Vlan Routing Configuration, CLI Examples | Fortinet MR1 guide

6 Routing Commands

VLAN Routing

You can configure the FortiSwitch-100 software with some ports supporting VLANs and some supporting routing. You can also configure the software to allow traffic on a VLAN to be treated as if the VLAN were a router port.

When a port is enabled for bridgin g (default) rather than routing, all normal bridge processing is performed for an inbound packet, which is then associated with a VLAN. Its MAC Destination Address (MAC DA) and VLAN ID are used to search the MAC address table. If routing is enabled for the VLAN and the MAC DA of an inbound unicast packet is that of the internal bridge-router interface, the packet will be routed. An inbound multicast packet will be forwarded to all ports in the VLAN, plus the internal bridge -router interface if it was received on a routed VLAN.

Since a port can be configured to belong to more than one VLAN, VLAN routing might be enabled for all of the VLANs on the port, or for a subset. VLAN Routing can be used to allow more than one physical port to reside on the same subne t. It could also be used when a VLAN spans multiple physical networks, or when additional segmentation or security is required. This section shows how to configure the FortiSwitch-100 software to support VLAN routing and how to use RIP and OSPF. A port can be either a VLAN port or a router port, but not both. However, a VLAN port may be part of a VLAN that is itself a router port.

VLAN Routing Configuration

This section provides an example of how to configure the FortiSwitch-100 software to support VLAN routing. The configuration of the VLAN router port is similar to that of a physical port. The main difference is that, after the VLAN has been created, you must use the show ip vlan command to determine the VLAN’s interface ID so that you can use it in the router configuration commands.

CLI Examples

The diagram in this section shows a Layer 3 switch configured for port routing. It connects two VLANs, with two ports participating in one VLAN, and one port in the other. The script shows the commands you would use to configure the FortiSwitch-100 software to provide the VLAN routing support shown in the diagram.

299

Image 299

Fortinet MR1 manual Vlan Routing Configuration, CLI Examples

Contents

FortiSwitch-100 Regulatory compliance FortiSwitch-100 Userl GuideTrademarks Table of Contents System Information and Statistics commands Switching Commands 107 125 135 181 164 193 188190 225 236 230 254 288 281 307 Address Resolution Protocol ARP Commands 302 317 346 366 350357 371 Internet Group Management Protocol Igmp Commands 385370 406 393 424 410423 Defining Forwarding Database 437 591 Introduction Page Front-Panel Components Management Options RFC 1850 OSPF-TRAP-MIB Installation and Quick Startup Installing the Switch in a Rack Quick Start up Physical Port Data Show switchQuick Start up Physical Port Command Details Quick Start up Software Version Information Nopasswd Show loginsessionQuick Start up User Account Management Show Interface status slot/port all Quick Start up IP Address Copy running-configStartup-config filename Quick Start up IP Address Command Details Xmodem Show ip interfaceIp address Filename Quick Start up Factory DefaultsQuick Start up Downloading from Tftp Server To connect a device to an SFP transceiver port Connecting Devices to the SwitchUpdating the Image Code on the Switch Reload To manually configure a static IP address To configure a dynamic IP address using Dhcp Tftp Use the Tftp function to upgrade the code Troubleshooting the Download Procedure Set Up your Switch Using Console Access Set Up your Switch Using Telnet Access Web-Based Management Interface Menus System Information System Switching IP Multicast RoutingSecurity QoS Port-Specific Popup Menus System-wide menus Parameters Example IP address ipaddr netmask gatewayExample Clear vlan Range ValuesNetwork Address Syntax Format Type IPAddr MacAddr Annotations Show calendar Show arp Syntax Show eventlog unit Show calendar Default SettingShow eventlog Show sysinfo Show running-configSyntax Show running-config all scriptname Syntax show sysinfo Default Setting Show hardware Syntax Show hardware Default Setting Show interface status Show loginsessionSyntax Show loginsession Default Setting Interface Syntax Show interface counters slot/port all Show interface counters Syntax Show interface counters detailed slot/port switchport Command Mode Total Packets Transmitted Successfully Total Packets Received Without ErrorsTotal Packets Received with MAC Errors Total Packets Transmitted Octets Total Transmited Packets Discards Total Transmit Errors Syntax Show interface switch Default Setting Show interface switch Syntax Interface slot/port InterfaceSpeed-duplex Full duplex Full duplex half duplex Half duplex NegotiateSpeed-duplex 10 100 full-duplex half-duplex Syntax Speed-duplex all 10 100 full-duplex half-duplex Syntax Negotiate all no negotiate all CapabilitiesNegotiate no negotiate Storm-control flowcontrol Shutdown Syntax Shutdown all no shutdown all Syntax Shutdown no shutdown Syntax Show mac-addr-table macaddr all 2 L2 MAC Address and Multicast Forwarding Database