ƒ Ip Acl ƒ Mac Acl | Fortinet MR1 specs

Command Buttons

Submit - Send the updated configuration to the switch. Configuration changes take effect immediately. These changes will not be retained across a power cycle unless a save is performed.

Delete - Remove the currently selected Rule from the selected ACL. These changes will not be retained across a power cycle unless a save configuration is performed.

Configuring Access Control List Interface Configuration Page

Configurable Data

Slot/Port - Specifies list of all available valid interfaces for ACL mapping. All non-routing physical interfaces and interfaces participating in LAGs are listed.

Direction - Specifies the packet filtering direction for ACL.

Valid Directions

Inbound

ACL Type - Specifies the type of ACL.

Valid ACL Types

IP ACL

MAC ACL

IP ACL - Specifies list of all IP ACLs. This field is visible only if the user has selected "IP ACL" as "ACL Type".

MAC ACL - Specifies list of all MAC ACLs. This field is visible only if the user has selected "MAC ACL" as "ACL Type".

Sequence Number - An optional sequence number may be specified to indicate the order of this access list relative to other access lists already assigned to this interface and direction. A lower number indicates higher precedence order. If a sequence number is already in use for this interface and direction, the specified access list replaces the currently attached access list using that sequence

598

Image 598

Fortinet MR1 manual Configuring Access Control List Interface Configuration, ƒ Ip Acl ƒ Mac Acl

