Documentation Feedback

If appropriate for the issue, please include the following information with your comments:

•Document name

•Document part number (from the front cover)

•Page number

•Software release version (from the front cover)

The iSupport Website

Access to some sections of the iSupport website do not require a password to access. However, if a section does require a password, you can request one at the website:

1.On the Force10 Networks website home page, www.force10networks.com, click the Support link, as highlighted at the top of Figure 1.

2.Click the Account Request link.

3.Fill out the User Account Request form and click Send.

4.Click Login, and then enter the userid and password that you received by email.

Figure 1 Force10 Networks iSupport Website

The i-Support website (www.force10networks.com/support/) contains five tabs:

•Home: Summary of open cases, RMA management, and field notices (as shown above)

•Service Request: Case management

•Software Center: Software downloads, bug fixes, and bug tracking tool

24	About This Guide

Page 24

Image 24

Force10 Networks S2410s manual Documentation Feedback

Contents

Sftos Command Reference for the S2410 Copyright 2008 Force10 Networks Sftos Command Reference for the S2410, Version Major ChangesOther Changes Deprecated Commands New Features Contents Using the Command Line Interface Contents Show running-config Chapter System Configuration Commands 105 127 System Log Port-securitymac-address move 166 Dhcp Server Commands Sntp Commands Chapter Igmp Snooping Commands 235 Chapter LAG/Port Channel Commands 249 Chapter Quality of Service QoS Commands 275 List of Figures 141 List of Tables Page About This Guide Objectives How to Use this Guide AudienceAbout This Guide Products and Services Liability Related Documents and Sources of Additional InformationContact Information Documentation Feedback Sftos Command Reference for the S2410, Version About This Guide Chapter Sftos Overview Sftos 2.4.1 Features Sftos Overview Ingress Rate Limiting Login Access Control Igmp Snooping Layer 2 Multicast Forwarding Sftos Overview Starting the Switch Chapter Quick Start Using the Boot Menu Press 2 and Enter quickly to access the Boot menu System Info and System Setup Boot Menu OptionsShow hardware Physical Port Data User Account Management Management IP Address SSH Managementethernet Address command Ip address ipaddr Default gatewayServiceport protocol None bootp dhcp Uploading from the Switch through Xmodem Downloading to the Switch through Xmodem Using Factory Defaults Clear configDownloading from a Tftp Server Copy tftp//ip address Command Syntax Conventions KeywordParameter Using the Command Line Interface Loc is a parameter-a placeholder for a required valueIp address ipaddr subnetmask Mtrace sourceipaddr destination group No Form of a Command Network Address Syntax IpaddrMacaddr Obtaining Help at the Command Line Keyboard Shortcuts Using Command Modes Partial Keyword Example Mode-based Topology CLI Mode Diagram Pool-name command Enter logout or quitEnter the ip dhcp pool Enter the interface range Mode-based Command Hierarchy Enter the mac access-listExtended command Enter the tacacs-server Command Prompt hostname Interface # Flow of CLI Operation Using the Web User Interface Configuring for Web Access To enable Web browser access to the switchFollow these steps to bring up the switch Web UI Web Page Layout Command Buttons Switch Navigation Icon in Web UI Using the Web User Interface General System Management and Information Commands This section describes the following commands System Management Commands DirNone Privileged Exec Dir Hostname Change the text that appears as part of the CLI promptCharacters Hostname hostname Interface managementethernet Ip address managementInterface managementethernet Syntax ip address ipaddr subnetmask Mac-address Mac-typeNone Interface ManagementEthernet Mac-address mac-address Management route default Management route defaultManagement route default gateway Use no management route default to remove the gateway Mtu MtuSyntax no mtu Network mac-address Network mac-typeNetwork parms Network protocol Serviceport ip Protocol none bootp dhcpServiceport ip ipaddr netmask gateway Protocol Serviceport protocol Show arp switchCommunicating with the switch Report fields include This