TigerSwitch 10/100/1000
Page
TigerSwitch 10/100/1000 Management Guide
Trademarks
Limited Warranty
Limited Warranty
Contents
Viii
Contents
Contents
Contents
Command Line Interface
Using the Command Line Interface
Xii
Xiii
Xiv
Contents
Xvi
Xvii
Xviii
Xix
Contents
Xxi
Xxii
Xxiii
Xxiv
Xxv
Index Appendix B Troubleshooting Inde-1 Glossary
Xxvi
Chapter Introduction
Key Features
Lacp
Description of Software Features
Introduction
Description of Software Features
Introduction
Description of Software Features
Introduction
Description of Software Features
Function Parameter Default
System Defaults
Snmp
ARP
Hsrp
Introduction
Configuration Options
Connecting to the Switch
Initial Configuration
Required Connections
Initial Configuration
Basic Configuration
Remote Connections
Console Connection
Setting Passwords
Manual Configuration
Setting an IP Address
Dynamic Configuration
Basic Configuration
Community Strings
Enabling Snmp Management Access
Trap Receivers
Saving Configuration Settings
Managing System Files
Initial Configuration
Using the Web Interface
Configuring the Switch
Configuring the Switch
Home
Navigating the Web Browser Interface
Main Menu
Panel Display
Menu Description
Configures Secure Shell server settings
Mstp
Vlan
Configures Weighted Round Robin queueing 176
Igmp
Shows statistics for Icmp traffic, including 265
285
323
Displaying System Information
Basic Configuration
Displaying Switch Hardware/Software Versions
CLI Specify the hostname, location and contact information
Main Board
Expansion Slots
Management Software
Displaying Bridge Extension Capabilities
CLI Use the following command to display version information
Basic Configuration
Setting the Switch’s IP Address
Manual Configuration
Using DHCP/BOOTP
Basic Configuration
Downloading System Software from a Server
Managing Firmware
Basic Configuration
Downloading Configuration Settings from a Server
Saving or Restoring Configuration Settings
Basic Configuration
System Log Configuration
Configuring Event Logging
Level Argument Description
Flash. Range 0-7, Default
Remote Log Configuration
Basic Configuration
Set the logging trap
Displaying Log Messages
Resetting the System
Setting the System Clock
Error
Configuring Sntp
Setting the Time Zone
Simple Network Management Protocol
Access Mode
Setting Community Access Strings
Consoleconfig#snmp-server community spiderman rw3-147
Specifying Trap Managers and Trap Types
Configuring the Switch
Filtering Addresses for Snmp Client Access
User Authentication
Access Level* Specifies the user level
Configuring the Logon Password
Password Specifies the user password
User Name* The name of the user
Configuring Local/Remote Logon Authentication
Radius Settings
Tacacs Settings
User Authentication
Https
Configuring Https
Secure-site Certificate on
Replacing the Default Secure-site Certificate
Configuring the Secure Shell
Command Usage
Shown in the following example
Telnet sessions and SSH sessions
Generating the Host Key Pair
RSA
SSH server includes basic settings for authentication
Configuring the SSH Server
Configuring Port Security
Command Usage
Configuring the Switch
User Authentication
Configuring 802.1x Port Authentication
Displaying 802.1x Global Settings
Configuring the Switch
User Authentication
Configuring 802.1x Global Settings
Configuring Port Authorization Mode
Authorized
Parameter Description
Displaying 802.1x Statistics
Parameter Description
Eapol EAP
Filtering Management Access
Command Usage
User Authentication
Configuring Access Control Lists
Access Control Lists
Setting the ACL Name and Type
CLI This example creates a standard IP ACL named bill
Configuring a Standard IP ACL
Configuring an Extended IP ACL
Configuring the Switch
Access Control Lists
Configuring a MAC ACL
Command Usage
Configuring the Switch
Specifying the Mask Type
Configuring ACL Masks
This mask defines the fields to check in the IP header
Configuring an IP ACL Mask
Access Control Lists
Configuring the Switch
This mask defines the fields to check in the packet header
Configuring a MAC ACL Mask
Configuring the Switch
Binding a Port to an Access Control List
Command Attributes
Displaying Connection Status
Port Configuration
Web Click Port, Port Information or Trunk Information
Current status
CLI This example shows the connection status for Port
Configuring Interface Connections
Configuring the Switch
Port Configuration
Creating Trunk Groups
Statically Configuring a Trunk
Configuring the Switch
Enabling Lacp on Selected Ports
100
101
Configuring Lacp Parameters
102
103
You can display statistics for Lacp protocol messages
104
105
106
Displaying Lacp Settings and Status for the Local Side
107
108
Displaying Lacp Settings and Status for the Remote Side
109
110
111
Setting Broadcast Storm Thresholds
112
113
Configuring Port Mirroring
114
115
Configuring Rate Limits
116
Showing Port Statistics
Parameter Description
117
Etherlike Statistics
118
Rmon Statistics
119
120
121
Setting Static Addresses
Address Table Settings
