Manuals / SMC Networks / Computer Equipment / Switch

SMC Networks SMC6824M manual Show access-list mac mask-precedence, Mac access-group

Models: SMC6824M

1 608

Download 608 pages 58 Kb

Page 438

ACCESS CONTROL LIST COMMANDS

show access-list mac mask-precedence

This command shows the ingress or egress rule masks for MAC ACLs.

Syntax

show access-list mac mask-precedence [in out]

•in – Ingress mask precedence for ingress ACLs.

•out – Egress mask precedence for egress ACLs.

Command Mode

Privileged Exec

Example

Console#show access-list mac mask-precedence MAC egress mask ACL:

mask pktformat host any vid ethertype Console#

Related Commands

mask (MAC ACL) (4-144)

mac access-group

This command binds a port to a MAC ACL. Use the no form to remove the port.

Syntax

mac access-group acl_name {in out}

•acl_name – Name of the ACL. (Maximum length: 15 characters)

•in – Indicates that this list applies to ingress packets.

•out – Indicates that this list applies to egress packets.

Default Setting

None

Command Mode

Interface Configuration (Ethernet)

Command Usage

• A port can only be bound to one ACL.

4-146

Image 438

SMC Networks SMC6824M manual Show access-list mac mask-precedence, Syntax Mac access-group aclname in out

