The information contained herein is subject to change without notice. The only warranties for NEC products and services are set
forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as
constituting an additional warranty. NEC shall not be liable for technical or editorial errors or omissions contained herein.
Microsoft®, Windows®, and Windows NT® are U.S. registered trademarks of Microsoft Corporation.
SunOS™ and Solaris™ are trademarks of Sun Microsystems, Inc. in the U.S. and other countries.
Cisco® is a registered trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries.
Connecting to the switch .......................................................................................................................................... 8
Establishing a console connection ..................................................................................................................... 8
Setting an IP address ............................................................................................................................................. 9
Establishing a Telnet connection ........................................................................................................................ 9
Establishing an SSH connection .......................................................................................................................... 9
Accessing the switch ................................................................................................................................................ 10
Main Menu .................................................................................................................................................................. 13
Menu summary .......................................................................................................................................................... 13
Global commands .................................................................................................................................................... 14
Command line history and editing ........................................................................................................................ 15
Command line interface shortcuts ........................................................................................................................ 16
Menu overview .......................................................................................................................................................... 21
System Information Menu ........................................................................................................................................ 22
SNMPv3 Information Menu ...................................................................................................................................... 22
SNMPv3 USM User Table information ................................................................................................................ 23
SNMPv3 View Table information ....................................................................................................................... 24
SNMPv3 Access Table information ................................................................................................................... 24
SNMPv3 Group Table information ..................................................................................................................... 25
SNMPv3 Community Table information ........................................................................................................... 25
SNMPv3 Target Address Table information ..................................................................................................... 25
SNMPv3 Target Parameters Table information ............................................................................................... 26
SNMPv3 Notify Table information ...................................................................................................................... 26
System information .................................................................................................................................................... 28
Show last 100 syslog messages................................................................................................................................ 28
System user information ............................................................................................................................................ 29
Layer 2 information .................................................................................................................................................... 30
FDB information menu .............................................................................................................................................. 31
Show all FDB information .................................................................................................................................... 31
Clearing entries from the FDB ............................................................................................................................ 31
Link Aggregation Control Protocol information ................................................................................................... 32
802.1x information ..................................................................................................................................................... 33
Spanning Tree information ....................................................................................................................................... 34
Rapid Spanning Tree and Multiple Spanning Tree information ........................................................................ 36
Common Internal Spanning Tree information ...................................................................................................... 38
Trunk group information ........................................................................................................................................... 39
VLAN information ....................................................................................................................................................... 40
Layer 2 general information .................................................................................................................................... 40
Layer 3 information .................................................................................................................................................... 40
Route information ...................................................................................................................................................... 41
Show all Route information ................................................................................................................................ 42
ARP information ......................................................................................................................................................... 43
Show all ARP entry information ......................................................................................................................... 43
ARP address list information ............................................................................................................................... 43
OSPF information ....................................................................................................................................................... 44
OSPF general information .................................................................................................................................. 45
OSPF interface information ................................................................................................................................ 45
OSPF Database information .............................................................................................................................. 45
OSPF route codes information ........................................................................................................................... 47
Routing Information Protocol information............................................................................................................. 47
RIP Routes information ........................................................................................................................................ 47
RIP user configuration ......................................................................................................................................... 47
IP information.............................................................................................................................................................. 48
IGMP multicast group information ......................................................................................................................... 48
IGMP multicast router port information ................................................................................................................. 49
VRRP information ....................................................................................................................................................... 49
QoS information ......................................................................................................................................................... 50
802.1p information ..................................................................................................................................................... 50
ACL information ......................................................................................................................................................... 51
RMON Information Menu ......................................................................................................................................... 51
RMON history information ................................................................................................................................... 51
RMON alarm information ................................................................................................................................... 52
RMON event information ................................................................................................................................... 54
Link status information ............................................................................................................................................... 54
Port information.......................................................................................................................................................... 55
SFP information ........................................................................................................................................................... 56
1-1 Uplink Failure Detection information .......................................................................................................... 56
Information dump ...................................................................................................................................................... 56
Menu information ...................................................................................................................................................... 57
Port Statistics Menu .................................................................................................................................................... 57
Internet Protocol (IP) statistics ............................................................................................................................ 63
Link statistics .......................................................................................................................................................... 64
Port RMON statistics ............................................................................................................................................. 64
IP statistics .............................................................................................................................................................. 68
DNS statistics ......................................................................................................................................................... 69
IGMP Multicast Group statistics ......................................................................................................................... 72
OSPF statistics menu ............................................................................................................................................ 73
OSPF global statistics ........................................................................................................................................... 73
CPU statistics ......................................................................................................................................................... 79
Access Control List (ACL) statistics menu .............................................................................................................. 79
Menu information ...................................................................................................................................................... 84
Viewing, applying, reverting, and saving changes ............................................................................................ 84
Saving the configuration .......................................................................................................................................... 85
