Guide for System Administrators of Intel Server Products
 Disclaimer
 Instrucciones de seguridad importantes
Important Safety Instructions
Wichtige Sicherheitshinweise
Consignes de sécurité
Page
 Manual Organization
About this Manual
Page
 Contents
 ACL Commands
 Gvrp Commands
 Line Commands 141
 QoS Commands
 Radius Commands 215
 Spanning-Tree Commands
 System Management Commands 321
 Vlan Commands
 Appendix a Getting Help 405
 Overview
Using CLI
 Command in the Global Configuration mode
Privileged Exec Mode
 Interface Configuration and Specific Configuration Modes
 Starting the CLI
 Negating the Effect of Commands
 Nomenclature
 CLI Command Conventions
 Using CLI
 Aaa authentication login
AAA Commands
Global Configuration mode
 Following example configures the authentication login
Aaa authentication enable
 Consoleconfig# aaa authentication enable default enable
Login authentication
 Line Configuration mode
Enable authentication
Consoleconfig-line#login authentication default
 There are no user guidelines for this command
Ip http authentication
Consoleconfig-line#enable authentication default
 Following example configures the Http authentication
Ip https authentication
 Following example configures Https authentication
Show authentication methods
Show authentication methods
 Following example displays the authentication configuration
Password
This command has no default configuration
Privileged Exec mode
 No password is defined
Enable password
 No user is defined
No enable password is defined
Consoleconfig# enable password secret level
Username
 User account can be created without a password
 AAA Commands
 Interface Configuration Vlan mode
Address Table Commands Bridge address
 Bridge multicast filtering No bridge multicast filtering
Folowing example, bridge multicast filtering is enabled
Consoleconfig# bridge multicast filtering
Bridge multicast filtering
 No multicast addresses are defined
Bridge multicast address
 Following example registers the MAC address
Bridge multicast forbidden address
No forbidden addresses are defined
 Bridge multicast forward-all
This setting is disabled Command Mode
 Bridge multicast forbidden forward-all
This setting is disabled
This example, all multicast packets on port 1 are forwarded
 Seconds Time in seconds. Range 10-630 seconds
Default setting is 300 seconds
Bridge aging-time
Bridge aging-time seconds No bridge aging-time
 Following example, the bridge tables are cleared
Clear bridge
Port security
Clear bridge
 Consoleconfig-if#port security forward trap
Port security mode
Interface Configuration Ethernet, port-channel mode
Port security mode lock mac-addresses No port security mode
 Port security routed secure-address
Consoleconfig-if#port security mode mac-addresses
Mac-address a valid MAC address
 No addresses are defined
Show bridge address-table
 Console# show bridge address-table
Show bridge address-table static
 Vlan Specifies a valid VLAN, such as Vlan
Show bridge address-table count
Console# show bridge address-table static
 Console# show bridge address-table count
Show bridge multicast address-table
 Console# show bridge multicast address-table
 Show bridge multicast filtering vlan-id
Show bridge multicast filtering
Console# show bridge multicast address-table format ip
 Console# show bridge multicast filtering
Show ports security
 Following table describes the fields shown above
Show ports security addresses
Console# show ports security
 Console# show ports security addresses
 Address Table Commands
 Ip access-list
ACL Commands
Ip access-list name No ip access-list name
 IP Protocol Abbreviated Name Protocol Number
Permit ip
 ACL Commands
 Deny-icmp Deny-igmp
IP-Access List Configuration mode
Deny IP
No IPv4 ACL is defined
 Deny-tcp deny-udp
 Mac access-list
 Permit MAC
Mac access-list name No mac access-list name
Default for all ACLs is deny all
Following example shows how to create a MAC ACL
 Deny MAC
MAC-Access List Configuration mode
No MAC ACL is defined
 This command has no default configuration
 Show access-lists name
Service-acl
Show access-lists
Service-acl input acl-name No service-acl input
 Name The name of the ACL
Show interfaces access-lists
Following example displays access lists defined on a device
Console# show access-lists
 Console# show interfaces access-lists
 Clock set
Clock Commands
 No external clock source
Clock source
Clock timezone
Sntp Sntp servers
 No clock timezone
Clock summer-time
Clock set to UTC
 No clock summer-time recurring
 No authentication key is defined
Sntp authentication-key
 Sntp authenticate no sntp authenticate
Sntp authenticate
 Sntp trusted-key key-number No sntp trusted-key key-number
Sntp client poll timer
Following example authenticates key
Sntp trusted-key
 Seconds Polling interval in seconds. Range
Sntp broadcast client enable
Sntp client poll timer seconds No sntp client poll timer
Sntp broadcast client is disabled
 Sntp anycast client is disabled
Sntp anycast client enable
Following example enables the Sntp broadcast clients
Sntp anycast client enable No sntp anycast client enable
 Interface Configuration Ethernet, port-channel, Vlan mode
Sntp client enable Interface
Following example enables Sntp anycast clients
Sntp client is disabled on an interface
 Sntp unicast client poll
Sntp unicast client enable
Sntp unicast client enable No sntp unicast client enable
Sntp unicast client is disabled
 No sntp server host
Polling is disabled
Consoleconfig# sntp unicast client poll
Sntp server
 Show clock
Detail Shows timezone and summertime configuration
Show clock detail
 Show sntp configuration
Show sntp configuration
Console# show clock
 Show sntp status
Console# show sntp configuration
Show sntp status
 Console# show sntp status
Following example shows the status of the Sntp
 Copy
Configuration and Image File Commands
 Copying an Image File from a Server to Flash Memory
Copying a Boot File from a Server to Flash Memory
 Delete
Storing the Running or Startup Configuration on a Server
Delete url
 Boot system image-1 image-2
Boot system
Sys, *.prv, image-1 and image-2 files cannot be deleted
 Show running-config
Show running-config
Console# boot system image-1
 Show startup-config
Show startup-config
Console# show running-config
 Show backup-config
Show backup-config
Console# show startup-config
 Show bootvar
Show bootvar
Console# show backup-config
 Console# show bootvar
 Configuration and Image File Commands
 Interface ethernet interface
Ethernet Configuration Commands
Interface ethernet
Interface range ethernet
 Interface range ethernet port-listall
Shutdown
Shutdown No shutdown
 Description string No description
Description
 Maximum port capability
Speed
Following example adds a description to Ethernet port
Speed 10 100 No speed
 Interface is set to full duplex
Interface Configuration Ethernet mode
Duplex
Duplex half full No duplex
 Negotiation
Consoleconfig# interface ethernet ext.1
No negotiation
 Flowcontrol auto on off No flowcontrol
Flowcontrol
 Mdix on auto No mdix
Default setting is on
Following example, automatic crossover is enabled on port
Mdix
 Port jumbo-frame No port jumbo-frame
Back-pressure
Port jumbo-frame
Back-pressure No back-pressure
 Clear counters
Jumbo frames are disabled on the device
Global Configuration
Following example, jumbo frames are enabled on the device
 Console# clear counters ethernet ext.2
Set interface active
Following example, the counters for interface 1 are cleared
Following example reactivates interface
 Following example displays auto-negotiation information
Show interfaces advertise
Console# show interfaces advertise
 Console# show interfaces configuration
Show interfaces configuration
 Show interfaces status
 Show interfaces description
 Interface a valid Ethernet port. Full syntax unit/port
Show interfaces counters
Console# show interfaces description
 Console# show interfaces counters
 Following table describes the fields shown in the display
Following example displays counters for Ethernet port
Console# show interfaces counters ethernet ext.1
 Console# show port jumbo-frame
This command is relevant to Giga devices only
Show ports jumbo-frame
Show ports jumbo-frame
 Multicast packets are not counted
Following example enables counting multicast packets
Port storm-control include-multicast GC
Port storm-control include-multicast IC
 Broadcast storm control is disabled
Port storm-control broadcast enable
 Port storm-control broadcast rate
Default storm control broadcast rate is 3500 Kbits/Sec
 Console# show ports storm-control
Following example displays the storm control configuration
Show ports storm-control
Show ports storm-control interface
 Disabled 3500 Broadcast
 Gvrp enable No gvrp enable
Gvrp Commands
Gvrp enable Global
Gvrp enable Interface
 Garp timer join leave leaveall timervalue No garp timer
Garp timer
Gvrp is disabled on all interfaces
Following example enables Gvrp on Ethernet port
 Gvrp vlan-creation-forbid
Consoleconfig# interface ethernet ext.6
Gvrp vlan-creation-forbid No gvrp vlan-creation-forbid
 Dynamic registration of VLANs on the port is allowed
Dynamic Vlan creation or modification is enabled
Gvrp registration-forbid
Gvrp registration-forbid No gvrp registration-forbid
 Console# clear gvrp statistics ethernet ext.1
Clear gvrp statistics
 Console# show gvrp configuration
Show gvrp configuration
Privieged Exec mode
Following example displays Gvrp configuration information
 Following example shows Gvrp statistical information
Show gvrp statistics
Console# show gvrp statistics
 Console# show gvrp error-statistics
Show gvrp error-statistics
Following example displays Gvrp statistical information
 Ip igmp snooping No ip igmp snooping
Igmp Snooping Commands
Ip igmp snooping Global
Ip igmp snooping Interface
 Automatic learning of multicast device ports is enabled
Following example enables Igmp snooping on Vlan
Ip igmp snooping mrouter learn-pim-dvmrp
 Ip igmp snooping host-time-out
Time-out- Specifies the host timeout in seconds. Range
Default host-time-out is 260 seconds
Consoleconfig-if#ip igmp snooping mrouter learn-pim-dvmrp
 Consoleconfig-if#ip igmp snooping host-time-out
Default value is 300 seconds
Ip igmp snooping mrouter-time-out
 Consoleconfig-if#ip igmp snooping mrouter-time-out
Default leave-time-out configuration is 10 seconds
Ip igmp snooping leave-time-out
 Vlan-id Specifies the Vlan number
Consoleconfig-if#ip igmp snooping leave-time-out
Show ip igmp snooping mrouter
Show ip igmp snooping mrouter interface vlan-id
 Show ip igmp snooping interface vlan-id
Show ip igmp snooping interface
 Console# show ip igmp snooping interface
Show ip igmp snooping groups
 Console# show ip igmp snooping groups
 Igmp Snooping Commands
 Ip address ip-address mask prefix-length
IP Address Commands
Interface Configuration Ethernet, VLAN, port-channel mode
Ip address
 Ip address dhcp hostname host-name No ip address dhcp
Ip address dhcp
 Ip default-gateway ip-address No ip default-gateway
Ip default-gateway
No default gateway is defined
 Following example defines default gateway
This command is only operational in Switch mode
Show ip interface
 Console# show ip interface
Arp
 Arp timeout seconds No arp timeout
Arp timeout
Default timeout is 60000 seconds
 Console# clear arp-cache
Clear arp-cache
Show arp
Clear arp-cache
 Ip domain-lookup No ip domain-lookup
Ip domain-lookup
Show arp
Following example displays entries in the ARP table
 Ip domain-name
Default domain name is not defined
Ip domain-name name No ip domain-name
 Following example sets the available name server
Ip name-server
Server-address- Specifies IP addresses of the name server
No name server addresses are specified
 No host is defined
Ip host
Clear host
No ip host name
 Clear host dhcp name
Clear host dhcp
Console# clear host
 Console# clear host dhcp
Show hosts
Show hosts name
Name Specifies the host name. Range 1-158 characters
 Console# show hosts
Following example displays host information
 Lacp system-priority value No lacp system-priority
Lacp Commands
Lacp system-priority
Lacp port-priority
 Lacp timeout long short no lacp timeout
Lacp timeout
Lacp port-priority value No lacp port-priority
 Default port timeout value is long
Short Specifies the short timeout value
Show lacp ethernet
 Console# show lacp ethernet ext.1
Following example display Lacp information for Ethernet port
 Show lacp port-channel
 Portchannelnumber Valid port-channel number
Show lacp port-channel portchannelnumber
Console# show lacp port-channel
 Show line
Line Commands
This command has no user guidelines
Line
 Show line telnet ssh
Exec mode
 Line Commands
 Line Commands
 Name Access list name. Range 1-32 characters
Management ACL Commands
Management access-list
Management access-list name No management access-list name
 Consoleconfig# management access-class mlist
Consoleconfig# management access-list mlist
 Management Access-list Configuration mode
If no permit rule is defined, the default is set to deny
 Deny Management
 Management access-class
 Following example displays the mlist management access list
Show management access-list name
 Console# show management access-class
Show management access-class
 Management ACL Commands
 Console# test copper-port tdr ext.3
PHY Diagnostics Commands
Test copper-port tdr
Test copper-port tdr interface
 Maximum length of the cable for the TDR test is 120 meters
User Exec mode
Show copper-ports tdr
Show copper-ports tdr interface
 Console show copper-ports cable-length
Port must be active and working in 100M or 1000M mode
Show copper-ports cable-length
Show copper-ports cable-length interface
 PHY Diagnostics Commands
 Interface port-channel port-channel-number
Port Channel Commands
Consoleconfig# interface port-channel
Interface port-channel
 Interface range port-channel port-channel-rangeall
Consoleconfig# interface range port-channel 1-2,6
Interface range port-channel
Channel-group
 Port is not assigned to a port-channel
Show interfaces port-channel
Show interfaces port-channel port-channel-number
 Console# show interfaces port-channel
Following example displays information on all port-channels
 Monitors both received and transmitted packets
Port Monitor Commands
 Ingress mirrored packets are transmitted untagged
Console config-if#port monitor vlan-tagging
Port monitor vlan-tagging
Port monitor vlan-tagging No port monitor vlan-tagging
 Show ports monitor
Show ports monitor
Console show ports monitor
 Port Monitor Commands
 Following example enables QoS on the device
QoS Commands
Qos basic advanced service No qos
QoS basic mode is enabled
 Show qos
Trust mode is displayed if QoS is enabled in basic mode
Show qos
Show qos aggregate-policer
 There are no user guidelines
Show qos interface
Console# show qos aggregate-policer policer1
 Console# show qos interface ethernet 1 buffers
There is no default configuration for this command
 Dscp-queue- Indicates the Dscp to queue map
Show qos map User Exec mode command displays all QoS maps
Show qos map
Show qos map dscp-queue
 Console show qos map
Class-map
Following example displays the Dscp port-queue map
Class-map class-map-namematch-all match-any
 Show class-map
By default, the match-allparameter is selected
Show class-map class-map-name
 Acl-name- Specifies the name of an IP or MAC ACL
Match access-group acl-name No match access-group acl-name
Match
Following example shows the class map for class1
 Policy-map
Class-map Configuration mode
Policy-map-name- Specifies the name of the policy map
 No policy map is defined
Class
 Show policy-mapUser Exec command displays the policy maps
Policy-map Configuration mode
Show policy-map
 Trust cos-dscp No trust cos-dscp
Policy-map Class Configuration mode
Trust cos-dscp
Following example displays all policy maps
 No set
Set
 No police
Police
 Service-policy input policy-map-name No service-policy input
Service-policy
 No qos aggregate-policer
Qos aggregate-policer
No aggregate policer is define
 Exceed-action drop
 Console show qos aggregate-policer policer1
Police aggregate
 No wrr-queue cos-map queue-id
Wrr-queue cos-map
 Following example maps CoS 7 to queue
Wrr-queue bandwidth
No wrr-queue bandwidth
 Priority-queue out num-of-queues number-of-queues
Priority-queue out num-of-queues
 All queues are expedite queues
Consoleconfig# priority-queue out num-of-queues
Traffic-shape
No priority-queue out num-of-queues
 No shape is defined
 Ethernet Notify Q depth Qid Size 125
 Qos wrr-queue threshold
 Percent for all thresholds
Console config# qos wrr-queue threshold gigabitethernet 1
Qos map policed-dscp
No qos wrr-queue threshold tengigabitethernet queue-id
 Qos map dscp-queue
Consoleconfig# qos map policed-dscp 3 to
Dscp values 3,11,19… cannot be remapped to other values
 Qos trust cos dscp no qos trust
Following table describes the default map
Qos trust Global
Following example maps Dscp values 33, 40 and 41 to queue
 Qos trust Interface
CoS is the default trust mode
Qos trust No qos trust
 Qos cos
Default CoS value of a port is
No qos cos
 Qos dscp-mutation
Following example configures port 15 default CoS value to
Qos dscp-mutation No qos dscp-mutation
 Qos map dscp-mutation
 QoS Commands
 QoS Commands
 Show rmon statistics
Rmon Commands
Console# show rmon statistics ethernet ext.1
 Rmon Commands
 Rmon collection history
 Show rmon collection history
Cannot be configured for a range of interfaces Range context
 Console# show rmon collection history
Show rmon history
 Console# show rmon history 1 throughput
Console# show rmon history 1 errors
 Console# show rmon history 1 other
 No rmon alarm index
Rmon alarm
 Type is absolute Startup direction is rising-falling
 Console# show rmon alarm-table
Show rmon alarm-table
Show rmon alarm-table
Following example displays the alarms table
 Following example displays Rmon 1 alarms
Show rmon alarm
Show rmon alarm number
Number Specifies the alarm index. Range
 Last Sample Value
Rmon event
 Show rmon events
Show rmon events
 Event Specifies the event index. Range
Show rmon log
Following example displays the Rmon event table
Show rmon log event
 Console# show rmon log
Following example displays the Rmon log table
 Rmon table-size
Consoleconfig# rmon table-size history
History table size is Log table size is
 No Radius server host is specified
Radius Commands
Radius-server host
No radius-server host ip-addresshostname
 Radius-server key key-string No radius-server key
Radius-server key
 Key-string is an empty string
Radius-server retransmit
Software searches the list of Radius server hosts 3 times
 Radius-server source-ip
Consoleconfig# radius-server retransmit
Source Specifies a valid source IP address
 Timeout value is 3 seconds
Radius-server timeout
Consoleconfig# radius-server timeout
 Show radius-servers
Deadtime setting is
Consoleconfig# radius-server deadtime
Radius-server deadtime
 Show radius-servers
Following example displays Radius server settings
Console# show radius-servers
 Radius Commands
 Ip http server No ip http server
Web Server Commands
Ip http server
Ip http port
 No ip http port
Ip http exec-timeout
Ip http exec-timout minutes seconds no ip http exec-timout
 Ip https server No ip https server
Default timout is 10 minutes
Disabled
Ip https server
 Ip https port port-number No ip https port
Ip https exec-timeout
Following example configures the https port number to
Ip https port
 No ip https exec-timout
Crypto certificate generate
 Crypto certificate request
Consoleconfig# crypto certificate 1 generate key-generate
Following example regenerates an Https certificate
 There is no default configuration for this command
 Console# crypto certificate 1 request
Crypto certificate import
Crypto certificate number import
Number Specifies the certificate number. Range
 Ip https certificate
Consoleconfig# crypto certificate 1 import
Ip https certificate number No ip https certificate
 Show crypto certificate mycertificate number
Consoleconfig# ip https certificate
Show crypto certificate mycertificate
Certificate number
 Console# show crypto certificate mycertificate
Show ip http
Following example displays the certificate
Show ip http
 Console# show ip http
Following example displays the Http server configuration
Show ip https
Show ip https
 Web Server Commands
 Web Server Commands
 Snmp-server community
Snmp Commands
No communities are defined
 Snmp-server view
 No view entry exists
Snmp-server group
 No group entry exists
No snmp-server group groupname v1 v2 v3 noauth auth priv
 No snmp-server user username remote engineid-string
Snmp-server user
 Snmp-server engineID local
 Parameters
 Following example enables Snmp traps
Snmp-server enable traps
Snmp-server enable traps No snmp-server enable traps
Snmp traps are enabled
 No filter entry exists
Snmp-server filter
 Snmp-server host
 Snmp-server v3-host
 Following example configures an SNMPv3 host
Snmp-server trap authentication
Snmp-server trap authentication
 Snmp-server contact
No snmp-server trap authentication
Snmp failed authentication traps are enabled
Following example enables Snmp failed authentication traps
 IntelTechnicalSupport
Snmp-server location
Snmp-server location text No snmp-server location
 Following example defines the device location as NewYork
Snmp-server set
 Show snmp
Show snmp
Following example displays the Snmp communications status
 Show snmp engineID
Show snmp engineid
 Viewname Specifies the name of the view. Range
Show snmp views
Following example displays the Snmp engine ID
Show snmp views viewname
 Groupname-Specifies the name of the group. Range
Following example displays the configuration of views
Show snmp groups
Show snmp groups groupname
 Filtername-Specifies the name of the filter. Range
Show snmp filters
Following table describes significant fields shown above
Show snmp filters filtername
 Username-Specifies the name of the user. Range
Following example displays the configuration of filters
Show snmp users
Show snmp users username
 Console# show snmp users
 Spanning-tree
Spanning-Tree Commands
Spanning-tree mode
Spanning-tree mode stp rstpmstp
 Spanning-tree forward-time
No spanning-tree mode
STP is enabled
Consoleconfig# spanning-tree mode rstp
 Seconds Time in seconds. Range
Consoleconfig# spanning-tree forward-time
 Spanning-tree max-age
Consoleconfig# spanning-tree hello-time
Spanning-tree max-age seconds No spanning-tree max-age
 Spanning-tree priority priority No spanning-tree priority
Following example configures spanning tree priority to
Spanning-tree priority
Forward-Time 1 = Max-Age Max-Age = 2*Hello-Time +
 Spanning-tree cost cost No spanning-tree cost
Spanning-tree disable
Spanning-tree disable No spanning-tree disable
Spanning-tree cost
 Cost Path cost of the port Range 1-200,000,000
Spanning-tree port-priority
 Spanning-tree portfast
Default port priority for Ieee Spanning TreeProtocol STP is
PortFast mode is disabled
Consoleconfig-if#spanning-tree port-priority
 Consoleconfig-if#spanning-tree portfast
Following example enables PortFast on Ethernet port
Spanning-tree link-type
 Spanning-tree pathcost method
Consoleconfig-if#spanning-tree link-type shared
Short path cost method
 Spanning-tree bpdu filtering flooding No spanning-tree bpdu
Following example sets the default path cost method to long
Default setting is flooding
Spanning-tree bpdu
 Spanning-tree mst priority
Clear spanning-tree detected-protocols
Spanning-tree mst instance-idpriority priority
 Spanning-tree mst max-hops
Console config # spanning-tree mst 1 priority
No spanning-tree mst instance-idpriority
 Console config # spanning-tree mst max-hops
Default number of hops is
Spanning-tree mst port-priority
 Spanning-tree mst cost
Consoleconfig-if#spanning-tree mst 1 port-priority
 Consoleconfig# spanning-tree mst configuration
Spanning-tree mst configuration
Spanning-tree mst configuration
Following example configures an MST region
 Following example maps VLANs 10-20 to MST instance
MST Configuration mode
Instance mst
Instance instance-idadd remove vlan vlan-range
 Revision mst
Default name is a radlanguest
Following example defines the configuration name as region1
Name mst
 Show mst
Value Configuration revision number Range
Default configuration revision number is
Following example sets the configuration revision to
 Exit
Exit mst
 Spanning-tree guard root
Abort mst
Abort
 Interface -number- a valid Ethernet port
Root guard is disabled
Show spanning-tree
Spanning-tree guard root No spanning-tree guard root
 Console# show spanning-tree
Following example displays spanning-tree information
 FWD
 Console# show spanning-tree active
 Console# show spanning-tree blockedports
 Console# show spanning-tree detail
 Port 3 disabled State N/A Role N/A Port id
 Console# show spanning-tree ethernet ext.1
Console# show spanning-tree mst-configuration
 Rstp
 Times hold 1, topology change 35, notification
 Designated port id Designated path cost
 Port Enabled State Forwarding Role Boundary Port id
 This switch is root for CST and IST master
 Hello Time 2 sec Max Age 20 sec
 Spanning-Tree Commands
 Ip ssh port port-number No ip ssh port
SSH Commands
Ip ssh port
Ip ssh server
 Crypto key generate dsa
Device configuration from a SSH server is disabled
DSA key pairs do not exist
 Crypto key generate rsa
Consoleconfig# crypto key generate dsa
Crypto key generate rsa
Following example generates DSA key pairs
 Ip ssh pubkey-auth No ip ssh pubkey-auth
AAA authentication is independent
Ip ssh pubkey-auth
Following example generates RSA key pairs
 No keys are specified
Crypto key pubkey-chain ssh
 No SSH public keys exist
SSH Public Key-string Configuration mode
Consoleconfig# crypt\o key pubkey-chain ssh
User-key
 Key-string
 Show ip ssh
Consoleconfig# crypto key pubkey-chain ssh
Show ip ssh
 Rsa Indicates the RSA key Dsa Indicates the DSA key
Following example displays the SSH server configuration
Show crypto key mypubkey
Show crypto key mypubkey rsa dsa
 Console# show crypto key mypubkey rsa
Show crypto key pubkey-chain ssh
 Console# show crypto key pubkey-chain ssh username bob
Console# show crypto key pubkey-chain ssh
 SSH Commands
 Logging on
Syslog Commands
Logging is enabled
Following example enables logging error messages
 Logging
 Logging buffered level No logging buffered
Default severity level is informational
Consoleconfig# logging buffered debugging
Logging buffered
 Logging buffered size
Default number of messages is
This command takes effect only after Reset
Consoleconfig# logging buffered size
 Logging file level No logging file
Default severity level is errors
Logging file
Clear logging
 Following example clears messages from the logging file
Consoleconfig# logging file alerts
Clear logging file
Clear logging file
 File-system logging copy
Aaa logging login no aaa logging login
Aaa logging
File-system logging
 Management logging deny No management logging deny
Logging file system events is enabled
Consoleconfig# file-system logging copy
Management logging
 Show logging
Logging management ACL events is enabled
Consoleconfig# management logging deny
Show logging
 AAA
Console# show logging
 Show logging file
Show logging file
Console# show logging file
 Show syslog-servers
Show syslog-servers
 Console# show syslog-servers
 Syslog Commands
 Ping
System Management Commands
 Following example displays pinging results
Traceroute
 Syntax
 Probe timed out
 Telnet
Default port is the Telnet port decimal23 on the host
 Keywords Table
Special Telnet Sequences
 Ports Table
 Connection The connection number. Range 1-4 connections
Following command switches to open Telnet session number
Resume
Reload
 Hostname name No hostname
Hostname
Reload
Following example reloads the operating system
 Console show users
Show users
Following example specifies the device host name
Show users
 Console show sessions
Show sessions
Show sessions
Following example lists open Telnet sessions
 Show system
Show system
Console# show system
 Unit unit Unit number
Privilaged Exec mode
Show system id
Show system id unit unit
 Show system flowcontrol
Show system flowcontrol
Console show system id
 Following example displays information on features control
Show system mode
Show system mode
Priviledged Exec mode
 Console show version
Service cpu-utilization
Service cpu-utilization No service cpu-utilization
Show version
 Show cpu utilization
This example enables measuring CPU utilization
Consoleconfig# service cpu-utilization
Show cpu utilization
 Console# show cpu utilization
 Tacacs-server host
TACACS+ Commands
No tacacs-server host ip-addresshostname
 Empty string
Tacacs-server key
Following example specifies a TACACS+ host
Tacacs-server key key-string No tacacs-server key
 Consoleconfig# tacacs-server timeout
Tacacs-server timeout
Following example sets the authentication encryption key
Following example sets the timeout value to
 Following example specifies the source IP address
Tacacs-server source-ip
Show tacacs
Source Specifies the source IP address
 Console# show tacacs
Ip-address Name or IP address of the TACACS+ server
 TACACS+ Commands
 Enable
User Interface Commands
Disable
 Login
Login
Following example return to Users Exec mode
Login User Exec mode command changes a login username
 Configure
Configure
Following example enters Global Configuration mode
 All configuration modes
Exit Configuration
Exit
 End
End
Privileged and User Exec modes
Following example closes an active terminal session
 Help
All command modes
Help
Terminal datadump
 Show history
Dumping is disabled
Show history
Terminal datadump No terminal datadump
 Console# show history
Show privilege
Show privilege
Console# show version
 Console# show privilege
Command The command to be executed
 Console Config# do show vlan
 Vlan
Vlan Commands
Following example enters the Vlan database mode
Vlan database
 Interface vlan vlan-id
Vlan Configuration mode
Interface vlan
Following example Vlan number 1972 is created
 Interface range vlan vlan-rangeall
Interface range vlan
All All existing static VLANs
 Following example gives Vlan number 19 the name Marketing
Name
No name
No name is defined
 Switchport protected is disabled
Switchport protected
Consoleconfig-if#switchport protected ethernet ext.1
 Switchport access vlan
Switchport mode
Switchport mode access trunk general No switchport mode
 Switchport trunk allowed vlan add vlan-listremove vlan-list
Switchport trunk allowed vlan
All ports belong to Vlan
 Vlan-id- Specifies the ID of the native Vlan
Switchport trunk native vlan
 VID=1
Switchport general allowed vlan
 Vlan-id- Specifies the Pvid Port Vlan ID
Switchport general pvid
 Ingress filtering is enabled
Switchport general ingress-filtering disable
 All frame types are accepted at ingress
Switchport general acceptable-frame-type tagged-only
Switchport forbidden vlan
Switchport forbidden vlan add vlan-listremove vlan-list
 Vlan-id- Specifies the ID of the internal usage Vlan
Ip internal-usage-vlan
All VLANs are allowed
Ip internal-usage-vlan vlan-id No ip internal-usage-vlan
 Vlan-id- specifies a Vlan ID
Consoleconfig-if#ip internal-usage-vlan
Show vlan
Show vlan id vlan-idname vlan-name
 Following example displays all Vlan information
Show vlan internal usage
Show vlan internal usage
 Console# show vlan internal usage
Show interfaces switchport
 VLAN011
Console# show interface switchport ethernet ext.1
 Pvid
 Map protocol protocol encapsulation protocols-group group
Map protocol protocols-group
 Following example maps protocol ip-arp to the group named
Switchport general map protocols-group vlan
Vlan Database mode
Following protocol names are reserved
 Map mac macs-group
 Console config-if#switchport general map macs-group 1 vlan
Switchport general map macs-group vlan
 Map subnet subnets-group
Switchport general map subnets-group vlan
 Show vlan protocols-groups
 Console# show vlan protocols-groups
Show vlan macs-groups
 Show vlan subnets-groups
 Following example shows subnets-groups information
 Vlan Commands
 Method1 method2... At least one from the following table
29 802.1x Commands
Aaa authentication dot1x
No authentication method is defined
 Dot1x port-control
802.1x is disabled globally
Following example enables 802.1x globally
Dot1x system-auth-control
 Consoleconfig-if#dot1x port-control auto
Interface Configuration Ethernet
Port is in the force-authorized state
 Periodic re-authentication is disabled
Dot1x re-authentication
Dot1x timeout re-authperiod
Dot1x re-authentication No dot1x re-authentication
 Consoleconfig-if#dot1x timeout re-authperiod
Dot1x re-authenticate
Re-authentication period is 3600 seconds
Dot1x re-authenticate ethernet interface
 Console# dot1x re-authenticate ethernet ext.16
Dot1x timeout quiet-period
Quiet period is 60 seconds
 Consoleconfig-if#dot1x timeout quiet-period
Dot1x timeout tx-period
Dot1x timeout tx-period seconds No dot1x timeout tx-period
Timeout period is 30 seconds
 Dot1x max-req
Default number of times is
Dot1x max-req count No dot1x max-req
 Default timeout period is 30 seconds
Dot1x timeout supp-timeout
 Consoleconfig-if# dot1x timeout supp-timeout
Dot1x timeout server-timeout
Consoleconfig-if#dot1x timeout server-timeout
 Show dot1x ethernet interface
Show dot1x
Console# show dot1x
 Console# show dot1x ethernet ext.3
 Show dot1x users username username
Show dot1x users
Username Supplicant username Range 1-160 characters
 Console# show dot1x users
Following example displays 802.1x users
Console# show dot1x users username Bob
 Show dot1x statistics ethernet interface
Show dot1x statistics
Console# show dot1x statistics ethernet ext.1
 Dot1x auth-not-req No dot1x auth-not-req
Dot1x auth-not-req
 Dot1x multiple-hosts
Access is enabled
Multiple hosts are disabled
Consoleconfig-if# dot1x auth-not-req
 Dot1x single-host-violation
 Dot1x guest-vlan No dot1x guest-vlan
Consoleconfig-if#dot1x single-host-violation forward trap
Dot1x guest-vlan
No traps are sent
 Following example defines Vlan 2 as a guest Vlan
Dot1x guest-vlan enable
 Console# show dot1x advanced
Consoleconfig-if#dot1x guest-vlan enable
Show dot1x advanced
Show dot1x advanced ethernet interface
 Console# show dot1x advanced ethernet ext.1
 Holland
Appendix a Getting Help
World Wide Web Telephone
Finland
 New Zealand 0800 444
Australia
Cambodia
Myanmar
 Panama
Ecuador
Uruguay