Management Guide
Page
TigerSwitch 10/100/1000 Management Guide
Page
Contents
Page
Iii
Page
Command Line Interface
Page
Vii
Viii
Contents
Page
Contents
Xii
Appendix a Software Specifications
Appendix B Troubleshooting
Glossary Index
Xiii
Xiv
Tables
Xvi
Xvii
Xviii
Figures
Xix
Figures
Xxi
Xxii
Key Features
Key Features
Feature Description
Description of Software Features
Introduction
Description of Software Features
Introduction
Description of Software Features
System Defaults
System Defaults
Function Parameter Default
System Defaults Function Parameter
Client Enabled
Sntp
Connecting to the Switch
Configuration Options
Initial Configuration
Required Connections
Basic Configuration
Remote Connections
Console Connection
Setting Passwords
Setting an IP Address
Manual Configuration
Dynamic Configuration
Enabling Snmp Management Access
Trap Receivers
Saving Configuration Settings
Configuring Access for Snmp Version 3 Clients
Managing System Files
Initial Configuration
Configuring the Switch
Using the Web Interface
Navigating the Web Browser Interface
Home
Configuration Options Action
Panel Display
Button
Revert Apply Help
Main Menu
Main Menu Description
System System Information
Configuration Allows ports to dynamically join trunks
ACL
STA
116
Class-of-service value
122
Current Table
131
Query Igmp Filter Configuration
Configuration Settings Igmp Filter/Throttling Trunk
Configuration Settings
152
Dhcp Snooping 186 Configuration
183
Cache
185
Displaying System Information
Field Attributes
Displaying Switch Hardware/Software Versions
CLI Specify the hostname, location and contact information
Main Board
Management Software
Web Click System, Switch Information
Switch Information
Bridge Extension Configuration
Displaying Bridge Extension Capabilities
Setting the Switch’s IP Address
CLI Enter the following command
Command Attributes
Manual IP Configuration
Using DHCP/BOOTP
Dhcp IP Configuration
Enabling Jumbo Frames
Managing Firmware
Downloading System Software from a Server
Copy Firmware
Saving or Restoring Configuration Settings
11 Deleting Files
Downloading Configuration Settings from a Server
12 Downloading Configuration Settings for Startup
Console Port Settings
13 Setting the Startup Configuration Settings
14 Console Port Settings
Telnet Settings
15 Enabling Telnet
Configuring Event Logging
Displaying Log Messages
System Log Configuration
Error resource exhausted
CLI This example shows the event message stored in RAM
Logging Levels
Remote Log Configuration
17 System Logs
Simple Mail Transfer Protocol
18 Remote Logs
19 Enabling and Configuring Smtp
Resetting the System
Renumbering the System
Setting the System Clock
Configuring Sntp
Setting the Time Zone
23 Setting the System Clock
Setting Community Access Strings
Access Mode
Simple Network Management Protocol
24 Configuring Snmp Community Strings
Specifying Trap Managers and Trap Types
25 Configuring IP Trap Managers
Enabling Snmp Agent Status
Configuring SNMPv3 Management Access
Setting the Local Engine ID
CLI This example sets an SNMPv3 engine ID
Configuring SNMPv3 Users
Specifying a Remote Engine ID
CLI This example specifies a remote SNMPv3 engine ID
Configuring the Switch
29 Configuring SNMPv3 Users
Configuring Remote SNMPv3 Users
30 Configuring Remote SNMPv3 Users
Configuring SNMPv3 Groups
Topology Change Timer immediately
Supported Notification Messages
Subsequent to its election
SNMPv2 Traps
Rmon Events
Private Traps SwPowerStatus 6.1.4.1.202.20.68.2.1.0.1
PD Powered Device. This notification is
Mode PethPsePortPower 6.1.4.1.202.20.68.2.1.0.1
ChangeTrap SwIpFilterRejectTrap 6.1.4.1.202.20.68.2.1.0.1
31 Configuring SNMPv3 Groups
Setting SNMPv3 Views
32 Configuring SNMPv3 Views
User Authentication
Configuring User Accounts
33 Access Levels
Configuring Local/Remote Logon Authentication
Command Usage
Radius Settings
Tacacs Settings
34 Authentication Settings
User Authentication
Configuring Https
Https System Support Web Browser Operating System
Replacing the Default Secure-site Certificate
Configuring the Secure Shell
User Authentication
Configuring the SSH Server
SSH server includes basic settings for authentication
Generating the Host Key Pair
37 SSH Host-Key Settings
Configuring Port Security
Configuring 802.1X Port Authentication
38 Configuring Port Security
Displaying 802.1X Global Settings
802.1X protocol provides client authentication
Configuring 802.1X Global Settings
