Manuals / SMC Networks / Computer Equipment / Switch

SMC Networks SMC8624/48T Permit, deny MAC ACL, Any host destination destination address-bitmask

Models: SMC8624/48T

1 556

Download 556 pages 10.96 Kb

Page 381

ACCESS CONTROL LIST COMMANDS

permit, deny (MAC ACL)

This command adds a rule to a MAC ACL. The rule filters packets matching a specified MAC source or destination address (i.e., physical layer address), or Ethernet protocol type. Use the no form to remove a rule.

Syntax

[no] {permit deny}{any host source source address-bitmask} {any host destination destination address-bitmask}[vidvid vid-bitmask] [ethertype protocol [protocol-bitmask]]

Note:- The default is for Ethernet II packets.

[no] {permit deny} tagged-eth2 {any host source source address-bitmask} {any host destination destination address-bitmask} [vid vid vid-bitmask] [ethertype protocol [protocol-bitmask]]

[no] {permit deny} untagged-eth2 {any host source source address-bitmask}

{any host destination destination address-bitmask} [ethertype protocol [protocol-bitmask]]

[no] {permit deny} tagged-802.3 {any host source source address-bitmask}

{any host destination destination address-bitmask}[vidvid vid-bitmask]

[no] {permit deny} untagged-802.3 {any host source source address-bitmask}

{any host destination destination address-bitmask}

•tagged-eth2– Tagged Ethernet II packets.

•untagged-eth2– Untagged Ethernet II packets.

•tagged-802.3– Tagged Ethernet 802.3 packets.

•untagged-802.3– Untagged Ethernet 802.3 packets.

•any – Any MAC source or destination address.

•host – A specific MAC address.

•source – Source MAC address.

•destination – Destination MAC address range with bitmask.

•address-bitmask*– Bitmask for MAC address (in hexidecimal format).

•vid – VLAN ID. (Range: 1-4095)

4-137

Image 381

SMC Networks SMC8624/48T manual Permit, deny MAC ACL, Any host destination destination address-bitmask