System configuration ................................................................................................................................................ 86
System host log configuration ........................................................................................................................... 87
Secure Shell Server configuration ..................................................................................................................... 88
RADIUS server configuration .............................................................................................................................. 89
TACACS+ server configuration .......................................................................................................................... 90
NTP server configuration ..................................................................................................................................... 91
System SNMP configuration ............................................................................................................................... 92
User Security Model configuration .................................................................................................................... 94
View-based Access Control Model configuration ........................................................................................ 96
SNMPv3 Group configuration ............................................................................................................................ 97
SNMPv3 Community Table configuration ....................................................................................................... 97
System Access configuration ............................................................................................................................ 99
User Access Control configuration ................................................................................................................ 101
User ID configuration ........................................................................................................................................ 101
Port configuration ................................................................................................................................................... 103
Temporarily disabling a port ........................................................................................................................... 104
Port link configuration ...................................................................................................................................... 104
Port ACL/QoS configuration ........................................................................................................................... 105
802.1x Global configuration............................................................................................................................ 106
802.1x Port configuration ................................................................................................................................. 107
Rapid Spanning Tree Protocol / Multiple Spanning Tree Protocol configuration ....................................... 109
Common Internal Spanning Tree configuration ......................................................................................... 110
CIST port configuration .................................................................................................................................... 112
Spanning Tree configuration ................................................................................................................................ 113
Bridge Spanning Tree configuration .............................................................................................................. 113
Spanning Tree port configuration .................................................................................................................. 114
IP Trunk Hash configuration ................................................................................................................................... 116
Layer 2 IP Trunk Hash configuration ............................................................................................................... 117
Link Aggregation Control Protocol configuration ............................................................................................ 117
LACP Port configuration .................................................................................................................................. 118
IP interface configuration ............................................................................................................................... 120
IP Forwarding configuration ................................................................................................................................. 122
IP Access List configuration .................................................................................................................................. 124
Routing Information Protocol configuration ...................................................................................................... 124
Open Shortest Path First configuration ............................................................................................................... 127
OSPF Area Index configuration ...................................................................................................................... 128
OSPF Summary Range configuration ............................................................................................................ 129
Quality of Service configuration .......................................................................................................................... 143
Access Control configuration .............................................................................................................................. 143
Access Control List configuration ........................................................................................................................ 145
ACL IP Version 4 Filter configuration .............................................................................................................. 146
ACL Meter configuration ................................................................................................................................. 147
ACL Packet Format configuration ................................................................................................................. 149
ACL Group configuration ................................................................................................................................ 149
RMON history configuration ............................................................................................................................ 150
Port mirroring............................................................................................................................................................ 153
Port-based port mirroring ................................................................................................................................ 153
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here.
Link to Monitor (LtM) configuration ............................................................................................................... 155
Link to Disable configuration .......................................................................................................................... 155
Saving the active switch configuration .............................................................................................................. 156
Restoring the active switch configuration ......................................................................................................... 156
Menu information ................................................................................................................................................... 158
Operations-level port options ......................................................................................................................... 158
Operations-level port 802.1x options ............................................................................................................. 159
Menu information ................................................................................................................................................... 160
Updating the switch software image ................................................................................................................. 160
Downloading new software to the switch ................................................................................................... 160
Selecting a software image to run ...................................................................................................................... 161
Uploading a software image from the switch .................................................................................................. 162
Selecting a configuration block .......................................................................................................................... 162
Resetting the switch ............................................................................................................................................... 164
Accessing the ISCLI ................................................................................................................................................ 164
Menu information ................................................................................................................................................... 165
System maintenance options ......................................................................................................................... 166
Technical support dump ....................................................................................................................................... 169
FTP/TFTP technical support dump put ........................................................................................................... 169
FTP/TFTP system dump put ............................................................................................................................... 170
Clearing dump information ............................................................................................................................ 170
Unscheduled system dumps ................................................................................................................................. 171
Table 1 Console configuration parameters
Parameter
Value
Baud Rate
9600
Data Bits
8
Parity
None
Stop Bits
1
Flow Control
None
Command line interface
Introduction
The 10Gb Intelligent L3 Switch is ready to perform basic switching functions right out of the box. Some of
the more advanced features, however, require some administrative configuration before they can be
used effectively.
The extensive switching software included in the switch provides a variety of options for accessing and
configuring the switch:
Built-in, text-based command line interfaces (AOS CLI and ISCLI) for access via a local terminal or
remote Telnet/Secure Shell (SSH) session
Simple Network Management Protocol (SNMP) support for access through network management
software such as NEC WebSAM NetvisorPro
A browser-based management interface for interactive network access through the Web browser
The command line interface is the most direct method for collecting switch information and performing
switch configuration. Using a basic terminal, you can view information and statistics about the switch,
and perform any necessary configuration.
This chapter explains how to access the AOS CLI to the switch.
Additional references
Additional information about installing and configuring the switch is available in the following guides,
which are attached in this product.
You can access the command line interface in one of the following ways:
Using a console connection via the console port Using a Telnet connection over the network Using a Secure Shell (SSH) connection to securely log in over a network
Establishing a console connection
To establish a console connection with the switch, you need:
A null modem cable with a female DB-9 connector (See the N8406-026 10Gb Intelligent L3 Switch
User’s Guide for more information.)
An ASCII terminal or a computer running terminal emulation software set to the parameters shown in
the table below
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 8
To establish a console connection with the switch:
telnet <10Gb Intelligent L3 Switch IP address>
1. Connect the terminal to the console port using the null modem cable.
2. Power on the terminal.
3. Press the Enter key a few times on the terminal to establish the connection.
4. You will be required to enter a password for access to the switch. (For more information, see the
―Setting passwords‖ section in the ―First-time configuration‖ chapter.)
Setting an IP address
To access the switch via a Telnet or an SSH connection, you need to have an Internet Protocol (IP)
address set for the switch. The switch can get its IP address in one of the following ways:
Management port access:
Using a Dynamic Host Control Protocol (DHCP) server—When the /cfg/sys/dhcp command is
enabled, the management interface (interface 250) requests its IP address from a DHCP server.
The default value for the /cfg/sys/dhcp command is enabled.
Configuring manually—If the network does not support DHCP, you must configure the
management interface (interface 256) with an IP address. If you want to access the switch from
a remote network, you also must configure the management gateway (gateway 254).
