Fujitsu P3NK-4452-01ENZD 5.5.1.4 lan ip filter

XG Series User's Guide Chapter 5 Command Reference

LAN Information Settings

186

5.5.1.4 lan ip filter

Function Set the IP filter.

Available Model XG0224 / XG0448 / XG2600

Syntax lan [<number>] ip filter <count> <action> acl <acl_count>

Options

<number>

•lan definition number

Specify a lan definition serial number with a decimal value.

The default is 0.

<count>

•Filtering definition number

Specify a definition number, which indicates a filtering priority, with a decimal value.

The specified value is sorted and renumbered in sequence. If a filtering definition with

the same value already exists, the existing one will be changed.

<action>

Set whether or not to transmit the packet to be filtered.

•pass

Transmit the relevant packet.

•reject

Block the relevant packet.

<acl_count>

•ACL definition number

Specify the required ACL definition number with a decimal value.

If the ACL specified in <acl_count> is not defined, the filtering definition will be disabled

and ignored.

Use the following ACL definition for IP filter.

-ip

If the ip value is not set, the filtering definition will be disabled and ignored.

-tcp

Available only when "6" is set in <protocol> of ip.

Otherwise, the set value is ignored.

If the tcp value is not set while "6" is set in <protocol> of ip, each value of tcp will be

assumed to be "any".

-udp

Available only when "17" is set in <protocol> of ip.

Otherwise, the set value is ignored.

If the udp value is not set while "17" is set in <protocol> of ip, each value of udp is

assumed to be "any".

- icmp

Available only when "1" is set in <protocol> of ip.

Otherwise, the set value is ignored.

If the icmp value is not set while "1" is set in <protocol> of ip, each value of icmp will

be assumed to be "any".

Use Mode Configuration mode (admin class)