CLI This example shows the default global setting for
CLI This example enables 802.1X globally for the switch
Web Click Security, 802.1X, Information
Configuring Port Settings for
Authorized
41 802.1X Port Configuration
Consoleconfig#interface ethernet 1/2
Displaying 802.1X Statistics
802.1X Statistics
Parameter Description
Access Control Lists
Configuring Access Control Lists
CLI This example displays the 802.1X statistics for port
Setting the ACL Name and Type
CLI This example creates a standard IP ACL named david
Configuring a Standard IP ACL
Configuring an Extended IP ACL
Configuring the Switch
45 Configuring Extended IP ACLs
Configuring a MAC ACL
Binding a Port to an Access Control List
This switch supports ACLs for ingress filtering only
Filtering IP Addresses for Management Access
47 Configuring ACL Port Binding
48 Creating an IP Filter List
Port Configuration
CLI This example allows Snmp access for a specific client
Displaying Connection Status
Field Attributes Web
Configuration
Web Click Port, Port Information or Trunk Information
Basic Information
Configuring Interface Connections
Current Status
50 Port/Trunk Configuration
Creating Trunk Groups
Statically Configuring a Trunk
51 Configuring Static Trunks
Enabling Lacp on Selected Ports
131
52 Lacp Trunk Configuration
Configuring Lacp Parameters
Dynamically Creating a Port Channel
53 Lacp Port Configuration
Displaying Lacp Port Counters
You can display statistics for Lacp protocol messages
Lacp Port Counters
Field Description
54 Lacp Port Counters Information
CLI The following example displays Lacp counters
Displaying Lacp Settings and Status for the Local Side
Lacp Internal Configuration Information
55 Lacp Port Internal Information
Displaying Lacp Settings and Status for the Remote Side
Lacp Neighbor Configuration Information Field Description
Setting Broadcast Storm Thresholds
57 Port Broadcast Control
Configuring Port Mirroring
58 Mirror Port Configuration
Configuring Rate Limits
Rate Limit Configuration
Showing Port Statistics
10 Port Statistics
Etherlike Statistics
Or alignment error Received Bytes
Rmon Statistics Drop Events
Resources Jabbers
Formed Oversize Frames
60 Port Statistics
Address Table Settings
Setting Static Addresses
CLI This example shows statistics for port
61 Configuring a Static Address Table
Displaying the Address Table
62 Configuring a Dynamic Address Table
Spanning Tree Algorithm Configuration
Changing the Aging Time
CLI This example sets the aging time to 300 seconds
Spanning Tree Algorithm Configuration
104
Displaying Global Settings
64 Displaying Spanning Tree Information
Configuring Global Settings
Global settings apply to the entire switch
Basic Configuration of Global Settings
Root Device Configuration
Configuration Settings for Rstp
Configuration Settings for Mstp
65 Configuring Spanning Tree
Displaying Interface Settings
112
66 Displaying Spanning Tree Port Information
CLI This example shows the STA attributes for port
Configuring Interface Settings
67 Configuring Spanning Tree per Port
CLI This example sets STA attributes for port
Configuring Multiple Spanning Trees
68 Configuring Multiple Spanning Trees
Displaying Interface Settings for Mstp
MST Instance ID Instance identifier to configure. Default
69 Displaying Mstp Interface Settings
Configuring Interface Settings for Mstp
121
Vlan Configuration
Ieee 802.1Q VLANs
CLI This example sets the Mstp attributes for port
Assigning Ports to VLANs
124
Enabling or Disabling Gvrp Global Setting
CLI This example enables Gvrp for the switch
Forwarding Tagged/Untagged Frames
Command Attributes Web
Displaying Basic Vlan Information
Displaying Current VLANs
73 Displaying Current VLANs Command Attributes CLI
Creating VLANs
175
Adding Static Members to VLANs Vlan Index
CLI This example creates a new Vlan
130
75 Configuring a Vlan Static Table
Adding Static Members to VLANs Port Index
Configuring Vlan Behavior for Interfaces
Configuring Ieee 802.1Q Tunneling
77 Configuring VLANs per Port
Layer 2 Flow for Packets Coming into a Tunnel Access Port
Layer 2 Flow for Packets Coming into a Tunnel Uplink Port
Configuration Limitations for QinQ
General Configuration Guidelines for QinQ
Enabling QinQ Tunneling on the Switch
78 802.1Q Tunnel Status
CLI This example sets the switch to operate in QinQ mode
Adding an Interface to a QinQ Tunnel
79 Tunnel Port Configuration
45-1
Configuring Private VLANs