Contents

TigerStack III 10/100 Page TigerStack III 10/100 Management Guide Trademarks Limited Warranty Limited Warranty Table of Contents Table of Contents Table of Contents Table of Contents Command Line Interface ViiViii Table of Contents Table of Contents Table of Contents Xii Xiii Xiv Table of Contents Xvi Glossary Index XviiXviii Tables XixTables Xxi Xxii Figures XxiiiXxiv 37 802.1X Global InformationXxv Xxvi Key Features Key FeaturesFeature Description Description of Software Features LacpDescription of Software Features Introduction Description of Software Features Introduction System Defaults System DefaultsFunction Parameter Default Https Pvid Dhcp Connecting to the Switch Configuration OptionsInitial Configuration Required Connections Remote Connections Recovering from Stack Failure or Topology Change Stack OperationsSelecting the Stack Master Basic Configuration Resilient IP Interface for Management AccessConsole Connection Setting Passwords Setting an IP AddressManual Configuration Dynamic Configuration Enabling Snmp Management Access Clients, we recommend that you delete both of the default Community Strings for Snmp version 1 and 2c clientsConfiguring Access for Snmp Version 3 Clients Trap ReceiversSaving Configuration Settings Managing System Files Configuring Power over Ethernet Initial Configuration Configuring the Switch Using the Web InterfaceConfiguring the Switch Navigating the Web Browser Interface HomeWeb Page Configuration Buttons ButtonAction Front Panel Indicators Panel DisplaySwitch Main Menu Main MenuMenu Description Sntp ACL Vlan Mstp 206 Vlan ID Displaying System Information Field AttributesSystem Information Displaying Switch Hardware/Software Versions CLI Specify the hostname, location and contact informationManagement Software Web Click System, Switch Information General Switch InformationDisplaying Bridge Extension Capabilities Field AttributesSetting the IP Address CLI Enter the following commandWeb Click System, Bridge Extension Command Attributes Manual Configuration IP Interface Configuration ManualUsing DHCP/BOOTP IP Interface Configuration DhcpCommand Attributes Managing FirmwareDownloading System Software from a Server Copy FirmwareSetting the Startup Code Saving or Restoring Configuration Settings Command UsageBasic Configuration Downloading Configuration Settings from a Server 11 Downloading Configuration Settings for Start-Up12 Setting the Startup Configuration Settings Console Port Settings Command AttributesCLI only 13 Console Port Settings Telnet Settings Command Attributes14 Configuring the Telnet Interface Configuring Event Logging System Log ConfigurationCommand Attributes Logging LevelsRemote Log Configuration 15 System Logs16 Remote Logs Displaying Log Messages 17 Displaying LogsSending Simple Mail Transfer Protocol Alerts CLI This example shows the event message stored in RAM18 Enabling and Configuring Smtp Alerts Resetting the System 19 Resetting the SwitchSetting the System Clock Configuring SntpCLI Use the reload command to reboot the system Setting the Time Zone 20 Sntp Configuration21 Setting the Time Zone Simple Network Management ProtocolConfiguring the Switch SNMPv3 Security Models and Levels Model Level Group Read Write Notify Security ViewSetting Community Access Strings CLI The following example enables Snmp on the switchEnabling the Snmp Agent 23 Configuring Snmp Community Strings Command Usage Specifying Trap Managers and Trap TypesCommand Attributes 24 Configuring Snmp Trap Managers Configuring SNMPv3 Management Access Setting the Local Engine IDSpecifying a Remote Engine ID CLI This example sets an SNMPv3 engine IDConfiguring SNMPv3 Users CLI This example specifies a remote SNMPv3 engine IDConfiguring the Switch 27 Configuring SNMPv3 Users Configuring Remote SNMPv3 Users 169Command Attributes 28 Configuring Remote SNMPv3 Users Configuring SNMPv3 Groups Supported Notification Messages Object Label Object ID DescriptionObject Label Object ID Description Rmon Events SwIpFilterRejectTrap 29 Configuring SNMPv3 Groups Setting SNMPv3 Views 16530 Configuring SNMPv3 Views User Authentication 163Configuring User Accounts Command Attributes31 Configuring User Accounts Configuring Local/Remote Logon Authentication That use software runningOn a central server to Command Attributes Radius SettingsTacacs Settings 32 Authentication Server SettingsConfiguring Https 104Https Support Web Browser Operating SystemReplacing the Default Secure-site Certificate 33 Https SettingsConfiguring the Secure Shell Command Usage Configuring the Switch Generating the