Manuals / Enterasys Networks / Computer Equipment / Switch

Enterasys Networks 9034313-07 manual Clear dot1x auth-config, Portcontrol Maxreq

Models: 9034313-07

1 872

Download 872 pages 24.54 Kb

Page 766

Image 766

clear dot1x auth-config

Examples

This example shows how to enable reauthentication control on ports ge.1.1‐3:

C3(su)->set dot1x auth-config reauthenabled true ge.1.1-3

This example shows how to set the 802.1X quiet period to 120 seconds on ports ge.1.1‐3:

C3(su)->set dot1x auth-config quietperiod 120 ge.1.1-3

clear dot1x auth-config

Use this command to reset 802.1X authentication parameters to default values on one or more ports.

Syntax

clear dot1x auth-config [authcontrolled-portcontrol] [maxreq] [quietperiod]

[reauthenabled] [reauthperiod] [servertimeout] [supptimeout] [txperiod] [port- string]

Parameters

authcontrolled‐	(Optional) Resets the 802.1X port control mode to auto.
portcontrol

maxreq	(Optional) Resets the maximum requests value to 2.

quietperiod	(Optional) Resets the quiet period value to 60 seconds.

reauthenabled	(Optional) Resets the reauthentication control state to disabled (false).

reauthperiod	(Optional) Resets the reauthentication period value to 3600 seconds.

servertimeout	(Optional) Resets the server timeout value to 30 seconds.

supptimeout	(Optional) Resets the authentication supplicant timeout value to 30
	seconds.

txperiod	(Optional) Resets the transmission period value to 30 seconds.

port‐string	(Optional) Resets settings on specific port(s). For a detailed description of
	possible port‐string values, refer to “Port String Syntax Used in the CLI” on
	page 7‐1.

Defaults

If no parameters are specified, all authentication parameters will be reset.

If port‐string is not specified, parameters will be set on all ports.

Mode

Switch command, read‐write.

Examples

This example shows how to reset the 802.1X port control mode to auto on all ports:

C3(su)->clear dot1x auth-config authcontrolled-portcontrol

This example shows how to reset reauthentication control to disabled on ports ge.1.1‐3:

