Manuals / SMC Networks / Computer Equipment / Switch

SMC Networks SMC8150L2 manual Show mac access-group, Syntax Mac access-group aclname

Models: SMC8150L2

1 502

Download 502 pages 43.85 Kb

Page 340

Image 340

4 Command Line Interface

mac access-group

This command binds a port to a MAC ACL. Use the no form to remove the port.

Syntax

mac access-group acl_name in

•acl_name – Name of the ACL. (Maximum length: 16 characters)

•in – Indicates that this list applies to ingress packets.

Default Setting

None

Command Mode

Interface Configuration (Ethernet)

Command Usage

•A port can only be bound to one ACL.

•If a port is already bound to an ACL and you bind it to a different ACL, the switch will replace the old binding with the new one.

Example

Console(config)#interface ethernet 1/2

Console(config-if)#mac access-group jerry in

Console(config-if)#

Related Commands

show mac access-list(4-97)

show mac access-group

This command shows the ports assigned to MAC ACLs.

Command Mode

Privileged Exec

Example

Console#show mac access-group

Interface ethernet 1/5

MAC access-list M5 in

Console#

Related Commands

mac access-group(4-98)

4-98

Page 340

Image 340

SMC Networks SMC8150L2 manual Show mac access-group, Syntax Mac access-group aclname, Show mac access-list4-97

