Enterasys SecureStack C3
Page
Page
Enterasys Networks, Inc. Firmware License Agreement
Iii
Page
Contents
Page
Activating Licensed Features
Configuring System Power and PoE
Discovery Protocol Configuration
Port Configuration
Show port broadcast Set port broadcast Clear port broadcast
Snmp Configuration
Spanning Tree Configuration
Configuring Spanning Tree Port Parameters Purpose Commands
802.1Q Vlan Configuration
Policy Classification Configuration
Port Priority Configuration
Igmp Configuration
Logging and Network Management
14-3
Rmon Configuration
Dhcp Server Configuration
IP Configuration
Preparing for Router Mode
Dhcp Snooping and Dynamic ARP Inspection
IPv4 Routing Protocol Configuration
20-11
IPv6 Configuration
IPv6 Management
DHCPv6 Configuration
IPv6 Proxy Routing
OSPFv3 Configuration
Authentication and Authorization Configuration
26-37
TACACS+ Configuration
SFlow Configuration
Appendix a Policy and Authentication Capacities
Index
Tables
10-4
22-26
Xxxii
Using This Guide
About This Guide
Structure of This Guide
Important Notice
Structure of This Guide
SecureStack C3 Installation Guides
Related Documents
Following conventions are used in the text of this document
Conventions Used in This Guide
Following icons are used in this guide
Getting Help
Support@enterasys.com
Getting Help Xxxviii About This Guide
Introduction
Switch Management Methods
SecureStack C3 CLI Overview
Factory Default Settings
Default Settings for Basic Switch Operation
Feature Default Setting
Default Settings for Router Operation
Sntp
Dvmrp
Connecting Using the Console Port
Using the Command Line Interface
Starting a CLI Session
Connecting Using Telnet
Using a Default User Account
Using an Administratively Configured User Account
Logging
Navigating the Command Line Interface
CLI Command Defaults Descriptions
CLI Command Modes
Getting Help with CLI Syntax
Abbreviating and Completing Commands
Displaying Scrolling Screens
Basic Line Editing Commands
Basic Line Editing Commands
Configuring Switches in a Stack
About SecureStack C3 Switch Operation in a Stack
Installing a New Stackable System of Up to Eight Units
Creating a Virtual Switch Configuration
Installing Previously-Configured Systems in a Stack
Adding a New Unit to an Existing Stack
SID
Considerations About Using Clear Config in a Stack
Issues Related to Mixed Type Stacks
Feature Support
Configuration
Stacking Configuration and Management Commands
Show switch
Commands
Purpose
Show switch switchtype
Examples
Show switch stack-ports
None
Set switch
Switch command, read‐write
Example
Priority value
Set switch copy-fw
Set switch description
This example shows how to assign priority 3 to switch
This example shows how to renumber switch 5 to switch
Set switch movemanagement
Set switch member
Clear switch member
Use this command to remove a member entry from the stack
Quick Start Setup Commands
Basic Configuration
Required CLI Setup Commands
Setting User Accounts and Passwords
Optional CLI Setup Commands
Show system login Output Details
Show system login
Parameters
Set system login
Clear system login
Use this command to remove a local login user account
Super‐user read‐write read‐only
This example shows how to remove the netops user account
Set password
Switch command, read‐write Switch command, super‐user
Set system password length
Set system password aging
Disable
Set system password history
Show system lockout
Set system lockout
Show system lockout Output Details
Attempts attempts
Time time
Setting Basic Switch Properties
Show ip address
Set ip address
Use this command to clear the system IP address
Clear ip address
Show ip protocol
This example shows how to clear the system IP address
Set ip protocol
This example shows how to display system information
Show system
Show system hardware
Show system Output Details
Show system utilization
Slot Hardware Information
Set system utilization
Default threshold value is 80%
This example sets the CPU utilization threshold to 75%
Clear system utilization
Show system enhancedbuffermode
Set system temperature
Enable disable Enables or disables enhanced buffer mode
This example shows how to enable enhanced buffer mode
Set system enhancedbuffermode
Clear system temperature
Syslog enable
Disable
Trap enable disable
Show time
Set time
Use this command to display daylight savings time settings
This example shows how to set the system clock to 750 a.m
Show summertime
Set summertime
Set summertime date
If a zone name is not specified, none will be applied
If an offset is not specified, none will be applied
Set summertime recurring
Use this command to modify the command prompt
This example shows how to set the command prompt to Switch
Clear summertime
Set prompt
Show banner motd
Set banner motd
Clear banner motd
Show version
‐5 provides an explanation of the command output
Use this command to configure a name for the system
Set system name
Show version Output Details
Use this command to identify the location of the system
This example shows how to set the system location string
Set system location
Set system contact
This example shows how to set the system contact string
This example shows how to set the terminal columns to
Set width
Set length
This example shows how to set the terminal length to
This example shows how to display the CLI logout setting
Show logout
Set logout
Use this command to display console settings
This example shows how to display all console settings
Use this command to set the console port baud rate
Show console
This example shows how to set the console port baud rate to
Downloading a Firmware Image
Downloading from a Tftp Server
Downloading via the Serial Port
Type 2. The following baud rate selection screen displays
Reverting to a Previous Image
Show boot system
Reviewing and Selecting a Boot Firmware Image
Reboot the system using the reset command page 3‐50
Set boot system
Compatibility platform specific
Starting and Configuring Telnet
This example shows how to display Telnet status
Use this command to enable or disable Telnet on the switch
Show telnet
Enable disable
Telnet
Inbound
Outbound all
Managing Switch Configuration and Files
Configuration Persistence Mode
Show snmp persistmode
Set snmp persistmode
Save config
Dir
Auto
Manual
Use this command to display the contents of a file
Show file
Show config
All
Configure
Outfile
Append
Copy
Systemimage
This example shows how to download an image via Tftp
Show tftp settings
Delete
Set tftp timeout
Clear tftp timeout
This example shows the output of this command
This example sets the timeout period to 4 seconds
Clear tftp retry
Set tftp retry
This example sets the retry count to
This example shows how to clear the CLI screen
Clearing and Closing the CLI
Cls clear screen
To clear the CLI screen or to close your CLI session
Resetting the Switch
Reset
Use either of these commands to leave a CLI session
This example shows how to exit a CLI session
Clear config
If no unit ID is specified, the entire system will be reset
This example shows how to reset the system
This example shows how to reset unit
Use this command to display WebView status
Using and Configuring WebView
Show webview
Set webview
Show ssl
This example shows how to enable SSL
This example shows how to display SSL status
Set ssl
Command
Gathering Technical Support Information
