Show crypto key pubkey-chain ssh, 300

w w w . d e l l . c o m s u p p o r t . d e l l . c o m

User Guidelines

•There are no user guidelines for this command.

Example

The following example displays the SSH public keys on the device.

Console# show crypto key mypubkey rsa

RSA key data:

005C300D 06092A86 4886F70D 01010105 00034B00 30480241 00C5E23B 55D6AB22 04AEF1BA A54028A6 9ACC01C5 129D99E4 64CAB820 847EDAD9 DF0B4E4C 73A05DD2 BD62A8A9 FA603DD2 E2A8A6F8 98F76E28 D58AD221 B583D7A4 71020301 87685768 Fingerprint(Hex): 77:C7:19:85:98:19:27:96:C9:CC:83:C5:78:89:F8:86 Fingerprint(Bubble Babble): yteriuwt jgkljhglk yewiury hdskjfryt gfhkjglk

show crypto key pubkey-chain ssh

The show crypto key pubkey-chain ssh Privileged EXEC mode command displays SSH public keys stored on the device.

Syntax

show crypto key pubkey-chain ssh [username username] [fingerprint bubble-babble hex]

•username—Specifies the remote SSH client username.

•bubble-babble—Fingerprints in Bubble Babble format.

•hex—Fingerprint in Hex format. If fingerprint is unspecified, it defaults to Hex format.

Default Configuration

This command has no default configuration.

Command Mode

Privileged EXEC mode

User Guidelines

•There are no user guidelines for this command.

Examples

The following example displays all SSH public keys stored on the device.

300

SSH Commands

Page 300

Image 300

Dell 5324 manual Show crypto key pubkey-chain ssh, 300, Console# show crypto key mypubkey rsa

5324 specifications

The Dell 5324 is a high-performance network switch that is designed to meet the demands of modern enterprise networking. This switch represents a blend of advanced features aimed at enhancing network efficiency, reliability, and scalability, which are crucial for businesses looking to optimize their infrastructure.

One of the standout features of the Dell 5324 is its Layer 3 routing capabilities. It supports static routing and various dynamic routing protocols, including RIP, OSPF, and BGP, allowing for efficient data transfer across complex networks. This capability is particularly beneficial for organizations that require robust inter-VLAN routing and seamless connectivity with multiple network segments.

The Dell 5324 comes equipped with 24 Gigabit Ethernet ports, which provide ample connectivity options for devices within the network. Additionally, it includes four 10 Gigabit SFP+ ports, enabling users to integrate high-speed uplinks easily. This flexibility allows businesses to expand their network as demand grows without the need for a completely new setup.

Power over Ethernet (PoE) support is another significant advantage of the Dell 5324, as it enables the switch to deliver both data and power to connected devices through a single Ethernet cable. This feature is particularly useful for powering IP phones, security cameras, and Wi-Fi access points, simplifying the overall cabling and ensuring a neater installation.

Furthermore, the Dell 5324 offers advanced security features that help protect the network from unauthorized access and potential threats. It includes features such as 802.1X port-based authentication, MAC address filtering, and VLAN segmentation, ensuring that only authorized devices can connect to the network.

The user-friendly web-based interface alongside command-line interface (CLI) access enhances manageability, allowing network administrators to monitor performance, configure settings, and troubleshoot issues with ease. In addition, the switch supports network automation protocols, which can streamline management tasks and improve efficiency.

The industrial-grade design of the Dell 5324 ensures its reliability in various environments, making it a suitable choice for data centers and enterprise networks alike. With its combination of performance, scalability, and security features, the Dell 5324 stands out as a capable solution for organizations looking to improve their network infrastructure. Its capabilities make it a versatile addition for businesses aiming for a robust and future-ready networking environment.