TablesShow mac-addr-table Show mac-address-table igmpsnooping Syntax Show mac-address-table gmrp Default SettingSyntax Show mac-address-table igmpsnooping Default Setting Show mac-address-table gmrp Syntax Show mac-address-table multicast macaddr vlanid all Show mac-address-table multicast Show mac-address-table agetime Syntax Show mac-address-table stats Default SettingSyntax Show mac-address-table agetime Default Setting Show mac-address-table stats Show vlan Syntax show vlan Default SettingVlan Management Syntax Show vlan id vlanid name vlanname Show vlan id Syntax Show protocol group group-name all Show interface switchportSyntax Show interface switchport slot/port all Show protocol group Vlan Syntax Vlan database Default SettingVlan database Vlan vlanid name no vlan vlanid Vlan name Syntax Vlan makestatic vlanid Vlan makestaticProtocol group Switchport acceptable-frame-type Syntax Switchport ingress-filtering all Switchport ingress-filtering Syntax Switchport native vlan all vlanid Switchport native vlanNo switchport ingress-filtering all Default Setting Command Mode Switchport allowed vlan Switchport tagging Syntax Switchport priority Switchport prioritySyntax Switchport tagging all vlanid Syntax Switchport priority all Switchport protocol group Default Setting Switchport forbidden vlan Show bridge-ext Syntax Show bridge-ext Default SettingGvrp and Bridge Extension Syntax Show gvrp configuration slot/port all Show gvrp configuration Syntax Show gmrp configuration slot/port all Show gmrp configurationShow garp configuration Syntax Bridge-ext gvrp no bridge-ext gvrp Syntax Show garp configuration slot/port allBridge-ext gvrp Syntax Bridge-ext gmrp no bridge-ext gmrp Switchport gvrpSyntax Switchport gvrp no switchport gvrp Bridge-ext gmrp Syntax Switchport gmrp no switchport gmrp Switchport gmrpSyntax Switchport gvrp all no switchport gvrp all Syntax Garp timer join 10-100 no garp timer join Garp timerSyntax Switchport gmrp all no switchport gmrp all Syntax Garp timer join all 10-100 no garp timer join all Syntax Garp timer leave all 20-600 no garp timer leave all Syntax Garp timer leave 20-600 no garp timer leave Syntax Garp timer leaveall 200-6000 no garp timer leaveall Show ip igmp snooping Show CommandsSyntax Show ip igmp snooping Default Setting Igmp Snooping Show ip igmp snooping multicast Show ip igmp snooping mrouter Syntax Show ip igmp snooping Syntax Ip igmp snooping no igmp snooping Configuration CommandsIp igmp snooping Ip igmp snooping groupmembershipinterval Syntax Ip igmp snooping interfacemode all Ip igmp snooping interfacemode Ip igmp snooping max-response-time Ip igmp snooping mcrtrexpiretime Ip igmp snooping immediate-leave Ip igmp snooping mrouter Syntax Set igmp 1-3965 no set igmp Command UsageIp igmp snooping vlan static Set igmp Set igmp maxresponse Set igmp groupmembership-interval Set igmp mcrtexpiretime Syntax Set igmp fast-leave 1-3965 no set igmp fast-leave Set igmp fast-leave Syntax Show port-channel logical slot/port all Syntax Show port-channel Default SettingPort Channel Show port-channel Port-channel Syntax Staticcapability no staticcapability Port-channel adminmode allStaticcapability Port-channel name Port-channel linktrap Port-channel name logical slot/port all name AdminmodeSyntax Adminmode no adminmode Lacp Syntax Lacp all no lacp all Channel-groupSyntax Lacp no lacp Syntax Delete-channel-group logical slot/port Delete-channel-groupSyntax Channel-group logical slot/port Syntax Delete-channel-group logical slot/port all Syntax Show storm-control broadcast Default SettingStorm Control Show storm-control Syntax Show storm-control unicast Default Setting Syntax Show storm-control multicast Default Setting Syntax Storm-control broadcast no storm-control broadcast Storm-control broadcast Syntax Storm-control multicast no storm-control multicast Storm-control multicast Syntax Storm-control unicast no storm-control unicast Storm-control unicast Syntax Switchport broadcast all packet-rate 1 2 3 Switchport broadcast packet-rateSyntax Switchport broadcast packet-rate 1 2 3 Syntax Switchport multicast all packet-rate 1 2 3 Switchport multicast packet-rateSyntax Switchport multicast packet-rate 1 2 3 Syntax Switchport unicast packet-rate 1 2 3 Switchport unicast packet-rate Syntax Show queue cos-map slot/port Switchport unicast all packet-rate 1 2 38 L2 Priority Show queue cos-map Syntax Queue cos-map priority queue-id no queue cos-map Port MirrorQueue cos-map Show port-monitor session Port-monitor session Show ip interface Network CommandsPort-monitor session mode Syntax No port-monitor Default Setting Show ip filter Syntax Show ip interface Default SettingSyntax show ip filter Default Setting Syntax Mtu 1518-9216 no mtu Syntax show ip ipv6 Default SettingShow ip ipv6 1.4 mtu Syntax Interface vlan vlanid Interface vlanIp address Ip address protocol Ip default-gatewaySyntax Ip default-gateway gateway no ip default-gateway Syntax Ip address protocol bootp dhcp none Syntax Ip filter ipaddr no ip filter ipaddr Ip filterSyntax Ip filter no ip filter Syntax Ip ipv6 all no ip ipv6 all Ip ipv6Syntax Ip ipv6 no ip ipv6 Line console Serial Interface CommandsSyntax Show line console Default Setting Show line console