Manuals / Brands / Computer Equipment / Switch / Enterasys Networks / Computer Equipment / Switch

Enterasys Networks N Standalone (NSA) Series manual

1 1372

Download 1372 pages, 7.21 Mb

Enterasys Matrix®

N Standalone (NSA) Series

Configuration Guide

Firmware Version 5.41.xx

P/N 9034073-08 Rev.0C

Contents

Main Page Notice Part Number: 9034073-08 Rev.0C July 2008 ENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENT Page Page Contents ABOUT THIS GUIDE 1 2 3 4 5 6 7 8 9 10 11 12 13 14 INDEX Figures Page Tables Page Page Page About This Guide USING THIS GUIDE STRUCTURE OF THIS GUIDE RELATED DOCUMENTS DOCUMENT CONVENTIONS Introduction 1.1 MATRIX SERIES FEATURES 1.2 MATRIX SERIES CLI OVERVIEW 1.3 DEVICE MANAGEMENT METHODS 1.4 GETTING HELP Page Startup and General Configuration 2.1 STARTUP AND GENERAL CONFIGURATION SUMMARY 2.1.1 Factory Default Settings Page Page Page Page Page Page Page 2.1.2 CLI Command Defaults Descriptions 2.1.3 CLI Command Modes 2.1.4 Using WebView 2.1.5 Process Overview: CLI Startup and General Configuration 2.1.6 Starting and Navigating the Command Line Interface 2.1.6.1 Using a Console Port Connection 2.1.6.2 Logging in with a Default User Account 2.1.6.3 Logging in with Administratively Configured Account 2.1.6.4 Using a Telnet Connection Figure 2-2 Matrix N Standalone Startup Screen 2.1.6.5 Getting Help with CLI Syntax 2.1.6.6 Using Context-Sensitive Help 2.1.6.7 Performing Keyword Lookups 2.1.6.8 Displaying Scrolling Screens 2.1.6.9 Abbreviating and Completing Commands 2.1.6.10 Using the Spacebar Auto Complete Function 2.1.7 Configuring the Line Editor Page Page 2.1.7.1 show line-editor 2.1.7.2 set line-editor Page 2.2 GENERAL CONFIGURATION COMMAND SET 2.2.1 Setting User Accounts and Passwords Purpose Commands 2.2.1.1 show system login Page 2.2.1.2 set system login 2.2.1.3 clear system login 2.2.1.4 set password Page 2.2.1.5 set system password length 2.2.1.6 set system password aging 2.2.1.7 set system password history 2.2.1.8 show system lockout 2.2.1.9 set system lockout 2.2.2 Managing the Management Authentication Notification MIB Purpose Commands 2.2.2.1 show mgmt-auth-notify 2.2.2.2 set mgmt-auth-notify Page 2.2.2.3 clear mgmt-auth-notify Page 2.2.3 Setting Basic Device Properties Purpose Commands Page 2.2.3.1 show ip address 2.2.3.2 set ip address 2.2.3.3 clear ip address 2.2.3.4 show ip gratuitous-arp 2.2.3.5 set ip gratuitous-arp 2.2.3.6 clear ip gratuitous-arp 2.2.3.7 show system Page 2.2.3.8 show system hardware Page 2.2.3.9 show system utilization Page Page 2.2.3.10 set system utilization threshold value range is [1..1000] and represents the % of system utilization to use as the trap threshold. 2.2.3.11 clear system utilization 2.2.3.12 show time 2.2.3.13 set time 2.2.3.14 show summertime 2.2.3.15 set summertime 2.2.3.16 set summertime date Page 2.2.3.17 set summertime recurring Page 2.2.3.18 clear summertime 2.2.3.19 set prompt 2.2.3.20 set cli completion 2.2.3.21 loop 2.2.3.22 show banner motd 2.2.3.23 set banner motd 2.2.3.24 clear banner motd 2.2.3.25 show version 2.2.3.26 set system name 2.2.3.27 set system location 2.2.3.28 set system contact 2.2.3.29 set width 2.2.3.30 set length 2.2.3.31 show logout 2.2.3.32 set logout 2.2.3.33 show physical alias Page 2.2.3.34 set physical alias Page 2.2.3.35 clear physical alias 2.2.3.36 show physical assetid 2.2.3.37 set physical assetid 2.2.3.38 clear physical assetid Page 2.2.4.1 set license 2.2.4.2 show license 2.2.4.3 clear license 2.2.5 Downloading a New Firmware Image 2.2.5.1 Downloading from an FTP or TFTP Server 2.2.5.2 Downloading via the Serial Port Page 2.2.6 Reviewing and Selecting a Boot Firmware Image Purpose Commands 2.2.6.1 show boot system 2.2.6.2 set boot system 2.2.7 Starting and Configuring Telnet Commands 2.2.7.1 show telnet 2.2.7.2 set telnet 2.2.7.3 telnet 2.2.7.4 show router telnet 2.2.7.5 set router telnet 2.2.7.6 clear router telnet 2.2.8 Managing Configu ration and Image Files 2.2.8.1 dir Page 2.2.8.2 show file 2.2.8.3 show config This example shows how to display the current non-default device configuration: 2.2.8.4 configure 2.2.8.5 copy Page 2.2.8.6 delete 2.2.8.7 script Page 2.2.9 Enabling or Disabling the Path MTU Discovery Protocol 2.2.9.1 show mtu 2.2.9.2 set mtu 2.2.9.3 clear mtu Page 2.2.10.1 wait 2.2.10.2 cls (clear screen) 2.2.10.3 exit | quit 2.2.11 Resetting the Device 2.2.11.1 show reset 2.2.11.2 reset Page 2.2.11.3 reset at 2.2.11.4 reset in 2.2.11.5 clear config Page 2.2.12.1 show support Page 2.3 PREPARING THE DEVICE FOR ROUTER MODE 2.3.1 Pre-Routing Configuration Tasks Page 2.3.2 Reviewing and Configuring Routing 2.3.2.1 show router 2.3.2.2 set router 2.3.2.3 clear router 