command displays inventory information for the switch Show hardwareShow interface Syntax show interface unit/slot/port Fields in Output of show interface unit/slot/port Command Show interface Show interface ethernet Unit/slot/port3965 Example of show interface ethernet switchport Output Show interface ethernet Recent reboot Address Entries Currently in Use Packets Received Packets Received Successfully Packets Transmitted Octets Packets Transmitted Successfully Statistics for this port were last cleared Show interface managementethernet Show interface managementethernetShow interface managementethernet Show interface switchport Show interface switchportShow interface switchport Fields in Output of show interface switchport Command Show interfaces Show interfacesDescription unit/slot/port Port Show logging Show mac-addr-tableShow logging S2410, If Index values are AllCount Show msglog Show msglog Show running-config EnabledShow running-config all scriptname Show network Show serviceport Show serviceport This command displays switch information Show sysinfoShow sysinfo Syntax show sysinfo Fields in Output of show sysinfo Command Fields in Output of show version CommandShow version Show version Show version Fields in Output of show version Command SNMP-COMMUNITY-MIB Show tech-support Fields in Output of show version Command Show tech-supportSyntax show tech-support Telnet Commands This command assigns the management Vlan of the switchThis section describes the following Sftos Telnet commands Vlan participation management Ip telnet timeout Minutes, to the defaultIp telnet maxsessions Time is a decimal value from 1to Ip telnet server enable Session-timeoutSession-limit Telnetcon timeout Show telnetTelnet Serial Commands Telnetcon maxsessionsSerial baudrate Telnetcon maxsessions Serial timeout 9600 defaultConsole activity to the 5-minute default Show serial Show serial Fields of show serial Command Output Snmp Management Commands Global Config modeRouter Ospf Config mode Show serial Show snmpcommunity Show snmptrapShow snmpcommunity Syntax show snmptrap Show trapflags Fields of show snmptrap Command Report Fields of show trapflags Command ReportShow trapflags Show trapflags Snmp-server Snmp-server communityNo snmp-server community None Snmp-server community mode Snmp-server community ipaddrSnmp-server community ipmask Syntax snmp-server community ipaddr ipaddr name Snmp-server enable traps bcaststorm Snmp-server community roSnmp-server community rw Snmp-server enable traps linkmode Snmp-server enable traps multiusersNo version of this command disables Multiple User traps Syntax no snmp-server enable traps linkmode Snmp-server enable traps stpmode Snmp-server enable trap violationSnmp-server traps enable This command enables the Authentication traps Snmptrap mode SnmptrapSnmptrap ipaddr Snmp trap link-status Snmp trap link-status allSnmptrap snmpversion Snmptrap snmpversion 104 System Management Commands System Configuration Commands Sftos Command Reference for the S2410, Version 105 Configure 106 System Configuration CommandsBridge aging-time Bridge aging-time Enable Modes to which the Global Config mode provides a gatewayPassword for the command User Exec Configuration InterfaceInterface range Specified interface Ethernet Port-channelRange,range Vlan Commands Available in Ethernet Range Mode 110 System Configuration Commands Bulk Configuration Warning Message Single Range Bulk Configuration Monitor session Be only one destination portDestination interface Mode Monitor session 1 mode Syntax no monitor session 1 modeNo monitor Syntax no monitor This command displays the timeout for address aging No monitor sessionShow forwardingdb agetime Show mac-address-table Show mac-address-table multicast By specifying the MAC address as an optional parameterFor 1-3965, you have the option of entering a valid Vlan ID Show mac-address-table multicast macaddr Show mac-address-table stats Show monitor sessionDisplays the Multicast Forwarding Database Mfdb Information Sftos Command Reference for the S2410, Version 117 Show portShow port Syntax show monitor session Show port all Command Output Example 118 System Configuration Commands Show port protocol Shutdown InterfaceShutdown all For the indicated group Virtual LAN Vlan Commands Virtual LAN Vlan commands in this section are Sftos