Manuals / SMC Networks / Computer Equipment / Switch

SMC Networks SMC8150L2 manual Xiv

Models: SMC8150L2

1 502

Download 502 pages 43.85 Kb

Page 18

Contents

xiv

Image 18

SMC Networks SMC8150L2 manual Xiv

Contents

Management Guide Page TigerSwitch 10/100/1000 Management Guide Page Contents Page Iii Page Command Line Interface Page Vii Viii Contents Page Contents Xii Glossary Index Appendix a Software SpecificationsAppendix B Troubleshooting XiiiXiv Tables Xvi Xvii Xviii Figures XixFigures Xxi Xxii Key Features Key FeaturesFeature Description Description of Software Features IntroductionDescription of Software Features Introduction Description of Software Features System Defaults System DefaultsFunction Parameter Default System Defaults Function Parameter Client EnabledSntp Connecting to the Switch Configuration OptionsInitial Configuration Required ConnectionsBasic Configuration Remote ConnectionsConsole Connection Setting Passwords Setting an IP AddressManual Configuration Dynamic Configuration Enabling Snmp Management Access Trap Receivers Saving Configuration Settings Configuring Access for Snmp Version 3 ClientsManaging System Files Initial Configuration Configuring the Switch Using the Web InterfaceNavigating the Web Browser Interface HomeButton Configuration Options ActionPanel Display Revert Apply HelpMain Menu Main Menu DescriptionSystem System Information Configuration Allows ports to dynamically join trunks ACLSTA 116Current Table Class-of-service value122 131Configuration Settings Query Igmp Filter ConfigurationConfiguration Settings Igmp Filter/Throttling Trunk 152Cache Dhcp Snooping 186 Configuration183 185Displaying System Information Field AttributesMain Board Displaying Switch Hardware/Software VersionsCLI Specify the hostname, location and contact information Management SoftwareWeb Click System, Switch Information Switch InformationBridge Extension Configuration Displaying Bridge Extension CapabilitiesSetting the Switch’s IP Address CLI Enter the following commandCommand Attributes Manual IP Configuration Using DHCP/BOOTP Dhcp IP ConfigurationEnabling Jumbo Frames Managing FirmwareDownloading System Software from a Server Copy FirmwareSaving or Restoring Configuration Settings 11 Deleting FilesDownloading Configuration Settings from a Server 12 Downloading Configuration Settings for StartupConsole Port Settings 13 Setting the Startup Configuration Settings14 Console Port Settings Telnet Settings 15 Enabling Telnet Configuring Event Logging Displaying Log MessagesCLI This example shows the event message stored in RAM System Log ConfigurationError resource exhausted Logging LevelsRemote Log Configuration 17 System LogsSimple Mail Transfer Protocol 18 Remote Logs19 Enabling and Configuring Smtp Resetting the System Renumbering the SystemSetting the System Clock Configuring SntpSetting the Time Zone 23 Setting the System ClockSetting Community Access Strings Access ModeSimple Network Management Protocol 24 Configuring Snmp Community Strings Specifying Trap Managers and Trap Types25 Configuring IP Trap Managers Enabling Snmp Agent StatusConfiguring SNMPv3 Management Access Setting the Local Engine IDCLI This example sets an SNMPv3 engine ID Configuring SNMPv3 Users Specifying a Remote Engine IDCLI This example specifies a remote SNMPv3 engine ID Configuring the Switch 29 Configuring SNMPv3 Users Configuring Remote SNMPv3 Users 30 Configuring Remote SNMPv3 UsersSupported Notification Messages Configuring SNMPv3 GroupsTopology Change Timer immediately Subsequent to its electionSNMPv2 Traps Rmon EventsMode PethPsePortPower 6.1.4.1.202.20.68.2.1.0.1 Private Traps SwPowerStatus 6.1.4.1.202.20.68.2.1.0.1PD Powered Device. This notification is ChangeTrap SwIpFilterRejectTrap 6.1.4.1.202.20.68.2.1.0.131 Configuring SNMPv3 Groups Setting SNMPv3 Views 32 Configuring SNMPv3 ViewsUser Authentication Configuring User Accounts33 Access Levels Configuring Local/Remote Logon Authentication Command UsageRadius Settings Tacacs Settings34 Authentication Settings User Authentication Configuring Https Https System Support Web Browser Operating SystemReplacing the Default Secure-site Certificate Configuring the Secure Shell User Authentication Configuring the SSH Server SSH server includes basic settings for authenticationGenerating the Host Key Pair 37 SSH Host-Key Settings Configuring