Asus X3124 User Manual

Download

GigaX3124

Layer 3 Switch

CLI Command Reference

E3332

July 2007 V1

No part of this manual, including the products and software described in it, may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means, except documentation kept by the purchaser for backup purposes, without the express written permission of ASUSTeK COMPUTER INC. (ASUS).

Product warranty or service will not be extended if: (1) the product is repaired,

modied or altered, unless such repair, modication of alteration is authorized in

writing by ASUS; or (2) the serial number of the product is defaced or missing.

ASUS provides this manual “as is” without warranty of any kind, either express or implied, including but not limited to the implied warranties or conditions of

merchantability or tness for a particular purpose. In no event shall ASUS, its directors, ofcers, employees, or agents be liable for any indirect, special, incidental, or consequential damages (including damages for loss of prots,

loss of business, loss of use or data, interruption of business and the like), even if ASUS has been advised of the possibility of such damages arising from any defect or error in this manual or product.

Specications and information contained in this manual are furnished for

informational use only, and are subject to change at any time without notice, and should not be construed as a commitment by ASUS. ASUS assumes no responsibility or liability for any errors or inaccuracies that may appear in this manual, including the products and software described in it.

Products and corporate names appearing in this manual may or may not be registered trademarks or copyrights of their respective companies, and are used

only for identication or explanation and to the owners’ benet, without intent to

infringe.

Table of content

1 Getting Started with the CLI ................................................... 1

1.1 Command Usage Basics ................................................................. 1

1.2 Command-Line Error Messages ...................................................... 7

1.3 Accessing the CLI ............................................................................ 7

1.4 Saving Conguration Changes ........................................................ 8

2 System Management Conguration ...................................... 9

2.1 archive download-sw /overwrite tftp: URL ........................................ 9

2.2 archive download-sw /overwrite ftp: URL ......................................... 9

2.3 arp timeout SECONDS .................................................................. 10

2.4 clock set TIME MONTH DAY YEAR .............................................. 10

2.5 clock timezone ZONE HOURS MINUTES ..................................... 10

2.6 congure terminal ...........................................................................11

2.7 copy running-cong startup-cong ..................................................11

2.8 copy startup-cong tftp: URL .......................................................... 12

2.9 copy tftp: URL startup-cong .......................................................... 12

2.10 copy startup-cong ftp: URL ........................................................... 12

2.11 copy ftp: URL startup-cong ........................................................... 13

2.12 cpu ingress rate <50-4000> ........................................................... 13

2.13 disable ............................................................................................ 14

2.14 enable ............................................................................................ 14

2.15 end ................................................................................................. 14

2.16 exit ................................................................................................. 15

2.17 hostname HOSTNAME .................................................................. 15

2.18 list ................................................................................................... 15

2.19 ping IPADDR .................................................................................. 16

2.20 quit ................................................................................................. 16

2.21 reboot ............................................................................................. 16

2.22 reload default-cong le ................................................................. 17

2.23 show arp ........................................................................................ 17

2.24 show arp host ADDRSS ................................................................. 18

2.25 show cable-diagnostic interface [IFNAME] .................................... 18

2.26 show clock ..................................................................................... 18

2.27 show cpu statistics ......................................................................... 19

2.28 show memory ................................................................................. 19

2.29 show private health ........................................................................ 19

2.30 show private led ............................................................................. 20

2.31 show private model ........................................................................ 20

2.32 show processes cpu history ........................................................... 20

2.33 show running-cong ....................................................................... 21

2.34 show startup-cong ........................................................................ 21

2.35 show syslog ................................................................................... 21

2.36 show syslog conguration .............................................................. 22

2.37 show telnet who ............................................................................. 22

2.38 show uptime ................................................................................... 22

2.39 show version .................................................................................. 23

2.40 show user ....................................................................................... 23

2.41 syslog (enable | disable) ................................................................23

2.42 syslog facility <0-23> ..................................................................... 24

2.43 syslog hostname ............................................................................ 24

2.44 syslog server-ip IPADDR................................................................ 25

2.45 syslog severity <0-7> ..................................................................... 25

2.46 syslog timestamp ........................................................................... 25

2.47 telnet IPADDR ................................................................................ 26

2.48 telnet IPADDR PORT ..................................................................... 26

2.49 tracelog add (dhcp-relay | dhcp-snooping | dot1x | gvrp | igmp-

snooping | lacp | stp | switch) ......................................................... 26

2.50 tracelog level (critical | high | low ) ................................................. 27

2.51 traceroute IPADDR ........................................................................ 27

2.52 user add ACCOUNT PASSWORD ................................................. 27

2.53 user delete USERNAME ................................................................ 28

2.54 write [le | memory | terminal] ........................................................ 28

3 Port interface conguration: ................................................ 29

3.1 acceptable frame-type (all| discard-all| vlan-tagged-only) .............. 29

3.2 auto-negotiation ............................................................................. 29

3.3 default-priority <0-7> ...................................................................... 30

3.4 description LINE ............................................................................. 30

3.5 duplex (full|half) .............................................................................. 30

3.6 owcontrol (both| rx| tx) .................................................................. 31

3.7 ingress-lter (enable|disable) ......................................................... 31

3.8 interface IFNAME ........................................................................... 32

3.9 interface vlan <1-3000> ................................................................. 32

3.10 ip address A.B.C.D/M ..................................................................... 32

3.11 line loopback .................................................................................. 33

3.12 line loopback shutdown <60-600> ................................................. 33

3.13 max-frame-size <1518-9216> ........................................................ 34

3.14 mdix ............................................................................................... 34

3.15 no switchport .................................................................................. 34

3.16 shutdown ........................................................................................ 35

3.17 speed (10|100|1000) ...................................................................... 35

3.18 show interface IFNAME ................................................................. 36

3.19 show interface status ..................................................................... 36

3.20 switchport ....................................................................................... 36

3.21 switchport multicast lter ................................................................ 37

4 IEEE 802.1Q VLAN Conguration ........................................ 38

iii

4.1 name VLANAME ............................................................................ 38

4.2 show vlan [VLANID] ....................................................................... 38

4.3 show vlan name VLANAME ........................................................... 38

4.4 switchport access vlan <1-3000> ................................................... 39

4.5 switchport mode (access|trunk) ..................................................... 39

4.6 switchport trunk native vlan <1-3000> ........................................... 40

4.7 switchport trunk allowed vlan (add|remove) VLANLIST ................. 40

4.8 vlan VLANLIST .............................................................................. 41

5 GARP Conguration: ............................................................42

5.1 garp join-timer <1-100000000> ...................................................... 42

5.2 garp leave-timer <1-100000000> ................................................... 42

5.3 garp leaveall-timer <1-100000000> ............................................... 43

5.4 show garp timer [IFNAME] ............................................................. 43

6 GVRP Conguration: ............................................................. 44

6.1 clear gvrp statistics [IFNAME] ........................................................ 44

6.2 gvrp (enable|disable) .................................................................... 44

6.3 gvrp (enable|disable) .................................................................... 44

6.4 gvrp registration (normal| xed| forbidden) .................................... 45

6.5 show gvrp ...................................................................................... 45

6.6 show gvrp statistics [IFNAME] ....................................................... 46

6.7 show gvrp interface [IFNAME] ....................................................... 46

7 MAC address management Conguration: ......................... 47

7.1 clear mac-address-table dynamic .................................................. 47

7.2 clear mac-address-table dynamic interface IFNAME ..................... 47

7.3 clear mac-address-table dynamic mac MACADDR ....................... 48

7.4 clear mac-address-table dynamic vlan <1-3000> .......................... 48

7.5 clear mac-address-table interface IFNAME ................................... 49

7.6 clear mac-address-table mac MACADDR ..................................... 49

7.7 clear mac-address-table multicast MACADDR VLANID ................ 49

7.8 clear mac-address-table vlan <1-3000> ........................................ 50

7.9 mac-address-table aging-time <10-1000000> ............................... 50

7.10 mac-address-table multicast MACADDR

<1-3000> interface IFLIST ............................................................. 51

7.11 mac-address-table static MACADDR <1-3000> IFNAME .............. 52

7.12 show mac-address-table ................................................................ 52

7.13 show mac-address-table aging-time .............................................. 53

7.14 show mac-address-table dynamic ................................................. 53

7.15 show mac-address-table dynamic interface [IFNAME] .................. 54

7.16 show mac-address-table dynamic mac MACADDR ...................... 54

7.17 show mac-address-table dynamic vlan <1-3000> ......................... 54

7.18 show mac-address-table multicast ................................................. 55

7.19 show mac-address-table multicast MACADDR <1-3000> ............. 55

7.20 show mac-address-table static ...................................................... 56

7.21 show mac-address-table static interface IFNAME ......................... 56

7.22 show mac-address-table static mac MACADDR ........................... 57

7.23 show mac-address-table static vlan <1-3000> .............................. 57

8 IGMP Snooping Conguration: ............................................ 58

8.1 ip igmp querier ............................................................................... 58

8.2 ip igmp querier max-response-time <1-255> ................................. 58

8.3 ip igmp querier query-interval <1-65535> ...................................... 58

8.4 ip igmp querier version <v1|v2> ..................................................... 59

8.5 ip igmp snooping ........................................................................... 59

8.6 ip igmp snooping last-member-query-interval <10-1000> ............. 60

8.7 ip igmp snooping report-suppression ............................................. 60

8.8 ip igmp snooping vlan <1-3000> .................................................... 60

8.9 ip igmp snooping vlan <1-3000> immediate-leave ........................ 61

8.10 ip igmp snooping vlan <1-3000> mrouter interface IFNAME ......... 61

8.11 show ip igmp snooping .................................................................. 62

8.12 show ip igmp snooping session ..................................................... 62

8.13 show ip igmp snooping vlan [<1-3000>] ........................................ 63

9 Port Mirroring Conguration: ............................................... 64

9.1 mirror session <1-2> destination IFNAME ..................................... 64

9.2 mirror session <1-2> source IFLIST (both| rx| tx) .......................... 64

9.3 show mirror session ....................................................................... 65

10 Static Link Aggregation: ..................................................... 66

10.1 aggregation-link group <1-8> IFLIST ............................................. 66

10.2 aggregation-link group <1-8> load-balance (src-mac |dst-mac |src-

dst-mac |src-ip |dst-ip |src-dst-ip) ................................................... 66

10.3 show aggregation-link group [GROUPID] ...................................... 67

11 LACP Conguration: ........................................................... 68

11.1 lacp aggregation-link group <1-8> (add|set) IFLIST ...................... 68

11.2 lacp aggregation-link group <1-8> delete IFNAME ........................ 68

11.3 lacp system-priority <1-65535> ...................................................... 69

11.4 show lacp [GROUPID] ................................................................... 69

12 ACL: Layer 2 Packet Filtering Conguration .................... 70

12.1 mac access-list extended ACLNAME ............................................ 70

12.2 mac access-group ACLNAME in .................................................... 70

12.3 (permit|deny) any any [IFNAME] .................................................... 71

12.4 (permit|deny) any any (cos <0-7> | vlan <1-4094>) [IFNAME] ...... 71

12.5 (permit|deny) any any vlan <1-4094> cos <0-7> [IFNAME] ........... 72

12.6 (permit|deny) MACADDR MASK any [IFNAME] ............................ 73

12.7 (permit|deny) MACADDR MASK any (cos <0-7> | vlan <1-4094>)

[IFNAME] ....................................................................................... 73

12.8 (permit|deny) MACADDR MASK any vlan <1-4094> cos <0-7>

[IFNAME] ....................................................................................... 74

12.9 (permit|deny) host MACADDR any [IFNAME]................................ 75

12.10 (permit|deny) host MACADDR any (cos <0-7> | vlan <1-4094>)

[IFNAME] ....................................................................................... 75

12.11 (permit|deny) host MACADDR any vlan <1-4094>) cos <0-7>

[IFNAME] ....................................................................................... 76

12.12 (permit|deny) host MACADDR host MACADDR [IFNAME] ........... 77

12.13 (permit|deny) host MACADDR host MACADDR (cos <0-7> | vlan

<1-4094>) [IFNAME] ...................................................................... 78

12.14 (permit|deny) host MACADDR host MACADDR ..vlan <1-4094> cos

<0-7> [IFNAME] ............................................................................. 79

12.15 (permit|deny) MACADDR MASK MACADDR MASK [IFNAME]..... 79

12.16 (permit|deny) MACADDR MASK MACADDR MASK (cos <0-7> |

vlan <1-4094>) [IFNAME] .............................................................. 80

12.17 (permit|deny) MACADDR MASK MACADDR .MASK vlan <1-4094>

cos <0-7> [IFNAME] ...................................................................... 81

12.18 (permit|deny) host MACADDR MACADDR MASK [IFNAME] ........ 82

12.19 (permit|deny) host MACADDR MACADDR . MASK (cos <0-7> | vlan

<1-4094>) [IFNAME] ...................................................................... 82

12.20 (permit|deny) host MACADDR MACADDR MASK vlan <1-4094>

cos <0-7> [IFNAME] ...................................................................... 83

12.21 (permit|deny) MACADDR MASK host MACADDR [IFNAME] ........ 84

12.22 (permit|deny) MACADDR MASK host . MACADDR (cos <0-7> | vlan

<1-4094>) [IFNAME] ...................................................................... 85

12.23 (permit|deny) MACADDR MASK host MACADDR vlan <1-4094>

cos <0-7> [IFNAME] ...................................................................... 86

12.24 (permit|deny) any host MACADDR [IFNAME]................................ 86

12.25 (permit|deny) any host MACADDR (cos <0-7> | vlan <1-4094>)

[IFNAME] ....................................................................................... 87

12.26 (permit|deny) any host MACADDR vlan <1-4094> cos <0-7>

[IFNAME] ....................................................................................... 88

12.27 (permit|deny) any MACADDR MASK [IFNAME] ............................ 89

12.28 (permit|deny) any MACADDR MASK (cos <0-7> | vlan <1-4094>)

[IFNAME] ....................................................................................... 89

12.29 (permit|deny) any MACADDR MASK vlan <1-4094> cos <0-7>

[IFNAME] ....................................................................................... 90

12.30 show mac access-group [IFNAME] ................................................ 91

