Command Line Interface 190 | SMC Networks 100BASE-TX, 16 10BASE-T

4 Command Line Interface

4-190

Image 366

SMC Networks 100BASE-TX, 16 10BASE-T manual Command Line Interface 190

Contents

TigerSwitch 10/100 Page TigerSwitch 10/100 Installation Guide Trademarks Limited Warranty SMC Networks, Inc Tesla Irvine, CA Contents Page Iii Command Line Interface Contents Page Vii Viii Contents Appendix a Software Specifications Tables Xii Figures Xiii Figures Xiv Feature Description Key FeaturesKey Features Supports standard STP and Rapid Spanning Tree Protocol Rstp Description of Software Features Description of Software Features Introduction Function Parameter Default System DefaultsSystem Defaults Password super System Defaults Function Parameter Pvid Client Enabled Clock Synchronization Disabled Introduction Connecting to the Switch Configuration Options Initial Configuration Required Connections Basic Configuration Remote ConnectionsConsole Connection Setting Passwords Setting an IP AddressManual Configuration Dynamic Configuration Enabling Snmp Management Access Community Strings Saving Configuration Settings Trap Receivers Managing System Files Enter the name of the start-up file. Press Enter Configuring the Switch Using the Web Interface Navigating the Web Browser Interface Home Configuration Options Panel Display Main Menu Reset Restarts the switchConfiguration Main Menu Description ACL 105 101Current Table 110 117 Class-of-service value IP Dscp PriorityMatching an ACL rule Igmp Snooping 132 Igmp Configuration 126 Displaying System Information Field Attributes Displaying Switch Hardware/Software Versions CLI Specify the hostname, location and contact information Displaying Switch Information Displaying Bridge Extension Configuration Displaying Bridge Extension Capabilities Setting the Switch’s IP Address CLI Enter the following commandCommand Attributes IP Configuration Using DHCP/BOOTP IP Configuration using Dhcp Managing Firmware Downloading System Software from a Server Operation Code Image File Transfer Saving or Restoring Configuration Settings 10. Deleting Files Downloading Configuration Settings from a Server 11. Copy Configuration Settings Console Port Settings 12. Setting the Startup Configuration Settings 13. Console Port Settings Telnet Settings 14. Enabling Telnet Configuring Event Logging System Log Configuration Level Severity Name Description Error resource exhaustedLogging Levels Alert Immediate action needed Emergency System unusable Remote Logs Configuration 16. Enabling Remote Logging and Adding Host IP Addresses Displaying Log Messages 17. Displaying System Logs Resetting the System Setting the System Clock Configuring Sntp 19. Configuring Sntp Setting the Time Zone Simple Network Management Protocol Setting Community Access Strings Access Mode 22. Configuring IP Trap Managers Specifying Trap Managers and Trap Types User Authentication Configuring User Accounts 23. Access Levels Configuring Local/Remote Logon Authentication Command Usage Radius Settings Tacacs Settings 24. Authentication Settings Configuring Https Compatible Operating Systems Web Browser Replacing the Default Secure-site Certificate 25. Https Settings Configuring the Secure Shell Configuring the Switch Generating the Host Key Pair 26. SSH Host-Key Settings Configuring the SSH Server SSH server includes basic settings for authentication Configuring Port Security 28. Configuring Port Security Configuring 802.1x Port Authentication CLI This example shows the default global setting for Displaying 802.1x Global Settings802.1x protocol provides client authentication Web Click Security, 802.1X, Information Configuring 802.1x Global Settings Configuring Port Settings forCLI This example enables 802.1x globally for the switch 31 .1x Port Configuration Authorized Consoleconfig#interface ethernet 1/2 Displaying 802.1x Statistics Statistical Values 1x Statistics Parameter Description 32. Displaying 802.1x Port Statistics CLI This example displays the 802.1x statistics for port Access Control Lists Configuring Access Control Lists Setting the ACL Name and Type CLI This example creates a standard IP ACL named david Configuring a Standard IP ACL 34. Configuring Standard ACLs Configuring an Extended IP ACL 35. Configuring Extended ACLs Configuring a MAC ACL 36. Configuring MAC ACLs Binding a Port to an Access Control List 37. Binding