Manuals / Force10 Networks / Computer Equipment / Switch

Force10 Networks S2410s manual Vlan protocol group add protocol, Vlan protocol group remove

Models: S2410s

1 304

Page 136

vlan protocol group

This command adds a protocol-based VLAN group to the system. The groupname is a character string of 1 to 16 characters. When it is created, the protocol group will be assigned a unique number that will be used to identify the group in subsequent commands.

Syntax vlan protocol group groupname

Mode	Global Config

vlan protocol group add protocol

This command adds the protocol to the protocol-based VLAN identified by groupid. A group may have more than one protocol associated with it. Each interface and protocol combination can only be associated with one group. If adding a protocol to a group causes any conflicts with interfaces currently associated with the group, this command will fail and the protocol will not be added to the group. The possible values for protocol are ip, arp, and ipx.

The no version of this command removes the protocol from this protocol-based VLAN group that is identified by this groupid. The possible values for protocol are ip, arp, and ipx.

Syntax [no] vlan protocol group add protocol groupid protocol

Default None

Mode	Global Config

vlan protocol group remove

This command removes the protocol-based VLAN group that is identified by this groupid.

Syntax vlan protocol group remove groupid

Mode	Global Config

136	System Configuration Commands

Page 136

Image 136

Force10 Networks S2410s manual Vlan protocol group add protocol, Vlan protocol group remove

