Control Direction | NETGEAR NETGEAR instruction

The interface whose statistics are displayed.

User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software

Reauthentication Enabled Indicates if reauthentication is enabled on this port. Possible values are ‘True” or “False”.

Key Transmission Enabled Indicates if the key is transmitted to the supplicant for the specified port. Possible values are True or False.

Control Direction	Indicates the control direction for the specified port or ports. Possible values are
	both or in.

If the optional parameter 'statistics <slot/port>' is used, the dot1x statistics for the specified port are displayed.

Port

EAPOL Frames Received The number of valid EAPOL frames of any type that have been received by this authenticator.

EAPOL Frames Transmitted The number of EAPOL frames of any type that have been transmitted by this authenticator.

EAPOL Start Frames Received The number of EAPOL start frames that have been received by this authenticator.

EAPOL Logoff Frames Received The number of EAPOL logoff frames that have been received by this authenticator.

Last EAPOL Frame Version The protocol version number carried in the most recently received EAPOL frame.

Last EAPOL Frame Source The source MAC address carried in the most recently received EAPOL frame.

EAP Response/Id Frames Received The number of EAP response/identity frames that have been received by this authenticator.

EAP Response Frames Received The number of valid EAP response frames (other than resp/id frames) that have been received by this authenticator.

EAP Request/Id Frames Transmitted The number of EAP request/identity frames that have been transmitted by this authenticator.

EAP Request Frames Transmitted The number of EAP request frames (other than request/identity frames) that have been transmitted by this authenticator.

Invalid EAPOL Frames Received The number of EAPOL frames that have been received by this authenticator in which the frame type is not recognized.

EAP Length Error Frames Received The number of EAPOL frames that have been received by this authenticator in which the frame type is not recognized.

