TigerSwitch 10/100/1000
Page
TigerSwitch 10/100/1000 Management Guide
Trademarks
Limited Warranty
Limited Warranty
Contents
Viii
Contents
Contents
Contents
Xii
Command Line Interface
Using the Command Line Interface
Xiii
Xiv
Contents
Xvi
Xvii
Xviii
Xix
Contents
Xxi
Xxii
Xxiii
Xxiv
Xxv
Index Appendix B Troubleshooting Inde-1 Glossary
Xxvi
Chapter Introduction
Key Features
Lacp
Description of Software Features
Introduction
Description of Software Features
Introduction
Description of Software Features
Introduction
Description of Software Features
Function Parameter Default
System Defaults
Snmp
ARP
Hsrp
Introduction
Configuration Options
Connecting to the Switch
Initial Configuration
Required Connections
Initial Configuration
Console Connection
Basic Configuration
Remote Connections
Setting Passwords
Manual Configuration
Setting an IP Address
Dynamic Configuration
Basic Configuration
Community Strings
Enabling Snmp Management Access
Trap Receivers
Saving Configuration Settings
Managing System Files
Initial Configuration
Using the Web Interface
Configuring the Switch
Configuring the Switch
Home
Navigating the Web Browser Interface
Main Menu
Panel Display
Menu Description
Configures Secure Shell server settings
Mstp
Vlan
Configures Weighted Round Robin queueing 176
Igmp
Shows statistics for Icmp traffic, including 265
285
323
Displaying System Information
Basic Configuration
Main Board
Displaying Switch Hardware/Software Versions
CLI Specify the hostname, location and contact information
Expansion Slots
Management Software
Displaying Bridge Extension Capabilities
CLI Use the following command to display version information
Basic Configuration
Setting the Switch’s IP Address
Manual Configuration
Using DHCP/BOOTP
Basic Configuration
Downloading System Software from a Server
Managing Firmware
Basic Configuration
Downloading Configuration Settings from a Server
Saving or Restoring Configuration Settings
Basic Configuration
System Log Configuration
Configuring Event Logging
Level Argument Description
Flash. Range 0-7, Default
Remote Log Configuration
Basic Configuration
Set the logging trap
Displaying Log Messages
Error
Resetting the System
Setting the System Clock
Configuring Sntp
Setting the Time Zone
Simple Network Management Protocol
Access Mode
Setting Community Access Strings
Consoleconfig#snmp-server community spiderman rw3-147
Specifying Trap Managers and Trap Types
Configuring the Switch
Filtering Addresses for Snmp Client Access
User Authentication
User Name* The name of the user
Configuring the Logon Password
Access Level* Specifies the user level
Password Specifies the user password
Configuring Local/Remote Logon Authentication
Radius Settings
Tacacs Settings
User Authentication
Https
Configuring Https
Secure-site Certificate on
Replacing the Default Secure-site Certificate
Configuring the Secure Shell
Command Usage
Shown in the following example
Telnet sessions and SSH sessions
Generating the Host Key Pair
RSA
SSH server includes basic settings for authentication
Configuring the SSH Server
Configuring Port Security
Command Usage
Configuring the Switch
User Authentication
Configuring 802.1x Port Authentication
Displaying 802.1x Global Settings
Configuring the Switch
User Authentication
Configuring 802.1x Global Settings
Configuring Port Authorization Mode
Authorized
Parameter Description
Displaying 802.1x Statistics
Parameter Description
Eapol EAP
Filtering Management Access
Command Usage
User Authentication
Configuring Access Control Lists
Access Control Lists
Setting the ACL Name and Type
CLI This example creates a standard IP ACL named bill
Configuring a Standard IP ACL
Configuring an Extended IP ACL
Configuring the Switch
Access Control Lists
Configuring a MAC ACL
Command Usage
Configuring the Switch
Specifying the Mask Type
Configuring ACL Masks
This mask defines the fields to check in the IP header
Configuring an IP ACL Mask
Access Control Lists
Configuring the Switch
This mask defines the fields to check in the packet header
Configuring a MAC ACL Mask
Configuring the Switch
Binding a Port to an Access Control List
Command Attributes
Displaying Connection Status
Port Configuration
Web Click Port, Port Information or Trunk Information
Current status
CLI This example shows the connection status for Port
Configuring Interface Connections
Configuring the Switch
Port Configuration
Creating Trunk Groups
Statically Configuring a Trunk
Configuring the Switch
Enabling Lacp on Selected Ports
100
101
Configuring Lacp Parameters
102
103
You can display statistics for Lacp protocol messages
104
105
106
Displaying Lacp Settings and Status for the Local Side
107
108
Displaying Lacp Settings and Status for the Remote Side
109
110
111
Setting Broadcast Storm Thresholds
112
113
Configuring Port Mirroring
114
115
Configuring Rate Limits
116
Showing Port Statistics
Parameter Description
117
Etherlike Statistics
118
Rmon Statistics
119
120
121
CLI This example shows statistics for port