Contents

TigerSwitch 10/100/1000 Page TigerSwitch 10/100/1000 Management Guide Trademarks Limited Warranty Limited Warranty Contents Contents Contents Command Line Interface Vii Viii Contents Contents Contents Xii Xiii Xiv Contents Xvi TablesXvii Xviii Figures61. Displaying Vlan Information by Port Membership XixFigures Key Features Key FeaturesDescription of Software Features Description of Software Features Introduction Description of Software Features Introduction System Defaults System DefaultsSystem Defaults Dhcp Introduction Configuration Options Connecting to the SwitchRequired Connections Connecting to the Switch Basic Configuration Remote ConnectionsConsole Connection Setting Passwords Manual Configuration Setting an IP AddressDynamic Configuration Initial Configuration Community Strings Enabling Snmp Management AccessInitial Configuration Trap Receivers Saving Configuration SettingsManaging System Files Managing System Files Initial Configuration Using the Web Interface Configuring the SwitchConfiguring the Switch Home Navigating the Web Browser InterfacePanel Display Configuration OptionsMain Menu Main MenuACL Lacp STA 141 Vlan ID DNS Field Attributes Displaying System InformationCLI Specify the hostname, location and contact information System InformationDisplaying Switch Hardware/Software Versions Main BoardManagement Software Switch Information Web Click System, Switch InformationDisplaying Bridge Extension Capabilities Setting the Switch’s IP Address CLI Enter the following commandWeb Click System, Bridge Extension Command Attributes Manual IP Configuration Dhcp IP Configuration Using DHCP/BOOTP288 Downloading System Software from a Server Managing FirmwareOperation Code Image File Transfer Saving or Restoring Configuration Settings 10. Downloading Configuration Settings from a Server Downloading Configuration Settings from a ServerCLI Use the reload command to restart the switch Resetting the SystemConfiguring Sntp Setting the System Clock13. Sntp Configuration 14. Setting the Time Zone Setting the Time ZoneSimple Network Management Protocol Setting Community Access StringsSpecifying Trap Managers and Trap Types Access Mode16. Specifying Trap Managers and Trap Types Configuring the Logon Password User Authentication17. Configuring the Logon Password Configuring Local/Remote Logon AuthenticationCommand Usage Radius Settings 18. Setting Local, Radius and Tacacs Authentication Tacacs SettingsConfiguring Https Https Support 19. Https SettingsReplacing the Default Secure-site Certificate Configuring the Secure Shell Configuring the Switch Generating the Host Key Pair Field Attributes 20. SSH Host-Key Settings SSH server includes basic settings for authentication Configuring the SSH Server21. SSH Server Settings Configuring Port Security Command Usage 22. Configuring Port Security Configuring 802.1x Port Authentication 802.1x client Radius server Displaying 802.1x Global Settings23 .1x Information 111 Configuring 802.1x Global Settings 24 .1x Configuration Configuring Port Authorization ModeAuthorized 25 .1x Port ConfigurationDisplaying 802.1x Statistics Statistical Values1x Statistics 26 .1x Statistics Access Control Lists Configuring Access Control ListsCLI This example displays the 802.1x statistics for port Setting the ACL Name and Type CLI This example creates a standard IP ACL named bill 27. Naming and Choosing ACLs28. Configuring Standard IP ACLs Configuring a Standard IP ACL Command AttributesConfiguring an Extended IP ACL Command Attributes Access Control Lists 29. Configuring Extended IP ACLs 120 Configuring a MAC ACL Command AttributesCommand Usage 30. Configuring MAC ACLs Configuring ACL Masks Command UsageSpecifying the Mask Type This mask defines the fields to check in the IP header Configuring an IP ACL MaskConfiguring the Switch 32. Configuring an IP based ACL This mask defines the fields to check in the packet header Configuring a MAC ACL Mask33. Configuring a MAC based ACL 148 Binding a Port to an Access Control List34. Mapping ACLs to Port Ingress/Egress Queues Filtering Management Access 35. Filtering Management Access Port Configuration Displaying Connection StatusField Attributes Web Web Click Port, Port Information or Trunk Information Field Attributes CLICurrent status 178 CLI This example shows the connection status for PortConfiguring Interface Connections Port Configuration Creating Trunk Groups 37. Configuring Port AttributesCommand Usage 38. Static Trunk Configuration Statically Configuring a Trunk Command Usage189 Enabling Lacp on Selected Ports Command Usage39. Lacp Port Configuratio 190 Command Attributes 40. Lacp Aggregation Port Configuration Counter Information Displaying Lacp Port CountersYou can display statistics for Lacp protocol messages Lacp Port Counter