Range Model

0 to 511 XG0224 / XG0448

0 to 63 XG2600

Contents

Main Preface Contents Chapter 4 Switch Functions and their Configuration........................................... 59 Page Page Page Page Page Page Page Page Page Page Page Organization and Usage of This Manual Target Readers and Required Knowledge Areas Covered About the Symbols Hint Trademark Notification in This Manual Abbreviated Product Names The product names used in this manual are abbreviated as follows. Page End User's License Agreement Page Page Page 1.1 Hardware Specifications This section explains the Hardware specifications for the device. 1.1.1 Switch Specifications : supported, : Not supported Page 1.1.2 Option SFP Module *1) Please make sure to use 1000BASE-BX-D SFP module and 1000BASE-BX-U SFP module in pairs. SFP+ Module XG0448 / XG2600 SFP+ Expansion Card CX4 Expansion Card Power Cable (100V) Compact Flash Card XG0224 1.1.3 10/100/1000BASE-T Port Specifications XG0224 / XG0448 XG2600 1.1.4 USB Port Specifications 1.1.5 Console Port Specifications XG0448 / XG2600 1.2 Software Specifications This section explains the software specifications for the device. 1.2.1 Software Specifications : Supported, : Not supported Page *1) For the packets which applied MAC/IP filter, QoS function with the use of ACL become void. 1.2.2 Initial Values Page 1.2.3 System Maximum Values Page Page Page 2.1 Overview of the CLI 2.1.1 Operating Environment for the CLI 2.1.2 Command Modes and Mode Switching 2.1.2.1 Command Operation Procedure Login to the device User name and password Privilege classes (admin class and user class) Use modes (operation mode and configuration mode) 2.1.2.2 Executable commands Command type (operation commands and configuration commands) 2.2 Using the CLI 2.2.1 Using the Shell Function 2.2.1.1 Command execution function 2.2.1.2 Entry editing function 2.2.1.3 Command name autocomplete function Page 2.2.1.4 Command argument autocomplete function 2.2.1.5 Abbreviated command entry function 2.2.1.6 Command alias function 2.2.1.7 Configuration hierarchy function 2.2.1.8 Time of command execution display function 2.2.1.9 Command history function Re-executing commands Redisplaying commands Replacing the last command string Replacing command strings 2.2.1.10 List of shell key bindings 2.2.2 Error Messages Common to All Commands 2.2.3 Characters that can be entered Page 3.1 Workflow for Initial Setup of the Device 3.1.1 Configure LAN Interface 3.1.2 Telnet Connection via the LAN Interface (Optional) 3.1.3 SNMP Configuration (Optional) Chapter 4 Switch Functions and their Configuration Page 4.1 Basic Switch Functions 4.1.1 Switching Mode (XG2600) 4.1.2 MAC Address Table Management 4.1.3 Jumbo Frame Support 4.1.4 Flow Control 4.1.5 Storm Control XG0224/XG0448 4.1.6 Egress Rate Control (XG2600 Only) 4.2 Port Mirroring Link Down Relay 4.3 Link Down Relay Link Down Relay To configure Link Down Relay, carry out the following procedure in "admin" Operation mode. (1)When Link Down Relay is not used (2)When Link Down Relay is used 4.4 Link Aggregation 4.4.1 Configuring Link Aggregation 4.4.2 Frame Distribution Methods in Link Aggregation 4.4.3 The Number of Ports That Require Linkup 4.4.4 Notes on Link Aggregation Spanning Tree Protocol (STP) 4.5 Spanning Tree Protocol (STP) Logical Topology by STP Physical Topology 4.5.1 Port Roles Based on Spanning Tree 4.5.2 Spanning Tree Protocol Port States 4.5.3 Configuring Spanning Tree 4.6 VLAN 4.6.1 Port-Based VLAN VLAN 4.6.2 Tag-Based (IEEE802.1Q) VLAN Tag VLAN Frame Format To configure a tag-based VLAN, carry out the following procedures in "admin" Operation mode. 4.7 Quality of Service (QoS) 4.8 IGMP Snooping IGMP Snooping 4.8.1 Registering Group Members Registering Group Members Multicast Address IGMP Snooping 4.8.2 Removing Group Members Removing Group Members (2) Group IP : 239.1.2.3 Removing Group Members (1) Please use "clear