Baudrate Exec-timeoutSyntax Line console Default Setting Syntax Exec-timeout Syntax Silent-time Password-thresholdSyntax Password-threshold 0-120 no password-threshold Silent-time Syntax Telnet host port debug line echo Telnet Session CommandsTelnet Show line vty Line vty Syntax Show line vty Default SettingSyntax line vty Default Setting Syntax Exec-timeout 1-160 no exec-timeout Syntax Sessions no sessions MaxsessionsSessions Syntax Maxsessions 0-5 no maxsessions Syntax Telnet sessions no telnet sessions Telnet sessionsTelnet maxsessions Syntax Telnet maxsessions 0-5 no maxsessions Telnet exec-timeoutSyntax Telnet exec-timeout 1-160 no telnet exec-timeout Show snmp Snmp Server CommandsSyntax show telnet Default Setting Show telnet Show trapflags Syntax Show snmp Default SettingSyntax Show trapflags Default Setting Syntax Snmp-server sysname name Snmp-server sysnameSnmp-server location Syntax Snmp-server contact con Snmp-server contactSnmp-server community Snmp-server location loc 145 Syntax Snmp-server community ro rw name Snmp-server host Snmp-server enable traps No This command disables the Authentication trap No This command disables Multiple User trap Global Config This command enables PIM traps Snmp trap link-status Snmp Trap CommandsSyntax Show snmptrap Default Setting Show snmptrap No snmp trap link-status Syntax Snmptrap ipaddr name ipaddr ipaddrnew Snmptrap name ipaddrSnmptrap ipaddr Syntax Snmptrap name ipaddr no snmptrap name ipaddr Syntax Show ip http Http commandsSnmptrap mode Show ip http Syntax Ip javamode no ip javamode Ip javamodeIp http port Syntax Ip http server no ip http server Ip http serverSyntax Ip http port 1-65535 no ip http port Syntax Ip http secure-server no ip http secure-server Ip http secure-portIp http secure-server Syntax Ip http secure-port portid no ip http secure-port Show ip ssh Secure Shell SSH CommandsSyntax Show ip ssh Default Setting Ip http secure-protocol Syntax Ip ssh protocol protocollevel1 protocollevel2 Ip sshIp ssh protocol Syntax Ip ssh no ip ssh Syntax Ip ssh maxsessions 0-5 no ip ssh maxsessions Ip ssh timeoutSyntax Ip ssh timeout 1-160 no ip ssh timeout Ip ssh maxsessions Ip dhcp client-identifier Dhcp Client CommandsSyntax Ip dhcp restart Default Setting Ip dhcp restart No ip dhcp client-identifier Dhcp Relay CommandsShow bootpdhcprelay Syntax Show bootpdhcprelay Default Setting Bootpdhcprelay serverip Bootpdhcprelay maxhopcount Show spanning-tree Show CommandsSyntax Show spanning-tree Default Setting Syntax Show spanning-tree interface slot/port Display Message Bridge Priority Configured valueShow spanning-tree interface Time Since Topology Change In seconds Display Message Vlan Identifier displays Vlan ID Show spanning-tree vlanShow spanning-tree mst Syntax Show spanning-tree vlan Syntax Show spanning-tree mst detailed Syntax Show spanning-tree mst summary Default Setting Syntax Show spanning-tree mst port detailed 0-4094 slot/port 169 Show spanning-tree brief Syntax Show spanning-tree summary Default SettingDisplay Message Spanning Tree Adminmode Enabled or disabled Show spanning-tree summary Syntax Spanning-tree no spanning-tree Configuration CommandsSpanning-tree Spanning-tree protocol-migration Spanning-tree configuration Spanning-tree mode Spanning-tree hello-time Spanning-tree forward-time Syntax Spanning-tree max-age 6-40 no spanning-tree max-age Spanning-tree max-ageSpanning-tree max-hops Spanning-tree mst 32768 178 Cost auto Syntax Spanning-tree port mode no spanning-tree port mode Spanning-tree port mode Syntax Spanning-tree edgeport no spanning-tree edgeport Syntax Show logging Default SettingSpanning-tree edgeport Show logging Show logging traplog Syntax Show logging buffered Default SettingShow logging buffered Display Message Index used for deleting Syntax Show logging traplogs Default SettingSyntax Show logging hosts Default Setting Show logging hosts Syntax Logging buffered wrap no logging buffered wrap Logging bufferedSyntax Logging buffered no logging buffered Syntax Logging host hostaddress port severitylevel Logging consoleLogging host Syntax Logging console severitylevel 0-7 no logging console Syntax Logging host remove hostindex Syntax Logging host reconfigure hostindex hostaddress Syntax Logging syslog port portid no logging syslog port Logging syslogSyntax Logging syslog no logging syslog Syntax Script apply scriptname Syntax Clear logging buffered Default SettingScript apply Clear logging buffered Syntax Script list Script deleteScript list Syntax Script delete scriptname all Syntax Script show scriptname Script showShow users Username Syntax show users Default SettingSyntax Username username password nopassword No username username Username snmpv3 authentication Username snmpv3 encryption Show users authentication Syntax Show authentication Default Setting Show authenticationSyntax Show users authentication Default Setting Show dot1x Show authentication usersSyntax Show authentication users listname Syntax Show dot1x Default Setting Syntax Show dot1x detail slot/port Show dot1x detail Syntax Show dot1x statistics slot/port Show dot1x statistics Syntax Show dot1x users slot/port Show dot1x summaryShow dot1x users Syntax Show dot1x summary slot/port all Show radius-servers