Console#show public-key host Host | SMC Networks SMC8150L2 guide

4 Command Line Interface

Example

Console#show public-key host Host:

RSA:

1024 35

1568499540186766925933394677505461732531367489083654725415020245593199868

5443583616519999233297817660658309586108259132128902337654680172627257141

3428762941301196195566782595664104869574278881462065194174677298486546861

5717739390164779355942303577413098022737087794545240839717526463580581767

16709574804776117

DSA:

ssh-dss AAAB3NzaC1kc3MAAACBAPWKZTPbsRIB8ydEXcxM3dyV/yrDbKStIlnzD/Dg0h2Hxc YV44sXZ2JXhamLK6P8bvuiyacWbUW/a4PAtp1KMSdqsKeh3hKoA3vRRSy1N2XFfAKxl5fwFfv JlPdOkFgzLGMinvSNYQwiQXbKTBH0Z4mUZpE85PWxDZMaCNBPjBrRAAAAFQChb4vsdfQGNIjw bvwrNLaQ77isiwAAAIEAsy5YWDC99ebYHNRj5kh47wY4i8cZvH+/p9cnrfwFTMU01VFDly3IR 2G395NLy5Qd7ZDxfA9mCOfT/yyEfbobMJZi8oGCstSNOxrZZVnMqWrTYfdrKX7YKBw/Kjw6Bm iFq7O+jAhf1Dg45loAc27s6TLdtny1wRq/ow2eTCD5nekAAACBAJ8rMccXTxHLFAczWS7EjOy DbsloBfPuSAb4oAsyjKXKVYNLQkTLZfcFRu41bS2KV5LAwecsigF/+DjKGWtPNIQqabKgYCw2 o/dVzX4Gg+yqdTlYmGA7fHGm8ARGeiG4ssFKy4Z6DmYPXFum1Yg0fhLwuHpOSKdxT3kk475S7 w0W