Command Reference for the S2410, Version 121 Clear vlanClear vlan Syntax clear vlan 122 System Configuration Commands DescriptionEnter a description for the selected interface port or Vlan Description Sftos Command Reference for the S2410, Version 123 Encapsulation VlanInterface vlan Interface Vlan 124 System Configuration Commands MakestaticMakestatic Syntax makestatic Mtu Vlan Name Vlan 126 System Configuration Commands Network mgmtvlanParticipation Vlan Priority Vlan Except when Gvrp is expected to create the Vlan Protocol groupGroup that is identified by this groupid Such as conf-if-range-vlan 10-20# Configure the Vlan ID for a specific port Interface Vlan Protocol vlan group allPvid Vlan Fail and the interfaces will not be added to the group Show vlan Show vlan brief id vlanid name port BriefId vlanid Name 130 System Configuration Commands Show vlan portDisplay 802.1Q port parameters Show vlan port Sftos Command Reference for the S2410, Version 131 TaggedTagged Tagged unit/slot/port 132 System Configuration Commands UntaggedVlan Untagged Vlan acceptframe Vlan databaseVlan ingressfilter Vlan participation interface This command changes the Vlan ID for all interfaces Vlan participation allVlan port acceptframe Vlan port ingressfilter all Sftos Command Reference for the S2410, Version 135 Vlan port tagging allVlan port untagging all Vlan port tagging all Vlan protocol group Vlan protocol group add protocolVlan protocol group remove Sftos Command Reference for the S2410, Version 137 Vlan pvidVlan tagging Vlan untagging Clear config System Utility CommandsSyntax clear config Clear counters Clear port-channel Clear traplogClear igmpsnooping Copy Specify a URL for the destination in this form CopyTrap log nvramtraplog Copy systemrunning-config nvramstartup-config Nvramstartup-config and copy tftp //tftpserveripaddressPath/filename nvramstartup-config Copy clibanner Enable passwd No clibanner command removes the CLI bannerCopy nvramclibanner tftp//tftpserveripaddress/filepath Tftpserveripaddress Enable passwd password LogoutQuit Quit Ping ReloadShow terminal length Reload Terminal length TracerouteLines Use Exec or Privileged Exec Destination through the network on a hop-by-hop basis Configuration Scripting Commands in this section areWrite Functionality of this Script apply Script deleteScript list Present Format of display is Line no Line contents Script showScript validate Script file Sftos Command Reference for the S2410, Version 149 Logging bufferedSyntax logging buffered severitylevel Logging cli-command Commands issued on the systemNo logging cli-command Logging buffered wrap Logging console Logging host Logging host reconfigure This command removes the identified hostLogging host remove Logging persistent Use no logging syslog to disable syslog logging Disabled local0Logging syslog Logging syslog This command displays buffered logging the System log Show logging bufferedShow logging buffered Show logging buffered This command displays configured logging hosts Show logging hostsUnit variable is the host index Show logging hosts unit Show logging traplogs Show logging traplogsShow logging traplogs 156 System Log Sftos Command Reference for the S2410, Version 157 Clear passSyntax clear pass Show loginsession Login Session IDDisconnect Show users Username passwd Users snmpv3 accessmode Users snmpv3 authenticationUsers snmpv3 encryption Sftos Command Reference for the S2410, Version 161 Associated with the specified encryptionNo encryption Users snmpv3 encryption Users snmpv3 encryption 162 User Account Commands This section contains the following commands Sftos Command Reference for the S2410, Version 163 164 Security Commands Port-securityPort-security max-dynamic Port-security Sftos Command Reference for the S2410, Version 165 Port-security max-staticPort-security mac-address Port-security max-static Port-security mac-address move Show port-security Sftos Command Reference for the S2410, Version 167 Show port-security dynamicMAC Address MAC address of the dynamically locked MAC Show port-security dynamic Show port-security static Show port-security violationMAC Address-MAC Address of statically locked MAC Locked port Authentication login Authentication loginNo authentication login listname Sftos Command Reference for the S2410, Version 169 Dot1x defaultlogin