Address Table Settings
Setting Static Addresses
122
123
124
Displaying the Address Table
125
Changing the Aging Time
CLI This example sets the aging time to 400 seconds
Spanning Tree Algorithm Configuration
126
127
Displaying Global Settings
128
Instance
129
130
131
Configuring Global Settings
Global settings apply to the entire switch
132
Basic Configuration of Global Settings
133
Root Device Configuration
Configuration Settings for Rstp
134
Configuration Settings for Mstp
135
136
Displaying Interface Settings
137
STA Port Information only
138
139
140
Configuring Interface Settings
141
142
Vlan ID Vlan to assign to this selected MST instance. Range
143
VLANs in MST Instance VLANs assigned this instance
MST ID
144
145
146
Displaying Interface Settings for Mstp
147
148
Configuring Interface Settings for Mstp
149
150
Vlan Configuration
Overview
Priority tagging
151
Assigning Ports to VLANs
152
Forwarding Tagged/Untagged Frames
153
Maximum Number of Supported VLANs Maximum number
Enabling or Disabling Gvrp Global Setting
Displaying Basic Vlan Information
154
155
VLANs that can be configured on this switch
Displaying Current VLANs
156
157
158
Creating VLANs
CLI This example creates a new Vlan
Vlan ID of configured Vlan 1-4094, no leading zeroes
Adding Static Members to VLANs Vlan Index
159
160
161
Adding Static Members to VLANs Port Index
162
163
Configuring Vlan Behavior for Interfaces
164
165
166
Enabling Private VLANs
Configuring Private VLANs
167
168
Configuring Protocol-Based VLANs
Configuring Uplink and Downlink Ports
Create a protocol group for one or more protocols
Configuring Protocol Groups
169
Mapping Protocols to VLANs
170
171
172
Class of Service Configuration
Setting the Default Priority for Interfaces
173
174
Mapping CoS Values to Egress Queues
175
176
Selecting the Queue Mode
Setting the Service Weight for Traffic Classes
177
178
179
Mapping Layer 3/4 Priorities to CoS Values
Selecting IP Precedence/DSCP Priority
180
181
Mapping IP Precedence
182
183
Mapping Dscp Priority
184
185
Command Attributes
Mapping IP Port Priority
186
Mapping CoS Values to ACLs
187
188
Changing Priorities Based on ACL Rules
189
190
Multicast Filtering
191
Igmp Protocol
192
Layer 2 Igmp Snooping and Query
193
Configuring Igmp Snooping and Query Parameters
194
Displaying Interfaces Attached to a Multicast Router
195
Specifying Static Interfaces for a Multicast Router
196
197
198
Displaying Port Members of Multicast Services
199
Assigning Ports to Multicast Services
200
Layer 3 Igmp Query used with Multicast Routing
Vlan Interface Vlan interface bound to a primary IP address
201
202
203
204
Displaying Multicast Group Information
205
206
Configuring Domain Name Service
Configuring General DNS Server Parameters
207
208
209
Configuring Static DNS Host to Address Entries
210
211
212
Displaying the DNS Cache
213
Dynamic Host Configuration Protocol
214
Configuring Dhcp Relay Service
215
Configuring the Dhcp Server
216
Enabling the Server, Setting Excluded Addresses
217
Configuring Address Pools
Creating a New Address Pool
Setting the Network Parameters
Setting the Host Parameters
218
219
Setting the Optional Parameters
220
221
Configuring a Network Address Pool
222
Configuring a Host Address Pool
Displaying Address Bindings
CLI This example configures a host address pool
223
MAC
224
225
Configuring Router Redundancy
226
Virtual Router Redundancy Protocol
Virtual Router Priority
Configuring Vrrp Groups
227
Address Assignment
Preempting the Acting Master
228
229
230
231
232
233
Displaying Vrrp Global Statistics
234
Displaying Vrrp Group Statistics
235
236
237
Hot Standby Router Protocol
238
Configuring Hsrp Groups
Preempting the Master
239
240
241
242
243
244
245
246
Initial Configuration
IP Routing
247
IP Switching
248
Routing Protocols
249
Routing Path Management
OSPFv2 Dynamic Routing Protocol
Basic IP Interface Configuration
250
251
252
Configuring IP Routing Interfaces
253
254
255
Address Resolution Protocol
Proxy ARP
Basic ARP Configuration
256
257
Configuring Static ARP Addresses
Displaying Dynamically Learned ARP Entries
258
259
CLI This example shows all entries in the ARP cache
260
Displaying Local ARP Entries
Displaying ARP Statistics
261
262
IP Statistics
Displaying Statistics for IP Protocols
263
264
Web Click IP, Statistics, IP CLI See the example on
265
Icmp Statistics
266
Web Click IP, Statistics, Icmp CLI See the example on
267
UDP Statistics
Web Click IP, Statistics, UDP CLI See the example on
268
TCP Statistics
Web Click IP, Statistics, TCP CLI See the example on
Configuring Static Routes
269
270
271
Displaying the Routing Table
272
273
Configuring the Routing Information Protocol
274
Configuring General Protocol Settings
275
Global Settings
Timer Settings
Specifying Network Interfaces for RIP
276
277
Configuring Network Interfaces for RIP
Loopback Prevention
278
Specifying Receive and Send Protocol Types
279
Protocol Message Authentication
280
Displaying RIP Information and Statistics
281
