Radius and TACACS+

UMN:CLI	User Manual
	SURPASS hiD 6615 S223/S323 R1.5

hiD 6615 S223/S323 supports client authentication protocol, that is RADIUS(Remote Au- thentication Dial-In User Service) and TACACS+(Terminal Access Controller Access Con- trol System Plus). Not only user IP and password registered in switch but also authentica- tion through RADIUS server and TACACS+ server are required to access. Therefore, se- curity of system and network management is strengthened.

26	A50010-Y3-C150-2-7619

Page 26

Image 26

Siemens S323, S223 user manual Radius and TACACS+

Contents

Umncli A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 Important Notice on Product SafetySurpass hiD 6615 S223/S323 R1.5 Summary System software upgrade added Reason for UpdateIssue History Details Contents 5.1 4.34.4 5.2 7.3 7.17.2 12.1 102 100101 103 126 124125 127 149 Surpass hiD 6615 S223/S323 R1.5 3.1147 150 181 179180 182 217 Surpass hiD 6615 S223/S323 R1.5 5.9216 6.1 246 1.161.17 247 269 Surpass hiD 6615 S223/S323 R1.5 3.2268 3.8 298 295297 299 10.1.1.1 Surpass hiD 6615 S223/S323 R1.5 10.1.1318 10.1.1.2 10.2.13 10.2.12353 354 Illustrations Igmp Snooping and PIM-SM Configuration Network 279 171 TablesTab 176 Tab .1 briefly describes the structure of this document AudienceDocument Structure Tab .1 Overview of Chapters A50010-Y3-C150-2-7619 Document Notation Tab .2 Command Notation of Guide BookDocument Convention CE Declaration of Conformity GPL/LGPL Warranty and Liability Exclusion System Overview Multicasting System FeaturesQuality of Service QoS IP Routing System Management based on CLI Spanning Tree Protocol STPLink Aggregation Trunking Broadcast Storm Control Radius and TACACS+ Command Line Interface CLI Command Mode Shows hiD 6615 S323 software mode structure briefly Global Configuration Mode Privileged Exec View ModePrivileged Exec Enable Mode Tab .1 Main Commands of Privileged Exec View Mode Bridge Configuration Mode Tab .3 Main Commands of Global Configuration Mode Opens Rule Configuration mode Rule Configuration ModeTab .4 Main Commands of Bridge Configuration Mode Tab .6 Main Commands of Dhcp Configuration Mode Dhcp Configuration ModeDhcp Option 82 Configuration Mode Command Mode Description Ip dhcp pool Pool Command Mode Description Interface Interface Interface Configuration ModeRmon Configuration Mode Tab .10 Main Commands of Router Configuration Mode Router Configuration ModeVrrp Configuration Mode Command Mode Description Route-Map Configuration Mode Useful Tips Listing Available CommandsVariables following after the commands 6615 S223/S323 Surpass hiD 6615 S223/S323 R1.5 Calling Command HistoryCommand Tab .13 Command Abbreviation Using AbbreviationUsing Command of Privileged Exec Enable Mode SWITCH# show clock Able mode, you will be logged out Exit Current Command ModeExits to Privileged Exec enable mode Step System LoginSystem Connection Passwd enable 8 Password Password for Privileged Exec ModeCommand Mode Description Passwd enable Password Creating System Account Changing Login PasswordManagement for System Account Configuring Security Level To display the created account, use the following command SWITCH# show list No privilege rmon-alarm level Command Mode Description No privilegeNo privilege configure level No privilege bgp level Command Mode Description Show privilege Shows a configured security level SWITCH# disconnect ttyp0 Telnet AccessSWITCH# write memory Limiting Number of User SWITCHconfig# show exec-timeout System RebootingManual System Rebooting Auto Log-out Auto-reset memory 1-120 System AuthenticationAuto System Rebooting No auto-reset cpu memory Primary Authentication Method Authentication MethodAuthentication Interface Radius Server Radius Server for System AuthenticationTimeout of Authentication Request Radius Server Priority Frequency of Retransmit Tacacs Server for System AuthenticationTacacs Server 5.2 Tacacs Server Priority Authentication Type Additional TACACS+ ConfigurationTCP Port for the Authentication Command Mode Description Login tacacs timeout Login accounting-mode none Accounting