122
CLI This example shows statistics for port
123
124
Displaying the Address Table
125
Changing the Aging Time
Spanning Tree Algorithm Configuration
126
CLI This example sets the aging time to 400 seconds
127
Displaying Global Settings
128
Instance
129
130
Configuring Global Settings
Global settings apply to the entire switch
131
132
Basic Configuration of Global Settings
Root Device Configuration
Configuration Settings for Rstp
133
134
Configuration Settings for Mstp
135
136
Displaying Interface Settings
137
STA Port Information only
138
139
140
Configuring Interface Settings
141
142
VLANs in MST Instance VLANs assigned this instance
143
MST ID
Vlan ID Vlan to assign to this selected MST instance. Range
144
145
146
Displaying Interface Settings for Mstp
147
148
Configuring Interface Settings for Mstp
149
Vlan Configuration
Overview
150
151
Assigning Ports to VLANs
Priority tagging
152
Forwarding Tagged/Untagged Frames
153
Displaying Basic Vlan Information
Enabling or Disabling Gvrp Global Setting
154
Maximum Number of Supported VLANs Maximum number
VLANs that can be configured on this switch
Displaying Current VLANs
155
156
157
158
Creating VLANs
Adding Static Members to VLANs Vlan Index
Vlan ID of configured Vlan 1-4094, no leading zeroes
159
CLI This example creates a new Vlan
160
161
Adding Static Members to VLANs Port Index
162
163
Configuring Vlan Behavior for Interfaces
164
165
166
Configuring Private VLANs
167
Enabling Private VLANs
Configuring Protocol-Based VLANs
Configuring Uplink and Downlink Ports
168
Configuring Protocol Groups
169
Create a protocol group for one or more protocols
Mapping Protocols to VLANs
170
171
Class of Service Configuration
Setting the Default Priority for Interfaces
172
173
174
Mapping CoS Values to Egress Queues
175
Selecting the Queue Mode
Setting the Service Weight for Traffic Classes
176
177
178
Mapping Layer 3/4 Priorities to CoS Values
Selecting IP Precedence/DSCP Priority
179
180
181
Mapping IP Precedence
182
183
Mapping Dscp Priority
184
Command Attributes
Mapping IP Port Priority
185
186
Mapping CoS Values to ACLs
187
188
Changing Priorities Based on ACL Rules
189
190
Multicast Filtering
191
Igmp Protocol
192
Layer 2 Igmp Snooping and Query
193
Configuring Igmp Snooping and Query Parameters
194
Displaying Interfaces Attached to a Multicast Router
195
Specifying Static Interfaces for a Multicast Router
196
197
198
Displaying Port Members of Multicast Services
199
Assigning Ports to Multicast Services
200
Layer 3 Igmp Query used with Multicast Routing
Vlan Interface Vlan interface bound to a primary IP address
201
202
203
204
Displaying Multicast Group Information
205
Configuring Domain Name Service
Configuring General DNS Server Parameters
206
207
208
209
Configuring Static DNS Host to Address Entries
210
211
212
Displaying the DNS Cache
213
Dynamic Host Configuration Protocol
214
Configuring Dhcp Relay Service
215
Configuring the Dhcp Server
216
Enabling the Server, Setting Excluded Addresses
217
Configuring Address Pools
Setting the Host Parameters
Setting the Network Parameters
218
Creating a New Address Pool
219
Setting the Optional Parameters
220
221
Configuring a Network Address Pool
222
Configuring a Host Address Pool
CLI This example configures a host address pool
223
Displaying Address Bindings
MAC
224
225
Configuring Router Redundancy
226
Virtual Router Redundancy Protocol
227
Configuring Vrrp Groups
Address Assignment
Virtual Router Priority
Preempting the Acting Master
228
229
230
231
232
233
Displaying Vrrp Global Statistics
234
Displaying Vrrp Group Statistics
235
236
237
Hot Standby Router Protocol
238
Configuring Hsrp Groups
Preempting the Master
239
240
241
242
243
244
245
Initial Configuration
IP Routing
246
247
IP Switching
248
249
Routing Path Management
Routing Protocols
Basic IP Interface Configuration
250
OSPFv2 Dynamic Routing Protocol
251
252
Configuring IP Routing Interfaces
253
254
255
Address Resolution Protocol
Basic ARP Configuration
256
Proxy ARP
257
Configuring Static ARP Addresses
Displaying Dynamically Learned ARP Entries
258
259
260
Displaying Local ARP Entries
CLI This example shows all entries in the ARP cache
Displaying ARP Statistics
261
262
Displaying Statistics for IP Protocols
263
IP Statistics
264
265
Icmp Statistics
Web Click IP, Statistics, IP CLI See the example on
266
267
UDP Statistics
Web Click IP, Statistics, Icmp CLI See the example on
268
TCP Statistics
Web Click IP, Statistics, UDP CLI See the example on
Configuring Static Routes
269
Web Click IP, Statistics, TCP CLI See the example on
270
271
Displaying the Routing Table
272
273
Configuring the Routing Information Protocol
274
Configuring General Protocol Settings
Global Settings
Timer Settings
275
Specifying Network Interfaces for RIP
276
277
Configuring Network Interfaces for RIP
278
Specifying Receive and Send Protocol Types
Loopback Prevention
279
Protocol Message Authentication
280
Displaying RIP Information and Statistics
281
