Netgear FSM7226RS Installation Manual

Command Line Interface
Reference for the ProSafe
7200RS Series Layer-2
Stackable Switches with
Static Routing, Software
Version 7.3

NETGEAR, Inc.

350 Plumeria Dr.
San Jose, CA 95124 USA

202-10455-01
October 2008

© 2008 by NETGEAR, Inc. All rights reserved. FullManual.

Trademarks

NETGEAR and the NETGEAR logo are registered trademarks, and ProSafe is a trademark of NETGEAR, Inc.
Microsoft, Windows, and Wi ndow s NT are registered trademar ks of Microsoft Corporation.
Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this

document are copyright Intoto, Inc.
October 2008

Statement of Conditions

In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.

NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.

EN 55 022 Declaration of Conformance

This is to certify that the ProSafe 7200RS Series Layer-2 Managed Stackable Switch is shielded against the generation of
radio interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is
declared by the application of EN 55 022 Class B (CISPR 22).

Certificate of the Manufacturer/Importer

It is hereby certified that the ProSafe 7200RS Series Layer-2 Managed Stackable Switch has been suppressed
in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some
equipment (for example, test transmitters) in accordance with the regulations may, however, be subject to certain
restrictions. Please refer to the notes in the operating instructions.

The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.

Bestätigung des Herstellers/Importeurs

Es wird hiermit bestätigt, daß dasProSafe 7200RS Series Layer-2 Managed Stackable Switch gemäß der im BMPT­AmtsblVfg 243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben
einiger Geräte (z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die
Anmerkungen in der Betriebsanleitung.

Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.

Voluntary Control Council for Interference (VCCI) Statement

This equipment is in the Class B category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used
near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.

ii

v1.0, October 2008

Product and Publication Details

Model Number: FSM7226RS
Publication Date: October 2008
Product Family: managed switch
Product Name: ProSafe 7200RS Series Layer-2 Managed Stackable Switch
Home or Business Product: Business
Language: English
Publication Part Number: 202-10455-01
Publication Version Number 1.0

v1.0, October 2008

iii

iv

v1.0, October 2008

Contents

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2
Stackable Switches with Static Routing, Software Version 7.3

Chapter 1
About This Manual

1.1 Audience................................................................................................................. 1-1

1.2 Scope...................................................................................................................... 1-1

1.3 Typographical Conventions .................................................................................... 1-2

1.4 Special Message Formats ...................................................................................... 1-2

1.5 How to Use This Manual......................................................................................... 1-3

1.6 How to Print this Manual......................................................................................... 1-3

1.7 Revision History...................................................................................................... 1-4

Chapter 2
Overview

2.1 Product Concept..................................................................................................... 2-1

2.2 Using the Command-Line Interface........................................................................ 2-2

2.2.1 Command Syntax.......................................................................................... 2-2

2.2.2 Command Conventions................................................................................. 2-3

2.2.3 Unit-Slot-Port Naming Convention................................................................ 2-5

2.2.4 Using the “No” Form of a Command............................................................. 2-5

2.2.5 Command Modes.......................................................................................... 2-6

2.2.6 Entering CLI Commands............................................................................... 2-8

2.2.7 Using CLI Help............................................................................................ 2-10

2.2.8 Accessing the CLI ....................................................................................... 2-11

Chapter 3
Administrative Access Commands

3.1 Network Interface Commands................................................................................ 3-1

3.1.1 enable............................................................................................................ 3-1

3.1.2 network parms (parameter)........................................................................... 3-2

v1.0, October 2008

v

3.1.3 network mgmt_vlan....................................................................................... 3-2

3.1.4 network protocol............................................................................................ 3-2

3.1.5 show network ................................................................................................ 3-3

3.2 Configuring the Switch Management CPU (ezconfig) ............................................ 3-4

3.3 Console Port Access Commands........................................................................... 3-6

3.3.1 configuration.................................................................................................. 3-6

3.3.2 lineconfig....................................................................................................... 3-6

3.3.3 serial baudrate............................................................................................... 3-7

3.3.4 serial timeout................................................................................................. 3-7

3.3.5 show serial .................................................................................................... 3-8

3.4 Telnet Commands................................................................................................... 3-9

3.4.1 telnet.............................................................................................................. 3-9

3.4.2 transport input telnet...................................................................................... 3-9

3.4.3 transport output telnet ................................................................................. 3-10

3.4.4 session-limit................................................................................................. 3-10

3.4.5 session-timeout........................................................................................... 3-11

3.4.6 telnetcon maxsessions................................................................................ 3-11

3.4.7 telnetcon timeout......................................................................................... 3-12

3.4.8 show telnet.................................................................................................. 3-12

3.4.9 show telnetcon ............................................................................................ 3-13

3.5 Secure Shell (SSH) Command....................... ... .... ... ... ... ...................................... 3-14

3.5.1 ip ssh........ ... ... .... ... ... ... ....................................... ... .... ... ... ... ......................... 3-14

3.5.2 ip ssh protocol.......................... .......................................... ......................... 3-14

3.5.3 sshcon maxsessions................................................................................... 3-15

3.5.4 sshcon timeout............................................................................................ 3-15

3.5.5 show ip ssh.................................................................................................. 3-16

3.6 Hypertext Transfer Protocol (HTTP) Commands.................................................. 3-16

3.6.1 ip http secure-port ........................................................................ ... ... .... ... .. 3-16

