Manuals / Force10 Networks / Computer Equipment / Switch

Force10 Networks S2410s manual Users snmpv3 encryption 162 User Account Commands

Models: S2410s

1 304

Page 162

users snmpv3 encryption

162	User Account Commands

Page 162

Image 162

Force10 Networks S2410s manual Users snmpv3 encryption 162 User Account Commands

Contents

Sftos Command Reference for the S2410 Copyright 2008 Force10 Networks Sftos Command Reference for the S2410, Version Major ChangesOther Changes Deprecated Commands New FeaturesContents Using the Command Line Interface ContentsShow running-config Chapter System Configuration Commands 105 127 System Log Port-securitymac-address move 166 Dhcp Server Commands Sntp Commands Chapter Igmp Snooping Commands 235 Chapter LAG/Port Channel Commands 249 Chapter Quality of Service QoS Commands 275 List of Figures 141 List of Tables Page About This Guide ObjectivesHow to Use this Guide AudienceAbout This Guide Products and Services Liability Related Documents and Sources of Additional InformationContact Information Documentation Feedback Sftos Command Reference for the S2410, Version About This Guide Chapter Sftos Overview Sftos 2.4.1 Features Sftos OverviewIngress Rate Limiting Login Access Control Igmp Snooping Layer 2 Multicast ForwardingSftos Overview Starting the Switch Chapter Quick StartUsing the Boot Menu Press 2 and Enter quickly to access the Boot menuSystem Info and System Setup Boot Menu OptionsShow hardware Physical Port Data User Account ManagementManagement IP Address SSHServiceport protocol Managementethernet Address command Ip address ipaddrDefault gateway None bootp dhcpUploading from the Switch through Xmodem Downloading to the Switch through XmodemDownloading from a Tftp Server Using Factory DefaultsClear config Copy tftp//ip addressCommand Syntax Conventions KeywordParameter Ip address ipaddr subnetmask Using the Command Line InterfaceLoc is a parameter-a placeholder for a required value Mtrace sourceipaddr destination groupNo Form of a Command Network Address Syntax IpaddrMacaddr Obtaining Help at the Command Line Keyboard ShortcutsUsing Command Modes Partial Keyword ExampleMode-based Topology CLI Mode Diagram Enter the ip dhcp pool Pool-name commandEnter logout or quit Enter the interface rangeExtended command Mode-based Command HierarchyEnter the mac access-list Enter the tacacs-serverCommand Prompt hostname Interface # Flow of CLI Operation Using the Web User Interface Follow these steps to bring up the switch Web UI Configuring for Web AccessTo enable Web browser access to the switch Web Page LayoutCommand Buttons Switch Navigation Icon in Web UIUsing the Web User Interface General System Management and Information Commands This section describes the following commandsNone Privileged Exec System Management CommandsDir DirCharacters HostnameChange the text that appears as part of the CLI prompt Hostname hostnameInterface managementethernet Interface managementethernetIp address management Syntax ip address ipaddr subnetmaskNone Interface ManagementEthernet Mac-addressMac-type Mac-address mac-addressManagement route default gateway Management route defaultManagement route default Use no management route default to remove the gatewayMtu MtuSyntax no mtu Network parms Network mac-addressNetwork mac-type Network protocolServiceport ip ipaddr netmask gateway Serviceport ipProtocol none bootp dhcp ProtocolCommunicating with the switch Serviceport protocolShow arp switch Report fields includeShow interface This command displays inventory information for the switchShow hardware Syntax show interface unit/slot/portFields in Output of show interface unit/slot/port Command Show interfaceShow interface ethernet Unit/slot/port3965 Example of show interface ethernet switchport Output Show interface ethernetRecent reboot Address Entries Currently in Use Packets Received Packets Received Successfully Packets Transmitted Octets Packets Transmitted Successfully Statistics for this port were last cleared Show interface managementethernet Show interface managementethernetShow interface managementethernet Show interface switchport Show interface switchportShow interface