Main
Page
Notice
Version: Information in this guide refers to D-Series firmware version 1.0.xx
ENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENT
BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT.
Page
Page
Contents
About This Guide
Chapter 1: Introduction
Chapter 2: Basic Configuration
Page
Chapter 3: Discovery Protocol Configuration
Chapter 4: Port Configuration
Page
Chapter 5: SNMP Configuration
Chapter 6: Spanning Tree Configuration
Page
Chapter 7: 802.1Q VLAN Configuration
Chapter 8: Differentiated Services Configuration
Chapter 9: Policy Classification Configuration
Chapter 10: Port Priority and Rate Limiting Configuration
Chapter 11: IGMP Configuration
Chapter 12: Logging and Network Management
Chapter 13: RMON Configuration
Chapter 14: DHCP Server Configuration
Chapter 15: Security Configuration
Page
Index Figures
Tables
Page
Page
About This Guide
Using This Guide
Structure of This Guide
Important Notice
Related Documents
Conventions Used in This Guide
Thefollowingconventionsareusedinthetextofthisdocument:
Thefollowingiconsareusedinthisguide:
Getting Help
Page
Introduction
D-Series CLI Overview
Switch Management Methods
Factory Default Settings
Page
Table 1-1 Default Settings for Basic Switch Operation (Continued)
Using the Command Line Interface
Starting a CLI Session
Connecting Using the Console Port
Connecting Using Telnet
Logging In
Using a Default User Account
Using an Administratively Configured User Account
Navigating the Command Line Interface
Getting Help with CLI Syntax
CLI Command Modes
Performing Keyword Lookups
Syntax
Defaults
Displaying Scrolling Screens
Abbreviating and Completing Commands
Basic Line Editing Commands
TheCLIsupportsEMACslikelineeditingcommands.Tabl e 12listssomecommonlyused commands.
Table 1-2 Basic Line Editing Commands
Page
Basic Configuration
Quick Start Setup Commands
Setting User Accounts and Passwords
Thecommandsusedtoconfigureuseraccountsandpasswordsarelistedbelow.
Table 2-4 Optional CLI Setup Commands
show system login
set system login
clear system login
set password
set system password length
set system password aging
set system password history
show system lockout
Setting Basic Switch Properties
TodisplayandsetthesystemIPaddressandotherbasicsystem(switch)properties.
Thecommandsusedtosetbasicsysteminformationarelistedbelow.
Table 2-5 show system lockout Output Details
show ip address
UsethiscommandtodisplaythesystemIPaddressandsubnetmask.
ThisexampleshowshowtodisplaythesystemIPaddressandsubnetmask:
set ip address
UsethiscommandtosetthesystemIPaddress,subnetmaskanddefaultgateway.
clear ip address
show ip protocol
set ip protocol
show system
show system hardware
show system utilization
Page
show system enhancedbuffermode
set system enhancedbuffermode
show time
set time
show summertime
set summertime
set summertime date
set summertime recurring
clear summertime
set prompt
show banner motd
set banner motd
clear banner motd
show version
set system name
set system location
set system contact
set width
set length
show logout
set logout
show console
set console baud
Activating Licensed Features
License Key Field Descriptions
Clearing, Showing, and Moving Licenses
Commands
set license
show license
clear license
Configuring System Power and Power over Ethernet (PoE)
show inlinepower
set inlinepower threshold
set inlinepower trap
show port inlinepower
set port inlinepower
Downloading a Firmware Image
Downloading from a TFTP Server
Downloading via the Serial Port
Page
Reverting to a Previous Image
Reviewing and Selecting a Boot Firmware Image
Purpose
Commands
show boot system
set boot system
Starting and Configuring Telnet
show telnet
set telnet
telnet
Managing Switch Configuration and Files
Configuration Persistence Mode
show snmp persistmode
set snmp persistmode
save config
dir
show file
Usethiscommandtodisplaythecontentsofafile.
filename Specifiesthenameofthefiletodisplay.
show config
configure
copy
delete
show tftp settings
set tftp timeout
clear tftp timeout
set tftp retry
clear tftp retry
Clearing and Closing the CLI
cls (clear screen)
exit
Resetting the Switch
reset
clear config
Using and Configuring WebView
show webview
set webview
show ssl
set ssl
Page
Discovery Protocol Configuration
Configuring CDP
show cdp
Ifportstringisnotspecified,allCDPinformationwillbedisplayed.
