NETGEAR M4100-12G-POE+, M4100-12GF, M4100-24G-POE+, M4100-26-POE, M4100-26G, M4100-26G-POE, M4100-50-POE, M4100-50G, M4100-50G-POE+, M4100-D10-POE, M4100-D12G, M4100-D12G-POE+, M7100-24X Port Security Commands

Switching Commands

171

ProSafe M4100 and M7100 Managed Switches

When you specify a value for vlanid, the following information appears.

When the optional argument detail is used, the command shows the global information

and the information for all Querier-enabled VLANs.

Port Security Commands

This section describes the commands you use to configure Port Security on the switch. Port

security, which is also known as port MAC locking, allows you to secure the network by

locking allowable MAC addresses on a port. Packets with a matching source MAC address

are forwarded normally, and all other packets are discarded.

Note: To enable the SNMP trap specific to port security, see snmp-server

enable traps violation on page 673.

Field Description

VLAN Admin

Mode Indicates whether MLD Snooping Querier is active on the VLAN.

VLAN Operational

State Indicates whether MLD Snooping Querier is in “Querier” or “Non-Querier” state. When

the switch is in Querier state, it will send out periodic general queries. When in

Non-Querier state, it will wait for moving to Querier state and does not send out any

queries.

Operational Max

Response Time Indicates the time to wait before removing a Leave from a host upon receiving a Leave

request. This value is calculated dynamically from the Queries received from the

network. If the Snooping Switch is in Querier state, then it is equal to the configured

value.

Querier Election

Participate Indicates whether the MLD Snooping Querier participates in querier election if it

discovers the presence of a querier in the VLAN.

Querier VLAN

Address The IP address will be used in the IPv6 header while sending out MLD queries on this

VLAN. It can be configured using the appropriate command.

Operational

Version This version of IPv6 will be used while sending out MLD queriers on this VLAN.

Last Querier

Address Indicates the IP address of the most recent Querier from which a Query was received.

Last Querier

Version Indicates the MLD version of the most recent Querier from which a Query was received

on this VLAN.