282
Web Click Routing Protocol, RIP, Statistics
283
284
285
Configuring the Open Shortest Path First Protocol
286
Area Border Router 1 Indicates if this router connect
287
Directly to networks in two or
More areas. An area border
288
289
290
291
Configuring Ospf Areas
Aggregate a range of addresses into a
Single route. The backbone or any
292
293
Command Usage
294
295
These nodes, this wastes a lot of bandwidth
Processor time. Instead, you can
296
Configuring Ospf Interfaces
297
Ospf Interface List
298
Detail Interface Configuration
299
300
301
302
303
Configuring Virtual Links
304
305
Configuring Network Area Addresses
306
307
Configuring Summary Addresses for External AS Routes
308
IP Address Summary address covering a range of addresses
309
Redistributing External Routes
310
311
Configuring Nssa Settings
Area ID Identifier for an not-so-stubby area Nssa
312
Displaying Link State Database Information
313
314
315
Displaying Information on Border Routers
316
317
Displaying Information on Neighbor Routers
ID Neighbor’s router ID
318
Multicast Routing
Configuring Global Settings for Multicast Routing
319
Neighbors
320
321
Displaying the Multicast Routing Table
322
323
Configuring Dvmrp
324
Configuring Global Dvmrp Settings
325
Broadcasting periodically floods
326
327
328
329
Configuring Dvmrp Interface Settings
Dvmrp Interface Settings
330
Dvmrp Interface Information
331
Displaying Neighbor Information
You can display all the neighboring Dvmrp routers
332
333
Displaying the Routing Table
CLI This example displays the only neighboring Dvmrp router
334
Configuring PIM-DM
335
Configuring Global PIM-DM Settings
336
Configuring PIM-DM Interface Settings
337
338
Displaying Interface Information
339
You can display all the neighboring PIM-DM routers
340
341
342
Accessing the CLI
Using the Command Line Interface
Telnet Connection
Using the Command Line Interface
This section describes how to enter CLI commands
Entering Commands
Keywords and Arguments
Minimum Abbreviation
Getting Help on Commands
Command Completion
Showing Commands
Negating the Effect of Commands
Using Command History
Partial Keyword Lookup
Exec Commands
Understanding Command Modes
Configuration Commands
Console#configure Consoleconfig#
Mode Command Prompt
Keystroke Function
Command Line Processing
Command Group Description
Command Groups
MIB
Command Function Mode
Line Commands
Command Mode
Default Setting
Syntax Line console vty
Example
Syntax Login local no login
Related Commands
Login local
Line Configuration
Username 3-35 password
Syntax Password 0 7 password no password
No password is specified
Login 3-17password-thresh3-20
Syntax Exec-timeout seconds no exec-timeout
CLI No timeout Telnet 10 minutes
To set the timeout to two minutes, enter this command
Syntax Password-thresh threshold no password-thresh
Default value is three attempts
To set the silent time to 60 seconds, enter this command
Default value is no silent-time
Password-thresh3-20
Silent-time3-21
Syntax Databits 7 8 no databits
To specify 7 data bits, enter this command
Seven data bits per character Eight data bits per character
Data bits per character
Syntax Parity none even odd no parity
To specify no parity, enter this command
None No parity Even Even parity Odd Odd parity
No parity
To specify 57600 bps, enter this command
Syntax Speed bps no speed
Auto
Syntax Disconnect session-id
Syntax Stopbits 1
Syntax Show line console vty
General Commands
Syntax Enable level
Level
Disable Enable password
Normal Exec
None
Configure
This command restarts the system
This command resets the entire system
Command
This example shows how to reset the switch
This command returns to Privileged Exec mode
Any
This command exits the configuration program
This example shows how to quit a CLI session
System Management Commands
Prompt
Device Designation Commands
Hostname
Syntax Prompt string no prompt
Username
User Access Commands
Syntax Hostname name no hostname
Name The name of this host. Maximum length 255 characters
Username Access-level Password
Default is level Default password is super
Enable password
Management
IP Filter Commands
All addresses
Show management
Command Mode
Default Setting Command Mode
Web Server Commands
Ip http port
Syntax Ip http port port-numberno ip http port
Syntax No ip http secure-server Default Setting
Syntax No ip http server Default Setting
Ip http server
Ip http secure-server
Ip http secure-port3-44
Https//deviceportnumber
Ip http secure-port
Secure Shell Commands
Host Show users
System Management Commands
Syntax Ip ssh server no ip ssh server Default Setting
Disabled
Ip ssh server
Syntax Ip ssh timeout seconds no ip ssh timeout
Ip ssh timeout
Ip ssh crypto host-key generate 3-52 show ssh
Seconds
Ip ssh authentication-retries
Exec-timeout3-19 show ip ssh
Show ip ssh
Ip ssh server-key size
Delete public-key
Syntax Delete public-key username dsa rsa
Syntax Ip ssh crypto host-key generate dsa rsa
Ip ssh crypto host-key generate
Dsa DSA key type Rsa RSA key type