Information41. Displaying Lacp Port Counters Information Displaying Lacp Settings and Status for the Local Side Internal Configuration InformationLacp Settings Link Passive 1 Active 42. Displaying Lacp Port Information Displaying Lacp Settings and Status for the Remote Side Neighbor Configuration InformationLacp Remote Side Settings 43. Displaying Remote Lacp Port Information 100101 Setting Broadcast Storm Thresholds44. Enabling Port Broadcast Control 102103 Configuring Port Mirroring104 Configuring Rate Limits105 Command Attribute106 Showing Port StatisticsPort Statistics 107108 Rmon Statistics 10947. Displaying Port Statistics 11048. Displaying Etherlike and Rmon Statistics 111Setting Static Addresses Address Table Settings112 CLI This example shows statistics for port49. Mapping Ports to Static Addresses 113114 Displaying the Address TableChanging the Aging Time 115CLI This example sets the aging time to 400 seconds 116 Spanning Tree Algorithm Configuration117 Displaying Global Settings118 119 52. Displaying the Spanning Tree Algorithm 120Configuring Global Settings Global settings apply to the entire switch121 122 Basic Configuration of Global Settings123 Root Device Configuration124 Configuration Settings for Rstp125 53. Configuring the Spanning Tree Algorithm126 Displaying Interface SettingsRules defining port status are 127AD B 128129 Configuring Interface Settings 130CLI This example shows the STA attributes for port 131 132 Configuring Multiple Spanning Trees 133CLI This example sets STA attributes for port 134 Vlan ID Vlan to assign to this selected MST instance. Range 135136 137 Displaying Interface Settings for Mstp138 139 Configuring Interface Settings for Mstp140 58. Mstp Port ConfigurationOverview Vlan Configuration141 CLI This example sets the Mstp attributes for portAssigning Ports to VLANs 142143 144 Forwarding Tagged/Untagged Frames 145CLI This example enables Gvrp for the switch Enabling or Disabling Gvrp Global SettingDisplaying Basic Vlan Information 146Displaying Current VLANs Command Attributes Web147 Web Click VLAN, 802.1Q VLAN, Basic Information148 Command Attributes CLI149 Creating VLANsCLI This example creates a new Vlan 150151 Adding Static Members to VLANs Vlan Index152 63. Configuring Vlan Port Attributes153 Adding Static Members to VLANs Port Index154 Configuring Vlan Behavior for Interfaces155 156 157 65. Configuring Vlan PortsCLI This example enables private VLANs Configuring Private VLANs158 Enabling Private VLANsConfiguring Protocol-Based VLANs Configuring Uplink and Downlink Ports159 Configuring Protocol Groups 160Create a protocol group for one or more protocols Mapping Protocols to VLANs 16169. Mapping Protocols to VLANs 162Class of Service Configuration Setting the Default Priority for Interfaces163 164 CLI This example assigns a default priority of 5 to port165 Mapping CoS Values to Egress QueuesEgress Queue Priority Mapping 10. CoS Priority Levels166 71. Configuring Ports and Trunks for Class of Service167 Selecting the Queue Mode168 Setting the Service Weight for Traffic Classes169 Mapping Layer 3/4 Priorities to CoS Values170 Selecting IP Precedence/DSCP PriorityMapping IP Precedence 17111. IP Precedence Prioruty 172 75. Mapping IP Precedence to Class of Service Values173 Mapping Dscp Priority174 76. Mapping IP Dscp Priority to Class of Service Values175 Mapping IP Port Priority78. IP Port Priority Mapping 176Mapping CoS Values to ACLs 17713. CoS to ACL Mapping 178 Changing Priorities Based on ACL Rules179 79. Changing Priorities Based on ACL Rules 180181 Multicast FilteringConfiguring Igmp Snooping and Query Parameters Layer 2 Igmp Snooping and Query182 183 184 80. Configuring Internet Group Management ProtocolCommand Attributes 185Displaying Interfaces Attached to a Multicast Router Specifying Static Interfaces for a Multicast Router 186187 Displaying Port Members of Multicast Services188 Assigning Ports to Multicast Services84. Specifying Multicast Port Membership 189Configuring Domain Name Service Configuring General DNS Server Parameters190 191 192 85. Configuring DNS193 Configuring Static DNS Host to Address Entries86. Mapping IP Addresses to a Host Name 194195 Displaying the DNS CacheWeb Select DNS, Cache 196Accessing the CLI Using the Command Line InterfaceTelnet Connection Using the Command Line Interface This section describes how to enter CLI commands Entering CommandsKeywords and Arguments Minimum AbbreviationGetting Help on Commands Command CompletionShowing Commands Negating the Effect of Commands Using Command HistoryPartial Keyword Lookup Understanding Command Modes Exec CommandsCommand Modes Configuration Commands Mode Command Prompt Configuration CommandsKeystroke Function Command Line ProcessingCommand Group Index Command Groups255 Line Command Syntax Line