Manuals / Force10 Networks / Computer Equipment / Switch

Force10 Networks S2410s manual Igmp Snooping Layer 2 Multicast Forwarding

Models: S2410s

1 304

Download 304 pages 5.91 Kb

Page 29

Image 29

Multicast Protocols

•IGMP Snooping

•Layer 2 Multicast Forwarding

Security and Packet Control Features

•Ingress Rate Limiting

•Login Access Control

•RADIUS

•IEEE 802.1x

•SSH2 Server Support

•Port Mirroring

•Access Profiles on Routing Protocols

•DOS Protection

•MAC-based Port Security

Management

•Telnet (RFC 854)

•SSHv2

•TFTP (RFC 783)

•Syslog

•SNMP v1/v2c

•RMON Groups

•HTML-based Management

•SNTP

•HTTPS/SSL

SFTOS Command Reference for the S2410, Version 2.4.1.0

Page 29

Image 29

Force10 Networks S2410s manual Igmp Snooping Layer 2 Multicast Forwarding, Ingress Rate Limiting Login Access Control

Contents

Sftos Command Reference for the S2410 Copyright 2008 Force10 Networks Other Changes Sftos Command Reference for the S2410, VersionMajor Changes New Features Deprecated CommandsContents Contents Using the Command Line InterfaceShow running-config Chapter System Configuration Commands 105 127 System Log Port-securitymac-address move 166 Dhcp Server Commands Sntp Commands Chapter Igmp Snooping Commands 235 Chapter LAG/Port Channel Commands 249 Chapter Quality of Service QoS Commands 275 List of Figures 141 List of Tables Page Objectives About This GuideAbout This Guide How to Use this GuideAudience Contact Information Products and Services LiabilityRelated Documents and Sources of Additional Information Documentation Feedback Sftos Command Reference for the S2410, Version About This Guide Chapter Sftos Overview Sftos Overview Sftos 2.4.1 FeaturesIgmp Snooping Layer 2 Multicast Forwarding Ingress Rate Limiting Login Access ControlSftos Overview Chapter Quick Start Starting the SwitchPress 2 and Enter quickly to access the Boot menu Using the Boot MenuShow hardware System Info and System SetupBoot Menu Options User Account Management Physical Port DataSSH Management IP AddressDefault gateway Managementethernet Address command Ip address ipaddrServiceport protocol None bootp dhcpDownloading to the Switch through Xmodem Uploading from the Switch through XmodemClear config Using Factory DefaultsDownloading from a Tftp Server Copy tftp//ip addressParameter Command Syntax ConventionsKeyword Loc is a parameter-a placeholder for a required value Using the Command Line InterfaceIp address ipaddr subnetmask Mtrace sourceipaddr destination groupNo Form of a Command Macaddr Network Address SyntaxIpaddr Keyboard Shortcuts Obtaining Help at the Command LinePartial Keyword Example Using Command ModesMode-based Topology CLI Mode Diagram Enter logout or quit Pool-name commandEnter the ip dhcp pool Enter the interface rangeEnter the mac access-list Mode-based Command HierarchyExtended command Enter the tacacs-serverCommand Prompt hostname Interface # Flow of CLI Operation Using the Web User Interface To enable Web browser access to the switch Configuring for Web AccessFollow these steps to bring up the switch Web UI Web Page LayoutSwitch Navigation Icon in Web UI Command ButtonsUsing the Web User Interface This section describes the following commands General System Management and Information CommandsDir System Management CommandsNone Privileged Exec DirChange the text that appears as part of the CLI prompt HostnameCharacters Hostname hostnameIp address management Interface managementethernetInterface managementethernet Syntax ip address ipaddr subnetmaskMac-type Mac-addressNone Interface ManagementEthernet Mac-address mac-addressManagement route default Management route defaultManagement route default gateway Use no management route default to remove the gatewaySyntax no mtu MtuMtu Network mac-type Network mac-addressNetwork parms Network protocolProtocol none bootp dhcp Serviceport ipServiceport ip ipaddr netmask gateway ProtocolShow arp switch Serviceport protocolCommunicating with the switch Report fields includeShow hardware This command displays inventory information for the switchShow interface Syntax show interface unit/slot/portShow interface Fields in Output of show interface unit/slot/port Command3965 Show interface ethernetUnit/slot/port Show interface ethernet