Contents

Main ProSafe Managed Switch Command Line Interface (CLI) User Manual 10.0.1 Page Contents Chapter 1 Using the Command-Line Interface Chapter 2 Switching Commands Chapter 3 Multicast VLAN Registration (MVR) Chapter 4 Routing Commands Chapter 5 IP Multicast Commands Chapter 6 IPv6 Commands Chapter 7 IPv6 Multicast Commands Chapter 8 Quality of Service (QoS) Commands Chapter 9 Power over Ethernet (PoE) Commands Chapter 10 Utility Commands Chapter 11 Management Commands Chapter 12 Log Messages Chapter 14 Command List Chapter 13 Green Ethernet Commands Page Licensing and Command Support Command Syntax Command Conventions ProSafe M4100 and M7100 Managed Switches Table 1. Parameter Conventions Common Parameter Values Table 2. Parameter Descriptions Slot/Port Naming Convention Using a Commands No Form Managed Switch Modules Command Modes Table 5. CLI Command Modes Table 6 explains how to enter or exit each mode. Table 6. CLI Mode Access and Exit Table 5. CLI Command Modes (Continued) Table 6. CLI Mode Access and Exit (Continued) Command Completion and Abbreviation CLI Error Messages CLI Line-Editing Conventions Table 8. CLI Editing Conventions Using CLI Help Accessing the CLI Page Page Port Configuration Commands interface interface vlan interface lag auto-negotiate auto-negotiate all description mtu shutdown shutdown all no shutdown all This command enables all ports. speed This command sets the speed and duplex setting for the interface. speed all This command sets the speed and duplex setting for all interfaces. show port advertise show port show port protocol show port description show port status Loopback Interface Commands interface loopback show interface loopback Page Spanning Tree Protocol (STP) Commands spanning-tree spanning-tree auto-edge spanning-tree bpdufilter spanning-tree bpdufilter default spanning-tree bpduflood spanning-tree bpduguard spanning-tree bpdumigrationcheck spanning-tree configuration name spanning-tree configuration revision spanning-tree edgeport spanning-tree forceversion spanning-tree forward-time spanning-tree guard spanning-tree tcnguard spanning-tree max-age spanning-tree max-hops spanning-tree mst spanning-tree mst instance spanning-tree mst priority spanning-tree mst vlan spanning-tree port mode spanning-tree port mode all spanning-tree edgeport all spanning-tree bpduforwarding show spanning-tree ProSafe M4100 and M7100 Managed Switches show spanning-tree brief This command displays spanning tree settings for the bridge. The following information appears. show spanning-tree interface show spanning-tree mst port detailed Page Page show spanning-tree mst port summary show spanning-tree mst port summary active show spanning-tree mst summary show spanning-tree summary show spanning-tree vlan This section describes the commands you use to configure VLAN settings. VLAN Commands vlan database network mgmt_vlan vlan vlan acceptframe vlan ingressfilter vlan makestatic vlan name vlan participation vlan participation all vlan port acceptframe all vlan port ingressfilter all vlan port pvid all vlan port tagging all vlan protocol group vlan protocol group name vlan protocol group add protocol protocol group protocol vlan group protocol vlan group all vlan pvid vlan tagging vlan association subnet vlan association mac show vlan show vlan <vlanid> show vlan brief This command displays a list of all configured VLANs. show vlan port This command displays VLAN port information. show vlan association subnet Double VLAN Commands dvlan-tunnel ethertype mode dot1q-tunnel mode dvlan-tunnel show dot1q-tunnel show dvlan-tunnel Voice VLAN Commands voice vlan (Global Config) voice vlan (Interface Config) You can configure Voice VLAN in any of the following ways: voice vlan data priority Use this command to either trust or untrust the data traffic arriving on the Voice VLAN port. show voice vlan When the interface parameter is not specified, only the global mode of the Voice VLAN is displayed. Provisioning (IEEE 802.1p) Commands vlan port priority all vlan priority Protected Ports Commands switchport protected (Global Config) switchport protected (Interface Config) show switchport protected This command displays the status of all the interfaces, including protected and unprotected show interfaces switchport This command displays the status of the interface (protected/unprotected) under the groupid. Private VLAN switchport private-vlan switchport mode private-vlan private-vlan vlan show vlan show interface ethernet <slot/port > switchport GARP Commands set garp timer join set garp timer leave set garp timer leaveall show garp GVRP Commands set gvrp adminmode set gvrp interfacemode show gvrp configuration GMRP Commands set gmrp adminmode set gmrp interfacemode show gmrp configuration show mac-address-table gmrp This command displays the GMRP entries in the Multicast Forwarding Database (MFDB) table. Port-Based Network Access Control Commands clear dot1x statistics clear radius statistics dot1x eapolflood dot1x guest-vlan dot1x initialize dot1x mac-auth-bypass dot1x max-req dot1x max-users dot1x port-control dot1x port-control all dot1x re-authenticate dot1x re-authentication dot1x system-auth-control dot1x timeout dot1x unauthenticated-vlan dot1x user clear dot1x authentication-history dot1x dynamic-vlan enable dot1x system-auth-control monitor show dot1x authentication-history show authentication methods This command displays information about the authentication methods. The following is an example of this command: show dot1x Page Page Page show dot1x clients show dot1x users This command displays 802.1x port security user information for locally configured users. 802.1X Supplicant Commands dot1x pae dot1x supplicant port-control dot1x supplicant max-start dot1x supplicant timeout start-period dot1x supplicant timeout held-period dot1x supplicant timeout auth-period dot1x supplicant user Storm-Control Commands storm-control broadcast storm-control broadcast level storm-control broadcast rate storm-control broadcast (Global) storm-control broadcast level (Global) storm-control broadcast rate (Global) storm-control multicast storm-control multicast level storm-control multicast rate storm-control multicast (Global) storm-control multicast level (Global) storm-control multicast rate (Global) storm-control unicast storm-control unicast level storm-control unicast rate storm-control unicast (Global) storm-control unicast level (Global) storm-control unicast rate (Global) show storm-control Flow Control Commands flowcontrol {symmetric|asymmetric} show flowcontrol Port-Channel/LAG (802.3ad) Commands addport deleteport (Interface Config) deleteport (Global Config) lacp admin key lacp collector max-delay lacp actor admin lacp actor admin key lacp actor admin state individual lacp actor admin state longtimeout lacp actor admin state passive lacp actor port priority lacp actor system priority lacp partner admin key lacp partner admin state individual lacp partner admin state longtimeout lacp partner admin state passive lacp partner port id lacp