Page 1
10-Gigabit Web Smart Switch - 10-Port
Command-Line Interface (CLI) Management Guide
LGB5510A
Contact
Information
Order toll-free in the U.S. or for FREE technical support 24 /7: Call 877-877-BBOX
(outside U.S. call 724-746-5500)
www.blackbox.com • info@blackbox.com
Page 2
Table of Contents
Table of Contents
1 CLI Management ................................................................................................................................................................... 4
1-1 LO G I N ............................................................................................................................................................................. 4
1-2 COMMANDS OF CLI ....................................................................................................................................................... 4
2 CLEAR of CLI ......................................................................................................................................................................... 7
3 CONFIGURE Commands of CLI ..............................................................................................................................................
ACCESS - LIST ........................................................................................................................................................................27
3-1 NO .............................................................................................................................................................................28
3-2 QOS ............................................................................................................................................................................. 43
3-3 SPANNING-TREE ...........................................................................................................................................................45
4 COPY Commands of CLI ..................................................................................................................................................... 47
5 DELETE Commands of CLI ..................................................................................................................................................48
6 DIR Commands of CLI ........................................................................................................................................................49
7 DISABLE Commands of CLI ................................................................................................................................................50
8 FIRMWARE of CLI ............................................................................................................................................................... 51
9 PING of CLI ......................................................................................................................................................................... 52
10 RELOAD of CLI ...................................................................................................................................................................54
11 SHOW of CLI ...................................................................................................................................................................... 55
12 TERMINAL of CLI ...............................................................................................................................................................76
13 Traceroute .......................................................................................................................................................................... 77
14 CLI COMMAND REFERENCE .............................................................................................................................................. 78
877-877-2269 | blackbox.com
Page 3
Publication date:Dec., 2015
Revision A1
ii
ABOUT THIS GUIDE
PURPOSE This guide gives specific information on how to operate
and use the management functions of the switch.
AUDIENCE The guide is intended for use by network administrators who
are responsible for operating and maintaining network
equipment; consequently, it assumes a basic working
knowledge of general switch functions, the Internet Protocol
(IP), and Simple Network Management Protocol (SNMP).
CONVENTIONS The following conventions are used throughout this
guide to show information:
NOTE: Emphasizes important information or calls your attention to
related features or instructions.
CAUTION:
Alerts you to a potential hazard that could cause loss of
data, or damage the system or equipment.
WARNING:
Alerts you to a potential hazard that could cause personal
injury.
Revision History
Release
Date
Revision
0.83.3*
2015/12/18
A1 *
Page 4
Publication date: , 2015
1 CLI Management
1-1 Login
The command-line interface (CLI) is a text-based interface. Users can access the CLI through either a direct serial
connection to the device or a Telnet session. The default username and password to login into the Managed Switch are
listed below:
Username: admin
Password: <none>
Note: <none> means empty string
After you login successfully, the prompt will be shown as “<sys_name>#“ . See the following two figures. You will log in as
an administrator and have the privilege for setting the Managed Switch. If you log in a user (not the administrator), the
prompt will be shown as “<sys_name>>”. You can only set the system when you are logged in as administrator. Each
CLI command has its privilege.
1-2 Commands of CLI
The CLI is divided into several modes. If a user has enough privileges to run a particular command, the user has to
run the command in the correct mode. To see the commands of the mode, input “?” after the system prompt, then all
commands will be listed in the screen.
Commands that reside in the corresponding modes can run only in that mode. If a user wants to run a particular command,
the user has to change to the appropriate mode. The command modes are organized as a tree, and users start in enable
mode.
1-3 Global Commands of CLI
Username: admin
Password:
LGB5510A#
Page 5
Publication date: , 2015
LGB5510A#
! Comments
clear Reset functions
configure Enter configuration mode
copy Copy from source to destination
delete Delete one file in flash file system
dir Directory of all files in flash file system
disable Turn off privileged commands
exit Exit from the CLI
firmware firmware
more Display file
ping Send ICMP echo messages
reload Reload system
show Show running system information
terminal Set terminal line parameters
traceroute Trace the route to HOST
LGB5510A#
Page 6
Publication date: , 2015
exit
Exit from EXEC mode.
Syntax:
exit
Parameter:
None.
Example:
end
Go back to EXEC mode.
Syntax:
end
Example:
LGB5510A(config)# exit
LGB5510A#
LGB5510A (config)# end
LGB5510A#
Page 7
Publication date: , 2015
2 CLEAR of CLI
Table : CLEAR Commands
Command Function
access-list Access list
logging Syslog
mac MAC Address Table
statistics Clear statistics for a given interface
access-list
Access list.
Syntax:
Clear access-list ace statistics
Parameter:
ace Access list entry
statistics Traffic statistics
Example:
logging
Syslog.
Syntax
clear logging [ info ] [ warning ] [ error ] [ switch <switch_list> ]
Parameter
error Error
info Information
warning Warning
EXAMPLE
LGB5510A mac
LGB5510A# clear access-list ace statistics
LGB5510A#
Page 8
Publication date: , 2015
MAC Address Table.
Syntax
Clear mac address-table
Parameter
address-table Flush MAC Address table.
EXAMPLE
statistics
Clear statistics for a given interface
Syntax
clear statistics interface <port_type> <port_type_list>
clear statistics <port_type> <port_type_list>
Parameter
<port_type_list> 1/1–10 for 10 Gigabit Ethernet
EXAMPLE
LGB5510A# clear mac address-table
LGB5510A#
LGB5510A# clear statistics interface 10GigabitEthernet 1/1-5
LGB5510A#
Page 9
Publication date: , 2015
3 CONFIGURE Commands of CLI
Table : CONFIGURE Commands
Command Function
terminal Configure from the terminal
access-list Access list
aggregation Aggregation mode
clock Configure time-of-day clock
do Run exec commands in config mode
end Go back to EXEC mode
exit Exit from Configuration mode
interface Select an interface to configure
ip Internet Protocol
ipmc IPv4/IPv6 multicast configuration
lacp LACP settings
lldp LLDP configurations.
logging Syslog
loop-protect Loop protection configuration
mac MAC table entries/configuration
monitor Set monitor configuration.
no Negate a command or set its defaults
ntp Configure NTP
qos Quality of Service
spanning-tree Spanning Tree protocol
Page 10
Publication date: , 2015
system Set the SNMP server's configurations
vlan VLAN commands
terminal
Configure from the terminal.
Syntax
configure Terminal
EXAMPLE
aggregation
Aggregation mode.
SYNTAX
aggregation mode {dst-ip | dst-mac | src-dst-ip | src-dst-mac | src-ip | src-mac}
Parameter
mode Traffic distribution mode
dst-ip Destination IP address affects the distribution
dst-mac Destination MAC affects the distribution
src-dst-ip Source and Destination IP affect the distribution
src-dst-mac Source and Destination MAC affect the distribution
src-ip Source IP address affects the distribution
src-mac Source MAC affects the distribution
EXAMPLE
LGB5510A# configure terminal
LGB5510A(config)#
Page 11
Publication date: , 2015
clock
Configure time-of-day clock.
SYNTAX
clock set <icliDate> <icliTime>
clock summer-time mode_type <month> <week> <weekday> <hour> <month> <week number> <week to end>
<hour to end> <offset minutes>
clock timezone <word_var> <hour_var> [ <minute_var> ]
Parameter
set set clock
summer-time Configure summer (daylight savings) time
timezone Configure time zone
<date> yyyy/mm/dd
<time> hh:mm:ss
<2000-2097> Year to start
hh:mm Time to start (hh:mm)
<1-12> Month to end
<1-31> Date to end
<2000-2097> Year to end
hh:mm Time to end (hh:mm)
<1-1440> Offset to add in minutes
<1-5> Week number to start
<1-7> Weekday to start
<1-12> Month to start
LGB5510A(config)# aggregation mode dst-ip
LGB5510A(config)#
Page 12
Publication date: , 2015
EXAMPLE
do
To run exec commands in config mode.
SYNTAX
do < LINE >{[< LINE >]}
Parameter
<LINE> Exec Command
EXAMPLE
interface
Select an interface to configure.
SYNTAX
interface ( <port_type> [ <plist> ] )
interface vlan <vlist>
LGB5510A(config)# clock set 2015/12/14 01:11:11
LGB5510A(config)# do show clock
System Time : 2015-12-14 01:11:30
LGB5510A(config)# clock summer-time enable 1 1 1 1 1 1 1 1 1
LGB5510A(config)#
LGB5510A(config)# do show vlan
VLAN Name Ports
--------------------------------------------------------------------------------
--------------------
1 default GigabitEthernet 1/1, GigabitEthernet 1/2,
GigabitEthernet 1/3,
GigabitEthernet 1/4, GigabitEthernet 1/5
LGB5510A(config)#
Page 13
Publication date: , 2015
Parameter
vlan VLAN interface configurations
<vlan_list> List of VLAN interface numbers, 1-4095
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
EXAMPLE
ip
Internet Protocol.
SYNTAX
ip arp inspection
ip arp inspection entry interface <port_type> <in_port_type_id> <vlan_var> <mac_var> <ipv4_var>
ip arp inspection translate [ interface <port_type> <in_port_type_id> <vlan_var> <mac_var> <ipv4_var> ]
ip arp inspection vlan <in_vlan_list>
ip arp inspection vlan <in_vlan_list> logging { deny | permit | all }
ip dhcp excluded-address <low_ip> [ <high_ip> ]
ip dhcp pool <pool_name>
ip dhcp relay
ip dhcp relay information option
ip dhcp relay information policy { drop | keep | replace }
ip dhcp server
ip dhcp snooping
LGB5510A(config)# interface vlan 1
LGB5510A(config-if-vlan)# ip address 192.168.1.22 255.255.255.0
LGB5510A(config-if-vlan)# exit
LGB5510A(config)# interface 10GigabitEthernet 1/1-10
LGB5510A(config-if)# flowcontrol on
LGB5510A(config-if)#
Page 14
Publication date: , 2015
ip igmp host-proxy [ leave-proxy ]
ip igmp snooping
ip igmp snooping vlan <v_vlan_list>
ip igmp ssm-range <v_ipv4_mcast> <ipv4_prefix_length>
ip igmp unknown-flooding
ip name-server { <v_ipv4_addr> | dhcp [ interface vlan <v_vlan_id> ] }
ip route <v_ipv4_addr> <v_ipv4_netmask> <v_ipv4_gw>
ip source binding interface <port_type> <in_port_type_id> <vlan_var> <ipv4_var> <mac_var>
ip verify source
ip verify source translate
Parameter
arp Address Resolution Protocol
dhcp Dynamic Host Configuration Protocol
igmp Internet Group Management Protocol
name-server Domain Name System
route Add IP route
source Source command
ssh Secure Shell
verify Verify command
inspection ARP inspection
entry ARP inspection entry
interface ARP inspection entry interface config
<port_type_id> Port ID in the format of switch-no/port-no
<vlan_id> Select a VLAN id to configure
<mac_ucast> Select a MAC address to configure
<ipv4_ucast> Select an IP Address to configure
Page 15
Publication date: , 2015
deny Log denied entries
permit Log permitted entries
all Log all entries
translate Arp inspection translate all entries
vlan Arp inspection vlan setting
<vlan_list> Arp inspection vlan list
relay DHCP relay agent information
information DHCP information option <Option 82>
option DHCP option
information DHCP information option(Option 82)
policy Policy for handling the receiving DHCP packet already include the information option
drop Drop the package when receive a DHCP message that already contains relay information
keep Keep the original relay information when receive a DHCP message that already contains it
server Enable DHCP server
snooping DHCP snooping
proxy DNS proxy service
secure-redirect Secure HTTP web rediction
secure-server Secure HTTP web server
snooping Snooping IGMP
<word16> Profile name in 16 char's
vlan IGMP VLAN
ssm-range IPv4 address range of Source Specific Multicast
<ipv4_mcast> Valid IPv4 multicast address
<4-32> Prefix length ranges from 4 to 32
unknown-flooding Flooding unregistered IPv4 multicast traffic
<ipv4_ucast> A valid IPv4 unicast address
Page 16
Publication date: , 2015
dhcp Dynamic Host Configuration Protocol
interface Select an interface to configure
vlan VLAN Interface
<vlan_id> VLAN identifier(s): VID
<ipv4_addr> Network
<ipv4_netmask> Netmask
<ipv4_addr> Gateway
binding IP source binding
interface IP source binding entry interface config
* All switches or All ports
10 Gigabitethernet 10 Gigabit Ethernet Port
<port_type_id> Port ID in the format of switch-no/port-no, ex 1/1-10 for 10 Gigabit Ethernet
<vlan_id> Select a VLAN id to configure
<ipv4_ucast> Select an IP Address to configure
<ipv4_netmask> Select a subnet mask to configure
<mac_ucast> Select a MAC address to configure
source verify source
limit limit command
<0-2> the number of limit
translate IP verify source translate all entries
loggin ARP inspection vlan loging mode config
EXAMPLE
Page 17
Publication date: , 2015
ipmc
IPv4/IPv6 multicast configuration.
SYNTAX
ipmc profile
ipmc profile <profile_name>
ipmc range <entry_name> { <v_ipv4_mcast> [ <v_ipv4_mcast_1> ] | <v_ipv6_mcast> [ <v_ipv6_mcast_1> ] }
Parameter
profile IPMC profile configuration
range A range of IPv4/IPv6 multicast addresses for the profile
< word16> Range entry name in 16 char's
<ipv4_mcast> Valid IPv4 multicast address
<ipv6_mcast> Valid IPv6 multicast address
EXAMPLE
lacp
LACP settings.
LGB5510A(config)# ip arp inspection
LGB5510A(config)# ip dhcp relay
LGB5510A(config)# ip helper-address 192.168.1.1
LGB5510A(config)# ip igmp snooping vlan 3
LGB5510A(config)# ip name-server 192.168.1.6
LGB5510A(config)# ip route 192.168.1.1 255.255.255.0 192.168.1.100
LGB5510A(config)# ip routing
LGB5510A(config)# ip verify source translate
IP Source Guard:
Translate 0 dynamic entries into static entries.
LGB5510A(config)# ipmc profile test
LGB5510A(config-ipmc-profile)#
Page 18
Publication date: , 2015
SYNTAX
lacp system-priority <1-65535>
Parameter
system-priority System priority
<1-65535> Priority value, lower means higher priority
EXAMPLE
lldp
LACP configurations.