12.31 show mac access-list [ACLNAME] ................................................. 91

vii

13 ACL: Layer 3 Packet Filtering Conguration .................... 92

13.1 access-list (<1-99>|<1300-1999>) (deny|permit) IPADDR MASK

[IFNAME] ....................................................................................... 92

13.2 access-list (<1-99>|<1300-1999>) (deny|permit) host IPADDR

[IFNAME] ....................................................................................... 92

13.3 access-list (<1-99>|<1300-1999>) (deny|permit) any [IFNAME] .... 93

13.4 access-list (<100-199>|<2000-2699>) (deny|permit)

(ip|tcp|udp|icmp) IPADDR MASK IPADDR MASK [IFNAME] ......... 94

13.5 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>]

[IFNAME] ....................................................................................... 95

13.6 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR

MASK IPADDR MASK <0-255> code <0-255> [IFNAME] ............. 96

13.7 access-list (<100-199>|<2000-2699>) (deny|permit)

(ip|tcp|udp|icmp) IPADDR MASK any [IFNAME] ............................ 97

13.8 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME] 98

13.9 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR

MASK any <0-255> code <0-255> [IFNAME] ................................ 99

13.10 access-list (<100-199>|<2000-2699>) (deny|permit)

(ip|tcp|udp|icmp) any IPADDR MASK [IFNAME] .......................... 100

13.11 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any

[eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME] ..... 101

13.12 access-list (<100-199>|<2000-2699>) (deny|permit) icmp any

IPADDR MASK <0-255> code <0-255> [IFNAME] ...................... 102

13.13 access-list (<100-199>|<2000-2699>) (deny|permit)

(ip|tcp|udp|icmp) any any [IFNAME] ............................................ 103

13.14 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any

[eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME] ........................ 104

13.15 access-list (<100-199>|<2000-2699>) (deny|permit) icmp any any

<0-255> code <0-255> [IFNAME] ................................................ 105

13.16 access-list (<100-199>|<2000-2699>) (deny|permit)

(ip|tcp|udp|icmp) IPADDR MASK host IPADDR [IFNAME] .......... 106

13.17 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK [eq] [<0-65535>] host IPADDR [eq] [<0-65535>]

[IFNAME] ..................................................................................... 107

viii

13.18 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR

MASK host PADDR <0-255> code <0-255> [IFNAME] ............... 108

13.19 access-list (<100-199>|<2000-2699>) (deny|permit)

(ip|tcp|udp|icmp) host IPADDR IPADDR MASK [IFNAME] .......... 109

13.20 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host IPADDR [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>]

[IFNAME] ......................................................................................110

13.21 access-list (<100-199>|<2000-2699>) (deny|permit) icmp host

IPADDR IPADDR MASK <0-255> code <0-255> [IFNAME] .........111

13.22 access-list (<100-199>|<2000-2699>) (deny|permit)

(ip|tcp|udp|icmp) host IPADDR host IPADDR [IFNAME] ...............112

13.23 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host IPADDR [eq] [<0-65535>] host IPADDR [eq] [<0-65535>]

[IFNAME] .....................................................................................113

13.24 access-list (<100-199>|<2000-2699>) (deny|permit) icmp host

IPADDR host IPADDR <0-255> code <0-255> [IFNAME] ............114

13.25 access-list (<100-199>|<2000-2699>) (deny|permit)

(ip|tcp|udp|icmp) any host IPADDR [IFNAME] ..............................115

13.26 access-list (<100-199>|<2000-2699>)(deny|permit) (tcp|udp) any

[eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME] .........116

13.27 access-list (<100-199>|<2000-2699>) (deny|permit) icmp any host

IPADDR <0-255> code <0-255> [IFNAME] ..................................117

13.28 access-list (<100-199>|<2000-2699>) (deny|permit)

(ip|tcp|udp|icmp) host IPADDR any [IFNAME] ..............................118

13.29 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host

IPADDR [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME] ..........119

13.30 access-list (<100-199>|<2000-2699>) (deny|permit) icmp host

IPADDR any <0-255> code <0-255> [IFNAME] ........................... 120

13.31 access-list (<1-99>|<1300-1999>) (deny|permit) IPADDR [IFNAME] 121

13.32 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp)

IPADDR MASK IPADDR MASK eq <0-65535> [IFNAME] ........... 121

13.33 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp)

IPADDR MASK [eq] [<0-65535>] IPADDR MASK [IFNAME] ....... 122

13.34 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp)

IPADDR MASK any[eq] [<0-65535>] [IFNAME] ........................... 123

13.35 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp)

IPADDR MASK [eq] [<0-65535>] any [IFNAME] .......................... 124

13.36 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp)

IPADDR MASK [eq] [<0-65535>] host IPADDR [IFNAME] .......... 125

13.37 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp)

IPADDR MASK host IPADDR [eq] [<0-65535>] [IFNAME] .......... 126

13.38 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any

IPADDR MASK [eq] [<0-65535>] [IFNAME] ................................ 127

13.39 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any

any [eq] [<0-65535>] [IFNAME] ................................................... 128

13.40 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any

[eq] [<0-65535>] any [IFNAME] ................................................... 129

13.41 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any

[eq] [<0-65535>] IPADDR MASK [IFNAME] ................................ 130

13.42 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any

[eq] [<0-65535>] host IPADDR [IFNAME] .................................... 131

13.43 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any

host IPADDR [eq] [<0-65535>] [IFNAME] .................................... 132

13.44 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host

IPADDR IPADDR MASK [eq] [<0-65535>] [IFNAME] .................. 133

13.45 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host

IPADDR [eq] [<0-65535>] IPADDR MASK [IFNAME] .................. 134

13.46 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host

IPADDR any [eq] [<0-65535>] [IFNAME] .................................... 135

13.47 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host

IPADDR [eq] [<0-65535>] any [IFNAME] ..................................... 136

13.48 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host

IPADDR [eq] [<0-65535>] host IPADDR [IFNAME] ...................... 137

13.49 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host

IPADDR host IPADDR [eq] [<0-65535>] [IFNAME] ...................... 138

13.50 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR

MASK IPADDR MASK <0-255> [IFNAME] .................................. 139

13.51 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR

MASK any <0-255> [IFNAME] ..................................................... 140

13.52 access-list (<100-199>|<2000-2699>) (deny|permit) icmp any any

<0-255> [IFNAME] ....................................................................... 140

13.53 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR

MASK host IPADDR <0-255> [IFNAME] ...................................... 141

13.54 access-list (<100-199>|<2000-2699>) (deny|permit) icmp host

IPADDR IPADDR MASK <0-255> [IFNAME] ............................... 142

13.55 access-list (<100-199>|<2000-2699>) (deny|permit) icmp host

IPADDR host IPADDR <0-255> [IFNAME] ................................... 143

13.56 access-list (<100-199>|<2000-2699>) (deny|permit) icmp any host

IPADDR <0-255> [IFNAME] ......................................................... 144

13.57 access-list (<100-199>|<2000-2699>) (deny|permit) icmp host

IPADDR any <0-255> [IFNAME] .................................................. 145

13.58 access-list (<100-199>|<2000-2699>) (deny|permit) icmp any

IPADDR MASK <0-255> [IFNAME] ............................................. 146

13.59 ip access-group (<1-199>|<1300-2699>|ACLNAME) in .............. 146

13.60 ip access-list extended (<100-199>|<2000-2699>|ACLNAME) ... 147

13.61 ip access-list standard (<1-99>|<1300-1999>|ACLNAME) .......... 147

13.62 (permit|deny) any [IFNAME]......................................................... 148

13.63 (permit|deny) host IPADDR [IFNAME] ......................................... 148

13.64 (permit|deny) IPADDR MASK [IFNAME] ...................................... 149

13.65 (permit|deny) (ip|tcp|udp|icmp) any any [IFNAME] ...................... 149

13.66 (permit|deny) (tcp|udp) any [eq] [<0-65535>] any [eq] [<0-65535>]

[IFNAME] ..................................................................................... 150

13.67 (permit|deny) icmp any any [<0-255>] code [<0-255>] [IFNAME] 151

13.68 (permit|deny) (ip|tcp|udp|icmp) IPADDR MASK any [IFNAME] .... 152

13.69 (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any [eq]

[<0-65535>] [IFNAME] ................................................................. 152

13.70 (permit|deny) icmp IPADDR MASK any <0-255> code <0-255>

[IFNAME] ..................................................................................... 153

13.71 (permit|deny) (ip|tcp|udp|icmp) host IPADDR any [IFNAME] ....... 154

13.72 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] any [eq]

[<0-65535>] [IFNAME] ................................................................. 155

13.73 (permit|deny) icmp host IPADDR any [<0-255>] code [<0-255>]

[IFNAME] ..................................................................................... 155

13.74 (permit|deny) (ip|tcp|udp|icmp) host IPADDR host IPADDR

[IFNAME] ..................................................................................... 156

13.75 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] host IPADDR

[eq] [<0-65535>] [IFNAME] .......................................................... 157

13.76 (permit|deny) icmp host IPADDR host IPADDR [<0-255>] code

[<0-255>] [IFNAME] ..................................................................... 158

13.77 (permit|deny) (ip|tcp|udp|icmp) IPADDR MASK IPADDR MASK

[IFNAME] ..................................................................................... 159

13.78 (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] IPADDR

MASK [eq] [<0-65535>] [IFNAME] ............................................... 160

13.79 (permit|deny) icmp IPADDR MASK IPADDR MASK <0-255> code

<0-255> [IFNAME] ....................................................................... 161

13.80 (permit|deny) (ip|tcp|udp|icmp) host IPADDR IPADDR MASK

[IFNAME] ..................................................................................... 161

13.81 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] IPADDR

MASK [eq] [<0-65535>] [IFNAME] ............................................... 162

13.82 (permit|deny) icmp host IPADDR IPADDR MASK <0-255> code

<0-255> [IFNAME] ....................................................................... 163

13.83 (permit|deny) (ip|tcp|udp|icmp) IPADDR MASK host IPADDR

[IFNAME] ..................................................................................... 164

13.84 (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] host

IPADDR [eq] [<0-65535>] [IFNAME] ............................................ 165

13.85 (permit|deny) icmp IPADDR MASK host IPADDR <0-255> code

<0-255> [IFNAME] ....................................................................... 166

13.86 (permit|deny) (ip|tcp|udp|icmp) any host IPADDR [IFNAME] ....... 166

13.87 (permit|deny) (tcp|udp) any [eq] [<0-65535>] host IPADDR [eq]

[<0-65535>] [IFNAME] ................................................................. 167

13.88 (permit|deny) icmp any host IPADDR <0-255> code <0-255>

[IFNAME] ..................................................................................... 168

13.89 (permit|deny) (ip|tcp|udp|icmp) any IPADDR MASK

[IFNAME] ..................................................................................... 169

13.90 (permit|deny) (tcp|udp) any [eq] [<0-65535>] IPADDR MASK [eq]

[<0-65535>] [IFNAME] ................................................................. 170

13.91 (permit|deny) icmp any IPADDR MASK <0-255> code <0-255>

[IFNAME] ..................................................................................... 170

xii

13.92 (permit|deny) (tcp|udp) IPADDR MASK IPADDR MASK [eq]

[<0-65535>] [IFNAME] ................................................................. 171

13.93 (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] IPADDR

MASK [IFNAME] .......................................................................... 172

13.94 (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any

[IFNAME] ..................................................................................... 173

13.95 (permit|deny) (tcp|udp) IPADDR MASK any [eq] [<0-65535>]

[IFNAME] ..................................................................................... 174

13.96 (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] host

IPADDR [IFNAME] ....................................................................... 174

13.97 (permit|deny) (tcp|udp) IPADDR MASK host IPADDR [eq]

[<0-65535>] [IFNAME] ................................................................. 175

13.98 (permit|deny) (tcp|udp) any [eq] [<0-65535>] IPADDR MASK

[IFNAME] ..................................................................................... 176

13.99 (permit|deny) (tcp|udp) any IPADDR MASK [eq] [<0-65535>]

[IFNAME] ..................................................................................... 177

13.100 (permit|deny) (tcp|udp) any any [eq] [<0-65535>] [IFNAME] ....... 178

13.101 (permit|deny) (tcp|udp) any [eq] [<0-65535>] any [IFNAME] ....... 178

13.102 (permit|deny) (tcp|udp) any [eq] [<0-65535>] host IPADDR

[IFNAME] ..................................................................................... 179

13.103 (permit|deny) (tcp|udp) any host IPADDR [eq] [<0-65535>]

[IFNAME] ..................................................................................... 180

13.104 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] host IPADDR

[IFNAME] ..................................................................................... 181

13.105 (permit|deny) (tcp|udp) host IPADDR host IPADDR [eq] [<0-65535>]

[IFNAME] ..................................................................................... 181

13.106 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] IPADDR

MASK [IFNAME] .......................................................................... 182

13.107 (permit|deny) (tcp|udp) host IPADDR IPADDR MASK [eq]

[<0-65535>] [IFNAME] ................................................................. 183

13.108 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] any

[IFNAME] ..................................................................................... 184

13.109 (permit|deny) (tcp|udp) host IPADDR any [eq] [<0-65535>]

[IFNAME] ..................................................................................... 185

13.110 (permit|deny) icmp IPADDR MASK IPADDR MASK <0-255>

xiii

[IFNAME] ..................................................................................... 185

13.111 (permit|deny) icmp host IPADDR IPADDR MASK <0-255>

[IFNAME] ..................................................................................... 186

13.112 (permit|deny) icmp IPADDR MASK host IPADDR <0-255>

[IFNAME] ..................................................................................... 187

13.113 (permit|deny) icmp any host IPADDR <0-255> [IFNAME] ........... 188

13.114 (permit|deny) icmp any IPADDR MASK <0-255> [IFNAME] ........ 188

13.115 (permit|deny) icmp any any [<0-255>] [IFNAME] ......................... 189

13.116 (permit|deny) icmp IPADDR MASK any [<0-255>] [IFNAME] ...... 190

13.117 (permit|deny) icmp host IPADDR any [<0-255>] [IFNAME] ......... 190

13.118 (permit|deny) icmp host IPADDR host IPADDR [<0-255>]

[IFNAME] .................................................................................... 191

13.119 (permit|deny) IPADDR [IFNAME] ................................................. 192