CLI This example enables private VLANs
Enabling Private VLANs
Configuring Uplink and Downlink Ports
Protocol Vlan Group Configuration
Protocol VLANs
Configuring Protocol Vlan Interfaces
82 Protocol Vlan Configuration
Class of Service Configuration
Layer 2 Queue Settings
Setting the Default Priority for Interfaces
Port Priority Configuration
CLI This example assigns a default priority of 5 to port
Mapping CoS Values to Egress Queues
11 Mapping CoS Values to Egress Queues
12 CoS Priority Levels
Priority Level Traffic Type
Background
Spare
Selecting the Queue Mode
Enabling CoS
Setting the Service Weight for Traffic Classes
87 Queue Mode
Layer 3/4 Priority Settings
Mapping Layer 3/4 Priorities to CoS Values
Selecting IP Precedence/DSCP Priority
Mapping IP Precedence
13 Mapping IP Precedence
90 Mapping IP Precedence Priority Values
Mapping Dscp Priority
14 Mapping Dscp Priority Values
IP Dscp Value CoS Value
10, 12, 14 18, 20, 22 26, 28, 30, 32, 34 38, 40
Mapping IP Port Priority
92 IP Port Priority Status
Quality of Service
93 IP Port Priority
Configuring Quality of Service Parameters
Configuring a Class Map
Class map is used for matching packets to a specified class
Class Configuration
Match Class Settings
Class Map
94 Configuring Class Maps
Policy Configuration
Creating QoS Policies
Policy Map
Policy Rule Settings Class Settings
Policy Options
95 Configuring Policy Maps
96 Service Policy Settings
Attaching a Policy Map to Ingress Queues
Multicast Filtering
Layer 2 Igmp Snooping and Query
Configuring Igmp Snooping and Query Parameters
97 Igmp Configuration
Enabling Igmp Immediate Leave
Displaying Interfaces Attached to a Multicast Router
98 Igmp Immediate Leave
Specifying Static Interfaces for a Multicast Router
99 Displaying Multicast Router Port Information
Displaying Port Members of Multicast Services
100 Static Multicast Router Port Configuration
Assigning Ports to Multicast Services
101 IP Multicast Registration Table
Igmp Filtering and Throttling
102 Igmp Member Port Table
Enabling Igmp Filtering and Throttling
103 Enabling Igmp Filtering and Throttling
Configuring Igmp Filtering and Throttling for Interfaces
Configuring Igmp Filter Profiles
104 Igmp Filter and Throttling Port Configuration
105 Igmp Profile Configuration
Multicast Vlan Registration
Configuring Global MVR Settings
General Configuration Guidelines for MVR
106 MVR Global Configuration
Displaying MVR Interface Status
Web Click MVR, Port or Trunk Information
107 MVR Port Information
Displaying Port Members of Multicast Groups
108 MVR Group IP Information
Configuring MVR Interface Status
MVR Vlan
Web Click MVR, Port or Trunk Configuration
Assigning Static Multicast Groups to Interfaces
Configuring Domain Name Service
Configuring General DNS Service Parameters
111 DNS General Configuration
Configuring Static DNS Host to Address Entries
238
112 DNS Static Host Table
Displaying the DNS Cache
113 DNS Cache
Dhcp Snooping
Dhcp Snooping Configuration
Web Click Dhcp Snooping, Configuration
Dhcp Snooping Vlan Configuration
Dhcp Snooping Information Option Configuration
Enables Dhcp snooping on the specified Vlan
CLI This example first enables Dhcp Snooping for Vlan
Dhcp Snooping Port Configuration
Trust Status Enables or disables port as trusted
117 Dhcp Snooping Port Configuration
Dhcp Snooping Binding Information
IP Source Guard Port Configuration
IP Source Guard
Web Click Dhcp Snooping, Dhcp Snooping Binding Information
Static IP Source Guard Binding Configuration
119 IP Source Guard Port Configuration
120 Static IP Source Guard Binding Configuration
Dynamic IP Source Guard Binding Information
Switch Clustering
Web Click IP Source Guard, Dynamic Information
Cluster Configuration
122 Cluster Member Choice
Cluster Member Configuration
Web Click Cluster, Configuration
Adds Candidate switches to the cluster as Members
Web Click Cluster, Member Configuration
Displays current cluster Member switch information
Cluster Member Information
Cluster Candidate Information
126 Cluster Candidate Information
Using the Command Line Interface
Accessing the CLI
Telnet Connection
Entering Commands
Command Completion
Getting Help on Commands
Keywords and Arguments
Showing Commands
Negating the Effect of Commands
Using Command History
Understanding Command Modes
Partial Keyword Lookup
Exec Commands
Command Modes
Configuration Commands
Configuration Modes Command Prompt
Consoleconfig-if# 120
