Manuals / Intel / Computer Equipment / Switch

Intel SBCEGBESW10 CLI manual Dot1x timeout quiet-period, Quiet period is 60 seconds

Models: SBCEGBESW10 CLI SBCEGBESW1

1 424

Download 424 pages 57.83 Kb

Page 404

Image 404

802.1x Commands

Command Mode

Privileged EXEC mode

User Guidelines

There are no user guidelines for this command.

Example

The following command manually initiates a re-authentication of 802.1x-enabled Ethernet port 16.

Console# dot1x re-authenticate ethernet ext.16

dot1x timeout quiet-period

The dot1x timeout quiet-periodInterface Configuration mode command sets the number of seconds that the device remains in the quiet state following a failed authentication exchange (for example, the client provided an invalid password). To return to the default configuration, use the no form of this command.

Syntax

dot1x timeout quiet-period seconds no dot1x timeout quiet-period

Parameters

•seconds — Specifies the time in seconds that the device remains in the quiet state following a failed authentication exchange with the client. (Range: 0-65535 seconds)

Default Configuration

Quiet period is 60 seconds.

Command Mode

Interface Configuration (Ethernet) mode

User Guidelines

During the quiet period, the device does not accept or initiate authentication requests.

388Intel® Blade Server Ethernet Switch Modules SBCEGBESW1 and SBCEGBESW10 CLI Guide

Page 404

Image 404

Intel SBCEGBESW1 Dot1x timeout quiet-period, Quiet period is 60 seconds, Console# dot1x re-authenticate ethernet ext.16