switchport Fields in Output of show interface switchport CommandDescription unit/slot/port Show interfacesShow interfaces PortShow logging Show mac-addr-tableShow logging S2410, If Index values are AllCount Show msglog Show msglogShow running-config all scriptname Show running-configEnabled Show networkShow serviceport Show serviceportShow sysinfo This command displays switch informationShow sysinfo Syntax show sysinfoShow version Fields in Output of show sysinfo CommandFields in Output of show version Command Show versionShow version Fields in Output of show version Command SNMP-COMMUNITY-MIBShow tech-support Fields in Output of show version Command Show tech-supportSyntax show tech-support This section describes the following Sftos Telnet commands Telnet CommandsThis command assigns the management Vlan of the switch Vlan participation managementIp telnet maxsessions Ip telnet timeoutMinutes, to the default Time is a decimal value from 1toIp telnet server enable Session-timeoutSession-limit Telnetcon timeout Show telnetTelnet Serial baudrate Serial CommandsTelnetcon maxsessions Telnetcon maxsessionsConsole activity to the 5-minute default Serial timeout9600 default Show serialShow serial Fields of show serial Command Output Router Ospf Config mode Snmp Management CommandsGlobal Config mode Show serialShow snmpcommunity Show snmpcommunityShow snmptrap Syntax show snmptrapShow trapflags Show trapflags Fields of show snmptrap Command ReportFields of show trapflags Command Report Show trapflagsNo snmp-server community Snmp-serverSnmp-server community NoneSnmp-server community ipmask Snmp-server community modeSnmp-server community ipaddr Syntax snmp-server community ipaddr ipaddr nameSnmp-server enable traps bcaststorm Snmp-server community roSnmp-server community rw No version of this command disables Multiple User traps Snmp-server enable traps linkmodeSnmp-server enable traps multiusers Syntax no snmp-server enable traps linkmodeSnmp-server traps enable Snmp-server enable traps stpmodeSnmp-server enable trap violation This command enables the Authentication trapsSnmptrap mode SnmptrapSnmptrap ipaddr Snmp trap link-status Snmp trap link-status allSnmptrap snmpversion Snmptrap snmpversion 104 System Management Commands System Configuration Commands Sftos Command Reference for the S2410, Version 105Bridge aging-time Configure106 System Configuration Commands Bridge aging-timePassword for the command EnableModes to which the Global Config mode provides a gateway User ExecInterface range ConfigurationInterface Specified interfaceRange,range EthernetPort-channel VlanCommands Available in Ethernet Range Mode 110 System Configuration CommandsBulk Configuration Warning Message Single Range Bulk ConfigurationDestination interface Monitor sessionBe only one destination port ModeNo monitor Monitor session 1 modeSyntax no monitor session 1 mode Syntax no monitorShow forwardingdb agetime This command displays the timeout for address agingNo monitor session Show mac-address-tableFor 1-3965, you have the option of entering a valid Vlan ID Show mac-address-table multicastBy specifying the MAC address as an optional parameter Show mac-address-table multicast macaddrDisplays the Multicast Forwarding Database Mfdb Show mac-address-table statsShow monitor session InformationShow port Sftos Command Reference for the S2410, Version 117Show port Syntax show monitor sessionShow port all Command Output Example 118 System Configuration CommandsShutdown all Show port protocolShutdown Interface For the indicated groupVirtual LAN Vlan Commands Virtual LAN Vlan commands in this section areClear vlan Sftos Command Reference for the S2410, Version 121Clear vlan Syntax clear vlanEnter a description for the selected interface port or Vlan 122 System Configuration CommandsDescription DescriptionInterface vlan Sftos Command Reference for the S2410, Version 123Encapsulation Vlan Interface VlanMakestatic 124 System Configuration CommandsMakestatic Syntax makestaticMtu Vlan Name VlanParticipation Vlan 126 System Configuration CommandsNetwork mgmtvlan Priority VlanGroup that is identified by this groupid Except when Gvrp is expected