2.3.2.4 router 2.3.3 Enabling Router Configuration Modes Page Page Configuring Discovery Protocols 3.2.1.1 show neighbors Page 3.2.2 Enterasys Discovery Protocol 3.2.2.1 show cdp Page 3.2.2.2 set cdp state 3.2.2.3 set cdp auth 3.2.2.4 set cdp interval 3.2.2.5 set cdp hold-time 3.2.2.6 clear cdp 3.2.3 Cisco Discovery Protocol 3.2.3.1 show ciscodp Page 3.2.3.2 show ciscodp port info Page 3.2.3.3 set ciscodp status 3.2.3.4 set ciscodp timer 3.2.3.5 set ciscodp holdtime 3.2.3.6 set ciscodp port Page Page 3.2.3.7 clear ciscodp Page 3.2.4 Link Layer Discovery Protocol and LLDP-MED LLDP Frames Configuration Tasks Page 3.2.4.1 show lldp 3.2.4.2 show lldp port status 3.2.4.3 show lldp port trap 3.2.4.4 show lldp port tx-tlv 3.2.4.5 show lldp port location-info 3.2.4.6 show lldp port local-info Page Page Page Page 3.2.4.7 show lldp port remote-info Page 3.2.4.8 show lldp port network-policy Page 3.2.4.9 set lldp tx-interval 3.2.4.10 set lldp hold-multiplier 3.2.4.11 set lldp trap-interval 3.2.4.12 set lldp med-fast-repeat 3.2.4.13 set lldp port status 3.2.4.14 set lldp port trap 3.2.4.15 set lldp port med-trap 3.2.4.16 set lldp port location-info 3.2.4.17 set lldp port tx-tlv Page Page 3.2.4.18 set lldp port network-policy Page Page 3.2.4.19 clear lldp 3.2.4.20 clear lldp port status 3.2.4.21 clear lldp port trap 3.2.4.22 clear lldp port med-trap 3.2.4.23 clear lldp port location-info 3.2.4.24 clear lldp port network-policy Page 3.2.4.25 clear lldp port tx-tlv Page Port Configuration 4.1.1 Port String Syntax Used in the CLI Examples Page 4.2 PROCESS OVERVIEW: PORT CONFIGURATION 4.3 PORT CONFIGURATION COMMAND SET 4.3.1 Setting Console Port Properties Purpose Commands 4.3.1.1 show console 4.3.1.2 clear console 4.3.1.3 show console baud 4.3.1.4 set console baud 4.3.1.5 clear console baud 4.3.1.6 show console flowcontrol 4.3.1.7 set console flowcontrol 4.3.1.8 clear console flowcontrol 4.3.1.9 show console bits 4.3.1.10 set console bits 4.3.1.11 clear console bits 4.3.1.12 show console stopbits 4.3.1.13 set console stopbits 4.3.1.14 clear console stopbits 4.3.1.15 show console parity 4.3.1.16 set console parity 4.3.1.17 clear console parity 4.3.2 Reviewing Port Status 4.3.2.1 show port 4.3.2.2 show port status Page 4.3.2.3 show port counters Page Page 4.3.2.4 show port operstatuscause Page 4.3.2.5 clear port operstatuscause causes 4.3.3 Disabling / Enabling and Naming Ports Commands 4.3.3.1 set port disable 4.3.3.2 set port enable 4.3.3.3 show port alias 4.3.3.4 set port alias 4.3.3.5 show forcelinkdown 4.3.3.6 set forcelinkdown 4.3.3.7 clear forcelinkdown Page 4.3.4.1 show port speed 4.3.4.2 set port speed 4.3.4.3 show port duplex 4.3.4.4 set port duplex Page 4.3.5.1 show port jumbo 4.3.5.2 set port jumbo 4.3.5.3 clear port jumbo 4.3.6 Setting Auto-Negotiation and Advertised Ability Commands 4.3.6.1 show port negotiation 4.3.6.2 set port negotiation 4.3.6.3 show port mdix 4.3.6.4 set port mdix 4.3.6.5 clear port mdix 4.3.6.6 show port advertise Page 4.3.6.7 set port advertise Page 4.3.6.8 clear port advertise Page Page 4.3.7.1 show port flowcontrol Page 4.3.7.2 set port flowcontrol 4.3.8 Configuring Link Traps and Link Flap Detection Commands 4.3.8.1 show port trap 4.3.8.2 set port trap 4.3.8.3 show linkflap Page Page Page 4.3.8.4 set linkflap globalstate 4.3.8.5 set linkflap 4.3.8.6 set linkflap interval 4.3.8.7 set linkflap action 4.3.8.8 clear linkflap action 4.3.8.9 set linkflap threshold 4.3.8.10 set linkflap downtime 4.3.8.11 clear linkflap down 4.3.8.12 clear linkflap Page 4.3.9.1 show port broadcast Page 4.3.9.2 set port broadcast 4.3.9.3 clear port broadcast 4.4 CONFIGURING PORT MIRRORING 4.4.1 Supported Mirrors 4.4.2 IDS Mirroring Considerations 4.4.3 Active Destination Port Configurations Page 4.4.4.1 show port mirroring 4.4.4.2 set port mirroring Page 4.4.4.3 clear port mirroring 4.5 CONFIGURING LACP 4.5.1 LACP Operation 4.5.2 LACP Terminology 4.5.3 Matrix Series Usage Considerations 4.5.4 Configuring Link Aggregation Page 4.5.4.1 show lacp Page 4.5.4.2 set lacp 4.5.4.3 clear lacp state 4.5.4.4 set lacp asyspri 4.5.4.5 set lacp aadminkey 4.5.4.6 clear lacp 4.5.4.7 set lacp static Page 4.5.4.8 clear lacp static 4.5.4.9 show lacp singleportlag 4.5.4.10 set singleportlag 4.5.4.11 clear singleportlag 4.5.4.12 show port lacp This example shows how to display detailed LACP status information for port fe.1.12: This example shows how to display summarized LACP status information for port fe.1.12: [ This example shows how to display LACP counters for port fe.1.12: 4.5.4.13 set port lacp Page 4.5.4.14 clear port lacp Page 4.5.4.15 show lacp flowRegeneration 4.5.4.16 set lacp flowRegeneration 4.5.4.17 clear lacp