Port Security Configuring 802.1X Port Authentication 38 Configuring Port SecurityDisplaying 802.1X Global Settings 802.1X protocol provides client authenticationCLI This example enables 802.1X globally for the switch Configuring 802.1X Global SettingsCLI This example shows the default global setting for Web Click Security, 802.1X, InformationConfiguring Port Settings for Authorized41 802.1X Port Configuration Consoleconfig#interface ethernet 1/2 Displaying 802.1X Statistics 802.1X StatisticsParameter Description Access Control Lists Configuring Access Control ListsCLI This example displays the 802.1X statistics for port Setting the ACL Name and Type CLI This example creates a standard IP ACL named davidConfiguring a Standard IP ACL Configuring an Extended IP ACLConfiguring the Switch 45 Configuring Extended IP ACLs Configuring a MAC ACL Binding a Port to an Access Control List This switch supports ACLs for ingress filtering onlyFiltering IP Addresses for Management Access 47 Configuring ACL Port Binding48 Creating an IP Filter List Displaying Connection Status Port ConfigurationCLI This example allows Snmp access for a specific client Field Attributes WebConfiguration Web Click Port, Port Information or Trunk InformationBasic Information Configuring Interface Connections Current Status50 Port/Trunk Configuration Creating Trunk Groups Statically Configuring a Trunk 51 Configuring Static TrunksEnabling Lacp on Selected Ports 13152 Lacp Trunk Configuration Configuring Lacp Parameters Dynamically Creating a Port Channel53 Lacp Port Configuration Lacp Port Counters Displaying Lacp Port CountersYou can display statistics for Lacp protocol messages Field Description54 Lacp Port Counters Information CLI The following example displays Lacp countersDisplaying Lacp Settings and Status for the Local Side Lacp Internal Configuration Information55 Lacp Port Internal Information Displaying Lacp Settings and Status for the Remote Side Lacp Neighbor Configuration Information Field DescriptionSetting Broadcast Storm Thresholds 57 Port Broadcast Control Configuring Port Mirroring 58 Mirror Port ConfigurationConfiguring Rate Limits Rate Limit ConfigurationShowing Port Statistics 10 Port Statistics Etherlike StatisticsResources Jabbers Or alignment error Received BytesRmon Statistics Drop Events Formed Oversize Frames60 Port Statistics Address Table Settings Setting Static AddressesCLI This example shows statistics for port 61 Configuring a Static Address Table Displaying the Address Table62 Configuring a Dynamic Address Table Spanning Tree Algorithm Configuration Changing the Aging TimeCLI This example sets the aging time to 300 seconds Spanning Tree Algorithm Configuration 104 Displaying Global Settings 64 Displaying Spanning Tree Information Configuring Global Settings Global settings apply to the entire switchBasic Configuration of Global Settings Root Device ConfigurationConfiguration Settings for Rstp Configuration Settings for Mstp65 Configuring Spanning Tree Displaying Interface Settings 112 66 Displaying Spanning Tree Port Information CLI This example shows the STA attributes for portConfiguring Interface Settings 67 Configuring Spanning Tree per Port CLI This example sets STA attributes for portConfiguring Multiple Spanning Trees 68 Configuring Multiple Spanning Trees Displaying Interface Settings for Mstp MST Instance ID Instance identifier to configure. Default69 Displaying Mstp Interface Settings Configuring Interface Settings for Mstp 121 Vlan Configuration Ieee 802.1Q VLANsCLI This example sets the Mstp attributes for port Assigning Ports to VLANs 124 Enabling or Disabling Gvrp Global Setting CLI This example enables Gvrp for the switchForwarding Tagged/Untagged Frames Command Attributes Web Displaying Basic Vlan InformationDisplaying Current VLANs 73 Displaying Current VLANs Command Attributes CLI Creating VLANs 175Adding Static Members to VLANs Vlan Index CLI This example creates a new Vlan130 75 Configuring a Vlan Static Table Adding Static Members to VLANs Port IndexConfiguring Vlan Behavior for Interfaces Configuring Ieee 802.1Q Tunneling 77 Configuring VLANs per PortLayer 2 Flow for Packets Coming into a Tunnel Access Port Layer 2 Flow for Packets Coming into a Tunnel Uplink Port Configuration Limitations for QinQ General Configuration Guidelines for QinQEnabling QinQ Tunneling on the