Dot1x max-req, Dot1x timeout supp-timeout, 377

dot1x max-req

The dot1x max-reqInterface Configuration mode command sets the maximum number of times that the switch sends an Extensible Authentication Protocol (EAP) - request/identity frame (assuming that no response is received) to the client, before restarting the authentication process. Use the no form of this command to return to the default setting.

Syntax

dot1x max-req count

no dot1x max-req

•count—Number of times that the switch sends an EAP - request/identity frame before restarting the authentication process. (Range: 1 - 10)

Default Configuration

Command Mode

Interface configuration (Ethernet) mode

User Guidelines

•You should change the default value of this command only to adjust for unusual circumstances, such as unreliable links or specific behavioral problems with certain clients and authentication servers.

Examples

The following example sets the number of times that the switch sends an EAP - request/identity frame, to 6 .

Console (config)# interface ethernet g8

Console (config-if)# dot1x max-req6

dot1x timeout supp-timeout

The dot1x timeout supp-timeoutInterface Configuration mode command sets the time for the retransmission of an Extensible Authentication Protocol (EAP)-request frame to the client. Use the no form of this command to return to the default setting.

Syntax

dot1x timeout supp-timeout seconds

no dot1x timeout supp-timeout

•seconds—Time in seconds that the switch should wait for a response to an EAP-request frame from the client before resending the request. (Range: 1 - 65535 seconds)

802.1x Commands

377

Page 377

Image 377

Dell 5324 manual Dot1x timeout supp-timeout, Syntax Dot1x max-req count No dot1x max-req, 377

5324 specifications

The Dell 5324 is a high-performance network switch that is designed to meet the demands of modern enterprise networking. This switch represents a blend of advanced features aimed at enhancing network efficiency, reliability, and scalability, which are crucial for businesses looking to optimize their infrastructure.

One of the standout features of the Dell 5324 is its Layer 3 routing capabilities. It supports static routing and various dynamic routing protocols, including RIP, OSPF, and BGP, allowing for efficient data transfer across complex networks. This capability is particularly beneficial for organizations that require robust inter-VLAN routing and seamless connectivity with multiple network segments.

The Dell 5324 comes equipped with 24 Gigabit Ethernet ports, which provide ample connectivity options for devices within the network. Additionally, it includes four 10 Gigabit SFP+ ports, enabling users to integrate high-speed uplinks easily. This flexibility allows businesses to expand their network as demand grows without the need for a completely new setup.

Power over Ethernet (PoE) support is another significant advantage of the Dell 5324, as it enables the switch to deliver both data and power to connected devices through a single Ethernet cable. This feature is particularly useful for powering IP phones, security cameras, and Wi-Fi access points, simplifying the overall cabling and ensuring a neater installation.

Furthermore, the Dell 5324 offers advanced security features that help protect the network from unauthorized access and potential threats. It includes features such as 802.1X port-based authentication, MAC address filtering, and VLAN segmentation, ensuring that only authorized devices can connect to the network.

The user-friendly web-based interface alongside command-line interface (CLI) access enhances manageability, allowing network administrators to monitor performance, configure settings, and troubleshoot issues with ease. In addition, the switch supports network automation protocols, which can streamline management tasks and improve efficiency.

The industrial-grade design of the Dell 5324 ensures its reliability in various environments, making it a suitable choice for data centers and enterprise networks alike. With its combination of performance, scalability, and security features, the Dell 5324 stands out as a capable solution for organizations looking to improve their network infrastructure. Its capabilities make it a versatile addition for businesses aiming for a robust and future-ready networking environment.

