Manuals / Enterasys Networks / Computer Equipment / Switch

Enterasys Networks 9034313-07 manual Configuring Classification Rules, Show policy rule

Models: 9034313-07

1 872

Download 872 pages 24.54 Kb

Page 356

Configuring Classification Rules

Configuring Classification Rules

Purpose

To review, create, assign, and unassign classification rules to policy profiles. This maps user profiles to protocol‐based frame filtering policies.

Note: B3, C3, and G3 devices support profile-based CoS traffic rate limiting only. Policy rules specifying CoS will only rate limit on D2, C2 and B2 devices, including when C2 and B2 devices are configured on mixed stacks containing B3 and C3 devices.

Commands

For information about...	Refer to page...

show policy rule	11-6

show policy capability	11-8

set policy rule	11-10

clear policy rule	11-13

clear policy all-rules	11-14

show policy rule

Use this command to display policy classification rule information.

Syntax

show policy rule [all admin-profile profile-index] [ether ipproto ipdestsocket ipsourcesocket iptos macdest macsource tcpdestport tcpsourceport udpdestport udpsourceport] [data] [mask mask] [port-string port- string] [rule-status {active not-in-service not-ready}][storage-type {non- volatile volatile}] [vlan vlan] [drop forward] [dynamic-pid dynamic-pid] [cos cos] [admin-pid admin-pid][-verbose][usage-list][display-if-used]

Parameters

all admin‐ profile profile‐ index

Displays policy classification rules for all profiles, the admin‐profile, or for a specific profile index number. Valid values are 1 ‐ 1023.

ether	Displays Ethernet type II rules.
ipproto	Displays IP protocol field in IP packet rules.

ipdestsocket	Displays IP destination address rules.

ipsourcesocket	Displays IP source address rules.

iptos	Displays Type of Service rules.

macdest	Displays MAC destination address rules.

macsource	Displays MAC source address rules.

tcpdestport	Displays TCP destination port rules.