Contents

CLI Reference Guide Aug Contents Using the CLI Address Table Commands Clock Ethernet Configuration Commands Igmp Snooping Commands Lacp Commands Management ACL Port Monitor Commands Rmon Commands Spanning-Tree Commands SSH Commands Syslog Commands Tacacs Commands Vlan Commands 32 802.1x Commands 382 Page Command Groups Command GroupsIntroduction Configures and reports on Spanning Tree protocol Configures Tacacs commandsConfigures commands related to 802.1x security protocol AAA Commands Address Table Commands Configures an external time source for Configures the system to automatically switchDefines an authentication key for Simple Displays statically created entries in the bridge Configuration and Image Files Commands Ethernet Configuration Commands Displays the backup configuration file contents Gvrp Commands Igmp Snooping Commands Defines a default gateway routerIP Addressing Sets an IP address Line Commands Deletes entries from the host name-to-addressCache Lldp Commands Sets the line for automatic baud rate detection Management ACL Commands PHY Diagnostics Commands Port Channel Commands Port Monitor CommandsQoS Commands Radius Commands Enables each port trust state Rmon Commands Snmp Commands Spanning Tree Commands MST SSH Commands Overrides the default link-type settingSets the default path cost method Syslog Commands System Management Commands Tacacs CommandsReloads the operating system User Interface Commands Vlan CommandsSwitches the mode to debug Disables the default Vlan functionality Reserves a Vlan as the internal usage Vlan of an Interface Web Server Commands 802.1x Commands Command Description Access Mode Command Groups Command Modes GC Global Configuration Mode Device Notification operation IC Interface Configuration Mode Sntp An Extensible Authentication Protocol EAP request/identity Frame, from the client, before resending the requestReserves a Vlan as the internal usage Vlan of an interface LC Line Configuration Mode Enables the Simple Network Time Protocol Sntp client on anCommand Description MA Management Access-level Mode PE Privileged User Exec Mode Vlan SP SSH Public Key Mode UE User Exec Mode Command Modes VC Vlan Configuration Mode W . d e l l . c o m s u p p o r t . d e l l . c o m Using the CLI CLI Command ModesIntroduction User Exec Mode Privileged Exec Mode Global Configuration Mode Exit End Ctrl+Z Starting the CLI Editing Features Entering CommandsConsoleconfig# username admin password smith Terminal Command Buffer Negating the Effect of CommandsCommand Completion Config#interface ethernet CLI Command Conventions Keyboard ShortcutsItalic font Enter Using the CLI AAA Commands Aaa authentication loginDefault Configuration Command Mode Aaa authentication enable Following example configures authentication loginExample Login authentication Console config# aaa authentication enable default enable Enable authentication Console config-line#login authentication default Ip http authentication Console config-line#enable authentication defaultFollowing example configures the http authentication Ip https authentication Show authentication methodsFollowing example configures https authentication Syntax Show authentication methods Default Configuration This command has no default configurationPrivileged Exec mode Following example displays the authentication configuration Password Console# show authentication methodsSyntax Password password encrypted No password Enable password No password is requiredFollowing example specifies a password secret on a line Username Show users accountsNo user is defined Syntax Show users accounts Default Configuration Console# show users accounts AAA Commands Address Table Commands Interface configuration Vlan modeBridge address Disabled. All multicast addresses are flooded to all ports This example, bridge multicast filtering is enabledConsole config# bridge multicast filtering Bridge multicast filtering No multicast addresses are defined ExamplesFollowing example registers the MAC address Command Modes Bridge multicast forbidden addressNo forbidden addresses are defined Disable forward-all on the