C3(su)->clear dot1x auth-config reauthenabled ge.1.1-3

26-20 Authentication and Authorization Configuration

Page 766

Image 766

Enterasys Networks 9034313-07 manual Clear dot1x auth-config, Portcontrol Maxreq

Contents

Enterasys SecureStack C3 Page Page Enterasys Networks, Inc. Firmware License Agreement Iii Page Contents Page Activating Licensed Features Configuring System Power and PoE Discovery Protocol ConfigurationPort Configuration Show port broadcast Set port broadcast Clear port broadcast Snmp Configuration Spanning Tree Configuration Configuring Spanning Tree Port Parameters Purpose Commands 802.1Q Vlan Configuration Policy Classification Configuration Port Priority ConfigurationIgmp Configuration Logging and Network Management14-3 Rmon Configuration Dhcp Server Configuration IP Configuration Preparing for Router ModeDhcp Snooping and Dynamic ARP Inspection IPv4 Routing Protocol Configuration 20-11 IPv6 Configuration IPv6 ManagementDHCPv6 Configuration IPv6 Proxy RoutingOSPFv3 Configuration Authentication and Authorization Configuration 26-37 TACACS+ Configuration Index SFlow ConfigurationAppendix a Policy and Authentication Capacities Tables10-4 22-26 Xxxii Structure of This Guide Using This GuideAbout This Guide Important NoticeStructure of This Guide SecureStack C3 Installation Guides Related DocumentsFollowing conventions are used in the text of this document Conventions Used in This GuideFollowing icons are used in this guide Getting Help Support@enterasys.comGetting Help Xxxviii About This Guide Introduction Switch Management MethodsSecureStack C3 CLI Overview Factory Default Settings Default Settings for Basic Switch OperationFeature Default Setting Default Settings for Router Operation SntpDvmrp Connecting Using the Console Port Using the Command Line InterfaceStarting a CLI Session Using an Administratively Configured User Account Connecting Using TelnetUsing a Default User Account LoggingCLI Command Modes Navigating the Command Line InterfaceCLI Command Defaults Descriptions Getting Help with CLI SyntaxAbbreviating and Completing Commands Displaying Scrolling ScreensBasic Line Editing Commands Basic Line Editing CommandsConfiguring Switches in a Stack About SecureStack C3 Switch Operation in a StackInstalling a New Stackable System of Up to Eight Units Creating a Virtual Switch Configuration Installing Previously-Configured Systems in a StackAdding a New Unit to an Existing Stack SID Feature Support Considerations About Using Clear Config in a StackIssues Related to Mixed Type Stacks ConfigurationCommands Stacking Configuration and Management CommandsShow switch PurposeShow switch switchtype ExamplesShow switch stack-ports NoneExample Set switchSwitch command, read‐write Priority valueThis example shows how to assign priority 3 to switch Set switch copy-fwSet switch description This example shows how to renumber switch 5 to switchSet switch movemanagement Set switch memberClear switch member Use this command to remove a member entry from the stackQuick Start Setup Commands Basic ConfigurationRequired CLI Setup Commands Setting User Accounts and Passwords Optional CLI Setup CommandsShow system login Output Details Show system loginParameters Use this command to remove a local login user account Set system loginClear system login Super‐user read‐write read‐onlyThis example shows how to remove the netops user account Set passwordSwitch command, read‐write Switch command, super‐user Set system password length Set system password agingDisable Set system password historyShow system lockout Attempts attempts Set system lockoutShow system lockout Output Details Time timeSetting Basic Switch Properties Show ip address Set ip address Use this command to clear the system IP addressClear ip address Show ip protocol This example shows how to clear the system IP addressSet ip protocol This example shows how to display system information Show systemShow system hardware Show system Output DetailsShow system utilization Slot Hardware InformationSet system utilization Default threshold value is 80%This example sets the CPU utilization threshold to 75% Clear system utilization Show system enhancedbuffermodeThis example shows how to enable enhanced buffer mode Set system temperatureEnable disable Enables or disables enhanced buffer mode Set system enhancedbuffermodeDisable Clear system temperatureSyslog enable Trap enable disableShow time Set timeUse this command to display daylight savings time settings This example shows how to set the system clock to 750 a.mShow summertime If a zone name is not specified, none will be applied Set summertimeSet summertime date If an offset is not specified, none will be appliedSet summertime recurring Clear summertime Use this command to modify the command promptThis example shows how to set the command prompt to Switch Set promptShow banner motd Set banner motdClear banner motd Show versionSet system name ‐5 provides an explanation of the command outputUse this command to configure a name for the system Show version Output DetailsSet system location Use this command to identify the location of the systemThis example shows how to set the system location string Set system contactSet width This example shows how to set the system contact stringThis example shows how to set the terminal columns to Set lengthShow logout This example shows how to set the terminal length toThis example shows how to display the CLI logout setting Set logoutUse this command to set the console port baud rate Use this command to display console settingsThis example shows how to display all console settings Show consoleDownloading from a Tftp Server This example shows how to set the console port baud rate toDownloading a Firmware Image Downloading via the Serial PortType 2. The following baud rate selection screen displays Reverting to a Previous Image Show boot system Reviewing and Selecting a Boot Firmware ImageReboot the system using the reset command page 3‐50 Set boot system Compatibility platform specificUse this command to enable or disable Telnet on the switch Starting and Configuring TelnetThis example shows how to display Telnet status Show telnetInbound Enable disableTelnet Outbound allManaging Switch Configuration and Files Configuration Persistence ModeShow snmp persistmode Set snmp persistmodeAuto Save configDir ManualUse this command to display the contents of a file Show fileShow config All ConfigureOutfile Append CopySystemimage This example shows how to download an image via Tftp Show tftp settingsDelete This example shows the output of this command Set tftp timeoutClear tftp timeout This example sets the timeout period to 4 secondsClear tftp retry Set tftp retryThis example sets the retry count to Cls clear screen This example shows how to clear the CLI screenClearing and Closing the CLI To clear the CLI screen or to close your CLI sessionUse either of these commands to leave a CLI session Resetting the SwitchReset This example shows how to exit a CLI sessionThis example shows how to reset the system Clear configIf no unit ID is specified, the entire system will be reset This example shows how to reset unitUse this command to display WebView status Using and Configuring WebViewShow webview Set webview Show sslThis example shows how to enable SSL This example shows how to display SSL statusSet ssl Show support CommandGathering Technical Support Information To gather common technical support informationShow system hostprotect Configuring HostprotectHostprotect is enabled by default Set system hostprotectDefault state is enabled This feature is disabled by defaultThis example disables hostprotect Clear system hostprotectUsage Licensing Procedure in a Stack Environment Activating Licensed FeaturesLicense Key Field Descriptions Clearing, Showing, and Applying Licenses Adding a New Member to a Licensed StackSet license UsageShow license Use this command to clear the license key settingsFeatureID feature The name of the feature being cleared Clear licenseC3rw-clear license featureId advrouter Clear license Activating Licensed Features Show inlinepower Configuring System Power and PoECommands Use this command to display system power propertiesThis example shows how