Security Commands

9-15

202-10088-01, March 2005

Image 221

NETGEAR NETGEAR user manual Control Direction

Contents

202-10088-01, March Technical Support Canadian Department of Communications Compliance Statement 202-10088-01, March Contents Chapter Command Line Interface Structure 202-10088-01, March 202-10088-01, March 202-10088-01, March 202-10088-01, March Pre-login Banner System Log Syslog User Account Commands 202-10088-01, March 100 202-10088-01, March 202-10088-01, March Chapter Security Commands 202-10088-01, March 202-10088-01, March Chapter Routing Commands Xxii 202-10088-01, March Chapter Quality of Service QoS Commands 202-10088-01, March 202-10088-01, March Chapter Managing Switch Stacks Appendix a Is CLI Mapping Appendix B Cabling Guidelines Contents Xxx Contents Audience Why the Document was CreatedHow to Use This Document Special Message Formats Typographical Conventions About This Guide About This Guide Scope Switch Management Overview Comparing Switch Management Methods Set Up Your Switch Using Direct Console Access Chapter Administration Console Interface Connection Description Connection Settings Administration Console Interface Chapter Web-Based Management Interface Web Based Management Overview How to Log In to the Managed Switch Login window opens System Information Web-Based Management Utility Features Interactive switch image Interactive Switch Image Main Menus Menus Management SwitchSecondary Menus Routing System-Wide Popup MenusTraffic Management Smart Wizard Port-Specific Popup Menus Web-Based Management Interface Command CLI Command Format Values Parameters Macaddr Conventions Annotations Chapter Quick Start up Quick Starting the Switch Quick Start up Physical Port Data System Info and System SetupQuick Start up Software Version Information Quick Start up IP Address Quick Start up User Account Management Quick Start up IP Address Xmodem Quick Start up Uploading from Switch to Out-of-Band PC Only Quick Start up Downloading from Tftp Server Quick Start up Factory Defaults Chapter Mode-based CLI Enter the ip dhcp pool Correct Mode-based Topology Command prompt shown at this level is Mode-based Command Hierarchy Figuration mode to configure the QoS policy map Invalid input detected at ‘’ marker Flow of Operation Support for No Form No Form of a CommandBehavior of Command Help ? Mode-based CLI System Information and Statistics Commands Chapter Switching Commands Show hardware Show arp switchShow eventlog Show interface Show interface ethernet Packets Received Packets Received Successfully Packets Received with MAC Errors Received Packets not forwarded Packets Transmitted Octets Transmit Discards Transmit ErrorsPackets Transmitted Successfully Protocol Statistics Dot1x Statistics Switching Commands Show mac-addr-table Show logging Show msglog Show running-config Snmp-server System Management CommandsShow sysinfo No transport input telnet TelnetTransport input telnet Session-limit Session-timeoutTransport output telnet Bridge aging-time No session-timeoutSeconds No bridge aging-time Network javamode MtuNetwork mac-address No mtu No network mac-type Network mac-typeNetwork parms Network protocol Telnetcon timeoutTelnetcon maxsessions No telnetcon maxsessions No telnetcon timeout Serial timeoutNo serial timeout Serial baudrate Serviceport protocol Serviceport ipSet prompt Show telnet Show network Show forwardingdb agetime Show telnetcon Java ModeFormat Mode Show serial Show serviceport Show snmpcommunity Snmp Community CommandsClient IP Address Client IP Mask Show trapflags Show snmptrap No snmp-server community Snmp-server community Snmp-server community ipmask Snmp-server community ipaddrNo snmp-server community ipaddr No snmp-server community ipmask No snmp-server community mode Snmp-server community modeSnmp-server community ro Snmp-server community rw Snmp-server enable traps bcaststorm Snmp-server enable trapsSnmp-server enable traps linkmode No snmp-server enable traps Snmp-server enable traps stpmode Snmp-server enable traps multiusersNo snmp-server enable traps linkmode No snmp-server enable traps stpmode No snmptrap mode Snmptrap modeSnmptrap Snmptrap ipaddr Snmp trap link-status all Snmp trap link-statusNo snmp trap link-status No snmp trap link-status all System Configuration Commands Management Vlan CommandNetwork mgmtvlan Addport Deleteport Global Config Deleteport Interface ConfigAuto-negotiate all No auto-negotiate No macfilter MacfilterMacfilter adddest Macfilter addsrc Macfilter adddest allNo macfilter adddest No macfilter adddest all Monitor session Macfilter addsrc allNo macfilter addsrc No macfilter addsrc all No monitor session mode Monitor session modeShutdown No monitor session Speed all Shutdown allNo shutdown 100f 10h 10f 100h Storm-control broadcast100f No storm-control broadcast No storm-control flowcontrol Storm-control flowcontrolShow mac-address-table multicast Show mac-address-table staticfiltering Show mac-address-table static Show port Show mac-address-table statsShow monitor Show port protocol Show storm-control Virtual LAN Vlan CommandsVlan No vlan Vlan ingressfilter Vlan acceptframeNo vlan acceptframe No vlan ingressfilter Vlan name Vlan makestaticVlan participation No vlan name Vlan port acceptframe all Vlan participation