specified interface Bridge multicast forward-allBridge multicast forbidden forward-all This example all multicast packets on port g8 are forwarded Bridge aging-time Syntax Clear bridge Syntax Clear bridgeConsole# clear bridge Disabled No port security Interface Configuration Ethernet, port-channel modePort security Console config-if#port security routed secure-address Port security routed secure-addressShow bridge address-table Mac-address-Specify a MAC address in the format Port-channel-number-A valid port-channel number Show bridge address-table static Console# show bridge address-table Show bridge address-table count Console# show bridge address-table staticSyntax Show bridge address-table count vlan vlan Vlan -Specific Vlan Show bridge multicast address-table Console# show bridge address-table count Console # show bridge multicast address-table Console # show bridge multicast address-table format ip Show bridge multicast filtering Show ports securitySyntax Show bridge multicast filtering vlan-id Vlanid-A valid Vlan ID value Console # show ports security Clock Clock setClock source Syntax Clock source sntp No clock source Clock timezone No external clock sourceConsole# clock source sntp Clock summer-time Sntp authentication-key No authentication key is defined Sntp authenticate Consoleconfig# sntp authentication-key 8 md5 ClkKeySyntax Sntp authenticate No sntp authenticate Sntp client poll timer Following example authenticates keySntp trusted-key Not trusted Sntp broadcast client enable Console config# sntp client poll timerConsole config# sntp broadcast client enable Sntp anycast client enable Sntp client enable interfaceConsole config-if#sntp anycast client enable Syntax Sntp client enable No sntp client enable Sntp unicast client enable Console config# sntp unicast client enable101 Console config# sntp unicast client poll Sntp unicast client pollSntp server Syntax Sntp unicast client poll no sntp unicast client poll Show clock Syntax Show clock detail103 Console# show clock 104 Show sntp configuration Syntax Show sntp configurationConsole# show sntp configuration 105 Show sntp status Syntax Show sntp statusFollowing example shows the status of the Sntp 106 107 Clock Configuration and Image Files Delete startup-configConsole# delete startup-config Copy Understanding Invalid Combinations of Source and Destination 110 Storing the Running or Startup Configuration on a Server Copy Character DescriptionsCopying image file from a Server to Flash Memory 111 Boot system Syntax Boot system image-1 image-2Console# boot system image-1 112 Show running-config Syntax Show running-config sort typeSort type defaults to interface if unspecified 113 Show startup-config Console# show running-config no spanning-treeSyntax Show startup-config sort type 114 115 Show backup-config Console# show startup-config no spanning-treeSyntax Show backup-config 116 Console# show backup-config software version 117 Show bootvar Syntax Show bootvar Default ConfigurationConsole# show bootvar 118 Ethernet Configuration Commands Interface ethernetInterface range ethernet Syntax Shutdown No shutdown Default Configuration Interface is enabledFollowing example disables port g5 Shutdown Description SpeedSyntax Description string No description Syntax Speed 100 1000 No speed Duplex Syntax Duplex half full No duplex122 Consoleconfig# interface ethernet g5 Syntax Negotiation No negotiation Default ConfigurationNegotiation Flowcontrol Mdix Syntax Flowcontrol auto on off No flowcontrolSyntax Mdix on auto No mdix 124 Syntax Back-pressure No back-pressure Default Configuration Back-pressure125 Port jumbo-frame Clear counters126 Show interfaces configuration Set interface activeConsole# clear counters ethernet g1 Console# set interface active ethernet g5 Interfaces configuration 128 Show interfaces status 129 130 Console# show interfaces status Show interfaces description 131 Show interfaces counters Console# show interfaces description ethernet g1132 133 Console# show interfaces counters Following example displays counters for port g1 Console# show interfaces counters ethernet g1Following table describes