SYNTAX
lldp holdtime <2-10>
lldp med datum { wgs84 | nad83_navd88 | nad83_mllw }
lldp med fast <1-10>
lldp med location-tlv altitude { meters | floors } <word11>
lldp med location-tlv civic-addr { country | state | county | city | district | block | street | leading-street-direction |
trailing-street-suffix | street-suffix | house-no | house-no-suffix | landmark | additional-info | name | zip-code |
building | apartment | floor | room-number | place-type | postal-community-name | p-o-box | additional-code }
<string250>
lldp med location-tlv elin-addr <dword25>
lldp med location-tlv latitude { north | south } <word8>
lldp med location-tlv longitude { west | east } <word9>
lldp med media-vlan policy-list <range_list>
lldp med media-vlan-policy <0-31> { voice | voice-signaling | guest-voice-signaling | guest-voice |
softphone-voice | video-conferencing | streaming-video | video-signaling } { tagged <vlan_id> | untagged }
[ l2-priority <0-7> ] [ dscp <0-63> ]
lldp reinit <1-10>
LGB5510A(config)# lacp system-priority 333
LGB5510A(config)#
Page 19
Publication date: , 2015
lldp timer <5-32768>
lldp transmission-delay <1-8192>
Parameter
holdtime Sets LLDP hold time (The neighbor switch will
discarded the LLDP information after "hold time"
multiplied with "timer" seconds ).
med Media Endpoint Discovery.
reinit LLDP tx reinitialization delay in seconds.
timer Sets LLDP TX interval (The time between each LLDP
frame transmitted in seconds).
transmission-delay Sets LLDP transmision-delay. LLDP transmission delay
(the amount of time that the transmission of LLDP
frames will delayed after LLDP configuration has
changed) in seconds.)
<2-10> 2-10 seconds.
<1-10> 1-10 seconds.
<5-32768> 5-32768 seconds.
<1-8192> 1-8192 seconds.
datum Datum (geodetic system) type.
fast Number of times to repeat LLDP frame transmission at
fast start.
location-tlv LLDP-MED Location Type Length Value parameter.
media-vlan-policy Use the media-vlan-policy to create a policy, which
can be assigned to an interface.
nad83_mllw Mean lower low water datum 1983
nad83_navd88 North American vertical datum 1983
Page 20
Publication date: , 2015
wgs84 World Geodetic System 1984
altitude Altitude parameter
meter Altitude value
floors Altitude value
civic-addr Civic address information and postal information
country The two-letter ISO 3166 country code in capital ASCII letters - Example: DK, DE or
US.
state National subdivisions (state, canton, region, province, prefecture).
county County, parish, gun (Japan), district.
city City, township, shi (Japan) - Example: Copenhagen.
district City division, borough, city district, ward, chou (Japan).
block Neighbourhood, block.
street Street - Example: Poppelvej.
leading-street-direction Leading street direction - Example: N.
trailing-street-suffix Trailing street suffix - Example: SW.
street-suffix Street suffix - Example: Ave, Platz.
house-no House number - Example: 21.
house-no-suffix House number suffix - Example: A, 1/2.
landmark Landmark or vanity address - Example: Columbia University.
additional-info Additional location info - Example: South Wing.
name Name (residence and office occupant) - Example: Flemming Jahn.
zip-code Postal/zip code - Example: 2791.
building Building (structure) - Example: Low Library.
apartment Unit (Apartment, suite) - Example: Apt 42.
floor Floor - Example: 4.
room-number Room number - Example: 450F.
Page 21
Publication date: , 2015
place-type Place type - Example: Office.
postal-community-name Postal community name - Example: Leonia.
p-o-box Post office box (P.O. BOX) - Example: 12345.
additional-code Additional code - Example: 1320300003.
<string250> Value for the corresponding selected civic address.
elin-addr Emergency Location Identification Number, (e.g. E911 and others), such as defined
by TIA or NENA.
<dword25> ELIN value
north Setting latitude direction to north.
south Setting latitude direction to south.
<word8> Latitude degrees (0.0000-90.0000).
policy-list Assignment of policies.
<range_list> Policies to assign to the interface.
<0-31> Policy id for the policy which is created.
voice Create a voice policy.
voice-signaling Create a voice signaling policy.
guest-voice-signaling Create a guest voice signaling policy.
guest-voice Create a guest voice policy.
softphone-voice Create a softphone voice policy.
video-conferencing Create a video conferencing policy.
streaming-video Create a streaming video policy.
video-signaling Create a video signaling policy.
tagged The policy uses tagged frames.
<vlan_id> The VLAN the policy uses tagged frames.
untagged The policy uses un-tagged frames.
l2-priority Layer 2 priority.
Page 22
Publication date: , 2015
<0-7> Priority 0-7
dscp Differentiated Services Code Point.
<0-63> DSCP value 0-63.
EXAMPLE
logging
Syslog.
SYNTAX
logging host { <ipv4_ucast> | <hostname> }
logging level { info | warning | error }
logging on
Parameter
host host
<ipv4_ucast> IP address of the log server
<hostname> Donain name of the log server
level level
info Information
warning Warning
error Error
on Enable syslog server
LGB5510A(config)# lldp holdtime 5
LGB5510A(config)# lldp med fast 5
LGB5510A(config)# lldp reinit 3
LGB5510A(config)# lldp timer 555
LGB5510A(config)# lldp transmission-delay 333
Note: According to IEEE 802.1AB-clause 10.5.4.2 the transmission-delay must not
be larger than LLDP timer * 0.25. LLDP timer changed to 13332
Page 23
Publication date: , 2015
EXAMPLE
loop-protect
Loop protection configuration.
SYNTAX
loop-protect
loop-protect shutdown-time <0-604800>
loop-protect transmit-time <1-10>
Parameter
shutdown-time Loop protection shutdown time interval
<0-604800> Shutdown time in second
transmit-time Loop protection transmit time interval
<1-10> Transmit time in second
EXAMPLE
mac
MAC table entries/configuration.
SYNTAX
mac address-table aging-time <0,10-1000000>
mac address-table static <mac_addr> vlan <vlan_id> interface <port_type> <port_type_list>
LGB5510A(config)# logging level error
LGB5510A(config)# logging on
LGB5510A(config)#
LGB5510A(config)# loop-protect
LGB5510A(config)# loop-protect shutdown-time 333
LGB5510A(config)# loop-protect transmit-time 3
Page 24
Publication date: , 2015
Parameter
address-table Mac Address Table
aging-time Mac address aging time
<0,10-1000000> Aging time in seconds, 0 disables aging
static Static MAC address
<mac_addr> 48 bit MAC address: xx:xx:xx:xx:xx:xx
vlan VLAN keyword
<vlan_id> VLAN IDs 1-4095
interface Select an interface to configure
10GigabitEthernet 10 Gigabit Ethernet Port
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
EXAMPLE
monitor
Set monitor configuration.
SYNTAX
monitor destination interface <port_type> <port_type_id>
monitor source { interface <port_type> <port_type_list> | cpu } { both | rx | tx }
Parameter
destination The destination port. That is the port that trafficed should be mirrored to.
interface Interface to mirror traffic to.
source The source port. That is the source port to be mirrored to the destination port.
interface Mirrot interface traffic.
* All switches or all ports.
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
LGB5510A(config)# mac address-table aging-time 3333
LGB5510A(config)#
Page 25
Publication date: , 2015
both Setting source port to both will mirror both ingress and egress traffic.
rx Setting source port to rx will mirror bothingress traffic.
tx Setting source port to tx will mirror both egress traffic.
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
EXAMPLE
ntp
Configure NTP.
SYNTAX
ntp
ntp server <1-5> ip-address <word63>
ntp interval <1-5> <interval range>
Parameter
server Configure NTP server
<1-5> Index number
ip-address IP address
<word63> Domain name (word63)
< interval range> Interval val range from 10 to 2880 min. (10..2880)
EXAMPLE
system
Set the SNMP server's configurations
LGB5510A(config)# monitor source interface 10GigabitEthernet 1/1-2 both
LGB5510A(config)#
LGB5510A(config)# ntp server 1 ip-address 1234
LGB5510A(config)# ntp interval 144
LGB5510A(config)#
Page 26
Publication date: , 2015
SYNTAX
system contact < word128 >
system location < word128 >
system name < word128 >
Parameter
contact Set the SNMP server's contact string
location Set the SNMP server's location string
name Set the SNMP server's system model name string
<line255> Maximum number of 255 character strings
EXAMPLE
vlan
VLAN commands.
SYNTAX
vlan <vlan_list>
vlan ethertype s-custom-port <0x0600-0xffff>
vlan protocol { { eth2 { <0x600-0xffff> | arp | ip | ipx | at } } | { snap { <0x0-0xffffff> | rfc_1042 | snap_8021h }
<0x0-0xffff> } | { llc <0x0-0xff> <0x0-0xff> } } group <word16>
Parameter
<vlan_list> ISL VLAN IDs 1-4095
ethertype Ether type for Custom S-ports
protocol Protocol-based VLAN commands
s-custom-port Custom S-ports configuration
<0x0600-0xffff> Ether type (Range: 0x0600-0xffff>
LGB5510A(config)# system contact 222
LGB5510A(config)# system location 333
LGB5510A(config)# system name GE
LGB5510A(config)#
Page 27
Publication date: , 2015
eth2 Ethernet-based VLAN commands
<0x600-0xffff> Ether Type(Range: 0x600 - 0xFFFF)
arp Ether Type is ARP
ip Ether Type is IP
ipx Ether Type is IPX
at Ether Type is AppleTalk
snap SNAP-based VLAN group
<0x0-0xffffff> SNAP OUI (Range 0x000000 - 0XFFFFFF)
rfc_1042 SNAP OUI is rfc_1042
snap_8021h SNAP OUI is 8021h
<0x0-0xffff> PID (Range: 0x0 - 0xFFFF)
llc LLC-based VLAN group
<0x0-0xff> DSAP (Range: 0x00 - 0xFF)
<0x0-0xff> SSAP (Range: 0x00 - 0xFF)
group Protocol-based VLAN group commands
<word16> Group Name (Range: 1 - 16 characters)
EXAMPLE
access-list
Table : configure – access-list Commands
Command Function
ace Access list entry
ace
LGB5510A(config)# vlan ip-subnet id 111 192.168.1.22 192.168.1.22 vlan 1
LGB5510A(config-vlan)#
LGB5510A(config)#
Page 28
Publication date: , 2015
Access list entry.
SYNTAX
access-list ace <1-384> < action | ingress | logging | mirror | shoutdown | metering | tag | tag | tag-priority | vid |
frame-type >
Parameter
action Access list action
ingress Ingress Por
logging Logging frame information
mirror Mirror frame to destination mirror port
shutdown Shutdown incoming port
metering Bandwidth limitation on the traffic flow
tag Tag
tag-priority Tag-priority
vid VID field
frame-type Frame type
EXAMPLE
3-1 no
Negate a command or set its defaults
Table : configure – no Commands
Command Function
access-list Access list
aggregation Aggregation mode
clock Configure time-of-day clock
interface none
LGB5510A(config)# access-list ace 111 action deny
LGB5510A(config)#
Page 29
Publication date: , 2015
ip Internet Protocol
ipmc IPv4/IPv6 multicast configuration
lacp LACP settings
lldp LLDP configurations.
logging Syslog
loop-protect Loop protection configuration
mac MAC table entries/configuration
monitor Set monitor configuration.
ntp Configure NTP
qos Quality of Service
spanning-tree STP Bridge
system Set the SNMP server's configurations
upnp Set UPnP's configurations
username Establish User Name Authentication
vlan Vlan commands
access-list
Access list
SYNTAX
no access-list ace <1~256>
Parameter
ace Access list entry
<AceId : 1-256> ACE ID
EXAMPLE
aggregation
Aggregation mode
SYNTAX
no aggregation mode
LGB5510A(config)# no access-list ace 111
LGB5510A(config)#
Page 30
Publication date: , 2015
Parameter
mode Traffic distribution mode
EXAMPLE
clock
Configure time-of-day clock
SYNTAX
no clock summer-time
no clock timezone
Parameter
summer-time Configure summer (daylight savings) time
timezone Configure time zone
EXAMPLE
interface
SYNTAX
no interface vlan < vlan_list >
Parameter
vlan Vlan interface configurations
<vlan_list> Vlan list
EXAMPLE
LGB5510A(config)# no aggregation mode
LGB5510A(config)#
LGB5510A(config)# no clock summer-time
LGB5510A(config)# no clock timezone
LGB5510A(config)#
LGB5510A(config)# no interface vlan 10
LGB5510A(config)#
Page 31
Publication date: , 2015
Ip
Set system's network name.
SYNTAX
no ip arp inspection
no ip arp inspection entry interface 10Gigabitethernet <port_type_id> <vlan_id> <mac_ucast> <ipv4_ucast>
no ip arp inspection vlan <vlan_list> [logging]
no dhcp execluded-address [<ip_address> [<ip_address>]]
no dhcp pool <WORD>
no ip dhcp relay [information {option| policy }]
no ip dhcp snooping
no ip igmp host-proxy [ leave-proxy ]
no ip igmp snooping
no ip igmp snooping vlan [ <vlan_list> ]
no ip igmp ssm-range
no ip igmp unknown-flooding
no ip name-server
no ip route <ipv4_addr> <ipv4_netmask> <ipv4_addr>
no ip source binding interface 10Gigabitethernet <port_type_id> <vlan_id>
<ipv4_ucast>{ <ipv4_netmask>|<mac_ucast>}
no ip verify source
Parameter
arp Address Resolution Protocol
inspection ARP inspection
entry ARP inspection entry
interface ARP inspection entry interface config
Page 32
Publication date: , 2015
dhcp Dynamic Host Configuration Protocol
execluded-address Prevent DHCP from assigning certain address
pool Configure DHCP address pools
relay DHCP relay agent configuration
server Enable DHCP server
snoping DHCP snooping
information DHCP information option(Option 82)
option DHCP option
policy Policy for handling the receiving DHCP packet already include the information option
snooping DHCP snooping
igmp Internet Group Management Protocol
snooping Snooping IGMP
vlan IGMP VLAN
<vlan_list> VLAN identifier(s): VID
ssm-range IPv4 address range of Source Specific Multicast
unknown-flooding Flooding unregistered IPv4 multicast traffic
name-server Domain Name System
Route None
<ipv4_addr> Network
<ipv4_netmask> Netmask
<ipv4_gateway> Gateway
routing Disable routing for IPv4 and IPv6
source Source command
binding IP source binding
interface IP source binding entry interface config
<port_type_id> Port ID in the format of switch-no/port-no, ex., 1/1-10 for 10 Gigabit Ethernet
Page 33
Publication date: , 2015
<vlan_id> Select a VLAN id to configure
<ipv4_ucast> Select an IP Address to configure
<ipv4_netmask> Select a subnet mask to configure
<mac_ucast> Select a MAC address to configure
verify Verify command
source Verify source
EXAMPLE
ipmc
IPv4/IPv6 multicast configuration
SYNTAX
no ipmc mode
no ipmc profile <Profilename : word16>
no ipmc range <Entryname : word16>
Parameter
profile IPMC profile configuration
<Profilename : word16> Profile name in 16 char's
range A range of IPv4/IPv6 multicast addresses for the profile
<Entryname : word16> Range entry name in 16 char's
EXAMPLE
LGB5510A(config)# no ip dhcp snooping
LGB5510A(config)# no ip igmp snooping
LGB5510A(config)# no ip arp inspection
LGB5510A(config)# no ip name-server
LGB5510A(config)#
LGB5510A(config)# no ipmc mode
LGB5510A(config)#
Page 34
Publication date: , 2015
lacp
LACP settings
SYNTAX
no lacp system-priority <1-65535>
Parameter
system-priority System priority
EXAMPLE
lldp
LLDP configurations..