flowRegeneration 4.5.4.18 show lacp outportAlgorithm 4.5.4.19 set lacp outportAlgorithm 4.5.4.20 clear lacp outportAlgorithm SNMP Configuration 5.1 SNMP CONFIGURATION SUMMARY 5.1.1 SNMPv1 and SNMPv2c 5.1.2 SNMPv3 5.1.3 About SNMP Security Models and Levels 5.1.4 Using SNMP Contexts to Access Specific MIBs or Routing Modules Page Page 5.3.1.1 show snmp engineid 5.3.1.2 show snmp counters Page Page Page Page 5.3.2 Configuring SNMP Users, Groups and Communities Commands 5.3.2.1 show snmp user Page 5.3.2.2 set snmp user Page 5.3.2.3 clear snmp user 5.3.2.4 show snmp group Page 5.3.2.5 set snmp group 5.3.2.6 clear snmp group 5.3.2.7 show snmp community 5.3.2.8 set snmp community Page 5.3.2.9 clear snmp community Page 5.3.3.1 show snmp access Page 5.3.3.2 set snmp access Page 5.3.3.3 clear snmp access Page 5.3.4.1 show snmp view Page 5.3.4.2 show snmp context 5.3.4.3 set snmp view 5.3.4.4 clear snmp view Page 5.3.5.1 show snmp targetparams Page Page 5.3.5.2 set snmp targetparams Page 5.3.5.3 clear snmp targetparams Page 5.3.6.1 show snmp targetaddr Page 5.3.6.2 set snmp targetaddr Page 5.3.6.3 clear snmp targetaddr 5.3.7 Configuring SNMP Notification Parameters Commands 5.3.7.1 show snmp notify Page 5.3.7.2 set snmp notify 5.3.7.3 clear snmp notify About SNMP Notify Filters 5.3.7.4 show snmp notifyfilter 5.3.7.5 set snmp notifyfilter 5.3.7.6 clear snmp notifyfilter 5.3.7.7 show snmp notifyprofile 5.3.7.8 set snmp notifyprofile 5.3.7.9 clear snmp notifyprofile 5.3.8 Creating a Basic SNMP Trap Configuration Page Spanning Tree Configuration RSTP MSTP 6.1.2 Spanning Tree Features 6.1.3 Loop Protect 6.1.4 Process Overview: Spanning Tree Configuration 6.2 SPANNING TREE CONFIGURATION COMMAND SET 6.2.1 Configuring Spanning Tree Bridge Parameters Commands Page Page Page 6.2.1.1 show spantree stats Page Page Page Page 6.2.1.2 show spantree version 6.2.1.3 set spantree version 6.2.1.4 clear spantree version 6.2.1.5 show spantree stpmode 6.2.1.6 set spantree stpmode 6.2.1.7 clear spantree stpmode 6.2.1.8 show spantree maxconfigurablestps 6.2.1.9 set spantree maxconfigurablestps 6.2.1.10 clear spantree maxconfigurablestps 6.2.1.11 show spantree mstilist 6.2.1.12 set spantree msti 6.2.1.13 clear spantree msti 6.2.1.14 show spantree mstmap 6.2.1.15 set spantree mstmap 6.2.1.16 clear spantree mstmap 6.2.1.17 show spantree vlanlist 6.2.1.18 show spantree mstcfgid 6.2.1.19 set spantree mstcfgid 6.2.1.20 clear spantree mstcfgid 6.2.1.21 show spantree bridgeprioritymode 6.2.1.22 set spantree bridgeprioritymode 6.2.1.23 clear spantree bridgeprioritymode 6.2.1.24 show spantree priority 6.2.1.25 set spantree priority Page 6.2.1.26 clear spantree priority 6.2.1.27 show spantree bridgehellomode 6.2.1.28 set spantree bridgehellomode 6.2.1.29 clear spantree bridgehellomode 6.2.1.30 show spantree hello 6.2.1.31 set spantree hello 6.2.1.32 clear spantree hello 6.2.1.33 show spantree maxage 6.2.1.34 set spantree maxage 6.2.1.35 clear spantree maxage 6.2.1.36 show spantree fwddelay 6.2.1.37 set spantree fwddelay 6.2.1.38 clear spantree fwddelay 6.2.1.39 show spantree autoedge 6.2.1.40 set spantree autoedge 6.2.1.41 clear spantree autoedge 6.2.1.42 show spantree legacypathcost 6.2.1.43 set spantree legacypathcost 6.2.1.44 clear spantree legacypathcost 6.2.1.45 show spantree tctrapsuppress 6.2.1.46 set spantree tctrapsuppress 6.2.1.47 clear spantree tctrapsuppress 6.2.1.48 show spantree txholdcount 6.2.1.49 set spantree txholdcount 6.2.1.50 clear spantree txholdcount 6.2.1.51 show spantree maxhops 6.2.1.52 set spantree maxhops 6.2.1.53 clear spantree maxhops 6.2.1.54 show spantree spanguard 6.2.1.55 set spantree spanguard 6.2.1.56 clear spantree spanguard 6.2.1.57 show spantree spanguardtimeout 6.2.1.58 set spantree spanguardtimeout 6.2.1.59 clear spantree spanguardtimeout 6.2.1.60 show spantree spanguardlock 6.2.1.61 clear / set spantree spanguardlock 6.2.1.62 show spantree spanguardtrapenable 6.2.1.63 set spantree spanguardtrapenable 6.2.1.64 clear spantree spanguardtrap enable 6.2.1.65 show spantree backuproot 6.2.1.66 set spantree backuproot 6.2.1.67 clear spantree backuproot 6.2.1.68 show spantree backuproottrapendable 6.2.1.69 set spantree backuproottrapenable 6.2.1.70 clear spantree backuproottrapenable 6.2.1.71 show spantree newroottrapendable 6.2.1.72 set spantree newroottrapenable 6.2.1.73 clear spantree newroottrapenable 6.2.1.74 clear spantree default 6.2.1.75 show spantree debug Page 6.2.1.76 clear spantree debug 6.2.2 Configuring Spanning Tree Port Parameters Commands Page 6.2.2.1 show spantree portenable 6.2.2.2 set spantree portenable 6.2.2.3 clear spantree portenable 6.2.2.4 show spantree portadmin 6.2.2.5 set spantree portadmin 6.2.2.6 clear spantree portadmin 6.2.2.7 set spantree protomigration 6.2.2.8 show spantree portstate 6.2.2.9 show spantree blockedports 6.2.2.10 show spantree portpri 6.2.2.11 set spantree portpri 6.2.2.12 clear spantree portpri 6.2.2.13 set spantree porthello 6.2.2.14 clear spantree porthello 6.2.2.15 show spantree portcost 6.2.2.16 show spantree adminpathcost 6.2.2.17 set spantree adminpathcost 6.2.2.18 clear spantree adminpathcost 6.2.2.19 show spantree adminedge 6.2.2.20 set spantree adminedge 6.2.2.21 clear spantree adminedge 6.2.2.22 show spantree operedge 6.2.2.23 show spantree adminpoint 6.2.2.24 show spantree operpoint 6.2.2.25 set spantree adminpoint 6.2.2.26 clear spantree adminpoint 6.2.3 Configuring Spanning Tree Loop Protect Features Commands Page 6.2.3.1 set spantree lp 6.2.3.2 show spantree lp 6.2.3.3 clear spantree lp 6.2.3.4 show spantree lplock 6.2.3.5 clear spantree lplock 6.2.3.6 set spantree lpcapablepartner Page 6.2.3.7 show spantree lpcapablepartner 6.2.3.8 clear spantree lpcapablepartner 6.2.3.9 set spantree lpthreshold 6.2.3.10 show spantree lpthreshold 6.2.3.11 clear spantree lpthreshold 6.2.3.12 set spantree lpwindow 6.2.3.13 show spantree lpwindow 6.2.3.14 clear spantree lpwindow 6.2.3.15 set spantree lptrapenable 6.2.3.16 show spantree lptrapenable 6.2.3.17 clear spantree lptrapenable 6.2.3.18 set spantree disputedbpduthreshold Page 6.2.3.19 show spantree disputedbpduthreshold 6.2.3.20 clear spantree disputedbpduthreshold 6.2.3.21 show spantree nonforwardingreason Page 802.1Q VLAN Configuration 7.1 VLAN CONFIGURATION SUMMARY 7.1.1 Port Assignment Scheme 7.1.2 Port String Syntax Used in the CLI 7.2 PROCESS OVERVIEW: 802.1Q VLAN CONFIGURATION Preparing for VLAN Configuration Page 7.3.1.1 show vlan Page Page 7.3.2.1 set vlan 7.3.2.2 set vlan name 7.3.2.3 clear vlan 7.3.2.4 clear vlan name Page Page 7.3.3.1 show port vlan 7.3.3.2 set port vlan Page 7.3.3.3 clear port vlan 7.3.3.4 show vlan interface 7.3.3.5 set vlan interface 7.3.3.6 clear vlan interface 7.3.3.7 show port ingress filter 7.3.3.8 set port ingress filter 7.3.3.9 show port discard 7.3.3.10 set port discard 7.3.3.11 clear port discard 7.3.4 Configuring the VLAN Egress List 7.3.4.1 show port egress 7.3.4.2 set vlan egress Page 7.3.4.3 clear vlan egress 7.3.4.4 show vlan dynamic egress 7.3.4.5 set vlan dynamicegress 7.3.5 Creating a Secure Management VLAN 7.3.6 Enabling/Disabling GVRP Purpose GARP VLAN Registration Protocol (GVRP) Operation VLAN Configuration Command Set Enabling/Disabling GVRP 7-34 Matrix NSA Series Configuration Guide Figure 7-1 Example of VLAN Propagation via GVRP RD Switch 3 1R Page 7.3.6.1 show gvrp Page 7.3.6.2 show garp timer Page 7.3.6.3 set gvrp 7.3.6.4 clear gvrp 7.3.6.5 set garp timer Page 7.3.6.6 clear garp timer Policy Classification Configuration 8.1 POLICY CLASSIFICATION CONFIGURATION SUMMARY 8.2 PROCESS OVERVIEW: POLICY CLASSIFICATION CONFIGURATION 8.3 POLICY CLASSIFICATION CONFIGURATION COMMAND SET 8.3.1 Configuring Policy Profiles Purpose Page 8.3.1.1 show policy profile Page 8.3.1.2 set policy profile Page 8.3.1.3 clear policy profile 8.3.1.4 show policy invalid 8.3.1.5 set policy invalid action 8.3.1.6 clear policy invalid action 8.3.1.7 set port tci overwrite 8.3.1.8 show policy accounting 8.3.1.9 set policy accounting 8.3.1.10 clear policy accounting 8.3.1.11 show policy syslog 8.3.1.12 set policy syslog 8.3.1.13 clear policy syslog 8.3.1.14 set policy maptable 8.3.1.15 show policy maptable 8.3.1.16 clear policy maptable 8.3.2 Assigning Classification Rules to Policy Profiles Purpose 8.3.2.1 show policy rule Page Page Page 8.3.2.2 show policy capability Page 8.3.2.3 set policy classify Page 8.3.2.4 set policy rule Page Page Page 8.3.2.5 clear policy rule Page 8.3.2.6 clear policy all-rules 8.3.2.7 set policy port 8.3.2.8 show policy allowed-type This example shows how to show information about policies allowed on port ge.1.5: 8.3.2.9 set policy allowed-type 8.3.2.10 clear policy allowed-type 8.3.2.11 clear policy port-hit 8.3.3 Configuring Policy Class of Service (CoS) Using Port-Based or Policy-Based CoS Settings About Policy-Based CoS Default and User-Defined Configurations CoS CLI Displays on Matrix DFE-Gold or NSA Systems Page 8.3.3.1 show cos state 8.3.3.2 set cos state 8.3.3.3 show cos port-type Table 8-5 provides an explanation of the command out put. 8.3.3.4 show cos unit 8.3.3.5 show cos port-config This example shows how to show all Class of Service port group configuration information: 8.3.3.6 set cos port-config irl 8.3.3.7 clear cos port-config irl 8.3.3.8 set cos port-config txq Page 8.3.3.9 clear cos port-config txq 8.3.3.10 show cos port-resource Page 8.3.3.11 set cos port-resource irl Page 8.3.3.12 clear cos port-resource irl 8.3.3.13 set cos port-resource txq Page 8.3.3.14 clear cos port-resource txq 8.3.3.15 show cos reference Page 8.3.3.16 set cos reference irl 8.3.3.17 clear cos reference irl 8.3.3.18 set cos reference txq 8.3.3.19 clear cos reference txq 8.3.3.20 show cos settings 8.3.3.21 set cos settings 8.3.3.22 clear cos settings 8.3.3.23 show cos violation irl 8.3.3.24 clear cos violation irl 8.3.3.25 clear cos all-entries Page Port Priority and Rate Limiting Configuration 9.1 PORT PRIORITY CONFIGURATION SUMMARY Page 9.3.1.1 show port priority 9.3.1.2 set port priority 9.3.1.3 clear port priority 9.3.2 Configuring Priority to Transmit Queue Mapping 9.3.2.1 show port priority-queue This example shows how to display the transmit queues associated with priority 3. 9.3.2.2 set port priority-queue 9.3.2.3 clear port priority-queue 9.3.3 Configuring Port Traffic Rate Limiting 9.3.3.1 show port ratelimit Page 9.3.3.2 set port ratelimit Page 9.3.3.3 clear port ratelimit IGMP Configuration 10.1 ABOUT IP MULTICAST GROUP MANAGEMENT 10.2 IGMP CONFIGURATION SUMMARY 10.3 PROCESS OVERVIEW: IGMP CONFIGURATION Page 10.4.1.1 show igmp enable 10.4.1.2 set igmp enable 10.4.1.3 set igmp disable 10.4.2 Configuring IGMP 10.4.2.1 show igmp query 10.4.2.2 set igmp query-enable 10.4.2.3 set igmp query-disable 10.4.2.4 show igmp grp-full-action 10.4.2.5 set igmp grp-full-action 10.4.2.6 show igmp config Page 10.4.2.7 set igmp config Page 10.4.2.8 set igmp delete 10.4.2.9 show igmp groups 10.4.2.10 show igmp static 10.4.2.11 set igmp add-static 10.4.2.12 set igmp remove-static 10.4.2.13 show igmp protocols Use this command to display the binding of IP protocol id to IGMP classification 10.4.2.14 set igmp protocols Use this command to changes the IGMP classification of received IP frames 10.4.2.15 clear igmp protocols Use this command to clear the binding of IP protocol id to IGMP classification 10.4.2.16 show igmp vlan 10.4.2.17 show igmp reporters 10.4.2.18 show igmp flow 10.4.2.19 show igmp counters 10.4.2.20 show igmp number-groups Page Logging and Network Management 11.1 PROCESS OVERVIEW: NETWORK MANAGEMENT 11.2 LOGGING AND NETWORK MANAGEMENT COMMAND SET 11.2.1 Configuring System Logging 11.2.1.1 show logging all This example shows how to display all system logging information: Table 11-1 provides an explanation of the command output. Page 11.2.1.2 show logging server 11.2.1.3 set logging server Page 11.2.1.4 clear logging server 11.2.1.5 show logging default 11.2.1.6 set logging default 11.2.1.7 clear logging default 11.2.1.8 show logging application This example shows how to display system logging information pertaining to the SNMP application. Table 11-2 provides an explanation of the command output. Page 11.2.1.9 set logging application Page Page 11.2.1.10 clear logging application 11.2.1.11 show logging local 11.2.1.12 set logging local 11.2.1.13 clear logging local 11.2.1.14 set logging here 11.2.1.15 clear logging here 11.2.1.16 show logging buffer 11.2.2 Monitoring Network Events and Status 11.2.2.1 history 11.2.2.2 show history 11.2.2.3 set history 11.2.2.4 show netstat Page 11.2.2.5 ping This example shows how to ping IP address 134.141.89.29 with 10 packets: 11.2.2.6 show users 11.2.2.7 tell 11.2.2.8 disconnect 11.2.3 Configuring SMON 11.2.3.1 show smon priority 11.2.3.2 set smon priority 11.2.3.3 clear smon priority 11.2.3.4 show smon vlan 11.2.3.5 set smon vlan 11.2.3.6 clear smon vlan 11.2.4 Configuring RMON RMON Monitoring Group Functions and Commands Page Page Page 11.2.4.1 show rmon stats Page Page 11.2.4.2 set rmon stats 11.2.4.3 clear rmon stats 11.2.4.4 show rmon history Page 11.2.4.5 set rmon history 11.2.4.6 clear rmon history 11.2.4.7 show rmon alarm Page 11.2.4.8 set rmon alarm properties Page 11.2.4.9 set rmon alarm status 11.2.4.10 clear rmon alarm 11.2.4.11 show rmon event Page 11.2.4.12 set rmon event properties Page 11.2.4.13 set rmon event status 11.2.4.14 clear rmon event 11.2.4.15 show rmon host Page 11.2.4.16 set rmon host properties 11.2.4.17 set rmon host status 11.2.4.18 clear rmon host 11.2.4.19 show rmon topN Page 11.2.4.20 set rmon topN properties Page 11.2.4.21 set rmon topN status 11.2.4.22 clear rmon topN 11.2.4.23 show rmon matrix Page 11.2.4.24 set rmon matrix properties 11.2.4.25 set rmon matrix status 11.2.4.26 clear rmon matrix 11.2.4.27 show rmon channel 11.2.4.28 set rmon channel Page 11.2.4.29 clear rmon channel 11.2.4.30 show rmon filter 11.2.4.31 set rmon filter Page 11.2.4.32 clear rmon filter 11.2.4.33 show rmon capture Example This example shows how to display RMON capture entries and associated buffer entries: 11.2.4.34 set rmon capture Page 11.2.4.35 clear rmon capture 11.2.5 Managing Switch Network Addresses and Routes Commands 11.2.5.1 show arp 11.2.5.2 set arp 11.2.5.3 clear arp 11.2.5.4 show rad 11.2.5.5 set rad 11.2.5.6 show ip route Page 11.2.5.7 traceroute Page Page 11.2.5.8 set ip route 11.2.5.9 clear ip route 11.2.5.10 show port mac 11.2.5.11 show mac Page 11.2.5.12 set mac 11.2.5.13 clear mac Page 11.2.5.14 show newaddrtraps 11.2.5.15 set newaddrtraps 11.2.5.16 show movedaddrtrap 11.2.5.17 set movedaddrtrap 11.2.6 Configuring Simple Network Time Protocol (SNTP) Commands 11.2.6.1 show sntp Page 11.2.6.2 set sntp client 11.2.6.3 clear sntp client 11.2.6.4 set sntp server 11.2.6.5 clear sntp server 11.2.6.6 set sntp broadcastdelay 11.2.6.7 clear sntp broadcast delay 11.2.6.8 set sntp poll-interval 11.2.6.9 clear sntp poll-interval 11.2.6.10 set sntp poll-retry 11.2.6.11 clear sntp poll-retry 11.2.6.12 set sntp poll-timeout 11.2.6.13 clear sntp poll-timeout 11.2.6.14 show timezone 11.2.6.15 set timezone 11.2.6.16 clear timezone 11.2.7 Configuring Node Aliases Commands 11.2.7.1 show nodealias Page 11.2.7.2 show nodealias mac Page 11.2.7.3 show nodealias protocol Page 11.2.7.4 show nodealias config Page 11.2.7.5 set nodealias 11.2.7.6 set nodealias maxentries 11.2.7.7 clear nodealias 11.2.7.8 clear nodealias config 11.2.8 Configuring NetFlow Page 11.2.8.1 show netflow Page 11.2.8.2 set netflow cache 11.2.8.3 clear netflow cache 11.2.8.4 set netflow export-destination 11.2.8.5 clear netflow export-destination 11.2.8.6 set netflow export-interval 11.2.8.7 clear netflow export-interval 11.2.8.8 set netflow port 11.2.8.9 clear netflow port 11.2.8.10 set netflow export-version 11.2.8.11 clear netflow export-version 11.2.8.12 set netflow template Page 11.2.8.13 clear netflow template Page IP Configuration 12.1 PROCESS OVERVIEW: INTERNET PROTOCOL (IP) CONFIGURATION Page Page 12.2.1.1 show interface Page 12.2.1.2 interface 12.2.1.3 ip ecm-forwarding-algorithm 12.2.1.4 show ip interface Page 12.2.1.5 ip address 12.2.1.6 no shutdown 12.2.2 Managing Router Configuration Files 12.2.2.1 show running-config 12.2.2.2 write This example shows how to display the router-s pe ci fic configuration to the terminal: 12.2.2.3 no ip routing 12.2.3 Performing a Basic Router Configuration 12.2.3.1 Using Router-Only Config Files 12.2.3.2 Displaying or Writing the Current Config to a File 12.2.3.3 Configuring the Router 12.2.4 Reviewing and Configuring the ARP Table 12.2.4.1 show ip arp Page 12.2.4.2 arp 12.2.4.3 ip gratuitous-arp The no form of this command resumes default ARP processing as described in RFC 826 12.2.4.4 ip gratuitous-arp-learning 12.2.4.5 ip proxy-arp 12.2.4.6 ip mac-address 12.2.4.7 arp timeout 12.2.4.8 clear arp-cache Page 12.2.5.1 ip directed-broadcast 12.2.5.2 ip forward-protocol About DHCP/BOOTP Relay 12.2.5.3 ip helper-address 12.2.6 Reviewing IP Traffic and Configuring Routes 12.2.6.1 show ip protocols Page 12.2.6.2 show ip traffic This example shows how to display IP traffic statistics: 12.2.6.3 clear ip stats 12.2.6.4 show ip route Page 12.2.6.5 ip route Page 12.2.6.6 ip icmp 12.2.6.7 ping 12.2.6.8 traceroute 12.2.7 Configuring PIM 12.2.7.1 ip pim sparse mode 12.2.7.2 ip pim bsr-candidate Page 12.2.7.3 ip pim dr-priority 12.2.7.4 ip pim rp-address 12.2.7.5 ip pim rp-candidate 12.2.7.6 show ip pim bsr Page 12.2.7.7 show ip pim interface Page 12.2.7.8 show ip pim neighbor Page 12.2.7.9 show ip pim rp Page 12.2.7.10 show ip pim rp-hash 12.2.7.11 show ip mroute Page 12.2.7.12 show ip mforward 12.2.7.13 show ip rpf 12.2.8 Configuring Load Sharing Network Address Translation (LSNAT) About LSNAT LSNAT Configuration Considerations Session Persistence Sticky Persistence Configuration Considerations Configuring Direct Access to Real Servers LSNAT Configuration Task List and Commands Page Page 12.2.8.1 show ip slb serverfarms 12.2.8.2 ip slb ftpctrlport 12.2.8.3 ip slb serverfarm 12.2.8.4 real 12.2.8.5 predictor 12.2.8.6 sticky 12.2.8.7 show ip slb reals Table 12-9 provides an explanation of the detailed command output. Page 12.2.8.8 inservice (real server) 12.2.8.9 faildetect (real server) Page 12.2.8.10 maxconns 12.2.8.11 weight 12.2.8.12 show ip slb vservers Page Page 12.2.8.13 ip slb vserver 12.2.8.14 serverfarm 12.2.8.15 virtual Page 12.2.8.16 inservice (virtual server) 12.2.8.17 client 12.2.8.18 persistence level Page 12.2.8.19 allow accessservers 12.2.8.20 ip slb allowaccess_all Page 12.2.8.21 show ip slb conns Page 12.2.8.22 show ip slb stats 12.2.8.23 show ip slb sticky 12.2.8.24 clear ip slb 12.2.8.25 show router limits 12.2.8.26 set router limits Page 12.2.8.27 clear router limits 12.2.9 Configuring Dynamic Host Configuration Protocol (DHCP) DHCP Overview Configuring DHCP DHCP Task List DHCP Command Modes Page Page 12.2.9.1 ip dhcp server 12.2.9.2 ip local pool 12.2.9.3 exclude 12.2.9.4 ip dhcp ping packets 12.2.9.5 ip dhcp ping timeout 12.2.9.6 ip dhcp pool 12.2.9.7 domain-name 12.2.9.8 dns-server 12.2.9.9 netbios-name-server 12.2.9.10 netbios-node-type 12.2.9.11 default-router 12.2.9.12 bootfile 12.2.9.13 next-server 12.2.9.14 option Page 12.2.9.15 lease 12.2.9.16 host 12.2.9.17 client-class 12.2.9.18 client-identifier 12.2.9.19 client-name 12.2.9.20 hardware-address 12.2.9.21 show ip dhcp binding 12.2.9.22 clear ip dhcp binding 12.2.9.23 show ip dhcp server statistics Page 12.2.9.24 clear ip dhcp server statistics Page Routing Protocol Configuration 13.1 PROCESS OVERVIEW: ROUTING PROTOCOL CONFIGURATION Page Page 13.2.2.1 router rip 13.2.2.2 network 13.2.2.3 neighbor 13.2.2.4 distance Page 13.2.2.5 ip rip offset 13.2.2.6 timers 13.2.2.7 ip rip send version 13.2.2.8 ip rip receive version About RIP Authentication 13.2.2.9 key chain 13.2.2.10 key 13.2.2.11 key-string 13.2.2.12 accept-lifetime Page 13.2.2.13 send-lifetime Page 13.2.2.14 ip rip authentication keychain 13.2.2.15 ip rip authentication mode 13.2.2.16 no auto-summary 13.2.2.17 ip rip disable-triggered-updates 13.2.2.18 ip split-horizon poison 13.2.2.19 passive-interface 13.2.2.20 receive-interface 13.2.2.21 distribute-list 13.2.2.22 redistribute Page 13.2.3 Configuring OSPF OSPF Configuration Task List and Commands * Advanced License Required * Page Page 13.2.3.1 router ospf 13.2.3.2 network 13.2.3.3 router id 13.2.3.4 ip ospf cost 13.2.3.5 ip ospf priority 13.2.3.6 timers spf 13.2.3.7 ip ospf retransmit-interval 13.2.3.8 ip ospf transmit-delay 13.2.3.9 ip ospf hello-interval 13.2.3.10 ip ospf dead-interval 13.2.3.11 ip ospf authentication-key 13.2.3.12 ip ospf message digest key md5 13.2.3.13 distance ospf Page 13.2.3.14 area range 13.2.3.15 area authentication 13.2.3.16 area stub 13.2.3.17 area default cost 13.2.3.18 area nssa 13.2.3.19 area virtual-link Page 13.2.3.20 passive-interface 13.2.3.21 redistribute Page 13.2.3.22 database-overflow Page 13.2.3.23 show ip ospf This example shows how to display OSPF information: 13.2.3.24 show ip ospf database Page Page 13.2.3.25 show ip ospf border-routers 13.2.3.26 show ip ospf interface Page Page 13.2.3.27 show ip ospf neighbor Page 13.2.3.28 show ip ospf virtual-links Page 13.2.3.29 clear ip ospf process 13.2.3.30 debug ip ospf 13.2.3.31 rfc1583compatible 13.2.4 Configuring DVMRP 13.2.4.1 ip dvmrp 13.2.4.2 ip dvmrp metric 13.2.4.3 show ip dvmrp route Page 13.2.5 Configuring IRDP 13.2.5.1 ip irdp 13.2.5.2 ip irdp maxadvertinterval 13.2.5.3 ip irdp minadvertinterval 13.2.5.4 ip irdp holdtime 13.2.5.5 ip irdp preference 13.2.5.6 ip irdp address 13.2.5.7 no ip irdp multicast 13.2.5.8 show ip irdp 13.2.6 Configuring VRRP 13.2.6.1 router vrrp 13.2.6.2 create 13.2.6.3 address Page 13.2.6.4 priority 13.2.6.5 master-icmp-reply 13.2.6.6 advertise-interval Page 13.2.6.7 critical-ip Page 13.2.6.8 preempt 13.2.6.9 preempt-delay Page 13.2.6.10 enable 13.2.6.11 ip vrrp authentication-key 13.2.6.12 ip vrrp message-digest-key 13.2.6.13 show ip vrrp Page Security Configuration 14.1 OVERVIEW OF SECURITY METHODS Page 14.1.1 RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment Filter-ID Attribute Formats 14.2 PROCESS OVERVIEW: SECURITY CONFIGURATION Page 14.3.1.1 show authentication login 14.3.1.2 set authentication login 14.3.1.3 clear authentication login 14.3.2 Configuring RADIUS 14.3.2.1 show radius Page 14.3.2.2 set radius Page 14.3.2.3 clear radius 14.3.2.4 show radius accounting For details on enabling and configuring RADIUS accounting, refer to Section 14.3.2.5: 14.3.2.5 set radius accounting Page 14.3.2.6 clear radius accounting 14.3.3 Configuring RFC 3580 About RFC 3580 14.3.3.1 show vlanauthorization 14.3.3.2 set vlanauthorization 14.3.3.3 clear vlanauthorization 14.3.4 Configuring TACACS+ 14.3.4.1 show tacacs Page 14.3.4.2 set tacacs 14.3.4.3 show tacacs server 14.3.4.4 set tacacs server 14.3.4.5 clear tacacs server 14.3.4.6 show tacacs session 14.3.4.7 set tacacs session This example configures the service requested by the TACACS+ client as the service name basic. 14.3.4.8 clear tacacs session 14.3.4.9 show tacacs command 14.3.4.10 set tacacs command 14.3.4.11 show tacacs singleconnect 14.3.4.12 set tacacs singleconnect 14.3.5 Configuring 802.1X Authentication About Multi-User Authentication Page 14.3.5.1 show dot1x If port-string is not specified, information for all ports will be displayed. This example shows how to display authentication session statistics for fe.1.1: This example shows how to display authentication statistics for fe.1.1: 14.3.5.2 show dot1x auth-config Page 14.3.5.3 set dot1x 14.3.5.4 set dot1x auth-config Page 14.3.5.5 clear dot1x auth-config Page 14.3.6 Configuring Port Web Authentication (PWA) About PWA PWA Configuration Considerations Page 14.3.6.1 show pwa Page Page 14.3.6.2 set pwa 14.3.6.3 set pwa hostname 14.3.6.4 clear pwa hostname 14.3.6.5 show pwa banner 14.3.6.6 set pwa banner 14.3.6.7 clear pwa banner 14.3.6.8 set pwa displaylogo 14.3.6.9 set pwa redirecttime 14.3.6.10 set pwa ipaddress 14.3.6.11 set pwa protocol 14.3.6.12 set pwa enhancedmode 14.3.6.13 set pwa guestname 14.3.6.14 clear pwa guestname 14.3.6.15 set pwa guestpassword 14.3.6.16 set pwa gueststatus 14.3.6.17 set pwa initialize 14.3.6.18 set pwa quietperiod 14.3.6.19 set pwa maxrequests 14.3.6.20 set pwa portcontrol Page 14.3.6.21 show pwa session 14.3.7 Configuring MAC Authentication Page 14.3.7.1 show macauthentication Page 14.3.7.2 show macauthentication session Page 14.3.7.3 set macauthentication 14.3.7.4 set macauthentication password 14.3.7.5 clear macauthentication password 14.3.7.6 set macauthentication significant-bits 14.3.7.7 clear macauthentication significant-bits 14.3.7.8 set macauthentication port 14.3.7.9 set macauthentication authallocated 14.3.7.10 clear macauthentication authallocated 14.3.7.11 set macauthentication portinitialize 14.3.7.12 set macauthentication macinitialize 14.3.7.13 set macauthentication reauthentication 14.3.7.14 set macauthentication portreauthenticate 14.3.7.15 set macauthentication macreauthenticate 14.3.7.16 set macauthentication reauthperiod 14.3.7.17 clear macauthentication reauthperiod 14.3.7.18 set macauthentication quietperiod 14.3.7.19 clear macauthentication quietperiod 14.3.8 Configuring Convergence End Points (CEP) Phone Detection About CEP Phone Detection Commands Page 14.3.8.1 show cep connections 14.3.8.2 show cep detection 14.3.8.3 show cep policy 14.3.8.4 show cep port 14.3.8.5 set cep 14.3.8.6 set cep port 14.3.8.7 set cep policy 14.3.8.8 set cep detection-id 14.3.8.9 set cep detection-id type 14.3.8.10 set cep detection-id address 14.3.8.11 set cep detection-id protocol 14.3.8.12 set cep detection-id porthigh | portlow 14.3.8.13 set cep initialize 14.3.8.14 clear cep Page 14.3.9 Configuring MAC Locking 14.3.9.1 show maclock Page 14.3.9.2 show maclock stations Page 14.3.9.3 set maclock enable 14.3.9.4 set maclock disable 14.3.9.5 set maclock 14.3.9.6 set maclock firstarrival 14.3.9.7 set maclock move 14.3.9.8 clear maclock firstarrival 14.3.9.9 set maclock static 14.3.9.10 clear maclock static 14.3.9.11 set maclock trap 14.3.9.12 clear maclock 14.3.10Configuring Multiple Authentication About Multiple Authentication Page 14.3.10.1 set multiauth mode 14.3.10.2 clear multiauth mode 14.3.10.3 set multiauth precedence 14.3.10.4 clear multiauth precedence 14.3.10.5 show multiauth port 14.3.10.6 set multiauth port 14.3.10.7 clear multiauth port 14.3.10.8 show multiauth station 14.3.10.9 clear multiauth station 14.3.10.10show multiauth session This example shows how to display multiple authentication session: 14.3.10.11 show multiauth idle-timeout 14.3.10.12set multiauth idle-timeout 14.3.10.13clear multiauth idle-timeout 14.3.10.14show multiauth session-timeout 14.3.10.15set multiauth session-timeout 14.3.10.16clear multiauth session-timeout 14.3.11 Configuring Secure Shell (SSH) 14.3.11.1 show ssh state 14.3.11.2 set ssh 14.3.11.3 set ssh hostkey 14.3.11.4 show router ssh 14.3.11.5 set router ssh 14.3.11.6 clear router ssh 14.3.12Configuring Access Lists 14.3.12.1 show access-lists 14.3.12.2 access-list (standard) Page 14.3.12.3 access-list (extended) * Advanced License Required * Page Page Page Page 14.3.12.4 ip access-group 14.3.13Configuring Policy-Based Routing About Policy-Based Routing Page 14.3.13.1 show route-map 14.3.13.2 route-map Page 14.3.13.3 match ip address 14.3.13.4 set next hop 14.3.13.5 show ip policy Page 14.3.13.6 ip policy route-map 14.3.13.7 ip policy priority 14.3.13.8 ip policy load-policy 14.3.13.9 ip policy pinger Page 14.3.14.1 show hostdos 14.3.14.2 hostdos Page 14.3.14.3 clear hostdos-counters 14.3.15Configuring Flow Setup Throttling (FST) About FST Page 14.3.15.1 show flowlimit 14.3.15.2 set flowlimit 14.3.15.3 set flowlimit limit Page 14.3.15.4 clear flowlimit limit 14.3.15.5 set flowlimit action Page 14.3.15.6 clear flowlimit action 14.3.15.7 show flowlimit class Page 14.3.15.8 set flowlimit port Page 14.3.15.9 clear flowlimit port class 14.3.15.10set flowlimit shutdown 14.3.15.11 set flowlimit notification 14.3.15.12clear flowlimit notification interval 14.3.15.13clear flowlimit stats Index Numerics A B C D E F G H L M N O P R S T U V W