Host Key Pair Field Attributes34 SSH Host-Key Settings Configuring the SSH Server SSH server includes basic settings for authentication35 SSH Server Settings Configuring Port Security Command UsageCommand Attributes 36 Enabling Port Security Configuring 802.1X Port Authentication 802.1X System Authentication Control The global setting for Displaying 802.1X Global Settings802.1X protocol provides client authentication Web Click Security, 802.1X, InformationConfiguring 802.1X Global Settings CLI This example shows the default global setting forCLI This example enables 802.1X globally for the switch Configuring Port Settings for 39 802.1X Port Configuration AuthorizedUser Authentication Displaying 802.1X Statistics 802.1X StatisticsParameter Description 40 Displaying 802.1X Statistics CLI This example displays the 802.1X statistics for portFiltering IP Addresses for Management Access Command Usage41 Entering IP Addresses to be Filtered Access Control Lists Configuring Access Control ListsSetting the ACL Name and Type Command AttributesConfiguring a Standard IP ACL Command Attributes 100CLI This example creates a standard IP ACL named bill Configuring an Extended IP ACL Command Attributes 101102 44 Configuring Extended IP ACLs 103Configuring a MAC ACL Command Attributes 104Command Usage 10545 Configuring MAC ACLs 106Configuring ACL Masks 107Specifying the Mask Type Configuring an IP ACL Mask 108This mask defines the fields to check in the IP header 47 Configuring an IP based ACL 109Configuring a MAC ACL Mask 110This mask defines the fields to check in the packet header 48 Configuring an ACL MAC Mask 111Binding a Port to an Access Control List 112113 49 Mapping ACLs to Port Ingress/Egress QueuesDisplaying Connection Status Port ConfigurationCommand Attributes Web 114115 Field Attributes CLIWeb Click Port, Port Information or Trunk Information 116 Current statusConfiguring Interface Connections 117CLI This example shows the connection status for Port 118 51 Configuring Port Attributes 119Creating Trunk Groups 120Statically Configuring a Trunk Command Usage 12152 Static Trunk Configuration 122Enabling Lacp on Selected Ports Command Usage 12353 Lacp Port Configuration 124125 126 54 Lacp Aggregation Port Configuration 127128 You can display statistics for Lacp protocol messages 129Displaying Lacp Port Counters Lacp Port CountersDisplaying Lacp Settings and Status for the Local Side Lacp Internal Configuration Information130 131 132 56 Displaying Lacp Port InformationDisplaying Lacp Settings and Status for the Remote Side 10 Lacp Neighbor Configuration Information133 134 57 Displaying Remote Lacp Port InformationSetting Broadcast Storm Thresholds 135Configuring Port Mirroring 13659 Configuring a Mirror Port 137Configuring Rate Limits Command Attribute138 Showing Port Statistics 139140 11 Port Statistics141 142 Rmon Statistics143 144 61 Port StatisticsPower Over Ethernet Settings 145CLI This example shows statistics for port Switch Power Status Displays the Power over Ethernet parameters for the switch146 Setting a Switch Power Budget Web Click PoE, Power Status147 Displaying Port Power Status 148Configuring Port PoE Power Web Click PoE, Power Port Status149 65 Configuring Port PoE Power 150Address Table Settings Setting Static Addresses151 Displaying the Address Table 152153 67 Displaying the MAC Dynamic Address Table154 Spanning Tree Algorithm ConfigurationChanging the Aging Time CLI This example sets the aging time to 300 seconds155 Displaying Global Settings 156157 158 159 Web Click Spanning Tree, STA InformationConfiguring Global Settings Global settings apply to the entire switch160 Basic Configuration of Global Settings 161Root Device Configuration 162Configuration Settings for Rstp 16370 Configuring the Spanning Tree Algorithm 164Displaying Interface Settings 165166 167 AD B168 71 STA Port InformationConfiguring Interface Settings 169170 72 Configuring Spanning Tree Algorithm per Port 171Configuring Multiple Spanning Trees 172CLI This example sets STA attributes for port 73 Mstp Vlan Configuration 173174 Displaying Interface Settings for Mstp 175176 Configuring Interface Settings for Mstp 177178 CLI This example sets the Mstp attributes for portVlan Configuration Ieee 802.1Q VLANs179 180 Assigning Ports to VLANs181 182 Forwarding Tagged/Untagged FramesEnabling or Disabling Gvrp Global Setting CLI This example enables Gvrp for the switch183 184 Displaying Basic Vlan InformationWeb Click VLAN, 802.1Q VLAN, Basic Information 185 Displaying Current VLANsCommand Attributes CLI 186Creating VLANs 187 79 Vlan Static