to create the VlanProtocol group Such as conf-if-range-vlan 10-20#Pvid Vlan Configure the Vlan ID for a specific port Interface VlanProtocol vlan group all Fail and the interfaces will not be added to the groupId vlanid Show vlanShow vlan brief id vlanid name port Brief NameDisplay 802.1Q port parameters 130 System Configuration CommandsShow vlan port Show vlan portTagged Sftos Command Reference for the S2410, Version 131Tagged Tagged unit/slot/portVlan 132 System Configuration CommandsUntagged UntaggedVlan ingressfilter Vlan acceptframeVlan database Vlan participation interfaceVlan port acceptframe This command changes the Vlan ID for all interfacesVlan participation all Vlan port ingressfilter allVlan port untagging all Sftos Command Reference for the S2410, Version 135Vlan port tagging all Vlan port tagging allVlan protocol group Vlan protocol group add protocolVlan protocol group remove Vlan tagging Sftos Command Reference for the S2410, Version 137Vlan pvid Vlan untaggingSyntax clear config Clear configSystem Utility Commands Clear countersClear igmpsnooping Clear port-channelClear traplog CopySpecify a URL for the destination in this form CopyTrap log nvramtraplog Path/filename nvramstartup-config Copy systemrunning-config nvramstartup-configNvramstartup-config and copy tftp //tftpserveripaddress Copy clibannerCopy nvramclibanner tftp//tftpserveripaddress/filepath Enable passwdNo clibanner command removes the CLI banner TftpserveripaddressQuit Enable passwd passwordLogout QuitShow terminal length PingReload ReloadLines Use Exec or Privileged Exec Terminal lengthTraceroute Destination through the network on a hop-by-hop basisWrite Configuration ScriptingCommands in this section are Functionality of thisScript list Script applyScript delete PresentScript validate Format of display is Line no Line contentsScript show Script fileSftos Command Reference for the S2410, Version 149 Logging bufferedSyntax logging buffered severitylevel No logging cli-command Logging cli-commandCommands issued on the system Logging buffered wrapLogging console Logging hostLogging host remove Logging host reconfigureThis command removes the identified host Logging persistentLogging syslog Use no logging syslog to disable syslog loggingDisabled local0 Logging syslogShow logging buffered This command displays buffered logging the System logShow logging buffered Show logging bufferedUnit variable is the host index This command displays configured logging hostsShow logging hosts Show logging hosts unitShow logging traplogs Show logging traplogsShow logging traplogs 156 System LogSftos Command Reference for the S2410, Version 157 Clear passSyntax clear pass Disconnect Show loginsessionLogin Session ID Show usersUsername passwd Users snmpv3 accessmode Users snmpv3 authenticationUsers snmpv3 encryption No encryption Sftos Command Reference for the S2410, Version 161Associated with the specified encryption Users snmpv3 encryptionUsers snmpv3 encryption 162 User Account Commands This section contains the following commands Sftos Command Reference for the S2410, Version 163Port-security max-dynamic 164 Security CommandsPort-security Port-securityPort-security mac-address Sftos Command Reference for the S2410, Version 165Port-security max-static Port-security max-staticPort-security mac-address move Show port-securityMAC Address MAC address of the dynamically locked MAC Sftos Command Reference for the S2410, Version 167Show port-security dynamic Show port-security dynamicMAC Address-MAC Address of statically locked MAC Show port-security staticShow port-security violation Locked portNo authentication login listname Authentication loginAuthentication login Sftos Command Reference for the S2410, Version 169Clear radius statistics Dot1x defaultloginClear dot1x statistics Clear dot1x statistics unit/slot/port allDot1x initialize Dot1x loginBe a configured authentication login list Dot1x max-reqDot1x port-control force-unauthorized force-authorized auto Dot1x port-controlDot1x port-control all AutoUnauthorized Dot1x re-authenticateDot1x re-authentication AuthorizedDot1x system-auth-control Dot1x timeoutSwitch Can be changed, but