11-6 Policy Classification Configuration

Image 356

Contents

Enterasys SecureStack C3 Page Page Enterasys Networks, Inc. Firmware License Agreement Iii Page Contents Page Activating Licensed Features Configuring System Power and PoE Discovery Protocol ConfigurationPort Configuration Show port broadcast Set port broadcast Clear port broadcast Snmp Configuration Spanning Tree Configuration Configuring Spanning Tree Port Parameters Purpose Commands 802.1Q Vlan Configuration Policy Classification Configuration Port Priority ConfigurationIgmp Configuration Logging and Network Management14-3 Rmon Configuration Dhcp Server Configuration Dhcp Snooping and Dynamic ARP Inspection Preparing for Router ModeIP Configuration IPv4 Routing Protocol Configuration 20-11 IPv6 Configuration IPv6 ManagementDHCPv6 Configuration IPv6 Proxy RoutingOSPFv3 Configuration Authentication and Authorization Configuration 26-37 TACACS+ Configuration SFlow Configuration Appendix a Policy and Authentication CapacitiesIndex Tables10-4 22-26 Xxxii Using This Guide About This GuideStructure of This Guide Important NoticeStructure of This Guide SecureStack C3 Installation Guides Related DocumentsFollowing icons are used in this guide Conventions Used in This GuideFollowing conventions are used in the text of this document Getting Help Support@enterasys.comGetting Help Xxxviii About This Guide SecureStack C3 CLI Overview Switch Management MethodsIntroduction Factory Default Settings Default Settings for Basic Switch OperationFeature Default Setting Default Settings for Router Operation SntpDvmrp Starting a CLI Session Using the Command Line InterfaceConnecting Using the Console Port Connecting Using Telnet Using a Default User AccountUsing an Administratively Configured User Account LoggingNavigating the Command Line Interface CLI Command Defaults DescriptionsCLI Command Modes Getting Help with CLI SyntaxAbbreviating and Completing Commands Displaying Scrolling ScreensBasic Line Editing Commands Basic Line Editing CommandsConfiguring Switches in a Stack About SecureStack C3 Switch Operation in a StackInstalling a New Stackable System of Up to Eight Units Adding a New Unit to an Existing Stack Installing Previously-Configured Systems in a StackCreating a Virtual Switch Configuration SID Considerations About Using Clear Config in a Stack Issues Related to Mixed Type StacksFeature Support ConfigurationStacking Configuration and Management Commands Show switchCommands PurposeShow switch switchtype ExamplesShow switch stack-ports NoneSet switch Switch command, read‐writeExample Priority valueSet switch copy-fw Set switch descriptionThis example shows how to assign priority 3 to switch This example shows how to renumber switch 5 to switchSet switch movemanagement Set switch memberClear switch member Use this command to remove a member entry from the stackRequired CLI Setup Commands Basic ConfigurationQuick Start Setup Commands Setting User Accounts and Passwords Optional CLI Setup CommandsParameters Show system loginShow system login Output Details Set system login Clear system loginUse this command to remove a local login user account Super‐user read‐write read‐onlySwitch command, read‐write Switch command, super‐user Set passwordThis example shows how to remove the netops user account Set system password length Set system password agingShow system lockout Set system password historyDisable Set system lockout Show system lockout Output DetailsAttempts attempts Time timeSetting Basic Switch Properties Show ip address Clear ip address Use this command to clear the system IP addressSet ip address Set ip protocol This example shows how to clear the system IP addressShow ip protocol This example shows how to display system information Show systemShow system hardware Show system Output DetailsShow system utilization Slot Hardware InformationThis example sets the CPU utilization threshold to 75% Default threshold value is 80%Set system utilization Clear system utilization Show system enhancedbuffermodeSet system temperature Enable disable Enables or disables enhanced buffer modeThis example shows how to enable enhanced buffer mode Set system enhancedbuffermodeClear system temperature Syslog enableDisable Trap enable disableShow time Set timeShow summertime This example shows how to set the system clock to 750 a.mUse this command to display daylight savings time settings Set summertime Set summertime dateIf a zone name is not specified, none will be applied If an offset is not specified, none will be appliedSet summertime recurring Use this command to modify the command prompt This example shows how to set the command prompt to SwitchClear summertime Set promptShow banner motd Set banner motdClear banner motd Show version‐5 provides an explanation of the command output Use this command to configure a name for the systemSet system name Show version Output DetailsUse this command to identify the location of the system This example shows how to set the system location stringSet system location Set system contactThis example shows how to set the system contact string This example shows how to set the terminal columns toSet width Set lengthThis example shows how to set the terminal length to This example shows how to display the CLI logout settingShow logout Set logoutUse this command to display console settings This example shows how to display all console settingsUse this command to set the console port baud rate Show consoleThis example shows how to set the console port baud rate to Downloading a Firmware ImageDownloading from a Tftp Server Downloading via the Serial PortType 2. The following baud rate selection screen displays Reverting to a Previous Image Reboot the system using the reset command page 3‐50 Reviewing and Selecting a Boot Firmware ImageShow boot system Set boot system Compatibility platform specificStarting and Configuring Telnet This example shows how to display Telnet statusUse this command to enable or disable Telnet on the switch Show telnetEnable disable TelnetInbound Outbound allManaging Switch Configuration and Files Configuration Persistence ModeShow snmp persistmode Set snmp persistmodeSave config DirAuto ManualUse this command to display the contents of a file Show fileShow config Outfile ConfigureAll Systemimage CopyAppend Delete Show tftp settingsThis example shows how to download an image via Tftp Set tftp timeout Clear tftp timeoutThis example shows the output of this command This example sets the timeout period to 4 secondsThis example sets the retry count to Set tftp retryClear tftp retry This example shows how to clear the CLI screen Clearing and Closing the CLICls clear screen To clear the CLI screen or to close your CLI sessionResetting the Switch ResetUse either of these commands to leave a CLI session This example shows how to exit a CLI sessionClear config If no unit ID is specified, the entire system will be resetThis example shows how to reset the system This example shows how to reset unitShow webview Using and Configuring WebViewUse this command to display WebView status Set webview Show sslSet ssl This example shows how to display SSL statusThis example shows how to enable SSL Command Gathering Technical Support InformationShow support To gather common technical support informationConfiguring Hostprotect Hostprotect is enabled by defaultShow system hostprotect Set system hostprotectThis feature is disabled by default This example disables hostprotectDefault state is enabled Clear system hostprotectUsage License Key Field Descriptions Activating Licensed FeaturesLicensing Procedure in a Stack Environment Clearing, Showing, and Applying Licenses Adding a New Member to a Licensed StackSet license UsageUse this command to clear the license key settings FeatureID feature The name of the feature being clearedShow license Clear licenseC3rw-clear license featureId advrouter Clear license Activating Licensed Features Configuring System Power and PoE CommandsShow inlinepower Use this command to display system power propertiesShow inlinepower Output Details Set inlinepower thresholdThis example shows how to display system power properties Sending of traps is disabled by default Set