SYNTAX
no lldp {timer | holdtime | reinit | transmission-delay}
no lldp med {datum | fast }
no lldp med location-tlv {altitude | latitude | longitude | elin-addr}
no lldp med location-tlv civic-addr { country | state | county | city | district | block | street | leading-street-direction |
trailing-street-suffix | street-suffix | house-no | house-no-suffix | landmark | additional-info | name | zip-code |
building | apartment | floor | room-number | place-type | postal-community-name | p-o-box | additional-code }
no lldp med media-vlan-policy <0~31>
Parameter
holdtime Sets LLDP hold time (The neighbor switch will
discarded the LLDP information after "hold time"
multiplied with "timer" seconds ).
med Media Endpoint Discovery.
reinit Sets LLDP reinitialization delay.
LGB5510A(config)# no lacp system-priority
LGB5510A(config)#
Page 35
Publication date: , 2015
timer Sets LLDP TX interval (The time between each LLDP
frame transmitted in seconds).
transmission-delay Sets LLDP transmision-delay. LLDP transmission delay
(the amount of time that the transmission of LLDP
frames will delayed after LLDP configuration has
changed) in seconds.)
datum Set datum to default value.
fast Set fast repeat count to default value.
location-tlv LLDP-MED Location Type Length Value parameter.
media-vlan-policy Use the media-vlan-policy to create a policy, which
can be assigned to an interface.
altitude Setting altitude to default.
civic-addr Civic address information and postal information
elin-addr Set elin address to default value.
latitude Setting Latitude parameter to default.
longitude Setting longitude to default.
additional-code Additional code - Example: 1320300003.
additional-info Additional location info - Example: South Wing.
apartment Unit (Apartment, suite) - Example: Apt 42.
block Neighbourhood, block.
building Building (structure) - Example: Low Library.
city City, township, shi (Japan) - Example: Copenhagen.
country The two-letter ISO 3166 country code in capital
ASCII letters - Example: DK, DE or US.
county County, parish, gun (Japan), district.
district City division, borough, city district, ward, chou (Japan).
Page 36
Publication date: , 2015
floor Floor - Example: 4.
house-no House number - Example: 21.
house-no-suffix House number suffix - Example: A, 1/2.
landmark Landmark or vanity address - Example: Columbia University.
leading-street-direction Leading street direction - Example: N.
name Name (residence and office occupant) - Example: Flemming Jahn.
p-o-box Post office box (P.O. BOX) - Example: 12345.
place-type Place type - Example: Office.
postal-community-name Postal community name - Example: Leonia.
<0~31> Policy to delete.
EXAMPLE
logging
Syslog.
SYNTAX
no logging host
no logging on
Parameter
host host
on Enable syslog server
LGB5510A(config)# no lldp holdtime
LGB5510A(config)# no lldp med media-vlan-policy 1
LGB5510A(config)# no lldp reinit
LGB5510A(config)# no lldp timer
LGB5510A(config)# no lldp transmission-delay
LGB5510A(config)#
Page 37
Publication date: , 2015
EXAMPLE
loop-protect
Loop protection configuration
SYNTAX
no loop-protect
no loop-protect shutdown-time
no loop-protect transmit-time
Parameter
shutdown-time Loop protection shutdown time interval
transmit-time Loop protection transmit time interval
EXAMPLE
mac
MAC table entries/configuration
SYNTAX
no mac address-table aging-time
no mac address-table static <mac_addr> vlan <vlan_id> interface {*|10Gigabitethernet [<port_type_list>]}
Parameter
address-table Mac table entries configuration/table
LGB5510A(config)# no logging host
LGB5510A(config)# no logging on
LGB5510A(config)#
LGB5510A(config)# no loop-protect shutdown-time
LGB5510A(config)# no loop-protect transmit-time
LGB5510A(config)#
Page 38
Publication date: , 2015
aging-time Mac address aging time
static Static MAC address
<mac_addr> 48 bit MAC address: xx:xx:xx:xx:xx:xx
vlan VLAN keyword
<vlan_id> VLAN IDs 1-4095
interface Select an interface to configure
EXAMPLE
monitor
Set monitor configuration.
SYNTAX
no monitor destination
no monitor source { interface 10Gigabitethernet <port_type_list> | cpu}
Parameter
Destination
source The source port(s). That is the ports to be mirrored to the destination port.l
cpu Mirror CPU traffic.
interface Mirror Interface traffic.
10GigabitEthernet 10 Gigabit Ethernet Port
<port_type_list> 1/1-10 for 10 Gigabite thernet
EXAMPLE
LGB5510A(config)# no mac address-table aging-time
LGB5510A(config)#
LGB5510A(config)# no monitor destination
LGB5510A(config)# no monitor source interface *
LGB5510A(config)#
Page 39
Publication date: , 2015
ntp
Configure NTP.
SYNTAX
no ntp
no ntp server
no ntp interval
Parameter
server Configure NTP server
interval Configure NTP interval
EXAMPLE
spanning-tree
STP Bridge.
SYNTAX
no spanning-tree mode
no spanning-tree mst <instance> priority
no spanning-tree mst <instance> vlan
no spanning-tree mst {forward-time | mas-age | max-hops | |name}
Parameter
mode STP protocol mode
mst STP bridge instance
<instance> MST instance ID, 0 is for CIST (0..4094)
VLAN VLAN keyword
LGB5510A(config)# no ntp server
LGB5510A(config)# no ntp interval
LGB5510A(config)#
Page 40
Publication date: , 2015
priority Priority of the instance
forward-time Delay between port states
max-hops MSTP bridge max hpp count
max age Max bridge age before timeout
name Name keyword
EXAMPLE
upnp
Set UPnP's configurations.
SYNTAX
no upnp
no upnp advertising-duration
no upnp ttl
Parameter
advertising-duration Set advertising duration
ttl Set TTL value
EXAMPLE
LGB5510A(config)# no spanning-tree mode
LGB5510A(config)# no spanning-tree mst max-age
LGB5510A(config)# no spanning-tree mst forward-time
LGB5510A(config)# no spanning-tree mst 1 vlan
LGB5510A(config)#
LGB5510A(config)# no upnp advertising-duration
LGB5510A(config)# no upnp ttl
LGB5510A(config)#
Page 41
Publication date: , 2015
username
Establish User Name Authentication.
SYNTAX
no username <Username : word31>
Parameter
<Username : word31> User name allows letters, numbers and underscores
EXAMPLE
vlan
Vlan commands.
SYNTAX
no vlan <vlan_list>
no vlan protocol { { eth2 { <0x600-0xffff> | arp | ip | ipx | at } } | { snap { <0x0-0xffffff> | rfc_1042 | snap_8021h }
<0x0-0xffff> } | { llc <0x0-0xff> <0x0-0xff> } } group <word16>
no vlan ethertype s-custom-port
no vlan ip-subnet <ip-subnet value>
no vlan mac <mac_ucast> vlan <vlan_id>
Parameter
protocol Protocol-based VLAN commands
eth2 Ethernet-based VLAN commands
<0x600-0xffff> Ether Type(Range: 0x600 - 0xFFFF)
arp Ether Type is ARP
ip Ether Type is IP
ipx Ether Type is IPX
LGB5510A(config)# no username admin
LGB5510A(config)#
Page 42
Publication date: , 2015
at Ether Type is AppleTalk
snap SNAP-based VLAN group
<0x0-0xffffff> SNAP OUI (Range 0x000000 - 0XFFFFFF)
rfc_1042 SNAP OUI is rfc_1042
snap_8021h SNAP OUI is 8021h
<0x0-0xffff> PID (Range: 0x0 - 0xFFFF)
llc LLC-based VLAN group
<0x0-0xff> DSAP (Range: 0x00 - 0xFF)
<0x0-0xff> SSAP (Range: 0x00 - 0xFF)
group Protocol-based VLAN group commands
<word16> Group Name (Range: 1 - 16 characters)
<vlan_list> Vlan list
ethertype
s-custom-port
EXAMPLE
LGB5510A(config)# no vlan 1
LGB5510A(config)# no vlan ethertype s-custom-port
LGB5510A(config)# no vlan mac 12:12:12:12:12:12 vlan 1
LGB5510A(config)#
Page 43
Publication date: , 2015
3-2 qos
Table : configure – qos Commands
Command Function
storm Storm policer
basic_wred Weighted Random Early Discard
wred_config Weighted Random Early Discard
storm
Storm policer.
SYNTAX
qos storm { unicast | multicast | broadcast } <Rate : 1,2,4,8,16,32,64,128,256,512,1024> [ kfps ]
Parameter
broadcast Police broadcast frames
multicast Police multicast frames
unicast Police unicast frames
<Rate : 1,2,4,8,16,32,64,128,256,512,1024> Policer rate (default fps)
kfps Rate is kfps
EXAMPLE
basic_wred
Weighted Random Early Discard.
SYNTAX
qos basic_wred < Boolean choice >
Parameter
< Boolean choice > Config wred disable or enable (enable/disable)
LGB5510A(config)# qos storm broadcast 256 kfps
LGB5510A(config)#
Page 44
Publication date: , 2015
EXAMPLE
wred_config
Weighted Random Early Discard.
SYNTAX
qos wred_config <port index> queue <queue index> {dpl0 | dpl1 | dpl2} <threshold value> <slope value>
Parameter
queue Specify queue
<port index> Config port no (0..7)
dpl0 Drop Down Level 0
dpl1 Drop Down Level 1
dpl2 Drop Down Level 2
<threshold value> Rate is 0..100 (0..100)
<slope value> Rate is 3..90 (3..90)
EXAMPLE
LGB5510A(config)# qos basic_wred enable
LGB5510A(config)#
LGB5510A(config)# qos wred_config 1 queue 1 dpl0 11 5
LGB5510A(config)#
Page 45
Publication date: , 2015
3-3 spanning-tree
Spanning Tree protocol
Table : configure –spanning-tree Commands
Command Function
mode STP protocol mode
mst STP bridge instance
mode
STP protocol mode.
SYNTAX
spanning-tree mode { stp | rstp | mstp }
Parameter
mstp Multiple Spanning Tree (802.1s)
rstp Rabid Spanning Tree (802.1w)
stp 802.1D Spanning Tree
EXAMPLE
mst
STP bridge instance.
SYNTAX
spanning-tree mst <Instance : 0-7> priority <Prio : 0-61440>
spanning-tree mst < Instance : 0-7> vlan <vlan_list>
spanning-tree mst forward-time <Fwdtime : 4-30>
spanning-tree mst max-age <Maxage : 6-40> [ forward-time <Fwdtime : 4-30> ]
LGB5510A(config)# spanning-tree mode stp
LGB5510A(config)#
Page 46
Publication date: , 2015
spanning-tree mst max-hops <Maxhops : 6-40>
spanning-tree mst name <Name : word32> revision <0-65535>
Parameter
<Instance : 0-7> instance 0-7 (CIST=0, MST2=1...)
forward-time Delay between port states
max-age Max bridge age before timeout
max-hops MSTP bridge max hop count
name Name keyword
priority Priority of the instance
vlan VLAN keyword
<Prio : 0-61440> Range in seconds
<vlan_list> Range of VLANs
<Fwdtime : 4-30> Range in seconds
<Maxage : 6-40> Range in seconds
<Maxhops : 6-40> Hop count range
<Name : word32> Name of the bridge
revision Revision keyword
<0-65535> Revision number
EXAMPLE
LGB5510A(config)# spanning-tree mst 7 vlan 10
LGB5510A(config)#
Page 47
Publication date: , 2015
4 COPY Commands of CLI
Copy from source to destination
SYNTAX
copy { startup-config | running-config | < flash:filename | tftp://server/path-and-filename > }
Parameter
flash:filename | tftp://server/path-and-filename File in FLASH or on TFTP server
running-config Currently running configuration
startup-config Startup configuration
EXAMPLE
LGB5510A# copy startup-config running-config
#
Page 48
Publication date: , 2015
5 DELETE Commands of CLI
Delete one file in flash: file system
SYNTAX
Delete <Path : word>
Parameter
<Path : word> Name of file to delete
EXAMPLE
LGB5510A# delete text
LGB5510A#
Page 49
Publication date: , 2015
6 DIR Commands of CLI
Directory of all files in flash: file system
SYNTAX
Dir
EXAMPLE
LGB5510A# dir
default-config startup-config
LGB5510A#
Page 50
Publication date: , 2015
7 DISABLE Commands of CLI
Turn off privileged commands
SYNTAX
disable
EXAMPLE
LGB5510A# disable
LGB5510A>
Page 51
Publication date: , 2015
8 FIRMWARE of CLI
Firmware upgrade/swap
Syntax
firmware upgrade < TFTPServer_path_file : word>
Parameter
upgrade Firmware upgrade
<TFTPServer_path_file : word> TFTP Server IP address, path and file name
for the server containing the new image.