Generates both the DSA and RSA key pairs
Ip ssh crypto zeroize
Use this command to clear the host key from memory i.e. RAM
Ip ssh crypto zeroize 3-53 ip ssh save host-key3-54
Syntax Ip ssh crypto zeroize dsa rsa
Ip ssh save host-key
Show ip ssh
Syntax Ip ssh save host-key dsa rsa
Show ssh
Syntax Show public-key user username host
Show public-key
Username Name of an SSH user. Range 1-8 characters
Shows all public keys
Console#show public-key host Host
Event Logging Commands
Syntax No logging on Default Setting
Logging on
Logging history 3-59 clear logging
Logging history
Logging host
Flash errors level 3 RAM warnings level 7
Syntax No logging host hostipaddress
Logging facility
Hostipaddress The IP address of a syslog server
Syntax No logging facility type
Logging trap
This command clears messages from the log buffer
Clear logging
Syntax No logging trap level
Syntax Clear logging flash ram
Show logging
Flash and RAM
Show logging
Messages
Smtp Alert Commands
Following example displays settings for the trap function
Show logging sendmail
Syntax No logging sendmail host ipaddress
Logging sendmail host
Syntax Logging sendmail level level
Logging sendmail level
Logging sendmail destination-email
Logging sendmail source-email
Syntax Logging sendmail source-email email-address
Syntax No logging sendmail destination-email email-address
Logging sendmail
Syntax No logging sendmail Default Setting
Show logging sendmail
Time Commands
Sntp client
Syntax No sntp client Default Setting
Syntax
Sntp server
Sntp client 3-71 sntp poll 3-73 show sntp
Sntp poll
Sntp client
Sntp broadcast client
Clock timezone
Show sntp
Calendar set
This command sets the system clock
Show sntp
Calendar set hour min sec day month year month day year
Show calendar
This command displays the system clock
Show startup-config
System Status Commands
Show running-config3-79
Show running-config
Default Setting
Show startup-config3-78
Show system
This command displays system information
Show version
Show users
Frame Size Commands
Syntax No jumbo frame Default Setting
Jumbo frame
Flash/File Commands
None
Example
This command deletes a file or image
Filename Name of the configuration file or image name
Delete filename
This command displays a list of files in flash memory
FactoryDefaultConfig.cfg cannot be deleted
Syntax Dir boot-rom config opcode filename
Dir
File information is shown below
Following example shows how to display all file information
Syntax Boot system boot-romconfig opcode filename
Dir 3-89 whichboot
Authentication Commands
Authentication Sequence
Authentication login
Local
Radius Client
Username for setting the local user names and passwords
Radius-server host
Radius-server port
Syntax Radius-server port portnumber no radius-server port
Radius-server key
Radius-server retransmit
Syntax Radius-server key keystring no radius-server key
Show radius-server
Radius-server timeout
TACACS+ Client
Tacacs-server host
Hostipaddress IP address of a TACACS+ server
Tacacs-server key
Tacacs-server port
10.11.12.13
Syntax Tacacs-server port portnumber no tacacs-server port
Syntax Tacacs-server key keystring no tacacs-server key
Show tacacs-server
Port Security Commands
Port security
Max-mac-count
Interface Configuration Ethernet
Status Disabled Action None Maximum Addresses
103
Authentication dot1x default
802.1x Port Authentication
Syntax Dot1x default Command Mode
Dot1x default
Dot1x max-req
Syntax Dot1x max-req count no dot1x max-req
Default Command Mode
Default
Dot1x port-control
Syntax Dot1x re-authenticate interface
Dot1x re-authenticate
Dot1x operation-mode
Interface
Dot1x timeout quiet-period
Dot1x re-authentication
Syntax No dot1x re-authentication Command Mode
Unit This is device Port Port number
Dot1x timeout tx-period
Dot1x timeout re-authperiod
Show dot1x
Syntax Show dot1x statistics interface interface
Interface
Reauthentication State Machine
Authenticator State Machine
Unauthorized
Supplicant MAC address of authorized client
State Current state including initialize, reauthenticate
Access Control Lists
Access Control List Commands
Masks for Access Control Lists
EXT-A
IP ACLs
Syntax No access-list ip standard extended aclname
Access-list ip
Permit, deny Ip access-group3-127 show ip access-list3-121
Syntax No permit deny any source bitmask host source
Standard ACL
No permit deny tcp
Access-list ip
Extended ACL
120
Access-list ip mask-precedence
Show ip access-list
This command displays the rules for configured IP ACLs
Syntax Show ip access-list standard extended aclname
Mask IP ACL 3-122 ip access-group3-127
Syntax No access-list ip mask-precedence in out
IP Mask
Syntax No mask protocol
124
125
Syntax Show access-list ip mask-precedence in out
Show access-list ip mask-precedence
Ip access-group
Syntax No ip access-group aclname in out
Mask IP ACL
Map access-list ip
Show ip access-group
Show ip access-list3-121
This command shows the ports assigned to IP ACLs
Show map access-list ip
Queue cos-map3-81 Show map access-list ip