Example of show interface ethernet switchport OutputRecent reboot Address Entries Currently in Use Packets Received Packets Received Successfully Packets Transmitted Octets Packets Transmitted Successfully Statistics for this port were last cleared Show interface managementethernet Show interface managementethernetShow interface managementethernet Show interface switchport Show interface switchportShow interface switchport Fields in Output of show interface switchport CommandShow interfaces Show interfacesDescription unit/slot/port PortShow logging Show loggingShow mac-addr-table Count S2410, If Index values areAll Show msglog Show msglogEnabled Show running-configShow running-config all scriptname Show networkShow serviceport Show serviceportShow sysinfo This command displays switch informationShow sysinfo Syntax show sysinfoFields in Output of show version Command Fields in Output of show sysinfo CommandShow version Show versionSNMP-COMMUNITY-MIB Show version Fields in Output of show version CommandSyntax show tech-support Show tech-support Fields in Output of show version CommandShow tech-support This command assigns the management Vlan of the switch Telnet CommandsThis section describes the following Sftos Telnet commands Vlan participation managementMinutes, to the default Ip telnet timeoutIp telnet maxsessions Time is a decimal value from 1toSession-limit Ip telnet server enableSession-timeout Telnet Telnetcon timeoutShow telnet Telnetcon maxsessions Serial CommandsSerial baudrate Telnetcon maxsessions9600 default Serial timeoutConsole activity to the 5-minute default Show serialShow serial Fields of show serial Command Output Global Config mode Snmp Management CommandsRouter Ospf Config mode Show serialShow snmptrap Show snmpcommunityShow snmpcommunity Syntax show snmptrapFields of show trapflags Command Report Show trapflags Fields of show snmptrap Command ReportShow trapflags Show trapflagsSnmp-server community Snmp-serverNo snmp-server community NoneSnmp-server community ipaddr Snmp-server community modeSnmp-server community ipmask Syntax snmp-server community ipaddr ipaddr nameSnmp-server community rw Snmp-server enable traps bcaststormSnmp-server community ro Snmp-server enable traps multiusers Snmp-server enable traps linkmodeNo version of this command disables Multiple User traps Syntax no snmp-server enable traps linkmodeSnmp-server enable trap violation Snmp-server enable traps stpmodeSnmp-server traps enable This command enables the Authentication trapsSnmptrap ipaddr Snmptrap modeSnmptrap Snmptrap snmpversion Snmp trap link-statusSnmp trap link-status all Snmptrap snmpversion 104 System Management Commands Sftos Command Reference for the S2410, Version 105 System Configuration Commands106 System Configuration Commands ConfigureBridge aging-time Bridge aging-timeModes to which the Global Config mode provides a gateway EnablePassword for the command User ExecInterface ConfigurationInterface range Specified interfacePort-channel EthernetRange,range Vlan110 System Configuration Commands Commands Available in Ethernet Range ModeSingle Range Bulk Configuration Bulk Configuration Warning MessageBe only one destination port Monitor sessionDestination interface ModeSyntax no monitor session 1 mode Monitor session 1 modeNo monitor Syntax no monitorNo monitor session This command displays the timeout for address agingShow forwardingdb agetime Show mac-address-tableBy specifying the MAC address as an optional parameter Show mac-address-table multicastFor 1-3965, you have the option of entering a valid Vlan ID Show mac-address-table multicast macaddrShow monitor session Show mac-address-table statsDisplays the Multicast Forwarding Database Mfdb InformationShow port Sftos Command Reference for the S2410, Version 117Show port Syntax show monitor session118 System Configuration Commands Show port all Command Output ExampleShutdown Interface Show port protocolShutdown all For the indicated groupVirtual LAN Vlan commands in this section are Virtual LAN Vlan CommandsClear vlan Sftos Command Reference for the S2410, Version 121Clear vlan Syntax clear vlanDescription 122 System Configuration CommandsEnter a description for the selected interface port or Vlan DescriptionEncapsulation