inlinepower trapSet inlinepower detectionmode Show port inlinepower IeeeSet port inlinepower Admin off autoPriority critical High lowSet port inlinepower Configuring System Power and PoE Discovery Protocol Configuration Configuring CDPShow cdp Show cdp Output DetailsSet cdp state Auto disableEnable Set cdp interval Use this command to set a global CDP authentication codeSet cdp auth Set cdp hold-time Clear cdpShow neighbors Configuring Cisco Discovery Protocol Show ciscodp‐2 provides an explanation of the command output ‐3 provides an explanation of the command outputShow ciscodp port info Show ciscodp Output DetailsSet ciscodp timer This example shows how to globally enable CiscoDPSet ciscodp status Show ciscodp port info Output DetailsSet ciscodp holdtime Set ciscodp portVvid Dot1pUntagged TrustedClear ciscodp Overview Configuring Link Layer Discovery Protocol and LLDP-MEDTo review and configure Llpd and LLPD‐MED Configuration Tasks Use this command to display Lldp configuration information Show lldpShow lldp port status Show lldp port trapShow lldp port tx‐tlv port‐string Show lldp port tx-tlvShow lldp port location-info Show lldp port local-info Show lldp port local-info Output Details 1000BASE-TFDECS Elin Show lldp port remote-info Voice‐signaling Guest‐voice‐signalingShow lldp port network-policy VoiceVideo‐signaling Set lldp tx-intervalSoftphone‐voice Video‐conferencingThis example sets the transmit interval to 20 seconds Set lldp hold-multiplierSet lldp trap-interval Set lldp med-fast-repeat Tx‐enable Rx‐enableSet lldp port status Set lldp port trapElin Set lldp port med-trapSet lldp port location-info Set lldp port tx-tlv Gvrp Mac‐phyPoe Link‐aggrState enable disable Set lldp port network-policyTag tagged untagged Vid vlan‐id dot1pClear lldp Tx‐intervalHold‐multiplier Trap‐intervalClear lldp port status Clear lldp port trapCleared Clear lldp port med-trapClear lldp port location-info Clear lldp port network-policy TagVid DscpClear lldp port tx-tlv Disables the LLDP‐MED Location Identification TLV from being Disables the LLDP‐MED Extended Power via MDI TLV from beingPort Configuration Port Configuration SummaryPort String Syntax Used in the CLI Port type.unitorslot number.port numberReviewing Port Status Port Slot/Unit Parameters Used in the CLIShow port Show port statusShow port status Output Details Switch mib2Show port counters Show port counters Output Details This example clears the port counters for ge.3.1 Clear port countersShow port cablestatus Show port cablestatus Output Details Disabling / Enabling and Naming PortsThis example shows the cable status for 1 GE port ge.1.31 Set port disable Set port enableThis example shows how to disable ge.1.1 This example shows how to enable ge.1.3Set port alias Use this command to assign an alias name to a portShow port alias This example shows how to assign the alias Admin to ge.3.3 This example shows how to clear the alias for ge.3.3Setting Speed and Duplex Mode Show port speedSet port speed Show port duplex10 100 MbpsFull half This example shows how to set ge.1.17 to full duplexSet port duplex Enabling / Disabling Jumbo Frame Support Show port jumboClear port jumbo Enables or disables jumbo frame supportSet port jumbo Setting Auto-Negotiation and Advertised Ability Show port negotiationShow port advertise Enable disableSet port negotiation Set port advertise Clear port advertise Show port mdix Set port mdixForced‐auto MdiOptional Specify the port or ports to configure Configure ports to use MDI mode onlyConfigure ports to use Mdix mode only Set flowcontrol Setting Flow ControlShow flowcontrol This example shows how to enable flow control Setting Port Link Traps and Link Flap Detection Show port trapShow linkflap Following example disables sending trap on ge.3.1Set port trap Globalstate PortstateParameters MetricsShow linkflap parameters Output Details Show linkflap metrics Output DetailsDisable enable Disables or enables the link flap detection functionSet linkflap globalstate Set linkflap portstateSet linkflap interval Set linkflap actionSet linkflap threshold Use this command to set the link flap action trigger countClear linkflap action Set linkflap downtime Clear linkflap downClear linkflap All statsParameter Threshold intervalConfiguring Broadcast Suppression Show port broadcastSet port broadcast Clear port broadcastSyntax Used in the CLI on page 7‐1 Remote Port Mirroring Mirroring FeaturesPort Mirroring Overview Configuring Smon MIB Port MirroringProcedures To review and configure port mirroring on the device Show port mirroringSet port mirroring Create disableCan be configured per stack, if applicable Set mirror vlan Use this command to clear a port mirroring relationshipClear port mirroring Clear mirror vlan Link Aggregation Control Protocol Lacp Lacp Operation‐6 defines key terminology used in Lacp configuration Lacp TerminologySecureStack C3 Usage Considerations Lacp Terms and DefinitionsCommands ‐7 provides an explanation of the command output Show lacpDisable enable Disables or enables Lacp This example shows how to disable LacpSet lacp Show lacp Output DetailsAsyspri Set lacp aadminkeySet lacp asyspri Set lacp static Disable enable Disables or enables static link aggregationClear lacp Clear lacp static Clear lacp singleportlag This example enables the formation of single port LAGsSet lacp singleportlag Summary Counters Show port lacpStatus detail Aadminkey Set port lacpAadminstate LacptimeoutPadminkey PadminportClear port lacp C3su-clear port lacp port ge.3.16 Protected Port Operation Configuring Protected PortsSet port protected Read‐only Show port protectedClear port protected Set port protected name Show port protected nameUse this command to clear the name of a protected group Clear port protected nameClear port protected name Port Configuration Snmp Configuration Snmp Configuration SummaryAbout Snmp Security Models and Levels SNMPv1 and SNMPv2cSNMPv3 Using Snmp Contexts to Access Specific MIBs Configuration ConsiderationsReviewing Snmp Statistics Snmp Security LevelsShow snmp engineid Output Details This example shows how to display Snmp engine propertiesShow snmp engineid Show snmp counters Use this command to display Snmp traffic counter valuesThis example shows how to display Snmp counter values Show snmp counters Output Details Engine or otherwise unavailable Configuring Snmp Users, Groups, and Communities Show snmp userThis example shows how to display an Snmp user list ‐4 provides an explanation of the command outputUse this command to create a new SNMPv3 user Set snmp userAes ShaVolatile NonvolatileRemote remote Clear snmp userShow snmp group Set snmp group User userSecurity‐model V2c usm VolatileV2c usm Clear snmp groupShow snmp community Use this command to configure an Snmp community group Set snmp communitySecurityname Context contextConfiguring Snmp Access Rights Use this command to delete an Snmp community nameThis example shows how to delete the community name vip Clear snmp communityShow snmp access NoauthenticationAuthentication Privacy Context context Nonvolatile read‐ OnlyShow snmp access Output Details This example shows how to display Snmp access information‐6 provides an explanation of the command output Set snmp access Clear snmp access Configuring Snmp MIB ViewsShow snmp view Show snmp view Output Details Show snmp contextSet snmp view Clear snmp view Configuring Snmp Target Parameters Show snmp targetparamsVolatile nonvolatile Read‐only‐8 provides an explanation of the command output Set snmp targetparamsShow snmp targetparams Output Details Message‐Authentication Clear snmp targetparamsPrivacy Protected from disclosureShow snmp targetaddr Configuring Snmp Target AddressesUse this command to display Snmp target address information Timeout timeout Set snmp targetaddrParam param Udpport udpportUse this command to delete an Snmp target address entry Clear snmp targetaddrTaglist taglist Tag 1 tagConfiguring Snmp Notification Parameters About Snmp Notify FiltersSet newaddrtrap By default, this function is disabled globally and per portShow newaddrtrap Show snmp notify ‐10 provides an explanation of the command output Set snmp notify10 show snmp notify Output Details Trap