Managing Access Control, Defining Access Control | Fortinet MR1

Refresh - Refresh the data on the screen with the present state of the data in the switch.

8.2.4Security Menu

8.2.4.1Managing Access Control (802.1x)

Defining Access Control Page

Configurable Data

Administrative Mode - This selector lists the two options for administrative mode: enable and disable. The default value is disabled.

572

Image 572

Fortinet MR1 manual Managing Access Control, Defining Access Control

Contents

FortiSwitch-100 Regulatory compliance FortiSwitch-100 Userl GuideTrademarks Table of Contents Switching Commands System Information and Statistics commands 107 125 135 164 181 193 188190 225 230 236 254 281 288 Address Resolution Protocol ARP Commands 302 307 317 346 366 350357 371 Internet Group Management Protocol Igmp Commands 385370 393 406 424 410423 Defining Forwarding Database 437 591 Introduction Page Front-Panel Components Management Options RFC 1850 OSPF-TRAP-MIB Installation and Quick Startup Installing the Switch in a Rack Show switch Quick Start up Physical Port Command DetailsQuick Start up Software Version Information Quick Start up Physical Port Data Show loginsession Quick Start up User Account ManagementShow Interface status slot/port all Nopasswd Copy running-config Startup-config filenameQuick Start up IP Address Command Details Quick Start up IP Address Xmodem Show ip interfaceIp address Filename Quick Start up Factory DefaultsQuick Start up Downloading from Tftp Server Connecting Devices to the Switch Updating the Image Code on the SwitchReload To connect a device to an SFP transceiver port To configure a dynamic IP address using Dhcp To manually configure a static IP address Use the Tftp function to upgrade the code Tftp Troubleshooting the Download Procedure Set Up your Switch Using Console Access Set Up your Switch Using Telnet Access Web-Based Management Interface System Information Menus Switching System Routing SecurityQoS IP Multicast System-wide menus Port-Specific Popup Menus Parameters Example IP address ipaddr netmask gatewayExample Clear vlan Values Network Address Syntax Format Type IPAddrMacAddr Range Annotations Show arp Show calendar Syntax Show eventlog unit Show calendar Default SettingShow eventlog Show running-config Syntax Show running-config all scriptnameSyntax show sysinfo Default Setting Show sysinfo Syntax Show hardware Default Setting Show hardware Show loginsession Syntax Show loginsession Default SettingInterface Show interface status Show interface counters Syntax Show interface counters slot/port all Syntax Show interface counters detailed slot/port switchport Command Mode Total Packets Received Without Errors Total Packets Received with MAC ErrorsTotal Packets Transmitted Octets Total Packets Transmitted Successfully Total Transmit Errors Total Transmited Packets Discards Show interface switch Syntax Show interface switch Default Setting Syntax Interface slot/port InterfaceSpeed-duplex Negotiate Speed-duplex 10 100 full-duplex half-duplexSyntax Speed-duplex all 10 100 full-duplex half-duplex Full duplex Full duplex half duplex Half duplex Syntax Negotiate all no negotiate all CapabilitiesNegotiate no negotiate Storm-control flowcontrol Shutdown Syntax Shutdown no shutdown Syntax Shutdown all no shutdown all Syntax Show mac-addr-table macaddr all 2 L2 MAC Address and Multicast Forwarding Database TablesShow mac-addr-table Syntax Show mac-address-table gmrp Default Setting Syntax Show mac-address-table igmpsnooping Default SettingShow mac-address-table gmrp Show mac-address-table igmpsnooping Show mac-address-table multicast Syntax Show mac-address-table multicast macaddr vlanid all Syntax Show mac-address-table stats Default Setting Syntax Show mac-address-table agetime Default SettingShow mac-address-table stats Show mac-address-table agetime Show vlan Syntax show vlan Default SettingVlan Management Show vlan id Syntax Show vlan id vlanid name vlanname Show interface switchport Syntax Show interface switchport slot/port allShow protocol group Syntax Show protocol group group-name all Vlan Syntax Vlan database Default SettingVlan database Vlan name Vlan vlanid name no vlan vlanid Syntax Vlan makestatic vlanid Vlan makestaticProtocol group Switchport acceptable-frame-type Switchport ingress-filtering Syntax Switchport ingress-filtering all Switchport native vlan No switchport ingress-filtering allDefault Setting Command Mode Syntax Switchport native vlan all vlanid Switchport allowed vlan Switchport tagging Syntax Switchport priority Switchport prioritySyntax Switchport tagging all vlanid Switchport protocol group Syntax Switchport priority all Default Setting Switchport forbidden vlan Show bridge-ext Syntax Show bridge-ext Default SettingGvrp and Bridge Extension Show gvrp configuration Syntax Show gvrp configuration slot/port all Syntax Show gmrp configuration slot/port all Show gmrp configurationShow garp configuration Syntax Bridge-ext gvrp no bridge-ext gvrp Syntax Show