Contents

Sftos Command Reference for the S2410 Copyright 2008 Force10 Networks Major Changes Sftos Command Reference for the S2410, VersionOther Changes Deprecated Commands New FeaturesContents Using the Command Line Interface ContentsShow running-config Chapter System Configuration Commands 105 127 System Log Port-securitymac-address move 166 Dhcp Server Commands Sntp Commands Chapter Igmp Snooping Commands 235 Chapter LAG/Port Channel Commands 249 Chapter Quality of Service QoS Commands 275 List of Figures 141 List of Tables Page About This Guide ObjectivesAudience How to Use this GuideAbout This Guide Related Documents and Sources of Additional Information Products and Services LiabilityContact Information Documentation Feedback Sftos Command Reference for the S2410, Version About This Guide Chapter Sftos Overview Sftos 2.4.1 Features Sftos OverviewIngress Rate Limiting Login Access Control Igmp Snooping Layer 2 Multicast ForwardingSftos Overview Starting the Switch Chapter Quick StartUsing the Boot Menu Press 2 and Enter quickly to access the Boot menuBoot Menu Options System Info and System SetupShow hardware Physical Port Data User Account ManagementManagement IP Address SSHManagementethernet Address command Ip address ipaddr Default gatewayServiceport protocol None bootp dhcpUploading from the Switch through Xmodem Downloading to the Switch through XmodemUsing Factory Defaults Clear configDownloading from a Tftp Server Copy tftp//ip addressKeyword Command Syntax ConventionsParameter Using the Command Line Interface Loc is a parameter-a placeholder for a required valueIp address ipaddr subnetmask Mtrace sourceipaddr destination groupNo Form of a Command Ipaddr Network Address SyntaxMacaddr Obtaining Help at the Command Line Keyboard ShortcutsUsing Command Modes Partial Keyword ExampleMode-based Topology CLI Mode Diagram Pool-name command Enter logout or quitEnter the ip dhcp pool Enter the interface rangeMode-based Command Hierarchy Enter the mac access-listExtended command Enter the tacacs-serverCommand Prompt hostname Interface # Flow of CLI Operation Using the Web User Interface Configuring for Web Access To enable Web browser access to the switchFollow these steps to bring up the switch Web UI Web Page LayoutCommand Buttons Switch Navigation Icon in Web UIUsing the Web User Interface General System Management and Information Commands This section describes the following commandsSystem Management Commands DirNone Privileged Exec DirHostname Change the text that appears as part of the CLI promptCharacters Hostname hostnameInterface managementethernet Ip address managementInterface managementethernet Syntax ip address ipaddr subnetmaskMac-address Mac-typeNone Interface ManagementEthernet Mac-address mac-addressManagement route default Management route defaultManagement route default gateway Use no management route default to remove the gatewayMtu MtuSyntax no mtu Network mac-address Network mac-typeNetwork parms Network protocolServiceport ip Protocol none bootp dhcpServiceport ip ipaddr netmask gateway ProtocolServiceport protocol Show arp switchCommunicating with the switch Report fields includeThis command displays inventory information for the switch Show hardwareShow interface Syntax show interface unit/slot/portFields in Output of show interface unit/slot/port Command Show interfaceUnit/slot/port Show interface ethernet3965 Example of show interface ethernet switchport Output Show interface ethernetRecent reboot Address Entries Currently in Use Packets Received Packets Received Successfully Packets Transmitted Octets Packets Transmitted Successfully Statistics for this port were last cleared Show interface managementethernet Show interface managementethernetShow interface managementethernet Show interface switchport Show interface switchportShow interface switchport Fields in Output of show interface switchport CommandShow interfaces Show interfacesDescription unit/slot/port PortShow mac-addr-table Show loggingShow logging All S2410, If Index values areCount Show msglog Show msglogShow running-config EnabledShow running-config all scriptname Show networkShow serviceport Show serviceportThis command displays switch information Show sysinfoShow sysinfo Syntax show sysinfoFields in Output of show sysinfo Command Fields in Output of show version CommandShow version Show versionShow version Fields in Output of show version Command SNMP-COMMUNITY-MIBShow tech-support Show tech-support Fields in Output of show version CommandSyntax show tech-support Telnet Commands This command assigns the management Vlan of the switchThis section describes the following Sftos Telnet commands Vlan participation managementIp telnet timeout Minutes, to the defaultIp telnet maxsessions Time is a decimal value from 1toSession-timeout Ip telnet server enableSession-limit Show telnet Telnetcon timeoutTelnet Serial Commands Telnetcon maxsessionsSerial baudrate