282
Web Click Routing Protocol, RIP, Statistics
283
284
285
Configuring the Open Shortest Path First Protocol
286
More areas. An area border
287
Area Border Router 1 Indicates if this router connect
Directly to networks in two or
288
289
290
Single route. The backbone or any
Configuring Ospf Areas
291
Aggregate a range of addresses into a
292
293
Command Usage
294
Processor time. Instead, you can
295
These nodes, this wastes a lot of bandwidth
296
Ospf Interface List
Configuring Ospf Interfaces
297
298
Detail Interface Configuration
299
300
301
302
303
Configuring Virtual Links
304
305
Configuring Network Area Addresses
306
307
IP Address Summary address covering a range of addresses
Configuring Summary Addresses for External AS Routes
308
309
Redistributing External Routes
310
311
Configuring Nssa Settings
Area ID Identifier for an not-so-stubby area Nssa
312
Displaying Link State Database Information
313
314
315
Displaying Information on Border Routers
316
ID Neighbor’s router ID
317
Displaying Information on Neighbor Routers
318
Neighbors
Configuring Global Settings for Multicast Routing
Multicast Routing
319
320
321
Displaying the Multicast Routing Table
322
323
Configuring Dvmrp
324
Configuring Global Dvmrp Settings
325
Broadcasting periodically floods
326
327
328
329
Configuring Dvmrp Interface Settings
Dvmrp Interface Information
Dvmrp Interface Settings
330
You can display all the neighboring Dvmrp routers
331
Displaying Neighbor Information
332
CLI This example displays the only neighboring Dvmrp router
333
Displaying the Routing Table
334
Configuring PIM-DM
335
Configuring Global PIM-DM Settings
336
Configuring PIM-DM Interface Settings
337
338
Displaying Interface Information
339
You can display all the neighboring PIM-DM routers
340
341
342
Accessing the CLI
Using the Command Line Interface
Telnet Connection
Using the Command Line Interface
Minimum Abbreviation
Entering Commands
This section describes how to enter CLI commands
Keywords and Arguments
Getting Help on Commands
Command Completion
Showing Commands
Partial Keyword Lookup
Negating the Effect of Commands
Using Command History
Exec Commands
Understanding Command Modes
Configuration Commands
Console#configure Consoleconfig#
Mode Command Prompt
Keystroke Function
Command Line Processing
Command Group Description
Command Groups
MIB
Command Function Mode
Line Commands
Example
Default Setting
Command Mode
Syntax Line console vty
Line Configuration
Related Commands
Syntax Login local no login
Login local
No password is specified
Username 3-35 password
Syntax Password 0 7 password no password
CLI No timeout Telnet 10 minutes
Login 3-17password-thresh3-20
Syntax Exec-timeout seconds no exec-timeout
Default value is three attempts
To set the timeout to two minutes, enter this command
Syntax Password-thresh threshold no password-thresh
Silent-time3-21
Default value is no silent-time
To set the silent time to 60 seconds, enter this command
Password-thresh3-20
Data bits per character
To specify 7 data bits, enter this command
Syntax Databits 7 8 no databits
Seven data bits per character Eight data bits per character
No parity
To specify no parity, enter this command
Syntax Parity none even odd no parity
None No parity Even Even parity Odd Odd parity
Auto
To specify 57600 bps, enter this command
Syntax Speed bps no speed
Syntax Disconnect session-id
Syntax Stopbits 1
Syntax Show line console vty
Level
General Commands
Syntax Enable level
None
Disable Enable password
Normal Exec
Configure
This command restarts the system
This command returns to Privileged Exec mode
Command
This command resets the entire system
This example shows how to reset the switch
Any
This command exits the configuration program
This example shows how to quit a CLI session
System Management Commands
Syntax Prompt string no prompt
Device Designation Commands
Prompt
Hostname
Name The name of this host. Maximum length 255 characters
User Access Commands
Username
Syntax Hostname name no hostname
Username Access-level Password
Default is level Default password is super
Enable password
Management
IP Filter Commands
All addresses
Show management
Command Mode
Syntax Ip http port port-numberno ip http port
Web Server Commands
Default Setting Command Mode
Ip http port
Ip http secure-server
Syntax No ip http server Default Setting
Syntax No ip http secure-server Default Setting
Ip http server
Ip http secure-port3-44
Https//deviceportnumber
Ip http secure-port
Secure Shell Commands
Host Show users
System Management Commands
Ip ssh server
Syntax Ip ssh server no ip ssh server Default Setting
Disabled
Seconds
Ip ssh timeout
Syntax Ip ssh timeout seconds no ip ssh timeout
Ip ssh crypto host-key generate 3-52 show ssh
Show ip ssh
Ip ssh authentication-retries
Exec-timeout3-19 show ip ssh
Syntax Delete public-key username dsa rsa
Ip ssh server-key size
Delete public-key
Generates both the DSA and RSA key pairs
Ip ssh crypto host-key generate
Syntax Ip ssh crypto host-key generate dsa rsa