allExclude Auto Vlan port pvid all Vlan port ingressfilter allNo vlan port acceptframe all No vlan port ingressfilter all Vlan protocol group Vlan port tagging allVlan protocol group add protocol No vlan port tagging all Protocol group Vlan protocol group removeNo vlan protocol group add protocol No protocol group Protocol vlan group all Protocol vlan groupNo protocol vlan group No protocol vlan group all Vlan tagging Vlan pvidShow vlan No vlan pvid Vlan Name ConfiguredVlan Type Current Port Vlan ID Show vlan briefShow vlan port Ingress Filtering System Utility CommandsTraceroute Enable passwd Clear configClear counters Clear igmpsnooping Clear traplog Clear port-channelClear vlan Logout Reload PingCopy Formatreload Pre-login Banner Configuration Scripting CLI Command LoggingLogging cli-command No logging cli-command Format Configscript delete Configscript applyConfigscript list Configscript show System Log Syslog Configscript validate Logging buffered wrap Logging bufferedLogging console No logging buffered Logging host Logging historyNo logging console No logging history Logging port Logging host removeLogging syslog No logging port Client Local Port Show logging history Show logging buffered Admin StatusShow logging hosts Severity Level Filter Simple Network Time Protocol Sntp Sntp client modeSntp broadcast client poll-interval Host Status Sntp client port Sntp client modeSntp unicast client poll-interval No sntp client port No sntp unicast client poll-timeout Sntp unicast client poll-timeoutSntp unicast client poll-retry Sntp multicast client poll-interval Show sntp Sntp server Show sntp server Show sntp client Disconnect User Account CommandsShow loginsession Connection From Show usersIdle Time Session Time Users passwd Users nameNo users name No users passwd Users snmpv3 authentication Users snmpv3 accessmodeNo users snmpv3 accessmode No users snmpv3 authentication No users snmpv3 encryption Dhcp Server CommandsUsers snmpv3 encryption Client-name Client-identifierNo client-identifier No client-name No default-router Default-routerDns-server Hardware-address Ip dhcp excluded-address HostNo hardware-address No host Ip dhcp ping packets DefaultnoneIp dhcp pool No ip dhcp excluded-address Network LeaseNo ip dhcp pool No lease Bootfile Service dhcpNo service dhcp No bootfile No ip dhcp bootp automatic Ip dhcp bootp automaticDomain-name Ip dhcp conflict logging Netbios-node-type Netbios-name-serverNo netbios-name-server No ip dhcp conflict logging Next-server No netbios-node-typeOption No next-server No option Show ip dhcp global configurationShow ip dhcp binding Show ip dhcp server statistics Show ip dhcp pool configuration Show ip dhcp conflict Clear ip dhcp binding Provisioning Ieee 802.1p CommandsClear ip dhcp server statistics Clear ip dhcp conflict Show classofservice dot1pmapping Classofservice dot1pmappingVlan port priority all Vlan priority No set garp timer join Garp CommandsSet garp timer join Set garp timer leave Set garp timer join allNo set garp timer join all No set garp timer leave Set garp timer leaveall Set garp timer leave allNo set garp timer leave all No set garp timer leaveall No set garp timer leaveall all Set garp timer leaveall allGmrp Admin Mode Gvrp Admin Mode Set gvrp adminmode Garp Vlan Registration Protocol Gvrp CommandsNo set gvrp adminmode Set gvrp interfacemode Set gvrp interfacemode all Show gvrp configuration Set gmrp adminmode Garp Multicast Registration Protocol Gmrp CommandsPort Gmrp Mode No set gmrp adminmode Set gmrp interfacemode all Set gmrp interfacemodeNo set gmrp interfacemode No set gmrp interfacemode all Show mac-address-table gmrp Show gmrp configuration Set igmp Internet Group Management Protocol Igmp Commands No set igmp groupmembership-interval Set igmp groupmembership-intervalNo set igmp Set igmp maxresponse Set igmp interfacemode allNo set igmp interfacemode all No set igmp maxresponse Set igmp mcrtrexpiretime Format Mode Admin ModeShow igmpsnooping No set igmp mcrtrexpiretime Show mac-address-table igmpsnooping Igmp Snooping per Vlan No set igmp groupmembershipinterval Set igmp groupmembershipinterval No set igmp mcrtexpiretime Set igmp mcrtexpiretimeSet igmp fast-leave No set igmp fast-leave Port-channel staticcapability Link Aggregation LAG/Port-Channel 802.3AD CommandsFast Leave Mode Port lacpmode all Port lacpmodeNo port-channel staticcapability No port lacpmode No port-channel adminmode Port-channel adminmode allPort-channel Port-channel linktrap Show port-channel brief Port-channel name Show port-channel Spanning-tree max-hops Spanning Tree STP CommandsSpanning-tree No spanning-tree max-hops Spanning-tree configuration revision Spanning-tree configuration nameNo spanning-tree configuration name No spanning-tree Spanning-tree edgeport No spanning-tree configuration revisionSpanning-tree forceversion No spanning-tree edgeport Spanning-tree hello-time Spanning-tree forward-timeNo spanning-tree forceversion No spanning-tree forward-time No spanning-tree max-age Spanning-tree max-ageSpanning-tree mst No spanning-tree mst Cost auto external-cost auto port-priorty Spanning-tree mst priority Spanning-tree mst instanceNo spanning-tree mst instance No spanning-tree mst priority No spanning-tree port mode Spanning-tree port modeSpanning-tree