Contents

Management Guide Page TigerSwitch 10/100/1000 Management Guide Page Contents Page Iii Page Command Line Interface Page Vii Viii Contents Page Contents Xii Appendix a Software Specifications Appendix B TroubleshootingGlossary Index XiiiXiv Tables Xvi Xvii Xviii Figures XixFigures Xxi Xxii Key Features Key FeaturesFeature Description Description of Software Features IntroductionDescription of Software Features Introduction Description of Software Features System Defaults System DefaultsFunction Parameter Default System Defaults Function Parameter Client EnabledSntp Connecting to the Switch Configuration OptionsInitial Configuration Required ConnectionsRemote Connections Basic ConfigurationConsole Connection Setting an IP Address Setting PasswordsManual Configuration Dynamic Configuration Enabling Snmp Management Access Trap Receivers Saving Configuration Settings Configuring Access for Snmp Version 3 ClientsManaging System Files Initial Configuration Configuring the Switch Using the Web InterfaceNavigating the Web Browser Interface HomeConfiguration Options Action Panel DisplayButton Revert Apply HelpMain Menu Description Main MenuSystem System Information Configuration Allows ports to dynamically join trunks ACLSTA 116Class-of-service value 122Current Table 131Query Igmp Filter Configuration Configuration Settings Igmp Filter/Throttling TrunkConfiguration Settings 152Dhcp Snooping 186 Configuration 183Cache 185Displaying System Information Field AttributesDisplaying Switch Hardware/Software Versions CLI Specify the hostname, location and contact informationMain Board Management SoftwareWeb Click System, Switch Information Switch InformationBridge Extension Configuration Displaying Bridge Extension CapabilitiesCLI Enter the following command Setting the Switch’s IP AddressCommand Attributes Manual IP Configuration Using DHCP/BOOTP Dhcp IP ConfigurationEnabling Jumbo Frames Managing FirmwareDownloading System Software from a Server Copy FirmwareSaving or Restoring Configuration Settings 11 Deleting FilesDownloading Configuration Settings from a Server 12 Downloading Configuration Settings for StartupConsole Port Settings 13 Setting the Startup Configuration Settings14 Console Port Settings Telnet Settings 15 Enabling Telnet Configuring Event Logging Displaying Log MessagesSystem Log Configuration Error resource exhaustedCLI This example shows the event message stored in RAM Logging LevelsRemote Log Configuration 17 System LogsSimple Mail Transfer Protocol 18 Remote Logs19 Enabling and Configuring Smtp Resetting the System Renumbering the SystemSetting the System Clock Configuring SntpSetting the Time Zone 23 Setting the System ClockAccess Mode Setting Community Access StringsSimple Network Management Protocol 24 Configuring Snmp Community Strings Specifying Trap Managers and Trap Types25 Configuring IP Trap Managers Enabling Snmp Agent StatusSetting the Local Engine ID Configuring SNMPv3 Management AccessCLI This example sets an SNMPv3 engine ID Specifying a Remote Engine ID Configuring SNMPv3 UsersCLI This example specifies a remote SNMPv3 engine ID Configuring the Switch 29 Configuring SNMPv3 Users Configuring Remote SNMPv3 Users 30 Configuring Remote SNMPv3 UsersConfiguring SNMPv3 Groups Topology Change Timer immediatelySupported Notification Messages Subsequent to its electionSNMPv2 Traps Rmon EventsPrivate Traps SwPowerStatus 6.1.4.1.202.20.68.2.1.0.1 PD Powered Device. This notification isMode PethPsePortPower 6.1.4.1.202.20.68.2.1.0.1 ChangeTrap SwIpFilterRejectTrap 6.1.4.1.202.20.68.2.1.0.131 Configuring SNMPv3 Groups Setting SNMPv3 Views 32 Configuring SNMPv3 ViewsUser Authentication Configuring User Accounts33 Access Levels Configuring Local/Remote Logon Authentication Command UsageRadius Settings Tacacs Settings34 Authentication Settings User Authentication Configuring Https Https System Support Web Browser Operating SystemReplacing the Default Secure-site Certificate Configuring the Secure Shell User Authentication Configuring the SSH Server SSH server includes basic settings for authenticationGenerating the Host Key Pair 37 SSH Host-Key Settings Configuring Port Security Configuring 802.1X Port Authentication 38 Configuring Port SecurityDisplaying 802.1X Global Settings 802.1X protocol provides client authenticationConfiguring 802.1X Global Settings CLI This example shows the default global setting forCLI This example enables 802.1X globally for the switch Web Click Security, 802.1X, InformationConfiguring Port Settings for Authorized41 802.1X Port Configuration Consoleconfig#interface ethernet 1/2 802.1X Statistics Displaying 802.1X StatisticsParameter Description Configuring Access Control Lists Access Control ListsCLI This example displays the 802.1X statistics for port Setting the ACL Name and Type CLI This example creates a standard IP ACL named davidConfiguring a Standard IP ACL Configuring an Extended IP ACLConfiguring the Switch 45 Configuring