EXAMPLE
LGB5510A# firmware upgrade tftp://192.168.1.1/path/GEL2706
Programming image...
LGB5510A#
Page 52
Publication date: , 2015
9 PING of CLI
Send ICMP echo messages
Syntax
ping ip <word1-255> [ repeat <Count : 1-60> ] [ size <Size : 2-1452> ] [ interval <Seconds : 0-30> ]
ping ipv6 <ipv6_addr> [ repeat <Count : 1-60> ] [ size <Size : 2-1452> ] [ interval <Seconds : 0-30> ] [ interface
vlan <vlan_id> ]
Parameter
ip IP (ICMP) echo
<word1-255> ICMP destination address
repeat Specify repeat count
<Count : 1-60> 1-60; Default is 5
size Specify datagram size
<Size : 2-1452> 2-1452; Default is 56 (excluding MAC, IP and ICMP headers)
interval Specify repeat interval
<Seconds : 0-30> 0-30; Default is 0
ipv6 IPv6 (ICMPv6) echo
<ipv6_addr> ICMPv6 destination address
repeat Specify repeat count
<1-60> 1-60; Default is 5
size Specify datagram size
<2-1452> 2-1452; Default is 56 (excluding MAC, IP and ICMP headers)
interval Specify repeat interval
<0-30> 0-30; Default is 0
Page 53
Publication date: , 2015
interface Select an interface to configure
vlan VLAN Interface
<vlan_id> VLAN identifier(s): VID
EXAMPLE
LGB5510A# ping ip 192.168.1.68 repeat 3 size 4
PING 192.168.1.68 (192.168.1.68): 4 data bytes
--- 192.168.1.68 ping statistics ---
3 packets transmitted, 0 packets received, 100% packet loss
LGB5510A#
Page 54
Publication date: , 2015
10 RELOAD of CLI
Reload system.
Syntax
reload { { { cold | warm } [ sid <usid> ] } | { defaults [ keep-ip ] } }
Parameter
cold Reload cold, i.e. reboot.
defaults Reload defaults without rebooting.
EXAMPLE
LGB5510A# reload defaults
% Reloading defaults. Please stand by.
LGB5510A# reload cold
% Cold reload in progress, please stand by.
LGB5510A# +M25PXX : Init device with JEDEC ID 0x20BA19.
Luton26 board detected (VSC7427 Rev. D).
RedBoot(tm) bootstrap and debug environment [ROMRAM]
Non-certified release, version 1_15a-Vitesse - built 18:36:46, Sep 9 2014
Copyright (C) 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009
Free Software Foundation, Inc.
RedBoot is free software, covered by the eCos license, derived from the
GNU General Public License. You are welcome to change it and/or distribute
copies of it under certain conditions. Under the license terms, RedBoot's
source code and full license terms must have been made available to you.
Redboot comes with ABSOLUTELY NO WARRANTY.
Page 55
Publication date: , 2015
11 SHOW of CLI
Show running system information
Table : SHOW Commands
Command Function
access-list Access list
aggregation Aggregation port configuration
clock Configure time-of-day clock
interface Interface status and configuration
ip Internet Protocol
ipv6 IPv6 configuration commands
lldp Display LLDP neighbors information.
logging Syslog
loop-protect Loop protection configuration
mac Mac Address Table information
ntp Configure NTP
pvlan PVLAN status
qos Quality of Service
running-config Show running system information
spanning-tree STP Bridge
System show system information
upnp Display UPnP configurations
vlan VLAN status
access-list
Access list
SYNTAX
show access-list [ <AceId : 1~384> ]
Parameter
interface Select an interface to configure
Page 56
Publication date: , 2015
ace Access list entry
<AceId : 1~384> ACE ID
EXAMPLE
aggregation
Aggregation port configuration.
SYNTAX
show aggregation [ {aggregators/lacp/mode/status]]
Parameter
aggregators Aggregator status
lacp Lacp local and neighbor info
mode Traffic distribution mode
status Aggregation port status
EXAMPLE
LGB5510A# show access-list ace 111
Switch access-list ace number: 0
LGB5510A#
Page 57
Publication date: , 2015
clock
Configure time-of-day clock.
SYNTAX
show clock
EXAMPLE
LGB5510A# show aggregation mode
Aggregation Hash Mode : src-dst-mac
LACP System Priority : 333
LGB5510A# show aggregation status
Trunk Port Setting Trunk Port Status
----------------------------------------- -----------------
port Method Group LACP Role Timeout Aggregator Status
========== ====== ===== ========= ======= ========== ======
10G 1/1 None 0 Active Fast 10G 1/1 Ready
10G 1/2 None 0 Active Fast 10G 1/2 ---
10G 1/3 None 0 Active Fast 10G 1/3 ---
10G 1/4 None 0 Active Fast 10G 1/4 ---
10G 1/5 None 0 Active Fast 10G 1/5 ---
10G 1/6 None 0 Active Fast 10G 1/6 ---
10G 1/7 None 0 Active Fast 10G 1/7 ---
10G 1/8 None 0 Active Fast 10G 1/8 ---
10G 1/9 None 0 Active Fast 10G 1/9 ---
10G 1/10 None 0 Active Fast 10G 1/10 ---
LGB5510A#
LGB5510A# show clock
System Time : 1970-01-01 00:53:14
LGB5510A#
Page 58
Publication date: , 2015
interface
Interface status and configuration.
SYNTAX
show interface vlan <vlan_list>
show 10GigabitEthernet <port_list> [status|statistics]
Parameter
<port_list> 1/1-10 for 10 Gigabit Ethernet
statistics Display statistics counters.
status Display status.
EXAMPLE
LGB5510A# show interface vlan 1
VLAN1
Link: 00-40-c7-00-00-01 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
IPv4: 192.168.1.22/24
IPv6: fe80::240:c7ff:fe00:1/64
LGB5510A# show interface 10GigabitEthernet 1/1-3 status
Interface Speed & Duplex Rx Tx Flow Control Max Frame
Link
---------------------- -------------- --- --- ------------
--------- --------
10GigabitEthernet 1/1 Auto off off disabled 9216
down
10GigabitEthernet 1/2 Auto off off disabled 9216
down
10GigabitEthernet 1/3 Auto off off disabled 9216
down
LGB5510A#
Page 59
Publication date: , 2015
ip
Internet Protocol.
SYNTAX
show ip arp
show ip arp inspection interface {<port_type> <port_type_list>} vlan <vlan_list>
show ip arp inspection entry [ dhcp-snooping| interface | static ] [ interface <port_type> <port_type_list> ]
show ip arp inspection vlan [ <vlan_list> ]
show ip dhcp snooping [ interface <port_type> <port_type_list> ]
show ip dhcp snooping table
show ip igmp snooping [ detail | group-database | mrouter | vlan ]
show ip interface brief
show ip name-server
show ip route
show ip source binding [ interface <port_type> <port_type_list> ]
show ip verify source [ interface <port_type> <port_type_list> ]
Parameter
arp Address Resolution Protocol
inspection ARP inspection
interface ARP inspection entry interface config
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
vlan VLAN configuration
<vlan_list> Select a VLAN id to configure
entry ARP inspection entries
static Setting from static entries
dhcp Dynamic Host Configuration Protocol
Page 60
Publication date: , 2015
statistics Traffic statistics
snooping DHCP snooping
http Hypertext Transfer Protocol
server HTTP web server
secure Secure
status Status
igmp Internet Group Management Protocol
snooping Snooping IGMP
vlan Search by VLAN
<vlan_list> VLAN identifier(s): VID
group-database Multicast group database from IGMP
detail Detail running information/statistics of IGMP snooping
mrouter Multicast router port status in IGMP
detail Detail running information/statistics of IGMP snooping
interface IP interface status and configuration
brief Brief IP interface status
name-server Domain Name System
route Display the current ip routing table
binding IP source binding
dhcp-snooping Learn from dhcp snooping
system IPv4 system traffic
verify Verify command
source Verify source
EXAMPLE
Page 61
Publication date: , 2015
ipv6
IPv6 configuration commands.
SYNTAX
show ipv6 interface [ vlan <vlan_list> { brief | statistics } ] [ | {begin | exclude | include } <LINE>]
show ipv6 mld snooping [ detail |group-database | mrouter | vlan ]
show ipv6 neighbor [ interface vlan <vlan_list> ]
show ipv6 route [ interface vlan <vlan_list> ]
Parameter
interface Select an interface to configure
vlan VLAN of IPv6 interface
<vlan_list> IPv6 interface VLAN list
LGB5510A# show ip arp inspection vlan 1
VLAN VLAN Mode VLAN Log Type
---- --------- -------------
1 Disabled None
LGB5510A# show ip dhcp snooping interface * 1/1-2
10GigabitEthernet 1/1 trusted
10GigabitEthernet 1/2 trusted
LGB5510A# show ip igmp snooping vlan
IGMP Snooping is disabled to stop snooping IGMP control plane.
LGB5510A# show ip interface brief
Vlan Address Method Status
---- -------------------- -------- ------
1 192.168.1.22/24 Manual UP
LGB5510A# show ip route
Network Gateway Status Interface
192.168.1.0/24 0.0.0.0 UP VLAN1
LGB5510A#
Page 62
Publication date: , 2015
brief Brief summary of IPv6 status and configuration
statistics Traffic statistics
mld Multicasat Listener Discovery
snooping Snooping MLD
vlan Search by VLAN
<vlan_list> VLAN identifier(s): VID
group-database Multicast group database from MLD
interface Search by port
10GigabitEthernet 10 Gigabit Ethernet Port
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
sfm-information Including source filter multicast information from MLD
detail Detail running information/statistics of MLD snooping
mrouter Multicast router port status in MLD
neighbor IPv6 neighbors
route IPv6 routes
statistics Traffic statistics
system IPv6 system traffic
EXAMPLE
lldp
Display LLDP neighbors information.
LGB5510A# show ipv6 interface vlan 1 brief
IPv6 Vlan1 interface is up.
Internet address is fe80::240:c7ff:fe00:1/64
IP stack index (IFID) is 2
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
LGB5510A#
Page 63
Publication date: , 2015
SYNTAX
show lldp interface [ interface <port_type> <port_type_list> ]
show lldp med media-vlan-policy [ <0~31> ]
show lldp med remote-device [ interface <port_type> <port_type_list>
show lldp neighbors [ interface <port_type> <port_type_list> ]
show lldp statistics [ interface <port_type> <port_type_list> ]
Parameter
med Display LLDP-MED neighbors information.
neighbors Display LLDP neighbors information.
statistics Display LLDP statistics information.
media-vlan-policy Display media vlan policies.
remote-device Display remote device LLDP-MED neighbors information.
<0~31> List of policies.
Interface
<port_type > 10 Gigabit Ethernet
* All Switches or All ports
10GigabitEthernet 10 Gigabit Ethernet Port
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
EXAMPLE
Page 64
Publication date: , 2015
logging
Syslog.
SYNTAX
LGB5510A# show lldp interface * 1/1-2
LLDP Configuration
======================================
TX Interval : 30 sec
TX Hold : 4 sec
TX Delay : 2 sec
TX Reinit : 2 sec
10GigabitEthernet 1/1
------------------------------
TX/RX Mode : Disabled
CDP Aware : Disable
Port Descr : Enable
Sys Name : Enable
Sys Descr : Enable
Sys Capa : Enable
Mgmt Addr : Enable
10GigabitEthernet 1/2
------------------------------
TX/RX Mode : Disabled
CDP Aware : Disable
Port Descr : Enable
Sys Name : Enable
Sys Descr : Enable
Sys Capa : Enable
Mgmt Addr : Enable
LGB5510A#
Page 65
Publication date: , 2015
show logging <loggin_id : 1-4294967295
show logging [ info ] [ warning ] [ error ]
Parameter
<logging_id: 1-4294967295> Logging ID
alert Alert
crit Critical
debug Debug
emerg Emergency
error Error
info Information
notice Notice
warning Warning
EXAMPLE
loop-protect
Loop protection configuration.
SYNTAX
show loop-protect [ interface <port_type> <port_type_list> ]
LGB5510A# show logging alert crit debug emerg error info notice warning
Switch logging host mode is disable
Switch logging host address is
Number of entries on Switch 1:
ID Level Time Message
---- ------ ------------------------- -----------------------------
1 info Dec 31 12:00:49 LINK-UPDOWN: Interface
10GigabitEthernet 1/4, changed state to up.
LGB5510A#
Page 66
Publication date: , 2015
Parameter
interface Interface status and configuration
<port_type > 10 Gigabit Ethernet
* All Switches or All ports
10GigabitEthernet 10 Gigabit Ethernet Port
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
EXAMPLE
LGB5510A# show loop-protect interface * 1/1-2
Loop Protection Configuration
======================================
Loop Protection : Disable
Transmission Time : 5 sec
Shutdown Time : 180 sec
10GigabitEthernet 1/1
------------------------------
Mode : Enable
Action : Shutdown
Transmit mode : Enable
The number of loops : 0
loop : Loop
Status : Down
10GigabitEthernet 1/2
------------------------------
Mode : Enable
Action : Shutdown
Transmit mode : Enable
The number of loops : 0
loop : Loop
Status : Down
LGB5510A#
Page 67
Publication date: , 2015
mac
Mac Address Table information.
SYNTAX
show mac address-table [ conf | static | aging-time | { { learning | count } [ interface <port_type>
<port_type_list> ] } | { address <mac_addr> [ vlan <vlan_id> ] } | vlan <vlan_id> | interface <port_type>
<port_type_list> ]
Parameter
address-table Mac Address Table
conf User added static mac addresses
static All static mac addresses
aging-time Aging time
learning Learn/disable/secure state
count Total number of mac addresses
interface Select an interface to configure
* All switches or All ports
10GigabitEthernet 10 Gigabit Ethernet Port
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
address MAC address lookup
<mac_addr> 48 bit MAC address: xx:xx:xx:xx:xx:xx
vlan VLAN lookup
<vlan_id> VLAN IDs 1-4095
vlan Addresses in this VLAN
<vlan_id> VLAN IDs 1-4095
interface Select an interface to configure
EXAMPLE
Page 68
Publication date: , 2015
ntp
show NTP.
SYNTAX
show ntp status
Parameter
status status
EXAMPLE
pvlan
PVLAN status.