the fields shown in the display 134 135 Ieee Std .3, 2000 Edition, section Syntax Show ports jumbo-frame Default Configuration Show ports jumbo-frame136 Port storm-control broadcast enable Consoleconfig# port storm-control include-multicastPort storm-control include-multicast Console# show ports jumbo-frame Broadcast storm control is disabled Consoleconfig-if#port storm-control broadcast enableDefault storm control broadcast rate is Port storm-control broadcast rate Consoleconfig-if#port storm-control broadcast rate Following example displays the storm control configurationShow ports storm-control Syntax Show ports storm-control interface 140 Gvrp Commands Gvrp enable globalGvrp enable interface Syntax Gvrp enable No gvrp enable Default Configuration Garp timer Following example enables Gvrp on ethernet g8142 By default, dynamic Vlan creation is enabled Gvrp vlan-creation-forbid143 Console config-if#gvrp vlan-creation-forbid Console config-if#gvrp registration-forbidGvrp registration-forbid Clear gvrp statistics Show gvrp configuration Console# clear gvrp statistics ethernet g8145 Console# show gvrp configuration Show gvrp statistics146 Show gvrp error-statistics Following example shows Gvrp statistics information147 Console# show gvrp statistics Console# show gvrp-error statistics Following example displays Gvrp statistics information148 Igmp Snooping Commands Ip igmp snooping GlobalIp igmp snooping Interface 149 Ip igmp snooping mrouter Ip igmp snooping host-time-out150 Console config-if#ip igmp snooping host-time-out Ip igmp snooping mrouter-time-out151 Console config-if#ip igmp snooping mrouter-time-out Default leave-time-out configuration is 10 secondsConsole config-if#ip igmp snooping leave-time-out Ip igmp snooping leave-time-out Show ip igmp snooping mrouter Show ip igmp snooping interfaceConsole # show ip igmp snooping mrouter Show ip igmp snooping groups Example displays Igmp snooping informationConsole # show ip igmp snooping interface 154 Example shows Igmp snooping information Console # show ip igmp snooping groups155 Igmp Snooping Commands IP Addressing Commands Clear host dhcpIp address Console# clear host dhcp Interface configuration Ethernet, VLAN, port-channel Ip address dhcpNo IP address is defined for interfaces 158 Ip default-gateway Syntax Ip default-gateway ip-address No ip default-gatewayNo default gateway is defined 159 Following example defines an ip default gateway Show ip interface160 Arp Console# show ip interface161 Arp timeout Console config# arp 198.133.219.232 00000c400fbc ethernetClear arp-cache Syntax Show arp Default Configuration Show arpConsole# clear arp-cache Following example displays entries in the ARP table Ip domain-lookup Ip domain-nameSyntax Ip domain-lookup No ip domain-lookup Syntax Ip domain-name name No ip domain-name Ip name-server Ip hostNo name server addresses are specified Following example sets the available name server Clear host Syntax Ip host name address No ip host nameNo host is defined Syntax Clear host name Default Configuration Command Mode Show hostsSyntax Show hosts name 167 168 Lacp Commands Lacp system-priorityLacp port-priority Syntax Lacp port-priority value No lacp port-priority Lacp timeout Syntax Lacp timeout long short No lacp timeoutDefault port timeout value is long 170 Show lacp ethernet Show lacp port-channelConsole# show lacp ethernet g1 statistics Syntax Show lacp port-channel portchannelnumber Console# show lacp port-channel 172 Line Commands LineSyntax Line console telnet ssh Syntax Speed bps Exec-timeout Syntax Autobaud No autobaud Default ConfigurationAutobaud 174 Syntax Exec-timeout minutes seconds No exec-timeout Show lineSyntax Show line console telnet ssh 175 Following example displays the line configuration Terminal historyTerminal history size Console# show line console Maximum for the sum of all buffers is 177 Line Commands Lldp Commands Lldp enable globalLldp enable interface Syntax Lldp timer Interface configuration EthernetSyntax Lldp timer seconds No lldp timer Default 30 seconds Lldp reinit-delay Default ConfiguraitonLldp hold-multiplier Syntax Lldp hold-multiplier