Contents

CLI Reference Guide Aug Contents Using the CLI Address Table Commands Clock Ethernet Configuration Commands Igmp Snooping Commands Lacp Commands Management ACL Port Monitor Commands Rmon Commands Spanning-Tree Commands SSH Commands Syslog Commands Tacacs Commands Vlan Commands 32 802.1x Commands 382 Page Introduction Command GroupsCommand Groups Configures commands related to 802.1x security protocol Configures and reports on Spanning Tree protocolConfigures Tacacs commands Address Table Commands AAA Commands Configures the system to automatically switch Configures an external time source forDefines an authentication key for Simple Displays statically created entries in the bridge Configuration and Image Files Commands Displays the backup configuration file contents Ethernet Configuration Commands Gvrp Commands Defines a default gateway router Igmp Snooping CommandsIP Addressing Sets an IP address Cache Line CommandsDeletes entries from the host name-to-address Sets the line for automatic baud rate detection Lldp Commands PHY Diagnostics Commands Management ACL Commands QoS Commands Port Channel CommandsPort Monitor Commands Enables each port trust state Radius Commands Snmp Commands Rmon Commands Spanning Tree Commands MST Sets the default path cost method SSH CommandsOverrides the default link-type setting Syslog Commands Reloads the operating system System Management CommandsTacacs Commands Vlan Commands User Interface CommandsSwitches the mode to debug Disables the default Vlan functionality Interface Reserves a Vlan as the internal usage Vlan of an Web Server Commands Command Description Access Mode 802.1x Commands Command Groups GC Global Configuration Mode Command Modes Device Notification operation Sntp IC Interface Configuration Mode Reserves a Vlan as the internal usage Vlan of an interface An Extensible Authentication Protocol EAP request/identityFrame, from the client, before resending the request Command Description LC Line Configuration ModeEnables the Simple Network Time Protocol Sntp client on an PE Privileged User Exec Mode MA Management Access-level Mode Vlan UE User Exec Mode SP SSH Public Key Mode Command Modes VC Vlan Configuration Mode W . d e l l . c o m s u p p o r t . d e l l . c o m Introduction Using the CLICLI Command Modes Privileged Exec Mode User Exec Mode Exit End Ctrl+Z Global Configuration Mode Starting the CLI Consoleconfig# username admin password smith Editing FeaturesEntering Commands Negating the Effect of Commands Terminal Command BufferCommand Completion Config#interface ethernet Keyboard Shortcuts CLI Command ConventionsItalic font Enter Using the CLI Aaa authentication login AAA CommandsDefault Configuration Command Mode Example Aaa authentication enableFollowing example configures authentication login Console config# aaa authentication enable default enable Login authentication Console config-line#login authentication default Enable authentication Following example configures the http authentication Ip http authenticationConsole config-line#enable authentication default Following example configures https authentication Ip https authenticationShow authentication methods This command has no default configuration Syntax Show authentication methods Default ConfigurationPrivileged Exec mode Following example displays the authentication configuration Syntax Password password encrypted No password PasswordConsole# show authentication methods Following example specifies a password secret on a line Enable passwordNo password is required No user is defined UsernameShow users accounts Console# show users accounts Syntax Show users accounts Default Configuration AAA Commands Bridge address Address Table CommandsInterface configuration Vlan mode This example, bridge multicast filtering is enabled Disabled. All multicast addresses are flooded to all portsConsole config# bridge multicast filtering Bridge multicast filtering Following example registers the MAC address No multicast addresses are definedExamples No forbidden addresses are defined Command ModesBridge multicast forbidden address Bridge multicast forward-all