Main
Copyright 2008 Force10 Networks
New Features
Major Changes
Other Changes
Deprecated Commands
Contents
Page
Page
Page
Page
Page
Page
Page
Page
Page
Page
Page
List of Figures
Page
List of Tables
Page
Objectives
About This Guide
Audience
How to Use this Guide
Related Documents and Sources of Additional Information
Products and Services Liability
Contact Information
Documentation Feedback
The iSupport Website
Page
Page
Switch Management Options
Chapter 1 SFTOS Overview
SFTOS 2.4.1 Features
QoS
VLAN
Multicast Protocols
Security and Packet Control Features
Management
Page
Chapter 2 Quick Start
Starting the Switch
Using the Boot Menu
System Info and System Setup
Physical Port Data
To get information on the physical port, use the show port all command:
To configure switch administrator accounts, use the following commands:
User Account Management
Management IP Address
Configuring the Management VLAN IP Address
To configure the management VLAN IP address, use the following commands:
To configure the IP address of the Ethernet Management port, use the following commands:
Configuring the Ethernet Management Port
Example of Configuring the Ethernet Management Port
Uploading from the Switch through XMODEM
To copy to a PC through the console port with XMODEM, use the following command.
Downloading to the Switch through XMODEM
To download through the console port from a PC, use the following command:
Downloading from a TFTP Server
To load factory defaults, use either of the following commands:
Using Factory Defaults
Command Syntax Conventions
Chapter 3 Using the Command Line Interface
Command Format
Command Parameters
No Form of a Command
Values
a (32 bits) a.b (8.24 bits) a.b.c (8.8.16 bits) a.b.c.d (8.8.8.8)
Addresses
Annotations
Keyboard Shortcuts
Obtaining Help at the Command Line
Using Command Modes
Mode-based Topology
Page
page 48.
Mode-based Command Hierarchy
User Exec Mode.
Privileged Exec Mode.
Global Config Mode.
Interface Config Mode.
DHCP Pool Config Mode.
Line Config Mode.
Policy Map Mode.
Policy Class Mode.
Class Map Mode:
Flow of CLI Operation
Chapter 4 Using the Web User Interface
Configuring for Web Access
Web Page Layout
Starting the Web User Interface
3. Make your selection by clicking on the appropriate item in the navigation tree in Frame 2.
Command Buttons
Page
General System Management and Information Commands
Chapter 5 System Management
dir
hostname
SFTOS Command Reference for the S2410, Version 2.4.1.0 57
Figure 7 Example of dir nvram Command Output
hostname
Change the text that appears as part of the CLI prompt.
hostname Enter the desired text for the prompt, up to 64 alphanumeric
characters
58 System Management Commands
interface managementethernet
ip address (management)
This command configures the IP address of the management interface.
Tabl e 4 Interface ManagementEthernet Mode Command Families
mac-address
mac-type
management route default
mtu
network mac-address
network mac-type
network parms
network protocol
protocol
serviceport ip
serviceport protocol
show arp switch
show hardware
This command displays inventory information for the switch.
show interface
This command displays a summary of statistics for a specific port.
Page
show interface ethernet
68 System Management Commands
Figure 10 Example of show interface ethernet switchport Output
Tabl e 7 Fields in Output of show interface ethernet switchport Command
SFTOS Command Reference for the S2410, Version 2.4.1.0 69
Figure 11 Example of show interface ethernet unit/slot/port Output (truncated)
Tabl e 7 Fields in Output of show interface ethernet switchport Command (continued)
70 System Management Commands
The show interface ethernet display fields, when the argument is unit/slot/port, are as follows:
Tabl e 8 Fields in Output of show interface ethernet unit/slot/port Command
Page
Page
Page
Page
show interface managementethernet
SFTOS Command Reference for the S2410, Version 2.4.1.0 75
show interface managementethernet
managementethernet, are as follows:
This command displays information about the management address of the switch.
Tabl e 9 Fields in Output of show interface managementethernet command
76 System Management Commands
show interface switchport
This command displays a summary of statistics on Layer 2 interfaces.
follows:
Tabl e 10 Fields in Output of show interface switchport Command
show interfaces
command with an interface specified in the unit/slot/port form:
show logging
show mac-addr-table
In the S2410, If Index values are:
80 System Management Commands
show msglog
Figure 14 Example of Output from the show mac-addr-table count Command
Figure 15 Example of Output from the show mac-addr-table vlan Command
show msglog
show network
show running-config
82 System Management Commands
show serviceport
Figure 16 Using the show running-config command Note:
show serviceport
This command displays information about the management address of the Ethernet Management port.
show sysinfo
SFTOS Command Reference for the S2410, Version 2.4.1.0 83
Figure 17 show serviceport Command Output
show sysinfo
This command displays switch information.