Clear dot1x statisticsClear radius statistics Clear dot1x statistics unit/slot/port all Dot1x login Be a configured authentication login listDot1x initialize Dot1x max-req Dot1x port-control Dot1x port-control allDot1x port-control force-unauthorized force-authorized auto Auto Dot1x re-authenticate Dot1x re-authenticationUnauthorized Authorized Dot1x timeout SwitchDot1x system-auth-control Can be changed, but is not activated Show authentication Sftos Command Reference for the S2410, Version 175Dot1x user Dot1x user Show authentication users Show dot1xUser column Displayed Sftos Command Reference for the S2410, Version 177 Show dot1x Example of Output from the show dot1x detail Command 178 Security Commands Show users authentication Show users authenticationShow dot1x users Show dot1x users unit/slot/port Users defaultlogin Users loginUsers will be authenticated using local authentication only Accidental lockout from the switch Radius accounting mode Value i.e. the Radius accounting function is disabledRadius server host Authentication server 182 Security CommandsRadius server key Radius server key Previously configured Radius authentication server Radius server msgauthRadius server primary Radius server retransmit Radius server timeout Show radius Radius Accounting Mode Show radius accounting statisticsShow radius accounting statistics Show radius accounting statistics IP address Show radius statistics authentication 186 Security CommandsRadius Accounting Server Otherwise all the following listed fields are displayed Show radius statistics authentication Sftos Command Reference for the S2410, Version 187 Not configured Tacacs-server hostTacacs-server key To delete a key, use the no tacacs-server key key Tacacs-server timeout Specify a global timeout value for all TACACS+ hostsTo restore the default, enter no tacacs-server timeout Seconds Global Config Port PrioritySpecify a server port number for a particular Tacacs host Priority priority Timeout Specify the timeout value for a particular Tacacs hostSingle-connection Show tacacs 192 Security Commands Ip ssh maxsessionsIp ssh maxsessions Ip ssh maxsessions Ip ssh server enable Enable SSH No version of this command disables SSHDisabled Global Config Ip ssh protocol Ip ssh timeout This command displays the SSH settingsShow ip ssh Report fields Sshcon timeout Sftos Command Reference for the S2410, Version 195Sshcon maxsessions Sshcon maxsessions Ip http javamode enable This command is used to set the Sslt portSSL3 and TLS1 Global Config Ip http secure-port Ip http secure-server enable Ip http server enableNo ip http secure-server enable disabled No ip http server enable Show ip http Show ip httpShow ip http This command displays switch configuration information Show storm-controlShow storm-control Show storm-control unit/slot/port all This command enables 802.3x flow control for the switch Storm-control broadcastStorm-control flowcontrol No storm-control broadcast Sftos Command Reference for the S2410, Version 201 Storm-control flowcontrol Storm-control flowcontrol 202 Security Commands Dhcp Server Commands Sftos Command Reference for the S2410, Version 203 Bootfile Mode Dhcp Pool ConfigClear ip dhcp binding Clear ip dhcp server statistics Clear ip dhcp conflict Client-identifierClient-name Default-router Dns-serverDomain-name Hardware-address HostFrom 0 to 255. IP address 0.0.0.0 is invalid Prefix-length is an integer from 0 to Ip dhcp bootp automatic Ip dhcp conflict loggingIp dhcp excluded-address Ip dhcp ping packets Ip dhcp poolLease Netbios-name-server Netbios-node-typeNetwork Next-server Option Service dhcp Service dhcpShow ip dhcp binding No option code Show ip dhcp global configuration Show ip dhcp pool configurationShow ip dhcp global configuration Show ip dhcp pool configuration name all This command displays Dhcp server statistics Show ip dhcp server statisticsShow ip dhcp conflict Specified, all the conflicting addresses are displayed Where poll-interval can be a value from 6 to Sftos Command Reference for the S2410, Version 215Sntp broadcast client poll-interval Sntp broadcast client poll-interval poll-interval Sntp client mode This command sets the Sntp client port ID to a value fromSntp client port Processed Sntp unicast client poll-timeout Sntp unicast client poll-intervalSntp unicast client