Page 1
Dell PowerConnect
PCM6220, PCM6348, PCM8024,
PCM8024-k
CLI Reference Guide
Regulatory Model: PCM6220, PCM6348,
PCM8024, PCM8024-k
Regulatory Type: XXXXX
Page 2
Notes
NOTE: A NOTE indicates important information that helps you make better use of
your computer.
____________________
Information in this publication is subject to change without notice.
© 2011 Dell Inc. All rights reserved.
Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc.
is strictly forbidden.
Trademarks used in this text: Dell™, the DELL logo, and PowerConnect™ are trademarks of Dell
Inc. StrataXGS
InMon Corporation. Cisco
United States and ce rtain other countries. Microsoft
Microsoft Corporation in the United States and/or other countries.
Other trademarks and trade names may be used in this publication to refer to either the entities claiming
the marks and names or their products. Dell Inc. disclaims any proprietary interest in trademarks and
trade names other than its own.
®
is a registered trademark of Broadcom Corp. sFlow® is a registered trad emark of
®
is a regist ered trad emark of Cisco Systems, I nc. and/ or its affi liates i n the
®
and Windows®are registered trademarks of
Regulatory Model PCM6220, PCM6348, PCM8024, PCM8024-k
Regulatory Type: XXXXX
2011 - October P/N XXXXX Rev. A03
Page 3
Contents
1 Command Groups . . . . . . . . . . . . . . . . . . 75
Introduction . . . . . . . . . . . . . . . . . . . . . . . 75
Command Groups
Mode Types . . . . . . . . . . . . . . . . . . . . . . . 79
Layer 2 Commands
Data Center Technology Commands. . . . . . . . . . . 116
Layer 3 Commands . . . . . . . . . . . . . . . . . . . . 118
Utility Commands
. . . . . . . . . . . . . . . . . . . . 76
. . . . . . . . . . . . . . . . . . . . 81
. . . . . . . . . . . . . . . . . . . . 144
2 Using the CLI . . . . . . . . . . . . . . . . . . . . . 167
Introduction . . . . . . . . . . . . . . . . . . . . . . . 167
Entering and Editing CLI Commands. . . . . . . . . . . 167
CLI Command Modes
Starting the CLI. . . . . . . . . . . . . . . . . . . . . . 189
Using CLI Functions and Tools. . . . . . . . . . . . . . 197
. . . . . . . . . . . . . . . . . . 176
Contents 3
Page 4
3 Layer 2 Switching Commands . . . . . . . . 239
4 AAA Commands . . . . . . . . . . . . . . . . . . . 241
Commands in this Chapter . . . . . . . . . . . . . . . 242
aaa authentication dot1x default . . . . . . . . . . . 242
aaa authentication enable . . . . . . . . . . . . . . . 244
aaa authentication login
. . . . . . . . . . . . . . . . 245
aaa authorization network default radius. . . . . . . 247
aaa ias-user username. . . . . . . . . . . . . . . . . 248
aaa new-model
. . . . . . . . . . . . . . . . . . . . . 249
clear (IAS) . . . . . . . . . . . . . . . . . . . . . . . 249
enable authentication . . . . . . . . . . . . . . . . . 250
enable password
. . . . . . . . . . . . . . . . . . . . 251
ip http authentication . . . . . . . . . . . . . . . . . 252
ip https authentication . . . . . . . . . . . . . . . . . 253
login authentication
. . . . . . . . . . . . . . . . . . 254
password (aaa IAS User Configuration) . . . . . . . . 255
password (Line Configuration)
password (User EXEC)
. . . . . . . . . . . . . 256
. . . . . . . . . . . . . . . . . 257
show aaa ias-users . . . . . . . . . . . . . . . . . . 258
4 Contents
show authentication methods
. . . . . . . . . . . . . 259
Page 5
show users accounts . . . . . . . . . . . . . . . . . . 260
show users login-history
. . . . . . . . . . . . . . . . 262
username. . . . . . . . . . . . . . . . . . . . . . . . . 263
username password encrypted . . . . . . . . . . . . . 264
username unlock
. . . . . . . . . . . . . . . . . . . . 266
5 ACL Commands . . . . . . . . . . . . . . . . . . . 269
ACL Logging . . . . . . . . . . . . . . . . . . . . . . . 269
Commands in this Chapter. . . . . . . . . . . . . . . . 272
access-list
deny | permit (IP ACL) . . . . . . . . . . . . . . . . . . 274
deny | permit (Mac-Access-List-Configuration) . . . . 276
ip access-group
mac access-group . . . . . . . . . . . . . . . . . . . . 279
mac access-list extended . . . . . . . . . . . . . . . . 280
. . . . . . . . . . . . . . . . . . . . . . . . 272
. . . . . . . . . . . . . . . . . . . . . 278
mac access-list extended rename
. . . . . . . . . . . 281
service-acl input. . . . . . . . . . . . . . . . . . . . . 282
show service-acl interface
show ip access-lists
. . . . . . . . . . . . . . . 283
. . . . . . . . . . . . . . . . . . . 284
show mac access-list . . . . . . . . . . . . . . . . . . 285
Contents 5
Page 6
6 Address Table Commands . . . . . . . . . . . 287
Commands in this Chapter . . . . . . . . . . . . . . . 287
clear mac address-table . . . . . . . . . . . . . . . . 288
mac address-table aging-time. . . . . . . . . . . . . 289
mac address-table multicast filtering
. . . . . . . . . 290
mac address-table multicast forbidden address . . . 291
mac address-table multicast forbidden
forward-unregistered
. . . . . . . . . . . . . . . . . 292
mac address-table multicast forward-all . . . . . . . 293
mac address-table multicast
forward-unregistered
. . . . . . . . . . . . . . . . . 294
mac address-table multicast static . . . . . . . . . . 295
mac address-table static . . . . . . . . . . . . . . . 297
port security
. . . . . . . . . . . . . . . . . . . . . . 298
port security max. . . . . . . . . . . . . . . . . . . . 299
show mac address-table multicast . . . . . . . . . . 299
show mac address-table filtering
. . . . . . . . . . . 301
show mac address-table. . . . . . . . . . . . . . . . 302
6 Contents
show mac address-table address
show mac address-table count
. . . . . . . . . . . 303
. . . . . . . . . . . . 304
show mac address-table dynamic. . . . . . . . . . . 305
Page 7
show mac address-table interface . . . . . . . . . . . 307
show mac address-table static
. . . . . . . . . . . . . 308
show mac address-table vlan . . . . . . . . . . . . . . 309
show ports security . . . . . . . . . . . . . . . . . . . 310
show ports security addresses
. . . . . . . . . . . . . 311
7 Auto-VoIP Commands . . . . . . . . . . . . . . 313
Commands in this Chapter. . . . . . . . . . . . . . . . 313
show switchport voice . . . . . . . . . . . . . . . . . 314
switchport voice detect auto
. . . . . . . . . . . . . . 316
8 CDP Interoperability Commands . . . . . . 319
Commands in this Chapter. . . . . . . . . . . . . . . . 319
clear isdp counters . . . . . . . . . . . . . . . . . . . 319
clear isdp table
. . . . . . . . . . . . . . . . . . . . . 320
isdp advertise-v2. . . . . . . . . . . . . . . . . . . . . 320
isdp enable . . . . . . . . . . . . . . . . . . . . . . . . 321
isdp holdtime
. . . . . . . . . . . . . . . . . . . . . . . 322
isdp timer . . . . . . . . . . . . . . . . . . . . . . . . 323
show isdp
show isdp entry
. . . . . . . . . . . . . . . . . . . . . . . . 323
. . . . . . . . . . . . . . . . . . . . . 324
show isdp interface . . . . . . . . . . . . . . . . . . . 326
Contents 7
Page 8
show isdp neighbors . . . . . . . . . . . . . . . . . . 327
show isdp traffic
. . . . . . . . . . . . . . . . . . . . 329
9 DHCP Layer 2 Relay Commands. . . . . . . 331
Commands in this Chapter . . . . . . . . . . . . . . . 331
dhcp l2relay (Global Configuration) . . . . . . . . . . 331
dhcp l2relay (Interface Configuration)
dhcp l2relay circuit-id . . . . . . . . . . . . . . . . . 333
dhcp l2relay remote-id. . . . . . . . . . . . . . . . . 334
dhcp l2relay trust
. . . . . . . . . . . . . . . . . . . . 334
dhcp l2relay vlan . . . . . . . . . . . . . . . . . . . . 335
show dhcp l2relay all . . . . . . . . . . . . . . . . . 336
show dhcp l2relay interface
. . . . . . . . . . . . . . 337
show dhcp l2relay stats interface . . . . . . . . . . . 338
show dhcp l2relay subscription interface. . . . . . . 339
. . . . . . . . . 332
8 Contents
show dhcp l2relay agent-option vlan
. . . . . . . . . 340
show dhcp l2relay vlan . . . . . . . . . . . . . . . . 341
show dhcp l2relay circuit-id vlan
show dhcp l2relay remote-id vlan
. . . . . . . . . . . 342
. . . . . . . . . . . 343
clear dhcp l2relay statistics interface. . . . . . . . . 344
Page 9
10 DHCP Management Interface
Commands . . . . . . . . . . . . . . . . . . . . . . . 347
Commands in this Chapter. . . . . . . . . . . . . . . . 347
release dhcp
. . . . . . . . . . . . . . . . . . . . . . . 348
renew dhcp . . . . . . . . . . . . . . . . . . . . . . . 349
debug dhcp packet . . . . . . . . . . . . . . . . . . . 350
show dhcp lease
. . . . . . . . . . . . . . . . . . . . . 351
11 DHCP Snooping Commands . . . . . . . . . . 355
Commands in this Chapter. . . . . . . . . . . . . . . . 355
clear ip dhcp snooping binding . . . . . . . . . . . . . 356
clear ip dhcp snooping statistics
ip dhcp snooping. . . . . . . . . . . . . . . . . . . . . 357
ip dhcp snooping binding . . . . . . . . . . . . . . . . 358
ip dhcp snooping database
ip dhcp snooping database write-delay . . . . . . . . 360
ip dhcp snooping limit . . . . . . . . . . . . . . . . . . 361
. . . . . . . . . . . . 357
. . . . . . . . . . . . . . . 359
ip dhcp snooping log-invalid
. . . . . . . . . . . . . . 362
ip dhcp snooping trust . . . . . . . . . . . . . . . . . . 362
ip dhcp snooping verify mac-address
show ip dhcp snooping
. . . . . . . . . . . . . . . . . 364
. . . . . . . . . . 363
show ip dhcp snooping binding . . . . . . . . . . . . . 365
Contents 9
Page 10
show ip dhcp snooping database . . . . . . . . . . . 366
show ip dhcp snooping interfaces
. . . . . . . . . . 367
show ip dhcp snooping statistics . . . . . . . . . . . 368
12 Dynamic ARP Inspection Commands. . . 371
Commands in this Chapter . . . . . . . . . . . . . . . 371
arp access-list
clear ip arp inspection statistics . . . . . . . . . . . 372
ip arp inspection filter . . . . . . . . . . . . . . . . . 373
ip arp inspection limit
ip arp inspection trust . . . . . . . . . . . . . . . . . 374
ip arp inspection validate . . . . . . . . . . . . . . . 375
ip arp inspection vlan
permit ip host mac host . . . . . . . . . . . . . . . . 377
show arp access-list. . . . . . . . . . . . . . . . . . 378
. . . . . . . . . . . . . . . . . . . . . 371
. . . . . . . . . . . . . . . . . 373
. . . . . . . . . . . . . . . . . 376
13 Email Alerting Commands . . . . . . . . . . . 385
10 Contents
show ip arp inspection
. . . . . . . . . . . . . . . . . 378
show ip arp inspection vlan . . . . . . . . . . . . . . 381
Commands in this Chapter . . . . . . . . . . . . . . . 385
logging email
. . . . . . . . . . . . . . . . . . . . . . 386
logging email urgent . . . . . . . . . . . . . . . . . . 388
Page 11
logging traps . . . . . . . . . . . . . . . . . . . . . . . 389
logging email message-type to-addr
. . . . . . . . . . 390
logging email from-addr . . . . . . . . . . . . . . . . . 391
logging email message-type subject . . . . . . . . . . 391
logging email logtime
logging email test message-type
. . . . . . . . . . . . . . . . . . 392
. . . . . . . . . . . . 393
show logging email statistics . . . . . . . . . . . . . . 394
clear logging email statistics
. . . . . . . . . . . . . . 394
security. . . . . . . . . . . . . . . . . . . . . . . . . . 395
mail-server ip-address | hostname . . . . . . . . . . . 396
port (Mail Server Configuration Mode)
. . . . . . . . . 397
username (Mail Server Configuration Mode). . . . . . 397
password (Mail Server Configuration Mode). . . . . . 398
show mail-server
. . . . . . . . . . . . . . . . . . . . 399
14 Ethernet Configuration Commands . . . . 401
Commands in this Chapter. . . . . . . . . . . . . . . . 402
clear counters
description
duplex . . . . . . . . . . . . . . . . . . . . . . . . . . 404
flowcontrol
interface
. . . . . . . . . . . . . . . . . . . . . . 402
. . . . . . . . . . . . . . . . . . . . . . . . 403
. . . . . . . . . . . . . . . . . . . . . . . . 405
. . . . . . . . . . . . . . . . . . . . . . . . . 405
Contents 11
Page 12
interface range. . . . . . . . . . . . . . . . . . . . . 406
mtu
. . . . . . . . . . . . . . . . . . . . . . . . . . . 408
show interfaces advertise . . . . . . . . . . . . . . . 409
show interfaces configuration. . . . . . . . . . . . . 410
show interfaces counters
show interfaces description
. . . . . . . . . . . . . . . 412
. . . . . . . . . . . . . . 415
show interfaces detail. . . . . . . . . . . . . . . . . 416
show interfaces status
. . . . . . . . . . . . . . . . . 419
show statistics . . . . . . . . . . . . . . . . . . . . . 420
show statistics switchport . . . . . . . . . . . . . . 425
show storm-control
. . . . . . . . . . . . . . . . . . 427
shutdown . . . . . . . . . . . . . . . . . . . . . . . . 428
speed . . . . . . . . . . . . . . . . . . . . . . . . . . 429
storm-control broadcast
. . . . . . . . . . . . . . . . 430
storm-control multicast . . . . . . . . . . . . . . . . 431
storm-control unicast . . . . . . . . . . . . . . . . . 432
switchport protected
. . . . . . . . . . . . . . . . . . 433
switchport protected name . . . . . . . . . . . . . . 434
15 Ethernet CFM Commands. . . . . . . . . . . . 437
12 Contents
show switchport protected . . . . . . . . . . . . . . 434
Commands in this Chapter . . . . . . . . . . . . . . . 437
Page 13
ethernet cfm domain . . . . . . . . . . . . . . . . . . . 438
service
. . . . . . . . . . . . . . . . . . . . . . . . . . 439
ethernet cfm cc level . . . . . . . . . . . . . . . . . . 440
ethernet cfm mep level . . . . . . . . . . . . . . . . . 441
ethernet cfm mep enable
ethernet cfm mep active
. . . . . . . . . . . . . . . . 442
. . . . . . . . . . . . . . . . . 443
ethernet cfm mep archive-hold-time . . . . . . . . . . 444
ethernet cfm mip level
. . . . . . . . . . . . . . . . . . 444
ping ethernet cfm . . . . . . . . . . . . . . . . . . . . 445
traceroute ethernet cfm . . . . . . . . . . . . . . . . . 446
show ethernet cfm errors
. . . . . . . . . . . . . . . . 448
show ethernet cfm domain . . . . . . . . . . . . . . . 448
show ethernet cfm maintenance-points local . . . . . 449
show ethernet cfm maintenance-points remote
. . . . 450
show ethernet cfm statistics . . . . . . . . . . . . . . 452
debug cfm . . . . . . . . . . . . . . . . . . . . . . . . 453
16 GVRP Commands . . . . . . . . . . . . . . . . . . 457
Commands in this Chapter. . . . . . . . . . . . . . . . 457
clear gvrp statistics . . . . . . . . . . . . . . . . . . . 457
garp timer
gvrp enable (global)
. . . . . . . . . . . . . . . . . . . . . . . . 458
. . . . . . . . . . . . . . . . . . . 459
Contents 13
Page 14
gvrp enable (interface). . . . . . . . . . . . . . . . . 460
gvrp registration-forbid
. . . . . . . . . . . . . . . . 461
gvrp vlan-creation-forbid . . . . . . . . . . . . . . . 462
show gvrp configuration . . . . . . . . . . . . . . . . 462
show gvrp error-statistics
show gvrp statistics
. . . . . . . . . . . . . . . 464
. . . . . . . . . . . . . . . . . . 465
17 IGMP Snooping Commands . . . . . . . . . . 467
Commands in this Chapter . . . . . . . . . . . . . . . 468
ip igmp snooping (global)
ip igmp snooping (interface). . . . . . . . . . . . . . 469
ip igmp snooping host-time-out . . . . . . . . . . . . 470
ip igmp snooping leave-time-out
ip igmp snooping mrouter-time-out . . . . . . . . . . 471
show ip igmp snooping . . . . . . . . . . . . . . . . 472
. . . . . . . . . . . . . . . 468
. . . . . . . . . . . 470