Console#

4-42

Page 284

Image 284

SMC Networks SMC8150L2 manual Console#show public-key host Host

Contents

Management Guide Page TigerSwitch 10/100/1000 Management Guide Page Contents Page Iii Page Command Line Interface Page Vii Viii Contents Page Contents Xii Appendix a Software Specifications Appendix B TroubleshootingGlossary Index Xiii Xiv Tables Xvi Xvii Xviii Figures Xix Figures Xxi Xxii Feature Description Key FeaturesKey Features Description of Software Features Introduction Description of Software Features Introduction Description of Software Features Function Parameter Default System DefaultsSystem Defaults System Defaults Function Parameter Client Enabled Sntp Connecting to the Switch Configuration Options Initial Configuration Required Connections Console Connection Basic ConfigurationRemote Connections Manual Configuration Setting PasswordsSetting an IP Address Dynamic Configuration Enabling Snmp Management Access Trap Receivers Saving Configuration Settings Configuring Access for Snmp Version 3 Clients Managing System Files Initial Configuration Configuring the Switch Using the Web Interface Navigating the Web Browser Interface Home Configuration Options Action Panel DisplayButton Revert Apply Help System System Information Main MenuMain Menu Description Configuration Allows ports to dynamically join trunks ACL STA 116 Class-of-service value 122Current Table 131 Query Igmp Filter Configuration Configuration Settings Igmp Filter/Throttling TrunkConfiguration Settings 152 Dhcp Snooping 186 Configuration 183Cache 185 Displaying System Information Field Attributes Displaying Switch Hardware/Software Versions CLI Specify the hostname, location and contact informationMain Board Management Software Web Click System, Switch Information Switch Information Bridge Extension Configuration Displaying Bridge Extension Capabilities Command Attributes Setting the Switch’s IP AddressCLI Enter the following command Manual IP Configuration Using DHCP/BOOTP Dhcp IP Configuration Enabling Jumbo Frames Managing Firmware Downloading System Software from a Server Copy Firmware Saving or Restoring Configuration Settings 11 Deleting Files Downloading Configuration Settings from a Server 12 Downloading Configuration Settings for Startup Console Port Settings 13 Setting the Startup Configuration Settings 14 Console Port Settings Telnet Settings 15 Enabling Telnet Configuring Event Logging Displaying Log Messages System Log Configuration Error resource exhaustedCLI This example shows the event message stored in RAM Logging Levels Remote Log Configuration 17 System Logs Simple Mail Transfer Protocol 18 Remote Logs 19 Enabling and Configuring Smtp Resetting the System Renumbering the System Setting the System Clock Configuring Sntp Setting the Time Zone 23 Setting the System Clock Simple Network Management Protocol Setting Community Access StringsAccess Mode 24 Configuring Snmp Community Strings Specifying Trap Managers and Trap Types 25 Configuring IP Trap Managers Enabling Snmp Agent Status CLI This example sets an SNMPv3 engine ID Configuring SNMPv3 Management AccessSetting the Local Engine ID CLI This example specifies a remote SNMPv3 engine ID Configuring SNMPv3 UsersSpecifying a Remote Engine ID Configuring the Switch 29 Configuring SNMPv3 Users Configuring Remote SNMPv3 Users 30 Configuring Remote SNMPv3 Users Configuring SNMPv3 Groups Topology Change Timer immediatelySupported Notification Messages Subsequent to its election SNMPv2 Traps Rmon Events Private Traps SwPowerStatus 6.1.4.1.202.20.68.2.1.0.1 PD Powered Device. This notification isMode PethPsePortPower 6.1.4.1.202.20.68.2.1.0.1 ChangeTrap SwIpFilterRejectTrap 6.1.4.1.202.20.68.2.1.0.1 31 Configuring SNMPv3 Groups Setting SNMPv3 Views 32 Configuring SNMPv3 Views User Authentication Configuring User Accounts 33 Access Levels Configuring Local/Remote Logon Authentication Command Usage Radius Settings Tacacs Settings 34 Authentication Settings User Authentication Configuring Https Https System Support Web Browser Operating System Replacing the Default Secure-site Certificate Configuring the Secure Shell User Authentication Configuring the SSH Server SSH server includes basic settings for authentication Generating the Host Key Pair 37 SSH Host-Key Settings Configuring Port Security Configuring 802.1X Port Authentication 38 Configuring Port Security Displaying 802.1X Global Settings 802.1X protocol provides client authentication Configuring 802.1X Global Settings CLI This example shows the default global setting forCLI This example enables 802.1X globally for the switch Web Click Security, 802.1X, Information Configuring Port Settings for Authorized 41 802.1X Port Configuration Consoleconfig#interface ethernet 1/2 Parameter Description Displaying 802.1X Statistics802.1X Statistics CLI This example displays the 802.1X statistics for port Access Control ListsConfiguring Access Control Lists Setting the ACL Name and Type CLI This example creates a standard IP ACL named david