Contents

FortiSwitch-100 Trademarks FortiSwitch-100 Userl GuideRegulatory compliance Table of Contents Switching Commands System Information and Statistics commands 107 125 135 164 181 190 188193 225 230 236 254 281 288 Address Resolution Protocol ARP Commands 302 307 317 346 357 350366 370 Internet Group Management Protocol Igmp Commands 385371 393 406 423 410424 Defining Forwarding Database 437 591 Introduction Page Front-Panel Components Management Options RFC 1850 OSPF-TRAP-MIB Installation and Quick Startup Installing the Switch in a Rack Quick Start up Software Version Information Show switchQuick Start up Physical Port Command Details Quick Start up Physical Port Data Show Interface status slot/port all Show loginsessionQuick Start up User Account Management Nopasswd Quick Start up IP Address Command Details Copy running-configStartup-config filename Quick Start up IP Address Ip address Show ip interfaceXmodem Quick Start up Downloading from Tftp Server Quick Start up Factory DefaultsFilename Reload Connecting Devices to the SwitchUpdating the Image Code on the Switch To connect a device to an SFP transceiver port To configure a dynamic IP address using Dhcp To manually configure a static IP address Use the Tftp function to upgrade the code Tftp Troubleshooting the Download Procedure Set Up your Switch Using Console Access Set Up your Switch Using Telnet Access Web-Based Management Interface System Information Menus Switching System QoS RoutingSecurity IP Multicast System-wide menus Port-Specific Popup Menus Example Clear vlan Example IP address ipaddr netmask gatewayParameters MacAddr ValuesNetwork Address Syntax Format Type IPAddr Range Annotations Show arp Show calendar Show eventlog Show calendar Default SettingSyntax Show eventlog unit Syntax show sysinfo Default Setting Show running-configSyntax Show running-config all scriptname Show sysinfo Syntax Show hardware Default Setting Show hardware Interface Show loginsessionSyntax Show loginsession Default Setting Show interface status Show interface counters Syntax Show interface counters slot/port all Syntax Show interface counters detailed slot/port switchport Command Mode Total Packets Transmitted Octets Total Packets Received Without ErrorsTotal Packets Received with MAC Errors Total Packets Transmitted Successfully Total Transmit Errors Total Transmited Packets Discards Show interface switch Syntax Show interface switch Default Setting Speed-duplex InterfaceSyntax Interface slot/port Syntax Speed-duplex all 10 100 full-duplex half-duplex NegotiateSpeed-duplex 10 100 full-duplex half-duplex Full duplex Full duplex half duplex Half duplex Negotiate no negotiate CapabilitiesSyntax Negotiate all no negotiate all Storm-control flowcontrol Shutdown Syntax Shutdown no shutdown Syntax Shutdown all no shutdown all Show mac-addr-table 2 L2 MAC Address and Multicast Forwarding Database TablesSyntax Show mac-addr-table macaddr all Show mac-address-table gmrp Syntax Show mac-address-table gmrp Default SettingSyntax Show mac-address-table igmpsnooping Default Setting Show mac-address-table igmpsnooping Show mac-address-table multicast Syntax Show mac-address-table multicast macaddr vlanid all Show mac-address-table stats Syntax Show mac-address-table stats Default SettingSyntax Show mac-address-table agetime Default Setting Show mac-address-table agetime Vlan Management Syntax show vlan Default SettingShow vlan Show vlan id Syntax Show vlan id vlanid name vlanname Show protocol group Show interface switchportSyntax Show interface switchport slot/port all Syntax Show protocol group group-name all Vlan database Syntax Vlan database Default SettingVlan Vlan name Vlan vlanid name no vlan vlanid Protocol group Vlan makestaticSyntax Vlan makestatic vlanid Switchport acceptable-frame-type Switchport ingress-filtering Syntax Switchport ingress-filtering all Default Setting Command Mode Switchport native vlanNo switchport ingress-filtering all Syntax Switchport native vlan all vlanid Switchport allowed vlan Switchport tagging Syntax Switchport tagging all vlanid Switchport prioritySyntax Switchport priority Switchport protocol group Syntax Switchport priority all Default Setting Switchport forbidden vlan Gvrp and Bridge Extension Syntax Show bridge-ext Default SettingShow bridge-ext Show gvrp configuration Syntax Show gvrp configuration slot/port all Show garp configuration Show gmrp configurationSyntax Show gmrp configuration slot/port all Bridge-ext gvrp Syntax Show garp configuration slot/port allSyntax Bridge-ext gvrp no bridge-ext gvrp Bridge-ext gmrp Switchport gvrpSyntax Switchport gvrp no switchport gvrp Syntax Bridge-ext gmrp no bridge-ext gmrp Syntax Switchport gvrp all no switchport gvrp all Switchport gmrpSyntax Switchport gmrp no switchport gmrp Syntax Switchport gmrp all no switchport gmrp all Garp timerSyntax Garp timer join 10-100 no garp timer join Syntax Garp timer join all 10-100 no garp timer join all Syntax Garp timer leave 20-600 no garp timer leave Syntax Garp timer leave all 20-600 no garp timer leave all Syntax Garp timer leaveall 200-6000 no garp timer leaveall Igmp Snooping Show CommandsSyntax Show ip igmp snooping Default Setting Show ip igmp snooping Show ip igmp snooping mrouter Show ip igmp snooping multicast Syntax Show ip igmp snooping Ip igmp snooping groupmembershipinterval Configuration CommandsIp igmp snooping Syntax Ip igmp snooping no igmp snooping Ip igmp snooping interfacemode Syntax Ip igmp snooping interfacemode all Ip igmp snooping mcrtrexpiretime Ip igmp snooping max-response-time Ip igmp snooping immediate-leave Ip igmp snooping mrouter Set igmp Command UsageIp