Uplink port access:
Using a Bootstrap Protocol (BOOTP) server—By default, the management interface is set up to
request its IP address from a BOOTP server. If you have a BOOTP server on the network, add the
Media Access Control (MAC) address of the switch to the BOOTP configuration file located on
the BOOTP server. The MAC address can be found in the System Information menu (See the
―System information‖ section in the ―Information Menu‖ chapter.) If you are using a DHCP server
that also does BOOTP, you do not have to configure the MAC address.
Configuring manually—If the network does not support BOOTP, you must configure the
management port with an IP address.
Establishing a Telnet connection
A Telnet connection offers the convenience of accessing the switch from any workstation connected to
the network. Telnet provides the same options for user, operator, and administrator access as those
available through the console port. By default, Telnet is enabled on the switch. The switch supports four
concurrent Telnet connections.
Once the IP parameters are configured, you can access the CLI using a Telnet connection. To establish a
Telnet connection with the switch, run the Telnet program on the workstation and enter the telnet
command, followed by the switch IP address:
You will then be prompted to enter a password. The password entered determines the access level:
administrator, operator, or user. See the ―Accessing the switch‖ section later in this chapter for description
of default passwords.
Establishing an SSH connection
Although a remote network administrator can manage the configuration of a switch via Telnet, this
method does not provide a secure connection. The Secure Shell (SSH) protocol enables you to securely
log into the switch over the network.
As a secure alternative to using Telnet to manage switch configuration, SSH ensures that all data sent
over the network is encrypted and secure. In order to use SSH, you must first configure it on the switch.
See the ―Secure Shell Server configuration‖ section in the ―Configuration Menu‖ chapter for information
on how to configure SSH.
The switch can perform only one session of key/cipher generation at a time. Therefore, an SSH/Secure
Copy (SCP) client will not be able to log in if the switch is performing key generation at that time or if
another client has just logged in before this client. Similarly, the system will fail to perform the key
generation if an SSH/SCP client is logging in at that time.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 9
NOTE: The switch implementation of SSH is based on versions 1.5 and 2.0, and supports SSH clients
from version 1.0 through version 2.0. SSH clients of other versions are not supported. You may
configure the client software to use protocol SSH version 1 or version 2.
>> # ssh <user>@<10Gb Intelligent L3 Switch IP address>
NOTE: The first time you run SSH from the workstation, a warning message might appear. At the
prompt, enter yes to continue.
The supported SSH encryption and authentication methods are listed below.
Server Host Authentication—Client RSA authenticates the switch in the beginning of every
User Authentication—Local password authentication; Remote Authentication Dial-in User Service
(RADIUS)
The following SSH clients are supported:
SSH 3.0.1 for Linux (freeware) SecureCRT® 4.1.8 (VanDyke Technologies, Inc.) OpenSSH_3.9 for Linux (FC 3) SCP commands for Linux (FC3) PuTTY Release 0.58 (Simon Tatham) for Windows
By default, SSH service is not enabled on the switch. Once the IP parameters are configured, you can
access the command line interface to enable SSH.
To establish an SSH connection with the switch, run the SSH program on the workstation by issuing the ssh
command, followed by the user account name and the switch IP address:
You will then be prompted to enter your password.
Accessing the switch
To enable better switch management and user accountability, the switch provides different levels or
classes of user access. Levels of access to the CLI and Web management functions and screens increase
as needed to perform various switch management tasks. The three levels of access are:
User—User interaction with the switch is completely passive; nothing can be changed on the switch.
Users may display information that has no security or privacy implications, such as switch statistics
and current operational state information.
Operator—Operators can only effect temporary changes on the switch. These changes will be lost
when the switch is rebooted/reset. Operators have access to the switch management features used
for daily switch operations. Because any changes an operator makes are undone by a reset of the
switch, operators cannot severely impact switch operation, but do have access to the Maintenance
menu.
Administrator—Only administrators can make permanent changes to the switch configuration,
changes that are persistent across a reboot/reset of the switch. Administrators can access switch
functions to configure and troubleshoot problems on the switch. Because administrators can also
make temporary (operator-level) changes as well, they must be aware of the interactions between
temporary and permanent changes.
Access to switch functions is controlled through the use of unique usernames and passwords. Once you
are connected to the switch via the local console, Telnet, or SSH, you are prompted to enter a password.
The password entered determines the access level. The default user names/password for each access
level is listed in the following table.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 10
NOTE: It is recommended that you change default switch passwords after initial configuration and
as regularly as required under your network security policies. For more information, see the ―Setting
passwords‖ section in the ―First-time configuration‖ chapter.
Table 2 User access levels
User account
Description and tasks performed
User
The user has no direct responsibility for switch management. He or she can
view all switch status information and statistics, but cannot make any
configuration changes to the switch. The user account is enabled by default,
and the default password is user.
Oper
The operator manages all functions of the switch. The operator can reset ports
or the entire switch. By default, the operator account is disabled and has no
password.
Admin
The super user administrator has complete access to all menus, information,
and configuration commands on the switch, including the ability to change
both the user and administrator passwords. The admin account is enabled by
default, and the default password is admin.
NOTE: With the exception of the admin user, setting the password to an empty value can disable
access to each user level.
[Main Menu]
info - Information Menu
stats - Statistics Menu
cfg - Configuration Menu
oper - Operations Command Menu
boot - Boot Options Menu
maint - Maintenance Menu
diff - Show pending config changes [global command]
apply - Apply pending config changes [global command]
save - Save updated config to FLASH [global command]
revert - Revert pending or applied changes [global command]
exit - Exit [global command, always available]
>> Main#
Table 3 Typographic conventions
Typeface or symbol
Meaning
Example
AaBbCc123
This type depicts onscreen computer output
and prompts.
