Security Commands | NETGEAR NETGEAR specification

User Manual for the NETGEAR 7300S Series Layer 3 Managed Switch Software

9-26	Security Commands

202-10088-01, March 2005

Image 232

NETGEAR NETGEAR user manual Security Commands

Contents

202-10088-01, March Technical Support Canadian Department of Communications Compliance Statement 202-10088-01, March Contents Chapter Command Line Interface Structure 202-10088-01, March 202-10088-01, March 202-10088-01, March 202-10088-01, March Pre-login Banner System Log Syslog User Account Commands 202-10088-01, March 100 202-10088-01, March 202-10088-01, March Chapter Security Commands 202-10088-01, March 202-10088-01, March Chapter Routing Commands Xxii 202-10088-01, March Chapter Quality of Service QoS Commands 202-10088-01, March 202-10088-01, March Chapter Managing Switch Stacks Appendix a Is CLI Mapping Appendix B Cabling Guidelines Contents Xxx Contents How to Use This Document Why the Document was CreatedAudience Typographical Conventions Special Message Formats About This Guide About This Guide Switch Management Overview Scope Comparing Switch Management Methods Chapter Administration Console Interface Set Up Your Switch Using Direct Console Access Connection Description Connection Settings Administration Console Interface Chapter Web-Based Management Interface How to Log In to the Managed Switch Web Based Management Overview Login window opens Web-Based Management Utility Features System Information Interactive Switch Image Interactive switch image Menus Main Menus Secondary Menus SwitchManagement System-Wide Popup Menus RoutingTraffic Management Smart Wizard Port-Specific Popup Menus Web-Based Management Interface CLI Command Format Command Parameters Values Conventions Macaddr Annotations Quick Starting the Switch Chapter Quick Start up Quick Start up Software Version Information System Info and System SetupQuick Start up Physical Port Data Quick Start up User Account Management Quick Start up IP Address Quick Start up IP Address Quick Start up Uploading from Switch to Out-of-Band PC Only Xmodem Quick Start up Factory Defaults Quick Start up Downloading from Tftp Server Chapter Mode-based CLI Enter the ip dhcp pool Mode-based Topology Correct Mode-based Command Hierarchy Command prompt shown at this level is Figuration mode to configure the QoS policy map Flow of Operation Invalid input detected at ‘’ marker Behavior of Command Help ? No Form of a CommandSupport for No Form Mode-based CLI Chapter Switching Commands System Information and Statistics Commands Show eventlog Show arp switchShow hardware Show interface Show interface ethernet Packets Received Packets Received with MAC Errors Packets Received Successfully Received Packets not forwarded Packets Transmitted Octets Packets Transmitted Successfully Transmit ErrorsTransmit Discards Protocol Statistics Dot1x Statistics Switching Commands Show logging Show mac-addr-table Show running-config Show msglog Show sysinfo System Management CommandsSnmp-server Transport input telnet TelnetNo transport input telnet Transport output telnet Session-timeoutSession-limit No session-timeout Bridge aging-timeSeconds No bridge aging-time Mtu Network javamodeNetwork mac-address No mtu Network parms Network mac-typeNo network mac-type Telnetcon timeout Network protocolTelnetcon maxsessions No telnetcon maxsessions Serial timeout No telnetcon timeoutNo serial timeout Serial baudrate Serviceport ip Serviceport protocolSet prompt Show telnet Show forwardingdb agetime Show network Format Mode Java ModeShow telnetcon Show serviceport Show serial Snmp Community Commands Show snmpcommunityClient IP Address Client IP Mask Show snmptrap Show trapflags Snmp-server community No snmp-server community Snmp-server community ipaddr Snmp-server community ipmaskNo snmp-server community ipaddr No snmp-server community ipmask Snmp-server community mode No snmp-server community modeSnmp-server community ro Snmp-server community rw Snmp-server enable traps Snmp-server enable traps bcaststormSnmp-server enable traps linkmode No snmp-server enable traps Snmp-server enable traps multiusers Snmp-server enable traps stpmodeNo snmp-server enable traps linkmode No snmp-server enable traps stpmode Snmptrap mode No snmptrap modeSnmptrap Snmptrap ipaddr Snmp trap link-status Snmp trap link-status allNo snmp trap link-status No snmp trap link-status all Management Vlan Command System Configuration CommandsNetwork mgmtvlan Addport Deleteport Interface Config Deleteport Global ConfigAuto-negotiate all No auto-negotiate Macfilter adddest MacfilterNo macfilter Macfilter adddest all Macfilter addsrcNo macfilter adddest No macfilter adddest all Macfilter addsrc all Monitor sessionNo macfilter addsrc No macfilter addsrc all Monitor session mode No monitor session modeShutdown No monitor session Shutdown all Speed allNo shutdown 100f 10h 10f Storm-control broadcast 100h100f No storm-control broadcast Show mac-address-table multicast Storm-control flowcontrolNo storm-control flowcontrol Show mac-address-table static Show mac-address-table staticfiltering Show monitor Show mac-address-table statsShow port Show port protocol Virtual LAN Vlan Commands Show storm-controlVlan No vlan Vlan acceptframe Vlan ingressfilterNo vlan acceptframe No vlan ingressfilter Vlan makestatic Vlan nameVlan participation No vlan name Vlan participation all Vlan port acceptframe allExclude Auto Vlan port ingressfilter all Vlan port pvid allNo vlan port acceptframe all No vlan port ingressfilter all Vlan port tagging all Vlan protocol groupVlan protocol group add protocol No vlan port tagging all Vlan protocol group remove Protocol groupNo vlan protocol group add protocol No protocol group Protocol vlan group Protocol vlan group allNo protocol vlan group No protocol vlan group all Vlan pvid Vlan taggingShow vlan No vlan pvid Configured Vlan NameVlan Type Current Show vlan port Show vlan briefPort Vlan ID Traceroute System Utility CommandsIngress Filtering Clear config Enable passwdClear counters Clear igmpsnooping Clear port-channel Clear traplogClear vlan Logout Ping ReloadCopy Formatreload Pre-login Banner CLI Command Logging Configuration ScriptingLogging cli-command No logging cli-command Format Configscript apply Configscript deleteConfigscript list Configscript show Configscript validate System Log Syslog Logging buffered Logging buffered wrapLogging console No logging buffered Logging history Logging hostNo logging console No logging history Logging host remove Logging portLogging syslog No logging port Show logging history Client Local Port Admin Status Show logging bufferedShow logging hosts Severity Level Filter Sntp client mode Simple Network Time Protocol SntpSntp broadcast client poll-interval Host Status Sntp client mode Sntp client portSntp unicast client poll-interval No sntp client port Sntp unicast client poll-timeout No sntp unicast client poll-timeoutSntp unicast client poll-retry Sntp multicast client poll-interval Sntp server Show sntp Show sntp client Show sntp server Show loginsession User Account CommandsDisconnect Show users Connection FromIdle Time Session Time Users name Users passwdNo users name No users passwd Users snmpv3 accessmode Users snmpv3 authenticationNo users snmpv3 accessmode No users snmpv3 authentication Users snmpv3 encryption Dhcp Server CommandsNo users snmpv3 encryption Client-identifier Client-nameNo client-identifier No client-name Default-router No default-routerDns-server Hardware-address Host Ip dhcp excluded-addressNo hardware-address No host Defaultnone Ip dhcp ping packetsIp dhcp pool No ip dhcp excluded-address Lease NetworkNo ip dhcp pool No lease Service dhcp BootfileNo service dhcp No bootfile Ip dhcp bootp automatic No ip dhcp bootp automaticDomain-name Ip dhcp conflict logging Netbios-name-server Netbios-node-typeNo netbios-name-server No ip dhcp conflict logging No netbios-node-type Next-serverOption No next-server Show ip dhcp binding Show ip dhcp global configurationNo option Show ip dhcp pool configuration Show ip dhcp server statistics Show ip dhcp conflict Provisioning Ieee 802.1p Commands Clear ip dhcp bindingClear ip dhcp server statistics Clear ip dhcp conflict Classofservice dot1pmapping Show classofservice dot1pmappingVlan port priority all Vlan priority Set garp timer join Garp CommandsNo set garp timer join Set garp timer join all Set garp timer leaveNo set garp timer join all No set garp timer leave Set garp timer leave all Set garp timer leaveallNo set garp timer leave all No set garp timer leaveall Set garp timer leaveall all No set garp timer leaveall allGmrp Admin Mode Gvrp Admin Mode Garp Vlan Registration Protocol Gvrp Commands Set gvrp adminmodeNo set gvrp adminmode Set gvrp interfacemode Show gvrp configuration Set gvrp interfacemode all Garp Multicast Registration Protocol Gmrp Commands Set gmrp adminmodePort Gmrp Mode No set gmrp adminmode Set gmrp interfacemode Set gmrp interfacemode allNo set gmrp interfacemode No set gmrp interfacemode all Show gmrp configuration Show mac-address-table gmrp Internet Group Management Protocol Igmp Commands Set igmp No set igmp Set igmp groupmembership-intervalNo set igmp groupmembership-interval Set igmp interfacemode all Set igmp maxresponseNo set igmp interfacemode all No set igmp maxresponse Format Mode Admin Mode Set igmp mcrtrexpiretimeShow igmpsnooping No set igmp mcrtrexpiretime Igmp Snooping per Vlan Show mac-address-table igmpsnooping Set igmp groupmembershipinterval No set igmp groupmembershipinterval Set igmp fast-leave Set igmp mcrtexpiretimeNo set igmp mcrtexpiretime No set igmp fast-leave Fast Leave Mode Link Aggregation LAG/Port-Channel 802.3AD CommandsPort-channel staticcapability Port lacpmode Port lacpmode allNo port-channel staticcapability No port lacpmode Port-channel adminmode all No port-channel adminmodePort-channel Port-channel linktrap Port-channel name Show port-channel brief Show port-channel Spanning Tree STP Commands Spanning-tree max-hopsSpanning-tree No spanning-tree max-hops Spanning-tree configuration name Spanning-tree configuration revisionNo spanning-tree configuration name No spanning-tree No spanning-tree configuration revision Spanning-tree edgeportSpanning-tree forceversion No spanning-tree edgeport Spanning-tree forward-time Spanning-tree hello-timeNo spanning-tree forceversion No spanning-tree forward-time Spanning-tree mst Spanning-tree max-ageNo spanning-tree max-age Cost auto external-cost auto port-priorty No spanning-tree mst Spanning-tree mst instance Spanning-tree mst priorityNo spanning-tree mst instance No spanning-tree mst priority Spanning-tree port mode No spanning-tree port modeSpanning-tree mst vlan No spanning-tree mst vlan Spanning-tree port mode all Spanning-tree bpdumigrationcheck Show spanning-tree Port mode Show spanning-tree interface Show spanning-tree mst detailed Show spanning-tree mst port detailed Port Priority Port Forwarding StatePort Role Port Path Cost Show spanning-tree mst port summary Show spanning-tree mst summaryCST Regional Root CST Port Cost Show spanning-tree summary Show spanning-tree vlan Switching Commands 133 Mode Designated Root Root Path Cost Topology ChangeRoot Port Identifier Root Port Max Age Root Port Bridge Forward Delay Derived value Bridge Forward DelayCST Regional Root Regional Root Path Cost Bridge Identifier Bridge Max Age STP BPDUs Transmitted RST BPDUs TransmittedMstp BPDUs Transmitted Mstp BPDUs Received MST Instance ID Port Identifier Port Priority Configured value indicating if this port is an edge port Port-security Port SecurityNo port-security Port-security max-dynamic Port-security max-staticNo port-security max-dynamic No port-security max-static Snmp-server enable traps violation No snmp-server enable traps violationPort-security mac-address Port-security mac-address move Show port-security dynamic Show port-securityShow port-security static Authentication login Port Based Network Access Control Ieee 802.1X CommandsShow port-security violation Dot1x defaultlogin No authentication loginClear dot1x statistics Clear radius statistics Dot1x login Dot1x initializeDot1x max-req No dot1x max-req Dot1x port-control All Dot1x port-controlNo dot1x port-control Dot1x re-authenticate Dot1x re-authenticationNo dot1x re-authentication Dot1x system-auth-control Dot1x timeout No dot1x system-auth-control No dot1x timeout Dot1x userShow radius accounting No dot1x user Show authentication Show authentication users Show dot1xMethod User Control Mode Supplicant TimeoutServer Timeout Protocol Version Control Direction Show users authentication Users defaultloginUsers login Show dot1x users Remote Authentication Dial In User Service Radius Commands Radius accounting modeNo radius accounting mode Radius server host No radius server host Default10 Radius server keyRadius server msgauth Radius server primary Radius server timeout No radius server timeoutShow radius No radius server retransmit Show radius statistics Secure Shell SSH Commands Access AcceptsAccess Rejects Access Challenges Ip ssh protocol Hypertext Transfer Protocol Http CommandsShow ip ssh Ip http secure-port Ip http secure-protocolIp http secure-server No ip http secure-port Http Mode Ip http serverShow ip http No ip http server Security Commands Arp Address Resolution Protocol ARP CommandsNo arp Ip proxy-arp Arp cachesizeNo ip proxy-arp No arp cachesize Arp dynamicrenew Arp purgeArp resptime No arp dynamicrenew Arp timeout No arp timeoutArp retries Clear arp-cache Show arp Age Time secondsRetries Cache Size Show arp brief IP RoutingRouting Ip routing Ip addressNo routing No ip routing Ip route default Ip routeNo ip address No ip route No ip route default DefaultenabledIp route distance Ip forwarding Ip netdirbcast Ip mtuNo ip forwarding No ip netdirbcast Show ip brief Show ip interface Show ip interface brief Show ip route Show ip route bestroutes Show ip route entryProtocol Next Hop Intf Show ip route preferences Show ip statsNext Hop Interface Preference Bootp/DHCP Relay Commands Bootpdhcprelay cidoptmodeNo bootpdhcprelay cidoptmode Encapsulation Bootpdhcprelay maxhopcount Bootpdhcprelay enableBootpdhcprelay minwaittime Bootpdhcprelay serverip Show bootpdhcprelay Router Discovery Protocol Commands Ip irdpIp irdp address No ip irdp Ip irdp holdtime Ip irdp maxadvertintervalNo ip irdp address No ip irdp holdtime Ip irdp minadvertinterval Ip irdp preferenceShow ip irdp No ip irdp minadvertinterval Virtual LAN Routing Commands Vlan routing Routing Information Protocol RIP Commands Enable RIPShow ip vlan Logical Interface Ip rip Default-information originate RIPAuto-summary Default-metric RIP No default-information originate RIPNo default-metric RIP Distance rip Ip rip authentication No default-information originateDistribute-list out No distribute-list out No ip rip authentication Ip rip receive versionIp rip send version No ip rip receive version Hostroutesaccept Split-horizonNo ip rip send version No hostroutesaccept Redistribute Show ip ripFormat for other source protocol No redistribute RIP Mode Show ip rip interface briefSend Version Receive Version Show ip rip interface Access Control List ACL Commands Mac access-list extended name No mac access-list extended name Mac access-list extended rename name newnameDenypermit srcmac srcmacmask dstmac dstmacmask Mac access-group name inout sequence Show mac access-lists Show mac access-list nameNo mac access-group name inout Access-list Ip access-group all Ip access-groupShow ip access-lists Source IP Mask Differentiated Services DiffServ CommandsDestination IP Mask Diffserv Class Commands Service LevelsNo diffserv Traffic Classification No class-map Class-map rename Match ethertypeMatch secondary-cos Match secondary-vlan Match any Match class-map Match cos Match destination-address mac Match dstip Match dstl4port Match ip dscp Match ip precedence Match ip tos Match protocol Match srcip Match source-address macMatch srcl4port Policy Commands Match vlan Drop Assign-queueMark secondary-cos Redirect Conform-colorBandwidth kbps Policy Type Bandwidth percent IncompatibilitiesClass Expedite kbps Expedite percent Mark cos Policy Type Mark ip-dscp Mark ip-precedence Policy Type IncompatibilitiesPolice-simple Police-single-rate Police-two-rate Policy-map rename Policy-mapRandomdrop Shape average Shape peak Service Commands Service-policy Show Commands No service-policy Show class-map Class NameClass Type Match Criteria Show diffserv Conform COS Show policy-mapAssign Queue Policy Name Mark IP DscpMark IP Precedence Policing Style Bandwidth Exceed ActionShaping Average Show diffserv service Class MembersDirection Operational Status Show diffserv service brief DiffServ ModePolicy Details OperStatus 11-38 Quality of Service QoS Commands Show service-policy Sent Octets/PacketsDir Offered Packets Classofservice dot1p-mapping Class of Service CoS CommandsClassofservice ip-dscp-mapping Classofservice ip-precedence-mapping Classofservice trustNo classofservice trust Cos-queue max-bandwidth No cos-queue max-bandwidth Cos-queue min-bandwidthCos-queue random-detect No cos-queue min-bandwidth Cos-queue strict Random-detectNo cos-queue strict No random-detect Random-detect exponential-weighting-constant Random-detect queue-parmsTail-drop queue-parms No random-detect queue-parms Show classofservice dot1p-mapping Traffic-shape Show classofservice trust Show classofservice ip-precedence-mappingShow interfaces cos-queue Show interfaces random-detect Show interfaces tail-drop-threshold Fig indication Drop precedence level for this queue, from 1 to p. The spe 11-50 Quality of Service QoS Commands Chapter Managing Switch Stacks Understanding Switch Stacks Switch Stack Membership Managing Switch Stacks 12-3 Interconnect Ports 51 As shown Stack Master Election and Re-Election Stack Member Numbers Switch Stack Offline Configuration Stack Member Priority Values Managing Switch Stacks 12-7 Incompatible Software and Stack Member Image Upgrades Switch Stack Software Compatibility RecommendationsSwitch Stack Configuration Files Switch Stack Management Connectivity Switch Stack Configuration ScenariosConnectivity to the Switch Stack Through Console Ports Connectivity to the Switch Stack Through Telnet Stacking Recommendations Initial installation and Power-up of a Stack General Practices Adding a Unit to an Operating Stack Removing a Unit from the StackReplacing a Stack Member with a New Unit Renumbering Stack Members Removing a Master Unit from an Operating Stack Moving a Master to a Different Unit in the StackMerging Two Operational Stacks Preconfiguration Upgrading Firmware Migration of Configuration With a Firmware Upgrade Code Mismatch Appendix a Is CLI Mapping Config acl rule action aclid Rulenum permit/deny Exec Is CLI Mapping Config diffserv policy police style Policy-Cla Police-simple Is CLI Mapping Show diffserv class summary Privileged Exec User Class-Ma Match not cos Config Class-Ma Match not ip precedence Config Routing Show arp switch Privileged Is CLI Mapping Is CLI Mapping Vlan Router No enable Is CLI Mapping Is CLI Mapping Config Router No auto-summary Router No split-horizon 7300S Series L3 Switch CLI Command Mode Syntax Config snmptrap ipaddr Global Config telnet maxsessions Privileged Remotecon maxsessions Is CLI Mapping Global No spanning-tree configuration name Config Config spanningtree bridge priority Removed 61440 Interface No spanning-tree mst mstid cost Config Config syslocation location Global Snmp-server location loc Transfer download path path Show loginsession Privileged Show vlan summary Privileged Show vlan brief Exec User Show mfdb gmrp Privileged Show mac-address-table gmrp Config lag create name Global Port-channel name Global Deleteport logical slot/port all Config Is CLI Mapping Config protocol vlan add groupid Privileged No set gvrp adminmode Is CLI Mapping Security Show users authentication Privileged Is CLI Mapping Security Show radius server summary Privileged Is CLI Mapping All detail slot/port statistics Is CLI Mapping Appendix B Cabling Guidelines Fast Ethernet Cable Guidelines Category 5 Cable Specifications Category 5 Cable Specifications Category 5 Cable Requirements Twisted Pair Cables Patch Panels and Cables 4illustrates crossover twisted pair cable Using 1000BASE-T Gigabit Ethernet over Category 5 Cable CablingLength Return Loss Near End Cross Talk Next RJ-45 Plug and RJ-45 ConnectorsPatch Cables PIN Normal Assignment on Uplink Assignment on Ports 1 to Conclusion Appendix C Glossary Numeric See Area Border Router on See Autonomous System Boundary Router on Packet sent to all devices on a network See Command Line Interface on See Differentiated Services on Computer, printer, or server that is connected to a network See Generic Attribute Registration Protocol on See Garp Multicast Registration Protocol on Internet Control Message Protocol See Local Area Network on Megabits per second See Multi-Protocol Label Switching on See Multiplexing on See Open Systems Interconnection on Set of rules for communication between devices on a network See Routing Information Protocol on See Resource Reservation Setup Protocol on See Simple Network Management Protocol on See TLS on See Virtual Local Area Network on Wins