igmpsnoop group" command to delete it. 4.8.3 Managing Group Members 4.8.4 IGMP Querier 4.8.5 Configuring IGMP Snooping To configure IGMP snooping, carry out the following procedure in "admin" Operation mode. To enable IGMP query, carry out the following procedure in "admin" Operation mode. 4.9 Network Management 4.9.1 Traffic Statistics 4.9.2 SNMP Agent 4.9.3 RMON Chapter 5 Command Reference Page Page Page 5.1 Port Information Settings Allowed range of port definition numbers Configuration of port types for each model Specifying the range of port numbers 5.1.1 Ethernet Common Information 5.1.1.1 forwardingmode 5.1.1.2 ether use 5.1.1.3 ether media 5.1.1.4 ether mode 5.1.1.5 ether duplex 5.1.1.6 ether mdi 5.1.1.7 ether flowctl 5.1.1.8 ether type Page Page 5.1.1.9 ether vlan tag 5.1.1.10 ether vlan untag 5.1.1.11 ether egress permission 5.1.1.12 ether loopdetect use 5.1.1.13 ether loopdetect frame 5.1.1.14 ether startup 5.1.1.15 ether recovery limit 5.1.1.16 ether downrelay port 5.1.1.17 ether downrelay recovery mode 5.1.1.18 ether downrelay recovery cause 5.1.1.19 ether description 5.1.1.20 linkaggregation algorithm 5.1.1.21 linkaggregation mode 5.1.1.22 linkaggregation type 5.1.1.23 linkaggregation collecting minimum 5.1.1.24 linkaggregation icmpwatch address 5.1.1.25 linkaggregation icmpwatch interval 5.1.1.26 linkaggregation downrelay port 5.1.1.27 linkaggregation downrelay recovery mode 5.1.1.28 linkaggregation downrelay recovery cause 5.1.1.29 linkaggregation description 5.1.1.30 backup mode 5.1.1.31 backup standby 5.1.2 MAC Information 5.1.2.1 ether mac storm Page 5.1.3 STP Information 5.1.3.1 ether stp use 5.1.3.2 ether stp domain cost 5.1.3.3 ether stp domain priority 5.1.3.4 ether stp force-version 5.1.4 LLDP Information 5.1.4.1 ether lldp mode 5.1.4.2 ether lldp info Page 5.1.4.3 ether lldp vlan 5.1.4.4 ether lldp notification 5.1.5 Filter Information 5.1.5.1 ether macfilter Page Page Page 5.1.5.2 ether macfilter move 5.1.6 QoS Information 5.1.6.1 ether qos aclmap Page Page Page Page 5.1.6.2 ether qos aclmap move 5.1.6.3 ether qos priority 5.1.6.4 ether qos mode 5.1.6.5 ether qos prioritymap 5.1.7 LACP Information 5.1.7.1 ether lacp port-priority 5.1.8 ether L3 Monitor Information 5.1.8.1 ether icmpwatch address 5.1.8.2 ether icmpwatch interval 5.1.9 ether SNMP Information 5.1.9.1 ether snmp trap linkdown 5.1.9.2 ether snmp trap linkup 5.1.10 ether output rate control information 5.1.10.1 ether ratecontrol 5.2 LACP Information Settings 5.2.1 LACP Information 5.2.1.1 lacp system-priority 5.2.1.2 lacp bpdu 5.3 VLAN Information Settings VLAN ID allowed range 5.3.1 VLAN Common Information 5.3.1.1 vlan name 5.3.1.2 vlan protocol Page Page 5.3.1.3 vlan forward 5.3.1.4 vlan description 5.3.2 IGMP Snooping Information 5.3.2.1 vlan igmpsnoop router 5.3.2.2 vlan igmpsnoop querier 5.3.2.3 vlan igmpsnoop source 5.3.2.4 vlan igmpsnoop proxy 5.3.3 Filter Information 5.3.3.1 vlan macfilter Page Page Page Page 5.3.3.2 vlan macfilter move 5.3.3.3 vlan ip6filter Page 5.3.3.4 vlan ip6filter move 5.3.4 QoS Information 5.3.4.1 vlan qos aclmap Page Page Page Page 5.3.4.2 vlan ip6qos aclmap Page 5.3.4.3 vlan ip6qos aclmap move 5.4 MAC Information 5.4.1 MAC Information 5.4.1.1 mac learning 5.4.1.2 mac age 5.5 LAN Information Settings Allowed range of lan definition numbers 5.5.1 IPv4 Related Information 5.5.1.1 lan description 5.5.1.2 lan ip address 5.5.1.3 lan ip route 5.5.1.4 lan ip filter Page Page Page Page 5.5.1.5 lan ip filter move 5.5.1.6 lan ip dscp Page Page Page 5.5.1.7 lan ip dscp move 5.5.1.8 lan ip arp static 5.5.2 IPv6 Related Information 5.5.2.1 lan ip6 use 5.5.2.2 lan ip6 ifid 5.5.2.3 lan ip6 address 5.5.2.4 lan ip6 ra mode 5.5.2.5 lan ip6 route 5.5.2.6 lan ip6 filter Page 5.5.2.7 lan ip6 filter move 5.5.2.8 lan ip6 dscp Page 5.5.2.9 lan ip6 dscp move 5.5.3 VLAN Related Information 5.5.3.1 lan vlan 5.5.4 LLMNR Related Information 5.5.4.1 lan llmnr