Show support
To gather common technical support information
Configuring Hostprotect
Hostprotect is enabled by default
Show system hostprotect
Set system hostprotect
This feature is disabled by default
This example disables hostprotect
Default state is enabled
Clear system hostprotect
Usage
Licensing Procedure in a Stack Environment
Activating Licensed Features
License Key Field Descriptions
Clearing, Showing, and Applying Licenses
Adding a New Member to a Licensed Stack
Set license
Usage
Use this command to clear the license key settings
FeatureID feature The name of the feature being cleared
Show license
Clear license
C3rw-clear license featureId advrouter
Clear license Activating Licensed Features
Configuring System Power and PoE
Commands
Show inlinepower
Use this command to display system power properties
This example shows how to display system power properties
Set inlinepower threshold
Show inlinepower Output Details
Set inlinepower detectionmode
Set inlinepower trap
Sending of traps is disabled by default
Show port inlinepower
Ieee
Set port inlinepower
Admin off auto
Priority critical
High low
Set port inlinepower Configuring System Power and PoE
Discovery Protocol Configuration
Configuring CDP
Show cdp
Show cdp Output Details
Enable
Auto disable
Set cdp state
Set cdp auth
Use this command to set a global CDP authentication code
Set cdp interval
Set cdp hold-time
Clear cdp
Show neighbors
Configuring Cisco Discovery Protocol
Show ciscodp
‐2 provides an explanation of the command output
‐3 provides an explanation of the command output
Show ciscodp port info
Show ciscodp Output Details
Set ciscodp timer
This example shows how to globally enable CiscoDP
Set ciscodp status
Show ciscodp port info Output Details
Set ciscodp holdtime
Set ciscodp port
Vvid
Dot1p
Untagged
Trusted
Clear ciscodp
To review and configure Llpd and LLPD‐MED
Configuring Link Layer Discovery Protocol and LLDP-MED
Overview
Configuration Tasks
Use this command to display Lldp configuration information
Show lldp
Show lldp port status
Show lldp port trap
Show lldp port location-info
Show lldp port tx-tlv
Show lldp port tx‐tlv port‐string
Show lldp port local-info
Show lldp port local-info Output Details
1000BASE-TFD
ECS Elin
Show lldp port remote-info
Voice‐signaling
Guest‐voice‐signaling
Show lldp port network-policy
Voice
Video‐signaling
Set lldp tx-interval
Softphone‐voice
Video‐conferencing
Set lldp trap-interval
Set lldp hold-multiplier
This example sets the transmit interval to 20 seconds
Set lldp med-fast-repeat
Tx‐enable
Rx‐enable
Set lldp port status
Set lldp port trap
Set lldp port location-info
Set lldp port med-trap
Elin
Set lldp port tx-tlv
Gvrp
Mac‐phy
Poe
Link‐aggr
State enable disable
Set lldp port network-policy
Tag tagged untagged
Vid vlan‐id dot1p
Clear lldp
Tx‐interval
Hold‐multiplier
Trap‐interval
Clear lldp port status
Clear lldp port trap
Clear lldp port location-info
Clear lldp port med-trap
Cleared
Clear lldp port network-policy
Tag
Vid
Dscp
Clear lldp port tx-tlv
Disables the LLDP‐MED Location Identification TLV from being
Disables the LLDP‐MED Extended Power via MDI TLV from being
Port Configuration
Port Configuration Summary
Port String Syntax Used in the CLI
Port type.unitorslot number.port number
Reviewing Port Status
Port Slot/Unit Parameters Used in the CLI
Show port
Show port status
Show port counters
Switch mib2
Show port status Output Details
Show port counters Output Details
Show port cablestatus
Clear port counters
This example clears the port counters for ge.3.1
This example shows the cable status for 1 GE port ge.1.31
Disabling / Enabling and Naming Ports
Show port cablestatus Output Details
Set port disable
Set port enable
This example shows how to disable ge.1.1
This example shows how to enable ge.1.3
Show port alias
Use this command to assign an alias name to a port
Set port alias
This example shows how to assign the alias Admin to ge.3.3
This example shows how to clear the alias for ge.3.3
Setting Speed and Duplex Mode
Show port speed
Set port speed
Show port duplex
10 100
Mbps
Set port duplex
This example shows how to set ge.1.17 to full duplex
Full half
Enabling / Disabling Jumbo Frame Support
Show port jumbo
Set port jumbo
Enables or disables jumbo frame support
Clear port jumbo
Setting Auto-Negotiation and Advertised Ability
Show port negotiation
Set port negotiation
Enable disable
Show port advertise
Set port advertise
Clear port advertise
Show port mdix
Set port mdix
Forced‐auto
Mdi
Configure ports to use Mdix mode only
Configure ports to use MDI mode only
Optional Specify the port or ports to configure
Show flowcontrol
Setting Flow Control
Set flowcontrol
This example shows how to enable flow control
Setting Port Link Traps and Link Flap Detection
Show port trap
Set port trap
Following example disables sending trap on ge.3.1
Show linkflap
Globalstate
Portstate
Parameters
Metrics
Show linkflap parameters Output Details
Show linkflap metrics Output Details
Disable enable
Disables or enables the link flap detection function
Set linkflap globalstate
Set linkflap portstate
Set linkflap interval
Set linkflap action
Clear linkflap action
Use this command to set the link flap action trigger count
Set linkflap threshold
Set linkflap downtime
Clear linkflap down
Clear linkflap
All stats
Parameter
Threshold interval
Configuring Broadcast Suppression
Show port broadcast
Set port broadcast
Clear port broadcast
Syntax Used in the CLI on page 7‐1
Port Mirroring
Mirroring Features
Remote Port Mirroring
Procedures
Configuring Smon MIB Port Mirroring
Overview
To review and configure port mirroring on the device
Show port mirroring
Can be configured per stack, if applicable
Create disable
Set port mirroring
Clear port mirroring
Use this command to clear a port mirroring relationship
Set mirror vlan
Clear mirror vlan
Link Aggregation Control Protocol Lacp
Lacp Operation
‐6 defines key terminology used in Lacp configuration
Lacp Terminology
SecureStack C3 Usage Considerations
Lacp Terms and Definitions
Commands
‐7 provides an explanation of the command output
Show lacp
Disable enable Disables or enables Lacp
This example shows how to disable Lacp
Set lacp
Show lacp Output Details
Set lacp asyspri
Set lacp aadminkey
Asyspri
Clear lacp
Disable enable Disables or enables static link aggregation
Set lacp static
Clear lacp static
Set lacp singleportlag
This example enables the formation of single port LAGs
Clear lacp singleportlag
Status detail
Show port lacp
Summary Counters
Aadminkey
Set port lacp
Aadminstate
Lacptimeout
Padminkey
Padminport
Clear port lacp
C3su-clear port lacp port ge.3.16
Set port protected
Configuring Protected Ports
Protected Port Operation
Clear port protected
Show port protected
Read‐only
Set port protected name
Show port protected name
Use this command to clear the name of a protected group
Clear port protected name
Clear port protected name Port Configuration
Snmp Configuration
Snmp Configuration Summary
SNMPv3
SNMPv1 and SNMPv2c
About Snmp Security Models and Levels
Using Snmp Contexts to Access Specific MIBs
Configuration Considerations
Reviewing Snmp Statistics
Snmp Security Levels
Show snmp engineid
This example shows how to display Snmp engine properties
Show snmp engineid Output Details
This example shows how to display Snmp counter values