List Creating VLANs188 Adding Static Members to VLANs Vlan IndexCLI This example creates a new Vlan Command Attributes 189190 Adding Static Members to VLANs Port IndexConfiguring Vlan Behavior for Interfaces 191192 193 Private VLANs 194Vlan ID ID of configured Vlan 195Displaying Current Private VLANs 196 83 Displaying Private Vlan Port InformationConfiguring Private VLANs 197198 Associating Community VLANsEach community Vlan must be associated with a primary Vlan 199 Displaying Private Vlan Interface InformationConfiguring Private Vlan Interfaces 20087 Configuring Private Vlan Ports 201Setting the Default Priority for Interfaces Class of Service ConfigurationLayer 2 Queue Settings 202CLI This example assigns a default priority of 5 to port 20312 Mapping CoS Values to Egress Queues 204Mapping CoS Values to Egress Queues 13 CoS Priority Levels89 Configuring Traffic Classes 205Selecting the Queue Mode 206Setting the Service Weight for Traffic Classes 207Mapping Layer 3/4 Priorities to CoS Values Layer 3/4 Priority Settings208 Selecting IP Precedence/DSCP Priority209 Mapping IP Precedence14 Mapping IP Precedence 93 Mapping IP Precedence to Class of Service Values 21015 Mapping Dscp Priority 211Mapping Dscp Priority IP Dscp Value CoS Value94 Mapping IP Dscp Priority to Class of Service Values 212213 Mapping IP Port Priority214 95 Globally Enabling the IP Port Priority StatusCopy Settings 215Mapping CoS Values to ACLs CLI This feature not supported through the CLI216 16 CoS to ACL Mapping217 98 Mapping CoS Values to ACLs218 Changing Priorities Based on ACL Rules219 99 Changing Priorities Based on ACL RulesMulticast Filtering Igmp Protocol220 Layer 2 Igmp Snooping and Query 221Configuring Igmp Snooping and Query Parameters 222100 Configuring Internet Group Management Protocol 223224 Displaying Interfaces Attached to a Multicast Router225 Specifying Interfaces Attached to a Multicast RouterDisplaying Port Members of Multicast Services 226103 Displaying Port Members of Multicast Services 227Assigning Ports to Multicast Services 228Configuring Domain Name Service Configuring General DNS Server Parameters229 230 105 Configuring DNS 231Configuring Static DNS Host to Address Entries 232233 106 Mapping IP Addresses to a Host NameDisplaying the DNS Cache 234235 Web Select DNS, Cache236 Using the Command Line Interface Accessing the CLIConsole Connection Telnet Connection Entering Commands This section describes how to enter CLI commandsKeywords and Arguments Showing Commands Command CompletionGetting Help on Commands Minimum AbbreviationCommand Line Interface Understanding Command Modes Negating the Effect of CommandsUsing Command History Partial Keyword LookupExec Commands Command ModesClass Mode Configuration Commands Configuration Command Modes Mode Command PromptCommand Line Processing Keystroke CommandsKeystroke Function Command Groups Command Group IndexCommand Group Description Configures DNS services 286 Command Function Mode Line CommandsLine Commands Password-thresh commandLine Login local LoginSyntax Login local no login Line ConfigurationSyntax Password 0 7 password no password PasswordUsername 4-34password No password is specifiedCLI Disabled 0 seconds Telnet 300 seconds Timeout login responseLogin 4-15password-thresh To set the timeout to two minutes, enter this commandExec-timeout Syntax Exec-timeout seconds no exec-timeoutCLI and Telnet 600 seconds 10 minutes Password-thresh Syntax Password-thresh threshold no password-threshDefault value is three attempts Syntax Silent-time seconds no silent-time Silent-timeDatabits Syntax Databits 7 8 no databitsParity Syntax Parity none even odd no paritySpeed To specify no parity, enter this commandTo specify 57600 bps, enter this command Syntax Speed bps no speedStopbits 1 StopbitsDisconnect Syntax disconnect session-idShow line Syntax Show line console vtyGeneral Commands General CommandsEnable Syntax enable levelDisable Disable Enable passwordNone Configure Show historyThis command restarts the system This command resets the entire systemReload End This example shows how to reset the switchThis command returns to Privileged Exec mode ExitUse this command to exit the configuration program This example shows how to quit a CLI sessionQuit System Management Commands System Management CommandsCommand Group Function Prompt Device Designation CommandsDevice Designation Commands Syntax Prompt string no promptSyntax Hostname name no hostname HostnameLight unit Syntax Light unit unitUser Access Commands User Access CommandsUsername 10 Default Login Settings Username