partner port priority lacp partner system id lacp partner system priority port-channel local-preference port-channel static port lacpmode port lacpmode enable all port lacptimeout (Interface Config) port lacptimeout (Global Config) port-channel adminmode port-channel linktrap notifications for all the port-channel load-balance no port-channel load-balance This command reverts to the default load balancing configuration. port-channel name port-channel system priority show lacp actor The following output parameters are displayed. Use this command to display LACP actor attributes. The following output parameters are displayed. show lacp partner show port-channel brief For each port-channel the following information is displayed: show port-channel This command displays an overview of all port-channels (LAGs) on the switch. show port-channel system priority Port Mirroring monitor session no monitor show monitor session Static MAC Filtering macfilter macfilter adddest macfilter adddest all macfilter addsrc macfilter addsrc all show mac-address-table static show mac-address-table staticfiltering DHCP L2 Relay Agent Commands dhcp l2relay dhcp l2relay circuit-id vlan dhcp l2relay remote-id vlan dhcp l2relay vlan dhcp l2relay trust show dhcp l2relay all show dhcp l2relay interface Use this command to display DHCP L2 relay configuration specific to interfaces. Example: The following shows example CLI display output for the command. show dhcp l2relay stats interface Use this command to display statistics specific to DHCP L2 Relay configured interface. DHCP Client Commands dhcp client vendor-id-option dhcp client vendor-id-option-string show dhcp client vendor-id-option DHCP Snooping Configuration Commands ip dhcp snooping ip dhcp snooping vlan ip dhcp snooping verify mac-address ip dhcp snooping database ip dhcp snooping database write-delay ip dhcp snooping binding ip verify binding ip dhcp snooping limit ip dhcp snooping log-invalid ip dhcp snooping trust ip verify source show ip dhcp snooping show ip dhcp snooping binding show ip dhcp snooping database Use this command to display the DHCP Snooping configuration related to the database persistency. show ip dhcp snooping interfaces Use this command to show the DHCP Snooping status of the interfaces. show ip dhcp snooping statistics clear ip dhcp snooping binding Use this command to clear all DHCP Snooping bindings on all interfaces or on a specific clear ip dhcp snooping statistics Use this command to clear all DHCP Snooping statistics. show ip verify source Use this command to display the IPSG configurations on all ports. show ip source binding This command displays the IPSG bindings. Dynamic ARP Inspection Commands ip arp inspection vlan ip arp inspection validate ip arp inspection vlan logging ip arp inspection trust ip arp inspection limit ip arp inspection filter arp access-list permit ip host mac host show ip arp inspection show ip arp inspection statistics clear ip arp inspection statistics Use this command to reset the statistics for Dynamic ARP Inspection on all VLANs. show ip arp inspection interfaces command displays the values for that interface whether the interface is enabled for DAI or not. show arp access-list IGMP Snooping Configuration Commands set igmp set igmp interfacemode set igmp fast-leave set igmp groupmembership-interval set igmp maxresponse set igmp mcrtrexpiretime set igmp mrouter set igmp mrouter interface set igmp report-suppression set igmp header-validation mac address-table multicast forbidden-unregistered vlan mac address-table multicast forward-unregistered vlan mac address-table multicast forward-all vlan show igmpsnooping When you specify a value for <vlan_id>, the following information appears: When you specify the <slot/port> values, the following information appears: show igmpsnooping mrouter interface This command displays information about statically configured ports. show igmpsnooping mrouter vlan This command displays information about statically configured ports. show mac-address-table igmpsnooping IGMP Snooping Querier Commands set igmp querier set igmp querier query-interval set igmp querier timer expiry set igmp querier version set igmp querier election participate show igmpsnooping querier MLD Snooping Commands set mld set mld interfacemode set mld fast-leave set mld groupmembership-interval set mld maxresponse set mld mcrtexpiretime set mld mrouter set mld mrouter interface show mldsnooping When you specify the slot/port values, the following information displays. When you specify a value for vlanid, the following information appears. show mldsnooping mrouter interface Use this command to display information about statically configured multicast router attached show mldsnooping mrouter vlan Use this command to display information about statically configured multicast router-attached show mac-address-table mldsnooping MLD Snooping Querier Commands set mld querier no set mld querier set mld querier query_interval no set mld querier query_interval set mld querier timer expiry no set mld querier timer expiry set mld querier election participate no set mld querier election participate show mldsnooping querier Port Security Commands port-security port-security max-dynamic port-security max-static port-security mac-address port-security mac-address move port-security mac-address sticky show port-security show port-security dynamic show port-security static show port-security violation LLDP (802.1AB) Commands lldp transmit lldp receive lldp timers lldp transmit-tlv lldp transmit-mgmt lldp notification lldp notification-interval clear lldp statistics clear lldp remote-data show lldp Use this command to display a summary of the current LLDP configuration. show lldp interface show lldp statistics The table contains the following column headings: show lldp remote-device show lldp remote-device detail show lldp local-device show lldp local-device detail LLDP-MED Commands lldp med lldp med confignotification lldp med transmit-tlv lldp med all lldp med confignotification all lldp med faststartrepeatcount lldp med transmit-tlv all no lldp med transmit-tlv Use this command to remove a TLV. show lldp med Use this command to display a summary of the current LLDP MED configuration. show lldp med interface show lldp med local-device detail This command displays detailed information about the LLDP data a specific interface transmits. Page show lldp med remote-device show lldp med remote-device detail Page Denial of Service Commands dos-control all dos-control sipdip dos-control firstfrag dos-control tcpfrag dos-control tcpflag dos-control l4port dos-control icmp dos-control smacdmac dos-control tcpport dos-control udpport dos-control tcpflagseq dos-control tcpoffset dos-control tcpsyn dos-control tcpsynfin dos-control tcpfinurgpsh dos-control icmpv4 dos-control icmpv6 dos-control icmpfrag show dos-control MAC Database Commands bridge aging-time show forwardingdb agetime This command displays the timeout for address aging. show mac-address-table multicast show mac-address-table