Syntax Show radius-servers Default SettingSecret Configured Yes / No Syntax show radius Default Setting Show radius accounting Radius Accounting Mode Disable or EnabledRadius Accounting Mode Enabled or disabled Secret Configured Yes or No Syntax Show radius statistics ipaddr Show radius statistics Show tacacs Syntax Show tacacs Default Setting Show port-security Syntax Show port-security Default Setting Syntax Show port-security static slot/port Default Setting Syntax Show port-security slot/port all Default SettingSyntax Show port-security dynamic slot/port Default Setting Authentication login Syntax Username defaultlogin listname Username defaultlogin Syntax Username login user listname Username login 3.1 dot1x initialize 3 Dot1x Configuration Commands3.2 dot1x default-login Syntax Dot1x defaultl-login listname 3.4 dot1x system-auth-control 3.3 dot1x loginSyntax Dot1x login user listname 3.6 dot1x port-control 3.5 dot1x user Auto Syntax Dot1x max-req 1-10 no dot1x max-req 3.8 dot1x re-authenticationSyntax Dot1x re-authentication no dot1x re-authentication 3.7 dot1x max-req Syntax Dot1x re-authenticate slot/port 3.9 dot1x re-reauthenticate3.10 dot1x timeout Syntax Radius accounting mode no radius accounting mode Radius Configuration CommandsRadius accounting mode Radius-server host Syntax Radius-server retransmit retries Radius-sever keyRadius-server retransmit Syntax Radius-server key acct auth ipaddr No radius-server retransmit Radius-server timeoutRadius-server msgauth Syntax Radius-server primary ipaddr Radius-server primarySyntax Radius-server msgauth ipaddr Tacacs Tacacs Configuration CommandsTacacs mode Syntax Tacacs mode 1-3 master slave no tacacs mode Syntax Tacacs port 1-3 1-65535 no tacacs port Tacacs server-ipTacacs port Syntax Tacacs server-ip 1-3 ipaddr no tacacs server-ip Syntax Tacacs retry 1-3 1-9 no tacacs retry Tacacs keyTacacs retry Syntax Tacacs key 1-3 no tacacs key Port-security Port Security Configuration CommandsTacacs timeout Syntax Tacacs timeout 1-3 1-255 no tacacs timeout Port-security max-static Port-security no port-security Default SettingPort-security max-dynamic Port-security mac-address Show cdp Syntax Port-security mac-address move Default SettingPort-security mac-address move Show cdp neighbors Show cdp Default SettingSyntax Show cdp neighbors Default Setting Syntax Cdp no cdp Syntax Show cdp traffic Default SettingShow cdp traffic 2.1 cdp Syntax Cdp run all no cdp run all Cdp runSyntax Cdp run no cdp run Syntax Cdp holdtime Cdp timerSyntax Cdp timer 5-254 no cdp timer Cdp holdtime Show sntp Syntax Show sntp Default SettingSyntax Show sntp client Default Setting Syntax Show sntp server Default Setting Sntp broadcast client poll-interval Sntp client mode Syntax Sntp unicast client poll-interval Sntp client portSntp unicast client poll-interval Syntax Sntp client port portid 6-10 no sntp client port No sntp unicast client poll-interval Sntp unicast client poll-timeoutSntp unicast client poll-retry Sntp server Clear arp ClearSntp clock timezone Clear traplog Syntax clear arp Default SettingSyntax clear traplog Default Setting Syntax Clear eventlog Default Setting Syntax clear config Default Setting Clear config Clear dns counter Syntax clear pass Default SettingClear pass Clear counters Clear cdp Syntax Clear dns counter Default SettingSyntax Clear dns cache Default Setting Clear dns cache Clear vlan Enable passwdSyntax clear vlan Default Setting Syntax Enable passwd Default Setting Clear port-channel Syntax Clear igmp snooping Default SettingSyntax Clear port-channel Default Setting Clear igmp snooping Clear radius statistics Clear ip filter Default SettingSyntax Clear radius statistics Default Setting Clear dot1x statistics Clear tacacs Syntax clear tacacs Default SettingCopy Privileged Exec Files download from PC to board Syntax Copy clibanner url copy url clibanner Syntax Copy running-config startup-config filename No clibanner Syntax Dir boot-rom config opcode filenameDelete 11.4 dir Display Message Column Description Headin WhichbootSyntax whichboot Default Setting Syntax Ping host Boot-systemSyntax Boot-system boot-rom config opcode filename Ping Traceroute Syntax Calendar set hhmmss 1-31 1-12 Logging cli-commandSyntax Logging cli-command Default Setting Calendar set Reload ConfigureSyntax reload slot Default Setting Syntax configure Default Setting Syntax Disconnect 0-10 all DisconnectHostname Quit Syntax Quit Default Setting Diffserv General Commands No diffserv Class CommandsSyntax Diffserv Command Mode Syntax No diffserv Command Mode Syntax No class-map class-map-name Class-mapNo class-map Syntax Class-map match-all class-map-name Match any DefaultSyntax Match any Default Class-map rename Syntax Match class-map refclassname Match class-mapNo match class-map Syntax Match dstip ipaddr ipmask Match dstipMatch dstl4port No match class-map refclassname Syntax Match ip dscp value Match ip dscp Syntax Match ip tos tosbits tosmask Syntax Match ip precedence DefaultMatch ip precedence Match ip tos Syntax Match srcip ipaddr ipmask Match protocolMatch srcip Syntax Match protocol protocol-name Syntax Match srcl4port portkey Match srcl4port Syntax Assign-queue Assign-queue Redirect Syntax Drop Command ModeSyntax Redirect slot/port Command Mode Drop Syntax Mark cos Conform-colorMark cos Syntax Conform-color class-map-name Mark ip-dscp ClassNo class Mark ip-dscp value Syntax Mark ip-precedence Command ModeMark ip-precedence Police-simple Policy-map rename Policy-map Policy-map rename policyname newpolicyname Service-policySyntax Service-policy in policy-map-name Syntax No service-policy in policy-map-name No service-policy Syntax Show class-map classname Show class-map Show diffserv Syntax Show diffserv Default Setting Syntax Show policy-map policy-map-name Show policy-map Show diffserv service Syntax Show diffserv service brief Default Setting Show diffserv service briefSyntax Show diffserv service slot/port Syntax Show policy-map interface slot/port Show policy-map interface Syntax Show service-policy Command Mode Show service-policy 280 Syntax Show mac access-list name Show mac access-lists Syntax Show ip access-lists Show ip access-listsSyntax Show mac access-list Default Setting Syntax Show access-lists interface slot/port Show access-lists interface Mac access-list extended Syntax Mac access-list extended rename name newname Mac access-list Mac access-group No access-list Access-list Syntax Ip access-group 1- 199 Ip access-groupNo access-list 1-99 Default Setting Syntax Show queue ip-precedence-mapping slot/port Show queue ip-precedence-mapping Syntax Show queue trust slot/port Show queue trust Syntax Show queue cos-queue slot/port Show queue cos-queue Syntax Queue cos-map all 0-7 0-6 no queue cos-map all Syntax Queue cos-map 0-7 0-6 no queue cos-map Queue ip-precedence-mapping Queue trust Queue cos-queue min-bandwidth Queue cos-queue strict Queue cos-queue traffic-shape 298 CLI Examples Vlan Routing ConfigurationVlan Routing Create Two VLANs Vlan Routing Example Network Diagram Using the Web Interface to Configure Vlan Routing Set Up Vlan Routing for the VLANs and the SwitchEnable routing for the switch Following are displayed for each ARP entry Syntax show ip arp Default SettingShow ip arp Show ip arp brief Show ip arp static Show ip arp brief Default SettingSyntax Show ip arp static Default Setting Syntax Ip proxy-arp no ip proxy-arp 2.1 arpIp proxy-arp Syntax Arp ipaddr macaddr no arp ipaddr macaddr Arp purge Arp cachesizeArp dynamicrenew Syntax Arp retries 0-10 no arp retries Arp resptimeArp retries Syntax Arp resptime 1-10 no arp resptime Show ip brief Arp timeoutSyntax Arp timeout 15-21600 no arp timeout Clear arp-cache Show ip interface port Show ip brief Default SettingSyntax Show ip interface port slot/port Default Setting Show ip route Syntax Show ip interface brief Default SettingSyntax Show ip route Default Setting Show ip interface brief Show ip route entry Syntax Show ip route bestroutes Default SettingShow ip route bestroutes Syntax Show ip route entry networkaddress Syntax Show ip route preferences Default SettingShow ip route precedence Syntax Routing no routing Syntax Show ip traffic Default SettingShow ip traffic Routing Syntax Ip routing no ip routing Ip routingIp route Ip route precedence Ip route default-next-hopSyntax Ip route default-next-hop nexthopip Syntax Ip forwarding no ip forwarding Ip forwardingIp directed-broadcast Syntax Ip route precedence Syntax Ip mtu 68-1500 no ip mtu Ip mtuEncapsulation No ip directed-broadcast Display Messages Syntax show ip ospf Default SettingShow ip ospf Restrictions Show ip ospf database Syntax Show ip ospf area areaid Default SettingShow ip ospf area Show ip ospf interface Syntax Show ip ospf database Default SettingSyntax Show ip ospf interface slot/port Default Setting Show ip ospf interface brief Syntax Show ip ospf interface brief Default Setting Syntax Show ip ospf neighbor ipaddr slot/port Show ip ospf interface statsShow ip ospf neighbor Syntax Show ip ospf interface stats slot/port Show ip ospf neighbor brief Syntax Show ip ospf range areaid Show ip ospf range Show ip ospf virtual-link Syntax Show ip ospf stub table Default SettingShow ip ospf stub table Show ip ospf virtual-link brief Syntax Show ip ospf virtual-link brief Default Setting No area EnableSyntax Enable no enable Syntax No area areaid Default Setting Syntax 1583compatibility no 1583compatibility Ip ospf2.4 1583compatibility Syntax Ip ospf no ip ospf Syntax Area areaid nssa no area areaid nssa Areaid Area ID Area default-costSyntax Area areaid default-cost Area nssa Area nssa no-redistribute Area nssa default-info-originate Area nssa translator-role Area nssa no-summary Syntax Area areaid nssa translator-stab-intv Areaid Area ID Area nssa translator-stab-intvArea range Syntax Area areaid stub no area areaid stub Areaid Area ID Area stubArea stub summarylsa Area virtual-link dead-interval Area virtual-link authentication Area virtual-link hello-interval Area virtual-link retransmit-interval Area virtual-link transmit-delay Syntax Default-metric 1-16777215 no default-metric Default-information originateDefault-metric Distribute-list out Distance ospf Exit-overflow-interval Syntax Ip ospf areaid areaid External-lsdb-limitIp ospf areaid Ip ospf cost Ip ospf authentication Syntax Ip ospf cost 1-65535 no ip ospf cost Ip ospf dead-interval Syntax Ip ospf priority 0-255 no ip ospf priority Ip ospf hello -intervalIp ospf priority Ip ospf retransmit-interval Ip ospf transmit-delay Syntax Ip ospf mtu-ignore no ip ospf mtu-ignore Ip ospf mtu-ignore Redistribute Router-id Syntax Maximum-paths 1-1 no maximum-paths Maximum-paths Syntax Bootpdhcprelay enable no bootpdhcprelay enable Bootpdhcprelay cidoptmode Bootpdhcprelay maxhopcount Bootpdhcprelay serverip Display Message Domain Name List Domain Name Syntax Show hosts Default SettingShow hosts Show dns Show dns cache Show dns Default SettingSyntax Show dns cache Default Setting Syntax Ip host name ipaddr no ip host name Syntax Clear hosts Default SettingIp hosts Clear hosts Syntax Ip domain-list name no ip domain-list name Ip domain-nameIp domain-list Syntax Ip domain-name name no ip domain-name name Syntax Ip domain-lookup no ip domain-lookup Ip name-serverIp domain-lookup Syntax Ip name-server ipaddr no ip name-server ipaddr Syntax Clear dns Syntax Clear domain-list Default SettingClear domain-list Clear dns This command clears all entries in the DNS cache table Show ip rip Syntax Show ip rip Default SettingDefault Route Advertise The default route Syntax Show ip rip interface slot/port Show ip rip interfaceShow ip rip interface brief Syntax Show ip rip interface brief Default Setting Enable rip Syntax Auto-summary no auto-summary Ip ripAuto-summary Syntax Ip rip no ip rip Syntax Default-metric 1-15 no default-metric Syntax Hostrouteaccept no hostrouteaccept Distance ripHostrouteaccept Syntax Distance rip 1-255 no distance rip Syntax Split-horizon none simple poison no split-horizon Split-horizonDistribute-list Format for other source protocols Ip rip authenticationFormat for Ospf as source protocol Ip rip receive version Ip rip send version Router Discovery Protocol Commands Syntax Ip irdp no ip irdp Show ip irdp slot/port all Syntax Ip irdp broadcast no ip irdp broadcast Ip irdp broadcast Ip irdp maxadvertinterval Ip irdp preference Syntax show ip vlan Default Setting Syntax Vlan routing vlanid no vlan routing vlanid Syntax show ip vrrp Default SettingShow ip vrrp Syntax Show ip vrrp interface slot/port vrid Syntax Show ip vrrp brief Default SettingShow ip vrrp brief Show ip vrrp interface Syntax Show ip vrrp interface stats slot/port vrid Show ip vrrp interface stats Ip vrrp Syntax Ip vrrp no ip vrrp Default Setting Ip vrrp 1-255 no ip vrrp Ip vrrp modeIp vrrp ip Ip vrrp preempt Ip vrrp authenticationSyntax Ip vrrp 1-255 mode no ip vrrp 1-255 mode Syntax Ip vrrp 1-255 preempt no ip vrrp 1-255 preempt Ip vrrp timers advertiseIp vrrp priority Default value of advertisement interval is 379 Show ip dvmrp Syntax Show ip dvmrp Default Setting Syntax Show ip dvmrp interface slot/port Syntax Show ip dvmrp neighbor Default SettingShow ip dvmrp interface Show ip dvmrp neighbor Syntax Show ip dvmrp prune Syntax Show ip dvmrp nexthop Default SettingShow ip dvmrp nexthop Show ip dvmrp prune Show ip dvmrp route Syntax Show ip dvmrp route Default Setting Syntax Ip dvmrp metric value no ip dvmrp metric value Ip dvmrpIp dvmrp metric Syntax Ip dvmrp no ip dvmrp Show ip igmp groups Syntax show ip igmp Default SettingShow ip igmp Syntax Show ip igmp interface slot/port Show ip igmp interfaceShow ip igmp groups slot/ports detail If detail is specified, the following fields are displayed Syntax Show ip igmp interface membership multiipaddr detail Show ip igmp interface membership Syntax Show ip igmp interface stats slot/port Show ip igmp interface statsIf detail is specified, the following fields are displayed Syntax Ip igmp version 1 2 3 no ip igmp version Ip igmpIp igmp version Syntax Ip igmp no ip igmp Ip igmp last-member-query-interval Ip igmp last-member-query-count Ip igmp query-max-response-time Ip igmp query-interval Syntax Ip igmp robustness 1-255 no ip igmp robustness Ip igmp robustnessIp igmp startup-query-count Show ip mcast Ip igmp startup-query-interval Syntax Show ip mcast boundary slot/port all Syntax Show ip mcast Default SettingShow ip mcast boundary Syntax Show ip mcast mroute detail summary Show ip mcast interfaceShow ip mcast mroute Syntax Show ip mcast interface slot/port Syntax Show ip mcast mroute group groupipaddr detail summary 397 Syntax Show ip mcast mroute static sourceipaddr Syntax show mrinfo Default SettingShow mrinfo Show mtrace Syntax show mstat Default SettingShow mstat Syntax Ip multicast no ip multicast Show mtrace Default SettingIp multicast No ip mcast mroute Ip multicast staticroute Ip mcast boundary Mrinfo Ip multicast ttl-threshold Syntax Mstat source group receiver MstatSyntax Mrinfo ipaddr Syntax Mtrace source group destination Disable ip multicast mdebug mtraceSyntax Disable ip multicast mdebug mtrace Mtrace Show ip pimdm No disable ip multicast mdebug mtraceSyntax Show ip pimdm Default Setting Syntax Show ip pimdm interface stats slot/port all Show ip pimdm interfaceShow ip pimdm interface stats Syntax Show ip pimdm interface slot/port Syntax Show ip pimdm neighbor slot/port all Show ip pimdm neighborIp pimdm Syntax Ip pimdm no ip pimdm Ip pimdm modeSyntax Ip pimdm mode no ip pimdm mode Ip pimdm query-interval Show ip pimsm Syntax Show ip pimsm Default Setting Syntax Show ip pimsm interface slot/port Syntax Show ip pimsm componenttable Default SettingShow ip pimsm componenttable