13.120 show ip access-group [IFNAME] .................................................. 192

13.121 show ip access list ....................................................................... 192

13.122 show ip access list (<1-199>|<1300-2699>|ACLNAME) .............. 193

14 Storm control: .................................................................... 194

14.1 storm-control (broadcast| dlf| multicast) <1-262143> ................... 194

14.2 show storm-control (broadcast| dlf| multicast) .............................. 194

15 QoS/CoS: ............................................................................ 195

15.1 cos cos-map <0-7> <1-8> ............................................................ 195

15.2 cos policy fo ............................................................................... 195

15.3 cos policy sp-wrr-queue weight <1-10> <1-10> <1-10> <1-10>

<1-10> <1-10> <1-10> <1-10> .................................................... 196

15.4 cos policy wrr-queue weight <1-10> <1-10> . <1-10> <1-10> <1-10>

<1-10> <1-10> <1-10> ................................................................. 196

15.5 cos policy strict ............................................................................. 197

15.6 show cos cos-map ....................................................................... 197

15.7 show cos policy ............................................................................ 198

15.8 show qos (egress|ingress) bandwidth [IFNAME] ......................... 198

xiv

15.9 qos egress bandwidth <64-1048576> .......................................... 199

15.10 qos ingress bandwidth <64-1048576> ......................................... 199

16 Policy Map Conguration ................................................. 200

16.1 policy-map POLICYMAP .............................................................. 200

16.2 class CLASSMAP ........................................................................ 200

16.3 match access-group ACLNAME .................................................. 200

16.4 match ip dscp DSCPLIST ............................................................ 201

16.5 match ip precedence IPPRECEDENCES .................................... 201

16.6 police <64-1048576> <4-512> ..................................................... 201

16.7 police <64-1048576> <4-512> exceed-action drop ..................... 202

16.8 police <64-1048576> <4-512> exceed-action dscp <0-63> ........ 202

16.9 police drop ................................................................................... 203

16.10 police high-drop ........................................................................... 203

16.11 set cos override <0-7> ................................................................. 204

16.12 set ip dscp <0-63> ....................................................................... 204

16.13 set ip precedence <0-7> .............................................................. 204

16.14 service-policy input POLICYMAP ................................................ 205

16.15 show policy-map [POLICYMAP] .................................................. 205

17 Spanning Tree Protocol Conguration: .......................... 206

17.1 show spanning-tree interface [IFNAME] ...................................... 206

17.2 show spanning-tree mst [INSTANCE] .......................................... 206

17.3 show spanning-tree mst conguration ......................................... 206

17.4 show spanning-tree mst instance <1-15> interface [IFNAME] ..... 207

17.5 show spanning-tree summary ...................................................... 207

17.6 spanning-tree algorithm-timer <4-30> <6-40> <1-10> ................. 208

17.7 spanning-tree (enable|disable) .................................................... 208

17.8 spanning-tree bpdu-guard (enable|disable) ................................. 208

17.9 spanning-tree cost <1-200000000> ............................................. 209

17.10 spanning-tree edge-port (auto| disable| enable) .......................... 209

17.11 spanning-tree forward-time <4-30> .............................................. 210

17.12 spanning-tree hello-time <1-10> .................................................. 210

17.13 spanning-tree link-type (auto| point-to-point| shared) ...................211

17.14 spanning-tree max-age <6-40> .....................................................211

17.15 spanning-tree mode (mst| pvst| rapid-pvst) ...................................211

17.16 spanning-tree mst <1-15> cost <1-200000000> .......................... 212

17.17 spanning-tree mst <1-15> port-priority <0-240> .......................... 212

17.18 spanning-tree mst <1-15> priority <0-61440> .............................. 213

17.19 spanning-tree mst instance <1-15> vlan VLANLIST .................... 213

17.20 spanning-tree mst max-hops [1-40] ............................................. 213

17.21 spanning-tree mst name NAME ................................................... 214

17.22 spanning-tree mst revision <0-65535> ........................................ 214

17.23 spanning-tree port-priority <0-240> ............................................. 214

17.24 spanning-tree priority <0-61440> ................................................. 215

17.25 spanning-tree transmission-limit <1-10> ...................................... 215

17.26 spanning-tree uplink-fast .............................................................. 216

18 Port based Network Access Control Conguration: ...... 217

18.1 dot1x guest-vlan <1-3000> .......................................................... 217

18.2 dot1x port-control (auto| force-authorized|

force-unauthorized) ...................................................................... 217

18.3 dot1x radius server A.B.C.D KEY [PORT] .................................... 218

18.4 dot1x radius secondary-server A.B.C.D KEY [PORT] .................. 218

18.5 dot1x re-authenticate interface IFNAME ...................................... 219

18.6 dot1x reauthentication .................................................................. 219

18.7 dot1x system-auth-control ............................................................ 220

18.8 dot1x timeout (reauth-period| quiet-period| server-timeout)

TIMEVALUE ................................................................................. 220

18.9 dot1x host-mode (multi-host| single-host) .................................... 221

18.10 dot1x authentic-method (local | radius) ........................................ 221

18.11 dot1x user USERNAME PASSWORD <1-3000> ......................... 222

xvi

GigaX3124 Layer3 Switch CLI Command Reference

18.12 show dot1x ................................................................................... 222

18.13 show dot1x interface IFNAME ..................................................... 222

18.14 show dot1x radius ........................................................................ 223

18.15 show dot1x user ........................................................................... 223

19 Port Security Conguration: ............................................224

19.1 show port-security ........................................................................ 224

19.2 show port-security address [IFNAME] ......................................... 224

19.3 show port-security interface IFNAME .......................................... 224

19.4 switchport port-security ................................................................ 225

19.5 switchport port-security aging-time <0-1440> .............................. 225

19.6 switchport port-security aging-type (absolute|inactivity) .............. 225

19.7 switchport port-security mac-address MACADDR ....................... 226

19.8 switchport port-security maximun <1-256> .................................. 226

19.9 switchport port-security reup ........................................................ 227

19.10 switchport port-security shutdown <10-1440> ............................. 227

19.11 switchport port-security violation (protect|restrict|shutdown) ....... 227

20 SNMP Conguration: ........................................................229

20.1 rmon alarm <1-65536> OID <1-4294967295> (absolute|delta) rising-

threshold VALUE falling-threshold VALUE [OWNER] .................. 229

20.2 rmon alarm <1-65536> OID <1-4294967295> (absolute|delta) risingthreshold VALUE falling-threshold VALUE <1-65535>

[OWNER] .................................................................................... 229

20.3 rmon alarm <1-65536> OID <1-4294967295> (absolute|delta) risingthreshold VALUE <1-65535> falling-threshold VALUE

[OWNER] ..................................................................................... 230

20.4 rmon alarm <1-65536> OID <1-4294967295> (absolute|delta) risingthreshold VALUE <1-65535> falling-threshold VALUE <1-65535>

[OWNER] ..................................................................................... 231

20.5 rmon event <1-65536> description NAME [OWNER] .................. 232

20.6 rmon event <1-65536> description NAME log ..................................

[OWNER] ..................................................................................... 233

xvii

GigaX3124 Layer3 Switch CLI Command Reference

20.7 rmon event <1-65536> description NAME trap COMMUNITY

[OWNER] ..................................................................................... 233

20.8 rmon event <1-65536> description NAME log trap COMMUNITY

[OWNER] ..................................................................................... 234

20.9 rmon history <1-65536> IFNAME [OWNER] ............................... 234

20.10 rmon history <1-65536> IFNAME buckets <1-100> [OWNER] .... 235

20.11 rmon history <1-65536> IFNAME interval <1-4294967295>

[OWNER] ..................................................................................... 235

20.12 rmon history <1-65536> IFNAME buckets <1-100> interval

<1-4294967295> [OWNER] ......................................................... 236

20.13 show rmon alarms ........................................................................ 236

20.14 show rmon events ........................................................................ 237

20.15 show rmon history ........................................................................ 237

20.16 show rmon statistics [IFNAME] .................................................... 237

20.17 show snmp-server community ..................................................... 238

20.18 show snmp-server community network ........................................ 238

20.19 show snmp-server contact ........................................................... 239

20.20 show snmp-server group ............................................................. 239

20.21 show snmp-server host ................................................................ 239

20.22 show snmp-server location .......................................................... 240

20.23 show snmp-server trap community .............................................. 240

20.24 show snmp-server user ................................................................ 240

20.25 show snmp-server view ............................................................... 241

20.26 snmp-server community WORD (ro|rw)

network A.B.C.D/MASK ............................................................... 241

20.27 snmp-server community trap WORD ........................................... 242

20.28 snmp-server contact STRING ...................................................... 242

20.29 snmp-server group WORD v3 WORD ......................................... 243

20.30 snmp-server group WORD v3 auth .............................................. 243

20.31 snmp-server group WORD v3 auth read WORD ......................... 244

20.32 snmp-server group WORD v3 auth read WORD write WORD .... 244

xviii

GigaX3124 Layer3 Switch CLI Command Reference

20.33 snmp-server group WORD v3 auth read WORD write WORD notify

WORD .......................................................................................... 245

20.34 snmp-server group WORD v3 noauth .......................................... 246

20.35 snmp-server group WORD v3 noauth read WORD ..................... 246

20.36 snmp-server group WORD v3 noauth read

WORD write WORD ..................................................................... 247

20.37 snmp-server group WORD v3 noauth read WORD write WORD

notify WORD ................................................................................ 248

20.38 snmp-server group WORD v3 priv ............................................... 249

20.39 snmp-server group WORD v3 priv read WORD .......................... 249

20.40 snmp-server group WORD v3 priv read WORD write WORD ..... 250

20.41 snmp-server group WORD v3 priv read WORD write WORD notify

WORD .......................................................................................... 251

20.42 snmp-server host A.B.C.D ........................................................... 251

20.43 snmp-server host A.B.C.D version (1|2) [COMMUNITY] ............. 252

20.44 snmp-server location STRING ..................................................... 252

20.45 snmp-server user WORD WORD v3 auth (md5|sha) WORD ...... 253

20.46 snmp-server user WORD WORD v3 noauth ............................... 253

20.47 snmp-server user WORD WORD v3 priv (md5|sha) WORD des

WORD .......................................................................................... 254

20.48 snmp-server view WORD WORD (included|excluded) ................ 255

21 NTP (Network Time Protocol) Conguration: ................. 256

21.1 ntp sync IPADDR ......................................................................... 256

21.2 ntp server IPADDR ....................................................................... 256

21.3 ntp server IPADDR prefer ............................................................ 256

21.4 ntp server IPADDR version <1-4> ................................................ 257

21.5 ntp server IPADDR version <1-4> prefer ..................................... 257

21.6 show ntp server ............................................................................ 258

22 IP Route Conguration: .................................................... 259

22.1 ip forwarding ................................................................................ 259

22.2 ip route A.B.C.D A.B.C.D (A.B.C.D|INTERFACE) ........................ 259

xix

GigaX3124 Layer3 Switch CLI Command Reference

22.3 ip route A.B.C.D A.B.C.D (A.B.C.D|INTERFACE) <1-255> ......... 260

22.4 ip route A.B.C.D/M (A.B.C.D|INTERFACE) .................................. 260

22.5 ip route A.B.C.D/M (A.B.C.D|INTERFACE) <1-255> ................... 261

22.6 show ip route ............................................................................... 261

22.7 show ip route A.B.C.D/M .............................................................. 262

22.8 show ip route supernets-only ....................................................... 262

23 DHCP RELAY Conguration ............................................. 263

23.1 ip helper-address A.B.C.D ........................................................... 263

24 RIP related Conguration ................................................. 264

24.1 default-information originate ........................................................ 264

24.2 default-metric <1-16> ................................................................... 264

24.3 distance <1-255> ......................................................................... 264

24.4 distance <1-255> A.B.C.D/M ....................................................... 265

24.5 ip rip authentication mode text ..................................................... 265

24.6 ip rip authentication string LINE ................................................... 266

24.7 ip rip receive version (1| 2| 1 2) .................................................... 266

24.8 ip rip send version (1| 2| 1 2) ........................................................ 266

24.9 ip split-horizon [poisoned-reverse] ............................................... 267

24.10 neighbor A.B.C.D ......................................................................... 267

24.11 network (A.B.C.D/M| IFNAME)..................................................... 268

24.12 passive-interface (IFNAME|default) ............................................. 268

24.13 redistribute (kernel| connected| static| ospf) ................................ 269

24.14 redistribute (kernel| connected| static| ospf) metric <0-16> ......... 269

24.15 route A.B.C.D/M ........................................................................... 270

24.16 router rip ....................................................................................... 270

24.17 timers basic <5-2147483647> <5-2147483647>

<5-2147483647> .......................................................................... 270

24.18 version <1|2> ...............................................................................271

24.19 show ip rip .................................................................................... 272

GigaX3124 Layer3 Switch CLI Command Reference

24.20 show ip rip status ......................................................................... 272

25 OSPF related Conguration .............................................273

25.1 area (A.B.C.D| <0-4294967295>) authentication ......................... 273

25.2 area (A.B.C.D| <0-4294967295>) authentication

message-digest ............................................................................ 273

25.3 area (A.B.C.D| <0-4294967295>) default-cost <0-16777215> .... 274

25.4 area (A.B.C.D| <0-4294967295>) range A.B.C.D/M .................... 274

25.5 area (A.B.C.D| <0-4294967295>) range A.B.C.D/M (advertise| not-

advertise) ..................................................................................... 275

25.6 area (A.B.C.D| <0-4294967295>) range A.B.C.D/M cost

<0-16777215> .............................................................................. 275

25.7 area (A.B.C.D| <0-4294967295>) range A.B.C.D/M substitute

A.B.C.D/M .................................................................................... 276

25.8 area (A.B.C.D| <0-4294967295>) shortcut

(default| enable| disable) .............................................................. 277

25.9 area (A.B.C.D| <0-4294967295>) stub ........................................277

25.10 area (A.B.C.D| <0-4294967295>) stub no-summary ................... 278

25.11 area (A.B.C.D| <0-4294967295>) virtual-link A.B.C.D ................. 279

25.12 area (A.B.C.D| <0-4294967295>) virtual-link A.B.C.D (hello-interval| retransmit-interval| transmit-delay| dead-interval)

<1-65535> .................................................................................... 279