Main#
AaBbCc123
This type displays in command examples and
shows text that must be typed in exactly as
shown.
Main# sys
Once you enter the administrator password and it is verified, you are given complete access to the
switch.
After logging in, the Main Menu of the CLI is displayed. See the ―Menu basics‖ chapter for a summary of
the Main Menu options.
Idle timeout
By default, the switch will disconnect the console, Telnet, or SSH session after five minutes of inactivity. This
function is controlled by the idle timeout parameter, which can be set from 1 to 60 minutes. For
information on changing this parameter, see the ―System configuration‖ section in the ―Configuration
Menu‖ chapter.
Typographical conventions
The following table describes the typographic styles used in this guide:
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 11
Table 3 Typographic conventions
Typeface or symbol
Meaning
Example
<AaBbCc123>
This italicized type displays in command
examples as a parameter placeholder.
Replace the indicated text with the
appropriate real name or value when using
the command. Do not type the brackets.
This also shows guide titles, special terms, or
words to be emphasized.
To establish a Telnet session, enter:
host# telnet <IP address>
Read the user guide thoroughly.
[ ]
Command items shown inside brackets are
optional and can be used or excluded as the
situation demands. Do not type the brackets.
host# ls [-a]
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 12
Menu basics
[Main Menu]
info - Information Menu
stats - Statistics Menu
cfg - Configuration Menu
oper - Operations Command Menu
boot - Boot Options Menu
maint - Maintenance Menu
diff - Show pending config changes [global command]
apply - Apply pending config changes [global command]
save - Save updated config to FLASH [global command]
revert - Revert pending or applied changes [global command]
exit - Exit [global command, always available]
Introduction
The AOS CLI is used for viewing switch information and statistics. In addition, the administrator can use the
CLI for performing all levels of switch configuration.
To make the CLI easy to use, the various commands have been logically grouped into a series of menus
and submenus. Each menu displays a list of commands and/or submenus that are available, along with a
summary of what each command will do. Below each menu is a prompt where you can enter any
command appropriate to the current menu.
This chapter describes the Main Menu commands, and provides a list of commands and shortcuts that
are commonly available from all the menus within the CLI.
Main Menu
The Main Menu displays after a successful connection and login. The following table shows the Main
Menu for the administrator login. Some features are not available under the user login.
Menu summary
The Main Menu displays the following submenus:
Information Menu
The Information Menu provides submenus for displaying information about the current status of the
switch: from basic system settings to VLANs, and more.
Statistics Menu
This menu provides submenus for displaying switch performance statistics. Included are port, IP,
ICMP, TCP, UDP, SNMP, routing, ARP, and DNS.
Configuration Menu
It includes submenus for configuring every aspect of the switch. Changes to configuration are not
active until explicitly applied. Changes can be saved to non-volatile memory (NVRAM).
Operations Command Menu
Operations-level commands are used for making immediate and temporary changes to switch
configuration. This menu is used for bringing ports temporarily in and out of service.
Boot Options Menu
This menu is used for upgrading switch software, selecting configuration blocks, and for resetting the
switch when necessary. This menu is also used to set the switch back to factory settings.
Maintenance Menu
This menu is used for debugging purposes, enabling you to generate a technical support dump of
the critical state information in the switch, and to clear entries in the Forwarding Database and the
Address Resolution Protocol (ARP) and routing tables.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 13
>> Main# help
For help on a specific command, type help <command>
Global Commands: [can be issued from any menu]
help up print pwd
lines verbose exit quit
diff apply save revert
ping traceroute telnet history
pushd popd who
The following are used to navigate the menu structure:
. Print current menu
.. Move up one menu level
/ Top menu if first, or command separator
! Execute command from history
Table 4 Global commands
Command
Action
? or help
Provides usage information about a specific command on the current menu.
When used without the command parameter, a summary of the global
commands is displayed.
. or print
Displays the current menu.
.. or up
Moves up one level in the menu structure.
/
If placed at the beginning of a command, displays the Main Menu. Otherwise,
this is used to separate multiple commands placed on the same line.
lines
Sets the number of lines (n) that display on the screen at one time. The default is
24 lines. When used without a value, the current setting is displayed.
diff
Shows any pending configuration changes that have not been applied.
diff flash displays all pending configuration changes that have been
applied but not saved to flash memory (NVRAM), as well as those that have not
been applied.
apply
Applies pending configuration changes.
save
Saves the active configuration to backup, and saves the current configuration
as active.
Save n saves the current configuration as active, without saving the active
configuration to backup.
revert
Removes changes that have been made, but not applied.
Revert apply removes all changes that have not been saved.
exit or quit
Exits from the command line interface and logs out.
ping
Verifies station-to-station connectivity across the network. The format is:
IP address is the hostname or IP address of the device. number of tries (optional) is the number of attempts (1-32). msec delay (optional) is the number of milliseconds between attempts.
traceroute
Identifies the route used for station-to-station connectivity across the network.
The format is:
IP address is the hostname or IP address of the target station. max-hops (optional) is the maximum distance to trace (1-16 devices) msec delay (optional) is the number of milliseconds to wait for the
response.
pwd
Displays the command path used to reach the current menu.
Global commands
Some basic commands are recognized throughout the menu hierarchy. These commands are useful for
obtaining online Help, navigating through menus, and for applying and saving configuration changes.
