Force10 Networks S2410s

162 User Account Commands

users snmpv3 encryption

Contents

Main Copyright 2008 Force10 Networks New Features Major Changes Other Changes Deprecated Commands Contents Page Page Page Page Page Page Page Page Page Page Page List of Figures Page List of Tables Page Objectives About This Guide Audience How to Use this Guide Related Documents and Sources of Additional Information Products and Services Liability Contact Information Documentation Feedback The iSupport Website Page Page Switch Management Options Chapter 1 SFTOS Overview SFTOS 2.4.1 Features QoS VLAN Multicast Protocols Security and Packet Control Features Management Page Chapter 2 Quick Start Starting the Switch Using the Boot Menu System Info and System Setup Physical Port Data To get information on the physical port, use the show port all command: To configure switch administrator accounts, use the following commands: User Account Management Management IP Address Configuring the Management VLAN IP Address To configure the management VLAN IP address, use the following commands: To configure the IP address of the Ethernet Management port, use the following commands: Configuring the Ethernet Management Port Example of Configuring the Ethernet Management Port Uploading from the Switch through XMODEM To copy to a PC through the console port with XMODEM, use the following command. Downloading to the Switch through XMODEM To download through the console port from a PC, use the following command: Downloading from a TFTP Server To load factory defaults, use either of the following commands: Using Factory Defaults Command Syntax Conventions Chapter 3 Using the Command Line Interface Command Format Command Parameters No Form of a Command Values a (32 bits) a.b (8.24 bits) a.b.c (8.8.16 bits) a.b.c.d (8.8.8.8) Addresses Annotations Keyboard Shortcuts Obtaining Help at the Command Line Using Command Modes Mode-based Topology Page page 48. Mode-based Command Hierarchy User Exec Mode. Privileged Exec Mode. Global Config Mode. Interface Config Mode. DHCP Pool Config Mode. Line Config Mode. Policy Map Mode. Policy Class Mode. Class Map Mode: Flow of CLI Operation Chapter 4 Using the Web User Interface Configuring for Web Access Web Page Layout Starting the Web User Interface 3. Make your selection by clicking on the appropriate item in the navigation tree in Frame 2. Command Buttons Page General System Management and Information Commands Chapter 5 System Management dir hostname SFTOS Command Reference for the S2410, Version 2.4.1.0 57 Figure 7 Example of dir nvram Command Output hostname Change the text that appears as part of the CLI prompt. hostname Enter the desired text for the prompt, up to 64 alphanumeric characters 58 System Management Commands interface managementethernet ip address (management) This command configures the IP address of the management interface. Tabl e 4 Interface ManagementEthernet Mode Command Families mac-address mac-type management route default mtu network mac-address network mac-type network parms network protocol protocol serviceport ip serviceport protocol show arp switch show hardware This command displays inventory information for the switch. show interface This command displays a summary of statistics for a specific port. Page show interface ethernet 68 System Management Commands Figure 10 Example of show interface ethernet switchport Output Tabl e 7 Fields in Output of show interface ethernet switchport Command SFTOS Command Reference for the S2410, Version 2.4.1.0 69 Figure 11 Example of show interface ethernet unit/slot/port Output (truncated) Tabl e 7 Fields in Output of show interface ethernet switchport Command (continued) 70 System Management Commands The show interface ethernet display fields, when the argument is unit/slot/port, are as follows: Tabl e 8 Fields in Output of show interface ethernet unit/slot/port Command Page Page Page Page show interface managementethernet SFTOS Command Reference for the S2410, Version 2.4.1.0 75 show interface managementethernet managementethernet, are as follows: This command displays information about the management address of the switch. Tabl e 9 Fields in Output of show interface managementethernet command 76 System Management Commands show interface switchport This command displays a summary of statistics on Layer 2 interfaces. follows: Tabl e 10 Fields in Output of show interface switchport Command show interfaces command with an interface specified in the unit/slot/port form: show logging show mac-addr-table In the S2410, If Index values are: 80 System Management Commands show msglog Figure 14 Example of Output from the show mac-addr-table count Command Figure 15 Example of Output from the