Switch 78 802.1Q Tunnel StatusCLI This example sets the switch to operate in QinQ mode Adding an Interface to a QinQ Tunnel79 Tunnel Port Configuration 45-1 Configuring Private VLANs CLI This example enables private VLANsEnabling Private VLANs Configuring Uplink and Downlink Ports Protocol Vlan Group ConfigurationProtocol VLANs Configuring Protocol Vlan Interfaces 82 Protocol Vlan ConfigurationClass of Service Configuration Layer 2 Queue SettingsSetting the Default Priority for Interfaces Mapping CoS Values to Egress Queues Port Priority ConfigurationCLI This example assigns a default priority of 5 to port 11 Mapping CoS Values to Egress QueuesBackground 12 CoS Priority LevelsPriority Level Traffic Type SpareSelecting the Queue Mode Enabling CoSSetting the Service Weight for Traffic Classes 87 Queue ModeLayer 3/4 Priority Settings Mapping Layer 3/4 Priorities to CoS ValuesSelecting IP Precedence/DSCP Priority Mapping IP Precedence 13 Mapping IP Precedence90 Mapping IP Precedence Priority Values IP Dscp Value CoS Value Mapping Dscp Priority14 Mapping Dscp Priority Values 10, 12, 14 18, 20, 22 26, 28, 30, 32, 34 38, 40Mapping IP Port Priority 92 IP Port Priority StatusQuality of Service 93 IP Port PriorityConfiguring Quality of Service Parameters Configuring a Class MapClass map is used for matching packets to a specified class Class Configuration Match Class SettingsClass Map 94 Configuring Class Maps Policy Configuration Creating QoS PoliciesPolicy Map Policy Rule Settings Class Settings Policy Options95 Configuring Policy Maps 96 Service Policy Settings Attaching a Policy Map to Ingress QueuesMulticast Filtering Layer 2 Igmp Snooping and QueryConfiguring Igmp Snooping and Query Parameters 97 Igmp Configuration Enabling Igmp Immediate LeaveDisplaying Interfaces Attached to a Multicast Router 98 Igmp Immediate LeaveSpecifying Static Interfaces for a Multicast Router 99 Displaying Multicast Router Port InformationDisplaying Port Members of Multicast Services 100 Static Multicast Router Port ConfigurationAssigning Ports to Multicast Services 101 IP Multicast Registration TableIgmp Filtering and Throttling 102 Igmp Member Port TableEnabling Igmp Filtering and Throttling 103 Enabling Igmp Filtering and ThrottlingConfiguring Igmp Filtering and Throttling for Interfaces Configuring Igmp Filter Profiles 104 Igmp Filter and Throttling Port Configuration105 Igmp Profile Configuration Multicast Vlan Registration Configuring Global MVR Settings General Configuration Guidelines for MVR106 MVR Global Configuration Displaying MVR Interface StatusWeb Click MVR, Port or Trunk Information 107 MVR Port InformationDisplaying Port Members of Multicast Groups 108 MVR Group IP InformationConfiguring MVR Interface Status MVR VlanWeb Click MVR, Port or Trunk Configuration Assigning Static Multicast Groups to InterfacesConfiguring Domain Name Service Configuring General DNS Service Parameters111 DNS General Configuration Configuring Static DNS Host to Address Entries 238112 DNS Static Host Table Displaying the DNS Cache 113 DNS CacheDhcp Snooping Dhcp Snooping Configuration Web Click Dhcp Snooping, ConfigurationEnables Dhcp snooping on the specified Vlan Dhcp Snooping Vlan ConfigurationDhcp Snooping Information Option Configuration CLI This example first enables Dhcp Snooping for VlanDhcp Snooping Port Configuration Trust Status Enables or disables port as trusted117 Dhcp Snooping Port Configuration Dhcp Snooping Binding InformationIP Source Guard Port Configuration IP Source GuardWeb Click Dhcp Snooping, Dhcp Snooping Binding Information Static IP Source Guard Binding Configuration 119 IP Source Guard Port Configuration120 Static IP Source Guard Binding Configuration Dynamic IP Source Guard Binding InformationSwitch Clustering Web Click IP Source Guard, Dynamic InformationCluster Configuration 122 Cluster Member ChoiceCluster Member Configuration Web Click Cluster, ConfigurationAdds Candidate switches to the cluster as Members Web Click Cluster, Member Configuration Displays current cluster Member switch informationCluster Member Information Cluster Candidate Information 126 Cluster Candidate InformationUsing the Command Line Interface Accessing the CLITelnet Connection Getting Help on Commands Entering CommandsCommand Completion Keywords and ArgumentsShowing Commands Understanding Command Modes Negating the Effect