ModeDisplaying System Authentication Start stop both Sample Configuration Tacacs Assigning IP Address Enabling Interface Interface Configuration ModeTo enable the interface, use the following command Disabling Interface Ip address IP-ADDRESS/M Static Route and Default GatewayAssigning IP Address to Network Interface No ip route IP-ADDRESS/M Displaying Forwarding Information BaseFIB Table Forwarding Information BaseFIB Retain Show interface Interface ② On Interface Configuration ModeDisplaying Interface Show ip interface Interface SSH Secure Shell SSH Server 2.3 Configuring Authentication Key Assigning Specific Authentication KeyLogin to SSH Server SSH Client Ssh keygen rsa1 rsa dsa Configure the authentication key in the switchConnect to SSH server with the authentication key EAP over LAN EAP over Radius 802.1x AuthenticationServer Suppliant Authenticator Authentication Server Authentication Server 1 802.1x AuthenticationConfiguring Radius Server Designate as default Response Dot1x radius-server host Configuring Authentication ModeCommand Mode Description Dot1x radius-server move IP Mode Description Dot1x port-control auto force Authentication PortForce Authorization Command Mode Description Dot1x timeout tx-period 1.8 Configuring Interval of Request to Radius Server 2 802.1x Re-Authentication1.7 Configuring Number of Request to Radius Server Enabling 802.1x Re-Authentication 2.4 802.1x Re-authentication Configuring the Interval of Re-AuthenticationConfiguring the Interval of Requesting Re-authentication Displaying 802.1x Configuration Initializing Authentication StatusApplying Default Value 6 802.1x User Authentication Statistic SWTICHconfig# dot1x system-auth-control SWTICHconfig# dot1x auth-mode mac-base PortAuthed Show port Ports Port BasicSelecting Port Type Command Mode Description Port medium Port sfp rj45 Ethernet Port ConfigurationTo enable/disable a port, use the following command Enabling Ethernet Port Transmit Rate Command Mode Description Port nego Ports on offAuto-negotiation Port speed Ports 10 100 Flow Control Duplex ModeCommand Mode Description Port duplex Ports full half Half SWITCHbridge# port flow-control 25 on Following is an example of configuring flow control to portTo view description of port, use the following command SWITCHbridge# show port description Traffic Statistics SWITCHbridge# show port statistics avg-pktSWITCHbridge# show port statistics rmon Packets Statistics Protocol statistics To enable/disable protocol statisticsCPU statistics Port Mirroring To display a port status, use the following commandSWITCH# show port Port Status Designate the mirrored ports, use the following command Activate the port mirroring, using the following commandDesignate the monitor port, use the following command Command Mode Description Mirror add Ports ingress Enable mirroring function To disable monitoring function, use the following commandConnect a motoring PC to the monitor port of the switch Configure the monitor port 1 and mirroring port 2, 3, 4 Time and Date Environment ConfigurationHost Name Tab .1 shows the world time zone Time ZoneNetwork Time Protocol Tab .1 World Time Zone Following is an example of releasing NTP and showing it NTP Network Time ProtocolSimple Network Time Protocol Sntp No sntp Terminal ConfigurationTo display Sntp configuration, use the following command To set a DNS server, use the following command Login BannerTo restore a default banner, use the following command DNS Server System Threshold Fan OperationDisabling Daemon Operation CPU Load Fan Operation Mode Description Threshold PortPort Traffic No threshold Port Ports rx System Memory System TemperatureEnabling FTP Server Threshold temp Value Value Assigning IP Address of FTP Client Configuration ManagementDisplaying System Configuration All Option History router bgp pim rip SWITCH# show running-config syslog Saving System ConfigurationSystem Configuration File Auto-Saving SWITCHconfig# copy running-config SURPASShiD6615 Restoring Default ConfigurationTo delete backup file, use the following command Network Connection SWITCHconfig# restore