igmp snooping vlan static Syntax Set igmp 1-3965 no set igmp Set igmp groupmembership-interval Set igmp maxresponse Set igmp mcrtexpiretime Set igmp fast-leave Syntax Set igmp fast-leave 1-3965 no set igmp fast-leave Show port-channel Syntax Show port-channel Default SettingPort Channel Syntax Show port-channel logical slot/port all Port-channel Staticcapability Port-channel adminmode allSyntax Staticcapability no staticcapability Port-channel linktrap Port-channel name Lacp AdminmodeSyntax Adminmode no adminmode Port-channel name logical slot/port all name Syntax Lacp no lacp Channel-groupSyntax Lacp all no lacp all Syntax Channel-group logical slot/port Delete-channel-groupSyntax Delete-channel-group logical slot/port Show storm-control Syntax Show storm-control broadcast Default SettingStorm Control Syntax Delete-channel-group logical slot/port all Syntax Show storm-control multicast Default Setting Syntax Show storm-control unicast Default Setting Storm-control broadcast Syntax Storm-control broadcast no storm-control broadcast Storm-control multicast Syntax Storm-control multicast no storm-control multicast Storm-control unicast Syntax Storm-control unicast no storm-control unicast Syntax Switchport broadcast packet-rate 1 2 3 Switchport broadcast packet-rateSyntax Switchport broadcast all packet-rate 1 2 3 Syntax Switchport multicast packet-rate 1 2 3 Switchport multicast packet-rateSyntax Switchport multicast all packet-rate 1 2 3 Switchport unicast packet-rate Syntax Switchport unicast packet-rate 1 2 3 Show queue cos-map Switchport unicast all packet-rate 1 2 38 L2 Priority Syntax Show queue cos-map slot/port Show port-monitor session Port MirrorQueue cos-map Syntax Queue cos-map priority queue-id no queue cos-map Port-monitor session Syntax No port-monitor Default Setting Network CommandsPort-monitor session mode Show ip interface Syntax show ip filter Default Setting Syntax Show ip interface Default SettingShow ip filter 1.4 mtu Syntax show ip ipv6 Default SettingShow ip ipv6 Syntax Mtu 1518-9216 no mtu Ip address Interface vlanSyntax Interface vlan vlanid Syntax Ip address protocol bootp dhcp none Ip default-gatewaySyntax Ip default-gateway gateway no ip default-gateway Ip address protocol Syntax Ip filter no ip filter Ip filterSyntax Ip filter ipaddr no ip filter ipaddr Syntax Ip ipv6 no ip ipv6 Ip ipv6Syntax Ip ipv6 all no ip ipv6 all Show line console Serial Interface CommandsSyntax Show line console Default Setting Line console Syntax Exec-timeout Exec-timeoutSyntax Line console Default Setting Baudrate Silent-time Password-thresholdSyntax Password-threshold 0-120 no password-threshold Syntax Silent-time Show line vty Telnet Session CommandsTelnet Syntax Telnet host port debug line echo Syntax line vty Default Setting Syntax Show line vty Default SettingLine vty Syntax Exec-timeout 1-160 no exec-timeout Syntax Maxsessions 0-5 no maxsessions MaxsessionsSessions Syntax Sessions no sessions Telnet maxsessions Telnet sessionsSyntax Telnet sessions no telnet sessions Syntax Telnet exec-timeout 1-160 no telnet exec-timeout Telnet exec-timeoutSyntax Telnet maxsessions 0-5 no maxsessions Show telnet Snmp Server CommandsSyntax show telnet Default Setting Show snmp Syntax Show trapflags Default Setting Syntax Show snmp Default SettingShow trapflags Snmp-server location Snmp-server sysnameSyntax Snmp-server sysname name Snmp-server location loc Snmp-server contactSnmp-server community Syntax Snmp-server contact con 145 Syntax Snmp-server community ro rw name Snmp-server enable traps Snmp-server host No This command disables the Authentication trap No This command disables Multiple User trap Global Config This command enables PIM traps Show snmptrap Snmp Trap CommandsSyntax Show snmptrap Default Setting Snmp trap link-status No snmp trap link-status Syntax Snmptrap name ipaddr no snmptrap name ipaddr Snmptrap name ipaddrSnmptrap ipaddr Syntax Snmptrap ipaddr name ipaddr ipaddrnew Show ip http Http commandsSnmptrap mode Syntax Show ip http Ip http port Ip javamodeSyntax Ip javamode no ip javamode Syntax Ip http port 1-65535 no ip http port Ip http serverSyntax Ip http server no ip http server Syntax Ip http secure-port portid no ip http secure-port Ip http secure-portIp http secure-server Syntax Ip http secure-server no ip http secure-server Ip http secure-protocol Secure Shell SSH CommandsSyntax Show ip ssh Default Setting Show ip ssh Syntax Ip ssh no ip ssh Ip sshIp ssh protocol Syntax Ip ssh protocol protocollevel1 protocollevel2 Ip ssh maxsessions Ip ssh timeoutSyntax Ip ssh timeout 1-160 no ip ssh timeout Syntax Ip ssh maxsessions 0-5 no ip ssh maxsessions Ip dhcp restart Dhcp Client CommandsSyntax Ip dhcp restart Default Setting Ip dhcp client-identifier Syntax Show bootpdhcprelay Default Setting Dhcp Relay CommandsShow bootpdhcprelay No ip dhcp client-identifier Bootpdhcprelay maxhopcount Bootpdhcprelay serverip Syntax Show spanning-tree Default Setting Show CommandsShow spanning-tree Time Since Topology Change In seconds Display Message Bridge Priority Configured valueShow spanning-tree interface Syntax Show spanning-tree interface slot/port Syntax Show spanning-tree vlan Show spanning-tree vlanShow spanning-tree mst Display Message Vlan Identifier displays Vlan ID Syntax Show spanning-tree mst summary Default Setting Syntax Show spanning-tree mst detailed Syntax Show spanning-tree mst port detailed 0-4094 slot/port 169 Show spanning-tree summary Syntax Show spanning-tree summary Default SettingDisplay Message Spanning Tree Adminmode Enabled or disabled Show spanning-tree brief Spanning-tree protocol-migration Configuration CommandsSpanning-tree