax Name string Name mstRevision mst Syntax Revision value No revisionShow mst Default configuration revision number isFollowing example sets the configuration revision to Syntax Show current pendingExit mst Syntax Exit Default SettingSyntax Abort Default Setting Abort mstConsole# spanning-tree pathcost method long Spanning-tree pathcost methodSpanning-tree bpdu 276Syntax Spanning-tree bpdu filtering flooding Consoleconfig# spanning-tree bpdu floodingClear spanning-tree detected-protocols 277Following example displays spanning-tree information Show spanning-treeConsole# clear spanning-tree detected-protocols ethernet g1 278279 Console# show spanning-tree280 281 282 283 284 285 Console# show spanning-tree mst-configuration 286287 288 289 Spanning-tree mst mstp-rstp 290Interface configuration Ethernet, port-channel Consoleconfig# spanning-tree mst mstp-rstpRoot guard is disabled Spanning-tree guard root292 Following example enable root guard on port g8Consoleconfig-if#spanning-tree guard root Ip ssh server SSH CommandsIp ssh port Crypto key generate dsa Syntax Crypto key generate dsa Default ConfigurationConsole config# crypto key generate dsa Crypto key generate rsaIp ssh pubkey-auth Syntax Crypto key generate rsa Default ConfigurationConsole config# crypto key generate rsa 295User-key Consoleconfig# crypto key pubkey-chain sshCrypto key pubkey-chain ssh 297 Key-stringSyntax Key-string row key-string 298 Syntax Show ip ssh Default ConfigurationShow ip ssh Syntax Show crypto key mypubkey rsa dsa Following example displays the SSH server configurationShow crypto key mypubkey Rsa-RSA key Dsa-DSA keyConsole# show crypto key mypubkey rsa Show crypto key pubkey-chain ssh300 Console# show crypto key pubkey-chain ssh username bob Console# show crypto key pubkey-chain sshFollowing example displays the SSH public called bob 301SSH Commands Logging on Syslog CommandsSyntax Logging on no logging on Default Configuration LoggingAs described in the field descriptions Default is informationalLogging console Syntax Logging console level No logging consoleLogging buffered size Default level is informationalLogging buffered Syntax Logging buffered level No logging bufferedClear logging Console config# logging buffered sizeSyntax Clear logging Default Configuration Console# clear loggingClear logging file Syntax Clear logging file Default ConfigurationLogging file Syntax Logging file level No logging fileFollowing example clears messages from the logging file Syntax Show logging Default ConfigurationShow logging Console# clear logging fileConsole# show logging Syntax Show logging file Default ConfigurationShow logging file 309310 Syntax Show syslog-servers Default ConfigurationShow syslog-servers 311 Following example displays the syslog server settingsConsole# show syslog-servers Syslog Commands Ping Timeout timeout-The default is 2000 millisecondsSystem Management 313314 TracerouteFollowing example displays a ping to IP address 315 316 317 Special Telnet Command charactersTelnet Keywords Table 318Ports Table 319Syntax Resume connection Following command switches to another open Telnet sessionResume 320Reload HostnameConsole# show users Show usersShow sessions Console show sessions Exec modeShow system Syntax Show systemSyntax Show version 324 Show versionFollowing example displays the system information Console show systemTag-The device asset tag. Range 1- 16 characters Asset-tagSyntax Asset-tag tag No asset-tag 325Console show system id Syntax Show system id Default ConfigurationShow system id 326No Tacacs host is specified Tacacs CommandsTacacs-server host 327Tacacs-server key Tacacs-server timeoutFollowing example sets the authentication encryption key Following example specifies a TACACS+ host329 Console config# tacacs-server timeoutTacacs-server source-ip Ip-address-Name or IP address of the host Show tacacsSyntax Show tacacs ip-address Console# show tacacsUser Interface EnableDisable Syntax Login Default Configuration LoginConfigure Syntax ConfigureAll command modes ExitconfigurationSyntax Exit Default Configuration 333End Syntax End Default ConfigurationExitEXEC Following example closes an active terminal sessionHelp Syntax Help Default ConfigurationSyntax History No history Default Configuration HistoryHistory size Syntax History size number-of-commands No history sizeSyntax Debug-mode Default Configuration Debug-mode337 Syntax Show history Default ConfigurationShow history Console# show history Syntax Show privilege Default ConfigurationShow privilege Console# show privilegeVlan Vlan CommandsVlan