Enterasys Networks D-Series Index

Index-1

Index

Numerics

802.1D 8-1

802.1p 11-17, 12-1

802.1Q 9-1

802.1s 8-1

802.1w 8-1

802.1x 17-5, 17-19

A

Advertised Ability 6-15

Alias

node 14-34

Authentication

EAPOL 17-19

MAC 17-21

Port web 17-62

RADIUS server 17-5, 17-8

SSH 17-75

Auto-negotiation 6-15

B

banner motd 2-21

Baud Rate 2-28

Broadcast

suppression, enabling on ports 6-30

C

CDP Discovery Protocol 5-1

Cisco Discovery Protocol 5-7

Class of Service 11-7, 11-11 ,

11-17 to 11- 22, 12-1

Classification Policies 11-1

Clearing NVRAM 2-46

CLI

closing 2-44

scrolling screens 1-8

starting 1-5

Command History Buffer 14-12, 14-13

Command Line Interface. See also CLI

Configuration

clearing switch parameters 2-46

Configuration Files

copying 2-40

deleting 2-41

displaying 2-38

executing 2-39

show running config 2-41

Contexts (SNMP) 7-3

Copying Configuration or Image

Files 2-40

Cost

Spanning Tree port 8-39

D

Defaults

CLI behavior, described 1-6

factory installed 1-2

DHCP server, configuring 16-1

Differentiated Services

adding classes to policies 10-11

assigning policies to service

ports 10-14

configuring policies 10-9

creating classes and matching

conditions 10-3

deleting classes 10-5

deleting policies 10-10

displaying class information 10-4

displaying status information 10-3

globally enabling or disabling 10-2

marking packets 10-11

matching classes to conditions 10-5

setting policing styles for

policies 10-12

Diffserv, see Differentiated Services

Dynamic policy profile

assignment 17-2

E

EAP pass-through 17-2, 17-14

EAPOL 17-19

F

Flow Control 6-19

Forbidden VLAN port 9-14

G

Getting Help xxiii

GVRP

enabling and disabling 9-23

purpose of 9-20

timer 9-24

H

Hardware

show system 2-14, 2-22

Help

keyword lookups 1-7

Host VLAN 9-18

I

ICMP 14-14

IGMP 13-1

enabling and disabling 13-2

Image File

copying 2-40

downloading 2-28

Ingress Filtering 9-8, 9-11

IProutes, managing in switch

mode 14-16

J

Jumbo Frame Support 6-13

K

Keyword Lookups 1-7

L

Line Editing Commands 1-9

Link Layer Discovery Protocol (LLDP)