Extended IP ACLs Configuring a MAC ACL Binding a Port to an Access Control List This switch supports ACLs for ingress filtering onlyFiltering IP Addresses for Management Access 47 Configuring ACL Port Binding48 Creating an IP Filter List Port Configuration CLI This example allows Snmp access for a specific clientDisplaying Connection Status Field Attributes WebWeb Click Port, Port Information or Trunk Information ConfigurationBasic Information Configuring Interface Connections Current Status50 Port/Trunk Configuration Creating Trunk Groups Statically Configuring a Trunk 51 Configuring Static TrunksEnabling Lacp on Selected Ports 13152 Lacp Trunk Configuration Configuring Lacp Parameters Dynamically Creating a Port Channel53 Lacp Port Configuration Displaying Lacp Port Counters You can display statistics for Lacp protocol messagesLacp Port Counters Field Description54 Lacp Port Counters Information CLI The following example displays Lacp countersDisplaying Lacp Settings and Status for the Local Side Lacp Internal Configuration Information55 Lacp Port Internal Information Displaying Lacp Settings and Status for the Remote Side Lacp Neighbor Configuration Information Field DescriptionSetting Broadcast Storm Thresholds 57 Port Broadcast Control Configuring Port Mirroring 58 Mirror Port ConfigurationConfiguring Rate Limits Rate Limit ConfigurationShowing Port Statistics 10 Port Statistics Etherlike StatisticsOr alignment error Received Bytes Rmon Statistics Drop EventsResources Jabbers Formed Oversize Frames60 Port Statistics Setting Static Addresses Address Table SettingsCLI This example shows statistics for port 61 Configuring a Static Address Table Displaying the Address Table62 Configuring a Dynamic Address Table Changing the Aging Time Spanning Tree Algorithm ConfigurationCLI This example sets the aging time to 300 seconds Spanning Tree Algorithm Configuration 104 Displaying Global Settings 64 Displaying Spanning Tree Information Configuring Global Settings Global settings apply to the entire switchBasic Configuration of Global Settings Root Device ConfigurationConfiguration Settings for Rstp Configuration Settings for Mstp65 Configuring Spanning Tree Displaying Interface Settings 112 66 Displaying Spanning Tree Port Information CLI This example shows the STA attributes for portConfiguring Interface Settings 67 Configuring Spanning Tree per Port CLI This example sets STA attributes for portConfiguring Multiple Spanning Trees 68 Configuring Multiple Spanning Trees Displaying Interface Settings for Mstp MST Instance ID Instance identifier to configure. Default69 Displaying Mstp Interface Settings Configuring Interface Settings for Mstp 121 Ieee 802.1Q VLANs Vlan ConfigurationCLI This example sets the Mstp attributes for port Assigning Ports to VLANs 124 CLI This example enables Gvrp for the switch Enabling or Disabling Gvrp Global SettingForwarding Tagged/Untagged Frames Displaying Basic Vlan Information Command Attributes WebDisplaying Current VLANs 73 Displaying Current VLANs Command Attributes CLI Creating VLANs 175Adding Static Members to VLANs Vlan Index CLI This example creates a new Vlan130 75 Configuring a Vlan Static Table Adding Static Members to VLANs Port IndexConfiguring Vlan Behavior for Interfaces Configuring Ieee 802.1Q Tunneling 77 Configuring VLANs per PortLayer 2 Flow for Packets Coming into a Tunnel Access Port Layer 2 Flow for Packets Coming into a Tunnel Uplink Port Configuration Limitations for QinQ General Configuration Guidelines for QinQEnabling QinQ Tunneling on the Switch 78 802.1Q Tunnel StatusCLI This example sets the switch to operate in QinQ mode Adding an Interface to a QinQ Tunnel79 Tunnel Port Configuration 45-1 CLI This example enables private VLANs Configuring Private VLANsEnabling Private VLANs Protocol Vlan Group Configuration Configuring Uplink and Downlink PortsProtocol VLANs Configuring Protocol Vlan Interfaces 82 Protocol Vlan ConfigurationLayer 2 Queue Settings Class of Service ConfigurationSetting the Default Priority for Interfaces Port Priority Configuration CLI This example assigns a default priority of 5 to portMapping CoS Values to Egress Queues 11 Mapping CoS Values to Egress Queues12 CoS Priority Levels Priority Level Traffic TypeBackground SpareSelecting the Queue Mode Enabling CoSSetting the Service Weight for Traffic Classes 87 Queue ModeMapping Layer 3/4 Priorities to CoS Values Layer 3/4 Priority SettingsSelecting IP Precedence/DSCP Priority Mapping IP Precedence 13 Mapping IP Precedence90 Mapping IP Precedence Priority Values Mapping Dscp Priority 14 Mapping Dscp Priority ValuesIP Dscp Value CoS Value 10, 12, 14 18, 20, 22 26, 28, 30, 32, 34 38, 40Mapping IP Port Priority 92 IP Port Priority StatusQuality of Service 93 IP Port PriorityConfiguring a Class Map Configuring Quality of Service ParametersClass map is used for matching packets to a specified class Match Class Settings Class ConfigurationClass Map 94 