garp configuration slot/port allBridge-ext gvrp Switchport gvrp Syntax Switchport gvrp no switchport gvrpBridge-ext gmrp Syntax Bridge-ext gmrp no bridge-ext gmrp Syntax Switchport gmrp no switchport gmrp Switchport gmrpSyntax Switchport gvrp all no switchport gvrp all Syntax Garp timer join 10-100 no garp timer join Garp timerSyntax Switchport gmrp all no switchport gmrp all Syntax Garp timer join all 10-100 no garp timer join all Syntax Garp timer leave 20-600 no garp timer leave Syntax Garp timer leave all 20-600 no garp timer leave all Syntax Garp timer leaveall 200-6000 no garp timer leaveall Show Commands Syntax Show ip igmp snooping Default SettingIgmp Snooping Show ip igmp snooping Show ip igmp snooping mrouter Show ip igmp snooping multicast Syntax Show ip igmp snooping Configuration Commands Ip igmp snoopingIp igmp snooping groupmembershipinterval Syntax Ip igmp snooping no igmp snooping Ip igmp snooping interfacemode Syntax Ip igmp snooping interfacemode all Ip igmp snooping mcrtrexpiretime Ip igmp snooping max-response-time Ip igmp snooping immediate-leave Ip igmp snooping mrouter Command Usage Ip igmp snooping vlan staticSet igmp Syntax Set igmp 1-3965 no set igmp Set igmp groupmembership-interval Set igmp maxresponse Set igmp mcrtexpiretime Set igmp fast-leave Syntax Set igmp fast-leave 1-3965 no set igmp fast-leave Syntax Show port-channel Default Setting Port ChannelShow port-channel Syntax Show port-channel logical slot/port all Port-channel Syntax Staticcapability no staticcapability Port-channel adminmode allStaticcapability Port-channel linktrap Port-channel name Adminmode Syntax Adminmode no adminmodeLacp Port-channel name logical slot/port all name Syntax Lacp all no lacp all Channel-groupSyntax Lacp no lacp Syntax Delete-channel-group logical slot/port Delete-channel-groupSyntax Channel-group logical slot/port Syntax Show storm-control broadcast Default Setting Storm ControlShow storm-control Syntax Delete-channel-group logical slot/port all Syntax Show storm-control multicast Default Setting Syntax Show storm-control unicast Default Setting Storm-control broadcast Syntax Storm-control broadcast no storm-control broadcast Storm-control multicast Syntax Storm-control multicast no storm-control multicast Storm-control unicast Syntax Storm-control unicast no storm-control unicast Syntax Switchport broadcast all packet-rate 1 2 3 Switchport broadcast packet-rateSyntax Switchport broadcast packet-rate 1 2 3 Syntax Switchport multicast all packet-rate 1 2 3 Switchport multicast packet-rateSyntax Switchport multicast packet-rate 1 2 3 Switchport unicast packet-rate Syntax Switchport unicast packet-rate 1 2 3 Switchport unicast all packet-rate 1 2 3 8 L2 PriorityShow queue cos-map Syntax Show queue cos-map slot/port Port Mirror Queue cos-mapShow port-monitor session Syntax Queue cos-map priority queue-id no queue cos-map Port-monitor session Network Commands Port-monitor session modeSyntax No port-monitor Default Setting Show ip interface Show ip filter Syntax Show ip interface Default SettingSyntax show ip filter Default Setting Syntax show ip ipv6 Default Setting Show ip ipv61.4 mtu Syntax Mtu 1518-9216 no mtu Syntax Interface vlan vlanid Interface vlanIp address Ip default-gateway Syntax Ip default-gateway gateway no ip default-gatewaySyntax Ip address protocol bootp dhcp none Ip address protocol Syntax Ip filter ipaddr no ip filter ipaddr Ip filterSyntax Ip filter no ip filter Syntax Ip ipv6 all no ip ipv6 all Ip ipv6Syntax Ip ipv6 no ip ipv6 Serial Interface Commands Syntax Show line console Default SettingShow line console Line console Exec-timeout Syntax Line console Default SettingSyntax Exec-timeout Baudrate Password-threshold Syntax Password-threshold 0-120 no password-thresholdSilent-time Syntax Silent-time Telnet Session Commands TelnetShow line vty Syntax Telnet host port debug line echo Line vty Syntax Show line vty Default SettingSyntax line vty Default Setting Syntax Exec-timeout 1-160 no exec-timeout Maxsessions SessionsSyntax Maxsessions 0-5 no maxsessions Syntax Sessions no sessions Syntax Telnet sessions no telnet sessions Telnet sessionsTelnet maxsessions Syntax Telnet maxsessions 0-5 no maxsessions Telnet exec-timeoutSyntax Telnet exec-timeout 1-160 no telnet exec-timeout Snmp Server Commands Syntax show telnet Default SettingShow telnet Show snmp Show trapflags Syntax Show snmp Default SettingSyntax Show trapflags Default Setting Syntax Snmp-server sysname name Snmp-server sysnameSnmp-server location Snmp-server contact Snmp-server communitySnmp-server location loc Syntax Snmp-server contact con 145 Syntax Snmp-server community ro rw name Snmp-server enable traps Snmp-server host No This command disables the Authentication trap No This command disables Multiple User trap Global Config This command enables PIM traps Snmp Trap Commands Syntax Show snmptrap Default SettingShow snmptrap Snmp trap link-status No snmp trap link-status Snmptrap name ipaddr Snmptrap ipaddrSyntax Snmptrap