a Port to an ACL Filtering Addresses for Management Access CLI This example allows Snmp access for a specific client 38. Creating a Web IP Filter List Field Attributes Web Port ConfigurationDisplaying Connection Status Web Click Port, Port Information or Trunk Information Field Attributes CLI Basic Information Configuring Interface Connections CLI This example shows the connection status for Port 40. Port/Trunk Configuration Creating Trunk Groups Statically Configuring a Trunk 41. Configuring Port Trunks Enabling Lacp on Selected Ports 120 42. Lacp Configuration Configuring Lacp Parameters Dynamically Creating a Port Channel 43. Lacp Port Configuration 122 Displaying Lacp Port Counters Lacp StatisticsField Description Displaying Lacp Settings and Status for the Local Side Displaying Lacp Local Settings 45. Displaying Lacp Port Internal Information Displaying Lacp Settings and Status for the Remote Side Displaying Lacp Remote Settings Field Description Setting Broadcast Storm Thresholds 47. Enabling Port Broadcast Control Configuring Port Mirroring 48. Mirror Port Configuration Configuring Rate Limits Rate Limit Granularity Rate Limit Configuration 50. Output Rate Limit Port Configuration Showing Port Statistics Parameter Description Port Statistics Parameter Description Oversize Frames Or alignment errorFormed Fragments 51. Port Statistics Address Table Settings Setting Static AddressesCLI This example shows statistics for port 52. Configuring a Static Address Table Displaying the Address Table 53. Configuring a Dynamic Address Table Spanning Tree Algorithm Configuration Changing the Aging TimeCLI This example sets the aging time to 400 seconds Displaying Global Settings Spanning Tree Algorithm Configuration 55. Displaying Spanning Tree Information Configuring Global Settings Global settings apply to the entire switch Configuration Settings for Rstp 56. Configuring Spanning Tree Displaying Interface Settings 57. Bpdu Transmission 58. Displaying Spanning Tree Information CLI This example shows the STA attributes for port Configuring Interface Settings 59. Configuring Spanning Tree per Port CLI This example sets STA attributes for port Vlan Configuration Ieee 802.1Q VLANs VA Vlan Aware VU Vlan Unaware Forwarding Tagged/Untagged Frames Displaying Basic Vlan Information Enabling or Disabling Gvrp Global SettingCLI This example enables Gvrp for the switch Web Click VLAN, 802.1Q VLAN, Basic Information Command Attributes Web Displaying Current VLANs 62. Displaying Current VLANs Command Attributes CLI Creating VLANs 153 Adding Static Members to VLANs Vlan Index CLI This example creates a new Vlan 64. Configuring a Vlan Static Table Adding Static Members to VLANs Port Index 65. Vlan Static Membership by Port Configuring Vlan Behavior for Interfaces 66. Configuring VLANs per Port Private VLANs Displaying Current Private VLANs 67. Private Vlan Information Configuring Private VLANs Associating Community VLANs Each community Vlan must be associated with a primary Vlan Displaying Private Vlan Interface Information 69. Private Vlan Association Configuring Private Vlan Interfaces 70. Displaying Private Vlan Port Information 71. Private Vlan Port Configuration Class of Service Configuration Layer 2 Queue SettingsSetting the Default Priority for Interfaces 72. Port Priority Configuration CLI This example assigns a default priority of 5 to port 11. Priority Level Descriptions Mapping CoS Values to Egress Queues10. Egress Queue Priority Mapping Priority Level Traffic Type Selecting the Queue Mode 73. Traffic Classes Setting the Service Weight for Traffic Classes 74. Selecting the Queue Mode 75. Configuring Interfaces for Queue Scheduling Layer 3/4 Priority Settings Mapping Layer 3/4 Priorities to CoS ValuesSelecting IP Precedence/DSCP Priority Mapping IP Precedence 12. Mapping IP Precedence Priority Level Traffic Type Mapping Dscp Priority 13. Mapping Dscp Priority Values IP Dscp Value CoS Value10, 12, 14 18, 20, 22 26, 28, 30, 32, 34 38, 40 78. Mapping IP Dscp Priority Values Mapping IP Port Priority 79. Enabling IP Port Priority Status Mapping CoS Values to ACLs 14. Egress Queue Priority Mapping Multicast Filtering 81. ACL CoS Priority Configuring Igmp Snooping and Query Parameters Layer 2 Igmp Snooping and Query 82. Igmp Configuration Displaying Interfaces Attached to a Multicast Router 83. Displaying Multicast Router