of CommandsUsing Command History Partial Keyword LookupExec Commands Command ModesConfiguration Commands Configuration Modes Command PromptConsoleconfig-if# 120 Command Line Processing Command Line ProcessingKeystroke Function Command Groups Command Groups DescriptionLine Commands Line Commands Function ModeLogin LineSyntax Password 0 7 password no password PasswordUsername 4-25 password No password is specifiedTimeout login response Exec-timeoutPassword-thresh Syntax Exec-timeout seconds no exec-timeoutSyntax Password-thresh threshold no password-thresh Silent-time DatabitsSyntax Silent-time seconds no silent-time Parity Syntax Databits 7 8 no databitsSyntax Parity none even odd no parity Syntax Speed bps no speed SpeedStopbits Syntax Stopbits 1Syntax Disconnect session-id DisconnectShow line Syntax Show line console vtyTo show all lines, enter this command General CommandsEnable General Commands Function ModeEnable DisableDisable Enable password LevelConfigure Show historyReload EndExit This command exits the configuration programThis example shows how to quit a CLI session QuitSystem Management Commands Device Designation CommandsPrompt Hostname User Access CommandsUser Access Commands Function Mode UsernameEnable password 10 Default Login Settings Username Access-level PasswordGuest Admin IP Filter Commands 11 IP Filter Commands Function ModeManagement Show management All addressesDefault Setting Command Mode Web Server Commands12 Web Server Commands Function Mode Ip http portIp http server Syntax No ip http server Default SettingSyntax No ip http secure-server Default Setting Ip http secure-serverIp http secure-port4-31 Copy tftp https-certificate Ip http secure-port13 Https System Support Web Browser Operating System Portnumber The UDP port used for HTTPS. RangeIp telnet port Telnet Server Commands14 Telnet Server Commands Function Mode Ip http secure-server4-3015 SSH Commands Function Mode Secure Shell CommandsSyntax No ip telnet server Default Setting Ip telnet serverCopy tftp public-key Syntax No ip ssh server Default Setting Ip ssh serverExec-timeout4-13 show ip ssh Ip ssh timeoutSyntax Ip ssh timeout seconds no ip ssh timeout Ip ssh crypto host-key generate 4-38 show sshKey-size- The size of server key. Range 512-896 bits Ip ssh authentication-retriesIp ssh server-key size BitsSyntax Delete public-key username dsa rsa Delete public-keyIp ssh crypto host-key generate Syntax Ip ssh crypto host-key generate dsa rsaSyntax Ip ssh crypto zeroize dsa rsa Ip ssh crypto zeroizeIp ssh save host-key Syntax Ip ssh save host-key dsa rsaShow ssh This command displays the current SSH server connectionsShow ip ssh Ip ssh crypto host-key generateShow public-key TerminologySyntax Show public-key user username host Console#show public-key host Host Syntax No logging on Default Setting Event Logging Commands17 Event Logging Commands Function Mode Logging onFlash errors level 3 RAM warnings level 6 Logging history18 Logging Levels Syntax No logging host hostipaddress Logging hostLogging facility Hostipaddress The IP address of a syslog serverSyntax Logging trap level no logging trap Logging trapClear logging Syntax Clear logging flash ramShow logging Syntax Show logging flash ram sendmail trap19 show logging flash/ram display description Syntax Show log flash ram login tail Facility commandLogging trap command Show logLogging sendmail host Smtp Alert Commands21 Smtp Alert Commands Function Mode Following example shows sample messages stored in RAMLogging sendmail level Syntax Logging sendmail level levelSyntax No logging sendmail source-email email-address Logging sendmail source-emailLogging sendmail destination-email This example will set the source email john@acme.comSyntax No logging sendmail Default Setting Logging sendmailShow logging sendmail Syntax No sntp client Default Setting Time Commands22 Time Commands Function Mode Sntp clientSyntax Sntp server ip1 ip2 ip3 Sntp serverSntp server 4-54 sntp poll 4-55 show sntp Sntp client 4-53 sntp poll 4-55 show sntpSyntax Sntp poll seconds no sntp poll Sntp pollShow sntp Sntp clientSyntax Clock timezoneCalendar set Calendar set hour min sec day month year month day yearThis command displays the system clock System Status CommandsShow startup-config 23 System Status Commands Function ModeCommand Line Interface Show running-config Show running-config4-59Show