Configuring Class Maps Creating QoS Policies Policy ConfigurationPolicy Map Policy Rule Settings Class Settings Policy Options95 Configuring Policy Maps 96 Service Policy Settings Attaching a Policy Map to Ingress QueuesMulticast Filtering Layer 2 Igmp Snooping and QueryConfiguring Igmp Snooping and Query Parameters 97 Igmp Configuration Enabling Igmp Immediate LeaveDisplaying Interfaces Attached to a Multicast Router 98 Igmp Immediate LeaveSpecifying Static Interfaces for a Multicast Router 99 Displaying Multicast Router Port InformationDisplaying Port Members of Multicast Services 100 Static Multicast Router Port ConfigurationAssigning Ports to Multicast Services 101 IP Multicast Registration TableIgmp Filtering and Throttling 102 Igmp Member Port TableEnabling Igmp Filtering and Throttling 103 Enabling Igmp Filtering and ThrottlingConfiguring Igmp Filtering and Throttling for Interfaces Configuring Igmp Filter Profiles 104 Igmp Filter and Throttling Port Configuration105 Igmp Profile Configuration Multicast Vlan Registration Configuring Global MVR Settings General Configuration Guidelines for MVR106 MVR Global Configuration Displaying MVR Interface StatusWeb Click MVR, Port or Trunk Information 107 MVR Port InformationDisplaying Port Members of Multicast Groups 108 MVR Group IP InformationConfiguring MVR Interface Status MVR VlanWeb Click MVR, Port or Trunk Configuration Assigning Static Multicast Groups to InterfacesConfiguring Domain Name Service Configuring General DNS Service Parameters111 DNS General Configuration Configuring Static DNS Host to Address Entries 238112 DNS Static Host Table Displaying the DNS Cache 113 DNS CacheDhcp Snooping Dhcp Snooping Configuration Web Click Dhcp Snooping, ConfigurationDhcp Snooping Vlan Configuration Dhcp Snooping Information Option ConfigurationEnables Dhcp snooping on the specified Vlan CLI This example first enables Dhcp Snooping for VlanDhcp Snooping Port Configuration Trust Status Enables or disables port as trusted117 Dhcp Snooping Port Configuration Dhcp Snooping Binding InformationIP Source Guard IP Source Guard Port ConfigurationWeb Click Dhcp Snooping, Dhcp Snooping Binding Information Static IP Source Guard Binding Configuration 119 IP Source Guard Port Configuration120 Static IP Source Guard Binding Configuration Dynamic IP Source Guard Binding InformationSwitch Clustering Web Click IP Source Guard, Dynamic InformationCluster Configuration 122 Cluster Member ChoiceWeb Click Cluster, Configuration Cluster Member ConfigurationAdds Candidate switches to the cluster as Members Displays current cluster Member switch information Web Click Cluster, Member ConfigurationCluster Member Information Cluster Candidate Information 126 Cluster Candidate InformationUsing the Command Line Interface Accessing the CLITelnet Connection Entering Commands Command CompletionGetting Help on Commands Keywords and ArgumentsShowing Commands Negating the Effect of Commands Using Command HistoryUnderstanding Command Modes Partial Keyword LookupExec Commands Command ModesConfiguration Modes Command Prompt Configuration CommandsConsoleconfig-if# 120 Command Line Processing Command Line ProcessingKeystroke Function Command Groups Command Groups DescriptionLine Commands Line Commands Function ModeLogin LinePassword Username 4-25 passwordSyntax Password 0 7 password no password No password is specifiedTimeout login response Exec-timeoutSyntax Exec-timeout seconds no exec-timeout Password-threshSyntax Password-thresh threshold no password-thresh Databits Silent-timeSyntax Silent-time seconds no silent-time Syntax Databits 7 8 no databits ParitySyntax Parity none even odd no parity Speed StopbitsSyntax Speed bps no speed Syntax Stopbits 1Disconnect Show lineSyntax Disconnect session-id Syntax Show line console vtyGeneral Commands EnableTo show all lines, enter this command General Commands Function ModeDisable Disable Enable passwordEnable LevelConfigure Show historyReload EndThis command exits the configuration program This example shows how to quit a CLI sessionExit QuitDevice Designation Commands System Management CommandsPrompt User Access Commands User Access Commands Function ModeHostname Username10 Default Login Settings Username Access-level Password Enable passwordGuest Admin 11 IP Filter Commands Function Mode IP Filter CommandsManagement Show management All addressesWeb Server Commands 12 Web Server Commands Function ModeDefault Setting Command Mode Ip http portSyntax No ip http server Default Setting Syntax No ip http secure-server Default SettingIp http server Ip http secure-serverIp http secure-port 13 Https System Support Web Browser Operating SystemIp http secure-port4-31 Copy tftp https-certificate Portnumber The UDP port used for HTTPS. RangeTelnet Server Commands 14 Telnet Server Commands Function ModeIp telnet port Ip http secure-server4-30Secure Shell Commands Syntax No ip telnet server Default Setting15 SSH Commands Function Mode