informShow snmp notifyfilter Use this command to clear an Snmp notify configurationClear snmp notify Set snmp notifyfilter Subtree oid‐or‐Clear snmp notifyfilter Targetparam Show snmp notifyprofileSet snmp notifyprofile Clear snmp notifyprofile Creating a Basic Snmp Trap ConfigurationThis example shows how to delete Snmp notify profile area51 11 Basic Snmp Trap Configuration ExampleShow snmp interface Configuring the Snmp Management InterfaceHow Snmp Will Use This Configuration Set snmp interface Loopback loop‐IDClear snmp interface Clear snmp interface Snmp Configuration Spanning Tree Configuration Spanning Tree Configuration SummarySpanning Tree Features Loop ProtectConfiguring Spanning Tree Bridge Parameters For information about Active Show spantree statsSid sid ‐1 shows a detailed explanation of command output Show spantree Output DetailsShow spantree version Disable enable Globally disables or enables Spanning TreeSet spantree Set spantree version Show spantree bpdu-forwarding This example shows how to reset the Spanning Tree versionClear spantree version Disable enable Disables or enables Bpdu forwarding By default Bpdu forwarding is disabledThis example shows how to enable Bpdu forwarding Set spantree bpdu-forwardingSet spantree bridgeprioritymode Clear spantree bridgeprioritymode8021d 8021tCreate delete Show spantree mstilistSet spantree msti Fid fid Clear spantree mstiShow spantree mstmap This example shows how to map FID 3 to SID Use this command to map a FID back to SIDSet spantree mstmap Clear spantree mstmapShow spantree mstcfgid This example shows how to map FID 2 back to SIDShow spantree vlanlist Clear spantree mstcfgid Cfgname name Specifies an MST configuration nameSet spantree mstcfgid Clear spantree priority Use this command to set the device’s Spanning Tree prioritySet spantree priority Clear spantree hello This example shows how to reset the bridge priority on SIDSet spantree hello Use this command to set the bridge maximum aging time Set spantree maxageClear spantree maxage Set spantree fwddelayUse this command to set the Spanning Tree forward delay Clear spantree fwddelay Show spantree backuprootSet spantree backuproot Clear spantree backuprootShow spantree tctrapsuppress Set spantree tctrapsuppressClear spantree tctrapsuppress Set spantree protomigrationSet spantree spanguard Enable disable Enables or disables the SpanGuard functionShow spantree spanguard This example shows how to enable the SpanGuard function Clear spantree spanguardShow spantree spanguardtimeout Set spantree spanguardtimeoutClear spantree spanguardtimeout Show spantree spanguardlockClear / set spantree spanguardlock Show spantree spanguardtrapenableThis example shows how to unlock port ge.1.16 Is enabled Set spantree spanguardtrapenableClear spantree spanguardtrapenable Show spantree legacypathcost Set spantree legacypathcostClear spantree legacypathcost Show spantree autoedgeSet spantree autoedge This example clears the legacy path cost to 802.1t valuesClear spantree autoedge Configuring Spanning Tree Port Parameters Set spantree portadminDisable enable To display and set Spanning Tree port parametersThis example shows how to disable Spanning Tree on ge.1.5 Clear spantree portadminShow spantree portadmin Set spantree portpri Use this command to set a port’s Spanning Tree priorityShow spantree portpri Clear spantree portpri Show spantree adminpathcost Set spantree adminpathcostClear spantree adminpathcost Show spantree adminedgeSet spantree adminedge Clear spantree adminedgeThis example shows how to set ge.1.11 as an edge port True falseThis example shows how to reset ge.1.11 as a non‐edge port Show spantree operedgeConfiguring Spanning Tree Loop Protect Parameters This example shows how to enable Loop Protect on ge.2.3 Set spantree lpShow spantree lp If no SID is specified, SID 0 is assumedClear spantree lp Show spantree lplockClear spantree lplock SID LockedSet spantree lpcapablepartner Show spantree lpcapablepartnerSet spantree lpthreshold Use this command to set the Loop Protect event thresholdClear spantree lpcapablepartner Clear spantree lpthreshold None. The default event threshold isShow spantree lpthreshold Set spantree lpwindow Show spantree lpwindowClear spantree lpwindow Set spantree lptrapenableDisabled Show spantree lptrapenable Clear spantree lptrapenableSet spantree disputedbpduthreshold Show spantree disputedbpduthreshold Clear spantree disputedbpduthresholdShow spantree nonforwardingreason 802.1Q Vlan Configuration Vlan Configuration SummaryCommand Set for Creating a Secure Management Vlan Creating a Secure Management VlanViewing VLANs Show vlanStatic PortinfoShow vlan Output Details Vlan Vlan ID NameCreate enable Creates, enables or disables VLANs. disable This example shows how to create VlanCreating and Naming Static VLANs Set vlanClear vlan This example shows how to set the name for Vlan 7 to greenSet vlan name This example shows how to clear the name for Vlan Clear vlan nameAssigning Port Vlan IDs PVIDs and Ingress Filtering Show port vlanSet port vlan Clear port vlanModify‐egress No‐modify‐egressShow port ingress filter Set port ingress filter Show port discardSet port discard Tagged untagged both noneConfiguring the Vlan Egress List Show port egressSet vlan forbidden Use this command to remove ports from a VLAN’s egress list Set vlan egressClear vlan egress Untagged forbidden taggedShow vlan dynamicegress ForbiddenSet vlan dynamicegress Enable disable Enables or disables dynamic egressThis example shows how to enable dynamic egress on Vlan Set host vlan Setting the Host VlanShow host vlan This example shows how to set Vlan 7 as the host Vlan Clear host vlanHow It Works Enabling/Disabling Gvrp Garp Vlan Registration ProtocolAbout Garp Vlan Registration Protocol Gvrp Example of Vlan Propagation via Gvrp Show gvrp Show garp timerUse this command to display Gvrp configuration information Set gvrp Show gvrp configuration Output DetailsDisables or enables Gvrp on the device Clear gvrp Set garp timerThis example shows how to enable Gvrp on ge.1.3 Clear garp timer Leaveall timer‐Join LeaveC3su-clear garp timer leave ge.1.1 Policy Classification Configuration Policy Classification Configuration SummaryConfiguring Policy Profiles Use this command to display policy profile informationShow policy profile ‐verboseShow policy profile Output Details Set policy profile Clear policy profile Use this command to delete a policy profile entryThis example shows how to delete policy profile Show policy rule Configuring Classification RulesAll admin‐ profile profile‐ index Not‐in‐service Not‐ready Storage‐type non‐ Admin‐pidTcpsourceport UdpdestportShow policy capability Show policy rule Output DetailsVlan Vlantag data Admin‐profileSet policy rule Ether IpprotoIpdestsocket IpsourcesocketValid Values for Policy Classification Rules Data value Mask bitsFollowing parameters apply to deleting an admin rule Clear policy ruleRange from 1 to 4094 or 0xFFF All‐pid‐entriesUse this command to remove all policy classification rules Clear policy all-rulesUse this command to assign ports to a policy profile Assigning Ports to Policy ProfilesSet policy port To assign and unassign ports to policy profilesClear policy port Procedure 11-1 User-Defined CoS Configuration Configuring Policy Class of Service CoSAbout Policy-Based CoS Configurations Configuring Policy Class of Service CoS Procedure About CoS-Based Flood ControlUse this command to enable or disable Class of Service Set cos stateClear cos state This example shows how to enable Class of ServiceShow cos state Set cos settings Priority priorityTos‐value tos‐value Irl‐referenceClear cos settings Show cos settingsPriority Tos‐valueSet cos port-config Show cos port-config Should be displayedClear cos port-config EntryName PortsSet cos port-resource irl Set cos port-resource flood-ctrl Group#.port‐typeUnicast MulticastShow cos port-resource Group#.port‐typeClear cos port-resource irl UnitRate TypeClear cos port-resource flood-ctrl Set cos referenceUnicast MulticastSpecifies that an IRL reference is being configured Show cos referenceIRL reference number associated with this entry Rate‐limit irl‐indexClear cos reference Show cos unit