CommandsCommand Mode Default SettingLine Syntax Line console vtyLogin Related CommandsSyntax Login local no login Username 4-35 password PasswordSyntax Password 0 7 password no password No password is specifiedLogin 4-16password-thresh4-19 Exec-timeoutSyntax Exec-timeout seconds no exec-timeout CLI No timeout Telnet 10 minutesTo set the timeout to two minutes, enter this command Password-threshSyntax Password-thresh threshold no password-thresh Default value is three attemptsSyntax Silent-time seconds no silent-time Silent-timeDatabits To specify 7 data bits, enter this commandSyntax Databits 7 8 no databits Seven data bits per character Eight data bits per characterParity To specify no parity, enter this commandSyntax Parity none even odd no parity None No parity Even Even parity Odd Odd paritySpeed To specify 57600 bps, enter this commandSyntax Speed bps no speed AutoDisconnect StopbitsSyntax Stopbits 1 Syntax Disconnect session-idSyntax Show line console vty Show lineEnable General CommandsGeneral Commands Syntax Enable levelDisable Enable password DisableNormal Exec NoneShow history ConfigureReload This command restarts the systemThis example shows how to reset the switch This command resets the entire systemThis command returns to Privileged Exec mode EndExit This command exits the configuration programQuit AnySystem Management Commands This example shows how to quit a CLI sessionSystem Mangement Commands Device Designation Commands Device Designation CommandsPrompt Syntax Prompt string no promptUser Access Commands User Access CommandsHostname Syntax Hostname name no hostnameUsername Default is level Default password is super Enable password10. IP Filter Commands IP Filter CommandsAll addresses ManagementShow management 11. Web Server Command Web Server CommandsSyntax No ip http server Default Setting Default Setting Command ModeIp http port Ip http serverSyntax No ip http secure-server Default Setting Ip http secure-serverIp http port Copy tftp https-certificate Ip http secure-port4-44 Copy tftp https-certificate Portnumber The UDP port used for HTTPS/SSL. Range Ip http secure-port443 Ip http secure-server4-4212. Secure Shell Commands Secure Shell Commands12. Secure Shell Commands System Management Commands Syntax Ip ssh server no ip ssh server Default Setting DisabledIp ssh server Syntax Ip ssh timeout seconds no ip ssh timeout Ip ssh timeoutIp ssh crypto host-key generate 4-52 show ssh SecondsIp ssh authentication-retries Exec-timeout4-18 show ip sshShow ip ssh Ip ssh server-key size Delete public-keySyntax Delete public-key username dsa rsa Syntax Ip ssh crypto host-key generate dsa rsa Ip ssh crypto host-key generateDsa DSA key type Rsa RSA key type Generates both the DSA and RSA key pairsIp ssh crypto zeroize Use this command to clear the host key from memory i.e. RAMIp ssh crypto zeroize 4-53 ip ssh save host-key4-54 Syntax Ip ssh crypto zeroize dsa rsaIp ssh save host-key Show ip sshSyntax Ip ssh save host-key dsa rsa 13. SSH Information Show sshShow public-key Syntax Show public-key user username hostUsername Name of an SSH user. Range 1-8 characters RSA Shows all public keys14. Event Logging Commands Event Logging CommandsSyntax No logging on Default Setting Logging onLogging history 4-59 clear logging Logging historyLogging host Flash errors level 3 RAM warnings level 7Syntax No logging host hostipaddress Hostipaddress The IP address of a syslog serverSyntax No logging facility type Logging facilityClear logging Logging trapSyntax Logging trap level no logging trap Syntax Clear logging flash ramShow logging Show loggingSyntax Show logging flash ram sendmail trap Following example displays settings for the trap function Smtp Alert Commands 15. Smtp Alert CommandsShow logging sendmail Syntax No logging sendmail host ipaddress Logging sendmail hostLogging sendmail source-email Logging sendmail levelSyntax Logging sendmail level level Syntax Logging sendmail source-email email-addressSyntax No logging sendmail destination-email email-address Logging sendmail destination-emailSyntax No logging sendmail Default Setting Logging sendmailShow logging sendmail 16. Time Commands Time CommandsSntp server Syntax Sntp server ip1 ip2 ip3Sntp poll 4-72 show sntp Sntp poll Related CommandsSntp client Syntax Sntp poll seconds no sntp pollDisabled Syntax No sntp broadcast client Default Setting Sntp broadcast clientShow sntp Show sntp Clock timezoneCalendar set This command displays the system clockShow calendar SyntaxSystem Status Commands Show startup-config17. System Status Commands Command Usage Show running-config4-80 Show running-config Show startup-config4-77 Show system This command displays system informationShow version Show users18. Frame Size Commands Frame Size CommandsSyntax No jumbo frame Default