Vlan Sftos Command Reference for the S2410, Version 123Interface vlan Interface VlanMakestatic 124 System Configuration CommandsMakestatic Syntax makestaticName Vlan Mtu VlanNetwork mgmtvlan 126 System Configuration CommandsParticipation Vlan Priority VlanProtocol group Except when Gvrp is expected to create the VlanGroup that is identified by this groupid Such as conf-if-range-vlan 10-20#Protocol vlan group all Configure the Vlan ID for a specific port Interface VlanPvid Vlan Fail and the interfaces will not be added to the groupShow vlan brief id vlanid name port Brief Show vlanId vlanid NameShow vlan port 130 System Configuration CommandsDisplay 802.1Q port parameters Show vlan portTagged Sftos Command Reference for the S2410, Version 131Tagged Tagged unit/slot/portUntagged 132 System Configuration CommandsVlan UntaggedVlan database Vlan acceptframeVlan ingressfilter Vlan participation interfaceVlan participation all This command changes the Vlan ID for all interfacesVlan port acceptframe Vlan port ingressfilter allVlan port tagging all Sftos Command Reference for the S2410, Version 135Vlan port untagging all Vlan port tagging allVlan protocol group remove Vlan protocol groupVlan protocol group add protocol Vlan pvid Sftos Command Reference for the S2410, Version 137Vlan tagging Vlan untaggingSystem Utility Commands Clear configSyntax clear config Clear countersClear traplog Clear port-channelClear igmpsnooping CopyTrap log nvramtraplog Specify a URL for the destination in this formCopy Nvramstartup-config and copy tftp //tftpserveripaddress Copy systemrunning-config nvramstartup-configPath/filename nvramstartup-config Copy clibannerNo clibanner command removes the CLI banner Enable passwdCopy nvramclibanner tftp//tftpserveripaddress/filepath TftpserveripaddressLogout Enable passwd passwordQuit QuitReload PingShow terminal length ReloadTraceroute Terminal lengthLines Use Exec or Privileged Exec Destination through the network on a hop-by-hop basisCommands in this section are Configuration ScriptingWrite Functionality of thisScript delete Script applyScript list PresentScript show Format of display is Line no Line contentsScript validate Script fileSyntax logging buffered severitylevel Sftos Command Reference for the S2410, Version 149Logging buffered Commands issued on the system Logging cli-commandNo logging cli-command Logging buffered wrapLogging host Logging consoleThis command removes the identified host Logging host reconfigureLogging host remove Logging persistentDisabled local0 Use no logging syslog to disable syslog loggingLogging syslog Logging syslogShow logging buffered This command displays buffered logging the System logShow logging buffered Show logging bufferedShow logging hosts This command displays configured logging hostsUnit variable is the host index Show logging hosts unitShow logging traplogs Show logging traplogsShow logging traplogs 156 System LogSyntax clear pass Sftos Command Reference for the S2410, Version 157Clear pass Login Session ID Show loginsessionDisconnect Show usersUsername passwd Users snmpv3 encryption Users snmpv3 accessmodeUsers snmpv3 authentication Associated with the specified encryption Sftos Command Reference for the S2410, Version 161No encryption Users snmpv3 encryptionUsers snmpv3 encryption 162 User Account Commands Sftos Command Reference for the S2410, Version 163 This section contains the following commandsPort-security 164 Security CommandsPort-security max-dynamic Port-securityPort-security max-static Sftos Command Reference for the S2410, Version 165Port-security mac-address Port-security max-staticShow port-security Port-security mac-address moveShow port-security dynamic Sftos Command Reference for the S2410, Version 167MAC Address MAC address of the dynamically locked MAC Show port-security dynamicShow port-security violation Show port-security staticMAC Address-MAC Address of statically locked MAC Locked portAuthentication login Authentication loginNo authentication login listname Sftos Command Reference for the S2410, Version 169Clear dot1x statistics Dot1x defaultloginClear radius statistics Clear dot1x statistics unit/slot/port allBe a configured authentication login list Dot1x loginDot1x initialize