Port Information 84. Static Multicast Router Port Configuration Specifying Static Interfaces for a Multicast Router Displaying Port Members of Multicast Services 85. IP Multicast Registration Table Assigning Ports to Multicast Services 86. Igmp Member Port Table Consoleconfig#ip igmp snooping vlan 1 static Ethernet 1/12 Configuring the Switch 140 Using the Command Line Interface Accessing the CLITelnet Connection Command Line Interface Getting Help on Commands Entering CommandsCommand Completion Keywords and Arguments Showing Commands Understanding Command Modes Negating the Effect of CommandsUsing Command History Command Modes Exec Commands Configuration Commands Configuration Modes Command Prompt Consoleconfig-if# 104 Erases a mistake when entering a command Command Line ProcessingCommand Line Processing Keystroke Function Command Groups Command Groups Description Line Commands Line Syntax Login local no login LoginRelated Commands Example Syntax Password 0 7 password no password PasswordUsername 4-26 password No password is specified Syntax Timeout login response seconds no silent-time Timeout login responseExec-timeout Syntax Exec-timeout seconds no exec-timeout Syntax Password-thresh threshold no password-thresh Password-threshSilent-time4-15 Timeout login response Default value is three attempts Syntax Silent-time seconds no silent-time Silent-timeDatabits Syntax Databits 7 8 no databits Parity Syntax Parity none even odd no parity Syntax Speed bps no speed SpeedStopbits Syntax Stopbits 1 Syntax Disconnect session-id DisconnectShow line Syntax Show line console vty To show all lines, enter this command General CommandsEnable General Commands Function Mode Enable DisableDisable Enable password Level Configure Show history Reload End Exit This command exits the configuration programThis example shows how to quit a CLI session Quit System Management Commands Device Designation CommandsPrompt Hostname User Access CommandsUser Access Commands Function Mode Syntax Hostname name no hostname 10. Default Login Settings Username Access-level Password Guest AdminUsername Enable password Default is level Default password is super Management IP Filter Commands11. IP Filter Commands Function Mode Management Show management Web Server Commands Ip http portIp http server Ip http port Syntax No ip http secure-server Default SettingIp http secure-server 13. Https System Support Web Browser Operating System Portnumber The UDP port used for HTTPS/SSL. Range Ip http secure-portIp http secure-port4-32 Copy tftp https-certificate Ip http secure-server4-31 Telnet Server Commands Ip telnet portIp telnet server Ip telnet port Secure Shell Commands15. SSH Commands Function Mode Sets the SSH server key size Copy tftp public-key System Management Commands Syntax Ip ssh server no ip ssh server Default Setting Ip ssh serverIp ssh crypto host-key generate 4-39 show ssh Syntax Ip ssh timeout seconds no ip ssh timeout Ip ssh timeoutIp ssh authentication-retries Exec-timeout4-13 show ip ssh Ip ssh server-key size Delete public-keySyntax Delete public-key username dsa rsa Syntax Ip ssh crypto host-key generate dsa rsa Ip ssh crypto host-key generateIp ssh crypto zeroize Syntax Ip ssh crypto zeroize dsa rsa Ip ssh save host-key Show ip sshSyntax Ip ssh save host-key dsa rsa Show ssh 16. show ssh display description Username Name of an SSH user. Range 1-8 characters Show public-keySyntax Show public-key user username host Shows all public keys Syntax No logging on Default Setting Event Logging Commands17. Event Logging Commands Function Mode Logging on Flash errors level 3 RAM warnings level 7 Logging history18. Logging Levels Syntax No logging host hostipaddress Logging hostLogging facility Hostipaddress The IP address of a syslog server Syntax Logging trap level no logging trap Logging trapClear logging Syntax Clear logging flash ram Show log Syntax Show log flash ramFollowing example shows sample messages stored in RAM Syntax Show logging flash ram trap This command displays the logging configurationShow logging 19. show logging flash/ram display description Logging trap command Time CommandsFacility command 21. Time Commands Function Mode Syntax No sntp client Default Setting Sntp clientSntp server 4-51 sntp poll 4-51 show sntp Syntax Sntp server ip1 ip2 ip3 Sntp serverSntp poll Sntp client 4-50 sntp poll 4-51 show sntp Show sntp Clock timezoneSntp client Show calendar This command displays the system clockCalendar set Syntax Light unit System Status Commands22. System Status Commands Function Mode Syntax Light unit unit Show startup-config Show running-config Show running-config4-56 Show startup-config4-55 This command displays system information Show systemShow users Show version Jumbo frame Enables support for jumbo frames Frame Size Commands23. Frame Size Commands Function Mode Syntax No jumbo frame Default Setting Flash/File Commands 24. Flash/File Commands Function ModeCopy None Following example shows how to download a configuration file Syntax Dir unit boot-rom config opcode filename DeleteDir Syntax whichboot unit WhichbootFollowing example shows how to display all file information 25. File Directory Information Boot system Syntax Boot system unit boot-romconfig opcode filenameDir 4-64 whichboot Authentication login Authentication CommandsAuthentication Sequence 26. Authentication Commands Command Group Function Authentication enable Username for setting the local user names and passwords 28. Radius Client Commands Function Mode Show radius-server Shows the current Radius settingsRadius Client Radius-server port Default Setting Auth-portRetransmit Command Mode Syntax Radius-server port portnumber no radius-server port Radius-server key Radius-server retransmitSyntax Radius-server key keystring no radius-server key Radius-server timeout Show radius-server Tacacs-server host 29. Tacacs Commands Function ModeTACACS+ Client Tacacs-server port Tacacs-server key Show tacacs-serverSyntax Tacacs-server key keystring no tacacs-server key Status Disabled Action None Maximum Addresses Port Security Commands30. Port Security Commands Function Mode Interface Configuration Ethernet Command Usage Acquire a new client Dot1x timeout re-authperiod 802.1x Port Authentication31 .1x Port Authentication Command Function Mode Be re-authenticated Dot1x timeout tx-period Default Command Mode Dot1x defaultSyntax Dot1x default Command Mode Dot1x max-req Force-authorized Dot1x port-controlDot1x operation-mode Single-host Syntax Dot1x re-authenticate interface Dot1x re-authenticateDot1x re-authentication Syntax No dot1x re-authentication Command Mode Dot1x timeout quiet-period Dot1x timeout re-authperiodSeconds The number of seconds. Range Dot1x timeout tx-period Show dot1xSyntax Show dot1x statistics interface interface Authenticator State Machine State Current state including initialize, reauthenticate Command Line Interface Access Control List Commands Access Control Lists 33. IP ACLs Command Function Mode Access-list ip32. Access Control Lists Command Groups Function Syntax No access-list ip standard extended aclname Permit, deny Ip access-group4-90 show ip access-list4-90 Syntax No permit deny any source bitmask host sourceStandard ACL Access-list ip No permit deny tcp Extended ACL Syntax Show ip access-list standard extended aclname Show ip access-listIp access-group Syntax No ip access-group aclname Show ip access-list4-90 Show ip access-groupMap access-list ip This command shows the ports assigned to IP ACLs Syntax Show map access-list ip interface Show map access-list ipQueue cos-map4-166 Show map access-list ip 34. Egress Queue Priority Mapping Syntax No access-list mac aclname Access-list mac35. MAC ACLs Command Function Mode MAC ACLs Permit, deny MAC ACL Syntax No permit deny Syntax Show mac access-list aclname Show mac access-listMac access-group Syntax Mac access-group aclname Show mac access-list4-95 Show mac access-groupMap access-list mac This command shows the ports assigned to MAC ACLs Syntax Show map access-list mac interface Show map access-list macQueue cos-map4-166 Show map access-list mac 36. Egress Queue Priority Mapping 37. ACL Information Command Function Mode Show access-listShow access-group ACL Information Snmp Commands 38. Snmp Commands Function ModeSnmp-server community Syntax Snmp-server contact string no snmp-server contact Snmp-server contactSnmp-server location Syntax Snmp-server location text no snmp-server location Snmp-server host Host Address None Snmp Version Issue authentication and link-up-down traps Snmp-server enable trapsSnmp-server enable traps This command checks the status of Snmp communications 103 Interface Interface Commands39. Interface Commands Function Mode Port-channel channel-idRange Description