Manuals / Enterasys Networks / Computer Equipment / Switch

Enterasys Networks 9034313-07 Example Configuration, Router Configuration, Vlan Configuration

Models: 9034313-07

1 872

Download 872 pages 24.54 Kb

Page 529

Image 529

Dynamic ARP Inspection Overview

Example Configuration

Note: This example applies only to platforms that support routing.

The following example configures DHCP snooping and dynamic ARP inspection in a routing environment using RIP. The example configures two interfaces on the switch, configuring RIP on both interfaces, assigning each to a different VLAN, and then enabling DHCP snooping and dynamic ARP inspection on them:

•Interface ge.1.1, which is connected to a remote DHCP server, on VLAN 192

•Interface ge.1.2, which is connected to DHCP clients, on VLAN 10

In addition, the default VLAN, VLAN 1, is also enabled for DHCP snooping and dynamic ARP inspection.

Since the DHCP server is remote, the switch has been configured as a DHCP relay agent (with the ip helper‐address command), to forward client requests to the DHCP server. Therefore, MAC address verification is disabled (with the set dhcpsnooping verify mac‐address disable command) in order to allow DHCP RELEASE packets to be processed by the DHCP snooping functionality and client bindings removed from the bindings database

Router Configuration

router enable configure interface vlan 10 no shutdown

ip address 10.2.0.1 255.255.0.0 ip helper-address 192.168.0.200 ip rip send version 2

ip rip receive version 2 ip rip enable

exit

interface vlan 192 no shutdown

ip address 192.168.0.1 255.255.255.0 ip rip send version 2

ip rip receive version 2 ip rip enable

exit router rip exit

VLAN Configuration

set vlan create 10 set vlan create 192

clear vlan egress 1 ge.1.1-2

SecureStack C3 Configuration Guide 17-19

Page 529

Image 529

Enterasys Networks 9034313-07 manual Example Configuration, Router Configuration, Vlan Configuration