14 Contents
show ip igmp snooping groups
. . . . . . . . . . . . 473
show ip igmp snooping interface . . . . . . . . . . . 474
show ip igmp snooping mrouter
ip igmp snooping (VLAN)
. . . . . . . . . . . . 475
. . . . . . . . . . . . . . . . 475
ip igmp snooping fast-leave . . . . . . . . . . . . . . 476
ip igmp snooping groupmembership-interval
. . . . . 477
Page 15
ip igmp snooping maxresponse . . . . . . . . . . . . . 478
ip igmp snooping mcrtrexpiretime
. . . . . . . . . . . 479
18 IGMP Snooping Querier Commands . . . 481
Commands in this Chapter. . . . . . . . . . . . . . . . 481
ip igmp snooping querier . . . . . . . . . . . . . . . . 481
ip igmp snooping querier election participate
. . . . . 483
ip igmp snooping querier query-interval . . . . . . . . 484
ip igmp snooping querier timer expiry . . . . . . . . . 485
ip igmp snooping querier version
. . . . . . . . . . . . 485
show ip igmp snooping querier . . . . . . . . . . . . . 486
19 IP Addressing Commands . . . . . . . . . . . 489
Commands in this Chapter. . . . . . . . . . . . . . . . 489
clear host
. . . . . . . . . . . . . . . . . . . . . . . . 490
clear ip address-conflict-detect . . . . . . . . . . . . 490
interface out-of-band . . . . . . . . . . . . . . . . . . 491
ip address (Out-of-Band)
. . . . . . . . . . . . . . . . 492
ip address-conflict-detect run. . . . . . . . . . . . . . 493
ip address dhcp (Interface Config)
ip default-gateway
. . . . . . . . . . . . . . . . . . . . 495
. . . . . . . . . . . 494
ip domain-lookup . . . . . . . . . . . . . . . . . . . . 496
Contents 15
Page 16
ip domain-name . . . . . . . . . . . . . . . . . . . . 497
ip host
. . . . . . . . . . . . . . . . . . . . . . . . . 498
ip name-server . . . . . . . . . . . . . . . . . . . . . 499
ipv6 address (Interface Config) . . . . . . . . . . . . 499
ipv6 address (OOB Port)
ipv6 address dhcp
. . . . . . . . . . . . . . . . 501
. . . . . . . . . . . . . . . . . . . 502
ipv6 enable (Interface Config) . . . . . . . . . . . . . 503
ipv6 enable (OOB Config)
. . . . . . . . . . . . . . . 504
ipv6 gateway (OOB Config) . . . . . . . . . . . . . . 505
show hosts . . . . . . . . . . . . . . . . . . . . . . . 505
show ip address-conflict
. . . . . . . . . . . . . . . 506
show ip helper-address . . . . . . . . . . . . . . . . 508
show ipv6 dhcp interface out-of-band statistics . . . 509
show ipv6 interface out-of-band
. . . . . . . . . . . . 510
20 IPv6 Access List Commands . . . . . . . . . 513
Commands in this Chapter . . . . . . . . . . . . . . . 513
{deny | permit} (IPv6 ACL)
. . . . . . . . . . . . . . . 514
16 Contents
ipv6 access-list
. . . . . . . . . . . . . . . . . . . . 516
ipv6 access-list rename . . . . . . . . . . . . . . . . 517
ipv6 traffic-filter
show ipv6 access-lists
. . . . . . . . . . . . . . . . . . . . 518
. . . . . . . . . . . . . . . . . 519
Page 17
21 IPv6 MLD Snooping Commands. . . . . . . 523
Commands in this Chapter. . . . . . . . . . . . . . . . 523
ipv6 mld snooping immediate-leave . . . . . . . . . . 524
ipv6 mld snooping groupmembership-interval . . . . . 525
ipv6 mld snooping maxresponse
. . . . . . . . . . . . 525
ipv6 mld snooping mcrtexpiretime . . . . . . . . . . . 526
ipv6 mld snooping (Global) . . . . . . . . . . . . . . . 527
ipv6 mld snooping (Interface)
. . . . . . . . . . . . . . 528
ipv6 mld snooping (VLAN) . . . . . . . . . . . . . . . . 529
show ipv6 mld snooping . . . . . . . . . . . . . . . . . 530
show ipv6 mld snooping groups
. . . . . . . . . . . . . 531
22 IPv6 MLD Snooping Querier
Commands . . . . . . . . . . . . . . . . . . . . . . . 535
Commands in this Chapter. . . . . . . . . . . . . . . . 535
ipv6 mld snooping querier. . . . . . . . . . . . . . . . 536
ipv6 mld snooping querier (VLAN mode) . . . . . . . . 536
ipv6 mld snooping querier address
. . . . . . . . . . . 537
ipv6 mld snooping querier election participate. . . . . 538
ipv6 mld snooping querier query-interval
ipv6 mld snooping querier timer expiry
. . . . . . . . 538
. . . . . . . . . 539
show ipv6 mld snooping querier . . . . . . . . . . . . 540
Contents 17
Page 18
23 IP Source Guard Commands . . . . . . . . . 543
Commands in this Chapter . . . . . . . . . . . . . . . 543
ip verify source. . . . . . . . . . . . . . . . . . . . . 543
ip verify source port-security . . . . . . . . . . . . . 544
ip verify binding
. . . . . . . . . . . . . . . . . . . . 545
show ip verify interface . . . . . . . . . . . . . . . . 545
show ip verify source interface . . . . . . . . . . . . 546
show ip source binding
. . . . . . . . . . . . . . . . 546
24 iSCSI Optimization Commands. . . . . . . . 549
Commands in this Chapter . . . . . . . . . . . . . . . 550
iscsi aging time . . . . . . . . . . . . . . . . . . . . 550
iscsi cos
iscsi enable . . . . . . . . . . . . . . . . . . . . . . 553
iscsi target port . . . . . . . . . . . . . . . . . . . . 554
show iscsi
show iscsi sessions . . . . . . . . . . . . . . . . . . 557
. . . . . . . . . . . . . . . . . . . . . . . . 551
. . . . . . . . . . . . . . . . . . . . . . . 556
25 Link Dependency Commands . . . . . . . . . 561
18 Contents
Commands in this Chapter . . . . . . . . . . . . . . . 561
action
. . . . . . . . . . . . . . . . . . . . . . . . . . 561
link-dependency group . . . . . . . . . . . . . . . . 562
Page 19
add gigabitethernet . . . . . . . . . . . . . . . . . . . 563
add tengigabitethernet
. . . . . . . . . . . . . . . . . 563
add port-channel. . . . . . . . . . . . . . . . . . . . . 564
depends-on. . . . . . . . . . . . . . . . . . . . . . . . 565
show link-dependency
. . . . . . . . . . . . . . . . . 566
26 LLDP Commands . . . . . . . . . . . . . . . . . . 569
Commands in this Chapter. . . . . . . . . . . . . . . . 570
clear lldp remote-data . . . . . . . . . . . . . . . . . . 570
clear lldp statistics
lldp notification . . . . . . . . . . . . . . . . . . . . . 572
lldp notification-interval. . . . . . . . . . . . . . . . . 572
lldp receive
lldp timers . . . . . . . . . . . . . . . . . . . . . . . . 574
lldp transmit . . . . . . . . . . . . . . . . . . . . . . . 575
. . . . . . . . . . . . . . . . . . . 571
. . . . . . . . . . . . . . . . . . . . . . . 573
lldp transmit-mgmt
. . . . . . . . . . . . . . . . . . . . 576
lldp transmit-tlv . . . . . . . . . . . . . . . . . . . . . 576
show lldp
show lldp interface
. . . . . . . . . . . . . . . . . . . . . . . . . 577
. . . . . . . . . . . . . . . . . . . 578
show lldp local-device . . . . . . . . . . . . . . . . . 579
show lldp remote-device
show lldp statistics
. . . . . . . . . . . . . . . . 581
. . . . . . . . . . . . . . . . . . . 582
Contents 19
Page 20
27 Multicast VLAN Registration
Commands . . . . . . . . . . . . . . . . . . . . . . . 585
Commands in this Chapter . . . . . . . . . . . . . . . 586
mvr
. . . . . . . . . . . . . . . . . . . . . . . . . . . 586
mvr group. . . . . . . . . . . . . . . . . . . . . . . . 587
mvr mode . . . . . . . . . . . . . . . . . . . . . . . . 588
mvr querytime
. . . . . . . . . . . . . . . . . . . . . 588
mvr vlan . . . . . . . . . . . . . . . . . . . . . . . . 590
mvr immediate . . . . . . . . . . . . . . . . . . . . . 590
mvr type
. . . . . . . . . . . . . . . . . . . . . . . . 591
mvr vlan group . . . . . . . . . . . . . . . . . . . . . 593
show mvr . . . . . . . . . . . . . . . . . . . . . . . . 594
show mvr members
. . . . . . . . . . . . . . . . . . 596
show mvr interface . . . . . . . . . . . . . . . . . . 597
show mvr traffic . . . . . . . . . . . . . . . . . . . . 599
28 Port Aggregator Commands . . . . . . . . . 601
add ethernet . . . . . . . . . . . . . . . . . . . . . . 601
duplex . . . . . . . . . . . . . . . . . . . . . . . . . 602
minimum active uplinks
. . . . . . . . . . . . . . . . 603
20 Contents
mtu disable
. . . . . . . . . . . . . . . . . . . . . . . 603
negotiation . . . . . . . . . . . . . . . . . . . . . . . 604
Page 21
port-aggregator group . . . . . . . . . . . . . . . . . . 605
show bridge address-table
. . . . . . . . . . . . . . . 606
speed . . . . . . . . . . . . . . . . . . . . . . . . . . . 607
29 Port Channel Commands . . . . . . . . . . . . 609
Static LAGS . . . . . . . . . . . . . . . . . . . . . . . 609
VLANs and LAGs
LAG Thresholds . . . . . . . . . . . . . . . . . . . . . 610
Port Channels . . . . . . . . . . . . . . . . . . . . . . 610
LAG Hashing
Enhanced LAG Hashing . . . . . . . . . . . . . . . . . 612
Manual Aggregation of LAGs . . . . . . . . . . . . . . 613
Manual Aggregation of LAGs
Flexible Assignment of Ports to LAGs. . . . . . . . . . 613
Commands in this Chapter. . . . . . . . . . . . . . . . 613
. . . . . . . . . . . . . . . . . . . . . 610
. . . . . . . . . . . . . . . . . . . . . . . 611
. . . . . . . . . . . . . . 613
channel-group
. . . . . . . . . . . . . . . . . . . . . . 614
interface port-channel . . . . . . . . . . . . . . . . . . 615
interface range port-channel
hashing-mode
. . . . . . . . . . . . . . . . . . . . . . 616
. . . . . . . . . . . . . . 615
lacp auto . . . . . . . . . . . . . . . . . . . . . . . . . 617
lacp off
. . . . . . . . . . . . . . . . . . . . . . . . . . 618
lacp port-priority
. . . . . . . . . . . . . . . . . . . . . 619
Contents 21
Page 22
lacp static . . . . . . . . . . . . . . . . . . . . . . . 619
lacp system-priority
. . . . . . . . . . . . . . . . . . 620
lacp timeout . . . . . . . . . . . . . . . . . . . . . . 621
no lacp . . . . . . . . . . . . . . . . . . . . . . . . . 622
port-channel min-links
show interfaces port-channel
. . . . . . . . . . . . . . . . . 622
. . . . . . . . . . . . . 623
show lacp . . . . . . . . . . . . . . . . . . . . . . . 624
show statistics port-channel
. . . . . . . . . . . . . 626
30 Port Monitor Commands . . . . . . . . . . . . 631
Commands in this Chapter . . . . . . . . . . . . . . . 631
monitor session . . . . . . . . . . . . . . . . . . . . 632
show monitor session
. . . . . . . . . . . . . . . . . 633
31 QoS Commands . . . . . . . . . . . . . . . . . . . 635
22 Contents
Access Control Lists . . . . . . . . . . . . . . . . . . 635
Layer 2 ACLs . . . . . . . . . . . . . . . . . . . . . . 636
Layer 3/4 IPv4 ACLs
. . . . . . . . . . . . . . . . . . 636
Class of Service (CoS) . . . . . . . . . . . . . . . . . 636
Queue Mapping
PCM6220 Limitations
. . . . . . . . . . . . . . . . . . . . 637
. . . . . . . . . . . . . . . . . . 638
Commands in this Chapter . . . . . . . . . . . . . . . 638
Page 23
assign-queue. . . . . . . . . . . . . . . . . . . . . . . 639
class
. . . . . . . . . . . . . . . . . . . . . . . . . . . 640
class-map . . . . . . . . . . . . . . . . . . . . . . . . 641
class-map rename . . . . . . . . . . . . . . . . . . . . 641
classofservice dot1p-mapping
classofservice ip-dscp-mapping
. . . . . . . . . . . . . 642
. . . . . . . . . . . . 643
classofservice trust . . . . . . . . . . . . . . . . . . . 644
conform-color
. . . . . . . . . . . . . . . . . . . . . . 645
cos-queue min-bandwidth . . . . . . . . . . . . . . . 646
cos-queue random-detect . . . . . . . . . . . . . . . . 646
cos-queue strict
. . . . . . . . . . . . . . . . . . . . . 648
diffserv . . . . . . . . . . . . . . . . . . . . . . . . . . 649
drop. . . . . . . . . . . . . . . . . . . . . . . . . . . . 649
mark cos
. . . . . . . . . . . . . . . . . . . . . . . . . 650
mark ip-dscp . . . . . . . . . . . . . . . . . . . . . . . 651
mark ip-precedence . . . . . . . . . . . . . . . . . . . 652
match class-map
. . . . . . . . . . . . . . . . . . . . . 652
match cos . . . . . . . . . . . . . . . . . . . . . . . . 654
match destination-address mac. . . . . . . . . . . . . 654
match dstip
. . . . . . . . . . . . . . . . . . . . . . . . 655
match dstip6 . . . . . . . . . . . . . . . . . . . . . . . 656
Contents 23
Page 24
match dstl4port . . . . . . . . . . . . . . . . . . . . . 657
match ethertype
. . . . . . . . . . . . . . . . . . . . 658
match ip6flowlbl . . . . . . . . . . . . . . . . . . . . 658
match ip dscp . . . . . . . . . . . . . . . . . . . . . 659
match ip precedence
match ip tos
. . . . . . . . . . . . . . . . . . 660
. . . . . . . . . . . . . . . . . . . . . . 661
match protocol . . . . . . . . . . . . . . . . . . . . . 662
match source-address mac
. . . . . . . . . . . . . . 663
match srcip . . . . . . . . . . . . . . . . . . . . . . . 664
match srcip6 . . . . . . . . . . . . . . . . . . . . . . 664
match srcl4port
. . . . . . . . . . . . . . . . . . . . . 665
match vlan . . . . . . . . . . . . . . . . . . . . . . . 666
mirror . . . . . . . . . . . . . . . . . . . . . . . . . . 667
police-simple
. . . . . . . . . . . . . . . . . . . . . . 667
policy-map . . . . . . . . . . . . . . . . . . . . . . . 668
24 Contents
redirect . . . . . . . . . . . . . . . . . . . . . . . . . 670
service-policy
. . . . . . . . . . . . . . . . . . . . . 670
show class-map . . . . . . . . . . . . . . . . . . . . 672
show classofservice dot1p-mapping . . . . . . . . . 673
show classofservice ip-dscp-mapping
. . . . . . . . 675
show classofservice trust . . . . . . . . . . . . . . . 678
Page 25
show diffserv. . . . . . . . . . . . . . . . . . . . . . . 679
show diffserv service interface
. . . . . . . . . . . . . 680
show diffserv service interface port-channel . . . . . 681
show diffserv service brief . . . . . . . . . . . . . . . 682
show interfaces cos-queue
show interfaces random-detect
. . . . . . . . . . . . . . . 682
. . . . . . . . . . . . . 685
show policy-map . . . . . . . . . . . . . . . . . . . . 686
show policy-map interface
. . . . . . . . . . . . . . . 686
show service-policy . . . . . . . . . . . . . . . . . . . 688
traffic-shape . . . . . . . . . . . . . . . . . . . . . . . 689
32 RADIUS Commands . . . . . . . . . . . . . . . . 691
Commands in this Chapter. . . . . . . . . . . . . . . . 694
aaa accounting network default start-stop group
radius. . . . . . . . . . . . . . . . . . . . . . . . . . . 695
acct-port
. . . . . . . . . . . . . . . . . . . . . . . . . 695
auth-port . . . . . . . . . . . . . . . . . . . . . . . . . 696
deadtime
key
. . . . . . . . . . . . . . . . . . . . . . . . . 697
. . . . . . . . . . . . . . . . . . . . . . . . . . . . 698
msgauth . . . . . . . . . . . . . . . . . . . . . . . . . 698
name (RADIUS server)
primary
. . . . . . . . . . . . . . . . . . . . . . . . . . 700
. . . . . . . . . . . . . . . . . . 699
Contents 25
Page 26
priority . . . . . . . . . . . . . . . . . . . . . . . . . 701
radius-server deadtime
. . . . . . . . . . . . . . . . 702
radius-server host . . . . . . . . . . . . . . . . . . . 703
radius-server key . . . . . . . . . . . . . . . . . . . 704
radius-server retransmit
radius-server source-ip
. . . . . . . . . . . . . . . . 705
. . . . . . . . . . . . . . . . 705
radius-server timeout . . . . . . . . . . . . . . . . . 706
retransmit
. . . . . . . . . . . . . . . . . . . . . . . 707
show aaa servers . . . . . . . . . . . . . . . . . . . 708
show radius statistics . . . . . . . . . . . . . . . . . 711
source-ip
. . . . . . . . . . . . . . . . . . . . . . . . 715
timeout . . . . . . . . . . . . . . . . . . . . . . . . . 716
usage . . . . . . . . . . . . . . . . . . . . . . . . . . 717
33 Spanning Tree Commands . . . . . . . . . . . 719
26 Contents
Commands in this Chapter . . . . . . . . . . . . . . . 720
clear spanning-tree detected-protocols . . . . . . . 721