For help on a specific command, type help. The following screen displays:
The following table describes the global commands.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 14
Table 4 Global commands
Command
Action
verbose n
Sets the level of information displayed on the screen:
0 = Quiet: Nothing displays except errors, not even prompts. 1 = Normal: Prompts and requested output are shown, but no menus. 2 = Verbose: Everything is shown. This is the default. When used without a value, the current setting is displayed.
telnet
This command is used to Telnet out of the switch. The format is:
telnet <hostname> | <IP address> [port]
history
Displays the history of the last ten commands.
pushd
Remembers the current location in the directory of menu commands.
popd
Returns to the last pushd location.
who
Displays users who are logged in.
Table 5 Command line history and editing options
Option
Description
history
Displays a numbered list of the last ten previously entered commands.
!!
Repeats the last entered command.
!n
Repeats the nth command shown on the history list.
<Ctrl-p> or
Up arrow key
Recalls the previous command from the history list. This can be used multiple times
to work backward through the last ten commands. The recalled command can be
entered as is, or edited using the options below.
<Ctrl-n> or
Downarrow key
Recalls the next command from the history list. This can be used multiple times to
work forward through the last ten commands. The recalled command can be
entered as is, or edited using the options below.
<Ctrl-a>
Moves the cursor to the beginning of the command line.
<Ctrl-e>
Moves the cursor to the end of the command line.
<Ctrl-b> or
Leftarrow key
Moves the cursor back one position to the left.
<Ctrl-f> or
Rightarrow key
Moves the cursor forward one position to the right.
<Backspace> or
Delete key
Erases one character to the left of the cursor position.
<Ctrl-d>
Deletes one character at the cursor position.
<Ctrl-k>
Erases all characters from the cursor position to the end of the command line.
<Ctrl-l>
Redisplays the current line.
<Ctrl-u>
Clears the entire line.
Other keys
Inserts new characters at the cursor position.
.
Prints the current level menu list.
..
Moves to the previous directory level.
Command line history and editing
Using the command line interface, you can retrieve and modify previously entered commands with just a
few keystrokes. The following options are available globally at the command line:
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 15
Main# cfg/sys/ssnmp/name
Main# c/sys/ssn/n
Command line interface shortcuts
The following shortcuts allow you to enter commands quickly and easily.
Command stacking
As a shortcut, you can type multiple commands on a single line, separated by forward slashes (/). You
can connect as many commands as required to access the menu option that you want.
For example, the keyboard shortcut to access the Simple Network Management Protocol (SNMP)
Configuration Menu from the Main# prompt is:
Command abbreviation
Most commands can be abbreviated by entering the first characters that distinguish the command from
the others in the same menu or submenu.
For example, the command shown above could also be entered as:
Tab completion
By entering the first letter of a command at any menu prompt and pressing the Tab key, the CLI will
display all commands or options in that menu that begin with that letter. Entering additional letters will
further refine the list of commands or options displayed.
If only one command fits the input text when the Tab key is pressed, that command will be supplied on
the command line, waiting to be entered. If the Tab key is pressed without any input on the command
line, the currently active menu displays.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 16
[Main Menu]
info - Information Menu
stats - Statistics Menu
cfg - Configuration Menu
oper - Operations Command Menu
boot - Boot Options Menu
maint - Maintenance Menu
diff - Show pending config changes [global command]
apply - Apply pending config changes [global command]
save - Save updated config to FLASH [global command]
revert - Revert pending or applied changes [global command]
exit - Exit [global command, always available]
>> Main#
Main# /cfg
[Configuration Menu]
sys - System-wide Parameter Menu
port - Port Menu
l2 - Layer 2 Menu
l3 - Layer 3 Menu
qos - QOS Menu
acl - Access Control List Menu
rmon - RMON Menu
pmirr - Port Mirroring Menu
ufd - Uplink Failure Detection Menu
dump - Dump current configuration to script file
ptcfg - Backup current configuration to FTP/TFTP server
gtcfg - Restore current configuration from FTP/TFTP server
cur - Display current configuration
This chapter describes how to perform first-time configuration and how to change system passwords.
To begin first-time configuration of the switch, perform the following steps.
1. Connect to the switch console. After connecting, the login prompt displays.
2. Enter admin as the default administrator password.
The system displays the Main Menu with administrator privileges.
3.From the Main Menu, enter the following command to access the Configuration Menu:
The Configuration Menu is displayed.
Configuring Simple Network Management Protocol support
1. Use the following command to enable SNMP:
2. Set SNMP read or write community string. By default, they are public and private respectively:
3. When prompted, enter the proper community string.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 17
>> System# apply
>> System# save
NOTE: You must not forget your administrator password. If you forget your administrator password,
contact your service representative.
Main# /cfg
[Configuration Menu]
sys - System-wide Parameter Menu
port - Port Menu
l2 - Layer 2 Menu
l3 - Layer 3 Menu
qos - QOS Menu
acl - Access Control List Menu
rmon - RMON Menu
pmirr - Port Mirroring Menu
ufd - Uplink Failure Detection Menu
dump - Dump current configuration to script file
ptcfg - Backup current configuration to FTP/TFTP server
gtcfg - Restore current configuration from FTP/TFTP server
cur - Display current system access configuration
>> Configuration#
>> Configuration# sys
4.Apply and save configuration .
Setting passwords
NEC recommends that you change all passwords after initial configuration and as regularly as required
under the network security policies. See the ―Accessing the switch‖ section in the ―Command line
interface‖ chapter for a description of the user access levels.
To change the user, operator, or administrator password, you must log in using the administrator
password. Passwords cannot be modified from the user or operator command mode.
Changing the default administrator password
The administrator has complete access to all menus, information, and configuration commands,
including the ability to change the user, operator, and administrator passwords.