number No lldp hold-multiplier Lldp tx-delay Syntax Lldp reinit-delay seconds No lldp reinit-delaySyntax Lldp tx-delay seconds No lldp tx-delay Parameters Default value is 2 seconds Lldp optional-tlv Lldp management-addressUsage Guidelines No optional TLV is transmitted Clear lldp rx 184 Show lldp configuration Syntax Show lldp configuration ethernet interfaceSwitch# show lldp configuration Show lldp local Show lldp neighbors 186 Switch# show lldp neighbors Switch# show lldp neighbors ethernet g1187 Lldp Commands Management access-list Name-The access list name using up to 32 charactersManagement ACL 189 Console config# management access-class mlist Permit management190 Management Access-list Configuration mode Deny management191 Management access-class 192 Show management access-list Show management access-classSyntax Show management access-list name Console# show management access-list Syntax Show management access-class Default Configuration Console# show management access-class194 PHY Diagnostics Commands Test copper-port tdrShow copper-ports tdr Console# test copper-port tdr g3 Show copper-ports cable-length Syntax Show copper-ports cable-length interfacePort must be active and working in 1000M 196 Show fiber-ports optical-transceiver Console# show copper-ports cable-length197 198 Console# show fiber-ports optical-transceiver 199 Console# show fiber-ports optical-transceiver detailed PHY Diagnostics Commands Port Channel Commands Console config# interface port-channelInterface port-channel Interface range port-channel Console config# interface range port-channel Channel-groupPort is not assigned to any port-channel 202 Console config-if#channel-group 1 mode on Port channel load balanceShow interfaces port-channel Syntax Show interfaces port-channel port-channel-number 204 Port Monitor Commands Default is both rx and txInterface Configuration mode Port monitor Syntax Show ports monitor Default Configuration Show ports monitor206 Console# show ports monitor 207 Port Monitor Commands QoS Commands QosShow qos Following example displays a QoS mode Wrr-queue cos-map210 Interface Configuration Ethernet, port channel mode Wrr-queue bandwidthFollowing example maps CoS 3 to queue 211 Following example assigns WRR weights to egress queues Priority-queue out num-of-queuesAll queues are expedite queues 212 Console config# priority-queue out num-of-queues Show qos interfaceFollowing example sets queue 4, 3 to be expedite queues 213 Qos map dscp-queue Console# show qos interface ethernet g1 queuing214 Qos trust Global Syntax Qos trust cos dscp No qos trust215 Syntax Qos trust No qos trust Default Configuration Syntax Qos cos default-cos No qos cos 216Qos trust Interface Qos cos Show qos map Syntax Show qos map dscp-queue217 Following example displays the Dscp port-queue map Console# show qos map Dscp-queue mapFollowing table describes the fields used above D1 x 10 + D2 = Value of Dscp Radius Commands By default, no Radius host is specifiedRadius-server host Ip-address-IP address of the Radius server host Timeout Default is an empty stringRadius-server key Syntax Radius-server key key-string No radius-server key Console config# radius-server retransmit Radius-server retransmitRadius-server source-ip 221 Radius-server timeout Console config# radius-server timeout222 Console config# radius-server deadtime Syntax Show radius-servers Default ConfigurationRadius-server deadtime Show radius-servers Following example displays the Radius server settings 224Console# show radius-servers Rmon Commands Show rmon statisticsConsole# show rmon statistics ethernet g1 225 226 Field Description Rmon collection history 227 Console config-if#rmon collection history 1 interval Show rmon collection historyFollowing example displays all Rmon group statistics Console# show rmon collection history Show rmon history 229 Console# show rmon history 5 errors 230Console# show rmon history 5 throughput Console# show rmon history 5 other 231 Rmon alarm 232 Show rmon alarm-table 233 Show rmon alarm Syntax Show rmon alarm-table Default ConfigurationConsole# show rmon alarm-table Syntax Show rmon