use 5.5.5 Management LAN port IPv4 Related Information 5.5.5.1 oob ip address 5.5.5.2 oob ip route 5.5.6 Management LAN port IPv6 Related Information 5.5.6.1 oob ip6 use 5.5.6.2 oob ip6 ifid 5.5.6.3 oob ip6 address 5.5.6.4 oob ip6 ra mode 5.5.6.5 oob ip6 route 5.5.7 Management LAN port LLMNR Related Information 5.5.7.1 oob llmnr use 5.6 IPv4 Related Information 5.6.1 IPv4 Related Information 5.6.1.1 ip arp age 5.7 QoS Information Settings 5.7.1 QoS Information 5.7.1.1 qos cosmap 5.8 STP Information 5.8.1 STP Information 5.8.1.1 stp mode 5.8.1.2 stp age 5.8.1.3 stp delay 5.8.1.4 stp hello 5.8.1.5 stp bpdu 5.8.1.6 stp domain priority 5.8.1.7 stp config_id 5.8.1.8 stp domain vlan 5.8.1.9 stp max-hops 5.9 LLDP Information Settings 5.9.1 LLDP Information 5.9.1.1 lldp send interval 5.9.1.2 lldp send hold 5.9.1.3 lldp reinit delay 5.9.1.4 lldp notification interval 5.10 IGMP Snooping Information Settings 5.10.1 IGMP Snooping Information 5.10.1.1 igmpsnoop use 5.10.1.2 igmpsnoop localgroup 5.10.1.3 igmpsnoop unknown flooding 5.11 Loop Detection Information Settings 5.11.1 Loop Detection Information 5.11.1.1 loopdetect use 5.11.1.2 loopdetect portdisable 5.11.1.3 loopdetect portblock 5.11.1.4 loopdetect interval 5.11.1.5 loopdetect recovery 5.12 ACL Information Settings 5.12.1 ACL Information Specifying range for ACL definition number 5.12.1.1 acl mac 5.12.1.2 acl vlan 5.12.1.3 acl ip Page 5.12.1.4 acl ip6 5.12.1.5 acl tcp 5.12.1.6 acl udp 5.12.1.7 acl icmp 5.12.1.8 acl description 5.13 AAA Information Settings Allowed range of group IDs Allowed range of AAA user information definition number Allowed range of RADIUS server definition number 5.13.1 Group ID Information 5.13.1.1 aaa name 5.13.2 AAA User Information 5.13.2.1 aaa user id 5.13.2.2 aaa user password 5.13.2.3 aaa user user-role 5.13.3 RADIUS Information Settings 5.13.3.1 aaa radius service 5.13.3.2 aaa radius auth source 5.13.3.3 aaa radius auth message-authenticator 5.13.3.4 aaa radius client server-info auth secret 5.13.3.5 aaa radius client server-info auth address 5.13.3.6 aaa radius client server-info auth port 5.13.3.7 aaa radius client server-info auth deadtime 5.13.3.8 aaa radius client server-info auth priority 5.13.3.9 aaa radius client server-info auth source 5.13.3.10 aaa radius client retry 5.13.3.11 aaa radius client security 5.14 Password Information 5.14.1 password format 5.14.2 password admin set Page 5.14.3 password user set 5.14.4 password aaa 5.14.5 password authtype 5.15 Device Information Settings 5.15.1 SNMP Information 5.15.1.1 snmp service 5.15.1.2 snmp agent contact 5.15.1.3 snmp agent sysname 5.15.1.4 snmp agent location 5.15.1.5 snmp agent address 5.15.1.6 snmp agent engineid 5.15.1.7 snmp manager 5.15.1.8 snmp trap coldstart 5.15.1.9 snmp trap linkdown 5.15.1.10 snmp trap linkup 5.15.1.11 snmp trap authfail 5.15.1.12 snmp trap newroot 5.15.1.13 snmp trap topologychange 5.15.1.14 snmp trap noserror 5.15.1.15 snmp trap lldpremtableschange 5.15.1.16 snmp rmon 5.15.1.17 snmp user name 5.15.1.18 snmp user address 5.15.1.19 snmp user notification 5.15.1.20 snmp user auth 5.15.1.21 snmp user priv 5.15.1.22 snmp user write 5.15.1.23 snmp user read 5.15.1.24 snmp user notify 5.15.1.25 snmp view subtree Page 5.15.2 System Log Information 5.15.2.1 syslog server address 5.15.2.2 syslog server pri 5.15.2.3 syslog pri 5.15.2.4 syslog facility 5.15.2.5 syslog security 5.15.2.6 syslog dupcut 5.15.2.7 syslog command-logging 5.15.2.8 syslog header 5.15.2.9 syslog source address 5.15.3 Automatic Time Setting Information 5.15.3.1 time auto server 5.15.3.2 time auto interval 5.15.3.3 time zone 5.15.3.4 time summer-time Page 5.15.4 ProxyDNS Information 5.15.4.1 proxydns domain Page 5.15.4.2 proxydns domain move 5.15.4.3 proxydns address 5.15.4.4 proxydns address move 5.15.4.5 proxydns unicode 5.15.5 Host Database Information 5.15.5.1 host name 5.15.5.2 host ip address 5.15.5.3 host ip6 