25.13 area (A.B.C.D| <0-4294967295>) virtual-link

A.B.C.D authentication ................................................................. 280

25.14 area (A.B.C.D| <0-4294967295>) virtual-link A.B.C.D authentication

message-digest ............................................................................ 281

25.15 area (A.B.C.D| <0-4294967295>) virtual-link A.B.C.D authentication-

key AUTH_KEY ............................................................................ 281

25.16 area (A.B.C.D| <0-4294967295>) virtual-link A.B.C.D message-

digest-key <1-255> md5 KEY ...................................................... 282

25.17 auto-cost refrence-bandwidth <1-4294967> ................................ 283

25.18 compatible rfc1583 ....................................................................... 283

25.19 default-information originate ........................................................ 284

xxi

GigaX3124 Layer3 Switch CLI Command Reference

25.20 default-information originate (metric <0-16777214> | metric-type

(1|2))............................................................................................. 284

25.21 default-information originate always ............................................ 285

25.22 default-information originate always (metric <0-16777214> | metric-

type (1|2)) ..................................................................................... 285

25.23 default-metric <0-16777214> ....................................................... 286

25.24 distance <1-255> ......................................................................... 286

25.25 distance ospf (intra-area|inter-area|external) <1-255>................. 286

25.26 ip ospf authentication ................................................................... 287

25.27 ip ospf authentication message-digest ......................................... 287

25.28 ip ospf authentication-key AUTH_KEY ........................................ 288

25.29 ip ospf cost <1-65535> ................................................................ 288

25.30 ip ospf (hello-interval| retransmit-interval| transmit-delay| dead-

interval) <1-65535> ...................................................................... 288

25.31 ip ospf message-digest-key <1-255> md5 KEY ........................... 289

25.32 ip ospf priority <1-255> ................................................................ 289

25.33 neighbor A.B.C.D ......................................................................... 290

25.34 neighbor A.B.C.D (poll-interval <1-65535> | priority <1-255>) ..... 290

25.35 network A.B.C.D/M area (A.B.C.D| <0-4294967295>) ................. 291

25.36 passive-interface IFNAME ........................................................... 291

25.37 redistribute (kernel| connected| static| rip) ................................... 292

25.38 redistribute (kernel| connected| static| rip) (metric <0-16777214> |

metric-type (1|2)) .......................................................................... 292

25.39 refresh timer <10-1800> .............................................................. 293

25.40 router-id A.B.C.D .......................................................................... 293

25.41 router ospf .................................................................................... 294

25.42 show ip ospf ................................................................................. 294

25.43 show ip ospf database ................................................................. 294

25.44 show ip ospf database (asbr-summary| external| network| router|

summary | max-age| self-originate) .............................................. 295

25.45 show ip ospf database (asbr-summary| external| network| router|

xxii

GigaX3124 Layer3 Switch CLI Command Reference

summary) (self-originate| A.B.C.D| adv-router A.B.C.D) .............. 295

25.46 show ip ospf database (asbr-summary| external| network| router|

summary) A.B.C.D adv-router A.B.C.D ........................................ 296

25.47 show ip ospf interface [IFNAME] ................................................ 296

25.48 show ip ospf neighbor .................................................................. 297

25.49 show ip ospf route ........................................................................ 297

25.50 timers spf <0-4294967295> <0-4294967295> ............................. 298

26 VRRP (Virtual Router Redundancy Protocol): ................ 299

26.1 show standby [IFNAME] .............................................................. 299

26.2 standby <1-255> ip IPADDR ........................................................ 299

26.3 standby <1-255> (preempt|nonpreempt) ..................................... 300

26.4 standby <1-255> priority <1-254> ................................................ 300

26.5 standby <1-255> timers <1-1000> ............................................... 300

xxiii

GigaX3124 Layer3 Switch CLI Command Reference

1 Getting Started with the CLI

This chapter provides information that you should know before using the ASUS GigaX Switch command-line interface (CLI). If you have never used GigaX Switch, take a few minutes to read this chapter before reading the rest of this guide.

• Command usage basics

• Command-line error messages

• Accessing the CLI

• Saving conguration changes

This guide provides procedures for using only the commands that have been created or changed for these switches.

1.1 Command Usage Basics

This section provides the following topics:

• Accessing command modes

• Abbreviating commands

• Using the No and Default forms of commands

• Redisplaying a command

• Getting help

1.1.1 Accessing Command Modes

The CLI is divided into different modes. The commands available to you at any given time depend on which mode you are in. Entering a question mark (?) or “list” command at the system prompt provides a list of commands for each command mode.

The switch supports the following command modes:

• User EXEC

• Privileged EXEC

• Global conguration

• Interface conguration

GigaX3124 Layer3 Switch CLI Command Reference

• Cong-vlan

• Mac access-list extended

• IP standard access-list

• IP extended access-list

• Policy-map conguration

• Policy-map-class conguration

• Cong-router

When you start a session on the switch, you begin in user mode, often called user EXEC mode, which has only a limited subset of the commands. To

access all commands and modes, you must rst enter privileged EXEC mode.

From privileged mode, you can enter any EXEC command or enter global

conguration mode. Most of the EXEC commands are one-time commands, such as show commands, which show the current conguration status, and no

commands, which clear counters or interfaces.

You can use the Cong-vlan (virtual LAN) and the various conguration modes to make changes to the running conguration. To access the various conguration modes, you must start at global conguration mode. From global conguration mode, you can enter interface and line conguration modes.

Table 1-1 describes how to access each mode, the prompt you see in that mode, and how to exit the mode. The examples in the table use the host name ASUS.

Table 1-1: Command Modes Summary

C o m m a n d

Access method Prompt Exit or Access Next

mode

User EXEC This is the rst level

of access.(For the switch) Change terminal settings, perform basic tasks, and list system information.

Privileged EXEC

From user EXEC mode, enter the enable command.

Mode.

ASUS> Exit to enter the EXIT

command. To enter privileged EXEC mode, enter the enable command.

ASUS# To exit to user EXEC mode,

enter the disable command.

To enter global conguration mode, enter the congure

terminal command.

GigaX3124 Layer3 Switch CLI Command Reference

Command

Access method Prompt Exit or Access Next

mode

Global

conguration

From privileged EXEC mode, enter the

congure command.

Interface

conguration

From global

conguration mode,

specify an interface by entering the interface command followed by an interface

identication.

Cong-vlan In global conguration

mode, enter the vlan

vlan-id

command.

Mac accesslist extended

In global conguration

mode, enter the ACL NAME command.

IP standard access-list

In global conguration

mode, enter the ACL NAME command.

IP extended access-list

In global conguration

mode, enter the ACL NAME command.

ASUS

(cong)#

ASUS

(cong-

if)#

ASUS (cong- vlan)#

ASUS(cong-

mac-acl)#

ASUS(cong-

std-acl)#

ASUS(cong-

ext-acl)#

Mode.

To exit to privileged EXEC mode, enter the exit or end command, or press

Ctrl-Z. To enter interface conguration mode, enter

the interface IFNAME

conguration command.

To exit to privileged EXEC mode, enter the end command, or press

Ctrl-Z. To exit to global conguration mode, enter

the exit command.

To exit to global

conguration mode, enter

the exit command. To return to privileged EXEC mode, enter the end

command, or press Ctrl-Z.

To exit to global

conguration mode, enter

the exit command. To return to privileged EXEC mode, enter the end

command, or press Ctrl-Z.

To exit to global

conguration mode, enter

the exit command.

To return to privileged EXEC mode, enter the end

command, or press Ctrl-Z.

To exit to global

conguration mode, enter

the exit command.

To return to privileged EXEC mode, enter the end

command, or press Ctrl-Z.

GigaX3124 Layer3 Switch CLI Command Reference

C o m m a n d

Access method Prompt Exit or Access Next

mode

P o l i c y - m a p

conguration

In global congura-

tion mode, enter the Plocy-map NAME command.

Policy-map class conguration

In Policy-map con-

guration mode, enter

the class-map NAME command.

Cong-router In global conguration

mode,

enter the router ospf/ rip command.

ASUS(configpmap)#

ASUS(configpmap-class)#

ASUS(configrouter)#

Mode.

To exit to global

conguration mode, enter

the exit command.

To return to privileged EXEC mode, enter the end

command, or press Ctrl-Z.

To enter the Policy-map-class

conguration mode, enter the

class-map NAME command.

To exit to policy-map con-

guration mode, enter the exit

command.

To return to privileged EXEC mode, enter the end com-

mand, or press Ctrl-Z.

To exit to global conguration

mode, enter the exit command.

To return to privileged EXEC mode, enter the end com-

mand, or press Ctrl-Z.

For any of the modes, you can see a comprehensive list of the available commands by entering a question mark (?) or “list”at the prompt.

GigaX3124 Layer3 Switch CLI Command Reference

1.1.3 Abbreviating Commands

You can abbreviate commands and keywords to the number of characters that allow a unique abbreviation. For example, you can abbreviate the

command to sh or the show

running-cong

command to

sh ru

show

1.1.4 Using the No and Default Forms of Commands

Almost every conguration command has a no form. In general, use the no form

• Disable a feature or function.

• Reset a command to its default values.

• Reverse the action of a command. For example, the

command reverses the shutdown of an interface.

Use the command without the reverse the action of a

Conguration commands can also have a default form. The default form of a

command returns the command setting to its default.

form to reenable a disabled feature or to

command.

no shutdown

1.1.5 Redisplaying a Command

To redisplay a command you previously entered, press the up-arrow key. You can continue to press the up-arrow key for more commands.

1.1.6 Getting Help

Entering a question mark (?) at the system prompt displays a list of commands

for each command mode. You can also get a list of any command’s associated

keywords and arguments with the context-sensitive help feature.

The following are the commands to get help specic to a command mode, a

command, a keyword, or an argument:

•

ASUS>

•

particular character string.

ASUS> sh?

ASUS> show Show running system information

•

—Obtain a brief description of the help system in any command mode.

help

abbreviated-command-entry

?—Obtain a list of commands that begin with a

>—Complete a partial command name.

Tab

GigaX3124 Layer3 Switch CLI Command Reference

: No space before tabbing.

Note

ASUS# sh ru<tab>

ASUS# show running-cong

• ? — List all commands available for a particular command mode.

ASUS> ?

• command ?—List of command keywords.

ASUS>

show

• command keyword ?— List of command keyword arguments.

ASUS# show ip ?

access-group Specify an Access Control List (ACL)

access-list Access lists (ACL) conguration

forwarding IP forwarding status

igmp Internet Group Management Protocol (IGMP)

When using context-sensitive help, the space (or lack of a space) before the

question mark (?) is signicant. To obtain a list of commands that begin with a

particular character sequence, enter those characters followed immediately by the question mark (?). Do not include a space. This form of help is called word help, because it completes a word for you.

To list keywords or arguments, enter a question mark (?) in place of a keyword or argument. Include a space before the ?. This form of help is called command syntax help, because it reminds you which keywords or arguments are applicable based on the command, keywords, and arguments you already have entered.

GigaX3124 Layer3 Switch CLI Command Reference

1.2 Command-Line Error Messages

Table 1-2 lists some error messages that you might encounter while using the CLI.

Table 1-2: Common CLI Error Messages

Error Message Meaning How to Get Help

Ambiguous

Command.

Command incomplete.

Unknown command.

You did not enter enough characters for your

switch to recognize

the command.

You did not enter all of the keywords or values required by this command.

You entered the command incorrectly.

Reenter the command followed by a space and a question mark (?).

The possible keywords that you can enter with the command appear. Reenter the command followed by a space and a question mark (?).

The possible keywords that you can enter with the command appear. Enter a question mark (?) to display all of the commands that are available in this command mode.

The possible keywords that you can enter with the command appear.

1.3 Accessing the CLI

The following procedure assumes you have already assigned IP information and password to the switch or command switch. You can assign this information to the switch in the following ways:

• Using the setup program, as described in the release notes

• Manually assigning an IP address and password

To access the CLI, follow these steps:

Start up the emulation software (such as ProComm, HyperTerminal, tip,

Step 1

or minicom) on the management station.

If necessary, recongure the terminal-emulation software to match the

Step 2

switch console port settings (default settings are 9600 baud, no parity, 8 data bits, and 1 stop bit).

GigaX3124 Layer3 Switch CLI Command Reference

Step 3 Establish a connection with the switch by either

• Connecting the switch console port to a management station. For information about connecting to the console port, refer to the switch user manual.

• Using any Telnet TCP/IP package from a remote management station. The switch must have network connectivity with the Telnet client, and the switch

must have an enable secret password congured.

The switch can’t supports many (under four) simultaneous Telnet sessions.

Changes made by one Telnet user are reected in all other Telnet sessions.

After you connect through the console port or through a Telnet session, the User EXEC prompt appears on the management station.

1.4 SavingCongurationChanges

The show command always displays the running conguration of the switch. When you make a conguration change to a switch or switch cluster, the change becomes part of the running conguration. The change does not automatically become part of the cong le in Flash memory, which is the startup congura-

tion used each time the switch restarts. If you do not save your changes to Flash memory, they are lost when the switch restarts.

To save all conguration changes to Flash memory, you must enter the

command in privileged EXEC mode.

write le

GigaX3124 Layer3 Switch CLI Command Reference

2 System Management

 Conguration

2.1 archive download-sw /overwrite tftp: URL

Syntax archive download-sw /overwrite tftp: URL

Parameters URL IP address[:Port]/File name

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the archive download-sw /overwrite conguration

command on the switch stack or standalone switch to download a new copy of software from a server and overwrite an existing image.

Examples ASUS# archive download-sw /overwrite tftp:192.192.1.131/

image.img

2.2 archive download-sw /overwrite ftp: URL

Syntax archive download-sw /overwrite ftp: URL

Parameters URL [Username:Password@]IP address[:Port]/File name

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the archive download-sw /overwrite conguration command

on the switch stack or standalone switch to download a new copy of software from a server and overwrite an existing image.

Examples ASUS# archive download-sw /overwrite tftp:

admin:1234@192.192.1.131/image.img

GigaX3124 Layer3 Switch CLI Command Reference

2.3 arp timeout SECONDS

Syntax arp timeout SECONDS

Parameters SECONDS <1-86400>, age time in seconds

Command Mode Global conguration mode

No/clear no arp timeout

Show show arp

Default 14400

Description To show arp table.