Syntax Spanning-tree no spanning-tree Spanning-tree configuration Spanning-tree mode Spanning-tree forward-time Spanning-tree hello-time Spanning-tree max-hops Spanning-tree max-ageSyntax Spanning-tree max-age 6-40 no spanning-tree max-age Spanning-tree mst 32768 178 Cost auto Spanning-tree port mode Syntax Spanning-tree port mode no spanning-tree port mode Show logging Syntax Show logging Default SettingSpanning-tree edgeport Syntax Spanning-tree edgeport no spanning-tree edgeport Show logging buffered Syntax Show logging buffered Default SettingShow logging traplog Show logging hosts Syntax Show logging traplogs Default SettingSyntax Show logging hosts Default Setting Display Message Index used for deleting Syntax Logging buffered no logging buffered Logging bufferedSyntax Logging buffered wrap no logging buffered wrap Syntax Logging console severitylevel 0-7 no logging console Logging consoleLogging host Syntax Logging host hostaddress port severitylevel Syntax Logging host reconfigure hostindex hostaddress Syntax Logging host remove hostindex Syntax Logging syslog no logging syslog Logging syslogSyntax Logging syslog port portid no logging syslog port Clear logging buffered Syntax Clear logging buffered Default SettingScript apply Syntax Script apply scriptname Syntax Script delete scriptname all Script deleteScript list Syntax Script list Show users Script showSyntax Script show scriptname Syntax Username username password nopassword Syntax show users Default SettingUsername Username snmpv3 authentication No username username Show users authentication Username snmpv3 encryption Syntax Show users authentication Default Setting Show authenticationSyntax Show authentication Default Setting Syntax Show dot1x Default Setting Show authentication usersSyntax Show authentication users listname Show dot1x Show dot1x detail Syntax Show dot1x detail slot/port Show dot1x statistics Syntax Show dot1x statistics slot/port Syntax Show dot1x summary slot/port all Show dot1x summaryShow dot1x users Syntax Show dot1x users slot/port Syntax show radius Default Setting Syntax Show radius-servers Default SettingSecret Configured Yes / No Show radius-servers Secret Configured Yes or No Radius Accounting Mode Disable or EnabledRadius Accounting Mode Enabled or disabled Show radius accounting Show radius statistics Syntax Show radius statistics ipaddr Syntax Show tacacs Default Setting Show tacacs Syntax Show port-security Default Setting Show port-security Syntax Show port-security dynamic slot/port Default Setting Syntax Show port-security slot/port all Default SettingSyntax Show port-security static slot/port Default Setting Authentication login Username defaultlogin Syntax Username defaultlogin listname Username login Syntax Username login user listname Syntax Dot1x defaultl-login listname 3 Dot1x Configuration Commands3.2 dot1x default-login 3.1 dot1x initialize Syntax Dot1x login user listname 3.3 dot1x login3.4 dot1x system-auth-control 3.5 dot1x user 3.6 dot1x port-control Auto 3.7 dot1x max-req 3.8 dot1x re-authenticationSyntax Dot1x re-authentication no dot1x re-authentication Syntax Dot1x max-req 1-10 no dot1x max-req 3.10 dot1x timeout 3.9 dot1x re-reauthenticateSyntax Dot1x re-authenticate slot/port Radius accounting mode Radius Configuration CommandsSyntax Radius accounting mode no radius accounting mode Radius-server host Syntax Radius-server key acct auth ipaddr Radius-sever keyRadius-server retransmit Syntax Radius-server retransmit retries Radius-server msgauth Radius-server timeoutNo radius-server retransmit Syntax Radius-server msgauth ipaddr Radius-server primarySyntax Radius-server primary ipaddr Syntax Tacacs mode 1-3 master slave no tacacs mode Tacacs Configuration CommandsTacacs mode Tacacs Syntax Tacacs server-ip 1-3 ipaddr no tacacs server-ip Tacacs server-ipTacacs port Syntax Tacacs port 1-3 1-65535 no tacacs port Syntax Tacacs key 1-3 no tacacs key Tacacs keyTacacs retry Syntax Tacacs retry 1-3 1-9 no tacacs retry Syntax Tacacs timeout 1-3 1-255 no tacacs timeout Port Security Configuration CommandsTacacs timeout Port-security Port-security max-dynamic Port-security no port-security Default SettingPort-security max-static Port-security mac-address Port-security mac-address move Syntax Port-security mac-address move Default SettingShow cdp Syntax Show cdp neighbors Default Setting Show cdp Default SettingShow cdp neighbors 2.1 cdp Syntax Show cdp traffic Default SettingShow cdp traffic Syntax Cdp no cdp Syntax Cdp run no cdp run Cdp runSyntax Cdp run all no cdp run all Cdp holdtime Cdp timerSyntax Cdp timer 5-254 no cdp timer Syntax Cdp holdtime Syntax Show sntp client Default Setting Syntax Show sntp Default SettingShow sntp Syntax Show sntp server Default Setting Sntp client mode Sntp broadcast client poll-interval Syntax Sntp client port portid 6-10 no sntp client port Sntp client portSntp unicast client poll-interval Syntax Sntp unicast client poll-interval Sntp unicast client poll-retry Sntp unicast client poll-timeoutNo sntp unicast client poll-interval Sntp server Sntp clock timezone ClearClear arp Syntax Clear eventlog Default Setting Syntax clear arp Default SettingSyntax clear traplog Default Setting Clear traplog Clear config Syntax clear config Default Setting Clear counters Syntax clear pass Default SettingClear pass Clear dns counter Clear dns cache Syntax Clear dns counter Default SettingSyntax Clear dns cache Default Setting Clear cdp Syntax Enable passwd Default Setting Enable passwdSyntax clear vlan Default Setting Clear vlan Clear igmp snooping Syntax Clear igmp snooping Default SettingSyntax Clear port-channel