Syntax Show map access-list ip interface
Map access-list ip
Match access-list ip
Show marking
Show marking
Match access-list ip
Access-list mac
Syntax No access-list mac aclname
MAC ACLs
Syntax No permit deny
Permit, deny MAC ACL
Vid vid vid-bitmask ethertype protocol protocol-bitmask
No permit deny tagged-eth2
No permit deny tagged-802.3
Show mac access-list
This command displays the rules for configured MAC ACLs
Syntax Show mac access-list aclname
Permit, deny Mac access-group3-142
Access-list mac mask-precedence
Mask MAC ACL 3-138 mac access-group3-142
Syntax No mask pktformat
MAC Mask
139
140
Show access-list mac mask-precedence
Syntax Show access-list mac mask-precedence in out
This example creates an Egress MAC ACL
Mac access-group
Syntax Mac access-group aclname in out
Show mac access-list3-136
Map access-list mac
Show mac access-group
This command shows the ports assigned to MAC ACLs
Syntax No map access-list mac aclname cos cos-value
Queue cos-map3-81 Show map access-list mac
Show map access-list mac
Syntax Show map access-list mac interface
Output queues as shown below
Match access-list mac
Show access-group
Show access-list
This command shows the port assignments of ACLs
ACL Information
Privileged Executive
Snmp Commands
Snmp-server contact
Syntax Snmp-server location text no snmp-server location
Syntax Snmp-server contact string no snmp-server contact
Host Address None Snmp Version
Snmp-server enable traps
No snmp ip filter ipaddress subnetmask
Issue authentication and link-up-down traps
153
This command checks the status of Snmp communications
Dhcp Client
Dhcp Commands
Ip dhcp client-identifier
Text a text string. Range 1-15 characters
This command submits a Bootp or Dhcp client request
Interface Configuration Vlan
Ip dhcp restart client
Hex The hexadecimal value
Syntax Ip dhcp relay no ip dhcp relay Default Setting
Dhcp Relay
Ip dhcp restart relay
Ip dhcp relay server
Usage Guidelines
Dhcp Server
Service dhcp
Syntax Service dhcp no service dhcp Default Setting
Ip dhcp excluded-address
Ip dhcp pool
Dhcp address pools are not configured
All IP pool addresses may be assigned
Syntax Ip dhcp pool name no ip dhcp pool name
Dhcp Pool Configuration
Within the range of a configured network address pool
Network
Network 3-163 host
Default-routeraddress1 address2 no default-router
Default-router
Dns-server
Domain-name
Syntax Domain-name domain no domain-name
Dns-serveraddress1 address2 no dns-server
Bootfile
Next-server
Syntax Next-server address no next-server address
Netbios-name-server
Bootfile
Syntax Bootfile filename no bootfile
Next-server3-166
Syntax Netbios-node-type type no netbios-node-type
Netbios-node-type
Mixed Peer-to-peer Default Setting
Broadcast
Netbios-name-server3-167
Lease
Command Modes
Host
Lease days hoursminutes infinite no lease
Host address mask no host
Client-identifier3-172hardware-address3-173
Client-identifier
Host
Hardware-address
Clear ip dhcp binding
If no type is specified, the default protocol is Ethernet
Hardware-addresshardware-address type no hardware-address
Syntax Clear ip dhcp binding address
Show ip dhcp binding
Show ip dhcp binding
Syntax Show ip dhcp binding address
DNS Commands
Ip host
No ip host name address1 address2 … address8
No static entries
Clear host
Ip domain-name
Syntax Clear host name
Syntax Ip domain-name name no ip domain-name
Ip domain-list
Syntax No ip domain-list name
Ip name-server
Ip domain-name3-178
Server-address1- IP address of domain-name server
Syntax No ip domain-lookup Default Setting
Ip domain-lookup
Ip domain-name3-178 ip domain-lookup3-182
Ip domain-name3-178 ip name-server3-181
Show hosts
This command displays entries in the DNS cache
This command displays the configuration of the DNS server
Show dns
Show dns cache
Clear dns cache
This command clears all entries in the DNS cache
186
Interface Commands
Port-channel channel-idRange
To specify port 4, enter the following command
Vlan vlan-idRange
Syntax Description string no description
Following example adds a description to port
Interface Configuration Ethernet, Port Channel
Syntax No negotiation
Negotiation 3-4 capabilities
Capabilities 3-5speed-duplex3-3
Following example configures port 11 to use autonegotiation
Negotiation 3-4speed-duplex3-3
Syntax No flowcontrol Default Setting
Flow control enabled
Flowcontrol
Syntax Combo-forced-mode mode no combo-forced-mode
Following example enables flow control on port
Negotiation Capabilities flowcontrol, symmetric
Mode
Syntax No shutdown Default Setting
All interfaces are enabled
Following example disables port
Syntax Clear counters interface
This command clears statistics on an interface
This command displays the status for an interface
Following example clears statistics on port
Syntax Show interfaces status interface
Shows the status for all interfaces
Port-channel channel-idRange Default Setting
This command displays interface statistics
Syntax Show interfaces counters interface