Port‐typ e indexKbps PpsClear cos all-entries Show cos port-typeThis example shows flood control information for port type Port Priority Configuration Port Priority Configuration SummaryConfiguring Port Priority Show port prioritySet port priority Clear port priorityConfiguring Priority to Transmit Queue Mapping Show port priority-queueSet port priority-queue Clear port priority-queue Configuring Quality of Service QoS Show port txqSet port txq By default, transmit queues are defined as follows Clear port txqClear port txq Port Priority Configuration About IP Multicast Group Management Igmp ConfigurationIgmp Overview About Multicasting Configuring Igmp at LayerTo configure Igmp snooping from the switch CLI Set igmpsnooping adminmode Use this command to display Igmp snooping informationThis example shows how to display Igmp snooping information Use this command to enable or disable Igmp on the systemThis example shows how to enable Igmp on the system Enable disable Enables or disables IgmpThis example shows how to enable Igmp on port ge.1.10 Set igmpsnooping interfacemodeSet igmpsnooping maxresponse Set igmpsnooping mcrtrexpiretime Set igmpsnooping add-staticModify If no ports are specified, all ports are added to the entryIf modify is not specified, a new entry is created Set igmpsnooping remove-staticShow igmpsnooping static Show igmpsnooping mfdb Group groupThis example displays the static Igmp ports for Vlan Stats Optional Displays Mfdb statisticsClear igmpsnooping Use this command to clear all Igmp snooping entriesThis example shows how to clear all Igmp snooping entries Configuring Igmp on Routing Interfaces To configure Igmp on routing interfacesGlobal configuration C3su‐routerConfig# Ip igmpIp igmp enable This example shows how to enable Igmp on the routerInterface configuration C3su‐routerConfig‐ifVlan 1# Ip igmp versionAny router mode Show ip igmp interfaceShow ip igmp groups Ip igmp query-intervalIp igmp query-max-response-time Ip igmp startup-query-intervalIp igmp startup-query-count Ip igmp last-member-query-intervalIp igmp last-member-query-count Ip igmp robustnessInterface configuration C3 su‐routerConfig‐ifVlan 1# Ip igmp robustness Igmp Configuration Configuring System Logging Logging and Network ManagementShow logging server Set logging server Show logging default Clear logging serverSet logging default Use this command to set logging default valuesClear logging default Show logging applicationFacility SeveritySet logging application Show logging application Output DetailsLevel level If level is not specified, none will be appliedClear logging application Show logging localSet logging local Clear logging localShow logging interface This example shows how to clear local loggingShow logging buffer Set logging interface Clear logging interface Monitoring Network Events and Status HistoryUse this command to set the size of the history buffer DefaultShow history Set historyThis example, the host at IP address is not responding PingShow users Console DisconnectShow netstat Show netstat Output Details Following example shows the output of this commandFollowing table describes the output of this command Show arp Managing Switch Network Addresses and RoutesUse this command to display the switch’s ARP table Show arp Output Details This example shows how to display the ARP tableSet arp Clear arp TracerouteShow mac Each responseType other learned Self mgmtShow mac agetime Show mac Output DetailsThis example shows how to display the MAC timeout period This example shows how to set the MAC timeout periodSet mac agetime Clear mac agetimeShow mac algorithm Default MAC algorithm is mac‐crc16‐upperbitsSet mac algorithm Clear mac algorithm Set mac multicastAppend clear Use this command to remove a multicast MAC addressClear mac address Show mac unreserved-flood Set mac unreserved-floodConfiguring Simple Network Time Protocol Sntp This example enables multicast flood protectionUse this command to display Sntp client settings Show sntpThis example shows how to display Sntp client settings Show sntp Output DetailsSet sntp client Clear sntp clientIf precedence is not specified, 1 will be applied Set sntp serverClear sntp server Set sntp poll-interval Clear sntp poll-intervalClear sntp poll-retry This example shows how to clear the Sntp poll intervalSet sntp poll-retry Set sntp poll-timeout Clear sntp poll-timeoutUse this command to clear the Sntp poll timeout This example shows how to clear the Sntp poll timeoutSet timezone Show sntp interface Set sntp interfaceClear sntp interface C3rw-show sntp interface Vlan 100 C3rw-clear sntp interface Configuring Node Aliases Show nodealias configMaxentries maxentries Show nodealias config Output DetailsSet nodealias Clear nodealias config Rmon Monitoring Group Functions Rmon ConfigurationRmon Monitoring Group Functions and Commands Group What It Does What It Monitors CLI Commands Design ConsiderationsStatistics Group Commands To display, configure, and clear Rmon statisticsSet rmon stats Use this command to configure an Rmon statistics entryShow rmon stats To‐defaults This example shows how to delete Rmon statistics entryClear rmon stats If owner is not specified, monitor will be appliedHistory Group Commands Show rmon historySet rmon history Clear rmon historyBuckets buckets Interval intervalThis example shows how to delete Rmon history entry This example shows how to display Rmon alarm entry Alarm Group CommandsShow rmon alarm Set rmon alarm properties Show rmon alarm Output DetailsObject object Type absoluteSet rmon alarm status Clear rmon alarm EnableThis example shows how to enable Rmon alarm entry Use this command to delete an Rmon alarm entryEvent Group Commands Use this command to display Rmon event entry propertiesThis example shows how to display Rmon event entry Show rmon eventSet rmon event properties DescriptionType none log Trap bothClear rmon event This example shows how to enable Rmon event entrySet rmon event status This example shows how to clear Rmon event Filter Group Commands Show rmon channelUse this command to configure an Rmon channel entry Set rmon channelAccept matched FailedClear rmon channel Show rmon filterIndex index Channel channelSet rmon filter Clear rmon filter Use this command to clear an Rmon filter entryThis example shows how to clear Rmon filter entry Nodata Packet Capture CommandsShow rmon capture Set rmon capture Action lockSlice slice Loadsize loadsizeClear rmon capture Use this command to clears an Rmon capture entryThis example shows how to clear Rmon capture entry Dhcp Server Configuration Dhcp OverviewDhcp Relay Agent Dhcp ServerConfiguring a Dhcp Server Configuring General Dhcp Server Parameters Set dhcp Set dhcp bootpThis example enables Dhcp server functionality This example enables address allocation for Bootp clients This example enables Dhcp conflict loggingSet dhcp conflict logging Show dhcp conflictLogging Disables conflict logging This example disables Dhcp conflict loggingClear dhcp conflict Clears the conflict information for all IP addressesClear dhcp exclude 100, with the set dhcp exclude commandSet dhcp exclude This example sets the number of ping packets sent to Set dhcp pingClear dhcp ping Show dhcp binding Clear dhcp bindingUse this command to display Dhcp server statistics Use this command to clear all Dhcp server countersShow dhcp server statistics Clear dhcp server statisticsThis example clears all Dhcp server counters Configuring IP Address Pools Manual Pool Configuration ConsiderationsSet dhcp pool This example creates an address pool named auto1Use this command to delete a Dhcp server pool of addresses Clear dhcp poolSet dhcp pool network This example deletes the address pool named auto1Clear dhcp pool network Set dhcp pool hardware-addressIf no type is specified, Ethernet is assumed Clear dhcp pool hardware-addressSet dhcp pool host Clear dhcp pool host Set dhcp pool client-identifierClear dhcp pool client-identifier Set dhcp pool client-name Clear dhcp pool client-nameSet dhcp pool bootfile Clear dhcp pool bootfileSet dhcp pool next-server Clear dhcp pool next-serverInfinite Set dhcp pool leaseClear dhcp pool lease Set dhcp pool default-router Clear dhcp pool