mst vlan No spanning-tree mst vlan Spanning-tree bpdumigrationcheck Spanning-tree port mode all Show spanning-tree Show spanning-tree interface Port mode Show spanning-tree mst port detailed Show spanning-tree mst detailed Port Forwarding State Port PriorityPort Role Port Path Cost Show spanning-tree mst summary Show spanning-tree mst port summaryCST Regional Root CST Port Cost Show spanning-tree vlan Show spanning-tree summary Switching Commands 133 Mode Root Port Identifier Root Port Max Age Topology ChangeDesignated Root Root Path Cost Bridge Forward Delay Root Port Bridge Forward Delay Derived valueCST Regional Root Regional Root Path Cost Bridge Identifier Bridge Max Age RST BPDUs Transmitted STP BPDUs TransmittedMstp BPDUs Transmitted Mstp BPDUs Received MST Instance ID Port Identifier Port Priority Configured value indicating if this port is an edge port No port-security Port SecurityPort-security Port-security max-static Port-security max-dynamicNo port-security max-dynamic No port-security max-static No snmp-server enable traps violation Snmp-server enable traps violationPort-security mac-address Port-security mac-address move Show port-security static Show port-securityShow port-security dynamic Show port-security violation Port Based Network Access Control Ieee 802.1X CommandsAuthentication login No authentication login Dot1x defaultloginClear dot1x statistics Clear radius statistics Dot1x initialize Dot1x loginDot1x max-req No dot1x max-req No dot1x port-control Dot1x port-controlDot1x port-control All Dot1x re-authentication Dot1x re-authenticateNo dot1x re-authentication Dot1x system-auth-control No dot1x system-auth-control Dot1x timeout Dot1x user No dot1x timeoutShow radius accounting No dot1x user Show authentication Show dot1x Show authentication usersMethod User Supplicant Timeout Control ModeServer Timeout Protocol Version Control Direction Users defaultlogin Show users authenticationUsers login Show dot1x users Radius accounting mode Remote Authentication Dial In User Service Radius CommandsNo radius accounting mode Radius server host No radius server host Radius server key Default10Radius server msgauth Radius server primary No radius server timeout Radius server timeoutShow radius No radius server retransmit Show radius statistics Access Accepts Secure Shell SSH CommandsAccess Rejects Access Challenges Show ip ssh Hypertext Transfer Protocol Http CommandsIp ssh protocol Ip http secure-protocol Ip http secure-portIp http secure-server No ip http secure-port Ip http server Http ModeShow ip http No ip http server Security Commands No arp Address Resolution Protocol ARP CommandsArp Arp cachesize Ip proxy-arpNo ip proxy-arp No arp cachesize Arp purge Arp dynamicrenewArp resptime No arp dynamicrenew No arp timeout Arp timeoutArp retries Clear arp-cache Age Time seconds Show arpRetries Cache Size Routing IP RoutingShow arp brief Ip address Ip routingNo routing No ip routing Ip route Ip route defaultNo ip address No ip route Defaultenabled No ip route defaultIp route distance Ip forwarding Ip mtu Ip netdirbcastNo ip forwarding No ip netdirbcast Show ip interface Show ip brief Show ip route Show ip interface brief Show ip route entry Show ip route bestroutesProtocol Next Hop Intf Show ip stats Show ip route preferencesNext Hop Interface Preference Bootpdhcprelay cidoptmode Bootp/DHCP Relay CommandsNo bootpdhcprelay cidoptmode Encapsulation Bootpdhcprelay minwaittime Bootpdhcprelay enableBootpdhcprelay maxhopcount Show bootpdhcprelay Bootpdhcprelay serverip Ip irdp Router Discovery Protocol CommandsIp irdp address No ip irdp Ip irdp maxadvertinterval Ip irdp holdtimeNo ip irdp address No ip irdp holdtime Ip irdp preference Ip irdp minadvertintervalShow ip irdp No ip irdp minadvertinterval Vlan routing Virtual LAN Routing Commands Enable RIP Routing Information Protocol RIP CommandsShow ip vlan Logical Interface Auto-summary Default-information originate RIPIp rip No default-information originate RIP Default-metric RIPNo default-metric RIP Distance rip No default-information originate Ip rip authenticationDistribute-list out No distribute-list out Ip rip receive version No ip rip authenticationIp rip send version No ip rip receive version Split-horizon HostroutesacceptNo ip rip send version No hostroutesaccept Show ip rip RedistributeFormat for other source protocol No redistribute Show ip rip interface brief RIP ModeSend Version Receive Version Show ip rip interface Mac access-list extended name Access Control List ACL Commands Denypermit srcmac srcmacmask dstmac dstmacmask Mac access-list extended rename name newnameNo mac access-list extended name Mac access-group name inout sequence No mac access-group name inout Show mac access-list nameShow mac access-lists Access-list Show ip access-lists Ip access-groupIp access-group all Destination IP Mask Differentiated Services DiffServ CommandsSource IP Mask Diffserv Service Levels Class CommandsNo diffserv Traffic Classification No class-map Match ethertype Class-map renameMatch secondary-cos Match secondary-vlan Match class-map Match any Match destination-address mac Match cos Match dstl4port Match dstip Match ip precedence Match ip dscp Match protocol Match ip tos Match srcl4port Match source-address macMatch srcip Match