configuring 5-13

LLDP

configuring 5-13

LLDP-MED

configuring 5-14

Lockout

set system 2-7

Logging 14-1

Login

administratively configured 1-6

default 1-6

setting accounts 2-2

via Telnet 1-5

M

MAC Addresses

displaying 14-19

MAC Authentication 17-21

MAC Locking 17-51

maximum static entries 17-57

static 17-57

Management VLAN 9-1

motd 2-21

Multicast Filtering 13-1

Multiple Spanning Tree Protocol

(MSTP) 8-1

N

Name

setting for a VLAN 9-6

setting for the system 2-23

Network Management

addresses and routes 14-16

monitoring switch events and

status 14-12

Node Alias 14-34

NVRAM

clearing 2-46

P

Password

aging 2-6

history 2-6, 2-7

set new 2-5

setting the login 2-5

Ping 14-14

Policy Management

assigning ports 11-15

classifying to a VLAN or Class of

Service 11-7, 11-11

dynamic assignment of profiles 17-2

Contents

Main Page Notice ENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENT BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT. Page Page Contents About This Guide Chapter 1: Introduction Chapter 2: Basic Configuration Page Chapter 3: Activating Licensed Features Chapter 4: Configuring System Power and PoE Chapter 5: Discovery Protocol Configuration Chapter 6: Port Configuration Page Chapter 7: SNMP Configuration Chapter 8: Spanning Tree Configuration Page Chapter 9: 802.1Q VLAN Configuration Chapter 10: Differentiated Services Configuration Chapter 11: Policy Classification Configuration Chapter 12: Port Priority and Rate Limiting Configuration Chapter 13: IGMP Configuration Chapter 14: Logging and Network Management Chapter 15: RMON Configuration Chapter 16: DHCP Server Configuration Chapter 17: Security Configuration Page Index Figures Tables Page About This Guide Using This Guide Structure of This Guide Important Notice Related Documents Conventions Used in This Guide Thefollowingconventionsareusedinthetextofthisdocument: Thefollowingiconsareusedinthisguide: Getting Help Page Introduction D-Series CLI Overview Switch Management Methods Factory Default Settings Page Table 1-1 Default Settings for Basic Switch Operation (Continued) Using the Command Line Interface Starting a CLI Session Connecting Using the Console Port Connecting Using Telnet Logging In Using a Default User Account Using an Administratively Configured User Account Navigating the Command Line Interface Getting Help with CLI Syntax CLI Command Modes Performing Keyword Lookups Syntax Defaults Displaying Scrolling Screens Abbreviating and Completing Commands Basic Line Editing Commands TheCLIsupportsEMACslikelineeditingcommands.Tabl e 12listssomecommonlyused commands. Table 1-2 Basic Line Editing Commands Page Basic Configuration Quick Start Setup Commands Setting User Accounts and Passwords Table 2-2 Optional CLI Setup Commands show system login set system login clear system login set password set system password length set system password aging set system password history show system lockout set system lockout Setting Basic Switch Properties TodisplayandsetthesystemIPaddressandotherbasicsystem(switch)properties. show ip address set ip address clear ip address show ip protocol set ip protocol show system Thisexampleshowshowtodisplaysysteminformation: show system hardware show system utilization show system enhancedbuffermode set system enhancedbuffermode show time set time show summertime set summertime set summertime date set summertime recurring clear summertime set prompt show banner motd set banner motd clear banner motd show version set system name set system location set system contact set width set length show logout set logout show console set console baud Downloading a Firmware Image Downloading from a TFTP Server Downloading via the Serial Port Reverting to a Previous Image Reviewing and Selecting a Boot Firmware Image show boot system set boot system Starting and Configuring Telnet show telnet set telnet telnet Managing Switch Configuration and Files Configuration Persistence Mode show snmp persistmode set snmp persistmode save config Switchcommand,readwrite. Thisexampleshowshowtosavetherunningconfiguration: filename (Optional)Specifiesthefilenameordirectorytolist. dir Usethiscommandtolistconfigurationandimagefilesstoredinthefilesystem. Iffilenameisnotspecified,allfilesinthesystemwillbedisplayed. Thisexampleshowshowtolistalltheconfigurationandimagefilesinthesystem: show file show config configure copy delete show tftp settings set tftp timeout clear tftp timeout set tftp retry clear tftp retry Clearing and Closing the CLI cls (clear screen) exit Resetting the Switch reset clear config Using and Configuring WebView show webview set webview show ssl set ssl Page Activating Licensed Features Clearing, Showing, and Moving Licenses Commands set license show license clear license Page Page Configuring System Power and PoE Commands show inlinepower set inlinepower threshold set inlinepower trap show port inlinepower set port inlinepower Page Discovery Protocol Configuration Configuring CDP show cdp set cdp state set cdp auth set cdp interval set cdp hold-time clear cdp show neighbors Configuring Cisco Discovery Protocol show ciscodp show ciscodp port info set ciscodp status set ciscodp timer set ciscodp holdtime set ciscodp port Page clear ciscodp Configuring Link Layer Discovery Protocol and LLDP-MED Overview Configuration Tasks show lldp show lldp port status show lldp port trap show lldp port tx-tlv show lldp port location-info show lldp port local-info Page show lldp port remote-info Page set lldp tx-interval set lldp hold-multiplier set lldp trap-interval set lldp med-fast-repeat set lldp port status set lldp port trap set lldp port med-trap set lldp port tx-tlv Page clear lldp clear lldp port status clear lldp port trap clear lldp port med-trap clear lldp port tx-tlv Page Port Configuration Port Configuration Summary Port String Syntax Used in the CLI Port Slot/Unit Parameters Used in the CLI Configuring SFP Ports for 100BASE-FX Reviewing Port Status show port show port status show port counters Page Disabling / Enabling and Naming Ports set port disable set port enable show port alias set port alias Page Setting Speed and Duplex Mode show port speed set port speed show port duplex set port duplex Enabling / Disabling Jumbo Frame Support show port jumbo set port jumbo clear port jumbo Setting Auto-Negotiation and Advertised Ability show port negotiation set port negotiation show port advertise set port advertise clear port advertise Setting Flow Control show flowcontrol set flowcontrol Page Setting Port Link Traps and Link Flap Detection show port trap set port trap show linkflap Page Thisexampleshowshowtodisplaytheglobalstatusofthelinktrapdetectionfunction: Thisexampleshowshowtodisplayportsdisabledbylinkflapdetectionduetoaviolation: Tabl e 69providesanexplanationoftheshowlinkflapmetricscommandoutput. Thisexampleshowshowtodisplaythelinkflapparameterstable: Tabl e 68providesanexplanationoftheshowlinkflapparameterscommandoutput. set linkflap globalstate set linkflap portstate set linkflap interval set linkflap action clear linkflap action set linkflap threshold set linkflap downtime clear linkflap down clear linkflap Configuring Broadcast Suppression show port broadcast set port broadcast clear port broadcast Page Port Mirroring Mirroring Features show port mirroring set port mirroring clear port mirroring Link Aggregation Control Protocol (LACP) LACP Operation LACP Terminology D-Series Usage Considerations Page show lacp set lacp set lacp asyspri set lacp aadminkey clear lacp set lacp static clear lacp static set lacp singleportlag clear lacp singleportlag show port lacp set port lacp Page clear port lacp Page Configuring Protected Ports Protected Port Operation set port protected show port protected clear port protected set port protected name show port protected name clear port protected name Page SNMP Configuration SNMP Configuration Summary SNMPv1 and SNMPv2c SNMPv3 About SNMP Security Models and Levels Using SNMP Contexts to Access Specific MIBs Configuration Considerations Reviewing SNMP Statistics show snmp engineid show snmp counters UsethiscommandtodisplaySNMPtrafficcountervalues. ThisexampleshowshowtodisplaySNMPcountervalues Page Table 7-14 show snmp counters Output Details (Continued) Configuring SNMP Users, Groups, and Communities show snmp user set snmp user clear snmp user show snmp group set snmp group clear snmp group show snmp community set snmp community clear snmp community Configuring SNMP Access Rights show snmp access Page set snmp access clear snmp access Configuring SNMP MIB Views show snmp view ThisexampleshowshowtodisplaySNMPMIBviewconfigurationinformation: show snmp context UsethiscommandtodisplaythecontextlistconfigurationforSNMPsviewbasedaccesscontrol. Table 7-18 show snmp view Output Details set snmp view clear snmp view Configuring SNMP Target Parameters show snmp targetparams Page set snmp targetparams clear snmp targetparams Configuring SNMP Target Addresses show snmp targetaddr set snmp targetaddr Page clear snmp targetaddr Configuring SNMP