name ipaddr no snmptrap name ipaddr Syntax Snmptrap ipaddr name ipaddr ipaddrnew Http commands Snmptrap modeShow ip http Syntax Show ip http Syntax Ip javamode no ip javamode Ip javamodeIp http port Syntax Ip http server no ip http server Ip http serverSyntax Ip http port 1-65535 no ip http port Ip http secure-port Ip http secure-serverSyntax Ip http secure-port portid no ip http secure-port Syntax Ip http secure-server no ip http secure-server Secure Shell SSH Commands Syntax Show ip ssh Default SettingIp http secure-protocol Show ip ssh Ip ssh Ip ssh protocolSyntax Ip ssh no ip ssh Syntax Ip ssh protocol protocollevel1 protocollevel2 Ip ssh timeout Syntax Ip ssh timeout 1-160 no ip ssh timeoutIp ssh maxsessions Syntax Ip ssh maxsessions 0-5 no ip ssh maxsessions Dhcp Client Commands Syntax Ip dhcp restart Default SettingIp dhcp restart Ip dhcp client-identifier Dhcp Relay Commands Show bootpdhcprelaySyntax Show bootpdhcprelay Default Setting No ip dhcp client-identifier Bootpdhcprelay maxhopcount Bootpdhcprelay serverip Show spanning-tree Show CommandsSyntax Show spanning-tree Default Setting Display Message Bridge Priority Configured value Show spanning-tree interfaceTime Since Topology Change In seconds Syntax Show spanning-tree interface slot/port Show spanning-tree vlan Show spanning-tree mstSyntax Show spanning-tree vlan Display Message Vlan Identifier displays Vlan ID Syntax Show spanning-tree mst summary Default Setting Syntax Show spanning-tree mst detailed Syntax Show spanning-tree mst port detailed 0-4094 slot/port 169 Syntax Show spanning-tree summary Default Setting Display Message Spanning Tree Adminmode Enabled or disabledShow spanning-tree summary Show spanning-tree brief Configuration Commands Spanning-treeSpanning-tree protocol-migration Syntax Spanning-tree no spanning-tree Spanning-tree configuration Spanning-tree mode Spanning-tree forward-time Spanning-tree hello-time Syntax Spanning-tree max-age 6-40 no spanning-tree max-age Spanning-tree max-ageSpanning-tree max-hops Spanning-tree mst 32768 178 Cost auto Spanning-tree port mode Syntax Spanning-tree port mode no spanning-tree port mode Syntax Show logging Default Setting Spanning-tree edgeportShow logging Syntax Spanning-tree edgeport no spanning-tree edgeport Show logging traplog Syntax Show logging buffered Default SettingShow logging buffered Syntax Show logging traplogs Default Setting Syntax Show logging hosts Default SettingShow logging hosts Display Message Index used for deleting Syntax Logging buffered wrap no logging buffered wrap Logging bufferedSyntax Logging buffered no logging buffered Logging console Logging hostSyntax Logging console severitylevel 0-7 no logging console Syntax Logging host hostaddress port severitylevel Syntax Logging host reconfigure hostindex hostaddress Syntax Logging host remove hostindex Syntax Logging syslog port portid no logging syslog port Logging syslogSyntax Logging syslog no logging syslog Syntax Clear logging buffered Default Setting Script applyClear logging buffered Syntax Script apply scriptname Script delete Script listSyntax Script delete scriptname all Syntax Script list Syntax Script show scriptname Script showShow users Username Syntax show users Default SettingSyntax Username username password nopassword Username snmpv3 authentication No username username Show users authentication Username snmpv3 encryption Syntax Show authentication Default Setting Show authenticationSyntax Show users authentication Default Setting Show authentication users Syntax Show authentication users listnameSyntax Show dot1x Default Setting Show dot1x Show dot1x detail Syntax Show dot1x detail slot/port Show dot1x statistics Syntax Show dot1x statistics slot/port Show dot1x summary Show dot1x usersSyntax Show dot1x summary slot/port all Syntax Show dot1x users slot/port Syntax Show radius-servers Default Setting Secret Configured Yes / NoSyntax show radius Default Setting Show radius-servers Radius Accounting Mode Disable or Enabled Radius Accounting Mode Enabled or disabledSecret Configured Yes or No Show radius accounting Show radius statistics Syntax Show radius statistics ipaddr Syntax Show tacacs Default Setting Show tacacs Syntax Show port-security Default Setting Show port-security Syntax Show port-security static slot/port Default Setting Syntax Show port-security slot/port all Default SettingSyntax Show port-security dynamic slot/port Default Setting Authentication login Username defaultlogin Syntax Username defaultlogin listname Username login Syntax Username login user listname 3 Dot1x Configuration Commands 3.2 dot1x default-loginSyntax Dot1x defaultl-login listname 3.1 dot1x initialize 3.4 dot1x system-auth-control 3.3 dot1x loginSyntax Dot1x login user listname 3.5 dot1x user 3.6 dot1x port-control Auto 3.8 dot1x re-authentication Syntax Dot1x re-authentication no dot1x re-authentication3.7 dot1x max-req Syntax Dot1x max-req 1-10 no dot1x max-req Syntax Dot1x re-authenticate slot/port 3.9 dot1x