address 5.15.6 Schedule Information 5.15.6.1 schedule at 5.15.6.2 schedule syslog 5.15.7 Filter/QoS Resource Information 5.15.7.1 resource filter distribution 5.15.8 Other 5.15.8.1 addact 5.15.8.2 watchdog service 5.15.8.3 consoleinfo 5.15.8.4 telnetinfo 5.15.8.5 mflag 5.15.8.6 dumpswitch 5.15.8.7 sysname 5.15.8.8 serverinfo ftp 5.15.8.9 serverinfo ftp ip6 5.15.8.10 serverinfo ftp filter 5.15.8.11 serverinfo ftp filter move 5.15.8.12 serverinfo ftp filter default 5.15.8.13 serverinfo sftp 5.15.8.14 serverinfo sftp ip6 5.15.8.15 serverinfo telnet 5.15.8.16 serverinfo telnet ip6 5.15.8.17 serverinfo telnet filter 5.15.8.18 serverinfo telnet filter move 5.15.8.19 serverinfo telnet filter default 5.15.8.20 serverinfo ssh 5.15.8.21 serverinfo ssh ip6 5.15.8.22 serverinfo ssh filter 5.15.8.23 serverinfo ssh filter move 5.15.8.24 serverinfo ssh filter default 5.15.8.25 serverinfo http 5.15.8.26 serverinfo http ip6 5.15.8.27 serverinfo http filter 5.15.8.28 serverinfo http filter move 5.15.8.29 serverinfo http filter default 5.15.8.30 serverinfo dns 5.15.8.31 serverinfo dns ip6 5.15.8.32 serverinfo dns filter 5.15.8.33 serverinfo dns filter move 5.15.8.34 serverinfo dns filter default 5.15.8.35 serverinfo sntp 5.15.8.36 serverinfo sntp ip6 5.15.8.37 serverinfo sntp filter 5.15.8.38 serverinfo sntp filter move 5.15.8.39 serverinfo sntp filter default 5.15.8.40 serverinfo time ip tcp 5.15.8.41 serverinfo time ip6 tcp 5.15.8.42 serverinfo time ip udp 5.15.8.43 serverinfo time ip6 udp 5.15.8.44 serverinfo time filter 5.15.8.45 serverinfo time filter move 5.15.8.46 serverinfo time filter default 5.16 Login banner Settings 5.16.1 Login banner Information 5.16.1.1 login banner telnet 5.16.1.2 login banner ftp 5.16.1.3 login banner ssh 5.16.1.4 login banner description 5.17 Mode and Terminal Operation 5.17.1 Mode Operation Commands 5.17.1.1 admin 5.17.1.2 su 5.17.1.3 exit 5.17.1.4 configure 5.17.1.5 end 5.17.1.6 quit 5.17.1.7 top 5.17.1.8 up 5.17.1.9 ! 5.17.2 Terminal Operation Commands 5.17.2.1 terminal pager Page Page 5.17.2.2 terminal window 5.17.2.3 terminal charset 5.17.2.4 terminal prompt 5.17.2.5 terminal timestamp 5.17.2.6 terminal bell 5.17.2.7 terminal logging 5.17.2.8 show terminal 5.17.3 Command Execution History 5.17.3.1 show logging command Mode and Terminal Operation Commands 5.17.3.2 clear logging command 5.17.4 Command Alias 5.17.4.1 alias 5.17.4.2 show alias 5.17.4.3 clear alias 5.17.5 Command Output 5.17.5.1 more 5.17.5.2 tail 5.18 System Operations and Display 5.18.1 System Operations and Display Commands 5.18.1.1 show system information 5.18.1.2 show system status Page Page Page Page Page Page 5.18.1.3 show tech-support 5.18.1.4 show logging error Page Page Page 5.18.1.5 clear logging error 5.18.1.6 show logging syslog 5.18.1.7 clear logging syslog 5.18.1.8 clear statistics 5.18.1.9 show date 5.18.1.10date 5.18.1.11rdate 5.18.1.12reset 5.19 Configuration Display, Delete and 5.19.1 Configuration Display Commands 5.19.1.1 show candidate-config 5.19.1.2 show running-config 5.19.1.3 show startup-config 5.19.1.4 diff 5.19.2 Configuration Delete Commands 5.19.2.1 delete 5.19.3 Configuration Operation Commands 5.19.3.1 load 5.19.3.2 save 5.19.3.3 commit 5.19.3.4 commit try time 5.19.3.5 commit try cancel 5.19.3.6 discard 5.19.4 File Operation Commands 5.19.4.1 dir 5.19.4.2 copy 5.19.4.3 remove 5.19.4.4 rename 5.19.4.5 format 5.20 Ethernet Counter, Log, Statistics, and Status Display and Clear Operation 5.20.1 Ethernet Counter, Log, Statistics, and Status Display 5.20.1.1 show ether Page Page Page 5.20.1.2 show ether brief Page 5.20.1.3 show ether statistics Example of executing XG0224 Execution example when detail of XG0224 (Giga port) is specified Execution example when detail of XG0224 (10Giga port) is specified Page Page Example of executing internal connection port of XG0448 Execution example when detail of XG0448 (Giga port) is specified