Command Line Processing
Command Line Processing
Keystroke Function
Command Groups
Command Groups Description
Line Commands
Line Commands Function Mode
Login
Line
Password
Username 4-25 password
Syntax Password 0 7 password no password
No password is specified
Timeout login response
Exec-timeout
Password-thresh
Syntax Exec-timeout seconds no exec-timeout
Syntax Password-thresh threshold no password-thresh
Silent-time
Databits
Syntax Silent-time seconds no silent-time
Parity
Syntax Databits 7 8 no databits
Syntax Parity none even odd no parity
Speed
Stopbits
Syntax Speed bps no speed
Syntax Stopbits 1
Disconnect
Show line
Syntax Disconnect session-id
Syntax Show line console vty
General Commands
Enable
To show all lines, enter this command
General Commands Function Mode
Disable
Disable Enable password
Enable
Level
Configure
Show history
Reload
End
This command exits the configuration program
This example shows how to quit a CLI session
Exit
Quit
System Management Commands
Device Designation Commands
Prompt
User Access Commands
User Access Commands Function Mode
Hostname
Username
Enable password
10 Default Login Settings Username Access-level Password
Guest Admin
IP Filter Commands
11 IP Filter Commands Function Mode
Management
Show management
All addresses
Web Server Commands
12 Web Server Commands Function Mode
Default Setting Command Mode
Ip http port
Syntax No ip http server Default Setting
Syntax No ip http secure-server Default Setting
Ip http server
Ip http secure-server
Ip http secure-port
13 Https System Support Web Browser Operating System
Ip http secure-port4-31 Copy tftp https-certificate
Portnumber The UDP port used for HTTPS. Range
Telnet Server Commands
14 Telnet Server Commands Function Mode
Ip telnet port
Ip http secure-server4-30
Secure Shell Commands
Syntax No ip telnet server Default Setting
15 SSH Commands Function Mode
Ip telnet server
Copy tftp public-key
Syntax No ip ssh server Default Setting
Ip ssh server
Ip ssh timeout
Syntax Ip ssh timeout seconds no ip ssh timeout
Exec-timeout4-13 show ip ssh
Ip ssh crypto host-key generate 4-38 show ssh
Ip ssh authentication-retries
Ip ssh server-key size
Key-size- The size of server key. Range 512-896 bits
Bits
Delete public-key
Ip ssh crypto host-key generate
Syntax Delete public-key username dsa rsa
Syntax Ip ssh crypto host-key generate dsa rsa
Ip ssh crypto zeroize
Ip ssh save host-key
Syntax Ip ssh crypto zeroize dsa rsa
Syntax Ip ssh save host-key dsa rsa
This command displays the current SSH server connections
Show ip ssh
Show ssh
Ip ssh crypto host-key generate
Show public-key
Terminology
Syntax Show public-key user username host
Console#show public-key host Host
Event Logging Commands
17 Event Logging Commands Function Mode
Syntax No logging on Default Setting
Logging on
Flash errors level 3 RAM warnings level 6
Logging history
18 Logging Levels
Logging host
Logging facility
Syntax No logging host hostipaddress
Hostipaddress The IP address of a syslog server
Logging trap
Clear logging
Syntax Logging trap level no logging trap
Syntax Clear logging flash ram
Show logging
Syntax Show logging flash ram sendmail trap
19 show logging flash/ram display description
Facility command
Logging trap command
Syntax Show log flash ram login tail
Show log
Smtp Alert Commands
21 Smtp Alert Commands Function Mode
Logging sendmail host
Following example shows sample messages stored in RAM
Logging sendmail level
Syntax Logging sendmail level level
Logging sendmail source-email
Logging sendmail destination-email
Syntax No logging sendmail source-email email-address
This example will set the source email john@acme.com
Syntax No logging sendmail Default Setting
Logging sendmail
Show logging sendmail
Time Commands
22 Time Commands Function Mode
Syntax No sntp client Default Setting
Sntp client
Sntp server
Sntp server 4-54 sntp poll 4-55 show sntp
Syntax Sntp server ip1 ip2 ip3
Sntp client 4-53 sntp poll 4-55 show sntp
Sntp poll
Show sntp
Syntax Sntp poll seconds no sntp poll
Sntp client
Clock timezone
Calendar set
Syntax
Calendar set hour min sec day month year month day year
System Status Commands
Show startup-config
This command displays the system clock
23 System Status Commands Function Mode
Command Line Interface
Show running-config
Show running-config4-59
Show startup-config4-57
This command displays system information
Show system
Show users
Show version