re-reauthenticate3.10 dot1x timeout Syntax Radius accounting mode no radius accounting mode Radius Configuration CommandsRadius accounting mode Radius-server host Radius-sever key Radius-server retransmitSyntax Radius-server key acct auth ipaddr Syntax Radius-server retransmit retries No radius-server retransmit Radius-server timeoutRadius-server msgauth Syntax Radius-server primary ipaddr Radius-server primarySyntax Radius-server msgauth ipaddr Tacacs Configuration Commands Tacacs modeSyntax Tacacs mode 1-3 master slave no tacacs mode Tacacs Tacacs server-ip Tacacs portSyntax Tacacs server-ip 1-3 ipaddr no tacacs server-ip Syntax Tacacs port 1-3 1-65535 no tacacs port Tacacs key Tacacs retrySyntax Tacacs key 1-3 no tacacs key Syntax Tacacs retry 1-3 1-9 no tacacs retry Port Security Configuration Commands Tacacs timeoutSyntax Tacacs timeout 1-3 1-255 no tacacs timeout Port-security Port-security max-static Port-security no port-security Default SettingPort-security max-dynamic Port-security mac-address Show cdp Syntax Port-security mac-address move Default SettingPort-security mac-address move Show cdp neighbors Show cdp Default SettingSyntax Show cdp neighbors Default Setting Syntax Show cdp traffic Default Setting Show cdp traffic2.1 cdp Syntax Cdp no cdp Syntax Cdp run all no cdp run all Cdp runSyntax Cdp run no cdp run Cdp timer Syntax Cdp timer 5-254 no cdp timerCdp holdtime Syntax Cdp holdtime Show sntp Syntax Show sntp Default SettingSyntax Show sntp client Default Setting Syntax Show sntp server Default Setting Sntp client mode Sntp broadcast client poll-interval Sntp client port Sntp unicast client poll-intervalSyntax Sntp client port portid 6-10 no sntp client port Syntax Sntp unicast client poll-interval No sntp unicast client poll-interval Sntp unicast client poll-timeoutSntp unicast client poll-retry Sntp server Clear arp ClearSntp clock timezone Syntax clear arp Default Setting Syntax clear traplog Default SettingSyntax Clear eventlog Default Setting Clear traplog Clear config Syntax clear config Default Setting Syntax clear pass Default Setting Clear passClear counters Clear dns counter Syntax Clear dns counter Default Setting Syntax Clear dns cache Default SettingClear dns cache Clear cdp Enable passwd Syntax clear vlan Default SettingSyntax Enable passwd Default Setting Clear vlan Syntax Clear igmp snooping Default Setting Syntax Clear port-channel Default SettingClear igmp snooping Clear port-channel Clear ip filter Default Setting Syntax Clear radius statistics Default SettingClear dot1x statistics Clear radius statistics Clear tacacs Syntax clear tacacs Default SettingCopy Privileged Exec Files download from PC to board Syntax Copy running-config startup-config filename Syntax Copy clibanner url copy url clibanner Syntax Dir boot-rom config opcode filename Delete11.4 dir No clibanner Display Message Column Description Headin WhichbootSyntax whichboot Default Setting Boot-system Syntax Boot-system boot-rom config opcode filenamePing Syntax Ping host Traceroute Logging cli-command Syntax Logging cli-command Default SettingCalendar set Syntax Calendar set hhmmss 1-31 1-12 Configure Syntax reload slot Default SettingSyntax configure Default Setting Reload Syntax Disconnect 0-10 all DisconnectHostname Syntax Quit Default Setting Quit General Commands Diffserv Class Commands Syntax Diffserv Command ModeSyntax No diffserv Command Mode No diffserv Class-map No class-mapSyntax Class-map match-all class-map-name Syntax No class-map class-map-name Default Syntax Match any DefaultClass-map rename Match any Syntax Match class-map refclassname Match class-mapNo match class-map Match dstip Match dstl4portNo match class-map refclassname Syntax Match dstip ipaddr ipmask Match ip dscp Syntax Match ip dscp value Syntax Match ip precedence Default Match ip precedenceMatch ip tos Syntax Match ip tos tosbits tosmask Match protocol Match srcipSyntax Match protocol protocol-name Syntax Match srcip ipaddr ipmask Match srcl4port Syntax Match srcl4port portkey Assign-queue Syntax Assign-queue Syntax Drop Command Mode Syntax Redirect slot/port Command ModeDrop Redirect Conform-color Mark cosSyntax Conform-color class-map-name Syntax Mark cos Mark ip-dscp ClassNo class Syntax Mark ip-precedence Command Mode Mark ip-precedencePolice-simple Mark ip-dscp value Policy-map Policy-map rename Policy-map rename policyname newpolicyname Service-policySyntax Service-policy in policy-map-name No service-policy Syntax No service-policy in policy-map-name Show class-map Syntax Show class-map classname Syntax Show diffserv Default Setting Show diffserv Show policy-map Syntax Show policy-map policy-map-name Show diffserv service Syntax Show diffserv service brief Default Setting Show diffserv service briefSyntax Show diffserv service slot/port Show policy-map interface Syntax Show policy-map interface slot/port Show service-policy Syntax Show service-policy Command Mode 280 Show mac access-lists Syntax Show mac access-list name Syntax Show ip