show mac-addr-table vlan Command show msglog show network show running-config 82 System Management Commands show serviceport Figure 16 Using the show running-config command Note: show serviceport This command displays information about the management address of the Ethernet Management port. show sysinfo SFTOS Command Reference for the S2410, Version 2.4.1.0 83 Figure 17 show serviceport Command Output show sysinfo This command displays switch information. Tabl e 11 Fields in Output of show serviceport command show version show version SFTOS Command Reference for the S2410, Version 2.4.1.0 85 Tabl e 13 Fields in Output of show version Command (continued) Headings Explanation show tech-support vlan participation (management) Telnet Commands ip telnet maxsessions ip telnet timeout ip telnet server enable session-limit session-timeout show telnet telnet telnetcon timeout telnetcon maxsessions Serial Commands lineconfig serial baudrate serial timeout show serial Page SNMP Management Commands show snmpcommunity show snmptrap show trapflags snmp-server snmp-server community no snmp-server community snmp-server community ipaddr snmp-server community ipmask snmp-server community mode snmp-server community ro snmp-server community rw snmp-server enable traps bcaststorm snmp-server enable traps linkmode snmp-server enable traps multiusers snmp-server enable traps stpmode snmp-server enable trap violation snmp-server traps enable snmptrap snmptrap ipaddr snmptrap mode snmp trap link-status snmp trap link-status all snmptrap snmpversion Page System Configuration Commands Chapter 6 System Configuration bridge aging-time configure enable interface interface range Page 110 System Configuration Commands interface range Example Figure 21 Commands Available in Ethernet Range Mode Page monitor session monitor session 1 mode no monitor no monitor session 1 show forwardingdb agetime show mac-address-table show mac-address-table multicast SFTOS Command Reference for the S2410, Version 2.4.1.0 115 show mac-address-table multicast For 1-3965, you have the option of entering a valid VLAN ID. 116 System Configuration Commands show mac-address-table stats show mac-address-table stats This command displays Multicast Forwarding Database (MFDB) statistics. information Figure 26 Command Example: show mac-address-table stats show monitor session show port 118 System Configuration Commands show port Note: Port IDs 1/1 and 1/2 in Figure 28 are LAGs. Figure 28 show port all Command Output Example show port all show port protocol shutdown (Interface) shutdown all Virtual LAN (VLAN) Commands clear vlan 122 System Configuration Commands description description Enter a description for the selected interface (port or VLAN). The description allows spaces if you surround the statement with single or double quotes. description for a port. The example also shows the resulting descriptions presented in show interfaces description commands. encapsulation (VLAN) interface vlan 124 System Configuration Commands makestatic Figure 30 Using the interface vlan Command makestatic interface range mtu (VLAN) name (VLAN) 126 System Configuration Commands network mgmt_vlan network mgmt_vlan participation (VLAN) Configure how ports participate in a specific VLAN. priority (VLAN) Configure the priority for untagged frames. protocol vlan group protocol vlan group all pvid (VLAN) SFTOS Command Reference for the S2410, Version 2.4.1.0 129 show vlan Figure 31 Output of the show vlan Command id vlanid (OPTIONAL) Enter the keyword id followed, in place of vlanid name (OPTIONAL) Enter the keyword name to display the names of The output of the show vlan brief command is shown in the following example: show vlan port Display 802.1Q port parameters. tagged SFTOS Command Reference for the S2410, Version 2.4.1.0 131 Figure 34 Output of the show vlan port Command tagged all Enter all for retrieving information about all interfaces. untagged vlan vlan acceptframe vlan database vlan ingressfilter vlan participation (interface) vlan participation all vlan port acceptframe vlan port ingressfilter all vlan port pvid all vlan port tagging all vlan port tagging all This command sets the tagging behavior for all interfaces in a VLAN to enabled. vlan port untagging all vlan protocol group vlan protocol group add protocol vlan protocol group remove vlan pvid vlan tagging vlan untagging System Utility Commands clear config clear counters clear port-channel clear traplog clear igmpsnooping copy Page The following command copies from the switch system memory to flash memory: copy (clibanner) enable passwd logout quit ping reload show terminal length terminal length traceroute write Configuration Scripting script apply script