Ip telnet serverCopy tftp public-key Syntax No ip ssh server Default Setting Ip ssh serverIp ssh timeout Syntax Ip ssh timeout seconds no ip ssh timeoutExec-timeout4-13 show ip ssh Ip ssh crypto host-key generate 4-38 show sshIp ssh authentication-retries Ip ssh server-key sizeKey-size- The size of server key. Range 512-896 bits BitsDelete public-key Ip ssh crypto host-key generateSyntax Delete public-key username dsa rsa Syntax Ip ssh crypto host-key generate dsa rsaIp ssh crypto zeroize Ip ssh save host-keySyntax Ip ssh crypto zeroize dsa rsa Syntax Ip ssh save host-key dsa rsaThis command displays the current SSH server connections Show ip sshShow ssh Ip ssh crypto host-key generateTerminology Show public-keySyntax Show public-key user username host Console#show public-key host Host Event Logging Commands 17 Event Logging Commands Function ModeSyntax No logging on Default Setting Logging onLogging history Flash errors level 3 RAM warnings level 618 Logging Levels Logging host Logging facilitySyntax No logging host hostipaddress Hostipaddress The IP address of a syslog serverLogging trap Clear loggingSyntax Logging trap level no logging trap Syntax Clear logging flash ramSyntax Show logging flash ram sendmail trap Show logging19 show logging flash/ram display description Facility command Logging trap commandSyntax Show log flash ram login tail Show logSmtp Alert Commands 21 Smtp Alert Commands Function ModeLogging sendmail host Following example shows sample messages stored in RAMLogging sendmail level Syntax Logging sendmail level levelLogging sendmail source-email Logging sendmail destination-emailSyntax No logging sendmail source-email email-address This example will set the source email john@acme.comLogging sendmail Syntax No logging sendmail Default SettingShow logging sendmail Time Commands 22 Time Commands Function ModeSyntax No sntp client Default Setting Sntp clientSntp server Sntp server 4-54 sntp poll 4-55 show sntpSyntax Sntp server ip1 ip2 ip3 Sntp client 4-53 sntp poll 4-55 show sntpSntp poll Show sntpSyntax Sntp poll seconds no sntp poll Sntp clientClock timezone Calendar setSyntax Calendar set hour min sec day month year month day yearSystem Status Commands Show startup-configThis command displays the system clock 23 System Status Commands Function ModeCommand Line Interface Show running-config Show running-config4-59Show startup-config4-57 Show system This command displays system informationShow users Show version Frame Size Commands 24 Frame Size Commands Function ModeJumbo frame Enables support for jumbo frames Syntax No jumbo frame Default SettingFlash/File Commands 25 Flash/File Commands Function ModeCopy CopyFlash/File Commands Following example shows how to download a configuration file This command deletes a file or image DeleteDelete unit filename Dir Delete public-key4-38Syntax Dir unit boot-rom config opcode filename Dir26 File Directory Information Column Heading DescriptionWhichboot Boot systemSyntax whichboot unit Syntax Boot system unit boot-romconfig opcode filenameAuthentication Commands Authentication SequenceDir 4-68 whichboot 27 Authentication Commands Command Group FunctionUsername for setting the local user names and passwords Authentication loginLocal Authentication enable Show radius-server Shows the current Radius settings 29 Radius Client Commands Function ModeRadius Client Default Setting Auth-port Retransmit Command ModeRadius-server host Radius-server portRadius-server retransmit Radius-server keySyntax Radius-server key keystring no radius-server key Radius-server timeout Show radius-server30 Tacacs Commands Function Mode TACACS+ ClientTacacs-server host Tacacs-server portShow tacacs-server Tacacs-server keySyntax Tacacs-server key keystring no tacacs-server key Port Security Commands 31 Port Security Commands Function ModeStatus Disabled Action None Maximum Addresses Interface Configuration EthernetCommand Usage 802.1X Port Authentication 32 802.1X Port Authentication Command Function ModeSyntax No dotx system-auth-control Default Setting Dot1x system-auth-controlDot1x default Default Command ModeDot1x max-req Dot1x port-controlForce-authorized Dot1x operation-modeSingle-host Dot1x re-authentication Dot1x re-authenticateDot1x timeout quiet-period Dot1x timeout re-authperiod Dot1x timeout tx-periodSyntax Show dot1x statistics interface interface Show dot1xStatistics Displays dot1x status for each port Authenticator State Machine Reauthentication State MachineState Current state including initialize, reauthenticate Backend State MachineCommand Line Interface Access Control Lists Access Control List Commands33 Access Control Lists Command Groups Function Access-list ip 34 IP ACLs Command Function ModeSyntax No access-list ip standard extended aclname IP ACLsPermit, deny Ip access-group4-93 show ip access-list4-93 Access-list ipSyntax No permit deny any source bitmask host source Standard ACLSource-port sport end destination-port