Ip access-group | Enterasys Networks 9034313-07 specification

ip access-group

If eq port is not specified, TCP/UDP ports are not used for filtering. Only the protocol, source, and destination are used for applying the rule.

Mode

Global configuration: C3(su)‐>router(Config)#

Usage

Access lists are applied to interfaces by using the ip access‐group command as described in “ip access‐group” on page 26‐86.

Valid access‐list‐numbers for extended ACLs are 100 to 199. For standard ACLs, valid values are 1 to 99.

All access lists have an implicit “deny any any” statment as their last entry.

Examples

This example shows how to define access list 145 to deny ICMP transmissions from any source and for any destination:

C3(su)->router(Config)#access-list 145 deny ICMP any any

This example appends to access list 145 a permit statement that allows the host with IP address 88.255.255.254 to do an SSH remote login to any destination on TCP port 22.

C3(su)->router(Config)#access-list 145 permit tcp host 88.255.255.254 any eq 22

This example appends to access list 145 a permit statement that allows SNMP control traffic (from UDP port 161) to be sent from IP addresses within the range defined by 88.255.128.0 0.0.127.255 to any destination.

C3(su)->router(Config)#access-list 145 permit udp 88.255.128.0 0.0.127.255 eq 161 any

ip access-group

Use this command to apply access restrictions to inbound frames on an interface when operating in router mode. The no form of this command removes the specified access list.

Syntax

ip access-groupaccess-list-number in

no ip access-group access-list-numberin

Parameters

access‐list‐number Specifies the number of the access list to be applied to the access list. This is a decimal number from 1 to 199.

in	Filters inbound frames.

Defaults

None.