exit (mst)
instance (mst)
. . . . . . . . . . . . . . . . . . . . . . . . 721
. . . . . . . . . . . . . . . . . . . . . 722
name (mst) . . . . . . . . . . . . . . . . . . . . . . . 724
revision (mst)
show spanning-tree
. . . . . . . . . . . . . . . . . . . . . . 725
. . . . . . . . . . . . . . . . . . 725
Page 27
show spanning-tree summary . . . . . . . . . . . . . . 729
spanning-tree
. . . . . . . . . . . . . . . . . . . . . . 731
spanning-tree auto-portfast . . . . . . . . . . . . . . . 732
spanning-tree bpdu flooding . . . . . . . . . . . . . . 732
spanning-tree bpdu-protection
spanning-tree cost
. . . . . . . . . . . . . . . . . . . . 734
. . . . . . . . . . . . . 733
spanning-tree disable . . . . . . . . . . . . . . . . . . 735
spanning-tree forward-time
. . . . . . . . . . . . . . . 736
spanning-tree guard . . . . . . . . . . . . . . . . . . . 737
spanning-tree loopguard . . . . . . . . . . . . . . . . 737
spanning-tree max-age
. . . . . . . . . . . . . . . . . 738
spanning-tree max-hops. . . . . . . . . . . . . . . . . 739
spanning-tree mode . . . . . . . . . . . . . . . . . . . 740
spanning-tree mst configuration
. . . . . . . . . . . . 740
spanning-tree mst cost . . . . . . . . . . . . . . . . . 741
spanning-tree mst port-priority . . . . . . . . . . . . . 742
spanning-tree mst priority
. . . . . . . . . . . . . . . . 743
spanning-tree portfast . . . . . . . . . . . . . . . . . . 744
spanning-tree portfast bpdufilter default . . . . . . . . 745
spanning-tree portfast default
. . . . . . . . . . . . . . 746
spanning-tree port-priority . . . . . . . . . . . . . . . 747
Contents 27
Page 28
spanning-tree priority . . . . . . . . . . . . . . . . . 748
spanning-tree tcnguard
. . . . . . . . . . . . . . . . 748
spanning-tree transmit hold-count . . . . . . . . . . 749
34 TACACS+ Commands . . . . . . . . . . . . . . . 751
Commands in this Chapter . . . . . . . . . . . . . . . 752
key
. . . . . . . . . . . . . . . . . . . . . . . . . . . 752
port . . . . . . . . . . . . . . . . . . . . . . . . . . . 753
priority . . . . . . . . . . . . . . . . . . . . . . . . . 753
show tacacs
tacacs-server host . . . . . . . . . . . . . . . . . . . 755
tacacs-server key . . . . . . . . . . . . . . . . . . . 756
tacacs-server timeout
timeout . . . . . . . . . . . . . . . . . . . . . . . . . 757
. . . . . . . . . . . . . . . . . . . . . . 754
. . . . . . . . . . . . . . . . . 757
35 VLAN Commands . . . . . . . . . . . . . . . . . . 759
28 Contents
Double VLAN Mode . . . . . . . . . . . . . . . . . . 759
Independent VLAN Learning
. . . . . . . . . . . . . . 760
Protocol Based VLANs . . . . . . . . . . . . . . . . . 760
IP Subnet Based VLANs
MAC-Based VLANs
. . . . . . . . . . . . . . . . 761
. . . . . . . . . . . . . . . . . . 761
Commands in this Chapter . . . . . . . . . . . . . . . 761
Page 29
dvlan-tunnel ethertype. . . . . . . . . . . . . . . . . . 762
interface vlan
. . . . . . . . . . . . . . . . . . . . . . 763
interface range vlan . . . . . . . . . . . . . . . . . . . 764
mode dvlan-tunnel . . . . . . . . . . . . . . . . . . . . 765
name (VLAN Configuration)
protocol group
. . . . . . . . . . . . . . . . . . . . . . 767
. . . . . . . . . . . . . . . 766
protocol vlan group . . . . . . . . . . . . . . . . . . . 768
protocol vlan group all
. . . . . . . . . . . . . . . . . . 769
show dvlan-tunnel . . . . . . . . . . . . . . . . . . . . 770
show dvlan-tunnel interface . . . . . . . . . . . . . . 771
show interfaces switchport
. . . . . . . . . . . . . . . 772
show port protocol. . . . . . . . . . . . . . . . . . . . 776
show vlan . . . . . . . . . . . . . . . . . . . . . . . . 777
show vlan association mac
. . . . . . . . . . . . . . . 778
show vlan association subnet . . . . . . . . . . . . . . 779
switchport access vlan . . . . . . . . . . . . . . . . . 780
switchport forbidden vlan
. . . . . . . . . . . . . . . . 781
switchport general acceptable-frame-type
tagged-only . . . . . . . . . . . . . . . . . . . . . . . 782
switchport general allowed vlan
. . . . . . . . . . . . 782
switchport general ingress-filtering disable . . . . . . 783
Contents 29
Page 30
switchport general pvid . . . . . . . . . . . . . . . . 784
switchport mode
. . . . . . . . . . . . . . . . . . . . 785
switchport trunk . . . . . . . . . . . . . . . . . . . . 786
vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . 788
vlan (Global Config)
vlan association mac
. . . . . . . . . . . . . . . . . . 789
. . . . . . . . . . . . . . . . . 790
vlan association subnet . . . . . . . . . . . . . . . . 790
vlan database
. . . . . . . . . . . . . . . . . . . . . 791
vlan makestatic . . . . . . . . . . . . . . . . . . . . 792
vlan protocol group . . . . . . . . . . . . . . . . . . 793
vlan protocol group add protocol
. . . . . . . . . . . 794
vlan protocol group name . . . . . . . . . . . . . . . 795
vlan protocol group remove . . . . . . . . . . . . . . 795
vlan routing
. . . . . . . . . . . . . . . . . . . . . . . 796
36 Voice VLAN Commands . . . . . . . . . . . . . 799
30 Contents
Commands in this Chapter . . . . . . . . . . . . . . . 800
voice vlan
voice vlan (Interface)
. . . . . . . . . . . . . . . . . . . . . . . 800
. . . . . . . . . . . . . . . . . 800
voice vlan data priority . . . . . . . . . . . . . . . . 802
show voice vlan
. . . . . . . . . . . . . . . . . . . . 802
Page 31
37 802.1x Commands . . . . . . . . . . . . . . . . . 805
Local 802.1X Authentication Server . . . . . . . . . . . 805
MAC Authentication Bypass. . . . . . . . . . . . . . . 806
Guest VLAN . . . . . . . . . . . . . . . . . . . . . . . 807
802.1x Monitor Mode
. . . . . . . . . . . . . . . . . . 807
RADIUS-based Dynamic VLAN Assignment . . . . . . 808
Commands in this Chapter. . . . . . . . . . . . . . . . 808
dot1x dynamic-vlan enable
. . . . . . . . . . . . . . . 809
dot1x initialize . . . . . . . . . . . . . . . . . . . . . . 810
dot1x mac-auth-bypass . . . . . . . . . . . . . . . . . 810
dot1x max-req
. . . . . . . . . . . . . . . . . . . . . . 811
dot1x max-users . . . . . . . . . . . . . . . . . . . . . 812
dot1x port-control . . . . . . . . . . . . . . . . . . . . 813
dot1x re-authenticate
. . . . . . . . . . . . . . . . . . 814
dot1x reauthentication. . . . . . . . . . . . . . . . . . 815
dot1x system-auth-control monitor . . . . . . . . . . . 815
dot1x timeout guest-vlan-period
. . . . . . . . . . . . 816
dot1x timeout quiet-period . . . . . . . . . . . . . . . 817
dot1x timeout re-authperiod
dot1x timeout server-timeout
. . . . . . . . . . . . . . . 818
. . . . . . . . . . . . . . 819
dot1x timeout supp-timeout . . . . . . . . . . . . . . . 820
Contents 31
Page 32
dot1x timeout tx-period . . . . . . . . . . . . . . . . 821
show dot1x
. . . . . . . . . . . . . . . . . . . . . . . 822
show dot1x authentication-history . . . . . . . . . . 823
show dot1x clients. . . . . . . . . . . . . . . . . . . 825
show dot1x interface
show dot1x statistics
. . . . . . . . . . . . . . . . . . 827
. . . . . . . . . . . . . . . . . 829
show dot1x users . . . . . . . . . . . . . . . . . . . 831
clear dot1x authentication–history
. . . . . . . . . . 832
dot1x guest-vlan . . . . . . . . . . . . . . . . . . . . 833
dot1x unauth-vlan . . . . . . . . . . . . . . . . . . . 834
show dot1x advanced
. . . . . . . . . . . . . . . . . 835
radius-server attribute 4 . . . . . . . . . . . . . . . . 836
38 Data Center Technology Commands . . . 839
39 Data Center Bridging Commands . . . . . 841
32 Contents
Data Center Bridging Exchange Protocol . . . . . . . 841
Interoperability with IEEE DCBX
. . . . . . . . . . . . 842
Port Roles . . . . . . . . . . . . . . . . . . . . . . . 842
Commands in this Chapter
datacenter-bridging
. . . . . . . . . . . . . . . 845
. . . . . . . . . . . . . . . . . . 846
lldp dcbx version. . . . . . . . . . . . . . . . . . . . 846
Page 33
lldp tlv-select dcbxp. . . . . . . . . . . . . . . . . . . 848
lldp dcbx port-role
. . . . . . . . . . . . . . . . . . . . 849
show lldp tlv-select . . . . . . . . . . . . . . . . . . . 850
show lldp dcbx. . . . . . . . . . . . . . . . . . . . . . 852
40 FIP Snooping Commands. . . . . . . . . . . . 859
Setting Up FIP Snooping. . . . . . . . . . . . . . . . . 859
Commands in this Chapter. . . . . . . . . . . . . . . . 860
feature fip-snooping . . . . . . . . . . . . . . . . . . . 861
fip-snooping enable
fip-snooping fc-map . . . . . . . . . . . . . . . . . . . 863
fip-snooping port-mode . . . . . . . . . . . . . . . . . 864
show fip-snooping
show fip-snooping enode . . . . . . . . . . . . . . . . 867
show fip-snooping fcf . . . . . . . . . . . . . . . . . . 869
. . . . . . . . . . . . . . . . . . . 862
. . . . . . . . . . . . . . . . . . . . 865
show fip-snooping sessions
. . . . . . . . . . . . . . . 872
show fip-snooping statistics . . . . . . . . . . . . . . 880
show fip-snooping vlan
clear fip-snooping statistics
. . . . . . . . . . . . . . . . . 887
. . . . . . . . . . . . . . . 889
41 Priority Flow Control Commands . . . . . . 891
Commands in this Chapter. . . . . . . . . . . . . . . . 892
Contents 33
Page 34
priority-flow-control mode . . . . . . . . . . . . . . 892
priority-flow-control priority
. . . . . . . . . . . . . . 893
clear priority-flow-control statistics . . . . . . . . . 895
show interfaces priority-flow-control. . . . . . . . . 895
42 Layer 3 Commands . . . . . . . . . . . . . . . . . 899
43 ARP Commands . . . . . . . . . . . . . . . . . . . 901
ARP Aging . . . . . . . . . . . . . . . . . . . . . . . 902
Commands in this Chapter . . . . . . . . . . . . . . . 902
arp . . . . . . . . . . . . . . . . . . . . . . . . . . . 902
arp cachesize
arp dynamicrenew . . . . . . . . . . . . . . . . . . . 904
arp purge . . . . . . . . . . . . . . . . . . . . . . . . 905
arp resptime
. . . . . . . . . . . . . . . . . . . . . 903
. . . . . . . . . . . . . . . . . . . . . . 906
34 Contents
arp retries . . . . . . . . . . . . . . . . . . . . . . . 907
arp timeout . . . . . . . . . . . . . . . . . . . . . . . 907
clear arp-cache
. . . . . . . . . . . . . . . . . . . . 908
clear arp-cache management . . . . . . . . . . . . . 909
ip local-proxy-arp
ip proxy-arp
. . . . . . . . . . . . . . . . . . . 910
. . . . . . . . . . . . . . . . . . . . . . 910
show arp . . . . . . . . . . . . . . . . . . . . . . . . 911
Page 35
44 DHCP Server and Relay Agent
Commands . . . . . . . . . . . . . . . . . . . . . . . 913
Commands in this Chapter. . . . . . . . . . . . . . . . 914
ip dhcp pool
. . . . . . . . . . . . . . . . . . . . . . . 914
bootfile . . . . . . . . . . . . . . . . . . . . . . . . . . 917
clear ip dhcp binding . . . . . . . . . . . . . . . . . . 918
clear ip dhcp conflict
. . . . . . . . . . . . . . . . . . 919
client-identifier . . . . . . . . . . . . . . . . . . . . . 919
client-name . . . . . . . . . . . . . . . . . . . . . . . 920
default-router
. . . . . . . . . . . . . . . . . . . . . . 921
dns-server (IP DHCP Pool Config) . . . . . . . . . . . . 922
domain-name (IP DHCP Pool Config) . . . . . . . . . . 923
hardware-address
. . . . . . . . . . . . . . . . . . . . 924
host. . . . . . . . . . . . . . . . . . . . . . . . . . . . 925
ip dhcp bootp automatic . . . . . . . . . . . . . . . . . 926
ip dhcp conflict logging
. . . . . . . . . . . . . . . . . 926
ip dhcp excluded-address. . . . . . . . . . . . . . . . 927
ip dhcp ping packets
lease
. . . . . . . . . . . . . . . . . . . . . . . . . . . 929
. . . . . . . . . . . . . . . . . . . 928
netbios-name-server. . . . . . . . . . . . . . . . . . . 930
netbios-node-type
network
. . . . . . . . . . . . . . . . . . . . . . . . . 932
. . . . . . . . . . . . . . . . . . . . 931
Contents 35
Page 36
next-server . . . . . . . . . . . . . . . . . . . . . . . 933
option
. . . . . . . . . . . . . . . . . . . . . . . . . . 934
service dhcp . . . . . . . . . . . . . . . . . . . . . . 938
sntp . . . . . . . . . . . . . . . . . . . . . . . . . . . 938
show ip dhcp binding
show ip dhcp conflict
. . . . . . . . . . . . . . . . . 939
. . . . . . . . . . . . . . . . . 940
show ip dhcp global configuration . . . . . . . . . . 941
show ip dhcp pool
. . . . . . . . . . . . . . . . . . . 942
show ip dhcp server statistics. . . . . . . . . . . . . 942
45 DHCPv6 Commands . . . . . . . . . . . . . . . . 945
clear ipv6 dhcp . . . . . . . . . . . . . . . . . . . . . 945
dns-server (IPv6 DHCP Pool Config)
domain-name (IPv6 DHCP Pool Config) . . . . . . . . 946
ipv6 dhcp pool . . . . . . . . . . . . . . . . . . . . . 947
ipv6 dhcp relay
. . . . . . . . . . . . . . . . . . . . . 948
ipv6 dhcp server . . . . . . . . . . . . . . . . . . . . 949
prefix-delegation
. . . . . . . . . . . . . . . . . . . . 950
. . . . . . . . . . 946
36 Contents
service dhcpv6
. . . . . . . . . . . . . . . . . . . . . 952
show ipv6 dhcp. . . . . . . . . . . . . . . . . . . . . 953
show ipv6 dhcp binding
show ipv6 dhcp interface (User EXEC)
. . . . . . . . . . . . . . . . 953
. . . . . . . . 954
Page 37
show ipv6 dhcp interface (Privileged EXEC) . . . . . . 956
show ipv6 dhcp pool
. . . . . . . . . . . . . . . . . . . 959
show ipv6 dhcp statistics . . . . . . . . . . . . . . . . 960
46 DVMRP Commands . . . . . . . . . . . . . . . . 963
Commands in this Chapter. . . . . . . . . . . . . . . . 963
ip dvmrp
ip dvmrp metric . . . . . . . . . . . . . . . . . . . . . 964
show ip dvmrp . . . . . . . . . . . . . . . . . . . . . . 965
show ip dvmrp interface
show ip dvmrp neighbor . . . . . . . . . . . . . . . . . 966
show ip dvmrp nexthop . . . . . . . . . . . . . . . . . 967
show ip dvmrp prune
show ip dvmrp route . . . . . . . . . . . . . . . . . . . 969
. . . . . . . . . . . . . . . . . . . . . . . . . 963
. . . . . . . . . . . . . . . . . 966
. . . . . . . . . . . . . . . . . . 968
47 GMRP Commands . . . . . . . . . . . . . . . . . 971
Commands in this Chapter. . . . . . . . . . . . . . . . 972
gmrp enable
. . . . . . . . . . . . . . . . . . . . . . . 972
show gmrp configuration . . . . . . . . . . . . . . . . 973
48 IGMP Commands . . . . . . . . . . . . . . . . . . 975
Commands in this Chapter. . . . . . . . . . . . . . . . 976
Contents 37
Page 38
ip igmp . . . . . . . . . . . . . . . . . . . . . . . . . 976
ip igmp last-member-query-count
. . . . . . . . . . . 977
ip igmp last-member-query-interval. . . . . . . . . . 978
ip igmp query-interval . . . . . . . . . . . . . . . . . 979
ip igmp query-max-response-time
ip igmp robustness
. . . . . . . . . . . . . . . . . . . 980
. . . . . . . . . . 980
ip igmp startup-query-count . . . . . . . . . . . . . . 981
ip igmp startup-query-interval
. . . . . . . . . . . . . 982
ip igmp version. . . . . . . . . . . . . . . . . . . . . 983
show ip igmp . . . . . . . . . . . . . . . . . . . . . . 983
show ip igmp groups
. . . . . . . . . . . . . . . . . . 984
show ip igmp interface . . . . . . . . . . . . . . . . 985
show ip igmp membership. . . . . . . . . . . . . . . 987
show ip igmp interface stats
. . . . . . . . . . . . . . 987
ip igmp router-alert-optional . . . . . . . . . . . . . 988
49 IGMP Proxy Commands . . . . . . . . . . . . . 991
38 Contents
Commands in this Chapter . . . . . . . . . . . . . . . 991
ip igmp-proxy
. . . . . . . . . . . . . . . . . . . . . . 991
ip igmp-proxy reset-status. . . . . . . . . . . . . . . 992
ip igmp-proxy unsolicited-report-interval