access-lists Show ip access-listsSyntax Show mac access-list Default Setting Show access-lists interface Syntax Show access-lists interface slot/port Mac access-list extended Mac access-list Syntax Mac access-list extended rename name newname Mac access-group Access-list No access-list Syntax Ip access-group 1- 199 Ip access-groupNo access-list 1-99 Default Setting Show queue ip-precedence-mapping Syntax Show queue ip-precedence-mapping slot/port Show queue trust Syntax Show queue trust slot/port Show queue cos-queue Syntax Show queue cos-queue slot/port Syntax Queue cos-map 0-7 0-6 no queue cos-map Syntax Queue cos-map all 0-7 0-6 no queue cos-map all Queue ip-precedence-mapping Queue trust Queue cos-queue min-bandwidth Queue cos-queue strict Queue cos-queue traffic-shape 298 CLI Examples Vlan Routing ConfigurationVlan Routing Vlan Routing Example Network Diagram Create Two VLANs Using the Web Interface to Configure Vlan Routing Set Up Vlan Routing for the VLANs and the SwitchEnable routing for the switch Syntax show ip arp Default Setting Show ip arpShow ip arp brief Following are displayed for each ARP entry Show ip arp static Show ip arp brief Default SettingSyntax Show ip arp static Default Setting 2.1 arp Ip proxy-arpSyntax Arp ipaddr macaddr no arp ipaddr macaddr Syntax Ip proxy-arp no ip proxy-arp Arp purge Arp cachesizeArp dynamicrenew Arp resptime Arp retriesSyntax Arp resptime 1-10 no arp resptime Syntax Arp retries 0-10 no arp retries Arp timeout Syntax Arp timeout 15-21600 no arp timeoutClear arp-cache Show ip brief Show ip interface port Show ip brief Default SettingSyntax Show ip interface port slot/port Default Setting Syntax Show ip interface brief Default Setting Syntax Show ip route Default SettingShow ip interface brief Show ip route Show ip route entry Syntax Show ip route bestroutes Default SettingShow ip route bestroutes Syntax Show ip route entry networkaddress Syntax Show ip route preferences Default SettingShow ip route precedence Syntax Show ip traffic Default Setting Show ip trafficRouting Syntax Routing no routing Syntax Ip routing no ip routing Ip routingIp route Ip route precedence Ip route default-next-hopSyntax Ip route default-next-hop nexthopip Ip forwarding Ip directed-broadcastSyntax Ip route precedence Syntax Ip forwarding no ip forwarding Ip mtu EncapsulationNo ip directed-broadcast Syntax Ip mtu 68-1500 no ip mtu Syntax show ip ospf Default Setting Show ip ospfRestrictions Display Messages Show ip ospf database Syntax Show ip ospf area areaid Default SettingShow ip ospf area Show ip ospf interface Syntax Show ip ospf database Default SettingSyntax Show ip ospf interface slot/port Default Setting Syntax Show ip ospf interface brief Default Setting Show ip ospf interface brief Show ip ospf interface stats Show ip ospf neighborSyntax Show ip ospf interface stats slot/port Syntax Show ip ospf neighbor ipaddr slot/port Show ip ospf neighbor brief Show ip ospf range Syntax Show ip ospf range areaid Show ip ospf virtual-link Syntax Show ip ospf stub table Default SettingShow ip ospf stub table Syntax Show ip ospf virtual-link brief Default Setting Show ip ospf virtual-link brief Enable Syntax Enable no enableSyntax No area areaid Default Setting No area Ip ospf 2.4 1583compatibilitySyntax Ip ospf no ip ospf Syntax 1583compatibility no 1583compatibility Area default-cost Syntax Area areaid default-costArea nssa Syntax Area areaid nssa no area areaid nssa Areaid Area ID Area nssa default-info-originate Area nssa no-redistribute Area nssa no-summary Area nssa translator-role Syntax Area areaid nssa translator-stab-intv Areaid Area ID Area nssa translator-stab-intvArea range Syntax Area areaid stub no area areaid stub Areaid Area ID Area stubArea stub summarylsa Area virtual-link authentication Area virtual-link dead-interval Area virtual-link hello-interval Area virtual-link transmit-delay Area virtual-link retransmit-interval Syntax Default-metric 1-16777215 no default-metric Default-information originateDefault-metric Distance ospf Distribute-list out Exit-overflow-interval Syntax Ip ospf areaid areaid External-lsdb-limitIp ospf areaid Ip ospf authentication Ip ospf cost Ip ospf dead-interval Syntax Ip ospf cost 1-65535 no ip ospf cost Syntax Ip ospf priority 0-255 no ip ospf priority Ip ospf hello -intervalIp ospf priority Ip ospf transmit-delay Ip ospf retransmit-interval Ip ospf mtu-ignore Syntax Ip ospf mtu-ignore no ip ospf mtu-ignore Router-id Redistribute Maximum-paths Syntax Maximum-paths 1-1 no maximum-paths Bootpdhcprelay cidoptmode Syntax Bootpdhcprelay enable no bootpdhcprelay enable Bootpdhcprelay maxhopcount Bootpdhcprelay serverip Syntax Show hosts Default Setting Show hostsShow dns Display Message Domain Name List Domain Name Show dns cache Show dns Default SettingSyntax Show dns cache Default Setting Syntax Clear hosts Default Setting Ip hostsClear hosts Syntax Ip host name ipaddr no ip host name Ip domain-name Ip domain-listSyntax Ip domain-name name no ip domain-name