Access-level PasswordEnable password Default is level is level Default password is super11 IP Filter Commands IP Filter CommandsEnable 4-25authentication enable ManagementShow management Web Server Commands 12 Web Server CommandsIp http port Default Setting Command ModeSyntax No ip http server Default Setting Ip http serverSyntax No ip http secure-server Default Setting Ip http secure-serverIp http secure-port4-42 Copy tftp https-certificate Ip http secure-port13 Https System Support Portnumber The UDP port used for HTTPS. RangeIp telnet server Telnet Server Commands14 Telnet Server Commands Ip http secure-server4-41Secure Shell Commands Server Enabled Server Port15 Secure Shell Commands Command Function ModeSystem Management Commands Syntax No ip ssh server Default Setting DisabledIp ssh server Ip ssh crypto host-key generate 4-51 show ssh Ip ssh timeoutSyntax Ip ssh timeout seconds no ip ssh timeout SecondsIp ssh authentication-retries Exec-timeout4-18 show ip sshIp ssh server-key size Delete public-keySyntax Delete public-key username dsa rsa Dsa DSA Version 2 key type Rsa RSA Version 1 key type Ip ssh crypto host-key generateSyntax Ip ssh crypto host-key generate dsa rsa Generates both the DSA and RSA key pairsSyntax Ip ssh crypto zeroize dsa rsa Ip ssh crypto zeroizeIp ssh save host-key Syntax Ip ssh save host-key dsa rsaShow ssh This command displays the current SSH server connectionsShow ip ssh Saves both the DSA and RSA key16 show ssh display description TerminologyUsername Name of an SSH user. Range 1-8 characters Show public-keySyntax Show public-key user username host Shows all public keysEvent Logging Commands 17 Event Logging CommandsLogging history Syntax No logging on Default SettingLogging on Logging history 4-57clear loggingFlash errors level 3 RAM informational level 6 18 Logging LevelsLevel Severity Name Description Syntax No logging host hostipaddress Logging hostLogging facility Hostipaddress The IP address of a syslog serverDisabled Level 7 Logging trapSyntax Logging trap level no logging trap Syntax Clear log flash ram Clear logShow logging Syntax Show logging flash ram sendmail trapFollowing example displays settings for the trap function 19 show logging flash/ram display descriptionShow log 20 show logging trap display descriptionSyntax Show log flash ram Logging sendmail host Smtp Alert Commands21 Smtp Commands Following example shows the event message stored in RAMLogging sendmail level Syntax Logging sendmail level levelLogging sendmail source-email Syntax Logging sendmail source-email email-addressLogging sendmail Syntax No logging sendmail Default SettingLogging sendmail destination-email Syntax No logging sendmail destination-email email-addressTime Commands 22 Time CommandsShow logging sendmail Syntax No sntp client Default Setting Sntp clientSntp server Sntp server 4-70 sntp poll 4-71 show sntpSyntax Sntp server ip1 ip2 ip3 Sntp poll Sntp client 4-69 sntp poll 4-71 show sntpSyntax Sntp poll seconds no sntp poll Show sntp Sntp clientClock timezone NoneShow calendar This command displays the system clockCalendar set SyntaxSystem Status Commands Show startup-config23 System Status Commands Example Show running-config Related CommandsShow startup-config This command displays system information Show systemShow users Show versionFlash/File Commands 24 Flash/File CommandsCopy Privileged ExecCommand Usage Following example shows how to download a configuration file Command Line Interface This command deletes a file or image DeleteDir Delete public-key Dir This command displays a list of files in flash memorySyntax Dir unit boot-rom config opcode filename 25 File Directory InformationWhichboot Following example shows how to display all file informationBoot system Syntax Boot system unit boot-romconfig opcode filenameDir 4-87whichboot Power over Ethernet Commands 26 PoE CommandsCommand Group Function Mode Syntax Power mainpower maximum allocation watts unit unit Power mainpower maximum allocationPower inline compatible Syntax No power inline compatibleCompatible Mode Enabled Power inline Power inline maximum allocationSyntax No power inline Default Setting Power inline priority LowEthernet Show power inline statusSyntax Show power inline status interface Unit Stack unit. Range Port Port number. Range28 show power mainpower parameters Show power mainpower27 show power inline status parameters Mainpower maximum allocation on29 Authentication Commands Authentication CommandsAuthentication Sequence 30 Authentication Sequence CommandAuthentication login LocalAuthentication enable Username