Configuring a Standard IP ACL Configuring an Extended IP ACL Configuring the Switch 45 Configuring Extended IP ACLs Configuring a MAC ACL Binding a Port to an Access Control List This switch supports ACLs for ingress filtering only Filtering IP Addresses for Management Access 47 Configuring ACL Port Binding 48 Creating an IP Filter List Port Configuration CLI This example allows Snmp access for a specific clientDisplaying Connection Status Field Attributes Web Basic Information ConfigurationWeb Click Port, Port Information or Trunk Information Configuring Interface Connections Current Status 50 Port/Trunk Configuration Creating Trunk Groups Statically Configuring a Trunk 51 Configuring Static Trunks Enabling Lacp on Selected Ports 131 52 Lacp Trunk Configuration Configuring Lacp Parameters Dynamically Creating a Port Channel 53 Lacp Port Configuration Displaying Lacp Port Counters You can display statistics for Lacp protocol messagesLacp Port Counters Field Description 54 Lacp Port Counters Information CLI The following example displays Lacp counters Displaying Lacp Settings and Status for the Local Side Lacp Internal Configuration Information 55 Lacp Port Internal Information Displaying Lacp Settings and Status for the Remote Side Lacp Neighbor Configuration Information Field Description Setting Broadcast Storm Thresholds 57 Port Broadcast Control Configuring Port Mirroring 58 Mirror Port Configuration Configuring Rate Limits Rate Limit Configuration Showing Port Statistics 10 Port Statistics Etherlike Statistics Or alignment error Received Bytes Rmon Statistics Drop EventsResources Jabbers Formed Oversize Frames 60 Port Statistics CLI This example shows statistics for port Address Table SettingsSetting Static Addresses 61 Configuring a Static Address Table Displaying the Address Table 62 Configuring a Dynamic Address Table CLI This example sets the aging time to 300 seconds Spanning Tree Algorithm ConfigurationChanging the Aging Time Spanning Tree Algorithm Configuration 104 Displaying Global Settings 64 Displaying Spanning Tree Information Configuring Global Settings Global settings apply to the entire switch Basic Configuration of Global Settings Root Device Configuration Configuration Settings for Rstp Configuration Settings for Mstp 65 Configuring Spanning Tree Displaying Interface Settings 112 66 Displaying Spanning Tree Port Information CLI This example shows the STA attributes for port Configuring Interface Settings 67 Configuring Spanning Tree per Port CLI This example sets STA attributes for port Configuring Multiple Spanning Trees 68 Configuring Multiple Spanning Trees Displaying Interface Settings for Mstp MST Instance ID Instance identifier to configure. Default 69 Displaying Mstp Interface Settings Configuring Interface Settings for Mstp 121 CLI This example sets the Mstp attributes for port Vlan ConfigurationIeee 802.1Q VLANs Assigning Ports to VLANs 124 Forwarding Tagged/Untagged Frames Enabling or Disabling Gvrp Global SettingCLI This example enables Gvrp for the switch Displaying Current VLANs Command Attributes WebDisplaying Basic Vlan Information 73 Displaying Current VLANs Command Attributes CLI Creating VLANs 175 Adding Static Members to VLANs Vlan Index CLI This example creates a new Vlan 130 75 Configuring a Vlan Static Table Adding Static Members to VLANs Port Index Configuring Vlan Behavior for Interfaces Configuring Ieee 802.1Q Tunneling 77 Configuring VLANs per Port Layer 2 Flow for Packets Coming into a Tunnel Access Port Layer 2 Flow for Packets Coming into a Tunnel Uplink Port Configuration Limitations for QinQ General Configuration Guidelines for QinQ Enabling QinQ Tunneling on the Switch 78 802.1Q Tunnel Status CLI This example sets the switch to operate in QinQ mode Adding an Interface to a QinQ Tunnel 79 Tunnel Port Configuration 45-1 Enabling Private VLANs Configuring Private VLANsCLI This example enables private VLANs Protocol VLANs Configuring Uplink and Downlink PortsProtocol Vlan Group Configuration Configuring Protocol Vlan Interfaces 82 Protocol Vlan Configuration Setting the Default Priority for Interfaces Class of Service ConfigurationLayer 2 Queue Settings Port Priority Configuration CLI This example assigns a default priority of 5 to portMapping CoS Values to Egress Queues 11 Mapping CoS Values to Egress Queues 12 CoS Priority Levels Priority Level Traffic TypeBackground Spare Selecting the Queue Mode Enabling CoS Setting the Service Weight for Traffic Classes 87 Queue Mode Selecting IP Precedence/DSCP Priority Layer 3/4 Priority SettingsMapping Layer 3/4 Priorities to CoS Values Mapping IP Precedence 13 Mapping IP Precedence 90 Mapping IP Precedence Priority Values Mapping Dscp Priority 14 Mapping Dscp Priority ValuesIP Dscp Value CoS Value 10, 12, 14 18, 20, 22 26, 28, 30, 32, 34 38, 40 Mapping IP Port Priority 92 IP Port Priority Status Quality of Service 93 IP Port Priority Class map is used for matching packets to a specified class Configuring Quality of Service