Default Setting Clear port-channel Clear dot1x statistics Clear ip filter Default SettingSyntax Clear radius statistics Default Setting Clear radius statistics Copy Syntax clear tacacs Default SettingClear tacacs Privileged Exec Files download from PC to board Syntax Copy running-config startup-config filename Syntax Copy clibanner url copy url clibanner 11.4 dir Syntax Dir boot-rom config opcode filenameDelete No clibanner Syntax whichboot Default Setting WhichbootDisplay Message Column Description Headin Ping Boot-systemSyntax Boot-system boot-rom config opcode filename Syntax Ping host Traceroute Calendar set Logging cli-commandSyntax Logging cli-command Default Setting Syntax Calendar set hhmmss 1-31 1-12 Syntax configure Default Setting ConfigureSyntax reload slot Default Setting Reload Hostname DisconnectSyntax Disconnect 0-10 all Syntax Quit Default Setting Quit General Commands Diffserv Syntax No diffserv Command Mode Class CommandsSyntax Diffserv Command Mode No diffserv Syntax Class-map match-all class-map-name Class-mapNo class-map Syntax No class-map class-map-name Class-map rename DefaultSyntax Match any Default Match any No match class-map Match class-mapSyntax Match class-map refclassname No match class-map refclassname Match dstipMatch dstl4port Syntax Match dstip ipaddr ipmask Match ip dscp Syntax Match ip dscp value Match ip tos Syntax Match ip precedence DefaultMatch ip precedence Syntax Match ip tos tosbits tosmask Syntax Match protocol protocol-name Match protocolMatch srcip Syntax Match srcip ipaddr ipmask Match srcl4port Syntax Match srcl4port portkey Assign-queue Syntax Assign-queue Drop Syntax Drop Command ModeSyntax Redirect slot/port Command Mode Redirect Syntax Conform-color class-map-name Conform-colorMark cos Syntax Mark cos No class ClassMark ip-dscp Police-simple Syntax Mark ip-precedence Command ModeMark ip-precedence Mark ip-dscp value Policy-map Policy-map rename Syntax Service-policy in policy-map-name Service-policyPolicy-map rename policyname newpolicyname No service-policy Syntax No service-policy in policy-map-name Show class-map Syntax Show class-map classname Syntax Show diffserv Default Setting Show diffserv Show policy-map Syntax Show policy-map policy-map-name Show diffserv service Syntax Show diffserv service slot/port Show diffserv service briefSyntax Show diffserv service brief Default Setting Show policy-map interface Syntax Show policy-map interface slot/port Show service-policy Syntax Show service-policy Command Mode 280 Show mac access-lists Syntax Show mac access-list name Syntax Show mac access-list Default Setting Show ip access-listsSyntax Show ip access-lists Show access-lists interface Syntax Show access-lists interface slot/port Mac access-list extended Mac access-list Syntax Mac access-list extended rename name newname Mac access-group Access-list No access-list No access-list 1-99 Default Setting Ip access-groupSyntax Ip access-group 1- 199 Show queue ip-precedence-mapping Syntax Show queue ip-precedence-mapping slot/port Show queue trust Syntax Show queue trust slot/port Show queue cos-queue Syntax Show queue cos-queue slot/port Syntax Queue cos-map 0-7 0-6 no queue cos-map Syntax Queue cos-map all 0-7 0-6 no queue cos-map all Queue ip-precedence-mapping Queue trust Queue cos-queue min-bandwidth Queue cos-queue strict Queue cos-queue traffic-shape 298 Vlan Routing Vlan Routing ConfigurationCLI Examples Vlan Routing Example Network Diagram Create Two VLANs Enable routing for the switch Set Up Vlan Routing for the VLANs and the SwitchUsing the Web Interface to Configure Vlan Routing Show ip arp brief Syntax show ip arp Default SettingShow ip arp Following are displayed for each ARP entry Syntax Show ip arp static Default Setting Show ip arp brief Default SettingShow ip arp static Syntax Arp ipaddr macaddr no arp ipaddr macaddr 2.1 arpIp proxy-arp Syntax Ip proxy-arp no ip proxy-arp Arp dynamicrenew Arp cachesizeArp purge Syntax Arp resptime 1-10 no arp resptime Arp resptimeArp retries Syntax Arp retries 0-10 no arp retries Clear arp-cache Arp timeoutSyntax Arp timeout 15-21600 no arp timeout Show ip brief Syntax Show ip interface port slot/port Default Setting Show ip brief Default SettingShow ip interface port Show ip interface brief Syntax Show ip interface brief Default SettingSyntax Show ip route Default Setting Show ip route Show ip route bestroutes Syntax Show ip route bestroutes Default SettingShow ip route entry Show ip route precedence Syntax Show ip route preferences Default SettingSyntax Show ip route entry networkaddress Routing Syntax Show ip traffic Default SettingShow ip traffic Syntax Routing no routing Ip route Ip routingSyntax Ip routing no ip routing Syntax Ip route default-next-hop nexthopip Ip route default-next-hopIp route precedence Syntax Ip route precedence Ip forwardingIp directed-broadcast Syntax Ip forwarding no ip forwarding No ip directed-broadcast Ip mtuEncapsulation Syntax Ip mtu 68-1500 no ip mtu Restrictions Syntax show ip ospf Default SettingShow ip ospf Display Messages Show ip ospf area Syntax Show ip ospf area areaid Default SettingShow ip ospf database Syntax Show ip ospf interface slot/port Default Setting Syntax Show ip ospf database Default SettingShow ip ospf interface Syntax Show ip ospf interface brief Default Setting Show ip ospf interface brief Syntax Show ip ospf interface stats slot/port Show ip ospf interface statsShow ip ospf neighbor Syntax Show ip ospf neighbor ipaddr slot/port Show ip ospf neighbor brief Show ip ospf range Syntax Show ip ospf range areaid Show ip ospf stub table Syntax Show ip ospf stub table Default SettingShow ip ospf