startup-config4-57 This command displays system information Show systemShow users Show version Jumbo frame Enables support for jumbo frames Frame Size Commands24 Frame Size Commands Function Mode Syntax No jumbo frame Default SettingCopy Flash/File Commands25 Flash/File Commands Function Mode CopyFlash/File Commands Following example shows how to download a configuration file Delete unit filename This command deletes a file or imageDelete Dir Delete public-key4-3826 File Directory Information Syntax Dir unit boot-rom config opcode filenameDir Column Heading DescriptionSyntax whichboot unit WhichbootBoot system Syntax Boot system unit boot-romconfig opcode filenameDir 4-68 whichboot Authentication CommandsAuthentication Sequence 27 Authentication Commands Command Group FunctionAuthentication login Username for setting the local user names and passwordsLocal Authentication enable 29 Radius Client Commands Function Mode Show radius-server Shows the current Radius settingsRadius Client Radius-server host Default Setting Auth-portRetransmit Command Mode Radius-server portRadius-server key Radius-server retransmitSyntax Radius-server key keystring no radius-server key Radius-server timeout Show radius-serverTacacs-server host 30 Tacacs Commands Function ModeTACACS+ Client Tacacs-server portTacacs-server key Show tacacs-serverSyntax Tacacs-server key keystring no tacacs-server key Status Disabled Action None Maximum Addresses Port Security Commands31 Port Security Commands Function Mode Interface Configuration EthernetCommand Usage Syntax No dotx system-auth-control Default Setting 802.1X Port Authentication32 802.1X Port Authentication Command Function Mode Dot1x system-auth-controlDot1x max-req Dot1x defaultDefault Command Mode Dot1x port-controlDot1x operation-mode Force-authorizedSingle-host Dot1x re-authenticate Dot1x re-authenticationDot1x timeout quiet-period Dot1x timeout re-authperiod Dot1x timeout tx-periodShow dot1x Syntax Show dot1x statistics interface interfaceStatistics Displays dot1x status for each port State Current state including initialize, reauthenticate Authenticator State MachineReauthentication State Machine Backend State MachineCommand Line Interface Access Control List Commands Access Control Lists33 Access Control Lists Command Groups Function Syntax No access-list ip standard extended aclname Access-list ip34 IP ACLs Command Function Mode IP ACLsSyntax No permit deny any source bitmask host source Permit, deny Ip access-group4-93 show ip access-list4-93Access-list ip Standard ACLAny destination address-bitmask host destination Source-port sport end destination-port dport endExtended ACL Syntax Show ip access-list standard extended aclname Show ip access-listIp access-group Syntax No ip access-group aclnameShow ip access-group Show ip access-list4-93This command shows the ports assigned to IP ACLs Syntax No access-list mac aclname Access-list mac35 MAC ACL Commands Function Mode Permit, deny Mac access-group4-98 show mac access-list4-97Permit, deny MAC ACL Syntax Show mac access-list aclname Show mac access-listThis command displays the rules for configured MAC ACLs Permit, deny Mac access-group4-98Syntax Mac access-group aclname Mac access-groupShow mac access-group Show mac access-list4-9736 ACL Information Command Function Mode Show access-listShow access-group ACL InformationSnmp Commands 37 Snmp Commands Function ModeSyntax No snmp-server Default Setting Snmp-serverShow snmp Snmp-server community Syntax Snmp-server contact string no snmp-server contact Snmp-server contactSnmp-server location Syntax Snmp-server location text no snmp-server locationSnmp-server host Host Address None Notification Type TrapsSnmp Version UDP Port Snmp-server enable traps Snmp-server enable trapsIssue authentication and link-up-down traps Snmp-server engine-id This command shows the Snmp engine ID This example shows the default engine IDShow snmp engine-id Examples Defaultview includes access to the entire MIB treeSnmp-server view This view includes MIB-2Snmp-server group This command shows information on the Snmp viewsShow snmp view 39 show snmp view display descriptionConsoleconfig#snmp-server group r&d v3 auth write daily Show snmp group Snmp-server user 40 show snmp group display description114 This command shows information on Snmp users Show snmp user41 show snmp user