to display system power properties Set inlinepower thresholdShow inlinepower Output Details Set inlinepower detectionmode Set inlinepower trapSending of traps is disabled by default Show port inlinepower IeeePriority critical Set port inlinepowerAdmin off auto High lowSet port inlinepower Configuring System Power and PoE Discovery Protocol Configuration Configuring CDPShow cdp Show cdp Output DetailsEnable Auto disableSet cdp state Set cdp auth Use this command to set a global CDP authentication codeSet cdp interval Set cdp hold-time Clear cdpShow neighbors Configuring Cisco Discovery Protocol Show ciscodpShow ciscodp port info ‐2 provides an explanation of the command output‐3 provides an explanation of the command output Show ciscodp Output DetailsSet ciscodp status Set ciscodp timerThis example shows how to globally enable CiscoDP Show ciscodp port info Output DetailsSet ciscodp holdtime Set ciscodp portUntagged VvidDot1p TrustedClear ciscodp To review and configure Llpd and LLPD‐MED Configuring Link Layer Discovery Protocol and LLDP-MEDOverview Configuration Tasks Use this command to display Lldp configuration information Show lldpShow lldp port status Show lldp port trapShow lldp port location-info Show lldp port tx-tlvShow lldp port tx‐tlv port‐string Show lldp port local-info Show lldp port local-info Output Details 1000BASE-TFDECS Elin Show lldp port remote-info Show lldp port network-policy Voice‐signalingGuest‐voice‐signaling VoiceSoftphone‐voice Video‐signalingSet lldp tx-interval Video‐conferencingSet lldp trap-interval Set lldp hold-multiplierThis example sets the transmit interval to 20 seconds Set lldp med-fast-repeat Set lldp port status Tx‐enableRx‐enable Set lldp port trapSet lldp port location-info Set lldp port med-trapElin Set lldp port tx-tlv Poe GvrpMac‐phy Link‐aggrTag tagged untagged State enable disableSet lldp port network-policy Vid vlan‐id dot1pHold‐multiplier Clear lldpTx‐interval Trap‐intervalClear lldp port status Clear lldp port trapClear lldp port location-info Clear lldp port med-trapCleared Vid Clear lldp port network-policyTag DscpClear lldp port tx-tlv Disables the LLDP‐MED Location Identification TLV from being Disables the LLDP‐MED Extended Power via MDI TLV from beingPort String Syntax Used in the CLI Port ConfigurationPort Configuration Summary Port type.unitorslot number.port numberReviewing Port Status Port Slot/Unit Parameters Used in the CLIShow port Show port statusShow port counters Switch mib2Show port status Output Details Show port counters Output Details Show port cablestatus Clear port countersThis example clears the port counters for ge.3.1 This example shows the cable status for 1 GE port ge.1.31 Disabling / Enabling and Naming PortsShow port cablestatus Output Details This example shows how to disable ge.1.1 Set port disableSet port enable This example shows how to enable ge.1.3Show port alias Use this command to assign an alias name to a portSet port alias This example shows how to assign the alias Admin to ge.3.3 This example shows how to clear the alias for ge.3.3Setting Speed and Duplex Mode Show port speed10 100 Set port speedShow port duplex MbpsSet port duplex This example shows how to set ge.1.17 to full duplexFull half Enabling / Disabling Jumbo Frame Support Show port jumboSet port jumbo Enables or disables jumbo frame supportClear port jumbo Setting Auto-Negotiation and Advertised Ability Show port negotiationSet port negotiation Enable disableShow port advertise Set port advertise Clear port advertise Forced‐auto Show port mdixSet port mdix MdiConfigure ports to use Mdix mode only Configure ports to use MDI mode onlyOptional Specify the port or ports to configure Show flowcontrol Setting Flow ControlSet flowcontrol This example shows how to enable flow control Setting Port Link Traps and Link Flap Detection Show port trapSet port trap Following example disables sending trap on ge.3.1Show linkflap Parameters GlobalstatePortstate MetricsShow linkflap parameters Output Details Show linkflap metrics Output DetailsSet linkflap globalstate Disable enableDisables or enables the link flap detection function Set linkflap portstateSet linkflap interval Set linkflap actionClear linkflap action Use this command to set the link flap action trigger countSet linkflap threshold Set linkflap downtime Clear linkflap downParameter Clear linkflapAll stats Threshold intervalConfiguring Broadcast Suppression Show port broadcastSet port broadcast Clear port broadcastSyntax Used in the CLI on page 7‐1 Port Mirroring Mirroring FeaturesRemote Port Mirroring Procedures Configuring Smon MIB Port MirroringOverview To review and configure port mirroring on the device Show port mirroringCan be configured per stack, if applicable Create disableSet port mirroring Clear port mirroring Use this command to clear a port mirroring relationshipSet mirror vlan Clear mirror vlan Link Aggregation Control Protocol Lacp Lacp OperationSecureStack C3 Usage Considerations ‐6 defines key terminology used in Lacp configurationLacp Terminology Lacp Terms and DefinitionsCommands ‐7 provides an explanation of the command output Show lacpSet lacp Disable enable Disables or enables LacpThis example shows how to disable Lacp Show lacp Output DetailsSet lacp asyspri Set lacp aadminkeyAsyspri Clear lacp Disable enable Disables or enables static link aggregationSet lacp static Clear lacp static Set lacp singleportlag This example enables the formation of single port LAGsClear lacp singleportlag Status detail Show port lacpSummary Counters Aadminkey Set port lacpPadminkey AadminstateLacptimeout PadminportClear port lacp C3su-clear port lacp port ge.3.16 Set port protected Configuring Protected PortsProtected Port Operation Clear port protected Show port protectedRead‐only Set port protected name Show port protected nameUse this command to clear the name of a protected group Clear port protected nameClear port protected name Port Configuration Snmp Configuration Snmp Configuration SummarySNMPv3 SNMPv1 and SNMPv2cAbout Snmp Security Models and Levels Reviewing Snmp Statistics Using Snmp Contexts to Access Specific MIBsConfiguration Considerations Snmp Security LevelsShow snmp engineid This example shows how to display Snmp engine propertiesShow snmp engineid Output Details This example shows how to display Snmp counter values Use this command to display Snmp traffic counter valuesShow snmp counters Show snmp counters Output Details Engine or otherwise unavailable Configuring Snmp Users, Groups, and Communities Show snmp userUse this command to create a new SNMPv3 user This example shows how to display an Snmp user list‐4 provides an explanation of the command output Set snmp userVolatile AesSha NonvolatileShow snmp group Clear snmp userRemote remote Security‐model Set snmp groupUser user V2c usm VolatileShow snmp community Clear snmp groupV2c usm Securityname Use this command to configure an Snmp community groupSet snmp community Context contextThis example shows how to delete the community name vip Configuring Snmp Access RightsUse this command to delete an Snmp community name Clear snmp communityAuthentication Privacy Context context Show snmp accessNoauthentication Nonvolatile read‐ Only‐6 provides an explanation of the command output This example shows how to display Snmp access informationShow snmp access Output Details Set snmp access Clear snmp access Configuring Snmp MIB ViewsShow snmp view Set snmp view Show snmp contextShow snmp view Output Details Clear snmp view Volatile nonvolatile Configuring Snmp Target ParametersShow snmp targetparams Read‐onlyShow snmp targetparams Output Details ‐8 provides an explanation of the command outputSet snmp targetparams Message‐Privacy AuthenticationClear snmp targetparams Protected from disclosureUse this command to display Snmp target address information Configuring Snmp Target AddressesShow snmp targetaddr Param param Timeout timeoutSet snmp targetaddr Udpport udpportTaglist taglist Use this command to delete an Snmp target address entryClear snmp targetaddr Tag 1 tagConfiguring Snmp Notification Parameters About Snmp Notify FiltersShow newaddrtrap By default, this function is disabled globally and per portSet newaddrtrap Show