Use this command to display Snmp traffic counter values
Show snmp counters
Show snmp counters Output Details
Engine or otherwise unavailable
Configuring Snmp Users, Groups, and Communities
Show snmp user
This example shows how to display an Snmp user list
‐4 provides an explanation of the command output
Use this command to create a new SNMPv3 user
Set snmp user
Aes
Sha
Volatile
Nonvolatile
Show snmp group
Clear snmp user
Remote remote
Set snmp group
User user
Security‐model
V2c usm Volatile
Show snmp community
Clear snmp group
V2c usm
Use this command to configure an Snmp community group
Set snmp community
Securityname
Context context
Configuring Snmp Access Rights
Use this command to delete an Snmp community name
This example shows how to delete the community name vip
Clear snmp community
Show snmp access
Noauthentication
Authentication Privacy Context context
Nonvolatile read‐ Only
‐6 provides an explanation of the command output
This example shows how to display Snmp access information
Show snmp access Output Details
Set snmp access
Clear snmp access
Configuring Snmp MIB Views
Show snmp view
Set snmp view
Show snmp context
Show snmp view Output Details
Clear snmp view
Configuring Snmp Target Parameters
Show snmp targetparams
Volatile nonvolatile
Read‐only
‐8 provides an explanation of the command output
Set snmp targetparams
Show snmp targetparams Output Details
Message‐
Authentication
Clear snmp targetparams
Privacy
Protected from disclosure
Use this command to display Snmp target address information
Configuring Snmp Target Addresses
Show snmp targetaddr
Timeout timeout
Set snmp targetaddr
Param param
Udpport udpport
Use this command to delete an Snmp target address entry
Clear snmp targetaddr
Taglist taglist
Tag 1 tag
Configuring Snmp Notification Parameters
About Snmp Notify Filters
Show newaddrtrap
By default, this function is disabled globally and per port
Set newaddrtrap
Show snmp notify
‐10 provides an explanation of the command output
Set snmp notify
10 show snmp notify Output Details
Trap inform
Clear snmp notify
Use this command to clear an Snmp notify configuration
Show snmp notifyfilter
Set snmp notifyfilter
Subtree oid‐or‐
Clear snmp notifyfilter
Set snmp notifyprofile
Show snmp notifyprofile
Targetparam
This example shows how to delete Snmp notify profile area51
Creating a Basic Snmp Trap Configuration
Clear snmp notifyprofile
11 Basic Snmp Trap Configuration
Example
How Snmp Will Use This Configuration
Configuring the Snmp Management Interface
Show snmp interface
Set snmp interface
Loopback loop‐ID
Clear snmp interface
Clear snmp interface Snmp Configuration
Spanning Tree Configuration
Spanning Tree Configuration Summary
Spanning Tree Features
Loop Protect
Configuring Spanning Tree Bridge Parameters
For information about
Sid sid
Show spantree stats
Active
‐1 shows a detailed explanation of command output
Show spantree Output Details
Set spantree
Disable enable Globally disables or enables Spanning Tree
Show spantree version
Set spantree version
Clear spantree version
This example shows how to reset the Spanning Tree version
Show spantree bpdu-forwarding
Disable enable Disables or enables Bpdu forwarding
By default Bpdu forwarding is disabled
This example shows how to enable Bpdu forwarding
Set spantree bpdu-forwarding
Set spantree bridgeprioritymode
Clear spantree bridgeprioritymode
8021d
8021t
Set spantree msti
Show spantree mstilist
Create delete
Show spantree mstmap
Clear spantree msti
Fid fid
This example shows how to map FID 3 to SID
Use this command to map a FID back to SID
Set spantree mstmap
Clear spantree mstmap
Show spantree vlanlist
This example shows how to map FID 2 back to SID
Show spantree mstcfgid
Set spantree mstcfgid
Cfgname name Specifies an MST configuration name
Clear spantree mstcfgid
Set spantree priority
Use this command to set the device’s Spanning Tree priority
Clear spantree priority
Set spantree hello
This example shows how to reset the bridge priority on SID
Clear spantree hello
Use this command to set the bridge maximum aging time
Set spantree maxage
Use this command to set the Spanning Tree forward delay
Set spantree fwddelay
Clear spantree maxage
Clear spantree fwddelay
Show spantree backuproot
Set spantree backuproot
Clear spantree backuproot
Show spantree tctrapsuppress
Set spantree tctrapsuppress
Clear spantree tctrapsuppress
Set spantree protomigration
Show spantree spanguard
Enable disable Enables or disables the SpanGuard function
Set spantree spanguard
This example shows how to enable the SpanGuard function
Clear spantree spanguard
Show spantree spanguardtimeout
Set spantree spanguardtimeout
Clear spantree spanguardtimeout
Show spantree spanguardlock
This example shows how to unlock port ge.1.16
Show spantree spanguardtrapenable
Clear / set spantree spanguardlock
Clear spantree spanguardtrapenable
Set spantree spanguardtrapenable
Is enabled
Show spantree legacypathcost
Set spantree legacypathcost
Clear spantree legacypathcost
Show spantree autoedge
Set spantree autoedge
This example clears the legacy path cost to 802.1t values
Clear spantree autoedge
Configuring Spanning Tree Port Parameters
Set spantree portadmin
Disable enable
To display and set Spanning Tree port parameters
Show spantree portadmin
Clear spantree portadmin
This example shows how to disable Spanning Tree on ge.1.5
Show spantree portpri
Use this command to set a port’s Spanning Tree priority
Set spantree portpri
Clear spantree portpri
Show spantree adminpathcost
Set spantree adminpathcost
Clear spantree adminpathcost
Show spantree adminedge
Set spantree adminedge
Clear spantree adminedge
This example shows how to set ge.1.11 as an edge port
True false
This example shows how to reset ge.1.11 as a non‐edge port
Show spantree operedge
Configuring Spanning Tree Loop Protect Parameters
This example shows how to enable Loop Protect on ge.2.3
Set spantree lp
Show spantree lp
If no SID is specified, SID 0 is assumed
Clear spantree lp
Show spantree lplock
Clear spantree lplock
SID Locked
Set spantree lpcapablepartner
Show spantree lpcapablepartner
Clear spantree lpcapablepartner
Use this command to set the Loop Protect event threshold
Set spantree lpthreshold
Show spantree lpthreshold
None. The default event threshold is
Clear spantree lpthreshold
Set spantree lpwindow
Show spantree lpwindow
Disabled
Set spantree lptrapenable
Clear spantree lpwindow
Show spantree lptrapenable
Clear spantree lptrapenable
Set spantree disputedbpduthreshold
Show spantree disputedbpduthreshold
Clear spantree disputedbpduthreshold
Show spantree nonforwardingreason
802.1Q Vlan Configuration
Vlan Configuration Summary
Command Set for Creating a Secure Management Vlan
Creating a Secure Management Vlan
Viewing VLANs
Show vlan
Static
Portinfo
Show vlan Output Details
Vlan Vlan ID Name
Create enable Creates, enables or disables VLANs. disable
This example shows how to create Vlan
Creating and Naming Static VLANs
Set vlan
Set vlan name
This example shows how to set the name for Vlan 7 to green
Clear vlan
This example shows how to clear the name for Vlan
Clear vlan name
Assigning Port Vlan IDs PVIDs and Ingress Filtering
Show port vlan
Set port vlan
Clear port vlan
Modify‐egress
No‐modify‐egress
Show port ingress filter
Set port ingress filter
Show port discard