for setting the local user names and passwords31 Radius Client Commands Radius ClientRetransmit Command Mode Default Setting Auth-portTimeout 5 seconds Radius-server hostSyntax Radius-server port portnumber no radius-server port Radius-server portRadius-server key 1812Radius-server timeout Radius-server retransmitShow radius-server Privileged ExecTacacs-server host 32 TACACS+ Client CommandsTACACS+ Client Hostipaddress IP address of a TACACS+ serverSyntax Tacacs-server port portnumber no tacacs-server port Tacacs-server portTacacs-server key Syntax Tacacs-server key keystring no tacacs-server keyPort Security Commands Show tacacs-serverInterface Configuration Ethernet 33 Port Security CommandsStatus Disabled Action None Maximum Addresses Port security109 802.1X Port Authentication 34 802.1X Port Authentication CommandsDot1x system-auth-control Dot1x defaultSyntax No dot1x system-auth-control Default Setting Dot1x max-reqDot1x port-control Default Command ModeDefault Force-authorizedDot1x operation-mode Single-hostSyntax Dot1x re-authenticate interface Dot1x re-authenticateDot1x re-authentication Syntax No dot1x re-authentication Command ModeDot1x timeout quiet-period Dot1x timeout re-authperiodSeconds The number of seconds. Range Syntax Show dot1x statistics interface interface Dot1x timeout tx-periodShow dot1x Statistics Displays dot1x status for each port Interface117 Authenticator State Machine State- Current state including initialize, reauthenticateAccess Control List Commands Access Control ListsAccess Control List Commands Masks for Access Control Lists 35 Access Control List CommandsCommand Groups Function 36 IP ACL Commands IP ACLsAccess-list ip Syntax No access-list ip standard extended aclnameAccess-list ip extended fragment-auto-mask Permit, deny Standard ACLPermit, deny Extended ACL Standard ACLNo permit deny tcp Extended ACL127 Syntax Show ip access-list standard extended aclname Show ip access-listThis command displays the rules for configured IP ACLs Permit, deny Ip access-group4-134Access-list ip mask-precedence Syntax No access-list ip mask-precedence in outMask IP ACL 4-130 ip access-group4-134 Syntax No mask protocol IP Mask131 132 Show access-list ip mask-precedence Syntax Show access-list ip mask-precedence in outIp access-group Syntax No ip access-group aclname in outShow ip access-list4-128 Show ip access-groupMap access-list ip This command shows the ports assigned to IP ACLsSyntax Show map access-list ip interface Show map access-list ipQueue cos-map4-257 Show map access-list ip 37 Egress Queue Priority MappingMatch access-list ip Map access-list ipShow marking Match access-list ip38 MAC ACL Commands MAC ACLsAccess-list mac Syntax No access-list mac aclnamePermit, deny MAC ACL Syntax No permit denyMAC ACL Syntax Show mac access-list aclname Show mac access-listThis command displays the rules for configured MAC ACLs Permit, deny Mac access-group4-146Access-list mac mask-precedence Mask MAC ACL 4-144 mac access-group4-146Syntax No mask pktformat MAC Mask145 This example creates an Egress MAC ACLSyntax Show access-list mac mask-precedence in out Show access-list mac mask-precedenceMac access-group Syntax Mac access-group aclname in outShow mac access-list4-142 Show mac access-groupMap access-list mac This command shows the ports assigned to MAC ACLsSyntax Show map access-list mac interface Show map access-list macQueue cos-map4-257 Show map access-list mac 39 Mapping CoS Values to MAC ACL RulesMatch access-list mac Map access-list macShow access-list ACL Information40 ACL Information This command shows the port assignments of ACLs Snmp CommandsShow access-group 41 Snmp CommandsSyntax No snmp-server Default Setting Snmp-serverShow snmp NoneSnmp-server community Snmp-server contactSyntax Snmp-server contact string no snmp-server contact Snmp-server location Syntax Snmp-server location text no snmp-server location156 Snmp-server host157 158 Snmp-server enable traps Issue authentication and link-up-down trapsSnmp-server engine-id Snmp-server hostThis command shows the Snmp engine ID This example shows the default engine IDShow snmp engine-id Defaultview includes access to the entire MIB tree Snmp-server view42 show snmp engine-id display description Examples This command shows information on the Snmp viewsShow snmp view This view includes MIB-2164 Snmp-server groupCommand Usage Show snmp group166 44 show snmp group display descriptionDefault Setting Snmp-server user168 This command shows information on Snmp users Show snmp user45 show snmp user display description Interface Commands 