virtual-link Syntax Show ip ospf virtual-link brief Default Setting Show ip ospf virtual-link brief Syntax No area areaid Default Setting EnableSyntax Enable no enable No area Syntax Ip ospf no ip ospf Ip ospf2.4 1583compatibility Syntax 1583compatibility no 1583compatibility Area nssa Area default-costSyntax Area areaid default-cost Syntax Area areaid nssa no area areaid nssa Areaid Area ID Area nssa default-info-originate Area nssa no-redistribute Area nssa no-summary Area nssa translator-role Area range Area nssa translator-stab-intvSyntax Area areaid nssa translator-stab-intv Areaid Area ID Area stub summarylsa Area stubSyntax Area areaid stub no area areaid stub Areaid Area ID Area virtual-link authentication Area virtual-link dead-interval Area virtual-link hello-interval Area virtual-link transmit-delay Area virtual-link retransmit-interval Default-metric Default-information originateSyntax Default-metric 1-16777215 no default-metric Distance ospf Distribute-list out Exit-overflow-interval Ip ospf areaid External-lsdb-limitSyntax Ip ospf areaid areaid Ip ospf authentication Ip ospf cost Ip ospf dead-interval Syntax Ip ospf cost 1-65535 no ip ospf cost Ip ospf priority Ip ospf hello -intervalSyntax Ip ospf priority 0-255 no ip ospf priority Ip ospf transmit-delay Ip ospf retransmit-interval Ip ospf mtu-ignore Syntax Ip ospf mtu-ignore no ip ospf mtu-ignore Router-id Redistribute Maximum-paths Syntax Maximum-paths 1-1 no maximum-paths Bootpdhcprelay cidoptmode Syntax Bootpdhcprelay enable no bootpdhcprelay enable Bootpdhcprelay maxhopcount Bootpdhcprelay serverip Show dns Syntax Show hosts Default SettingShow hosts Display Message Domain Name List Domain Name Syntax Show dns cache Default Setting Show dns Default SettingShow dns cache Clear hosts Syntax Clear hosts Default SettingIp hosts Syntax Ip host name ipaddr no ip host name Syntax Ip domain-name name no ip domain-name name Ip domain-nameIp domain-list Syntax Ip domain-list name no ip domain-list name Syntax Ip name-server ipaddr no ip name-server ipaddr Ip name-serverIp domain-lookup Syntax Ip domain-lookup no ip domain-lookup Clear dns Syntax Clear domain-list Default SettingClear domain-list Syntax Clear dns This command clears all entries in the DNS cache table Default Route Advertise The default route Syntax Show ip rip Default SettingShow ip rip Show ip rip interface brief Show ip rip interfaceSyntax Show ip rip interface slot/port Enable rip Syntax Show ip rip interface brief Default Setting Syntax Ip rip no ip rip Ip ripAuto-summary Syntax Auto-summary no auto-summary Syntax Default-metric 1-15 no default-metric Syntax Distance rip 1-255 no distance rip Distance ripHostrouteaccept Syntax Hostrouteaccept no hostrouteaccept Distribute-list Split-horizonSyntax Split-horizon none simple poison no split-horizon Format for Ospf as source protocol Ip rip authenticationFormat for other source protocols Ip rip receive version Router Discovery Protocol Commands Ip rip send version Show ip irdp slot/port all Syntax Ip irdp no ip irdp Ip irdp broadcast Syntax Ip irdp broadcast no ip irdp broadcast Ip irdp maxadvertinterval Syntax show ip vlan Default Setting Ip irdp preference Show ip vrrp Syntax show ip vrrp Default SettingSyntax Vlan routing vlanid no vlan routing vlanid Show ip vrrp interface Syntax Show ip vrrp brief Default SettingShow ip vrrp brief Syntax Show ip vrrp interface slot/port vrid Show ip vrrp interface stats Syntax Show ip vrrp interface stats slot/port vrid Syntax Ip vrrp no ip vrrp Default Setting Ip vrrp Ip vrrp ip Ip vrrp modeIp vrrp 1-255 no ip vrrp Syntax Ip vrrp 1-255 mode no ip vrrp 1-255 mode Ip vrrp authenticationIp vrrp preempt Ip vrrp priority Ip vrrp timers advertiseSyntax Ip vrrp 1-255 preempt no ip vrrp 1-255 preempt Default value of advertisement interval is 379 Syntax Show ip dvmrp Default Setting Show ip dvmrp Show ip dvmrp neighbor Syntax Show ip dvmrp neighbor Default SettingShow ip dvmrp interface Syntax Show ip dvmrp interface slot/port Show ip dvmrp prune Syntax Show ip dvmrp nexthop Default SettingShow ip dvmrp nexthop Syntax Show ip dvmrp prune Syntax Show ip dvmrp route Default Setting Show ip dvmrp route Syntax Ip dvmrp no ip dvmrp Ip dvmrpIp dvmrp metric Syntax Ip dvmrp metric value no ip dvmrp metric value Show ip igmp Syntax show ip igmp Default SettingShow ip igmp groups If detail is specified, the following fields are displayed Show ip igmp interfaceShow ip igmp groups slot/ports detail Syntax Show ip igmp interface slot/port Show ip igmp interface membership Syntax Show ip igmp interface membership multiipaddr detail If detail is specified, the following fields are displayed Show ip igmp interface statsSyntax Show ip igmp interface stats slot/port Syntax Ip igmp no ip igmp Ip igmpIp igmp version Syntax Ip igmp version 1 2 3 no ip igmp version Ip igmp last-member-query-count Ip igmp last-member-query-interval Ip igmp query-interval Ip igmp query-max-response-time Ip igmp startup-query-count Ip igmp robustnessSyntax Ip igmp robustness 1-255 no ip igmp robustness Ip igmp startup-query-interval Show ip mcast Show ip mcast boundary Syntax Show ip mcast Default SettingSyntax Show ip mcast boundary slot/port all Syntax Show ip mcast interface slot/port Show ip mcast interfaceShow ip mcast mroute Syntax Show ip mcast mroute detail summary Syntax Show ip mcast mroute group groupipaddr detail summary 397 Show mrinfo Syntax show mrinfo Default SettingSyntax Show ip mcast mroute static sourceipaddr Show mstat Syntax show mstat Default SettingShow mtrace Ip multicast Show mtrace Default SettingSyntax Ip multicast no ip multicast Ip multicast staticroute No