stats ISDP Commands isdp run isdp holdtime isdp timer isdp advertise-v2 isdp enable clear isdp counters This command clears ISDP counters. clear isdp table This command clears entries in the ISDP table. show isdp show isdp interface This command displays ISDP settings for the specified interface. show isdp entry show isdp neighbors This command displays the list of neighboring devices. show isdp traffic This command displays ISDP statistics. debug isdp packet Priority-Based Flow Control Commands datacenter-bridging priority-flow-control mode priority-flow-control priority show interface priority-flow-control Page About MVR MVR Commands mvr mvr group mvr mode mvr querytime mvr vlan mvr immediate mvr type mvr vlan group show mvr show mvr members show mvr interface This command displays the MVR-enabled interfaces configuration. show mvr traffic This command displays global MVR statistics. Page Address Resolution Protocol (ARP) Commands arp ip local-proxy-arp ip proxy-arp arp cachesize arp dynamicrenew arp purge arp resptime arp retries arp timeout clear arp-cache clear arp-switch show arp The following are displayed for each ARP entry: show arp brief This command displays the brief Address Resolution Protocol (ARP) table information. show arp switch IP Routing Commands This section describes the commands you use to enable and configure IP routing on the switch. routing ip routing ip address ip address dhcp ip default-gateway release dhcp renew dhcp show dhcp lease ip route ip route default ip route distance ip netdirbcast ip mtu encapsulation clear ip route all clear ip route counters show ip brief show ip interface This command displays all pertinent information about the IP interface. Page show ip interface brief show ip protocols Page show ip route show ip route ecmp-groups show ip route summary Page show ip route preferences show ip stats show routing heap summary Router Discovery Protocol Commands ip irdp ip irdp multicast ip irdp holdtime ip irdp maxadvertinterval ip irdp minadvertinterval ip irdp preference show ip irdp This command displays the router discovery information for all interfaces, or a specified Virtual LAN Routing Commands vlan routing show ip vlan Virtual Router Redundancy Protocol Commands ip vrrp (Global Config) ip vrrp (Interface Config) ip vrrp mode ip vrrp ip ip vrrp authentication ip vrrp preempt ip vrrp priority ip vrrp timers advertise ip vrrp track interface ip vrrp track ip route ip vrrp <vrid> accept-mode no ip vrrp vrid accept-mode show ip vrrp interface stats show ip vrrp show ip vrrp interface show ip vrrp interface DHCP and BOOTP Relay Commands bootpdhcprelay cidoptmode This command enables the circuit ID option mode for BootP/DHCP Relay on the system. bootpdhcprelay maxhopcount bootpdhcprelay minwaittime show bootpdhcprelay IP Helper Commands clear ip helper statistics ip helper-address (Global Config) ip helper enable ip helper-address ip helper-address discard show ip helper-address show ip helper statistics Open Shortest Path First (OSPF) Commands router ospf enable (OSPF) network area (OSPF) ip ospf area 1583compatibility area default-cost (OSPF) area nssa (OSPF) area nssa default-info-originate (OSPF) area nssa no-redistribute (OSPF) area nssa no-summary (OSPF) area nssa translator-role (OSPF) area nssa translator-stab-intv (OSPF) area range (OSPF) area stub (OSPF) area stub no-summary (OSPF) area virtual-link (OSPF) area virtual-link authentication area virtual-link dead-interval (OSPF) area virtual-link hello-interval (OSPF) area virtual-link retransmit-interval (OSPF) area virtual-link transmit-delay (OSPF) auto-cost (OSPF) bandwidth capability opaque clear ip ospf clear ip ospf configuration clear ip ospf counters clear ip ospf neighbor clear ip ospf neighbor interface clear ip ospf redistribution default-information originate (OSPF) default-metric (OSPF) distance ospf (OSPF) distribute-list out (OSPF) exit-overflow-interval (OSPF) external-lsdb-limit (OSPF) log-adjacency-changes ip ospf authentication ip ospf cost ip ospf database-filter all out ip ospf dead-interval ip ospf hello-interval ip ospf network ip ospf priority ip ospf retransmit-interval ip ospf transmit-delay ip ospf mtu-ignore router-id (OSPF) redistribute (OSPF) maximum-paths (OSPF) passive-interface default (OSPF) passive-interface (OSPF) timers pacing flood timers pacing lsa-group timers spf trapflags (OSPF) Page show ip ospf This command displays information relevant to the OSPF router. Page Page show ip ospf abr show ip ospf area The following OSPF NSSA-specific information displays only if the area is configured as an NSSA: show ip ospf asbr show ip ospf database The information below is only displayed if OSPF is enabled. For each link-type and area, the following information is displayed: show ip ospf database database-summary show ip ospf interface This command displays the information for the IFO object or virtual interface tables. The information below will only be displayed if OSPF is enabled. show ip ospf interface brief This command displays brief information for the IFO object or virtual interface tables. show ip ospf interface stats The command lists the number of OSPF packets of each type sent and received on the show ip ospf neighbor If you specify an IP address for the neighbor router, the following fields display: show ip ospf range show ip ospf statistics show ip ospf stub table show ip ospf traffic show ip ospf virtual-link show ip ospf virtual-link brief OSPF Graceful Restart Commands nsf no nsf nsf restart-interval no nsfrestart-interval nsf helper no nsf helper nsf helper disable nsf [ietf] helper strict-lsa-checking no nsf [ietf] helper strict-lsa-checking max-metric router-lsa OSPF Interface Flap Dampening Commands Dampening show dampening interface show interface dampening Routing Information Protocol (RIP) Commands router rip enable (RIP) ip rip auto-summary default-information originate (RIP) default-metric (RIP) distance rip distribute-list out (RIP) ip rip authentication ip rip receive version ip rip send version hostroutesaccept split-horizon redistribute (RIP) show ip rip This command displays information relevant to the RIP router. show ip rip interface brief show ip rip interface This command displays information related to a particular RIP interface. ICMP Throttling Commands ip unreachables ip redirects ip icmp echo-reply ip icmp error-interval Multicast Commands ip mcast boundary ip multicast ip multicast ttl-threshold ip mroute show ip mcast show ip mcast boundary This command displays all the configured administrative scoped multicast boundaries. show ip mcast interface This command displays the multicast information for the specified interface. show ip mcast mroute show ip mcast mroute group show ip mcast mroute source DVMRP Commands ip dvmrp(Global Config) ip dvmrp metric ip dvmrp trapflags ip dvmrp show ip dvmrp show ip dvmrp interface This command displays the interface information for DVMRP on the specified interface. The following field is displayed only when DVMRP is operational on the interface. The