Notification Parameters About SNMP Notify Filters show newaddrtrap set newaddrtrap show snmp notify set snmp notify clear snmp notify show snmp notifyfilter set snmp notifyfilter clear snmp notifyfilter show snmp notifyprofile set snmp notifyprofile clear snmp notifyprofile Creating a Basic SNMP Trap Configuration Example How SNMP Will Use This Configuration Spanning Tree Configuration Spanning Tree Configuration Summary Overview: Single, Rapid, and Multiple Spanning Tree Protocols RSTP MSTP Spanning Tree Features Loop Protect Configuring Spanning Tree Bridge Parameters Page show spantree stats ThisexampleshowshowtodisplaythedevicesSpanningTreeconfiguration: Tabl e 823showsadetailedexplanationofcommandoutput. Table 8-23 show spantree Output Details set spantree show spantree version set spantree version clear spantree version show spantree bpdu-forwarding set spantree bpdu-forwarding show spantree bridgeprioritymode set spantree bridgeprioritymode clear spantree bridgeprioritymode show spantree mstilist set spantree msti clear spantree msti show spantree mstmap set spantree mstmap clear spantree mstmap show spantree vlanlist show spantree mstcfgid set spantree mstcfgid clear spantree mstcfgid set spantree priority clear spantree priority set spantree hello clear spantree hello set spantree maxage clear spantree maxage set spantree fwddelay clear spantree fwddelay show spantree backuproot set spantree backuproot clear spantree backuproot show spantree tctrapsuppress set spantree tctrapsuppress clear spantree tctrapsuppress set spantree protomigration show spantree spanguard set spantree spanguard clear spantree spanguard show spantree spanguardtimeout set spantree spanguardtimeout clear spantree spanguardtimeout show spantree spanguardlock clear / set spantree spanguardlock show spantree spanguardtrapenable set spantree spanguardtrapenable clear spantree spanguardtrapenable show spantree legacypathcost set spantree legacypathcost clear spantree legacypathcost Configuring Spanning Tree Port Parameters set spantree portadmin clear spantree portadmin show spantree portadmin show spantree portpri set spantree portpri clear spantree portpri show spantree adminpathcost set spantree adminpathcost clear spantree adminpathcost show spantree adminedge set spantree adminedge clear spantree adminedge Page Configuring Spanning Tree Loop Protect Parameters set spantree lp show spantree lp clear spantree lp show spantree lplock clear spantree lplock set spantree lpcapablepartner show spantree lpcapablepartner clear spantree lpcapablepartner set spantree lpthreshold show spantree lpthreshold clear spantree lpthreshold set spantree lpwindow show spantree lpwindow clear spantree lpwindow set spantree lptrapenable show spantree lptrapenable clear spantree lptrapenable set spantree disputedbpduthreshold show spantree disputedbpduthreshold clear spantree disputedbpduthreshold show spantree nonforwardingreason Page 802.1Q VLAN Configuration VLAN Configuration Summary Port String Syntax Used in the CLI Creating a Secure Management VLAN Viewing VLANs Command show vlan Table 9-25 show vlan Output Details Creating and Naming Static VLANs set vlan set vlan name clear vlan clear vlan name Assigning Port VLAN IDs (PVIDs) and Ingress Filtering show port vlan set port vlan clear port vlan show port ingress filter set port ingress filter show port discard set port discard Configuring the VLAN Egress List show port egress set vlan forbidden set vlan egress clear vlan egress show vlan dynamicegress set vlan dynamicegress Setting the Host VLAN show host vlan set host vlan clear host vlan Enabling/Disabling GVRP (GARP VLAN Registration Protocol) About GARP VLAN Registration Protocol (GVRP) Overview How It Works Page show gvrp show garp timer set gvrp clear gvrp set garp timer Page Page Differentiated Services Configuration Globally Enabling or Disabling Diffserv Purpose Command set diffserv adminmode Creating Diffserv Classes and Matching Conditions show diffserv info show diffserv class set class create set diffserv class delete set diffserv class match Page Page set diffserv class rename Configuring Diffserv Policies and Assigning Classes show diffserv policy set diffserv policy create set diffserv policy delete set diffserv policy class set diffserv policy mark set diffserv policy police style simple set diffserv policy police action conform set diffserv policy police action nonconform set diffserv policy rename Assigning Policies to Service Ports show diffserv service info show