Dot1x max-reqDot1x port-control all Dot1x port-controlDot1x port-control force-unauthorized force-authorized auto AutoDot1x re-authentication Dot1x re-authenticateUnauthorized AuthorizedSwitch Dot1x timeoutDot1x system-auth-control Can be changed, but is not activatedSftos Command Reference for the S2410, Version 175 Show authenticationDot1x user Dot1x userShow dot1x Show authentication usersUser column DisplayedShow dot1x Sftos Command Reference for the S2410, Version 177178 Security Commands Example of Output from the show dot1x detail CommandShow users authentication Show users authenticationShow dot1x users Show dot1x users unit/slot/portUsers login Users defaultloginUsers will be authenticated using local authentication only Accidental lockout from the switchRadius server host Radius accounting modeValue i.e. the Radius accounting function is disabled 182 Security Commands Authentication serverRadius server key Radius server keyRadius server msgauth Previously configured Radius authentication serverRadius server primary Radius server retransmitShow radius Radius server timeoutShow radius accounting statistics Radius Accounting ModeShow radius accounting statistics Show radius accounting statistics IP address186 Security Commands Show radius statistics authenticationRadius Accounting Server Otherwise all the following listed fields are displayedSftos Command Reference for the S2410, Version 187 Show radius statistics authenticationTacacs-server host Not configuredTacacs-server key To delete a key, use the no tacacs-server key keySpecify a global timeout value for all TACACS+ hosts Tacacs-server timeoutTo restore the default, enter no tacacs-server timeout Seconds Global ConfigPriority PortSpecify a server port number for a particular Tacacs host Priority prioritySpecify the timeout value for a particular Tacacs host TimeoutSingle-connection Show tacacsIp ssh maxsessions 192 Security CommandsIp ssh maxsessions Ip ssh maxsessionsEnable SSH No version of this command disables SSH Ip ssh server enableDisabled Global Config Ip ssh protocolThis command displays the SSH settings Ip ssh timeoutShow ip ssh Report fieldsSftos Command Reference for the S2410, Version 195 Sshcon timeoutSshcon maxsessions Sshcon maxsessionsThis command is used to set the Sslt port Ip http javamode enableSSL3 and TLS1 Global Config Ip http secure-portIp http server enable Ip http secure-server enableNo ip http secure-server enable disabled No ip http server enableShow ip http Show ip httpShow ip http Show storm-control This command displays switch configuration informationShow storm-control Show storm-control unit/slot/port allStorm-control broadcast This command enables 802.3x flow control for the switchStorm-control flowcontrol No storm-control broadcastStorm-control flowcontrol Sftos Command Reference for the S2410, Version 201Storm-control flowcontrol 202 Security Commands Sftos Command Reference for the S2410, Version 203 Dhcp Server CommandsMode Dhcp Pool Config BootfileClear ip dhcp binding Clear ip dhcp server statisticsClient-name Clear ip dhcp conflictClient-identifier Domain-name Default-routerDns-server Host Hardware-addressFrom 0 to 255. IP address 0.0.0.0 is invalid Prefix-length is an integer from 0 toIp dhcp excluded-address Ip dhcp bootp automaticIp dhcp conflict logging Lease Ip dhcp ping packetsIp dhcp pool Network Netbios-name-serverNetbios-node-type Option Next-serverService dhcp Service dhcpShow ip dhcp binding No option codeShow ip dhcp pool configuration Show ip dhcp global configurationShow ip dhcp global configuration Show ip dhcp pool configuration name allShow ip dhcp server statistics This command displays Dhcp server statisticsShow ip dhcp conflict Specified, all the conflicting addresses are displayedSftos Command Reference for the S2410, Version 215 Where poll-interval can be a value from 6 toSntp broadcast client poll-interval Sntp broadcast client poll-interval poll-intervalThis command sets the Sntp client port ID to a value from Sntp client modeSntp client port ProcessedSntp unicast client poll-retry Sntp unicast client poll-timeoutSntp unicast client poll-interval Sntp server This command is used to display Sntp settings and statusShow sntp Sntp serversSftos