show ip igmp-proxy
. . . . . . . . . . . . . . . . . . 994
. . . . . . . 993
Page 39
show ip igmp-proxy interface . . . . . . . . . . . . . . 995
show ip igmp-proxy groups
. . . . . . . . . . . . . . . 996
show ip igmp-proxy groups detail . . . . . . . . . . . 996
50 IP Helper/DHCP Relay Commands. . . . . 999
Commands in this Chapter. . . . . . . . . . . . . . . 1001
bootpdhcprelay maxhopcount
bootpdhcprelay minwaittime . . . . . . . . . . . . . 1002
clear ip helper statistics. . . . . . . . . . . . . . . . 1003
ip dhcp relay information check
ip dhcp relay information check-reply . . . . . . . . 1004
ip dhcp relay information option . . . . . . . . . . . 1005
ip dhcp relay information option-insert
ip helper-address (global configuration) . . . . . . . 1007
ip helper-address (interface configuration). . . . . . 1009
. . . . . . . . . . . . . 1001
. . . . . . . . . . . 1003
. . . . . . . . 1006
ip helper enable
. . . . . . . . . . . . . . . . . . . . 1011
show ip helper-address . . . . . . . . . . . . . . . . 1012
show ip dhcp relay
show ip helper statistics
. . . . . . . . . . . . . . . . . . . 1013
. . . . . . . . . . . . . . . 1014
51 IP Routing Commands . . . . . . . . . . . . . 1017
Static Routes/ECMP Static Routes . . . . . . . . . . 1017
Contents 39
Page 40
Static Reject Routes . . . . . . . . . . . . . . . . . . 1018
Default Routes
. . . . . . . . . . . . . . . . . . . . . 1018
Commands in this Chapter . . . . . . . . . . . . . . . 1018
encapsulation . . . . . . . . . . . . . . . . . . . . . 1019
ip address
ip mtu
. . . . . . . . . . . . . . . . . . . . . . . 1019
. . . . . . . . . . . . . . . . . . . . . . . . . . 1021
ip netdirbcast. . . . . . . . . . . . . . . . . . . . . . 1022
ip route
. . . . . . . . . . . . . . . . . . . . . . . . . 1023
ip route default . . . . . . . . . . . . . . . . . . . . . 1024
ip route distance . . . . . . . . . . . . . . . . . . . . 1025
ip routing
. . . . . . . . . . . . . . . . . . . . . . . . 1026
routing . . . . . . . . . . . . . . . . . . . . . . . . . 1027
show ip brief . . . . . . . . . . . . . . . . . . . . . . 1027
show ip interface
. . . . . . . . . . . . . . . . . . . 1028
show ip protocols . . . . . . . . . . . . . . . . . . . 1031
40 Contents
show ip route . . . . . . . . . . . . . . . . . . . . . . 1032
show ip route configured
. . . . . . . . . . . . . . . 1034
show ip route preferences . . . . . . . . . . . . . . . 1035
show ip route summary . . . . . . . . . . . . . . . . 1036
show ip traffic
. . . . . . . . . . . . . . . . . . . . . 1037
show ip vlan . . . . . . . . . . . . . . . . . . . . . . 1039
Page 41
52 IPv6 PIM Commands . . . . . . . . . . . . . . 1041
ipv6 pim . . . . . . . . . . . . . . . . . . . . . . . . 1041
ipv6 pim sparse (Global config) . . . . . . . . . . . . 1042
ipv6 pim dense . . . . . . . . . . . . . . . . . . . . . 1042
ipv6 pim bsr-border
. . . . . . . . . . . . . . . . . . 1043
ipv6 pim bsr-candidate . . . . . . . . . . . . . . . . 1044
ipv6 pim dr-priority. . . . . . . . . . . . . . . . . . . 1045
ipv6 pim hello-interval
. . . . . . . . . . . . . . . . . 1046
ipv6 pim join-prune-interval . . . . . . . . . . . . . . 1046
ipv6 pim register-rate-limit . . . . . . . . . . . . . . 1047
ipv6 pim rp-address
. . . . . . . . . . . . . . . . . . 1048
ipv6 pim rp-candidate . . . . . . . . . . . . . . . . . 1049
ipv6 pim spt-threshold . . . . . . . . . . . . . . . . . 1050
ipv6 pim ssm
. . . . . . . . . . . . . . . . . . . . . . 1051
show ipv6 pimsm . . . . . . . . . . . . . . . . . . . 1052
show ipv6 pim bsr-router . . . . . . . . . . . . . . . 1053
show ipv6 pim interface
. . . . . . . . . . . . . . . . 1054
show ipv6 pim neighbor . . . . . . . . . . . . . . . . 1056
show ipv6 pim rp hash
. . . . . . . . . . . . . . . . . 1058
show ipv6 pim rp mapping
. . . . . . . . . . . . . . . 1059
Contents 41
Page 42
53 IPv6 Routing Commands . . . . . . . . . . . 1061
IPv6 Limitations & Restrictions . . . . . . . . . . . . 1061
Commands in this Chapter . . . . . . . . . . . . . . . 1061
clear ipv6 neighbors . . . . . . . . . . . . . . . . . . 1063
clear ipv6 statistics
. . . . . . . . . . . . . . . . . . 1063
ipv6 address . . . . . . . . . . . . . . . . . . . . . . 1064
ipv6 enable . . . . . . . . . . . . . . . . . . . . . . . 1065
ipv6 hop-limit
. . . . . . . . . . . . . . . . . . . . . . 1066
ipv6 host . . . . . . . . . . . . . . . . . . . . . . . . 1067
ipv6 mld last-member-query-count . . . . . . . . . . 1067
ipv6 mld last-member-query-interval
. . . . . . . . . 1068
ipv6 mld-proxy . . . . . . . . . . . . . . . . . . . . . 1069
ipv6 mld-proxy reset-status . . . . . . . . . . . . . . 1069
ipv6 mld-proxy unsolicit-rprt-interval
. . . . . . . . . 1070
ipv6 mld query-interval . . . . . . . . . . . . . . . . 1071
ipv6 mld query-max-response-time . . . . . . . . . . 1072
ipv6 mld router
. . . . . . . . . . . . . . . . . . . . . 1072
ipv6 mtu. . . . . . . . . . . . . . . . . . . . . . . . . 1073
42 Contents
ipv6 nd dad attempts
ipv6 nd managed-config-flag
. . . . . . . . . . . . . . . . . . 1074
. . . . . . . . . . . . . 1075
ipv6 nd ns-interval . . . . . . . . . . . . . . . . . . . 1076
Page 43
ipv6 nd other-config-flag . . . . . . . . . . . . . . . 1077
ipv6 nd prefix
. . . . . . . . . . . . . . . . . . . . . . 1077
ipv6 nd ra-interval . . . . . . . . . . . . . . . . . . . 1079
ipv6 nd ra-lifetime . . . . . . . . . . . . . . . . . . . 1080
ipv6 nd reachable-time
ipv6 nd suppress-ra
. . . . . . . . . . . . . . . . 1080
. . . . . . . . . . . . . . . . . . 1081
ipv6 route. . . . . . . . . . . . . . . . . . . . . . . . 1082
ipv6 route distance
. . . . . . . . . . . . . . . . . . . 1083
ipv6 unicast-routing . . . . . . . . . . . . . . . . . . 1084
ping ipv6 . . . . . . . . . . . . . . . . . . . . . . . . 1085
ping ipv6 interface
. . . . . . . . . . . . . . . . . . . 1086
show ipv6 brief. . . . . . . . . . . . . . . . . . . . . 1087
show ipv6 interface . . . . . . . . . . . . . . . . . . 1088
show ipv6 interface management statistics
. . . . . 1090
show ipv6 mld groups . . . . . . . . . . . . . . . . . 1092
show ipv6 mld interface . . . . . . . . . . . . . . . . 1095
show ipv6 mld-proxy
. . . . . . . . . . . . . . . . . . 1097
show ipv6 mld-proxy groups . . . . . . . . . . . . . 1099
show ipv6 mld-proxy groups detail . . . . . . . . . . 1100
show ipv6 mld-proxy interface
. . . . . . . . . . . . 1102
show ipv6 mld traffic . . . . . . . . . . . . . . . . . 1103
Contents 43
Page 44
show ipv6 neighbors . . . . . . . . . . . . . . . . . . 1105
show ipv6 route
. . . . . . . . . . . . . . . . . . . . 1106
show ipv6 route preferences . . . . . . . . . . . . . 1107
show ipv6 route summary . . . . . . . . . . . . . . . 1108
show ipv6 traffic
show ipv6 vlan
. . . . . . . . . . . . . . . . . . . . 1109
. . . . . . . . . . . . . . . . . . . . . 1112
traceroute ipv6 . . . . . . . . . . . . . . . . . . . . . 1112
54 Loopback Interface Commands . . . . . . 1115
Commands in this Chapter . . . . . . . . . . . . . . . 1115
interface loopback. . . . . . . . . . . . . . . . . . . 1115
show interfaces loopback . . . . . . . . . . . . . . . 1116
55 Multicast Commands . . . . . . . . . . . . . . 1119
Commands in this Chapter . . . . . . . . . . . . . . . 1120
44 Contents
ip mcast boundary . . . . . . . . . . . . . . . . . . . 1121
ip mroute . . . . . . . . . . . . . . . . . . . . . . . . 1121
ip multicast
. . . . . . . . . . . . . . . . . . . . . . . 1122
ip multicast ttl-threshold. . . . . . . . . . . . . . . . 1123
ip pim
. . . . . . . . . . . . . . . . . . . . . . . . . . 1124
ip pim bsr-border
. . . . . . . . . . . . . . . . . . . . 1125
ip pim bsr-candidate . . . . . . . . . . . . . . . . . . 1125
Page 45
ip pim dense . . . . . . . . . . . . . . . . . . . . . . 1127
ip pim dr-priority
. . . . . . . . . . . . . . . . . . . . 1127
ip pim hello-interval . . . . . . . . . . . . . . . . . . 1128
ip pim join-prune-interval . . . . . . . . . . . . . . . 1129
ip pim register-rate-limit
ip pim rp-address
. . . . . . . . . . . . . . . 1130
. . . . . . . . . . . . . . . . . . . 1130
ip pim rp-candidate . . . . . . . . . . . . . . . . . . 1131
ip pim sparse
. . . . . . . . . . . . . . . . . . . . . . 1132
ip pim ssm . . . . . . . . . . . . . . . . . . . . . . . 1133
ip pim spt-threshold . . . . . . . . . . . . . . . . . . 1134
show bridge multicast address-table count
. . . . . 1135
show ip multicast . . . . . . . . . . . . . . . . . . . 1136
show ip mcast boundary. . . . . . . . . . . . . . . . 1137
show ip multicast interface
. . . . . . . . . . . . . . 1138
show ip mcast mroute . . . . . . . . . . . . . . . . . 1139
show ip mcast mroute group . . . . . . . . . . . . . 1139
show ip mcast mroute source
. . . . . . . . . . . . . 1140
show ip mcast mroute static . . . . . . . . . . . . . 1141
show ip pim bsr-router. . . . . . . . . . . . . . . . . 1142
show ip pim interface
. . . . . . . . . . . . . . . . . 1143
show ip pim neighbor . . . . . . . . . . . . . . . . . 1145
Contents 45
Page 46
show ip pim rp hash . . . . . . . . . . . . . . . . . . 1146
show ip pim rp mapping
. . . . . . . . . . . . . . . . 1147
56 IPv6 Multicast Commands . . . . . . . . . . 1149
ipv6 pimsm (Global config) . . . . . . . . . . . . . . 1149
ipv6 pimsm (VLAN Interface config) . . . . . . . . . . 1150
ipv6 pimsm bsr-border
ipv6 pimsm bsr-candidate . . . . . . . . . . . . . . . 1151
ipv6 pimsm dr-priority . . . . . . . . . . . . . . . . . 1152
ipv6 pimsm hello-interval
ipv6 pimsm join-prune-interval . . . . . . . . . . . . 1153
ipv6 pimsm register-threshold . . . . . . . . . . . . . 1154
ipv6 pimsm rp-address
ipv6 pimsm rp-candidate. . . . . . . . . . . . . . . . 1156
ipv6 pimsm spt-threshold . . . . . . . . . . . . . . . 1156
. . . . . . . . . . . . . . . . . 1150
. . . . . . . . . . . . . . . 1153
. . . . . . . . . . . . . . . . . 1155
46 Contents
ipv6 pimsm ssm
. . . . . . . . . . . . . . . . . . . . 1157
show ipv6 pimsm . . . . . . . . . . . . . . . . . . . . 1158
show ipv6 pimsm bsr
show ipv6 pimsm interface
. . . . . . . . . . . . . . . . . . 1159
. . . . . . . . . . . . . . 1160
show ipv6 pimsm neighbor . . . . . . . . . . . . . . 1161
show ipv6 pimsm rphash
show ipv6 pimsm rp mapping
. . . . . . . . . . . . . . . . 1162
. . . . . . . . . . . . . 1163
Page 47
57 OSPF Commands . . . . . . . . . . . . . . . . . 1165
Route Preferences . . . . . . . . . . . . . . . . . . . 1166
OSPF Equal Cost Multipath (ECMP) . . . . . . . . . . 1166
Forwarding of OSPF Opaque LSAs Enabled
by Default
. . . . . . . . . . . . . . . . . . . . . . . 1167
Passive Interfaces . . . . . . . . . . . . . . . . . . . 1167
Graceful Restart . . . . . . . . . . . . . . . . . . . . 1168
Commands in this Chapter
. . . . . . . . . . . . . . . 1168
area default-cost (Router OSPF). . . . . . . . . . . . 1169
area nssa (Router OSPF) . . . . . . . . . . . . . . . . 1170
area nssa default-info-originate
. . . . . . . . . . . 1172
area nssa no-redistribute . . . . . . . . . . . . . . . 1173
area nssa no-summary. . . . . . . . . . . . . . . . . 1173
area nssa translator-role
. . . . . . . . . . . . . . . 1174
area nssa translator-stab-intv . . . . . . . . . . . . . 1175
area range (Router OSPF) . . . . . . . . . . . . . . . 1176
area stub
. . . . . . . . . . . . . . . . . . . . . . . . 1177
area stub no-summary . . . . . . . . . . . . . . . . . 1178
area virtual-link
area virtual-link authentication
. . . . . . . . . . . . . . . . . . . . 1179
. . . . . . . . . . . . 1181
area virtual-link dead-interval . . . . . . . . . . . . 1182
Contents 47
Page 48
area virtual-link hello-interval . . . . . . . . . . . . 1183
area virtual-link retransmit-interval
. . . . . . . . . . 1184
area virtual-link transmit-delay . . . . . . . . . . . . 1185
auto-cost . . . . . . . . . . . . . . . . . . . . . . . . 1186
bandwidth
capability opaque
. . . . . . . . . . . . . . . . . . . . . . . 1187
. . . . . . . . . . . . . . . . . . . 1188
clear ip ospf . . . . . . . . . . . . . . . . . . . . . . 1188
compatible rfc1583
. . . . . . . . . . . . . . . . . . . 1189
default-information originate . . . . . . . . . . . . . 1190
default-metric . . . . . . . . . . . . . . . . . . . . . 1191
distance ospf
. . . . . . . . . . . . . . . . . . . . . . 1192
distribute-list out. . . . . . . . . . . . . . . . . . . . 1193
enable . . . . . . . . . . . . . . . . . . . . . . . . . 1194
exit-overflow-interval
. . . . . . . . . . . . . . . . . 1195
external-lsdb-limit . . . . . . . . . . . . . . . . . . . 1196
48 Contents
ip ospf area . . . . . . . . . . . . . . . . . . . . . . . 1197
ip ospf authentication
. . . . . . . . . . . . . . . . . 1198
ip ospf cost . . . . . . . . . . . . . . . . . . . . . . . 1199
ip ospf dead-interval . . . . . . . . . . . . . . . . . . 1199
ip ospf hello-interval
. . . . . . . . . . . . . . . . . . 1200
ip ospf mtu-ignore . . . . . . . . . . . . . . . . . . . 1201
Page 49
ip ospf network . . . . . . . . . . . . . . . . . . . . 1202
ip ospf priority
. . . . . . . . . . . . . . . . . . . . . 1203
ip ospf retransmit-interval. . . . . . . . . . . . . . . 1203
ip ospf transmit-delay . . . . . . . . . . . . . . . . . 1204
maximum-paths
network area
. . . . . . . . . . . . . . . . . . . . 1205
. . . . . . . . . . . . . . . . . . . . . . 1206
nsf . . . . . . . . . . . . . . . . . . . . . . . . . . . 1207
nsf helper
. . . . . . . . . . . . . . . . . . . . . . . 1208
nsf helper strict-lsa-checking. . . . . . . . . . . . . 1209
nsf restart-interval. . . . . . . . . . . . . . . . . . . 1210
passive-interface default
. . . . . . . . . . . . . . . 1211
passive-interface . . . . . . . . . . . . . . . . . . . 1211
redistribute. . . . . . . . . . . . . . . . . . . . . . . 1212
router-id
. . . . . . . . . . . . . . . . . . . . . . . . 1213
router ospf . . . . . . . . . . . . . . . . . . . . . . . 1214
show ip ospf . . . . . . . . . . . . . . . . . . . . . . 1215
show ip ospf abr
. . . . . . . . . . . . . . . . . . . . 1220
show ip ospf area . . . . . . . . . . . . . . . . . . . 1221
show ip ospf asbr . . . . . . . . . . . . . . . . . . . 1223
show ip ospf database
. . . . . . . . . . . . . . . . . 1224
show ip ospf database database-summary . . . . . . 1227
Contents 49
Page 50
show ip ospf interface . . . . . . . . . . . . . . . . . 1229
show ip ospf interface brief
. . . . . . . . . . . . . . 1231
show ip ospf interface stats . . . . . . . . . . . . . . 1231
show ip ospf neighbor . . . . . . . . . . . . . . . . . 1232
show ip ospf range
show ip ospf statistics
. . . . . . . . . . . . . . . . . . . 1235
. . . . . . . . . . . . . . . . . 1236
show ip ospf stub table . . . . . . . . . . . . . . . . 1237
show ip ospf virtual-link
. . . . . . . . . . . . . . . . 1238
show ip ospf virtual-links brief . . . . . . . . . . . . 1239
timers spf . . . . . . . . . . . . . . . . . . . . . . . . 1240
58 OSPFv3 Commands . . . . . . . . . . . . . . . 1243
area default-cost (Router OSPFv3). . . . . . . . . . . 1244
area nssa (Router OSPFv3) . . . . . . . . . . . . . . . 1245
area nssa default-info-originate. . . . . . . . . . . . 1246
50 Contents
area nssa no-redistribute
. . . . . . . . . . . . . . . 1247
area nssa no-summary . . . . . . . . . . . . . . . . . 1248
area nssa translator-role
area nssa translator-stab-intv