display description Interface Interface Commands42 Interface Commands Function Mode Port-channel channel-idRangeDescription Speed-duplexSyntax Description string no description Syntax No negotiation Default Setting NegotiationNegotiation 4-118 capabilities Following example configures port 11 to use autonegotiation CapabilitiesCapabilities 4-119speed-duplex4-117 Syntax No flowcontrol Default Setting FlowcontrolNegotiation 4-118speed-duplex4-117 flowcontrol Syntax No shutdown Default Setting ShutdownClear counters Switchport broadcast packet-ratePort-channel channel-idRange Default Setting Syntax Clear counters interfaceFollowing example clears statistics on port This command displays the status for an interfaceShow interfaces status Syntax Show interfaces status interfaceSyntax Show interfaces counters interface This command displays interface statisticsShow interfaces counters Shows the counters for all interfacesShow interfaces switchport Syntax Show interfaces switchport interfaceShows all interfaces 43 Interfaces Switchport Statistics Port monitor Mirror Port Commands44 Mirror Port Commands Function Mode Interface ethernet unit/port source portShow port monitor This command displays mirror informationFollowing shows mirroring configured from port 6 to port Syntax Show port monitor interfaceRate Limit Commands Rate-limitGigabit Ethernet 1000 Mbps 135 Link Aggregation Commands46 Link Aggregation Commands 123General Guidelines Channel-groupGuidelines for Creating Trunks Dynamically Creating a Port ChannelSyntax No lacp Default Setting LacpFollowing example creates trunk 1 and then adds port Lacp system-priority 32768Lacp admin-keyEthernet Interface Lacp admin-key Port Channel Interface Configuration Port ChannelThis command displays Lacp information Lacp port-priorityShow lacp Type Port Channel all47 show lacp counters display description LACPDUs Illegal Pkts48 show lacp internal display description 49 show lacp neighbors display description 50 show lacp sysid display descriptionMac-address-table static Address Table Commands51 Address Table Commands Function Mode ActionClear mac-address-table dynamic Show mac-address-tableMac-address- MAC address Mask Bits to match in the address Mac-address-table aging-time Sort Sort by address, vlan or interfaceShow mac-address-table aging-time Spanning Tree Commands 52 Spanning Tree Commands Function ModeSpanning tree is enabled Spanning-tree modeSyntax No spanning-tree Default Setting Spanning-treeSpanning-tree forward-time Spanning-tree hello-time Spanning-tree max-age Spanning-tree prioritySpanning-tree pathcost method Long methodSpanning-tree transmission-limit Spanning-tree mst-configurationThis command limits the maximum transmission rate for BPDUs Count The transmission limit in seconds. RangeMst priority MST ConfigurationMst vlan No mst instanceid vlan vlan-rangeSyntax Name name Switch’s MAC addressName Name Name of the spanning treeSyntax Revision number RevisionMax-hops Max-hopshop-numberThis example disables the spanning tree algorithm for port Spanning-tree spanning-disabledSyntax No spanning-tree spanning-disabled Default Setting Spanning-tree costSpanning-tree port-priority Priority The priority for a port. Range 0-240, in stepsSpanning-tree edge-port Syntax No spanning-tree edge-port Default SettingSyntax No spanning-tree portfast Default Setting Spanning-tree portfastSpanning-tree link-type Spanning-treeedge-port4-156Auto Spanning-tree mst cost Spanning-tree mst port-priority Spanning-tree mst port-priority4-159Show spanning-tree Port-channel channel-idRange Command ModeSpanning-tree protocol-migration Syntax Spanning-tree protocol-migration interfaceMstp Show spanning-tree mst configuration 53 VLANs Command Groups Function Vlan CommandsGvrp and Bridge Extension Commands 54 Gvrp and Bridge Extension Commands Function ModeSyntax No bridge-ext gvrp Default Setting Bridge-ext gvrpShow bridge-ext Syntax No switchport gvrp Default Setting Switchport gvrpShow gvrp configuration Syntax Show gvrp configuration interfaceGarp timer Show garp timerEditing Vlan Groups Syntax Show garp timer interface55 Editing Vlan Groups Command Function Mode Vlan databaseVlan By default only Vlan 1 exists and is activeVlan Database Configuration Show vlanInterface vlan Configuring Vlan Interfaces56 Configuring Vlan Interfaces Command Function Mode Interface