Show ip pimsm interface Syntax Show ip pimsm interface stats slot/port all Show ip pimsm interface stats Syntax Show ip pimsm neighbor slot/port all Show ip pimsm neighborShow ip pimsm rp Syntax Show ip pimsm rphash group-address Show ip pimsm rphash Syntax Ip pimsm no ip pimsm Syntax Show ip pimsm staticrp Default SettingShow ip pimsm staticrp Ip pimsm Ip pimsm register-rate-limit Ip pimsm message-interval Ip pimsm staticrp Ip pimsm spt-threshold Syntax Ip pimsm mode no ip pimsm mode Ip pimsm mode Ip pimsm cbsrpreference Ip pimsm query-interval Ip pimsm crppreference Ip pimsm cbsrhashmasklength 421 422 Overview View ARP Cache Main Menu Viewing Inventory Information Non-Configurable Data Viewing System Description Configuring Management Session and Network ParametersCommand Buttons Configurable Data 427 428 Terminal interface via the EIA-232 port Configuring Network Connectivity Configuring Telnet Session Configuring Serial Port Configuring Outbound Telnet Client Configuration Selection Criteria Defining User Accounts 433 Defining Authentication List Configuration Viewing Login Session Defining User Login Viewing Authentication List Summary Defining Forwarding Database Configuring MAC Table aging interval time Viewing Forwarding Database Viewing Logs Viewing Buffered Log Configuration Viewing Buffered Log Configuring Console Log Configuring Command Logger Viewing Event Log Configuring Hosts configuration Configuring syslog configuration Configuring Switch Interface Managing Switch Interface 445 Non-Configurable Port Status Data Viewing Switch Interface Configuration Refresh Refresh the configuration value again 448 Defining Snmp Configuring Multiple Port Mirroring FunctionConfiguring Snmp Community Configuration 450 Configuring Snmp Trap Receiver Configuration Viewing Snmp supported MIBs Viewing Statistics Viewing the whole Switch Detailed Statistics 454 Viewing the whole Switch Summary Statistics Viewing Each Port Detailed Statistics 457 458 459 460 461 462 Viewing Each Port Summary Statistics Managing System Utilities Saving All Configuration ChangedResetting the Switch Restoring All Configuration to Default Values Downloading Specific Files to Switch Flash Resetting the Passwords to Default Values Uploading Specific Files from Switch Flash Removing Specific File Defining Configuration and Runtime Startup File Defining Ping Function Copying Running Configuration to Flash Managing CDP Function Defining CDP Configuration 470 Viewing Traffic Statistics Viewing Neighbors Information Non-Configurable Data Defining Trap Manager Configuring Trap Flags Viewing Trap Log Configuring Sntp Global Configuration Configuring Sntp Viewing Sntp Global Status Configuring Sntp Server Unknown IPV4 Viewing Sntp Server Status Configuring Current Time Settings Configuring Time Zone Settings Defining Dhcp Client Configuring Dhcp RestartConfiguring Dhcp Client-identifier Default Managing Port-based Vlan Configuring Port-based Vlan Configuration Viewing Port-based Vlan Information Configuring Vlan Port Configuration Viewing Vlan Port Summary Resetting Vlan Configuration Managing Protocol-based Vlan Protocol-based Vlan Configuration Viewing Protocol-based Vlan Information Viewing Garp Information Defining Garp Configuring the whole Switch Garp Configuration Configuring each Port Garp Configuration Managing Igmp Snooping Configuring Igmp Snooping Global Configuration Defining Igmp Snooping Interface Configuration Viewing Igmp Snooping Vlan Status Vlan ID Configuring Igmp Snooping Vlan Viewing Multicast Router Statistics Configuring Multicast Router Viewing Multicast Router Vlan Statistics Configuring Multicast Router Vlan Viewing L2 Multicast Group Information Configuring L2 Static Multicast Group Configuration 498 Viewing L2 Multicast Router Port Information Managing Port-Channel Configuring Port-Channel Configuration Viewing Port-Channel Information Viewing All of Multicast Forwarding Database Tables Viewing Multicast Forwarding Database Viewing Igmp Snooping Mfdb Table Viewing Gmrp Mfdb Table Viewing Multicast Forwarding Database Statistics Managing Spanning Tree Configuring Switch Spanning Tree ConfigurationConfiguring Spanning Tree CST Configuration 506 Configuring Spanning Tree MST Configuration Configuring each Port CST Configuration 509 Configuring each Port MST Configuration 511 Defining 802.1p Priority Mapping Viewing Spanning Tree StatisticsDefining 802.1p priority Managing Port Security Configuring Port Security Administration ModeConfiguring Port Security Interface Slot/Port Selects the interface to be configured Viewing Port Security Dynamically Learnt MAC Address Deleting Port Security Statically Configured MAC Address Creating ARP entries Viewing Port Security Violation StatusManaging ARP Table Configuring ARP Table ƒ All Dynamic Entries ƒ All Dynamic and Gateway Entries Managing IP Interfaces Configuring IP Viewing IP Statistics 521 522 523 Configuring IP Interfaces Managing Ospf Configuring Ospf 526 Configuring Area Authentication Type 529 Viewing Stub Area Summary Information Configuring Area Range View Interface Statistics 532 Configuring Ospf Interface 534 535 Viewing Neighbor Table Information Configuring Ospf Neighbor 538 Viewing Ospf Link