Contents

Guide for System Administrators of Intel Server Products Disclaimer Important Safety Instructions Wichtige SicherheitshinweiseConsignes de sécurité Instrucciones de seguridad importantesPage About this Manual Manual OrganizationPage Contents ACL Commands Gvrp Commands Line Commands 141 QoS Commands Radius Commands 215 Spanning-Tree Commands System Management Commands 321 Vlan Commands Appendix a Getting Help 405 Using CLI OverviewPrivileged Exec Mode Command in the Global Configuration modeInterface Configuration and Specific Configuration Modes Starting the CLI Negating the Effect of Commands Nomenclature CLI Command Conventions Using CLI Global Configuration mode AAA CommandsAaa authentication login Aaa authentication enable Following example configures the authentication loginLogin authentication Consoleconfig# aaa authentication enable default enableConsoleconfig-line#login authentication default Enable authenticationLine Configuration mode Consoleconfig-line#enable authentication default Ip http authenticationThere are no user guidelines for this command Ip https authentication Following example configures the Http authenticationShow authentication methods Show authentication methodsFollowing example configures Https authentication Password This command has no default configurationPrivileged Exec mode Following example displays the authentication configurationEnable password No password is definedNo enable password is defined Consoleconfig# enable password secret levelUsername No user is definedUser account can be created without a password AAA Commands Address Table Commands Bridge address Interface Configuration Vlan modeFolowing example, bridge multicast filtering is enabled Consoleconfig# bridge multicast filteringBridge multicast filtering Bridge multicast filtering No bridge multicast filteringBridge multicast address No multicast addresses are definedNo forbidden addresses are defined Bridge multicast forbidden addressFollowing example registers the MAC address This setting is disabled Command Mode Bridge multicast forward-allThis example, all multicast packets on port 1 are forwarded This setting is disabledBridge multicast forbidden forward-all Default setting is 300 seconds Bridge aging-timeBridge aging-time seconds No bridge aging-time Seconds Time in seconds. Range 10-630 secondsClear bridge Port securityClear bridge Following example, the bridge tables are clearedPort security mode Interface Configuration Ethernet, port-channel modePort security mode lock mac-addresses No port security mode Consoleconfig-if#port security forward trapMac-address a valid MAC address Consoleconfig-if#port security mode mac-addressesPort security routed secure-address Show bridge address-table No addresses are definedShow bridge address-table static Console# show bridge address-tableConsole# show bridge address-table static Show bridge address-table countVlan Specifies a valid VLAN, such as Vlan Show bridge multicast address-table Console# show bridge address-table countConsole# show bridge multicast address-table Console# show bridge multicast address-table format ip Show bridge multicast filteringShow bridge multicast filtering vlan-id Show ports security Console# show bridge multicast filteringConsole# show ports security Show ports security addressesFollowing table describes the fields shown above Console# show ports security addresses Address Table Commands Ip access-list name No ip access-list name ACL CommandsIp access-list Permit ip IP Protocol Abbreviated Name Protocol NumberACL Commands IP-Access List Configuration mode Deny IPNo IPv4 ACL is defined Deny-icmp Deny-igmpDeny-tcp deny-udp Mac access-list Mac access-list name No mac access-list name Default for all ACLs is deny allFollowing example shows how to create a MAC ACL Permit MACNo MAC ACL is defined MAC-Access List Configuration modeDeny MAC This command has no default configuration Service-acl Show access-listsService-acl input acl-name No service-acl input Show access-lists nameShow interfaces access-lists Following example displays access lists defined on a deviceConsole# show access-lists Name The name of the ACLConsole# show interfaces access-lists Clock Commands Clock setClock source Clock timezoneSntp Sntp servers No external clock sourceClock set to UTC Clock summer-timeNo clock timezone No clock summer-time recurring Sntp authentication-key No authentication key is definedSntp authenticate Sntp authenticate no sntp authenticateSntp client poll timer Following example authenticates keySntp trusted-key Sntp trusted-key key-number No sntp trusted-key key-numberSntp broadcast client enable Sntp client poll timer seconds No sntp client poll timerSntp broadcast client is disabled Seconds Polling