ParametersConfiguring a Class Map Class Map Class ConfigurationMatch Class Settings 94 Configuring Class Maps Policy Map Policy ConfigurationCreating QoS Policies Policy Rule Settings Class Settings Policy Options 95 Configuring Policy Maps 96 Service Policy Settings Attaching a Policy Map to Ingress Queues Multicast Filtering Layer 2 Igmp Snooping and Query Configuring Igmp Snooping and Query Parameters 97 Igmp Configuration Enabling Igmp Immediate Leave Displaying Interfaces Attached to a Multicast Router 98 Igmp Immediate Leave Specifying Static Interfaces for a Multicast Router 99 Displaying Multicast Router Port Information Displaying Port Members of Multicast Services 100 Static Multicast Router Port Configuration Assigning Ports to Multicast Services 101 IP Multicast Registration Table Igmp Filtering and Throttling 102 Igmp Member Port Table Enabling Igmp Filtering and Throttling 103 Enabling Igmp Filtering and Throttling Configuring Igmp Filtering and Throttling for Interfaces Configuring Igmp Filter Profiles 104 Igmp Filter and Throttling Port Configuration 105 Igmp Profile Configuration Multicast Vlan Registration Configuring Global MVR Settings General Configuration Guidelines for MVR 106 MVR Global Configuration Displaying MVR Interface Status Web Click MVR, Port or Trunk Information 107 MVR Port Information Displaying Port Members of Multicast Groups 108 MVR Group IP Information Configuring MVR Interface Status MVR Vlan Web Click MVR, Port or Trunk Configuration Assigning Static Multicast Groups to Interfaces Configuring Domain Name Service Configuring General DNS Service Parameters 111 DNS General Configuration Configuring Static DNS Host to Address Entries 238 112 DNS Static Host Table Displaying the DNS Cache 113 DNS Cache Dhcp Snooping Dhcp Snooping Configuration Web Click Dhcp Snooping, Configuration Dhcp Snooping Vlan Configuration Dhcp Snooping Information Option ConfigurationEnables Dhcp snooping on the specified Vlan CLI This example first enables Dhcp Snooping for Vlan Dhcp Snooping Port Configuration Trust Status Enables or disables port as trusted 117 Dhcp Snooping Port Configuration Dhcp Snooping Binding Information Web Click Dhcp Snooping, Dhcp Snooping Binding Information IP Source Guard Port ConfigurationIP Source Guard Static IP Source Guard Binding Configuration 119 IP Source Guard Port Configuration 120 Static IP Source Guard Binding Configuration Dynamic IP Source Guard Binding Information Switch Clustering Web Click IP Source Guard, Dynamic Information Cluster Configuration 122 Cluster Member Choice Adds Candidate switches to the cluster as Members Cluster Member ConfigurationWeb Click Cluster, Configuration Cluster Member Information Web Click Cluster, Member ConfigurationDisplays current cluster Member switch information Cluster Candidate Information 126 Cluster Candidate Information Using the Command Line Interface Accessing the CLI Telnet Connection Entering Commands Command CompletionGetting Help on Commands Keywords and Arguments Showing Commands Negating the Effect of Commands Using Command HistoryUnderstanding Command Modes Partial Keyword Lookup Exec Commands Command Modes Consoleconfig-if# 120 Configuration CommandsConfiguration Modes Command Prompt Keystroke Function Command Line ProcessingCommand Line Processing Command Groups Command Groups Description Line Commands Line Commands Function Mode Login Line Password Username 4-25 passwordSyntax Password 0 7 password no password No password is specified Timeout login response Exec-timeout Syntax Password-thresh threshold no password-thresh Password-threshSyntax Exec-timeout seconds no exec-timeout Syntax Silent-time seconds no silent-time Silent-timeDatabits Syntax Parity none even odd no parity ParitySyntax Databits 7 8 no databits Speed StopbitsSyntax Speed bps no speed Syntax Stopbits 1 Disconnect Show lineSyntax Disconnect session-id Syntax Show line console vty General Commands EnableTo show all lines, enter this command General Commands Function Mode Disable Disable Enable passwordEnable Level Configure Show history Reload End This command exits the configuration program This example shows how to quit a CLI sessionExit Quit Prompt System Management CommandsDevice Designation Commands User Access Commands User Access Commands Function ModeHostname Username Guest Admin Enable password10 Default Login Settings Username Access-level Password Management IP Filter Commands11 IP Filter Commands Function Mode Show management All addresses Web Server Commands 12 Web Server Commands Function ModeDefault Setting Command Mode Ip http port Syntax No ip http server Default Setting Syntax No ip http secure-server Default SettingIp http server Ip http secure-server Ip http secure-port 13 Https System Support Web Browser Operating SystemIp http secure-port4-31 Copy tftp https-certificate Portnumber The UDP port used for HTTPS. Range Telnet Server Commands 14 Telnet Server Commands Function ModeIp telnet port Ip http secure-server4-30 Secure Shell