is not activatedDot1x user Show authenticationSftos Command Reference for the S2410, Version 175 Dot1x userUser column Show authentication usersShow dot1x DisplayedSftos Command Reference for the S2410, Version 177 Show dot1xExample of Output from the show dot1x detail Command 178 Security CommandsShow dot1x users Show users authenticationShow users authentication Show dot1x users unit/slot/portUsers will be authenticated using local authentication only Users defaultloginUsers login Accidental lockout from the switchRadius accounting mode Value i.e. the Radius accounting function is disabledRadius server host Radius server key Authentication server182 Security Commands Radius server keyRadius server primary Previously configured Radius authentication serverRadius server msgauth Radius server retransmitRadius server timeout Show radiusShow radius accounting statistics Radius Accounting ModeShow radius accounting statistics Show radius accounting statistics IP addressRadius Accounting Server Show radius statistics authentication186 Security Commands Otherwise all the following listed fields are displayedShow radius statistics authentication Sftos Command Reference for the S2410, Version 187Tacacs-server key Not configuredTacacs-server host To delete a key, use the no tacacs-server key keyTo restore the default, enter no tacacs-server timeout Tacacs-server timeoutSpecify a global timeout value for all TACACS+ hosts Seconds Global ConfigSpecify a server port number for a particular Tacacs host PortPriority Priority prioritySingle-connection TimeoutSpecify the timeout value for a particular Tacacs host Show tacacsIp ssh maxsessions 192 Security CommandsIp ssh maxsessions Ip ssh maxsessionsDisabled Global Config Ip ssh server enableEnable SSH No version of this command disables SSH Ip ssh protocolShow ip ssh Ip ssh timeoutThis command displays the SSH settings Report fieldsSshcon maxsessions Sshcon timeoutSftos Command Reference for the S2410, Version 195 Sshcon maxsessionsSSL3 and TLS1 Global Config Ip http javamode enableThis command is used to set the Sslt port Ip http secure-portNo ip http secure-server enable disabled Ip http secure-server enableIp http server enable No ip http server enableShow ip http Show ip httpShow ip http Show storm-control This command displays switch configuration informationShow storm-control Show storm-control unit/slot/port allStorm-control flowcontrol This command enables 802.3x flow control for the switchStorm-control broadcast No storm-control broadcastSftos Command Reference for the S2410, Version 201 Storm-control flowcontrolStorm-control flowcontrol 202 Security Commands Dhcp Server Commands Sftos Command Reference for the S2410, Version 203Clear ip dhcp binding BootfileMode Dhcp Pool Config Clear ip dhcp server statisticsClear ip dhcp conflict Client-identifierClient-name Default-router Dns-serverDomain-name From 0 to 255. IP address 0.0.0.0 is invalid Hardware-addressHost Prefix-length is an integer from 0 toIp dhcp bootp automatic Ip dhcp conflict loggingIp dhcp excluded-address Ip dhcp ping packets Ip dhcp poolLease Netbios-name-server Netbios-node-typeNetwork Next-server OptionShow ip dhcp binding Service dhcpService dhcp No option codeShow ip dhcp global configuration Show ip dhcp global configurationShow ip dhcp pool configuration Show ip dhcp pool configuration name allShow ip dhcp conflict This command displays Dhcp server statisticsShow ip dhcp server statistics Specified, all the conflicting addresses are displayedSntp broadcast client poll-interval Where poll-interval can be a value from 6 toSftos Command Reference for the S2410, Version 215 Sntp broadcast client poll-interval poll-intervalSntp client port Sntp client modeThis command sets the Sntp client port ID to a value from ProcessedSntp unicast client poll-timeout Sntp unicast client poll-intervalSntp unicast client poll-retry Show sntp This command is used to display Sntp settings and statusSntp server Sntp serversShow sntp client This command is used to display Sntp client settingsSftos Command Reference for the S2410, Version 219 Show sntp clientShow sntp server For each configured