Contents

Enterasys SecureStack C3 Page Page Enterasys Networks, Inc. Firmware License Agreement Iii Page Contents Page Activating Licensed Features Discovery Protocol Configuration Configuring System Power and PoEPort Configuration Show port broadcast Set port broadcast Clear port broadcast Snmp Configuration Spanning Tree Configuration Configuring Spanning Tree Port Parameters Purpose Commands 802.1Q Vlan Configuration Port Priority Configuration Policy Classification ConfigurationLogging and Network Management Igmp Configuration14-3 Rmon Configuration Dhcp Server Configuration IP Configuration Preparing for Router ModeDhcp Snooping and Dynamic ARP Inspection IPv4 Routing Protocol Configuration 20-11 IPv6 Management IPv6 ConfigurationIPv6 Proxy Routing DHCPv6 ConfigurationOSPFv3 Configuration Authentication and Authorization Configuration 26-37 TACACS+ Configuration Appendix a Policy and Authentication Capacities SFlow ConfigurationIndex Tables10-4 22-26 Xxxii About This Guide Using This GuideStructure of This Guide Important NoticeStructure of This Guide Related Documents SecureStack C3 Installation GuidesFollowing conventions are used in the text of this document Conventions Used in This GuideFollowing icons are used in this guide Support@enterasys.com Getting HelpGetting Help Xxxviii About This Guide Introduction Switch Management MethodsSecureStack C3 CLI Overview Default Settings for Basic Switch Operation Factory Default SettingsFeature Default Setting Sntp Default Settings for Router OperationDvmrp Connecting Using the Console Port Using the Command Line InterfaceStarting a CLI Session Using a Default User Account Connecting Using TelnetUsing an Administratively Configured User Account LoggingCLI Command Defaults Descriptions Navigating the Command Line InterfaceCLI Command Modes Getting Help with CLI SyntaxDisplaying Scrolling Screens Abbreviating and Completing CommandsBasic Line Editing Commands Basic Line Editing CommandsAbout SecureStack C3 Switch Operation in a Stack Configuring Switches in a StackInstalling a New Stackable System of Up to Eight Units Creating a Virtual Switch Configuration Installing Previously-Configured Systems in a StackAdding a New Unit to an Existing Stack SID Issues Related to Mixed Type Stacks Considerations About Using Clear Config in a StackFeature Support ConfigurationShow switch Stacking Configuration and Management CommandsCommands PurposeExamples Show switch switchtypeNone Show switch stack-portsSwitch command, read‐write Set switchExample Priority valueSet switch description Set switch copy-fwThis example shows how to assign priority 3 to switch This example shows how to renumber switch 5 to switchSet switch member Set switch movemanagementUse this command to remove a member entry from the stack Clear switch memberQuick Start Setup Commands Basic ConfigurationRequired CLI Setup Commands Optional CLI Setup Commands Setting User Accounts and PasswordsShow system login Output Details Show system loginParameters Clear system login Set system loginUse this command to remove a local login user account Super‐user read‐write read‐onlyThis example shows how to remove the netops user account Set passwordSwitch command, read‐write Switch command, super‐user Set system password aging Set system password lengthDisable Set system password historyShow system lockout Show system lockout Output Details Set system lockoutAttempts attempts Time timeSetting Basic Switch Properties Show ip address Set ip address Use this command to clear the system IP addressClear ip address Show ip protocol This example shows how to clear the system IP addressSet ip protocol Show system This example shows how to display system informationShow system Output Details Show system hardwareSlot Hardware Information Show system utilizationSet system utilization Default threshold value is 80%This example sets the CPU utilization threshold to 75% Show system enhancedbuffermode Clear system utilizationEnable disable Enables or disables enhanced buffer mode Set system temperatureThis example shows how to enable enhanced buffer mode Set system enhancedbuffermodeSyslog enable Clear system temperatureDisable Trap enable disableSet time Show timeUse this command to display daylight savings time settings This example shows how to set the system clock to 750 a.mShow summertime Set summertime date Set summertimeIf a zone name is not specified, none will be applied If an offset is not specified, none will be appliedSet summertime recurring This example shows how to set the command prompt to Switch Use this command to modify the command promptClear summertime Set promptSet banner motd Show banner motdShow version Clear banner motdUse this command to configure a name for the system ‐5 provides an explanation of the command outputSet system name Show version Output DetailsThis example shows how to set the system location string Use this command to identify the location of the systemSet system location Set system contactThis example shows how to set the terminal columns to This example shows how to set the system contact stringSet width Set lengthThis example shows how to display the CLI logout setting This example shows how to set the terminal length toShow logout Set logoutThis example shows how to display all console settings Use this command to display console settingsUse this command to set the console port baud rate Show consoleDownloading a Firmware Image This example shows how to set the console port baud rate toDownloading from a Tftp Server Downloading via the Serial PortType 2. The following baud rate selection screen displays Reverting to a Previous Image Show boot system Reviewing and Selecting a Boot Firmware ImageReboot the system using the reset command page 3‐50 Compatibility platform specific Set boot systemThis example shows how to display Telnet status Starting and Configuring TelnetUse this command to enable or disable Telnet on the switch Show telnetTelnet Enable disableInbound Outbound allConfiguration Persistence Mode Managing Switch Configuration and FilesSet snmp persistmode Show snmp persistmodeDir Save configAuto ManualShow file Use this command to display the contents of a fileShow config All ConfigureOutfile Append CopySystemimage This example shows how to download an image via Tftp Show tftp settingsDelete Clear tftp timeout Set tftp timeoutThis example shows the output of this command This example sets the timeout period to 4 secondsClear tftp retry Set tftp retryThis example sets the retry count to Clearing and Closing the CLI This example shows how to clear the CLI screenCls clear screen To clear the CLI screen or to close your CLI sessionReset Resetting the SwitchUse either of these commands to leave a CLI session This example shows how to exit a CLI sessionIf no unit ID is specified, the entire system will be reset Clear configThis example shows how to reset the system This example shows how to reset unitUse this command to display WebView status Using and Configuring WebViewShow webview Show ssl Set webviewThis example shows how to enable SSL This example shows how to display SSL statusSet ssl Gathering Technical Support Information CommandShow support To gather common technical support informationHostprotect is enabled by default Configuring HostprotectShow system hostprotect Set system hostprotectThis example disables hostprotect This feature is disabled by defaultDefault state is enabled Clear system hostprotectUsage Licensing Procedure in a Stack Environment Activating Licensed FeaturesLicense Key Field Descriptions Adding a New Member to a Licensed Stack Clearing, Showing, and Applying LicensesUsage Set licenseFeatureID feature The name of the feature being cleared Use this command to clear the license key settingsShow license Clear licenseC3rw-clear license featureId advrouter Clear license Activating Licensed Features Commands Configuring System Power and PoEShow inlinepower Use this command to display system power propertiesThis example shows how to display system power properties Set inlinepower thresholdShow inlinepower Output Details Set inlinepower detectionmode Set inlinepower trapSending of traps is disabled by default