poll-retry This command is used to display Sntp settings and status Sntp serverShow sntp Sntp servers This command is used to display Sntp client settings Sftos Command Reference for the S2410, Version 219Show sntp client Show sntp client For each configured server 220 Sntp CommandsShow sntp server Show sntp server Sftos Command Reference for the S2410, Version 221 Dvlan-tunnel ethertypeDvlan-tunnel ethertype 802.1Q vman custom Vman Mode dot1q-tunnel Mode dvlan-tunnelInterface. By default, Double Vlan Tunneling is disabled Interface Config Sftos Command Reference for the S2410, Version 223 Show dot1q-tunnelShow dot1q-tunnel interface unit/slot/port all 224 VLAN-Stack Commands Show dvlan-tunnelShow dvlan-tunnel Show dvlan-tunnel interface unit/slot/port all Set garp timer join Garp CommandsCommands in this sections are Sftos Command Reference for the S2410, Version 225 Set garp timer leave Set garp timer leaveSet garp timer join No set garp timer join Syntax set garp timer leave Set garp timer leaveall Syntax set garp timer leaveallShow garp Show garp Gvrp adminmode enable Gvrp interfacemode enableGarp Vlan Registration Protocol Gvrp Commands This command enables Gvrp globally Gvrp interfacemode enable all Set gvrp adminmodeShow gvrp configuration Set gvrp interfacemode Show gvrp configuration 230 GARP, GVRP, and Gmrp Commands Gmrp adminmode Garp Multicast Registration Protocol Gmrp CommandsGmrp adminmode Syntax gmrp adminmode enable Set gmrp adminmode Gmrp interfacemode enable allChanged to gmrp adminmode Gmrp interfacemode enable all Show gmrp configuration Set gmrp interfacemodeSet gmrp interfacemode all One or all interfaces 234 GARP, GVRP, and Gmrp Commands Show mac-address-table gmrpMulticast Forwarding Database Mfdb table Show mac-address-table gmrp Igmp Snooping Commands Sftos Command Reference for the S2410, Version 235 Igmp enable interface Igmp enable globalDisabled Interface Config Interface Vlan Revised from set igmp. Added Interface Vlan mode Igmp fast-leave interface Igmp groupmembership-interval interfaceEntry To 3600 seconds Igmp interfacemode enable all Igmp interfacemode enable allNo igmp interfacemode enable all 238 Igmp Snooping Commands Mode and Interface Vlan mode Igmp mcrtexpiretime interfaceIgmp maxresponse No igmp mcrtexpiretime Igmp mrouter interface enable No igmp mrouter interface enableIgmp mrouter interface No igmp mrouter vlanId Set igmp interface Set igmp systemSet igmp fast-leave Set igmp groupmembership-interval global Version 2.3 Revised to igmp mrouter interface enable 242 Igmp Snooping CommandsSet igmp groupmembership-interval interface Set igmp interfacemode all Sftos Command Reference for the S2410, Version 243 Set igmp maxresponse globalSet igmp maxresponse interface Set igmp maxresponse global 244 Igmp Snooping Commands Set igmp mcrtexpiretime globalSet igmp mcrtexpiretime interface Set igmp mcrtexpiretime global Set igmp mrouter Show igmpsnoopingRevised to igmp mrouter Show igmpsnooping unit/slot/port Unit/slot/port Show igmpsnooping fast-leave Show igmpsnooping mrouter interfaceShow igmpsnooping mrouter interface unit/slot/port vlan Vlan Sftos Command Reference for the S2410, Version 247 Show mac-address-table igmpsnoopingShow mac-address-table igmpsnooping Syntax show mac-address-table igmpsnoopingPage Sftos Command Reference for the S2410, Version 249 Addport Deleteport interface config Deleteport interface config250 LAG/Port Channel Commands Addport unit/slot/port Deleteport global config Port-channelDeleteport unit/slot/port all No port-channel name Port-channel enable all global Port-channel enable interfacePort-channel linktrap This command renames a LAG port channel or all LAGs All configured LAGsPort-channel name Port-channel staticcapability Port lacpmode enable all Port lacptimeout globalPort lacpmode Port lacptimeout interface Interface Config Interface RangeShow port-channel brief Show port-channel For each LAG, the following information is displayedSyntax show port-channel brief Show port-channel Lagid all Sftos Command Reference for the S2410, Version 257 Show port-channel summaryPort channel/LAG Summary Show port-channel summary This command disables the selected LAG port channel No version of this command enables the selected LAG258 LAG/Port Channel Commands Shutdown Sftos Command Reference for the S2410, Version 