Setting Jumbo frame19. Flash/File Commands Flash/File CommandsCopy Command Usage Following example shows how to download a configuration file This command deletes a file or image Filename Name of the configuration file or image nameDelete Syntax Dir boot-rom config opcode filename This command displays a list of files in flash memoryDir Dir Delete public-key4-51Following example shows how to display all file information WhichbootSyntax Boot system boot-romconfig opcode filename Boot systemAuthentication Sequence Authentication CommandsDir 4-90 whichboot 20. Authentication CommandsLocal Authentication login22. Radius Client Commands Username for setting the local user names and passwordsRadius Client Radius-server host10.1.0.1 Radius-server portSyntax Radius-server port portnumber no radius-server port 1812Radius-server key Radius-server retransmitSyntax Radius-server key keystring no radius-server key Show radius-server Radius-server timeoutTACACS+ Client 23. TACACS+ Client CommandsTacacs-server host Hostipaddress IP address of a TACACS+ serverSyntax Tacacs-server port portnumber no tacacs-server port Tacacs-server portTacacs-server key Show tacacs-serverSyntax Tacacs-server key keystring no tacacs-server key Port Security Commands 24. Port Security CommandsPort security Interface Configuration Ethernet Status Disabled Action None Maximum Addresses25 .1x Port Authentication Commands 802.1x Port AuthenticationAuthentication dot1x default Syntax Dot1x default Command Mode Dot1x defaultDefault Command Mode Dot1x max-reqInterface Configuration DefaultDot1x port-control Force-authorizedSyntax Dot1x re-authenticate interface Dot1x re-authenticateDot1x operation-mode Ethernet unit/portDot1x timeout quiet-period Dot1x re-authenticationSyntax No dot1x re-authentication Command Mode Seconds The number of seconds. RangeDot1x timeout tx-period Dot1x timeout re-authperiodShow dot1x statistics interface interface Show dot1xState- Current state including initialize, reauthenticate Authenticator State Machine113 Access Control Lists Access Control List CommandsAccess Control List Commands 26. Access Control List Commands Masks for Access Control Lists27. IP ACL Commands IP ACLsEXT-ACL Syntax No access-list ip standard extended aclname Access-list ipStandard ACL Permit, deny Ip access-group4-129 show ip access-list4-123No permit deny tcp Access-list ipExtended ACL 122 Access-list ip mask-precedence Show ip access-listSyntax Show ip access-list standard extended aclname Syntax No access-list ip mask-precedence in outMask IP ACL 4-125 ip access-group4-129 IP Mask Syntax No mask protocol126 127 Syntax Show access-list ip mask-precedence in out Show access-list ip mask-precedenceIp access-group Syntax No ip access-group aclname in outMask IP ACL Map access-list ip Show ip access-groupShow ip access-list4-123 This command shows the ports assigned to IP ACLsQueue cos-map4-260 Show map access-list ip Show map access-list ip Syntax Show map access-list ip interfaceMap access-list ip Match access-list ip Match access-list ip Show markingShow marking MAC ACLs 28. MAC ACL CommandsSyntax No access-list mac aclname Access-list macAny host destination destination address-bitmask Permit, deny MAC ACLMAC ACL Access-list mac mask-precedence Show mac access-listThis command displays the rules for configured MAC ACLs Syntax Show mac access-list aclnameMask MAC ACL Mask MAC ACL 4-140 mac access-group4-144MAC Mask 142 Show access-list mac mask-precedence Syntax Show access-list mac mask-precedence in outThis example creates an Egress MAC ACL Mac access-group Syntax Mac access-group aclname in outShow mac access-list4-139 Map access-list mac Show mac access-groupThis command shows the ports assigned to MAC ACLs Syntax No map access-list mac aclname cos cos-valueShow map access-list mac Queue cos-map4-260 Show map access-list macSyntax Show map access-list mac interface Match access-list mac Show access-list ACL Information29. ACL Information Show access-group Snmp CommandsThis command shows the port assignments of ACLs 30. Snmp CommandsSyntax Snmp community string rorw no snmp community string Snmp communitySnmp location Snmp contactSyntax Snmp contact string no snmp contact Syntax Snmp-server location text no snmp-server locationHost Address None Snmp Version Snmp hostConsoleconfig#snmp-server host 10.1.19.23 batman Snmp enable traps Syntax No snmp enable traps authentication link-up-downIssue authentication and link-up-down traps Show snmp This command checks the status of Snmp communications156 31. DNS Commands DNS CommandsIp host No static entriesThis example maps two address to a host name Ip domain-name Clear hostSyntax Clear host name Syntax Ip domain-name name no ip domain-nameSyntax No ip domain-list name Ip domain-listIp domain-name4-159 