delete script list script show script validate Chapter 7 System Log logging buffered logging buffered wrap logging cli-command logging console logging host logging host reconfigure logging host remove logging persistent logging port logging syslog logging syslog Figure 37 Sample Output from the show logging Command This command enables logging to any configured syslog server. Syntax logging syslog Use no logging syslog to disable syslog logging. show logging buffered show logging hosts SFTOS Command Reference for the S2410, Version 2.4.1.0 155 Figure 38 Sample Output from the show logging Command show logging hosts This command displays configured logging hosts. The unit variable is the host index other enabled destination, including the console and any enabled syslog server show logging traplogs clear pass Chapter 8 User Account Commands disconnect show loginsession show users username passwd users snmpv3 accessmode users snmpv3 authentication users snmpv3 encryption Page Page Port Security Commands Chapter 9 Security Commands Implementation Notes port-security port-security max-dynamic port-security max-static port-security mac-address port-security mac-address move show port-security show port-security dynamic SFTOS Command Reference for the S2410, Version 2.4.1.0 167 Figure 39 Example of show port-security all Command Output show port-security dynamic This command displays the dynamically locked MAC addresses for port. MAC Address MAC address of the dynamically locked MAC show port-security static show port-security violation Port-Based Network Access Control (IEEE 802.1X) authentication login clear dot1x statistics clear radius statistics dot1x defaultlogin dot1x initialize dot1x login dot1x max-req dot1x port-control dot1x port-control all dot1x re-authenticate dot1x re-authentication dot1x system-auth-control dot1x timeout dot1x user show authentication show authentication users show dot1x show dot1x SFTOS Command Reference for the S2410, Version 2.4.1.0 177 178 Security Commands show dot1x Figure 40 Example of Output from the show dot1x detail Command show dot1x users SFTOS Command Reference for the S2410, Version 2.4.1.0 179 show dot1x users This command displays 802.1x port security user information for locally configured users. Figure 41 Example of Output from the show dot1x users Command show users authentication Figure 42 Example Output from the show users authentication Command users defaultlogin users login RADIUS Commands radius accounting mode radius server host radius server key radius server msgauth radius server primary radius server retransmit radius server timeout show radius show radius accounting statistics show radius statistics (authentication) TACACS+ Commands tacacs-server host tacacs-server key tacacs-server timeout key port priority single-connection show tacacs timeout Secure Shell (SSH) Commands ip ssh maxsessions ip ssh protocol ip ssh server enable ip ssh timeout show ip ssh sshcon maxsessions sshcon timeout Hypertext Transfer Protocol (HTTP) Commands ip http javamode enable ip http secure-port ip http secure-protocol ip http secure-server enable ip http server enable show ip http Broadcast Storm Control Commands show storm-control storm-control broadcast storm-control flowcontrol Page Page Chapter 10 DHCP Server Commands bootfile clear ip dhcp binding clear ip dhcp server statistics clear ip dhcp conflict client-identifier client-name default-router dns-server domain-name hardware-address host ip dhcp bootp automatic ip dhcp conflict logging ip dhcp excluded-address ip dhcp ping packets ip dhcp pool lease network netbios-name-server netbios-node-type next-server option service dhcp show ip dhcp binding show ip dhcp global configuration show ip dhcp pool configuration 214 DHCP Server Commands show ip dhcp server statistics show ip dhcp server statistics This command displays DHCP server statistics. show ip dhcp conflict Chapter 11 SNTP Commands sntp broadcast client poll-interval sntp client mode sntp client port sntp unicast client poll-interval sntp unicast client poll-timeout sntp unicast client poll-retry sntp server show sntp show sntp client SFTOS Command Reference for the S2410, Version 2.4.1.0 219 show sntp client This command is used to display SNTP client settings. Figure 48 show sntp client Command Example 220 SNTP Commands show sntp server show sntp server This command is used to display SNTP server settings and configured servers. Figure 49 show sntp server Command Example For each configured server: dvlan-tunnel ethertype Chapter 12 VLAN-Stack Commands mode dot1q-tunnel mode dvlan-tunnel show dot1q-tunnel show dvlan-tunnel GARP Commands set garp timer join Chapter 13 GARP, GVRP, and GMRP set garp