Disable forward-all on the specified interfaceBridge multicast forbidden forward-all This example all multicast packets on port g8 are forwarded Syntax Bridge aging-time Console# clear bridge Clear bridgeSyntax Clear bridge Port security Disabled No port securityInterface Configuration Ethernet, port-channel mode Port security routed secure-address Console config-if#port security routed secure-addressShow bridge address-table Mac-address-Specify a MAC address in the format Port-channel-number-A valid port-channel number Console# show bridge address-table Show bridge address-table static Console# show bridge address-table static Show bridge address-table countSyntax Show bridge address-table count vlan vlan Vlan -Specific Vlan Console# show bridge address-table count Show bridge multicast address-table Console # show bridge multicast address-table format ip Console # show bridge multicast address-table Show ports security Show bridge multicast filteringSyntax Show bridge multicast filtering vlan-id Vlanid-A valid Vlan ID value Console # show ports security Clock set ClockClock source Syntax Clock source sntp No clock source Console# clock source sntp Clock timezoneNo external clock source Clock summer-time No authentication key is defined Sntp authentication-key Syntax Sntp authenticate No sntp authenticate Sntp authenticateConsoleconfig# sntp authentication-key 8 md5 ClkKey Following example authenticates key Sntp client poll timerSntp trusted-key Not trusted Console config# sntp broadcast client enable Sntp broadcast client enableConsole config# sntp client poll timer Sntp client enable interface Sntp anycast client enableConsole config-if#sntp anycast client enable Syntax Sntp client enable No sntp client enable 101 Sntp unicast client enableConsole config# sntp unicast client enable Sntp unicast client poll Console config# sntp unicast client pollSntp server Syntax Sntp unicast client poll no sntp unicast client poll 103 Show clockSyntax Show clock detail 104 Console# show clock Syntax Show sntp configuration Show sntp configurationConsole# show sntp configuration 105 Syntax Show sntp status Show sntp statusFollowing example shows the status of the Sntp 106 107 Clock Delete startup-config Configuration and Image FilesConsole# delete startup-config Copy 110 Understanding Invalid Combinations of Source and Destination Copy Character Descriptions Storing the Running or Startup Configuration on a ServerCopying image file from a Server to Flash Memory 111 Syntax Boot system image-1 image-2 Boot systemConsole# boot system image-1 112 Syntax Show running-config sort type Show running-configSort type defaults to interface if unspecified 113 Syntax Show startup-config sort type 114 Show startup-configConsole# show running-config no spanning-tree 115 Syntax Show backup-config 116 Show backup-configConsole# show startup-config no spanning-tree 117 Console# show backup-config software version Syntax Show bootvar Default Configuration Show bootvarConsole# show bootvar 118 Interface range ethernet Ethernet Configuration CommandsInterface ethernet Interface is enabled Syntax Shutdown No shutdown Default ConfigurationFollowing example disables port g5 Shutdown Speed DescriptionSyntax Description string No description Syntax Speed 100 1000 No speed 122 DuplexSyntax Duplex half full No duplex Syntax Negotiation No negotiation Default Configuration Consoleconfig# interface ethernet g5Negotiation Flowcontrol Syntax Flowcontrol auto on off No flowcontrol MdixSyntax Mdix on auto No mdix 124 125 Syntax Back-pressure No back-pressure Default ConfigurationBack-pressure 126 Port jumbo-frameClear counters Set interface active Show interfaces configurationConsole# clear counters ethernet g1 Console# set interface active ethernet g5 128 Interfaces configuration 129 Show interfaces status Console# show interfaces status 130 131 Show interfaces description 132 Show interfaces countersConsole# show interfaces description ethernet g1 Console# show interfaces counters 133 Console# show interfaces counters ethernet g1 Following example displays counters for port g1Following table describes the fields shown in the display 134 Ieee Std .3, 2000 Edition, section 135 136 Syntax Show ports jumbo-frame Default ConfigurationShow ports jumbo-frame Consoleconfig# port storm-control include-multicast Port storm-control broadcast enablePort storm-control include-multicast Console# show ports jumbo-frame Consoleconfig-if#port storm-control broadcast enable Broadcast storm control is disabledDefault storm control broadcast rate is Port storm-control broadcast rate Following example displays the storm control configuration Consoleconfig-if#port storm-control broadcast rateShow ports storm-control Syntax Show ports storm-control interface 140 Gvrp enable global Gvrp CommandsGvrp enable interface Syntax Gvrp enable No gvrp enable Default Configuration 142 Garp timerFollowing example enables Gvrp on ethernet g8 143 By default, dynamic Vlan creation is enabledGvrp vlan-creation-forbid Console config-if#gvrp registration-forbid Console config-if#gvrp vlan-creation-forbidGvrp registration-forbid Clear gvrp statistics 145 Show gvrp configurationConsole# clear gvrp statistics ethernet g8 146 Console# show gvrp configurationShow gvrp statistics Following example shows Gvrp statistics information Show gvrp error-statistics147 Console# show gvrp statistics 148 Console# show gvrp-error statisticsFollowing example displays Gvrp statistics information Ip igmp snooping Global Igmp Snooping CommandsIp igmp snooping Interface 149 150 Ip igmp snooping mrouterIp igmp snooping host-time-out 151 Console config-if#ip igmp snooping host-time-outIp igmp snooping mrouter-time-out Default leave-time-out configuration is 10 seconds Console config-if#ip igmp snooping mrouter-time-outConsole config-if#ip igmp snooping leave-time-out Ip igmp snooping leave-time-out Console # show ip igmp snooping mrouter Show ip igmp snooping mrouterShow ip igmp snooping interface Example displays Igmp snooping information Show ip igmp snooping groupsConsole # show ip igmp snooping interface 154 155 Example shows Igmp snooping informationConsole # show ip igmp snooping groups Igmp Snooping Commands Clear host dhcp IP Addressing CommandsIp address Console# clear host dhcp Ip address dhcp Interface configuration Ethernet, VLAN, port-channelNo IP address is defined for interfaces 158 Syntax Ip default-gateway ip-address No ip default-gateway Ip default-gatewayNo default gateway is defined 159 160 Following example defines an ip default gatewayShow ip interface 161 ArpConsole# show ip interface Clear arp-cache Arp timeoutConsole config# arp 198.133.219.232 00000c400fbc ethernet Show arp Syntax Show arp Default ConfigurationConsole# clear arp-cache Following example displays entries in the ARP table Ip domain-name Ip domain-lookupSyntax Ip domain-lookup No ip domain-lookup Syntax Ip domain-name name No ip domain-name Ip host Ip name-serverNo name server addresses are specified Following example sets the available name server Syntax Ip host name address No ip host name Clear hostNo host is defined Syntax Clear host name Show hosts Default Configuration Command ModeSyntax Show hosts name 167 168 Lacp system-priority Lacp CommandsLacp port-priority Syntax Lacp port-priority value No lacp port-priority Syntax Lacp timeout long short No lacp timeout Lacp timeoutDefault port timeout value is long 170 Show lacp port-channel Show lacp ethernetConsole# show lacp ethernet g1 statistics Syntax Show lacp port-channel portchannelnumber 172 Console# show lacp port-channel Line Line CommandsSyntax Line console telnet ssh Syntax Speed bps Syntax Autobaud No autobaud Default Configuration Exec-timeoutAutobaud 174 Show line Syntax Exec-timeout minutes seconds No exec-timeoutSyntax Show line console telnet ssh 175 Terminal history Following example displays the line configurationTerminal history size Console# show line console 177 Maximum for the sum of all buffers is Line Commands Lldp enable global Lldp CommandsLldp enable interface Syntax Interface configuration Ethernet Lldp timerSyntax Lldp timer seconds No lldp timer Default 30 seconds Default Configuraiton Lldp reinit-delayLldp hold-multiplier Syntax Lldp hold-multiplier number No lldp hold-multiplier Syntax Lldp reinit-delay seconds No lldp reinit-delay Lldp tx-delaySyntax Lldp tx-delay seconds No lldp tx-delay Parameters Default value is 2 seconds Lldp management-address Lldp optional-tlvUsage Guidelines No optional TLV is transmitted 184 Clear lldp rx Syntax Show lldp configuration ethernet interface Show lldp configurationSwitch# show lldp configuration Show lldp local 186 Show lldp neighbors 187 Switch# show lldp neighborsSwitch# show lldp neighbors ethernet g1 Lldp Commands Name-The access list name using up to 32 characters Management access-listManagement ACL 189 190 Console config# management access-class mlistPermit management 191 Management Access-list Configuration modeDeny management 192 Management access-class Show management access-class Show management access-listSyntax Show management access-list name Console# show management access-list 194 Syntax Show management access-class Default ConfigurationConsole# show management access-class Test copper-port tdr PHY Diagnostics CommandsShow copper-ports tdr Console# test copper-port tdr g3 Syntax Show copper-ports cable-length interface Show copper-ports cable-lengthPort must be active and working in 1000M 196 197 Show fiber-ports optical-transceiverConsole# show copper-ports cable-length Console# show fiber-ports optical-transceiver 198 Console# show fiber-ports optical-transceiver detailed 199 PHY Diagnostics Commands Console config# interface port-channel Port Channel CommandsInterface port-channel Interface range port-channel Channel-group Console config# interface range port-channelPort is not assigned to any port-channel 202 Port channel load balance Console config-if#channel-group 1 mode onShow interfaces port-channel Syntax Show interfaces port-channel port-channel-number 204 Default is both rx and tx Port Monitor CommandsInterface Configuration mode Port monitor 206 Syntax Show ports monitor Default ConfigurationShow ports monitor 207 Console# show ports monitor Port Monitor Commands Show qos QoS CommandsQos 210 Following example displays a QoS modeWrr-queue cos-map Wrr-queue bandwidth Interface Configuration Ethernet, port channel modeFollowing example maps CoS 3 to queue 211 Priority-queue out num-of-queues Following example assigns WRR weights to egress queuesAll queues are expedite queues 212 Show qos interface Console config# priority-queue out num-of-queuesFollowing example sets queue 4, 3 to be expedite queues 213 214 Qos map dscp-queueConsole# show qos interface ethernet g1 queuing 215 Qos trust GlobalSyntax Qos trust cos dscp No qos trust Syntax Qos cos default-cos No qos cos 216 Syntax Qos trust No qos trust Default ConfigurationQos trust Interface Qos cos 217 Show qos mapSyntax Show qos map dscp-queue Console# show qos map Dscp-queue map Following example displays the Dscp port-queue mapFollowing table describes the fields used above D1 x 10 + D2 = Value of Dscp By default, no Radius host is specified Radius CommandsRadius-server host Ip-address-IP address of the Radius server host Default is an empty string TimeoutRadius-server key Syntax Radius-server key key-string No radius-server key Radius-server retransmit Console config# radius-server retransmitRadius-server source-ip 221 222 Radius-server timeoutConsole config# radius-server timeout Syntax Show radius-servers Default Configuration Console config# radius-server deadtimeRadius-server deadtime Show radius-servers Console# show radius-servers Following example displays the Radius server settings224 Show rmon statistics Rmon CommandsConsole# show rmon statistics ethernet g1 225 Field Description 226 227 Rmon collection history Show rmon collection history Console config-if#rmon collection history 1 intervalFollowing example displays all Rmon group statistics Console# show rmon collection history 229 Show rmon history Console# show rmon history 5 throughput Console# show rmon history 5 errors230 231 Console# show rmon history 5 other 232 Rmon alarm 233 Show rmon alarm-table Syntax Show rmon alarm-table Default Configuration Show rmon alarmConsole# show rmon alarm-table Syntax Show rmon alarm number 235 Following example displays Rmon 1 alarmsConsole# show rmon alarm 236 Rmon event Syntax Show rmon events Default Configuration Following example configures an event with the trap indexShow rmon events Following example displays the Rmon event table Console# show rmon events Show rmon logSyntax Show rmon log event Event-Event index. Range 0 239 Following example displays the Rmon logging tableConsole# show rmon log Rmon table-size Console config# rmon table-size historyHistory table size is Log table size is 240 There are no default communities defined Snmp CommandsSnmp-server community No snmp-server community community ip-address Default and DefaultSuper views exists Default SettingSnmp-server view 242 243 Snmp-server filterProduct specific Snmp-server location Snmp-server contactIncluded Syntax Snmp-server contact text No snmp-server contact Console config# snmp-server enable traps Snmp-server enable trapsSyntax Snmp-server location text No snmp-server location 245 Console config# snmp-server trap authentication Snmp-server trap authenticationSnmp-server host 246 247 Snmp-server set 248 Snmp-server group Snmp-server user Console config# snmp-server group user-groupv3 priv readNo group entry exists Router context is translated to context in the MIB 250 Console config# snmp-server user Following example configures a new Snmp Version 3 userSnmp-server v3-host 251 252 Following example configures an SNMPv3 hostSnmp-server engineID local Consoleconfig # snmp-server engineID local default Syntax Show snmp engineID Default SettingShow snmp engineid 253 Show snmp Syntax Show snmp Default ConfigurationConsole# sh snmp 254 255 Show snmp viewsSyntax Show snmp views viewname 256 Show snmp groupsSyntax Show snmp groups groupname 257 Show snmp filtersSyntax Show snmp filters filtername 258 Show snmp usersSyntax Show snmp users username 259 Snmp Commands Spanning-tree mode Spanning-Tree CommandsSyntax Spanning-tree No spanning-tree Default Configuration Spanning-tree Consoleconfig# spanning-tree forward-time Consoleconfig# spanning-tree mode rstpSpanning-tree forward-time Seconds-Time in seconds. Range 4 263 Spanning-tree hello-time 264 Consoleconfig# spanning-tree hello-timeSpanning-tree max-age Consoleconfig# spanning-tree max-age Spanning-tree disableConsoleconfig# spanning-tree priority Spanning-tree priority Spanning-tree cost Following example disables spanning-tree on g5Syntax Spanning-tree cost cost No spanning-tree cost Cost-The port path cost Range 1 200,000,000 Spanning-tree port-priority Consoleconfig-if#spanning-tree port-prioritySpanning-tree portfast 267 Consoleconfig-if#spanning-tree link-type shared Consoleconfig-if#spanning-tree portfastSpanning-tree link-type 268 Console config # spanning-tree mst 1 priority Default number of hops isSpanning-tree mst priority Spanning-tree mst max-hops Consoleconfig-if#spanning-tree mst 1 port-priority Console config # spanning-tree mst max-hopsSpanning-tree mst port-priority 270 Spanning-tree mst cost Spanning-tree mst configurationInterface Long Short 271 Instance mst Syntax Spanning-tree mst configuration Default SettingSyntax Instance instance-id add remove vlan vlan-range 272 Revision mst Name mstSyntax Name string Syntax Revision value No revision Following example sets the configuration revision to Default configuration revision number isShow mst Syntax Show current pending Syntax Abort Default Setting Syntax Exit Default SettingExit mst Abort mst Spanning-tree bpdu Spanning-tree pathcost methodConsole# spanning-tree pathcost method long 276 Clear spanning-tree detected-protocols Consoleconfig# spanning-tree bpdu floodingSyntax Spanning-tree bpdu filtering flooding 277 Console# clear spanning-tree detected-protocols ethernet g1 Show spanning-treeFollowing example displays spanning-tree information 278 Console# show spanning-tree 279 280 281 282 283 284 285 286 Console# show spanning-tree mst-configuration 287 288 289 290 Spanning-tree mst mstp-rstp Root guard is disabled Consoleconfig# spanning-tree mst mstp-rstpInterface configuration Ethernet, port-channel Spanning-tree guard root 292 Following example enable root guard on port g8Consoleconfig-if#spanning-tree guard root Ip ssh server SSH CommandsIp ssh port Console config# crypto key generate dsa Syntax Crypto key generate dsa Default ConfigurationCrypto key generate dsa Crypto key generate rsa Console config# crypto key generate rsa Syntax Crypto key generate rsa Default ConfigurationIp ssh pubkey-auth 295 User-key Consoleconfig# crypto key pubkey-chain sshCrypto key pubkey-chain ssh 297 Key-stringSyntax Key-string row key-string 298 Syntax Show ip ssh Default ConfigurationShow ip ssh Show crypto key mypubkey Following example displays the SSH server configurationSyntax Show crypto key mypubkey rsa dsa Rsa-RSA key Dsa-DSA key Console# show crypto key mypubkey rsa Show crypto key pubkey-chain ssh300 Following example displays the SSH public called bob Console# show crypto key pubkey-chain sshConsole# show crypto key pubkey-chain ssh username bob 301 SSH Commands Syntax Logging on no logging on Default Configuration Syslog CommandsLogging on Logging Logging console Default is informationalAs described in the field descriptions Syntax Logging console level No logging console Logging buffered Default level is informationalLogging buffered size Syntax Logging buffered level No logging buffered Syntax Clear logging Default Configuration Console config# logging buffered sizeClear logging Console# clear logging Logging file Syntax Clear logging file Default ConfigurationClear logging file Syntax Logging file level No logging file Show logging Syntax Show logging Default ConfigurationFollowing example clears messages from the logging file Console# clear logging file Show logging file Syntax Show logging file Default ConfigurationConsole# show logging 309 310 Syntax Show syslog-servers Default ConfigurationShow syslog-servers 311 Following example displays the syslog server settingsConsole# show syslog-servers Syslog Commands System Management Timeout timeout-The default is 2000 millisecondsPing 313 314 TracerouteFollowing example displays a ping to IP address 315 316 317 Special Telnet Command charactersTelnet 318 Keywords Table 319 Ports Table Resume Following command switches to another open Telnet sessionSyntax Resume connection 320 Hostname Reload Console# show users Show usersShow sessions Show system Exec modeConsole show sessions Syntax Show system Following example displays the system information Show versionSyntax Show version 324 Console show system Syntax Asset-tag tag No asset-tag Asset-tagTag-The device asset tag. Range 1- 16 characters 325 Show system id Syntax Show system id Default ConfigurationConsole show system id 326 Tacacs-server host Tacacs CommandsNo Tacacs host is specified 327 Following example sets the authentication encryption key Tacacs-server timeoutTacacs-server key Following example specifies a TACACS+ host 329 Console config# tacacs-server timeoutTacacs-server source-ip Syntax Show tacacs ip-address Show tacacsIp-address-Name or IP address of the host Console# show tacacs User Interface EnableDisable Configure LoginSyntax Login Default Configuration Syntax Configure Syntax Exit Default Configuration ExitconfigurationAll command modes 333 ExitEXEC Syntax End Default ConfigurationEnd Following example closes an active terminal session Syntax History No history Default Configuration Syntax Help Default ConfigurationHelp History Syntax Debug-mode Default Configuration Syntax History size number-of-commands No history sizeHistory size Debug-mode 337 Syntax Show history Default ConfigurationShow history Show privilege Syntax Show privilege Default ConfigurationConsole# show history Console# show privilege Vlan Vlan CommandsVlan database Console# vlan database Default-vlan disableInterface vlan 341 Interface range vlanSyntax Interface range vlan vlan-range all Name Switchport access vlanSyntax Name string no name 342 343 Switchport trunk allowed vlanConsole config-if#switchport access vlan Switchport general allowed vlan Switchport trunk native vlanConsole config-if#switchport trunk allowed vlan add 2,5-8 Console config-if#switchport trunk native vlan 345 Switchport general pvid 