dport end Any destination address-bitmask host destinationExtended ACL Show ip access-list Ip access-groupSyntax Show ip access-list standard extended aclname Syntax No ip access-group aclnameShow ip access-list4-93 Show ip access-groupThis command shows the ports assigned to IP ACLs Access-list mac 35 MAC ACL Commands Function ModeSyntax No access-list mac aclname Permit, deny Mac access-group4-98 show mac access-list4-97Permit, deny MAC ACL Show mac access-list This command displays the rules for configured MAC ACLsSyntax Show mac access-list aclname Permit, deny Mac access-group4-98Mac access-group Show mac access-groupSyntax Mac access-group aclname Show mac access-list4-97Show access-list Show access-group36 ACL Information Command Function Mode ACL InformationSnmp Commands 37 Snmp Commands Function ModeSnmp-server Syntax No snmp-server Default SettingShow snmp Snmp-server community Snmp-server contact Snmp-server locationSyntax Snmp-server contact string no snmp-server contact Syntax Snmp-server location text no snmp-server locationSnmp-server host Host Address None Notification Type TrapsSnmp Version UDP Port Snmp-server enable traps Snmp-server enable trapsIssue authentication and link-up-down traps Snmp-server engine-id This example shows the default engine ID This command shows the Snmp engine IDShow snmp engine-id Defaultview includes access to the entire MIB tree Snmp-server viewExamples This view includes MIB-2This command shows information on the Snmp views Show snmp viewSnmp-server group 39 show snmp view display descriptionConsoleconfig#snmp-server group r&d v3 auth write daily Show snmp group Snmp-server user 40 show snmp group display description114 Show snmp user This command shows information on Snmp users41 show snmp user display description Interface Commands 42 Interface Commands Function ModeInterface Port-channel channel-idRangeSpeed-duplex DescriptionSyntax Description string no description Negotiation Syntax No negotiation Default SettingNegotiation 4-118 capabilities Capabilities Following example configures port 11 to use autonegotiationCapabilities 4-119speed-duplex4-117 Flowcontrol Syntax No flowcontrol Default SettingNegotiation 4-118speed-duplex4-117 flowcontrol Syntax No shutdown Default Setting ShutdownSwitchport broadcast packet-rate Port-channel channel-idRange Default SettingClear counters Syntax Clear counters interfaceThis command displays the status for an interface Show interfaces statusFollowing example clears statistics on port Syntax Show interfaces status interfaceThis command displays interface statistics Show interfaces countersSyntax Show interfaces counters interface Shows the counters for all interfacesSyntax Show interfaces switchport interface Show interfaces switchportShows all interfaces 43 Interfaces Switchport Statistics Mirror Port Commands 44 Mirror Port Commands Function ModePort monitor Interface ethernet unit/port source portThis command displays mirror information Following shows mirroring configured from port 6 to portShow port monitor Syntax Show port monitor interfaceRate-limit Rate Limit CommandsGigabit Ethernet 1000 Mbps Link Aggregation Commands 46 Link Aggregation Commands135 123Channel-group Guidelines for Creating TrunksGeneral Guidelines Dynamically Creating a Port ChannelLacp Syntax No lacp Default SettingFollowing example creates trunk 1 and then adds port Lacp system-priority 32768Lacp admin-keyEthernet Interface Lacp admin-key Port Channel Interface Configuration Port ChannelLacp port-priority This command displays Lacp informationShow lacp Port Channel all 47 show lacp counters display descriptionType LACPDUs Illegal Pkts48 show lacp internal display description 49 show lacp neighbors display description 50 show lacp sysid display descriptionAddress Table Commands 51 Address Table Commands Function ModeMac-address-table static ActionShow mac-address-table Clear mac-address-table dynamicMac-address- MAC address Mask Bits to match in the address Mac-address-table aging-time Sort Sort by address, vlan or interfaceShow mac-address-table aging-time Spanning Tree Commands 52 Spanning Tree Commands Function ModeSpanning-tree mode Syntax No spanning-tree Default SettingSpanning tree is enabled Spanning-treeSpanning-tree forward-time Spanning-tree hello-time Spanning-tree max-age Spanning-tree prioritySpanning-tree pathcost method Long methodSpanning-tree mst-configuration This command limits the maximum transmission rate for BPDUsSpanning-tree transmission-limit Count The transmission limit in seconds. RangeMST Configuration Mst vlanMst priority No mst instanceid vlan vlan-rangeSwitch’s MAC address NameSyntax Name name Name Name of the spanning treeRevision Max-hopsSyntax Revision number Max-hopshop-numberSpanning-tree spanning-disabled Syntax No spanning-tree spanning-disabled Default SettingThis example disables the spanning tree algorithm for port Spanning-tree costSpanning-tree port-priority