Mode

Interface configuration: C3(su)‐>router(Config‐if(Vlan <vlan_id>))#

26-86 Authentication and Authorization Configuration

Image 832

Enterasys Networks 9034313-07 manual Ip access-group, Filters inbound frames

Contents

Enterasys SecureStack C3 Page Page Enterasys Networks, Inc. Firmware License Agreement Iii Page Contents Page Activating Licensed Features Configuring System Power and PoE Discovery Protocol Configuration Port Configuration Show port broadcast Set port broadcast Clear port broadcast Snmp Configuration Spanning Tree Configuration Configuring Spanning Tree Port Parameters Purpose Commands 802.1Q Vlan Configuration Policy Classification Configuration Port Priority Configuration Igmp Configuration Logging and Network Management 14-3 Rmon Configuration Dhcp Server Configuration IP Configuration Preparing for Router ModeDhcp Snooping and Dynamic ARP Inspection IPv4 Routing Protocol Configuration 20-11 IPv6 Configuration IPv6 Management DHCPv6 Configuration IPv6 Proxy Routing OSPFv3 Configuration Authentication and Authorization Configuration 26-37 TACACS+ Configuration SFlow Configuration Appendix a Policy and Authentication CapacitiesIndex Tables 10-4 22-26 Xxxii Using This Guide About This GuideStructure of This Guide Important Notice Structure of This Guide SecureStack C3 Installation Guides Related Documents Following conventions are used in the text of this document Conventions Used in This GuideFollowing icons are used in this guide Getting Help Support@enterasys.com Getting Help Xxxviii About This Guide Introduction Switch Management MethodsSecureStack C3 CLI Overview Factory Default Settings Default Settings for Basic Switch Operation Feature Default Setting Default Settings for Router Operation Sntp Dvmrp Connecting Using the Console Port Using the Command Line InterfaceStarting a CLI Session Connecting Using Telnet Using a Default User AccountUsing an Administratively Configured User Account Logging Navigating the Command Line Interface CLI Command Defaults DescriptionsCLI Command Modes Getting Help with CLI Syntax Abbreviating and Completing Commands Displaying Scrolling Screens Basic Line Editing Commands Basic Line Editing Commands Configuring Switches in a Stack About SecureStack C3 Switch Operation in a Stack Installing a New Stackable System of Up to Eight Units Creating a Virtual Switch Configuration Installing Previously-Configured Systems in a StackAdding a New Unit to an Existing Stack SID Considerations About Using Clear Config in a Stack Issues Related to Mixed Type StacksFeature Support Configuration Stacking Configuration and Management Commands Show switchCommands Purpose Show switch switchtype Examples Show switch stack-ports None Set switch Switch command, read‐writeExample Priority value Set switch copy-fw Set switch descriptionThis example shows how to assign priority 3 to switch This example shows how to renumber switch 5 to switch Set switch movemanagement Set switch member Clear switch member Use this command to remove a member entry from the stack Quick Start Setup Commands Basic ConfigurationRequired CLI Setup Commands Setting User Accounts and Passwords Optional CLI Setup Commands Show system login Output Details Show system loginParameters Set system login Clear system loginUse this command to remove a local login user account Super‐user read‐write read‐only This example shows how to remove the netops user account Set passwordSwitch command, read‐write Switch command, super‐user Set system password length Set system password aging Disable Set system password historyShow system lockout Set system lockout Show system lockout Output DetailsAttempts attempts Time time Setting Basic Switch Properties Show ip address Set ip address Use this command to clear the system IP addressClear ip address Show ip protocol This example shows how to clear the system IP addressSet ip protocol This example shows how to display system information Show system Show system hardware Show system Output Details Show system utilization Slot Hardware Information Set system utilization Default threshold value is 80%This example sets the CPU utilization threshold to 75% Clear system utilization Show system enhancedbuffermode Set system temperature Enable disable Enables or disables enhanced buffer modeThis example shows how to enable enhanced buffer mode Set system enhancedbuffermode Clear system temperature Syslog enableDisable Trap enable disable Show time Set time Use this command to display daylight savings time settings This example shows how to set the system clock to 750 a.mShow summertime Set summertime Set summertime dateIf a zone name is not specified, none will be applied If an offset is not specified, none will be applied Set summertime recurring Use this command to modify the command prompt This example shows how to set the command prompt to SwitchClear summertime Set prompt Show banner motd Set banner motd Clear banner motd Show version ‐5 provides an explanation of the command output Use this command to configure a name for the systemSet system name Show version Output Details Use this command to identify the location of the system This example shows how to set the system location stringSet system location Set system contact This example shows how to set the system contact string This example shows how to set the terminal columns toSet width Set length This example shows how to set the terminal length to This example shows how to display the CLI logout settingShow logout Set logout Use this command to display console settings This example shows how to display all console settingsUse this command to set the console port baud rate Show console This example shows how to set the console port baud rate to Downloading a Firmware ImageDownloading from a Tftp Server Downloading via the Serial Port Type 2. The following baud rate selection screen displays Reverting to a Previous Image Show boot system Reviewing and Selecting a Boot Firmware ImageReboot the system using the reset command page 3‐50 Set boot system Compatibility platform specific Starting and Configuring Telnet This example shows how to display Telnet statusUse this command to enable or disable Telnet on the switch Show telnet Enable disable TelnetInbound Outbound all Managing Switch Configuration and Files Configuration Persistence Mode Show snmp persistmode Set snmp persistmode Save config DirAuto Manual Use this command to display the contents of a file Show file Show config All ConfigureOutfile Append CopySystemimage This example shows how to download an image via Tftp Show tftp settingsDelete Set tftp timeout Clear tftp timeoutThis example shows the output of this command This example sets the timeout period to 4 seconds Clear tftp retry Set tftp retryThis example sets the retry count to This example shows how to clear the CLI screen Clearing and Closing the CLICls clear screen To clear the CLI screen or to close your CLI session Resetting the Switch ResetUse either of these commands to leave a CLI session This example shows how to exit a CLI session Clear config If no unit ID is specified, the entire system will be resetThis example shows how to reset the system This example shows how to reset unit Use this command to display WebView status Using and Configuring WebViewShow webview Set webview Show ssl This example shows how to enable SSL This example shows how to display SSL statusSet ssl Command Gathering Technical Support InformationShow support To gather common technical support information Configuring Hostprotect Hostprotect is enabled by defaultShow system hostprotect Set system hostprotect This feature is disabled by default This example disables hostprotectDefault state is enabled Clear system hostprotect Usage Licensing Procedure in a Stack Environment Activating Licensed FeaturesLicense Key Field Descriptions Clearing, Showing, and Applying Licenses Adding a New Member to a Licensed Stack Set license Usage Use this command to clear the license key settings FeatureID feature The name of the feature being clearedShow license Clear license C3rw-clear license featureId advrouter Clear license Activating Licensed Features Configuring System Power and PoE CommandsShow inlinepower Use this command to display system power properties This example shows