interval in seconds. RangeSntp anycast client enable Following example enables the Sntp broadcast clientsSntp anycast client enable No sntp anycast client enable Sntp anycast client is disabledSntp client enable Interface Following example enables Sntp anycast clientsSntp client is disabled on an interface Interface Configuration Ethernet, port-channel, Vlan modeSntp unicast client enable Sntp unicast client enable No sntp unicast client enableSntp unicast client is disabled Sntp unicast client pollPolling is disabled Consoleconfig# sntp unicast client pollSntp server No sntp server hostShow clock detail Detail Shows timezone and summertime configurationShow clock Console# show clock Show sntp configurationShow sntp configuration Show sntp status Console# show sntp configurationShow sntp status Following example shows the status of the Sntp Console# show sntp statusConfiguration and Image File Commands CopyCopying a Boot File from a Server to Flash Memory Copying an Image File from a Server to Flash MemoryDelete url Storing the Running or Startup Configuration on a ServerDelete Sys, *.prv, image-1 and image-2 files cannot be deleted Boot systemBoot system image-1 image-2 Console# boot system image-1 Show running-configShow running-config Console# show running-config Show startup-configShow startup-config Console# show startup-config Show backup-configShow backup-config Console# show backup-config Show bootvarShow bootvar Console# show bootvar Configuration and Image File Commands Ethernet Configuration Commands Interface ethernetInterface range ethernet Interface ethernet interfaceShutdown No shutdown ShutdownInterface range ethernet port-listall Description Description string No descriptionSpeed Following example adds a description to Ethernet portSpeed 10 100 No speed Maximum port capabilityInterface Configuration Ethernet mode DuplexDuplex half full No duplex Interface is set to full duplexNo negotiation Consoleconfig# interface ethernet ext.1Negotiation Flowcontrol Flowcontrol auto on off No flowcontrolDefault setting is on Following example, automatic crossover is enabled on portMdix Mdix on auto No mdixBack-pressure Port jumbo-frameBack-pressure No back-pressure Port jumbo-frame No port jumbo-frameJumbo frames are disabled on the device Global ConfigurationFollowing example, jumbo frames are enabled on the device Clear countersSet interface active Following example, the counters for interface 1 are clearedFollowing example reactivates interface Console# clear counters ethernet ext.2Console# show interfaces advertise Show interfaces advertiseFollowing example displays auto-negotiation information Show interfaces configuration Console# show interfaces configurationShow interfaces status Show interfaces description Console# show interfaces description Show interfaces countersInterface a valid Ethernet port. Full syntax unit/port Console# show interfaces counters Console# show interfaces counters ethernet ext.1 Following example displays counters for Ethernet portFollowing table describes the fields shown in the display This command is relevant to Giga devices only Show ports jumbo-frameShow ports jumbo-frame Console# show port jumbo-frameFollowing example enables counting multicast packets Port storm-control include-multicast GCPort storm-control include-multicast IC Multicast packets are not countedPort storm-control broadcast enable Broadcast storm control is disabledDefault storm control broadcast rate is 3500 Kbits/Sec Port storm-control broadcast rateFollowing example displays the storm control configuration Show ports storm-controlShow ports storm-control interface Console# show ports storm-controlDisabled 3500 Broadcast Gvrp Commands Gvrp enable GlobalGvrp enable Interface Gvrp enable No gvrp enableGarp timer Gvrp is disabled on all interfacesFollowing example enables Gvrp on Ethernet port Garp timer join leave leaveall timervalue No garp timerGvrp vlan-creation-forbid No gvrp vlan-creation-forbid Consoleconfig# interface ethernet ext.6Gvrp vlan-creation-forbid Dynamic Vlan creation or modification is enabled Gvrp registration-forbidGvrp registration-forbid No gvrp registration-forbid Dynamic registration of VLANs on the port is allowedClear gvrp statistics Console# clear gvrp statistics ethernet ext.1Show gvrp configuration Privieged Exec modeFollowing example displays Gvrp configuration information Console# show gvrp configurationConsole# show gvrp statistics Show gvrp statisticsFollowing example shows Gvrp statistical information Following example displays Gvrp statistical information Show gvrp error-statisticsConsole# show gvrp error-statistics Igmp Snooping Commands Ip igmp snooping GlobalIp igmp snooping Interface Ip igmp snooping No ip igmp snoopingIp igmp