Examples ASUS(cong)# arp timeout 3600

2.4 clock set TIME MONTH DAY YEAR

Syntax clock set TIME MONTH DAY YEAR

Parameters TIME hh:mm:ss Current Time

MONTH <1-12>, Month of the year

DAY <1-31>, Day of the month

YEAR <1970-2037>, Year

Command Mode Privileged EXEC mode

No/clear

Show show clock

Default

Description To set time

Examples ASUS# clock set 15:26:02 4 6 2007

2.5 clock timezone ZONE HOURS MINUTES

Syntax clock timezone ZONE

Parameters ZONE time zone

HOURS <-23-23>, hours offset from UTC

MINUTES <0-59>, minutes offset from UTC

Command Mode Privileged EXEC mode

GigaX3124 Layer3 Switch CLI Command Reference

No/clear no clock timezone

Show show clock

Default UTC

Description To set time zone

Examples ASUS# clock timezone CCT 8 0

2.6 congureterminal

Syntax congure terminal

Parameters terminal Conguration terminal

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the write conguration command on the switch stack or

standalone switch to conguration from vty interface.

Examples ASUS# congure terminal

2.7 copyrunning-congstartup-cong

Syntax copy running-cong startup-cong

Parameters running-cong Copy from current system conguration

startup-cong Copy to startup conguration

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the copy conguration command on the switch stack or

standalone switch to copy running conguration startup-cong.

Examples ASUS# copy running-cong startup-cong

GigaX3124 Layer3 Switch CLI Command Reference

2.8 copystartup-congtftp:URL

Syntax copy startup-cong tftp: URL

Parameters startup-cong Copy from startup conguration

ftp: Copy to tftp: le system

URL IP address[:Port]/File name

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Copy the le in Flash memory to the root directory of the TFTP

server.

Examples ASUS# copy startup-cong tftp: 192.192.1.131/cong.txt

2.9 copytftp:URLstartup-cong

Syntax copy tftp: URL startup-cong

Parameters tftp: Copy from tftp: le system

URL IP address[:Port]/File name

startup-cong Copy to startup conguration

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Copy the le in the TFTP server to the Flash memory.

Examples ASUS# copy tftp: 192.192.1.31/cong.txt startup-cong

2.10 copystartup-congftp:URL

Syntax copy startup-cong ftp: URL

Parameters startup-cong Copy from startup conguration

ftp: Copy to ftp: le system

URL [Username:Password@]IP address[:Port]/File name

GigaX3124 Layer3 Switch CLI Command Reference

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Copy the le in Flash memory to the root directory of the FTP

server.

Examples ASUS# copy startup-cong ftp: asus:1234@192.192.1.131/

cong.txt

2.11 copyftp:URLstartup-cong

Syntax copy ftp: URL startup-cong

Parameters ftp: Copy from ftp: le system

URL [Username:Password@]IP address[:Port]/File name

startup-cong Copy to startup conguration

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Copy the le in the FTP server to the Flash memory.

Examples ASUS# copy ftp: asus:1234@192.192.1.31/cong.txt startup-

cong

2.12 cpu ingress rate <50-4000>

Syntax cpu ingress rate <50-4000>

Parameters <50-4000> Rate limit, in packets per second

Command Mode Global conguration mode

No/clear no cpu ingress rate

Show show running-cong

Default Unlimited

Description To set the rate limit of CPU receiving packets

Examples ASUS(cong)# cpu ingress rate 100

GigaX3124 Layer3 Switch CLI Command Reference

2.13 disable

Syntax Disable

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description This command turn off privileged mode and back to user mode

Examples ASUS# disable

2.14 enable

Syntax enable

Parameters

Command Mode User mode

No/clear

Show

Default

Description This command let user enter enable mode and turn on privileged

mode command.

Examples ASUS> enable

2.15 end

Syntax end

Parameters

Command Mode Privileged EXEC mode, Global conguration mode, Interface

mode

No/clear

Show

Default

Description This command let user end current mode and down to enable

mode.

GigaX3124 Layer3 Switch CLI Command Reference

Examples ASUS(cong)# end

2.16 exit

Syntax exit

Parameters

Command Mode User mode, Privileged EXEC mode, Global conguration mode,

Interface mode

No/clear

Show

Default

Description This command let user exit current mode and down to previous

mode.

Examples ASUS(cong)# exit

2.17 hostname HOSTNAME

Syntax hostname HOSTNAME

Parameters HOSTNAME This system’s network name

Command Mode Global conguration mode

No/clear no hostname

Show show running-cong

Default The default system’s network name is ASUS

Description This command sets the system’s network name

Examples ASUS(cong)# hostname ASUS

2.18 list

Syntax list

Parameters

Command Mode User mode, Privileged EXEC mode, Global conguration mode,

Interface mode

No/clear

GigaX3124 Layer3 Switch CLI Command Reference

Show

Default

Description This command lists all of the command of the operation mode.

Examples ASUS# list

2.19 ping IPADDR

Syntax ping IPADDR

Parameters IPADDR Ping destination address

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description This command used to send echo messages to ping destination

address

Examples ASUS# ping 192.192.1.1

2.20 quit

Syntax quit

Parameters

Command Mode User mode, Privileged EXEC mode

No/clear

Show

Default

Description Use the command to exit current mode and down to previous

mode.

Examples ASUS# quit

2.21 reboot

Syntax reboot

Parameters

GigaX3124 Layer3 Switch CLI Command Reference

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use this command to reboot the system.

Examples ASUS# reboot

2.22 reloaddefault-congle

Syntax reload default-cong le

Parameters default-cong the default-cong le

le the running-cong le

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use this command to copy a default-cong le to replace the

current one

Examples ASUS# reload default-cong le

2.23 show arp

Syntax show arp

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show arp table.

Examples ASUS# show arp

GigaX3124 Layer3 Switch CLI Command Reference

2.24 show arp host ADDRSS

Syntax show arp host [ADDRESS]

Parameters ADDRESS host

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show arp table for specied host.

Examples ASUS# show arp host 192.192.1.254

ASUS# show arp host 00:05:5D:0C:5E:41

ASUS# show arp host vlan1

2.25 show cable-diagnostic interface [IFNAME]

Syntax show cable-diagnostic interface [IFNAME]

Parameters IFNAME interface name (e.q.: fastethernet1/0/1 or

gigabitethernet1/0/1)

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show cable-diagnostic information

Examples ASUS# show cable-diagnostic interface gi1/0/1

2.26 show clock

Syntax show clock

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

GigaX3124 Layer3 Switch CLI Command Reference

Description To show clock

Examples ASUS# show clock

2.27 show cpu statistics

Syntax show cpu statistics

Parameters

Command Mode Privileged EXEC mode

No/clear clear cpu statistics

Show

Default

Description To show cpu received and transmitted packet statistics

Examples ASUS# show cpu statistics

2.28 show memory

Syntax show memory

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show system memory status

Examples ASUS# show memory

2.29 show private health

Syntax show private health

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

GigaX3124 Layer3 Switch CLI Command Reference

Description To show system monitor information

Examples ASUS# show private health

2.30 show private led

Syntax show private led

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show system led information

Examples ASUS# show private led

2.31 show private model

Syntax show private model

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show model name

Examples ASUS# show private model

2.32 show processes cpu history

Syntax show processes cpu history

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

GigaX3124 Layer3 Switch CLI Command Reference

Description To show cpu loading history

Examples ASUS# show processes cpu history

2.33 showrunning-cong

Syntax show running-cong

Parameters running-cong current operating conguration

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show running-cong fule.

Examples ASUS# show running-cong

2.34 showstartup-cong

Syntax show startup-cong

Parameters startup-cong contentes of startup conguration

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show startup-cong.

Examples ASUS# show startup-cong

2.35 show syslog

Syntax show syslog

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

GigaX3124 Layer3 Switch CLI Command Reference

Default

Description To show system log messages

Examples ASUS# show syslog

2.36 showsyslogconguration

Syntax show syslog conguration

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show system log conguration

Examples ASUS# show syslog conguration

2.37 show telnet who

Syntax show telnet who

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show who is logged in.

Examples ASUS# show telnet who

2.38 show uptime

Syntax show uptime

Parameters

Command Mode Privileged EXEC mode

No/clear

GigaX3124 Layer3 Switch CLI Command Reference

Show

Default

Description To display system uptime

Examples ASUS# show uptime

2.39 show version

Syntax show version

Parameters version display version information

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show rmware version.

Examples ASUS# show version

2.40 show user

Syntax show user

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show user accounts

Examples ASUS# show user

2.41 syslog (enable | disable)

Syntax syslog (enable | disable)

Parameters disable Disable syslog protocol

enable Enable syslog protocol

Command Mode Global conguration mode

GigaX3124 Layer3 Switch CLI Command Reference

No/clear

Show show syslog conguration

Default disable

Description To enable/disable system log protocol

Examples ASUS(cong)# syslog enable

2.42 syslog facility <0-23>

Syntax syslog facility <0-23>

Parameters facility Assign message facility

<0-23> Facility code

Command Mode Global conguration mode

No/clear

Show show syslog conguration

Default 2

Description To congure system log Facility code

Examples ASUS(cong)# syslog facility 3

2.43 syslog hostname

Syntax syslog hostname

Parameters

Command Mode Global conguration mode

No/clear no syslog hostname

Show show syslog conguration

Default Disable

Description Turn on message hostname

Examples ASUS(cong)# syslog hostname

GigaX3124 Layer3 Switch CLI Command Reference

2.44 syslog server-ip IPADDR

Syntax syslog server-ip IPADDR

Parameters IPADDR IP address

Command Mode Global conguration mode

No/clear no syslog server-ip IPADDR

Show show syslog conguration

Default

Description To congure Syslog server IP address

Examples ASUS(cong)# syslog server-ip 192.168.1.1

2.45 syslog severity <0-7>

Syntax syslog severity <0-7>

Parameters <0-7> Severity code

Command Mode Global conguration mode

No/clear

Show show syslog conguration

Default 6

Description Assign message priority

Examples ASUS(cong)# syslog severity 2

2.46 syslog timestamp

Syntax syslog timestamp

Parameters

Command Mode Global conguration mode

No/clear no syslog timestamp

Show show syslog conguration

Default Disable

Description Turn on message timestamp

Examples ASUS(cong)# syslog timestamp

GigaX3124 Layer3 Switch CLI Command Reference

2.47 telnet IPADDR

Syntax telnet IPADDR

Parameters IPADDR IP address of a remote system

Command Mode User mode, Privileged EXEC mode

No/clear

Show

Default

Description To telnet a ip address

Examples ASUS# telnet 192.192.1.11

2.48 telnet IPADDR PORT

Syntax telnet IPADDR PORT

Parameters IPADDR IP address or hostname of a remote system

PORT TCP port number

Command Mode User mode, Privileged EXEC mode

No/clear

Show

Default

Description To telnet an ip address with the specied port number

Examples ASUS# telnet 192.192.1.11 21

Syntax tracelog add (dhcp-relay | dhcp-snooping | dot1x | gvrp | igmp-

snooping | lacp | stp | switch)

Parameters

Command Mode Global conguration mode

No/clear tracelog delete (dhcp-relay | dhcp-snooping | dot1x | gvrp | igmp-

snooping | lacp | stp | switch)

GigaX3124 Layer3 Switch CLI Command Reference

Show

Default disable tracelog

Description This command starts the system logging the function.

Examples ASUS(cong)# tracelog add dot1x

2.50 tracelog level (critical | high | low )

Syntax tracelog level (critical | high | low )

Parameters

Command Mode Global conguration mode

No/clear

Show

Default critical

Description This command is to decide how much message will be printed.

Examples ASUS(cong)# tracelog level low

2.51 traceroute IPADDR

Syntax traceroute IPADDR

Parameters IPADDR Trace route to destination address or hostname

Command Mode User mode, Privileged EXEC mode

No/clear

Show

Default

Description

Examples ASUS# traceroute 192.192.1.11

2.52 user add ACCOUNT PASSWORD

Syntax user add ACCOUNT PASSWORD

Parameters ACCOUNT user name

PASSWORD password

GigaX3124 Layer3 Switch CLI Command Reference

Command Mode Global conguration mode

No/clear user delete USERNAME

Show show user

Default

Description To add a new user account

Examples ASUS# user add test test1234

2.53 user delete USERNAME

Syntax user delete USERNAME

Parameters ACCOUNT user name

Command Mode Privileged EXEC mode

No/clear

Show show user

Default

Description To delete a user account

Examples ASUS# user delete test

2.54 write[le|memory|terminal]

Syntax write [le | memory | terminal]

Parameters le write conguration to the le

memory write conguration to the le

terminal write to terminal

Command Mode Privileged EXEC mode

No/clear

Show

Default write to le

Description Use the write conguration command on the switch stack or

standalone switch to write running conguration to memory,

network, or terminal

Examples ASUS# write

GigaX3124 Layer3 Switch CLI Command Reference

3 Portinterfaceconguration:

Type “interface IFNAME” in global conguration mode, then start to congure

interface.

3.1 acceptable frame-type (all| discard-all| vlan- tagged-only)

Syntax acceptable frame-type (all| discard-all| vlan-tagged-only)

Parameters all Accept all packets

discard-all Discard all packets

vlan-tagged-only Accept VLAN-tagged packets only

Command Mode Interface conguration mode

No/clear

show show interface IFNAME

Default Accept all packets.

Description Use the acceptable frame type conguration command on

the switch stack or standalone switch to set the type of the acceptable frame, for any kind of frame type is accepted or only vlan-tag frame is accepted.

Examples ASUS(cong-if)# acceptable frame-type all

3.2 auto-negotiation

Syntax auto-negotiation

Parameters

Command Mode Interface conguration mode

No/clear no auto-negotiation

Show show interface IFNAME

Default The default is enable

Description Use the auto-negotiation conguration command on the switch

stack or standalone switch to set auto-negotiation status of the port.

Examples ASUS(cong-if)# auto-negotiation

GigaX3124 Layer3 Switch CLI Command Reference

3.3 default-priority <0-7>

Syntax default-priority <0-7>

Parameters <0-7> Cos priority

Command Mode Interface conguration mode

No/clear no default-priority

Show show running-cong

Default The default is 0

Description Use the default priority conguration command on the switch

stack or standalone switch to set default cos priority of the port.