Commands Syntax No ip telnet server Default Setting15 SSH Commands Function Mode Ip telnet server Copy tftp public-key Syntax No ip ssh server Default Setting Ip ssh server Ip ssh timeout Syntax Ip ssh timeout seconds no ip ssh timeoutExec-timeout4-13 show ip ssh Ip ssh crypto host-key generate 4-38 show ssh Ip ssh authentication-retries Ip ssh server-key sizeKey-size- The size of server key. Range 512-896 bits Bits Delete public-key Ip ssh crypto host-key generateSyntax Delete public-key username dsa rsa Syntax Ip ssh crypto host-key generate dsa rsa Ip ssh crypto zeroize Ip ssh save host-keySyntax Ip ssh crypto zeroize dsa rsa Syntax Ip ssh save host-key dsa rsa This command displays the current SSH server connections Show ip sshShow ssh Ip ssh crypto host-key generate Syntax Show public-key user username host Show public-keyTerminology Console#show public-key host Host Event Logging Commands 17 Event Logging Commands Function ModeSyntax No logging on Default Setting Logging on 18 Logging Levels Flash errors level 3 RAM warnings level 6Logging history Logging host Logging facilitySyntax No logging host hostipaddress Hostipaddress The IP address of a syslog server Logging trap Clear loggingSyntax Logging trap level no logging trap Syntax Clear logging flash ram 19 show logging flash/ram display description Show loggingSyntax Show logging flash ram sendmail trap Facility command Logging trap commandSyntax Show log flash ram login tail Show log Smtp Alert Commands 21 Smtp Alert Commands Function ModeLogging sendmail host Following example shows sample messages stored in RAM Logging sendmail level Syntax Logging sendmail level level Logging sendmail source-email Logging sendmail destination-emailSyntax No logging sendmail source-email email-address This example will set the source email john@acme.com Show logging sendmail Syntax No logging sendmail Default SettingLogging sendmail Time Commands 22 Time Commands Function ModeSyntax No sntp client Default Setting Sntp client Sntp server Sntp server 4-54 sntp poll 4-55 show sntpSyntax Sntp server ip1 ip2 ip3 Sntp client 4-53 sntp poll 4-55 show sntp Sntp poll Show sntpSyntax Sntp poll seconds no sntp poll Sntp client Clock timezone Calendar setSyntax Calendar set hour min sec day month year month day year System Status Commands Show startup-configThis command displays the system clock 23 System Status Commands Function Mode Command Line Interface Show running-config Show running-config4-59 Show startup-config4-57 Show users This command displays system informationShow system Show version Frame Size Commands 24 Frame Size Commands Function ModeJumbo frame Enables support for jumbo frames Syntax No jumbo frame Default Setting Flash/File Commands 25 Flash/File Commands Function ModeCopy Copy Flash/File Commands Following example shows how to download a configuration file This command deletes a file or image DeleteDelete unit filename Dir Delete public-key4-38 Syntax Dir unit boot-rom config opcode filename Dir26 File Directory Information Column Heading Description Whichboot Boot systemSyntax whichboot unit Syntax Boot system unit boot-romconfig opcode filename Authentication Commands Authentication SequenceDir 4-68 whichboot 27 Authentication Commands Command Group Function Local Authentication loginUsername for setting the local user names and passwords Authentication enable Radius Client 29 Radius Client Commands Function ModeShow radius-server Shows the current Radius settings Default Setting Auth-port Retransmit Command ModeRadius-server host Radius-server port Syntax Radius-server key keystring no radius-server key Radius-server keyRadius-server retransmit Radius-server timeout Show radius-server 30 Tacacs Commands Function Mode TACACS+ ClientTacacs-server host Tacacs-server port Syntax Tacacs-server key keystring no tacacs-server key Tacacs-server keyShow tacacs-server Port Security Commands 31 Port Security Commands Function ModeStatus Disabled Action None Maximum Addresses Interface Configuration Ethernet Command Usage 802.1X Port Authentication 32 802.1X Port Authentication Command Function ModeSyntax No dotx system-auth-control Default Setting Dot1x system-auth-control Dot1x default Default Command ModeDot1x max-req Dot1x port-control Single-host Dot1x operation-modeForce-authorized Dot1x timeout quiet-period Dot1x re-authenticateDot1x re-authentication Dot1x timeout re-authperiod Dot1x timeout tx-period Statistics Displays dot1x status for each port Show dot1xSyntax Show dot1x statistics interface interface Authenticator State Machine Reauthentication State MachineState Current state including initialize, reauthenticate Backend State Machine Command Line Interface 33 Access Control Lists Command Groups Function Access Control List CommandsAccess Control Lists Access-list ip 34 IP ACLs Command Function ModeSyntax No access-list ip standard extended aclname IP ACLs Permit, deny Ip access-group4-93 show ip access-list4-93 Access-list ipSyntax No permit deny any source