Set port discard
Tagged untagged both none
Configuring the Vlan Egress List
Show port egress
Set vlan forbidden
Use this command to remove ports from a VLAN’s egress list
Set vlan egress
Clear vlan egress
Untagged forbidden tagged
Show vlan dynamicegress
Forbidden
This example shows how to enable dynamic egress on Vlan
Enable disable Enables or disables dynamic egress
Set vlan dynamicegress
Show host vlan
Setting the Host Vlan
Set host vlan
This example shows how to set Vlan 7 as the host Vlan
Clear host vlan
About Garp Vlan Registration Protocol Gvrp
Enabling/Disabling Gvrp Garp Vlan Registration Protocol
How It Works
Example of Vlan Propagation via Gvrp
Use this command to display Gvrp configuration information
Show garp timer
Show gvrp
Disables or enables Gvrp on the device
Show gvrp configuration Output Details
Set gvrp
This example shows how to enable Gvrp on ge.1.3
Set garp timer
Clear gvrp
Clear garp timer
Leaveall timer‐
Join
Leave
C3su-clear garp timer leave ge.1.1
Policy Classification Configuration
Policy Classification Configuration Summary
Configuring Policy Profiles
Use this command to display policy profile information
Show policy profile
‐verbose
Show policy profile Output Details
Set policy profile
This example shows how to delete policy profile
Use this command to delete a policy profile entry
Clear policy profile
All admin‐ profile profile‐ index
Configuring Classification Rules
Show policy rule
Not‐in‐service Not‐ready Storage‐type non‐
Admin‐pid
Tcpsourceport
Udpdestport
Show policy capability
Show policy rule Output Details
Vlan
Set policy rule
Admin‐profile
Vlantag data
Ether
Ipproto
Ipdestsocket
Ipsourcesocket
Valid Values for Policy Classification Rules
Data value Mask bits
Following parameters apply to deleting an admin rule
Clear policy rule
Range from 1 to 4094 or 0xFFF
All‐pid‐entries
Use this command to remove all policy classification rules
Clear policy all-rules
Use this command to assign ports to a policy profile
Assigning Ports to Policy Profiles
Set policy port
To assign and unassign ports to policy profiles
Clear policy port
About Policy-Based CoS Configurations
Configuring Policy Class of Service CoS
Procedure 11-1 User-Defined CoS Configuration
Configuring Policy Class of Service CoS
Procedure
About CoS-Based Flood Control
Use this command to enable or disable Class of Service
Set cos state
Show cos state
This example shows how to enable Class of Service
Clear cos state
Set cos settings
Priority priority
Tos‐value tos‐value
Irl‐reference
Clear cos settings
Show cos settings
Priority
Tos‐value
Set cos port-config
Show cos port-config
Should be displayed
Clear cos port-config
Entry
Name
Ports
Set cos port-resource irl
Set cos port-resource flood-ctrl
Group#.port‐type
Unicast
Multicast
Show cos port-resource
Group#.port‐type
Clear cos port-resource irl
Unit
Rate
Type
Clear cos port-resource flood-ctrl
Set cos reference
Unicast
Multicast
Specifies that an IRL reference is being configured
Show cos reference
IRL reference number associated with this entry
Rate‐limit irl‐index
Clear cos reference
Show cos unit
Port‐typ e index
Kbps
Pps
Clear cos all-entries
Show cos port-type
This example shows flood control information for port type
Port Priority Configuration
Port Priority Configuration Summary
Configuring Port Priority
Show port priority
Set port priority
Clear port priority
Configuring Priority to Transmit Queue Mapping
Show port priority-queue
Set port priority-queue
Clear port priority-queue
Configuring Quality of Service QoS
Show port txq
Set port txq
By default, transmit queues are defined as follows
Clear port txq
Clear port txq Port Priority Configuration
Igmp Overview
Igmp Configuration
About IP Multicast Group Management
To configure Igmp snooping from the switch CLI
Configuring Igmp at Layer
About Multicasting
Set igmpsnooping adminmode
Use this command to display Igmp snooping information
This example shows how to display Igmp snooping information
Use this command to enable or disable Igmp on the system
This example shows how to enable Igmp on the system
Enable disable Enables or disables Igmp
This example shows how to enable Igmp on port ge.1.10
Set igmpsnooping interfacemode
Set igmpsnooping maxresponse
Set igmpsnooping mcrtrexpiretime
Set igmpsnooping add-static
Modify
If no ports are specified, all ports are added to the entry
Show igmpsnooping static
Set igmpsnooping remove-static
If modify is not specified, a new entry is created
Show igmpsnooping mfdb
Group group
This example displays the static Igmp ports for Vlan
Stats Optional Displays Mfdb statistics
This example shows how to clear all Igmp snooping entries
Use this command to clear all Igmp snooping entries
Clear igmpsnooping
Configuring Igmp on Routing Interfaces
To configure Igmp on routing interfaces
Global configuration C3su‐routerConfig#
Ip igmp
Ip igmp enable
This example shows how to enable Igmp on the router
Interface configuration C3su‐routerConfig‐ifVlan 1#
Ip igmp version
Any router mode
Show ip igmp interface
Show ip igmp groups
Ip igmp query-interval
Ip igmp query-max-response-time
Ip igmp startup-query-interval
Ip igmp startup-query-count
Ip igmp last-member-query-interval
Ip igmp last-member-query-count
Ip igmp robustness
Interface configuration C3 su‐routerConfig‐ifVlan 1#
Ip igmp robustness Igmp Configuration
Configuring System Logging
Logging and Network Management
Show logging server
Set logging server
Show logging default
Clear logging server
Set logging default
Use this command to set logging default values
Clear logging default
Show logging application
Facility
Severity
Set logging application
Show logging application Output Details
Level level
If level is not specified, none will be applied
Clear logging application
Show logging local
Set logging local
Clear logging local
Show logging buffer
This example shows how to clear local logging
Show logging interface
Set logging interface
Clear logging interface
Monitoring Network Events and Status
History
Use this command to set the size of the history buffer
Default
Show history
Set history
Show users
Ping
This example, the host at IP address is not responding
Show netstat
Disconnect
Console
Following table describes the output of this command
Following example shows the output of this command
Show netstat Output Details
Use this command to display the switch’s ARP table
Managing Switch Network Addresses and Routes
Show arp
Set arp
This example shows how to display the ARP table
Show arp Output Details
Clear arp
Traceroute
Show mac
Each response
Type other learned
Self mgmt
Show mac agetime
Show mac Output Details
This example shows how to display the MAC timeout period
This example shows how to set the MAC timeout period
Set mac agetime
Clear mac agetime
Set mac algorithm
Default MAC algorithm is mac‐crc16‐upperbits
Show mac algorithm
Clear mac algorithm
Set mac multicast
Clear mac address
Use this command to remove a multicast MAC address
Append clear
Show mac unreserved-flood
Set mac unreserved-flood
Configuring Simple Network Time Protocol Sntp
This example enables multicast flood protection
Use this command to display Sntp client settings
Show sntp
This example shows how to display Sntp client settings
Show sntp Output Details
Set sntp client
Clear sntp client