factory-defaultsSystem Management Figured time interval. Default is 2 seconds Set DF bit in IP header? no Type of serviceItems Description Source address or interface Data pattern 0xABCD IP Icmp Source-Routing IP Source Routing A50010-Y3-C150-2-7619 Tracing Packet Route Following is the basic information to trace packet routes MAC Table Displaying User Connecting to SystemSWITCH# traceroute Running Time of System Configuring Ageing timeSWITCH# show uptime System Information Average of CPU Load System Memory InformationCPU packet limit Running Process Displaying System Image Displaying Installed OSDefault OS Ber of display lines of terminal screen Switch StatusTech Support A50010-Y3-C150-2-7619 103 Snmp Community Command Mode Description Snmp community ro rw CommunitySimple Network Management Protocol Snmp No snmp community ro rw Community A50010-Y3-C150-2-7619 105 Information of Snmp AgentFollowing is an example of creating 2 Snmp communities Snmp Com2sec Following is an example of configuring Snmp com2secSWITCHconfig# show snmp com2sec Snmp Group Snmp View Record Permission to Access Snmp View RecordSWITCHconfig# snmp view Test included Following is an example of creating an Snmp view record Snmp access Lowing commandTo display Snmp version 3 user, use the following command Snmp Version 3 User To select an Snmp trap-mode, use the following command Snmp Trap ModeTo set an Snmp trap host, use the following command Snmp Trap Host Enabling Snmp Trap 110 A50010-Y3-C150-2-7619 Node To disable Snmp trap, use the following commandDisabling Snmp Trap SWITCHconfig# snmp inform-trap-host Snmp AlarmEnabling Alarm Notification Displaying Snmp Trap To configure a priority of alarm, use the following command Default Alarm SeverityAlarm Severity Criterion Generic Alarm Severity 114 A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 115 Adva Alarm SeveritySnmp Alarm-severity adva-if-sfp-mismatch Critical major minor warning intermedi ERP Alarm Severity 116 A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 117 Displaying Snmp ConfigurationSTP Guard Alarm Severity Disabling Snmp To disable Snmp feature, use the following commandSWITCHconfig# show snmp alarm-history OAM Loopback Operation, Administration and Maintenance OAMDisables local OAM A50010-Y3-C150-2-7619 119 Remote OAM Local OAM ModeOAM Unidirection A50010-Y3-C150-2-7619 121 Displaying OAM ConfigurationTo display OAM configuration, use the following command 122 A50010-Y3-C150-2-7619 Lldp Operation Type Link Layer Discovery Protocol LldpLldp Operation Basic TLV 124 A50010-Y3-C150-2-7619 Interval and Delay TimeLldp Message A50010-Y3-C150-2-7619 125 Displaying Lldp ConfigurationTo display Lldp configuration, use the following command Command Mode Description Rmon-history To open RMON-historymode, use the following commandSWITCHconfig# show rmon-history config Remote Monitoring Rmon Number of Sample Data Source Port of Statistical DataSubject of Rmon History Interval of Sample Inquiry Displaying Rmon History Deleting Configuration of Rmon HistoryActivating Rmon History Command Mode Description Rmon-alarm Rmon AlarmSubject of Rmon Alarm A50010-Y3-C150-2-7619 129 Upper Bound of Threshold Object of Sample InquiryAbsolute Comparison and Delta Comparison 130 A50010-Y3-C150-2-7619 Configuring Standard of the First Alarm Lower Bound of Threshold Displaying Rmon Alarm Activating Rmon AlarmDeleting Configuration of Rmon Alarm Rmon Event Event Type Event DescriptionSubject of Rmon Event Activating Rmon Event 134 A50010-Y3-C150-2-7619 Deleting Configuration of Rmon EventDisplaying Rmon Event Activates Rmon event Syslog Output Level To set a syslog output level, use the following commandSyslog Syslog Output Level without a Priority Local5 local6 local7 lpr mail news sys Syslog Output Level with a Priority136 A50010-Y3-C150-2-7619 Log user uucp emerg alert crit err A50010-Y3-C150-2-7619 137 Facility CodeSyslog Bind Address Disabling Syslog Displaying Syslog ConfigurationDebug Message for Remote Terminal Displaying Syslog Message How to Operate Rule and QoS Rule and QoS Rule