server220 Sntp Commands Show sntp serverDvlan-tunnel ethertype 802.1Q vman custom Sftos Command Reference for the S2410, Version 221Dvlan-tunnel ethertype VmanInterface. By default, Double Vlan Tunneling is disabled Mode dot1q-tunnelMode dvlan-tunnel Interface ConfigSftos Command Reference for the S2410, Version 223 Show dot1q-tunnelShow dot1q-tunnel interface unit/slot/port all Show dvlan-tunnel 224 VLAN-Stack CommandsShow dvlan-tunnel Show dvlan-tunnel interface unit/slot/port allCommands in this sections are Set garp timer joinGarp Commands Sftos Command Reference for the S2410, Version 225Set garp timer join No set garp timer join Set garp timer leaveSet garp timer leave Syntax set garp timer leaveShow garp Set garp timer leaveallSyntax set garp timer leaveall Show garpGarp Vlan Registration Protocol Gvrp Commands Gvrp adminmode enableGvrp interfacemode enable This command enables Gvrp globallyShow gvrp configuration Gvrp interfacemode enable allSet gvrp adminmode Set gvrp interfacemodeShow gvrp configuration 230 GARP, GVRP, and Gmrp CommandsGmrp adminmode Gmrp adminmodeGarp Multicast Registration Protocol Gmrp Commands Syntax gmrp adminmode enableChanged to gmrp adminmode Set gmrp adminmodeGmrp interfacemode enable all Gmrp interfacemode enable allSet gmrp interfacemode all Show gmrp configurationSet gmrp interfacemode One or all interfacesMulticast Forwarding Database Mfdb table 234 GARP, GVRP, and Gmrp CommandsShow mac-address-table gmrp Show mac-address-table gmrpIgmp Snooping Commands Sftos Command Reference for the S2410, Version 235Disabled Interface Config Interface Vlan Igmp enable interfaceIgmp enable global Revised from set igmp. Added Interface Vlan modeEntry Igmp fast-leave interfaceIgmp groupmembership-interval interface To 3600 secondsNo igmp interfacemode enable all Igmp interfacemode enable allIgmp interfacemode enable all 238 Igmp Snooping CommandsIgmp maxresponse Mode and Interface Vlan modeIgmp mcrtexpiretime interface No igmp mcrtexpiretimeIgmp mrouter interface Igmp mrouter interface enableNo igmp mrouter interface enable No igmp mrouter vlanIdSet igmp fast-leave Set igmp interfaceSet igmp system Set igmp groupmembership-interval globalSet igmp groupmembership-interval interface Version 2.3 Revised to igmp mrouter interface enable242 Igmp Snooping Commands Set igmp interfacemode allSet igmp maxresponse interface Sftos Command Reference for the S2410, Version 243Set igmp maxresponse global Set igmp maxresponse globalSet igmp mcrtexpiretime interface 244 Igmp Snooping CommandsSet igmp mcrtexpiretime global Set igmp mcrtexpiretime globalRevised to igmp mrouter Set igmp mrouterShow igmpsnooping Show igmpsnooping unit/slot/port Unit/slot/portShow igmpsnooping mrouter interface unit/slot/port vlan Show igmpsnooping fast-leaveShow igmpsnooping mrouter interface VlanShow mac-address-table igmpsnooping Sftos Command Reference for the S2410, Version 247Show mac-address-table igmpsnooping Syntax show mac-address-table igmpsnoopingPage Sftos Command Reference for the S2410, Version 249 Addport250 LAG/Port Channel Commands Deleteport interface configDeleteport interface config Addport unit/slot/portDeleteport unit/slot/port all Deleteport global configPort-channel No port-channel namePort-channel enable all global Port-channel enable interfacePort-channel linktrap Port-channel name This command renames a LAG port channel or all LAGsAll configured LAGs Port-channel staticcapabilityPort lacpmode enable all Port lacptimeout globalPort lacpmode Port lacptimeout interface Interface Config Interface RangeShow port-channel brief Syntax show port-channel brief Show port-channelFor each LAG, the following information is displayed Show port-channel Lagid allPort channel/LAG Summary Sftos Command Reference for the S2410, Version 257Show port-channel summary Show port-channel summary258 LAG/Port Channel Commands This command disables the selected LAG port channelNo version of this command enables the selected LAG ShutdownSftos Command Reference for the S2410, Version 259 Are displayed 260 Spanning Tree STP CommandsShow spanning-tree Show spanning-treeFollowing details are displayed on execution