timer leave set garp timer leaveall show garp GARP VLAN Registration Protocol (GVRP) Commands gvrp adminmode enable gvrp interfacemode enable gvrp interfacemode enable all set gvrp adminmode set gvrp interfacemode set gvrp interfacemode all show gvrp configuration 230 GARP, GVRP, and GMRP Commands show gvrp configuration Figure 50 show gvrp configuration Command Output Example GARP Multicast Registration Protocol (GMRP) Commands GARP Multicast Registration Protocol (GMRP) gmrp adminmode set gmrp adminmode gmrp interfacemode enable all set gmrp interfacemode set gmrp interfacemode all show gmrp configuration 234 GARP, GVRP, and GMRP Commands show mac-address-table gmrp show mac-address-table gmrp Chapter 14 IGMP Snooping Commands igmp enable (interface) igmp enable (global) igmp fast-leave (interface) igmp groupmembership-interval (interface) igmp interfacemode enable all igmp maxresponse igmp mcrtexpiretime (interface) igmp mrouter (interface) igmp mrouter interface enable set igmp (interface) SFTOS Command Reference for the S2410, Version 2.4.1.0 241 set igmp (interface) set igmp (system) set igmp fast-leave set igmp groupmembership-interval (global) 242 IGMP Snooping Commands set igmp groupmembership-interval (interface) set igmp interface set igmp interfacemode all set igmp maxresponse (global) set igmp maxresponse (interface) set igmp mcrtexpiretime (global) set igmp mcrtexpiretime (interface) set igmp mrouter show igmpsnooping When the optional argument unit/slot/port is used, the response is as follows: show igmpsnooping fast-leave show igmpsnooping mrouter interface show mac-address-table igmpsnooping SFTOS Command Reference for the S2410, Version 2.4.1.0 247 show mac-address-table igmpsnooping This command displays the IGMP Snooping entries in the Multicast Forwarding Database (MFDB) table. Page addport Chapter 15 LAG/Port Channel Commands deleteport (interface config) deleteport (global config) This command deletes all configured ports from the LAG (port channel). port-channel This command creates a new LAG (port channel) and generates a logical unit/slot/port for it. port-channel enable all (global) port-channel enable (interface) port-channel linktrap port-channel name This command renames a LAG (port channel) or all LAGs. port-channel staticcapability Enable/Disable static capability for all LAGs (port channels). port lacpmode port lacpmode enable all port lacptimeout (global) port lacptimeout (interface) show port-channel brief 256 LAG/Port Channel Commands show port-channel Figure 51 Example of show port-channel brief Command Output show port-channel This command displays an overview of all port channels (LAGs) on the switch. LAG_ID show port-channel summary SFTOS Command Reference for the S2410, Version 2.4.1.0 257 show port-channel summary Display the static capability of all LAGs on the device as well as a summary of individual LAGs. port channel/LAG Summary: shutdown Chapter 16 Spanning Tree (STP) show spanning-tree show spanning-tree interface SFTOS Command Reference for the S2410, Version 2.4.1.0 261 show spanning-tree interface show spanning-tree mst detailed show spanning-tree mst port detailed show spanning-tree mst port detailed SFTOS Command Reference for the S2410, Version 2.4.1.0 263 show spanning-tree mst port summary show spanning-tree mst summary show spanning-tree summary show spanning-tree vlan spanning-tree spanning-tree bpdumigrationcheck spanning-tree configuration name spanning-tree configuration revision spanning-tree edgeport spanning-tree forceversion spanning-tree forward-time spanning-tree hello-time spanning-tree max-age spanning-tree max-hops spanning-tree mst no spanning-tree mst spanning-tree mst instance spanning-tree mst priority spanning-tree mst vlan spanning-tree port mode enable spanning-tree port mode enable all Page Class of Service (CoS) Commands Chapter 17 Quality of Service (QoS) classofservice dot1p-mapping classofservice trust cos-queue max-bandwidth cos-queue min-bandwidth cos-queue random-detect cos-queue strict random-detect exponential-weighting-constant random-detect queue-parms show classofservice dot1p-mapping show classofservice trust show interfaces cos-queue show interfaces random-detect show interfaces tail-drop-threshold tail-drop queue-parms traffic-shape Differentiated Services (DiffServ) Commands Provisioning (IEEE 802.1p) Commands classofservice dot1pmapping show classofservice dot1pmapping vlan port priority all vlan priority Chapter 18 ACL Commands Implementation Notes {deny|permit} Page mac access-list extended mac access-list extended rename mac access-group show mac access-lists show mac access-lists SFTOS Command Reference for the S2410, Version 2.4.1.0 293 Page Index