SYNTAX
LGB5510A# show mac address-table count interface * 1/1-2
Port Dynamic addresses
1 0
2 0
Total learned dynamic addresses for the switch: 1
Total static addresses in table: 0
LGB5510A#
LGB5510A# show ntp status
NTP Mode : Disable
Interval : 1440 min
Idx Server IP host address (a.b.c.d) or a host name string
--- ------------------------------------------------------
1
2
3
4
5
LGB5510A#
Page 69
Publication date: , 2015
show pvlan<range_list>
show pvlan isolation interface <port_type> <port_type_list>
Parameter
<range_list> PVLAN id to show configuration for
isolation Show isolation configuration
<port_type > 10 Gigabit Ethernet
* All Switches or All ports
10GigabitEthernet 10 Gigabit Ethernet Port
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
EXAMPLE
qos
Quality of Service.
SYNTAX
show qos [ { interface [ <port_type> <port_type_list> ] } | wred | { maps [ dscp-cos ] [ dscp-ingress-translation ]
[ dscp-classify ] [ cos-dscp ] [ dscp-egress-translation ] } | storm |
Parameter
interface Interface
<port_type > 10 Gigabit Ethernet
* All switches or All ports
10GigabitEthernet 10 Gigabit Ethernet Port
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
LGB5510A# show pvlan isolation interface 10GigabitEthernet 1/1-2
Port Isolation
-------------------------------- ---------
10GigabitEthernet 1/1 Disabled
10GigabitEthernet 1/2 Disabled
LGB5510A#
Page 70
Publication date: , 2015
maps Global QoS Maps/Tables
qce QoS Control Entry
storm Storm policer
wred Weighted Random Early Discard
cos-dscp Map for cos to dscp
dscp-classify Map for dscp classify enable
dscp-cos Map for dscp to cos
dscp-egress-translation Map for dscp egress translation
dscp-ingress-translation Map for dscp ingress translation
EXAMPLE
LGB5510A# show qos storm
Storm Configuration
interface 10GigabitEthernet 1/1
Broadcast : disabled 0
Multicast : disabled 0
DLF : disabled 0
interface 10GigabitEthernet 1/2
Broadcast : disabled 0
Multicast : disabled 0
DLF : disabled 0
interface 10GigabitEthernet 1/3
Broadcast : disabled 0
Multicast : disabled 0
DLF : disabled 0
interface 10GigabitEthernet 1/4
Broadcast : disabled 0
Multicast : disabled 0
DLF : disabled 0
interface 10GigabitEthernet 1/5
Broadcast : disabled 0
Multicast : disabled 0
DLF : disabled 0
interface 10GigabitEthernet 1/6
Page 71
Publication date: , 2015
running-config
Show running system information.
SYNTAX
show running-config
EXAMPLE
LGB5510A# show running-config
username admin privilege 15 password none
!
clock summer-time enable 1 1 1 1 12 1 1 1 123
clock timezone 1234 -12
system name LGB5510A
ip igmp ssm-range 232.0.0.0 8
lacp system-priority 333
!
interface 10GigabitEthernet 1/1
qos wrr WRR 0 0 0 0 0 0 0 0
!
interface 10GigabitEthernet 1/2
qos wrr WRR 0 0 0 0 0 0 0 0
!
interface 10GigabitEthernet 1/3
qos wrr WRR 0 0 0 0 0 0 0 0
!
interface 10GigabitEthernet 1/4
qos wrr WRR 0 0 0 0 0 0 0 0
!
interface 10GigabitEthernet 1/5
qos wrr WRR 0 0 0 0 0 0 0 0
!
interface 10GigabitEthernet 1/6
qos wrr WRR 0 0 0 0 0 0 0 0
!
interface 10GigabitEthernet 1/7
Page 72
Publication date: , 2015
spanning-tree
STP Bridge.
SYNTAX
show spanning-tree mst [ configuration | <0-4094> port configuration ]
Parameter
mst Configuration
<0-4904> Choose vlan
port MST port status
<0-4904> Choose vlan
configuration MST port configuration
EXAMPLE
system
show system information.
SYNTAX
show system
LGB5510A# show spanning-tree mst configuration
Multiple Spanning Tree Protocol : Disable
Force Version : MSTP
Region Name : 00-40-C7-00-00-01
Revision Level : 0
MSTI 0 (CIST) : vlan 1-4094
LGB5510A#Port Port Role State Pri PathCost Edge P2P Uptime
--------- -------------- ---------- --- -------- ---- --- -------------
LGB5510A#
Page 73
Publication date: , 2015
Parameter
None
EXAMPLE
upnp
Display UPnP configurations.
SYNTAX
show upnp
EXAMPLE
LGB5510A# show system
Model Name :
System Description : 8-Port 10G Copper + 2-Port 10G SFP+ Web Smart Ethernet
Switch
Firmware Version : v0.83.2
MAC Address : 00-40-c7-00-00-01
Serial Number : XYZ0123456789A
Location :
Contact :
System Name : LGB5510A
System Date : 1970-01-01 01:53:54 UTC
System Uptime : 0 days, 1:53:54
LGB5510A#
LGB5510A# show upnp
UPnP Mode : Disabled
UPnP TTL : 4
UPnP Advertising Duration : 100
LGB5510A#
Page 74
Publication date: , 2015
vlan
VLAN status.
SYNTAX
show vlan brief
show vlan id <vlan_list>
show vlan ip-subnet id <ip-subnet value>
show vlan protocol [ eth2 { <0x600-0xffff> | arp | ip | ipx | at } ] [ snap { <0x0-0xffffff> | rfc_1042 | snap_8021h }
<0x0-0xffff> ] [ llc <0x0-0xff> <0x0-0xff> ]
show vlan status [admin [interface] | all | combined | conflicts | gvrp | interface | mstp | mvr | nas | vcl | voice-vlan ]
[<port_type ><port_type_list>]
Parameter
id VLAN status by VLAN id
<vlan_list> VLAN IDs 1-4095
name VLAN status by VLAN name
<vword32> A VLAN name
brief VLAN summary information
protocol Protocol-based VLAN status
eth2 Ethernet protocol based VLAN status
<0x600-0xffff> Ether Type(Range: 0x600 - 0xFFFF)
arp Ether Type is ARP
ip Ether Type is IP
ipx Ether Type is IPX
at Ether Type is AppleTalk
snap SNAP-based VLAN status
<0x0-0xffffff> SNAP OUI (Range 0x000000 - 0XFFFFFF)
Page 75
Publication date: , 2015
rfc_1042 SNAP OUI is rfc_1042
snap_8021h SNAP OUI is 8021h
<0x0-0xffff> PID (Range: 0x0 - 0xFFFF)
llc LLC-based VLAN status
<0x0-0xff> DSAP (Range: 0x00 - 0xFF)
<0x0-0xff> SSAP (Range: 0x00 - 0xFF)
admin Show the VLANs configured by administrator.
all Show all VLANs configured.
combined Show the VLANs configured by a combination.
conflicts Show VLANs configurations that has conflicts.
gvrp Show the VLANs configured by GVRP.
interface Show the VLANs configured for a specific interface(s).
mstp Show the VLANs configured by MSTP.
mvr Show the VLANs configured by MVR.
nas Show the VLANs configured by NAS.
vcl Show the VLANs configured by VCL.
voice-vlan Show the VLANs configured by Voice VLAN.
interface Show the VLANs configured for a specific interface(s).
10GigabitEthernet 10 Gigabit Ethernet Port
<port_type_list> 1/1-10 for 10 Gigabit Ethernet
EXAMPLE
LGB5510A# show vlan
VLAN Name Interfaces
---- -------------------------------- ----------
1 default Gi 1/1-48
LGB5510A#
Page 76
Publication date: , 2015
12 TERMINAL of CLI
Set terminal line parameters
Syntax
terminal exec-timeout <0-1440> [ <0-3600> ]
Parameter
exec-timeout Set the EXEC timeout
<0-1440> Timeout in minutes
EXAMPLE
LGB5510A# terminal exec-timeout 1
LGB5510A#
Page 77
Publication date: , 2015
13 Traceroute
Copy from source to destination
SYNTAX
traceroute ip <v_ip_addr> [ protocol { icmp | udp | tcp } ] [ wait <v_wait_time> ] [ ttl <v_max_ttl> ] [ nqueries
<v_nqueries> ]
Parameter
ip IP
<word1-255> Destination address
nqueries Specify number of probe packets
protocol Specify protocol including icmp, udp and tcp
ttl Specify max TTL
wait Specify wait time
EXAMPLE
LGB5510A# traceroute ip 192.168.1.1 protocol icmp wait 1
traceroute to 192.168.1.1 (192.168.1.1), 30 hops max, 60 byte packets
1 * * *
2 * * *
3 * * *
4 * * *
5 * * *
6 * * *
7 * * *
8 * * *
9 * * *
10 * * *
11 * * 192.168.1.22 (192.168.1.22) 969.690 ms !H
LGB5510A#
Page 78
Publication date: , 2015
14 CLI COMMAND REFERENCE
This chapter introduces the CLI privilege level and command modes.
The privilege level determines whether or not the user could run the particular commands
If the user could run the particular command, then the user has to run the command in the
correct mode.
23.1 Privilege level
Every command has a privilege level (0-15). Users can run a command if the session’s
privilege level is greater than or equal to the command’s privilege level. The session’s
privilege level initially comes from the login account’s privilege level, though it is possible to
change the session’s privilege level after logging in.
PRIVILEGE LEVEL
TYPES OF COMMANDS AT THIS PRIVILEGE LEVEL
0
Display basic system information
13
Configure features except for login accounts, the
authentication method
sequence, multiple logins, and administrator and enable
passwords.
15
Configure login accounts, the authentication method
sequence, multiple logins,
and administrator and enable passwords.
23.2 Command modes
The CLI is divided into several modes. If a user has enough privilege to run a particular
command, the user has to run the command in the correct mode. The modes that are available
depend on the session’s privilege level.
Page 79
Publication date: , 2015
Command Summary
COMMAND
DESCRIPTION
P
M
show access management
Use the show access management user
EXEC command without keywords to
display the access management
configuration, or use the statistics
keyword to display statistics, or use the
<AccessId> keyword to display the
specific access management entry.
15
EXEC
clear access management statistics
Use the clear access management
statistics privileged EXEC command to
clear the statistics maintained by access
management.
15
EXEC
access management
Use the access management global
configuration command to enable the
access management. Use the no form
of this command to disable the access
management.
15
GLOBAL_CONFIG
access management <1-16> <1-4094>
<ipv4_addr> [ to <ipv4_addr> ] { [ web ] [ snmp ]
[ telnet ] | all }
Use the access management
<AccessId> global configuration
command to set the access
management entry for IPv4 address.
15
GLOBAL_CONFIG
access management <1-16> <1-4094>
<ipv6_addr> [ to <ipv6_addr> ] { [ web ] [ snmp ]
[ telnet ] | all }
Use the access management
<AccessId> global configuration
command to set the access
management entry for IPv6 address.
15
GLOBAL_CONFIG
no access management <1~16>
Use the no access management
<AccessIdList> global configuration
command to delete the specific access
management entry.
15
GLOBAL_CONFIG
access-list action { permit | deny }
Use the access-list action interface
configuration command to configure
access-list action. The access-list
interface configuration will affect the
received frames if it doesn't match any
ACE.
15
INTERFACE_PORT_LIST
access-list rate-limiter <1-16>
Use the access-list rate-limiter interface
configuration command to configure the
15
INTERFACE_PORT_LIST
Page 80
Publication date: , 2015
access-list rate-limiter ID . The
access-list interface configuration will
affect the received frames if it doesn't
match any ACE.
no access-list rate-limiter
Use the no access-list rate-limiter
interface configuration command to
disable the access-list rate-limiter. The
access-list interface configuration will
affect the received frames if it doesn't
match any ACE.
15
INTERFACE_PORT_LIST
access-list { redirect | port-copy } interface
{ <port_type_id> | <port_type_list> }
Use the no access-list redirect interface
configuration command to configure the
access-list redirect interface.
15
INTERFACE_PORT_LIST
no access-list { redirect | port-copy }
Use the no access-list redirect interface
configuration command to disable the
access-list redirect. The access-list
interface configuration will affect the
received frames if it doesn't match any
ACE.
15
INTERFACE_PORT_LIST
access-list mirror
Use the access-list mirror interface
configuration command to enable
access-list mirror. Use the no form of
this command to disable access-list
mirror. The access-list interface
configuration will affect the received
frames if it doesn't match any ACE.
15
INTERFACE_PORT_LIST
access-list logging
Use the access-list logging interface
configuration command to enable
access-list logging. Use the no form of
this command to disable access-list
logging. The access-list interface
configuration will affect the received
frames if it doesn't match any ACE.
15
INTERFACE_PORT_LIST
access-list shutdown
Use the access-list shutdown interface
configuration command to enable
access-list shutdown. Use the no form
of this command to disable access-list
shutdown. The access-list interface
15
INTERFACE_PORT_LIST
Page 81
Publication date: , 2015
configuration will affect the received
frames if it doesn't match any ACE.
access-list evc-policer <1-256>
Use the access-list evc-policer interface
configuration command to configure the
access-list evc-policer ID. The
access-list interface configuration will
affect the received frames if it doesn't
match any ACE.
15
INTERFACE_PORT_LIST
no access-list evc-policer
Use the no access-list evc-policer
interface configuration command to
configure the access-list evc-policer ID.
The access-list interface configuration
will affect the received frames if it
doesn't match any ACE.
15
INTERFACE_PORT_LIST
access-list policy <0-255>
Use the access-list policy interface
configuration command to configure the
access-list policy value. The access-list
interface configuration will affect the
received frames if it doesn't match any
ACE.
15
INTERFACE_PORT_LIST
no access-list policy
Use the no access-list policy interface
configuration command to restore the
default access-list policy ID. The
access-list interface configuration will
affect the received frames if it doesn't
match any ACE.
15
INTERFACE_PORT_LIST
access-list port-state
Use the access-list port-state interface
configuration command to enable
access-list port state. Use the no form of
this command to disable access-list port
state.
15
INTERFACE_PORT_LIST
access-list rate-limiter [ <1~16> ] { pps
<1,2,4,8,16,32,64,128,256,512>| 100pps
<1-32767> | kpps
<1,2,4,8,16,32,64,128,256,512,1024> | 100kbps
<0-10000> }
Use the access-list rate-limiter global
configuration command to configure the
access-list rate-limiter.