Clear sntp server
Set sntp server
If precedence is not specified, 1 will be applied
Set sntp poll-interval
Clear sntp poll-interval
Set sntp poll-retry
This example shows how to clear the Sntp poll interval
Clear sntp poll-retry
Set sntp poll-timeout
Clear sntp poll-timeout
Use this command to clear the Sntp poll timeout
This example shows how to clear the Sntp poll timeout
Set timezone
Show sntp interface
Set sntp interface
Clear sntp interface
C3rw-show sntp interface Vlan 100 C3rw-clear sntp interface
Configuring Node Aliases
Show nodealias config
Set nodealias
Show nodealias config Output Details
Maxentries maxentries
Clear nodealias config
Rmon Monitoring Group Functions and Commands
Rmon Configuration
Rmon Monitoring Group Functions
Group What It Does What It Monitors CLI Commands
Design Considerations
Statistics Group Commands
To display, configure, and clear Rmon statistics
Show rmon stats
Use this command to configure an Rmon statistics entry
Set rmon stats
To‐defaults
This example shows how to delete Rmon statistics entry
Clear rmon stats
If owner is not specified, monitor will be applied
History Group Commands
Show rmon history
Set rmon history
Clear rmon history
Buckets buckets
Interval interval
This example shows how to delete Rmon history entry
Show rmon alarm
Alarm Group Commands
This example shows how to display Rmon alarm entry
Set rmon alarm properties
Show rmon alarm Output Details
Object object
Type absolute
Set rmon alarm status
Clear rmon alarm
Enable
This example shows how to enable Rmon alarm entry
Use this command to delete an Rmon alarm entry
Event Group Commands
Use this command to display Rmon event entry properties
This example shows how to display Rmon event entry
Show rmon event
Set rmon event properties
Description
Type none log
Trap both
Set rmon event status
This example shows how to enable Rmon event entry
Clear rmon event
This example shows how to clear Rmon event
Filter Group Commands
Show rmon channel
Use this command to configure an Rmon channel entry
Set rmon channel
Accept matched
Failed
Clear rmon channel
Show rmon filter
Index index
Channel channel
Set rmon filter
This example shows how to clear Rmon filter entry
Use this command to clear an Rmon filter entry
Clear rmon filter
Show rmon capture
Packet Capture Commands
Nodata
Set rmon capture
Action lock
Slice slice
Loadsize loadsize
This example shows how to clear Rmon capture entry
Use this command to clears an Rmon capture entry
Clear rmon capture
Dhcp Server Configuration
Dhcp Overview
Dhcp Relay Agent
Dhcp Server
Configuring a Dhcp Server
Configuring General Dhcp Server Parameters
This example enables Dhcp server functionality
Set dhcp bootp
Set dhcp
This example enables address allocation for Bootp clients
This example enables Dhcp conflict logging
Set dhcp conflict logging
Show dhcp conflict
Logging Disables conflict logging
This example disables Dhcp conflict logging
Clear dhcp conflict
Clears the conflict information for all IP addresses
Set dhcp exclude
100, with the set dhcp exclude command
Clear dhcp exclude
Clear dhcp ping
Set dhcp ping
This example sets the number of ping packets sent to
Show dhcp binding
Clear dhcp binding
Use this command to display Dhcp server statistics
Use this command to clear all Dhcp server counters
Show dhcp server statistics
Clear dhcp server statistics
This example clears all Dhcp server counters
Configuring IP Address Pools
Manual Pool Configuration Considerations
Set dhcp pool
This example creates an address pool named auto1
Use this command to delete a Dhcp server pool of addresses
Clear dhcp pool
Set dhcp pool network
This example deletes the address pool named auto1
Clear dhcp pool network
Set dhcp pool hardware-address
Set dhcp pool host
Clear dhcp pool hardware-address
If no type is specified, Ethernet is assumed
Clear dhcp pool host
Set dhcp pool client-identifier
Clear dhcp pool client-identifier
Set dhcp pool client-name
Clear dhcp pool client-name
Set dhcp pool bootfile
Clear dhcp pool bootfile
Set dhcp pool next-server
Clear dhcp pool next-server
Clear dhcp pool lease
Set dhcp pool lease
Infinite
Set dhcp pool default-router
Clear dhcp pool default-router
Set dhcp pool dns-server
Clear dhcp pool dns-server
Set dhcp pool domain-name
Clear dhcp pool domain-name
Set dhcp pool netbios-name-server
Clear dhcp pool netbios-name-server
Clear dhcp pool netbios-node-type
Set dhcp pool netbios-node-type
‐node
Set dhcp pool option
Ascii string
Clear dhcp pool option
Show dhcp pool configuration
This example removes option 19 from address pool auto1
Show dhcp pool configuration
Dhcp Snooping Overview
Dhcp Snooping Dynamic ARP Inspection
Dhcp Message Processing
Building and Maintaining the Database
Basic Configuration
Configuration Notes
Procedure 17-1 Basic Configuration for Dhcp Snooping
Rate Limiting
Disabled globally
Dhcp Snooping Commands
Set dhcpsnooping
Set dhcpsnooping database write-delay
Set dhcpsnooping vlan
By default, ports are untrusted
Set dhcpsnooping trust
Set dhcpsnooping binding
This example configures port ge.1.1 as a trusted port
Set dhcpsnooping verify
Set dhcpsnooping log-invalid
Source MAC address verification is enabled by default
Against the client hardware address
Set dhcpsnooping limit
None
Rate pps
Burst interval secs
This example configures rate limit parameters on port ge.1.1
Show dhcpsnooping database
Show dhcpsnooping port
Dynamic static
Show dhcpsnooping binding
Entry, either dynamic or static
Show dhcpsnooping statistics
Clear dhcpsnooping statistics
Clear dhcpsnooping binding
Clear dhcpsnooping database
Write‐delay
Default value of 300 seconds
Clear dhcpsnooping limit
Dynamic ARP Inspection Overview
Static Mappings
Functional Description
Optional ARP Packet Validation
Logging Invalid Packets
Packet Forwarding
Rate Limiting
Eligible Interfaces
Procedure 17-2 Basic Dynamic ARP Inspection Configuration
Step Task Commands
Router Configuration
Example Configuration
Vlan Configuration
Dynamic ARP Inspection Commands
Set arpinspection vlan
Dhcp Snooping Configuration
Dynamic ARP Inspection Configuration
Set arpinspection trust
Logging is disabled by default
By default, all physical ports and LAGs are untrusted
Logging
Src‐mac
Set arpinspection validate
Dst‐mac
Set arpinspection limit
Set arpinspection filter
Show arpinspection access-list
Permit
Mac host
Show arpinspection ports
This example displays the ARP configuration of lag.0.1
Show arpinspection vlan
Show arpinspection statistics
With an invalid address
Clear arpinspection validate
This example removes all 3 additional validation conditions
Clear arpinspection vlan
Clear arpinspection filter
Clear arpinspection limit
This example removes the ARP ACL named staticARP from Vlan
Clear arpinspection statistics
This example clears all DAI statistics from the switch
Page
Preparing for Router Mode
Pre-Routing Configuration Tasks
Enabling the Switch for Routing
Enabling Router Configuration Modes
Router CLI Configuration Modes
Router CLI Configuration Modes
Page
IP Configuration
Configuring Routing Interface Settings
Show interface
Vlan vlan ‐id
Use this command to configure interfaces for IP routing
Router global configuration mode C3su‐routerConfig#
Interface
Vlan vlan‐ id
This example shows how to enter configuration mode for Vlan
Show ip interface