following fields are displayed only if DVMRP is enabled on this interface. show ip dvmrp neighbor show ip dvmrp nexthop show ip dvmrp prune This command displays the table listing the routers upstream prune information. show ip dvmrp route This command displays the multicast routing information for DVMRP. PIM Commands ip pim dense (Global Config) ip pim (Interface Config) ip pim hello-interval show ip pim interface show ip pim neighbor This command displays the neighbor information for PIM on the specified interface. ip pim sparse(Global Config) ip pim bsr-border ip pim bsr-candidate ip pim dr-priority ip pim join-prune-interval ip pim rp-address ip pim rp-candidate ip pim ssm ip pim-trapflags show ip pim Example 1: Example 2: show ip pim ssm This command shows the configured source-specific IP multicast addresses. show ip pim bsr-router show ip pim rp-hash This command displays the rendezvous point selected for the specified group address.. show ip pim rp mapping This command displays the mappings for the PIM group to the active rendezvous points.. Example 1: Example 2: Example 3: Internet Group Message Protocol (IGMP) Commands ip igmp ip igmp version ip igmp last-member-query-count ip igmp last-member-query-interval ip igmp query-interval ip igmp query-max-response-time ip igmp robustness ip igmp startup-query-count ip igmp startup-query-interval show ip igmp show ip igmp groups If you use the detail keyword, the following fields appear: If you do not use the detail keyword, the following fields appear: The following fields are not displayed if the interface is not enabled: show ip igmp interface This command displays the IGMP information for the interface. show ip igmp interface membership This command displays the list of interfaces that have registered in the multicast group. If you use the detail keyword, the following fields appear: show ip igmp interface stats IGMP Proxy Commands ip igmp-proxy ip igmp-proxy unsolicit-rprt-interval ip igmp-proxy reset-status show ip igmp-proxy show ip igmp-proxy interface The column headings of the table associated with the interface are as follows: show ip igmp-proxy groups show ip igmp-proxy groups detail Page Page Tunnel Interface Commands interface tunnel tunnel source tunnel destination tunnel mode ipv6ip IPv6 Routing Commands ipv6 hop-limit ipv6 unicast-routing ipv6 enable ipv6 address ipv6 address autoconfig ipv6 address dhcp ipv6 route ipv6 route distance ipv6 mtu ipv6 nd dad attempts ipv6 nd managed-config-flag ipv6 nd ns-interval ipv6 nd other-config-flag ipv6 nd ra-interval ipv6 nd ra-lifetime ipv6 nd reachable-time ipv6 nd suppress-ra ipv6 nd router-preference ipv6 unreachables ipv6 icmp error-interval show ipv6 brief Use this command to display the IPv6 status of forwarding mode and IPv6 unicast routing mode. show ipv6 interface If you specify an interface, the following information also appears. If an IPv6 prefix is configured on the interface, the following information also appears. show ipv6 neighbor clear ipv6 neighbors show ipv6 route Page show ipv6 route ecmp-groups Example show ipv6 route preferences show ipv6 route summary The following example shows CLI display output for the command. show ipv6 vlan This command displays IPv6 VLAN routing interface addresses. The rest of the output for this command is displayed in a table with the following column headings: show ipv6 traffic Page Page clear ipv6 route counters clear ipv6 statistics OSPFv3 Commands ipv6 ospf ipv6 ospf area ipv6 ospf cost ipv6 ospf dead-interval ipv6 ospf hello-interval ipv6 ospf mtu-ignore ipv6 ospf network ipv6 ospf priority ipv6 ospf retransmit-interval ipv6 ospf transmit-delay ipv6 router ospf area default-cost (OSPFv3) area nssa (OSPFv3) area nssa default-info-originate (OSPFv3) area nssa no-redistribute (OSPFv3) area nssa no-summary (OSPFv3) area nssa translator-role (OSPFv3) area nssa translator-stab-intv (OSPFv3) area range (OSPFv3) area stub (OSPFv3) area stub no-summary (OSPFv3) area virtual-link (OSPFv3) area virtual-link dead-interval (OSPFv3) area virtual-link hello-interval (OSPFv3) area virtual-link retransmit-interval (OSPFv3) area virtual-link transmit-delay (OSPFv3) auto-cost (OSPFv3) clear ipv6 ospf clear ipv6 ospf configuration clear ipv6 ospf counters clear ipv6 ospf neighbor clear ipv6 ospf neighbor interface clear ipv6 ospf redistribution default-information originate (OSPFv3) default-metric (OSPFv3) distance ospf (OSPFv3) enable (OSPFv3) exit-overflow-interval (OSPFv3) external-lsdb-limit (OSPFv3) maximum-paths (OSPFv3) passive-interface default (OSPFv3) passive-interface (OSPFv3) redistribute (OSPFv3) router-id (OSPFv3) trapflags (OSPFv3) Table 2. Trapflag Groups (OSPFv3) To enable all the flags, give the command as trapflags all. show ipv6 ospf This command displays information relevant to the OSPF router. Page Page show ipv6 ospf abr show ipv6 ospf area The following OSPF NSSA-specific information displays only if the area is configured as an NSSA. show ipv6 ospf asbr show ipv6 ospf database show ipv6 ospf database database-summary show ipv6 ospf interface This command displays the information for the IFO object or virtual interface tables. The following information only displays if OSPF is initialized on the interface: show ipv6 ospf interface brief This command displays brief information for the IFO object or virtual interface tables. show ipv6 ospf interface stats show ipv6 ospf neighbor If you specify an IP address for the neighbor router, the following fields display: show ipv6 ospf range show ipv6 ospf stub table ProSafe M4100 and M7100 Managed Switches show ipv6 ospf virtual-link show ipv6 ospf virtual-link brief This command displays the OSPFV3 Virtual Interface information for all areas in the system. OSPFv3 Graceful Restart Commands nsf (OSPFv3) no nsf [ietf] (OSPFv3) nsf helper (OSPFv3) nsf ietf helper disable (OSPFv3) no nsf helper (OSPFv3) nsf helper strict-lsa-checking (OSPFv3) no nsf [ietf] helper strict-lsa-checking (OSPFv3) nsf restart-interval (OSPFv3) DHCPv6 Commands service dhcpv6 ipv6 dhcp server ipv6 dhcp relay destination ipv6 dhcp pool domain-name (IPv6) dns-server (IPv6) prefix-delegation (IPv6) show ipv6 dhcp show ipv6 dhcp statistics Page show ipv6 dhcp interface clear ipv6 dhcp show ipv6 dhcp pool This command displays configured DHCP pool. show ipv6 dhcp binding This command displays configured DHCP pool. Page Page IPv6 Multicast Forwarder Commands show ipv6 mroute If you use the detail parameter, the command displays the following Multicast Route Table fields: If you use the summary parameter, the command displays the following fields: show ipv6 mroute group show ipv6 mroute source IPv6 PIM Commands ipv6 pim dense(Global Config) ipv6 pim (Interface Config) ipv6 pim hello-interval show ipv6 pim show ipv6 pim neighbor show ipv6 pim interface ipv6 pim bsr-border no ipv6 pim bsr-border Use this command to disable the interface from being the BSR border. ipv6 pim bsr-candidate Use this command to configure the router to announce its candidacy as a bootstrap router (BSR). ipv6 pim dr-priority no ipv6 pim dr-priority Use this command to disable the interface from being the BSR border. ipv6 pim join-prune-interval ipv6 pim rp-address ipv6 pim rp-candidate ipv6 pim ssm show ipv6 pim bsr-router show ipv6 pim rp-hash show ipv6 pim rp mapping IPv6 MLD Commands ipv6 mld router ipv6 mld query-interval ipv6 mld query-max-response-time ipv6 mld last-member-query-interval ipv6 mld last-member-query-count show ipv6 mld groups The following table is displayed to indicate all the sources associated with this group. show ipv6 mld interface Use this command to display MLD-related information for the interface. The following information is displayed for each of the interfaces or for only the specified The following information is displayed if the operational mode of the MLD interface is enabled. show ipv6 mld traffic IPv6 MLD-Proxy Commands ipv6 mld-proxy ipv6 mld-proxy unsolicit-rprt-interval ipv6 mld-proxy reset-status show ipv6 mld-proxy Use this command to display a summary of the host interface status parameters. The command displays the following parameters only when you enable MLD-Proxy. show ipv6 mld-proxy interface The column headings of the table associated with the interface are as follows: show ipv6 mld-proxy groups Use this command to display information about multicast groups that the MLD-Proxy reported. show ipv6 mld-proxy groups detail Use this command to display information about multicast groups that MLD-Proxy reported. Page Page Class of Service (CoS) Commands classofservice dot1p-mapping classofservice ip-dscp-mapping classofservice trust cos-queue min-bandwidth cos-queue strict cos-queue random-detect no cos-queue random-detect random-detect exponential weighting-constant no random-detect exponential weighting-constant random-detect queue-parms traffic-shape show classofservice dot1p-mapping show classofservice ip-precedence-mapping show classofservice ip-dscp-mapping show classofservice trust show interfaces cos-queue If you specify the interface, the command also displays the following information. show interfaces random-detect Differentiated Services (DiffServ) Commands diffserv DiffServ Class Commands class-map class-map rename match ethertype match any match class-map match cos match secondary cos match ip6flowlbl match destination-address mac match dstip match dstip6 match dstl4port match ip dscp match ip precedence match ip tos match protocol match source-address mac match srcip match srcip6 match srcl4port match vlan match secondary-vlan DiffServ Policy Commands assign-queue drop mirror redirect conform-color class mark cos mark cos-as-sec-cos mark ip-dscp mark ip-precedence police-simple police-two-rate policy-map policy-map rename DiffServ Service Commands service-policy DiffServ Show Commands show class-map If the class-name is specified the following fields are displayed: show diffserv show policy-map If the Policy Name is specified the following fields are displayed: Page show diffserv service show diffserv service brief show policy-map interface The following information is repeated for each class instance within this policy: show service-policy MAC Access Control List (ACL) Commands mac access-list extended mac access-list extended rename {deny | permit} (MAC ACL) The time-range parameter allows imposing time limitation on the MAC ACL rule as mac access-group show mac access-lists IP Access Control List (ACL) Commands access-list ip access-list ip access-list rename {deny | permit} (IP ACL) ip access-group acl-trapflags show ip access-lists This command displays an IP ACL <accesslistnumber> is the number used to identify the IP ACL. Note: Only the access list fields that you configure are displayed. show access-lists IPv6 Access Control List (ACL) Commands ipv6 access-list ipv6 access-list rename {deny | permit} (IPv6) ipv6 traffic-filter show ipv6 access-lists Time Range Commands for Time-Based ACLs time-range absolute periodic periodic {start|end} time show time-range AutoVOIP auto-voip {protocol-based | oui-based} auto-voip oui auto-voip vlan auto-voip oui-based priority auto-voip protocol-based {remark | traffic-class} show auto-voip Example: The following shows an example of a CLI display output for the command. show auto-voip oui-table This command lists all of the configured OUIs. Example: show auto-voip oui-table iSCSI Commands iscsi enable iscsi target port iscsi cos iscsi aging time show iscsi show iscsi sessions The show iscsi sessions Privileged EXEC mode command displays the iSCSI sessions. The following example displays the iSCSI sessions. Page About PoE PoE Commands poe poe detection poe high-power poe power limit poe power management poe priority poe reset poe timer schedule name poe usagethreshold poe traps Power over Ethernet (PoE) Commands ProSafe M4100 and M7100 Managed Switches no poe traps Use this command to disable logging the PoE traps. show poe Use this command to get global information regarding the PoE status. show poe port configuration Power over Ethernet (PoE) Commands ProSafe M4100 and M7100 Managed Switches show poe port info Example: (switch) #show poe port info all show poe pd Page Auto Install Commands show autoinstall boot host auto-save boot autoinstall start boot autoinstall stop boot host retry-count boot host dhcp Dual Image Commands delete boot system show bootvar filedescr update bootcode System Information and Statistics Commands show arp switch show eventlog show hardware show version show interface The display parameters, when the argument is <slot/port> or lag, are as follows: The display parameters, when the argument is switchport are as follows: show interface counters This command reports key summary statistics for all ports (physical, CPU, and port-channel). show interface ethernet When you specify a value for slot/port, the command displays the following information. Page Page Page Page If you use the switchport keyword, the following information appears. show mac-addr-table The following information displays if you enter the count parameter: process cpu threshold show process cpu show mbuf total show running-config show running-config interface show sysinfo show tech-support show tech-support techsupport length terminal length show terminal length memory free low-watermark processor Logging Commands logging buffered logging buffered wrap logging cli-command logging console logging host logging host remove logging syslog no logging syslog This command disables syslog logging. logging syslog source-interface This command configures the syslog source-interface. show logging This command displays logging configuration information. show logging buffered This command displays buffered logging (system startup and system operation logs). show logging hosts This command displays all configured logging hosts. show logging traplogs Email Alerting and Mail Server Commands logging email logging email urgent logging email message-type to-addr logging email from-addr logging email message-type subject logging email logtime logging traps logging