bitmask host source Standard ACL Extended ACL Any destination address-bitmask host destinationSource-port sport end destination-port dport end Show ip access-list Ip access-groupSyntax Show ip access-list standard extended aclname Syntax No ip access-group aclname This command shows the ports assigned to IP ACLs Show ip access-groupShow ip access-list4-93 Access-list mac 35 MAC ACL Commands Function ModeSyntax No access-list mac aclname Permit, deny Mac access-group4-98 show mac access-list4-97 Permit, deny MAC ACL Show mac access-list This command displays the rules for configured MAC ACLsSyntax Show mac access-list aclname Permit, deny Mac access-group4-98 Mac access-group Show mac access-groupSyntax Mac access-group aclname Show mac access-list4-97 Show access-list Show access-group36 ACL Information Command Function Mode ACL Information Snmp Commands 37 Snmp Commands Function Mode Show snmp Syntax No snmp-server Default SettingSnmp-server Snmp-server community Snmp-server contact Snmp-server locationSyntax Snmp-server contact string no snmp-server contact Syntax Snmp-server location text no snmp-server location Snmp-server host Host Address None Notification Type Traps Snmp Version UDP Port Issue authentication and link-up-down traps Snmp-server enable trapsSnmp-server enable traps Snmp-server engine-id Show snmp engine-id This command shows the Snmp engine IDThis example shows the default engine ID Defaultview includes access to the entire MIB tree Snmp-server viewExamples This view includes MIB-2 This command shows information on the Snmp views Show snmp viewSnmp-server group 39 show snmp view display description Consoleconfig#snmp-server group r&d v3 auth write daily Show snmp group Snmp-server user 40 show snmp group display description 114 41 show snmp user display description This command shows information on Snmp usersShow snmp user Interface Commands 42 Interface Commands Function ModeInterface Port-channel channel-idRange Syntax Description string no description DescriptionSpeed-duplex Negotiation 4-118 capabilities Syntax No negotiation Default SettingNegotiation Capabilities 4-119speed-duplex4-117 Following example configures port 11 to use autonegotiationCapabilities Negotiation 4-118speed-duplex4-117 flowcontrol Syntax No flowcontrol Default SettingFlowcontrol Syntax No shutdown Default Setting Shutdown Switchport broadcast packet-rate Port-channel channel-idRange Default SettingClear counters Syntax Clear counters interface This command displays the status for an interface Show interfaces statusFollowing example clears statistics on port Syntax Show interfaces status interface This command displays interface statistics Show interfaces countersSyntax Show interfaces counters interface Shows the counters for all interfaces Shows all interfaces Show interfaces switchportSyntax Show interfaces switchport interface 43 Interfaces Switchport Statistics Mirror Port Commands 44 Mirror Port Commands Function ModePort monitor Interface ethernet unit/port source port This command displays mirror information Following shows mirroring configured from port 6 to portShow port monitor Syntax Show port monitor interface Gigabit Ethernet 1000 Mbps Rate Limit CommandsRate-limit Link Aggregation Commands 46 Link Aggregation Commands135 123 Channel-group Guidelines for Creating TrunksGeneral Guidelines Dynamically Creating a Port Channel Following example creates trunk 1 and then adds port Syntax No lacp Default SettingLacp Lacp system-priority 32768 Lacp admin-keyEthernet Interface Lacp admin-key Port Channel Interface Configuration Port Channel Show lacp This command displays Lacp informationLacp port-priority Port Channel all 47 show lacp counters display descriptionType LACPDUs Illegal Pkts 48 show lacp internal display description 49 show lacp neighbors display description 50 show lacp sysid display description Address Table Commands 51 Address Table Commands Function ModeMac-address-table static Action Mac-address- MAC address Mask Bits to match in the address Clear mac-address-table dynamicShow mac-address-table Mac-address-table aging-time Sort Sort by address, vlan or interface Show mac-address-table aging-time Spanning Tree Commands 52 Spanning Tree Commands Function Mode Spanning-tree mode Syntax No spanning-tree Default SettingSpanning tree is enabled Spanning-tree Spanning-tree forward-time Spanning-tree hello-time Spanning-tree max-age Spanning-tree priority Spanning-tree pathcost method Long method Spanning-tree mst-configuration This command limits the maximum transmission rate for BPDUsSpanning-tree transmission-limit Count The transmission limit in seconds. Range MST Configuration Mst vlanMst priority No mst instanceid vlan vlan-range Switch’s MAC address NameSyntax Name name Name Name of the spanning tree Revision Max-hopsSyntax Revision number Max-hopshop-number Spanning-tree spanning-disabled Syntax No spanning-tree spanning-disabled Default SettingThis example disables the spanning tree algorithm for port