The default password for the administrator account is admin. To change the default password:
1. Connect to the switch and log in using the admin password.
2. From the Main Menu, use the following command to access the Configuration Menu:
The Configuration Menu is displayed.
3.From the Configuration Menu, use the following command to select the System Menu:
The System Menu is displayed.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 18
[System Menu]
syslog - Syslog Menu
sshd - SSH Server Menu
radius - RADIUS Authentication Menu
tacacs+ - TACACS+ Authentication Menu
ntp - NTP Server Menu
ssnmp - System SNMP Menu
access - System Access Menu
date - Set system date
time - Set system time
timezone - Set system timezone
olddst - Set system DST for US
dlight - Set system daylight savings
idle - Set timeout for idle CLI sessions
notice - Set login notice
bannr - Set login banner
hprompt - Enable/disable display hostname (sysName) in CLI prompt
bootp - Enable/disable use of BOOTP
dhcp - Enable/disable use of DHCP on Mgmt interface
reminder - Enable/disable Reminders
cur - Display current system-wide parameters
System# access/user/admpw
NOTE: You must not forget your administrator password. If you forget your administrator password,
contact your service representative.
Enter new administrator password (max 128 characters):
Re-enter new admin password:
System# apply
System# save
Main# cfg
>> Configuration# sys
4. Enter the following command to set the administrator password:
5. Enter the current administrator password at the prompt:
6. Enter the new administrator password at the prompt:
7. Enter the new administrator password, again, at the prompt:
8. Apply and save the change by entering the following commands:
Changing the default user password
The user login has limited control of the switch. Through a user account, you can view switch information
and statistics, but you cannot make configuration changes.
The default password for the user account is user. This password cannot be changed from the user
account. Only the administrator has the ability to change passwords, as shown in the following
procedure.
1. Connect to the switch and log in using the admin password.
2. From the Main Menu, use the following command to access the Configuration Menu:
3. From the Configuration Menu, use the following command to select the System Menu:
4. Enter the following command to set the user password:
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 19
System# access/user/usrpw
Changing USER password; validation required:
Enter current admin password:
Enter new user password (max 128 characters):
Re-enter new user password:
System# apply
System# save
Main# cfg
>> Configuration# sys
System# access/user/opw
Changing OPERATOR password; validation required:
Enter current admin password:
Enter new operator password (max 128 characters):
Re-enter new operator password:
System# apply
System# save
5.Enter the current administrator password at the prompt.
Only the administrator can change the user password. Entering the administrator password confirms
your authority.
6. Enter the new user password at the prompt:
7. Enter the new user password, again, at the prompt:
8. Apply and save the changes:.
Changing the default operator password
The operator manages all functions of the switch. The operator can reset ports or the entire switch.
Operators can only effect temporary changes on the switch. These changes will be lost when the switch
is rebooted/reset. Operators have access to the switch management features used for daily switch
operations. Because any changes an operator makes are undone by a reset of the switch, operators
cannot severely impact switch operation.
By default, the operator account is disabled and has no password. This password cannot be changed
from the operator account. Only the administrator has the ability to change passwords, as shown in the
following procedure.
1. Connect to the switch and log in using the admin password.
2. From the Main Menu, use the following command to access the Configuration Menu:
3. From the Configuration Menu, use the following command to select the System Menu:
4. Enter the following command to set the operator password:
5. Enter the current administrator password at the prompt.
Only the administrator can change the user password. Entering the administrator password confirms
your authority.
6. Enter the new operator password at the prompt:
7. Enter the new operator password, again, at the prompt:
8. Apply and save the changes:
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 20
Information Menu
[Information Menu]
sys - System Information Menu
l2 - Layer 2 Information Menu
l3 - Layer 3 Information Menu
qos - QOS Menu
acl - Show ACL information
rmon - Show RMON information
link - Show link status
port - Show port information
sfp - Show External Port SFP/XFP status
ufd - Show Uplink Failure Detection information
dump - Dump all information
Table 6 Information Menu options
Command
Usage
sys
Displays system information.
l2
Displays the Layer 2 Information Menu.
l3
Displays the Layer 3 Information Menu.
qos
Displays the Quality of Service (QoS) Information Menu.
acl
Displays the Access Control List (ACL) Information Menu.
rmon
Displays the Remote Monitoring Information Menu.
link
Displays configuration information about each port, including:
Port number Port speed (10 Mb/s, 100 Mb/s, or auto) Duplex mode (half, full, or any) Flow control for transmit and receive (no, yes, or any) Link status (up or down)
port
Displays port status information, including:
Port number Whether the port uses VLAN tagging or not Port VLAN ID (PVID) Port name VLAN membership
sfp
Displays SFP module information.
ufd
Displays (UFD) Uplink Failure Detection information
dump
Dumps all switch information available from the Information Menu (10K or more,
depending on your configuration).
Introduction
You can view configuration information for the switch in the user, operator, and administrator command
modes. This chapter discusses how to use the CLI to display switch information.
Menu overview
Command:/info
The following table describes the Information Menu options.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 21
[System Menu]
snmpv3 - SNMPv3 Information Menu
general - Show general system information
log - Show last 100 syslog messages
user - Show current user status
dump - Dump all system information
Table 7 System Information Menu options
Command
Usage
snmpv3
Displays the SNMP v3 Menu.
general
Displays system information, including:
System date and time Switch model name and number Switch name and location Time of last boot MAC address of the switch management processor IP address of IP interface Hardware version and part number Software image file and version number Configuration name Log-in banner, if one is configured
log
Displays most recent syslog messages.
user
Displays the User Access Information Menu.
dump
Dumps all switch information available from the Information Menu (10K or more,
depending on your configuration).