name Syntax Ip domain-list name no ip domain-list name Ip name-server Ip domain-lookupSyntax Ip name-server ipaddr no ip name-server ipaddr Syntax Ip domain-lookup no ip domain-lookup Syntax Clear domain-list Default Setting Clear domain-listClear dns Syntax Clear dns This command clears all entries in the DNS cache table Show ip rip Syntax Show ip rip Default SettingDefault Route Advertise The default route Syntax Show ip rip interface slot/port Show ip rip interfaceShow ip rip interface brief Enable rip Syntax Show ip rip interface brief Default Setting Ip rip Auto-summarySyntax Ip rip no ip rip Syntax Auto-summary no auto-summary Syntax Default-metric 1-15 no default-metric Distance rip HostrouteacceptSyntax Distance rip 1-255 no distance rip Syntax Hostrouteaccept no hostrouteaccept Syntax Split-horizon none simple poison no split-horizon Split-horizonDistribute-list Format for other source protocols Ip rip authenticationFormat for Ospf as source protocol Ip rip receive version Router Discovery Protocol Commands Ip rip send version Show ip irdp slot/port all Syntax Ip irdp no ip irdp Ip irdp broadcast Syntax Ip irdp broadcast no ip irdp broadcast Ip irdp maxadvertinterval Syntax show ip vlan Default Setting Ip irdp preference Syntax Vlan routing vlanid no vlan routing vlanid Syntax show ip vrrp Default SettingShow ip vrrp Syntax Show ip vrrp brief Default Setting Show ip vrrp briefShow ip vrrp interface Syntax Show ip vrrp interface slot/port vrid Show ip vrrp interface stats Syntax Show ip vrrp interface stats slot/port vrid Syntax Ip vrrp no ip vrrp Default Setting Ip vrrp Ip vrrp 1-255 no ip vrrp Ip vrrp modeIp vrrp ip Ip vrrp preempt Ip vrrp authenticationSyntax Ip vrrp 1-255 mode no ip vrrp 1-255 mode Syntax Ip vrrp 1-255 preempt no ip vrrp 1-255 preempt Ip vrrp timers advertiseIp vrrp priority Default value of advertisement interval is 379 Syntax Show ip dvmrp Default Setting Show ip dvmrp Syntax Show ip dvmrp neighbor Default Setting Show ip dvmrp interfaceShow ip dvmrp neighbor Syntax Show ip dvmrp interface slot/port Syntax Show ip dvmrp nexthop Default Setting Show ip dvmrp nexthopShow ip dvmrp prune Syntax Show ip dvmrp prune Syntax Show ip dvmrp route Default Setting Show ip dvmrp route Ip dvmrp Ip dvmrp metricSyntax Ip dvmrp no ip dvmrp Syntax Ip dvmrp metric value no ip dvmrp metric value Show ip igmp groups Syntax show ip igmp Default SettingShow ip igmp Show ip igmp interface Show ip igmp groups slot/ports detailIf detail is specified, the following fields are displayed Syntax Show ip igmp interface slot/port Show ip igmp interface membership Syntax Show ip igmp interface membership multiipaddr detail Syntax Show ip igmp interface stats slot/port Show ip igmp interface statsIf detail is specified, the following fields are displayed Ip igmp Ip igmp versionSyntax Ip igmp no ip igmp Syntax Ip igmp version 1 2 3 no ip igmp version Ip igmp last-member-query-count Ip igmp last-member-query-interval Ip igmp query-interval Ip igmp query-max-response-time Syntax Ip igmp robustness 1-255 no ip igmp robustness Ip igmp robustnessIp igmp startup-query-count Ip igmp startup-query-interval Show ip mcast Syntax Show ip mcast boundary slot/port all Syntax Show ip mcast Default SettingShow ip mcast boundary Show ip mcast interface Show ip mcast mrouteSyntax Show ip mcast interface slot/port Syntax Show ip mcast mroute detail summary Syntax Show ip mcast mroute group groupipaddr detail summary 397 Syntax Show ip mcast mroute static sourceipaddr Syntax show mrinfo Default SettingShow mrinfo Show mtrace Syntax show mstat Default SettingShow mstat Syntax Ip multicast no ip multicast Show mtrace Default SettingIp multicast Ip multicast staticroute No ip mcast mroute Ip mcast boundary Ip multicast ttl-threshold Mrinfo Syntax Mstat source group receiver MstatSyntax Mrinfo ipaddr Disable ip multicast mdebug mtrace Syntax Disable ip multicast mdebug mtraceMtrace Syntax Mtrace source group destination Show ip pimdm No disable ip multicast mdebug mtraceSyntax Show ip pimdm Default Setting Show ip pimdm interface Show ip pimdm interface statsSyntax Show ip pimdm interface slot/port Syntax Show ip pimdm interface stats slot/port all Syntax Show ip pimdm neighbor slot/port all Show ip pimdm neighborIp pimdm Ip pimdm mode Syntax Ip pimdm mode no ip pimdm modeIp pimdm query-interval Syntax Ip pimdm no ip pimdm Syntax Show ip pimsm Default Setting Show ip pimsm Syntax Show ip pimsm componenttable Default Setting Show ip pimsm componenttableShow ip pimsm interface Syntax Show ip pimsm interface slot/port Show ip pimsm interface stats Syntax Show ip pimsm interface stats slot/port all Syntax Show ip pimsm neighbor slot/port all Show ip pimsm neighborShow ip pimsm rp Show ip pimsm rphash Syntax Show ip pimsm rphash group-address Syntax Show ip pimsm staticrp Default Setting Show ip pimsm staticrpIp pimsm Syntax Ip pimsm no ip pimsm Ip pimsm message-interval Ip pimsm register-rate-limit Ip pimsm spt-threshold Ip pimsm staticrp Ip