46 Interface CommandsPort-channel channel-idRange InterfaceDescription Syntax Description string no descriptionInterface Configuration Ethernet, Port Channel Speed-duplexFollowing example adds a description to port Syntax No negotiation Default Setting NegotiationNegotiation 4-173capabilities Following example configures port 11 to use autonegotiation CapabilitiesNegotiation 4-173speed-duplex Flowcontrol Syntax No flowcontrol Default SettingFlow control enabled Negotiation 4-173speed-duplex4-172 flowcontrolAll interfaces are enabled Following example enables flow control on portSyntax No shutdown Default Setting ShutdownSwitchport broadcast packet-rate Following example disables portClear counters This command clears statistics on an interfacePort-channel channel-idRange Default Setting Syntax Clear counters interfaceSyntax Show interfaces status interface This command displays the status for an interfaceShow interfaces status Shows the status for all interfacesSyntax Show interfaces counters interface This command displays interface statisticsShow interfaces counters Shows the counters for all interfaces181 This example shows the configuration setting for port Show interfaces switchportSyntax Show interfaces switchport interface Shows all interfaces47 show interfaces switchport display description Field DescriptionInterface Configuration Ethernet, destination port Mirror Port Commands48 Mirror Port Commands Port monitorSyntax Show port monitor interface This command displays mirror informationShow port monitor Shows all sessionsRate Limit Commands Following shows mirroring configured from port 6 to port49 Rate Limit Commands Interface Configuration Ethernet, Port Channel Rate-limitLink Aggregation Commands 50 Link Aggregation CommandsGuidelines for Creating Trunks General GuidelinesLacp Syntax no lacp Default SettingChannel-group Syntax Channel-group channel-idno channel-group191 Lacp system-priority 32768Lacp admin-keyEthernet Interface Lacp admin-key Port Channel Syntax Lacp admin-key key no lacp admin-keyDefault Setting Lacp port-priorityPort Channel all This command displays Lacp informationShow lacp 51 show lacp counters display description197 52 show lacp internal display descriptionPartner 199 53 show lacp neighbors display descriptionAddress Table Commands 55 Address Table Commands54 show lacp sysid display description Mac-address-table static Mac-address- MAC addressVlan-id- Vlan ID Range Clear mac-address-table dynamic Show mac-address-tableMac-address- MAC address Mask Bits to match in the address Mac-address-table aging-time SecondsSpanning Tree Commands 56 Spanning Tree CommandsShow mac-address-table aging-time RSTP/MSTP Syntax No spanning-tree Default Setting Spanning tree is enabledSpanning-tree Spanning-tree mode Rstp208 Spanning-tree forward-timeSpanning-tree hello-time Seconds210 Spanning-tree max-ageSpanning-tree default priority Spanning-tree priorityIeee 802.1t format Spanning-tree pathcost method Long methodThis command limits the maximum transmission rate for BPDUs Spanning-tree transmission-limitCount -The transmission limit in seconds. Range Spanning-tree backup-root Spanning-tree mst-configurationSyntax No spanning-tree backup-root Default Setting MST Configuration Mst vlanMst priority Mst instanceid priority priority no mst instanceid prioritySyntax name name Switch’s MAC addressName Name Name of the spanning treeSyntax revision number RevisionMax-hops Number Revision number of the spanning tree. RangeSpanning-tree spanning-disabled Syntax No spanning-tree spanning-disabled Default SettingThis example disables the Spanning Tree Algorithm for port Spanning-tree cost Syntax Spanning-tree cost cost no spanning-tree costPriority The priority for a port. Range 0-240, in steps Spanning-tree port-prioritySpanning-tree edge-port Syntax No spanning-tree edge-portSyntax No spanning-tree portfast Default Setting Spanning-tree portfastSpanning-tree link-type Spanning-treeedge-port4-221Spanning-tree mst cost AutoSpanning-tree mst port-priority Spanning-tree mst port-priority4-225Port-channel channel-idRange Command Mode Spanning-tree protocol-migrationSyntax Spanning-tree protocol-migration interface Show spanning-tree Syntax Show spanning-tree interface mst instanceid228 Show spanning-tree mst configuration 229Editing Vlan Groups Vlan Commands57 Vlan Commands Vlan databaseBy default only Vlan 1 exists and is active VlanConfiguring Vlan Interfaces Vlan Database Configuration59 Configuring Vlan Interfaces Interface vlan Syntax Interface vlan vlan-idShutdown Switchport mode Syntax Switchport