Frame Size Commands
24 Frame Size Commands Function Mode
Jumbo frame Enables support for jumbo frames
Syntax No jumbo frame Default Setting
Flash/File Commands
25 Flash/File Commands Function Mode
Copy
Copy
Flash/File Commands
Following example shows how to download a configuration file
This command deletes a file or image
Delete
Delete unit filename
Dir Delete public-key4-38
Syntax Dir unit boot-rom config opcode filename
Dir
26 File Directory Information
Column Heading Description
Whichboot
Boot system
Syntax whichboot unit
Syntax Boot system unit boot-romconfig opcode filename
Authentication Commands
Authentication Sequence
Dir 4-68 whichboot
27 Authentication Commands Command Group Function
Authentication login
Username for setting the local user names and passwords
Local
Authentication enable
29 Radius Client Commands Function Mode
Show radius-server Shows the current Radius settings
Radius Client
Default Setting Auth-port
Retransmit Command Mode
Radius-server host
Radius-server port
Radius-server key
Radius-server retransmit
Syntax Radius-server key keystring no radius-server key
Radius-server timeout
Show radius-server
30 Tacacs Commands Function Mode
TACACS+ Client
Tacacs-server host
Tacacs-server port
Tacacs-server key
Show tacacs-server
Syntax Tacacs-server key keystring no tacacs-server key
Port Security Commands
31 Port Security Commands Function Mode
Status Disabled Action None Maximum Addresses
Interface Configuration Ethernet
Command Usage
802.1X Port Authentication
32 802.1X Port Authentication Command Function Mode
Syntax No dotx system-auth-control Default Setting
Dot1x system-auth-control
Dot1x default
Default Command Mode
Dot1x max-req
Dot1x port-control
Dot1x operation-mode
Force-authorized
Single-host
Dot1x re-authenticate
Dot1x re-authentication
Dot1x timeout quiet-period
Dot1x timeout re-authperiod
Dot1x timeout tx-period
Show dot1x
Syntax Show dot1x statistics interface interface
Statistics Displays dot1x status for each port
Authenticator State Machine
Reauthentication State Machine
State Current state including initialize, reauthenticate
Backend State Machine
Command Line Interface
Access Control List Commands
Access Control Lists
33 Access Control Lists Command Groups Function
Access-list ip
34 IP ACLs Command Function Mode
Syntax No access-list ip standard extended aclname
IP ACLs
Permit, deny Ip access-group4-93 show ip access-list4-93
Access-list ip
Syntax No permit deny any source bitmask host source
Standard ACL
Any destination address-bitmask host destination
Source-port sport end destination-port dport end
Extended ACL
Show ip access-list
Ip access-group
Syntax Show ip access-list standard extended aclname
Syntax No ip access-group aclname
Show ip access-group
Show ip access-list4-93
This command shows the ports assigned to IP ACLs
Access-list mac
35 MAC ACL Commands Function Mode
Syntax No access-list mac aclname
Permit, deny Mac access-group4-98 show mac access-list4-97
Permit, deny MAC ACL
Show mac access-list
This command displays the rules for configured MAC ACLs
Syntax Show mac access-list aclname
Permit, deny Mac access-group4-98
Mac access-group
Show mac access-group
Syntax Mac access-group aclname
Show mac access-list4-97
Show access-list
Show access-group
36 ACL Information Command Function Mode
ACL Information
Snmp Commands
37 Snmp Commands Function Mode
Syntax No snmp-server Default Setting
Snmp-server
Show snmp
Snmp-server community
Snmp-server contact
Snmp-server location
Syntax Snmp-server contact string no snmp-server contact
Syntax Snmp-server location text no snmp-server location
Snmp-server host
Host Address None Notification Type Traps
Snmp Version UDP Port
Snmp-server enable traps
Snmp-server enable traps
Issue authentication and link-up-down traps
Snmp-server engine-id
This command shows the Snmp engine ID
This example shows the default engine ID
Show snmp engine-id
Defaultview includes access to the entire MIB tree
Snmp-server view
Examples
This view includes MIB-2
This command shows information on the Snmp views
Show snmp view
Snmp-server group
39 show snmp view display description
Consoleconfig#snmp-server group r&d v3 auth write daily
Show snmp group
Snmp-server user
40 show snmp group display description
114
This command shows information on Snmp users
Show snmp user
41 show snmp user display description
Interface Commands
42 Interface Commands Function Mode
Interface