pimsm mode Syntax Ip pimsm mode no ip pimsm mode Ip pimsm query-interval Ip pimsm cbsrpreference Ip pimsm cbsrhashmasklength Ip pimsm crppreference 421 422 Overview Main Menu View ARP Cache Non-Configurable Data Viewing Inventory Information Configuring Management Session and Network Parameters Command ButtonsConfigurable Data Viewing System Description 427 428 Configuring Network Connectivity Terminal interface via the EIA-232 port Configuring Telnet Session Configuring Outbound Telnet Client Configuration Configuring Serial Port Defining User Accounts Selection Criteria 433 Defining Authentication List Configuration Viewing Login Session Viewing Authentication List Summary Defining User Login Configuring MAC Table aging interval time Defining Forwarding Database Viewing Forwarding Database Viewing Buffered Log Configuration Viewing Logs Viewing Buffered Log Configuring Command Logger Configuring Console Log Configuring Hosts configuration Viewing Event Log Configuring syslog configuration Managing Switch Interface Configuring Switch Interface 445 Viewing Switch Interface Configuration Non-Configurable Port Status Data Refresh Refresh the configuration value again 448 Defining Snmp Configuring Multiple Port Mirroring FunctionConfiguring Snmp Community Configuration 450 Configuring Snmp Trap Receiver Configuration Viewing Snmp supported MIBs Viewing the whole Switch Detailed Statistics Viewing Statistics 454 Viewing the whole Switch Summary Statistics Viewing Each Port Detailed Statistics 457 458 459 460 461 462 Viewing Each Port Summary Statistics Saving All Configuration Changed Resetting the SwitchRestoring All Configuration to Default Values Managing System Utilities Resetting the Passwords to Default Values Downloading Specific Files to Switch Flash Uploading Specific Files from Switch Flash Defining Configuration and Runtime Startup File Removing Specific File Copying Running Configuration to Flash Defining Ping Function Defining CDP Configuration Managing CDP Function 470 Viewing Neighbors Information Non-Configurable Data Viewing Traffic Statistics Configuring Trap Flags Defining Trap Manager Viewing Trap Log Configuring Sntp Configuring Sntp Global Configuration Viewing Sntp Global Status Configuring Sntp Server Viewing Sntp Server Status Unknown IPV4 Configuring Current Time Settings Configuring Time Zone Settings Configuring Dhcp Restart Configuring Dhcp Client-identifierDefault Defining Dhcp Client Configuring Port-based Vlan Configuration Managing Port-based Vlan Viewing Port-based Vlan Information Configuring Vlan Port Configuration Viewing Vlan Port Summary Resetting Vlan Configuration Protocol-based Vlan Configuration Managing Protocol-based Vlan Viewing Protocol-based Vlan Information Defining Garp Viewing Garp Information Configuring the whole Switch Garp Configuration Configuring each Port Garp Configuration Configuring Igmp Snooping Global Configuration Managing Igmp Snooping Defining Igmp Snooping Interface Configuration Viewing Igmp Snooping Vlan Status Configuring Igmp Snooping Vlan Vlan ID Configuring Multicast Router Viewing Multicast Router Statistics Configuring Multicast Router Vlan Viewing Multicast Router Vlan Statistics Configuring L2 Static Multicast Group Configuration Viewing L2 Multicast Group Information 498 Viewing L2 Multicast Router Port Information Configuring Port-Channel Configuration Managing Port-Channel Viewing Port-Channel Information Viewing Multicast Forwarding Database Viewing All of Multicast Forwarding Database Tables Viewing Gmrp Mfdb Table Viewing Igmp Snooping Mfdb Table Viewing Multicast Forwarding Database Statistics Managing Spanning Tree Configuring Switch Spanning Tree ConfigurationConfiguring Spanning Tree CST Configuration 506 Configuring Spanning Tree MST Configuration Configuring each Port CST Configuration 509 Configuring each Port MST Configuration 511 Defining 802.1p Priority Mapping Viewing Spanning Tree StatisticsDefining 802.1p priority Managing Port Security Configuring Port Security Administration ModeConfiguring Port Security Interface Slot/Port Selects the interface to be configured Deleting Port Security Statically Configured MAC Address Viewing Port Security Dynamically Learnt MAC Address Creating ARP entries Viewing Port Security Violation StatusManaging ARP Table Configuring ARP Table ƒ All Dynamic Entries ƒ All Dynamic and Gateway Entries Configuring IP Managing IP Interfaces Viewing IP Statistics 521 522 523 Configuring IP Interfaces Configuring Ospf Managing Ospf 526 Configuring Area Authentication Type 529 Configuring Area Range Viewing Stub Area Summary Information View Interface Statistics 532 Configuring Ospf Interface 534 535 Viewing Neighbor Table Information Configuring Ospf Neighbor 538 Viewing Ospf Link State Database Configuring Ospf Virtual Link 541 542 Viewing Ospf Virtual Link Summary Table Configuring Ospf Route Redistribution Non Configurable Data Viewing Ospf Route Redistribution Summary Information Managing BOOTP/DHCP Relay