Spanning-tree cost Spanning-tree port-priority Priority The priority for a port. Range 0-240, in steps Syntax No spanning-tree edge-port Default Setting Syntax No spanning-tree portfast Default SettingSpanning-tree edge-port Spanning-tree portfast Auto Spanning-tree link-typeSpanning-treeedge-port4-156 Spanning-tree mst cost Spanning-tree mst port-priority Spanning-tree mst port-priority4-159 Port-channel channel-idRange Command Mode Spanning-tree protocol-migrationShow spanning-tree Syntax Spanning-tree protocol-migration interface Mstp Show spanning-tree mst configuration Vlan Commands Gvrp and Bridge Extension Commands53 VLANs Command Groups Function 54 Gvrp and Bridge Extension Commands Function Mode Show bridge-ext Syntax No bridge-ext gvrp Default SettingBridge-ext gvrp Switchport gvrp Show gvrp configurationSyntax No switchport gvrp Default Setting Syntax Show gvrp configuration interface Garp timer Show garp timer Syntax Show garp timer interface 55 Editing Vlan Groups Command Function ModeEditing Vlan Groups Vlan database By default only Vlan 1 exists and is active Vlan Database ConfigurationVlan Show vlan Configuring Vlan Interfaces 56 Configuring Vlan Interfaces Command Function ModeInterface vlan Interface vlan Switchport acceptable-frame-types4-171 Switchport modeAll ports are in hybrid mode with the Pvid set to Vlan Switchport acceptable-frame-types Switchport ingress-filteringSwitchport mode All frame types Switchport native vlan Switchport allowed vlan Switchport forbidden vlan No VLANs are included in the forbidden list Show vlan 57 Show Vlan Commands Function ModeDisplaying Vlan Information Configuring Ieee 802.1Q Tunneling 58 Ieee 802.1Q Tunneling Commands Function ModeGeneral Configuration Guidelines for QinQ Dot1q-tunnel system-tunnel-control Switchport dot1q-tunnel mode Show dot1q-tunnel4-178 Show interfaces switchport Switchport dot1q-tunnel tpid Related CommandsThis command displays information about QinQ tunnel ports Show dot1q-tunnel Pvlan Switchport dot1q-tunnel mode59 Private Vlan Commands Function Mode No private VLANs are defined This command displays the configured private VlanShow pvlan 60 Protocol-based Vlan Commands Function Mode Configuring Protocol-based VLANsProtocol-vlan protocol-group Configuring Groups No protocol groups are mapped for any interface Protocol-vlan protocol-group Configuring InterfacesNo protocol groups are configured Syntax Show protocol-vlan protocol-group group-id Show protocol-vlan protocol-groupShow interfaces protocol-vlan protocol-group Priority Commands Priority Commands Layer61 Priority Commands Command Groups Function 62 Priority Commands Layer Function Mode Syntax Queue mode strict wrr no queue mode Queue modeSwitchport priority default Queue bandwidth Queue bandwidth weight1...weight4 no queue bandwidthWeights 1, 2, 4, 8 are assigned to queues 0-3 respectively Queue cos-mapqueueid cos1 ... cosn no queue cos-map 63 Default CoS Values to Egress QueuesQueue cos-map Show queue mode Following example shows how to change the CoS assignmentsThis command shows the current queue mode Show queue bandwidth Priority Commands Layer 3 This command shows the class of service priority map64 Priority Commands Layer 3 Function Mode Show queue cos-map 65 IP Dscp to CoS Vales IP Dscp Value CoS Value Syntax No map ip dscp Default SettingMap ip dscp dscp-value cos cos-value no map ip dscp Syntax Show map ip dscp interface This command shows the IP Dscp priority mapShow map ip dscp Quality of Service Commands 199 Input of a particular interface Show class-map 66 Quality of Service Commands Function Mode198 Service-policy Class-map MatchSyntax No class-map class-map-namematch-any Show class map No policy-mappolicy-map-name Class Map ConfigurationPolicy-map No class class-map-name Policy Map ConfigurationClass Policy Map Class Configuration Set Drop out-of-profile packets PoliceSyntax No police rate-kbpsburst-byteexceed-action drop set Service-policy Syntax No service-policy input policy-map-nameShow class-map Syntax Show class-map class-map-name Show policy-map Show policy-map interfaceShow policy-mappolicy-map-name class class-map-name Displays all policy maps and all classes Multicast Filtering Commands Igmp Snooping Commands67 Multicast Filtering Commands Command Groups Function 68 Igmp Snooping Commands Function Mode Syntax No ip igmp snooping Default Setting Following example enables Igmp snoopingIp igmp snooping Ip igmp snooping vlan static Following configures the switch to use Igmp Version Syntax No ip igmp snooping leave-proxy Default SettingIp igmp snooping version Ip igmp snooping leave-proxy Syntax No ip igmp snooping immediate-leave Default Setting Interface Configuration VlanThis command shows the Igmp snooping configuration Ip igmp snooping immediate-leave Show mac-address-table multicast Following shows the current Igmp snooping configurationThis command shows known multicast addresses Igmp Query Commands Layer 69 Igmp Query Commands Layer Function ModeSyntax No