Dsa DSA key type Rsa RSA key type
Syntax Ip ssh crypto zeroize dsa rsa
Use this command to clear the host key from memory i.e. RAM
Ip ssh crypto zeroize
Ip ssh crypto zeroize 3-53 ip ssh save host-key3-54
Syntax Ip ssh save host-key dsa rsa
Ip ssh save host-key
Show ip ssh
Show ssh
Shows all public keys
Show public-key
Syntax Show public-key user username host
Username Name of an SSH user. Range 1-8 characters
Console#show public-key host Host
Logging on
Event Logging Commands
Syntax No logging on Default Setting
Logging history 3-59 clear logging
Logging history
Logging host
Flash errors level 3 RAM warnings level 7
Syntax No logging facility type
Logging facility
Syntax No logging host hostipaddress
Hostipaddress The IP address of a syslog server
Syntax No logging trap level
This command clears messages from the log buffer
Logging trap
Clear logging
Show logging
Show logging
Syntax Clear logging flash ram
Flash and RAM
Messages
Show logging sendmail
Smtp Alert Commands
Following example displays settings for the trap function
Syntax No logging sendmail host ipaddress
Logging sendmail host
Syntax Logging sendmail level level
Logging sendmail level
Syntax No logging sendmail destination-email email-address
Logging sendmail source-email
Logging sendmail destination-email
Syntax Logging sendmail source-email email-address
Logging sendmail
Syntax No logging sendmail Default Setting
Show logging sendmail
Time Commands
Sntp client
Syntax No sntp client Default Setting
Syntax
Sntp server
Sntp client 3-71 sntp poll 3-73 show sntp
Sntp poll
Sntp client
Sntp broadcast client
Clock timezone
Show sntp
Calendar set hour min sec day month year month day year
This command sets the system clock
Calendar set
Show sntp
Show calendar
This command displays the system clock
Show startup-config
System Status Commands
Show running-config3-79
Show running-config
Default Setting
Show startup-config3-78
Show system
This command displays system information
Show version
Show users
Jumbo frame
Frame Size Commands
Syntax No jumbo frame Default Setting
Flash/File Commands
None
Example
Delete filename
This command deletes a file or image
Filename Name of the configuration file or image name
Dir
FactoryDefaultConfig.cfg cannot be deleted
This command displays a list of files in flash memory
Syntax Dir boot-rom config opcode filename
File information is shown below
Following example shows how to display all file information
Syntax Boot system boot-romconfig opcode filename
Dir 3-89 whichboot
Authentication Commands
Local
Authentication Sequence
Authentication login
Radius Client
Username for setting the local user names and passwords
Syntax Radius-server port portnumber no radius-server port
Radius-server host
Radius-server port
Syntax Radius-server key keystring no radius-server key
Radius-server key
Radius-server retransmit
Show radius-server
Radius-server timeout
Hostipaddress IP address of a TACACS+ server
TACACS+ Client
Tacacs-server host
Syntax Tacacs-server port portnumber no tacacs-server port
Tacacs-server port
Tacacs-server key
10.11.12.13
Syntax Tacacs-server key keystring no tacacs-server key
Show tacacs-server
Max-mac-count
Port Security Commands
Port security
Interface Configuration Ethernet
Status Disabled Action None Maximum Addresses
103
Authentication dot1x default
802.1x Port Authentication
Syntax Dot1x max-req count no dot1x max-req
Dot1x default
Syntax Dot1x default Command Mode
Dot1x max-req
Dot1x port-control
Default Command Mode
Default
Interface
Dot1x re-authenticate
Syntax Dot1x re-authenticate interface
Dot1x operation-mode
Unit This is device Port Port number
Dot1x re-authentication
Dot1x timeout quiet-period
Syntax No dot1x re-authentication Command Mode
Dot1x timeout tx-period
Dot1x timeout re-authperiod
Interface
Show dot1x
Syntax Show dot1x statistics interface interface
Supplicant MAC address of authorized client
Authenticator State Machine
Reauthentication State Machine
Unauthorized
State Current state including initialize, reauthenticate
Access Control Lists
Access Control List Commands
Masks for Access Control Lists
EXT-A
IP ACLs
Syntax No access-list ip standard extended aclname
Access-list ip
Standard ACL
Permit, deny Ip access-group3-127 show ip access-list3-121
Syntax No permit deny any source bitmask host source
No permit deny tcp
Access-list ip
Extended ACL
120
Syntax Show ip access-list standard extended aclname
Show ip access-list
Access-list ip mask-precedence
This command displays the rules for configured IP ACLs
Mask IP ACL 3-122 ip access-group3-127
Syntax No access-list ip mask-precedence in out
IP Mask
Syntax No mask protocol
124
125
Syntax Show access-list ip mask-precedence in out
Show access-list ip mask-precedence
Mask IP ACL
Ip access-group
Syntax No ip access-group aclname in out
This command shows the ports assigned to IP ACLs
Show ip access-group
Map access-list ip
Show ip access-list3-121
Syntax Show map access-list ip interface