snooping mrouter learn-pim-dvmrp Following example enables Igmp snooping on VlanAutomatic learning of multicast device ports is enabled Time-out- Specifies the host timeout in seconds. Range Default host-time-out is 260 secondsConsoleconfig-if#ip igmp snooping mrouter learn-pim-dvmrp Ip igmp snooping host-time-outIp igmp snooping mrouter-time-out Default value is 300 secondsConsoleconfig-if#ip igmp snooping host-time-out Ip igmp snooping leave-time-out Default leave-time-out configuration is 10 secondsConsoleconfig-if#ip igmp snooping mrouter-time-out Consoleconfig-if#ip igmp snooping leave-time-out Show ip igmp snooping mrouterShow ip igmp snooping mrouter interface vlan-id Vlan-id Specifies the Vlan numberShow ip igmp snooping interface Show ip igmp snooping interface vlan-idShow ip igmp snooping groups Console# show ip igmp snooping interfaceConsole# show ip igmp snooping groups Igmp Snooping Commands IP Address Commands Interface Configuration Ethernet, VLAN, port-channel modeIp address Ip address ip-address mask prefix-lengthIp address dhcp Ip address dhcp hostname host-name No ip address dhcpNo default gateway is defined Ip default-gatewayIp default-gateway ip-address No ip default-gateway Show ip interface This command is only operational in Switch modeFollowing example defines default gateway Arp Console# show ip interfaceDefault timeout is 60000 seconds Arp timeoutArp timeout seconds No arp timeout Clear arp-cache Show arpClear arp-cache Console# clear arp-cacheIp domain-lookup Show arpFollowing example displays entries in the ARP table Ip domain-lookup No ip domain-lookupIp domain-name name No ip domain-name Default domain name is not definedIp domain-name Ip name-server Server-address- Specifies IP addresses of the name serverNo name server addresses are specified Following example sets the available name serverIp host Clear hostNo ip host name No host is definedConsole# clear host Clear host dhcpClear host dhcp name Show hosts Show hosts nameName Specifies the host name. Range 1-158 characters Console# clear host dhcpFollowing example displays host information Console# show hostsLacp Commands Lacp system-priorityLacp port-priority Lacp system-priority value No lacp system-priorityLacp port-priority value No lacp port-priority Lacp timeoutLacp timeout long short no lacp timeout Show lacp ethernet Short Specifies the short timeout valueDefault port timeout value is long Following example display Lacp information for Ethernet port Console# show lacp ethernet ext.1Show lacp port-channel Console# show lacp port-channel Show lacp port-channel portchannelnumberPortchannelnumber Valid port-channel number Line Commands This command has no user guidelinesLine Show lineExec mode Show line telnet sshLine Commands Line Commands Management ACL Commands Management access-listManagement access-list name No management access-list name Name Access list name. Range 1-32 charactersConsoleconfig# management access-list mlist Consoleconfig# management access-class mlistIf no permit rule is defined, the default is set to deny Management Access-list Configuration modeDeny Management Management access-class Show management access-list name Following example displays the mlist management access listShow management access-class Console# show management access-classManagement ACL Commands PHY Diagnostics Commands Test copper-port tdrTest copper-port tdr interface Console# test copper-port tdr ext.3User Exec mode Show copper-ports tdrShow copper-ports tdr interface Maximum length of the cable for the TDR test is 120 metersPort must be active and working in 100M or 1000M mode Show copper-ports cable-lengthShow copper-ports cable-length interface Console show copper-ports cable-lengthPHY Diagnostics Commands Port Channel Commands Consoleconfig# interface port-channelInterface port-channel Interface port-channel port-channel-numberConsoleconfig# interface range port-channel 1-2,6 Interface range port-channelChannel-group Interface range port-channel port-channel-rangeallShow interfaces port-channel port-channel-number Show interfaces port-channelPort is not assigned to a port-channel Following example displays information on all port-channels Console# show interfaces port-channelPort Monitor Commands Monitors both received and transmitted packetsConsole config-if#port monitor vlan-tagging Port monitor vlan-taggingPort monitor vlan-tagging No port monitor vlan-tagging Ingress mirrored packets are transmitted untaggedConsole show ports monitor Show ports monitorShow ports monitor Port Monitor Commands QoS Commands Qos basic advanced service No qosQoS basic mode is enabled Following example enables QoS on the deviceTrust mode is displayed if QoS is enabled in basic mode Show qosShow qos aggregate-policer