email test message-type show logging email config This command displays information about the email alert configuration. show logging email statistics This command displays email alerting statistics. clear logging email statistics mail-server security port username password show mail-server config Use this command to display information about the email alert configuration. System Utility and Clear Commands traceroute traceroute ipv6 clear config clear eventlog clear mac-addr-table clear logging buffered clear counters clear igmpsnooping clear pass clear port-channel clear traplog enable password logout ping The following are examples of the CLI command. ping success: ping failure: ping ipv6 ping ipv6 interface quit reload save copy Page Page write memory Simple Network Time Protocol (SNTP) Commands sntp broadcast client poll-interval sntp client mode sntp client port sntp unicast client poll-interval sntp unicast client poll-timeout sntp unicast client poll-retry sntp server clock timezone clock set clock summer-time recurring clock summer-time date no clock summer-time show sntp show sntp client This command is used to display SNTP client settings. show sntp server This command is used to display SNTP server settings and configured servers. For each configured server: show clock DHCP Server Commands ip dhcp pool client-identifier client-name default-router dns-server hardware-address host lease network (DHCP Pool Config) bootfile domain-name netbios-name-server netbios-node-type next-server option ip dhcp excluded-address ip dhcp ping packets service dhcp ip dhcp bootp automatic ip dhcp conflict logging clear ip dhcp binding clear ip dhcp server statistics clear ip dhcp conflict show ip dhcp binding show ip dhcp global configuration show ip dhcp pool configuration The following additional field is displayed for Dynamic pool type: The following additional fields are displayed for Manual pool type: show ip dhcp server statistics This command displays DHCP server statistics. Message Received: Message Sent: show ip dhcp conflict DNS Client Commands ip domain lookup ip domain name ip domain list ip name server ip host ipv6 host ip domain retry ip domain timeout clear host show hosts Packet Capture Commands capture {start|stop} capture {file|remote|line} capture remote port capture file size capture line wrap show capture packets Serviceability Packet Tracing Commands debug arp debug auto-voip debug clear debug console debug crashlog debug dhcp packet debug dot1x packet debug igmpsnooping packet debug igmpsnooping packet transmit debug igmpsnooping packet receive debug ip acl debug ip dvmrp packet debug ip igmp packet debug ip mcache packet debug ip pimdm packet debug ip pimsm packet debug ip vrrp debug ipv6 dhcp debug ipv6 mcache packet debug ipv6 mld packet debug ipv6 pimdm packet debug ipv6 pimsm packet debug lacp packet debug mldsnooping packet debug ospf packet This command enables tracing of OSPF packets received and transmitted by the switch. Sample outputs of the trace messages are shown below. DB_DSCR packet field definitions: LS_REQ packet field definitions. LS_UPD packet field definitions. debug ipv6 ospfv3 packet debug ping packet no debug ping packet This command disables tracing of ICMP echo requests and responses. debug rip packet A sample output of the trace message is shown below. no debug rip packet This command disables tracing of RIP requests and responses. debug sflow packet Use this command to enable sFlow debug packet trace. no debug sflow packet Use this command to disable sFlow debug packet trace. debug spanning-tree bpdu debug spanning-tree bpdu receive debug spanning-tree bpdu transmit debug udld packet debug udld packet receive debug udld packet transmit debug aaa accounting debug aaa authorization Cable Test Command cablestatus sFlow Commands sflow receiver no sflow receiver Use this command to set the sFlow collector parameters back to the defaults. sflow sampler no sflow sampler Use this command to reset the sFlow sampler instance to the default settings. sflow poller no sflow poller Use this command to reset the sFlow poller instance to the default settings. show sflow agent show sflow pollers Use this command to display the sFlow polling instances created on the switch. Use - for range. show sflow receivers Use this command to display configuration information related to the sFlow receivers. show sflow samplers Use this command to display the sFlow sampling instances created on the switch. Software License Commands show license show license features IP Address Conflict Commands ip address-conflict-detect run show ip address-conflict clear ip address-conflict-detect Link Local Protocol Filtering Commands llpf blockall no llpf show llpf interface all RMON Stats and History Commands RFC 2819 RFC 3273 RFC 3434 rmon alarm no rmon alarm This command deletes the rmon alarm entry. rmon hcalarm This command sets the rmon hcalarm entry in the High Capacity RMON alarm mib group. no rmon hcalarm This command deletes the rmon hcalarm entry. rmon event This command sets the rmon event entry in the RMON event mib group. no rmon event This command deletes the rmon event entry. rmon collection history show rmon show rmon collection history show rmon events show rmon history This command displays the specified entry in the RMON history table. show rmon log This command displays the entries in the RMON log table. show rmon statistics interface UDLD Commands udld enable udld message time udld timeout interval udld enable udld port udld reset show udld USB commands show usb device This command displays USB flash device details. Example: The following is the output if the device is plugged into the USB slot. dir usb This command displays USB device contents and memory statistics. Total Size Page Configuring the Switch Management CPU ezconfig The following is an example of an ezconfig session. Network Interface Commands enable (Privileged EXEC access) network parms network protocol network mac-address network mac-type network javamode show network The following shows example CLI display output for the network port. Console Port Access Commands configuration line serial baudrate serial timeout login authentication enable authentication show serial Use this command to display serial communication settings for the switch. Telnet Commands ip telnet server enable telnet transport input telnet transport output telnet session-limit session-timeout telnetcon maxsessions telnetcon timeout show telnet show telnetcon Secure Shell (SSH) Commands ip ssh ip ssh protocol ip ssh server enable sshcon maxsessions sshcon timeout show ip ssh Management Security Commands crypto certificate generate crypto key generate rsa crypto key generate dsa Hypertext Transfer Protocol (HTTP) Commands ip http server ip http secure-server ip http java ip http session hard-timeout ip http authentication ip http session maxsessions ip http session soft-timeout ip http secure-session maxsessions ip http secure-session soft-timeout ip http secure-session hard-timeout ip https