Show map access-list ip
Queue cos-map3-81 Show map access-list ip
Map access-list ip
Match access-list ip
Show marking
Show marking
Match access-list ip
MAC ACLs
Access-list mac
Syntax No access-list mac aclname
Syntax No permit deny
Permit, deny MAC ACL
No permit deny tagged-802.3
Vid vid vid-bitmask ethertype protocol protocol-bitmask
No permit deny tagged-eth2
Syntax Show mac access-list aclname
Show mac access-list
This command displays the rules for configured MAC ACLs
Permit, deny Mac access-group3-142
Access-list mac mask-precedence
MAC Mask
Mask MAC ACL 3-138 mac access-group3-142
Syntax No mask pktformat
139
140
This example creates an Egress MAC ACL
Show access-list mac mask-precedence
Syntax Show access-list mac mask-precedence in out
Show mac access-list3-136
Mac access-group
Syntax Mac access-group aclname in out
Syntax No map access-list mac aclname cos cos-value
Show mac access-group
Map access-list mac
This command shows the ports assigned to MAC ACLs
Output queues as shown below
Show map access-list mac
Queue cos-map3-81 Show map access-list mac
Syntax Show map access-list mac interface
Match access-list mac
ACL Information
Show access-list
Show access-group
This command shows the port assignments of ACLs
Privileged Executive
Snmp Commands
Snmp-server contact
Syntax Snmp-server location text no snmp-server location
Syntax Snmp-server contact string no snmp-server contact
Host Address None Snmp Version
Snmp-server enable traps
No snmp ip filter ipaddress subnetmask
Issue authentication and link-up-down traps
153
This command checks the status of Snmp communications
Text a text string. Range 1-15 characters
Dhcp Commands
Dhcp Client
Ip dhcp client-identifier
Hex The hexadecimal value
Interface Configuration Vlan
This command submits a Bootp or Dhcp client request
Ip dhcp restart client
Ip dhcp restart relay
Syntax Ip dhcp relay no ip dhcp relay Default Setting
Dhcp Relay
Ip dhcp relay server
Usage Guidelines
Dhcp Server
Ip dhcp excluded-address
Service dhcp
Syntax Service dhcp no service dhcp Default Setting
Syntax Ip dhcp pool name no ip dhcp pool name
Dhcp address pools are not configured
Ip dhcp pool
All IP pool addresses may be assigned
Network 3-163 host
Within the range of a configured network address pool
Dhcp Pool Configuration
Network
Default-routeraddress1 address2 no default-router
Default-router
Dns-serveraddress1 address2 no dns-server
Domain-name
Dns-server
Syntax Domain-name domain no domain-name
Syntax Next-server address no next-server address
Bootfile
Next-server
Next-server3-166
Bootfile
Netbios-name-server
Syntax Bootfile filename no bootfile
Broadcast
Netbios-node-type
Syntax Netbios-node-type type no netbios-node-type
Mixed Peer-to-peer Default Setting
Netbios-name-server3-167
Lease days hoursminutes infinite no lease
Command Modes
Lease
Host
Host address mask no host
Client-identifier3-172hardware-address3-173
Client-identifier
Host
Hardware-address
Syntax Clear ip dhcp binding address
If no type is specified, the default protocol is Ethernet
Clear ip dhcp binding
Hardware-addresshardware-address type no hardware-address
Syntax Show ip dhcp binding address
Show ip dhcp binding
Show ip dhcp binding
DNS Commands
No static entries
Ip host
No ip host name address1 address2 … address8
Syntax Clear host name
Clear host
Ip domain-name
Syntax Ip domain-name name no ip domain-name
Ip domain-list
Syntax No ip domain-list name
Server-address1- IP address of domain-name server
Ip name-server
Ip domain-name3-178
Ip domain-name3-178 ip domain-lookup3-182
Syntax No ip domain-lookup Default Setting
Ip domain-lookup
Ip domain-name3-178 ip name-server3-181
Show hosts
Show dns cache
This command displays the configuration of the DNS server
This command displays entries in the DNS cache
Show dns
Clear dns cache
This command clears all entries in the DNS cache
186
Interface Commands
Syntax Description string no description
To specify port 4, enter the following command
Port-channel channel-idRange
Vlan vlan-idRange
Following example adds a description to port
Interface Configuration Ethernet, Port Channel
Syntax No negotiation
Negotiation 3-4 capabilities
Capabilities 3-5speed-duplex3-3
Following example configures port 11 to use autonegotiation
Negotiation 3-4speed-duplex3-3
Flowcontrol
Syntax No flowcontrol Default Setting
Flow control enabled
Mode
Following example enables flow control on port
Syntax Combo-forced-mode mode no combo-forced-mode
Negotiation Capabilities flowcontrol, symmetric
Following example disables port
Syntax No shutdown Default Setting
All interfaces are enabled
Syntax Clear counters interface
This command clears statistics on an interface
Syntax Show interfaces status interface
This command displays the status for an interface
Following example clears statistics on port
Shows the status for all interfaces
Shows the counters for all interfaces
This command displays interface statistics
Port-channel channel-idRange Default Setting