Port-channel channel-idRange
Description
Speed-duplex
Syntax Description string no description
Syntax No negotiation Default Setting
Negotiation
Negotiation 4-118 capabilities
Following example configures port 11 to use autonegotiation
Capabilities
Capabilities 4-119speed-duplex4-117
Syntax No flowcontrol Default Setting
Flowcontrol
Negotiation 4-118speed-duplex4-117 flowcontrol
Syntax No shutdown Default Setting
Shutdown
Switchport broadcast packet-rate
Port-channel channel-idRange Default Setting
Clear counters
Syntax Clear counters interface
This command displays the status for an interface
Show interfaces status
Following example clears statistics on port
Syntax Show interfaces status interface
This command displays interface statistics
Show interfaces counters
Syntax Show interfaces counters interface
Shows the counters for all interfaces
Show interfaces switchport
Syntax Show interfaces switchport interface
Shows all interfaces
43 Interfaces Switchport Statistics
Mirror Port Commands
44 Mirror Port Commands Function Mode
Port monitor
Interface ethernet unit/port source port
This command displays mirror information
Following shows mirroring configured from port 6 to port
Show port monitor
Syntax Show port monitor interface
Rate Limit Commands
Rate-limit
Gigabit Ethernet 1000 Mbps
Link Aggregation Commands
46 Link Aggregation Commands
135
123
Channel-group
Guidelines for Creating Trunks
General Guidelines
Dynamically Creating a Port Channel
Syntax No lacp Default Setting
Lacp
Following example creates trunk 1 and then adds port
Lacp system-priority
32768
Lacp admin-keyEthernet Interface
Lacp admin-key Port Channel
Interface Configuration Port Channel
This command displays Lacp information
Lacp port-priority
Show lacp
Port Channel all
47 show lacp counters display description
Type
LACPDUs Illegal Pkts
48 show lacp internal display description
49 show lacp neighbors display description
50 show lacp sysid display description
Address Table Commands
51 Address Table Commands Function Mode
Mac-address-table static
Action
Clear mac-address-table dynamic
Show mac-address-table
Mac-address- MAC address Mask Bits to match in the address
Mac-address-table aging-time
Sort Sort by address, vlan or interface
Show mac-address-table aging-time
Spanning Tree Commands
52 Spanning Tree Commands Function Mode
Spanning-tree mode
Syntax No spanning-tree Default Setting
Spanning tree is enabled
Spanning-tree
Spanning-tree forward-time
Spanning-tree hello-time
Spanning-tree max-age
Spanning-tree priority
Spanning-tree pathcost method
Long method
Spanning-tree mst-configuration
This command limits the maximum transmission rate for BPDUs
Spanning-tree transmission-limit
Count The transmission limit in seconds. Range
MST Configuration
Mst vlan
Mst priority
No mst instanceid vlan vlan-range
Switch’s MAC address
Name
Syntax Name name
Name Name of the spanning tree
Revision
Max-hops
Syntax Revision number
Max-hopshop-number
Spanning-tree spanning-disabled
Syntax No spanning-tree spanning-disabled Default Setting
This example disables the spanning tree algorithm for port
Spanning-tree cost
Spanning-tree port-priority
Priority The priority for a port. Range 0-240, in steps
Syntax No spanning-tree edge-port Default Setting
Syntax No spanning-tree portfast Default Setting
Spanning-tree edge-port
Spanning-tree portfast
Spanning-tree link-type
Spanning-treeedge-port4-156
Auto
Spanning-tree mst cost
Spanning-tree mst port-priority
Spanning-tree mst port-priority4-159
Port-channel channel-idRange Command Mode
Spanning-tree protocol-migration
Show spanning-tree
Syntax Spanning-tree protocol-migration interface
Mstp
Show spanning-tree mst configuration
Vlan Commands
Gvrp and Bridge Extension Commands
53 VLANs Command Groups Function
54 Gvrp and Bridge Extension Commands Function Mode
Syntax No bridge-ext gvrp Default Setting
Bridge-ext gvrp
Show bridge-ext
Switchport gvrp
Show gvrp configuration
Syntax No switchport gvrp Default Setting
Syntax Show gvrp configuration interface
Garp timer
Show garp timer
Syntax Show garp timer interface
55 Editing Vlan Groups Command Function Mode
Editing Vlan Groups
Vlan database
By default only Vlan 1 exists and is active
Vlan Database Configuration
Vlan
Show vlan
Configuring Vlan Interfaces
56 Configuring Vlan Interfaces Command Function Mode
Interface vlan
Interface vlan
Switchport mode
All ports are in hybrid mode with the Pvid set to Vlan