Show qosConsole# show qos aggregate-policer policer1 Show qos interfaceThere are no user guidelines There is no default configuration for this command Console# show qos interface ethernet 1 buffersShow qos map User Exec mode command displays all QoS maps Show qos mapShow qos map dscp-queue Dscp-queue- Indicates the Dscp to queue mapClass-map Following example displays the Dscp port-queue mapClass-map class-map-namematch-all match-any Console show qos mapShow class-map class-map-name By default, the match-allparameter is selectedShow class-map Match access-group acl-name No match access-group acl-name MatchFollowing example shows the class map for class1 Acl-name- Specifies the name of an IP or MAC ACLPolicy-map-name- Specifies the name of the policy map Class-map Configuration modePolicy-map Class No policy map is definedShow policy-map Policy-map Configuration modeShow policy-mapUser Exec command displays the policy maps Policy-map Class Configuration mode Trust cos-dscpFollowing example displays all policy maps Trust cos-dscp No trust cos-dscpSet No setPolice No policeService-policy Service-policy input policy-map-name No service-policy inputNo aggregate policer is define Qos aggregate-policerNo qos aggregate-policer Exceed-action drop Police aggregate Console show qos aggregate-policer policer1Wrr-queue cos-map No wrr-queue cos-map queue-idNo wrr-queue bandwidth Wrr-queue bandwidthFollowing example maps CoS 7 to queue Priority-queue out num-of-queues Priority-queue out num-of-queues number-of-queuesConsoleconfig# priority-queue out num-of-queues Traffic-shapeNo priority-queue out num-of-queues All queues are expedite queuesNo shape is defined Ethernet Notify Q depth Qid Size 125 Qos wrr-queue threshold Console config# qos wrr-queue threshold gigabitethernet 1 Qos map policed-dscpNo qos wrr-queue threshold tengigabitethernet queue-id Percent for all thresholdsDscp values 3,11,19… cannot be remapped to other values Consoleconfig# qos map policed-dscp 3 toQos map dscp-queue Following table describes the default map Qos trust GlobalFollowing example maps Dscp values 33, 40 and 41 to queue Qos trust cos dscp no qos trustQos trust No qos trust CoS is the default trust modeQos trust Interface No qos cos Default CoS value of a port isQos cos Qos dscp-mutation No qos dscp-mutation Following example configures port 15 default CoS value toQos dscp-mutation Qos map dscp-mutation QoS Commands QoS Commands Console# show rmon statistics ethernet ext.1 Rmon CommandsShow rmon statistics Rmon Commands Rmon collection history Cannot be configured for a range of interfaces Range context Show rmon collection historyShow rmon history Console# show rmon collection historyConsole# show rmon history 1 errors Console# show rmon history 1 throughputConsole# show rmon history 1 other Rmon alarm No rmon alarm indexType is absolute Startup direction is rising-falling Show rmon alarm-table Show rmon alarm-tableFollowing example displays the alarms table Console# show rmon alarm-tableShow rmon alarm Show rmon alarm numberNumber Specifies the alarm index. Range Following example displays Rmon 1 alarmsRmon event Last Sample ValueShow rmon events Show rmon eventsShow rmon log Following example displays the Rmon event tableShow rmon log event Event Specifies the event index. RangeFollowing example displays the Rmon log table Console# show rmon logHistory table size is Log table size is Consoleconfig# rmon table-size historyRmon table-size Radius Commands Radius-server hostNo radius-server host ip-addresshostname No Radius server host is specifiedRadius-server key Radius-server key key-string No radius-server keySoftware searches the list of Radius server hosts 3 times Radius-server retransmitKey-string is an empty string Source Specifies a valid source IP address Consoleconfig# radius-server retransmitRadius-server source-ip Consoleconfig# radius-server timeout Radius-server timeoutTimeout value is 3 seconds Deadtime setting is Consoleconfig# radius-server deadtimeRadius-server deadtime Show radius-serversConsole# show radius-servers Following example displays Radius server settingsShow radius-servers Radius Commands Web Server Commands Ip http serverIp http port Ip http server No ip http serverIp http exec-timout minutes seconds no ip http exec-timout Ip http exec-timeoutNo ip http port Default timout is 10 minutes DisabledIp https server Ip https server No ip https serverIp https exec-timeout Following example configures the https port number toIp https port Ip https port port-number No ip https portCrypto certificate generate No ip https exec-timoutFollowing example regenerates an Https certificate Consoleconfig# crypto certificate 1 generate key-generateCrypto certificate request There is no