Execution example when detail of XG0448 (10Giga port) is specified Page Page Page Page Example of executing 10Giga port of XG2600 Page Page Page Execution example when detail of XG2600 (10Giga port) is specified Page 5.20.1.4 show ether media-info Page 5.20.1.5 show ether utilization Display the utilization information of all Ethernet ports. Execution Example (XG2600) 5.20.1.6 show ether queue Execution Example (XG0224 / XG0448 / XG2600) 1) CoS Queue 0 Number of packets remaining in the hardware COS queue 0 5.20.2 Ethernet Counter, Log, and Statistics Clear Commands and statistics clear commands. 5.20.2.1 clear ether statistics 5.21 USB connection Counter, Log, Statistics, and Status Display and 5.21.1 USB connection Counter, Log, and Statistics Clear 5.21.1.1 show usb hcd status 5.21.1.2 show usb storage status Page Page 5.22 LACP Counter, Log, Statistics, and Status Display and Clear Operation 5.22.1 LACP Counter, Log, Statistics, and Status Display 5.22.1.1 show lacp Page 5.22.1.2 show lacp statistics 5.22.2 LACP Counter, Log, Statistics, and Status Clear 5.22.2.1 clear lacp statistics 5.23 M1 port Status Display command 5.23.1 M1 port Status Display command 5.23.1.1 show oob 5.24 Interface Counter, Log, Statistics, and 5.24.1 Interface Counter, Log, Statistics, and Status Display 5.24.1.1 show interface Page 5.24.1.2 show interface brief 5.24.1.3 show interface summary 5.25 ARP Entry Display and Clear Operation 5.25.1 ARP Entry Display Commands 5.25.1.1 show arp Page 5.25.2 ARP Entry Clear Commands 5.25.2.1 clear arp 5.26 Routing Table Entry Display Commands 5.26.1 IPv4 Routing Table Entry Display Commands 5.26.1.1 show ip route Page 5.26.1.2 show ip route summary 5.26.1.3 show ip route kernel Page 5.26.2 IPv6 Routing Table Entry Display Commands 5.26.2.1 show ipv6 route Page 5.26.2.2 show ipv6 route summary Routing Table Entry Display Commands 5.26.2.3 show ipv6 route kernel Function Display routing table of IPv6 kernel Syntax show ipv6 route kernel show ipv6 route kernel summary N/A Page 5.26.2.4 show ipv6 ra default-router-list 5.26.2.5 show ipv6 ra prefix-list 5.27 Packet Statistics Display and Clear 5.27.1 IPv4 Packet Statistics Display Commands 5.27.1.1 show ip traffic Page Page 5.27.2 IPv4 Packet Statistics Clear Commands This section explains the commands related to IPv4 packet statistics clearing. 5.27.2.1 clear ip traffic 5.27.3 IPv6 Packet Statistics Display Commands 5.27.3.1 show ipv6 traffic Page Page 5.27.4 IPv6 Packet Statistics Clear Commands 5.27.4.1 clear ipv6 traffic 5.28 Bridge Counter, Log, Statistics, and Status Display and Clear Operation 5.28.1 Bridge Counter, Log, Statistics, and Status Display 5.28.1.1 show bridge Page 5.28.2 Bridge Counter, Log, Statistics, and Status Clear 5.28.2.1 clear bridge 5.28.3 Spanning Tree Counter, Log, Statistics, and Status 5.28.3.1 show spanning-tree Page Page Page Display of only spanning tree information of the active interface Page Page Page Page To display all spanning tree information in detail Page Page Page 5.28.3.2 show spanning-tree instance Function Display the spanning tree information. Syntax show spanning-tree instance <instance_id> [detail] <instance_id> Display the spanning tree information of the specified instance only. Page Page Page Page Display of detailed spanning tree information of instance 0 Page Page Page Display of detailed spanning tree information of the specified instance other than instance 0 Page Page 5.28.4 Spanning Tree Counter, Log, Statistics, and Status Clear 5.28.4.1 clear spanning-tree statistics 5.29 LLDP Counter, Log, Statistics, and Status Display and Clear Operation 5.29.1 LLDP Counter, Log, Statistics, and Status Display 5.29.1.1 show lldp LLDP Counter, Log, Statistics, and Status Display and Clear Operation Page Page Page Page 5.29.1.2 show lldp summary 5.29.1.3 show lldp neighbors Page Page 5.29.1.4 show lldp statistics Page 5.29.2 LLDP