State Database Configuring Ospf Virtual Link 541 542 Viewing Ospf Virtual Link Summary Table Configuring Ospf Route Redistribution Viewing Ospf Route Redistribution Summary Information Non Configurable Data Configuring BOOTP/DHCP Relay Agent Managing BOOTP/DHCP Relay Agent Viewing BOOTP/DHCP Relay Agent Status Managing DNS Relay Configuring DNS Relay Configuring Domain Name Viewing DNS Cache Summary Information Configuring Name Server Configuring DNS Host Managing Routing Information Protocol RIP Configuring RIP Global Configuration Viewing Each Routing Interface’s RIP Configuration Defining The Routing Interface’s RIP Configuration 555 Configuring Route Redistribution Configuration Internal External NSSA-External Viewing Route Redistribution Configuration Managing Router Discovery Configuring Router Discovery Viewing Router Discovery Status ƒ Ospf Intra ƒ Ospf Inter ƒ Local ƒ Static ƒ DefaultManaging Route Table Viewing Router Route Table ƒ Ospf Intra ƒ Ospf Inter ƒ Ospf Type-1 Viewing Router Best Route Tableƒ Ospf Type-1 ƒ Ospf Type-2 ƒ BGP4 ƒ Static ƒ Default Configuring Router Static Route Entry ƒ BGP4Local ƒ Ospf Intra ƒ Ospf Inter ƒ Ospf Type-1 ƒ Ospf Type-2 Configuring Router Route Preference Managing Vlan Routing Configuring Vlan Routing Instructions for creating a Vlan Viewing Vlan Routing Summary Information Managing Vrrp Configuring VrrpConfiguring Virtual Router 568 Viewing Virtual Router Status Pre-empt Mode ƒ Inactive ƒ Active ƒ Initialize ƒ Master ƒ BackupViewing Virtual Router Statistics ƒ None ƒ Simple 571 Defining Access Control Managing Access Control Configuring each Port Access Control Configuration Viewing each Port Access Control Configuration Information 575 576 Viewing Access Control Summary Viewing each Port Access Control Statistics Defining Access Control User Login Viewing each Port Access Privileges Summary Defining each Port Access Privileges Managing Radius Configuring Radius Configuration Viewing Radius Statistics Viewing Radius Server Statistics Configuring Radius Server Configuration 584 Defining Radius Accounting Server Configuration Viewing Radius Accounting Server Statistics Non-Configurable Statistics Configuring Tacacs Configuration Resetting All Radius StatisticsDefining Tacacs Configuration IP Filter Configuration Defining IP Filter Configuration Secure Http Configuration Defining Secure Http Configuration Configuring Secure Shell Configuration Defining Secure Shell Configuration Configuring IP Access Control List Configuration Managing Access Control Lists ƒ Inbound Viewing IP Access Control List SummaryConfiguring IP Access Control List Rule Configuration 593 ƒ IP TOS Configuration ƒ IP Dscp Configurationƒ IP Precedence Configuration Configuring MAC Access Control List Configuration Configuring MAC Access Control List Rule Configuration Viewing MAC Access Control List Summary ƒ IPv4 ƒ IPv6 ƒ Appletalk ƒ IP ACL ƒ MAC ACL Configuring Access Control List Interface Configuration Operation Managing Differentiated ServicesDefining DiffServ Configuration Configuring DiffServ Class Configuration Viewing DiffServ Class Summary DiffServ Policy Configuration Viewing DiffServ Policy Summary Configuring DiffServ Policy Class Definition Viewing DiffServ Policy Attribute Summary Configuring DiffServ Service Configuration Viewing DiffServ Service Statistics Viewing DiffServ Service Summary Viewing DiffServ Service Detailed Statistics Configuring Diffserv Wizard ƒ untrusted ƒ trust dot1p ƒ trust ip-precedence Managing Class of ServiceManaging Table Configuration Configuring CoS interface Configuring CoS interface queue ƒ taildrop ƒ strict ƒ weightedViewing CoS interface queue status Managing Dvmrp Protocol Configuring Dvmrp Global Configuration Configuring Dvmrp Interface Configuration Viewing Dvmrp Configuration Summary Refresh Refresh the screen with the new data Viewing Dvmrp Next Hop Configuration Summary Viewing Dvmrp Route Summary Viewing Dvmrp Prune Summary Managing Igmp Protocol Configuring Igmp Global Configuration Configuring Igmp Interface Configuration Viewing Igmp Configuration Summary 621 Viewing Igmp Cache Information Viewing Igmp Interface Membership Details Information Configuring Multicast Global Configuration Defining Multicast Configuration Viewing Multicast MRoute Summary Configuring Interface’s Multicast Configuration PIM-DM PIM-SM Dvmrp Configuring Multicast Static Routes Configuration Viewing Multicast Static Routes Configuration Viewing Multicast Admin Boundary Configuration Configuring Multicast Admin Boundary Configuration Viewing Mrinfo Summary Configuring Multicast MdebugConfiguring Mrinfo Run Configuring Mstat Run Viewing Mstat Summary Defining Mtrace Admin Configuration Configuring Mtrace Run Managing PIM-DM Protocol Configuring PIM-DM Global Admin ConfigurationViewing Mtrace Summary Viewing Interface’s PIM-DM Configuration Configuring Interface’s PIM-DM Configuration Managing PIM-SM Protocol Configuring PIM-SM Global Configuration Viewing PIM-SM Global Configuration Viewing Interface’s PIM-SM Configuration Configuring Interface’s PIM-SM Configuration Viewing PIM-SM Component Summary Viewing PIM-SM Candidate RP Summary Viewing PIM-SM RP Summary Configuring PIM-SM Static RP Configuration