ThisexampleshowshowtodisplayCDPinformationforportsge.1.1throughge.1.9:
Tabl e 38providesanexplanationofthecommandoutput.
Table 3-8 show cdp Output Details
set cdp state
set cdp auth
set cdp interval
set cdp hold-time
clear cdp
show neighbors
Configuring Cisco Discovery Protocol
show ciscodp
show ciscodp port info
set ciscodp status
set ciscodp timer
set ciscodp holdtime
set ciscodp port
Page
clear ciscodp
Port Configuration
Port Configuration Summary
Port String Syntax Used in the CLI
Port Slot/Unit Parameters Used in the CLI
Configuring SFP Ports for 100BASE-FX
Reviewing Port Status
show port
show port status
show port counters
Page
Disabling / Enabling and Naming Ports
set port disable
set port enable
show port alias
set port alias
Setting Speed and Duplex Mode
show port speed
set port speed
show port duplex
set port duplex
Enabling / Disabling Jumbo Frame Support
show port jumbo
set port jumbo
clear port jumbo
Setting Auto-Negotiation and Advertised Ability
show port negotiation
set port negotiation
show port advertise
set port advertise
clear port advertise
Setting Flow Control
show flowcontrol
set flowcontrol
Setting Port Link Traps and Link Flap Detection
show port trap
set port trap
show linkflap
Page
set linkflap globalstate
set linkflap portstate
set linkflap interval
set linkflap action
clear linkflap action
set linkflap threshold
set linkflap downtime
clear linkflap down
clear linkflap
Configuring Broadcast Suppression
show port broadcast
set port broadcast
clear port broadcast
Port Mirroring
Mirroring Features
show port mirroring
set port mirroring
clear port mirroring
Link Aggregation Control Protocol (LACP)
LACP Operation
LACP Terminology
D-Series Usage Considerations
show lacp
Page
set lacp
set lacp asyspri
set lacp aadminkey
clear lacp
set lacp static
clear lacp static
set lacp singleportlag
clear lacp singleportlag
show port lacp
[(32768,00e0639db587,32768),(32768,000000000000, 1411)]
set port lacp
clear port lacp
Page
Configuring Protected Ports
Protected Port Operation
set port protected
show port protected
clear port protected
set port protected name
show port protected name
clear port protected name
SNMP Configuration
SNMP Configuration Summary
SNMPv1 and SNMPv2c
SNMPv3
About SNMP Security Models and Levels
Using SNMP Contexts to Access Specific MIBs
Configuration Considerations
Reviewing SNMP Statistics
show snmp engineid
show snmp counters
UsethiscommandtodisplaySNMPtrafficcountervalues.
ThisexampleshowshowtodisplaySNMPcountervalues
Page
Configuring SNMP Users, Groups, and Communities
Table 5-19 show snmp counters Output Details (Continued)
show snmp user
set snmp user
clear snmp user
show snmp group
set snmp group
clear snmp group
show snmp community
set snmp community
clear snmp community
Configuring SNMP Access Rights
show snmp access
Page
set snmp access
clear snmp access
Configuring SNMP MIB Views
show snmp view
ThisexampleshowshowtodisplaySNMPMIBviewconfigurationinformation:
show snmp context
UsethiscommandtodisplaythecontextlistconfigurationforSNMPsviewbasedaccesscontrol.