Tabl e 11 Fields in Output of show serviceport command
show version
show version
SFTOS Command Reference for the S2410, Version 2.4.1.0 85
Tabl e 13 Fields in Output of show version Command (continued) Headings Explanation
show tech-support
vlan participation (management)
Telnet Commands
ip telnet maxsessions
ip telnet timeout
ip telnet server enable
session-limit
session-timeout
show telnet
telnet
telnetcon timeout
telnetcon maxsessions
Serial Commands
lineconfig
serial baudrate
serial timeout
show serial
Page
SNMP Management Commands
show snmpcommunity
show snmptrap
show trapflags
snmp-server
snmp-server community
no snmp-server community
snmp-server community ipaddr
snmp-server community ipmask
snmp-server community mode
snmp-server community ro
snmp-server community rw
snmp-server enable traps bcaststorm
snmp-server enable traps linkmode
snmp-server enable traps multiusers
snmp-server enable traps stpmode
snmp-server enable trap violation
snmp-server traps enable
snmptrap
snmptrap ipaddr
snmptrap mode
snmp trap link-status
snmp trap link-status all
snmptrap snmpversion
Page
System Configuration Commands
Chapter 6 System Configuration
bridge aging-time
configure
enable
interface
interface range
Page
110 System Configuration Commands
interface range
Example
Figure 21 Commands Available in Ethernet Range Mode
Page
monitor session
monitor session 1 mode
no monitor
no monitor session 1
show forwardingdb agetime
show mac-address-table
show mac-address-table multicast
SFTOS Command Reference for the S2410, Version 2.4.1.0 115
show mac-address-table multicast
For 1-3965, you have the option of entering a valid VLAN ID.
116 System Configuration Commands
show mac-address-table stats
show mac-address-table stats
This command displays Multicast Forwarding Database (MFDB) statistics.
information
Figure 26 Command Example: show mac-address-table stats
show monitor session
show port
118 System Configuration Commands
show port
Note: Port IDs 1/1 and 1/2 in Figure 28 are LAGs.
Figure 28 show port all Command Output Example
show port all
show port protocol
shutdown (Interface)
shutdown all
Virtual LAN (VLAN) Commands
clear vlan
122 System Configuration Commands
description
description
Enter a description for the selected interface (port or VLAN).
The description allows spaces if you surround the statement with single or double quotes.
description for a port. The example also shows the resulting descriptions presented in show
interfaces description commands.
encapsulation (VLAN)
interface vlan
124 System Configuration Commands
makestatic
Figure 30 Using the interface vlan Command
makestatic
interface range
mtu (VLAN)
name (VLAN)
126 System Configuration Commands
network mgmt_vlan
network mgmt_vlan
participation (VLAN)
Configure how ports participate in a specific VLAN.
priority (VLAN)
Configure the priority for untagged frames.
protocol vlan group
protocol vlan group all
pvid (VLAN)
SFTOS Command Reference for the S2410, Version 2.4.1.0 129
show vlan
Figure 31 Output of the show vlan Command
id vlanid (OPTIONAL) Enter the keyword id followed, in place of vlanid
name (OPTIONAL) Enter the keyword name to display the names of
The output of the show vlan brief command is shown in the following example:
show vlan port
Display 802.1Q port parameters.
tagged
SFTOS Command Reference for the S2410, Version 2.4.1.0 131
Figure 34 Output of the show vlan port Command
tagged
all Enter all for retrieving information about all interfaces.
untagged
vlan
vlan acceptframe
vlan database
vlan ingressfilter
vlan participation (interface)
vlan participation all
vlan port acceptframe
vlan port ingressfilter all
vlan port pvid all
vlan port tagging all
vlan port tagging all
This command sets the tagging behavior for all interfaces in a VLAN to enabled.
vlan port untagging all
vlan protocol group
vlan protocol group add protocol
vlan protocol group remove
vlan pvid
vlan tagging
vlan untagging
System Utility Commands
clear config
clear counters
clear port-channel
clear traplog
clear igmpsnooping
copy
Page
The following command copies from the switch system memory to flash memory:
copy (clibanner)
enable passwd
logout
quit
ping
reload
show terminal length
terminal length
traceroute
write
Configuration Scripting
script apply
script delete
script list
script show
script validate
Chapter 7 System Log
logging buffered
logging buffered wrap
logging cli-command
logging console
logging host
logging host reconfigure
logging host remove
logging persistent
logging port
logging syslog
logging syslog
Figure 37 Sample Output from the show logging Command
This command enables logging to any configured syslog server.