snmp notify 10 show snmp notify Output Details ‐10 provides an explanation of the command outputSet snmp notify Trap informClear snmp notify Use this command to clear an Snmp notify configurationShow snmp notifyfilter Set snmp notifyfilter Subtree oid‐or‐Clear snmp notifyfilter Set snmp notifyprofile Show snmp notifyprofileTargetparam This example shows how to delete Snmp notify profile area51 Creating a Basic Snmp Trap ConfigurationClear snmp notifyprofile 11 Basic Snmp Trap Configuration ExampleHow Snmp Will Use This Configuration Configuring the Snmp Management InterfaceShow snmp interface Set snmp interface Loopback loop‐IDClear snmp interface Clear snmp interface Snmp Configuration Spanning Tree Configuration Spanning Tree Configuration SummarySpanning Tree Features Loop ProtectConfiguring Spanning Tree Bridge Parameters For information about Sid sid Show spantree statsActive ‐1 shows a detailed explanation of command output Show spantree Output DetailsSet spantree Disable enable Globally disables or enables Spanning TreeShow spantree version Set spantree version Clear spantree version This example shows how to reset the Spanning Tree versionShow spantree bpdu-forwarding This example shows how to enable Bpdu forwarding Disable enable Disables or enables Bpdu forwardingBy default Bpdu forwarding is disabled Set spantree bpdu-forwarding8021d Set spantree bridgeprioritymodeClear spantree bridgeprioritymode 8021tSet spantree msti Show spantree mstilistCreate delete Show spantree mstmap Clear spantree mstiFid fid Set spantree mstmap This example shows how to map FID 3 to SIDUse this command to map a FID back to SID Clear spantree mstmapShow spantree vlanlist This example shows how to map FID 2 back to SIDShow spantree mstcfgid Set spantree mstcfgid Cfgname name Specifies an MST configuration nameClear spantree mstcfgid Set spantree priority Use this command to set the device’s Spanning Tree priorityClear spantree priority Set spantree hello This example shows how to reset the bridge priority on SIDClear spantree hello Use this command to set the bridge maximum aging time Set spantree maxageUse this command to set the Spanning Tree forward delay Set spantree fwddelayClear spantree maxage Clear spantree fwddelay Show spantree backuprootSet spantree backuproot Clear spantree backuprootShow spantree tctrapsuppress Set spantree tctrapsuppressClear spantree tctrapsuppress Set spantree protomigrationShow spantree spanguard Enable disable Enables or disables the SpanGuard functionSet spantree spanguard This example shows how to enable the SpanGuard function Clear spantree spanguardShow spantree spanguardtimeout Set spantree spanguardtimeoutClear spantree spanguardtimeout Show spantree spanguardlockThis example shows how to unlock port ge.1.16 Show spantree spanguardtrapenableClear / set spantree spanguardlock Clear spantree spanguardtrapenable Set spantree spanguardtrapenableIs enabled Show spantree legacypathcost Set spantree legacypathcostSet spantree autoedge Clear spantree legacypathcostShow spantree autoedge This example clears the legacy path cost to 802.1t valuesClear spantree autoedge Disable enable Configuring Spanning Tree Port ParametersSet spantree portadmin To display and set Spanning Tree port parametersShow spantree portadmin Clear spantree portadminThis example shows how to disable Spanning Tree on ge.1.5 Show spantree portpri Use this command to set a port’s Spanning Tree prioritySet spantree portpri Clear spantree portpri Show spantree adminpathcost Set spantree adminpathcostClear spantree adminpathcost Show spantree adminedgeThis example shows how to set ge.1.11 as an edge port Set spantree adminedgeClear spantree adminedge True falseThis example shows how to reset ge.1.11 as a non‐edge port Show spantree operedgeConfiguring Spanning Tree Loop Protect Parameters Show spantree lp This example shows how to enable Loop Protect on ge.2.3Set spantree lp If no SID is specified, SID 0 is assumedClear spantree lp Show spantree lplockClear spantree lplock SID LockedSet spantree lpcapablepartner Show spantree lpcapablepartnerClear spantree lpcapablepartner Use this command to set the Loop Protect event thresholdSet spantree lpthreshold Show spantree lpthreshold None. The default event threshold isClear spantree lpthreshold Set spantree lpwindow Show spantree lpwindowDisabled Set spantree lptrapenableClear spantree lpwindow Show spantree lptrapenable Clear spantree lptrapenableSet spantree disputedbpduthreshold Show spantree disputedbpduthreshold Clear spantree disputedbpduthresholdShow spantree nonforwardingreason 802.1Q Vlan Configuration Vlan Configuration SummaryCommand Set for Creating a Secure Management Vlan Creating a Secure Management VlanStatic Viewing VLANsShow vlan PortinfoShow vlan Output Details Vlan Vlan ID NameCreating and Naming Static VLANs Create enable Creates, enables or disables VLANs. disableThis example shows how to create Vlan Set vlanSet vlan name This example shows how to set the name for Vlan 7 to greenClear vlan This example shows how to clear the name for Vlan Clear vlan nameAssigning Port Vlan IDs PVIDs and Ingress Filtering Show port vlanModify‐egress Set port vlanClear port vlan No‐modify‐egressShow port ingress filter Set port ingress filter Show port discardSet port discard Tagged untagged both noneConfiguring the Vlan Egress List Show port egressSet vlan forbidden Clear vlan egress Use this command to remove ports from a VLAN’s egress listSet vlan egress Untagged forbidden taggedShow vlan dynamicegress ForbiddenThis example shows how to enable dynamic egress on Vlan Enable disable Enables or disables dynamic egressSet vlan dynamicegress Show host vlan Setting the Host VlanSet host vlan This example shows how to set Vlan 7 as the host Vlan Clear host vlanAbout Garp Vlan Registration Protocol Gvrp Enabling/Disabling Gvrp Garp Vlan Registration ProtocolHow It Works Example of Vlan Propagation via Gvrp Use this command to display Gvrp configuration information Show garp timerShow gvrp Disables or enables Gvrp on the device Show gvrp configuration Output DetailsSet gvrp This example shows how to enable Gvrp on ge.1.3 Set garp timerClear gvrp Join Clear garp timerLeaveall timer‐ LeaveC3su-clear garp timer leave ge.1.1 Policy Classification Configuration Policy Classification Configuration SummaryShow policy profile Configuring Policy ProfilesUse this command to display policy profile information ‐verboseShow policy profile Output Details Set policy profile This example shows how to delete policy profile Use this command to delete a policy profile entryClear policy profile All admin‐ profile profile‐ index Configuring Classification RulesShow policy rule Tcpsourceport Not‐in‐service Not‐ready Storage‐type non‐Admin‐pid UdpdestportShow policy capability Show policy rule Output DetailsVlan Set policy rule Admin‐profileVlantag data Ipdestsocket EtherIpproto IpsourcesocketValid Values for Policy Classification Rules Data value Mask bitsRange from 1 to 4094 or 0xFFF Following parameters apply to deleting an admin ruleClear policy rule All‐pid‐entriesUse this command to remove all policy classification rules Clear policy all-rulesSet policy port Use this command to assign ports to a policy profileAssigning Ports to Policy Profiles To assign and unassign ports to policy profilesClear policy port About Policy-Based CoS Configurations Configuring Policy Class of Service CoSProcedure 11-1 User-Defined CoS Configuration Configuring Policy Class of Service CoS Procedure About CoS-Based Flood ControlUse this command to enable or disable Class of Service Set cos stateShow cos state This example shows how to enable Class of ServiceClear cos state Tos‐value tos‐value Set cos settingsPriority priority Irl‐referencePriority Clear cos settingsShow cos settings Tos‐valueSet cos port-config Show cos port-config Should be displayedName Clear cos port-configEntry PortsSet cos port-resource irl Unicast Set cos port-resource flood-ctrlGroup#.port‐type MulticastShow cos port-resource Group#.port‐typeRate Clear cos port-resource irlUnit TypeUnicast Clear cos port-resource flood-ctrlSet cos reference MulticastIRL reference number associated with this entry Specifies that an IRL reference