Ieee Show port inlinepowerAdmin off auto Set port inlinepowerPriority critical High lowSet port inlinepower Configuring System Power and PoE Configuring CDP Discovery Protocol ConfigurationShow cdp Output Details Show cdpEnable Auto disableSet cdp state Set cdp auth Use this command to set a global CDP authentication codeSet cdp interval Clear cdp Set cdp hold-timeShow neighbors Show ciscodp Configuring Cisco Discovery Protocol‐3 provides an explanation of the command output ‐2 provides an explanation of the command outputShow ciscodp port info Show ciscodp Output DetailsThis example shows how to globally enable CiscoDP Set ciscodp timerSet ciscodp status Show ciscodp port info Output DetailsSet ciscodp port Set ciscodp holdtimeDot1p VvidUntagged TrustedClear ciscodp To review and configure Llpd and LLPD‐MED Configuring Link Layer Discovery Protocol and LLDP-MEDOverview Configuration Tasks Show lldp Use this command to display Lldp configuration informationShow lldp port trap Show lldp port statusShow lldp port location-info Show lldp port tx-tlvShow lldp port tx‐tlv port‐string Show lldp port local-info 1000BASE-TFD Show lldp port local-info Output DetailsECS Elin Show lldp port remote-info Guest‐voice‐signaling Voice‐signalingShow lldp port network-policy VoiceSet lldp tx-interval Video‐signalingSoftphone‐voice Video‐conferencingSet lldp trap-interval Set lldp hold-multiplierThis example sets the transmit interval to 20 seconds Set lldp med-fast-repeat Rx‐enable Tx‐enableSet lldp port status Set lldp port trapSet lldp port location-info Set lldp port med-trapElin Set lldp port tx-tlv Mac‐phy GvrpPoe Link‐aggrSet lldp port network-policy State enable disableTag tagged untagged Vid vlan‐id dot1pTx‐interval Clear lldpHold‐multiplier Trap‐intervalClear lldp port trap Clear lldp port statusClear lldp port location-info Clear lldp port med-trapCleared Tag Clear lldp port network-policyVid DscpClear lldp port tx-tlv Disables the LLDP‐MED Extended Power via MDI TLV from being Disables the LLDP‐MED Location Identification TLV from beingPort Configuration Summary Port ConfigurationPort String Syntax Used in the CLI Port type.unitorslot number.port numberPort Slot/Unit Parameters Used in the CLI Reviewing Port StatusShow port status Show portShow port counters Switch mib2Show port status Output Details Show port counters Output Details Show port cablestatus Clear port countersThis example clears the port counters for ge.3.1 This example shows the cable status for 1 GE port ge.1.31 Disabling / Enabling and Naming PortsShow port cablestatus Output Details Set port enable Set port disableThis example shows how to disable ge.1.1 This example shows how to enable ge.1.3Show port alias Use this command to assign an alias name to a portSet port alias This example shows how to clear the alias for ge.3.3 This example shows how to assign the alias Admin to ge.3.3Show port speed Setting Speed and Duplex ModeShow port duplex Set port speed10 100 MbpsSet port duplex This example shows how to set ge.1.17 to full duplexFull half Show port jumbo Enabling / Disabling Jumbo Frame SupportSet port jumbo Enables or disables jumbo frame supportClear port jumbo Show port negotiation Setting Auto-Negotiation and Advertised AbilitySet port negotiation Enable disableShow port advertise Set port advertise Clear port advertise Set port mdix Show port mdixForced‐auto MdiConfigure ports to use Mdix mode only Configure ports to use MDI mode onlyOptional Specify the port or ports to configure Show flowcontrol Setting Flow ControlSet flowcontrol This example shows how to enable flow control Show port trap Setting Port Link Traps and Link Flap DetectionSet port trap Following example disables sending trap on ge.3.1Show linkflap Portstate GlobalstateParameters MetricsShow linkflap metrics Output Details Show linkflap parameters Output DetailsDisables or enables the link flap detection function Disable enableSet linkflap globalstate Set linkflap portstateSet linkflap action Set linkflap intervalClear linkflap action Use this command to set the link flap action trigger countSet linkflap threshold Clear linkflap down Set linkflap downtimeAll stats Clear linkflapParameter Threshold intervalShow port broadcast Configuring Broadcast SuppressionClear port broadcast Set port broadcastSyntax Used in the CLI on page 7‐1 Port Mirroring Mirroring FeaturesRemote Port Mirroring Procedures Configuring Smon MIB Port MirroringOverview Show port mirroring To review and configure port mirroring on the deviceCan be configured per stack, if applicable Create disableSet port mirroring Clear port mirroring Use this command to clear a port mirroring relationshipSet mirror vlan Clear mirror vlan Lacp Operation Link Aggregation Control Protocol LacpLacp Terminology ‐6 defines key terminology used in Lacp configurationSecureStack C3 Usage Considerations Lacp Terms and DefinitionsCommands Show lacp ‐7 provides an explanation of the command outputThis example shows how to disable Lacp Disable enable Disables or enables LacpSet lacp Show lacp Output DetailsSet lacp asyspri Set lacp aadminkeyAsyspri Clear lacp Disable enable Disables or enables static link aggregationSet lacp static Clear lacp static Set lacp singleportlag This example enables the formation of single port LAGsClear lacp singleportlag Status detail Show port lacpSummary Counters Set port lacp AadminkeyLacptimeout AadminstatePadminkey PadminportClear port lacp C3su-clear port lacp port ge.3.16 Set port protected Configuring Protected PortsProtected Port Operation Clear port protected Show port protectedRead‐only Show port protected name Set port protected nameClear port protected name Use this command to clear the name of a protected groupClear port protected name Port Configuration Snmp Configuration Summary Snmp ConfigurationSNMPv3 SNMPv1 and SNMPv2cAbout Snmp Security Models and Levels Configuration Considerations Using Snmp Contexts to Access Specific MIBsReviewing Snmp Statistics Snmp Security LevelsShow snmp engineid This example shows how to display Snmp engine propertiesShow snmp engineid Output Details This example shows how to display Snmp counter values Use this command to display Snmp traffic counter valuesShow snmp counters Show snmp counters Output Details Engine or otherwise unavailable Show snmp user Configuring Snmp Users, Groups, and Communities‐4 provides an explanation of the command output This example shows how to display an Snmp user listUse this command to create a new SNMPv3 user Set snmp userSha AesVolatile NonvolatileShow snmp group Clear snmp userRemote remote User user Set snmp groupSecurity‐model V2c usm VolatileShow snmp community Clear snmp groupV2c usm Set snmp community Use this command to configure an Snmp community groupSecurityname Context contextUse this command to delete an Snmp community name Configuring Snmp Access RightsThis example shows how to delete the community name vip Clear snmp communityNoauthentication Show snmp accessAuthentication Privacy Context context Nonvolatile read‐ Only‐6 provides an explanation of the command output This example shows how to display Snmp access informationShow snmp access Output Details Set snmp access Configuring Snmp MIB Views Clear snmp accessShow snmp view Set snmp view Show snmp contextShow snmp view Output Details Clear snmp view Show snmp targetparams Configuring Snmp Target ParametersVolatile nonvolatile Read‐onlySet snmp targetparams ‐8 provides an explanation of the command outputShow snmp targetparams Output Details Message‐Clear snmp targetparams AuthenticationPrivacy Protected from disclosureUse this command to display Snmp target address information Configuring Snmp Target AddressesShow snmp targetaddr Set snmp targetaddr Timeout timeoutParam param Udpport udpportClear snmp targetaddr Use this command to delete an Snmp target address entryTaglist taglist Tag 1 tagAbout Snmp Notify Filters Configuring Snmp Notification ParametersShow newaddrtrap By default, this function is disabled globally and per portSet newaddrtrap Show snmp notify Set snmp notify ‐10 provides an explanation of the command output10 show snmp notify Output Details Trap informClear snmp notify Use this command