of the command Show spanning-tree interfaceShow spanning-tree interface unit/slot/port Show spanning-tree mst port detailed 262 Spanning Tree STP CommandsShow spanning-tree mst detailed Show spanning-tree mst detailedSftos Command Reference for the S2410, Version 263 Show spanning-tree mst port detailedShow spanning-tree mst summary Switch. On execution, the following details are displayedShow spanning-tree mst port summary For each MstidShow spanning-tree vlan Details are displayed on execution of the commandShow spanning-tree summary Spanning-treeNo spanning-tree configuration name name Spanning-tree configuration nameSpanning-tree configuration revision Spanning-tree bpdumigrationcheckSpanning-tree forceversion Spanning-tree configuration revisionSpanning-tree edgeport WordsSpanning-tree hello-time Internal spanning tree to the default value, in other wordsSpanning-tree forward-time Value being greater than or equal to Bridge Max Age / 2 +Spanning-tree mst Spanning-tree max-ageSpanning-tree max-hops Syntax spanning-tree max-age No spanning-tree max-ageNo spanning-tree mst Cost auto external-cost auto port-priorty Interface Config270 Spanning Tree STP Commands No spanning-tree mstMaximum number of multiple instances supported by Sftos is Spanning-tree mst instanceSpanning-tree mst priority Multiple spanning tree instance to be removedSpanning-tree mst vlan mstid vlanid Spanning-tree port mode enableSpanning-tree mst vlan No spanning-tree mst vlan mstid vlanidNo spanning-tree port mode enable Spanning-tree port mode enable allSpanning-tree port mode enable all No spanning-tree port mode enable allPage Class of Service CoS Commands Sftos Command Reference for the S2410, Version 275Classofservice dot1p-mapping userpriority trafficclass Classofservice dot1p-mappingNo form of this command is not supported Userpriority range isCos-queue max-bandwidth Classofservice trustClassofservice trust dot1p Syntax no cos-queue max-bandwidth bw-0…bw-3Up to four in the S2410 Cos-queue min-bandwidthCos-queue random-detect Operation for the specified queuesCos-queue strict Random-detect exponential-weighting-constantRandom-detect exponential-weighting-constant commands Four in the S2410Random-detect queue-parms 280 Quality of Service QoS CommandsRandom-detect queue-parms Queue-id-1 queue-id-2System-wide port trust mode used for all interfaces Show classofservice dot1p-mappingShow classofservice trust For a specific interfaceShow interfaces random-detect Settings are displayedShow interfaces cos-queue Report Fields Non-IP TrafficShow interfaces tail-drop-threshold Sftos Command Reference for the S2410, Version 283Show interfaces tail-drop-threshold Syntax show interfaces random-detect slot/portTail-drop queue-parms Global Config and Interface Config284 Quality of Service QoS Commands Tail-drop queue-parmsProvisioning Ieee 802.1p Commands Classofservice dot1pmappingDifferentiated Services DiffServ Commands Traffic-shapeVlan port priority all Show classofservice dot1pmappingConfiguration will override this configuration setting Vlan priorityThis chapter covers the following commands Sftos Command Reference for the S2410, Version 287Any bpdu Ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbiosDenypermit Vlan eqAssign-queue Secondary-vlanSecondary-cos RedirectMac access-list extended name Mac access-list extendedMac Access List Config Access-list extended commandSftos Command Reference for the S2410, Version 291 Mac access-list extended renameMac access-list extended rename name newname NewnameMac access-group name 1-4294967295in Mac access-groupShow mac access-lists Show mac access-lists nameShow mac access-lists Sftos Command Reference for the S2410, Version 293Show mac access-lists 294 ACL Commands Sftos Command Reference for the S2410, Version 295 IndexCopy 37-38 296 IndexSftos Command Reference for the S2410, Version 297 Html Http298 Index Sftos Command Reference for the S2410, Version 299 PDUs 225Show inventory 114-116, 119, 169, 227, 229 300 IndexSftos Command Reference for the S2410, Version 301 Show sysinfo 83, 22275-77 302 IndexSftos Command Reference for the S2410, Version 303 Gvrp IDs 134304 Index