Speed-duplexSyntax Description string no description Syntax No negotiation Default Setting NegotiationNegotiation 4-106 capabilities Following example configures port 11 to use autonegotiation CapabilitiesCapabilities 4-107speed-duplex4-105 Flowcontrol Syntax No flowcontrol Default SettingFlow control enabled Negotiation 4-106speed-duplex4-105 flowcontrol Syntax No shutdown Default Setting Shutdown Port-channel channel-idRange Default Setting Switchport broadcast packet-rateThis command clears statistics on an interface Clear counters Following example clears statistics on port This command displays the status for an interfaceShow interfaces status Syntax Show interfaces status interface Syntax Show interfaces counters interface This command displays interface statisticsShow interfaces counters Shows the counters for all interfaces Show interfaces switchport Syntax Show interfaces switchport interfaceShows all interfaces 40. Interfaces Switchport Statistics Interface Configuration Ethernet, destination port Mirror Port Commands41. Mirror Port Commands Function Mode Port monitor Show port monitor Syntax Show port monitor interface Rate-limit Rate Limit Commands42. Rate Limit Commands Function Mode Actual rate limit = Rate limit level * Granularity Rate-limit granularity Global Configuration Ethernet, Port ChannelUse this command to display the rate limit granularity Show rate-limit Link Aggregation Commands 43. Link Aggregation Commands Channel-group Guidelines for Creating TrunksSyntax Channel-group channel-idno channel-group Syntax No lacp Default Setting LacpFollowing example creates trunk 1 and then adds port Lacp system-priority 32768 Lacp admin-keyEthernet Interface Lacp admin-key Port Channel This command displays Lacp information Lacp port-priority Type Port Channel all44. show lacp counters display description Badly formed PDU or an illegal value of Protocol Subtype 45. show lacp internal display description 46. show lacp neighbors display description Address Table Commands 48. Address Table Commands Function Mode47. show lacp sysid display description Mac-address-table static Mac-address- MAC addressVlan-id- Vlan ID Range Clear mac-address-table dynamic Show mac-address-tableMac-address- MAC address Mask Bits to match in the address Mac-address-table aging-time Show mac-address-table aging-time Syntax No spanning-tree Default Setting Spanning Tree Commands49. Spanning Tree Commands Function Mode Spanning tree is enabled Spanning-tree mode Syntax Spanning-tree mode stp rstp no spanning-tree modeRstp Spanning-tree forward-time Spanning-tree hello-time Spanning-tree max-age Spanning-tree priority Spanning-tree pathcost methodLong method Spanning-tree cost This command limits the maximum transmission rate for BPDUsSpanning-tree transmission-limit Count The transmission limit in seconds. Range Spanning-tree port-priority Priority The priority for a port. Range 0-240, in steps Syntax No spanning-tree edge-port Default Setting Spanning-tree edge-port Spanning-tree link-type Syntax No spanning-tree portfast Default SettingSpanning-tree portfast Spanning-treeedge-port4-140 Auto Port-channel channel-idRange Command ModeSpanning-tree protocol-migration Syntax Spanning-tree protocol-migration interface This command shows the configuration for the spanning tree Show spanning-treeSyntax Show spanning-tree interface 144 51. Editing Vlan Groups Command Function Mode Vlan Commands50. VLANs Command Groups Function Editing Vlan Groups Vlan By default only Vlan 1 exists and is activeVlan Database Configuration Show vlan Interface vlan Configuring Vlan Interfaces52. Configuring Vlan Interfaces Command Function Mode Interface vlan All ports are in hybrid mode with the Pvid set to Vlan Switchport modeSwitchport acceptable-frame-types Switchport acceptable-frame-types4-148 Switchport ingress-filtering Syntax No switchport ingress-filtering Default Setting Switchport native vlan Switchport allowed vlan Switchport forbidden vlan No VLANs are included in the forbidden list 53. Show Vlan Commands Function Mode Displaying Vlan InformationShow vlan Configuring Private VLANs 54. Private Vlan Commands Function Mode Vlan Configuration Private-vlan Switchport mode private-vlan Private vlan associationNo private-vlan primary-vlan-idassociation Switchport private-vlan host-association Normal Vlan Switchport private-vlan mapping Show vlan