15
INTERFACE_PORT_LIST
default access-list rate-limiter [ <1~16> ]
Use the default access-list rate-limiter
global configuration command to restore
15
GLOBAL_CONFIG
Page 82
Publication date: , 2015
the default setting of access-list
rate-limiter.
access-list ace [update] <1-256> [next
{<1-256>|last}] [ingress {switch
<switch_id>|switchport {<1-53>|<1~53>}|interface
{<port_type_id>|<port_type_list>}|any}] [policy
<0-255> [policy-bitmask <0x0-0xFF>]] [tag
{tagged|untagged|any}] [vid {<1-4095>|any}]
[tag-priority {<0-7>|0-1|2-3|4-5|6-7|0-3|4-7|any}]
[dmac-type {unicast|multicast|broadcast|any}]
[frametype { any| etype [etype-value
{<0x600-0x7ff,0x801-0x805,0x807-0x86dc,0x86d
e-0xffff>|any}] [smac {<mac_addr>|any}] [dmac
{<mac_addr>|any}]| arp [sip {<ipv4_subnet>|any}]
[dip {<ipv4_subnet>|any}] [smac
{<mac_addr>|any}] [arp-opcode
{arp|rarp|other|any}] [arp-flag [arp-request
{<0-1>|any}] [arp-smac {<0-1>|any}] [arp-tmac
{<0-1>|any}] [arp-len {<0-1>|any}] [arp-ip
{<0-1>|any}] [arp-ether {<0-1>|any}]]| ipv4 [sip
{<ipv4_subnet>|any}] [dip {<ipv4_subnet>|any}]
[ip-protocol {<0,2-5,7-16,18-255>|any}] [ip-flag
[ip-ttl {<0-1>|any}] [ip-options {<0-1>|any}]
[ip-fragment {<0-1>|any}]]| ipv4-icmp [sip
{<ipv4_subnet>|any}] [dip {<ipv4_subnet>|any}]
[icmp-type {<0-255>|any}] [icmp-code
{<0-255>|any}] [ip-flag [ip-ttl {<0-1>|any}]
[ip-options {<0-1>|any}] [ip-fragment {<0-1>|any}]]|
ipv4-udp [sip {<ipv4_subnet>|any}] [dip
{<ipv4_subnet>|any}] [sport {<0-65535> [to
<0-65535>]|any}] [dport {<0-65535> [to
<0-65535>]|any}] [ip-flag [ip-ttl {<0-1>|any}]
[ip-options {<0-1>|any}] [ip-fragment {<0-1>|any}]]|
ipv4-tcp [sip {<ipv4_subnet>|any}] [dip
{<ipv4_subnet>|any}] [sport {<0-65535> [to
<0-65535>]|any}] [dport {<0-65535> [to
<0-65535>]|any}] [ip-flag [ip-ttl {<0-1>|any}]
[ip-options {<0-1>|any}] [ip-fragment {<0-1>|any}]]
Use the access-list ace global
configuration command to set the
access-list ace. The command without
the update keywrod will creates or
overwrites an existing ACE, any
unspecified parameter will be set to its
default value. Use the update keyword
to update an existing ACE and only
specified parameter are modified. The
ACE must ordered by an appropriate
sequence, the received frame will only
be hit on the first matched ACE. Use the
next or last keyword to adjust the ACE's
sequence order.
15
GLOBAL_CONFIG
Page 83
Publication date: , 2015
[tcp-flag [tcp-fin {<0-1>|any}] [tcp-syn {<0-1>|any}]
[tcp-rst {<0-1>|any}] [tcp-psh {<0-1>|any}] [tcp-ack
{<0-1>|any}] [tcp-urg {<0-1>|any}]]| ipv6
[next-header {<0-5,7-16,18-57,59-255>|any}] [sip
{<ipv6_addr> [sip-bitmask <uint>]|any}] [hop-limit
{<0-1>|any}]| ipv6-icmp [sip {<ipv6_addr>
[sip-bitmask <uint>]|any}] [icmp-type
{<0-255>|any}] [icmp-code {<0-255>|any}]
[hop-limit {<0-1>|any}]| ipv6-udp [sip {<ipv6_addr>
[sip-bitmask <uint>]|any}] [sport {<0-65535> [to
<0-65535>]|any}] [dport {<0-65535> [to
<0-65535>]|any}] [hop-limit {<0-1>|any}]| ipv6-tcp
[sip {<ipv6_addr> [sip-bitmask <uint>]|any}] [sport
{<0-65535> [to <0-65535>]|any}] [dport
{<0-65535> [to <0-65535>]|any}] [hop-limit
{<0-1>|any}] [tcp-flag [tcp-fin {<0-1>|any}] [tcp-syn
{<0-1>|any}] [tcp-rst {<0-1>|any}] [tcp-psh
{<0-1>|any}] [tcp-ack {<0-1>|any}] [tcp-urg
{<0-1>|any}]]} ] [action {permit|deny|filter
{switchport <1~53>|interface <port_type_list>}}]
[rate-limiter {<1-16>|disable}] [evc-policer
{<1-256>|disable}] [{redirect|port-copy} {switchport
{<1-53>|<1~53>}|interface
{<port_type_id>|<port_type_list>}|disable}] [mirror
[disable]] [logging [disable]] [shutdown [disable]]
[lookup [disable]]
no access-list ace <1~256>
Use the no access-list ace global
configuration command to delete the
access-list ace.
15
GLOBAL_CONFIG
show access-list [ interface [ <port_type_list> ] ]
[ rate-limiter [ <1~16> ] ] [ ace statistics
[ <1~256> ] ]
Use the show access-list privilege
EXEC command without keywords to
display the access-list configuration, or
particularly the show access-list
interface for the access-list interface
configuration, or use the rate-limiter
keyword to display access-list
rate-limiter configuration, or use the ace
keyword to display access-list ace
15
EXEC
Page 84
Publication date: , 2015
configuration.
clear access-list ace statistics
Use the clear access-list ace statistics
privileged EXEC command to clear the
statistics maintained by access-list,
including access-list interface statistics
and ACE's statistics.
15
EXEC
show access-list ace-status [ static ] [ link-oam ]
[ loop-protect ] [ dhcp ] [ ptp ] [ upnp ]
[ arp-inspection ] [ mep ] [ ipmc ] [ ip-source-guard ]
[ ip-mgmt ] [ conflicts ] [ switch <switch_list> ]
Use the show access-list ace-status
privilege EXEC command without
keywords to display the access-list ace
status for all access-list users, or
particularly the access-list user for the
access-list ace status. Use conflicts
keyword to display the access-list ace
that doesn't apply on on the hardware.
In other word, it means the specific ACE
is not applied to the hardware due to
hardware limitations.
15
EXEC
show aggregation [ mode ]
15
EXEC
aggregation mode { [ smac ] [ dmac ] [ ip ] [ port ] }
15
GLOBAL_CONFIG
no aggregation mode
15
GLOBAL_CONFIG
aggregation group <uint>
15
INTERFACE_PORT_LIST
no aggregation group
15
INTERFACE_PORT_LIST
ip arp inspection
Use the ip ARP inspection global
configuration command to globally
enable ARP inspection. Use the no form
of this command to globally disable ARP
inspection.
13
GLOBAL_CONFIG
ip arp inspection vlan <vlan_list>
Use the ip ARP inspection global
configuration command to globally
enable ARP inspection. Use the no form
of this command to globally disable ARP
inspection.
13
GLOBAL_CONFIG
ip arp inspection vlan <vlan_list> logging { deny |
permit | all }
13
GLOBAL_CONFIG
no ip arp inspection vlan <vlan_list> logging
13
GLOBAL_CONFIG
ip arp inspection entry interface <port_type_id>
<vlan_id> <mac_ucast> <ipv4_ucast>
13
GLOBAL_CONFIG
arp_inspection_translate
13
GLOBAL_CONFIG
Page 85
Publication date: , 2015
arp_inspection_port_mode
Use the ip ARP inspection trust interface
configuration command to configure a
port as trusted for ARP inspection
purposes. Use the no form of this
command to configure a port as
untrusted.
13
INTERFACE_PORT_LIST
arp_inspection_port_check_vlan
Use the ip ARP inspection check-vlan
interface configuration command to
configure a port as VLAN mode for ARP
inspection purposes. Use the no form of
this command to configure a port as
default.
13
INTERFACE_PORT_LIST
ip arp inspection logging { deny | permit | all }
Use the ip ARP inspection logging
interface configuration command to
configure a port as some logging mode
for ARP inspection purposes. Use the
no form of this command to configure a
port as logging none.
13
INTERFACE_PORT_LIST
no ip arp inspection logging
Use the no ip ARP inspection logging
interface configuration command to
configure a port as default logging mode
for ARP inspection purposes.
13
INTERFACE_PORT_LIST
show ip arp inspection [ interface <port_type_list> |
vlan <vlan_list> ]
0 EXEC
show ip arp inspection entry [ dhcp-snooping |
static ] [ interface <port_type_list> ]
13
EXEC
aaa authentication login { console | telnet | ssh |
http } { [ local | radius | tacacs ] ... }
Use the aaa authentication login
command to configure the
authentication methods.
15
GLOBAL_CONFIG
no aaa authentication login { console | telnet | ssh |
http }
15
GLOBAL_CONFIG
radius-server timeout <1-1000>
Use the radius-server timeout command
to configure the global RADIUS timeout
value.
15
GLOBAL_CONFIG
no radius-server timeout
Use the no radius-server timeout
command to reset the global RADIUS
timeout value to default.
15
GLOBAL_CONFIG
radius-server retransmit <1-1000>
Use the radius-server retransmit
15
GLOBAL_CONFIG
Page 86
Publication date: , 2015
command to configure the global
RADIUS retransmit value.
no radius-server retransmit
Use the no radius-server retransmit
command to reset the global RADIUS
retransmit value to default.
15
GLOBAL_CONFIG
radius-server deadtime <1-1440>
Use the radius-server deadtime
command to configure the global
RADIUS deadtime value.
15
GLOBAL_CONFIG
no radius-server deadtime
Use the no radius-server deadtime
command to reset the global RADIUS
deadtime value to default.
15
GLOBAL_CONFIG
radius-server key <line1-63>
Use the radius-server key command to
configure the global RADIUS key.
15
GLOBAL_CONFIG
no radius-server key
Use the no radius-server key command
to remove the global RADIUS key.
15
GLOBAL_CONFIG
radius-server attribute 4 <ipv4_ucast>
15
GLOBAL_CONFIG
no radius-server attribute 4
15
GLOBAL_CONFIG
radius-server attribute 95 <ipv6_ucast>
15
GLOBAL_CONFIG
no radius-server attribute 95
15
GLOBAL_CONFIG
radius-server attribute 32 <line1-253>
15
GLOBAL_CONFIG
no radius-server attribute 32
15
GLOBAL_CONFIG
radius-server host <word1-255> [ auth-port
<0-65535> ] [ acct-port <0-65535> ] [ timeout
<1-1000> ] [ retransmit <1-1000> ] [ key
<line1-63> ]
Use the radius-server host command to
add a new RADIUS host.
15
GLOBAL_CONFIG
no radius-server host <word1-255> [ auth-port
<0-65535> ] [ acct-port <0-65535> ]
Use the no radius-server host command
to delete an existing RADIUS host.
15
GLOBAL_CONFIG
tacacs-server timeout <1-1000>
Use the tacacs-server timeout
command to configure the global
TACACS+ timeout value.
15
GLOBAL_CONFIG
no tacacs-server timeout
Use the no tacacs-server timeout
command to reset the global TACACS+
timeout value to default.
15
GLOBAL_CONFIG
tacacs-server deadtime <1-1440>
Use the tacacs-server deadtime
command to configure the global
TACACS+ deadtime value.
15
GLOBAL_CONFIG
no tacacs-server deadtime
Use the no tacacs-server deadtime
command to reset the global TACACS+
15
GLOBAL_CONFIG
Page 87
Publication date: , 2015
deadtime value to default.
tacacs-server key <line1-63>
Use the tacacs-server key command to
configure the global TACACS+ key.
15
GLOBAL_CONFIG
no tacacs-server key
Use the no tacacs-server key command
to remove the global TACACS+ key.
15
GLOBAL_CONFIG
tacacs-server host <word1-255> [ port
<0-65535> ] [ timeout <1-1000> ] [ key <line1-63> ]
Use the tacacs-server host command to
add a new TACACS+ host.
15
GLOBAL_CONFIG
no tacacs-server host <word1-255> [ port
<0-65535> ]
Use the no tacacs-server host command
to delete an existing TACACS+ host.
15
GLOBAL_CONFIG
show aaa
Use the show aaa command to view the
currently active authentication login
methods.
15
GLOBAL_CONFIG
show radius-server [ statistics ]
Use the show radius-server command to
view the current RADIUS configuration
and statistics.
15
EXEC
show tacacs-server
Use the show tacacs-server command
to view the current TACACS+
configuration.
15
EXEC
debug auth { console | telnet | ssh | http }
<word31> [ <word31> ]
debug
EXEC
clock summer-time <word16> recurring [<1-5>
<1-7> <1-12> <hhmm> <1-5> <1-7> <1-12>
<hhmm> [<1-1440>]]
13
GLOBAL_CONFIG
clock summer-time <word16> date [<1-12>
<1-31> <2000-2097> <hhmm> <1-12> <1-31>
<2000-2097> <hhmm> [<1-1440>]]
13
GLOBAL_CONFIG
no clock summer-time
13
GLOBAL_CONFIG
clock timezone <word16> <-23-23> [<0-59>]
13
GLOBAL_CONFIG
no clock timezone
13
GLOBAL_CONFIG
show clock detail
0 EXEC
clock summer-time <word16> recurring [<1-5>
<1-7> <1-12> <hhmm> <1-5> <1-7> <1-12>
<hhmm> [<1-1440>]]
13
GLOBAL_CONFIG
clock summer-time <word16> date [<1-12>
<1-31> <2000-2097> <hhmm> <1-12> <1-31>
<2000-2097> <hhmm> [<1-1440>]]
13
GLOBAL_CONFIG
no clock summer-time
13
GLOBAL_CONFIG
clock timezone <word16> <-23-23> [<0-59>]
13
GLOBAL_CONFIG
Page 88
Publication date: , 2015
no clock timezone
13
GLOBAL_CONFIG
show clock detail
0 EXEC
show ip dhcp detailed statistics { server | client |
snooping | relay | normal-forward | combined }
[ interface <port_type_list> ]
Use the show ip dhcp detailed statistics
user EXEC command to display
statistics. Notice that the normal forward
per-port TX statistics isn't increased if
the incoming DHCP packet is done by
L3 forwarding mechanism. Notice that
the normal forward per-port TX statistics
isn't increased if the incoming DHCP
packet is done by L3 forwarding
mechanism.