259 260 Spanning Tree STP Commands Show spanning-treeAre displayed Show spanning-tree Following details are displayed on execution of the command Show spanning-tree interfaceShow spanning-tree interface unit/slot/port 262 Spanning Tree STP Commands Show spanning-tree mst detailedShow spanning-tree mst port detailed Show spanning-tree mst detailed Sftos Command Reference for the S2410, Version 263 Show spanning-tree mst port detailed Switch. On execution, the following details are displayed Show spanning-tree mst port summaryShow spanning-tree mst summary For each Mstid Details are displayed on execution of the command Show spanning-tree summaryShow spanning-tree vlan Spanning-tree Spanning-tree configuration name Spanning-tree configuration revisionNo spanning-tree configuration name name Spanning-tree bpdumigrationcheck Spanning-tree configuration revision Spanning-tree edgeportSpanning-tree forceversion Words Internal spanning tree to the default value, in other words Spanning-tree forward-timeSpanning-tree hello-time Value being greater than or equal to Bridge Max Age / 2 + Spanning-tree max-age Spanning-tree max-hopsSpanning-tree mst Syntax spanning-tree max-age No spanning-tree max-age Cost auto external-cost auto port-priorty Interface Config 270 Spanning Tree STP CommandsNo spanning-tree mst No spanning-tree mst Spanning-tree mst instance Spanning-tree mst priorityMaximum number of multiple instances supported by Sftos is Multiple spanning tree instance to be removed Spanning-tree port mode enable Spanning-tree mst vlanSpanning-tree mst vlan mstid vlanid No spanning-tree mst vlan mstid vlanid Spanning-tree port mode enable all Spanning-tree port mode enable allNo spanning-tree port mode enable No spanning-tree port mode enable allPage Class of Service CoS Commands Sftos Command Reference for the S2410, Version 275 Classofservice dot1p-mapping No form of this command is not supportedClassofservice dot1p-mapping userpriority trafficclass Userpriority range is Classofservice trust Classofservice trust dot1pCos-queue max-bandwidth Syntax no cos-queue max-bandwidth bw-0…bw-3 Cos-queue min-bandwidth Cos-queue random-detectUp to four in the S2410 Operation for the specified queues Random-detect exponential-weighting-constant Random-detect exponential-weighting-constant commandsCos-queue strict Four in the S2410 280 Quality of Service QoS Commands Random-detect queue-parmsRandom-detect queue-parms Queue-id-1 queue-id-2 Show classofservice dot1p-mapping Show classofservice trustSystem-wide port trust mode used for all interfaces For a specific interface Settings are displayed Show interfaces cos-queueShow interfaces random-detect Report Fields Non-IP Traffic Sftos Command Reference for the S2410, Version 283 Show interfaces tail-drop-thresholdShow interfaces tail-drop-threshold Syntax show interfaces random-detect slot/port Global Config and Interface Config 284 Quality of Service QoS CommandsTail-drop queue-parms Tail-drop queue-parms Classofservice dot1pmapping Differentiated Services DiffServ CommandsProvisioning Ieee 802.1p Commands Traffic-shape Show classofservice dot1pmapping Configuration will override this configuration settingVlan port priority all Vlan priority This chapter covers the following commands Sftos Command Reference for the S2410, Version 287 Ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios DenypermitAny bpdu Vlan eq Secondary-vlan Secondary-cosAssign-queue Redirect Mac access-list extended Mac Access List ConfigMac access-list extended name Access-list extended command Mac access-list extended rename Mac access-list extended rename name newnameSftos Command Reference for the S2410, Version 291 Newname Mac access-group Show mac access-listsMac access-group name 1-4294967295in Show mac access-lists name Show mac access-lists Sftos Command Reference for the S2410, Version 293 Show mac access-lists 294 ACL Commands Sftos Command Reference for the S2410, Version 295 Index Copy 37-38 296 Index Sftos Command Reference for the S2410, Version 297 Html Http 298 Index Sftos Command Reference for the S2410, Version 299 PDUs 225 Show inventory 114-116, 119, 169, 227, 229 300 Index Sftos Command Reference for the S2410, Version 301 Show sysinfo 83, 222 75-77 302 Index Sftos Command Reference for the S2410, Version 303 Gvrp IDs 134 304 Index