Table 5-23 show snmp view Output Details
set snmp view
clear snmp view
Configuring SNMP Target Parameters
show snmp targetparams
Page
set snmp targetparams
clear snmp targetparams
Configuring SNMP Target Addresses
show snmp targetaddr
set snmp targetaddr
clear snmp targetaddr
Configuring SNMP Notification Parameters
About SNMP Notify Filters
Commands
show newaddrtrap
set newaddrtrap
show snmp notify
set snmp notify
clear snmp notify
show snmp notifyfilter
set snmp notifyfilter
clear snmp notifyfilter
show snmp notifyprofile
set snmp notifyprofile
clear snmp notifyprofile
Creating a Basic SNMP Trap Configuration
Example
How SNMP Will Use This Configuration
Spanning Tree Configuration
Spanning Tree Configuration Summary
Overview: Single, Rapid, and Multiple Spanning Tree Protocols
RSTP
MSTP
Spanning Tree Features
Loop Protect
Configuring Spanning Tree Bridge Parameters
Page
show spantree stats
ThisexampleshowshowtodisplaythedevicesSpanningTreeconfiguration:
Tabl e 628showsadetailedexplanationofcommandoutput. Table 6-28 show spantree Output Details
set spantree
show spantree version
set spantree version
clear spantree version
show spantree bpdu-forwarding
set spantree bpdu-forwarding
show spantree bridgeprioritymode
set spantree bridgeprioritymode
clear spantree bridgeprioritymode
show spantree mstilist
set spantree msti
clear spantree msti
show spantree mstmap
set spantree mstmap
clear spantree mstmap
show spantree vlanlist
show spantree mstcfgid
set spantree mstcfgid
clear spantree mstcfgid
set spantree priority
clear spantree priority
set spantree hello
clear spantree hello
set spantree maxage
clear spantree maxage
set spantree fwddelay
clear spantree fwddelay
show spantree backuproot
set spantree backuproot
clear spantree backuproot
show spantree tctrapsuppress
set spantree tctrapsuppress
clear spantree tctrapsuppress
set spantree protomigration
show spantree spanguard
set spantree spanguard
clear spantree spanguard
show spantree spanguardtimeout
set spantree spanguardtimeout
clear spantree spanguardtimeout
show spantree spanguardlock
clear / set spantree spanguardlock
show spantree spanguardtrapenable
set spantree spanguardtrapenable
clear spantree spanguardtrapenable
show spantree legacypathcost
set spantree legacypathcost
clear spantree legacypathcost
Configuring Spanning Tree Port Parameters
set spantree portadmin
clear spantree portadmin
show spantree portadmin
show spantree portpri
set spantree portpri
clear spantree portpri
show spantree adminpathcost
set spantree adminpathcost
clear spantree adminpathcost
show spantree adminedge
set spantree adminedge
clear spantree adminedge
Configuring Spanning Tree Loop Protect Parameters
set spantree lp
show spantree lp
clear spantree lp
show spantree lplock
clear spantree lplock
set spantree lpcapablepartner
show spantree lpcapablepartner
clear spantree lpcapablepartner
set spantree lpthreshold
show spantree lpthreshold
clear spantree lpthreshold
set spantree lpwindow
show spantree lpwindow
clear spantree lpwindow
set spantree lptrapenable
show spantree lptrapenable
clear spantree lptrapenable
set spantree disputedbpduthreshold
show spantree disputedbpduthreshold
clear spantree disputedbpduthreshold
show spantree nonforwardingreason
Page
Page
802.1Q VLAN Configuration
VLAN Configuration Summary
Port String Syntax Used in the CLI
Creating a Secure Management VLAN
Viewing VLANs
Command
show vlan
Creating and Naming Static VLANs
set vlan
set vlan name
clear vlan
clear vlan name
Assigning Port VLAN IDs (PVIDs) and Ingress Filtering
show port vlan
set port vlan
clear port vlan
show port ingress filter
set port ingress filter
show port discard
set port discard
Configuring the VLAN Egress List
show port egress
set vlan forbidden
set vlan egress
clear vlan egress
show vlan dynamicegress
set vlan dynamicegress
Setting the Host VLAN
show host vlan
set host vlan
clear host vlan
Enabling/Disabling GVRP (GARP VLAN Registration Protocol)
About GARP VLAN Registration Protocol (GVRP)
Overview
How It Works
Page
show gvrp
show garp timer
set gvrp
clear gvrp
set garp timer
Page
Differentiated Services Configuration
Globally Enabling or Disabling Diffserv
Purpose
Command
set diffserv adminmode
Creating Diffserv Classes and Matching Conditions
show diffserv info
show diffserv class
set class create
set diffserv class delete
set diffserv class match
Page
Page
set diffserv class rename
Configuring Diffserv Policies and Assigning Classes
show diffserv policy
set diffserv policy create
set diffserv policy delete
set diffserv policy class
set diffserv policy mark
set diffserv policy police style simple
set diffserv policy police action conform
set diffserv policy police action nonconform
set diffserv policy rename
Assigning Policies to Service Ports
show diffserv service info
show diffserv service stats
set diffserv service
DiffServ Configuration Examples
Page
Policy Classification Configuration
Policy Classification Configuration Summary
Configuring Policy Profiles
show policy profile
Thisexampleshowshowtodisplaypolicyinformationforprofile11:
set policy profile
clear policy profile
Configuring Classification Rules
show policy rule
Page
show policy capability
Page
set policy rule
Page
clear policy rule
clear policy all-rules
Assigning Ports to Policy Profiles
set policy port
clear policy port
Configuring Policy Class of Service (CoS)
About Policy-Based CoS Configurations
Page
set cos state
UsethiscommandtoenableordisableClassofService.
Switchcommand,readwrite.
enable|disable EnablesordisablesClassofServiceontheswitch.Defaultstateis disabled.
show cos state
clear cos state
set cos settings
clear cos settings
show cos settings
set cos port-config
show cos port-config
clear cos port-config
set cos port-resource
show cos port-resource
clear cos port-resource
set cos reference
show cos reference
clear cos reference
show cos unit
clear cos all-entries
show cos port-type
Page
Port Priority and Rate Limiting Configuration
Port Priority Configuration Summary
Configuring Port Priority
show port priority
set port priority
clear port priority
Configuring Priority to Transmit Queue Mapping
show port priority-queue
set port priority-queue
clear port priority-queue
Configuring Quality of Service (QoS)
show port txq
set port txq
clear port txq
Page
Page
IGMP Configuration
IGMP Overview
About IP Multicast Group Management
About Multicasting
Configuring IGMP at Layer 2
show igmpsnooping
set igmpsnooping adminmode
set igmpsnooping interfacemode
set igmpsnooping groupmembershipinterval
set igmpsnooping maxresponse
set igmpsnooping mcrtrexpiretime
set igmpsnooping add-static
set igmpsnooping remove-static
show igmpsnooping static
show igmpsnooping mfdb
clear igmpsnooping
Page
Page
Logging and Network Management
Thischapterdescribesswitchrelatedloggingandnetworkmanagementcommandsandhowto usethem.
Configuring System Logging
show logging server
set logging server
clear logging server
show logging default
set logging default
clear logging default
show logging application
set logging application
clear logging application
show logging local
set logging local
clear logging local
show logging buffer
Monitoring Network Events and Status
history
show history
set history
ping
show users
disconnect
Managing Switch Network Addresses and Routes
TodisplayordeleteswitchARPtableentries,andtodisplayMACaddressinformation.
show arp
UsethiscommandtodisplaytheswitchsARPtable.
set arp
clear arp
traceroute
show mac
show mac agetime
set mac agetime
clear mac agetime
set mac algorithm
show mac algorithm
clear mac algorithm
set mac multicast
clear mac address
show mac unreserved-flood
set mac unreserved-flood
Configuring Simple Network Time Protocol (SNTP)
show sntp
ThisexampleshowshowtodisplaySNTPclientsettings:
Tabl e 1241providesanexplanationofthecommandoutput. Table 12-41 show sntp Output Details
set sntp client
clear sntp client
set sntp server
clear sntp server
set sntp poll-interval
clear sntp poll-interval
set sntp poll-retry
clear sntp poll-retry
set sntp poll-timeout
clear sntp poll-timeout
Configuring Node Aliases
show nodealias config
set nodealias
clear nodealias config
Page
RMON Configuration
RMON
Table 13-43 RMON Monitoring Group Functions and Commands (Continued)
Statistics Group Commands
show rmon stats
set rmon stats
clear rmon stats
History Group Commands
show rmon history
set rmon history
clear rmon history
Alarm Group Commands
show rmon alarm
set rmon alarm properties
set rmon alarm status
clear rmon alarm
Event Group Commands
show rmon event
set rmon event properties
set rmon event status
clear rmon event
Filter Group Commands
show rmon channel
set rmon channel
clear rmon channel
show rmon filter
set rmon filter
clear rmon filter
Packet Capture Commands
show rmon capture
set rmon capture
clear rmon capture
DHCP Server Configuration
DHCP Overview
DHCP Server
Configuring a DHCP Server
Configuring General DHCP Server Parameters
set dhcp
set dhcp bootp
set dhcp conflict logging
show dhcp conflict
clear dhcp conflict
set dhcp exclude
clear dhcp exclude
set dhcp ping
clear dhcp ping
show dhcp binding
clear dhcp binding
show dhcp server statistics
clear dhcp server statistics
Configuring IP Address Pools
Manual Pool Configuration Considerations
Page
set dhcp pool
clear dhcp pool
set dhcp pool network
clear dhcp pool network
set dhcp pool hardware-address
clear dhcp pool hardware-address
set dhcp pool host
clear dhcp pool host
set dhcp pool client-identifier
clear dhcp pool client-identifier
set dhcp pool client-name
clear dhcp pool client-name
set dhcp pool bootfile
clear dhcp pool bootfile
set dhcp pool next-server
clear dhcp pool next-server
set dhcp pool lease
clear dhcp pool lease
set dhcp pool default-router
clear dhcp pool default-router
set dhcp pool dns-server
clear dhcp pool dns-server
set dhcp pool domain-name
clear dhcp pool domain-name
set dhcp pool netbios-name-server
clear dhcp pool netbios-name-server
set dhcp pool netbios-node-type
clear dhcp pool netbios-node-type
set dhcp pool option
clear dhcp pool option
show dhcp pool configuration
Thisexampledisplaysconfigurationinformationforalladdresspools.