database Console# vlan database Default-vlan disableInterface vlan 341 Interface range vlanSyntax Interface range vlan vlan-range all Syntax Name string no name Switchport access vlanName 342343 Switchport trunk allowed vlanConsole config-if#switchport access vlan Console config-if#switchport trunk allowed vlan add 2,5-8 Switchport trunk native vlanSwitchport general allowed vlan Console config-if#switchport trunk native vlanSwitchport general pvid 345346 Switchport general ingress-filtering disableIngress filtering is enabled All frame types are accepted at ingress Switchport general acceptable-frame-type tagged-onlySwitchport forbidden vlan All VLANs allowedFollowing example maps protocol ip-arp to the group named Console config-if#switchport forbidden vlan addMap protocol protocols-group 348Vlan-id-VLAN ID of the internal usage VLAN.Range Valid Vlan Switchport general map protocols-group vlanIp internal-usage-vlan 349Syntax Show vlan tag vlan-id name vlan-name Console config# ip internal-usage-vlanShow vlan Following example displays all Vlan information351 Syntax Show vlan internal usage Default ConfigurationShow vlan internal usage Console# show vlan internal usage Syntax Show vlan protocols-groups Default ConfigurationShow vlan protocols-groups Following example displays protocols-groups information353 Show interfaces switchportConsole# show vlan protocols-groups Syntax Switchport mode customer access trunk general 354 Switchport modeConsole# show interface switchport ethernet g1 No Vlan is configured Switchport customer vlanNo switchport mode Vlan-id- Vlan ID of the customer356 Ip http port Web ServerIp http server Syntax Ip http port port-number No ip http portIp https port Default for the device is disabledIp https server Syntax Ip https port port-number No ip https port359 Following example configures the https port number toCrypto certificate generate Certificate and the SSL RSA key pairs do not exist Console enable# crypto certificate generate key-generateCrypto certificate request Following example regenerates a Https certificateConsole# crypto certificate 1 request 361Number-Specifies the certificate number. Range 1 Crypto certificate importSyntax Crypto certificate number import 362Certificate number Consoleconfig# crypto certificate 1 importIp https certificate 363Syntax Crypto certificate number export pkcs12 Console config# ip https certificateCrypto certificate export pkcs12 364Console# crypto certificate 1 export pkcs12 Following example exports the certificate and RSA keys365 Following example imports the certificate and RSA keys Crypto certificate import pkcs12Syntax Crypto certificate number import pkcs12 passphrase 366367 Following example displays the certificate Show crypto certificate mycertificateSyntax Show crypto certificate mycertificate number Console# show crypto certificate mycertificateConsole# show ip http Show ip httpShow ip https Console# show ip https 370Console config# aaa authentication dot1x default none 802.1x CommandsAaa authentication dot1x Method1 method2...-At least one from the following tableDot1x system-auto-control Following example enables 802.1x globallyConsole config# dot1x system-auto-control Dot1x port-controlSyntax Dot1x re-authentication No dot1x re-authentication Dot1x re-authenticationConsole config-if#dot1x port-control auto 373Console config-if#dot1x re-authentication Dot1x timeout re-authperiodDot1x re-authenticate Console config-if#dot1x timeout re-authperiod375 Dot1x timeout quiet-periodConsole# dot1x re-authenticate ethernet g8 376 Dot1x timeout tx-periodConsole config-if#dot1x timeout quiet-period Syntax Dot1x max-req count No dot1x max-req Dot1x timeout supp-timeoutDot1x max-req 377Dot1x timeout server-timeout 378Syntax Show dot1x ethernet interface Console config# dot1x timeout server-timeoutShow dot1x 379380 Console# show dot1x ethernet g3Username-Supplicant username Range 1- 160 characters Show dot1x usersSyntax Show dot1x users username username Following example displays 802.1X users382 Show dot1x statisticsSyntax Show dot1x statistics ethernet interface Switch# show dot1x statistics ethernet g1 383Syntax Dot1x auth-not-req no dot1x auth-not-req User should be authorized to access the VlanDot1x auth-not-req 384Syntax Dot1x multiple-hosts no dot1x multiple-hosts Dot1x multiple-hostsDot1x single-host-violation 385Syntax Show dot1x advanced ethernet interface Show dot1x advancedForward trap 386387 Switch# show dot1x advancedSwitch# show dot1x advanced ethernet g1 Console# show dot1x advanced ethernet g1 388