[SNMPv3 Information Menu]
usm - Show usmUser table information
view - Show vacmViewTreeFamily table information
access - Show vacmAccess table information
group - Show vacmSecurityToGroup table information
comm - Show community table information
taddr - Show targetAddr table information
tparam - Show targetParams table information
notify - Show notify table information
dump - Show all SNMPv3 information
System Information Menu
Command:/info/sys
The following table describes the System Information Menu options.
SNMPv3 Information Menu
Command:/info/sys/snmpv3
SNMP version 3 (SNMPv3) is an extensible SNMP Framework that supplements the SNMPv2 Framework by
supporting the following:
a new SNMP message format security for messages access control remote configuration of SNMP parameters
For more details on the SNMPv3 architecture, see RFC2271 to RFC2276.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 22
The following table describes the SNMPv3 Information Menu options.
Table 8 SNMPv3 Information Menu options
Command
Usage
usm
Displays User Security Model (USM) table information.
view
Displays information about view name, subtrees, mask and type of view.
access
Displays View-based Access Control information.
group
Displays information about the group that includes the security model, user
name, and group name.
comm
Displays information about the community table.
taddr
Displays the Target Address table.
tparam
Displays the Target parameters table.
notify
Displays the Notify table.
dump
Displays all the SNMPv3 information.
usmUser Table:
User Name Protocol
-------------------------------- -------------------------------adminmd5 HMAC_MD5, DES PRIVACY
adminsha HMAC_SHA, DES PRIVACY
v1v2only NO AUTH, NO PRIVACY
Table 9 SNMPv3 User Table parameters
Field
Description
User Name
This is a string that represents the name of the user that you can use to access the switch.
Protocol
This indicates whether messages sent on behalf of this user are protected from disclosure
using a privacy protocol. The switch software supports DES algorithm for privacy. The
software also supports two authentication algorithms: MD5 and HMAC-SHA.
SNMPv3 USM User Table information
Command:/info/sys/snmpv3/usm
The User-based Security Model (USM) in SNMPv3 provides security services such as authentication and
privacy of messages. This security model makes use of a defined set of user identities displayed in the USM
user table. The USM user table contains information like:
the user name a security name in the form of a string whose format is independent of the Security Model an authentication protocol, which is an indication that the messages sent on behalf of the user can
be authenticated
the privacy protocol.
The following table describes the SNMPv3 User Table information.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 23
View Name Subtree Mask Type
------------------ ---------------------------- ------------- -------iso 1 included
v1v2only 1 included
v1v2only 1.3.6.1.6.3.15 excluded
v1v2only 1.3.6.1.6.3.16 excluded
v1v2only 1.3.6.1.6.3.18 excluded
Table 10 SNMPv3 View Table parameters
Field
Description
View Name
Displays the name of the view.
Subtree
Displays the MIB subtree as an OID string. A view subtree is the set of all MIB object
instances which have a common Object Identifier prefix to their names.
Mask
Displays the bit mask.
Type
Displays whether a family of view subtrees is included or excluded from the MIB view.
Group Name Model Level ReadV WriteV NotifyV
---------- ------- ------------ --------- -------- ------v1v2grp snmpv1 noAuthNoPriv iso iso v1v2only
admingrp usm authPriv iso iso iso
SNMPv3 View Table information
Command:/info/sys/snmpv3/view
The user can control and restrict the access allowed to a group to only a subset of the management
information in the management domain that the group can access within each context by specifying
the group‘s rights in terms of a particular MIB view for security reasons.
The following table describes the SNMPv3 View Table information.
SNMPv3 Access Table information
Command:/info/sys/snmpv3/access
The vacmAccessTable (View-based Access Control Model Access Table) maps a group name, security
information, and a message type, which could be the read or write type of operation or notification into
a MIB view.
This group‘s access rights are determined by a Read View, a Write View, and a Notify View. The Read
View represents the set of object instances authorized for the group while reading the objects. The Write
View represents the set of object instances authorized for the group when writing objects. The Notify View
represents the set of object instances authorized for the group when sending a notification.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 24
The following table describes the SNMPv3 Access Table information.
Table 11 SNMPv3 Access Table parameters
Field
Description
Group Name
Displays the name of group.
Model
Displays the security model used, for example, SNMPv1, or SNMPv2 or USM.
Level
Displays the minimum level of security required to gain rights of access. For
example, noAuthNoPriv, authNoPriv, or auth-Priv.
ReadV
Displays the MIB view to which this entry authorizes the Read access.
WriteV
Displays the MIB view to which this entry authorizes the Write access.
NotifyV
Displays the MIB view to which this entry authorizes the Notify access.
A group is a combination of security model and security name that defines the access rights assigned to
all the security names belonging to that group. The group is identified by a group name.
The following table describes the SNMPv3 Group Table information.
SNMPv3 Community Table information
Command:/info/sys/snmpv3/comm
This command displays the community table information stored in the SNMP engine.
The following table describes the SNMPv3 Community Table information.
SNMPv3 Target Address Table information
Command:/info/sys/snmpv3/taddr
This command displays the SNMPv3 target address table information.
The following table describes the SNMPv3 Target Address Table information.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 25
Table 14 SNMPv3 Target Address Table parameters
Field
Description
Name
Displays the locally arbitrary, but unique identifier associated with this
snmp TargetAddrEntry.
Transport Addr
Displays the transport addresses.
Port
Displays the SNMP UDP port number.
Taglist
This column contains a list of tag values which are used to select target addresses
for a particular SNMP message.
Params
The value of this object identifies an entry in the snmpTargetParamsTable. The
identified entry contains SNMP parameters to be used when generating messages
to be sent to this transport address.