Syntax Show interfaces counters interface
Syntax Show interfaces switchport interface
Shows all interfaces
This example shows the configuration setting for port
Interface ethernet unit/port source port
Mirror Port Commands
Syntax Show port monitor interface
Interface Configuration Ethernet, destination port
This command displays mirror information
Unit Switch unit Port Port number
Shows all sessions
Rate Limit Commands
Following shows mirroring configured from port 6 to port
Rate-limit
General Guidelines
Link Aggregation Commands
Guidelines for Creating Trunks
Channel-id- Trunk index Range
Syntax Channel-group channel-idno channel-group
Following example creates trunk 1 and then adds port
Syntax No lacp Default Setting
Current port will be added to this trunk
Command Usage
32768
Lacp admin-keyEthernet Interface
Interface Configuration Port Channel
Syntax Lacp admin-key key no lacp admin-key
Lacp port-priority
Port Channel all
This command displays Lacp information
Number of frames that carry the Slow Protocols Ethernet Type
Field Description
Lacp Port
Field Description
Address Table Commands
Address Table Commands
Action
Mac-address- MAC address
Vlan-id- Vlan ID Range
Unit This is device
Mac-address- MAC address Mask Bits to match in the address
Mac-address-table aging-time
Show mac-address-table aging-time
Spanning Tree Commands
Syntax Spanning-tree mode stp rstp no spanning-tree mode
Syntax No spanning-tree Default Setting
Spanning tree is enabled
Spanning Tree Protocol
Rstp
Spanning-tree forward-time
Spanning-tree hello-time
Spanning-tree priority
Long method
This command limits the maximum transmission rate for BPDUs
Syntax Spanning-tree cost cost no spanning-tree cost
This example disables the spanning tree algorithm for port
Spanning-tree cost
Maximum value for path cost is 65,535
Spanning-tree portfast
Syntax No spanning-tree edge-port Default Setting
Spanning-treeedge-port3-48
Syntax No spanning-tree portfast Default Setting
Spanning-tree link-type
Syntax Show spanning-tree interface mst instanceid
Port-channel channel-idRange Command Mode
Syntax Spanning-tree protocol-migration interface
Port-channel channel-idRange Default Setting
Mstp
Vlan database
Vlan Commands
Editing Vlan Groups
Vlan
Vlan Database Configuration
By default only Vlan 1 exists and is active
Syntax Interface vlan vlan-id
Configuring Vlan Interfaces
Interface vlan
Shutdown
Switchport mode
Syntax Switchport mode trunk hybrid no switchport mode
All ports are in hybrid mode with the Pvid set to Vlan
All frame types
Switchport acceptable-frame-types
Switchport acceptable-frame-types3-59
Syntax No switchport ingress-filtering Default Setting
Switchport ingress-filtering
Switchport native vlan
Switchport allowed vlan
No VLANs are included in the forbidden list
Switchport forbidden vlan
Syntax Show vlan id vlan-idname vlan-name
This command shows Vlan information
Displaying Vlan Information
Show vlan
Shows all VLANs
Following example shows how to display information for Vlan
Protocol-vlan protocol-group Configuring Groups
No protocol groups are mapped for any interface
Protocol-vlan protocol-group Configuring Interfaces
No protocol groups are configured
Rarp
All protocol groups are displayed
Show protocol-vlan protocol-group
Syntax Show protocol-vlan protocol-group group-id
Group-id- Group identifier for a protocol group. Range
Mapping for all interfaces is displayed
This shows protocol group 1 configured for IP over Ethernet
Show interfaces protocol-vlan protocol-group
Pvlan up-linkinterface-list down-linkinterface-listno pvlan
Pvlan
Show pvlan
Gvrp and Bridge Extension Commands
This command displays the configured private Vlan
Bridge-ext gvrp
Syntax No bridge-ext gvrp Default Setting
Show bridge-ext
Switchport gvrp
Syntax No switchport gvrp
Shows both global and interface-specific configuration
Show gvrp configuration
This command shows if Gvrp is enabled
Syntax Show gvrp configuration interface
Garp timer
Successfully
Show garp timer
Syntax Show garp timer interface
Shows all Garp timers
Priority Commands
Switchport priority default
Priority Commands Layer
Default Setting
Weighted Round Robin
Queue mode
Syntax Queue mode strict wrr no queue mode
Queue cos-map
Queue bandwidth weight1...weight4 no queue bandwidth
Queue bandwidth
Queue cos-mapqueueid cos1 ... cosn no queue cos-map
Show queue cos-map3-84
Show queue mode
This command shows the current queue mode
Syntax Show queue cos-map interface
This command shows the class of service priority map
Show queue bandwidth
Show queue cos-map
Syntax No map ip port
Priority Commands Layer 3
Consoleconfig#map ip port
Map ip port Interface Configuration
Syntax No map ip precedence Default Setting
Map ip precedence Global Configuration
Syntax No map ip dscp Default Setting
List below shows the default priority mapping
Map ip dscp dscp-value cos cos-value no map ip dscp
Map ip dscp Interface Configuration
Syntax Show map ip port interface
Use this command to show the IP port priority map