vlanSwitchport mode All ports are in hybrid mode with the Pvid set to VlanSwitchport acceptable-frame-types4-171 Switchport mode Switchport acceptable-frame-typesSwitchport ingress-filtering All frame typesSwitchport native vlan Switchport allowed vlan Switchport forbidden vlan No VLANs are included in the forbidden list57 Show Vlan Commands Function Mode Displaying Vlan InformationShow vlan General Configuration Guidelines for QinQ Configuring Ieee 802.1Q Tunneling58 Ieee 802.1Q Tunneling Commands Function Mode Dot1q-tunnel system-tunnel-controlSwitchport dot1q-tunnel mode Show dot1q-tunnel4-178 Show interfaces switchportThis command displays information about QinQ tunnel ports Switchport dot1q-tunnel tpidRelated Commands Show dot1q-tunnelSwitchport dot1q-tunnel mode 59 Private Vlan Commands Function ModePvlan This command displays the configured private Vlan Show pvlanNo private VLANs are defined Configuring Protocol-based VLANs Protocol-vlan protocol-group Configuring Groups60 Protocol-based Vlan Commands Function Mode Protocol-vlan protocol-group Configuring Interfaces No protocol groups are configuredNo protocol groups are mapped for any interface Show protocol-vlan protocol-group Show interfaces protocol-vlan protocol-groupSyntax Show protocol-vlan protocol-group group-id 61 Priority Commands Command Groups Function Priority CommandsPriority Commands Layer 62 Priority Commands Layer Function ModeQueue mode Switchport priority defaultSyntax Queue mode strict wrr no queue mode Queue bandwidth weight1...weight4 no queue bandwidth Weights 1, 2, 4, 8 are assigned to queues 0-3 respectivelyQueue bandwidth 63 Default CoS Values to Egress Queues Queue cos-mapQueue cos-mapqueueid cos1 ... cosn no queue cos-map This command shows the current queue mode Show queue modeFollowing example shows how to change the CoS assignments Show queue bandwidth64 Priority Commands Layer 3 Function Mode Priority Commands Layer 3This command shows the class of service priority map Show queue cos-mapSyntax No map ip dscp Default Setting Map ip dscp dscp-value cos cos-value no map ip dscp65 IP Dscp to CoS Vales IP Dscp Value CoS Value This command shows the IP Dscp priority map Show map ip dscpSyntax Show map ip dscp interface Quality of Service Commands 66 Quality of Service Commands Function Mode 198 Service-policy199 Input of a particular interface Show class-map Syntax No class-map class-map-namematch-any Class-mapMatch Show class mapClass Map Configuration Policy-mapNo policy-mappolicy-map-name Policy Map Configuration ClassNo class class-map-name Policy Map Class Configuration SetPolice Syntax No police rate-kbpsburst-byteexceed-action drop setDrop out-of-profile packets Show class-map Service-policySyntax No service-policy input policy-map-name Syntax Show class-map class-map-nameShow policy-mappolicy-map-name class class-map-name Show policy-mapShow policy-map interface Displays all policy maps and all classes67 Multicast Filtering Commands Command Groups Function Multicast Filtering CommandsIgmp Snooping Commands 68 Igmp Snooping Commands Function ModeIp igmp snooping Syntax No ip igmp snooping Default SettingFollowing example enables Igmp snooping Ip igmp snooping vlan staticIp igmp snooping version Following configures the switch to use Igmp VersionSyntax No ip igmp snooping leave-proxy Default Setting Ip igmp snooping leave-proxyThis command shows the Igmp snooping configuration Syntax No ip igmp snooping immediate-leave Default SettingInterface Configuration Vlan Ip igmp snooping immediate-leaveFollowing shows the current Igmp snooping configuration This command shows known multicast addressesShow mac-address-table multicast Syntax No ip igmp snooping querier Default Setting Igmp Query Commands Layer69 Igmp Query Commands Layer Function Mode Ip igmp snooping querierTimes Following shows how to configure the query count toIp igmp snooping query-interval Ip igmp snooping query-max-response-time4-208Seconds The report delay advertised in Igmp queries. Range Ip igmp snooping query-max-response-timeIp igmp snooping router-port-expire-time Ip igmp snooping vlan mrouter Static Multicast Routing Commands70 Static Multicast Routing Commands Function Mode Syntax No ip igmp snooping vlan vlan-idmrouter interfaceSyntax Show ip igmp snooping mrouter vlan vlan-id Displays multicast router ports for all configured