is being configuredShow cos reference Rate‐limit irl‐indexClear cos reference Kbps Show cos unitPort‐typ e index PpsClear cos all-entries Show cos port-typeThis example shows flood control information for port type Port Priority Configuration Port Priority Configuration SummaryConfiguring Port Priority Show port prioritySet port priority Clear port priorityConfiguring Priority to Transmit Queue Mapping Show port priority-queueSet port priority-queue Clear port priority-queue Configuring Quality of Service QoS Show port txqSet port txq By default, transmit queues are defined as follows Clear port txqClear port txq Port Priority Configuration Igmp Overview Igmp ConfigurationAbout IP Multicast Group Management To configure Igmp snooping from the switch CLI Configuring Igmp at LayerAbout Multicasting This example shows how to display Igmp snooping information Set igmpsnooping adminmodeUse this command to display Igmp snooping information Use this command to enable or disable Igmp on the systemThis example shows how to enable Igmp on port ge.1.10 This example shows how to enable Igmp on the systemEnable disable Enables or disables Igmp Set igmpsnooping interfacemodeSet igmpsnooping maxresponse Modify Set igmpsnooping mcrtrexpiretimeSet igmpsnooping add-static If no ports are specified, all ports are added to the entryShow igmpsnooping static Set igmpsnooping remove-staticIf modify is not specified, a new entry is created This example displays the static Igmp ports for Vlan Show igmpsnooping mfdbGroup group Stats Optional Displays Mfdb statisticsThis example shows how to clear all Igmp snooping entries Use this command to clear all Igmp snooping entriesClear igmpsnooping Global configuration C3su‐routerConfig# Configuring Igmp on Routing InterfacesTo configure Igmp on routing interfaces Ip igmpInterface configuration C3su‐routerConfig‐ifVlan 1# Ip igmp enableThis example shows how to enable Igmp on the router Ip igmp versionAny router mode Show ip igmp interfaceShow ip igmp groups Ip igmp query-intervalIp igmp query-max-response-time Ip igmp startup-query-intervalIp igmp startup-query-count Ip igmp last-member-query-intervalIp igmp last-member-query-count Ip igmp robustnessInterface configuration C3 su‐routerConfig‐ifVlan 1# Ip igmp robustness Igmp Configuration Configuring System Logging Logging and Network ManagementShow logging server Set logging server Show logging default Clear logging serverSet logging default Use this command to set logging default valuesFacility Clear logging defaultShow logging application SeveritySet logging application Show logging application Output DetailsLevel level If level is not specified, none will be appliedClear logging application Show logging localSet logging local Clear logging localShow logging buffer This example shows how to clear local loggingShow logging interface Set logging interface Clear logging interface Monitoring Network Events and Status HistoryShow history Use this command to set the size of the history bufferDefault Set historyShow users PingThis example, the host at IP address is not responding Show netstat DisconnectConsole Following table describes the output of this command Following example shows the output of this commandShow netstat Output Details Use this command to display the switch’s ARP table Managing Switch Network Addresses and RoutesShow arp Set arp This example shows how to display the ARP tableShow arp Output Details Clear arp TracerouteType other learned Show macEach response Self mgmtShow mac agetime Show mac Output DetailsSet mac agetime This example shows how to display the MAC timeout periodThis example shows how to set the MAC timeout period Clear mac agetimeSet mac algorithm Default MAC algorithm is mac‐crc16‐upperbitsShow mac algorithm Clear mac algorithm Set mac multicastClear mac address Use this command to remove a multicast MAC addressAppend clear Show mac unreserved-flood Set mac unreserved-floodUse this command to display Sntp client settings Configuring Simple Network Time Protocol SntpThis example enables multicast flood protection Show sntpThis example shows how to display Sntp client settings Show sntp Output DetailsSet sntp client Clear sntp clientClear sntp server Set sntp serverIf precedence is not specified, 1 will be applied Set sntp poll-interval Clear sntp poll-intervalSet sntp poll-retry This example shows how to clear the Sntp poll intervalClear sntp poll-retry Use this command to clear the Sntp poll timeout Set sntp poll-timeoutClear sntp poll-timeout This example shows how to clear the Sntp poll timeoutSet timezone Show sntp interface Set sntp interfaceClear sntp interface C3rw-show sntp interface Vlan 100 C3rw-clear sntp interface Configuring Node Aliases Show nodealias configSet nodealias Show nodealias config Output DetailsMaxentries maxentries Clear nodealias config Rmon Monitoring Group Functions and Commands Rmon ConfigurationRmon Monitoring Group Functions Group What It Does What It Monitors CLI Commands Design ConsiderationsStatistics Group Commands To display, configure, and clear Rmon statisticsShow rmon stats Use this command to configure an Rmon statistics entrySet rmon stats Clear rmon stats To‐defaultsThis example shows how to delete Rmon statistics entry If owner is not specified, monitor will be appliedHistory Group Commands Show rmon historyBuckets buckets Set rmon historyClear rmon history Interval intervalThis example shows how to delete Rmon history entry Show rmon alarm Alarm Group CommandsThis example shows how to display Rmon alarm entry Object object Set rmon alarm propertiesShow rmon alarm Output Details Type absoluteSet rmon alarm status This example shows how to enable Rmon alarm entry Clear rmon alarmEnable Use this command to delete an Rmon alarm entryThis example shows how to display Rmon event entry Event Group CommandsUse this command to display Rmon event entry properties Show rmon eventType none log Set rmon event propertiesDescription Trap bothSet rmon event status This example shows how to enable Rmon event entryClear rmon event This example shows how to clear Rmon event Filter Group Commands Show rmon channelAccept matched Use this command to configure an Rmon channel entrySet rmon channel FailedIndex index Clear rmon channelShow rmon filter Channel channelSet rmon filter This example shows how to clear Rmon filter entry Use this command to clear an Rmon filter entryClear rmon filter Show rmon capture Packet Capture CommandsNodata Slice slice Set rmon captureAction lock Loadsize loadsizeThis example shows how to clear Rmon capture entry Use this command to clears an Rmon capture entryClear rmon capture Dhcp Relay Agent Dhcp Server ConfigurationDhcp Overview Dhcp ServerConfiguring a Dhcp Server Configuring General Dhcp Server Parameters This example enables Dhcp server functionality Set dhcp bootpSet dhcp Set dhcp conflict logging This example enables address allocation for Bootp clientsThis example enables Dhcp conflict logging Show dhcp conflictClear dhcp conflict Logging Disables conflict loggingThis example disables Dhcp conflict logging Clears the conflict information for all IP addressesSet dhcp exclude 100, with the set dhcp exclude commandClear dhcp exclude Clear dhcp ping Set dhcp pingThis example sets the number of ping packets sent to Show dhcp binding Clear dhcp bindingShow dhcp server statistics Use this command to display Dhcp server statisticsUse this command to clear all Dhcp server counters Clear dhcp server statisticsThis example clears all Dhcp server counters Configuring IP Address Pools Manual Pool Configuration ConsiderationsSet dhcp pool This example creates an address pool named auto1Set dhcp pool network Use this command to delete a Dhcp server pool of addressesClear dhcp pool This example deletes the address pool named auto1Clear dhcp pool network Set dhcp pool hardware-addressSet dhcp pool host Clear dhcp pool hardware-addressIf no type is specified, Ethernet is assumed Clear dhcp pool host Set dhcp pool client-identifierClear dhcp pool client-identifier Set dhcp pool client-name Clear dhcp pool client-nameSet dhcp pool bootfile Clear dhcp pool bootfileSet dhcp pool next-server Clear dhcp pool next-serverClear dhcp pool lease Set dhcp pool leaseInfinite Set dhcp pool default-router Clear dhcp pool default-routerSet dhcp pool dns-server Clear dhcp pool dns-serverSet dhcp pool domain-name Clear dhcp pool domain-nameSet dhcp pool netbios-name-server Clear dhcp pool netbios-name-serverClear dhcp pool netbios-node-type Set dhcp pool netbios-node-type‐node Set dhcp pool option Ascii stringClear dhcp pool option Show dhcp pool configurationThis example removes option 19 from address pool auto1 Show dhcp pool configuration Dhcp Snooping Overview Dhcp Snooping Dynamic ARP InspectionDhcp Message Processing Building and Maintaining the Database Procedure 17-1 Basic Configuration for Dhcp Snooping Basic ConfigurationConfiguration Notes Rate LimitingDisabled globally Dhcp Snooping CommandsSet dhcpsnooping Set dhcpsnooping database write-delay Set dhcpsnooping vlanBy default, ports are untrusted Set dhcpsnooping trustSet dhcpsnooping binding This example configures port ge.1.1 as a trusted portSet dhcpsnooping verify Set dhcpsnooping log-invalid Source MAC address verification is enabled by defaultAgainst the client hardware address Rate pps Set dhcpsnooping limitNone Burst interval secsThis example configures rate limit parameters on port ge.1.1 Show dhcpsnooping database Show dhcpsnooping portDynamic static Show dhcpsnooping bindingEntry, either dynamic or static Show dhcpsnooping statistics Clear dhcpsnooping statistics Clear dhcpsnooping bindingClear dhcpsnooping database Clear dhcpsnooping limit Write‐delayDefault value of 300 seconds Dynamic ARP Inspection OverviewStatic Mappings Functional DescriptionOptional ARP Packet Validation Rate Limiting Logging Invalid PacketsPacket Forwarding Eligible InterfacesProcedure 17-2 Basic Dynamic ARP Inspection Configuration Step Task CommandsRouter Configuration Example ConfigurationVlan Configuration Dhcp Snooping Configuration Dynamic ARP Inspection CommandsSet arpinspection vlan Dynamic ARP Inspection ConfigurationBy default, all physical ports and LAGs are untrusted Set arpinspection trustLogging is disabled by default LoggingSrc‐mac Set arpinspection validateDst‐mac Set arpinspection limit Permit Set arpinspection filterShow arpinspection access-list Mac hostShow arpinspection ports This example displays the ARP configuration of lag.0.1Show arpinspection vlan Show arpinspection statisticsWith an invalid address Clear arpinspection validateThis example removes all 3 additional validation conditions Clear arpinspection vlan Clear arpinspection filter Clear arpinspection limit This example removes the ARP ACL named staticARP from VlanClear arpinspection statistics This example clears all DAI statistics from the switchPage Preparing for Router Mode Pre-Routing Configuration TasksEnabling the Switch for Routing Enabling Router Configuration ModesRouter CLI Configuration Modes Router CLI Configuration Modes Page IP Configuration Configuring Routing Interface SettingsShow interface Vlan vlan ‐idInterface Use this command to configure interfaces for IP routingRouter global configuration mode C3su‐routerConfig# Vlan vlan‐ idThis example shows how to enter configuration mode for Vlan Show ip interfaceShow ip interface Output Details Router interface configuration C3su‐routerConfig‐ifVlan 1#Ip address SecondaryShow running-config No shutdownThis example shows how to enable Vlan 1 for IP routing No ip routingUse this command to configure a tunnel interface Configuring Tunnel InterfacesInterface tunnel Router interface configuration C3su‐routerConfig‐ifTnnl 1# This example creates a configured tunnel interfaceTunnel source Ipv6ip Specifies that the tunnel mode is IPv6 over IPv4 Tunnel modeThis command specifies the mode of the tunnel interface No form of this command removes the mode of the tunnelThis example sets the tunnel mode to IPv6 over IPv4 Show interface tunnelReviewing and Configuring the ARP Table Show ip arpArp This example shows how to use the show ip arp commandShow ip arp Output Details This example shows how to enable proxy ARP on Vlan Ip proxy-arp14,400 seconds Arp timeoutClear arp-cache Privileged Exec C3su‐router#Interface configuration C3su‐Router1Config‐ifVlan 1# Configuring Broadcast SettingsIp directed-broadcast Specifies UDP as the IP forwarding protocol Ip forward-protocolUdp Are forwardedIp helper-address Reviewing IP Traffic and Configuring Routes Show ip routeOSPF, IA Ping Ip routePreference in route selection There is also a traceroute command available in switch mode This command is also available in switch modeTraceroute Configuring Icmp Redirects Ip icmp redirect enableShow ip icmp redirect InterfaceIPv4 Routing Protocol Configuration Activating Advanced Routing FeaturesRIP Configuration Task List and Commands Configuring RIPRIP Configuration Task List and Commands Router ripThis example shows how to enable RIP Ip rip enableDistance Ip rip send version R1compatibleIp rip receive version Ip rip authentication-keySpecifies RIP version 1. This is the default setting Specifies RIP versionIp rip message-digest-key Md5No auto-summary Use this command to disable automatic route summarizationRouter configuration C3su‐routerConfig‐router# Split-horizon poisonPassive-interface Connected Receive-interfaceRedistribute OspfSubnets Command detailed in ip route on page 19‐21Protocol Subnetted will be redistributedOspf Configuration Task List and Commands Configuring OspfOspf Configuration Task List and Commands Advanced License RequiredRouter id RoutesRouter ospf This example shows how to enable routing for Ospf process1583compatibility This example shows how to enable RFC 1583 compatibility Ip ospf enableIp ospf areaid Ip ospf cost Ip ospf priorityTimers spf Ip ospf transmit-delay Ip ospf retransmit-intervalIp ospf dead-interval Ip ospf hello-interval65535 Ip ospf authentication-key Ip ospf message digest key md5 Distance ospfArea intra‐area Area rangeExternal inter‐ Intra‐area routesAdvertise no‐ If not specified, advertise mode will be setArea stub AdvertiseArea default cost Area nssaArea virtual-link Default‐This example shows how to configure area 10 as an Nssa area Information‐Key key Authentication‐Transmit‐delay Dead‐intervalRip Show ip ospfMetric‐type type Use this command to display the Ospf link state database This example shows how to display Ospf informationShow ip ospf database Show ip ospf interface Show ip ospf database Output DetailsShow ip ospf interface Output Details Show ip ospf neighbor Show ip ospf neighbor Output DetailsClear ip ospf process Show ip ospf virtual-linksShow ip ospf virtual links Output Details This example shows how to reset Ospf process Configuring Dvmrp Enabling Dvmrp on an InterfaceThis example shows how to enable the Dvmrp process Ip dvmrp enableCommands to Enable Dvmrp on an Interface Ip dvmrpIp dvmrp metric Use this command to display Dvmrp routing informationShow ip dvmrp This example shows how to display Dvmrp status information Configuring Irdp Ip irdp enableIp irdp maxadvertinterval Ip irdp minadvertintervalIp irdp preference Ip irdp holdtime9000 Ip irdp broadcast Use this command to display Irdp informationShow ip irdp Configuration Tasks on page 18‐1 Configuring Vrrp Router vrrpThis example shows how enable Vrrp configuration mode CreateAddress Priority Advertise-intervalDescribed in Pre‐Routing Configuration Tasks on page 18‐1 PreemptEnable This example shows how to display Vrrp information Ip vrrp authentication-keyUse this command to display Vrrp routing information Show ip vrrpConfiguring PIM-SM Design ConsiderationsIp pimsm Global router configuration C3su‐routerConfig#This example shows how to globally enable and disable PIM Ip pimsm staticrpIp pimsm enable Ip pimsm query-interval This example shows how to display PIM informationShow ip pimsm Show ip pimsm componenttable This example shows how to display PIM router informationShow ip pimsm Output Details Show ip pimsm componenettable Output Details This example shows how to display PIM interface informationShow ip pimsm interface StatsShow ip pimsm interface vlan Output Details This example shows how to display PIM interface statisticsShow ip pimsm neighbor 10 show ip pimsm interface stats Output Details11 show ip pimsm neighbor Output Details ‐11 provides an explanation of the command outputShow ip pimsm rp CandidateShow ip pimsm rphash ‐12 provides an explanation of the command output12 show ip pimsm rp Output Details Show ip pimsm staticrp ‐13 provides an explanation of the command outputDisplay the PIM‐SM static Rendezvous Point information Show ip mroute Use this command to display the IP multicast routing table13 show ip pimsm staticrp Output Details 20-60 IPv4 Routing Protocol Configuration IPv6 Management Show ipv6 statusThis example shows how to enable IPv6 management By default, IPv6 management is disabledSet ipv6 Set ipv6 address No global unicast IPv6 address is defined by defaultEui64 Show ipv6 address Use this command to clear IPv6 global addressesClear ipv6 address Set ipv6 gateway Clear ipv6 gateway Use this command to clear an IPv6 gateway addressShow ipv6 neighbors Use this command to display IPv6 netstat information This example shows example output of this commandShow ipv6 netstat Ping ipv6 This command is also available in router modeSize num Traceroute ipv6 Traceroute ipv6 21-10 IPv6 Management Overview IPv6 ConfigurationIPv6 Routing License Required Default Conditions Following table lists the default IPv6 conditionsIpv6 forwarding General Configuration CommandsIpv6 hop-limit Ipv6 route Default maximum number of IPv6 hops isThis command configures static IPv6 routes This example sets the hop limit toDefault preference or administrative distance is Ipv6 route distanceThis command sets the default distance value to Ipv6 unicast-routingPing ipv6 interface Link‐local‐addressRouter privileged exec C3 su‐router# 20010db8123455551 Ipv6 address Interface Configuration CommandsNo IPv6 addresses are defined for any interface Ipv6 enable IPv6 is disabledIpv6 mtu BytesThis example sets the MTU value to 1500 bytes Clear ipv6 neighbors Neighbor Cache and Neighbor Discovery CommandsThis example clears all dynamically learned cache entries Ipv6 nd dad attempts Duplicate address detection enabled, for 1 attemptIpv6 nd ns-interval Ipv6 nd reachable-time By default, a value of 0 is advertised in RA messagesRouter interface configurationC3su‐routerConfig‐ifVlan 1# This example sets the NS interval to 2 secondsRouter interface configuration C3su‐routerConfig‐if Vlan 1# Ipv6 nd other-config-flagFlag is set to false by default This example sets the reachable time to 60 secondsIpv6 nd ra-interval Ipv6 nd ra-lifetimeIpv6 nd suppress-ra Suppression disabledThis example disables router advertisement transmission Ipv6 nd prefixRouter interface configurationC3su‐routerConfig‐if Vlan 1# No‐autoconfigOff‐link Example Show ipv6 interface Query CommandsShow ipv6 Router privileged execution C3su‐router#This example displays information about IPv6 interface Vlan This command displays IPv6 Neighbor Cache information This example displays the neighbors in the cacheShow ipv6 neighbor Output Details This command displays the IPv6 routing tableShow ipv6 route Interface interfaceThis example displays all active IPv6 routes Show ipv6 route Output DetailsShow ipv6 route preferences Show ipv6 route preferences Output DetailsShow ipv6 route summary This command displays the summary of the routing tableNon‐best routes Show ipv6 traffic Following example displays the output of this commandShow ipv6 summary Output Details Show ipv6 traffic Output Details Options, etc Counter would include datagrams counted Send. Note that this counter includes all those counted by Router privileged executionC3su‐router# Clear ipv6 statisticsThis example clears the statistics for Vlan IPv6 Proxy Routing Preparing a Mixed Stack for IPv6 Proxy Routing LimitationsThis example enables IPv6 proxy routing IPv6 proxy routing is disabled by defaultRouter global configuration C2su‐routerConfig# Ipv6 proxy-routingAny routing mode DHCPv6 Configuration Following table lists the default DHCPv6 conditions Global Configuration CommandsIpv6 dhcp enable This command enables DHCPv6 on the routerThis example enables DHCPv6 By default, DHCPv6 is disabledIpv6 dhcp relay-agent-info-opt Ipv6 dhcp relay-agent-info-remote-id-subopt Ipv6 dhcp poolIpv6 dhcp pool Address Pool Configuration Commands Domain-nameDns-server Prefix-delegationPreferred‐lifetime Valid‐lifetime secsSecs infinite C3su-routerConfig-dhcp6s-pool# exit C3su-routerConfig# Rapid‐commit By default, DHCPv6 functionality is disabledIpv6 dhcp server Preference prefInterface intf Ipv6 dhcp relayDestination dest‐addr Remote‐id duid‐ifidExamples DHCPv6 Show Commands Show ipv6 dhcpShow ipv6 dhcp interface StatisticsOutput of show ipv6 dhcp interface Command This example displays the DHCPv6 statistics for VlanOutput of show ipv6 dhcp statistics Command This example displays the output of this commandShow ipv6 dhcp statistics Clear ipv6 dhcp statistics This example clears DHCPv6 statistics for VlanShow ipv6 dhcp pool This command displays information about DHCPv6 bindingsShow ipv6 dhcp binding If no IPv6 address is specified, all bindings are displayed Show ipv6 dhcp binding DHCPv6 Configuration OSPFv3 Configuration Following table lists the default OSPFv3 conditions Use this command to configure the OSPFv3 router ID Global OSPFv3 Configuration CommandsIpv6 router id Always Default-information originateIpv6 router ospf Metric valueNo default metric is configured Default-metricRouter OSPFv3 configuration C3su‐routerConfig‐router# Router OSPFv3 configuration C3su-routerConfig-router#Inter Exit-overflow-intervalIntra Type1External-lsdb-limit This command configures the external Lsdb limit for OSPFv3Default value is ‐1 This example sets the exit overflow interval to 10 secondsConnected static Maximum-pathsTag tag Metric = unspecified Metric type = Type Tag = Area default-cost Area Configuration CommandsThese commands are used to configure area parameters This example sets the default route cost to 50 for area This example shows how to configure area 20 as an NssaArea nssa no-redistribute Area nssa default-info-originateDefault metric value is ComparableArea nssa no-summary Area nssa translator role This command configures the translator role of the routerBy default, the translator role is disabled Area nssa translator-stab-intvSummarylink Default interval is 40 secondsArea address ranges are not configured by default NssaexternallinkThis command creates a stub area for the specified area ID Area stub no-summary Example disables the import of summary LSAs into stub areaThis example creates a stub area with the ID Default dead interval is 40 seconds Area virtual-link dead-intervalArea virtual-link hello-interval Default hello interval is 10 secondsArea virtual-link retransmit-interval Default retransmit interval is 5 seconds Area virtual-link transmit-delayDefault transmit delay is 1 second Ipv6 ospf enable OSPFv3 is disabled by defaultIpv6 ospf areaid Ipv6 ospf costDefault dead interval value is 40 seconds Ipv6 ospf dead-intervalIpv6 ospf hello-interval Ipv6 ospf mtu-ignoreDefault network type is broadcast By default, MTU mismatch detection is enabledIpv6 ospf network Ipv6 ospf priority Default priority value isIpv6 ospf retransmit-interval Default value is 4 seconds Ipv6 ospf transmit-delayDefault value is 1 second Ipv6 ospf transmit-delay This example shows how to display OSPFv3 router information OSPFv3 Show CommandsThis command displays OSPFv3 router information Show ipv6 ospfShow ipv6 ospf Output Details Show ipv6 ospf area Show ipv6 ospf area Output DetailsShow ipv6 ospf abr Show ipv6 ospf abr Output DetailsShow ipv6 ospf asbr Show ipv6 ospf asbr Output DetailsShow ipv6 ospf database Adv Router Link Id Age Sequence Csum Options Rtr Opt Show ipv6 ospf database Output Details Show ipv6 ospf database database-summary Output Details Show ipv6 ospf interface This command displays information about OSPFv3 interfacesLoopback loopid Show ipv6 ospf interface Command Output Details This example shows how to display statistics for Vlan Show ipv6 ospf interface statsShow ipv6 ospf interface stats Output Details Specify the Vlan interface to display information about This command displays information about OSPFv3 neighborsShow ipv6 ospf neighbor Specify the tunnel interface to displayShow ipv6 ospf neighbor Output Details 10 show ipv6 ospf neighbor routerid Output Details Show ipv6 ospf rangeThis example displays range information for area This example displays the OSPFv3 stub table information Show ipv6 ospf stub table11 show ipv6 ospf range Output Details 12 show ipv6 ospf stub table Output DetailsShow ipv6 ospf virtual-link 13 show ipv6 ospf virtual-link Output DetailsShow ipv6 ospf virtual-link Show ipv6 ospf virtual-link OSPFv3 Configuration Authentication and Authorization Configuration Overview of Authentication and Authorization MethodsOverview of Authentication and Authorization Methods Filter-ID Attribute Formats Set authentication login Setting the Authentication Login MethodShow authentication login Use this command to set the authentication login methodLocal Clear authentication loginAny RadiusShow radius Configuring RadiusTimeout RetriesServer Optional Displays Radius server configuration informationSet radius Servers or a specific Radius server as defined by an indexRealm management‐ access any network‐access Timeout timeoutServer index Clear radius RealmSet radius accounting Show radius accountingRetries retries Clear radius accounting This example shows how to set Radius accounting retries toTimeout RetriesShow radius interface Set radius interfaceClear radius interface Example Auth‐diag Configuring 802.1X AuthenticationShow dot1x Auth‐statsThis example shows how to display 802.1X status Show dot1x auth-config Init reauth Set dot1xTrue false Set dot1x auth-config Clear dot1x auth-config Portcontrol MaxreqShow eapol Connecting state, via disconnected Show eapol Output DetailsAuth‐mode Set eapolClear eapol Forced‐authOptional Globally clears the Eapol authentication mode Configuring MAC Authentication Show macauthenticationShow macauthentication Output Details NopasswordThis example shows how to display MAC session information Show macauthentication sessionShow macauthentication session Output Details Set macauthentication password Set macauthenticationUse this command to set a MAC authentication password Use this command to clear the MAC authentication password Clear macauthentication passwordSet macauthentication port Enables or disables MAC authenticationSet macauthentication portinitialize Set macauthentication portquietperiodSet macauthentication macinitialize Clear macauthentication portquietperiodThis example resets the default quiet period on port Set macauthentication portreauthenticate Set macauthentication reauthenticationEnables or disables MAC reauthentication Set macauthentication macreauthenticate Set macauthentication reauthperiodClear macauthentication reauthperiod Set macauthentication significant-bits Clear macauthentication significant-bitsC3su-clear macauthentication significant-bits About Multiple Authentication Types Configuring Multiple Authentication MethodsAbout Multi-User Authentication Show multiauth Multi Set multiauth modeClear multiauth mode StrictSet multiauth precedence Default precedence order is dot1x, pwa, macClear multiauth precedence Show multiauth port Set multiauth portClear multiauth port Show multiauth station Show multiauth sessionShow multiauth idle-timeout Agent dot1x macWhich to set the timeout value Set multiauth idle-timeoutAuthentication method for which to set the timeout value Idle timeout value is provided by the authenticating serverDefault Clear multiauth idle-timeoutShow multiauth session-timeout Which to reset the timeout value to its defaultSet multiauth session-timeout Which to set the session timeout valueClear multiauth session-timeout Configuring User + IP Phone AuthenticationConfiguring Vlan Authorization RFC Set vlanauthorization egress Set vlanauthorizationTagged Show vlanauthorization Clear vlanauthorizationBy default, administrative egress is set to untagged Configuring Policy Maptable Response Show vlanauthorization Output DetailsWhen Policy Maptable Response is Both Operational DescriptionWhen Policy Maptable Response is Tunnel When Policy Maptable Response is PolicyShow policy maptable Both Set policy maptableResponse PolicyClear policy maptable Configuring MAC Locking To review, disable, enable, and configure MAC lockingShow maclock Firstarrival Show maclock stationsShow maclock Output Details Connected to MAC locked portsSet maclock enable port‐string Set maclock enableShow maclock stations Output Details This example shows how to disable MAC locking on ge.2.3 Set maclock disableThis example shows how to enable MAC locking on ge.2.3 Set maclockCreate Clear maclockSpecified MAC address and port Set maclock static Clear maclock staticSet maclock firstarrival Clear maclock firstarrival Set maclock agefirstarrivalClear maclock agefirstarrival This example enables first arrival aging on port ge.1.1This example disables first arrival aging on port ge.1.1 Set maclock moveSet maclock trap Configuring Port Web Authentication PWA About PWAShow pwa Show pwa Output DetailsThis example shows how to enable port web authentication Enable disable Enables or disables port web authenticationSet pwa Show pwa banner This example shows how to display the PWA login bannerSet pwa banner Set pwa displaylogo This example shows how to hide the Enterasys Networks logoClear pwa banner Display hideSet pwa protocol Set pwa ipaddressChap pap Set pwa guestname Use this command to clear the PWA guest user nameThis example shows how to clear the PWA guest user name Clear pwa guestnameAuthnone Set pwa guestpasswordSet pwa gueststatus AuthradiusSet pwa initialize This example shows how to initialize ports ge.1.5‐7Set pwa quietperiod Set pwa maxrequest Set pwa portcontrolThis example shows how to display PWA session information Enables or disables PWA on specified portsThis example shows how to enable PWA on ports 1‐22 Show pwa sessionThis example shows how to enable PWA enhancedmode Enable disable Enables or disables PWA enhancedmodeSet pwa enhancedmode Show ssh status Configuring Secure Shell SSHThis example shows how to display SSH status on the switch Set sshThis example shows how to regenerate SSH keys This example shows how to disable SSHSet ssh hostkey Show access-lists Configuring Access ListsShow access‐lists number Access-list standard Deny permitInsert replace Access-list extendedThis example moves entry 16 to the beginning of ACL Insert replace Interface configuration C3su‐routerConfig‐ifVlan vlanid# Ip access-groupFilters inbound frames Example Page TACACS+ Configuration State Optional Displays only the TACACS+ client status Show tacacsShow tacacs Output Details This example shows how to enable the TACACS+ client Use this command to enable or disable the TACACS+ clientEnable disable Enables or disables the Tacacs client Set tacacsTimeout seconds Set tacacs serverClear tacacs server Specifies one TACACS+ server to be affectedShow tacacs session This example removes TACACS+ serverSet tacacs session Read‐write ServiceClear tacacs session Super‐userShow tacacs command Set tacacs commandSet tacacs singleconnect Show tacacs singleconnectConnection Show tacacs interface Set tacacs interfaceClear tacacs interface Clear tacacs interface TACACS+ Configuration 27-14 Using sFlow in Your Network SFlow ConfigurationAdvantages of using sFlow include Sampling Mechanisms DefinitionsSFlow Agent Functionality SFlow DefinitionsCounter Sampling Packet Flow SamplingUsage Notes 28-5 Show sflow receivers Contents of the sFlow Receivers Table is displayedThis example displays the sFlow Receivers Table Following table describes the output fields Show sflow receivers Output DescriptionsSet sflow receiver owner Set sflow receiver ipSet sflow receiver maxdatagram Default IP address isDefault maximum datagram size is 1400 bytes Maxdatagram bytesClear sflow receiver Default port value isSet sflow receiver port MaxdatagramOwner Set sflow port pollerPort port Show sflow pollers Interval Clear sflow port pollerSet sflow port sampler This example removes the poller instance on port ge.1.1Show sflow samplers Maxheadersize Clear sflow port samplerSet sflow interface RateShow sflow interface Clear sflow interface Show sflow agent 28-18 Policy Capacities Policy and Authentication CapacitiesTable A-1 Policy Capacities Authentication Capacities Table A-2 Authentication CapacitiesIndex NumericsOspf 20-30Network Management Tftp Index