Page
Security Configuration
Overview of Security Methods
RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment
Filter-ID Attribute Formats
Configuring RADIUS
show radius
Page
set radius
clear radius
show radius accounting
set radius accounting
clear radius accounting
Configuring 802.1X Authentication
show dot1x
Thisexampleshowshowtodisplay802.1Xstatus:
Thisexampleshowshowtodisplayauthenticationdiagnosticsinformationforge.1.1:
Thisexampleshowshowtodisplayauthenticationstatisticsforge.1.1:
Thisexampleshowshowtodisplaythestatusofportreauthenticationcontrolforge.1.1through
show dot1x auth-config
Usethiscommandtodisplay802.1Xauthenticationconfigurationsettingsforoneormoreports.
Page
set dot1x
set dot1x auth-config
clear dot1x auth-config
show eapol
Mode
set eapol
Table 15-47 show eapol Output Details (Continued)
clear eapol
Configuring MAC Authentication
show macauthentication
show macauthentication session
set macauthentication
set macauthentication password
clear macauthentication password
set macauthentication port
set macauthentication portinitialize
set macauthentication portquietperiod
clear macauthentication portquietperiod
set macauthentication macinitialize
set macauthentication reauthentication
set macauthentication portreauthenticate
set macauthentication macreauthenticate
set macauthentication reauthperiod
clear macauthentication reauthperiod
set macauthentication significant-bits
clear macauthentication significant-bits
Configuring Multiple Authentication Methods
About Multiple Authentication Types
show multiauth
set multiauth mode
clear multiauth mode
set multiauth precedence
clear multiauth precedence
show multiauth port
set multiauth port
clear multiauth port
show multiauth station
show multiauth session
show multiauth idle-timeout
Syntax
set multiauth idle-timeout
clear multiauth idle-timeout
show multiauth session-timeout
set multiauth session-timeout
clear multiauth session-timeout
Configuring VLAN Authorization (RFC 3580)
show policy maptable response
set policy maptable response
set vlanauthorization
set vlanauthorization egress
clear vlanauthorization
show vlanauthorization
Configuring MAC Locking
show maclock
show maclock stations
set maclock enable
set maclock disable
set maclock
clear maclock
set maclock static
clear maclock static
set maclock firstarrival
clear maclock firstarrival
set maclock agefirstarrival
clear maclock agefirstarrival
set maclock move
set maclock trap
Configuring Port Web Authentication (PWA)
About PWA
show pwa
Usethiscommandtodisplayportwebauthenticationinformationforoneormoreports.
Tabl e 1553providesanexplanationofthecommandoutput.
Ifportstringisnotspecified,PWAinformationwillbedisplayedforallports.
ThisexampleshowshowtodisplayPWAinformationforge.2.1:
set pwa
Usethiscommandtoenableordisableportwebauthentication.
enable|disable Enablesordisablesportwebauthentication.
Switchcommand,readwrite.
Table 15-53 show pwa Output Details (Continued)
show pwa banner
set pwa banner
clear pwa banner
set pwa displaylogo
set pwa ipaddress
set pwa protocol
set pwa guestname
clear pwa guestname
set pwa guestpassword
set pwa gueststatus
set pwa initialize
set pwa quietperiod
set pwa maxrequest
set pwa portcontrol
show pwa session
set pwa enhancedmode
Configuring Secure Shell (SSH)
show ssh status
set ssh
set ssh hostkey
Page
Index
Numerics
A
B
C
R
S
T
U
V
Notice