Show map ip port
Syntax Show map ip precedence interface
This command shows the IP precedence priority map
Show map ip precedence
Syntax Show map ip dscp interface
This command shows the IP Dscp priority map
Show map ip dscp
Command Mode
Multicast Filtering Commands
Ip igmp snooping
Igmp Snooping Commands
Syntax No ip igmp snooping Default Setting
Following example enables Igmp snooping
Igmp Version
Ip igmp snooping version
Show ip igmp snooping
Following configures the switch to use Igmp Version
This command shows the Igmp snooping configuration
Show mac-address-table multicast
Following shows the current Igmp snooping configuration
This command shows known multicast addresses
Ip igmp snooping querier
Igmp Query Commands Layer
Syntax No ip igmp snooping querier Default Setting
Times
Ip igmp snooping query-count
Ip igmp snooping query-max-response-time3-102
Following shows how to configure the query count to
Ip igmp snooping query-interval
Ip igmp snooping query-max-response-time
Seconds The report delay advertised in Igmp queries. Range
Ip igmp snooping router-port-expire-time
Switch must use IGMPv2 for this command to take effect
Syntax No ip igmp snooping vlan vlan-idmrouter interface
Static Multicast Routing Commands
No static multicast router ports are configured
Ip igmp snooping vlan mrouter
Syntax Show ip igmp snooping mrouter vlan vlan-id
Displays multicast router ports for all configured VLANs
Show ip igmp snooping mrouter
Ip igmp
Igmp Commands Layer
Syntax Ip igmp no ip igmp Default Setting
Robust-value- The robustness of this interface. Range
Ip igmp robustval
Ip igmp snooping 3-96 show ip igmp snooping
Syntax Ip igmp robustval robust-valueno ip igmp robustval
Ip igmp query-interval
Ip igmp max-resp-interval
Second
Seconds The report delay for the last member query. Range
Ip igmp last-memb-query-interval
Ip igmp version Ip igmp query-interval3-109
Syntax Ip igmp version 1 2 no ip igmp version
Ip igmp version
Syntax Show ip igmp interface vlan vlan-id
Use this command to delete entries from the Igmp cache
Show ip igmp interface
Clear ip igmp group
Displays information for all known groups
Show ip igmp groups
Deletes all entries in the cache if no options are selected
Following shows the Igmp groups currently active on Vlan
Ip address
IP Interface Commands
Basic IP Configuration
IP address Netmask
Following example, the device is assigned an address in Vlan
Ip default-gateway
Show ip interface
Syntax Ip default-gateway gateway no ip default-gateway
Syntax Ping host count countsize size
Ip default-gateway3-118
Show ip redirects
Ping
This command has no default for the host
Arp ip-address hardware-address no arp ip-address
Address Resolution Protocol ARP
No default entries
Arp
Seconds 20 minutes
Arp-timeout
Syntax Arp-timeout seconds no arp-timeout
Clear arp-cache show arp
This example clears all dynamic entries in the ARP cache
Clear arp-cache
Show arp
This example displays all entries in the ARP cache
Syntax Ip proxy-arp no ip proxy-arp Default Setting
Ip proxy-arp
IP Routing Commands
Ip routing
Global Routing Configuration
Syntax Ip routing no ip routing Default Setting
Ip route
No static routes are configured
Syntax Clear ip route network netmask
Syntax Show ip route config address netmask
Clear ip route
Show ip route
RIP, Ospf
Show ip traffic
Routing Information Protocol RIP
Router rip
Syntax Router rip no router rip Command Mode
Router Configuration
Timers basic
Timers basic update-seconds no timers basic
No networks are specified
Network subnet-address no network subnet-address
No neighbors are defined
Neighbor
Version
Syntax Neighbor ip-addressno neighbor ip-address
RIP Version
Syntax Version 1 2 no version
Ip rip receive version
Ip rip send version
Split-horizon
Ip split-horizon
Syntax Ip split-horizon poison-reverseno ip split-horizon
No authentication
Ip rip authentication key
Text Indicates that a simple password will be used
Ip rip authentication mode
Show rip globals
This example sets the authentication mode to plain text
Show ip rip
Syntax Show ip rip configuration status peer
Show ip rip status
Open Shortest Path First Ospf
Area nssa
Router ospf
Syntax Router ospf no router ospf Command Mode
Lowest interface address
Router-id
Router-idip-address no router-id
RFC 1583 compatible
Compatible rfc1583
Default-information originate
Timers spf spf-holdtime no timers spf
Timers spf
Area area-idrange ip-address netmask advertise not-advertise
Area range
Default Setting Command Usage
Area default-cost
Summary-address
Type-value
Redistribute
Network area
No area area-idstub summary
Area stub
Area area-idstub summary
No stub is configured
Area nssa
No Nssa is configured
159
Area virtual-link
161
Area-id None Router-id None
This example creates a virtual link using MD5 authentication
Ip ospf authentication
This example sets a password for the specified interface
Ip ospf authentication-key
No password
Ip ospf message-digest-key
MD5 authentication is disabled