default configuration for this command Crypto certificate import Crypto certificate number importNumber Specifies the certificate number. Range Console# crypto certificate 1 requestIp https certificate number No ip https certificate Consoleconfig# crypto certificate 1 importIp https certificate Consoleconfig# ip https certificate Show crypto certificate mycertificateCertificate number Show crypto certificate mycertificate numberShow ip http Following example displays the certificateShow ip http Console# show crypto certificate mycertificateFollowing example displays the Http server configuration Show ip httpsShow ip https Console# show ip httpWeb Server Commands Web Server Commands No communities are defined Snmp CommandsSnmp-server community Snmp-server view Snmp-server group No view entry existsNo snmp-server group groupname v1 v2 v3 noauth auth priv No group entry existsSnmp-server user No snmp-server user username remote engineid-stringSnmp-server engineID local Parameters Snmp-server enable traps Snmp-server enable traps No snmp-server enable trapsSnmp traps are enabled Following example enables Snmp trapsSnmp-server filter No filter entry existsSnmp-server host Snmp-server v3-host Snmp-server trap authentication Snmp-server trap authenticationFollowing example configures an SNMPv3 host No snmp-server trap authentication Snmp failed authentication traps are enabledFollowing example enables Snmp failed authentication traps Snmp-server contactSnmp-server location text No snmp-server location Snmp-server locationIntelTechnicalSupport Snmp-server set Following example defines the device location as NewYorkFollowing example displays the Snmp communications status Show snmpShow snmp Show snmp engineid Show snmp engineIDShow snmp views Following example displays the Snmp engine IDShow snmp views viewname Viewname Specifies the name of the view. RangeFollowing example displays the configuration of views Show snmp groupsShow snmp groups groupname Groupname-Specifies the name of the group. RangeShow snmp filters Following table describes significant fields shown aboveShow snmp filters filtername Filtername-Specifies the name of the filter. RangeFollowing example displays the configuration of filters Show snmp usersShow snmp users username Username-Specifies the name of the user. RangeConsole# show snmp users Spanning-Tree Commands Spanning-tree modeSpanning-tree mode stp rstpmstp Spanning-treeNo spanning-tree mode STP is enabledConsoleconfig# spanning-tree mode rstp Spanning-tree forward-timeConsoleconfig# spanning-tree forward-time Seconds Time in seconds. RangeSpanning-tree max-age seconds No spanning-tree max-age Consoleconfig# spanning-tree hello-timeSpanning-tree max-age Following example configures spanning tree priority to Spanning-tree priorityForward-Time 1 = Max-Age Max-Age = 2*Hello-Time + Spanning-tree priority priority No spanning-tree prioritySpanning-tree disable Spanning-tree disable No spanning-tree disableSpanning-tree cost Spanning-tree cost cost No spanning-tree costSpanning-tree port-priority Cost Path cost of the port Range 1-200,000,000Default port priority for Ieee Spanning TreeProtocol STP is PortFast mode is disabledConsoleconfig-if#spanning-tree port-priority Spanning-tree portfastSpanning-tree link-type Following example enables PortFast on Ethernet portConsoleconfig-if#spanning-tree portfast Short path cost method Consoleconfig-if#spanning-tree link-type sharedSpanning-tree pathcost method Following example sets the default path cost method to long Default setting is floodingSpanning-tree bpdu Spanning-tree bpdu filtering flooding No spanning-tree bpduSpanning-tree mst instance-idpriority priority Clear spanning-tree detected-protocolsSpanning-tree mst priority No spanning-tree mst instance-idpriority Console config # spanning-tree mst 1 prioritySpanning-tree mst max-hops Spanning-tree mst port-priority Default number of hops isConsole config # spanning-tree mst max-hops Consoleconfig-if#spanning-tree mst 1 port-priority Spanning-tree mst costSpanning-tree mst configuration Spanning-tree mst configurationFollowing example configures an MST region Consoleconfig# spanning-tree mst configurationMST Configuration mode Instance mstInstance instance-idadd remove vlan vlan-range Following example maps VLANs 10-20 to MST instanceDefault name is a radlanguest Following example defines the configuration name as region1Name mst Revision mstValue Configuration revision number Range Default configuration revision number isFollowing example sets the configuration revision to Show mstExit mst ExitAbort Abort mstSpanning-tree guard root Root guard is disabled Show spanning-treeSpanning-tree guard root No spanning-tree guard root Interface -number- a valid Ethernet