alarm number Following example displays Rmon 1 alarms Console# show rmon alarm235 Rmon event 236 Following example configures an event with the trap index Syntax Show rmon events Default ConfigurationShow rmon events Following example displays the Rmon event table Show rmon log Console# show rmon eventsSyntax Show rmon log event Event-Event index. Range 0 Following example displays the Rmon logging table Console# show rmon log239 Console config# rmon table-size history Rmon table-sizeHistory table size is Log table size is 240 Snmp Commands There are no default communities definedSnmp-server community No snmp-server community community ip-address Default Setting Default and DefaultSuper views existsSnmp-server view 242 Snmp-server filter Product specific243 Snmp-server contact Snmp-server locationIncluded Syntax Snmp-server contact text No snmp-server contact Snmp-server enable traps Console config# snmp-server enable trapsSyntax Snmp-server location text No snmp-server location 245 Snmp-server trap authentication Console config# snmp-server trap authenticationSnmp-server host 246 Snmp-server set 247 Snmp-server group 248 Console config# snmp-server group user-groupv3 priv read Snmp-server userNo group entry exists Router context is translated to context in the MIB 250 Following example configures a new Snmp Version 3 user Console config# snmp-server userSnmp-server v3-host 251 Following example configures an SNMPv3 host Snmp-server engineID local252 Syntax Show snmp engineID Default Setting Consoleconfig # snmp-server engineID local defaultShow snmp engineid 253 Syntax Show snmp Default Configuration Show snmpConsole# sh snmp 254 Show snmp views Syntax Show snmp views viewname255 Show snmp groups Syntax Show snmp groups groupname256 Show snmp filters Syntax Show snmp filters filtername257 Show snmp users Syntax Show snmp users username258 259 Snmp Commands Spanning-Tree Commands Spanning-tree modeSyntax Spanning-tree No spanning-tree Default Configuration Spanning-tree Consoleconfig# spanning-tree mode rstp Consoleconfig# spanning-tree forward-timeSpanning-tree forward-time Seconds-Time in seconds. Range 4 Spanning-tree hello-time 263 Consoleconfig# spanning-tree hello-time Spanning-tree max-age264 Spanning-tree disable Consoleconfig# spanning-tree max-ageConsoleconfig# spanning-tree priority Spanning-tree priority Following example disables spanning-tree on g5 Spanning-tree costSyntax Spanning-tree cost cost No spanning-tree cost Cost-The port path cost Range 1 200,000,000 Consoleconfig-if#spanning-tree port-priority Spanning-tree port-prioritySpanning-tree portfast 267 Consoleconfig-if#spanning-tree portfast Consoleconfig-if#spanning-tree link-type sharedSpanning-tree link-type 268 Default number of hops is Console config # spanning-tree mst 1 prioritySpanning-tree mst priority Spanning-tree mst max-hops Console config # spanning-tree mst max-hops Consoleconfig-if#spanning-tree mst 1 port-prioritySpanning-tree mst port-priority 270 Spanning-tree mst configuration Spanning-tree mst costInterface Long Short 271 Syntax Spanning-tree mst configuration Default Setting Instance mstSyntax Instance instance-id add remove vlan vlan-range 272 Name mst Revision mstSyntax Name string Syntax Revision value No revision Default configuration revision number is Following example sets the configuration revision toShow mst Syntax Show current pending Syntax Exit Default Setting Syntax Abort Default SettingExit mst Abort mst Spanning-tree pathcost method Spanning-tree bpduConsole# spanning-tree pathcost method long 276 Consoleconfig# spanning-tree bpdu flooding Clear spanning-tree detected-protocolsSyntax Spanning-tree bpdu filtering flooding 277 Show spanning-tree Console# clear spanning-tree detected-protocols ethernet g1Following example displays spanning-tree information 278 279 Console# show spanning-tree 280 281 282 283 284 285 Console# show spanning-tree mst-configuration 286 287 288 289 Spanning-tree mst mstp-rstp 290 Consoleconfig# spanning-tree mst mstp-rstp Root guard is disabledInterface configuration Ethernet, port-channel Spanning-tree guard root Following