authentication ip http secure-port ip http secure-protocol show ip http Use this command to display the http settings for the switch. Access Commands disconnect show loginsession User Account Commands username username name nopassword username <username> unlock username snmpv3 accessmode username snmpv3 authentication username snmpv3 encryption show users show users accounts Use this command to display the local user status about user account lockout and password aging. show users accounts detail show users long Use this command to display the users full name. show users login-history Use this command to display the users who have logged in previously. passwords min-length passwords history passwords aging passwords lock-out passwords strength-check passwords strength minimum uppercase-letters passwords strength minimum lowercase-letters passwords strength minimum numeric-characters passwords strength minimum special-characters passwords strength maximum consecutive-characters passwords strength maximum repeated-characters passwords strength minimum character-classes passwords strength exclude-keyword no passwords strength exclude-keyword Use this command to remove the exclude-keyword. show passwords configuration Use this command to display the configured password management settings. show passwords result aaa authentication login as the following command: aaa authentication enable aaa authentication dot1x aaa accounting no aaa accounting This command deletes the accounting method list. accounting (Console/Telnet/SSH) ip http/https accounting This command applies user exec accounting list to the line methods HTTP and HTTPs methods. no ip http/https accounting exec This command deletes the authorization method list. show accounting Use this command to display ordered methods for accounting lists. aaa authorization authorization(console/telnet/ssh) show authorization methods domain-name domain-name enable show domain-name aaa ias-user username aaa session-id password (AAA IAS User Configuration) clear aaa ias-users show aaa ias-users SNMP Commands snmp-server snmp-server community snmp-server community ipaddr snmp-server community ipmask snmp-server community mode snmp-server community ro snmp-server community rw snmp-server enable traps violation snmp-server enable traps snmp-server enable traps linkmode snmp-server enable traps multiusers snmp-server enable traps stpmode snmptrap snmptrap snmpversion snmptrap ipaddr snmptrap mode snmp trap link-status snmp trap link-status all show snmpcommunity show snmptrap The following shows an example of the CLI command. show trapflags RADIUS Commands authorization network radius radius accounting mode radius server attribute radius server host Page radius server key radius server msgauth radius server primary radius server retransmit radius server timeout show radius show radius servers Page show radius accounting Use this command to display a summary of configured RADIUS accounting servers. show radius accounting statistics Use this command to display a summary of statistics for the configured RADIUS accounting servers. Page show radius statistics Use this command to display the summary statistics of configured RADIUS Authenticating servers. TACACS+ Commands debug tacacs packet tacacs-server host tacacs-server key tacacs-server keystring tacacs-server source interface tacacs-server timeout key port priority timeout show tacacs Configuration Scripting Commands script apply script delete script list script show script validate Pre-Login Banner and System Prompt Commands copy (pre-login banner) set prompt set clibanner Switch Database Management (SDM) Templates sdm prefer no sdm prefer show sdm prefer IPv6 Management Commands network ipv6 enable network ipv6 address network ipv6 gateway no network ipv6 gateway Use this command to remove IPv6 gateways on the network port interface. show network ndp Use this command to display NDP cache information for the network port. The following shows sample CLI display output for the command: show network ipv6 dhcp statistics The following example shows CLI display output for the command: Page Page Core Table 3. BSP Log Messages Table 4. NIM Log Messages ProSafe M4100 and M7100 Managed Switches Table 5. System Log Messages Utilities Table 6. Trap Mgr Log Message Table 7. DHCP Filtering Log Messages Table 8. NVStore Log Messages Table 9. RADIUS Log Messages Management Table 10. TACACS+ Log Messages Table 11. LLDP Log Message Table 12. SNTP Log Message Table 13. SNMP Log Message Table 14. EmWeb Log Messages Table 15. CLI_UTIL Log Messages Table 16. WEB Log Messages Table 17. CLI_WEB_MGR Log Messages Table 18. SSHD Log Messages Table 19. SSLT Log Messages Table 18. SSHD Log Messages Switching Table 20. User_Manager Log Messages Table 21. Protected Ports Log Messages Table 22. IP Subnet VLANS Log Messages Table 23. Mac-based VLANs Log Messages Table 24. 802.1x Log Messages Table 25. IGMP Snooping Log Messages Table 23. Mac-based VLANs Log Messages Table 26. GARP/GVRP/GMRP Log Messages Table 25. IGMP Snooping Log Messages Table 27. 802.3ad Log Messages Table 28. FDB Log Message Table 29. Double VLAN Tag Log Message Table 30. IPv6 Provisioning Log Message Table 31. MFDB Log Message Table 32. 802.1Q Log Messages accessing DOT1Q config data for interface %d in dot1qMapIntfIsConfigurable. Table 33. 802.1S Log Messages Table 34. Port Mac Locking Log Message QoS Table 35. Protocol-based VLANs Log Messages Table 36. ACL Log Messages Table 37. CoS Log Message Routing/IPv6 Routing Table 38. DiffServ Log Messages Table 39. DHCP Relay Log Messages Table 40. OSPFv2 Log Messages Table 41. OSPFv3 Log Messages Table 40. OSPFv2 Log Messages (Continued) Table 42. Routing Table Manager Log Messages Table 43. VRRP Log Messages Table 44. ARP Log Message Multicast Table 45. RIP Log Message Table 46. DHCP6 Log Message Table 47. Cache Log Messages Table 48. IGMP Log Messages Table 49. IGMP-Proxy Log Messages Table 50. PIM-SM Log Messages Stacking Table 51. PIM-DM Log Messages Table 52. DVMRP Log Messages Table 53. EDB Log Message Technologies Page O/S Support Table 55. OSAPI Log Messages Table 55. OSAPI Log Messages (Continued) Page Energy-Detect Mode Energy Efficient Ethernet (EEE) green-mode energy-detect green-mode eee clear green-mode statistics show green-mode <slot/port> Green Ethernet Commands ProSafe M4100 and M7100 Managed Switches Table 57. Green-Mode status terms The output of 'show green-mode <s/p>' is indicated below. Green Ethernet Commands ProSafe M4100 and M7100 Managed Switches show green-mode Table 58. The output of 'show green-mode <u/s/p>' is indicated below. green-mode eee-lpi-history {sampling-interval <30sec - 36000sec> | max-samples <1 - 168>} show green-mode eee-lpi-history interface <slot/port> This command displays the interface green-mode EEE LPI history. 14. Command List

NETGEAR Port Security Commands

Models: M4100-12G-POE+ M4100-12GF M4100-24G-POE+ M4100-26-POE M4100-26G M4100-26G-POE M4100-50-POE M4100-50G M4100-50G-POE+ M4100-D10-POE M4100-D12G M4100-D12G-POE+ M7100-24X