Priority The priority for a port. Range 0-240, in stepsSyntax No spanning-tree edge-port Default Setting Syntax No spanning-tree portfast Default SettingSpanning-tree edge-port Spanning-tree portfastSpanning-treeedge-port4-156 Spanning-tree link-typeAuto Spanning-tree mst cost Spanning-tree mst port-priority Spanning-tree mst port-priority4-159Port-channel channel-idRange Command Mode Spanning-tree protocol-migrationShow spanning-tree Syntax Spanning-tree protocol-migration interfaceMstp Show spanning-tree mst configuration Vlan Commands Gvrp and Bridge Extension Commands53 VLANs Command Groups Function 54 Gvrp and Bridge Extension Commands Function ModeBridge-ext gvrp Syntax No bridge-ext gvrp Default SettingShow bridge-ext Switchport gvrp Show gvrp configurationSyntax No switchport gvrp Default Setting Syntax Show gvrp configuration interfaceGarp timer Show garp timerSyntax Show garp timer interface 55 Editing Vlan Groups Command Function ModeEditing Vlan Groups Vlan databaseBy default only Vlan 1 exists and is active Vlan Database ConfigurationVlan Show vlanConfiguring Vlan Interfaces 56 Configuring Vlan Interfaces Command Function ModeInterface vlan Interface vlanAll ports are in hybrid mode with the Pvid set to Vlan Switchport modeSwitchport acceptable-frame-types4-171 Switchport acceptable-frame-types Switchport ingress-filteringSwitchport mode All frame typesSwitchport native vlan Switchport allowed vlan Switchport forbidden vlan No VLANs are included in the forbidden listDisplaying Vlan Information 57 Show Vlan Commands Function ModeShow vlan Configuring Ieee 802.1Q Tunneling 58 Ieee 802.1Q Tunneling Commands Function ModeGeneral Configuration Guidelines for QinQ Dot1q-tunnel system-tunnel-controlSwitchport dot1q-tunnel mode Show dot1q-tunnel4-178 Show interfaces switchportSwitchport dot1q-tunnel tpid Related CommandsThis command displays information about QinQ tunnel ports Show dot1q-tunnel59 Private Vlan Commands Function Mode Switchport dot1q-tunnel modePvlan Show pvlan This command displays the configured private VlanNo private VLANs are defined Protocol-vlan protocol-group Configuring Groups Configuring Protocol-based VLANs60 Protocol-based Vlan Commands Function Mode No protocol groups are configured Protocol-vlan protocol-group Configuring InterfacesNo protocol groups are mapped for any interface Show interfaces protocol-vlan protocol-group Show protocol-vlan protocol-groupSyntax Show protocol-vlan protocol-group group-id Priority Commands Priority Commands Layer61 Priority Commands Command Groups Function 62 Priority Commands Layer Function ModeSwitchport priority default Queue modeSyntax Queue mode strict wrr no queue mode Weights 1, 2, 4, 8 are assigned to queues 0-3 respectively Queue bandwidth weight1...weight4 no queue bandwidthQueue bandwidth Queue cos-map 63 Default CoS Values to Egress QueuesQueue cos-mapqueueid cos1 ... cosn no queue cos-map Show queue mode Following example shows how to change the CoS assignmentsThis command shows the current queue mode Show queue bandwidthPriority Commands Layer 3 This command shows the class of service priority map64 Priority Commands Layer 3 Function Mode Show queue cos-mapMap ip dscp dscp-value cos cos-value no map ip dscp Syntax No map ip dscp Default Setting65 IP Dscp to CoS Vales IP Dscp Value CoS Value Show map ip dscp This command shows the IP Dscp priority mapSyntax Show map ip dscp interface Quality of Service Commands 198 Service-policy 66 Quality of Service Commands Function Mode199 Input of a particular interface Show class-map Class-map MatchSyntax No class-map class-map-namematch-any Show class mapPolicy-map Class Map ConfigurationNo policy-mappolicy-map-name Class Policy Map ConfigurationNo class class-map-name Policy Map Class Configuration SetSyntax No police rate-kbpsburst-byteexceed-action drop set PoliceDrop out-of-profile packets Service-policy Syntax No service-policy input policy-map-nameShow class-map Syntax Show class-map class-map-nameShow policy-map Show policy-map interfaceShow policy-mappolicy-map-name class class-map-name Displays all policy maps and all classesMulticast Filtering Commands Igmp Snooping Commands67 Multicast Filtering Commands Command Groups Function 68 Igmp Snooping Commands Function ModeSyntax No ip igmp snooping Default Setting Following example enables Igmp snoopingIp igmp snooping Ip igmp snooping vlan staticFollowing configures the switch to use Igmp Version Syntax No ip igmp snooping leave-proxy Default SettingIp igmp snooping version Ip igmp snooping leave-proxySyntax No ip igmp snooping immediate-leave Default Setting Interface Configuration VlanThis command shows the Igmp snooping configuration Ip igmp snooping immediate-leaveThis command shows known multicast addresses Following shows the current Igmp snooping configurationShow mac-address-table multicast Igmp Query Commands Layer 69 Igmp Query Commands Layer Function ModeSyntax No ip igmp snooping