example enable root guard on port g8 Consoleconfig-if#spanning-tree guard root292 SSH Commands Ip ssh portIp ssh server Syntax Crypto key generate dsa Default Configuration Console config# crypto key generate dsaCrypto key generate dsa Crypto key generate rsa Syntax Crypto key generate rsa Default Configuration Console config# crypto key generate rsaIp ssh pubkey-auth 295 Consoleconfig# crypto key pubkey-chain ssh Crypto key pubkey-chain sshUser-key Key-string Syntax Key-string row key-string297 Syntax Show ip ssh Default Configuration Show ip ssh298 Following example displays the SSH server configuration Show crypto key mypubkeySyntax Show crypto key mypubkey rsa dsa Rsa-RSA key Dsa-DSA key Show crypto key pubkey-chain ssh 300Console# show crypto key mypubkey rsa Console# show crypto key pubkey-chain ssh Following example displays the SSH public called bobConsole# show crypto key pubkey-chain ssh username bob 301 SSH Commands Syslog Commands Syntax Logging on no logging on Default ConfigurationLogging on Logging Default is informational Logging consoleAs described in the field descriptions Syntax Logging console level No logging console Default level is informational Logging bufferedLogging buffered size Syntax Logging buffered level No logging buffered Console config# logging buffered size Syntax Clear logging Default ConfigurationClear logging Console# clear logging Syntax Clear logging file Default Configuration Logging fileClear logging file Syntax Logging file level No logging file Syntax Show logging Default Configuration Show loggingFollowing example clears messages from the logging file Console# clear logging file Syntax Show logging file Default Configuration Show logging fileConsole# show logging 309 Syntax Show syslog-servers Default Configuration Show syslog-servers310 Following example displays the syslog server settings Console# show syslog-servers311 Syslog Commands Timeout timeout-The default is 2000 milliseconds System ManagementPing 313 Traceroute Following example displays a ping to IP address314 315 316 Special Telnet Command characters Telnet317 Keywords Table 318 Ports Table 319 Following command switches to another open Telnet session ResumeSyntax Resume connection 320 Reload Hostname Show users Show sessionsConsole# show users Exec mode Show systemConsole show sessions Syntax Show system Show version Following example displays the system informationSyntax Show version 324 Console show system Asset-tag Syntax Asset-tag tag No asset-tagTag-The device asset tag. Range 1- 16 characters 325 Syntax Show system id Default Configuration Show system idConsole show system id 326 Tacacs Commands Tacacs-server hostNo Tacacs host is specified 327 Tacacs-server timeout Following example sets the authentication encryption keyTacacs-server key Following example specifies a TACACS+ host Console config# tacacs-server timeout Tacacs-server source-ip329 Show tacacs Syntax Show tacacs ip-addressIp-address-Name or IP address of the host Console# show tacacs Enable DisableUser Interface Login ConfigureSyntax Login Default Configuration Syntax Configure Exitconfiguration Syntax Exit Default ConfigurationAll command modes 333 Syntax End Default Configuration ExitEXECEnd Following example closes an active terminal session Syntax Help Default Configuration Syntax History No history Default ConfigurationHelp History Syntax History size number-of-commands No history size Syntax Debug-mode Default ConfigurationHistory size Debug-mode Syntax Show history Default Configuration Show history337 Syntax Show privilege Default Configuration Show privilegeConsole# show history Console# show privilege Vlan Commands Vlan databaseVlan Default-vlan disable Interface vlanConsole# vlan database Interface range vlan Syntax Interface range vlan vlan-range all341 Switchport access vlan NameSyntax Name string no name 342 Switchport trunk allowed vlan Console config-if#switchport access vlan343 Switchport trunk native vlan Switchport general allowed vlanConsole config-if#switchport trunk allowed vlan add 2,5-8 Console config-if#switchport trunk native vlan Switchport general pvid 345 