diffserv service stats set diffserv service DiffServ Configuration Examples Page Policy Classification Configuration Policy Classification Configuration Summary Configuring Policy Profiles show policy profile Tabl e 1128providesanexplanationofthecommandoutput. set policy profile Usethiscommandtocreateapolicyprofileentry. Table 11-28 show policy profile Output Details clear policy profile Page Configuring Classification Rules show policy rule Page Tabl e 1129providesanexplanationofthecommandoutput. show policy capability Table 11-29 show policy rule Output Details Page set policy rule Page clear policy rule Page clear policy all-rules Assigning Ports to Policy Profiles set policy port clear policy port Configuring Policy Class of Service (CoS) About Policy-Based CoS Configurations Page set cos state UsethiscommandtoenableordisableClassofService. show cos state clear cos state set cos settings clear cos settings show cos settings set cos port-config show cos port-config clear cos port-config set cos port-resource show cos port-resource clear cos port-resource set cos reference show cos reference clear cos reference show cos unit clear cos all-entries show cos port-type Port Priority and Rate Limiting Configuration Port Priority Configuration Summary Configuring Port Priority show port priority set port priority clear port priority Configuring Priority to Transmit Queue Mapping show port priority-queue set port priority-queue clear port priority-queue Configuring Quality of Service (QoS) show port txq set port txq clear port txq Page Configuring Port Traffic Rate Limiting show port ratelimit Thisexampleshowshowtodisplaythecurrentratelimitinginformationforfe.2.1: set port ratelimit clear port ratelimit Page IGMP Configuration IGMP Overview About IP Multicast Group Management About Multicasting Configuring IGMP at Layer 2 show igmpsnooping set igmpsnooping adminmode set igmpsnooping interfacemode set igmpsnooping groupmembershipinterval set igmpsnooping maxresponse set igmpsnooping mcrtrexpiretime set igmpsnooping add-static set igmpsnooping remove-static show igmpsnooping static show igmpsnooping mfdb clear igmpsnooping Page Page Logging and Network Management Thischapterdescribesswitchrelatedloggingandnetworkmanagementcommandsandhowto usethem. Configuring System Logging show logging server set logging server clear logging server show logging default set logging default clear logging default show logging application set logging application clear logging application show logging local set logging local clear logging local show logging buffer Page Monitoring Network Events and Status history show history set history ping show users disconnect Managing Switch Network Addresses and Routes TodisplayordeleteswitchARPtableentries,andtodisplayMACaddressinformation. show arp UsethiscommandtodisplaytheswitchsARPtable. set arp clear arp traceroute show mac show mac agetime set mac agetime clear mac agetime set mac algorithm show mac algorithm clear mac algorithm set mac multicast clear mac address show mac unreserved-flood set mac unreserved-flood Thisexampleenablesmulticastfloodprotection. Configuring Simple Network Time Protocol (SNTP) show sntp UsethiscommandtodisplaySNTPclientsettings. ThisexampleshowshowtodisplaySNTPclientsettings: Tabl e 1437providesanexplanationofthecommandoutput. Table 14-37 show sntp Output Details set sntp client clear sntp client set sntp server clear sntp server set sntp poll-interval clear sntp poll-interval set sntp poll-retry clear sntp poll-retry set sntp poll-timeout clear sntp poll-timeout set timezone Page Configuring Node Aliases show nodealias config set nodealias clear nodealias config Page RMON Configuration RMON Table 15-39 RMON Monitoring Group Functions and Commands (Continued) Statistics Group Commands show rmon stats set rmon stats clear rmon stats Page History Group Commands show rmon history set rmon history clear rmon history Page Alarm Group Commands show rmon alarm set rmon alarm properties set rmon alarm status clear rmon alarm Event Group Commands show rmon event set rmon event properties set rmon event status clear rmon event Page Filter Group Commands show rmon channel set rmon channel clear rmon channel show rmon filter set rmon filter clear rmon filter Packet Capture Commands show rmon capture set rmon capture clear rmon capture DHCP Server Configuration DHCP Overview DHCP Server Configuring a DHCP Server Configuring General DHCP Server Parameters set dhcp set dhcp bootp set dhcp conflict logging show dhcp conflict clear dhcp conflict set dhcp exclude clear dhcp exclude set dhcp ping clear dhcp ping show dhcp binding clear dhcp binding show dhcp server statistics clear dhcp server statistics Configuring IP Address Pools Manual Pool Configuration Considerations set dhcp pool clear dhcp pool set dhcp pool network clear dhcp pool network set dhcp pool hardware-address clear dhcp pool hardware-address set dhcp pool host clear dhcp pool host set dhcp pool client-identifier clear dhcp pool client-identifier set dhcp pool client-name clear dhcp pool client-name set dhcp pool bootfile clear dhcp pool bootfile set dhcp pool next-server clear dhcp pool next-server set dhcp pool lease clear dhcp pool lease set dhcp pool default-router clear dhcp pool default-router set dhcp pool dns-server clear dhcp pool dns-server set dhcp pool domain-name clear dhcp pool domain-name set dhcp pool netbios-name-server clear dhcp pool netbios-name-server set dhcp pool netbios-node-type clear dhcp pool netbios-node-type set dhcp pool option clear dhcp pool option show dhcp pool configuration Page Page Security Configuration Overview of Security Methods RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment Filter-ID Attribute Formats Configuring RADIUS show radius set radius Page clear radius show radius accounting set radius accounting clear radius accounting Page Configuring 802.1X Authentication show dot1x Page show dot1x auth-config set dot1x set dot1x auth-config clear dot1x auth-config show eapol Mode Table 17-43 show eapol Output Details set eapol clear eapol Page Configuring MAC Authentication show macauthentication Ifportstringisnotspecified,MACauthenticationinformationwillbedisplayedforallports. ThisexampleshowshowtodisplayMACauthenticationinformationforge.2.1through8: Tabl e 1744providesanexplanationofthecommandoutput. Table 17-44 show macauthentication Output Details show macauthentication session set macauthentication set macauthentication password clear macauthentication password set macauthentication port set macauthentication portinitialize set macauthentication portquietperiod clear macauthentication portquietperiod set macauthentication macinitialize set macauthentication reauthentication set macauthentication portreauthenticate set macauthentication macreauthenticate set macauthentication reauthperiod clear macauthentication reauthperiod set macauthentication significant-bits clear macauthentication significant-bits Page Configuring Multiple Authentication Methods About Multiple Authentication Types Configuring Multi-User Authentication (User + IP phone) show multiauth Usethiscommandtodisplaymultipleauthenticationsystemconfiguration. Thisexampleshowshowtodisplaymultipleauthenticationsystemconfiguration: set multiauth mode clear multiauth mode set multiauth precedence clear multiauth precedence show multiauth port set multiauth port clear multiauth port show multiauth station show multiauth session show multiauth idle-timeout set multiauth idle-timeout clear multiauth idle-timeout show multiauth session-timeout set multiauth session-timeout clear multiauth session-timeout Configuring VLAN Authorization (RFC 3580) show policy maptable response set policy maptable response set vlanauthorization Mode set vlanauthorization egress clear vlanauthorization show vlanauthorization Page Configuring MAC Locking show maclock show maclock stations set maclock enable set maclock disable set maclock clear maclock set maclock static clear maclock static set maclock firstarrival clear maclock firstarrival set maclock agefirstarrival clear maclock agefirstarrival set maclock move set maclock trap Configuring Port Web Authentication (PWA) About PWA show pwa Usethiscommandtodisplayportwebauthenticationinformationforoneormoreports. Tabl e 1749providesanexplanationofthecommandoutput. Ifportstringisnotspecified,PWAinformationwillbedisplayedforallports. ThisexampleshowshowtodisplayPWAinformationforge.2.1: set pwa Usethiscommandtoenableordisableportwebauthentication. enable|disable Enablesordisablesportwebauthentication. Switchcommand,readwrite. Table 17-49 show pwa Output Details (Continued) show pwa banner set pwa banner clear pwa banner set pwa displaylogo set pwa ipaddress set pwa protocol set pwa guestname clear pwa guestname set pwa guestpassword set pwa gueststatus set pwa initialize set pwa quietperiod set pwa maxrequest set pwa portcontrol show pwa session set pwa enhancedmode Configuring Secure Shell (SSH) show ssh status set ssh set ssh hostkey Page Index Numerics A B C R S T U V