how to display system power properties Set inlinepower thresholdShow inlinepower Output Details Set inlinepower detectionmode Set inlinepower trapSending of traps is disabled by default Show port inlinepower Ieee Set port inlinepower Admin off autoPriority critical High low Set port inlinepower Configuring System Power and PoE Discovery Protocol Configuration Configuring CDP Show cdp Show cdp Output Details Enable Auto disableSet cdp state Set cdp auth Use this command to set a global CDP authentication codeSet cdp interval Set cdp hold-time Clear cdp Show neighbors Configuring Cisco Discovery Protocol Show ciscodp ‐2 provides an explanation of the command output ‐3 provides an explanation of the command outputShow ciscodp port info Show ciscodp Output Details Set ciscodp timer This example shows how to globally enable CiscoDPSet ciscodp status Show ciscodp port info Output Details Set ciscodp holdtime Set ciscodp port Vvid Dot1pUntagged Trusted Clear ciscodp To review and configure Llpd and LLPD‐MED Configuring Link Layer Discovery Protocol and LLDP-MEDOverview Configuration Tasks Use this command to display Lldp configuration information Show lldp Show lldp port status Show lldp port trap Show lldp port location-info Show lldp port tx-tlvShow lldp port tx‐tlv port‐string Show lldp port local-info Show lldp port local-info Output Details 1000BASE-TFD ECS Elin Show lldp port remote-info Voice‐signaling Guest‐voice‐signalingShow lldp port network-policy Voice Video‐signaling Set lldp tx-intervalSoftphone‐voice Video‐conferencing Set lldp trap-interval Set lldp hold-multiplierThis example sets the transmit interval to 20 seconds Set lldp med-fast-repeat Tx‐enable Rx‐enableSet lldp port status Set lldp port trap Set lldp port location-info Set lldp port med-trapElin Set lldp port tx-tlv Gvrp Mac‐phyPoe Link‐aggr State enable disable Set lldp port network-policyTag tagged untagged Vid vlan‐id dot1p Clear lldp Tx‐intervalHold‐multiplier Trap‐interval Clear lldp port status Clear lldp port trap Clear lldp port location-info Clear lldp port med-trapCleared Clear lldp port network-policy TagVid Dscp Clear lldp port tx-tlv Disables the LLDP‐MED Location Identification TLV from being Disables the LLDP‐MED Extended Power via MDI TLV from being Port Configuration Port Configuration SummaryPort String Syntax Used in the CLI Port type.unitorslot number.port number Reviewing Port Status Port Slot/Unit Parameters Used in the CLI Show port Show port status Show port counters Switch mib2Show port status Output Details Show port counters Output Details Show port cablestatus Clear port countersThis example clears the port counters for ge.3.1 This example shows the cable status for 1 GE port ge.1.31 Disabling / Enabling and Naming PortsShow port cablestatus Output Details Set port disable Set port enableThis example shows how to disable ge.1.1 This example shows how to enable ge.1.3 Show port alias Use this command to assign an alias name to a portSet port alias This example shows how to assign the alias Admin to ge.3.3 This example shows how to clear the alias for ge.3.3 Setting Speed and Duplex Mode Show port speed Set port speed Show port duplex10 100 Mbps Set port duplex This example shows how to set ge.1.17 to full duplexFull half Enabling / Disabling Jumbo Frame Support Show port jumbo Set port jumbo Enables or disables jumbo frame supportClear port jumbo Setting Auto-Negotiation and Advertised Ability Show port negotiation Set port negotiation Enable disableShow port advertise Set port advertise Clear port advertise Show port mdix Set port mdixForced‐auto Mdi Configure ports to use Mdix mode only Configure ports to use MDI mode onlyOptional Specify the port or ports to configure Show flowcontrol Setting Flow ControlSet flowcontrol This example shows how to enable flow control Setting Port Link Traps and Link Flap Detection Show port trap Set port trap Following example disables sending trap on ge.3.1Show linkflap Globalstate PortstateParameters Metrics Show linkflap parameters Output Details Show linkflap metrics Output Details Disable enable Disables or enables the link flap detection functionSet linkflap globalstate Set linkflap portstate Set linkflap interval Set linkflap action Clear linkflap action Use this command to set the link flap action trigger countSet linkflap threshold Set linkflap downtime Clear linkflap down Clear linkflap All statsParameter Threshold interval Configuring Broadcast Suppression Show port broadcast Set port broadcast Clear port broadcast Syntax Used in the CLI on page 7‐1 Port Mirroring Mirroring FeaturesRemote Port Mirroring Procedures Configuring Smon MIB Port MirroringOverview To review and configure port mirroring on the device Show port mirroring Can be configured per stack, if applicable Create disableSet port mirroring Clear port mirroring Use this command to clear a port mirroring relationshipSet mirror vlan Clear mirror vlan Link Aggregation Control Protocol Lacp Lacp Operation ‐6 defines key terminology used in Lacp configuration Lacp TerminologySecureStack C3 Usage Considerations Lacp Terms and Definitions Commands ‐7 provides an explanation of the command output Show lacp Disable enable Disables or enables Lacp This example shows how to disable LacpSet lacp Show lacp Output Details Set lacp asyspri Set lacp aadminkeyAsyspri Clear lacp Disable enable Disables or enables static link aggregationSet lacp static Clear lacp static Set lacp singleportlag This example enables the formation of single port LAGsClear lacp singleportlag Status detail Show port lacpSummary Counters Aadminkey Set port lacp Aadminstate LacptimeoutPadminkey Padminport Clear port lacp C3su-clear port lacp port ge.3.16 Set port protected Configuring Protected PortsProtected Port Operation Clear port protected Show port protectedRead‐only Set port protected name Show port protected name Use this command to clear the name of a protected group Clear port protected name Clear port protected name Port Configuration Snmp Configuration Snmp Configuration Summary SNMPv3 SNMPv1 and SNMPv2cAbout Snmp Security Models and Levels Using Snmp Contexts to Access Specific MIBs Configuration ConsiderationsReviewing Snmp Statistics Snmp Security Levels Show snmp engineid This example shows how to display Snmp engine propertiesShow snmp engineid Output Details This example shows how to display Snmp counter values Use this command to display Snmp traffic counter valuesShow snmp counters Show snmp counters Output Details Engine or otherwise unavailable Configuring Snmp Users, Groups, and Communities Show snmp user This example shows how to display an Snmp user list ‐4 provides an explanation of the command outputUse this command to create a new SNMPv3 user Set snmp user Aes ShaVolatile Nonvolatile Show snmp group Clear snmp userRemote remote Set snmp group User userSecurity‐model V2c usm Volatile Show snmp community Clear snmp groupV2c usm Use this command to configure an Snmp community group Set snmp communitySecurityname Context context Configuring Snmp Access Rights Use this command to delete an Snmp community nameThis example shows how to delete the community name vip Clear snmp community Show snmp access NoauthenticationAuthentication Privacy Context context Nonvolatile read‐ Only ‐6 provides an explanation of the command output This example shows how to display Snmp access informationShow snmp access Output Details Set snmp access Clear snmp access Configuring Snmp MIB Views Show snmp view Set snmp view Show snmp contextShow snmp view Output Details Clear snmp view Configuring Snmp Target Parameters Show snmp targetparamsVolatile nonvolatile Read‐only ‐8 provides an explanation of the command output Set snmp targetparamsShow snmp targetparams Output Details Message‐ Authentication Clear snmp targetparamsPrivacy Protected from disclosure Use this command to display Snmp target address information Configuring Snmp Target AddressesShow snmp targetaddr Timeout timeout Set snmp targetaddrParam param Udpport udpport Use this command to delete an Snmp target address entry Clear snmp targetaddrTaglist taglist Tag 1 tag Configuring Snmp Notification Parameters About Snmp Notify Filters Show newaddrtrap By default, this function is disabled globally and per portSet newaddrtrap