The locally arbitrary, but unique identifier associated with this snmpNotifyEntry.
Tag
This represents a single tag value which is used to select entries in the
snmpTargetAddrTable. Any entry in the snmpTargetAddrTable that contains a
tag value equal to the value of this entry is selected. If this entry contains a value of
zero length, no entries are selected.
SNMPv3 Target Parameters Table information
Command:/info/sys/snmpv3/tparam
The following table describes the SNMPv3 Target Parameters Table information.
SNMPv3 Notify Table information
Command:/info/sys/snmpv3/notify
The following table describes the SNMPv3 Notify Table information.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 26
SNMPv3 dump
Engine ID = 80:00:07:50:03:00:17:EF:EB:B0:00
usmUser Table:
User Name Protocol
-------------------------------- -------------------------------adminmd5 HMAC_MD5, DES PRIVACY
adminsha HMAC_SHA, DES PRIVACY
v1v2only NO AUTH, NO PRIVACY
vacmAccess Table:
Group Name Model Level ReadV WriteV NotifyV
---------- ------- ------------ ------- -------- -----v1v2grp snmpv1 noAuthNoPriv iso iso v1v2only
admingrp usm authPriv iso iso iso
vacmViewTreeFamily Table:
View Name Subtree Mask Type
-------------------- --------------- ------------ -------------iso 1 included
v1v2only 1 included
v1v2only 1.3.6.1.6.3.15 excluded
v1v2only 1.3.6.1.6.3.16 excluded
v1v2only 1.3.6.1.6.3.18 excluded
vacmSecurityToGroup Table:
Sec Model User Name Group Name
Switch has been up for 7 days, 19 hours, 51 minutes and 47 seconds.
Last boot: 17:25:38 Mon Jan 8, 2006 (reset from console)
MAC address: 00:17:ef:eb:b0:00 IP (If 1) address: 193.168.9.100
Management Port MAC Address: 00:17:ef:eb:b0:01
Management Port IP Address (if 250): 192.168.12.90
Revision: 0A
Switch Serial No: USP742000TC
Spare Part No: 856-850991-026-A
Software Version 1.0.0 (FLASH image1), active configuration.
System information
Command:/info/sys/gen
System information includes:
System date and time Switch model name and number Rack name and location Time of last boot MAC address of the switch management processor IP address of the switch Software image file and version number
Show last 100 syslog messages
Current configuration block (active, backup, or factory default) Login banner, if one is configured
Command: /info/sys/log
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 28
Jul 8 17:25:41 NOTICE system: link up on port 1
Jul 8 17:25:41 NOTICE system: link up on port 8
Jul 8 17:25:41 NOTICE system: link up on port 7
Jul 8 17:25:41 NOTICE system: link up on port 12
Jul 8 17:25:41 NOTICE system: link up on port 11
Jul 8 17:25:41 NOTICE system: link up on port 14
Jul 8 17:25:41 NOTICE system: link up on port 13
Jul 8 17:25:41 NOTICE system: link up on port 16
Jul 8 17:25:41 NOTICE system: link up on port 15
Jul 8 17:25:41 NOTICE system: link up on port 17
Jul 8 17:25:41 NOTICE system: link up on port 20
Jul 8 17:25:41 NOTICE system: link up on port 22
Jul 8 17:25:41 NOTICE system: link up on port 23
Jul 8 17:25:41 NOTICE system: link up on port 21
Jul 8 17:25:42 NOTICE system: link up on port 4
Jul 8 17:25:42 NOTICE system: link up on port 3
Jul 8 17:25:42 NOTICE system: link up on port 6
Jul 8 17:25:42 NOTICE system: link up on port 5
Jul 8 17:25:42 NOTICE system: link up on port 10
Current User ID table:
1: name Kiku , ena, cos user , password valid, offline
Table 17 User Name Information menu
Field
Usage
user
Displays the status of the user access level.
oper
Displays the status of the oper (operator) access level.
admin
Displays the status of the admin (administrator) access level.
Current User
ID Table
Displays the status of configured User ID.
Each message contains a date and time field and has a severity level associated with it. One of eight
different prefixes is used to indicate the condition:
EMERG—indicates the system is unusable ALERT—indicates action should be taken immediately CRIT—indicates critical conditions ERR—indicates error conditions or eroded operations WARNING—indicates warning conditions NOTICE—indicates a normal but significant condition INFO—indicates an information message DEBUG—indicates a debug-level message
System user information
Command:/info/sys/user
The following table describes the User Name information.
Error! Use the Home tab to apply 見出し 1 to the text that you want to appear here. 29
[Layer 2 Menu]
fdb - Forwarding Database Information Menu
lacp - Link Aggregation Control Protocol Menu
8021x - Show 802.1x information
stp - Show STP information
cist - Show CIST information
trunk - Show Trunk Group information
vlan - Show VLAN information
gen - Show general information
dump - Dump all layer 2 information
Table 18 Layer 2 information menu options
Command
Usage
fdb
Displays the Forwarding Database Information Menu.
lacp
Displays the Link Aggregation Control Protocol Information Menu.
8021x
Displays the 802.1x Information Menu.
stp
In addition to seeing if STP is enabled or disabled, you can view the following STP bridge
information:
Priority Hello interval Maximum age value Forwarding delay Aging time
You can also refer to the following port-specific STP information:
Port number and priority Cost State
cist
Displays Common internal Spanning Tree (CIST) bridge information, including the following:
Priority Hello interval Maximum age value Forwarding delay
You can also view port-specific CIST information, including the following:
Port number and priority Cost State
trunk
When trunk groups are configured, you can view the state of each port in the various trunk
groups.