to clear an Snmp notify configurationShow snmp notifyfilter Subtree oid‐or‐ Set snmp notifyfilterClear snmp notifyfilter Set snmp notifyprofile Show snmp notifyprofileTargetparam This example shows how to delete Snmp notify profile area51 Creating a Basic Snmp Trap ConfigurationClear snmp notifyprofile Example 11 Basic Snmp Trap ConfigurationHow Snmp Will Use This Configuration Configuring the Snmp Management InterfaceShow snmp interface Loopback loop‐ID Set snmp interfaceClear snmp interface Clear snmp interface Snmp Configuration Spanning Tree Configuration Summary Spanning Tree ConfigurationLoop Protect Spanning Tree FeaturesConfiguring Spanning Tree Bridge Parameters For information about Sid sid Show spantree statsActive Show spantree Output Details ‐1 shows a detailed explanation of command outputSet spantree Disable enable Globally disables or enables Spanning TreeShow spantree version Set spantree version Clear spantree version This example shows how to reset the Spanning Tree versionShow spantree bpdu-forwarding By default Bpdu forwarding is disabled Disable enable Disables or enables Bpdu forwardingThis example shows how to enable Bpdu forwarding Set spantree bpdu-forwardingClear spantree bridgeprioritymode Set spantree bridgeprioritymode8021d 8021tSet spantree msti Show spantree mstilistCreate delete Show spantree mstmap Clear spantree mstiFid fid Use this command to map a FID back to SID This example shows how to map FID 3 to SIDSet spantree mstmap Clear spantree mstmapShow spantree vlanlist This example shows how to map FID 2 back to SIDShow spantree mstcfgid Set spantree mstcfgid Cfgname name Specifies an MST configuration nameClear spantree mstcfgid Set spantree priority Use this command to set the device’s Spanning Tree priorityClear spantree priority Set spantree hello This example shows how to reset the bridge priority on SIDClear spantree hello Set spantree maxage Use this command to set the bridge maximum aging timeUse this command to set the Spanning Tree forward delay Set spantree fwddelayClear spantree maxage Show spantree backuproot Clear spantree fwddelayClear spantree backuproot Set spantree backuprootSet spantree tctrapsuppress Show spantree tctrapsuppressSet spantree protomigration Clear spantree tctrapsuppressShow spantree spanguard Enable disable Enables or disables the SpanGuard functionSet spantree spanguard Clear spantree spanguard This example shows how to enable the SpanGuard functionSet spantree spanguardtimeout Show spantree spanguardtimeoutShow spantree spanguardlock Clear spantree spanguardtimeoutThis example shows how to unlock port ge.1.16 Show spantree spanguardtrapenableClear / set spantree spanguardlock Clear spantree spanguardtrapenable Set spantree spanguardtrapenableIs enabled Set spantree legacypathcost Show spantree legacypathcostShow spantree autoedge Clear spantree legacypathcostSet spantree autoedge This example clears the legacy path cost to 802.1t valuesClear spantree autoedge Set spantree portadmin Configuring Spanning Tree Port ParametersDisable enable To display and set Spanning Tree port parametersShow spantree portadmin Clear spantree portadminThis example shows how to disable Spanning Tree on ge.1.5 Show spantree portpri Use this command to set a port’s Spanning Tree prioritySet spantree portpri Clear spantree portpri Set spantree adminpathcost Show spantree adminpathcostShow spantree adminedge Clear spantree adminpathcostClear spantree adminedge Set spantree adminedgeThis example shows how to set ge.1.11 as an edge port True falseShow spantree operedge This example shows how to reset ge.1.11 as a non‐edge portConfiguring Spanning Tree Loop Protect Parameters Set spantree lp This example shows how to enable Loop Protect on ge.2.3Show spantree lp If no SID is specified, SID 0 is assumedShow spantree lplock Clear spantree lpSID Locked Clear spantree lplockShow spantree lpcapablepartner Set spantree lpcapablepartnerClear spantree lpcapablepartner Use this command to set the Loop Protect event thresholdSet spantree lpthreshold Show spantree lpthreshold None. The default event threshold isClear spantree lpthreshold Show spantree lpwindow Set spantree lpwindowDisabled Set spantree lptrapenableClear spantree lpwindow Clear spantree lptrapenable Show spantree lptrapenableSet spantree disputedbpduthreshold Clear spantree disputedbpduthreshold Show spantree disputedbpduthresholdShow spantree nonforwardingreason Vlan Configuration Summary 802.1Q Vlan ConfigurationCreating a Secure Management Vlan Command Set for Creating a Secure Management VlanShow vlan Viewing VLANsStatic PortinfoVlan Vlan ID Name Show vlan Output DetailsThis example shows how to create Vlan Create enable Creates, enables or disables VLANs. disableCreating and Naming Static VLANs Set vlanSet vlan name This example shows how to set the name for Vlan 7 to greenClear vlan Clear vlan name This example shows how to clear the name for VlanShow port vlan Assigning Port Vlan IDs PVIDs and Ingress FilteringClear port vlan Set port vlanModify‐egress No‐modify‐egressShow port ingress filter Show port discard Set port ingress filterTagged untagged both none Set port discardShow port egress Configuring the Vlan Egress ListSet vlan forbidden Set vlan egress Use this command to remove ports from a VLAN’s egress listClear vlan egress Untagged forbidden taggedForbidden Show vlan dynamicegressThis example shows how to enable dynamic egress on Vlan Enable disable Enables or disables dynamic egressSet vlan dynamicegress Show host vlan Setting the Host VlanSet host vlan Clear host vlan This example shows how to set Vlan 7 as the host VlanAbout Garp Vlan Registration Protocol Gvrp Enabling/Disabling Gvrp Garp Vlan Registration ProtocolHow It Works Example of Vlan Propagation via Gvrp Use this command to display Gvrp configuration information Show garp timerShow gvrp Disables or enables Gvrp on the device Show gvrp configuration Output DetailsSet gvrp This example shows how to enable Gvrp on ge.1.3 Set garp timerClear gvrp Leaveall timer‐ Clear garp timerJoin LeaveC3su-clear garp timer leave ge.1.1 Policy Classification Configuration Summary Policy Classification ConfigurationUse this command to display policy profile information Configuring Policy ProfilesShow policy profile ‐verboseShow policy profile Output Details Set policy profile This example shows how to delete policy profile Use this command to delete a policy profile entryClear policy profile All admin‐ profile profile‐ index Configuring Classification RulesShow policy rule Admin‐pid Not‐in‐service Not‐ready Storage‐type non‐Tcpsourceport UdpdestportShow policy rule Output Details Show policy capabilityVlan Set policy rule Admin‐profileVlantag data Ipproto EtherIpdestsocket IpsourcesocketData value Mask bits Valid Values for Policy Classification RulesClear policy rule Following parameters apply to deleting an admin ruleRange from 1 to 4094 or 0xFFF All‐pid‐entriesClear policy all-rules Use this command to remove all policy classification rulesAssigning Ports to Policy Profiles Use this command to assign ports to a policy profileSet policy port To assign and unassign ports to policy profilesClear policy port About Policy-Based CoS Configurations Configuring Policy Class of Service CoSProcedure 11-1 User-Defined CoS Configuration Configuring Policy Class of Service CoS About CoS-Based Flood Control ProcedureSet cos state Use this command to enable or disable Class of ServiceShow cos state This example shows how to enable Class of ServiceClear cos state Priority priority Set cos settingsTos‐value tos‐value Irl‐referenceShow cos settings Clear cos settingsPriority Tos‐valueSet cos port-config Should be displayed Show cos port-configEntry Clear cos port-configName PortsSet cos port-resource irl Group#.port‐type Set cos port-resource flood-ctrlUnicast MulticastGroup#.port‐type Show cos port-resourceUnit Clear cos port-resource irlRate TypeSet cos reference Clear cos port-resource flood-ctrlUnicast MulticastShow cos reference Specifies that an IRL reference is being configuredIRL reference number associated with this entry Rate‐limit irl‐indexClear cos reference Port‐typ e index Show cos unitKbps PpsShow