Command Reference for the S2410, Version 219 This command is used to display Sntp client settingsShow sntp client Show sntp client220 Sntp Commands For each configured serverShow sntp server Show sntp serverDvlan-tunnel ethertype Sftos Command Reference for the S2410, Version 221Dvlan-tunnel ethertype 802.1Q vman custom VmanMode dvlan-tunnel Mode dot1q-tunnelInterface. By default, Double Vlan Tunneling is disabled Interface ConfigShow dot1q-tunnel interface unit/slot/port all Sftos Command Reference for the S2410, Version 223Show dot1q-tunnel Show dvlan-tunnel 224 VLAN-Stack CommandsShow dvlan-tunnel Show dvlan-tunnel interface unit/slot/port allGarp Commands Set garp timer joinCommands in this sections are Sftos Command Reference for the S2410, Version 225Set garp timer leave Set garp timer leaveSet garp timer join No set garp timer join Syntax set garp timer leaveSyntax set garp timer leaveall Set garp timer leaveallShow garp Show garpGvrp interfacemode enable Gvrp adminmode enableGarp Vlan Registration Protocol Gvrp Commands This command enables Gvrp globallySet gvrp adminmode Gvrp interfacemode enable allShow gvrp configuration Set gvrp interfacemode230 GARP, GVRP, and Gmrp Commands Show gvrp configurationGarp Multicast Registration Protocol Gmrp Commands Gmrp adminmodeGmrp adminmode Syntax gmrp adminmode enableGmrp interfacemode enable all Set gmrp adminmodeChanged to gmrp adminmode Gmrp interfacemode enable allSet gmrp interfacemode Show gmrp configurationSet gmrp interfacemode all One or all interfacesShow mac-address-table gmrp 234 GARP, GVRP, and Gmrp CommandsMulticast Forwarding Database Mfdb table Show mac-address-table gmrpSftos Command Reference for the S2410, Version 235 Igmp Snooping CommandsIgmp enable global Igmp enable interfaceDisabled Interface Config Interface Vlan Revised from set igmp. Added Interface Vlan modeIgmp groupmembership-interval interface Igmp fast-leave interfaceEntry To 3600 secondsIgmp interfacemode enable all Igmp interfacemode enable allNo igmp interfacemode enable all 238 Igmp Snooping CommandsIgmp mcrtexpiretime interface Mode and Interface Vlan modeIgmp maxresponse No igmp mcrtexpiretimeNo igmp mrouter interface enable Igmp mrouter interface enableIgmp mrouter interface No igmp mrouter vlanIdSet igmp system Set igmp interfaceSet igmp fast-leave Set igmp groupmembership-interval global242 Igmp Snooping Commands Version 2.3 Revised to igmp mrouter interface enableSet igmp groupmembership-interval interface Set igmp interfacemode allSet igmp maxresponse global Sftos Command Reference for the S2410, Version 243Set igmp maxresponse interface Set igmp maxresponse globalSet igmp mcrtexpiretime global 244 Igmp Snooping CommandsSet igmp mcrtexpiretime interface Set igmp mcrtexpiretime globalShow igmpsnooping Set igmp mrouterRevised to igmp mrouter Show igmpsnooping unit/slot/port Unit/slot/portShow igmpsnooping mrouter interface Show igmpsnooping fast-leaveShow igmpsnooping mrouter interface unit/slot/port vlan VlanShow mac-address-table igmpsnooping Sftos Command Reference for the S2410, Version 247Show mac-address-table igmpsnooping Syntax show mac-address-table igmpsnoopingPage Addport Sftos Command Reference for the S2410, Version 249Deleteport interface config Deleteport interface config250 LAG/Port Channel Commands Addport unit/slot/portPort-channel Deleteport global configDeleteport unit/slot/port all No port-channel namePort-channel linktrap Port-channel enable all globalPort-channel enable interface All configured LAGs This command renames a LAG port channel or all LAGsPort-channel name Port-channel staticcapabilityPort lacpmode Port lacpmode enable allPort lacptimeout global Show port-channel brief Port lacptimeout interfaceInterface Config Interface Range For each LAG, the following information is displayed Show port-channelSyntax show port-channel brief Show port-channel Lagid allShow port-channel summary Sftos Command Reference for the S2410, Version 257Port channel/LAG Summary Show port-channel summaryNo version of this command enables the selected LAG This command disables the selected LAG port channel258 LAG/Port Channel Commands ShutdownSftos Command Reference for the S2410, Version 259 Show spanning-tree 260 Spanning Tree STP