Shows the counters for all interfaces
Syntax Show interfaces switchport interface
Shows all interfaces
This example shows the configuration setting for port
Interface ethernet unit/port source port
Mirror Port Commands
This command displays mirror information
Interface Configuration Ethernet, destination port
Unit Switch unit Port Port number
Syntax Show port monitor interface
Rate Limit Commands
Following shows mirroring configured from port 6 to port
Shows all sessions
Rate-limit
Link Aggregation Commands
Guidelines for Creating Trunks
General Guidelines
Channel-id- Trunk index Range
Syntax Channel-group channel-idno channel-group
Syntax No lacp Default Setting
Current port will be added to this trunk
Following example creates trunk 1 and then adds port
Command Usage
32768
Lacp admin-keyEthernet Interface
Interface Configuration Port Channel
Syntax Lacp admin-key key no lacp admin-key
Lacp port-priority
Port Channel all
This command displays Lacp information
Number of frames that carry the Slow Protocols Ethernet Type
Field Description
Lacp Port
Field Description
Address Table Commands
Address Table Commands
Mac-address- MAC address
Vlan-id- Vlan ID Range
Action
Unit This is device
Mac-address- MAC address Mask Bits to match in the address
Mac-address-table aging-time
Show mac-address-table aging-time
Spanning Tree Commands
Syntax No spanning-tree Default Setting
Spanning tree is enabled
Syntax Spanning-tree mode stp rstp no spanning-tree mode
Spanning Tree Protocol
Rstp
Spanning-tree forward-time
Spanning-tree hello-time
Spanning-tree priority
Long method
This command limits the maximum transmission rate for BPDUs
Syntax Spanning-tree cost cost no spanning-tree cost
This example disables the spanning tree algorithm for port
Spanning-tree cost
Maximum value for path cost is 65,535
Spanning-tree portfast
Syntax No spanning-tree edge-port Default Setting
Spanning-treeedge-port3-48
Syntax No spanning-tree portfast Default Setting
Spanning-tree link-type
Port-channel channel-idRange Command Mode
Syntax Spanning-tree protocol-migration interface
Syntax Show spanning-tree interface mst instanceid
Port-channel channel-idRange Default Setting
Mstp
Vlan Commands
Editing Vlan Groups
Vlan database
Vlan
Vlan Database Configuration
By default only Vlan 1 exists and is active
Configuring Vlan Interfaces
Interface vlan
Syntax Interface vlan vlan-id
Syntax Switchport mode trunk hybrid no switchport mode
Switchport mode
All ports are in hybrid mode with the Pvid set to Vlan
Shutdown
Switchport acceptable-frame-types
Switchport acceptable-frame-types3-59
All frame types
Syntax No switchport ingress-filtering Default Setting
Switchport ingress-filtering
Switchport native vlan
Switchport allowed vlan
No VLANs are included in the forbidden list
Switchport forbidden vlan
Displaying Vlan Information
This command shows Vlan information
Show vlan
Syntax Show vlan id vlan-idname vlan-name
Shows all VLANs
Following example shows how to display information for Vlan
Protocol-vlan protocol-group Configuring Groups
No protocol groups are configured
Protocol-vlan protocol-group Configuring Interfaces
Rarp
No protocol groups are mapped for any interface
Syntax Show protocol-vlan protocol-group group-id
Show protocol-vlan protocol-group
Group-id- Group identifier for a protocol group. Range
All protocol groups are displayed
This shows protocol group 1 configured for IP over Ethernet
Show interfaces protocol-vlan protocol-group
Mapping for all interfaces is displayed
Pvlan up-linkinterface-list down-linkinterface-listno pvlan
Pvlan
Gvrp and Bridge Extension Commands
This command displays the configured private Vlan
Show pvlan
Bridge-ext gvrp
Syntax No bridge-ext gvrp Default Setting
Switchport gvrp
Syntax No switchport gvrp
Show bridge-ext
This command shows if Gvrp is enabled
Show gvrp configuration
Syntax Show gvrp configuration interface
Shows both global and interface-specific configuration
Garp timer
Syntax Show garp timer interface
Show garp timer
Shows all Garp timers
Successfully
Priority Commands
Switchport priority default
Priority Commands Layer
Default Setting
Queue mode
Syntax Queue mode strict wrr no queue mode
Weighted Round Robin
Queue bandwidth weight1...weight4 no queue bandwidth
Queue bandwidth
Queue cos-map
Queue cos-mapqueueid cos1 ... cosn no queue cos-map
Show queue mode
This command shows the current queue mode
Show queue cos-map3-84
Show queue bandwidth
This command shows the class of service priority map
Show queue cos-map
Syntax Show queue cos-map interface
Syntax No map ip port
Priority Commands Layer 3
Consoleconfig#map ip port
Map ip port Interface Configuration
Syntax No map ip precedence Default Setting
Map ip precedence Global Configuration
Syntax No map ip dscp Default Setting
List below shows the default priority mapping
Map ip dscp dscp-value cos cos-value no map ip dscp
Map ip dscp Interface Configuration
Use this command to show the IP port priority map
Show map ip port