346 Switchport general ingress-filtering disableIngress filtering is enabled Switchport forbidden vlan Switchport general acceptable-frame-type tagged-onlyAll frame types are accepted at ingress All VLANs allowed Map protocol protocols-group Console config-if#switchport forbidden vlan addFollowing example maps protocol ip-arp to the group named 348 Ip internal-usage-vlan Switchport general map protocols-group vlanVlan-id-VLAN ID of the internal usage VLAN.Range Valid Vlan 349 Show vlan Console config# ip internal-usage-vlanSyntax Show vlan tag vlan-id name vlan-name Following example displays all Vlan information 351 Syntax Show vlan internal usage Default ConfigurationShow vlan internal usage Show vlan protocols-groups Syntax Show vlan protocols-groups Default ConfigurationConsole# show vlan internal usage Following example displays protocols-groups information 353 Show interfaces switchportConsole# show vlan protocols-groups Syntax Switchport mode customer access trunk general 354 Switchport modeConsole# show interface switchport ethernet g1 No switchport mode Switchport customer vlanNo Vlan is configured Vlan-id- Vlan ID of the customer 356 Ip http server Web ServerIp http port Syntax Ip http port port-number No ip http port Ip https server Default for the device is disabledIp https port Syntax Ip https port port-number No ip https port 359 Following example configures the https port number toCrypto certificate generate Crypto certificate request Console enable# crypto certificate generate key-generateCertificate and the SSL RSA key pairs do not exist Following example regenerates a Https certificate 361 Console# crypto certificate 1 request Syntax Crypto certificate number import Crypto certificate importNumber-Specifies the certificate number. Range 1 362 Ip https certificate Consoleconfig# crypto certificate 1 importCertificate number 363 Crypto certificate export pkcs12 Console config# ip https certificateSyntax Crypto certificate number export pkcs12 364 Console# crypto certificate 1 export pkcs12 Following example exports the certificate and RSA keys365 Syntax Crypto certificate number import pkcs12 passphrase Crypto certificate import pkcs12Following example imports the certificate and RSA keys 366 367 Syntax Show crypto certificate mycertificate number Show crypto certificate mycertificateFollowing example displays the certificate Console# show crypto certificate mycertificate Console# show ip http Show ip httpShow ip https 370 Console# show ip https Aaa authentication dot1x 802.1x CommandsConsole config# aaa authentication dot1x default none Method1 method2...-At least one from the following table Console config# dot1x system-auto-control Following example enables 802.1x globallyDot1x system-auto-control Dot1x port-control Console config-if#dot1x port-control auto Dot1x re-authenticationSyntax Dot1x re-authentication No dot1x re-authentication 373 Dot1x re-authenticate Dot1x timeout re-authperiodConsole config-if#dot1x re-authentication Console config-if#dot1x timeout re-authperiod 375 Dot1x timeout quiet-periodConsole# dot1x re-authenticate ethernet g8 376 Dot1x timeout tx-periodConsole config-if#dot1x timeout quiet-period Dot1x max-req Dot1x timeout supp-timeoutSyntax Dot1x max-req count No dot1x max-req 377 378 Dot1x timeout server-timeout Show dot1x Console config# dot1x timeout server-timeoutSyntax Show dot1x ethernet interface 379 Console# show dot1x ethernet g3 380 Syntax Show dot1x users username username Show dot1x usersUsername-Supplicant username Range 1- 160 characters Following example displays 802.1X users 382 Show dot1x statisticsSyntax Show dot1x statistics ethernet interface 383 Switch# show dot1x statistics ethernet g1 Dot1x auth-not-req User should be authorized to access the VlanSyntax Dot1x auth-not-req no dot1x auth-not-req 384 Dot1x single-host-violation Dot1x multiple-hostsSyntax Dot1x multiple-hosts no dot1x multiple-hosts 385 Forward trap Show dot1x advancedSyntax Show dot1x advanced ethernet interface 386 387 Switch# show dot1x advancedSwitch# show dot1x advanced ethernet g1 388 Console# show dot1x advanced ethernet g1