Telnetcon maxsessionsSerial timeout 9600 defaultConsole activity to the 5-minute default Show serialShow serial Fields of show serial Command Output Snmp Management Commands Global Config modeRouter Ospf Config mode Show serialShow snmpcommunity Show snmptrapShow snmpcommunity Syntax show snmptrapShow trapflags Fields of show snmptrap Command Report Fields of show trapflags Command ReportShow trapflags Show trapflagsSnmp-server Snmp-server communityNo snmp-server community NoneSnmp-server community mode Snmp-server community ipaddrSnmp-server community ipmask Syntax snmp-server community ipaddr ipaddr nameSnmp-server community ro Snmp-server enable traps bcaststormSnmp-server community rw Snmp-server enable traps linkmode Snmp-server enable traps multiusersNo version of this command disables Multiple User traps Syntax no snmp-server enable traps linkmodeSnmp-server enable traps stpmode Snmp-server enable trap violationSnmp-server traps enable This command enables the Authentication trapsSnmptrap Snmptrap modeSnmptrap ipaddr Snmp trap link-status all Snmp trap link-statusSnmptrap snmpversion Snmptrap snmpversion 104 System Management Commands System Configuration Commands Sftos Command Reference for the S2410, Version 105Configure 106 System Configuration CommandsBridge aging-time Bridge aging-timeEnable Modes to which the Global Config mode provides a gatewayPassword for the command User ExecConfiguration InterfaceInterface range Specified interfaceEthernet Port-channelRange,range VlanCommands Available in Ethernet Range Mode 110 System Configuration CommandsBulk Configuration Warning Message Single Range Bulk ConfigurationMonitor session Be only one destination portDestination interface ModeMonitor session 1 mode Syntax no monitor session 1 modeNo monitor Syntax no monitorThis command displays the timeout for address aging No monitor sessionShow forwardingdb agetime Show mac-address-tableShow mac-address-table multicast By specifying the MAC address as an optional parameterFor 1-3965, you have the option of entering a valid Vlan ID Show mac-address-table multicast macaddrShow mac-address-table stats Show monitor sessionDisplays the Multicast Forwarding Database Mfdb InformationSftos Command Reference for the S2410, Version 117 Show portShow port Syntax show monitor sessionShow port all Command Output Example 118 System Configuration CommandsShow port protocol Shutdown InterfaceShutdown all For the indicated groupVirtual LAN Vlan Commands Virtual LAN Vlan commands in this section areSftos Command Reference for the S2410, Version 121 Clear vlanClear vlan Syntax clear vlan122 System Configuration Commands DescriptionEnter a description for the selected interface port or Vlan DescriptionSftos Command Reference for the S2410, Version 123 Encapsulation VlanInterface vlan Interface Vlan124 System Configuration Commands MakestaticMakestatic Syntax makestaticMtu Vlan Name Vlan126 System Configuration Commands Network mgmtvlanParticipation Vlan Priority VlanExcept when Gvrp is expected to create the Vlan Protocol groupGroup that is identified by this groupid Such as conf-if-range-vlan 10-20#Configure the Vlan ID for a specific port Interface Vlan Protocol vlan group allPvid Vlan Fail and the interfaces will not be added to the groupShow vlan Show vlan brief id vlanid name port BriefId vlanid Name130 System Configuration Commands Show vlan portDisplay 802.1Q port parameters Show vlan portSftos Command Reference for the S2410, Version 131 TaggedTagged Tagged unit/slot/port132 System Configuration Commands UntaggedVlan UntaggedVlan acceptframe Vlan databaseVlan ingressfilter Vlan participation interfaceThis command changes the Vlan ID for all interfaces Vlan participation allVlan port acceptframe Vlan port ingressfilter allSftos Command Reference for the S2410, Version 135 Vlan port tagging allVlan port untagging all Vlan port tagging allVlan protocol group add protocol Vlan protocol groupVlan protocol group remove Sftos Command Reference for the S2410, Version 137 Vlan pvidVlan tagging Vlan untaggingClear config System Utility CommandsSyntax clear config Clear countersClear port-channel Clear traplogClear igmpsnooping CopyCopy Specify a URL for the destination in this formTrap log nvramtraplog Copy systemrunning-config nvramstartup-config Nvramstartup-config and copy tftp //tftpserveripaddressPath/filename nvramstartup-config Copy clibannerEnable passwd No clibanner command removes the CLI bannerCopy nvramclibanner tftp//tftpserveripaddress/filepath TftpserveripaddressEnable passwd password LogoutQuit QuitPing ReloadShow terminal length ReloadTerminal length TracerouteLines Use Exec or Privileged Exec Destination through the network on a hop-by-hop basisConfiguration Scripting Commands in this section areWrite Functionality of thisScript apply Script deleteScript list PresentFormat of display is Line no Line contents Script showScript validate Script fileLogging buffered Sftos Command Reference for the S2410, Version 149Syntax logging buffered severitylevel Logging cli-command Commands issued on the systemNo logging cli-command Logging buffered wrapLogging console Logging hostLogging host reconfigure This command removes the identified hostLogging host remove Logging persistentUse no logging syslog to disable syslog logging Disabled local0Logging syslog Logging syslogThis command displays buffered logging the System log Show logging bufferedShow logging buffered Show logging bufferedThis command displays configured logging hosts Show logging hostsUnit variable is the host index Show logging hosts unitShow logging traplogs Show logging traplogsShow logging traplogs 156 System LogClear pass Sftos Command Reference for the S2410, Version 157Syntax clear pass Show loginsession Login Session IDDisconnect Show usersUsername passwd Users snmpv3 authentication Users snmpv3 accessmodeUsers snmpv3 encryption Sftos Command Reference for the S2410, Version 161 Associated with the specified encryptionNo encryption Users snmpv3 encryptionUsers snmpv3 encryption 162 User Account Commands This section contains the following commands Sftos Command Reference for the S2410, Version 163164 Security Commands Port-securityPort-security max-dynamic Port-securitySftos Command Reference for the S2410, Version 165 Port-security max-staticPort-security mac-address Port-security max-staticPort-security mac-address move Show port-securitySftos Command Reference for the S2410, Version 167 Show port-security dynamicMAC Address MAC address of the dynamically locked MAC Show port-security dynamicShow port-security static Show port-security violationMAC Address-MAC Address of statically locked MAC Locked portAuthentication login Authentication loginNo authentication login listname Sftos Command Reference for the S2410, Version 169Dot1x defaultlogin Clear dot1x statisticsClear radius statistics Clear dot1x statistics unit/slot/port allDot1x login Be a configured authentication login listDot1x initialize Dot1x max-reqDot1x port-control Dot1x port-control allDot1x port-control force-unauthorized force-authorized auto AutoDot1x re-authenticate Dot1x re-authenticationUnauthorized AuthorizedDot1x timeout SwitchDot1x system-auth-control Can be changed, but is not activatedShow authentication Sftos Command Reference for the S2410, Version 175Dot1x user Dot1x userShow authentication users Show dot1xUser column DisplayedSftos Command Reference for the S2410, Version 177 Show dot1xExample of Output from the show dot1x detail Command 178 Security CommandsShow users authentication Show users authenticationShow dot1x users Show dot1x users unit/slot/portUsers defaultlogin Users loginUsers will be authenticated using local authentication only Accidental lockout from the switchValue i.e. the Radius accounting function is disabled Radius accounting modeRadius server host Authentication server 182 Security CommandsRadius server key Radius server keyPreviously configured Radius authentication server Radius server msgauthRadius server primary Radius server retransmitRadius server timeout Show radiusRadius Accounting Mode Show radius accounting statisticsShow radius accounting statistics Show radius accounting statistics IP addressShow radius statistics authentication 186 Security CommandsRadius Accounting Server Otherwise all the following listed fields are displayedShow radius statistics authentication Sftos Command Reference for the S2410, Version 187Not configured Tacacs-server hostTacacs-server key To delete a key, use the no tacacs-server key keyTacacs-server timeout Specify a global timeout value for all TACACS+ hostsTo restore the default, enter no tacacs-server timeout Seconds Global ConfigPort PrioritySpecify a server port number for a particular Tacacs host Priority priorityTimeout Specify the timeout value for a particular Tacacs hostSingle-connection Show tacacs192 Security Commands Ip ssh maxsessionsIp ssh maxsessions Ip ssh maxsessionsIp ssh server enable Enable SSH No version of this command disables SSHDisabled Global Config Ip ssh protocolIp ssh timeout This command displays the SSH settingsShow ip ssh Report fieldsSshcon timeout Sftos Command Reference for the S2410, Version 195Sshcon maxsessions Sshcon maxsessionsIp http javamode enable This command is used to set the Sslt portSSL3 and TLS1 Global Config Ip http secure-portIp http secure-server enable Ip http server enableNo ip http secure-server enable disabled No ip http server enableShow ip http Show ip httpShow ip http This command displays switch configuration information Show storm-controlShow storm-control Show storm-control unit/slot/port allThis command enables 802.3x flow control for the switch Storm-control broadcastStorm-control flowcontrol No storm-control broadcastSftos Command Reference for the S2410, Version 201 Storm-control flowcontrolStorm-control flowcontrol 