Show snmp notify ‐10 provides an explanation of the command output Set snmp notify10 show snmp notify Output Details Trap inform Clear snmp notify Use this command to clear an Snmp notify configurationShow snmp notifyfilter Set snmp notifyfilter Subtree oid‐or‐ Clear snmp notifyfilter Set snmp notifyprofile Show snmp notifyprofileTargetparam This example shows how to delete Snmp notify profile area51 Creating a Basic Snmp Trap ConfigurationClear snmp notifyprofile 11 Basic Snmp Trap Configuration Example How Snmp Will Use This Configuration Configuring the Snmp Management InterfaceShow snmp interface Set snmp interface Loopback loop‐ID Clear snmp interface Clear snmp interface Snmp Configuration Spanning Tree Configuration Spanning Tree Configuration Summary Spanning Tree Features Loop Protect Configuring Spanning Tree Bridge Parameters For information about Sid sid Show spantree statsActive ‐1 shows a detailed explanation of command output Show spantree Output Details Set spantree Disable enable Globally disables or enables Spanning TreeShow spantree version Set spantree version Clear spantree version This example shows how to reset the Spanning Tree versionShow spantree bpdu-forwarding Disable enable Disables or enables Bpdu forwarding By default Bpdu forwarding is disabledThis example shows how to enable Bpdu forwarding Set spantree bpdu-forwarding Set spantree bridgeprioritymode Clear spantree bridgeprioritymode8021d 8021t Set spantree msti Show spantree mstilistCreate delete Show spantree mstmap Clear spantree mstiFid fid This example shows how to map FID 3 to SID Use this command to map a FID back to SIDSet spantree mstmap Clear spantree mstmap Show spantree vlanlist This example shows how to map FID 2 back to SIDShow spantree mstcfgid Set spantree mstcfgid Cfgname name Specifies an MST configuration nameClear spantree mstcfgid Set spantree priority Use this command to set the device’s Spanning Tree priorityClear spantree priority Set spantree hello This example shows how to reset the bridge priority on SIDClear spantree hello Use this command to set the bridge maximum aging time Set spantree maxage Use this command to set the Spanning Tree forward delay Set spantree fwddelayClear spantree maxage Clear spantree fwddelay Show spantree backuproot Set spantree backuproot Clear spantree backuproot Show spantree tctrapsuppress Set spantree tctrapsuppress Clear spantree tctrapsuppress Set spantree protomigration Show spantree spanguard Enable disable Enables or disables the SpanGuard functionSet spantree spanguard This example shows how to enable the SpanGuard function Clear spantree spanguard Show spantree spanguardtimeout Set spantree spanguardtimeout Clear spantree spanguardtimeout Show spantree spanguardlock This example shows how to unlock port ge.1.16 Show spantree spanguardtrapenableClear / set spantree spanguardlock Clear spantree spanguardtrapenable Set spantree spanguardtrapenableIs enabled Show spantree legacypathcost Set spantree legacypathcost Clear spantree legacypathcost Show spantree autoedgeSet spantree autoedge This example clears the legacy path cost to 802.1t values Clear spantree autoedge Configuring Spanning Tree Port Parameters Set spantree portadminDisable enable To display and set Spanning Tree port parameters Show spantree portadmin Clear spantree portadminThis example shows how to disable Spanning Tree on ge.1.5 Show spantree portpri Use this command to set a port’s Spanning Tree prioritySet spantree portpri Clear spantree portpri Show spantree adminpathcost Set spantree adminpathcost Clear spantree adminpathcost Show spantree adminedge Set spantree adminedge Clear spantree adminedgeThis example shows how to set ge.1.11 as an edge port True false This example shows how to reset ge.1.11 as a non‐edge port Show spantree operedge Configuring Spanning Tree Loop Protect Parameters This example shows how to enable Loop Protect on ge.2.3 Set spantree lpShow spantree lp If no SID is specified, SID 0 is assumed Clear spantree lp Show spantree lplock Clear spantree lplock SID Locked Set spantree lpcapablepartner Show spantree lpcapablepartner Clear spantree lpcapablepartner Use this command to set the Loop Protect event thresholdSet spantree lpthreshold Show spantree lpthreshold None. The default event threshold isClear spantree lpthreshold Set spantree lpwindow Show spantree lpwindow Disabled Set spantree lptrapenableClear spantree lpwindow Show spantree lptrapenable Clear spantree lptrapenable Set spantree disputedbpduthreshold Show spantree disputedbpduthreshold Clear spantree disputedbpduthreshold Show spantree nonforwardingreason 802.1Q Vlan Configuration Vlan Configuration Summary Command Set for Creating a Secure Management Vlan Creating a Secure Management Vlan Viewing VLANs Show vlanStatic Portinfo Show vlan Output Details Vlan Vlan ID Name Create enable Creates, enables or disables VLANs. disable This example shows how to create VlanCreating and Naming Static VLANs Set vlan Set vlan name This example shows how to set the name for Vlan 7 to greenClear vlan This example shows how to clear the name for Vlan Clear vlan name Assigning Port Vlan IDs PVIDs and Ingress Filtering Show port vlan Set port vlan Clear port vlanModify‐egress No‐modify‐egress Show port ingress filter Set port ingress filter Show port discard Set port discard Tagged untagged both none Configuring the Vlan Egress List Show port egress Set vlan forbidden Use this command to remove ports from a VLAN’s egress list Set vlan egressClear vlan egress Untagged forbidden tagged Show vlan dynamicegress Forbidden This example shows how to enable dynamic egress on Vlan Enable disable Enables or disables dynamic egressSet vlan dynamicegress Show host vlan Setting the Host VlanSet host vlan This example shows how to set Vlan 7 as the host Vlan Clear host vlan About Garp Vlan Registration Protocol Gvrp Enabling/Disabling Gvrp Garp Vlan Registration ProtocolHow It Works Example of Vlan Propagation via Gvrp Use this command to display Gvrp configuration information Show garp timerShow gvrp Disables or enables Gvrp on the device Show gvrp configuration Output DetailsSet gvrp This example shows how to enable Gvrp on ge.1.3 Set garp timerClear gvrp Clear garp timer Leaveall timer‐Join Leave C3su-clear garp timer leave ge.1.1 Policy Classification Configuration Policy Classification Configuration Summary Configuring Policy Profiles Use this command to display policy profile informationShow policy profile ‐verbose Show policy profile Output Details Set policy profile This example shows how to delete policy profile Use this command to delete a policy profile entryClear policy profile All admin‐ profile profile‐ index Configuring Classification RulesShow policy rule Not‐in‐service Not‐ready Storage‐type non‐ Admin‐pidTcpsourceport Udpdestport Show policy capability Show policy rule Output Details Vlan Set policy rule Admin‐profileVlantag data Ether IpprotoIpdestsocket Ipsourcesocket Valid Values for Policy Classification Rules Data value Mask bits Following parameters apply to deleting an admin rule Clear policy ruleRange from 1 to 4094 or 0xFFF All‐pid‐entries Use this command to remove all policy classification rules Clear policy all-rules Use this command to assign ports to a policy profile Assigning Ports to Policy ProfilesSet policy port To assign and unassign ports to policy profiles Clear policy port About Policy-Based CoS Configurations Configuring Policy Class of Service CoSProcedure 11-1 User-Defined CoS Configuration Configuring Policy Class of Service CoS Procedure About CoS-Based Flood Control Use this command to enable or disable Class of Service Set cos state Show cos state This example shows how to enable Class of ServiceClear cos state Set cos settings Priority priorityTos‐value tos‐value Irl‐reference Clear cos settings Show cos settingsPriority Tos‐value Set cos port-config Show cos port-config Should be displayed Clear cos port-config EntryName Ports Set cos port-resource irl Set cos port-resource flood-ctrl Group#.port‐typeUnicast Multicast Show cos port-resource Group#.port‐type Clear cos port-resource irl UnitRate Type Clear cos port-resource flood-ctrl Set cos referenceUnicast Multicast Specifies that an IRL reference is being configured Show cos referenceIRL