0
EXEC
clear ip dhcp detailed statistics { server | client |
snooping | relay | helper | all } [ interface
<port_type_list> ]
Use the clear ip dhcp detailed statistics
privileged EXEC command to clear the
statistics, or particularly the IP DHCP
statistics for the interface. Notice that
except for clear statistics on all
interfaces, clear the statistics on specific
port may not take effect on global
statistics since it gathers the different
layer overview.
15
EXEC
clear ip dhcp relay statistics
Use the clear ip dhcp relay statistics
privileged EXEC command to clear the
statistics maintained by IP DHCP realy.
15
EXEC
show ip dhcp relay [ statistics ]
Use the show ip dhcp relay user EXEC
command without keywords to display
the DHCP relay configuration, or use the
statistics keyword to display statistics.
0
EXEC
ip dhcp relay
Use the ip dhcp relay global
configuration command to enable the
DHCP relay server. Use the no form of
thiscommand to disable the DHCP
relay server.
15
GLOBAL_CONFIG
ip helper-address <ipv4_ucast>
Use the ip helper-address global
configuration command to configure the
host address of DHCP relay server.
15
GLOBAL_CONFIG
no ip helper-address
Use the no ip helper-address global
configuration command to clear the host
15
GLOBAL_CONFIG
Page 89
Publication date: , 2015
address of DHCP relay server.
ip dhcp relay information option
Use the ip dhcp relay information option
global configuration command to enable
the DHCP relay information option. Use
the no form of this command to disable
the DHCP relay information option. The
option 82 circuit ID format as
"[vlan_id][module_id][port_no]". The first
four characters represent the VLAN ID,
the fifth and sixth characters are the
module ID(in standalone device it
always equal 0, in stackable device it
means switch ID), and the last two
characters are the port number. For
example, "00030108" means the DHCP
message receive form VLAN ID 3,
switch ID 1, port No 8. And the option 82
remote ID value is equal the switch MAC
address.
15
GLOBAL_CONFIG
ip dhcp relay information policy { drop | keep |
replace }
Use the ip dhcp relay information policy
global configuration command to
configure the DHCP relay information
policy. When DHCP relay information
mode operation is enabled, if the agent
receives a DHCP message that already
contains relay agent information it will
enforce the policy. The 'Replace' policy
is invalid when relay information mode is
disabled.
15
GLOBAL_CONFIG
no ip dhcp relay information policy
Use the ip dhcp relay information policy
global configuration command to restore
the default DHCP relay information
policy.
15
GLOBAL_CONFIG
show ip dhcp pool [<word32>]
0 EXEC
show ip dhcp pool counter [<word32>]
debug
EXEC
show ip dhcp excluded-address
0 EXEC
show ip dhcp server binding [ state {allocated |
committed | expired} ] [ type {automatic | manual |
0 EXEC
Page 90
Publication date: , 2015
expired} ]
show ip dhcp server binding <ipv4_ucast>
0 EXEC
show ip dhcp server
0 EXEC
show ip dhcp server statistics
0 EXEC
show ip dhcp server declined-ip
0 EXEC
show ip dhcp server declined-ip <ipv4_addr>
0 EXEC
clear ip dhcp server binding <ipv4_ucast>
13
EXEC
clear ip dhcp server binding { automatic | manual |
expired }
13
EXEC
clear ip dhcp server statistics
13
EXEC
ip dhcp server
13
GLOBAL_CONFIG
ip dhcp excluded-address <ipv4_addr>
[<ipv4_addr>]
13
GLOBAL_CONFIG
no ip dhcp pool <word32>
13
GLOBAL_CONFIG
ip dhcp server
13
INTERFACE_VLAN
network <ipv4_addr> <ipv4_netmask>
13
DHCP_POOL
no network
13
DHCP_POOL
broadcast <ipv4_addr>
13
DHCP_POOL
no broadcast
13
DHCP_POOL
default-router <ipv4_ucast> [<ipv4_ucast>
[<ipv4_ucast> [<ipv4_ucast>]]]
13
DHCP_POOL
no default-router
13
DHCP_POOL
lease { <0-365> [ <0-23> [ <uint> ] ] | infinite }
13
DHCP_POOL
no lease
13
DHCP_POOL
domain-name <word128>
13
DHCP_POOL
no domain-name
13
DHCP_POOL
dns-server <ipv4_ucast> [<ipv4_ucast>
[<ipv4_ucast> [<ipv4_ucast>]]]
13
DHCP_POOL
no dns-server
13
DHCP_POOL
ntp-server <ipv4_ucast> [<ipv4_ucast>
[<ipv4_ucast> [<ipv4_ucast>]]]
13
DHCP_POOL
no ntp-server
13
DHCP_POOL
netbios-name-server <ipv4_ucast> [<ipv4_ucast>
[<ipv4_ucast> [<ipv4_ucast>]]]
13
DHCP_POOL
no netbios-name-server
13
DHCP_POOL
netbios-node-type { b-node | h-node | m-node |
p-node }
13
DHCP_POOL
Page 91
Publication date: , 2015
no netbios-node-type
13
DHCP_POOL
netbios-scope <line128>
13
DHCP_POOL
no netbios-scope
13
DHCP_POOL
nis-domain-name <word128>
13
DHCP_POOL
no nis-domain-name
13
DHCP_POOL
nis-server <ipv4_ucast> [<ipv4_ucast>
[<ipv4_ucast> [<ipv4_ucast>]]]
13
DHCP_POOL
no nis-server
13
DHCP_POOL
host <ipv4_ucast> <ipv4_netmask>
13
DHCP_POOL
no host 13
DHCP_POOL
client-identifier { fqdn <line128> | mac-address
<mac_addr> }
13
DHCP_POOL
no client-identifier
13
DHCP_POOL
hardware-address <mac_ucast>
13
DHCP_POOL
no hardware-address
13
DHCP_POOL
client-name <word32>
13
DHCP_POOL
no client-name
13
DHCP_POOL
vendor class-identifier <string64> specific-info
<hexval32>
13
DHCP_POOL
no vendor class-identifier <string64>
13
DHCP_POOL
debug dhcp server memsize
debug
EXEC
debug dhcp server declined add <ipv4_addr>
debug
EXEC
debug dhcp server declined delete <ipv4_addr>
debug
EXEC
show ip dhcp snooping [ interface
<port_type_list> ]
Use the show ip dhcp snooping user
EXEC command to display the DHCP
snooping configuration.
0
EXEC
show ip dhcp snooping [ statistics ] [ interface
<port_type_list> ]
Use the show ip dhcp snooping user
EXEC command without keywords to
display the DHCP snooping
configuration, or particularly the ip dhcp
snooping statistics for the interface, or
use the statistics keyword to display
statistics.
0
EXEC
clear ip dhcp snooping statistics [ interface
<port_type_list> ]
Use the clear ip dhcp snooping statistics
privileged EXEC command to clear the
statistics maintained by IP DHCP
snooping, or particularly the IP DHCP
snooping statistics for the interface.
15
EXEC
Page 92
Publication date: , 2015
ip dhcp snooping
Use the ip dhcp snooping global
configuration command to globally
enable DHCP snooping. Use the no
form of this command to globally disable
DHCP snooping.
15
GLOBAL_CONFIG
dhcp_snooping_port_mode
Use the ip dhcp snooping trust interface
configuration command to configure a
port as trusted for DHCP snooping
purposes. Use the no form of this
command to configure a port as
untrusted.
15
INTERFACE_PORT_LIST
show ip dhcp snooping table
Use the show ip dhcp snooping table
user EXEC command to display the IP
assigned information that is obtained
from DHCP server except for local
VLAN interface IP addresses.
15
EXEC
ip name-server { <ipv4_ucast> | dhcp [ interface
vlan <vlan_id> ] }
Set the DNS server for resolving domain
names
15
GLOBAL_CONFIG
no ip name-server
Stop resolving domain names by
accessing DNS server
15
GLOBAL_CONFIG
show ip name-server
Display the active domain name server
information
0
EXEC
ip dns proxy
Enable DNS proxy service
15
GLOBAL_CONFIG
show version
Use show version to display firmware
information.
0
EXEC
firmware upgrade <word>
Use firmware upgrade to load new
firmware image to the switch.
15
EXEC
firmware swap
Use firmware swap to swap the active
and alternative firmware images.
15
EXEC
show ip http server secure status
Use the show ip http server secure
status privileged EXEC command to
display the secure HTTP web server
status.
15
EXEC
ip http secure-server
Use the ip http secure-server global
configuration command to enable the
secure HTTP web server. Use the no
form of this command to disable the
secure HTTP web server.
15
GLOBAL_CONFIG
Page 93
Publication date: , 2015
ip http secure-redirect
Use the http secure-redirect global
configuration command to enable the
secure HTTP web redirection. When the
secure HTTP web server is enabled, the
feature automatic redirect the none
secure HTTP web connection to the
secure HTTP web connection. Use the
no form of this command to disable the
secure HTTP web redirection.
15
GLOBAL_CONFIG
reload { { { cold | warm } [ sid <1-16> ] } | { defaults
[ keep-ip ] } }
Reload system, either cold (reboot) or
restore defaults without reboot.
15
EXEC
show running-config [ all-defaults ]
15
EXEC
show running-config feature <cword>
[ all-defaults ]
15
EXEC
show running-config interface <port_type_list>
[ all-defaults ]
15
EXEC
show running-config interface vlan <vlan_list>
[ all-defaults ]
15
EXEC
show running-config vlan <vlan_list> [ all-defaults ]
15
EXEC
show running-config line { console | vty }
<range_list> [ all-defaults ]
15
EXEC
copy { startup-config | running-config | <word> }
{ startup-config | running-config | <word> }
[ syntax-check ]
15
EXEC
dir 15
EXEC
more <word>
15
EXEC
delete <word>
debug
EXEC
debug icfg wipe-flash-fs-conf-block
debug
EXEC
debug icfg wipe-specific-block {local|global} <uint>
debug
EXEC
debug icfg silent-upgrade status
debug
EXEC
debug icfg dir
debug
EXEC
debug icfg error-trace <line>
debug
EXEC
ip routing
Enable routing for IPv4 and IPv6
15
GLOBAL_CONFIG
no ip routing
Disable routing for IPv4 and IPv6
15
GLOBAL_CONFIG
ip address {{<ipv4_addr> <ipv4_netmask>} | {dhcp
[fallback <ipv4_addr> <ipv4_netmask> [timeout
<uint>]]}}
IP address configuration
15
INTERFACE_VLAN
ip dhcp retry interface vlan <vlan_id>
Restart the dhcp client
15
EXEC
Page 94
Publication date: , 2015
no ip address
IP address configuration
15
INTERFACE_VLAN
ip route <ipv4_addr> <ipv4_netmask>
<ipv4_addr>
Add new IP route
15
GLOBAL_CONFIG
no ip route <ipv4_addr> <ipv4_netmask>
<ipv4_addr>
Delete an existing IP route
15
GLOBAL_CONFIG
show interface vlan [<vlan_list>]
Vlan interface status
15
EXEC
show ip interface brief
Brief IP interface status
0
EXEC
show ip arp
Print ARP table
0
EXEC
clear ip arp
Clear ARP cache
0
EXEC
show ip route
Routing table status
0
EXEC
ping ip <word1-255> [ repeat <1-60> ] [ size
<2-1452> ] [ interval <0-30> ]
0 EXEC
clear ip statistics [ system ] [ interface vlan
<vlan_list> ] [ icmp ] [ icmp-msg <0~255> ]
0 EXEC
show ip statistics [ system ] [ interface vlan
<vlan_list> ] [ icmp ] [ icmp-msg <0~255> ]
0 EXEC
debug ipstack log [ERR|NOERR]
[WARNING|NOWARNING] [NOTICE|NONOTICE]
[INFO|NOINFO] [DEBUG|NODEBUG]
[MDEBUG|NOMDEBUG] [IOCTL|NOIOCTL]
[INIT|NOINIT] [ADDR|NOADDR] [FAIL|NOFAIL]
[EMERG|NOEMERG] [CRIT|NOCRIT]
debug
EXEC
debug ip kmem
debug
EXEC
debug ip route
debug
EXEC
debug ip sockets
debug
EXEC
debug ip lpm stat ip <vlan_list>
debug
EXEC
debug ip lpm stat ipv6 <vlan_list>
debug
EXEC
debug ip lpm stat clear <vlan_list>
debug
EXEC
debug ip lpm sticky clear
debug
EXEC
debug ip lpm usage
debug
EXEC
debug ip global interface table change
debug
EXEC
debug ip vlan ipv4 created <vlan_list>
debug
EXEC
debug ip vlan ipv4 changed <vlan_list>
debug
EXEC
debug ip vlan ipv6 created <vlan_list>
debug
EXEC
debug ip vlan ipv6 changed <vlan_list>
debug
EXEC
show ip igmp snooping mrouter [ detail ]
0 EXEC
clear ip igmp snooping [ vlan <vlan_list> ] statistics
15
EXEC
Page 95
Publication date: , 2015
show ip igmp snooping [ vlan <vlan_list> ]
[ group-database [ interface <port_type_list> ]
[ sfm-information ] ] [ detail ]
0 EXEC
ip igmp snooping
15
GLOBAL_CONFIG
ip igmp unknown-flooding
15
GLOBAL_CONFIG
ip igmp host-proxy [ leave-proxy ]
15
GLOBAL_CONFIG
ip igmp ssm-range <ipv4_mcast> <4-32>
15
GLOBAL_CONFIG
no ip igmp ssm-range
15
GLOBAL_CONFIG
ip igmp snooping vlan <vlan_list>
15
GLOBAL_CONFIG
no ip igmp snooping vlan [ <vlan_list> ]
15
GLOBAL_CONFIG
ip igmp snooping
15
INTERFACE_VLAN
ip igmp snooping querier { election | address
<ipv4_ucast> }
15
INTERFACE_VLAN
no ip igmp snooping querier { election | address }