Syntax logging syslog
Use no logging syslog to disable syslog logging.
show logging buffered
show logging hosts
SFTOS Command Reference for the S2410, Version 2.4.1.0 155
Figure 38 Sample Output from the show logging Command
show logging hosts
This command displays configured logging hosts.
The unit variable is the host index
other enabled destination, including the console and any enabled syslog server
show logging traplogs
clear pass
Chapter 8 User Account Commands
disconnect
show loginsession
show users
username passwd
users snmpv3 accessmode
users snmpv3 authentication
users snmpv3 encryption
Page
Page
Port Security Commands
Chapter 9 Security Commands
Implementation Notes
port-security
port-security max-dynamic
port-security max-static
port-security mac-address
port-security mac-address move
show port-security
show port-security dynamic
SFTOS Command Reference for the S2410, Version 2.4.1.0 167
Figure 39 Example of show port-security all Command Output
show port-security dynamic
This command displays the dynamically locked MAC addresses for port.
MAC Address MAC address of the dynamically locked MAC
show port-security static
show port-security violation
Port-Based Network Access Control (IEEE 802.1X)
authentication login
clear dot1x statistics
clear radius statistics
dot1x defaultlogin
dot1x initialize
dot1x login
dot1x max-req
dot1x port-control
dot1x port-control all
dot1x re-authenticate
dot1x re-authentication
dot1x system-auth-control
dot1x timeout
dot1x user
show authentication
show authentication users
show dot1x
show dot1x
SFTOS Command Reference for the S2410, Version 2.4.1.0 177
178 Security Commands
show dot1x
Figure 40 Example of Output from the show dot1x detail Command
show dot1x users
SFTOS Command Reference for the S2410, Version 2.4.1.0 179
show dot1x users
This command displays 802.1x port security user information for locally configured users.
Figure 41 Example of Output from the show dot1x users Command
show users authentication
Figure 42 Example Output from the show users authentication Command
users defaultlogin
users login
RADIUS Commands
radius accounting mode
radius server host
radius server key
radius server msgauth
radius server primary
radius server retransmit
radius server timeout
show radius
show radius accounting statistics
show radius statistics (authentication)
TACACS+ Commands
tacacs-server host
tacacs-server key
tacacs-server timeout
key
port
priority
single-connection
show tacacs
timeout
Secure Shell (SSH) Commands
ip ssh maxsessions
ip ssh protocol
ip ssh server enable
ip ssh timeout
show ip ssh
sshcon maxsessions
sshcon timeout
Hypertext Transfer Protocol (HTTP) Commands
ip http javamode enable
ip http secure-port
ip http secure-protocol
ip http secure-server enable
ip http server enable
show ip http
Broadcast Storm Control Commands
show storm-control
storm-control broadcast
storm-control flowcontrol
Page
Page
Chapter 10 DHCP Server Commands
bootfile
clear ip dhcp binding
clear ip dhcp server statistics
clear ip dhcp conflict
client-identifier
client-name
default-router
dns-server
domain-name
hardware-address
host
ip dhcp bootp automatic
ip dhcp conflict logging
ip dhcp excluded-address
ip dhcp ping packets
ip dhcp pool
lease
network
netbios-name-server
netbios-node-type
next-server
option
service dhcp
show ip dhcp binding
show ip dhcp global configuration
show ip dhcp pool configuration
214 DHCP Server Commands
show ip dhcp server statistics
show ip dhcp server statistics
This command displays DHCP server statistics.
show ip dhcp conflict
Chapter 11 SNTP Commands
sntp broadcast client poll-interval
sntp client mode
sntp client port
sntp unicast client poll-interval
sntp unicast client poll-timeout
sntp unicast client poll-retry
sntp server
show sntp
show sntp client
SFTOS Command Reference for the S2410, Version 2.4.1.0 219
show sntp client
This command is used to display SNTP client settings.
Figure 48 show sntp client Command Example
220 SNTP Commands
show sntp server
show sntp server
This command is used to display SNTP server settings and configured servers.