reference number associated with this entry Rate‐limit irl‐index Clear cos reference Show cos unit Port‐typ e indexKbps Pps Clear cos all-entries Show cos port-type This example shows flood control information for port type Port Priority Configuration Port Priority Configuration Summary Configuring Port Priority Show port priority Set port priority Clear port priority Configuring Priority to Transmit Queue Mapping Show port priority-queue Set port priority-queue Clear port priority-queue Configuring Quality of Service QoS Show port txq Set port txq By default, transmit queues are defined as follows Clear port txq Clear port txq Port Priority Configuration Igmp Overview Igmp ConfigurationAbout IP Multicast Group Management To configure Igmp snooping from the switch CLI Configuring Igmp at LayerAbout Multicasting Set igmpsnooping adminmode Use this command to display Igmp snooping informationThis example shows how to display Igmp snooping information Use this command to enable or disable Igmp on the system This example shows how to enable Igmp on the system Enable disable Enables or disables IgmpThis example shows how to enable Igmp on port ge.1.10 Set igmpsnooping interfacemode Set igmpsnooping maxresponse Set igmpsnooping mcrtrexpiretime Set igmpsnooping add-staticModify If no ports are specified, all ports are added to the entry Show igmpsnooping static Set igmpsnooping remove-staticIf modify is not specified, a new entry is created Show igmpsnooping mfdb Group groupThis example displays the static Igmp ports for Vlan Stats Optional Displays Mfdb statistics This example shows how to clear all Igmp snooping entries Use this command to clear all Igmp snooping entriesClear igmpsnooping Configuring Igmp on Routing Interfaces To configure Igmp on routing interfacesGlobal configuration C3su‐routerConfig# Ip igmp Ip igmp enable This example shows how to enable Igmp on the routerInterface configuration C3su‐routerConfig‐ifVlan 1# Ip igmp version Any router mode Show ip igmp interface Show ip igmp groups Ip igmp query-interval Ip igmp query-max-response-time Ip igmp startup-query-interval Ip igmp startup-query-count Ip igmp last-member-query-interval Ip igmp last-member-query-count Ip igmp robustness Interface configuration C3 su‐routerConfig‐ifVlan 1# Ip igmp robustness Igmp Configuration Configuring System Logging Logging and Network Management Show logging server Set logging server Show logging default Clear logging server Set logging default Use this command to set logging default values Clear logging default Show logging applicationFacility Severity Set logging application Show logging application Output Details Level level If level is not specified, none will be applied Clear logging application Show logging local Set logging local Clear logging local Show logging buffer This example shows how to clear local loggingShow logging interface Set logging interface Clear logging interface Monitoring Network Events and Status History Use this command to set the size of the history buffer DefaultShow history Set history Show users PingThis example, the host at IP address is not responding Show netstat DisconnectConsole Following table describes the output of this command Following example shows the output of this commandShow netstat Output Details Use this command to display the switch’s ARP table Managing Switch Network Addresses and RoutesShow arp Set arp This example shows how to display the ARP tableShow arp Output Details Clear arp Traceroute Show mac Each responseType other learned Self mgmt Show mac agetime Show mac Output Details This example shows how to display the MAC timeout period This example shows how to set the MAC timeout periodSet mac agetime Clear mac agetime Set mac algorithm Default MAC algorithm is mac‐crc16‐upperbitsShow mac algorithm Clear mac algorithm Set mac multicast Clear mac address Use this command to remove a multicast MAC addressAppend clear Show mac unreserved-flood Set mac unreserved-flood Configuring Simple Network Time Protocol Sntp This example enables multicast flood protectionUse this command to display Sntp client settings Show sntp This example shows how to display Sntp client settings Show sntp Output Details Set sntp client Clear sntp client Clear sntp server Set sntp serverIf precedence is not specified, 1 will be applied Set sntp poll-interval Clear sntp poll-interval Set sntp poll-retry This example shows how to clear the Sntp poll intervalClear sntp poll-retry Set sntp poll-timeout Clear sntp poll-timeoutUse this command to clear the Sntp poll timeout This example shows how to clear the Sntp poll timeout Set timezone Show sntp interface Set sntp interface Clear sntp interface C3rw-show sntp interface Vlan 100 C3rw-clear sntp interface Configuring Node Aliases Show nodealias config Set nodealias Show nodealias config Output DetailsMaxentries maxentries Clear nodealias config Rmon Monitoring Group Functions and Commands Rmon ConfigurationRmon Monitoring Group Functions Group What It Does What It Monitors CLI Commands Design Considerations Statistics Group Commands To display, configure, and clear Rmon statistics Show rmon stats Use this command to configure an Rmon statistics entrySet rmon stats To‐defaults This example shows how to delete Rmon statistics entryClear rmon stats If owner is not specified, monitor will be applied History Group Commands Show rmon history Set rmon history Clear rmon historyBuckets buckets Interval interval This example shows how to delete Rmon history entry Show rmon alarm Alarm Group CommandsThis example shows how to display Rmon alarm entry Set rmon alarm properties Show rmon alarm Output DetailsObject object Type absolute Set rmon alarm status Clear rmon alarm EnableThis example shows how to enable Rmon alarm entry Use this command to delete an Rmon alarm entry Event Group Commands Use this command to display Rmon event entry propertiesThis example shows how to display Rmon event entry Show rmon event Set rmon event properties DescriptionType none log Trap both Set rmon event status This example shows how to enable Rmon event entryClear rmon event This example shows how to clear Rmon event Filter Group Commands Show rmon channel Use this command to configure an Rmon channel entry Set rmon channelAccept matched Failed Clear rmon channel Show rmon filterIndex index Channel channel Set rmon filter This example shows how to clear Rmon filter entry Use this command to clear an Rmon filter entryClear rmon filter Show rmon capture Packet Capture CommandsNodata Set rmon capture Action lockSlice slice Loadsize loadsize This example shows how to clear Rmon capture entry Use this command to clears an Rmon capture entryClear rmon capture Dhcp Server Configuration Dhcp OverviewDhcp Relay Agent Dhcp Server Configuring a Dhcp Server Configuring General Dhcp Server Parameters This example enables Dhcp server functionality Set dhcp bootpSet dhcp This example enables address allocation for Bootp clients This example enables Dhcp conflict loggingSet dhcp conflict logging Show dhcp conflict Logging Disables conflict logging This example disables Dhcp conflict loggingClear dhcp conflict Clears the conflict information for all IP addresses Set dhcp exclude 100, with the set dhcp exclude commandClear dhcp exclude Clear dhcp ping Set dhcp pingThis example sets the number of ping packets sent to Show dhcp binding Clear dhcp binding Use this command to display Dhcp server statistics Use this command to clear all Dhcp server countersShow dhcp server statistics Clear dhcp server statistics This example clears all Dhcp server counters Configuring IP Address Pools Manual Pool Configuration Considerations Set dhcp pool This example creates an address pool named auto1 Use this command to delete a Dhcp server pool of addresses Clear dhcp poolSet dhcp pool network This example deletes the address pool named auto1 Clear dhcp pool network Set dhcp pool hardware-address Set dhcp pool host Clear dhcp pool hardware-addressIf no type is specified, Ethernet is assumed Clear dhcp pool host Set dhcp pool client-identifier Clear dhcp pool client-identifier Set dhcp pool client-name Clear dhcp pool client-name Set dhcp pool bootfile Clear dhcp pool bootfile Set dhcp pool next-server Clear dhcp pool next-server Clear dhcp