Examples ASUS(cong-if)# default-priority 3

3.4 description LINE

Syntax description LINE

Parameters LINE Characters describing this interface

Command Mode Interface conguration mode

No/clear no description

Show show interface status

Default None

Description Use the description command on the switch stack or standalone

switch to set description of the port.

Examples ASUS(cong-if)# description server

3.5 duplex (full|half)

Syntax duplex (full|half)

Parameters full Force the interface in full-dupex mode

half Force the interface in half-dupex mode

Command Mode Interface conguration mode

No/clear no duplex

Show show interface IFNAME

Default The default is full

GigaX3124 Layer3 Switch CLI Command Reference

Description Use the duplex interface conguration command on the switch

stack or on a standalone switch to specify the duplex mode of operation for Fast Ethernet and Gigabit Ethernet ports. Use the no form of this command to return the port to its default value.

Examples ASUS(cong-if)# duplex full

3.6 owcontrol(both|rx|tx)

Syntax owcontrol (both| rx| tx)

Parameters both Allow the interface to receive+transmit pause frames

rx Allow the interface to receive pause frames

tx Allow the interface to transmit pause frames

Command Mode Interface conguration mode

No/clear no owcontrol

Show show interface IFNAME

Default The default is both

Description This command sets the interface owcontrol method.

Examples ASUS(cong-if)# owcontrol both

3.7 ingress-lter(enable|disable)

Syntax ingress-lter (enable|disable)

Parameters enable Allow non-VLAN-member tagged packets forwarding

disable Drop non-VLAN-member tagged packets

Command Mode Interface conguration mode

No/clear

Show show interface IFNAME

Default The default is enable

Description This command sets the IEEE 802.1Q tagged frames ltering for

the interface.

Examples ASUS(cong-if)# ingress-lter disable

GigaX3124 Layer3 Switch CLI Command Reference

3.8 interface IFNAME

Syntax interface IFNAME

Parameters IFNAME interface’s name

Command Mode Global conguration mode

No/clear

Show show interface IFNAME

Default

Description This command changes the operation to interface command

mode.

Examples ASUS(cong)# interface gi1/0/1

3.9 interface vlan <1-3000>

Syntax interface vlan <1-3000>

Parameters vlan Select a vlan to congure

<1-3000> VLAN ID

Command Mode Global conguration mode

No/clear

Show

Default

Description In L2 model, this command changes the system vlan to specic

vlan interface command mode. In L3 model, this command only changes to L3 interface mode.

Examples ASUS(cong)# interface vlan 2

3.10 ip address A.B.C.D/M

Syntax ip address A.B.C.D/M

Parameters address Set the IP address of an L3 interface

A.B.C.D/M IP address (e.g. 10.0.0.1/8)

Command Mode Interface conguration mode

No/clear no ip address A.B.C.D/M

GigaX3124 Layer3 Switch CLI Command Reference

Show show running-cong

Default

Description This command sets the ip address for indicated L3 interface.

Examples ASUS(cong)# interface vlan2

ASUS(cong-if)# ip address 192.192.1.11/24

3.11 line loopback

Syntax line loopback

Parameters

Command Mode Interface conguration mode

No/clear no line loopback

Show show running-cong

Default Enable

Description Use the line loopback command on the switch stack or stand-

alone switch to detect loopback of the port.

Examples ASUS(cong-if)# line loopback

ASUS(cong-if)# no line loopback

3.12 line loopback shutdown <60-600>

Syntax line loopback shutdown <60-600>

Parameters shutdown Interface maximum shutdown time

<60-600> Showdown time, in seconds

Command Mode Interface conguration mode

No/clear no line loopback shoutdown

Show show running-cong

Default Shutdown forever.

Description To set the line loopback shutdown time for the dedicated port.

Examples ASUS(cong-if)# line loopback shutdown 60

GigaX3124 Layer3 Switch CLI Command Reference

3.13 max-frame-size <1518-9216>

Syntax max-frame-size <1518-9216>

Parameters <1518-9216> Maximum frame size in byte

Command Mode Interface conguration mode

No/clear no max-frame-size

Show show interface IFNAME

Default The default is 1518 bytes

Description Use the max-frame-size command on the switch stack or

standalone switch to set the received frame max size of the port.

Examples ASUS(cong-if)# max-frame-size 9216

3.14 mdix

Syntax Mdix

Parameters mdix Enable Medium-Dependent Interface Crossover (MDIX)

Command Mode Interface conguration mode

No/clear no mdix

Show

Default The default is enable

Description Use the mdix command on the switch stack or standalone switch

to set mdix of the port.

Examples ASUS(cong-if)# mdix

3.15 no switchport

Syntax no switchport

Parameters

Command Mode Interface conguration mode

No/clear switchport

Show

Default

GigaX3124 Layer3 Switch CLI Command Reference

Description Use the command to set the port to be a routed port. A routed port

is a L3 interface can congure IP and routing.

Examples ASUS(cong)# interface gi1/0/1

ASUS(cong-if)# no switchport

3.16 shutdown

Syntax shutdown

Parameters

Command Mode Interface conguration mode

No/clear no shutdown

Show show running-cong

Default

Description The shutdown command for a port causes it to stop forwarding.

You can enable the port with the no shutdown command.

In L3 model, the command also can stop forwarding for a L3

interface.

Examples ASUS(cong-if)# shutdown

3.17 speed (10|100|1000)

Syntax speed (10|100|1000)

Parameters 10 Force the interface in 10 Mbps

100 Force the interface in 100 Mbps

1000 Force the interface in 1 Gbps

Command Mode Interface conguration mode

No/clear no speed

Show show interface IFNAME

Default

Description Use the speed conguration command on the switch stack or

standalone switch to set speed status of the port.

Examples ASUS(cong-if)# speed 100

GigaX3124 Layer3 Switch CLI Command Reference

3.18 show interface IFNAME

Syntax Show interface IFNAME

Parameters IFNAME interface’s name, ex: gi1/0/1 or vlan1

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description This command shows the interface detail status.

Examples ASUS# show interface gi1/0/1

ASUS# show interface vlan2

3.19 show interface status

Syntax Show interface status

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description This command shows all interface status.

Examples ASUS# show interface status

3.20 switchport

Syntax switchport

Parameters

Command Mode Interface conguration mode

No/clear no switchport

Show

Default

GigaX3124 Layer3 Switch CLI Command Reference

Description Use the command to reset the port to L2 interface from routed

port.

Examples ASUS(cong)# interface gi1/0/1

ASUS(cong-if)# switchport

3.21 switchportmulticastlter

Syntax switchport multicast lter

Parameters

Command Mode Interface conguration mode

No/clear no switchport multicast lter

Show show interface IFNAME

Default

Description Use the command to lter unknown multicast trafc.

Examples ASUS(cong-if)# switchport multicast lter

GigaX3124 Layer3 Switch CLI Command Reference

4 IEEE802.1QVLANConguration

4.1 name VLANAME

Syntax name VLANAME

Parameters VLANNAME Characters name

No/clear no name

Command Mode Cong-vlan mode

Show show vlan [VLANID]

Default “VLAN” + “VLANID”, ex: VLAN20

Description Use the name command to set the vlan name on the switch.

Example ASUS(cong)# vlan 20

ASUS(cong-vlan)# name outvlan

4.2 show vlan [VLANID]

Syntax show vlan [VLANID]

Parameters [VLANID] VLAN ID

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show vlan user EXEC command to display the

parameters for all congured VLANs or one VLAN (if the VLAN ID specied) on the switch.

Example ASUS# show vlan 2

4.3 show vlan name VLANAME

Syntax show vlan name VLANAME

Parameters VLANAME vlan name

Command Mode Privileged EXEC mode

GigaX3124 Layer3 Switch CLI Command Reference

No/clear

Show

Default

Description Use the show vlan user EXEC command to display the param-

eters for all congured VLANs or one VLAN (if the name is specied) on the switch.

Example ASUS# show vlan name VLAN2

4.4 switchport access vlan <1-3000>

Syntax switchport access vlan <1-3000>

Parameters access Set 802.1Q access mode for the port

vlan IEEE 802.1Q Virtual Local Area Networks

<1-3000> VLAN ID

Command Mode Interface conguration mode

No/clear

Show show vlan [VLANID]

Default

Description Set Virtual LAN and the interface to access mode

Example ASUS(cong-if)# switchport access vlan 2

4.5 switchport mode (access|trunk)

Syntax switchport mode (access|trunk)

Parameters access Set 802.1Q access mode for the port

trunk Set 802.1Q trunk mode for the port

Command Mode Interface conguration mode

No/clear

Show show interface [IFNAME]

Default The default mode is trunk

Description Set the interface to access or trunk mode.

Example ASUS(cong-if)# switchport mode access

GigaX3124 Layer3 Switch CLI Command Reference

4.6 switchport trunk native vlan <1-3000>

Syntax switchport trunk native vlan <1-3000>

Parameters trunk Set 802.1Q trunk mode for the port

native Specify the native VLAN for the port

vlan IEEE 802.1Q Virtual Local Area Networks

<1-3000> VLAN ID

Command Mode Interface conguration mode

No/clear

Show show vlan [VLANID]

Default Default is setting to native vlan 1

Description Set Virtual LAN and the interface to trunk mode

Example ASUS(cong-if)# switchport trunk native vlan 2

4.7 switchport trunk allowed vlan (add|remove) VLANLIST

Syntax switchport trunk allowed vlan (add|remove) VLANLIST

Parameters trunk Set 802.1Q trunk mode for the port

allowed the allowed VLANs that can receive and send trafc

on this interface in tagged format when in trunk mode

vlan IEEE 802.1Q Virtual Local Area Networks

add Add allowed VLANs to the interface

remove Remove allowed VLANs from the interface

VLANLIST VLAN ID <1-3000> list

Command Mode Interface conguration mode

No/clear switchport trunk allowed vlan remove VLANLIST

Show show vlan [VLANID]

Default

GigaX3124 Layer3 Switch CLI Command Reference

Description Use the switchport trunk allowed vlan conguration command

on the switch stack or standalone switch to add or remove the

allowed VLANs that can receive and send trafc on this interface

in tagged format when in trunking mode

Example ASUS(cong-if)# switchport trunk allowed vlan add 2-20

4.8 vlan VLANLIST

Syntax vlan VLANLSIT

Parameters VLANLIST VLAN ID <1-3000> list

No/clear no vlan <1-3000>

Command Mode Global conguration mode

Show show vlan [VLANID]

Default VLAN 1 is default created.

Description Use the vlan command to create vlan entry on the switch.

Example ASUS(cong)# vlan 2

ASUS(cong)# vlan 3,6,10-20

GigaX3124 Layer3 Switch CLI Command Reference

5 GARPConguration:

5.1 garp join-timer <1-100000000>

Syntax garp join-timer <1-100000000>

Parameters join-timer Join timer

<1-100000000> the timer values

Command Mode Interface conguration mode

No/clear no garp join-timer

Show show garp timer IFNAME

Default The default is 20 (centi-seconds)

Description This command sets the garp join-timer value in the indicated

interface port.

Example ASUS(cong-if)# garp join-timer 30

5.2 garp leave-timer <1-100000000>

Syntax garp leave-timer <1-100000000>

Parameters leave-timer Leave timer

<1-100000000> the timer values

Command Mode Interface conguration mode

No/clear no garp leave-timer

Show show garp timer IFNAME

Default The default is 60 (centi-seconds)

Description This command sets the garp leave-timer value in the indicated

interface port.

Example ASUS(cong-if)# garp leave-timer 100

GigaX3124 Layer3 Switch CLI Command Reference

5.3 garp leaveall-timer <1-100000000>

Syntax garp leaveall-timer <1-100000000>

Parameters leaveall-timer Leaveall timer

<1-100000000> the timer values

Command Mode Interface conguration mode

No/clear no garp leaveall-timer

Show show garp timer IFNAME

Default The default is 1000 (centi-seconds)

Description This command sets the garp leaveall-timer value in the indicated

interface port.

Example ASUS(cong-if)# garp leaveall-time 2000

5.4 show garp timer [IFNAME]

Syntax show garp timer [IFNAME]

Parameters timer the setting timer values (join, leave, and leaveall timer)

[IFNAME] Interface name

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show garp timer IFNAME status.

Example ASUS# show garp timer [gi1/0/1]

GigaX3124 Layer3 Switch CLI Command Reference

6 GVRPConguration:

6.1 clear gvrp statistics [IFNAME]

Syntax clear gvrp statistics [IFNAME]

Parameters [IFNAME] Interface name

Command Mode Global conguration mode

No/clear

Show

Default

Description Use the clear gvrp statistics conguration command on the

switch stack or standalone switch to clear all the GVRP statistics information on one or all interfaces.

Example ASUS(cong)# clear gvrp statistics gi1/0/1

6.2 gvrp (enable|disable)

Syntax gvrp (enable|disable)

Parameters disable Disable GVRP feature globally on the switch

enable Enable GVRP feature globally on the switch

Command Mode Global conguration mode

No/clear gvrp disable

Show show gvrp

Default The default is disabled on the switch.

Description This command sets the GVRP feature globally enable or disable

on the switch.

Example ASUS(cong)# gvrp enable

6.3 gvrp (enable|disable)

Syntax gvrp (enable|disable)

GigaX3124 Layer3 Switch CLI Command Reference

Parameters disable Disable GVRP feature globally on the interface

enable Enable GVRP feature globally on the interface

Command Mode Interface conguration mode

No/clear gvrp disable

Show show gvrp

Default The default is disabled on the interface.

Description This command sets the GVRP feature enable or disable with the

interface.

Example ASUS(cong-if)# gvrp enable

6.4 gvrpregistration(normal|xed|forbidden)

Syntax gvrp registration (normal| xed| forbidden)

Parameters registration GVRP registration mode

normal normal registration mode

xed xed registration mode

forbidden forbidden registration mode

Command Mode Interface conguration mode

No/clear

Show show gvrp interface IFNAME

Default The default is Normal on each interface after the indicated

interface gvrp mode is enabled.

Description This command sets the gvrp registration type of the indicated

interface.