ip igmp snooping querier Default Setting Ip igmp snooping querier Following shows how to configure the query count to Ip igmp snooping query-intervalTimes Ip igmp snooping query-max-response-time4-208 Ip igmp snooping router-port-expire-time Seconds The report delay advertised in Igmp queries. RangeIp igmp snooping query-max-response-time Static Multicast Routing Commands 70 Static Multicast Routing Commands Function ModeIp igmp snooping vlan mrouter Syntax No ip igmp snooping vlan vlan-idmrouter interface Displays multicast router ports for all configured VLANs Show ip igmp snooping mrouterSyntax Show ip igmp snooping mrouter vlan vlan-id Multicast router port types displayed include Static Igmp Filtering and Throttling Commands 71 Igmp Filtering and Throttling Commands Function ModeSyntax No ip igmp filter Default Setting 213 Syntax Permit deny Default Setting Ip igmp profilePermit, deny Syntax No ip igmp profile profile-number Syntax No ip igmp filter profile-number RangeNo range low-ip-address high-ip-address Ip igmp max-groups Syntax Ip igmp max-groups number No ip igmp max-groups Ip igmp max-groups action Show ip igmp filterSyntax Ip igmp max-groups action replace deny Syntax Show ip igmp filter interface interface Show ip igmp profile Show ip igmp throttle interfaceSyntax Show ip igmp profile profile-number Syntax Show ip igmp throttle interface interface Multicast Vlan Registration Commands 72 Multicast Vlan Registration Commands Function ModePort Port number. Range Port-channelchannel-id Range 219 Command Line Interface Mvr Global Configuration No mvr group ip-address count vlan vlan-id Multicast Filtering Commands Mvr Interface Configuration 220 73 show mvr display description Show mvrSyntax Show mvr interface interface members ip-address Members 74 show mvr interface display description75 show mvr members display description IP Interface Commands 76 IP Interface Commands Function ModeIp address 224 Ip default-gateway Syntax Ip default-gateway gateway no ip default-gatewayGateway IP address of the default gateway Following example defines a default gateway for this device This command submits a Bootp or Dhcp client request This command displays the settings of an IP interfaceIp dhcp restart Show ip interface Ip default-gateway4-224 This command has no default for the hostShow ip redirects Ping Ip source-guard IP Source Guard Commands77 IP Source Guard Commands Function Mode Syntax Ip source-guard sip sip-macno ip source-guard This example enables IP source guard on port No configured entriesIp source-guard binding No ip source-guard binding mac-addressvlan vlan-id This command shows the source guard binding table Show ip source-guardShow ip source-guard binding Ip source-guard4-227 ip dhcp snooping Ip dhcp snooping vlan Dhcp Snooping Commands 78 Dhcp Snooping Commands Function ModeSyntax No ip dhcp snooping Default Setting Ip dhcp snooping 232 This example enables Dhcp snooping globally for the switch This example enables Dhcp snooping for VlanIp dhcp snooping vlan Ip dhcp snooping vlan 4-233 ip dhcp snooping trust Syntax No ip dhcp snooping trust Default Setting Ip dhcp snooping trust Ip dhcp snooping information option This example enables MAC address verificationIp dhcp snooping verify mac-address Replace This example enables the Dhcp Snooping Information OptionIp dhcp snooping information policy Switch Cluster Commands 79 Switch Cluster Commands Function ModeShow ip dhcp snooping Show ip dhcp snooping binding Displays current cluster Candidates in the network 242 Syntax No cluster Default SettingCluster Cluster commander Syntax No cluster commander Default SettingCluster ip-pool Syntax Cluster ip-pool ip-addressno cluster ip-pool Rcommand Syntax Rcommand id member-idMember-id- The ID number of the Member switch. Range Cluster member This command shows the switch clustering configuration This command shows the current switch cluster membersShow cluster Show cluster members Show cluster candidates Appendix a Software Specifications Software Features Management Features Groups 1, 2, 3, 9 Statistics, History, Alarm, EventStandards Igmp RFC 1112 IGMPv2 RFC 2236 RADIUS+ RFC Management Information Bases Management Information Bases a Software Specifications Table B-1 Troubleshooting Chart Symptom Action Using System Logs Access Control List ACL Boot Protocol BootpClass of Service CoS Differentiated Services Code Point Service Dscp Garp Vlan Registration Protocol Gvrp Generic Attribute Registration Protocol GarpGeneric Multicast Registration Protocol Gmrp Group Attribute Registration Protocol Garp Igmp Snooping Igmp QueryInternet Group Management Protocol Igmp In-Band Management Multicast Switching Port AuthenticationRemote Authentication Dial-in User Service Radius Network Time Protocol NTP Secure Shell SSH Simple Network Management Protocol SnmpSimple Network Time Protocol Sntp Spanning Tree Algorithm STA Virtual LAN Vlan XModem Index Numerics Gateway, default 3-14,4-224 Index Index-3 Index-4 Page Technical Support