Syntax Ip ospf cost cost no ip ospf cost
Ip ospf cost
Ip ospf dead-interval
Ip ospf hello-interval
Syntax Ip ospf priority priority no ip ospf priority
Ip ospf priority
Ip ospf retransmit-interval
Ip ospf transmit-delay
Show ip ospf
It is an router type
Show ip ospf border-routers
Database database-summary Database external link-state-id
Show ip ospf database
Examples
Following shows output for the show ip ospf database command
Following shows output when using the asbr-summarykeyword
175
Following shows output when using the external keyword
Following shows output when using the network keyword
Following shows output when using the router keyword
Link
Following shows output when using the summary keyword
Syntax Show ip ospf interface vlan vlan-id
Show ip ospf interface
Show ip ospf neighbor
Syntax Show ip ospf neighbor Command Mode
Show ip ospf summary-address
Use this command to display all summary address information
Syntax Show ip ospf summary-address Command Mode
Show ip ospf virtual-links
Multicast Routing Commands
Syntax Show ip ospf virtual-links Command Mode
187
186
Ip multicast-routing
General Multicast Routing Commands
Syntax Show ip mroute group-address source summary
Use this command to display the IP multicast routing table
Show ip mroute
Interfaces on which multicast subscribers have been
Dvmrp
Router dvmrp
Dvmrp Multicast Routing Commands
Syntax Probe-interval seconds
Syntax Router dvmrp no router dvmrp Command Mode
Probe-interval
Ip dvmrp Show router dvmrp
Seconds Interval before declaring a neighbor dead. Range
Nbr-timeout
Syntax Nbr-timeout seconds
Syntax Report-interval seconds
Flash-update-interval
Syntax Flash-update-interval seconds
Report-interval
Seconds Prune state lifetime. Range
Prune-lifetime
Syntax Prune-lifetime seconds
Ip-address- IP address of the default Dvmrp gateway
Default-gateway
Syntax Default-gateway ip-addressno default-gateway
Ip dvmrp
Syntax Ip dvmrp no ip dvmrp Default Setting
Ip dvmrp metric interface-metric no ip dvmrp metric
Ip dvmrp metric
Clear ip dvmrp route
Show router dvmrp
Dmvrp routes are shown in the following example
Default settings are shown in the following example
Show ip dvmrp route
Show ip dvmrp neighbor
Show ip dvmrp interface
PIM-DM Multicast Routing Commands
Router pim
Syntax Router pim no router pim Default Setting
Ip pim dense-mode
Syntax Ip pim dense-mode no pim dense-mode Default Setting
Seconds Interval between sending PIM hello messages. Range
Ip pim hello-interval
Syntax Ip pim hello-interval seconds no pim hello-interval
Seconds The hold time for PIM hello messages. Range
Ip pim hello-holdtime
Ip pim trigger-hello-interval
Seconds The hold time for the prune state. Range
Ip pim join-prune-holdtime
Seconds The time before resending a Graft. Range
Ip pim graft-retry-interval
Show router pim
Ip pim max-graft-retries
Syntax Show ip pim interface vlan-id
Use this command to display information about PIM neighbors
Show ip pim interface
Show ip pim neighbor
Router Redundancy Commands
Vrrp ip
Virtual Router Redundancy Protocol Commands
No virtual router groups are configured
No key is defined
Vrrp authentication
Syntax Vrrp group priority level no vrrp group priority
Vrrp priority
Vrrp timers advertise
Vrrp preempt
Preempt Enabled Delay 0 seconds
Syntax Show vrrp brief group
Use this command to display status information for Vrrp
Defaults
Show vrrp
Master
Syntax Show vrrp interface vlan vlan-idbrief
Show vrrp interface
221
Show vrrp group interface vlan interface counters
Show vrrp router counters
Show vrrp interface counters
Clear vrrp group interface interface counters
Use this command to clear Vrrp system statistics
Clear vrrp router counters
Clear vrrp interface counters
Console#clear vrrp 1 interface 1 counters Console#
Standby ip
Hot Standby Router Protocol Commands
Group number Virtual router groups none configured
Group number Priority
Standby priority
Standby preempt
Standby authentication 3-230 standby track
Standby priority
Group number Preempt Disabled Delay 0 seconds
Group number String not defined
Standby authentication
Group number Hellotime 3 seconds Holdtime 10 seconds
Standby timers
Standby track
Group number Interface priority
Displays detailed information for each group
Use this command to display status information for Hsrp
Show standby
Syntax Show standby active init listen standby brief
Priority Priority of this router May preempt
236
Show standby interface
238
Software Features
Appendix a Software Specifications
DVMRP, PIM-DM
Management Features
Standards
Groups 1, 2, 3, 9 Statistics, History, Alarm, Event
Bridge MIB RFC
Sntp RFC SSH Version Vrrp RFC
Management Information Bases
TCP MIB RFC Trap RFC UDP MIB RFC
Page
Appendix B Troubleshooting
Troubleshooting
Glossary-1
Glossary-2
Glossary-3
Glossary-4
Glossary-5
Glossary-6
Glossary-7
Glossary-8
XModem
Glossary-9
Glossary-10
Index-1
Symbols Numerics
Index-2
Index-3
Index-4
STP 3-92,4-164STP Also see STA
Index-5
Index-6
Page
For Technical SUPPORT, Call