Example ASUS(cong-if)# gvrp registration xed

6.5 show gvrp

Syntax show gvrp

Parameters

Command Mode Privileged EXEC mode

GigaX3124 Layer3 Switch CLI Command Reference

No/clear

Show

Default

Description To show gvrp global conguration.

Example ASUS# show gvrp

6.6 show gvrp statistics [IFNAME]

Syntax show gvrp statistics [IFNAME]

Parameters statistics the GVRP statistics

[IFNAME] Interface name

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show gvrp statistics IFNAME status.

Example ASUS# show gvrp statistics [gi1/0/1]

6.7 show gvrp interface [IFNAME]

Syntax show gvrp interface [IFNAME]

Parameters [IFNAME] Interface name

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show gvrp port conguration and status.

Example ASUS# show gvrp interface [gi1/0/1]

GigaX3124 Layer3 Switch CLI Command Reference

7 MAC address management

 Conguration:

7.1 clear mac-address-table dynamic

Syntax clear mac-address-table dynamic

Parameters

Command Mode Global conguration mode

No/clear

Show

Default

Description Use the write conguration command on the switch stack or

standalone switch to clear dynamic L2 MAC addresses in the database.

Example ASUS(cong)# clear mac-address-table dynamic

7.2 clear mac-address-table dynamic interface IFNAME

Syntax clear mac-address-table dynamic interface IFNAME

Parameters [IFNAME] Interface name

Command Mode Global conguration mode

No/clear

Show

Default

Description Use the write conguration command on the switch stack or

standalone switch to clear dynamic L2 MAC addresses in the da-

tabase for specied interface name.

Example ASUS(cong)# clear mac-address-table dynamic interface

gi1/0/1

GigaX3124 Layer3 Switch CLI Command Reference

7.3 clear mac-address-table dynamic mac MACADDR

Syntax clear mac-address-table dynamic mac MACADDR

Parameters MACADDR MAC address xxxx.xxxx.xxxx

Command Mode Global conguration mode

No/clear

Show

Default

Description Use the write conguration command on the switch stack or

standalone switch to clear dynamic L2 MAC addresses in the da-

tabase for specied MAC address.

Example ASUS(cong)# clear mac-address-table dynamic

mac0000.0000.0001

7.4 clear mac-address-table dynamic vlan <1-3000>

Syntax clear mac-address-table dynamic vlan <1-3000>

Parameters <1-3000> VLAN ID

Command Mode Global conguration mode

No/clear

Show

Default

Description Use the write conguration command on the switch stack or

standalone switch to clear dynamic L2 MAC addresses in the da-

tabase for specied VLAN ID.

Example ASUS(cong)# clear mac-address-table dynamic vlan 1

GigaX3124 Layer3 Switch CLI Command Reference

7.5 clear mac-address-table interface IFNAME

Syntax clear mac-address-table interface IFNAME

Parameters IFNAME Interface name

Command Mode Global conguration mode

No/clear

Show

Default

Description Use the write conguration command on the switch stack

or standalone switch to clear static and dynamic L2 MAC

addresses in the database for specied interface name.

Example ASUS(cong)# clear mac-address-table interface gi1/0/1

7.6 clear mac-address-table mac MACADDR

Syntax clear mac-address-table mac MACADDR

Parameters MACADDR MAC address

Command Mode Global conguration mode

No/clear

Show

Default

Description Use the write conguration command on the switch stack or

standalone switch to clear L2 MAC addresses in the database

for specied MAC address.

Example ASUS(cong)# clear mac-address-table mac 0000.0000.0001

7.7 clear mac-address-table multicast MACADDR VLANID

Syntax clear mac-address-table multicast MACADDR VLANID

Parameters MACADDR Group MAC address

<1-3000> VLAN ID

Command Mode Global conguration mode

GigaX3124 Layer3 Switch CLI Command Reference

No/clear

Show

Default

Description Use the write conguration command on the switch stack or

standalone switch to clear multicast L2 MAC addresses in the

database for specied MAC address and VLAN ID.

Example ASUS(cong)# clear mac-address-table multicast

0100.5e0a.0a0a 1

7.8 clear mac-address-table vlan <1-3000>

Syntax clear mac-address-table dynamic vlan <1-3000>

Parameters <1-3000> VLAN ID

Command Mode Global conguration mode

No/clear

Show

Default

Description Use the write conguration command on the switch stack or

standalone switch to clear L2 MAC addresses in the database

for specied VLAN ID.

Example ASUS(cong)# clear mac-address-table vlan 1

7.9 mac-address-table aging-time <10-1000000>

Syntax mac-address-table aging-time <10-1000000>

Parameters aging-time the length of time that a dynamic entry remains in

the MAC address table

<10-1000000> Aging time in seconds

Command Mode Global conguration mode

No/clear no mac-address-table aging-time

Show show mac-address-table aging-time

Default The default is 300 seconds.

GigaX3124 Layer3 Switch CLI Command Reference

Description Use the mac-address-table aging-time conguration command

on the switch stack or on a standalone switch to set the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated.

The real aging-time is the triple of the command input radix num-

ber.

Example ASUS(cong)# mac-address-table aging-time 600

7.10 mac-address-table multicast MACADDR <1-3000> interface IFLIST

Syntax mac-address-table multicast MACADDR <1-3000> interface

IFLIST

Parameters multicast Create a multicast MAC address

MACADDR Group MAC address

<1-3000> VLAN ID

interface the specied interface

IFNAME Interface name

Command Mode Global conguration mode

No/clear no mac-address-table multicast MACADDR <1-3000> interface

IFLIST

Show show mac-address-table multicast [MACADDR]

Default

Description Use the mac-address-table multicast conguration command on

the switch stack or on a standalone switch to add multicast static addresses to the MAC address table.

Example ASUS(cong)# mac-address-table multicast 0100.5e0a.0a0a 1

interface gi1/0/2-5

GigaX3124 Layer3 Switch CLI Command Reference

7.11 mac-address-table static MACADDR <1-3000> IFNAME

Syntax mac-address-table static MACADDR <1-3000> IFNAME

Parameters static Create a static unicast MAC address

MACADDR MAC address

<1-3000> VLAN ID

IFNAME Interface name

Command Mode Global conguration mode

No/clear no mac-address-table static MACADDR <1-3000> [IFNAME]

Show show mac-address-table static

Default

Description Use the mac-address-table static conguration command on

the switch stack or on a standalone switch to add unicast static addresses to the MAC address table.

Example ASUS(cong)# mac-address-table static 0000.0000.0001 2

gi1/0/2

7.12 show mac-address-table

Syntax show mac-address-table

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table user EXEC command to dis-

play static/dynamic unicast MAC address table entries.

Example ASUS# show mac-address-table

GigaX3124 Layer3 Switch CLI Command Reference

7.13 show mac-address-table aging-time

Syntax show mac-address-table aging-time

Parameters aging-time the length of time that a dynamic entry remains in

the MAC address table

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table aging-time conguration

command on the switch stack or on a standalone switch to show dynamic entry remains in the MAC address table after the entry is used or updated.

The real aging-time is the triple of the command input radix

number.

Example ASUS# show mac-address-table aging-time

7.14 show mac-address-table dynamic

Syntax show mac-address-table dynamic

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table dynamic user EXEC command

to display dynamic unicast MAC address table entries.

Example ASUS# show mac-address-table dynamic

GigaX3124 Layer3 Switch CLI Command Reference

7.15 show mac-address-table dynamic interface [IFNAME]

Syntax show mac-address-table dynamic interface [IFNAME]

Parameters [IFNAME] Interface name

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table dynamic user EXEC command

to display dynamic unicast MAC address table entries only for

specied interface name.

Example ASUS# show mac-address-table dynamic interface gi1/0/1

7.16 show mac-address-table dynamic mac MACADDR

Syntax show mac-address-table dynamic mac MACADDR

Parameters MACADDR MAC address

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table dynamic user EXEC command

to display dynamic unicast MAC address table entries for

specied MAC address.

Example ASUS# show mac-address-table dynamic mac 0000.0000.0001

7.17 show mac-address-table dynamic vlan <1-3000>

Syntax show mac-address-table dynamic vlan <1-3000>

Parameters <1-3000> VLAN ID

GigaX3124 Layer3 Switch CLI Command Reference

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table dynamic user EXEC command

to display dynamic unicast MAC address table entries for

specied VLAN ID.

Example ASUS# show mac-address-table dynamic vlan 1

7.18 show mac-address-table multicast

Syntax show mac-address-table multicast

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table multicast user EXEC

command to display the Layer 2 multicast entries.

Example ASUS# show mac-address-table multicast

7.19 show mac-address-table multicast MACADDR <1-3000>

Syntax show mac-address-table multicast MACADDR <1-3000>

Parameters MACADDR Group MAC address

<1-3000> VLAN ID

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table multicast user EXEC

GigaX3124 Layer3 Switch CLI Command Reference

command to display the Layer 2 multicast entries for specied

group address and VLAN ID.

Example ASUS# show mac-address-table multicast 0100.5e0a.0a0a 1

7.20 show mac-address-table static

Syntax show mac-address-table static

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table static user EXEC command to

display static unicast MAC address table entries.

Example ASUS# show mac-address-table static

7.21 show mac-address-table static interface IFNAME

Syntax show mac-address-table static interface IFNAME

Parameters IFNAME Interface name

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table static user EXEC command

to display static unicast MAC address table entries for specied

interface name.

Example ASUS# show mac-address-table static interface gi1/0/1

GigaX3124 Layer3 Switch CLI Command Reference

7.22 show mac-address-table static mac MACADDR

Syntax show mac-address-table static mac MACADDR

Parameters MACADDR MAC address

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table static user EXEC command

to display static unicast MAC address table entries for specied

MAC address.

Example ASUS# show mac-address-table static mac 0000.0000.0001

7.23 show mac-address-table static vlan <1-3000>

Syntax show mac-address-table static vlan <1-3000>

Parameters <1-3000> VLAN ID

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show mac-address-table static user EXEC command

to display static unicast MAC address table entries for specied

VLAN ID.

Example ASUS# show mac-address-table static vlan 1

GigaX3124 Layer3 Switch CLI Command Reference

8 IGMPSnoopingConguration:

8.1 ip igmp querier

Syntax ip igmp querier

Parameters

Command Mode Global conguration mode

No/clear no ip igmp querier

Show show ip igmp querier

Default The default is disable

Description This command sets the IGMP querier function enabled globally.

Example ASUS(cong)# ip igmp querier

8.2 ip igmp querier max-response-time <1-255>

Syntax ip igmp querier max-response-time <1-255>

Parameters max-response-time IGMP maximum response time

<1-255> the time value

Command Mode Global conguration mode

No/clear no ip igmp querier max-response-time

Show show ip igmp querier

Default The default is 100 deci-seconds

Description This command sets the maximum response time of IGMP

querier function.

Example ASUS(cong)# ip igmp querier max-response-time 200

8.3 ip igmp querier query-interval <1-65535>

Syntax ip igmp querier query-interval <1-65535>

Parameters query-interval IGMP query interval

<1-65535> the time value

Command Mode Global conguration mode

GigaX3124 Layer3 Switch CLI Command Reference

No/clear no ip igmp querier query-interval

Show show ip igmp querier

Default The default is 125 seconds.

Description This command sets the query-interval of IGMP querier function.

Example ASUS(cong)# ip igmp querier query-interval 250

8.4 ip igmp querier version <v1|v2>

Syntax ip igmp querier version <v1|v2>

Parameters version IGMP version

v1 version 1

v2 version 2

Command Mode Global conguration mode

No/clear no ip igmp querier version

Show show ip igmp querier

Default The default is v2

Description This command sets the IGMP querier version.

Example ASUS(cong)# ip igmp version v1

8.5 ip igmp snooping

Syntax ip igmp snooping

Parameters

Command Mode Global conguration mode

No/clear no ip igmp snooping

Show show ip igmp snooping

Default The default is globally disable

Description This command sets the IGMP snooping function enabled

globally.

Example ASUS(cong)# ip igmp snooping

GigaX3124 Layer3 Switch CLI Command Reference

8.6 ip igmp snooping last-member-query-interval <10-1000>

Syntax ip igmp snooping last-member-query-interval <10-1000>

Parameters last-member-query-interval The time interval for sending IGMP

query since last member leave

<10-1000> the time value

Command Mode Global conguration mode

No/clear no ip igmp snooping last-member-query-interval

Show show ip igmp snooping

Default The default is 500 centi-seconds

Description This command sets the interval time for the IGMP query sent by

switch since last member leave.

Example ASUS(cong)# ip igmp snooping last-member-query-interval 100

8.7 ip igmp snooping report-suppression

Syntax ip igmp snooping report-suppression

Parameters report-suppression To suppress IGMP Reports after rst

message forwarded to Router

Command Mode Global conguration mode

No/clear no ip igmp snooping report-suppression

Show show ip igmp snooping

Default The default is disable

Description This command sets the IGMP snooping report-suppression

function enabled.

Example ASUS(cong)# ip igmp snooping report-suppression

8.8 ip igmp snooping vlan <1-3000>

Syntax ip igmp snooping vlan <1-3000>

Parameters vlan IGMP Snooping enable for a specied vlan

<1-3000> VLAN ID

GigaX3124 Layer3 Switch CLI Command Reference

Command Mode Global conguration mode

No/clear no ip igmp snooping vlan <1-3000>

Show show ip igmp snooping

show ip igmp snooping vlan <1-3000>

Default The default setting of IGMP snooping on each vlan is enabled

after IGMP snooping function is globally enabled.

Description This command sets the IGMP snooping function enabled on

indicated vlan.

Example ASUS(cong)# ip igmp snooping vlan 2

8.9 ip igmp snooping vlan <1-3000> immediate- leave

Syntax ip igmp snooping vlan <1-3000> immediate-leave

Parameters vlan IGMP Snooping enable for a specied vlan

<1-3000> VLAN ID

immediate-leave Enable IGMP Immediate-Leave processing

Command Mode Global conguration mode

No/clear no ip igmp snooping vlan <1-3000> immediate-leave

Show show ip igmp snooping vlan <1-3000>

Default The default setting of igmp immediate-leave on each vlan is

disabled after IGMP snooping function is globally enabled.

Description This command sets the IGMP snooping immediate-leave

function enabled on indicated vlan.