vlan Policy Commands Mark secondary-cos Assign-queueDrop Conform-color RedirectBandwidth kbps Policy Type Class IncompatibilitiesBandwidth percent Expedite percent Expedite kbps Policy Type Mark ip-dscp Mark cos Police-simple Policy Type IncompatibilitiesMark ip-precedence Police-single-rate Police-two-rate Randomdrop Policy-mapPolicy-map rename Shape peak Shape average Service-policy Service Commands No service-policy Show Commands Class Name Show class-mapClass Type Match Criteria Show diffserv Assign Queue Show policy-mapConform COS Mark IP Dscp Policy NameMark IP Precedence Policing Style Shaping Average Exceed ActionBandwidth Class Members Show diffserv serviceDirection Operational Status DiffServ Mode Show diffserv service briefPolicy Details OperStatus 11-38 Quality of Service QoS Commands Sent Octets/Packets Show service-policyDir Offered Packets Classofservice ip-dscp-mapping Class of Service CoS CommandsClassofservice dot1p-mapping Classofservice trust Classofservice ip-precedence-mappingNo classofservice trust Cos-queue max-bandwidth Cos-queue min-bandwidth No cos-queue max-bandwidthCos-queue random-detect No cos-queue min-bandwidth Random-detect Cos-queue strictNo cos-queue strict No random-detect Random-detect queue-parms Random-detect exponential-weighting-constantTail-drop queue-parms No random-detect queue-parms Traffic-shape Show classofservice dot1p-mapping Show interfaces cos-queue Show classofservice ip-precedence-mappingShow classofservice trust Show interfaces random-detect Fig indication Show interfaces tail-drop-threshold Drop precedence level for this queue, from 1 to p. The spe 11-50 Quality of Service QoS Commands Understanding Switch Stacks Chapter Managing Switch Stacks Switch Stack Membership Managing Switch Stacks 12-3 Interconnect Ports 51 As shown Stack Member Numbers Stack Master Election and Re-Election Stack Member Priority Values Switch Stack Offline Configuration Managing Switch Stacks 12-7 Switch Stack Configuration Files Switch Stack Software Compatibility RecommendationsIncompatible Software and Stack Member Image Upgrades Switch Stack Configuration Scenarios Switch Stack Management ConnectivityConnectivity to the Switch Stack Through Console Ports Connectivity to the Switch Stack Through Telnet Stacking Recommendations General Practices Initial installation and Power-up of a Stack Replacing a Stack Member with a New Unit Removing a Unit from the StackAdding a Unit to an Operating Stack Renumbering Stack Members Merging Two Operational Stacks Moving a Master to a Different Unit in the StackRemoving a Master Unit from an Operating Stack Upgrading Firmware Preconfiguration Code Mismatch Migration of Configuration With a Firmware Upgrade Appendix a Is CLI Mapping Config acl rule action aclid Rulenum permit/deny Exec Is CLI Mapping Config diffserv policy police style Policy-Cla Police-simple Is CLI Mapping Show diffserv class summary Privileged Exec User Class-Ma Match not cos Config Class-Ma Match not ip precedence Config Routing Show arp switch Privileged Is CLI Mapping Is CLI Mapping Vlan Router No enable Is CLI Mapping Is CLI Mapping Config Router No auto-summary Router No split-horizon 7300S Series L3 Switch CLI Command Mode Syntax Config snmptrap ipaddr Global Config telnet maxsessions Privileged Remotecon maxsessions Is CLI Mapping Global No spanning-tree configuration name Config Config spanningtree bridge priority Removed 61440 Interface No spanning-tree mst mstid cost Config Config syslocation location Global Snmp-server location loc Transfer download path path Show loginsession Privileged Show vlan summary Privileged Show vlan brief Exec User Show mfdb gmrp Privileged Show mac-address-table gmrp Config lag create name Global Port-channel name Global Deleteport logical slot/port all Config Is CLI Mapping Config protocol vlan add groupid Privileged No set gvrp adminmode Is CLI Mapping Security Show users authentication Privileged Is CLI Mapping Security Show radius server summary Privileged Is CLI Mapping All detail slot/port statistics Is CLI Mapping Fast Ethernet Cable Guidelines Appendix B Cabling Guidelines Category 5 Cable Category 5 Cable Specifications Twisted Pair Cables Specifications Category 5 Cable Requirements 4illustrates crossover twisted pair cable Patch Panels and Cables Cabling Using 1000BASE-T Gigabit Ethernet over Category 5 CableLength Return Loss Patch Cables RJ-45 Plug and RJ-45 ConnectorsNear End Cross Talk Next PIN Normal Assignment on Uplink Assignment on Ports 1 to Conclusion Numeric Appendix C Glossary See Area Border Router on See Autonomous System Boundary Router on Packet sent to all devices on a network See Command Line Interface on See Differentiated Services on Computer, printer, or server that is connected to a network See Generic Attribute Registration Protocol on See Garp Multicast Registration Protocol on Internet Control Message Protocol See Local Area Network on Megabits per second See Multi-Protocol Label Switching on See Multiplexing on See Open Systems Interconnection on Set of rules for communication between devices on a network See Routing Information Protocol on See Resource Reservation Setup Protocol on See Simple Network Management Protocol on See TLS on See Virtual Local Area Network on Wins