Counter, Log, Statistics, and Status Clear 5.29.2.1 clear lldp neighbors 5.29.2.2 clear lldp statistics 5.30 VLAN Counter, Log, Statistics, and 5.30.1 VLAN Counter, Log, Statistics, and Status Display 5.30.1.1 show vlan VLAN Counter, Log, Statistics, and Status Display Commands Display of only the number of registered VLAN Display of the registered VLAN configuration only 5.30.1.2 show vlan brief 5.31 QoS Counter, Log, Statistics, and 5.31.1 COS Queue Counter, Log, Statistics, and Status Display 5.31.1.1 show qos cosmap 5.31.1.2 show qos prioritymap 5.32 SSH Counter, Log, Statistics, and 5.32.1 SSH Counter, Log, Statistics, and Status Display 5.32.1.1 show ssh server key SSH Counter, Log, Statistics, and Status Display Commands Display of the DSA public key 1) The DSA public key for host authentication of this device Display of the RSA public key 1) The RSA public key for host authentication of this device 5.33 IGMP Snooping Counter, Log, Statistics, and Status Display and 5.33.1 IGMP Snooping Counter, Log, Statistics, and Status 5.33.1.1 show igmpsnoop brief 5.33.1.2 show igmpsnoop mrouter 5.33.1.3 show igmpsnoop reporter 5.33.1.4 show igmpsnoop statistics Page 5.33.2 IGMP Snooping Counter, Log, Statistics, and Status Clear Commands 5.33.2.1 clear igmpsnoop statistics 5.33.2.2 clear igmpsnoop group 5.34 Loopdetection Counter, Log, Statistics, and Status Display and 5.34.1 Loopdetection Counter, Log, Statistics, and Status 5.34.1.1 show loopdetect Page 5.35 AAA Status Display and Clear 5.35.1 AAA Status Display Commands 5.35.1.1 show aaa radius client server-info 5.36 NETTIME (time/sntp) Server and Client Statistics Display and Clear Operation 5.36.1 NETTIME (time/sntp) Statistics Display Commands 5.36.1.1 show nettime status 5.36.1.2 show nettime statistics NETTIME (time/sntp) Server and Client Statistics Display and Clear Operation Commands No option If options are omitted, all NETTIME information running on this device is displayed. Page 5.36.2 NETTIME (time/sntp) Statistics Clear Commands 5.36.2.1 clear nettime statistics 5.37 ProxyDNS Statistics Display and Clear 5.37.1 ProxyDNS Statistics Display Commands 5.37.1.1 show proxydns statistics Page 5.37.2 ProxyDNS Statistics Clear Commands 5.37.2.1 clear proxydns statistics 5.38 SNMP Statistics Display and Clear 5.38.1 SNMP Statistics Display Commands 5.38.1.1 show snmp statistics Page 5.38.2 SNMP Statistics Clear Commands 5.38.2.1 clear snmp statistics 5.39 Ethernet L3 Monitor Function Counter, Log, Statistics, and Status Display and 5.39.1 Ethernet L3 Monitor Function Counter, Log, Statistics, and Status Display Commands 5.39.1.1 show icmpwatch 5.39.1.2 show icmpwatch statistics 5.39.2 Ethernet L3 Monitor Function Counter, Log, Statistics, and Status Clear Commands 5.39.2.1 clear icmpwatch statistics 5.40 Login Information Operations and Display Commands 5.40.1 Login Information Display Commands 5.40.1.1 show users Page 5.40.2 Login Information Operation Commands 5.40.2.1 clear line Socket Status Display Commands 5.41 Socket Status Display Commands This section explains about commands related to socket status display. 5.41.1 Socket Status Display Commands This section explains commands related to socket status display. 5.41.1.1 show socket Socket Status Display Commands Page 5.42 Trace Show and Clear Operation 5.42.1 Trace Show Commands 5.42.1.1 show trace ssh Page 5.42.2 Trace Clear Commands 5.42.2.1 clear trace ssh 5.43 Ethernet Port Control Commands 5.43.1 Ethernet Port Control Commands 5.43.1.1 offline 5.43.1.2 online 5.44 RADIUS Control Commands 5.44.1 RADIUS Control Commands 5.44.1.1 radius recovery 5.45 USB Port Control Commands 5.45.1 USB Port Control Commands 5.45.1.1 usbctl 5.46 Im here Commands 5.46.1 Im here Commands 5.46.1.1 iamhere 5.47 Other Commands 5.47.1 Other Commands 5.47.1.1 ping Page 5.47.1.2 traceroute Page 5.47.1.3 telnet Page 5.48 Effect by "commit" Command Execution Page