pool lease Set dhcp pool leaseInfinite Set dhcp pool default-router Clear dhcp pool default-router Set dhcp pool dns-server Clear dhcp pool dns-server Set dhcp pool domain-name Clear dhcp pool domain-name Set dhcp pool netbios-name-server Clear dhcp pool netbios-name-server Clear dhcp pool netbios-node-type Set dhcp pool netbios-node-type‐node Set dhcp pool option Ascii string Clear dhcp pool option Show dhcp pool configurationThis example removes option 19 from address pool auto1 Show dhcp pool configuration Dhcp Snooping Overview Dhcp Snooping Dynamic ARP InspectionDhcp Message Processing Building and Maintaining the Database Basic Configuration Configuration NotesProcedure 17-1 Basic Configuration for Dhcp Snooping Rate Limiting Disabled globally Dhcp Snooping CommandsSet dhcpsnooping Set dhcpsnooping database write-delay Set dhcpsnooping vlan By default, ports are untrusted Set dhcpsnooping trust Set dhcpsnooping binding This example configures port ge.1.1 as a trusted portSet dhcpsnooping verify Set dhcpsnooping log-invalid Source MAC address verification is enabled by defaultAgainst the client hardware address Set dhcpsnooping limit NoneRate pps Burst interval secs This example configures rate limit parameters on port ge.1.1 Show dhcpsnooping database Show dhcpsnooping port Dynamic static Show dhcpsnooping bindingEntry, either dynamic or static Show dhcpsnooping statistics Clear dhcpsnooping statistics Clear dhcpsnooping bindingClear dhcpsnooping database Write‐delay Default value of 300 secondsClear dhcpsnooping limit Dynamic ARP Inspection Overview Static Mappings Functional DescriptionOptional ARP Packet Validation Logging Invalid Packets Packet ForwardingRate Limiting Eligible Interfaces Procedure 17-2 Basic Dynamic ARP Inspection Configuration Step Task Commands Router Configuration Example ConfigurationVlan Configuration Dynamic ARP Inspection Commands Set arpinspection vlanDhcp Snooping Configuration Dynamic ARP Inspection Configuration Set arpinspection trust Logging is disabled by defaultBy default, all physical ports and LAGs are untrusted Logging Src‐mac Set arpinspection validateDst‐mac Set arpinspection limit Set arpinspection filter Show arpinspection access-listPermit Mac host Show arpinspection ports This example displays the ARP configuration of lag.0.1 Show arpinspection vlan Show arpinspection statistics With an invalid address Clear arpinspection validateThis example removes all 3 additional validation conditions Clear arpinspection vlan Clear arpinspection filter Clear arpinspection limit This example removes the ARP ACL named staticARP from Vlan Clear arpinspection statistics This example clears all DAI statistics from the switchPage Preparing for Router Mode Pre-Routing Configuration Tasks Enabling the Switch for Routing Enabling Router Configuration ModesRouter CLI Configuration Modes Router CLI Configuration Modes Page IP Configuration Configuring Routing Interface Settings Show interface Vlan vlan ‐id Use this command to configure interfaces for IP routing Router global configuration mode C3su‐routerConfig#Interface Vlan vlan‐ id This example shows how to enter configuration mode for Vlan Show ip interface Router interface configuration C3su‐routerConfig‐ifVlan 1# Ip addressShow ip interface Output Details Secondary Show running-config No shutdown This example shows how to enable Vlan 1 for IP routing No ip routing Use this command to configure a tunnel interface Configuring Tunnel InterfacesInterface tunnel Router interface configuration C3su‐routerConfig‐ifTnnl 1# This example creates a configured tunnel interfaceTunnel source Tunnel mode This command specifies the mode of the tunnel interfaceIpv6ip Specifies that the tunnel mode is IPv6 over IPv4 No form of this command removes the mode of the tunnel This example sets the tunnel mode to IPv6 over IPv4 Show interface tunnel Reviewing and Configuring the ARP Table Show ip arp Arp This example shows how to use the show ip arp commandShow ip arp Output Details This example shows how to enable proxy ARP on Vlan Ip proxy-arp Arp timeout Clear arp-cache14,400 seconds Privileged Exec C3su‐router# Interface configuration C3su‐Router1Config‐ifVlan 1# Configuring Broadcast SettingsIp directed-broadcast Ip forward-protocol UdpSpecifies UDP as the IP forwarding protocol Are forwarded Ip helper-address Reviewing IP Traffic and Configuring Routes Show ip route OSPF, IA Ping Ip routePreference in route selection There is also a traceroute command available in switch mode This command is also available in switch modeTraceroute Configuring Icmp Redirects Ip icmp redirect enable Show ip icmp redirect Interface IPv4 Routing Protocol Configuration Activating Advanced Routing Features Configuring RIP RIP Configuration Task List and CommandsRIP Configuration Task List and Commands Router rip This example shows how to enable RIP Ip rip enableDistance Ip rip send version R1compatible Ip rip authentication-key Specifies RIP version 1. This is the default settingIp rip receive version Specifies RIP version Ip rip message-digest-key Md5 Use this command to disable automatic route summarization Router configuration C3su‐routerConfig‐router#No auto-summary Split-horizon poison Passive-interface Receive-interface RedistributeConnected Ospf Command detailed in ip route on page 19‐21 ProtocolSubnets Subnetted will be redistributed Configuring Ospf Ospf Configuration Task List and CommandsOspf Configuration Task List and Commands Advanced License Required Router id Routes Router ospf This example shows how to enable routing for Ospf process1583compatibility This example shows how to enable RFC 1583 compatibility Ip ospf enableIp ospf areaid Ip ospf cost Ip ospf priority Timers spf Ip ospf transmit-delay Ip ospf retransmit-interval Ip ospf dead-interval Ip ospf hello-interval65535 Ip ospf authentication-key Ip ospf message digest key md5 Distance ospf Area range External inter‐Area intra‐area Intra‐area routes If not specified, advertise mode will be set Area stubAdvertise no‐ Advertise Area default cost Area nssa Default‐ This example shows how to configure area 10 as an Nssa areaArea virtual-link Information‐ Authentication‐ Transmit‐delayKey key Dead‐interval Rip Show ip ospfMetric‐type type Use this command to display the Ospf link state database This example shows how to display Ospf informationShow ip ospf database Show ip ospf interface Show ip ospf database Output Details Show ip ospf interface Output Details Show ip ospf neighbor Show ip ospf neighbor Output Details Clear ip ospf process Show ip ospf virtual-linksShow ip ospf virtual links Output Details This example shows how to reset Ospf process Configuring Dvmrp Enabling Dvmrp on an Interface Ip dvmrp enable Commands to Enable Dvmrp on an InterfaceThis example shows how to enable the Dvmrp process Ip dvmrp Ip dvmrp metric Use this command to display Dvmrp routing informationShow ip dvmrp This example shows how to display Dvmrp status information Configuring Irdp Ip irdp enable Ip irdp maxadvertinterval Ip irdp minadvertinterval Ip irdp preference Ip irdp holdtime9000 Ip irdp broadcast Use this command to display Irdp informationShow ip irdp Configuration Tasks on page 18‐1 Configuring Vrrp Router vrrp This example shows how enable Vrrp configuration mode Create Address Priority Advertise-interval Described in Pre‐Routing Configuration Tasks on page 18‐1 Preempt Enable Ip vrrp authentication-key Use this command to display Vrrp routing informationThis example shows how to display Vrrp information Show ip vrrp Configuring PIM-SM Design Considerations Global router configuration C3su‐routerConfig# This example shows how to globally enable and disable PIMIp pimsm Ip pimsm staticrp Ip pimsm enable Ip pimsm query-interval This example shows how to display PIM informationShow ip pimsm Show ip pimsm componenttable This example shows how to display PIM router informationShow ip pimsm Output Details This example shows how to display PIM interface information Show ip pimsm interfaceShow ip pimsm componenettable Output Details Stats This example shows how to display PIM interface statistics Show ip pimsm neighborShow ip pimsm interface vlan Output Details 10 show ip pimsm interface stats Output Details ‐11 provides an explanation of the command output