portFollowing example displays spanning-tree information Console# show spanning-treeFWD Console# show spanning-tree active Console# show spanning-tree blockedports Console# show spanning-tree detail Port 3 disabled State N/A Role N/A Port id Console# show spanning-tree mst-configuration Console# show spanning-tree ethernet ext.1Rstp Times hold 1, topology change 35, notification Designated port id Designated path cost Port Enabled State Forwarding Role Boundary Port id This switch is root for CST and IST master Hello Time 2 sec Max Age 20 sec Spanning-Tree Commands SSH Commands Ip ssh portIp ssh server Ip ssh port port-number No ip ssh portDSA key pairs do not exist Device configuration from a SSH server is disabledCrypto key generate dsa Consoleconfig# crypto key generate dsa Crypto key generate rsaFollowing example generates DSA key pairs Crypto key generate rsaAAA authentication is independent Ip ssh pubkey-authFollowing example generates RSA key pairs Ip ssh pubkey-auth No ip ssh pubkey-authCrypto key pubkey-chain ssh No keys are specifiedSSH Public Key-string Configuration mode Consoleconfig# crypt\o key pubkey-chain sshUser-key No SSH public keys existKey-string Show ip ssh Consoleconfig# crypto key pubkey-chain sshShow ip ssh Following example displays the SSH server configuration Show crypto key mypubkeyShow crypto key mypubkey rsa dsa Rsa Indicates the RSA key Dsa Indicates the DSA keyShow crypto key pubkey-chain ssh Console# show crypto key mypubkey rsaConsole# show crypto key pubkey-chain ssh Console# show crypto key pubkey-chain ssh username bobSSH Commands Syslog Commands Logging is enabledFollowing example enables logging error messages Logging onLogging Default severity level is informational Consoleconfig# logging buffered debuggingLogging buffered Logging buffered level No logging bufferedDefault number of messages is This command takes effect only after ResetConsoleconfig# logging buffered size Logging buffered sizeDefault severity level is errors Logging fileClear logging Logging file level No logging fileConsoleconfig# logging file alerts Clear logging fileClear logging file Following example clears messages from the logging fileAaa logging login no aaa logging login Aaa loggingFile-system logging File-system logging copyLogging file system events is enabled Consoleconfig# file-system logging copyManagement logging Management logging deny No management logging denyLogging management ACL events is enabled Consoleconfig# management logging denyShow logging Show loggingConsole# show logging AAAConsole# show logging file Show logging fileShow logging file Show syslog-servers Show syslog-serversConsole# show syslog-servers Syslog Commands System Management Commands PingTraceroute Following example displays pinging resultsSyntax Probe timed out Default port is the Telnet port decimal23 on the host TelnetSpecial Telnet Sequences Keywords TablePorts Table Following command switches to open Telnet session number ResumeReload Connection The connection number. Range 1-4 connectionsHostname ReloadFollowing example reloads the operating system Hostname name No hostnameShow users Following example specifies the device host nameShow users Console show usersShow sessions Show sessionsFollowing example lists open Telnet sessions Console show sessionsConsole# show system Show systemShow system Privilaged Exec mode Show system idShow system id unit unit Unit unit Unit numberConsole show system id Show system flowcontrolShow system flowcontrol Show system mode Show system modePriviledged Exec mode Following example displays information on features controlService cpu-utilization Service cpu-utilization No service cpu-utilizationShow version Console show versionThis example enables measuring CPU utilization Consoleconfig# service cpu-utilizationShow cpu utilization Show cpu utilizationConsole# show cpu utilization No tacacs-server host ip-addresshostname TACACS+ CommandsTacacs-server host Tacacs-server key Following example specifies a TACACS+ hostTacacs-server key key-string No tacacs-server key Empty stringTacacs-server timeout Following example sets the authentication encryption keyFollowing example sets the timeout value to Consoleconfig# tacacs-server timeoutTacacs-server source-ip Show tacacsSource Specifies the source IP address Following example specifies the source IP addressIp-address Name or IP address of the TACACS+ server Console# show tacacsTACACS+ Commands Disable User Interface CommandsEnable Login Following example return to Users Exec modeLogin User Exec mode command changes a login username LoginFollowing example enters Global Configuration mode ConfigureConfigure Exit Exit ConfigurationAll configuration modes End Privileged and User Exec modesFollowing