. . . . . . . . . . . . . . . . 1249
. . . . . . . . . . . . . 1250
area range (Router OSPFv3) . . . . . . . . . . . . . . 1251
area stub
area stub no-summary
. . . . . . . . . . . . . . . . . . . . . . . . 1252
. . . . . . . . . . . . . . . . . 1253
Page 51
area virtual-link . . . . . . . . . . . . . . . . . . . . 1254
area virtual-link dead-interval
. . . . . . . . . . . . 1256
area virtual-link hello-interval . . . . . . . . . . . . 1256
area virtual-link retransmit-interval . . . . . . . . . 1257
area virtual-link transmit-delay
default-information originate
. . . . . . . . . . . . 1258
. . . . . . . . . . . . . 1259
default-metric . . . . . . . . . . . . . . . . . . . . . 1260
distance ospf
. . . . . . . . . . . . . . . . . . . . . . 1261
enable . . . . . . . . . . . . . . . . . . . . . . . . . 1262
exit-overflow-interval . . . . . . . . . . . . . . . . . 1263
external-lsdb-limit
. . . . . . . . . . . . . . . . . . . 1263
ipv6 ospf . . . . . . . . . . . . . . . . . . . . . . . . 1264
ipv6 ospf area . . . . . . . . . . . . . . . . . . . . . 1265
ipv6 ospf cost
. . . . . . . . . . . . . . . . . . . . . 1266
ipv6 ospf dead-interval . . . . . . . . . . . . . . . . 1267
ipv6 ospf hello-interval . . . . . . . . . . . . . . . . 1267
ipv6 ospf mtu-ignore
. . . . . . . . . . . . . . . . . . 1268
ipv6 ospf network . . . . . . . . . . . . . . . . . . . 1269
ipv6 ospf priority . . . . . . . . . . . . . . . . . . . . 1270
ipv6 ospf retransmit-interval
. . . . . . . . . . . . . 1271
ipv6 ospf transmit-delay . . . . . . . . . . . . . . . . 1272
Contents 51
Page 52
ipv6 router ospf. . . . . . . . . . . . . . . . . . . . . 1272
maximum-paths
. . . . . . . . . . . . . . . . . . . . 1273
nsf . . . . . . . . . . . . . . . . . . . . . . . . . . . 1274
nsf helper. . . . . . . . . . . . . . . . . . . . . . . . 1275
nsf helper strict-lsa-checking
nsf restart-interval
. . . . . . . . . . . . . . . . . . . 1276
. . . . . . . . . . . . . 1276
passive-interface . . . . . . . . . . . . . . . . . . . 1277
passive-interface default
. . . . . . . . . . . . . . . 1278
redistribute . . . . . . . . . . . . . . . . . . . . . . . 1279
router-id . . . . . . . . . . . . . . . . . . . . . . . . 1279
show ipv6 ospf
. . . . . . . . . . . . . . . . . . . . . 1280
show ipv6 ospf abr . . . . . . . . . . . . . . . . . . . 1284
show ipv6 ospf area . . . . . . . . . . . . . . . . . . 1285
show ipv6 ospf asbr
. . . . . . . . . . . . . . . . . . 1286
show ipv6 ospf border-routers. . . . . . . . . . . . . 1287
52 Contents
show ipv6 ospf database. . . . . . . . . . . . . . . . 1287
show ipv6 ospf database database-summary
. . . . . 1290
show ipv6 ospf interface. . . . . . . . . . . . . . . . 1291
show ipv6 ospf interface brief . . . . . . . . . . . . . 1293
show ipv6 ospf interface stats
. . . . . . . . . . . . . 1294
show ipv6 ospf interface vlan . . . . . . . . . . . . . 1295
Page 53
show ipv6 ospf neighbor. . . . . . . . . . . . . . . . 1297
show ipv6 ospf range
show ipv6 ospf stub table . . . . . . . . . . . . . . . 1299
show ipv6 ospf virtual-links . . . . . . . . . . . . . . 1300
show ipv6 ospf virtual-link brief
. . . . . . . . . . . . . . . . . 1298
. . . . . . . . . . . 1301
59 Router Discovery Protocol
Commands . . . . . . . . . . . . . . . . . . . . . . 1303
Commands in this Chapter. . . . . . . . . . . . . . . 1303
ip irdp . . . . . . . . . . . . . . . . . . . . . . . . . 1303
ip irdp address . . . . . . . . . . . . . . . . . . . . . 1305
ip irdp holdtime
ip irdp maxadvertinterval . . . . . . . . . . . . . . . 1307
ip irdp minadvertinterval . . . . . . . . . . . . . . . 1308
ip irdp multicast
. . . . . . . . . . . . . . . . . . . . 1306
. . . . . . . . . . . . . . . . . . . . 1309
ip irdp preference . . . . . . . . . . . . . . . . . . . 1310
show ip irdp . . . . . . . . . . . . . . . . . . . . . . 1310
60 Routing Information Protocol
Commands . . . . . . . . . . . . . . . . . . . . . . 1313
Commands in this Chapter. . . . . . . . . . . . . . . 1313
auto-summary
default-information originate . . . . . . . . . . . . . 1314
. . . . . . . . . . . . . . . . . . . . . 1313
Contents 53
Page 54
default-metric . . . . . . . . . . . . . . . . . . . . . 1315
distance rip
. . . . . . . . . . . . . . . . . . . . . . . 1315
distribute-list out. . . . . . . . . . . . . . . . . . . . 1316
enable . . . . . . . . . . . . . . . . . . . . . . . . . 1317
hostroutesaccept
ip rip
. . . . . . . . . . . . . . . . . . . . . . . . . . 1318
. . . . . . . . . . . . . . . . . . . . 1318
ip rip authentication . . . . . . . . . . . . . . . . . . 1319
ip rip receive version
. . . . . . . . . . . . . . . . . 1320
ip rip send version . . . . . . . . . . . . . . . . . . . 1321
redistribute . . . . . . . . . . . . . . . . . . . . . . . 1322
router rip
. . . . . . . . . . . . . . . . . . . . . . . . 1323
show ip rip . . . . . . . . . . . . . . . . . . . . . . . 1324
show ip rip interface. . . . . . . . . . . . . . . . . . 1325
show ip rip interface brief
. . . . . . . . . . . . . . . 1326
split-horizon . . . . . . . . . . . . . . . . . . . . . . 1327
61 Tunnel Interface Commands . . . . . . . . 1329
54 Contents
Commands in this Chapter . . . . . . . . . . . . . . . 1329
interface tunnel
. . . . . . . . . . . . . . . . . . . . 1330
show interfaces tunnel . . . . . . . . . . . . . . . . 1330
tunnel destination
. . . . . . . . . . . . . . . . . . . 1331
Page 55
tunnel mode ipv6ip. . . . . . . . . . . . . . . . . . . 1332
tunnel source
. . . . . . . . . . . . . . . . . . . . . 1333
62 Virtual Router Redundancy Protocol
Commands . . . . . . . . . . . . . . . . . . . . . . 1335
Pingable VRRP Interface . . . . . . . . . . . . . . . 1335
VRRP Route/Interface Tracking
Interface Tracking . . . . . . . . . . . . . . . . . . . 1337
Route Tracking
. . . . . . . . . . . . . . . . . . . . . 1337
Commands in this Chapter. . . . . . . . . . . . . . . 1337
ip vrrp . . . . . . . . . . . . . . . . . . . . . . . . . 1338
vrrp accept-mode
. . . . . . . . . . . . . . . . . . . 1338
vrrp authentication . . . . . . . . . . . . . . . . . . 1339
vrrp description . . . . . . . . . . . . . . . . . . . . 1340
vrrp ip
. . . . . . . . . . . . . . . . . . . . . . . . . 1341
. . . . . . . . . . . . 1336
vrrp mode . . . . . . . . . . . . . . . . . . . . . . . 1342
vrrp preempt . . . . . . . . . . . . . . . . . . . . . . 1343
vrrp priority
. . . . . . . . . . . . . . . . . . . . . . . 1344
vrrp timers advertise. . . . . . . . . . . . . . . . . . 1345
vrrp timers learn
vrrp track interface
. . . . . . . . . . . . . . . . . . . . 1346
. . . . . . . . . . . . . . . . . . 1347
vrrp track ip route . . . . . . . . . . . . . . . . . . . 1348
Contents 55
Page 56
show vrrp . . . . . . . . . . . . . . . . . . . . . . . . 1350
show vrrp interface
. . . . . . . . . . . . . . . . . . 1353
show vrrp interface brief . . . . . . . . . . . . . . . 1355
show vrrp interface stats . . . . . . . . . . . . . . . 1356
ip vrrp accept-mode
show ip vrrp interface
. . . . . . . . . . . . . . . . . . 1357
. . . . . . . . . . . . . . . . . 1358
63 Utility Commands . . . . . . . . . . . . . . . . . 1361
64 Auto-Install Commands . . . . . . . . . . . . 1363
Commands in this Chapter . . . . . . . . . . . . . . . 1364
boot auto-copy-sw
boot auto-copy-sw allow-downgrade. . . . . . . . . 1365
boot host autoreboot . . . . . . . . . . . . . . . . . . 1366
boot host autosave
. . . . . . . . . . . . . . . . . . . 1364
. . . . . . . . . . . . . . . . . . . 1367
65 Captive Portal Commands . . . . . . . . . . 1373
56 Contents
boot host dhcp . . . . . . . . . . . . . . . . . . . . . 1367
boot host retrycount . . . . . . . . . . . . . . . . . . 1368
show auto-copy-sw
. . . . . . . . . . . . . . . . . . 1369
show boot . . . . . . . . . . . . . . . . . . . . . . . 1370
Commands in this Chapter . . . . . . . . . . . . . . . 1373
Page 57
authentication timeout. . . . . . . . . . . . . . . . . 1375
captive-portal
. . . . . . . . . . . . . . . . . . . . . 1375
enable . . . . . . . . . . . . . . . . . . . . . . . . . 1376
http port . . . . . . . . . . . . . . . . . . . . . . . . 1377
https port
show captive-portal
. . . . . . . . . . . . . . . . . . . . . . . . 1377
. . . . . . . . . . . . . . . . . . 1378
show captive-portal status . . . . . . . . . . . . . . 1379
block
. . . . . . . . . . . . . . . . . . . . . . . . . . 1380
configuration. . . . . . . . . . . . . . . . . . . . . . 1381
enable . . . . . . . . . . . . . . . . . . . . . . . . . 1381
group
. . . . . . . . . . . . . . . . . . . . . . . . . . 1382
interface . . . . . . . . . . . . . . . . . . . . . . . . 1383
locale. . . . . . . . . . . . . . . . . . . . . . . . . . 1383
name (Captive Portal)
. . . . . . . . . . . . . . . . . 1384
protocol . . . . . . . . . . . . . . . . . . . . . . . . 1385
redirect. . . . . . . . . . . . . . . . . . . . . . . . . 1385
redirect-url
. . . . . . . . . . . . . . . . . . . . . . . 1386
session-timeout . . . . . . . . . . . . . . . . . . . . 1386
verification. . . . . . . . . . . . . . . . . . . . . . . 1387
captive-portal client deauthenticate
. . . . . . . . . 1388
show captive-portal client status . . . . . . . . . . . 1388
Contents 57
Page 58
show captive-portal configuration client status . . . 1389
show captive-portal interface client status
. . . . . . 1390
show captive-portal interface configuration
status . . . . . . . . . . . . . . . . . . . . . . . . . . 1392
clear captive-portal users
no user
. . . . . . . . . . . . . . . . . . . . . . . . . 1393
. . . . . . . . . . . . . . . 1393
show captive-portal user . . . . . . . . . . . . . . . 1394
user group
. . . . . . . . . . . . . . . . . . . . . . . 1395
user-logout . . . . . . . . . . . . . . . . . . . . . . . 1396
user name . . . . . . . . . . . . . . . . . . . . . . . 1397
user password
. . . . . . . . . . . . . . . . . . . . . 1397
user session-timeout. . . . . . . . . . . . . . . . . . 1398
show captive-portal configuration . . . . . . . . . . 1399
show captive-portal configuration interface
. . . . . 1400
show captive-portal configuration locales . . . . . . 1401
66 CLI Macro Commands . . . . . . . . . . . . . 1407
58 Contents
show captive-portal configuration status. . . . . . . 1402
user group
. . . . . . . . . . . . . . . . . . . . . . . 1403
user group moveusers . . . . . . . . . . . . . . . . . 1404
user group name . . . . . . . . . . . . . . . . . . . . 1404
Commands in this Chapter . . . . . . . . . . . . . . . 1408
Page 59
macro name . . . . . . . . . . . . . . . . . . . . . . 1408
macro global apply
. . . . . . . . . . . . . . . . . . 1409
macro global trace. . . . . . . . . . . . . . . . . . . 1410
macro global description . . . . . . . . . . . . . . . 1411
macro apply
macro trace
. . . . . . . . . . . . . . . . . . . . . . 1412
. . . . . . . . . . . . . . . . . . . . . . 1413
macro description . . . . . . . . . . . . . . . . . . . 1414
show parser macro
. . . . . . . . . . . . . . . . . . 1414
67 Clock Commands . . . . . . . . . . . . . . . . . 1417
Real-time Clock . . . . . . . . . . . . . . . . . . . . 1417
Simple Network Time Protocol . . . . . . . . . . . . 1417
Commands in this Chapter
show sntp configuration. . . . . . . . . . . . . . . . 1418
show sntp server . . . . . . . . . . . . . . . . . . . . 1419
. . . . . . . . . . . . . . . 1418
show sntp status
. . . . . . . . . . . . . . . . . . . . 1421
sntp authenticate . . . . . . . . . . . . . . . . . . . 1422
sntp authentication-key
sntp broadcast client enable
. . . . . . . . . . . . . . . . 1423
. . . . . . . . . . . . . 1424
sntp client poll timer. . . . . . . . . . . . . . . . . . 1424
sntp server
sntp trusted-key
. . . . . . . . . . . . . . . . . . . . . . . 1425
. . . . . . . . . . . . . . . . . . . . 1426
Contents 59
Page 60
sntp unicast client enable . . . . . . . . . . . . . . . 1427
clock timezone hours-offset
. . . . . . . . . . . . . . 1428
no clock timezone . . . . . . . . . . . . . . . . . . . 1428
clock summer-time recurring . . . . . . . . . . . . . 1429
clock summer-time date
no clock summer-time
. . . . . . . . . . . . . . . . 1430
. . . . . . . . . . . . . . . . . 1431
show clock. . . . . . . . . . . . . . . . . . . . . . . 1432
68 Command Line Configuration Scripting
Commands . . . . . . . . . . . . . . . . . . . . . . 1435
Commands in this Chapter . . . . . . . . . . . . . . . 1435
script apply
script delete . . . . . . . . . . . . . . . . . . . . . . 1436
script list . . . . . . . . . . . . . . . . . . . . . . . . 1437
script show
. . . . . . . . . . . . . . . . . . . . . . . 1435
. . . . . . . . . . . . . . . . . . . . . . . 1437
69 Configuration and Image File
Commands . . . . . . . . . . . . . . . . . . . . . . 1441
60 Contents
script validate . . . . . . . . . . . . . . . . . . . . . 1438
File System Commands . . . . . . . . . . . . . . . . 1441
Command Line Interface Scripting
Commands in this Chapter
. . . . . . . . . . 1441
. . . . . . . . . . . . . . . 1441
boot system. . . . . . . . . . . . . . . . . . . . . . . 1442
Page 61
clear config . . . . . . . . . . . . . . . . . . . . . . 1443
copy
. . . . . . . . . . . . . . . . . . . . . . . . . . 1443
delete. . . . . . . . . . . . . . . . . . . . . . . . . . 1449
delete backup-config . . . . . . . . . . . . . . . . . 1450
delete backup-image
delete startup-config
. . . . . . . . . . . . . . . . . 1450
. . . . . . . . . . . . . . . . . 1451
dir . . . . . . . . . . . . . . . . . . . . . . . . . . . 1452
erase
. . . . . . . . . . . . . . . . . . . . . . . . . . 1453
filedescr . . . . . . . . . . . . . . . . . . . . . . . . 1453
rename . . . . . . . . . . . . . . . . . . . . . . . . . 1454
show backup-config
. . . . . . . . . . . . . . . . . . 1455
show bootvar. . . . . . . . . . . . . . . . . . . . . . 1456
show running-config. . . . . . . . . . . . . . . . . . 1457
show startup-config
. . . . . . . . . . . . . . . . . . 1458
update bootcode . . . . . . . . . . . . . . . . . . . . 1460
write . . . . . . . . . . . . . . . . . . . . . . . . . . 1461
70 Denial of Service Commands . . . . . . . 1463
Commands in this Chapter. . . . . . . . . . . . . . . 1464
dos-control firstfrag . . . . . . . . . . . . . . . . . . 1465
dos-control icmp
dos-control l4port
. . . . . . . . . . . . . . . . . . . . 1465
. . . . . . . . . . . . . . . . . . . 1466
Contents 61
Page 62
dos-control sipdip . . . . . . . . . . . . . . . . . . . 1467
dos-control tcpflag
. . . . . . . . . . . . . . . . . . . 1468
dos-control tcpfrag. . . . . . . . . . . . . . . . . . . 1468
ip icmp echo-reply . . . . . . . . . . . . . . . . . . . 1469
ip icmp error-interval
ip unreachables
. . . . . . . . . . . . . . . . . 1470
. . . . . . . . . . . . . . . . . . . . 1471
ip redirects . . . . . . . . . . . . . . . . . . . . . . . 1471
ipv6 icmp error-interval
. . . . . . . . . . . . . . . . 1472
ipv6 unreachables . . . . . . . . . . . . . . . . . . . 1473
show dos-control . . . . . . . . . . . . . . . . . . . 1473
71 Line Commands . . . . . . . . . . . . . . . . . . 1475
exec-timeout . . . . . . . . . . . . . . . . . . . . . . 1475
history . . . . . . . . . . . . . . . . . . . . . . . . . 1476
history size . . . . . . . . . . . . . . . . . . . . . . . 1477
72 Management ACL Commands . . . . . . . 1481
62 Contents
line
. . . . . . . . . . . . . . . . . . . . . . . . . . . 1477