Example ASUS(cong)# ip igmp snooping vlan 2 immediate-leave

8.10 ip igmp snooping vlan <1-3000> mrouter interface IFNAME

Syntax ip igmp snooping vlan <1-3000> mrouter interface IFNAME

Parameters vlan IGMP Snooping enable for a specied vlan

<1-3000> VLAN ID

GigaX3124 Layer3 Switch CLI Command Reference

mrouter IGMP multicast router congurations

interface Specify the multicast router interface

IFNAME Interface name

Command Mode Global conguration mode

No/clear no ip igmp snooping vlan <1-3000> mrouter interface IFNAME

Show show ip igmp snooping vlan <1-3000>

Default None

Description This command sets the IGMP snooping mrouted port interface

on indicated vlan.

Example ASUS(cong)# ip igmp snooping vlan 2 mrouter interface gi1/0/3

8.11 show ip igmp snooping

Syntax show ip igmp snooping

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show ip igmp privileged EXEC command to view

Internet Group Management Protocol (IGMP) global prole.

Example ASUS# show ip igmp snooping

8.12 show ip igmp snooping session

Syntax show ip igmp snooping session

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show ip igmp privileged EXEC command to display

GigaX3124 Layer3 Switch CLI Command Reference

session information.

Example ASUS# show ip igmp snooping session

8.13 show ip igmp snooping vlan [<1-3000>]

Syntax show ip igmp snooping vlan [<1-3000>]

Parameters vlan Snooping information on a specied vlan

<1-3000> VLAN ID

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description Use the show ip igmp snooping vlan privileged EXEC command

to display the Internet Group Management Protocol (IGMP)

snooping conguration for the switch or multicast information for

the selected VLAN.

Example ASUS# show ip igmp snooping vlan 2

GigaX3124 Layer3 Switch CLI Command Reference

9 PortMirroringConguration:

9.1 mirror session <1-2> destination IFNAME

Syntax mirror session <1-2> destination IFNAME

Parameters IFNAME Interface name

Command Mode Global conguration mode

No/clear no mirror session <1-2>

Show show mirror session

Default Not enable this function

Description To set monitor port in mirror mode

Example ASUS(cong)# mirror session 1 destination gi1/0/1

9.2 mirror session <1-2> source IFLIST (both| rx| tx)

Syntax mirror session <1-2> source IFLIST (both| rx| tx)

Parameters IFLIST Interface list

both Ingress+egress mirrored

rx Ingress mirrored

tx Egress mirrored

Command Mode Global conguration mode

No/clear no mirror session <1-2> source IFLIST

Show show mirror session

Default No mirror rule is setting

Description This command mirrors the source interface list trafc to the

destination interface. The mirror type support received trafc, transmitted trafc, or both.

Example ASUS(cong)# mirror session 1 source gi1/0/2-4,gi1/0/7 rx

GigaX3124 Layer3 Switch CLI Command Reference

9.3 show mirror session

Syntax show mirror session

Parameters

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To display current mirror session conguration.

Example ASUS# show mirror session

GigaX3124 Layer3 Switch CLI Command Reference

10 Static Link Aggregation:

10.1 aggregation-link group <1-8> IFLIST

Syntax Aggregation-link trunk <1-8> IFLIST

Parameters <1-8> Trunk Group ID

Command Mode Global conguration mode

No/clear no aggregation-link group <1-8>

show show aggregation-link group [GROUPID]

Default

Description Use the aggregation-link group conguration command on

the switch stack or standalone switch to congure static link

aggregation group.

Example ASUS(cong)# aggregation-link group 1 gi1/0/1-4

Syntax aggregation-link group <1-8> load-balance (src-mac |dst-mac

|src-dst-mac |src-ip |dst-ip |src-dst-ip)

Parameters <1-8> Trunk group ID

src-mac Distribute on source MAC address

dst-mac Distribute on destination MAC address

src-dst-mac Distribution on source+destination MAC address

src-ip Distribute on source IP address

dst-ip Distribute on destination IP address

src-dst-ip Distribute on source+destination IP address

Command Mode Global conguration mode

No/clear

show show aggregation-link group [GROUPID]

GigaX3124 Layer3 Switch CLI Command Reference

Default

Description Use the aggregation-link group conguration command on

the switch stack or standalone switch to congure static

link aggregation load balancing by using source-based or destination-based forwarding methods.

Example ASUS(cong)# aggregation-link group 1 load-balance src-mac

10.3 show aggregation-link group [GROUPID]

Syntax show aggregation-link group [GROUPID]

Parameters [GROUPID] Trunk Group ID

Command Mode Privileged EXEC mode

No/clear

Show

Default

Description To show aggregation-link trunk status.

Example ASUS# show aggregation-link group 1

GigaX3124 Layer3 Switch CLI Command Reference

11 LACPConguration:

11.1 lacp aggregation-link group <1-8> (add|set) IFLIST

Syntax lacp aggregation-link group <1-8> (add|set) IFLIST

Parameters <1-8> GROUPID

add Add interfaces to LACP group

set Set interfaces for LACP group

IFLIST Interface list

Command Mode Global conguration mode

No/clear lacp aggregation-link group delete IFNAME

no lacp aggregation-link group <1-8>

Show show aggregation-link group [GROUPID]

Default

Description This command sets the Link Aggregation Control Protocol (LACP)

operation add/set for the aggregation-link group ports on the switch stack or on a standalone switch.

Example ASUS(cong)# lacp aggregation-link group 2 add gi1/0/1-4

11.2 lacp aggregation-link group <1-8> delete IFNAME

Syntax lacp aggregation-link group <1-8> delete IFNAME

Parameters <1-8> GROUPID

delete Remove interface from LACP group

IFNAME Interface name

Command Mode Global conguration mode

No/clear

Show show aggregation-link group [GROUPID]

Default

GigaX3124 Layer3 Switch CLI Command Reference

Description This command sets the Link Aggregation Control Protocol (LACP)

operation delete for the aggregation-link group ports on the switch stack or on a standalone switch.

Example ASUS(cong)# lacp aggregation-link group 2 delete gi1/0/4

11.3 lacp system-priority <1-65535>

Syntax lacp system-priority <1-65535>

Parameters system-priority LACP system priority

<1-65535> System priority value

Command Mode Global conguration mode

No/clear no lacp system-priority

Show show lacp [GROUPID]

Default The default is 32768.

Description This command sets the system priority for the Link Aggregation

Control Protocol (LACP) on the switch stack or on a standalone switch.

Example ASUS(cong)# lacp system-priority 2000

11.4 show lacp [GROUPID]

Syntax show lacp [GROUPID]

Parameters [GROUPID] Aggregation-link group ID

Command Mode Privileged EXEC mode

Default

Description Use the show lacp user EXEC command to display Link

Aggregation Control Protocol (LACP) channel-group information.

Example ASUS# show lacp 2

GigaX3124 Layer3 Switch CLI Command Reference

12 ACL: Layer 2 Packet Filtering

 Conguration

12.1 mac access-list extended ACLNAME

Syntax mac access-list extended ACLNAME

Parameters access-list named access-list

extended extended access-list

ACLNAME an access-list name

Command Mode Global conguration mode

No/clear no mac access-list extended ACLNAME

Show show access-lists [ACLNAME]

Default

Description This command denes an extended MAC access list using a

name, and enter access-list conguration mode.

Examples ASUS(cong)# mac access-list extended abc

12.2 mac access-group ACLNAME in

Syntax mac access-group ACLNAME in

Parameters ACLNAME a MAC access-list name

Command Mode Interface conguration mode

No/clear no mac access-group

Show show mac access-group [IFNAME]

Default

Description This command attaches an extended MAC access-list to an

interface.

Examples ASUS(cong-if)# mac access-group abc in

GigaX3124 Layer3 Switch CLI Command Reference

12.3 (permit|deny) any any [IFNAME]

Syntax (permit|deny) any any [IFNAME]

Parameters permit Specify packets to forward

deny Specify packets to reject.

any any source Mac address

any any destination Mac address

[IFNAME] Egress interface name

Command Mode Mac access-list extended mode

No/clear no (permit|deny) any any [IFNAME]

Show show access-lists [ACLNAME]

Default

Description This command species one or more conditions denied or

permitted to decide if the packet is forwarded or dropped.

Examples ASUS(cong)# mac access-list extended abc

ASUS(cong-mac-acl)# permit any any [gi1/0/1]

12.4 (permit|deny) any any (cos <0-7> | vlan <1-4094>) [IFNAME]

Syntax (permit|deny) any any (cos <0-7> | vlan <1-4094>) [IFNAME]

Parameters permit Specify packets to forward

deny Specify packets to reject.

any any source Mac address

any any destination Mac address

cos Class of Service

<0-7> the priority value

vlan IEEE 802.1Q VLAN

<1-4094> VLAN ID

[IFNAME] Egress interface name

Command Mode Mac access-list extended mode

GigaX3124 Layer3 Switch CLI Command Reference

No/clear no (permit|deny) any any (cos <0-7> | vlan <1-4094>) [IFNAME]

Show show access-lists [ACLNAME]

Default

Description This command species one or more conditions denied or

permitted to decide if the packet is forwarded or dropped.

Examples ASUS(cong-mac-acl)# permit any any cos 2 [gi1/0/1]

ASUS(cong-mac-acl)# permit any any vlan 10 [gi1/0/1]

12.5 (permit|deny) any any vlan <1-4094> cos <0-7> [IFNAME]

Syntax (permit|deny) any any vlan <1-4094> cos <0-7> [IFNAME]

Parameters permit Specify packets to forward

deny Specify packets to reject.

any any source Mac address

any any destination Mac address

vlan IEEE 802.1Q VLAN

<1-4094> VLAN ID

cos Class of Service

<0-7> the priority value

[IFNAME] Egress interface name

Command Mode Mac access-list extended mode

No/clear no (permit|deny) any any vlan <1-4094> cos <0-7> [IFNAME]

Show show access-lists [ACLNAME]

Default

Description This command species one or more conditions denied or

permitted to decide if the packet is forwarded or dropped.

Examples ASUS(cong-mac-acl)# permit any any vlan 10 cos 2 [gi1/0/1]

GigaX3124 Layer3 Switch CLI Command Reference

12.6 (permit|deny) MACADDR MASK any [IFNAME]

Syntax (permit|deny) MACADDR MASK any [IFNAME]

Parameters permit Specify packets to forward

deny Specify packets to reject.

MACADDR Source MAC address xxxx.xxxx.xxxx

MASK Source MAC address mask xxxx.xxxx.xxxx

any any destination Mac address

[IFNAME] Egress interface name

Command Mode Mac access-list extended mode

No/clear no (permit|deny) MACADDR MASK any [IFNAME]

Show show access-lists [ACLNAME]

Default

Description This command species one or more conditions denied or

permitted to decide if the packet is forwarded or dropped.

Examples ASUS(cong-mac-acl)# permit 0000.0000.0001 0000.0000.00ff

any [gi1/0/1]

12.7 (permit|deny) MACADDR MASK any (cos <0-7> | vlan <1-4094>) [IFNAME]

Syntax (permit|deny) MACADDR MASK any (cos <0-7> | vlan

<1-4094>) [IFNAME]

Parameters permit Specify packets to forward

deny Specify packets to reject.

MACADDR Source MAC address xxxx.xxxx.xxxx

MASK Source MAC address mask xxxx.xxxx.xxxx

any any destination Mac address

cos Class of Service

<0-7> the priority value

vlan IEEE 802.1Q VLAN

<1-4094> VLAN ID

GigaX3124 Layer3 Switch CLI Command Reference

[IFNAME] Egress interface name

Command Mode Mac access-list extended mode

No/clear no (permit|deny) MACADDR MASK any (cos <0-7> | vlan

<1-4094>) [IFNAME]

Show show access-lists [ACLNAME]

Default

Description This command species one or more conditions denied or

permitted to decide if the packet is forwarded or dropped.

Examples ASUS(cong-mac-acl)# permit 0000.0000.0001 0000.0000.00ff

any cost 2 [gi1/0/1]

ASUS(cong-mac-acl)# permit 0000.0000.0001 0000.0000.00ff

any vlan 10 [gi1/0/1]

12.8 (permit|deny) MACADDR MASK any vlan <1-4094> cos <0-7> [IFNAME]

Syntax (permit|deny) MACADDR MASK any vlan <1-4094> cos <0-7>

[IFNAME]

Parameters permit Specify packets to forward

deny Specify packets to reject.

MACADDR Source MAC address xxxx.xxxx.xxxx

MASK Source MAC address mask xxxx.xxxx.xxxx

any any destination Mac address

vlan IEEE 802.1Q VLAN

<1-4094> VLAN ID

cos Class of Service

<0-7> the priority value

[IFNAME] Egress interface name

Command Mode Mac access-list extended mode

No/clear no (permit|deny) MACADDR MASK any vlan <1-4094> cos

<0-7> [IFNAME]

Show show access-lists [ACLNAME]

GigaX3124 Layer3 Switch CLI Command Reference

Default

Description This command species one or more conditions denied or

permitted to decide if the packet is forwarded or dropped.

Examples ASUS(cong-mac-acl)# permit 0000.0000.0001 0000.0000.00ff

any vlan 10 cost 2 [gi1/0/1]

12.9 (permit|deny) host MACADDR any [IFNAME]

Syntax (permit|deny) host MACADDR any [IFNAME]

Parameters permit Specify packets to forward

deny Specify packets to reject.

host A single source host

MACADDR Source MAC address xxxx.xxxx.xxxx

any any destination Mac address

[IFNAME] Egress interface name

Command Mode Mac access-list extended mode

No/clear (permit|deny) host MACADDR any [IFNAME]

Show show access-lists [ACLNAME]

Default

Description This command species one or more conditions denied or

permitted to decide if the packet is forwarded or dropped.

Examples ASUS(cong-mac-acl)# permit host 0000.0000.0001 any

[gi1/0/2]

12.10 (permit|deny) host MACADDR any (cos <0-7> | vlan <1-4094>) [IFNAME]

Syntax (permit|deny) host MACADDR any (cos <0-7> | vlan <1-4094>)

[IFNAME]

Parameters permit Specify packets to forward

deny Specify packets to reject.

host A single source host

MACADDR Source MAC address xxxx.xxxx.xxxx

Asus X3124 User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual