Force10 Networks S2410s instruction

SFTOS Command Reference for the S2410

Version 2.4.1.0

Edition 2

April 2008

Page 1

Image 1

Force10 Networks S2410s manual Sftos Command Reference for the S2410

Contents

Sftos Command Reference for the S2410 Copyright 2008 Force10 Networks Major Changes Sftos Command Reference for the S2410, VersionOther Changes New Features Deprecated Commands Contents Contents Using the Command Line Interface Show running-config Chapter System Configuration Commands 105 127 System Log Port-securitymac-address move 166 Dhcp Server Commands Sntp Commands Chapter Igmp Snooping Commands 235 Chapter LAG/Port Channel Commands 249 Chapter Quality of Service QoS Commands 275 List of Figures 141 List of Tables Page Objectives About This Guide Audience How to Use this GuideAbout This Guide Related Documents and Sources of Additional Information Products and Services LiabilityContact Information Documentation Feedback Sftos Command Reference for the S2410, Version About This Guide Chapter Sftos Overview Sftos Overview Sftos 2.4.1 Features Igmp Snooping Layer 2 Multicast Forwarding Ingress Rate Limiting Login Access Control Sftos Overview Chapter Quick Start Starting the Switch Press 2 and Enter quickly to access the Boot menu Using the Boot Menu Boot Menu Options System Info and System SetupShow hardware User Account Management Physical Port Data SSH Management IP Address Default gateway Managementethernet Address command Ip address ipaddrServiceport protocol None bootp dhcp Downloading to the Switch through Xmodem Uploading from the Switch through Xmodem Clear config Using Factory DefaultsDownloading from a Tftp Server Copy tftp//ip address Keyword Command Syntax ConventionsParameter Loc is a parameter-a placeholder for a required value Using the Command Line InterfaceIp address ipaddr subnetmask Mtrace sourceipaddr destination group No Form of a Command Ipaddr Network Address SyntaxMacaddr Keyboard Shortcuts Obtaining Help at the Command Line Partial Keyword Example Using Command Modes Mode-based Topology CLI Mode Diagram Enter logout or quit Pool-name commandEnter the ip dhcp pool Enter the interface range Enter the mac access-list Mode-based Command HierarchyExtended command Enter the tacacs-server Command Prompt hostname Interface # Flow of CLI Operation Using the Web User Interface To enable Web browser access to the switch Configuring for Web AccessFollow these steps to bring up the switch Web UI Web Page Layout Switch Navigation Icon in Web UI Command Buttons Using the Web User Interface This section describes the following commands General System Management and Information Commands Dir System Management CommandsNone Privileged Exec Dir Change the text that appears as part of the CLI prompt HostnameCharacters Hostname hostname Ip address management Interface managementethernetInterface managementethernet Syntax ip address ipaddr subnetmask Mac-type Mac-addressNone Interface ManagementEthernet Mac-address mac-address Management route default Management route defaultManagement route default gateway Use no management route default to remove the gateway Mtu MtuSyntax no mtu Network mac-type Network mac-addressNetwork parms Network protocol Protocol none bootp dhcp Serviceport ipServiceport ip ipaddr netmask gateway Protocol Show arp switch Serviceport protocolCommunicating with the switch Report fields include Show hardware This command displays inventory information for the switchShow interface Syntax show interface unit/slot/port Show interface Fields in Output of show interface unit/slot/port Command Unit/slot/port Show interface ethernet3965 Show interface ethernet Example of show interface ethernet switchport Output Recent reboot Address Entries Currently in Use Packets Received Packets Received Successfully Packets Transmitted Octets Packets Transmitted Successfully Statistics for this port were last cleared Show interface managementethernet Show interface managementethernetShow interface managementethernet Show interface switchport Show interface switchportShow interface switchport Fields in Output of show interface switchport Command Show interfaces Show interfacesDescription unit/slot/port Port Show mac-addr-table Show loggingShow logging All S2410, If Index values areCount Show msglog Show msglog Enabled Show running-configShow running-config all scriptname Show network Show serviceport Show serviceport Show sysinfo This command displays switch informationShow sysinfo Syntax show sysinfo Fields in Output of show version Command Fields in Output of show sysinfo CommandShow version Show version SNMP-COMMUNITY-MIB Show version Fields in Output of show version Command Show tech-support Show tech-support Fields in Output of show version CommandSyntax show tech-support This command assigns the management Vlan of the switch Telnet CommandsThis section describes the following Sftos Telnet commands Vlan participation management Minutes, to the default Ip telnet timeoutIp telnet maxsessions Time is a decimal value from 1to Session-timeout Ip telnet server enableSession-limit Show telnet Telnetcon timeoutTelnet Telnetcon maxsessions Serial CommandsSerial baudrate Telnetcon maxsessions 9600 default Serial timeoutConsole activity to the 5-minute default Show serial Show serial Fields of show serial Command Output Global Config mode Snmp Management CommandsRouter Ospf Config mode Show serial Show snmptrap Show snmpcommunityShow snmpcommunity Syntax show snmptrap Fields of show trapflags Command Report Show trapflags Fields of show snmptrap Command ReportShow trapflags Show trapflags Snmp-server community Snmp-serverNo snmp-server community None Snmp-server community ipaddr Snmp-server community modeSnmp-server community ipmask Syntax snmp-server community ipaddr ipaddr name Snmp-server community ro Snmp-server enable traps bcaststormSnmp-server community rw Snmp-server enable traps multiusers Snmp-server enable traps linkmodeNo version of this command disables Multiple User traps Syntax no snmp-server enable traps linkmode Snmp-server enable trap violation Snmp-server enable traps stpmodeSnmp-server traps enable This command enables the Authentication traps Snmptrap Snmptrap modeSnmptrap ipaddr Snmp trap link-status all Snmp trap link-statusSnmptrap snmpversion Snmptrap snmpversion 104 System Management Commands Sftos Command Reference for the S2410, Version 105 System Configuration Commands 106 System Configuration Commands ConfigureBridge aging-time Bridge aging-time Modes to which the Global Config mode provides a gateway EnablePassword for the command User Exec Interface ConfigurationInterface range Specified interface Port-channel EthernetRange,range Vlan 110 System Configuration Commands Commands Available in Ethernet Range Mode Single Range Bulk Configuration Bulk Configuration Warning Message Be only one destination port Monitor sessionDestination interface Mode Syntax no monitor session 1 mode Monitor session 1 modeNo monitor Syntax no monitor No monitor session This command displays the timeout for address agingShow forwardingdb agetime Show mac-address-table By specifying the MAC address as an optional parameter Show mac-address-table multicastFor 1-3965, you have the option of entering a valid Vlan ID Show mac-address-table multicast macaddr Show monitor session Show mac-address-table statsDisplays the Multicast Forwarding Database Mfdb Information Show port Sftos Command Reference for the S2410, Version 117Show port Syntax show monitor session 118 System Configuration Commands Show port all Command Output Example Shutdown Interface Show port protocolShutdown all For the indicated group Virtual LAN Vlan commands in this section are Virtual LAN Vlan Commands Clear vlan Sftos Command Reference for the S2410, Version 121Clear vlan Syntax clear vlan Description 122 System Configuration CommandsEnter a description for the selected interface port or Vlan Description Encapsulation Vlan Sftos Command Reference for the S2410, Version 123Interface vlan Interface Vlan Makestatic 124 System Configuration CommandsMakestatic Syntax makestatic Name Vlan Mtu Vlan Network mgmtvlan 126 System Configuration CommandsParticipation Vlan Priority Vlan Protocol group Except when Gvrp is expected to create the VlanGroup that is identified by this groupid Such as conf-if-range-vlan 10-20# Protocol vlan group all Configure the Vlan ID for a specific port Interface VlanPvid Vlan Fail and the interfaces will not be added to the group Show vlan brief id vlanid name port Brief Show vlanId vlanid Name Show vlan port 130 System Configuration CommandsDisplay 802.1Q port parameters Show vlan port Tagged Sftos Command Reference for the S2410, Version 131Tagged Tagged unit/slot/port Untagged 132 System Configuration CommandsVlan Untagged Vlan database Vlan acceptframeVlan ingressfilter Vlan participation interface Vlan participation all This command changes the Vlan ID for all interfacesVlan port acceptframe Vlan port ingressfilter all Vlan port tagging all Sftos Command Reference for the S2410, Version 135Vlan port untagging all Vlan port tagging all Vlan protocol group add protocol Vlan protocol groupVlan protocol group remove Vlan pvid Sftos Command Reference for the S2410, Version 137Vlan tagging Vlan untagging System Utility Commands Clear configSyntax clear config Clear counters Clear traplog Clear port-channelClear igmpsnooping Copy Copy Specify a URL for the destination in this formTrap log nvramtraplog Nvramstartup-config and copy tftp //tftpserveripaddress Copy systemrunning-config nvramstartup-configPath/filename nvramstartup-config Copy clibanner No clibanner command removes the CLI banner Enable passwdCopy nvramclibanner tftp//tftpserveripaddress/filepath Tftpserveripaddress Logout Enable passwd passwordQuit Quit Reload PingShow terminal length Reload Traceroute Terminal lengthLines Use Exec or Privileged Exec Destination through the network on a hop-by-hop basis Commands in this section are Configuration ScriptingWrite Functionality of this Script delete Script applyScript list Present Script show Format of display is Line no Line contentsScript validate Script file Logging buffered Sftos Command Reference for the S2410, Version 149Syntax logging buffered severitylevel Commands issued on the system Logging cli-commandNo logging cli-command Logging buffered wrap Logging host Logging console This command removes the identified host Logging host reconfigureLogging host remove Logging persistent Disabled local0 Use no logging syslog to disable syslog loggingLogging syslog Logging syslog Show logging buffered This command displays buffered logging the System logShow logging buffered Show logging buffered Show logging hosts This command displays configured logging hostsUnit variable is the host index Show logging hosts unit Show logging traplogs Show logging traplogsShow logging traplogs 156 System Log Clear pass Sftos Command Reference for the S2410, Version 157Syntax clear pass Login Session ID Show loginsessionDisconnect Show users Username passwd Users snmpv3 authentication Users snmpv3 accessmodeUsers snmpv3 encryption Associated with the specified encryption Sftos Command Reference for the S2410, Version 161No encryption Users snmpv3 encryption Users snmpv3 encryption 162 User Account Commands Sftos Command Reference for the S2410, Version 163 This section contains the following commands Port-security 164 Security CommandsPort-security max-dynamic Port-security Port-security max-static Sftos Command Reference for the S2410, Version 165Port-security mac-address Port-security max-static Show port-security Port-security mac-address move Show port-security dynamic Sftos Command Reference for the S2410, Version 167MAC Address MAC address of the dynamically locked MAC Show port-security dynamic Show port-security violation Show port-security staticMAC Address-MAC Address of statically locked MAC Locked port Authentication login Authentication loginNo authentication login listname Sftos Command Reference for the S2410, Version 169 Clear dot1x statistics Dot1x defaultloginClear radius statistics Clear dot1x statistics unit/slot/port all Be a configured authentication login list Dot1x loginDot1x initialize Dot1x max-req Dot1x port-control all Dot1x port-controlDot1x port-control force-unauthorized force-authorized auto Auto Dot1x re-authentication Dot1x re-authenticateUnauthorized Authorized Switch Dot1x timeoutDot1x system-auth-control Can be changed, but is not activated Sftos Command Reference for the S2410, Version 175 Show authenticationDot1x user Dot1x user Show dot1x Show authentication usersUser column Displayed Show dot1x Sftos Command Reference for the S2410, Version 177 178 Security Commands Example of Output from the show dot1x detail Command Show users authentication Show users authenticationShow dot1x users Show dot1x users unit/slot/port Users login Users defaultloginUsers will be authenticated using local authentication only Accidental lockout from the switch Value i.e. the Radius accounting function is disabled Radius accounting modeRadius server host 182 Security Commands Authentication serverRadius server key Radius server key Radius server msgauth Previously configured Radius authentication serverRadius server primary Radius server retransmit Show radius Radius server timeout Show radius accounting statistics Radius Accounting ModeShow radius accounting statistics Show radius accounting statistics IP address 186 Security Commands Show radius statistics authenticationRadius Accounting Server Otherwise all the following listed fields are displayed Sftos Command Reference for the S2410, Version 187 Show radius statistics authentication Tacacs-server host Not configuredTacacs-server key To delete a key, use the no tacacs-server key key Specify a global timeout value for all TACACS+ hosts Tacacs-server timeoutTo restore the default, enter no tacacs-server timeout Seconds Global Config Priority PortSpecify a server port number for a particular Tacacs host Priority priority Specify the timeout value for a particular Tacacs host TimeoutSingle-connection Show tacacs Ip ssh maxsessions 192 Security CommandsIp ssh maxsessions Ip ssh maxsessions Enable SSH No version of this command disables SSH Ip ssh server enableDisabled Global Config Ip ssh protocol This command displays the SSH settings Ip ssh timeoutShow ip ssh Report fields Sftos Command Reference for the S2410, Version 195 Sshcon timeoutSshcon maxsessions Sshcon maxsessions This command is used to set the Sslt port Ip http javamode enableSSL3 and TLS1 Global Config Ip http secure-port Ip http server enable Ip http secure-server enableNo ip http secure-server enable disabled No ip http server enable Show ip http Show ip httpShow ip http Show storm-control This command displays switch configuration informationShow storm-control Show storm-control unit/slot/port all Storm-control broadcast This command enables 802.3x flow control for the switchStorm-control flowcontrol No storm-control broadcast Storm-control flowcontrol Sftos Command Reference for the S2410, Version 201 Storm-control flowcontrol 202 Security Commands Sftos Command Reference for the S2410, Version 203 Dhcp Server Commands Mode Dhcp Pool Config BootfileClear ip dhcp binding Clear ip dhcp server statistics Client-identifier Clear ip dhcp conflictClient-name Dns-server Default-routerDomain-name Host Hardware-addressFrom 0 to 255. IP address 0.0.0.0 is invalid Prefix-length is an integer from 0 to Ip dhcp conflict logging Ip dhcp bootp automaticIp dhcp excluded-address Ip dhcp pool Ip dhcp ping packetsLease Netbios-node-type Netbios-name-serverNetwork Option Next-server Service dhcp Service dhcpShow ip dhcp binding No option code Show ip dhcp pool configuration Show ip dhcp global configurationShow ip dhcp global configuration Show ip dhcp pool configuration name all Show ip dhcp server statistics This command displays Dhcp server statisticsShow ip dhcp conflict Specified, all the conflicting addresses are displayed Sftos Command Reference for the S2410, Version 215 Where poll-interval can be a value from 6 toSntp broadcast client poll-interval Sntp broadcast client poll-interval poll-interval This command sets the Sntp client port ID to a value from Sntp client modeSntp client port Processed Sntp unicast client poll-interval Sntp unicast client poll-timeoutSntp unicast client poll-retry Sntp server This command is used to display Sntp settings and statusShow sntp Sntp servers Sftos Command Reference for the S2410, Version 219 This command is used to display Sntp client settingsShow sntp client Show sntp client 220 Sntp Commands For each configured serverShow sntp server Show sntp server Dvlan-tunnel ethertype Sftos Command Reference for the S2410, Version 221Dvlan-tunnel ethertype 802.1Q vman custom Vman Mode dvlan-tunnel Mode dot1q-tunnelInterface. By default, Double Vlan Tunneling is disabled Interface Config Show dot1q-tunnel Sftos Command Reference for the S2410, Version 223Show dot1q-tunnel interface unit/slot/port all Show dvlan-tunnel 224 VLAN-Stack CommandsShow dvlan-tunnel Show dvlan-tunnel interface unit/slot/port all Garp Commands Set garp timer joinCommands in this sections are Sftos Command Reference for the S2410, Version 225 Set garp timer leave Set garp timer leaveSet garp timer join No set garp timer join Syntax set garp timer leave Syntax set garp timer leaveall Set garp timer leaveallShow garp Show garp Gvrp interfacemode enable Gvrp adminmode enableGarp Vlan Registration Protocol Gvrp Commands This command enables Gvrp globally Set gvrp adminmode Gvrp interfacemode enable allShow gvrp configuration Set gvrp interfacemode 230 GARP, GVRP, and Gmrp Commands Show gvrp configuration Garp Multicast Registration Protocol Gmrp Commands Gmrp adminmodeGmrp adminmode Syntax gmrp adminmode enable Gmrp interfacemode enable all Set gmrp adminmodeChanged to gmrp adminmode Gmrp interfacemode enable all Set gmrp interfacemode Show gmrp configurationSet gmrp interfacemode all One or all interfaces Show mac-address-table gmrp 234 GARP, GVRP, and Gmrp CommandsMulticast Forwarding Database Mfdb table Show mac-address-table gmrp Sftos Command Reference for the S2410, Version 235 Igmp Snooping Commands Igmp enable global Igmp enable interfaceDisabled Interface Config Interface Vlan Revised from set igmp. Added Interface Vlan mode Igmp groupmembership-interval interface Igmp fast-leave interfaceEntry To 3600 seconds Igmp interfacemode enable all Igmp interfacemode enable allNo igmp interfacemode enable all 238 Igmp Snooping Commands Igmp mcrtexpiretime interface Mode and Interface Vlan modeIgmp maxresponse No igmp mcrtexpiretime No igmp mrouter interface enable Igmp mrouter interface enableIgmp mrouter interface No igmp mrouter vlanId Set igmp system Set igmp interfaceSet igmp fast-leave Set igmp groupmembership-interval global 242 Igmp Snooping Commands Version 2.3 Revised to igmp mrouter interface enableSet igmp groupmembership-interval interface Set igmp interfacemode all Set igmp maxresponse global Sftos Command Reference for the S2410, Version 243Set igmp maxresponse interface Set igmp maxresponse global Set igmp mcrtexpiretime global 244 Igmp Snooping CommandsSet igmp mcrtexpiretime interface Set igmp mcrtexpiretime global Show igmpsnooping Set igmp mrouterRevised to igmp mrouter Show igmpsnooping unit/slot/port Unit/slot/port Show igmpsnooping mrouter interface Show igmpsnooping fast-leaveShow igmpsnooping mrouter interface unit/slot/port vlan Vlan Show mac-address-table igmpsnooping Sftos Command Reference for the S2410, Version 247Show mac-address-table igmpsnooping Syntax show mac-address-table igmpsnoopingPage Addport Sftos Command Reference for the S2410, Version 249 Deleteport interface config Deleteport interface config250 LAG/Port Channel Commands Addport unit/slot/port Port-channel Deleteport global configDeleteport unit/slot/port all No port-channel name Port-channel enable interface Port-channel enable all globalPort-channel linktrap All configured LAGs This command renames a LAG port channel or all LAGsPort-channel name Port-channel staticcapability Port lacptimeout global Port lacpmode enable allPort lacpmode Interface Config Interface Range Port lacptimeout interfaceShow port-channel brief For each LAG, the following information is displayed Show port-channelSyntax show port-channel brief Show port-channel Lagid all Show port-channel summary Sftos Command Reference for the S2410, Version 257Port channel/LAG Summary Show port-channel summary No version of this command enables the selected LAG This command disables the selected LAG port channel258 LAG/Port Channel Commands Shutdown Sftos Command Reference for the S2410, Version 259 Show spanning-tree 260 Spanning Tree STP CommandsAre displayed Show spanning-tree Show spanning-tree interface Following details are displayed on