querier Default Setting Ip igmp snooping querierFollowing shows how to configure the query count to Ip igmp snooping query-intervalTimes Ip igmp snooping query-max-response-time4-208Ip igmp snooping query-max-response-time Seconds The report delay advertised in Igmp queries. RangeIp igmp snooping router-port-expire-time Static Multicast Routing Commands 70 Static Multicast Routing Commands Function ModeIp igmp snooping vlan mrouter Syntax No ip igmp snooping vlan vlan-idmrouter interfaceDisplays multicast router ports for all configured VLANs Show ip igmp snooping mrouterSyntax Show ip igmp snooping mrouter vlan vlan-id Multicast router port types displayed include StaticIgmp Filtering and Throttling Commands 71 Igmp Filtering and Throttling Commands Function ModeSyntax No ip igmp filter Default Setting 213Syntax Permit deny Default Setting Ip igmp profilePermit, deny Syntax No ip igmp profile profile-numberNo range low-ip-address high-ip-address RangeSyntax No ip igmp filter profile-number Ip igmp max-groups Syntax Ip igmp max-groups number No ip igmp max-groupsIp igmp max-groups action Show ip igmp filterSyntax Ip igmp max-groups action replace deny Syntax Show ip igmp filter interface interfaceShow ip igmp profile Show ip igmp throttle interfaceSyntax Show ip igmp profile profile-number Syntax Show ip igmp throttle interface interfaceMulticast Vlan Registration Commands 72 Multicast Vlan Registration Commands Function ModePort Port number. Range Port-channelchannel-id Range 219Command Line Interface Mvr Global Configuration No mvr group ip-address count vlan vlan-idMulticast Filtering Commands Mvr Interface Configuration 220 Syntax Show mvr interface interface members ip-address Show mvr73 show mvr display description 75 show mvr members display description 74 show mvr interface display descriptionMembers IP Interface Commands 76 IP Interface Commands Function ModeIp address 224Ip default-gateway Syntax Ip default-gateway gateway no ip default-gatewayGateway IP address of the default gateway Following example defines a default gateway for this deviceThis command submits a Bootp or Dhcp client request This command displays the settings of an IP interfaceIp dhcp restart Show ip interfaceIp default-gateway4-224 This command has no default for the hostShow ip redirects Ping77 IP Source Guard Commands Function Mode IP Source Guard CommandsIp source-guard Syntax Ip source-guard sip sip-macno ip source-guard This example enables IP source guard on port No configured entriesIp source-guard binding No ip source-guard binding mac-addressvlan vlan-idThis command shows the source guard binding table Show ip source-guardShow ip source-guard binding Ip source-guard4-227 ip dhcp snooping Ip dhcp snooping vlanDhcp Snooping Commands 78 Dhcp Snooping Commands Function ModeSyntax No ip dhcp snooping Default Setting Ip dhcp snooping232 This example enables Dhcp snooping globally for the switch This example enables Dhcp snooping for VlanIp dhcp snooping vlan Ip dhcp snooping vlan 4-233 ip dhcp snooping trustSyntax No ip dhcp snooping trust Default Setting Ip dhcp snooping trustIp dhcp snooping verify mac-address This example enables MAC address verificationIp dhcp snooping information option Ip dhcp snooping information policy This example enables the Dhcp Snooping Information OptionReplace Switch Cluster Commands 79 Switch Cluster Commands Function ModeShow ip dhcp snooping Show ip dhcp snooping bindingCluster Syntax No cluster Default SettingDisplays current cluster Candidates in the network 242 Cluster commander Syntax No cluster commander Default SettingCluster ip-pool Syntax Cluster ip-pool ip-addressno cluster ip-poolRcommand Syntax Rcommand id member-idMember-id- The ID number of the Member switch. Range Cluster memberThis command shows the switch clustering configuration This command shows the current switch cluster membersShow cluster Show cluster membersShow cluster candidates Appendix a Software Specifications Software FeaturesManagement Features Groups 1, 2, 3, 9 Statistics, History, Alarm, EventStandards Igmp RFC 1112 IGMPv2 RFC 2236 RADIUS+ RFCManagement Information Bases Management Information Bases aSoftware Specifications Table B-1 Troubleshooting Chart Symptom ActionUsing System Logs Access Control List ACL Boot Protocol BootpClass of Service CoS Differentiated Services Code Point Service DscpGarp Vlan Registration Protocol Gvrp Generic Attribute Registration Protocol GarpGeneric Multicast Registration Protocol Gmrp Group Attribute Registration Protocol GarpIgmp Snooping Igmp QueryInternet Group Management Protocol Igmp In-Band ManagementMulticast Switching Port AuthenticationRemote Authentication Dial-in User Service Radius Network Time Protocol NTPSecure Shell SSH Simple Network Management Protocol SnmpSimple Network Time Protocol Sntp Spanning Tree Algorithm STAVirtual LAN Vlan XModemIndex NumericsGateway, default 3-14,4-224 IndexIndex-3 Index-4 Page Technical Support