202 Security Commands Dhcp Server Commands Sftos Command Reference for the S2410, Version 203Bootfile Mode Dhcp Pool ConfigClear ip dhcp binding Clear ip dhcp server statisticsClient-identifier Clear ip dhcp conflictClient-name Dns-server Default-routerDomain-name Hardware-address HostFrom 0 to 255. IP address 0.0.0.0 is invalid Prefix-length is an integer from 0 toIp dhcp conflict logging Ip dhcp bootp automaticIp dhcp excluded-address Ip dhcp pool Ip dhcp ping packetsLease Netbios-node-type Netbios-name-serverNetwork Next-server OptionService dhcp Service dhcpShow ip dhcp binding No option codeShow ip dhcp global configuration Show ip dhcp pool configurationShow ip dhcp global configuration Show ip dhcp pool configuration name allThis command displays Dhcp server statistics Show ip dhcp server statisticsShow ip dhcp conflict Specified, all the conflicting addresses are displayedWhere poll-interval can be a value from 6 to Sftos Command Reference for the S2410, Version 215Sntp broadcast client poll-interval Sntp broadcast client poll-interval poll-intervalSntp client mode This command sets the Sntp client port ID to a value fromSntp client port ProcessedSntp unicast client poll-interval Sntp unicast client poll-timeoutSntp unicast client poll-retry This command is used to display Sntp settings and status Sntp serverShow sntp Sntp serversThis command is used to display Sntp client settings Sftos Command Reference for the S2410, Version 219Show sntp client Show sntp clientFor each configured server 220 Sntp CommandsShow sntp server Show sntp serverSftos Command Reference for the S2410, Version 221 Dvlan-tunnel ethertypeDvlan-tunnel ethertype 802.1Q vman custom VmanMode dot1q-tunnel Mode dvlan-tunnelInterface. By default, Double Vlan Tunneling is disabled Interface ConfigShow dot1q-tunnel Sftos Command Reference for the S2410, Version 223Show dot1q-tunnel interface unit/slot/port all 224 VLAN-Stack Commands Show dvlan-tunnelShow dvlan-tunnel Show dvlan-tunnel interface unit/slot/port allSet garp timer join Garp CommandsCommands in this sections are Sftos Command Reference for the S2410, Version 225Set garp timer leave Set garp timer leaveSet garp timer join No set garp timer join Syntax set garp timer leaveSet garp timer leaveall Syntax set garp timer leaveallShow garp Show garpGvrp adminmode enable Gvrp interfacemode enableGarp Vlan Registration Protocol Gvrp Commands This command enables Gvrp globallyGvrp interfacemode enable all Set gvrp adminmodeShow gvrp configuration Set gvrp interfacemodeShow gvrp configuration 230 GARP, GVRP, and Gmrp CommandsGmrp adminmode Garp Multicast Registration Protocol Gmrp CommandsGmrp adminmode Syntax gmrp adminmode enableSet gmrp adminmode Gmrp interfacemode enable allChanged to gmrp adminmode Gmrp interfacemode enable allShow gmrp configuration Set gmrp interfacemodeSet gmrp interfacemode all One or all interfaces234 GARP, GVRP, and Gmrp Commands Show mac-address-table gmrpMulticast Forwarding Database Mfdb table Show mac-address-table gmrpIgmp Snooping Commands Sftos Command Reference for the S2410, Version 235Igmp enable interface Igmp enable globalDisabled Interface Config Interface Vlan Revised from set igmp. Added Interface Vlan modeIgmp fast-leave interface Igmp groupmembership-interval interfaceEntry To 3600 secondsIgmp interfacemode enable all Igmp interfacemode enable allNo igmp interfacemode enable all 238 Igmp Snooping CommandsMode and Interface Vlan mode Igmp mcrtexpiretime interfaceIgmp maxresponse No igmp mcrtexpiretimeIgmp mrouter interface enable No igmp mrouter interface enableIgmp mrouter interface No igmp mrouter vlanIdSet igmp interface Set igmp systemSet igmp fast-leave Set igmp groupmembership-interval globalVersion 2.3 Revised to igmp mrouter interface enable 242 Igmp Snooping CommandsSet igmp groupmembership-interval interface Set igmp interfacemode allSftos Command Reference for the S2410, Version 243 Set igmp maxresponse globalSet igmp maxresponse interface Set igmp maxresponse global244 Igmp Snooping Commands Set igmp mcrtexpiretime globalSet igmp mcrtexpiretime interface Set igmp mcrtexpiretime globalSet igmp mrouter Show igmpsnoopingRevised to igmp mrouter Show igmpsnooping unit/slot/port Unit/slot/portShow igmpsnooping fast-leave Show igmpsnooping mrouter interfaceShow igmpsnooping mrouter interface unit/slot/port vlan VlanSftos Command Reference for the S2410, Version 247 Show mac-address-table igmpsnoopingShow mac-address-table igmpsnooping Syntax show mac-address-table igmpsnoopingPage Sftos Command Reference for the S2410, Version 249 AddportDeleteport interface config Deleteport interface config250 LAG/Port Channel Commands Addport unit/slot/portDeleteport global config Port-channelDeleteport unit/slot/port all No port-channel namePort-channel enable interface Port-channel enable all globalPort-channel linktrap This command renames a LAG port channel or all LAGs All configured LAGsPort-channel name Port-channel staticcapabilityPort lacptimeout global Port lacpmode enable allPort lacpmode Interface Config Interface Range Port lacptimeout interfaceShow port-channel brief Show port-channel For each LAG, the following information is displayedSyntax show port-channel brief Show port-channel Lagid allSftos Command Reference for the S2410, Version 257 Show port-channel summaryPort channel/LAG Summary Show port-channel summaryThis command disables the selected LAG port channel No version of this command enables the selected LAG258 LAG/Port Channel Commands ShutdownSftos Command Reference for the S2410, Version 259 260 Spanning Tree STP Commands Show spanning-treeAre displayed Show spanning-treeShow spanning-tree interface Following details are displayed on execution of the commandShow spanning-tree interface unit/slot/port 262 Spanning Tree STP Commands Show spanning-tree mst detailedShow spanning-tree mst port detailed Show spanning-tree mst detailedSftos Command Reference for the S2410, Version 263 Show spanning-tree mst port detailedSwitch. On execution, the following details are displayed Show spanning-tree mst port summaryShow spanning-tree mst summary For each MstidDetails are displayed on execution of the command Show spanning-tree summaryShow spanning-tree vlan Spanning-treeSpanning-tree configuration name Spanning-tree configuration revisionNo spanning-tree configuration name name Spanning-tree bpdumigrationcheckSpanning-tree configuration revision Spanning-tree edgeportSpanning-tree forceversion WordsInternal spanning tree to the default value, in other words Spanning-tree forward-timeSpanning-tree hello-time Value being greater than or equal to Bridge Max Age / 2 +Spanning-tree max-age Spanning-tree max-hopsSpanning-tree mst Syntax spanning-tree max-age No spanning-tree max-ageCost auto external-cost auto port-priorty Interface Config 270 Spanning Tree STP CommandsNo spanning-tree mst No spanning-tree mstSpanning-tree mst instance Spanning-tree mst priorityMaximum number of multiple instances supported by Sftos is Multiple spanning tree instance to be removedSpanning-tree port mode enable Spanning-tree mst vlanSpanning-tree mst vlan mstid vlanid No spanning-tree mst vlan mstid vlanidSpanning-tree port mode enable all Spanning-tree port mode enable allNo spanning-tree port mode enable No spanning-tree port mode enable allPage Class of Service CoS Commands Sftos Command Reference for the S2410, Version 275Classofservice dot1p-mapping No form of this command is not supportedClassofservice dot1p-mapping userpriority trafficclass Userpriority range isClassofservice trust Classofservice trust dot1pCos-queue max-bandwidth Syntax no cos-queue max-bandwidth bw-0…bw-3Cos-queue min-bandwidth Cos-queue random-detectUp to four in the S2410 Operation for the specified queuesRandom-detect exponential-weighting-constant Random-detect exponential-weighting-constant commandsCos-queue strict Four in the S2410280 Quality of Service QoS Commands Random-detect queue-parmsRandom-detect queue-parms Queue-id-1 queue-id-2Show classofservice dot1p-mapping Show classofservice trustSystem-wide port trust mode used for all interfaces For a specific interfaceSettings are displayed Show interfaces cos-queueShow interfaces random-detect Report Fields Non-IP TrafficSftos Command Reference for the S2410, Version 283 Show interfaces tail-drop-thresholdShow interfaces tail-drop-threshold Syntax show interfaces random-detect slot/portGlobal Config and Interface Config 284 Quality of Service QoS CommandsTail-drop queue-parms Tail-drop queue-parmsClassofservice dot1pmapping Differentiated Services DiffServ CommandsProvisioning Ieee 802.1p Commands Traffic-shapeShow classofservice dot1pmapping Configuration will override this configuration settingVlan port priority all Vlan priorityThis chapter covers the following commands Sftos Command Reference for the S2410, Version 287Ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios DenypermitAny bpdu Vlan eqSecondary-vlan Secondary-cosAssign-queue RedirectMac access-list extended Mac Access List ConfigMac access-list extended name Access-list extended commandMac access-list extended rename Mac access-list extended rename name newnameSftos Command Reference for the S2410, Version 291 NewnameMac access-group Show mac access-listsMac access-group name 1-4294967295in Show mac access-lists nameShow mac access-lists Sftos Command Reference for the S2410, Version 293Show mac access-lists 294 ACL Commands Sftos Command Reference for the S2410, Version 295 IndexCopy 37-38 296 IndexSftos Command Reference for the S2410, Version 297 Html Http298 Index Sftos Command Reference for the S2410, Version 299 PDUs 225Show inventory 114-116, 119, 169, 227, 229 300 IndexSftos Command Reference for the S2410, Version 301 Show sysinfo 83, 22275-77 302 IndexSftos Command Reference for the S2410, Version 303 Gvrp IDs 134304 Index