Page Page Chapter 6 Managing the Device 6.1 Verifying the Device Operations 6.1.1 Verifying Hardware Status Page Page Page Page Page Execution Example (XG0224) Execution Example (XG2600) 1) Port number Page 6.1.2 Verifying System Status 6.1.3 Reviewing Log Messages 6.1.3.1 Format of System Log Message 6.1.3.2 Reviewing Error Logs Page Page 6.2 Saving/Restoring Configuration Information 6.2.1 Saving/restoring configuration information using FTP z Saving configuration information using the FTP server function z Restoring configuration information using the FTP server function z 6.2.2 Saving/restoring configuration information using a Compact Flash Card z Saving configuration information using a Compact Flash Card XG0224 Restoring configuration information using a CompactFlash card 6.2.3 Saving/restoring configuration information using USB memory z Saving configuration information using USB memory Restoring configuration information using USB memory Page 6.3 Updating Firmware 6.3.1 Updating Firmware Using FTP 3. Change the current directory to the one where the firmware is stored. Connect the device and the Personal Computer Using LAN Update the Firmware 4. Log in with the account name "ftp-admin". 5. Transfer the firmware to the device. 6. Check that the firmware is completely transferred. 6.3.2 Updating Firmware Using CompactFlash card Firmware Update with a telnet or a console Firmware Update with a WWW browser 6.3.3 Updating Firmware Using USB memory Firmware Update with a telnet or a console Firmware Update with a WWW browser 6.4 Actions When Firmware Update Failes (Backup Firm Function) 6.4.1 Preparing the Device 1. Make sure that the power of this device is turned off. 2. Connect this device and a PC via LAN. Page Page 6.5 Extracting of Maintenance Information 6.5.1 Procedure for Extracting Maintenance Information when a System/Subsystem Failure Occurred Page 7.1 To Return to the Initial Shipment Settings (Initializing Switch Configuration) Page ASNMP Traps A.1 Trap List B List of MIBs B.1 Standard MIB Definitions B.1.1 system Group B.1.2 interfaces Group B.1.3 address translation Group B.1.4 ip Group ip Group ipAddr Group ipRoute Group ipNetToMedia Group ipCidrRoute Group inetCidrRoute Group ipv6 Group ipv4Interface Group ipv6Interface Group ipSystemStats Group ipAddressPrefix Group ipAddress Group ipNetToPhysical Group B.1.5 icmp Group icmp Group icmpMsgStats Group icmpStat Group B.1.6 tcp Group tcp Group tcpConnection Group tcpConn Group tcpListener Group B.1.7 udp Group udpEndpoint Group udp Group udpListener Group B.1.8 dot3 Group dot3Stats Group dot3Pause Group dot3Control Group B.1.9 snmp Group B.1.10 rmon Group rmonEthernetStatistics Group rmonHistoryControl Group rmonEthernetHistory Group B.1.11 dot1dBridge Group dot1dStp Group dot1dTp Group dot1dExtBase Group dot1dPriority Group B.1.12 qBridgeMIB Group dot1qBase Group ifx Group dot1qVlan Group B.1.13 ifMIB Group B.1.14 radiusMIB Group radiusAccClient Group B.2 Fujitsu Extension MIB B.2.3 nonosLineset Group B.2.1 nonosSystem Group B.2.2 nonosSystemError Group XG0224 / XG0448 / XG2600 B.2.4 nosDualPower Group XG2600 B.3 IEEE802.1MIB B.3.1 lldpMIB Group lldpConfiguration Group lldpPortConfig Group lldpConfigManAddr Group lldpStatistics Group lldpStatsTxPort Group lldpStatsRx Port Group lldpLocManAddr Group lldpLocalSystemData Group lldpLocPort Group lldpRem Group lldpRemManAddr Group lldpXdot3PortConfig Group lldpRemUnknownTLV Group lldpRemOrgDefInfo Group lldpXdot3LocPort Group lldpXdot3LocPower Group lldpXdot3RemPower Group lldpXdot3LocLinkAgg Group lldpXdot3LocMaxFrameSize Group lldpXdot3RemPort Group lldpXdot3RemLinkAgg Group lldpXdot1Loc Group lldpXdot1LocProtoVlan Group lldpXdot1LocVlanName Group lldpXdot1LocProtocol Group lldpXdot1Rem Group lldpXdot1RemProtoVlan Group lldpXdot1RemVlanName Group lldpXdot1RemProtocol Group Index Symbols Number A B E F H I K M N O P Q R S T U V W