cos port-type Clear cos all-entriesThis example shows flood control information for port type Port Priority Configuration Summary Port Priority ConfigurationShow port priority Configuring Port PriorityClear port priority Set port priorityShow port priority-queue Configuring Priority to Transmit Queue MappingSet port priority-queue Clear port priority-queue Show port txq Configuring Quality of Service QoSSet port txq Clear port txq By default, transmit queues are defined as followsClear port txq Port Priority Configuration Igmp Overview Igmp ConfigurationAbout IP Multicast Group Management To configure Igmp snooping from the switch CLI Configuring Igmp at LayerAbout Multicasting Use this command to display Igmp snooping information Set igmpsnooping adminmodeThis example shows how to display Igmp snooping information Use this command to enable or disable Igmp on the systemEnable disable Enables or disables Igmp This example shows how to enable Igmp on the systemThis example shows how to enable Igmp on port ge.1.10 Set igmpsnooping interfacemodeSet igmpsnooping maxresponse Set igmpsnooping add-static Set igmpsnooping mcrtrexpiretimeModify If no ports are specified, all ports are added to the entryShow igmpsnooping static Set igmpsnooping remove-staticIf modify is not specified, a new entry is created Group group Show igmpsnooping mfdbThis example displays the static Igmp ports for Vlan Stats Optional Displays Mfdb statisticsThis example shows how to clear all Igmp snooping entries Use this command to clear all Igmp snooping entriesClear igmpsnooping To configure Igmp on routing interfaces Configuring Igmp on Routing InterfacesGlobal configuration C3su‐routerConfig# Ip igmpThis example shows how to enable Igmp on the router Ip igmp enableInterface configuration C3su‐routerConfig‐ifVlan 1# Ip igmp versionShow ip igmp interface Any router modeIp igmp query-interval Show ip igmp groupsIp igmp startup-query-interval Ip igmp query-max-response-timeIp igmp last-member-query-interval Ip igmp startup-query-countIp igmp robustness Ip igmp last-member-query-countInterface configuration C3 su‐routerConfig‐ifVlan 1# Ip igmp robustness Igmp Configuration Logging and Network Management Configuring System LoggingShow logging server Set logging server Clear logging server Show logging defaultUse this command to set logging default values Set logging defaultShow logging application Clear logging defaultFacility SeverityShow logging application Output Details Set logging applicationIf level is not specified, none will be applied Level levelShow logging local Clear logging applicationClear logging local Set logging localShow logging buffer This example shows how to clear local loggingShow logging interface Set logging interface Clear logging interface History Monitoring Network Events and StatusDefault Use this command to set the size of the history bufferShow history Set historyShow users PingThis example, the host at IP address is not responding Show netstat DisconnectConsole Following table describes the output of this command Following example shows the output of this commandShow netstat Output Details Use this command to display the switch’s ARP table Managing Switch Network Addresses and RoutesShow arp Set arp This example shows how to display the ARP tableShow arp Output Details Traceroute Clear arpEach response Show macType other learned Self mgmtShow mac Output Details Show mac agetimeThis example shows how to set the MAC timeout period This example shows how to display the MAC timeout periodSet mac agetime Clear mac agetimeSet mac algorithm Default MAC algorithm is mac‐crc16‐upperbitsShow mac algorithm Set mac multicast Clear mac algorithmClear mac address Use this command to remove a multicast MAC addressAppend clear Set mac unreserved-flood Show mac unreserved-floodThis example enables multicast flood protection Configuring Simple Network Time Protocol SntpUse this command to display Sntp client settings Show sntpShow sntp Output Details This example shows how to display Sntp client settingsClear sntp client Set sntp clientClear sntp server Set sntp serverIf precedence is not specified, 1 will be applied Clear sntp poll-interval Set sntp poll-intervalSet sntp poll-retry This example shows how to clear the Sntp poll intervalClear sntp poll-retry Clear sntp poll-timeout Set sntp poll-timeoutUse this command to clear the Sntp poll timeout This example shows how to clear the Sntp poll timeoutSet timezone Set sntp interface Show sntp interfaceClear sntp interface C3rw-show sntp interface Vlan 100 C3rw-clear sntp interface Show nodealias config Configuring Node AliasesSet nodealias Show nodealias config Output DetailsMaxentries maxentries Clear nodealias config Rmon Monitoring Group Functions and Commands Rmon ConfigurationRmon Monitoring Group Functions Design Considerations Group What It Does What It Monitors CLI CommandsTo display, configure, and clear Rmon statistics Statistics Group CommandsShow rmon stats Use this command to configure an Rmon statistics entrySet rmon stats This example shows how to delete Rmon statistics entry To‐defaultsClear rmon stats If owner is not specified, monitor will be appliedShow rmon history History Group CommandsClear rmon history Set rmon historyBuckets buckets Interval intervalThis example shows how to delete Rmon history entry Show rmon alarm Alarm Group CommandsThis example shows how to display Rmon alarm entry Show rmon alarm Output Details Set rmon alarm propertiesObject object Type absoluteSet rmon alarm status Enable Clear rmon alarmThis example shows how to enable Rmon alarm entry Use this command to delete an Rmon alarm entryUse this command to display Rmon event entry properties Event Group CommandsThis example shows how to display Rmon event entry Show rmon eventDescription Set rmon event propertiesType none log Trap bothSet rmon event status This example shows how to enable Rmon event entryClear rmon event This example shows how to clear Rmon event Show rmon channel Filter Group CommandsSet rmon channel Use this command to configure an Rmon channel entryAccept matched FailedShow rmon filter Clear rmon channelIndex index Channel channelSet rmon filter This example shows how to clear Rmon filter entry Use this command to clear an Rmon filter entryClear rmon filter Show rmon capture Packet Capture CommandsNodata Action lock Set rmon captureSlice slice Loadsize loadsizeThis example shows how to clear Rmon capture entry Use this command to clears an Rmon capture entryClear rmon capture Dhcp Overview Dhcp Server ConfigurationDhcp Relay Agent Dhcp ServerConfiguring a Dhcp Server Configuring General Dhcp Server Parameters This example enables Dhcp server functionality Set dhcp bootpSet dhcp This example enables Dhcp conflict logging This example enables address allocation for Bootp clientsSet dhcp conflict logging Show dhcp conflictThis example disables Dhcp conflict logging Logging Disables conflict loggingClear dhcp conflict Clears the conflict information for all IP addressesSet dhcp exclude 100, with the set dhcp exclude commandClear dhcp exclude Clear dhcp ping Set dhcp pingThis example sets the number of ping packets sent to Clear dhcp binding Show dhcp bindingUse this command to clear all Dhcp server counters Use this command to display Dhcp server statisticsShow dhcp server statistics Clear dhcp server statisticsThis example clears all Dhcp server counters Manual Pool Configuration Considerations Configuring IP Address PoolsThis example creates an address pool named auto1 Set dhcp poolClear dhcp pool Use this command to delete a Dhcp server pool of addressesSet dhcp pool network This example deletes the address pool named auto1Set dhcp pool hardware-address Clear dhcp pool networkSet dhcp pool host Clear dhcp pool hardware-addressIf no type is specified, Ethernet is assumed Set dhcp pool client-identifier Clear dhcp pool hostClear dhcp pool client-identifier Clear dhcp pool client-name Set dhcp pool client-nameClear dhcp pool bootfile Set dhcp pool bootfileClear dhcp pool next-server Set dhcp pool next-serverClear dhcp pool lease Set dhcp pool leaseInfinite Clear dhcp pool default-router Set dhcp pool default-routerClear dhcp pool dns-server Set dhcp pool dns-serverClear dhcp pool domain-name Set dhcp pool domain-nameClear dhcp pool netbios-name-server Set dhcp pool netbios-name-serverClear dhcp pool netbios-node-type Set dhcp pool netbios-node-type‐node Ascii string Set dhcp pool optionClear dhcp pool option Show dhcp pool configurationThis example removes option 19 from address pool auto1 Show dhcp pool configuration Dhcp Snooping Overview Dhcp Snooping Dynamic ARP InspectionDhcp Message Processing Building and Maintaining the Database Configuration Notes Basic ConfigurationProcedure 17-1 Basic Configuration for Dhcp Snooping Rate LimitingDisabled globally Dhcp Snooping CommandsSet dhcpsnooping Set dhcpsnooping vlan Set dhcpsnooping database write-delaySet dhcpsnooping trust By default, ports are untrustedSet dhcpsnooping binding This example configures port ge.1.1 as a trusted portSet dhcpsnooping verify Set dhcpsnooping log-invalid Source MAC address verification is enabled by defaultAgainst the client hardware address None Set dhcpsnooping limitRate pps Burst interval secsThis example configures rate limit parameters on port ge.1.1 Show dhcpsnooping port Show dhcpsnooping databaseDynamic static Show dhcpsnooping bindingEntry, either dynamic or static Show dhcpsnooping statistics Clear dhcpsnooping statistics Clear dhcpsnooping bindingClear dhcpsnooping database Default value of 300 seconds Write‐delayClear dhcpsnooping limit Dynamic ARP Inspection OverviewStatic Mappings Functional DescriptionOptional ARP Packet Validation Packet Forwarding Logging Invalid PacketsRate Limiting Eligible InterfacesStep Task Commands Procedure 17-2 Basic Dynamic ARP Inspection ConfigurationRouter Configuration Example ConfigurationVlan Configuration Set arpinspection vlan Dynamic ARP Inspection CommandsDhcp Snooping Configuration Dynamic ARP Inspection ConfigurationLogging is disabled by default Set arpinspection trustBy default, all physical ports and LAGs are untrusted LoggingSrc‐mac Set arpinspection validateDst‐mac Set arpinspection limit Show arpinspection access-list Set arpinspection filterPermit Mac hostThis example displays the ARP configuration of lag.0.1 Show arpinspection portsShow arpinspection statistics Show arpinspection vlanWith an invalid address Clear arpinspection validateThis example removes all 3 additional validation conditions Clear arpinspection vlan Clear arpinspection filter This example removes the ARP ACL named staticARP from Vlan Clear arpinspection limitThis example clears all DAI statistics from the switch Clear arpinspection statisticsPage Pre-Routing Configuration Tasks Preparing for Router ModeEnabling the Switch for Routing Enabling Router Configuration ModesRouter CLI Configuration Modes Router CLI Configuration Modes Page Configuring Routing Interface Settings IP ConfigurationVlan vlan ‐id Show interfaceRouter global configuration mode C3su‐routerConfig# Use this command to configure interfaces for IP routingInterface Vlan vlan‐ idShow ip interface This example shows how to enter configuration mode for VlanIp address Router interface configuration C3su‐routerConfig‐ifVlan 1#Show ip interface Output Details SecondaryNo shutdown Show running-configNo ip routing This example shows how to enable Vlan 1 for IP routingUse this command to configure a tunnel interface Configuring Tunnel InterfacesInterface tunnel Router interface configuration C3su‐routerConfig‐ifTnnl 1# This example creates a configured tunnel interfaceTunnel source This command specifies the mode of the tunnel interface Tunnel modeIpv6ip Specifies that the tunnel mode is IPv6 over IPv4 No form of this command removes the mode of the tunnelShow interface tunnel This example sets the tunnel mode to IPv6 over IPv4Show ip arp Reviewing and Configuring the ARP TableArp This example shows how to use the show ip arp commandShow ip arp Output Details Ip proxy-arp This example shows how to enable proxy ARP on VlanClear arp-cache Arp timeout14,400 seconds Privileged Exec C3su‐router#Interface configuration C3su‐Router1Config‐ifVlan 1# Configuring Broadcast SettingsIp directed-broadcast Udp Ip forward-protocolSpecifies UDP as the IP forwarding protocol Are forwardedIp helper-address Show ip route Reviewing IP Traffic and Configuring RoutesOSPF, IA Ping Ip routePreference in route selection There is also a traceroute command available in switch mode This command is also available in switch modeTraceroute Ip icmp redirect enable Configuring Icmp RedirectsInterface Show ip icmp redirectActivating Advanced Routing Features IPv4 Routing Protocol ConfigurationRIP Configuration Task List and Commands Configuring RIPRIP Configuration Task List and Commands Router ripThis example shows how to enable RIP Ip rip enableDistance R1compatible Ip rip send versionSpecifies RIP version 1. This is the default setting Ip rip authentication-keyIp rip receive version Specifies RIP versionMd5 Ip rip message-digest-keyRouter configuration C3su‐routerConfig‐router# Use this command to disable automatic route summarizationNo auto-summary Split-horizon poisonPassive-interface Redistribute Receive-interfaceConnected OspfProtocol Command detailed in ip route on page 19‐21Subnets Subnetted will be redistributedOspf Configuration Task List and Commands Configuring OspfOspf Configuration Task List and Commands Advanced License RequiredRoutes Router idRouter ospf This example shows how to enable routing for Ospf process1583compatibility This example shows how to enable RFC 1583 compatibility Ip ospf enableIp ospf areaid Ip ospf priority Ip ospf costTimers spf Ip ospf retransmit-interval Ip ospf transmit-delayIp ospf dead-interval Ip ospf hello-interval65535 Ip ospf authentication-key Distance ospf Ip ospf message digest key md5External inter‐ Area rangeArea intra‐area Intra‐area routesArea stub If not specified, advertise mode will be setAdvertise no‐ AdvertiseArea nssa Area default costThis example shows how to configure area 10 as an Nssa area Default‐Area virtual-link Information‐Transmit‐delay Authentication‐Key key Dead‐intervalRip Show ip ospfMetric‐type type Use this command to display the Ospf link state database This example shows how to display Ospf informationShow ip ospf database Show ip ospf database Output Details Show ip ospf interfaceShow ip ospf interface Output Details Show ip ospf neighbor Output Details Show ip ospf neighborClear ip ospf process Show ip ospf virtual-linksShow ip ospf virtual links Output Details This example shows how to reset Ospf process Enabling Dvmrp on an Interface Configuring DvmrpCommands to Enable Dvmrp on an Interface Ip dvmrp enableThis example shows how to enable the Dvmrp process Ip dvmrpIp dvmrp metric Use this command to display Dvmrp routing informationShow ip dvmrp This example shows how to display Dvmrp status information Ip irdp enable Configuring IrdpIp irdp minadvertinterval Ip irdp maxadvertintervalIp irdp preference Ip irdp holdtime9000 Ip irdp broadcast Use this command to display Irdp informationShow ip irdp Configuration Tasks on page 18‐1 Router vrrp Configuring VrrpCreate This example shows how enable Vrrp configuration modeAddress Advertise-interval PriorityPreempt Described in Pre‐Routing Configuration Tasks on page 18‐1Enable Use this command to display Vrrp routing information Ip vrrp authentication-keyThis example shows how to display Vrrp information Show ip vrrpDesign Considerations Configuring PIM-SMThis example shows how to globally enable and disable PIM Global router configuration C3su‐routerConfig#Ip pimsm Ip pimsm staticrpIp pimsm enable Ip pimsm query-interval This example shows how to display PIM informationShow ip pimsm Show ip pimsm componenttable This example shows how to display PIM router informationShow ip pimsm Output Details Show ip pimsm interface This example shows how to display PIM interface informationShow ip pimsm componenettable Output Details StatsShow ip pimsm neighbor This example shows how to display PIM interface statisticsShow ip pimsm interface vlan Output Details 10 show ip pimsm interface stats Output DetailsShow ip pimsm rp ‐11 provides an explanation of the command output11 show ip pimsm neighbor Output Details CandidateShow ip pimsm rphash ‐12 provides an explanation of the command output12 show ip pimsm rp Output Details Show ip pimsm staticrp ‐13 provides an explanation of the command outputDisplay the PIM‐SM static Rendezvous Point information Show ip mroute Use this command to display the IP multicast routing table13 show ip pimsm staticrp Output Details 20-60 IPv4 Routing Protocol Configuration Show ipv6 status IPv6 ManagementThis example shows how to enable IPv6 management By default, IPv6 management is disabledSet ipv6 Set ipv6 address No global unicast IPv6 address is defined by defaultEui64 Show ipv6 address Use this command to clear IPv6 global addressesClear ipv6 address Set ipv6 gateway Clear ipv6 gateway Use this command to clear an IPv6 gateway addressShow ipv6 neighbors Use this command to display IPv6 netstat information This example shows example output of this commandShow ipv6 netstat Ping ipv6 This command is also available in router modeSize num Traceroute ipv6 Traceroute ipv6 21-10 IPv6 Management Overview IPv6 ConfigurationIPv6 Routing License Required Following table lists the default IPv6 conditions Default ConditionsIpv6 forwarding General Configuration CommandsIpv6 hop-limit This command configures static IPv6 routes Default maximum number of IPv6 hops isIpv6 route This example sets the hop limit toIpv6 route distance Default preference or administrative distance isIpv6 unicast-routing This command sets the default distance value toLink‐local‐address Ping ipv6 interfaceRouter privileged exec C3 su‐router# 20010db8123455551 Ipv6 address Interface Configuration CommandsNo IPv6 addresses are defined for any interface IPv6 is disabled Ipv6 enableBytes Ipv6 mtuThis example sets the MTU value to 1500 bytes Clear ipv6 neighbors Neighbor Cache and Neighbor Discovery CommandsThis example clears all dynamically learned cache entries Ipv6 nd dad attempts Duplicate address detection enabled, for 1 attemptIpv6 nd ns-interval Router interface configurationC3su‐routerConfig‐ifVlan 1# By default, a value of 0 is advertised in RA messagesIpv6 nd reachable-time This example sets the NS interval to 2 secondsFlag is set to false by default Ipv6 nd other-config-flagRouter interface configuration C3su‐routerConfig‐if Vlan 1# This example sets the reachable time to 60 secondsIpv6 nd ra-lifetime Ipv6 nd ra-intervalThis example disables router advertisement transmission Suppression disabledIpv6 nd suppress-ra Ipv6 nd prefixRouter interface configurationC3su‐routerConfig‐if Vlan 1# No‐autoconfigOff‐link Example Show ipv6 Query CommandsShow ipv6 interface Router privileged execution C3su‐router#This example displays information about IPv6 interface Vlan This example displays the neighbors in the cache This command displays IPv6 Neighbor Cache informationShow ipv6 route This command displays the IPv6 routing tableShow ipv6 neighbor Output Details Interface interfaceShow ipv6 route Output Details This example displays all active IPv6 routesShow ipv6 route preferences Output Details Show ipv6 route preferencesShow ipv6 route summary This command displays the summary of the routing tableNon‐best routes Show ipv6 traffic Following example displays the output of this commandShow ipv6 summary Output Details Show ipv6 traffic Output Details Options, etc Counter would include datagrams counted Send. Note that this counter includes all those counted by Router privileged executionC3su‐router# Clear ipv6 statisticsThis example clears the statistics for Vlan IPv6 Proxy Routing Limitations Preparing a Mixed Stack for IPv6 Proxy RoutingRouter global configuration C2su‐routerConfig# IPv6 proxy routing is disabled by defaultThis example enables IPv6 proxy routing Ipv6 proxy-routingAny routing mode DHCPv6 Configuration Ipv6 dhcp enable Global Configuration CommandsFollowing table lists the default DHCPv6 conditions This command enables DHCPv6 on the routerThis example enables DHCPv6 By default, DHCPv6 is disabledIpv6 dhcp relay-agent-info-opt Ipv6 dhcp pool Ipv6 dhcp relay-agent-info-remote-id-suboptIpv6 dhcp pool Domain-name Address Pool Configuration CommandsPrefix-delegation Dns-serverPreferred‐lifetime Valid‐lifetime secsSecs infinite C3su-routerConfig-dhcp6s-pool# exit C3su-routerConfig# Ipv6 dhcp server By default, DHCPv6 functionality is disabledRapid‐commit Preference prefDestination dest‐addr Ipv6 dhcp relayInterface intf Remote‐id duid‐ifidExamples Show ipv6 dhcp DHCPv6 Show CommandsStatistics Show ipv6 dhcp interfaceThis example displays the DHCPv6 statistics for Vlan Output of show ipv6 dhcp interface CommandOutput of show ipv6 dhcp statistics Command This example displays the output of this commandShow ipv6 dhcp statistics This example clears DHCPv6 statistics for Vlan Clear ipv6 dhcp statisticsShow ipv6 dhcp pool This command displays information about DHCPv6 bindingsShow ipv6 dhcp binding If no IPv6 address is specified, all bindings are displayed Show ipv6 dhcp binding DHCPv6 Configuration OSPFv3 Configuration Following table lists the default OSPFv3 conditions Use this command to configure the OSPFv3 router ID Global OSPFv3 Configuration CommandsIpv6 router id Ipv6 router ospf Default-information originateAlways Metric valueRouter OSPFv3 configuration C3su‐routerConfig‐router# Default-metricNo default metric is configured Router OSPFv3 configuration C3su-routerConfig-router#Intra Exit-overflow-intervalInter Type1Default value is ‐1 This command configures the external Lsdb limit for OSPFv3External-lsdb-limit This example sets the exit overflow interval to 10 secondsConnected static Maximum-pathsTag tag Metric = unspecified Metric type = Type Tag = Area default-cost Area Configuration CommandsThese commands are used to configure area parameters This example shows how to configure area 20 as an Nssa This example sets the default route cost to 50 for areaDefault metric value is Area nssa default-info-originateArea nssa no-redistribute ComparableArea nssa no-summary By default, the translator role is disabled This command configures the translator role of the routerArea nssa translator role Area nssa translator-stab-intvArea address ranges are not configured by default Default interval is 40 secondsSummarylink NssaexternallinkThis command creates a stub area for the specified area ID Area stub no-summary Example disables the import of summary LSAs into stub areaThis example creates a stub area with the ID Area virtual-link dead-interval Default dead interval is 40 secondsArea virtual-link hello-interval Default hello interval is 10 secondsArea virtual-link retransmit-interval Default retransmit interval is 5 seconds Area virtual-link transmit-delayDefault transmit delay is 1 second OSPFv3 is disabled by default Ipv6 ospf enableIpv6 ospf cost Ipv6 ospf areaidIpv6 ospf dead-interval Default dead interval value is 40 secondsIpv6 ospf mtu-ignore Ipv6 ospf hello-intervalDefault network type is broadcast By default, MTU mismatch detection is enabledIpv6 ospf network Ipv6 ospf priority Default priority value isIpv6 ospf retransmit-interval Default value is 4 seconds Ipv6 ospf transmit-delayDefault value is 1 second Ipv6 ospf transmit-delay This command displays OSPFv3 router information OSPFv3 Show CommandsThis example shows how to display OSPFv3 router information Show ipv6 ospfShow ipv6 ospf Output Details Show ipv6 ospf area Output Details Show ipv6 ospf areaShow ipv6 ospf abr Output Details Show ipv6 ospf abrShow ipv6 ospf asbr Output Details Show ipv6 ospf asbrShow ipv6 ospf database Adv Router Link Id Age Sequence Csum Options Rtr Opt Show ipv6 ospf database Output Details Show ipv6 ospf database database-summary Output Details Show ipv6 ospf interface This command displays information about OSPFv3 interfacesLoopback loopid Show ipv6 ospf interface Command Output Details Show ipv6 ospf interface stats This example shows how to display statistics for VlanShow ipv6 ospf interface stats Output Details Show ipv6 ospf neighbor This command displays information about OSPFv3 neighborsSpecify the Vlan interface to display information about Specify the tunnel interface to displayShow ipv6 ospf neighbor Output Details 10 show ipv6 ospf neighbor routerid Output Details Show ipv6 ospf rangeThis example displays range information for area 11 show ipv6 ospf range Output Details Show ipv6 ospf stub tableThis example displays the OSPFv3 stub table information 12 show ipv6 ospf stub table Output Details13 show ipv6 ospf virtual-link Output Details Show ipv6 ospf virtual-linkShow ipv6 ospf virtual-link Show ipv6 ospf virtual-link OSPFv3 Configuration Overview of Authentication and Authorization Methods Authentication and Authorization ConfigurationOverview of Authentication and Authorization Methods Filter-ID Attribute Formats Show authentication login Setting the Authentication Login MethodSet authentication login Use this command to set the authentication login methodAny Clear authentication loginLocal RadiusTimeout Configuring RadiusShow radius RetriesSet radius Optional Displays Radius server configuration informationServer Servers or a specific Radius server as defined by an indexRealm management‐ access any network‐access Timeout timeoutServer index Realm Clear radiusSet radius accounting Show radius accountingRetries retries Timeout This example shows how to set Radius accounting retries toClear radius accounting RetriesSet radius interface Show radius interfaceClear radius interface Example Show dot1x Configuring 802.1X AuthenticationAuth‐diag Auth‐statsThis example shows how to display 802.1X status Show dot1x auth-config Init reauth Set dot1xTrue false Set dot1x auth-config Portcontrol Maxreq Clear dot1x auth-configShow eapol Show eapol Output Details Connecting state, via disconnectedClear eapol Set eapolAuth‐mode Forced‐authOptional Globally clears the Eapol authentication mode Show macauthentication Configuring MAC AuthenticationNopassword Show macauthentication Output DetailsThis example shows how to display MAC session information Show macauthentication sessionShow macauthentication session Output Details Set macauthentication password Set macauthenticationUse this command to set a MAC authentication password Set macauthentication port Clear macauthentication passwordUse this command to clear the MAC authentication password Enables or disables MAC authenticationSet macauthentication portquietperiod Set macauthentication portinitializeSet macauthentication macinitialize Clear macauthentication portquietperiodThis example resets the default quiet period on port Set macauthentication portreauthenticate Set macauthentication reauthenticationEnables or disables MAC reauthentication Set macauthentication reauthperiod Set macauthentication macreauthenticateClear macauthentication reauthperiod Clear macauthentication significant-bits Set macauthentication significant-bitsC3su-clear macauthentication significant-bits About Multiple Authentication Types Configuring Multiple Authentication MethodsAbout Multi-User Authentication Show multiauth Clear multiauth mode Set multiauth modeMulti StrictSet multiauth precedence Default precedence order is dot1x, pwa, macClear multiauth precedence Set multiauth port Show multiauth portClear multiauth port Show multiauth session Show multiauth stationAgent dot1x mac Show multiauth idle-timeoutAuthentication method for which to set the timeout value Set multiauth idle-timeoutWhich to set the timeout value Idle timeout value is provided by the authenticating serverShow multiauth session-timeout Clear multiauth idle-timeoutDefault Which to reset the timeout value to its defaultWhich to set the session timeout value Set multiauth session-timeoutConfiguring User + IP Phone Authentication Clear multiauth session-timeoutConfiguring Vlan Authorization RFC Set vlanauthorization egress Set vlanauthorizationTagged Show vlanauthorization Clear vlanauthorizationBy default, administrative egress is set to untagged Show vlanauthorization Output Details Configuring Policy Maptable ResponseOperational Description When Policy Maptable Response is BothWhen Policy Maptable Response is Tunnel When Policy Maptable Response is PolicyShow policy maptable Response Set policy maptableBoth PolicyClear policy maptable To review, disable, enable, and configure MAC locking Configuring MAC LockingShow maclock Show maclock Output Details Show maclock stationsFirstarrival Connected to MAC locked portsSet maclock enable port‐string Set maclock enableShow maclock stations Output Details This example shows how to enable MAC locking on ge.2.3 Set maclock disableThis example shows how to disable MAC locking on ge.2.3 Set maclockCreate Clear maclockSpecified MAC address and port Clear maclock static Set maclock staticSet maclock firstarrival Set maclock agefirstarrival Clear maclock firstarrivalThis example disables first arrival aging on port ge.1.1 This example enables first arrival aging on port ge.1.1Clear maclock agefirstarrival Set maclock moveSet maclock trap About PWA Configuring Port Web Authentication PWAShow pwa Output Details Show pwaThis example shows how to enable port web authentication Enable disable Enables or disables port web authenticationSet pwa Show pwa banner This example shows how to display the PWA login bannerSet pwa banner Clear pwa banner This example shows how to hide the Enterasys Networks logoSet pwa displaylogo Display hideSet pwa protocol Set pwa ipaddressChap pap This example shows how to clear the PWA guest user name Use this command to clear the PWA guest user nameSet pwa guestname Clear pwa guestnameSet pwa gueststatus Set pwa guestpasswordAuthnone AuthradiusSet pwa initialize This example shows how to initialize ports ge.1.5‐7Set pwa quietperiod Set pwa portcontrol Set pwa maxrequestThis example shows how to enable PWA on ports 1‐22 Enables or disables PWA on specified portsThis example shows how to display PWA session information Show pwa sessionThis example shows how to enable PWA enhancedmode Enable disable Enables or disables PWA enhancedmodeSet pwa enhancedmode This example shows how to display SSH status on the switch Configuring Secure Shell SSHShow ssh status Set sshThis example shows how to regenerate SSH keys This example shows how to disable SSHSet ssh hostkey Show access-lists Configuring Access ListsShow access‐lists number Deny permit Access-list standardInsert replace Access-list extendedThis example moves entry 16 to the beginning of ACL Insert replace Interface configuration C3su‐routerConfig‐ifVlan vlanid# Ip access-groupFilters inbound frames Example Page TACACS+ Configuration State Optional Displays only the TACACS+ client status Show tacacsShow tacacs Output Details Enable disable Enables or disables the Tacacs client Use this command to enable or disable the TACACS+ clientThis example shows how to enable the TACACS+ client Set tacacsSet tacacs server Timeout secondsSpecifies one TACACS+ server to be affected Clear tacacs serverThis example removes TACACS+ server Show tacacs sessionSet tacacs session Clear tacacs session ServiceRead‐write Super‐userSet tacacs command Show tacacs commandSet tacacs singleconnect Show tacacs singleconnectConnection Set tacacs interface Show tacacs interfaceClear tacacs interface Clear tacacs interface TACACS+ Configuration 27-14 Using sFlow in Your Network SFlow ConfigurationAdvantages of using sFlow include SFlow Agent Functionality DefinitionsSampling Mechanisms SFlow DefinitionsCounter Sampling Packet Flow SamplingUsage Notes 28-5 Show sflow receivers Contents of the sFlow Receivers Table is displayedThis example displays the sFlow Receivers Table Show sflow receivers Output Descriptions Following table describes the output fieldsSet sflow receiver ip Set sflow receiver ownerDefault maximum datagram size is 1400 bytes Default IP address isSet sflow receiver maxdatagram Maxdatagram bytesSet sflow receiver port Default port value isClear sflow receiver MaxdatagramOwner Set sflow port pollerPort port Show sflow pollers Set sflow port sampler Clear sflow port pollerInterval This example removes the poller instance on port ge.1.1Show sflow samplers Set sflow interface Clear sflow port samplerMaxheadersize RateShow sflow interface Clear sflow interface Show sflow agent 28-18 Policy Capacities Policy and Authentication CapacitiesTable A-1 Policy Capacities Table A-2 Authentication Capacities Authentication CapacitiesNumerics IndexOspf 20-30Network Management Tftp Index