Priority Rule ConfigurationRule Creation 140 A50010-Y3-C150-2-7619 Packet Classification A50010-Y3-C150-2-7619 141 142 A50010-Y3-C150-2-7619 Tcp Rule Action A50010-Y3-C150-2-7619 143 144 A50010-Y3-C150-2-7619 Overwrites 802.1p CoS field in the packet same as IP Remedy Select another name for the rule e.g. add a prefix Applying RuleModifying and Deleting Rule 3 QoS Displaying Rule Scheduling Algorithm Weighted Round Robin WRRWeighted Fair Queuing WFQ Weighted Fair Queuing Strict Priority Queuing SP Qos Weight 3.3 802.1p Priory-to-queue Mapping To display a configuration of QoS, enter following command Admin Access RuleTo configure a queue parameter, use the following command Queue Parameter A50010-Y3-C150-2-7619 151 Command Mode Description Rule Name create adminCommand Mode Description Priority low medium high Highest Defaul low 152 A50010-Y3-C150-2-7619 Applies an admin access rule to the system Command Mode Description No-match denyCommand Mode Description Apply Match permit Permits a packet Shows a current configuration of a rule 154 A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 155 NetBIOS FilteringInternet Max Host SWITCHbridge# show netbios-filterMartian Filtering Max New Hosts To display configured max host, use the following commandFollowing is an example of displaying configured max hosts Port Security To configure max new hosts, use the following commandEnable port security on the port Port Security on Port Enter a secure MAC address for the port Set the violation mode and the action to be takenSet the maximum number of secure MAC address for the port A50010-Y3-C150-2-7619 159 Port This is an example of configuring port security on portPort Security Aging Maximum MAC Table A50010-Y3-C150-2-7619 161 Clear mac Name Command Mode Description Clear macCommand Mode Description No mac Clear mac Name Port MAC Filtering Default Policy of MAC FilteringSample Configuration Adding Policy of MAC Filter Displaying MAC Filter Policy Deleting MAC Filter PolicyListing of MAC Filter Policy ARP Table Address Resolution Protocol ARPFollowing is an example of displaying one configuration 166 A50010-Y3-C150-2-7619 Registering ARP TableDisplaying ARP Table ARP Inspection To display ARP alias, use the following commandARP Alias A50010-Y3-C150-2-7619 167 168 A50010-Y3-C150-2-7619 Proxy-ARP Icmp Message ControlGratuitous ARP Tab Blocking Echo Reply MessageInterval for Transmit Icmp Message Type Value Type Status Transmitting Icmp Redirect Message Command Mode Description Ip icmp interval rate-limitEnable Shows Icmp interval configuration Global 172 A50010-Y3-C150-2-7619 Policy of unreached messages RST ConfigurationIP TCP Flag Control Verifying Packet Dump SYN ConfigurationPacket Dump A50010-Y3-C150-2-7619 175 Packet Dump by ProtocolPacket Dump with Option Option Description Tab .4 shows the options for packet dumpTab .4 Options for Packet Dump 176 A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 177 Displaying the usage of the packet routing tableDebug Packet Dump Cost-Effective Way VlanEnlarged Network Bandwidth Strengthened Security Port-Based Vlan Assigning Port to Vlan Creating VlanSpecifying Pvid Deleting Vlan Displaying Vlan Protocol-Based VlanMAC address-based Vlan Vlan Tag Subnet-based VlanTagged Vlan Macbase MAC-ADDRESS Mapping Frames to Vlan Vlan DescriptionDisplaying Vlan Information Trunk Port QinQTunnel Port Tagged Double Tagging Operation Double Tagging ConfigurationTo disable double tagging, use the following command Designate the QinQ port Private Vlan Edge Tpid ConfigurationLayer 2 Isolation Private Vlan Shared Vlan Command Mode Description Port protected PortsPort Isolation No port protected Ports 188 A50010-Y3-C150-2-7619 Vlan fid Vlans FID Sample Configuration 1 Configuring Port-based Vlan Open Rule Configuration mode using rule Name create commandOpen Bridge Configuration mode using the bridge command Vlan Translation Sample Configuration 3 Configuring Protocol-based Vlan Sample Configuration 2 Deleting Port-based VlanFollowing is deleting vlan id 3 among configured Vlan Default br2 br3 br4 Sample