Syntax Show map ip port interface
This command shows the IP precedence priority map
Show map ip precedence
Syntax Show map ip precedence interface
This command shows the IP Dscp priority map
Show map ip dscp
Syntax Show map ip dscp interface
Command Mode
Multicast Filtering Commands
Syntax No ip igmp snooping Default Setting
Igmp Snooping Commands
Following example enables Igmp snooping
Ip igmp snooping
Igmp Version
Ip igmp snooping version
Following configures the switch to use Igmp Version
This command shows the Igmp snooping configuration
Show ip igmp snooping
Following shows the current Igmp snooping configuration
This command shows known multicast addresses
Show mac-address-table multicast
Igmp Query Commands Layer
Syntax No ip igmp snooping querier Default Setting
Ip igmp snooping querier
Times
Ip igmp snooping query-count
Ip igmp snooping query-interval
Following shows how to configure the query count to
Ip igmp snooping query-max-response-time
Ip igmp snooping query-max-response-time3-102
Seconds The report delay advertised in Igmp queries. Range
Ip igmp snooping router-port-expire-time
Switch must use IGMPv2 for this command to take effect
No static multicast router ports are configured
Static Multicast Routing Commands
Ip igmp snooping vlan mrouter
Syntax No ip igmp snooping vlan vlan-idmrouter interface
Displays multicast router ports for all configured VLANs
Show ip igmp snooping mrouter
Syntax Show ip igmp snooping mrouter vlan vlan-id
Igmp Commands Layer
Syntax Ip igmp no ip igmp Default Setting
Ip igmp
Ip igmp snooping 3-96 show ip igmp snooping
Ip igmp robustval
Syntax Ip igmp robustval robust-valueno ip igmp robustval
Robust-value- The robustness of this interface. Range
Ip igmp query-interval
Ip igmp max-resp-interval
Ip igmp last-memb-query-interval
Seconds The report delay for the last member query. Range
Ip igmp version Ip igmp query-interval3-109
Second
Syntax Ip igmp version 1 2 no ip igmp version
Ip igmp version
Show ip igmp interface
Use this command to delete entries from the Igmp cache
Clear ip igmp group
Syntax Show ip igmp interface vlan vlan-id
Show ip igmp groups
Deletes all entries in the cache if no options are selected
Displays information for all known groups
Following shows the Igmp groups currently active on Vlan
IP Interface Commands
Basic IP Configuration
Ip address
IP address Netmask
Following example, the device is assigned an address in Vlan
Ip default-gateway
Show ip interface
Syntax Ip default-gateway gateway no ip default-gateway
Show ip redirects
Ip default-gateway3-118
Ping
Syntax Ping host count countsize size
This command has no default for the host
No default entries
Address Resolution Protocol ARP
Arp
Arp ip-address hardware-address no arp ip-address
Syntax Arp-timeout seconds no arp-timeout
Arp-timeout
Clear arp-cache show arp
Seconds 20 minutes
Clear arp-cache
Show arp
This example clears all dynamic entries in the ARP cache
Syntax Ip proxy-arp no ip proxy-arp Default Setting
Ip proxy-arp
This example displays all entries in the ARP cache
IP Routing Commands
Global Routing Configuration
Syntax Ip routing no ip routing Default Setting
Ip routing
Ip route
No static routes are configured
Clear ip route
Syntax Show ip route config address netmask
Show ip route
Syntax Clear ip route network netmask
RIP, Ospf
Show ip traffic
Routing Information Protocol RIP
Router rip
Syntax Router rip no router rip Command Mode
Timers basic
Timers basic update-seconds no timers basic
Router Configuration
No networks are specified
Network subnet-address no network subnet-address
Version
Neighbor
Syntax Neighbor ip-addressno neighbor ip-address
No neighbors are defined
RIP Version
Syntax Version 1 2 no version
Ip rip receive version
Ip rip send version
Ip split-horizon
Syntax Ip split-horizon poison-reverseno ip split-horizon
Split-horizon
No authentication
Ip rip authentication key
Text Indicates that a simple password will be used
Ip rip authentication mode
Show rip globals
This example sets the authentication mode to plain text
Show ip rip
Syntax Show ip rip configuration status peer
Show ip rip status
Open Shortest Path First Ospf
Area nssa
Router ospf
Syntax Router ospf no router ospf Command Mode
Router-id
Router-idip-address no router-id
Lowest interface address
RFC 1583 compatible
Compatible rfc1583
Default-information originate
Timers spf spf-holdtime no timers spf
Timers spf
Area area-idrange ip-address netmask advertise not-advertise
Area range
Default Setting Command Usage
Area default-cost
Summary-address
Type-value
Redistribute
Network area
Area stub
Area area-idstub summary
No area area-idstub summary
No stub is configured
Area nssa
No Nssa is configured
159
Area virtual-link
161
Area-id None Router-id None
This example creates a virtual link using MD5 authentication
Ip ospf authentication
Ip ospf authentication-key
No password
This example sets a password for the specified interface
Ip ospf message-digest-key
MD5 authentication is disabled
Ip ospf cost