15
INTERFACE_VLAN
ip igmp snooping compatibility { auto | v1 | v2 | v3 }
15
INTERFACE_VLAN
no ip igmp snooping compatibility
15
INTERFACE_VLAN
ip igmp snooping priority <0-7>
15
INTERFACE_VLAN
no ip igmp snooping priority
15
INTERFACE_VLAN
ip igmp snooping robustness-variable <1-255>
15
INTERFACE_VLAN
no ip igmp snooping robustness-variable
15
INTERFACE_VLAN
ip igmp snooping query-interval <1-31744>
15
INTERFACE_VLAN
no ip igmp snooping query-interval
15
INTERFACE_VLAN
ip igmp snooping query-max-response-time
<0-31744>
15
INTERFACE_VLAN
no ip igmp snooping query-max-response-time
15
INTERFACE_VLAN
ip igmp snooping last-member-query-interval
<0-31744>
15
INTERFACE_VLAN
no ip igmp snooping last-member-query-interval
15
INTERFACE_VLAN
ip igmp snooping unsolicited-report-interval
<0-31744>
15
INTERFACE_VLAN
no ip igmp snooping unsolicited-report-interval
15
INTERFACE_VLAN
ip igmp snooping immediate-leave
15
INTERFACE_VLAN
ip igmp snooping mrouter
15
INTERFACE_PORT_LIST
ip igmp snooping max-groups <1-10>
15
INTERFACE_PORT_LIST
no ip igmp snooping max-groups
15
INTERFACE_PORT_LIST
ip igmp snooping filter <word16>
15
INTERFACE_PORT_LIST
no ip igmp snooping filter
15
INTERFACE_PORT_LIST
Page 96
Publication date: , 2015
ipv6 mld snooping
15
GLOBAL_CONFIG
ipv6 mld unknown-flooding
15
GLOBAL_CONFIG
ipv6 mld host-proxy [ leave-proxy ]
15
GLOBAL_CONFIG
ipv6 mld ssm-range <ipv6_mcast> <8-128>
15
GLOBAL_CONFIG
no ipv6 mld ssm-range
15
GLOBAL_CONFIG
ipv6 mld snooping vlan <vlan_list>
15
GLOBAL_CONFIG
no ipv6 mld snooping vlan [ <vlan_list> ]
15
GLOBAL_CONFIG
ipv6 mld snooping immediate-leave
15
INTERFACE_PORT_LIST
ipv6 mld snooping mrouter
15
INTERFACE_PORT_LIST
ipv6 mld snooping max-groups <1-10>
15
INTERFACE_PORT_LIST
no ipv6 mld snooping max-groups
15
INTERFACE_PORT_LIST
ipv6 mld snooping filter <word16>
15
INTERFACE_PORT_LIST
no ipv6 mld snooping filter
15
INTERFACE_PORT_LIST
show ipv6 mld snooping mrouter [ detail ]
0 EXEC
clear ipv6 mld snooping [ vlan <vlan_list> ]
statistics
15
EXEC
show ipv6 mld snooping [ vlan <vlan_list> ]
[ group-database [ interface <port_type_list> ]
[ sfm-information ] ] [ detail ]
0 EXEC
ipv6 mld snooping
15
INTERFACE_VLAN
ipv6 mld snooping querier election
15
INTERFACE_VLAN
ipv6 mld snooping compatibility { auto | v1 | v2 }
15
INTERFACE_VLAN
no ipv6 mld snooping compatibility
15
INTERFACE_VLAN
ipv6 mld snooping priority <0-7>
15
INTERFACE_VLAN
no ipv6 mld snooping priority
15
INTERFACE_VLAN
ipv6 mld snooping robustness-variable <1-255>
15
INTERFACE_VLAN
no ipv6 mld snooping robustness-variable
15
INTERFACE_VLAN
ipv6 mld snooping query-interval <1-31744>
15
INTERFACE_VLAN
no ipv6 mld snooping query-interval
15
INTERFACE_VLAN
ipv6 mld snooping query-max-response-time
<0-31744>
15
INTERFACE_VLAN
no ipv6 mld snooping query-max-response-time
15
INTERFACE_VLAN
ipv6 mld snooping last-member-query-interval
<0-31744>
15
INTERFACE_VLAN
no ipv6 mld snooping last-member-query-interval
15
INTERFACE_VLAN
ipv6 mld snooping unsolicited-report-interval
<0-31744>
15
INTERFACE_VLAN
Page 97
Publication date: , 2015
no ipv6 mld snooping unsolicited-report-interval
15
INTERFACE_VLAN
ip verify source
13
GLOBAL_CONFIG
i ip verify source
13
INTERFACE_PORT_LIST
ip verify source limit <0-2>
13
INTERFACE_PORT_LIST
no ip verify source limit
13
INTERFACE_PORT_LIST
ip verify source translate
13
GLOBAL_CONFIG
show ip verify source [interface <port_type_list>]
0 EXEC
show ip source binding [ dhcp-snooping | static ]
[interface <port_type_list>]
13
EXEC
ip source binding interface <port_type_id>
<vlan_id> <ipv4_ucast> <mac_ucast>
13
GLOBAL_CONFIG
ip source binding interface <port_type_id>
<vlan_id> <ipv4_ucast> <ipv4_netmask>
13
GLOBAL_CONFIG
show lacp { internal | statistics | system-id |
neighbour }
Show LACP configuration and status
15
EXEC
clear lacp statistics
Clear all LACP statistics
15
EXEC
lacp system-priority <1-65535>
Set the LACP system priority
15
GLOBAL_CONFIG
lacp
Enable LACP on an interface
15
INTERFACE_PORT_LIST
lacp key { <1-65535> | auto }
Set the LACP key
15
INTERFACE_PORT_LIST
lacp role { active | passive }
Set the LACP role, active or passive in
transmitting BPDUs
15
INTERFACE_PORT_LIST
lacp timeout { fast | slow }
Set the LACP timeout, i.e. how fast to
transmit BPDUs, once a sec or once
each 30 sec.
15
INTERFACE_PORT_LIST
lacp port-priority <1-65535>
Set the lacp port priority,
15
INTERFACE_PORT_LIST
lldp holdtime <2-10>
Sets LLDP hold time (The neighbor
switch will discarded the LLDP
information after \"hold time\" multiplied
with \"timer\" seconds )
15
GLOBAL_CONFIG
no lldp holdtime
15
GLOBAL_CONFIG
lldp timer <5-32768>
Sets LLDP TX interval (The time
between each LLDP frame transmitted
in seconds).
15
GLOBAL_CONFIG
no lldp timer
15
GLOBAL_CONFIG
lldp reinit <1-10>
Sets LLDP reinitialization delay.
15
GLOBAL_CONFIG
no lldp reinit
Sets LLDP reinitialization delay.
15
GLOBAL_CONFIG
lldp tlv-select {management-address |
port-description | system-capabilities |
Enables/disables LLDP optional TLVs.
15
INTERFACE_PORT_LIST
Page 98
Publication date: , 2015
system-description | system-name}
lldp transmit
Sets if switch shall transmit LLDP
frames.
15
INTERFACE_PORT_LIST
lldp receive
Sets if switch shall update LLDP entry
table with incoming LLDP information.
15
INTERFACE_PORT_LIST
show lldp neighbors [ interface <port_type_list> ]
Shows the LLDP neighbors information.
0
EXEC
show lldp statistics [ interface <port_type_list> ]
Shows the LLDP statistics information.
0
EXEC
clear lldp statistics
Clears the LLDP statistics.
0
EXEC
lldp transmission-delay <1-8192>
Sets LLDP transmision-delay. LLDP
transmission delay (the amount of time
that the transmission of LLDP frames
will delayed after LLDP configuration
has changed) in seconds.)
15
GLOBAL_CONFIG
no lldp transmission-delay
15
GLOBAL_CONFIG
lldp cdp-aware
Configures if the interface shall be CDP
aware (CDP discovery information is
added to the LLDP neighbor table)
15
INTERFACE_PORT_LIST
show lldp med remote-device [ interface
<port_type_list> ]
Show LLDP-MED neighbor device
information.
0
EXEC
show lldp med media-vlan-policy [<0~31>]
Show media vlan policy(ies)
0
EXEC
lldp med location-tlv latitude { north | south }
<word8>
Use the lldp med location-tlv latitude to
configure the location latitude.
15
GLOBAL_CONFIG
no lldp med location-tlv latitude
Use no lldp med location-tlv latitude to
configure the latitude location to north 0
degrees.
15
GLOBAL_CONFIG
lldp med location-tlv longitude { west | east }
<word9>
Use the lldp med location-tlv longitude
to configure the location longitude.
15
GLOBAL_CONFIG
no lldp med location-tlv longitude
Use no lldp med location-tlv longitude to
configure the longitude location to north
0 degrees.
15
GLOBAL_CONFIG
lldp med location-tlv altitude { meters | floors }
<word11>
Use the lldp med location-tlv altitude to
configure the location altitude.
15
GLOBAL_CONFIG
no lldp med location-tlv altitude
Use the lldp med location-tlv altitude to
configure the location altitude.
15
GLOBAL_CONFIG
lldp med location-tlv civic-addr { country | state |
county | city | district | block | street |
leading-street-direction | trailing-street-suffix |
street-suffix | house-no | house-no-suffix |
Use lldp med location-tlv civic-addr to
configure the civic address.
15
GLOBAL_CONFIG
Page 99
Publication date: , 2015
landmark | additional-info | name | zip-code |
building | apartment | floor | room-number |
place-type | postal-community-name | p-o-box |
additional-code } <string250>
no lldp med location-tlv civic-addr { country | state |
county | city | district | block | street |
leading-street-direction | trailing-street-suffix |
street-suffix | house-no | house-no-suffix |
landmark | additional-info | name | zip-code |
building | apartment | floor | room-number |
place-type | postal-community-name | p-o-box |
additional-code }
15
GLOBAL_CONFIG
lldp med location-tlv elin-addr <dword25>
Use the lldp med location-tlv elin-addr to
configure value for the Emergency Call
Service
15
GLOBAL_CONFIG
no lldp med location-tlv elin-addr
Use the no lldp med location-tlv
elin-addr to configure value for the
Emergency Call Service to default
value.
15
GLOBAL_CONFIG
lldp med transmit-tlv [ capabilities ] [ location ]
[ network-policy ]
Use the lldp med transmit-tlv to
configure which TLVs to transmit to link
partner.
15
INTERFACE_PORT_LIST
no lldp med transmit-tlv [ capabilities ] [ location ]
[ network-policy ]
15
INTERFACE_PORT_LIST
lldp med datum { wgs84 | nad83-navd88 |
nad83-mllw }
Use the lldp med datum to configure the
datum (geodetic system) to use.
15
GLOBAL_CONFIG
no lldp med datum
15
GLOBAL_CONFIG
lldp med fast <1-10>
Use the lldp med fast to configure the
number of times the fast start LLDPDU
are being sent during the activation of
the fast start mechanism defined by
LLDP-MED (1-10).
15
GLOBAL_CONFIG
no lldp med fast
15
GLOBAL_CONFIG
lldp med media-vlan-policy <0-31> { voice |
voice-signaling | guest-voice-signaling |
guest-voice | softphone-voice | video-conferencing
| streaming-video | video-signaling } { tagged
<vlan_id> | untagged } [l2-priority <0-7>] [dscp
Use the media-vlan-policy to create a
policy, which can be assigned to an
interface.
15
GLOBAL_CONFIG
Page 100
Publication date: , 2015
<0-63>]
no lldp med media-vlan-policy <0~31>
15
GLOBAL_CONFIG
lldp med media-vlan policy-list <range_list>
Use the media-vlan policy-list to assign
policy to the interface.
15
INTERFACE_PORT_LIST
loop-protect
Loop protection configuration
15
GLOBAL_CONFIG
loop-protect transmit-time <1-10>
Loop protection transmit time interval
15
GLOBAL_CONFIG
no loop-protect transmit-time
15
GLOBAL_CONFIG
loop-protect shutdown-time <0-604800>
Loop protection shutdown time interval
15
GLOBAL_CONFIG
no loop-protect shutdown-time
15
GLOBAL_CONFIG
loop-protect
Loop protection configuration
15
INTERFACE_PORT_LIST
loop-protect action { [shutdown] [log] }*1
15
INTERFACE_PORT_LIST
no loop-protect action
15
INTERFACE_PORT_LIST
loop-protect tx-mode
15
INTERFACE_PORT_LIST
show loop-protect [ interface <port_type_list> ]
13
EXEC
mac address-table learning [secure]
Enable learning on port
15
INTERFACE_PORT_LIST
show mac address-table [ conf | static | aging-time
| { { learning | count } [ interface <port_type_list> ] }
| { address <mac_addr> [ vlan <vlan_id> ] } | vlan
<vlan_id> | interface <port_type_list> ]
0 EXEC
clear mac address-table
15
EXEC
mac address-table static <mac_addr> vlan
<vlan_id> interface <port_type_list>
Assign a static mac address to this port
15
GLOBAL_CONFIG
mac address-table aging-time <0,10-1000000>
Set switch aging time, 0 to disable.
15
GLOBAL_CONFIG
no mac address-table aging-time
Default aging time.
15
GLOBAL_CONFIG
monitor destination interface <port_type_id>
Sets monitor destination port.
15
GLOBAL_CONFIG
no monitor destination
Sets monitor destination port.
15
GLOBAL_CONFIG
monitor source { { interface <port_type_list> } |
{ cpu [<range_list>] } } { both | rx | tx }
Sets monitor source port(s).
15
GLOBAL_CONFIG
no monitor source { { interface <port_type_list> } |
{ cpu [<range_list>] } }
Sets monitor source port(s).
15
GLOBAL_CONFIG
debug chip [ { 0 | 1 | all } ]
debug
EXEC
debug api [ interface <port_type_list> ] [ { ail | cil } ]
[ { init | misc | port | counters | phy | vlan | pvlan |
mac-table | acl | qos | aggr | stp | mirror | evc | erps
| eps | packet | fdma | ts | pts | wm | ipmc | stack |
cmef | mplscore | mplsoam | vxlat | oam | sgpio | l3
| afi | macsec } ] [ full ] [ clear ]
debug
EXEC
debug suspend
debug
EXEC
Loading...