Configuration 5 Configuring Shared Vlan with FID Sample Configuration 4 Configuring QinQSwitch SWITCHbridge# vlan dot1q-tunnel enable SWITCHbridge# vlan add br5 1-42untagged Link Aggregation Trunk distmode Configuring Port TrunkPort Trunk Dstip dstmac Srcdstip Disabling Port Trunk Displaying Port Trunk ConfigurationLink Aggregation Control Protocol Lacp Packet Route Configuring LacpActivate Lacp function, using the following command 196 A50010-Y3-C150-2-7619 Operating Mode of Member PortTo disable configuring packets, use the following command Key value of Member Port Identifying Member Ports within LacpBpdu Transmission Rate A50010-Y3-C150-2-7619 197 Priority of Member Port Priority of SwitchCommand Mode Description Lacp port priority Ports 198 A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 199 Displaying Lacp ConfigurationTo display a configured LACP, use the following command Spanning-Tree Protocol STP A50010-Y3-C150-2-7619 201 Root SwitchSTP Operation Designated Switch Switch Designated Port and Root Port Port Priority Listening DisabledPort States Learning Port Path Switch D Switch B Switch CBackup Rstp Operation Bpdu Policy Rapid Network Convergence 17 Network Convergence of 802.1w A50010-Y3-C150-2-7619 207 19 Network Convergece of 802.1w 208 A50010-Y3-C150-2-7619 Mstp Operation Compatibility with 802.1d Region B IST Switch D Switch EOperation A50010-Y3-C150-2-7619 211 Configuring STP/RSTP/MSTP/PVSTP/PVRSTP Mode RequiredRegion a IST Activating STP/RSTP/MSTP Configuring STP/RSTP/MSTPRoot Switch Path-cost A50010-Y3-C150-2-7619 213 Port-priorityTab STP Path-cost MST Region Edge Ports Mstp ProtocolPoint-to-point MAC Parameters A50010-Y3-C150-2-7619 215 Displaying Configuration To delete the edge port mode, use the following command Activating PVSTP/PVRSTP Configuring PVSTP/PVRSTPCommand Mode Description Stp pvst enable VLAN-RANGE A50010-Y3-C150-2-7619 217 6.4 Port-priority Ally. To configure port priority, use the following command6.3 Path-cost 218 A50010-Y3-C150-2-7619 Restarting Protocol Migration Root Guard ConfigurationRoot Guard Hello Time Bridge Protocol Data Unit ConfigurationForward Delay Hello Time Forward Delay Max Age 9.4 Bpdu Hop To delete a configured max age, use the following commandFollowing command 9.5 Bpdu Filter Self Loop Detection Configure the specific port as edge-portConfigure Bpdu Guard Displaying Bpdu Configuration 224 A50010-Y3-C150-2-7619 Backup Route 226 A50010-Y3-C150-2-7619 Mstp ConfigurationSWITCHbridge# stp force-version mstp Virtual Router Redundancy Protocol Vrrp Internet Associated IP Address Configuring VrrpTo delete the Vrrp configuration, use the following command 228 A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 229 Access to Associated IP AddressMaster Router and Backup Router Layer 3 Switch 2 IP Address 10.0.0.2/24 SWTICH1config# router vrrp default Vrrp Track Function Authentication Password To configure Vrrp Track, use the following command Following is an example of disabling Preempt SWITCHconfig-vrrp#authentication cleartext networkPreempt A50010-Y3-C150-2-7619 233 Vrrp Statistics Configuration modeRate Limit A50010-Y3-C150-2-7619 235 Configuring Rate LimitTo set a port bandwidth, use the following command 236 A50010-Y3-C150-2-7619 Configuring Flood-GuardFlood Guard Bandwidth Following is an example of configuration to bandwidth asSWITCHbridge# show mac-flood-guard A50010-Y3-C150-2-7619 237 Efficient IP Management Dynamic Host Configuration Protocol DhcpSaving Cost IP Packet Broadcast Dhcp Server or Relay Agent Dhcp Server Range of IP Address Dhcp Pool CreationDhcp Subnet IP Lease Time Default GatewayFollowing is an example of specifying the default gateway A50010-Y3-C150-2-7619 241 Following is an example of specifying a DNS server DNS ServerManual Binding 242 A50010-Y3-C150-2-7619 Static Mapping Domain NameDhcp Server Option Recognition of Dhcp Client IP Address Validation Command Mode Description Ip dhcp arp ping packetCommand Mode Description Ip dhcp arp ping timeout Authorized ARP Dhcp Packet Statistics Ignoring Bootp RequestProhibition of 1N IP Address Assignment A50010-Y3-C150-2-7619 245 Command Mode Description Show ip dhcp pool Pool Displaying Dhcp Pool ConfigurationSWITCHconfig# show ip dhcp server statistics 246 A50010-Y3-C150-2-7619 Dhcp Class Creation Dhcp Address Allocation with OptionDhcp Class Capability Relay Agent Information Pattern Text String Associating Dhcp ClassRange of IP Address for Dhcp Class No address range A.B.C.D Displaying Dhcp Lease Status Dhcp Lease DatabaseDhcp Database Agent A50010-Y3-C150-2-7619 249 Dhcp Server Relay Agent Subnet Dhcp Relay AgentDeleting Dhcp Lease Database PC= Dhcp Client C.D all Packet Forwarding AddressSmart Relay Agent Forwarding Dhcp Option Enabling Dhcp Option Option 82 Sub-Option Option 82 Trust Policy Default Trust PolicyOption 82 Reforwarding Policy Trusted Remote ID To specify a trusted remote ID, use the following commandSimplified Dhcp Option Trusted Physical Port 6.2 Dhcp Client ID Dhcp ClientEnabling Dhcp Client 6.3 Dhcp Class ID Forcing Release or Renewal of Dhcp Lease Displaying Dhcp Client ConfigurationRequesting Option A50010-Y3-C150-2-7619 257 Dhcp Trust State Dhcp SnoopingEnabling Dhcp Snooping 258 A50010-Y3-C150-2-7619 Dhcp Lease Limit Mode Description Ip dhcp snooping Limit-leaseDhcp Rate Limit Source MAC Address Verification Specifying Dhcp Snooping Binding Entry Dhcp Snooping Database AgentSpecifying Dhcp Snooping Database Agent 260 A50010-Y3-C150-2-7619 Enabling IP Source Guard Displaying Dhcp Snooping ConfigurationIP Source Guard Source IP Address Filter Command Mode Description Ip dhcp verify source Ports Displaying IP Source Guard ConfigurationSource port-security commands together Static IP Source Binding Dhcp Packet Filtering Command Mode Description Ip dhcp filter-addressDhcp Filtering Dhcp Server Packet Filtering Debugging Dhcp Command Mode Description Debug dhcp filterPacket service all 264 A50010-Y3-C150-2-7619 Ethernet Ring Protection ERP ERP Operation RM Node Normal NodeSend Link Down Message Normal Node RM Node ERP Domain Configuring ERPLoss of Test Packet Lotp Protected Vlan RM NodePort of ERP domain Protected Activation Learning Disable Time Manual Switch to SecondaryWait-to-Restore Time Test Packet Interval Show erp all DOMAIN-ID Displaying ERP ConfigurationStacking Designate Mater switch using the following command Switch GroupDesignating Master and Slave Switch A50010-Y3-C150-2-7619 271 Sample Configuration 1 Configuring Stacking Accessing to Slave Switch from Master SwitchTo disable stacking, use the following command Disabling Stacking SWITCHBconfig# stack device default SWITCHA# configure terminalSWITCHAconfig# stack device default A50010-Y3-C150-2-7619 273 Storm-control broadcast mul Broadcast Storm ControlTo disconnect, input as below Ticast dlf Rate Ports A50010-Y3-C150-2-7619 275 Command Mode Description Jumbo-frame PortsJumbo-frame Capacity 276 A50010-Y3-C150-2-7619 Blocking Direct BroadcastMaximum Transmission Unit MTU SWITCHconfig-if#show running-config interface A50010-Y3-C150-2-7619 277 Layer 2 Network Layer 3 Network Enabling Multicast Routing Required Command Mode Description Ip multicast route-limitMulticast Routing Information Base Limitation of Mrib Routing Entry Clearing Statistics of Multicast Routing Table Clearing Mrib InformationClearing Total or Partial Group Entry of Mrib 280 A50010-Y3-C150-2-7619 Mrib Debug Displaying Mrib InformationMulticast Time-To-Live Threshold Multicast Aging 282 A50010-Y3-C150-2-7619 Igmp Version per Interface Igmp Basic ConfigurationInternet Group Management Protocol Igmp Igmp Version Removing Igmp Entry Igmp Static Join SettingIgmp Version Igmp Debug Maximum Number of Groups Igmp Query ConfigurationCommand Mode Description Ip igmp static-group Vlan Vlan port Port reporter Igmp Maximum Response Time 286 A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 287 Displaying the Igmp ConfigurationIgmp v2 Fast Leave 3 L2 Mfib Igmp Snooping Basic ConfigurationStep Execute the ip multicast-routing command Enabling Igmp Snooping per Vlan Command Mode Description Show ip igmp snooping Vlan Enable Igmp snooping on a Vlan interfaceCommand Mode Description Ip igmp snooping vlan Vlans Igmp v2 Snooping 290 A50010-Y3-C150-2-7619 Igmp v2 Snooping Fast LeaveMulticast Packet Enabling Igmp Snooping Querier To disable Igmp querier, use the following commandIgmp v2 Snooping Querier A50010-Y3-C150-2-7619 291 Query Interval of Igmp v2 Snooping Querier Timeout Value of Igmp v2 Snooping Querier’s General QueryTo disable the max-response-time, use the following command 292 A50010-Y3-C150-2-7619 Vlans querier detail Igmp v2 Snooping Last-Member-IntervalA50010-Y3-C150-2-7619 293 Last-member-query-interval Mrouter Port Configuring Mrouter Port per VlanIgmp v2 Snooping Report Method 294 A50010-Y3-C150-2-7619 Mrouter Port Learning Method Displaying Mrouter ConfigurationMulticast TCN Flooding Vlans flood Command Mode Description Ip igmp snooping tcn query296 A50010-Y3-C150-2-7619 Nected to on a Vlan interface Join Host Management Igmp v3 SnoopingIgmp Snooping Version A50010-Y3-C150-2-7619 297 Immediate Block To display a configuration, use the following commandMulticast Vlan Registration MVR MVR IP Address Enabling MVRMVR Group Address A50010-Y3-C150-2-7619 299 Send and Receive Port 7.5 Displaying MVR ConfigurationIgmp Filtering and Throttling Group Range of Igmp Profile Creating Igmp ProfilePolicy of Igmp Profile A50010-Y3-C150-2-7619 301 Max Number of Igmp Join Group To return to the default setting, use the following commandApplying Igmp Profile to the Filter Port 302 A50010-Y3-C150-2-7619 RPT and SPT PIM-SM Protocol Independent Multicast-Sparse ModeDisplaying Igmp Snooping Table PIM Common Configuration Packet for the request PIM-SM and Passive Mode DR Priority PIM Hello Query To configure a query hold time, use the following commandFilters of Neighbor in PIM 306 A50010-Y3-C150-2-7619 BSR and RP Bootstrap Router BSRTo activate PIM-SM debugging, use the following command PIM Debug Ip pim bsr-candidate RP InformationStatic RP for Certain Group Global Clears all RP sets Set Enabling Transmission of Candidate RP Message A50010-Y3-C150-2-7619 309 4.4 Ignoring RP Priority PIM-SM Registration4.3 Rate Limit of Register Message Filters for Register Message from RP Configure filtering out multicast sourcesCommand Mode Description Ip pim register-suppression Source Address of Register Message Reachability for PIM Register Process SPT SwitchoverThis command is disabled by default 312 A50010-Y3-C150-2-7619 Checksum of Full PIM Register Message PIM Join/Prune InteroperabilityCisco Router Interoperability 8.3 Excluding GenID Option With older Cisco IOS versions, use the following command8.2 Candidate RP Message with Cisco BSR With older Cisco IOS versions PIM-SSM Group PIM Snooping Displaying PIM-SM Configuration 316 A50010-Y3-C150-2-7619 IP Routing Protocol Border Gateway Protocol BGP Enabling BGP Routing Basic ConfigurationConfiguration Type of BGP Disabling BGP Routing Advanced ConfigurationGo back to Global Configuration mode using the exit command Automatic Summarization of Path Command Mode Description Aggregate-address A.B.C.D/MSummary of Path As-set summary-only Bgp deterministic-med Multi-Exit Discriminator MEDChoosing Best Path No bgp deterministic-med Selects the best path using the router ID for identical Command Mode Description Bgp bestpath as-path ignoreCommand Mode Description Bgp bestpath compare-confed Aspath Configures the router to consider the MED in choosing Graceful Restart Stalepath Time IP Address FamilyRestart Time 324 A50010-Y3-C150-2-7619 Peer Group Default RouteBGP Neighbor Force Shutdown To create a BGP Peer Group, use the following commandRoute Map Word shutdown BGP Session ResetSession Reset of All Peers Session Reset of Peers within Particular AS 328 A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 329 Session Reset of Specific RouteSession Reset of External Peer Session Reset of Peer Group 330 A50010-Y3-C150-2-7619 Displaying and Managing BGP A50010-Y3-C150-2-7619 331 332 A50010-Y3-C150-2-7619 NEIGHBOR-IP routes Open Shortest Path First Ospf Enabling Ospf No router ospf Command Mode Description Router ospf334 A50010-Y3-C150-2-7619 Compatibility Support ABR Type ConfigurationCommand Mode Description Network A.B.C.D/M area Ospf Interface 336 A50010-Y3-C150-2-7619 Authentication TypeAuthentication Key Interface Cost A50010-Y3-C150-2-7619 337 Blocking Transmission of Route Information Database Routing Protocol Interval A50010-Y3-C150-2-7619 339 To configure a dead interval, use the following commandTo configure a transmit delay, use the following command 340 A50010-Y3-C150-2-7619 Ospf Maximum Transmission Unit MTUOspf Priority A50010-Y3-C150-2-7619 341 Non-Broadcast NetworkOspf Network Type 342 A50010-Y3-C150-2-7619 Area AuthenticationOspf Area No area 0-4294967295filter- list access LIST-NAMEin out Default Cost of AreaArea 0-4294967295filter-list access LIST-NAMEin out Area 0-4294967295filter-list prefix LIST-NAMEin out No-redistribution Default-information-originateNot So Stubby Area Nssa No-summary A50010-Y3-C150-2-7619 345 To delete configured NSSA, use the following commandOriginate metric Router Configures Nssa with one option Originate 346 A50010-Y3-C150-2-7619 Area RangeShortcut Area C.D/M advertise not Advertise Stub Area Virtual Link 348 A50010-Y3-C150-2-7619 Transmit-delayDead-interval Graceful Restart Support Default MetricTo delete the configuration, use the following command Hello-interval 350 A50010-Y3-C150-2-7619 Grace-periodHelper Metric Default RouteOpaque-LSA Support Metric-type Route-map Metric-type Router Deletes the configurationFinding Period Metric-type Always Route-map MAP-NAME A50010-Y3-C150-2-7619 353 External Routes to Ospf NetworkMetric-type Route-map MAP-NAME Ospf Distance To delete the default metric, use the following commandRouter Deletes the default metric External Inter-area Intra-area Passive Interface To make it as a default, use the following commandHost Route A50010-Y3-C150-2-7619 355 Ospf Monitoring and Management Blocking Routing InformationSummary Routing Information A50010-Y3-C150-2-7619 357 To display the Ospf database, use the following commandDisplaying Ospf Protocol Information As A.B.C.D Command Mode Description Show ip ospf interface Interface 358 A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 359 Displaying Debugging InformationLimiting Number of Database 360 A50010-Y3-C150-2-7619 Command Mode Description Overflow databaseMaximum Process of LSA Overflow database external Enabling RIP To use RIP protocol, you should enable RIPRouting Information Protocol RIP A50010-Y3-C150-2-7619 361 Configure the network to operate as RIP RIP Neighbor Router RIP Version Creating available Static Route only for RIP Redistributing Routing Information Command Mode Description Route-map TAG deny permit Metrics for Redistributed Routes Routing Information Filtering Administrative DistanceOriginating Default Information Offset List Filtering Access List and Prefix ListDisabling the transmission to Interface Timeout RIP Network TimerUpdate Maximum Number of RIP Routes No timers basic Update Time Authentication KeyTo adjust the timers, use the following command Split Horizon UDP Buffer Size of RIP To disable RIP authentication, use the following commandRestarting RIP Monitoring and Managing RIP 372 A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 373 General UpgradeCommand Mode Description Copy ftp tftp os Download Boot Mode Upgrade 374 A50010-Y3-C150-2-7619 To the boot mode only To configure a subnet mask, use the following commandTo configure a default gateway, use the following command A50010-Y3-C150-2-7619 375 Boot load os1 10.27.41.82 V5212G.3.18.x 376 A50010-Y3-C150-2-7619 A50010-Y3-C150-2-7619 377 FTP UpgradeUploads the new system software using the following command Command Mode Description Exit Exit the FTP client using the following commandCommand! For more information, see Section 378 A50010-Y3-C150-2-7619 Command Line Interface Access Control ListAddress Resolution Protocol CoS Class of Service Loss of Power Internet Service ProviderLoss of Signal Medium Access Control Software Type of ServiceSpanning Tree Protocol Transmission Control Protocol

SURPASS hiD 6615 S223/S323 R1.5

RADIUS and TACACS+

A50010-Y3-C150-2-7619