CommandsAre displayed Show spanning-treeShow spanning-tree interface unit/slot/port Following details are displayed on execution of the commandShow spanning-tree interface Show spanning-tree mst detailed 262 Spanning Tree STP CommandsShow spanning-tree mst port detailed Show spanning-tree mst detailedShow spanning-tree mst port detailed Sftos Command Reference for the S2410, Version 263Show spanning-tree mst port summary Switch. On execution, the following details are displayedShow spanning-tree mst summary For each MstidShow spanning-tree summary Details are displayed on execution of the commandShow spanning-tree vlan Spanning-treeSpanning-tree configuration revision Spanning-tree configuration nameNo spanning-tree configuration name name Spanning-tree bpdumigrationcheckSpanning-tree edgeport Spanning-tree configuration revisionSpanning-tree forceversion WordsSpanning-tree forward-time Internal spanning tree to the default value, in other wordsSpanning-tree hello-time Value being greater than or equal to Bridge Max Age / 2 +Spanning-tree max-hops Spanning-tree max-ageSpanning-tree mst Syntax spanning-tree max-age No spanning-tree max-age270 Spanning Tree STP Commands Cost auto external-cost auto port-priorty Interface ConfigNo spanning-tree mst No spanning-tree mstSpanning-tree mst priority Spanning-tree mst instanceMaximum number of multiple instances supported by Sftos is Multiple spanning tree instance to be removedSpanning-tree mst vlan Spanning-tree port mode enableSpanning-tree mst vlan mstid vlanid No spanning-tree mst vlan mstid vlanidSpanning-tree port mode enable all Spanning-tree port mode enable allNo spanning-tree port mode enable No spanning-tree port mode enable allPage Sftos Command Reference for the S2410, Version 275 Class of Service CoS CommandsNo form of this command is not supported Classofservice dot1p-mappingClassofservice dot1p-mapping userpriority trafficclass Userpriority range isClassofservice trust dot1p Classofservice trustCos-queue max-bandwidth Syntax no cos-queue max-bandwidth bw-0…bw-3Cos-queue random-detect Cos-queue min-bandwidthUp to four in the S2410 Operation for the specified queuesRandom-detect exponential-weighting-constant commands Random-detect exponential-weighting-constantCos-queue strict Four in the S2410Random-detect queue-parms 280 Quality of Service QoS CommandsRandom-detect queue-parms Queue-id-1 queue-id-2Show classofservice trust Show classofservice dot1p-mappingSystem-wide port trust mode used for all interfaces For a specific interfaceShow interfaces cos-queue Settings are displayedShow interfaces random-detect Report Fields Non-IP TrafficShow interfaces tail-drop-threshold Sftos Command Reference for the S2410, Version 283Show interfaces tail-drop-threshold Syntax show interfaces random-detect slot/port284 Quality of Service QoS Commands Global Config and Interface ConfigTail-drop queue-parms Tail-drop queue-parmsDifferentiated Services DiffServ Commands Classofservice dot1pmappingProvisioning Ieee 802.1p Commands Traffic-shapeConfiguration will override this configuration setting Show classofservice dot1pmappingVlan port priority all Vlan prioritySftos Command Reference for the S2410, Version 287 This chapter covers the following commandsDenypermit Ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbiosAny bpdu Vlan eqSecondary-cos Secondary-vlanAssign-queue RedirectMac Access List Config Mac access-list extendedMac access-list extended name Access-list extended commandMac access-list extended rename name newname Mac access-list extended renameSftos Command Reference for the S2410, Version 291 NewnameShow mac access-lists Mac access-groupMac access-group name 1-4294967295in Show mac access-lists nameSftos Command Reference for the S2410, Version 293 Show mac access-listsShow mac access-lists 294 ACL Commands Index Sftos Command Reference for the S2410, Version 295296 Index Copy 37-38Html Http Sftos Command Reference for the S2410, Version 297298 Index PDUs 225 Sftos Command Reference for the S2410, Version 299300 Index Show inventory 114-116, 119, 169, 227, 229Show sysinfo 83, 222 Sftos Command Reference for the S2410, Version 301302 Index 75-77Gvrp IDs 134 Sftos Command Reference for the S2410, Version 303304 Index