private-vlanSyntax Show vlan private-vlan community isolated primary Syntax No bridge-ext gvrp Default Setting Gvrp and Bridge Extension Commands55. Gvrp and Bridge Extension Commands Function Mode Bridge-ext gvrp Switchport gvrp Syntax No switchport gvrp Default SettingShow bridge-ext This command shows if Gvrp is enabled Show gvrp configurationGarp timer Syntax Show gvrp configuration interface Show garp timer Syntax Show garp timer interfaceShows all Garp timers 56. Priority Commands Command Groups Function Priority CommandsPriority Commands Layer 57. Priority Commands Layer Function Mode Queue mode Syntax Queue mode strict wrr no queue modeQueue bandwidth Switchport priority default Queue cos-map Mapping CoS Values Show queue bandwidth Show queue modeThis command shows the current queue mode Show queue cos-map4-168 This command shows the class of service priority map Show queue cos-mapSyntax Show queue cos-map interface Priority Commands Layer 3 59. Priority Commands Layer 3 Function ModeSyntax No map ip port Default Setting Following example shows how to map Http traffic to CoS value Syntax No map ip precedence Default Setting List below shows the default priority mapping 60. Mapping IP Precedence Values CoS Value Command Mode Command Line Interface Map ip dscp Global Configuration Syntax No map ip dscp Default Setting Use this command to show the IP port priority map 61. IP Dscp to CoS Vales IP Dscp Value CoS ValueSyntax Show map ip port interface This command shows the IP precedence priority map Show map ip precedenceSyntax Show map ip precedence interface This command shows the IP Dscp priority map Show map ip dscpSyntax Show map ip dscp interface 62. Multicast Filtering Commands Command Groups Function Multicast Filtering CommandsIgmp Snooping Commands 63. Igmp Snooping Commands Function Mode Ip igmp snooping Syntax No ip igmp snooping Default SettingFollowing example enables Igmp snooping Ip igmp snooping vlan static Ip igmp snooping version Following configures the switch to use Igmp VersionThis command shows the Igmp snooping configuration Show ip igmp snooping Following shows the current Igmp snooping configuration This command shows known multicast addressesShow mac-address-table multicast Syntax No ip igmp snooping querier Default Setting Igmp Query Commands Layer64. Igmp Query Commands Layer Function Mode Ip igmp snooping querier Times Following shows how to configure the query count toIp igmp snooping query-interval Ip igmp snooping query-max-response-time4-182 Seconds The report delay advertised in Igmp queries. Range Ip igmp snooping query-max-response-timeIp igmp snooping router-port-expire-time Ip igmp snooping vlan mrouter Static Multicast Routing Commands65. Static Multicast Routing Commands Function Mode Syntax No ip igmp snooping vlan vlan-idmrouter interface Displays multicast router ports for all configured VLANs Show ip igmp snooping mrouterSyntax Show ip igmp snooping mrouter vlan vlan-id Interface Configuration Vlan IP Interface Commands66. IP Interface Commands Function Mode Ip address This command submits a Bootp or Dhcp client request Ip dhcp restart Ip default-gateway Syntax Ip default-gateway gateway no ip default-gatewayShow ip interface Show ip redirects Ip default-gateway4-187This command has no default for the host Ping 189 Command Line Interface 190 Appendix a Software Specifications Software Features Management Features Groups 1, 2, 3, 9 Statistics, History, Alarm, EventStandards Management Information Bases SNMPv2 RFC Sntp RFC SSH Version Tftp RFC Software Specifications Table B-1. Troubleshooting Chart Symptom Action Using System Logs Class of Service CoS Access Control List ACLBoot Protocol Bootp Differentiated Services Code Point Service Dscp Generic Multicast Registration Protocol Gmrp Garp Vlan Registration Protocol GvrpGeneric Attribute Registration Protocol Garp Group Attribute Registration Protocol Garp Internet Group Management Protocol Igmp Igmp SnoopingIgmp Query In-Band Management Remote Authentication Dial-in User Service Radius Multicast SwitchingPort Authentication Network Time Protocol NTP Simple Network Time Protocol Sntp Secure Shell SSHSimple Network Management Protocol Snmp Spanning Tree Protocol STP Virtual LAN Vlan XModem Gateway, default 3-12,4-187 NumericsDownloading software 3-16,4-61 Index Index-3 Index-4 Page For Technical SUPPORT, Call