Server-address1- IP address of domain-name server Ip name-serverSyntax No ip domain-lookup Default Setting Ip domain-lookupIp domain-name4-159 ip domain-lookup4-163 Ip domain-name4-159 ip name-server4-162 Show hostsThis command displays entries in the DNS cache This command displays the configuration of the DNS serverShow dns Show dns cacheClear dns cache This command clears all entries in the DNS cache167 32. Interface Commands Interface CommandsDescription InterfacePort-channel channel-idRange Syntax Description string no descriptionInterface Configuration Ethernet, Port Channel Speed-duplexFollowing example adds a description to port Syntax No negotiation Default Setting NegotiationNegotiation 4 -170 capabilities 4 Capabilities 4 -172speed-duplex 4 Following example configures port 11 to use autonegotiationCapabilities Flow control enabled Syntax No flowcontrol Default SettingFlowcontrol Negotiation 4 -170speed-duplex 4 -169 flowcontrol 4Syntax Combo-forced-mode mode no combo-forced-mode Following example enables flow control on portCombo-forced-mode Negotiation 4 Capabilities flowcontrol, symmetricAll interfaces are enabled Syntax No shutdown Default SettingFollowing example disables port ShutdownSwitchport broadcast packet-rate Port-channel channel-idRange Default Setting This command clears statistics on an interfaceClear counters Following example clears statistics on portShow interfaces status This command displays the status for an interfaceSyntax Show interfaces status interface Shows the status for all interfacesShow interfaces counters This command displays interface statisticsSyntax Show interfaces counters interface Shows the counters for all interfaces180 Syntax Show interfaces switchport interface Show interfaces switchportThis example shows the configuration setting for port Shows all interfacesShows if acceptable Vlan frames include all types or 33. Mirror Port Commands Mirror Port CommandsInterface Configuration Ethernet, destination port Port monitorUnit Switch unit Port Port number This command displays mirror informationShow port monitor Syntax Show port monitor interfaceRate Limit Commands Following shows mirroring configured from port 6 to port34. Rate Limit Commands Mbps Rate-limit35. Link Aggregation Commands Link Aggregation CommandsGeneral Guidelines Guidelines for Creating TrunksSyntax Channel-group channel-idno channel-group Channel-groupChannel-id- Trunk index Range Current port will be added to this trunkLacp Syntax No lacp Default Setting191 32768 Lacp system-priorityLacp admin-keyEthernet Interface Lacp admin-key Port Channel Syntax Lacp admin-key key no lacp admin-keyInterface Configuration Port Channel Lacp port-priority This command displays Lacp information Show lacpPort Channel all 197 198 199 Address Table Commands 36. Adress Table Commands200 201 Mac-address-table staticMac-address- MAC address Vlan-id- Vlan ID RangeShow mac-address-table Clear mac-address-table dynamic202 Mac-address- MAC address Mask Bits to match in the address203 Mac-address-table aging-time204 Show mac-address-table aging-timeSpanning Tree Commands 37. Spanning Tree Commands205 Spanning-tree Spanning tree is enabled206 No spanning-treeSpanning-tree mode 207Rstp 208 209 Spanning-tree forward-timeSpanning-tree hello-time Spanning-tree max-age210 211 Spanning-tree prioritySpanning-tree pathcost method 212Long method This command limits the maximum transmission rate for BPDUs Spanning-tree mst-configurationSpanning-tree transmission-limit 213MST Configuration Mst vlan214 215 Mst priorityName Switch’s MAC address216 Syntax Name name217 RevisionRevision 4 Syntax Revision numberMax-hops 218Name 4 Syntax No spanning-tree spanning-disabled Default Setting Spanning-tree spanning-disabledSpanning-tree cost 219220 Spanning-tree port-priorityPriority The priority for a port. Range 0-240, in steps 128Spanning-tree edge-port Syntax No spanning-tree edge-port Default Setting221 Spanning-tree cost 4Spanning-tree portfast Syntax No spanning-tree portfast Default Setting222 Spanning-tree portfast 4Spanning-tree link-type 223Spanning-treeedge-port 4 224 Spanning-tree mst costSpanning-tree mst port-priority 4 225Spanning-tree mst port-priority 226Spanning-tree mst cost 4 Spanning-tree protocol-migration Port-channel channel-idRange Command Mode227 Syntax Spanning-tree protocol-migration interfaceShow spanning-tree 228Syntax Show spanning-tree interface mst instanceid 229 This command shows the multiple spanning tree configuration Show spanning-tree mst configurationSyntax Show spanning-tree mst configuration Command Mode 23038. Vlan Commands Vlan CommandsEditing Vlan Groups 231232 Vlan databaseShow vlan 4 Vlan Database Configuration By default only Vlan 1 exists and is active233 VlanConfiguring Vlan Interfaces 40. Configuring