execution of the commandShow spanning-tree interface unit/slot/port Show spanning-tree mst detailed 262 Spanning Tree STP CommandsShow spanning-tree mst port detailed Show spanning-tree mst detailed Show spanning-tree mst port detailed Sftos Command Reference for the S2410, Version 263 Show spanning-tree mst port summary Switch. On execution, the following details are displayedShow spanning-tree mst summary For each Mstid Show spanning-tree summary Details are displayed on execution of the commandShow spanning-tree vlan Spanning-tree Spanning-tree configuration revision Spanning-tree configuration nameNo spanning-tree configuration name name Spanning-tree bpdumigrationcheck Spanning-tree edgeport Spanning-tree configuration revisionSpanning-tree forceversion Words Spanning-tree forward-time Internal spanning tree to the default value, in other wordsSpanning-tree hello-time Value being greater than or equal to Bridge Max Age / 2 + Spanning-tree max-hops Spanning-tree max-ageSpanning-tree mst Syntax spanning-tree max-age No spanning-tree max-age 270 Spanning Tree STP Commands Cost auto external-cost auto port-priorty Interface ConfigNo spanning-tree mst No spanning-tree mst Spanning-tree mst priority Spanning-tree mst instanceMaximum number of multiple instances supported by Sftos is Multiple spanning tree instance to be removed Spanning-tree mst vlan Spanning-tree port mode enableSpanning-tree mst vlan mstid vlanid No spanning-tree mst vlan mstid vlanid Spanning-tree port mode enable all Spanning-tree port mode enable allNo spanning-tree port mode enable No spanning-tree port mode enable allPage Sftos Command Reference for the S2410, Version 275 Class of Service CoS Commands No form of this command is not supported Classofservice dot1p-mappingClassofservice dot1p-mapping userpriority trafficclass Userpriority range is Classofservice trust dot1p Classofservice trustCos-queue max-bandwidth Syntax no cos-queue max-bandwidth bw-0…bw-3 Cos-queue random-detect Cos-queue min-bandwidthUp to four in the S2410 Operation for the specified queues Random-detect exponential-weighting-constant commands Random-detect exponential-weighting-constantCos-queue strict Four in the S2410 Random-detect queue-parms 280 Quality of Service QoS CommandsRandom-detect queue-parms Queue-id-1 queue-id-2 Show classofservice trust Show classofservice dot1p-mappingSystem-wide port trust mode used for all interfaces For a specific interface Show interfaces cos-queue Settings are displayedShow interfaces random-detect Report Fields Non-IP Traffic Show interfaces tail-drop-threshold Sftos Command Reference for the S2410, Version 283Show interfaces tail-drop-threshold Syntax show interfaces random-detect slot/port 284 Quality of Service QoS Commands Global Config and Interface ConfigTail-drop queue-parms Tail-drop queue-parms Differentiated Services DiffServ Commands Classofservice dot1pmappingProvisioning Ieee 802.1p Commands Traffic-shape Configuration will override this configuration setting Show classofservice dot1pmappingVlan port priority all Vlan priority Sftos Command Reference for the S2410, Version 287 This chapter covers the following commands Denypermit Ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbiosAny bpdu Vlan eq Secondary-cos Secondary-vlanAssign-queue Redirect Mac Access List Config Mac access-list extendedMac access-list extended name Access-list extended command Mac access-list extended rename name newname Mac access-list extended renameSftos Command Reference for the S2410, Version 291 Newname Show mac access-lists Mac access-groupMac access-group name 1-4294967295in Show mac access-lists name Sftos Command Reference for the S2410, Version 293 Show mac access-lists Show mac access-lists 294 ACL Commands Index Sftos Command Reference for the S2410, Version 295 296 Index Copy 37-38 Html Http Sftos Command Reference for the S2410, Version 297 298 Index PDUs 225 Sftos Command Reference for the S2410, Version 299 300 Index Show inventory 114-116, 119, 169, 227, 229 Show sysinfo 83, 222 Sftos Command Reference for the S2410, Version 301 302 Index 75-77 Gvrp IDs 134 Sftos Command Reference for the S2410, Version 303 304 Index