show line . . . . . . . . . . . . . . . . . . . . . . . . 1478
. . . . . . . . . . . . . . . . . . . . . . . . . . 1480
speed
Commands in this Chapter . . . . . . . . . . . . . . . 1481
deny (management) . . . . . . . . . . . . . . . . . . 1482
Page 63
management access-class . . . . . . . . . . . . . . 1483
management access-list
. . . . . . . . . . . . . . . 1484
permit (management) . . . . . . . . . . . . . . . . . 1485
show management access-class . . . . . . . . . . . 1487
show management access-list
. . . . . . . . . . . . 1488
73 Mode Commands . . . . . . . . . . . . . . . . . 1489
configure terminal . . . . . . . . . . . . . . . . . . . 1489
do. . . . . . . . . . . . . . . . . . . . . . . . . . . . 1489
74 Password Management
75 Commands . . . . . . . . . . . . . . . . . . . . . . 1491
Configurable Minimum Password Length. . . . . . . 1491
Password History . . . . . . . . . . . . . . . . . . . 1491
Password Aging . . . . . . . . . . . . . . . . . . . . 1491
User Lockout
Password Strength
Commands in this Chapter
passwords aging
. . . . . . . . . . . . . . . . . . . . . . 1491
. . . . . . . . . . . . . . . . . . 1492
. . . . . . . . . . . . . . . 1493
. . . . . . . . . . . . . . . . . . . . 1494
passwords history . . . . . . . . . . . . . . . . . . . 1494
passwords lock-out
. . . . . . . . . . . . . . . . . . 1495
Contents 63
Page 64
passwords min-length . . . . . . . . . . . . . . . . . 1496
passwords strength-check
. . . . . . . . . . . . . . 1497
passwords strength minimum uppercase-letters . . . 1498
passwords strength minimum lowercase-letters . . . 1499
passwords strength minimum
numeric-characters
. . . . . . . . . . . . . . . . . . 1500
passwords strength minimum
special-characters
. . . . . . . . . . . . . . . . . . . 1501
passwords strength max-limit
consecutive-characters . . . . . . . . . . . . . . . . 1501
passwords strength max-limit
repeated-characters
. . . . . . . . . . . . . . . . . . 1502
passwords strength minimum character-classes. . . 1503
passwords strength exclude-keyword
. . . . . . . . 1504
enable password encrypted . . . . . . . . . . . . . . 1505
76 PHY Diagnostics Commands . . . . . . . . 1509
64 Contents
show passwords configuration . . . . . . . . . . . . 1505
show passwords result
. . . . . . . . . . . . . . . . 1507
show copper-ports tdr . . . . . . . . . . . . . . . . . 1509
show fiber-ports optical-transceiver
test copper-port tdr
. . . . . . . . . . . . . . . . . . . 1511
. . . . . . . . . 1510
Page 65
77 RMON Commands . . . . . . . . . . . . . . . . 1513
Commands in this Chapter. . . . . . . . . . . . . . . 1513
rmon alarm . . . . . . . . . . . . . . . . . . . . . . . 1513
rmon collection history . . . . . . . . . . . . . . . . 1516
rmon event
. . . . . . . . . . . . . . . . . . . . . . . 1517
show rmon alarm . . . . . . . . . . . . . . . . . . . 1518
show rmon alarms . . . . . . . . . . . . . . . . . . . 1520
show rmon collection history
. . . . . . . . . . . . . 1521
show rmon events . . . . . . . . . . . . . . . . . . . 1522
show rmon history . . . . . . . . . . . . . . . . . . . 1523
show rmon log
. . . . . . . . . . . . . . . . . . . . . 1527
show rmon statistics. . . . . . . . . . . . . . . . . . 1528
78 SDM Templates Commands . . . . . . . . . 1533
Commands in this Chapter. . . . . . . . . . . . . . . 1533
sdm prefer
show sdm prefer . . . . . . . . . . . . . . . . . . . . 1535
. . . . . . . . . . . . . . . . . . . . . . . 1533
79 Serviceability Tracing Packet
Commands
Commands in this Chapter. . . . . . . . . . . . . . . 1539
debug arp
. . . . . . . . . . . . . . . . . . . . . . 1539
. . . . . . . . . . . . . . . . . . . . . . . 1540
Contents 65
Page 66
debug auto-voip . . . . . . . . . . . . . . . . . . . . 1541
debug clear
. . . . . . . . . . . . . . . . . . . . . . . 1541
debug console . . . . . . . . . . . . . . . . . . . . . 1542
debug dot1x . . . . . . . . . . . . . . . . . . . . . . 1542
debug igmpsnooping
debug ip acl
. . . . . . . . . . . . . . . . . . 1543
. . . . . . . . . . . . . . . . . . . . . . 1544
debug ip dvmrp . . . . . . . . . . . . . . . . . . . . . 1544
debug ip igmp
. . . . . . . . . . . . . . . . . . . . . 1545
debug ip mcache . . . . . . . . . . . . . . . . . . . . 1546
debug ip pimdm packet . . . . . . . . . . . . . . . . 1547
debug ip pimsm packet
. . . . . . . . . . . . . . . . 1548
debug ip vrrp . . . . . . . . . . . . . . . . . . . . . . 1548
debug ipv6 dhcp . . . . . . . . . . . . . . . . . . . . 1549
debug ipv6 mcache
. . . . . . . . . . . . . . . . . . 1550
debug ipv6 mld . . . . . . . . . . . . . . . . . . . . . 1550
66 Contents
debug ipv6 pimdm . . . . . . . . . . . . . . . . . . . 1551
debug ipv6 pimsm
. . . . . . . . . . . . . . . . . . . 1552
debug isdp . . . . . . . . . . . . . . . . . . . . . . . 1553
debug lacp . . . . . . . . . . . . . . . . . . . . . . . 1554
debug mldsnooping
. . . . . . . . . . . . . . . . . . 1554
debug ospf . . . . . . . . . . . . . . . . . . . . . . . 1555
Page 67
debug ospfv3 . . . . . . . . . . . . . . . . . . . . . . 1556
debug ping
. . . . . . . . . . . . . . . . . . . . . . . 1556
debug rip . . . . . . . . . . . . . . . . . . . . . . . . 1557
debug sflow . . . . . . . . . . . . . . . . . . . . . . 1558
debug spanning-tree
debug vrrp
. . . . . . . . . . . . . . . . . . . . . . . 1559
. . . . . . . . . . . . . . . . . . 1558
show debugging . . . . . . . . . . . . . . . . . . . . 1559
80 Sflow Commands . . . . . . . . . . . . . . . . . 1561
Commands in this Chapter. . . . . . . . . . . . . . . 1561
sflow destination . . . . . . . . . . . . . . . . . . . 1561
sflow polling . . . . . . . . . . . . . . . . . . . . . . 1563
sflow polling (Interface Mode)
sflow sampling. . . . . . . . . . . . . . . . . . . . . 1565
sflow sampling (Interface Mode) . . . . . . . . . . . 1566
. . . . . . . . . . . . 1564
show sflow agent
. . . . . . . . . . . . . . . . . . . 1567
show sflow destination . . . . . . . . . . . . . . . . 1568
show sflow polling
show sflow sampling
. . . . . . . . . . . . . . . . . . 1569
. . . . . . . . . . . . . . . . . 1570
81 SNMP Commands . . . . . . . . . . . . . . . . 1573
Commands in this Chapter. . . . . . . . . . . . . . . 1573
Contents 67
Page 68
show snmp . . . . . . . . . . . . . . . . . . . . . . . 1573
show snmp engineID
. . . . . . . . . . . . . . . . . . 1575
show snmp filters . . . . . . . . . . . . . . . . . . . 1576
show snmp group . . . . . . . . . . . . . . . . . . . 1577
show snmp user
show snmp views
. . . . . . . . . . . . . . . . . . . . 1578
. . . . . . . . . . . . . . . . . . . 1580
show trapflags . . . . . . . . . . . . . . . . . . . . . 1581
snmp-server community
. . . . . . . . . . . . . . . . 1583
snmp-server community-group . . . . . . . . . . . . 1585
snmp-server contact . . . . . . . . . . . . . . . . . . 1586
snmp-server enable traps
. . . . . . . . . . . . . . . 1586
snmp-server engineID local . . . . . . . . . . . . . . 1589
snmp-server filter . . . . . . . . . . . . . . . . . . . 1590
snmp-server group
. . . . . . . . . . . . . . . . . . . 1592
snmp-server host . . . . . . . . . . . . . . . . . . . . 1593
82 SSH Commands . . . . . . . . . . . . . . . . . . 1601
68 Contents
snmp-server location . . . . . . . . . . . . . . . . . 1595
snmp-server user
. . . . . . . . . . . . . . . . . . . . 1596
snmp-server view . . . . . . . . . . . . . . . . . . . 1597
snmp-server v3-host . . . . . . . . . . . . . . . . . . 1599
Commands in this Chapter . . . . . . . . . . . . . . . 1601
Page 69
crypto key generate dsa . . . . . . . . . . . . . . . . 1601
crypto key generate rsa
. . . . . . . . . . . . . . . . 1602
crypto key pubkey-chain ssh . . . . . . . . . . . . . 1603
ip ssh port . . . . . . . . . . . . . . . . . . . . . . . 1604
ip ssh pubkey-auth
ip ssh server
. . . . . . . . . . . . . . . . . . . 1605
. . . . . . . . . . . . . . . . . . . . . . 1605
key-string . . . . . . . . . . . . . . . . . . . . . . . 1606
show crypto key mypubkey
. . . . . . . . . . . . . . 1608
show crypto key pubkey-chain ssh . . . . . . . . . . 1609
show ip ssh . . . . . . . . . . . . . . . . . . . . . . 1610
user-key
. . . . . . . . . . . . . . . . . . . . . . . . 1611
83 Syslog Commands . . . . . . . . . . . . . . . . 1613
CLI Logged to Local File and Syslog Server. . . . . . 1613
Commands in this Chapter. . . . . . . . . . . . . . . 1614
clear logging
. . . . . . . . . . . . . . . . . . . . . . 1615
clear logging file. . . . . . . . . . . . . . . . . . . . 1615
description
level
. . . . . . . . . . . . . . . . . . . . . . . 1616
. . . . . . . . . . . . . . . . . . . . . . . . . . 1617
logging cli-command . . . . . . . . . . . . . . . . . 1617
logging
. . . . . . . . . . . . . . . . . . . . . . . . . 1619
logging audit
. . . . . . . . . . . . . . . . . . . . . . 1621
Contents 69
Page 70
logging buffered . . . . . . . . . . . . . . . . . . . . 1622
logging console
. . . . . . . . . . . . . . . . . . . . 1623
logging file . . . . . . . . . . . . . . . . . . . . . . . 1624
logging on . . . . . . . . . . . . . . . . . . . . . . . 1625
logging snmp
logging web-session
. . . . . . . . . . . . . . . . . . . . . . 1626
. . . . . . . . . . . . . . . . . . 1626
port . . . . . . . . . . . . . . . . . . . . . . . . . . . 1627
show logging
. . . . . . . . . . . . . . . . . . . . . . 1628
show logging file. . . . . . . . . . . . . . . . . . . . 1629
show syslog-servers . . . . . . . . . . . . . . . . . . 1630
84 System Management Commands. . . . . 1633
asset-tag . . . . . . . . . . . . . . . . . . . . . . . . 1633
banner exec . . . . . . . . . . . . . . . . . . . . . . 1634
banner login . . . . . . . . . . . . . . . . . . . . . . 1635
70 Contents
banner motd
. . . . . . . . . . . . . . . . . . . . . . 1636
banner motd acknowledge . . . . . . . . . . . . . . 1637
clear checkpoint statistics
cut-through mode
. . . . . . . . . . . . . . . . . . . 1639
. . . . . . . . . . . . . . 1638
exec-banner . . . . . . . . . . . . . . . . . . . . . . 1639
hostname
initiate failover
. . . . . . . . . . . . . . . . . . . . . . . . 1640
. . . . . . . . . . . . . . . . . . . . . 1641
Page 71
ip address . . . . . . . . . . . . . . . . . . . . . . . 1642
ip address none
. . . . . . . . . . . . . . . . . . . . 1642
ip address {dhcp/bootp} . . . . . . . . . . . . . . . . 1643
login-banner . . . . . . . . . . . . . . . . . . . . . . 1644
member
. . . . . . . . . . . . . . . . . . . . . . . . . 1644
motd-banner
. . . . . . . . . . . . . . . . . . . . . . 1645
nsf . . . . . . . . . . . . . . . . . . . . . . . . . . . 1646
ping
. . . . . . . . . . . . . . . . . . . . . . . . . . . 1647
reload . . . . . . . . . . . . . . . . . . . . . . . . . 1648
set description . . . . . . . . . . . . . . . . . . . . . 1649
slot
. . . . . . . . . . . . . . . . . . . . . . . . . . . 1650
show banner . . . . . . . . . . . . . . . . . . . . . . 1651
show boot-version . . . . . . . . . . . . . . . . . . . 1653
show checkpoint statistics
. . . . . . . . . . . . . . 1653
show cut-through mode . . . . . . . . . . . . . . . . 1654
show interfaces advanced firmware . . . . . . . . . 1655
show ip interface out-of-band
. . . . . . . . . . . . . 1656
show memory cpu . . . . . . . . . . . . . . . . . . . 1657
show power-usage-history . . . . . . . . . . . . . . 1659
show process cpu
. . . . . . . . . . . . . . . . . . . 1660
show sessions . . . . . . . . . . . . . . . . . . . . . 1662
Contents 71
Page 72
show slot . . . . . . . . . . . . . . . . . . . . . . . . 1663
show supported cardtype
. . . . . . . . . . . . . . . 1665
show supported switchtype . . . . . . . . . . . . . . 1666
show switch . . . . . . . . . . . . . . . . . . . . . . 1668
show system
show system id
. . . . . . . . . . . . . . . . . . . . . . 1676
. . . . . . . . . . . . . . . . . . . . . 1678
show system power . . . . . . . . . . . . . . . . . . 1679
show system temperature
. . . . . . . . . . . . . . . 1680
show tech-support . . . . . . . . . . . . . . . . . . . 1681
show users . . . . . . . . . . . . . . . . . . . . . . . 1683
show version
. . . . . . . . . . . . . . . . . . . . . . 1684
stack . . . . . . . . . . . . . . . . . . . . . . . . . . 1685
stack-port . . . . . . . . . . . . . . . . . . . . . . . 1686
standby
. . . . . . . . . . . . . . . . . . . . . . . . . 1687
telnet . . . . . . . . . . . . . . . . . . . . . . . . . . 1688
85 Telnet Server Commands . . . . . . . . . . . 1695
72 Contents
traceroute . . . . . . . . . . . . . . . . . . . . . . . 1691
Commands in this Chapter . . . . . . . . . . . . . . . 1695
ip telnet server disable . . . . . . . . . . . . . . . . 1695
ip telnet port
show ip telnet
. . . . . . . . . . . . . . . . . . . . . . 1696
. . . . . . . . . . . . . . . . . . . . . 1697
Page 73
86 Terminal Length Commands . . . . . . . . 1699
terminal length. . . . . . . . . . . . . . . . . . . . . 1699
87 Time Ranges Commands . . . . . . . . . . . 1701
time-range . . . . . . . . . . . . . . . . . . . . . . . 1701
absolute . . . . . . . . . . . . . . . . . . . . . . . . 1702
periodic
show time-range. . . . . . . . . . . . . . . . . . . . 1705
. . . . . . . . . . . . . . . . . . . . . . . . 1703
88 User Interface Commands. . . . . . . . . . 1709
enable . . . . . . . . . . . . . . . . . . . . . . . . . 1709
end
. . . . . . . . . . . . . . . . . . . . . . . . . . . 1710
exit . . . . . . . . . . . . . . . . . . . . . . . . . . . 1710
mode simple . . . . . . . . . . . . . . . . . . . . . . 1711
mode-change confirm
quit . . . . . . . . . . . . . . . . . . . . . . . . . . . 1712
. . . . . . . . . . . . . . . . . 1712
89 Web Server Commands . . . . . . . . . . . . 1715
Web Sessions . . . . . . . . . . . . . . . . . . . . . 1715
Commands in this Chapter
. . . . . . . . . . . . . . . 1716
common-name . . . . . . . . . . . . . . . . . . . . . 1716
country
. . . . . . . . . . . . . . . . . . . . . . . . . 1717
Contents 73
Page 74
crypto certificate generate . . . . . . . . . . . . . . 1718
crypto certificate import
. . . . . . . . . . . . . . . . 1719
crypto certificate request . . . . . . . . . . . . . . . 1721
duration. . . . . . . . . . . . . . . . . . . . . . . . . 1722
ip http port
ip http server
. . . . . . . . . . . . . . . . . . . . . . . 1722
. . . . . . . . . . . . . . . . . . . . . . 1723
ip http secure-certificate . . . . . . . . . . . . . . . 1724
ip http secure-port
. . . . . . . . . . . . . . . . . . . 1725
ip http secure-server. . . . . . . . . . . . . . . . . . 1725
key-generate . . . . . . . . . . . . . . . . . . . . . . 1726
location
. . . . . . . . . . . . . . . . . . . . . . . . . 1727
organization-unit . . . . . . . . . . . . . . . . . . . . 1728
show crypto certificate mycertificate. . . . . . . . . 1728
show ip http server status
. . . . . . . . . . . . . . . 1730
show ip http server secure status . . . . . . . . . . . 1730
A Appendix A: List of Commands . . . . . . 1735
74 Contents
state . . . . . . . . . . . . . . . . . . . . . . . . . . 1732
Page 75
1
Command Groups
Introduction
The Command Line Interface (CLI) is a network management application
operated through an ASCII terminal without the use of a Graphic User
Interface (GUI) driven software application. By directly entering commands,
the user has greater configuration flexibility. The CLI is a basic command-line
interpreter similar to the UNIX C shell.