Ip ospf dead-interval
Syntax Ip ospf cost cost no ip ospf cost
Ip ospf hello-interval
Syntax Ip ospf priority priority no ip ospf priority
Ip ospf priority
Ip ospf retransmit-interval
Ip ospf transmit-delay
Show ip ospf
It is an router type
Show ip ospf border-routers
Database database-summary Database external link-state-id
Show ip ospf database
Examples
Following shows output for the show ip ospf database command
Following shows output when using the asbr-summarykeyword
175
Following shows output when using the external keyword
Following shows output when using the network keyword
Following shows output when using the router keyword
Link
Following shows output when using the summary keyword
Syntax Show ip ospf interface vlan vlan-id
Show ip ospf interface
Show ip ospf neighbor
Syntax Show ip ospf neighbor Command Mode
Use this command to display all summary address information
Syntax Show ip ospf summary-address Command Mode
Show ip ospf summary-address
Multicast Routing Commands
Syntax Show ip ospf virtual-links Command Mode
Show ip ospf virtual-links
187
186
Ip multicast-routing
General Multicast Routing Commands
Use this command to display the IP multicast routing table
Show ip mroute
Syntax Show ip mroute group-address source summary
Interfaces on which multicast subscribers have been
Dvmrp
Router dvmrp
Dvmrp Multicast Routing Commands
Probe-interval
Syntax Router dvmrp no router dvmrp Command Mode
Ip dvmrp Show router dvmrp
Syntax Probe-interval seconds
Nbr-timeout
Syntax Nbr-timeout seconds
Seconds Interval before declaring a neighbor dead. Range
Syntax Flash-update-interval seconds
Flash-update-interval
Report-interval
Syntax Report-interval seconds
Prune-lifetime
Syntax Prune-lifetime seconds
Seconds Prune state lifetime. Range
Default-gateway
Syntax Default-gateway ip-addressno default-gateway
Ip-address- IP address of the default Dvmrp gateway
Ip dvmrp
Syntax Ip dvmrp no ip dvmrp Default Setting
Ip dvmrp metric
Clear ip dvmrp route
Ip dvmrp metric interface-metric no ip dvmrp metric
Show router dvmrp
Default settings are shown in the following example
Show ip dvmrp route
Dmvrp routes are shown in the following example
Show ip dvmrp neighbor
Show ip dvmrp interface
PIM-DM Multicast Routing Commands
Router pim
Syntax Router pim no router pim Default Setting
Ip pim dense-mode
Syntax Ip pim dense-mode no pim dense-mode Default Setting
Ip pim hello-interval
Syntax Ip pim hello-interval seconds no pim hello-interval
Seconds Interval between sending PIM hello messages. Range
Ip pim hello-holdtime
Ip pim trigger-hello-interval
Seconds The hold time for PIM hello messages. Range
Seconds The hold time for the prune state. Range
Ip pim join-prune-holdtime
Seconds The time before resending a Graft. Range
Ip pim graft-retry-interval
Show router pim
Ip pim max-graft-retries
Show ip pim interface
Use this command to display information about PIM neighbors
Show ip pim neighbor
Syntax Show ip pim interface vlan-id
Router Redundancy Commands
Vrrp ip
Virtual Router Redundancy Protocol Commands
No virtual router groups are configured
No key is defined
Vrrp authentication
Syntax Vrrp group priority level no vrrp group priority
Vrrp priority
Vrrp timers advertise
Vrrp preempt
Preempt Enabled Delay 0 seconds
Defaults
Use this command to display status information for Vrrp
Show vrrp
Syntax Show vrrp brief group
Master
Syntax Show vrrp interface vlan vlan-idbrief
Show vrrp interface
221
Show vrrp router counters
Show vrrp interface counters
Show vrrp group interface vlan interface counters
Clear vrrp router counters
Use this command to clear Vrrp system statistics
Clear vrrp interface counters
Clear vrrp group interface interface counters
Console#clear vrrp 1 interface 1 counters Console#
Standby ip
Hot Standby Router Protocol Commands
Group number Virtual router groups none configured
Group number Priority
Standby priority
Standby preempt
Standby authentication 3-230 standby track
Standby priority
Group number Preempt Disabled Delay 0 seconds
Group number String not defined
Standby authentication
Group number Hellotime 3 seconds Holdtime 10 seconds
Standby timers
Standby track
Group number Interface priority
Show standby
Use this command to display status information for Hsrp
Syntax Show standby active init listen standby brief
Displays detailed information for each group
Priority Priority of this router May preempt
236
Show standby interface
238
Software Features
Appendix a Software Specifications
DVMRP, PIM-DM
Management Features
Standards
Groups 1, 2, 3, 9 Statistics, History, Alarm, Event
Sntp RFC SSH Version Vrrp RFC
Management Information Bases
Bridge MIB RFC
TCP MIB RFC Trap RFC UDP MIB RFC
Page
Appendix B Troubleshooting
Troubleshooting
Glossary-1
Glossary-2
Glossary-3
Glossary-4
Glossary-5
Glossary-6
Glossary-7
Glossary-8
XModem
Glossary-9
Glossary-10
Index-1
Symbols Numerics
Index-2
Index-3
Index-4
STP 3-92,4-164STP Also see STA
Index-5
Index-6
Page
For Technical SUPPORT, Call