Switchport acceptable-frame-types4-171
Switchport acceptable-frame-types
Switchport ingress-filtering
Switchport mode
All frame types
Switchport native vlan
Switchport allowed vlan
Switchport forbidden vlan
No VLANs are included in the forbidden list
57 Show Vlan Commands Function Mode
Displaying Vlan Information
Show vlan
Configuring Ieee 802.1Q Tunneling
58 Ieee 802.1Q Tunneling Commands Function Mode
General Configuration Guidelines for QinQ
Dot1q-tunnel system-tunnel-control
Switchport dot1q-tunnel mode
Show dot1q-tunnel4-178 Show interfaces switchport
Switchport dot1q-tunnel tpid
Related Commands
This command displays information about QinQ tunnel ports
Show dot1q-tunnel
Switchport dot1q-tunnel mode
59 Private Vlan Commands Function Mode
Pvlan
This command displays the configured private Vlan
Show pvlan
No private VLANs are defined
Configuring Protocol-based VLANs
Protocol-vlan protocol-group Configuring Groups
60 Protocol-based Vlan Commands Function Mode
Protocol-vlan protocol-group Configuring Interfaces
No protocol groups are configured
No protocol groups are mapped for any interface
Show protocol-vlan protocol-group
Show interfaces protocol-vlan protocol-group
Syntax Show protocol-vlan protocol-group group-id
Priority Commands
Priority Commands Layer
61 Priority Commands Command Groups Function
62 Priority Commands Layer Function Mode
Queue mode
Switchport priority default
Syntax Queue mode strict wrr no queue mode
Queue bandwidth weight1...weight4 no queue bandwidth
Weights 1, 2, 4, 8 are assigned to queues 0-3 respectively
Queue bandwidth
63 Default CoS Values to Egress Queues
Queue cos-map
Queue cos-mapqueueid cos1 ... cosn no queue cos-map
Show queue mode
Following example shows how to change the CoS assignments
This command shows the current queue mode
Show queue bandwidth
Priority Commands Layer 3
This command shows the class of service priority map
64 Priority Commands Layer 3 Function Mode
Show queue cos-map
Syntax No map ip dscp Default Setting
Map ip dscp dscp-value cos cos-value no map ip dscp
65 IP Dscp to CoS Vales IP Dscp Value CoS Value
This command shows the IP Dscp priority map
Show map ip dscp
Syntax Show map ip dscp interface
Quality of Service Commands
66 Quality of Service Commands Function Mode
198 Service-policy
199 Input of a particular interface Show class-map
Class-map
Match
Syntax No class-map class-map-namematch-any
Show class map
Class Map Configuration
Policy-map
No policy-mappolicy-map-name
Policy Map Configuration
Class
No class class-map-name
Policy Map Class Configuration
Set
Police
Syntax No police rate-kbpsburst-byteexceed-action drop set
Drop out-of-profile packets
Service-policy
Syntax No service-policy input policy-map-name
Show class-map
Syntax Show class-map class-map-name
Show policy-map
Show policy-map interface
Show policy-mappolicy-map-name class class-map-name
Displays all policy maps and all classes
Multicast Filtering Commands
Igmp Snooping Commands
67 Multicast Filtering Commands Command Groups Function
68 Igmp Snooping Commands Function Mode
Syntax No ip igmp snooping Default Setting
Following example enables Igmp snooping
Ip igmp snooping
Ip igmp snooping vlan static
Following configures the switch to use Igmp Version
Syntax No ip igmp snooping leave-proxy Default Setting
Ip igmp snooping version
Ip igmp snooping leave-proxy
Syntax No ip igmp snooping immediate-leave Default Setting
Interface Configuration Vlan
This command shows the Igmp snooping configuration
Ip igmp snooping immediate-leave
Following shows the current Igmp snooping configuration
This command shows known multicast addresses
Show mac-address-table multicast
Igmp Query Commands Layer
69 Igmp Query Commands Layer Function Mode
Syntax No ip igmp snooping querier Default Setting
Ip igmp snooping querier
Following shows how to configure the query count to
Ip igmp snooping query-interval
Times
Ip igmp snooping query-max-response-time4-208
Seconds The report delay advertised in Igmp queries. Range
Ip igmp snooping query-max-response-time
Ip igmp snooping router-port-expire-time
Static Multicast Routing Commands
70 Static Multicast Routing Commands Function Mode
Ip igmp snooping vlan mrouter
Syntax No ip igmp snooping vlan vlan-idmrouter interface
Displays multicast router ports for all configured VLANs
Show ip igmp snooping mrouter
Syntax Show ip igmp snooping mrouter vlan vlan-id
Multicast router port types displayed include Static
Igmp Filtering and Throttling Commands
71 Igmp Filtering and Throttling Commands Function Mode
Syntax No ip igmp filter Default Setting
213
Syntax Permit deny Default Setting
Ip igmp profile
Permit, deny
Syntax No ip igmp profile profile-number
Range
No range low-ip-address high-ip-address
Syntax No ip igmp filter profile-number
Ip igmp max-groups
Syntax Ip igmp max-groups number No ip igmp max-groups
Ip igmp max-groups action
Show ip igmp filter
Syntax Ip igmp max-groups action replace deny
Syntax Show ip igmp filter interface interface
Show ip igmp profile
Show ip igmp throttle interface
Syntax Show ip igmp profile profile-number
Syntax Show ip igmp throttle interface interface
Multicast Vlan Registration Commands
72 Multicast Vlan Registration Commands Function Mode
Port Port number. Range Port-channelchannel-id Range
219
Command Line Interface Mvr Global Configuration
No mvr group ip-address count vlan vlan-id
Multicast Filtering Commands Mvr Interface Configuration
220
Show mvr
Syntax Show mvr interface interface members ip-address
73 show mvr display description
74 show mvr interface display description
75 show mvr members display description
Members
IP Interface Commands
76 IP Interface Commands Function Mode
Ip address
224
Ip default-gateway
Syntax Ip default-gateway gateway no ip default-gateway
Gateway IP address of the default gateway
Following example defines a default gateway for this device
This command submits a Bootp or Dhcp client request
This command displays the settings of an IP interface
Ip dhcp restart
Show ip interface
Ip default-gateway4-224
This command has no default for the host
Show ip redirects
Ping
IP Source Guard Commands
77 IP Source Guard Commands Function Mode
Ip source-guard
Syntax Ip source-guard sip sip-macno ip source-guard
This example enables IP source guard on port
No configured entries
Ip source-guard binding
No ip source-guard binding mac-addressvlan vlan-id
This command shows the source guard binding table
Show ip source-guard
Show ip source-guard binding
Ip source-guard4-227 ip dhcp snooping Ip dhcp snooping vlan
Dhcp Snooping Commands
78 Dhcp Snooping Commands Function Mode
Syntax No ip dhcp snooping Default Setting
Ip dhcp snooping
232
This example enables Dhcp snooping globally for the switch
This example enables Dhcp snooping for Vlan
Ip dhcp snooping vlan
Ip dhcp snooping vlan 4-233 ip dhcp snooping trust
Syntax No ip dhcp snooping trust Default Setting
Ip dhcp snooping trust
This example enables MAC address verification
Ip dhcp snooping verify mac-address
Ip dhcp snooping information option
This example enables the Dhcp Snooping Information Option
Ip dhcp snooping information policy
Replace
Switch Cluster Commands
79 Switch Cluster Commands Function Mode
Show ip dhcp snooping
Show ip dhcp snooping binding
Syntax No cluster Default Setting
Cluster
Displays current cluster Candidates in the network 242
Cluster commander
Syntax No cluster commander Default Setting
Cluster ip-pool
Syntax Cluster ip-pool ip-addressno cluster ip-pool
Rcommand
Syntax Rcommand id member-id
Member-id- The ID number of the Member switch. Range
Cluster member
This command shows the switch clustering configuration
This command shows the current switch cluster members
Show cluster
Show cluster members
Show cluster candidates
Appendix a Software Specifications
Software Features
Management Features
Groups 1, 2, 3, 9 Statistics, History, Alarm, Event
Standards
Igmp RFC 1112 IGMPv2 RFC 2236 RADIUS+ RFC
Management Information Bases
Management Information Bases a
Software Specifications
Table B-1 Troubleshooting Chart
Symptom Action
Using System Logs
Access Control List ACL
Boot Protocol Bootp
Class of Service CoS
Differentiated Services Code Point Service Dscp
Garp Vlan Registration Protocol Gvrp
Generic Attribute Registration Protocol Garp
Generic Multicast Registration Protocol Gmrp
Group Attribute Registration Protocol Garp
Igmp Snooping
Igmp Query
Internet Group Management Protocol Igmp
In-Band Management
Multicast Switching
Port Authentication
Remote Authentication Dial-in User Service Radius
Network Time Protocol NTP
Secure Shell SSH
Simple Network Management Protocol Snmp
Simple Network Time Protocol Sntp
Spanning Tree Algorithm STA
Virtual LAN Vlan
XModem
Index
Numerics
Gateway, default 3-14,4-224
Index
Index-3
Index-4
Page
Technical Support