example closes an active terminal session EndAll command modes HelpTerminal datadump HelpDumping is disabled Show historyTerminal datadump No terminal datadump Show historyShow privilege Show privilegeConsole# show version Console# show historyCommand The command to be executed Console# show privilegeConsole Config# do show vlan Vlan Commands Following example enters the Vlan database modeVlan database VlanVlan Configuration mode Interface vlanFollowing example Vlan number 1972 is created Interface vlan vlan-idAll All existing static VLANs Interface range vlanInterface range vlan vlan-rangeall Name No nameNo name is defined Following example gives Vlan number 19 the name MarketingConsoleconfig-if#switchport protected ethernet ext.1 Switchport protectedSwitchport protected is disabled Switchport mode access trunk general No switchport mode Switchport modeSwitchport access vlan All ports belong to Vlan Switchport trunk allowed vlanSwitchport trunk allowed vlan add vlan-listremove vlan-list Switchport trunk native vlan Vlan-id- Specifies the ID of the native VlanSwitchport general allowed vlan VID=1Switchport general pvid Vlan-id- Specifies the Pvid Port Vlan IDSwitchport general ingress-filtering disable Ingress filtering is enabledSwitchport general acceptable-frame-type tagged-only Switchport forbidden vlanSwitchport forbidden vlan add vlan-listremove vlan-list All frame types are accepted at ingressIp internal-usage-vlan All VLANs are allowedIp internal-usage-vlan vlan-id No ip internal-usage-vlan Vlan-id- Specifies the ID of the internal usage VlanConsoleconfig-if#ip internal-usage-vlan Show vlanShow vlan id vlan-idname vlan-name Vlan-id- specifies a Vlan IDShow vlan internal usage Show vlan internal usageFollowing example displays all Vlan information Show interfaces switchport Console# show vlan internal usageConsole# show interface switchport ethernet ext.1 VLAN011Pvid Map protocol protocols-group Map protocol protocol encapsulation protocols-group groupSwitchport general map protocols-group vlan Vlan Database modeFollowing protocol names are reserved Following example maps protocol ip-arp to the group namedMap mac macs-group Switchport general map macs-group vlan Console config-if#switchport general map macs-group 1 vlanSwitchport general map subnets-group vlan Map subnet subnets-groupShow vlan protocols-groups Show vlan macs-groups Console# show vlan protocols-groupsShow vlan subnets-groups Following example shows subnets-groups information Vlan Commands 29 802.1x Commands Aaa authentication dot1xNo authentication method is defined Method1 method2... At least one from the following table802.1x is disabled globally Following example enables 802.1x globallyDot1x system-auth-control Dot1x port-controlPort is in the force-authorized state Interface Configuration EthernetConsoleconfig-if#dot1x port-control auto Dot1x re-authentication Dot1x timeout re-authperiodDot1x re-authentication No dot1x re-authentication Periodic re-authentication is disabledDot1x re-authenticate Re-authentication period is 3600 secondsDot1x re-authenticate ethernet interface Consoleconfig-if#dot1x timeout re-authperiodQuiet period is 60 seconds Dot1x timeout quiet-periodConsole# dot1x re-authenticate ethernet ext.16 Dot1x timeout tx-period Dot1x timeout tx-period seconds No dot1x timeout tx-periodTimeout period is 30 seconds Consoleconfig-if#dot1x timeout quiet-periodDot1x max-req count No dot1x max-req Default number of times isDot1x max-req Dot1x timeout supp-timeout Default timeout period is 30 secondsConsoleconfig-if#dot1x timeout server-timeout Dot1x timeout server-timeoutConsoleconfig-if# dot1x timeout supp-timeout Console# show dot1x Show dot1xShow dot1x ethernet interface Console# show dot1x ethernet ext.3 Username Supplicant username Range 1-160 characters Show dot1x usersShow dot1x users username username Console# show dot1x users username Bob Following example displays 802.1x usersConsole# show dot1x users Console# show dot1x statistics ethernet ext.1 Show dot1x statisticsShow dot1x statistics ethernet interface Dot1x auth-not-req Dot1x auth-not-req No dot1x auth-not-reqAccess is enabled Multiple hosts are disabledConsoleconfig-if# dot1x auth-not-req Dot1x multiple-hostsDot1x single-host-violation Consoleconfig-if#dot1x single-host-violation forward trap Dot1x guest-vlanNo traps are sent Dot1x guest-vlan No dot1x guest-vlanDot1x guest-vlan enable Following example defines Vlan 2 as a guest VlanConsoleconfig-if#dot1x guest-vlan enable Show dot1x advancedShow dot1x advanced ethernet interface Console# show dot1x advancedConsole# show dot1x advanced ethernet ext.1 Appendix a Getting Help World Wide Web TelephoneFinland HollandAustralia CambodiaMyanmar New Zealand 0800 444Uruguay EcuadorPanama