Router interface configuration C3su‐routerConfig‐ifVlan 1#
Ip address
Show ip interface Output Details
Secondary
Show running-config
No shutdown
This example shows how to enable Vlan 1 for IP routing
No ip routing
Use this command to configure a tunnel interface
Configuring Tunnel Interfaces
Interface tunnel
Router interface configuration C3su‐routerConfig‐ifTnnl 1#
This example creates a configured tunnel interface
Tunnel source
Tunnel mode
This command specifies the mode of the tunnel interface
Ipv6ip Specifies that the tunnel mode is IPv6 over IPv4
No form of this command removes the mode of the tunnel
This example sets the tunnel mode to IPv6 over IPv4
Show interface tunnel
Reviewing and Configuring the ARP Table
Show ip arp
Arp
This example shows how to use the show ip arp command
Show ip arp Output Details
This example shows how to enable proxy ARP on Vlan
Ip proxy-arp
Arp timeout
Clear arp-cache
14,400 seconds
Privileged Exec C3su‐router#
Interface configuration C3su‐Router1Config‐ifVlan 1#
Configuring Broadcast Settings
Ip directed-broadcast
Ip forward-protocol
Udp
Specifies UDP as the IP forwarding protocol
Are forwarded
Ip helper-address
Reviewing IP Traffic and Configuring Routes
Show ip route
OSPF, IA
Ping
Ip route
Preference in route selection
There is also a traceroute command available in switch mode
This command is also available in switch mode
Traceroute
Configuring Icmp Redirects
Ip icmp redirect enable
Show ip icmp redirect
Interface
IPv4 Routing Protocol Configuration
Activating Advanced Routing Features
Configuring RIP
RIP Configuration Task List and Commands
RIP Configuration Task List and Commands
Router rip
This example shows how to enable RIP
Ip rip enable
Distance
Ip rip send version
R1compatible
Ip rip authentication-key
Specifies RIP version 1. This is the default setting
Ip rip receive version
Specifies RIP version
Ip rip message-digest-key
Md5
Use this command to disable automatic route summarization
Router configuration C3su‐routerConfig‐router#
No auto-summary
Split-horizon poison
Passive-interface
Receive-interface
Redistribute
Connected
Ospf
Command detailed in ip route on page 19‐21
Protocol
Subnets
Subnetted will be redistributed
Configuring Ospf
Ospf Configuration Task List and Commands
Ospf Configuration Task List and Commands
Advanced License Required
Router id
Routes
Router ospf
This example shows how to enable routing for Ospf process
1583compatibility
This example shows how to enable RFC 1583 compatibility
Ip ospf enable
Ip ospf areaid
Ip ospf cost
Ip ospf priority
Timers spf
Ip ospf transmit-delay
Ip ospf retransmit-interval
Ip ospf dead-interval
Ip ospf hello-interval
65535
Ip ospf authentication-key
Ip ospf message digest key md5
Distance ospf
Area range
External inter‐
Area intra‐area
Intra‐area routes
If not specified, advertise mode will be set
Area stub
Advertise no‐
Advertise
Area default cost
Area nssa
Default‐
This example shows how to configure area 10 as an Nssa area
Area virtual-link
Information‐
Authentication‐
Transmit‐delay
Key key
Dead‐interval
Rip
Show ip ospf
Metric‐type type
Use this command to display the Ospf link state database
This example shows how to display Ospf information
Show ip ospf database
Show ip ospf interface
Show ip ospf database Output Details
Show ip ospf interface Output Details
Show ip ospf neighbor
Show ip ospf neighbor Output Details
Clear ip ospf process
Show ip ospf virtual-links
Show ip ospf virtual links Output Details
This example shows how to reset Ospf process
Configuring Dvmrp
Enabling Dvmrp on an Interface
Ip dvmrp enable
Commands to Enable Dvmrp on an Interface
This example shows how to enable the Dvmrp process
Ip dvmrp
Ip dvmrp metric
Use this command to display Dvmrp routing information
Show ip dvmrp
This example shows how to display Dvmrp status information
Configuring Irdp
Ip irdp enable
Ip irdp maxadvertinterval
Ip irdp minadvertinterval
Ip irdp preference
Ip irdp holdtime
9000
Ip irdp broadcast
Use this command to display Irdp information
Show ip irdp
Configuration Tasks on page 18‐1
Configuring Vrrp
Router vrrp
This example shows how enable Vrrp configuration mode
Create
Address
Priority
Advertise-interval
Described in Pre‐Routing Configuration Tasks on page 18‐1
Preempt
Enable
Ip vrrp authentication-key
Use this command to display Vrrp routing information
This example shows how to display Vrrp information
Show ip vrrp
Configuring PIM-SM
Design Considerations
Global router configuration C3su‐routerConfig#
This example shows how to globally enable and disable PIM
Ip pimsm
Ip pimsm staticrp
Ip pimsm enable
Ip pimsm query-interval
This example shows how to display PIM information
Show ip pimsm
Show ip pimsm componenttable
This example shows how to display PIM router information
Show ip pimsm Output Details
This example shows how to display PIM interface information
Show ip pimsm interface
Show ip pimsm componenettable Output Details
Stats
This example shows how to display PIM interface statistics
Show ip pimsm neighbor
Show ip pimsm interface vlan Output Details
10 show ip pimsm interface stats Output Details
‐11 provides an explanation of the command output
Show ip pimsm rp
11 show ip pimsm neighbor Output Details
Candidate
Show ip pimsm rphash
‐12 provides an explanation of the command output
12 show ip pimsm rp Output Details
Show ip pimsm staticrp
‐13 provides an explanation of the command output
Display the PIM‐SM static Rendezvous Point information
Show ip mroute
Use this command to display the IP multicast routing table
13 show ip pimsm staticrp Output Details
20-60 IPv4 Routing Protocol Configuration
IPv6 Management
Show ipv6 status
This example shows how to enable IPv6 management
By default, IPv6 management is disabled
Set ipv6
Set ipv6 address
No global unicast IPv6 address is defined by default
Eui64
Show ipv6 address
Use this command to clear IPv6 global addresses
Clear ipv6 address
Set ipv6 gateway
Clear ipv6 gateway
Use this command to clear an IPv6 gateway address
Show ipv6 neighbors
Use this command to display IPv6 netstat information
This example shows example output of this command
Show ipv6 netstat
Ping ipv6
This command is also available in router mode
Size num
Traceroute ipv6
Traceroute ipv6 21-10 IPv6 Management
Overview
IPv6 Configuration
IPv6 Routing License Required
Default Conditions
Following table lists the default IPv6 conditions
Ipv6 forwarding
General Configuration Commands
Ipv6 hop-limit
Default maximum number of IPv6 hops is
This command configures static IPv6 routes
Ipv6 route
This example sets the hop limit to
Default preference or administrative distance is
Ipv6 route distance
This command sets the default distance value to
Ipv6 unicast-routing
Ping ipv6 interface
Link‐local‐address
Router privileged exec C3 su‐router#
20010db8123455551
Ipv6 address
Interface Configuration Commands
No IPv6 addresses are defined for any interface
Ipv6 enable
IPv6 is disabled
Ipv6 mtu
Bytes
This example sets the MTU value to 1500 bytes
Clear ipv6 neighbors
Neighbor Cache and Neighbor Discovery Commands
This example clears all dynamically learned cache entries
Ipv6 nd dad attempts
Duplicate address detection enabled, for 1 attempt
Ipv6 nd ns-interval
By default, a value of 0 is advertised in RA messages
Router interface configurationC3su‐routerConfig‐ifVlan 1#
Ipv6 nd reachable-time
This example sets the NS interval to 2 seconds
Ipv6 nd other-config-flag
Flag is set to false by default
Router interface configuration C3su‐routerConfig‐if Vlan 1#
This example sets the reachable time to 60 seconds
Ipv6 nd ra-interval
Ipv6 nd ra-lifetime
Suppression disabled
This example disables router advertisement transmission
Ipv6 nd suppress-ra
Ipv6 nd prefix
Router interface configurationC3su‐routerConfig‐if Vlan 1#
No‐autoconfig
Off‐link
Example
Query Commands
Show ipv6
Show ipv6 interface
Router privileged execution C3su‐router#
This example displays information about IPv6 interface Vlan
This command displays IPv6 Neighbor Cache information
This example displays the neighbors in the cache
This command displays the IPv6 routing table
Show ipv6 route
Show ipv6 neighbor Output Details
Interface interface
This example displays all active IPv6 routes
Show ipv6 route Output Details
Show ipv6 route preferences
Show ipv6 route preferences Output Details
Show ipv6 route summary
This command displays the summary of the routing table
Non‐best routes
Show ipv6 traffic
Following example displays the output of this command
Show ipv6 summary Output Details
Show ipv6 traffic Output Details
Options, etc
Counter would include datagrams counted
Send. Note that this counter includes all those counted by
Router privileged executionC3su‐router#
Clear ipv6 statistics
This example clears the statistics for Vlan
IPv6 Proxy Routing
Preparing a Mixed Stack for IPv6 Proxy Routing
Limitations
IPv6 proxy routing is disabled by default
Router global configuration C2su‐routerConfig#
This example enables IPv6 proxy routing
Ipv6 proxy-routing
Any routing mode
DHCPv6 Configuration
Global Configuration Commands
Ipv6 dhcp enable
Following table lists the default DHCPv6 conditions
This command enables DHCPv6 on the router
This example enables DHCPv6
By default, DHCPv6 is disabled
Ipv6 dhcp relay-agent-info-opt
Ipv6 dhcp relay-agent-info-remote-id-subopt
Ipv6 dhcp pool
Ipv6 dhcp pool
Address Pool Configuration Commands
Domain-name
Dns-server
Prefix-delegation
Preferred‐lifetime
Valid‐lifetime secs
Secs infinite
C3su-routerConfig-dhcp6s-pool# exit C3su-routerConfig#
By default, DHCPv6 functionality is disabled
Ipv6 dhcp server
Rapid‐commit
Preference pref
Ipv6 dhcp relay
Destination dest‐addr
Interface intf
Remote‐id duid‐ifid
Examples
DHCPv6 Show Commands
Show ipv6 dhcp
Show ipv6 dhcp interface
Statistics
Output of show ipv6 dhcp interface Command
This example displays the DHCPv6 statistics for Vlan
Output of show ipv6 dhcp statistics Command
This example displays the output of this command
Show ipv6 dhcp statistics
Clear ipv6 dhcp statistics
This example clears DHCPv6 statistics for Vlan
Show ipv6 dhcp pool
This command displays information about DHCPv6 bindings
Show ipv6 dhcp binding
If no IPv6 address is specified, all bindings are displayed
Show ipv6 dhcp binding DHCPv6 Configuration
OSPFv3 Configuration
Following table lists the default OSPFv3 conditions
Use this command to configure the OSPFv3 router ID
Global OSPFv3 Configuration Commands
Ipv6 router id
Default-information originate
Ipv6 router ospf
Always
Metric value
Default-metric
Router OSPFv3 configuration C3su‐routerConfig‐router#
No default metric is configured
Router OSPFv3 configuration C3su-routerConfig-router#
Exit-overflow-interval
Intra
Inter
Type1
This command configures the external Lsdb limit for OSPFv3
Default value is ‐1
External-lsdb-limit
This example sets the exit overflow interval to 10 seconds
Connected static
Maximum-paths
Tag tag
Metric = unspecified Metric type = Type Tag =
Area default-cost
Area Configuration Commands
These commands are used to configure area parameters
This example sets the default route cost to 50 for area
This example shows how to configure area 20 as an Nssa
Area nssa default-info-originate
Default metric value is
Area nssa no-redistribute
Comparable
Area nssa no-summary
This command configures the translator role of the router
By default, the translator role is disabled
Area nssa translator role
Area nssa translator-stab-intv
Default interval is 40 seconds
Area address ranges are not configured by default
Summarylink
Nssaexternallink
This command creates a stub area for the specified area ID
Area stub no-summary
Example disables the import of summary LSAs into stub area
This example creates a stub area with the ID
Default dead interval is 40 seconds
Area virtual-link dead-interval
Area virtual-link hello-interval
Default hello interval is 10 seconds
Area virtual-link retransmit-interval
Default retransmit interval is 5 seconds
Area virtual-link transmit-delay
Default transmit delay is 1 second
Ipv6 ospf enable
OSPFv3 is disabled by default
Ipv6 ospf areaid
Ipv6 ospf cost
Default dead interval value is 40 seconds
Ipv6 ospf dead-interval
Ipv6 ospf hello-interval
Ipv6 ospf mtu-ignore
Default network type is broadcast
By default, MTU mismatch detection is enabled
Ipv6 ospf network
Ipv6 ospf priority
Default priority value is
Ipv6 ospf retransmit-interval
Default value is 4 seconds
Ipv6 ospf transmit-delay
Default value is 1 second
Ipv6 ospf transmit-delay
OSPFv3 Show Commands
This command displays OSPFv3 router information
This example shows how to display OSPFv3 router information
Show ipv6 ospf
Show ipv6 ospf Output Details
Show ipv6 ospf area
Show ipv6 ospf area Output Details
Show ipv6 ospf abr
Show ipv6 ospf abr Output Details
Show ipv6 ospf asbr
Show ipv6 ospf asbr Output Details
Show ipv6 ospf database
Adv Router Link Id Age Sequence Csum Options Rtr Opt
Show ipv6 ospf database Output Details
Show ipv6 ospf database database-summary Output Details
Show ipv6 ospf interface
This command displays information about OSPFv3 interfaces
Loopback loopid
Show ipv6 ospf interface Command Output Details
This example shows how to display statistics for Vlan
Show ipv6 ospf interface stats
Show ipv6 ospf interface stats Output Details
This command displays information about OSPFv3 neighbors
Show ipv6 ospf neighbor
Specify the Vlan interface to display information about
Specify the tunnel interface to display
Show ipv6 ospf neighbor Output Details
10 show ipv6 ospf neighbor routerid Output Details
Show ipv6 ospf range
This example displays range information for area
Show ipv6 ospf stub table
11 show ipv6 ospf range Output Details
This example displays the OSPFv3 stub table information
12 show ipv6 ospf stub table Output Details
Show ipv6 ospf virtual-link
13 show ipv6 ospf virtual-link Output Details
Show ipv6 ospf virtual-link
Show ipv6 ospf virtual-link OSPFv3 Configuration
Authentication and Authorization Configuration
Overview of Authentication and Authorization Methods
Overview of Authentication and Authorization Methods
Filter-ID Attribute Formats
Setting the Authentication Login Method
Show authentication login
Set authentication login
Use this command to set the authentication login method
Clear authentication login
Any
Local
Radius
Configuring Radius
Timeout
Show radius
Retries
Optional Displays Radius server configuration information
Set radius
Server
Servers or a specific Radius server as defined by an index
Realm management‐ access any network‐access
Timeout timeout
Server index
Clear radius
Realm
Set radius accounting
Show radius accounting
Retries retries
This example shows how to set Radius accounting retries to
Timeout
Clear radius accounting
Retries
Show radius interface
Set radius interface
Clear radius interface
Example
Configuring 802.1X Authentication
Show dot1x
Auth‐diag
Auth‐stats
This example shows how to display 802.1X status
Show dot1x auth-config
Init reauth
Set dot1x
True false
Set dot1x auth-config
Clear dot1x auth-config
Portcontrol Maxreq
Show eapol
Connecting state, via disconnected
Show eapol Output Details
Set eapol
Clear eapol
Auth‐mode
Forced‐auth
Optional Globally clears the Eapol authentication mode
Configuring MAC Authentication
Show macauthentication
Show macauthentication Output Details
Nopassword
This example shows how to display MAC session information
Show macauthentication session
Show macauthentication session Output Details
Set macauthentication password
Set macauthentication
Use this command to set a MAC authentication password
Clear macauthentication password
Set macauthentication port
Use this command to clear the MAC authentication password
Enables or disables MAC authentication
Set macauthentication portinitialize
Set macauthentication portquietperiod
Set macauthentication macinitialize
Clear macauthentication portquietperiod
This example resets the default quiet period on port
Set macauthentication portreauthenticate
Set macauthentication reauthentication
Enables or disables MAC reauthentication
Set macauthentication macreauthenticate
Set macauthentication reauthperiod
Clear macauthentication reauthperiod
Set macauthentication significant-bits
Clear macauthentication significant-bits
C3su-clear macauthentication significant-bits
About Multiple Authentication Types
Configuring Multiple Authentication Methods
About Multi-User Authentication
Show multiauth
Set multiauth mode
Clear multiauth mode
Multi
Strict
Set multiauth precedence
Default precedence order is dot1x, pwa, mac
Clear multiauth precedence
Show multiauth port
Set multiauth port
Clear multiauth port
Show multiauth station
Show multiauth session
Show multiauth idle-timeout
Agent dot1x mac
Set multiauth idle-timeout
Authentication method for which to set the timeout value
Which to set the timeout value
Idle timeout value is provided by the authenticating server
Clear multiauth idle-timeout
Show multiauth session-timeout
Default
Which to reset the timeout value to its default
Set multiauth session-timeout
Which to set the session timeout value
Clear multiauth session-timeout
Configuring User + IP Phone Authentication
Configuring Vlan Authorization RFC
Set vlanauthorization egress
Set vlanauthorization
Tagged
Show vlanauthorization
Clear vlanauthorization
By default, administrative egress is set to untagged
Configuring Policy Maptable Response
Show vlanauthorization Output Details
When Policy Maptable Response is Both
Operational Description
When Policy Maptable Response is Tunnel
When Policy Maptable Response is Policy
Show policy maptable
Set policy maptable
Response
Both
Policy
Clear policy maptable
Configuring MAC Locking
To review, disable, enable, and configure MAC locking
Show maclock
Show maclock stations
Show maclock Output Details
Firstarrival
Connected to MAC locked ports
Set maclock enable port‐string
Set maclock enable
Show maclock stations Output Details
Set maclock disable
This example shows how to enable MAC locking on ge.2.3
This example shows how to disable MAC locking on ge.2.3
Set maclock
Create
Clear maclock
Specified MAC address and port
Set maclock static
Clear maclock static
Set maclock firstarrival
Clear maclock firstarrival
Set maclock agefirstarrival
This example enables first arrival aging on port ge.1.1
This example disables first arrival aging on port ge.1.1
Clear maclock agefirstarrival
Set maclock move
Set maclock trap
Configuring Port Web Authentication PWA
About PWA
Show pwa
Show pwa Output Details
This example shows how to enable port web authentication
Enable disable Enables or disables port web authentication
Set pwa
Show pwa banner
This example shows how to display the PWA login banner
Set pwa banner
This example shows how to hide the Enterasys Networks logo
Clear pwa banner
Set pwa displaylogo
Display hide
Set pwa protocol
Set pwa ipaddress
Chap pap
Use this command to clear the PWA guest user name
This example shows how to clear the PWA guest user name
Set pwa guestname
Clear pwa guestname
Set pwa guestpassword
Set pwa gueststatus
Authnone
Authradius
Set pwa initialize
This example shows how to initialize ports ge.1.5‐7
Set pwa quietperiod
Set pwa maxrequest
Set pwa portcontrol
Enables or disables PWA on specified ports
This example shows how to enable PWA on ports 1‐22
This example shows how to display PWA session information
Show pwa session
This example shows how to enable PWA enhancedmode
Enable disable Enables or disables PWA enhancedmode
Set pwa enhancedmode
Configuring Secure Shell SSH
This example shows how to display SSH status on the switch
Show ssh status
Set ssh
This example shows how to regenerate SSH keys
This example shows how to disable SSH
Set ssh hostkey
Show access-lists
Configuring Access Lists
Show access‐lists number
Access-list standard
Deny permit
Insert replace
Access-list extended
This example moves entry 16 to the beginning of ACL
Insert replace
Interface configuration C3su‐routerConfig‐ifVlan vlanid#
Ip access-group
Filters inbound frames
Example
Page
TACACS+ Configuration
State Optional Displays only the TACACS+ client status
Show tacacs
Show tacacs Output Details
Use this command to enable or disable the TACACS+ client
Enable disable Enables or disables the Tacacs client
This example shows how to enable the TACACS+ client
Set tacacs
Timeout seconds
Set tacacs server
Clear tacacs server
Specifies one TACACS+ server to be affected
Show tacacs session
This example removes TACACS+ server
Set tacacs session
Service
Clear tacacs session
Read‐write
Super‐user
Show tacacs command
Set tacacs command
Set tacacs singleconnect
Show tacacs singleconnect
Connection
Show tacacs interface
Set tacacs interface
Clear tacacs interface
Clear tacacs interface TACACS+ Configuration
27-14
Using sFlow in Your Network
SFlow Configuration
Advantages of using sFlow include
Definitions
SFlow Agent Functionality
Sampling Mechanisms
SFlow Definitions
Counter Sampling
Packet Flow Sampling
Usage Notes
28-5
Show sflow receivers
Contents of the sFlow Receivers Table is displayed
This example displays the sFlow Receivers Table
Following table describes the output fields
Show sflow receivers Output Descriptions
Set sflow receiver owner
Set sflow receiver ip
Default IP address is
Default maximum datagram size is 1400 bytes
Set sflow receiver maxdatagram
Maxdatagram bytes
Default port value is
Set sflow receiver port
Clear sflow receiver
Maxdatagram
Owner
Set sflow port poller
Port port
Show sflow pollers
Clear sflow port poller
Set sflow port sampler
Interval
This example removes the poller instance on port ge.1.1
Show sflow samplers
Clear sflow port sampler
Set sflow interface
Maxheadersize
Rate
Show sflow interface
Clear sflow interface
Show sflow agent
28-18
Policy Capacities
Policy and Authentication Capacities
Table A-1 Policy Capacities
Authentication Capacities
Table A-2 Authentication Capacities
Index
Numerics
Ospf 20-30Network Management
Tftp
Index