Vlan Interfaces234 Interface vlan 235Syntax Interface vlan vlan-id Shutdown 4Syntax Switchport mode trunk hybrid no switchport mode Switchport modeAll ports are in hybrid mode with the Pvid set to Vlan Switchport acceptable-frame-types 4Switchport mode 4 Switchport acceptable-frame-types237 All frame typesSwitchport ingress-filtering Syntax No switchport ingress-filtering Default Setting238 239 Switchport native vlan240 Switchport allowed vlanSwitchport forbidden vlan 241No VLANs are included in the forbidden list 242 Displaying Vlan InformationShow vlan 41. Displaying Vlan InformationFollowing example shows how to display information for Vlan 42. Protocol-based Vlan Commands243 Protocol-vlan protocol-group Configuring Groups No protocol groups are configured244 Protocol-vlan protocol-group Configuring Interfaces 245No protocol groups are mapped for any interface Show protocol-vlan protocol-group 246Syntax Show protocol-vlan protocol-group group-id Group-id- Group identifier for a protocol group. Range247 This shows protocol group 1 configured for IP over EthernetShow interfaces protocol-vlan protocol-group Mapping for all interfaces is displayed248 43. Private Vlan CommandsPvlan No private VLANs are definedThis command displays the configured private Vlan 249Show pvlan 44. Gvrp and Bridge Extension Commands Gvrp and Bridge Extension CommandsSyntax No bridge-ext gvrp Default Setting 250Show bridge-ext 251Show gvrp configuration Switchport gvrpSyntax No switchport gvrp Default Setting Syntax Show gvrp configuration interface253 Garp timerShow garp timer 4 Show garp timerSyntax Show garp timer interface Shows all Garp timersGarp timer 4 Priority Commands45. Priority Commands 255Switchport priority default Priority Commands Layer46. Priority Commands Layer 256257 Syntax Queue mode strict wrr no queue mode Queue modeWeighted Round Robin 258259 Queue bandwidthShow queue bandwidth 4 Queue cos-map 260This command shows the current queue mode Show queue mode261 Show queue cos-map 4262 This command shows the class of service priority mapShow queue bandwidth Show queue cos-mapPriority Commands Layer 3 47. Priority Commands Layer 3263 264 Syntax Map ip port no map ip port Default Setting265 Syntax No map ip precedence Default Setting266 List below shows the default priority mapping267 Syntax No map ip dscp Default Setting268 Map ip dscp Interface Configuration269 Use this command to show the IP port priority mapShow map ip port Syntax Show map ip port interface270 This command shows the IP precedence priority mapShow map ip precedence Syntax Show map ip precedence interface271 This command shows the IP Dscp priority mapShow map ip dscp Syntax Show map ip dscp interfaceIgmp Snooping Commands Multicast Filtering Commands48. Multicast Filtering Commands 49. Igmp Snooping Commands273 Following example enables Igmp snoopingIp igmp snooping No ip igmp snoopingIp igmp snooping vlan static 274275 Following configures the switch to use Igmp VersionIp igmp snooping version Igmp Version276 Show ip igmp snoopingShow mac-address-table multicast Igmp Query Commands Layer 50. Igmp Query Commands Layer277 278 Syntax No ip igmp snooping querier Default SettingIp igmp snooping querier Ip igmp snooping query-count279 Following shows how to configure the query count toIp igmp snooping query-interval Ip igmp snooping query-max-response-time 4Seconds The report delay advertised in Igmp queries. Range 280Ip igmp snooping query-max-response-time Switch must use IGMPv2 for this command to take effect 281Ip igmp snooping router-port-expire-time 51. Static Multicast Routing Commands Static Multicast Routing Commands282 Ip igmp snooping vlan mrouter283 Displays multicast router ports for all configured VLANsShow ip igmp snooping mrouter Syntax Show ip igmp snooping mrouter vlan vlan-idBasic IP Configuration IP Interface Commands52. Basic IP Configuration commands 284285 Interface Configuration VlanIp address IP address Netmask286 This command submits a Bootp or Dhcp client requestIp dhcp restart Ip dhcp restart 4Ip default-gateway Syntax Ip default-gateway gateway no ip default-gateway287 288 Show ip interfaceShow ip redirects 289 This command has no default for the hostPing Syntax Ping host count countsize sizeInterface 4 290291 Authentication Software FeaturesDhcp Client Port Configuration Flow ControlAdditional Features Class of ServicePort Mirroring Rate LimitsStandards Management FeaturesIn-Band Management Out-of-Band ManagementManagement Information Bases Table B-1. Troubleshooting Chart Appendix B TroubleshootingTroubleshooting Glossary-1 Glossary-2 Glossary-3 Glossary-4 Glossary-5 Glossary-6 Glossary-7 User Datagram Protocol UDP Glossary-8Virtual LAN Vlan XModemIndex-1 NumericsIgmp Index-2Snmp Snmp Index-3Index-4 Page For Technical SUPPORT, Call