mode trunk hybrid no switchport modeAll ports are in hybrid mode with the Pvid set to Vlan Switchport acceptable-frame-types All frame typesSwitchport ingress-filtering Syntax No switchport ingress-filtering Default SettingSwitchport native vlan 237Switchport allowed vlan 238Switchport forbidden vlan 239No VLANs are included in the forbidden list Show vlan 240Displaying Vlan Information 60 Displaying Vlan InformationFollowing example shows how to display information for Vlan 61 Private Vlan Commands241 242 243 Private-vlan244 Private-vlan associationNo private-vlan primary-vlan-idassociation Switchport mode private-vlan 245Normal Vlan Switchport private-vlan host-association Switchport private-vlan mapping246 247 Show vlan private-vlanSyntax Show vlan private-vlan community primary Gvrp and Bridge Extension Commands 62 Gvrp and Bridge Extension Commands248 Bridge-ext gvrp Syntax No bridge-ext gvrp Default Setting249 Show bridge-extSyntax No switchport gvrp Default Setting Switchport gvrpShow gvrp configuration Syntax Show gvrp configuration interfaceGarp timer Shows both global and interface-specific configuration251 Shows all Garp timers Show garp timerSyntax Show garp timer interface 252Priority Commands 63 Priority Commands253 64 Priority Commands Layer Priority Commands LayerQueue mode Syntax Queue mode strict wrr no queue mode255 Queue bandwidthSwitchport priority default 256257 Queue cos-map65 Default CoS Priority Levels 258259 Show queue modeThis command shows the current queue mode Show queue bandwidth260 Priority Commands Layer 366 Priority Commands Layer 3 Show queue cos-mapSyntax No map ip port Default Setting 261Syntax No map ip precedence Default Setting 262List below shows the default priority mapping 26367 Mapping IP Precedence to CoS Values Syntax No map ip dscp Default Setting 264265 68 Mapping IP Dscp to CoS ValuesShow map ip port This command shows the IP port priority map266 Syntax Show map ip port interfaceShow map ip precedence This command shows the IP precedence priority map267 Syntax Show map ip precedence interfaceShow map ip dscp This command shows the IP Dscp priority map268 Syntax Show map ip dscp interface69 Multicast Filtering Commands Multicast Filtering CommandsIgmp Snooping Commands 70 Igmp Snooping Commands270 Syntax No ip igmp snooping Default SettingFollowing example enables Igmp snooping Ip igmp snoopingIp igmp snooping version Following configures the switch to use Igmp Version271 Igmp Version272 Show ip igmp snoopingShow mac-address-table multicast 273 Igmp Query Commands Layer71 Igmp Query Commands Layer Ip igmp snooping querier274 Ip igmp snooping query-countTimes Following shows how to configure the query count to 275Ip igmp snooping query-interval Seconds The report delay advertised in Igmp queries. Range 276Ip igmp snooping query-max-response-time Switch must use IGMPv2 for this command to take effect 277Ip igmp snooping router-port-expire-time 278 Static Multicast Routing Commands72 Static Multicast Routing Commands Ip igmp snooping vlan mrouterShow ip igmp snooping mrouter Displays multicast router ports for all configured VLANs279 Syntax Show ip igmp snooping mrouter vlan vlan-id280 IP Interface Commands73 IP Interface Command Syntax Ip addressInterface Configuration Vlan 281282 Ip default-gatewaySyntax Ip default-gateway gateway no ip default-gateway Ip dhcp restart283 Show ip interfaceShow ip redirects This command has no default for the host284 Ping285 DNS Commands 74 DNS Commands286 No static entries 287Ip host This example maps two address to a host nameIp domain-name 288Clear host Syntax Clear host name289 Ip domain-listSyntax No ip domain-list name 290 Ip name-serverIp domain-name4-288 Ip domain-lookup Syntax No ip domain-lookup Default Setting291 Ip domain-name4-288 ip domain-lookup4-291292 Show hostsIp domain-name4-288 ip name-server4-290 293 This command displays the configuration of the DNS serverThis command displays entries in the DNS cache Show dnsClear dns cache This command clears all entries in the DNS cache294 75 Show DNS Output DescriptionDhcp Client Port Configuration AuthenticationAccess Control Lists PoEPort Trunking Class of ServiceAdditional Features Spanning Tree ProtocolStandards SNMPv3Management Information Bases Problems Accessing the Management Interface Table B-1 Troubleshooting ChartSymptom Action Cannot access Using System Logs Troubleshooting Glossary-1 Glossary-2 Glossary-3 Glossary-4 Glossary-5 Glossary-6 Glossary-7 Glossary-8 Virtual LAN VlanXModem Index Index-1Index-2 IgmpIndex-3 Index-4 Page For Technical SUPPORT, Call