Agent Configuring BOOTP/DHCP Relay Agent Viewing BOOTP/DHCP Relay Agent Status Configuring DNS Relay Managing DNS Relay Configuring Domain Name Configuring Name Server Viewing DNS Cache Summary Information Configuring DNS Host Configuring RIP Global Configuration Managing Routing Information Protocol RIP Viewing Each Routing Interface’s RIP Configuration Defining The Routing Interface’s RIP Configuration 555 Configuring Route Redistribution Configuration Viewing Route Redistribution Configuration Internal External NSSA-External Configuring Router Discovery Managing Router Discovery Viewing Router Discovery Status ƒ Local ƒ Static ƒ Default Managing Route TableViewing Router Route Table ƒ Ospf Intra ƒ Ospf Inter Viewing Router Best Route Table ƒ Ospf Type-1 ƒ Ospf Type-2ƒ BGP4 ƒ Ospf Intra ƒ Ospf Inter ƒ Ospf Type-1 Configuring Router Static Route Entry ƒ Static ƒ Default ƒ Ospf Intra ƒ Ospf Inter ƒ Ospf Type-1 ƒ Ospf Type-2 ƒ BGP4Local Configuring Router Route Preference Configuring Vlan Routing Managing Vlan Routing Viewing Vlan Routing Summary Information Instructions for creating a Vlan Managing Vrrp Configuring VrrpConfiguring Virtual Router 568 Pre-empt Mode Viewing Virtual Router Status ƒ Initialize ƒ Master ƒ Backup Viewing Virtual Router Statisticsƒ None ƒ Simple ƒ Inactive ƒ Active 571 Managing Access Control Defining Access Control Configuring each Port Access Control Configuration Viewing each Port Access Control Configuration Information 575 576 Viewing Access Control Summary Viewing each Port Access Control Statistics Defining Access Control User Login Defining each Port Access Privileges Viewing each Port Access Privileges Summary Configuring Radius Configuration Managing Radius Viewing Radius Statistics Configuring Radius Server Configuration Viewing Radius Server Statistics 584 Defining Radius Accounting Server Configuration Non-Configurable Statistics Viewing Radius Accounting Server Statistics Configuring Tacacs Configuration Resetting All Radius StatisticsDefining Tacacs Configuration Defining IP Filter Configuration IP Filter Configuration Defining Secure Http Configuration Secure Http Configuration Defining Secure Shell Configuration Configuring Secure Shell Configuration Managing Access Control Lists Configuring IP Access Control List Configuration ƒ Inbound Viewing IP Access Control List SummaryConfiguring IP Access Control List Rule Configuration 593 ƒ IP TOS Configuration ƒ IP Dscp Configurationƒ IP Precedence Configuration Configuring MAC Access Control List Configuration Viewing MAC Access Control List Summary Configuring MAC Access Control List Rule Configuration ƒ Appletalk ƒ IPv4 ƒ IPv6 Configuring Access Control List Interface Configuration ƒ IP ACL ƒ MAC ACL Operation Managing Differentiated ServicesDefining DiffServ Configuration Configuring DiffServ Class Configuration Viewing DiffServ Class Summary DiffServ Policy Configuration Configuring DiffServ Policy Class Definition Viewing DiffServ Policy Summary Configuring DiffServ Service Configuration Viewing DiffServ Policy Attribute Summary Viewing DiffServ Service Summary Viewing DiffServ Service Statistics Viewing DiffServ Service Detailed Statistics Configuring Diffserv Wizard ƒ untrusted ƒ trust dot1p ƒ trust ip-precedence Managing Class of ServiceManaging Table Configuration Configuring CoS interface Configuring CoS interface queue ƒ taildrop ƒ strict ƒ weightedViewing CoS interface queue status Configuring Dvmrp Global Configuration Managing Dvmrp Protocol Configuring Dvmrp Interface Configuration Viewing Dvmrp Configuration Summary Refresh Refresh the screen with the new data Viewing Dvmrp Next Hop Configuration Summary Viewing Dvmrp Prune Summary Viewing Dvmrp Route Summary Configuring Igmp Global Configuration Managing Igmp Protocol Configuring Igmp Interface Configuration Viewing Igmp Configuration Summary 621 Viewing Igmp Cache Information Viewing Igmp Interface Membership Details Information Defining Multicast Configuration Configuring Multicast Global Configuration Configuring Interface’s Multicast Configuration Viewing Multicast MRoute Summary Configuring Multicast Static Routes Configuration PIM-DM PIM-SM Dvmrp Viewing Multicast Static Routes Configuration Configuring Multicast Admin Boundary Configuration Viewing Multicast Admin Boundary Configuration Viewing Mrinfo Summary Configuring Multicast MdebugConfiguring Mrinfo Run Configuring Mstat Run Defining Mtrace Admin Configuration Viewing Mstat Summary Configuring Mtrace Run Managing PIM-DM Protocol Configuring PIM-DM Global Admin ConfigurationViewing Mtrace Summary Configuring Interface’s PIM-DM Configuration Viewing Interface’s PIM-DM Configuration Configuring PIM-SM Global Configuration Managing PIM-SM Protocol Viewing PIM-SM Global Configuration Configuring Interface’s PIM-SM Configuration Viewing Interface’s PIM-SM Configuration Viewing PIM-SM Component Summary Viewing PIM-SM RP Summary Viewing PIM-SM Candidate RP Summary Configuring PIM-SM Static RP Configuration