default-routerSet dhcp pool dns-server Clear dhcp pool dns-serverSet dhcp pool domain-name Clear dhcp pool domain-nameSet dhcp pool netbios-name-server Clear dhcp pool netbios-name-server‐node Set dhcp pool netbios-node-typeClear dhcp pool netbios-node-type Set dhcp pool option Ascii stringThis example removes option 19 from address pool auto1 Show dhcp pool configurationClear dhcp pool option Show dhcp pool configuration Dhcp Message Processing Dhcp Snooping Dynamic ARP InspectionDhcp Snooping Overview Building and Maintaining the Database Basic Configuration Configuration NotesProcedure 17-1 Basic Configuration for Dhcp Snooping Rate LimitingSet dhcpsnooping Dhcp Snooping CommandsDisabled globally Set dhcpsnooping database write-delay Set dhcpsnooping vlanBy default, ports are untrusted Set dhcpsnooping trustSet dhcpsnooping verify This example configures port ge.1.1 as a trusted portSet dhcpsnooping binding Against the client hardware address Source MAC address verification is enabled by defaultSet dhcpsnooping log-invalid Set dhcpsnooping limit NoneRate pps Burst interval secsThis example configures rate limit parameters on port ge.1.1 Show dhcpsnooping database Show dhcpsnooping portEntry, either dynamic or static Show dhcpsnooping bindingDynamic static Show dhcpsnooping statistics Clear dhcpsnooping database Clear dhcpsnooping bindingClear dhcpsnooping statistics Write‐delay Default value of 300 secondsClear dhcpsnooping limit Dynamic ARP Inspection OverviewOptional ARP Packet Validation Functional DescriptionStatic Mappings Logging Invalid Packets Packet ForwardingRate Limiting Eligible InterfacesProcedure 17-2 Basic Dynamic ARP Inspection Configuration Step Task CommandsVlan Configuration Example ConfigurationRouter Configuration Dynamic ARP Inspection Commands Set arpinspection vlanDhcp Snooping Configuration Dynamic ARP Inspection ConfigurationSet arpinspection trust Logging is disabled by defaultBy default, all physical ports and LAGs are untrusted LoggingDst‐mac Set arpinspection validateSrc‐mac Set arpinspection limit Set arpinspection filter Show arpinspection access-listPermit Mac hostShow arpinspection ports This example displays the ARP configuration of lag.0.1Show arpinspection vlan Show arpinspection statisticsThis example removes all 3 additional validation conditions Clear arpinspection validateWith an invalid address Clear arpinspection vlan Clear arpinspection filter Clear arpinspection limit This example removes the ARP ACL named staticARP from VlanClear arpinspection statistics This example clears all DAI statistics from the switchPage Preparing for Router Mode Pre-Routing Configuration TasksRouter CLI Configuration Modes Enabling Router Configuration ModesEnabling the Switch for Routing Router CLI Configuration Modes Page IP Configuration Configuring Routing Interface SettingsShow interface Vlan vlan ‐idUse this command to configure interfaces for IP routing Router global configuration mode C3su‐routerConfig#Interface Vlan vlan‐ idThis example shows how to enter configuration mode for Vlan Show ip interfaceRouter interface configuration C3su‐routerConfig‐ifVlan 1# Ip addressShow ip interface Output Details SecondaryShow running-config No shutdownThis example shows how to enable Vlan 1 for IP routing No ip routingInterface tunnel Configuring Tunnel InterfacesUse this command to configure a tunnel interface Tunnel source This example creates a configured tunnel interfaceRouter interface configuration C3su‐routerConfig‐ifTnnl 1# Tunnel mode This command specifies the mode of the tunnel interfaceIpv6ip Specifies that the tunnel mode is IPv6 over IPv4 No form of this command removes the mode of the tunnelThis example sets the tunnel mode to IPv6 over IPv4 Show interface tunnelReviewing and Configuring the ARP Table Show ip arpShow ip arp Output Details This example shows how to use the show ip arp commandArp This example shows how to enable proxy ARP on Vlan Ip proxy-arpArp timeout Clear arp-cache14,400 seconds Privileged Exec C3su‐router#Ip directed-broadcast Configuring Broadcast SettingsInterface configuration C3su‐Router1Config‐ifVlan 1# Ip forward-protocol UdpSpecifies UDP as the IP forwarding protocol Are forwardedIp helper-address Reviewing IP Traffic and Configuring Routes Show ip routeOSPF, IA Preference in route selection Ip routePing Traceroute This command is also available in switch modeThere is also a traceroute command available in switch mode Configuring Icmp Redirects Ip icmp redirect enableShow ip icmp redirect InterfaceIPv4 Routing Protocol Configuration Activating Advanced Routing FeaturesConfiguring RIP RIP Configuration Task List and CommandsRIP Configuration Task List and Commands Router ripDistance Ip rip enableThis example shows how to enable RIP Ip rip send version R1compatibleIp rip authentication-key Specifies RIP version 1. This is the default settingIp rip receive version Specifies RIP versionIp rip message-digest-key Md5Use this command to disable automatic route summarization Router configuration C3su‐routerConfig‐router#No auto-summary Split-horizon poisonPassive-interface Receive-interface RedistributeConnected OspfCommand detailed in ip route on page 19‐21 ProtocolSubnets Subnetted will be redistributedConfiguring Ospf Ospf Configuration Task List and CommandsOspf Configuration Task List and Commands Advanced License RequiredRouter id Routes1583compatibility This example shows how to enable routing for Ospf processRouter ospf Ip ospf areaid Ip ospf enableThis example shows how to enable RFC 1583 compatibility Ip ospf cost Ip ospf priorityTimers spf Ip ospf transmit-delay Ip ospf retransmit-interval65535 Ip ospf hello-intervalIp ospf dead-interval Ip ospf authentication-key Ip ospf message digest key md5 Distance ospfArea range External inter‐Area intra‐area Intra‐area routesIf not specified, advertise mode will be set Area stubAdvertise no‐ AdvertiseArea default cost Area nssaDefault‐ This example shows how to configure area 10 as an Nssa areaArea virtual-link Information‐Authentication‐ Transmit‐delayKey key Dead‐intervalMetric‐type type Show ip ospfRip Show ip ospf database This example shows how to display Ospf informationUse this command to display the Ospf link state database Show ip ospf interface Show ip ospf database Output DetailsShow ip ospf interface Output Details Show ip ospf neighbor Show ip ospf neighbor Output DetailsShow ip ospf virtual links Output Details Show ip ospf virtual-linksClear ip ospf process This example shows how to reset Ospf process Configuring Dvmrp Enabling Dvmrp on an InterfaceIp dvmrp enable Commands to Enable Dvmrp on an InterfaceThis example shows how to enable the Dvmrp process Ip dvmrpShow ip dvmrp Use this command to display Dvmrp routing informationIp dvmrp metric This example shows how to display Dvmrp status information Configuring Irdp Ip irdp enableIp irdp maxadvertinterval Ip irdp minadvertinterval9000 Ip irdp holdtimeIp irdp preference Show ip irdp Use this command to display Irdp informationIp irdp broadcast Configuration Tasks on page 18‐1 Configuring Vrrp Router vrrpThis example shows how enable Vrrp configuration mode CreateAddress Priority Advertise-intervalDescribed in Pre‐Routing Configuration Tasks on page 18‐1 PreemptEnable Ip vrrp authentication-key Use this command to display Vrrp routing informationThis example shows how to display Vrrp information Show ip vrrpConfiguring PIM-SM Design ConsiderationsGlobal router configuration C3su‐routerConfig# This example shows how to globally enable and disable PIMIp pimsm Ip pimsm staticrpIp pimsm enable Show ip pimsm This example shows how to display PIM informationIp pimsm query-interval Show ip pimsm Output Details This example shows how to display PIM router informationShow ip pimsm componenttable This example shows how to display PIM interface information Show ip pimsm interfaceShow ip pimsm componenettable Output Details StatsThis example shows how to display PIM interface statistics Show ip pimsm neighborShow ip pimsm interface vlan Output Details 10 show ip pimsm interface stats Output Details‐11 provides an explanation of the command output Show ip pimsm rp11 show ip pimsm neighbor Output Details