Figure 49 show sntp server Command Example
For each configured server:
dvlan-tunnel ethertype
Chapter 12 VLAN-Stack Commands
mode dot1q-tunnel
mode dvlan-tunnel
show dot1q-tunnel
show dvlan-tunnel
GARP Commands
set garp timer join
Chapter 13 GARP, GVRP, and GMRP
set garp timer leave
set garp timer leaveall
show garp
GARP VLAN Registration Protocol (GVRP) Commands
gvrp adminmode enable
gvrp interfacemode enable
gvrp interfacemode enable all
set gvrp adminmode
set gvrp interfacemode
set gvrp interfacemode all
show gvrp configuration
230 GARP, GVRP, and GMRP Commands
show gvrp configuration
Figure 50 show gvrp configuration Command Output Example
GARP Multicast Registration Protocol (GMRP) Commands
GARP Multicast Registration Protocol (GMRP)
gmrp adminmode
set gmrp adminmode
gmrp interfacemode enable all
set gmrp interfacemode
set gmrp interfacemode all
show gmrp configuration
234 GARP, GVRP, and GMRP Commands
show mac-address-table gmrp
show mac-address-table gmrp
Chapter 14 IGMP Snooping Commands
igmp enable (interface)
igmp enable (global)
igmp fast-leave (interface)
igmp groupmembership-interval (interface)
igmp interfacemode enable all
igmp maxresponse
igmp mcrtexpiretime (interface)
igmp mrouter (interface)
igmp mrouter interface enable
set igmp (interface)
SFTOS Command Reference for the S2410, Version 2.4.1.0 241
set igmp (interface)
set igmp (system)
set igmp fast-leave
set igmp groupmembership-interval (global)
242 IGMP Snooping Commands
set igmp groupmembership-interval (interface)
set igmp interface
set igmp interfacemode all
set igmp maxresponse (global)
set igmp maxresponse (interface)
set igmp mcrtexpiretime (global)
set igmp mcrtexpiretime (interface)
set igmp mrouter
show igmpsnooping
When the optional argument unit/slot/port is used, the response is as follows:
show igmpsnooping fast-leave
show igmpsnooping mrouter interface
show mac-address-table igmpsnooping
SFTOS Command Reference for the S2410, Version 2.4.1.0 247
show mac-address-table igmpsnooping
This command displays the IGMP Snooping entries in the Multicast Forwarding Database (MFDB) table.
Page
addport
Chapter 15 LAG/Port Channel Commands
deleteport (interface config)
deleteport (global config)
This command deletes all configured ports from the LAG (port channel).
port-channel
This command creates a new LAG (port channel) and generates a logical unit/slot/port for it.
port-channel enable all (global)
port-channel enable (interface)
port-channel linktrap
port-channel name
This command renames a LAG (port channel) or all LAGs.
port-channel staticcapability
Enable/Disable static capability for all LAGs (port channels).
port lacpmode
port lacpmode enable all
port lacptimeout (global)
port lacptimeout (interface)
show port-channel brief
256 LAG/Port Channel Commands
show port-channel
Figure 51 Example of show port-channel brief Command Output
show port-channel
This command displays an overview of all port channels (LAGs) on the switch.
LAG_ID
show port-channel summary
SFTOS Command Reference for the S2410, Version 2.4.1.0 257
show port-channel summary
Display the static capability of all LAGs on the device as well as a summary of individual LAGs.
port channel/LAG Summary:
shutdown
Chapter 16 Spanning Tree (STP)
show spanning-tree
show spanning-tree interface
SFTOS Command Reference for the S2410, Version 2.4.1.0 261
show spanning-tree interface
show spanning-tree mst detailed
show spanning-tree mst port detailed
show spanning-tree mst port detailed
SFTOS Command Reference for the S2410, Version 2.4.1.0 263
show spanning-tree mst port summary
show spanning-tree mst summary
show spanning-tree summary
show spanning-tree vlan
spanning-tree
spanning-tree bpdumigrationcheck
spanning-tree configuration name
spanning-tree configuration revision
spanning-tree edgeport
spanning-tree forceversion
spanning-tree forward-time
spanning-tree hello-time
spanning-tree max-age
spanning-tree max-hops
spanning-tree mst
no spanning-tree mst
spanning-tree mst instance
spanning-tree mst priority
spanning-tree mst vlan
spanning-tree port mode enable
spanning-tree port mode enable all
Page
Class of Service (CoS) Commands
Chapter 17 Quality of Service (QoS)
classofservice dot1p-mapping
classofservice trust
cos-queue max-bandwidth
cos-queue min-bandwidth
cos-queue random-detect
cos-queue strict
random-detect exponential-weighting-constant
random-detect queue-parms
show classofservice dot1p-mapping
show classofservice trust
show interfaces cos-queue
show interfaces random-detect
show interfaces tail-drop-threshold
tail-drop queue-parms
traffic-shape
Differentiated Services (DiffServ) Commands
Provisioning (IEEE 802.1p) Commands
classofservice dot1pmapping
show classofservice dot1pmapping
vlan port priority all
vlan priority
Chapter 18 ACL Commands
Implementation Notes
{deny|permit}
Page
mac access-list extended
mac access-list extended rename
mac access-group
show mac access-lists
show mac access-lists
SFTOS Command Reference for the S2410, Version 2.4.1.0 293
Page
Index