Switchport general ingress-filtering disable Ingress filtering is enabled346 Switchport general acceptable-frame-type tagged-only Switchport forbidden vlanAll frame types are accepted at ingress All VLANs allowed Console config-if#switchport forbidden vlan add Map protocol protocols-groupFollowing example maps protocol ip-arp to the group named 348 Switchport general map protocols-group vlan Ip internal-usage-vlanVlan-id-VLAN ID of the internal usage VLAN.Range Valid Vlan 349 Console config# ip internal-usage-vlan Show vlanSyntax Show vlan tag vlan-id name vlan-name Following example displays all Vlan information Syntax Show vlan internal usage Default Configuration Show vlan internal usage351 Syntax Show vlan protocols-groups Default Configuration Show vlan protocols-groupsConsole# show vlan internal usage Following example displays protocols-groups information Show interfaces switchport Console# show vlan protocols-groups353 Switchport mode Console# show interface switchport ethernet g1Syntax Switchport mode customer access trunk general 354 Switchport customer vlan No switchport modeNo Vlan is configured Vlan-id- Vlan ID of the customer 356 Web Server Ip http serverIp http port Syntax Ip http port port-number No ip http port Default for the device is disabled Ip https serverIp https port Syntax Ip https port port-number No ip https port Following example configures the https port number to Crypto certificate generate359 Console enable# crypto certificate generate key-generate Crypto certificate requestCertificate and the SSL RSA key pairs do not exist Following example regenerates a Https certificate Console# crypto certificate 1 request 361 Crypto certificate import Syntax Crypto certificate number importNumber-Specifies the certificate number. Range 1 362 Consoleconfig# crypto certificate 1 import Ip https certificateCertificate number 363 Console config# ip https certificate Crypto certificate export pkcs12Syntax Crypto certificate number export pkcs12 364 Following example exports the certificate and RSA keys 365Console# crypto certificate 1 export pkcs12 Crypto certificate import pkcs12 Syntax Crypto certificate number import pkcs12 passphraseFollowing example imports the certificate and RSA keys 366 367 Show crypto certificate mycertificate Syntax Show crypto certificate mycertificate numberFollowing example displays the certificate Console# show crypto certificate mycertificate Show ip http Show ip httpsConsole# show ip http Console# show ip https 370 802.1x Commands Aaa authentication dot1xConsole config# aaa authentication dot1x default none Method1 method2...-At least one from the following table Following example enables 802.1x globally Console config# dot1x system-auto-controlDot1x system-auto-control Dot1x port-control Dot1x re-authentication Console config-if#dot1x port-control autoSyntax Dot1x re-authentication No dot1x re-authentication 373 Dot1x timeout re-authperiod Dot1x re-authenticateConsole config-if#dot1x re-authentication Console config-if#dot1x timeout re-authperiod Dot1x timeout quiet-period Console# dot1x re-authenticate ethernet g8375 Dot1x timeout tx-period Console config-if#dot1x timeout quiet-period376 Dot1x timeout supp-timeout Dot1x max-reqSyntax Dot1x max-req count No dot1x max-req 377 Dot1x timeout server-timeout 378 Console config# dot1x timeout server-timeout Show dot1xSyntax Show dot1x ethernet interface 379 380 Console# show dot1x ethernet g3 Show dot1x users Syntax Show dot1x users username usernameUsername-Supplicant username Range 1- 160 characters Following example displays 802.1X users Show dot1x statistics Syntax Show dot1x statistics ethernet interface382 Switch# show dot1x statistics ethernet g1 383 User should be authorized to access the Vlan Dot1x auth-not-reqSyntax Dot1x auth-not-req no dot1x auth-not-req 384 Dot1x multiple-hosts Dot1x single-host-violationSyntax Dot1x multiple-hosts no dot1x multiple-hosts 385 Show dot1x advanced Forward trapSyntax Show dot1x advanced ethernet interface 386 Switch# show dot1x advanced Switch# show dot1x advanced ethernet g1387 Console# show dot1x advanced ethernet g1 388