ip mcast mroute Ip mcast boundary Ip multicast ttl-threshold Mrinfo Syntax Mrinfo ipaddr MstatSyntax Mstat source group receiver Mtrace Disable ip multicast mdebug mtraceSyntax Disable ip multicast mdebug mtrace Syntax Mtrace source group destination Syntax Show ip pimdm Default Setting No disable ip multicast mdebug mtraceShow ip pimdm Syntax Show ip pimdm interface slot/port Show ip pimdm interfaceShow ip pimdm interface stats Syntax Show ip pimdm interface stats slot/port all Ip pimdm Show ip pimdm neighborSyntax Show ip pimdm neighbor slot/port all Ip pimdm query-interval Ip pimdm modeSyntax Ip pimdm mode no ip pimdm mode Syntax Ip pimdm no ip pimdm Syntax Show ip pimsm Default Setting Show ip pimsm Show ip pimsm interface Syntax Show ip pimsm componenttable Default SettingShow ip pimsm componenttable Syntax Show ip pimsm interface slot/port Show ip pimsm interface stats Syntax Show ip pimsm interface stats slot/port all Show ip pimsm rp Show ip pimsm neighborSyntax Show ip pimsm neighbor slot/port all Show ip pimsm rphash Syntax Show ip pimsm rphash group-address Ip pimsm Syntax Show ip pimsm staticrp Default SettingShow ip pimsm staticrp Syntax Ip pimsm no ip pimsm Ip pimsm message-interval Ip pimsm register-rate-limit Ip pimsm spt-threshold Ip pimsm staticrp Ip pimsm mode Syntax Ip pimsm mode no ip pimsm mode Ip pimsm query-interval Ip pimsm cbsrpreference Ip pimsm cbsrhashmasklength Ip pimsm crppreference 421 422 Overview Main Menu View ARP Cache Non-Configurable Data Viewing Inventory Information Configurable Data Configuring Management Session and Network ParametersCommand Buttons Viewing System Description 427 428 Configuring Network Connectivity Terminal interface via the EIA-232 port Configuring Telnet Session Configuring Outbound Telnet Client Configuration Configuring Serial Port Defining User Accounts Selection Criteria 433 Defining Authentication List Configuration Viewing Login Session Viewing Authentication List Summary Defining User Login Configuring MAC Table aging interval time Defining Forwarding Database Viewing Forwarding Database Viewing Buffered Log Configuration Viewing Logs Viewing Buffered Log Configuring Command Logger Configuring Console Log Configuring Hosts configuration Viewing Event Log Configuring syslog configuration Managing Switch Interface Configuring Switch Interface 445 Viewing Switch Interface Configuration Non-Configurable Port Status Data Refresh Refresh the configuration value again 448 Configuring Snmp Community Configuration Configuring Multiple Port Mirroring FunctionDefining Snmp 450 Configuring Snmp Trap Receiver Configuration Viewing Snmp supported MIBs Viewing the whole Switch Detailed Statistics Viewing Statistics 454 Viewing the whole Switch Summary Statistics Viewing Each Port Detailed Statistics 457 458 459 460 461 462 Viewing Each Port Summary Statistics Restoring All Configuration to Default Values Saving All Configuration ChangedResetting the Switch Managing System Utilities Resetting the Passwords to Default Values Downloading Specific Files to Switch Flash Uploading Specific Files from Switch Flash Defining Configuration and Runtime Startup File Removing Specific File Copying Running Configuration to Flash Defining Ping Function Defining CDP Configuration Managing CDP Function 470 Viewing Neighbors Information Non-Configurable Data Viewing Traffic Statistics Configuring Trap Flags Defining Trap Manager Viewing Trap Log Configuring Sntp Configuring Sntp Global Configuration Viewing Sntp Global Status Configuring Sntp Server Viewing Sntp Server Status Unknown IPV4 Configuring Current Time Settings Configuring Time Zone Settings Default Configuring Dhcp RestartConfiguring Dhcp Client-identifier Defining Dhcp Client Configuring Port-based Vlan Configuration Managing Port-based Vlan Viewing Port-based Vlan Information Configuring Vlan Port Configuration Viewing Vlan Port Summary Resetting Vlan Configuration Protocol-based Vlan Configuration Managing Protocol-based Vlan Viewing Protocol-based Vlan Information Defining Garp Viewing Garp Information Configuring the whole Switch Garp Configuration Configuring each Port Garp Configuration Configuring Igmp Snooping Global Configuration Managing Igmp Snooping Defining Igmp Snooping Interface Configuration Viewing Igmp Snooping Vlan Status Configuring Igmp Snooping Vlan Vlan ID Configuring Multicast Router Viewing Multicast Router Statistics Configuring Multicast Router Vlan Viewing Multicast Router Vlan Statistics Configuring L2 Static Multicast Group Configuration Viewing L2 Multicast Group Information 498 Viewing L2 Multicast Router Port Information Configuring Port-Channel Configuration Managing Port-Channel Viewing Port-Channel Information Viewing Multicast Forwarding Database Viewing All of Multicast Forwarding Database Tables Viewing Gmrp Mfdb Table Viewing Igmp Snooping Mfdb Table Viewing Multicast Forwarding Database Statistics Configuring Spanning Tree CST Configuration Configuring Switch Spanning Tree ConfigurationManaging Spanning Tree 506 Configuring Spanning Tree MST Configuration Configuring each Port CST Configuration 509 Configuring each Port MST Configuration 511 Defining 802.1p priority Viewing Spanning Tree StatisticsDefining 802.1p Priority Mapping Configuring Port Security Interface Configuring Port Security Administration ModeManaging Port Security Slot/Port Selects the interface to be configured Deleting Port Security Statically Configured MAC Address Viewing Port Security Dynamically Learnt MAC Address Managing ARP Table Viewing Port Security Violation StatusCreating ARP entries Configuring ARP Table ƒ All Dynamic Entries ƒ All Dynamic and Gateway Entries Configuring IP Managing IP Interfaces Viewing IP Statistics 521 522 523 Configuring IP Interfaces Configuring Ospf Managing Ospf 526 Configuring Area Authentication Type 529 Configuring Area Range Viewing Stub Area Summary Information View Interface Statistics 532 Configuring Ospf Interface 534 535 Viewing Neighbor Table Information Configuring Ospf Neighbor 538 Viewing Ospf Link State Database Configuring Ospf Virtual Link 541 542 Viewing Ospf Virtual Link Summary Table Configuring Ospf Route Redistribution Non Configurable Data Viewing Ospf Route Redistribution Summary Information Managing BOOTP/DHCP Relay Agent Configuring BOOTP/DHCP Relay Agent Viewing BOOTP/DHCP Relay Agent Status Configuring DNS Relay Managing DNS Relay Configuring Domain Name Configuring Name Server Viewing DNS Cache Summary Information Configuring DNS Host Configuring RIP Global Configuration Managing Routing Information Protocol RIP Viewing Each Routing Interface’s RIP Configuration Defining The Routing Interface’s RIP Configuration 555 Configuring Route Redistribution Configuration Viewing Route Redistribution Configuration Internal External NSSA-External Configuring Router Discovery Managing Router Discovery Viewing Router Discovery Status Viewing Router Route Table ƒ Local ƒ Static ƒ DefaultManaging Route Table ƒ Ospf Intra ƒ Ospf Inter ƒ BGP4 Viewing Router Best Route Tableƒ Ospf Type-1 ƒ Ospf Type-2 ƒ Ospf Intra ƒ Ospf Inter ƒ Ospf Type-1 Configuring Router Static Route Entry ƒ Static ƒ Default ƒ Ospf Intra ƒ Ospf Inter ƒ Ospf Type-1 ƒ Ospf Type-2 ƒ BGP4Local Configuring Router Route Preference Configuring Vlan Routing Managing Vlan Routing Viewing Vlan Routing Summary Information Instructions for creating a Vlan Configuring Virtual Router Configuring VrrpManaging Vrrp 568 Pre-empt Mode Viewing Virtual Router Status ƒ None ƒ Simple ƒ Initialize ƒ Master ƒ BackupViewing Virtual Router Statistics ƒ Inactive ƒ Active 571 Managing Access Control Defining Access Control Configuring each Port Access Control Configuration Viewing each Port Access Control Configuration Information 575 576 Viewing Access Control Summary Viewing each Port Access Control Statistics Defining Access Control User Login Defining each Port Access Privileges Viewing each Port Access Privileges Summary Configuring Radius Configuration Managing Radius Viewing Radius Statistics Configuring Radius Server Configuration Viewing Radius Server Statistics 584 Defining Radius Accounting Server Configuration Non-Configurable Statistics Viewing Radius Accounting Server Statistics Defining Tacacs Configuration Resetting All Radius StatisticsConfiguring Tacacs Configuration Defining IP Filter Configuration IP Filter Configuration Defining Secure Http Configuration Secure Http Configuration Defining Secure Shell Configuration Configuring Secure Shell Configuration Managing Access Control Lists Configuring IP Access Control List Configuration Configuring IP Access Control List Rule Configuration Viewing IP Access Control List Summaryƒ Inbound 593 ƒ IP Precedence Configuration ƒ IP Dscp Configurationƒ IP TOS Configuration Configuring MAC Access Control List Configuration Viewing MAC Access Control List Summary Configuring MAC Access Control List Rule Configuration ƒ Appletalk ƒ IPv4 ƒ IPv6 Configuring Access Control List Interface Configuration ƒ IP ACL ƒ MAC ACL Defining DiffServ Configuration Managing Differentiated ServicesOperation Configuring DiffServ Class Configuration Viewing DiffServ Class Summary DiffServ Policy Configuration Configuring DiffServ Policy Class Definition Viewing DiffServ Policy Summary Configuring DiffServ Service Configuration Viewing DiffServ Policy Attribute Summary Viewing DiffServ Service Summary Viewing DiffServ Service Statistics Viewing DiffServ Service Detailed Statistics Configuring Diffserv Wizard Managing Table Configuration Managing Class of Serviceƒ untrusted ƒ trust dot1p ƒ trust ip-precedence Configuring CoS interface Configuring CoS interface queue Viewing CoS interface queue status ƒ strict ƒ weightedƒ taildrop Configuring Dvmrp Global Configuration Managing Dvmrp Protocol Configuring Dvmrp Interface Configuration Viewing Dvmrp Configuration Summary Refresh Refresh the screen with the new data Viewing Dvmrp Next Hop Configuration Summary Viewing Dvmrp Prune Summary Viewing Dvmrp Route Summary Configuring Igmp Global Configuration Managing Igmp Protocol Configuring Igmp Interface Configuration Viewing Igmp Configuration Summary 621 Viewing Igmp Cache Information Viewing Igmp Interface Membership Details Information Defining Multicast Configuration Configuring Multicast Global Configuration Configuring Interface’s Multicast Configuration Viewing Multicast MRoute Summary Configuring Multicast Static Routes Configuration PIM-DM PIM-SM Dvmrp Viewing Multicast Static Routes Configuration Configuring Multicast Admin Boundary Configuration Viewing Multicast Admin Boundary Configuration Configuring Mrinfo Run Configuring Multicast MdebugViewing Mrinfo Summary Configuring Mstat Run Defining Mtrace Admin Configuration Viewing Mstat Summary Configuring Mtrace Run Viewing Mtrace Summary Configuring PIM-DM Global Admin ConfigurationManaging PIM-DM Protocol Configuring Interface’s PIM-DM Configuration Viewing Interface’s PIM-DM Configuration Configuring PIM-SM Global Configuration Managing PIM-SM Protocol Viewing PIM-SM Global Configuration Configuring Interface’s PIM-SM Configuration Viewing Interface’s PIM-SM Configuration Viewing PIM-SM Component Summary Viewing PIM-SM RP Summary Viewing PIM-SM Candidate RP Summary Configuring PIM-SM Static RP Configuration