A switch can be configured and maintained by entering commands from the
CLI, which is based solely on textual input and output with commands being
entered by a terminal keyboard and the output displayed as text via a terminal
monitor. The CLI can be accessed from a console terminal connected to an
EIA/TIA-232 port or through a Telnet/SSH session.
This guide describes how the CLI is structured, describes the command
syntax, and describes the command functionality.
This guide also provides information for configuring the PowerConnect
switch, details the procedures, and provides configuration examples. Basic
installation configuration is described in the
completed before using this document.
User’s Guide
and must be
Command Groups 75
Page 76
Command Groups
The system commands can be broken down into four sets of functional
groups: Layer 2, Data Center Technology, Layer 3, and Utility.
Table 1-1. System Command Groups
Command Group Description
Layer 2 Commands
AAA Configures connection security including authorization
and passwords.
ACL Configures and displays ACL information.
Address Table Configures bridging address tables.
Auto-VoIP Configures Auto VoIP for IP phones on a switch.
CDP Interoperability Configures Cisco® Discovery Protocol (CDP).
DHCP L2 Relay Enables the Layer 2 DHCP Relay agent for an interface.
DHCP Management
Interface
Dynamic ARP Inspection Configures for rejection of invalid and malicious ARP
Ethernet Configuration Configures all port configuration options for example
Ethernet CFM Configures and displays GVRP configuration and
IGMP Snooping Configures IGMP snooping and displays IGMP
IGMP Snooping Querier Configures IGMP Snooping Querier and displays IGMP
IP Addressing Configures and manages IP addresses on the switch.
IPv6 ACL Configures and displays ACL information for IPv6.
IPv6 MLD Snooping Configures IPv6 MLD Snooping.
IPv6 MLD Snooping
Querier
Link Dependency Configures and displays link dependency information.
Configures DHCP snooping and whether an interface is
trusted for filtering.
packets.
ports, storm control, port speed and auto-negotiation.
information.
configuration and IGMP information.
Snooping Querier information.
Configures IPv6 Snooping Querier and displays IPv6
Snooping Querier information.
76 Command Groups
Page 77
Table 1-1. System Command Groups
Command Group Description
LLDP Configures and displays LLDP information.
Port Aggregator Provides server administrators the ability to map internal
ports to external ports easily.
Port Channel Configures and displays Port channel information.
Port Monitor Monitors activity on specific target ports.
QoS Configures and displays QoS information.
Radius Configures and displays RADIUS information.
Spanning Tree Configures and reports on Spanning Tree protocol.
TACACS+ Configures and displays TACACS+ information.
VLAN Configures VLANs and displays VLAN information.
802.1x Configures and displays commands related to 802.1x
security protocol.
Data Center Technology Commands
Data Center Bridging
Commands
FIP Snooping
Commands
Priority Flow Control
Commands
Layer 3 Commands
ARP (IPv4) Manages Address Resolution Protocol functions.
Data Center Bridging Exchange Protocol (DCBX) is used
by DCB devices to exchange configuration information
with directly connected peers. The protocol is also used to
detect misconfiguration of the peer DCB devices and,
optionally, for configuration of peer DCB devices.
FCoE Initialization Protocol (FIP) is used to perform the
functions of FC_BB_E device discovery, initialization and
maintenance. FIP snooping is a frame inspection method
used by FIP Snooping Bridges to monitor FIP frames and
apply policies based upon the L2 header information in
those frames, following recommendations in Annex C of
FC_BB_5 Rev 2.00
Provides priority-based flow control that can pause
(inhibit transmission of) individual priorities within a
single physical link.
(continued)
Command Groups 77
Page 78
Table 1-1. System Command Groups
Command Group Description
DHCP Server and Relay
Agent (IPv4)
DHCPv6 Configures IPv6 DHCP functions.
DVMRP (Mcast) Configures DVMRP operations.
IGMP (Mcast) Configures IGMP operations.
IGMP Proxy (Mcast) Manages IGMP Proxy on the system.
IP Helper/DHCP Relay Configures relay of UDP packets.
IP Routing (IPv4) Configures IP routing and addressing.
IPv6 Multicast Manages IPv6 Multicasting on the system.
IPv6 Routing Configures IPv6 routing and addressing.
Loopback Interface
(IPv6)
Multicast (Mcast) Manages Multicasting on the system.
OSPF (IPv4) Manages shortest path operations.
OSPFv3 (IPv6) Manages IPv6 shortest path operations.
Router Discovery
Protocol (IPv4)
Routing Information
Protocol (IPv4)
Tunnel Interface (IPv6) Managing tunneling operations.
Virtual Router
Redundancy (IPv4)
Virtual Router
Redundancy (IPv4)
Utility Commands
Auto-Install Automatically configures switch when a configuration file
Captive Portal Blocks clients from accessing network until user
Manages DHCP/BOOTP operations on the system.
Manages Loopback configurations.
Manages router discovery operations.
Configures RIP activities.
Controls virtual LAN routing.
Manages router redundancy on the system.
is not found.
verification is established.
(continued)
78 Command Groups
Page 79
Table 1-1. System Command Groups
Command Group Description
Clock Configures the system clock.
Command Line
Configuration Scripting
Denial of Service Provides several Denial of Service options.
Line Configures the console, SSH, and remote Telnet
Management ACL Configures and displays management access-list
Password Management Provides password management.
PHY Diagnostics Diagnoses and displays the interface status.
RMON Can be configured through the CLI and displays RMON
Serviceability Tracing Controls display of debug output to serial port or telnet
sFlow Configures sFlow monitoring.
SNMP Configures SNMP communities, traps and displays SNMP
SSH Configures SSH authentication.
Syslog Manages and displays syslog messages.
System Management Configures the switch clock, name and authorized users.
Telnet Server Configures Telnet service on the switch and displays
User Interface Describes user commands used for entering CLI
Web Server Configures web-based access to the switch.
Manages the switch configuration files.
connection.
information.
information.
console.
information.
Telne t i n format i o n .
commands.
(continued)
Mode Types
The tables on the following pages use these abbreviations for Command
Mode names.
• AAA — IAS User Configuration
Command Groups 79
Page 80
• ARPA — ARP ACL Configuration
• CC — Crypto Configuration
• CP — Captive Portal Configuration
• CPI — Captive Portal Instance
• CMC — Class-Map Configuration
• DP — IP DHCP Pool Configuration
• GC — Global Configuration
• IC — Interface Configuration (reached via
• IP — IP Access List Configuration
•I R — I n t e r f a c e R a n g e
•K C — K e y C h a i n
•K E — K e y
• L — Logging
• LC — Line Configuration
• LD — Link Dependency
• MA — Management Access-level
• MC — MST Configuration
• MDC — Maintenance Domain Configuration
• ML — MAC-List Configuration
• MSC — Mail Server Configuration
•M T — M A C - a c l
• PA — Port Aggregator
• PE — Privileged EXEC
• PM — Policy Map Configuration
• PCGC — Policy Map Global Configuration
• PCMC — Policy Class Map Configuration
•R — R a d i u s
• RIP — Router RIP Configuration
• RC — Router Configuration
interface vlan xxx
command)
80 Command Groups
Page 81
• ROSPF — Router Open Shortest Path First
• ROSV3 — Router Open Shortest Path First Version 3
• SG — Stack Global Configuration
•S P — S S H P u b l i c K e y
•S K — S S H P u b l i c K e y - c h a i n
• TC — TACACS Configuration
• TRC — Time Range Configuration
• UE — User EXEC
• VLAN — VLAN Configuration (reached via
vlan database
• v6ACL — IPv6 Access List Configuration
• v6CMC — IPv6 Class-Map Configuration
• v6DP — IPv6 DHCP Pool Configuration
Layer 2 Commands
AAA
command)
Command Description Mode
aaa authentication dot1x
default
aaa authentication enable Defines authentication method lists for
aaa authentication login Defines login authentication. GC
aaa authorization network
default radius
aaa ias-user username Configures IAS users and their attributes. Also
clear aaa ias-users Deletes all IAS users. PE
enable authentication Specifies the authentication method list when
Specifies an authentication method for 802.1x
clients.
accessing higher privilege levels.
Enables the switch to accept VLAN assignment
by the RADIUS server.
changes the mode to aa user config mode.
accessing a higher privilege level from a remote
telnet or console.
Command Groups 81
GC
GC
GC
GC
LC
a
Page 82
Command Description Mode
enable password Sets a local password to control access to the
GC
normal level.
ip http authentication Specifies authentication methods for http. GC
ip https authentication Specifies authentication methods for https. GC
login authentication Specifies the login authentication method list
LC
for a remote telnet or console.
password (IAS) Configures a password for a user. AAA
password Specifies a password on a line. LC
password Specifies a user password UE
show aaa ias-users Displays configured IAS users and their
PE
attributes.
show authentication
methods
show user accounts Displays information about the local user
Shows information about authentication
methods.
PE
PE
database.
show users login-history Displays information about login histories of
PE
users.
username Establishes a username-based authentication
GC
system.
username password
encrypted username unlock
Transfers local user passwords between devices
without having to know the passwords.
GC
a
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
ACL
Command Description Mode
access-list Creates an Access Control List (ACL) that is
identified by the parameter
deny | permit The deny command denies traffic if the
conditions defined in the deny statement are
matched. The permit command allows traffic if
the conditions defined in the permit statement
are matched.
82 Command Groups
accesslistnumber.
a
GC
ML
Page 83
Command Description Mode
ip access-group Attaches a specified access-control list to an
interface.
mac access-group Attaches a specific MAC Access Control List
(ACL) to an interface in the in-bound
GC or
IC
GC or
IC
direction.
mac access-list extended Creates the MAC Access Control List (ACL)
mac access-list extended
rename
identified by the
Renames the existing MAC Access Control List
(ACL) name.
name
parameter.
service-acl input Blocks Link Local Protocol Filtering (LLPF)
GC
GC
IC
protocol(s) on a given port.
show service-acl interface Displays the status of LLPF rules configured on
PE
a particular port or on all the ports.
show ip access-lists Displays an Access Control List (ACL) and all
PE
of the rules that are defined for the ACL.
show mac access-list Displays a MAC access list and all of the rules
PE
that are defined for the ACL.
a. For the meaning of each Mode abbreviation, see Mode Typeson page 79.
Address Table
a
Command Description Mode
clear mac address-table Removes any learned entries from the
PE
forwarding database.
mac address-table aging-
Sets the address table aging time. GC
time
mac address-table multicast
Enables filtering of Multicast addresses. GC
filtering
mac address-table multicast
forbidden address
mac address-table multicast
forbidden forward-
Forbids adding a specific Multicast address to
specific ports.
Forbids a port to be a forwarding-unregisteredmulticast-addresses port.
IC
IC
unregistered
Command Groups 83
a
Page 84
Command Description Mode
mac address-table multicast
forward-all
mac address-table multicast
forward-unregistered
mac address-table multicast
static
mac address-table static Adds a static MAC-layer station source address
Enables forwarding of all Multicast packets on a
port.
Enables the forwarding of unregistered
multicast addresses.
Registers MAC-layer Multicast addresses to the
bridge table, and adds static ports to the group.
IC
IC
IC
IC
to the bridge table.
port security Disables new address learning on an interface. IC
port security max Configures the maximum addresses that can be
IC
learned on the port while the port is in port
security mode.
show mac address-table Displays dynamically created entries in the
PE
bridge-forwarding database.
show mac address-table
address
show mac address-table
count
show mac address-table
dynamic
show mac address-table
Displays all entries in the bridge-forwarding
database for the specified MAC address.
Displays the number of addresses present in the
UE or
PE
PE
Forwarding Database.
Displays all entries in the bridge-forwarding
database.
UE or
PE
Displays the Multicast filtering configuration. PE
filtering
show mac address-table
interface
show mac address-table
multicast
show mac address-table
static
show mac address-table
vlan
Displays the mac forwarding table entries for a
specific interface.
Displays Multicast MAC address table
information.
Displays statically created entries in the bridgeforwarding database.
Displays all entries in the bridge-forwarding
database for the specified VLAN.
UE or
PE
PE
PE
UE or
PE
show ports security Displays the port-lock status. PE
show ports security
addresses
Displays current dynamic addresses in locked
ports.
PE
a
84 Command Groups
Page 85
a. For the meaning of each Mode abbreviation, see Mode Typeson page 79.
Auto-VoIP
Command Description Mode
switchport voice detect
auto
show switchport voice Displays the status of auto-voip on an interface
Enables the VoIP Profile on all the interfaces of
the switch.
GC or
IC
PE
or all interfaces.
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
CDP Interoperability
Command Description Mode
clear isdp counters Clears the ISDP counters. PE
clear isdp table Clears entries in the ISDP table. PE
isdp advertise-v2 Enables the sending of ISDP version 2 packets
from the device.
isdp enable Enables ISDP on the switch. GC or
isdp holdtime Configures the hold time for ISDP packets that
the switch transmits.
isdp timer Sets period of time between sending new ISDP
packets.
show isdp Displays global ISDP settings. PE
show isdp interface Displays ISDP settings for the specified
interface.
show isdp entry Displays ISDP entries. PE
show isdp neighbors Displays the list of neighboring devices. PE
show isdp traffic Displays ISDP statistics. PE
GC
IC
GC
GC
PE
a
a
Command Groups 85
Page 86
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
DHCP L2 Relay
Command Description Mode
dhcp l2relay Enables the Layer 2 DHCP Relay agent for an
interface or globally.
dhcp l2relay circuit-id Enables user to set the DHCP Option 82
GC or
IC
GC
Circuit ID for a VLAN.
dhcp l2relay remote-id Enables user to set the DHCP Option 82
GC
Remote ID for a VLAN.
dhcp l2relay vlan Enables the L2 DHCP Relay agent for a set of
GC
VLANs.
dhcp l2relay trust Configures an interface to trust a received
IC
DHCP Option 82.
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
DHCP Management Interface
Command Description Mode
release dhcp Forces the DHCPv4 client to release a leased
address.
renew dhcp Forces the DHCP client to immediately renew
an IPv4 address lane.
debug dhcp packet Displays debug information about DHCPv4
client activities and traces DHCP v4 packets to
and from the local DHCPv4 client.
show dhcp lease Displays IPv4 addresses leased from a DHCP
server.
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
PE
PE
PE
PE
a
a
86 Command Groups
Page 87
DHCP Snooping
Command Description Mode
clear ip dhcp snooping
Clears all DHCP Snooping entries. PE
binding
clear ip dhcp snooping
Clears all DHCP Snooping statistics. PE
statistics
ip dhcp snooping Enables DHCP snooping globally or on a
specific VLAN.
GC or
IC
ip dhcp snooping binding Configures a static DHCP Snooping binding. GC
ip dhcp snooping database Configures the persistent location of the DHCP
GC
snooping database.
ip dhcp snooping database
write-delay
Configures the interval in seconds at which the
DHCP Snooping database will be stored in
GC
persistent storage.
ip dhcp snooping limit Controls the maximum rate of DHCP
IC
messages.
ip dhcp snooping loginvalid
Enables logging of DHCP messages filtered by
the DHCP Snooping application.
IC
ip dhcp snooping trust Configure a port as trusted for DHCP snooping. IC
ip dhcp snooping verify
mac-address
Enables the verification of the source MAC
address with the client MAC address in the
GC
received DHCP message.
show ip dhcp snooping Displays the DHCP snooping global and per
PE
port configuration.
show ip dhcp snooping
Displays the DHCP snooping binding entries. PE
binding
show ip dhcp snooping
database
show ip dhcp snooping
interfaces
show ip dhcp snooping
statistics
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
Displays the DHCP snooping configuration
related to the database persistence.
Displays the DHCP Snooping status of the
interfaces.
Displays the DHCP snooping filtration
statistics.
PE
PE
PE
a
Command Groups 87
Page 88
Dynamic ARP Inspection
Command Description Mode
arp access-list Creates an ARP ACL. GC
clear ip arp inspection
statistics
ip arp inspection filter Configures the ARP ACL to be used for a single
ip arp inspection limit Configures the rate limit and burst interval
ip arp inspection trust Configures an interface as trusted for Dynamic
ip arp inspection validate Enables additional validation checks like source
ip arp inspection vlan Enables Dynamic ARP Inspection on a single
permit ip host mac host Configures a rule for a valid IP address and
show arp access-list Displays the configured ARP ACLs with the
show ip arp inspection
interfaces
show ip arp inspection
interfaces
show ip arp inspection vlan Displays the Dynamic ARP Inspection
Resets the statistics for Dynamic ARP
Inspection on all VLANs.
VLAN or a range of VLANs to filter invalid ARP
packets.
values for an interface.
ARP Inspection.
MAC address validation, destination MAC
address validation or IP address validation on
the received ARP packets.
VLAN or a range of VLANs.
MAC address combination used in ARP packet
validation.
rules.
Displays the Dynamic ARP Inspection
configuration.
Displays the Dynamic ARP Inspection
configuration on all the DAI enabled interfaces.
configuration on all the VLANs in the given
VLAN range.
PE
GC
IC
IC
GC
GC
ARPA
PE
PE
PE
PE
a
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
88 Command Groups
Page 89
Email Alerting
Command Description Mode
logging email Enables email alerting and sets the lowest
severity level for which log messages are
emailed.
logging email urgent Sets the lowest severity level at which log
messages are emailed in an urgent manner.
logging traps Sets the lowest severity level at which SNMP
traps are logged.
logging email message-type
to-addr
logging email from-addr Configures the From address of the email. GC
logging email message-type
subject
logging email logtime Configures the value of how frequently the
logging email test messagetype
show logging email
statistics
clear logging email statistics Clears the email alerting statistics. GC
security Sets the email alerting security protocol. MSC
mail-server ipaddress|hostname
port (Mail Server
Configuration Mode)
username (Mail Server
Configuration Mode)
password (Mail Server
Configuration Mode)
Configures the To address field of the email. GC
Configures the subject. GC
queued messages are sent.
Tests whether or not an email is being sent to an
SMTP server.
Displays information on how many emails are
sent, how many emails failed, when the last
email was sent, how long it has been since the
last email was sent, how long it has been since
the email changed to disabled mode.
Configures the SMTP server IP address and
changes the mode to Mail Server Configuration
Mode.
Configures the TCP port to use for
communication with the SMTP servers.
Configures the username required by the
authentication.
Configures the password required to
authenticate to the email server.
GC
GC
GC
GC
GC
PE
GC
MSC
MSC
MSC
a
Command Groups 89
Page 90
Command Description Mode
show mail-server Displays the configuration of all the mail servers
PE
or a particular mail server.
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
Ethernet Configuration
a
Command Description Mode
clear counters Clears statistics on an interface. PE
description Adds a description to an interface. IC
duplex Configures the full/half duplex operation of a
IC
given Ethernet interface when not using autonegotiation.
flowcontrol Configures the flow control on a given interface. GC
interface Enters the interface configuration mode to
configure parameters for an interface.
interface range Enters the interface configuration mode to
execute a command on multiple ports at the
GC or
IC
GC,
IC, IR
same time.
mtu Enables jumbo frames on an interface by
IC
adjusting the maximum size of a packet or
maximum transmission unit (MTU).
show interfaces advertise Displays information about auto negotiation
PE
advertisement.
show interfaces
configuration
Displays the configuration for all configured
interfaces.
UE
show interfaces counters Displays traffic seen by the physical interface. UE
show interfaces description Displays the description for all configured
UE
interfaces.
show interfaces detail Displays the detail for all configured interfaces. UE
show interfaces status Displays the status for all configured interfaces. UE
show statistics Displays statistics for one port or for the entire
PE
switch.
a
90 Command Groups
Page 91
Command Description Mode
show statistics switchport Displays detailed statistics for a specific port or
PE
for the entire switch.
show storm-control Displays the storm control configuration. PE
shutdown Disables interfaces. IC
speed Configures the speed of a given Ethernet
IC
interface when not using auto-negotiation.
storm-control broadcast Enables Broadcast storm control. IC
storm-control multicast Enables the switch to count Multicast packets
IC
together with Broadcast packets.
storm-control unicast Enables Unicast storm control. IC
switchport protected Sets the port to Protected mode. IC
switchport protected name Configures a name for a protected group. GC
show switchport protected Displays protected group/port information. PE
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
Ethernet CFM
a
Command Description Mode
ethernet cfm domain Enters into maintenance domain config mode
GC
for an existing domain. Use the optional level
parameter to create a domain and enter into
maintenance domain config mode.
service Associates a VLAN with a maintenance domain. MDC
ethernet cfm cc level Initiates sending continuity checks (CCMs) at
GC
the specified interval and level on a VLAN
monitored by an existing domain.
ethernet cfm mep level Creates a Maintenance End Point (MEP) on an
IC
interface at the specified level and direction.
ethernet cfm mep enable Enables a MEP at the specified level and
IC
direction.
ethernet cfm mep active Activates a MEP at the specified level and
IC
direction.
Command Groups 91
a
Page 92
Command Description Mode
ethernet cfm mep archivehold-time
ethernet cfm mip level Creates a Maintenance Intermediate Point
Maintains internal information on a missing
MEP.
IC
IC
(MIP) at the specified level.
ping ethernet cfm Generates a loopback message (LBM) from
PE
the configured MEP.
traceroute ethernet cfm Generates a link trace message (LTM) from the
configured MEP.
show ethernet cfm errors Displays the cfm errors. PE
show ethernet cfm domain Displays the configured parameters in a
maintenance domain.
show ethernet cfm
maintenance-points local
show ethernet cfm
maintenance-points remote
Displays the configured local maintenance
points.
Displays the configured remote maintenance
points.
show ethernet cfm statistics Displays the CFM statistics. PE
debug cfm Enables CFM debugging. PE
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
PE
PE
PE
PE
GVRP
a
Command Description Mode
clear gvrp statistics Clears all the GVRP statistics information. PE
garp timer Adjusts the GARP application join, leave, and
leaveall GARP timer values.
gvrp enable (global) Enables GVRP globally. GC
gvrp enable (interface) Enables GVRP on an interface. IC
gvrp registration-forbid De-registers all VLANs, and prevents dynamic
VLAN registration on the port.
gvrp vlan-creation-forbid Enables or disables dynamic VLAN creation. IC
92 Command Groups
a
IC
IC
Page 93
Command Description Mode
show gvrp configuration Displays GVRP configuration information,
PE
including timer values, whether GVRP and
dynamic VLAN creation is enabled, and
which ports are running GVRP.
show gvrp error-statistics Displays GVRP error statistics. UE
show gvrp statistics Displays GVRP statistics. UE
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
IGMP Snooping
a
Command Description Mode
ip igmp snooping (Global) In Global Config mode, Enables Internet
Group Management Protocol (IGMP)
snooping.
ip igmp snooping
(Interface)
ip igmp snooping hosttime-out
ip igmp snooping leavetime-out
ip igmp snooping mroutertime-out
show ip igmp snooping
groups
show ip igmp snooping
interface
show ip igmp snooping
mrouter
ip igmp snooping (VLAN) In VLAN Config mode, enables IGMP snooping
ip igmp snooping fast-leave Enables or disables IGMP Snooping fast-leave
Enables Internet Group Management Protocol
(IGMP) snooping on a specific VLAN.
Configures the host-time-out. IC
Configures the leave-time-out. IC
Configures the mrouter-time-out. IC
Displays Multicast groups learned by IGMP
snooping.
Displays IGMP snooping configuration. PE
Displays information on dynamically learned
Multicast router interfaces.
on a particular VLAN or on all interfaces
participating in a VLAN.
mode on a selected VLAN.
GC
IC
UE
PE
VLAN
VLAN
a
Command Groups 93
Page 94
Command Description Mode
ip igmp snooping
groupmembership-interval
ip igmp snooping
maxresponse
ip igmp snooping
mcrtrexpiretime
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
Sets the IGMP Group Membership Interval
time on a VLAN.
Sets the IGMP Maximum Response time on a
particular VLAN.
Sets the Multicast Router Present Expiration
time.
VLAN
VLAN
VLAN
IGMP Snooping Querier
a
Command Description Mode
ip igmp snooping querier Enables/disables IGMP Snooping Querier on
the system (Global Configuration mode) or on
GC,
VLAN
a VLAN.
ip igmp snooping querier
election participate
Enables the Snooping Querier to participate in
the Querier Election process when it discovers
VLAN
the presence of another Querier in the VLAN.
ip igmp snooping querier
Sets the IGMP Querier Query Interval time. GC
query-interval
ip igmp snooping querier
Sets the IGMP Querier timer expiration period. GC
timer expiry
ip igmp snooping querier
version
show igmp snooping
Sets the IGMP version of the query that the
GC
snooping switch is going to send periodically.
Displays IGMP Snooping Querier information. PE
querier
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
IP Addressing
Command Description Mode
clear host Deletes entries from the host name-to-address
cache.
clear ip address-conflictdetect
Clears the address conflict detection status in
the switch.
PE
PE
a
a
94 Command Groups
Page 95
Command Description Mode
interface out-of-band Brings up the OOB port configuration menu. GC
ip address (Out-of-Band) Sets an IP address for the service port. IC
ip address-conflict-detect
run
Triggers the switch to run active address conflict
detection by sending gratuitous ARP packets for
GC
IPv4 addresses on the switch.
ip address dhcp (Interface
Config)
Acquires an IP address on an interface from the
DHCP server.
IC
ip default-gateway Defines a default gateway (router). GC
ip domain-lookup Enables IP DNS-based host name-to-address
GC
translation.
ip domain-name Defines a default domain name to complete
GC
unqualified host names.
ip host Configures static host name-to-address
GC
mapping in the host cache.
ip name-server Configures available name servers. GC
ipv6 address (Interface
Config)
Sets the IPv6 address of the management
interface.
IC
ipv6 address (OOB Port) Sets the IPv6 prefix on the out-of-band port. IC
ipv6 address dhcp Enables the DHCPv6 client on an IPv6
IC
interface.
ipv6 enable (Interface
Enables IPv6 on the management interface. GC
Config)
ipv6 enable (OOB Config) Enables IPv6 operation on the out-of-band
IC
interface.
ipv6 gateway (OOB
Configures the address of the IPv6 gateway. IC
Config)
show hosts Displays the default domain name, a list of
UE
name server hosts, static and cached list of host
names and addresses.
show ip address-conflict Displays the status information corresponding
to the last detected address conflict.
UE or
PE
show ip helper-address Displays the ip helper addresses configuration. PE
a
Command Groups 95
Page 96
Command Description Mode
show ipv6 dhcp interface
out-of-band statistics
show ipv6 interface out-ofband
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
Displays IPv6 DHCP statistics for the out-ofband interface.
Displays the IPv6 out-of-band port
configuration.
PE
PE
IPv6 ACL
a
Command Description Mode
{deny | permit } Creates a new rule for the current IPv6 access
v6ACL
list.
ipv6 access-list Creates an IPv6 Access Control List (ACL)
GC
consisting of classification fields defined for the
IP header of an IPv6 frame.
ipv6 access-list rename Changes the name of an IPv6 ACL. GC
ipv6 traffic-filter Attaches a specific IPv6 ACL to an interface or
associates it with a VLAN ID in a given
direction.
show ipv6 access-lists Displays an IPv6 access list (and the rules
GC
IC
PE
defined for it).
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
IPv6 MLD Snooping
Command Description Mode
ipv6 mld snooping
immediate-leave
ipv6 mld snooping
groupmembership-interval
ipv6 mld snooping
maxresponse
Enables or disables MLD Snooping immediateleave admin mode on a selected interface or
VLAN.
Sets the MLD Group Membership Interval
time on a VLAN or interface.
Sets the MLD Maximum Response time for an
interface or VLAN.
IC
VLAN
IC
VLAN
IC or
VLAN
a
a
96 Command Groups
Page 97
Command Description Mode
ipv6 mld snooping
mcrtexpiretime
ipv6 mld snooping (Global) Enables MLD Snooping on the system (Global
Sets the Multicast Router Present Expiration
time.
IC
GC
Config Mode).
ipv6 mld snooping
Enables MLD Snooping on an interface. IC
(Interface)
ipv6 mld snooping (VLAN) Enables MLD Snooping on a particular VLAN
VLAN
and all interfaces participating in that VLAN.
show ipv6 mld snooping Displays MLD Snooping information. PE
show ipv6 mld snooping
groups
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
Displays the MLD Snooping entries in the
MFDB table.
PE
IPv6 MLD Snooping Querier
a
Command Description Mode
ipv6 mld snooping querier Enables MLD Snooping Querier on the system
or on a VLAN.
ipv6 mld snooping querier
address
ipv6 mld snooping querier
election participate
Sets the global MLD Snooping Querier address
on the system or on a VLAN.
Enables the Snooping Querier to participate in
the Querier Election process when it discovers
GC or
VLAN
GC or
VLAN
VLAN
the presence of another Querier in the VLAN.
ipv6 mld snooping querier
Sets the MLD Querier Query Interval time. GC
query-interval
ipv6 mld snooping querier
Sets the MLD Querier timer expiration period. GC
timer expiry
show ipv6 mld snooping
Displays MLD Snooping Querier information. PE
querier
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
Command Groups 97
a
Page 98
IP Source Guard
Command Description Mode
ip verify source Enables filtering of IP packets matching the
source IP address.
ip verify source portsecurity
ip verify binding Configures static bindings. GC
show ip verify interface Displays the IPSG interface configuration. PE
show ip verify source
interface
show ip source binding Displays all bindings (static and dynamic). PE
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
Enables filtering of IP packets matching the
source IP address and the source MAC address.
Displays the bindings configured on a particular
interface.
IC
IC
PE
a
98 Command Groups
Page 99
iSCSI Optimization
Link Dependency
Command Description Mode
iscsi aging time Sets aging time for iSCSI sessions. GC
a
iscsi cos Sets the quality of service profile that will be
GC
applied to iSCSI flows.
iscsi enable Enables Global Configuration mode command
GC
globally enables iSCSI awareness.
iscsi target port Configures an iSCSI target port (optionally
GC
configures target port address and name).
show iscsi Displays the iSCSI settings. PE
show iscsi sessions Displays the iSCSI sessions. PE
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
Command Description Mode
action Indicates if the link-dependency group should
LD
mirror or invert the status of the depended on
interfaces.
link-dependency group Enters the link-dependency mode to configure
GC
a link-dependency group.
add gigabitethernet Adds member gigabit Ethernet port(s) to the
LD
dependency list.
add tengigabitethernet Adds member ten gigabit Ethernet port(s) to
LD
the dependency list.
add port-channel Adds member port-channels to the
LD
dependency list.
depends-on Adds the dependent Ethernet ports or port
LD
channels list.
show link-dependency Shows the link dependencies configured on a
PE
particular group.
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
a
Command Groups 99
Page 100
LLDP
Command Description Mode
clear lldp remote-data Deletes all data from the remote data table. PE
clear lldp statistics Resets all LLDP statistics. PE
lldp notification Enables remote data change notifications. IC
lldp notification-interval Limits how frequently remote data change
notifications are sent.
lldp receive Enables the LLDP receive capability. IC
lldp timers Sets the timing parameters for local data
transmission on ports enabled for LLDP.
lldp transmit Enables the LLDP advertise capability. IC
lldp transmit-mgmt Specifies that transmission of the local system
management address information in the
LLDPDUs is included.
lldp transmit-tlv Specifies which optional TLVs in the 802.1AB
basic management set will be transmitted in the
LLDPDUs.
show lldp Displays the current LLDP configuration
summary.
show lldp interface Displays the current LLDP interface state. PE
show lldp local-device Displays the LLDP local data. PE
show lldp remote-device Displays the current LLDP remote data. PE
show lldp statistics Displays the current LLDP traffic statistics. PE
GC
GC
IC
IC
PE
a
a. For the meaning of each Mode abbreviation, see Mode Types on page 79.
Multicast VLAN Registration
Command Description Mode
mvr Enables MVR. GC or
mvr group Adds an MVR membership group. GC
mvr mode Changes the MVR mode type. GC
100 Command Groups
a
IC