Show ip pimsm rp11 show ip pimsm neighbor Output Details Candidate Show ip pimsm rphash ‐12 provides an explanation of the command output12 show ip pimsm rp Output Details Show ip pimsm staticrp ‐13 provides an explanation of the command outputDisplay the PIM‐SM static Rendezvous Point information Show ip mroute Use this command to display the IP multicast routing table13 show ip pimsm staticrp Output Details 20-60 IPv4 Routing Protocol Configuration IPv6 Management Show ipv6 status This example shows how to enable IPv6 management By default, IPv6 management is disabledSet ipv6 Set ipv6 address No global unicast IPv6 address is defined by defaultEui64 Show ipv6 address Use this command to clear IPv6 global addressesClear ipv6 address Set ipv6 gateway Clear ipv6 gateway Use this command to clear an IPv6 gateway addressShow ipv6 neighbors Use this command to display IPv6 netstat information This example shows example output of this commandShow ipv6 netstat Ping ipv6 This command is also available in router modeSize num Traceroute ipv6 Traceroute ipv6 21-10 IPv6 Management Overview IPv6 ConfigurationIPv6 Routing License Required Default Conditions Following table lists the default IPv6 conditions Ipv6 forwarding General Configuration CommandsIpv6 hop-limit Default maximum number of IPv6 hops is This command configures static IPv6 routesIpv6 route This example sets the hop limit to Default preference or administrative distance is Ipv6 route distance This command sets the default distance value to Ipv6 unicast-routing Ping ipv6 interface Link‐local‐address Router privileged exec C3 su‐router# 20010db8123455551 Ipv6 address Interface Configuration CommandsNo IPv6 addresses are defined for any interface Ipv6 enable IPv6 is disabled Ipv6 mtu Bytes This example sets the MTU value to 1500 bytes Clear ipv6 neighbors Neighbor Cache and Neighbor Discovery CommandsThis example clears all dynamically learned cache entries Ipv6 nd dad attempts Duplicate address detection enabled, for 1 attemptIpv6 nd ns-interval By default, a value of 0 is advertised in RA messages Router interface configurationC3su‐routerConfig‐ifVlan 1#Ipv6 nd reachable-time This example sets the NS interval to 2 seconds Ipv6 nd other-config-flag Flag is set to false by defaultRouter interface configuration C3su‐routerConfig‐if Vlan 1# This example sets the reachable time to 60 seconds Ipv6 nd ra-interval Ipv6 nd ra-lifetime Suppression disabled This example disables router advertisement transmissionIpv6 nd suppress-ra Ipv6 nd prefix Router interface configurationC3su‐routerConfig‐if Vlan 1# No‐autoconfigOff‐link Example Query Commands Show ipv6Show ipv6 interface Router privileged execution C3su‐router# This example displays information about IPv6 interface Vlan This command displays IPv6 Neighbor Cache information This example displays the neighbors in the cache This command displays the IPv6 routing table Show ipv6 routeShow ipv6 neighbor Output Details Interface interface This example displays all active IPv6 routes Show ipv6 route Output Details Show ipv6 route preferences Show ipv6 route preferences Output Details Show ipv6 route summary This command displays the summary of the routing tableNon‐best routes Show ipv6 traffic Following example displays the output of this commandShow ipv6 summary Output Details Show ipv6 traffic Output Details Options, etc Counter would include datagrams counted Send. Note that this counter includes all those counted by Router privileged executionC3su‐router# Clear ipv6 statisticsThis example clears the statistics for Vlan IPv6 Proxy Routing Preparing a Mixed Stack for IPv6 Proxy Routing Limitations IPv6 proxy routing is disabled by default Router global configuration C2su‐routerConfig#This example enables IPv6 proxy routing Ipv6 proxy-routing Any routing mode DHCPv6 Configuration Global Configuration Commands Ipv6 dhcp enableFollowing table lists the default DHCPv6 conditions This command enables DHCPv6 on the router This example enables DHCPv6 By default, DHCPv6 is disabledIpv6 dhcp relay-agent-info-opt Ipv6 dhcp relay-agent-info-remote-id-subopt Ipv6 dhcp pool Ipv6 dhcp pool Address Pool Configuration Commands Domain-name Dns-server Prefix-delegation Preferred‐lifetime Valid‐lifetime secsSecs infinite C3su-routerConfig-dhcp6s-pool# exit C3su-routerConfig# By default, DHCPv6 functionality is disabled Ipv6 dhcp serverRapid‐commit Preference pref Ipv6 dhcp relay Destination dest‐addrInterface intf Remote‐id duid‐ifid Examples DHCPv6 Show Commands Show ipv6 dhcp Show ipv6 dhcp interface Statistics Output of show ipv6 dhcp interface Command This example displays the DHCPv6 statistics for Vlan Output of show ipv6 dhcp statistics Command This example displays the output of this commandShow ipv6 dhcp statistics Clear ipv6 dhcp statistics This example clears DHCPv6 statistics for Vlan Show ipv6 dhcp pool This command displays information about DHCPv6 bindingsShow ipv6 dhcp binding If no IPv6 address is specified, all bindings are displayed Show ipv6 dhcp binding DHCPv6 Configuration OSPFv3 Configuration Following table lists the default OSPFv3 conditions Use this command to configure the OSPFv3 router ID Global OSPFv3 Configuration CommandsIpv6 router id Default-information originate Ipv6 router ospfAlways Metric value Default-metric Router OSPFv3 configuration C3su‐routerConfig‐router#No default metric is configured Router OSPFv3 configuration C3su-routerConfig-router# Exit-overflow-interval IntraInter Type1 This command configures the external Lsdb limit for OSPFv3 Default value is ‐1External-lsdb-limit This example sets the exit overflow interval to 10 seconds Connected static Maximum-pathsTag tag Metric = unspecified Metric type = Type Tag = Area default-cost Area Configuration CommandsThese commands are used to configure area parameters This example sets the default route cost to 50 for area This example shows how to configure area 20 as an Nssa Area nssa default-info-originate Default metric value isArea nssa no-redistribute Comparable Area nssa no-summary This command configures the translator role of the router By default, the translator role is disabledArea nssa translator role Area nssa translator-stab-intv Default interval is 40 seconds Area address ranges are not configured by defaultSummarylink Nssaexternallink This command creates a stub area for the specified area ID Area stub no-summary Example disables the import of summary LSAs into stub areaThis example creates a stub area with the ID Default dead interval is 40 seconds Area virtual-link dead-interval Area virtual-link hello-interval Default hello interval is 10 secondsArea virtual-link retransmit-interval Default retransmit interval is 5 seconds Area virtual-link transmit-delayDefault transmit delay is 1 second Ipv6 ospf enable OSPFv3 is disabled by default Ipv6 ospf areaid Ipv6 ospf cost Default dead interval value is 40 seconds Ipv6 ospf dead-interval Ipv6 ospf hello-interval Ipv6 ospf mtu-ignore Default network type is broadcast By default, MTU mismatch detection is enabledIpv6 ospf network Ipv6 ospf priority Default priority value isIpv6 ospf retransmit-interval Default value is 4 seconds Ipv6 ospf transmit-delayDefault value is 1 second Ipv6 ospf transmit-delay OSPFv3 Show Commands This command displays OSPFv3 router informationThis example shows how to display OSPFv3 router information Show ipv6 ospf Show ipv6 ospf Output Details Show ipv6 ospf area Show ipv6 ospf area Output Details Show ipv6 ospf abr Show ipv6 ospf abr Output Details Show ipv6 ospf asbr Show ipv6 ospf asbr Output Details Show ipv6 ospf database Adv Router Link Id Age Sequence Csum Options Rtr Opt Show ipv6 ospf database Output Details Show ipv6 ospf database database-summary Output Details Show ipv6 ospf interface This command displays information about OSPFv3 interfacesLoopback loopid Show ipv6 ospf interface Command Output Details This example shows how to display statistics for Vlan Show ipv6 ospf interface stats Show ipv6 ospf interface stats Output Details This command displays information about OSPFv3 neighbors Show ipv6 ospf neighborSpecify the Vlan interface to display information about Specify the tunnel interface to display Show ipv6 ospf neighbor Output Details 10 show ipv6 ospf neighbor routerid Output Details Show ipv6 ospf rangeThis example displays range information for area Show ipv6 ospf stub table 11 show ipv6 ospf range Output DetailsThis example displays the OSPFv3 stub table information 12 show ipv6 ospf stub table Output Details Show ipv6 ospf virtual-link 13 show ipv6 ospf virtual-link Output Details Show ipv6 ospf virtual-link Show ipv6 ospf virtual-link OSPFv3 Configuration Authentication and Authorization Configuration Overview of Authentication and Authorization Methods Overview of Authentication and Authorization Methods Filter-ID Attribute Formats Setting the Authentication Login Method Show authentication loginSet authentication login Use this command to set the authentication login method Clear authentication login AnyLocal Radius Configuring Radius TimeoutShow radius Retries Optional Displays Radius server configuration information Set radiusServer Servers or a specific Radius server as defined by an index Realm management‐ access any network‐access Timeout timeoutServer index Clear radius Realm Set radius accounting Show radius accountingRetries retries This example shows how to set Radius accounting retries to TimeoutClear radius accounting Retries Show radius interface Set radius interface Clear radius interface Example Configuring 802.1X Authentication Show dot1xAuth‐diag Auth‐stats This example shows how to display 802.1X status Show dot1x auth-config Init reauth Set dot1xTrue false Set dot1x auth-config Clear dot1x auth-config Portcontrol Maxreq Show eapol Connecting state, via disconnected Show eapol Output Details Set eapol Clear eapolAuth‐mode Forced‐auth Optional Globally clears the Eapol authentication mode Configuring MAC Authentication Show macauthentication Show macauthentication Output Details Nopassword This example shows how to display MAC session information Show macauthentication sessionShow macauthentication session Output Details Set macauthentication password Set macauthenticationUse this command to set a MAC authentication password Clear macauthentication password Set macauthentication portUse this command to clear the MAC authentication password Enables or disables MAC authentication Set macauthentication portinitialize Set macauthentication portquietperiod Set macauthentication macinitialize Clear macauthentication portquietperiodThis example resets the default quiet period on port Set macauthentication portreauthenticate Set macauthentication reauthenticationEnables or disables MAC reauthentication Set macauthentication macreauthenticate Set macauthentication reauthperiod Clear macauthentication reauthperiod Set macauthentication significant-bits Clear macauthentication significant-bits C3su-clear macauthentication significant-bits About Multiple Authentication Types Configuring Multiple Authentication MethodsAbout Multi-User Authentication Show multiauth Set multiauth mode Clear multiauth modeMulti Strict Set multiauth precedence Default precedence order is dot1x, pwa, macClear multiauth precedence Show multiauth port Set multiauth port Clear multiauth port Show multiauth station Show multiauth session Show multiauth idle-timeout Agent dot1x mac Set multiauth idle-timeout Authentication method for which to set the timeout valueWhich to set the timeout value Idle timeout value is provided by the authenticating server Clear multiauth idle-timeout Show multiauth session-timeoutDefault Which to reset the timeout value to its default Set multiauth session-timeout Which to set the session timeout value Clear multiauth session-timeout Configuring User + IP Phone Authentication Configuring Vlan Authorization RFC Set vlanauthorization egress Set vlanauthorizationTagged Show vlanauthorization Clear vlanauthorizationBy default, administrative egress is set to untagged Configuring Policy Maptable Response Show vlanauthorization Output Details When Policy Maptable Response is Both Operational Description When Policy Maptable Response is Tunnel When Policy Maptable Response is PolicyShow policy maptable Set policy maptable ResponseBoth Policy Clear policy maptable Configuring MAC Locking To review, disable, enable, and configure MAC locking Show maclock Show maclock stations Show maclock Output DetailsFirstarrival Connected to MAC locked ports Set maclock enable port‐string Set maclock enableShow maclock stations Output Details Set maclock disable This example shows how to enable MAC locking on ge.2.3This example shows how to disable MAC locking on ge.2.3 Set maclock Create Clear maclockSpecified MAC address and port Set maclock static Clear maclock static Set maclock firstarrival Clear maclock firstarrival Set maclock agefirstarrival This example enables first arrival aging on port ge.1.1 This example disables first arrival aging on port ge.1.1Clear maclock agefirstarrival Set maclock move Set maclock trap Configuring Port Web Authentication PWA About PWA Show pwa Show pwa Output Details This example shows how to enable port web authentication Enable disable Enables or disables port web authenticationSet pwa Show pwa banner This example shows how to display the PWA login bannerSet pwa banner This example shows how to hide the Enterasys Networks logo Clear pwa bannerSet pwa displaylogo Display hide Set pwa protocol Set pwa ipaddressChap pap Use this command to clear the PWA guest user name This example shows how to clear the PWA guest user nameSet pwa guestname Clear pwa guestname Set pwa guestpassword Set pwa gueststatusAuthnone Authradius Set pwa initialize This example shows how to initialize ports ge.1.5‐7Set pwa quietperiod Set pwa maxrequest Set pwa portcontrol Enables or disables PWA on specified ports This example shows how to enable PWA on ports 1‐22This example shows how to display PWA session information Show pwa session This example shows how to enable PWA enhancedmode Enable disable Enables or disables PWA enhancedmodeSet pwa enhancedmode Configuring Secure Shell SSH This example shows how to display SSH status on the switchShow ssh status Set ssh This example shows how to regenerate SSH keys This example shows how to disable SSHSet ssh hostkey Show access-lists Configuring Access ListsShow access‐lists number Access-list standard Deny permit Insert replace Access-list extendedThis example moves entry 16 to the beginning of ACL Insert replace Interface configuration C3su‐routerConfig‐ifVlan vlanid# Ip access-groupFilters inbound frames Example Page TACACS+ Configuration State Optional Displays only the TACACS+ client status Show tacacsShow tacacs Output Details Use this command to enable or disable the TACACS+ client Enable disable Enables or disables the Tacacs clientThis example shows how to enable the TACACS+ client Set tacacs Timeout seconds Set tacacs server Clear tacacs server Specifies one TACACS+ server to be affected Show tacacs session This example removes TACACS+ server Set tacacs session Service Clear tacacs sessionRead‐write Super‐user Show tacacs command Set tacacs command Set tacacs singleconnect Show tacacs singleconnectConnection Show tacacs interface Set tacacs interface Clear tacacs interface Clear tacacs interface TACACS+ Configuration 27-14 Using sFlow in Your Network SFlow ConfigurationAdvantages of using sFlow include Definitions SFlow Agent FunctionalitySampling Mechanisms SFlow Definitions Counter Sampling Packet Flow SamplingUsage Notes 28-5 Show sflow receivers Contents of the sFlow Receivers Table is displayedThis example displays the sFlow Receivers Table Following table describes the output fields Show sflow receivers Output Descriptions Set sflow receiver owner Set sflow receiver ip Default IP address is Default maximum datagram size is 1400 bytesSet sflow receiver maxdatagram Maxdatagram bytes Default port value is Set sflow receiver portClear sflow receiver Maxdatagram Owner Set sflow port pollerPort port Show sflow pollers Clear sflow port poller Set sflow port samplerInterval This example removes the poller instance on port ge.1.1 Show sflow samplers Clear sflow port sampler Set sflow interfaceMaxheadersize Rate Show sflow interface Clear sflow interface Show sflow agent 28-18 Policy Capacities Policy and Authentication CapacitiesTable A-1 Policy Capacities Authentication Capacities Table A-2 Authentication Capacities Index Numerics Ospf 20-30Network Management Tftp Index