VLANsShow ip igmp snooping mrouter Multicast router port types displayed include StaticSyntax No ip igmp filter Default Setting Igmp Filtering and Throttling Commands71 Igmp Filtering and Throttling Commands Function Mode 213Permit, deny Syntax Permit deny Default SettingIp igmp profile Syntax No ip igmp profile profile-numberRange No range low-ip-address high-ip-addressSyntax No ip igmp filter profile-number Ip igmp max-groups Syntax Ip igmp max-groups number No ip igmp max-groupsSyntax Ip igmp max-groups action replace deny Ip igmp max-groups actionShow ip igmp filter Syntax Show ip igmp filter interface interfaceSyntax Show ip igmp profile profile-number Show ip igmp profileShow ip igmp throttle interface Syntax Show ip igmp throttle interface interfacePort Port number. Range Port-channelchannel-id Range Multicast Vlan Registration Commands72 Multicast Vlan Registration Commands Function Mode 219Command Line Interface Mvr Global Configuration No mvr group ip-address count vlan vlan-idMulticast Filtering Commands Mvr Interface Configuration 220 Show mvr Syntax Show mvr interface interface members ip-address73 show mvr display description 74 show mvr interface display description 75 show mvr members display descriptionMembers Ip address IP Interface Commands76 IP Interface Commands Function Mode 224Gateway IP address of the default gateway Ip default-gatewaySyntax Ip default-gateway gateway no ip default-gateway Following example defines a default gateway for this deviceIp dhcp restart This command submits a Bootp or Dhcp client requestThis command displays the settings of an IP interface Show ip interfaceShow ip redirects Ip default-gateway4-224This command has no default for the host PingIP Source Guard Commands 77 IP Source Guard Commands Function ModeIp source-guard Syntax Ip source-guard sip sip-macno ip source-guard Ip source-guard binding This example enables IP source guard on portNo configured entries No ip source-guard binding mac-addressvlan vlan-idShow ip source-guard binding This command shows the source guard binding tableShow ip source-guard Ip source-guard4-227 ip dhcp snooping Ip dhcp snooping vlanSyntax No ip dhcp snooping Default Setting Dhcp Snooping Commands78 Dhcp Snooping Commands Function Mode Ip dhcp snooping232 Ip dhcp snooping vlan This example enables Dhcp snooping globally for the switchThis example enables Dhcp snooping for Vlan Ip dhcp snooping vlan 4-233 ip dhcp snooping trustSyntax No ip dhcp snooping trust Default Setting Ip dhcp snooping trustThis example enables MAC address verification Ip dhcp snooping verify mac-addressIp dhcp snooping information option This example enables the Dhcp Snooping Information Option Ip dhcp snooping information policyReplace Show ip dhcp snooping Switch Cluster Commands79 Switch Cluster Commands Function Mode Show ip dhcp snooping bindingSyntax No cluster Default Setting ClusterDisplays current cluster Candidates in the network 242 Cluster ip-pool Cluster commanderSyntax No cluster commander Default Setting Syntax Cluster ip-pool ip-addressno cluster ip-poolMember-id- The ID number of the Member switch. Range RcommandSyntax Rcommand id member-id Cluster memberShow cluster This command shows the switch clustering configurationThis command shows the current switch cluster members Show cluster membersShow cluster candidates Appendix a Software Specifications Software FeaturesStandards Management FeaturesGroups 1, 2, 3, 9 Statistics, History, Alarm, Event Igmp RFC 1112 IGMPv2 RFC 2236 RADIUS+ RFCManagement Information Bases Management Information Bases aSoftware Specifications Table B-1 Troubleshooting Chart Symptom ActionUsing System Logs Class of Service CoS Access Control List ACLBoot Protocol Bootp Differentiated Services Code Point Service DscpGeneric Multicast Registration Protocol Gmrp Garp Vlan Registration Protocol GvrpGeneric Attribute Registration Protocol Garp Group Attribute Registration Protocol GarpInternet Group Management Protocol Igmp Igmp SnoopingIgmp Query In-Band ManagementRemote Authentication Dial-in User Service Radius Multicast SwitchingPort Authentication Network Time Protocol NTPSimple Network Time Protocol Sntp Secure Shell SSHSimple Network Management Protocol Snmp Spanning Tree Algorithm STAVirtual LAN Vlan XModemIndex NumericsGateway, default 3-14,4-224 IndexIndex-3 Index-4 Page Technical Support