Candidate12 show ip pimsm rp Output Details ‐12 provides an explanation of the command outputShow ip pimsm rphash Display the PIM‐SM static Rendezvous Point information ‐13 provides an explanation of the command outputShow ip pimsm staticrp 13 show ip pimsm staticrp Output Details Use this command to display the IP multicast routing tableShow ip mroute 20-60 IPv4 Routing Protocol Configuration IPv6 Management Show ipv6 statusSet ipv6 By default, IPv6 management is disabledThis example shows how to enable IPv6 management Eui64 No global unicast IPv6 address is defined by defaultSet ipv6 address Clear ipv6 address Use this command to clear IPv6 global addressesShow ipv6 address Set ipv6 gateway Show ipv6 neighbors Use this command to clear an IPv6 gateway addressClear ipv6 gateway Show ipv6 netstat This example shows example output of this commandUse this command to display IPv6 netstat information Size num This command is also available in router modePing ipv6 Traceroute ipv6 Traceroute ipv6 21-10 IPv6 Management IPv6 Routing License Required IPv6 ConfigurationOverview Default Conditions Following table lists the default IPv6 conditionsIpv6 hop-limit General Configuration CommandsIpv6 forwarding Default maximum number of IPv6 hops is This command configures static IPv6 routesIpv6 route This example sets the hop limit toDefault preference or administrative distance is Ipv6 route distanceThis command sets the default distance value to Ipv6 unicast-routingPing ipv6 interface Link‐local‐addressRouter privileged exec C3 su‐router# 20010db8123455551 No IPv6 addresses are defined for any interface Interface Configuration CommandsIpv6 address Ipv6 enable IPv6 is disabledIpv6 mtu BytesThis example sets the MTU value to 1500 bytes This example clears all dynamically learned cache entries Neighbor Cache and Neighbor Discovery CommandsClear ipv6 neighbors Ipv6 nd ns-interval Duplicate address detection enabled, for 1 attemptIpv6 nd dad attempts By default, a value of 0 is advertised in RA messages Router interface configurationC3su‐routerConfig‐ifVlan 1#Ipv6 nd reachable-time This example sets the NS interval to 2 secondsIpv6 nd other-config-flag Flag is set to false by defaultRouter interface configuration C3su‐routerConfig‐if Vlan 1# This example sets the reachable time to 60 secondsIpv6 nd ra-interval Ipv6 nd ra-lifetimeSuppression disabled This example disables router advertisement transmissionIpv6 nd suppress-ra Ipv6 nd prefixOff‐link No‐autoconfigRouter interface configurationC3su‐routerConfig‐if Vlan 1# Example Query Commands Show ipv6Show ipv6 interface Router privileged execution C3su‐router#This example displays information about IPv6 interface Vlan This command displays IPv6 Neighbor Cache information This example displays the neighbors in the cacheThis command displays the IPv6 routing table Show ipv6 routeShow ipv6 neighbor Output Details Interface interfaceThis example displays all active IPv6 routes Show ipv6 route Output DetailsShow ipv6 route preferences Show ipv6 route preferences Output DetailsNon‐best routes This command displays the summary of the routing tableShow ipv6 route summary Show ipv6 summary Output Details Following example displays the output of this commandShow ipv6 traffic Show ipv6 traffic Output Details Options, etc Counter would include datagrams counted Send. Note that this counter includes all those counted by This example clears the statistics for Vlan Clear ipv6 statisticsRouter privileged executionC3su‐router# IPv6 Proxy Routing Preparing a Mixed Stack for IPv6 Proxy Routing LimitationsIPv6 proxy routing is disabled by default Router global configuration C2su‐routerConfig#This example enables IPv6 proxy routing Ipv6 proxy-routingAny routing mode DHCPv6 Configuration Global Configuration Commands Ipv6 dhcp enableFollowing table lists the default DHCPv6 conditions This command enables DHCPv6 on the routerIpv6 dhcp relay-agent-info-opt By default, DHCPv6 is disabledThis example enables DHCPv6 Ipv6 dhcp relay-agent-info-remote-id-subopt Ipv6 dhcp poolIpv6 dhcp pool Address Pool Configuration Commands Domain-nameDns-server Prefix-delegationSecs infinite Valid‐lifetime secsPreferred‐lifetime C3su-routerConfig-dhcp6s-pool# exit C3su-routerConfig# By default, DHCPv6 functionality is disabled Ipv6 dhcp serverRapid‐commit Preference prefIpv6 dhcp relay Destination dest‐addrInterface intf Remote‐id duid‐ifidExamples DHCPv6 Show Commands Show ipv6 dhcpShow ipv6 dhcp interface StatisticsOutput of show ipv6 dhcp interface Command This example displays the DHCPv6 statistics for VlanShow ipv6 dhcp statistics This example displays the output of this commandOutput of show ipv6 dhcp statistics Command Clear ipv6 dhcp statistics This example clears DHCPv6 statistics for VlanShow ipv6 dhcp binding This command displays information about DHCPv6 bindingsShow ipv6 dhcp pool If no IPv6 address is specified, all bindings are displayed Show ipv6 dhcp binding DHCPv6 Configuration OSPFv3 Configuration Following table lists the default OSPFv3 conditions Ipv6 router id Global OSPFv3 Configuration CommandsUse this command to configure the OSPFv3 router ID Default-information originate Ipv6 router ospfAlways Metric valueDefault-metric Router OSPFv3 configuration C3su‐routerConfig‐router#No default metric is configured Router OSPFv3 configuration C3su-routerConfig-router#Exit-overflow-interval IntraInter Type1This command configures the external Lsdb limit for OSPFv3 Default value is ‐1External-lsdb-limit This example sets the exit overflow interval to 10 secondsTag tag Maximum-pathsConnected static Metric = unspecified Metric type = Type Tag = These commands are used to configure area parameters Area Configuration CommandsArea default-cost This example sets the default route cost to 50 for area This example shows how to configure area 20 as an NssaArea nssa default-info-originate Default metric value isArea nssa no-redistribute ComparableArea nssa no-summary This command configures the translator role of the router By default, the translator role is disabledArea nssa translator role Area nssa translator-stab-intvDefault interval is 40 seconds Area address ranges are not configured by defaultSummarylink NssaexternallinkThis command creates a stub area for the specified area ID This example creates a stub area with the ID Example disables the import of summary LSAs into stub areaArea stub no-summary Default dead interval is 40 seconds Area virtual-link dead-intervalArea virtual-link retransmit-interval Default hello interval is 10 secondsArea virtual-link hello-interval Default transmit delay is 1 second Area virtual-link transmit-delayDefault retransmit interval is 5 seconds Ipv6 ospf enable OSPFv3 is disabled by defaultIpv6 ospf areaid Ipv6 ospf costDefault dead interval value is 40 seconds Ipv6 ospf dead-intervalIpv6 ospf hello-interval Ipv6 ospf mtu-ignoreIpv6 ospf network By default, MTU mismatch detection is enabledDefault network type is broadcast Ipv6 ospf retransmit-interval Default priority value isIpv6 ospf priority Default value is 1 second Ipv6 ospf transmit-delayDefault value is 4 seconds Ipv6 ospf transmit-delay OSPFv3 Show Commands This command displays OSPFv3 router informationThis example shows how to display OSPFv3 router information Show ipv6 ospfShow ipv6 ospf Output Details Show ipv6 ospf area Show ipv6 ospf area Output DetailsShow ipv6 ospf abr Show ipv6 ospf abr Output DetailsShow ipv6 ospf asbr Show ipv6 ospf asbr Output DetailsShow ipv6 ospf database Adv Router Link Id Age Sequence Csum Options Rtr Opt Show ipv6 ospf database Output Details Show ipv6 ospf database database-summary Output Details Loopback loopid This command displays information about OSPFv3 interfacesShow ipv6 ospf interface Show ipv6 ospf interface Command Output Details This example shows how to display statistics for Vlan Show ipv6 ospf interface statsShow ipv6 ospf interface stats Output Details This command displays information about OSPFv3 neighbors Show ipv6 ospf neighborSpecify the Vlan interface to display information about Specify the tunnel interface to displayShow ipv6 ospf neighbor Output Details This example displays range information for area Show ipv6 ospf range10 show ipv6 ospf neighbor routerid Output Details Show ipv6 ospf stub table 11 show ipv6 ospf range Output DetailsThis example displays the OSPFv3 stub table information 12 show ipv6 ospf stub table Output DetailsShow ipv6 ospf virtual-link 13 show ipv6 ospf virtual-link Output DetailsShow ipv6 ospf virtual-link Show ipv6 ospf virtual-link OSPFv3 Configuration Authentication and Authorization Configuration Overview of Authentication and Authorization MethodsOverview of Authentication and Authorization Methods Filter-ID Attribute Formats Setting the Authentication Login Method Show authentication loginSet authentication login Use this command to set the authentication login methodClear authentication login AnyLocal RadiusConfiguring Radius TimeoutShow radius RetriesOptional Displays Radius server configuration information Set radiusServer Servers or a specific Radius server as defined by an indexServer index Timeout timeoutRealm management‐ access any network‐access Clear radius RealmRetries retries Show radius accountingSet radius accounting This example shows how to set Radius accounting retries to TimeoutClear radius accounting RetriesShow radius interface Set radius interfaceClear radius interface Example Configuring 802.1X Authentication Show dot1xAuth‐diag Auth‐statsThis example shows how to display 802.1X status Show dot1x auth-config True false Set dot1xInit reauth Set dot1x auth-config Clear dot1x auth-config Portcontrol MaxreqShow eapol Connecting state, via disconnected Show eapol Output DetailsSet eapol Clear eapolAuth‐mode Forced‐authOptional Globally clears the Eapol authentication mode Configuring MAC Authentication Show macauthenticationShow macauthentication Output Details NopasswordShow macauthentication session Output Details Show macauthentication sessionThis example shows how to display MAC session information Use this command to set a MAC authentication password Set macauthenticationSet macauthentication password Clear macauthentication password Set macauthentication portUse this command to clear the MAC authentication password Enables or disables MAC authenticationSet macauthentication portinitialize Set macauthentication portquietperiodThis example resets the default quiet period on port Clear macauthentication portquietperiodSet macauthentication macinitialize Enables or disables MAC reauthentication Set macauthentication reauthenticationSet macauthentication portreauthenticate Set macauthentication macreauthenticate Set macauthentication reauthperiodClear macauthentication reauthperiod Set macauthentication significant-bits Clear macauthentication significant-bitsC3su-clear macauthentication significant-bits About Multi-User Authentication Configuring Multiple Authentication MethodsAbout Multiple Authentication Types Show multiauth Set multiauth mode Clear multiauth modeMulti StrictClear multiauth precedence Default precedence order is dot1x, pwa, macSet multiauth precedence Show multiauth port Set multiauth portClear multiauth port Show multiauth station Show multiauth sessionShow multiauth idle-timeout Agent dot1x macSet multiauth idle-timeout Authentication method for which to set the timeout valueWhich to set the timeout value Idle timeout value is provided by the authenticating serverClear multiauth idle-timeout Show multiauth session-timeoutDefault Which to reset the timeout value to its defaultSet multiauth session-timeout Which to set the session timeout valueClear multiauth session-timeout Configuring User + IP Phone AuthenticationConfiguring Vlan Authorization RFC Tagged Set vlanauthorizationSet vlanauthorization egress By default, administrative egress is set to untagged Clear vlanauthorizationShow vlanauthorization Configuring Policy Maptable Response Show vlanauthorization Output DetailsWhen Policy Maptable Response is Both Operational DescriptionShow policy maptable When Policy Maptable Response is PolicyWhen Policy Maptable Response is Tunnel Set policy maptable ResponseBoth PolicyClear policy maptable Configuring MAC Locking To review, disable, enable, and configure MAC lockingShow maclock Show maclock stations Show maclock Output DetailsFirstarrival Connected to MAC locked portsShow maclock stations Output Details Set maclock enableSet maclock enable port‐string Set maclock disable This example shows how to enable MAC locking on ge.2.3This example shows how to disable MAC locking on ge.2.3 Set maclockSpecified MAC address and port Clear maclockCreate Set maclock static Clear maclock staticSet maclock firstarrival Clear maclock firstarrival Set maclock agefirstarrivalThis example enables first arrival aging on port ge.1.1 This example disables first arrival aging on port ge.1.1Clear maclock agefirstarrival Set maclock moveSet maclock trap Configuring Port Web Authentication PWA About PWAShow pwa Show pwa Output DetailsSet pwa Enable disable Enables or disables port web authenticationThis example shows how to enable port web authentication Set pwa banner This example shows how to display the PWA login bannerShow pwa banner This example shows how to hide the Enterasys Networks logo Clear pwa bannerSet pwa displaylogo Display hideChap pap Set pwa ipaddressSet pwa protocol Use this command to clear the PWA guest user name This example shows how to clear the PWA guest user nameSet pwa guestname Clear pwa guestnameSet pwa guestpassword Set pwa gueststatusAuthnone AuthradiusSet pwa quietperiod This example shows how to initialize ports ge.1.5‐7Set pwa initialize Set pwa maxrequest Set pwa portcontrolEnables or disables PWA on specified ports This example shows how to enable PWA on ports 1‐22This example shows how to display PWA session information Show pwa sessionSet pwa enhancedmode Enable disable Enables or disables PWA enhancedmodeThis example shows how to enable PWA enhancedmode Configuring Secure Shell SSH This example shows how to display SSH status on the switchShow ssh status Set sshSet ssh hostkey This example shows how to disable SSHThis example shows how to regenerate SSH keys Show access‐lists number Configuring Access ListsShow access-lists Access-list standard Deny permitThis example moves entry 16 to the beginning of ACL Access-list extendedInsert replace Insert replace Filters inbound frames Ip access-groupInterface configuration C3su‐routerConfig‐ifVlan vlanid# Example Page TACACS+ Configuration Show tacacs Output Details Show tacacsState Optional Displays only the TACACS+ client status Use this command to enable or disable the TACACS+ client Enable disable Enables or disables the Tacacs clientThis example shows how to enable the TACACS+ client Set tacacsTimeout seconds Set tacacs serverClear tacacs server Specifies one TACACS+ server to be affectedShow tacacs session This example removes TACACS+ serverSet tacacs session Service Clear tacacs sessionRead‐write Super‐userShow tacacs command Set tacacs commandConnection Show tacacs singleconnectSet tacacs singleconnect Show tacacs interface Set tacacs interfaceClear tacacs interface Clear tacacs interface TACACS+ Configuration 27-14 Advantages of using sFlow include SFlow ConfigurationUsing sFlow in Your Network Definitions SFlow Agent FunctionalitySampling Mechanisms SFlow DefinitionsUsage Notes Packet Flow SamplingCounter Sampling 28-5 This example displays the sFlow Receivers Table Contents of the sFlow Receivers Table is displayedShow sflow receivers Following table describes the output fields Show sflow receivers Output DescriptionsSet sflow receiver owner Set sflow receiver ipDefault IP address is Default maximum datagram size is 1400 bytesSet sflow receiver maxdatagram Maxdatagram bytesDefault port value is Set sflow receiver portClear sflow receiver MaxdatagramPort port Set sflow port pollerOwner Show sflow pollers Clear sflow port poller Set sflow port samplerInterval This example removes the poller instance on port ge.1.1Show sflow samplers Clear sflow port sampler Set sflow interfaceMaxheadersize RateShow sflow interface Clear sflow interface Show sflow agent 28-18 Table A-1 Policy Capacities Policy and Authentication CapacitiesPolicy Capacities Authentication Capacities Table A-2 Authentication CapacitiesIndex NumericsOspf 20-30Network Management Tftp Index