3.6.2 ip http secure-protocol............................................................................ ... .. 3-17

3.6.3 ip http secure-server........................ ... ... ... .... ... ... ... .... ... ... ............................ 3-17

3.6.4 ip http server............................. ....................................... ... .... ... ... ............... 3-17

3.6.5 ip http java.......... ... ... ... .... ... ... ....................................... ... ... .... ... ... ............... 3-18

3.6.6 ip http session hard-timeout........................................................................ 3-18

3.6.7 ip http session maxsessions.................. ... .... ...................................... .... ... .. 3-18

3.6.8 ip http session soft-timeout........................... ... ....................................... ... .. 3-19

vi

v1.0, October 2008

3.6.9 ip http secure-session hard-timeout............................................................ 3-19

3.6.10 ip http secure-session maxsessions........................................................ .. 3-20

3.6.11 ip http secure-session soft-timeout................ ... ... ...................................... 3-20

3.6.12 network javamode..................................................................................... 3-20

3.6.13 show ip http................... ... ....................................... ... ... ... .... ... .................. 3-21

3.7 User Account Commands..................................................................................... 3-22

3.7.1 users name.................................................................................................. 3-22

3.7.2 users passwd .............................................................................................. 3-23

3.7.3 users snmpv3 accessmode................................ ... ...................................... 3-23

3.7.4 users snmpv3 authentication........................... ... ... .... ... ............................... 3-24

3.7.5 users snmpv3 encryption ............................. ... ... ... ...................................... 3-24

3.7.6 show loginsession........................................................ ... ............................ 3-25

3.7.7 show users.................................................................................................. 3-25

3.7.8 disconnect................................................................................................... 3-26

Chapter 4
Port and System Setup Commands

4.1 Port Configuration Commands ............................................................................... 4-1

4.1.1 interface......................................................................................................... 4-1

4.1.2 interface range .............................................................................................. 4-2

4.1.3 interface vlan................................................................................................. 4-2

4.1.4 interface lag................................................................................................... 4-2

4.1.5 auto-negotiate ............................................................................................... 4-2

4.1.6 auto-negotiate all........................................................................................... 4-3

4.1.7 description..................................................................................................... 4-3

4.1.8 mtu ................................................................................................................ 4-4

4.1.9 shutdown....................................................................................................... 4-4

4.1.10 shutdown all ................................................................................................ 4-5

4.1.11 speed........................................................................................................... 4-5

4.1.12 speed all...................................................................................................... 4-6

4.1.13 monitor session........................................................................................... 4-6

4.1.14 no monitor ................................................................................................... 4-7

4.1.15 show monitor session.................................................................................. 4-7

4.1.16 show port..................................................................................................... 4-8

4.1.17 show port description .................................................................................. 4-8

4.1.18 show port protocol....................................................................................... 4-9

v1.0, October 2008

vii

4.1.19 show port status.......................................................................................... 4-9

4.2 Pre-login Banner and System Prompt Commands............. ... ... ... .... ..................... 4-10

4.2.1 copy............................................................................................................. 4-10

4.2.2 set prompt ................................................................................................... 4-10

4.3 Simple Network Time Protocol (SNTP) Commands............................................. 4-11

4.3.1 sntp broadcast client poll-interval................................................................ 4-11

4.3.2 sntp client mode.......................................................................................... 4-11

4.3.3 sntp client port............................................................................................. 4-12

4.3.4 sntp unicast client poll-interval .................................................................... 4-12

4.3.5 sntp unicast client poll-timeout............................................... ... ... ... ... ......... 4-12

4.3.6 sntp unicast client poll-retry............................. ... ... .... ... ... ... .... ... ... ............... 4-13

4.3.7 sntp multicast client poll-interval...................... ... ... .... ... ............................... 4-13

4.3.8 sntp server................................................................................................... 4-14

4.3.9 show sntp.................................................................................................... 4-14

4.3.10 show sntp client... ... ... ....................................... ... .... ... ............................... 4-14

4.3.11 show sntp server ....................................................................................... 4-15

4.3.12 clock timezone............................................................ ... ... .... ..................... 4-16

4.4 MAC Address and MAC Database Commands.................................................... 4-17

4.4.1 network mac-address................................... ... ... ....................................... .. 4-17

4.4.2 network mac-type........................................................................................ 4-17

4.4.3 macfilter....................................................................................................... 4-18

4.4.4 macfilter adddest...... ... .... ... ... ... .... ... ... .......................................... ............... 4-18

4.4.5 macfilter adddest all ................................. .... ... .......................................... .. 4-19

4.4.6 macfilter addsrc.. ... ....................................... ... ... ... .... ... ............................... 4-19

4.4.7 macfilter addsrc all .......................... ... ... ... .... ... ... ... ...................................... 4-20

4.4.8 bridge aging-time......................................................................................... 4-21

4.4.9 show forwardingdb agetime ..................... .... ... ... ... .... .................................. 4-22

4.4.10 show mac-address-table multicast...... ... ....................................... ... .... ... .. 4-22

4.4.11 show mac-address-table static...................................... ... .... ... .................. 4-23

4.4.12 show mac-address-table stats.................................... ... ... .... ... ... ... ............ 4-23

4.5 DNS Client Commands......................................................................................... 4-24

4.5.1 ip domain-lookup............. .......................................... .................................. 4-25

4.5.2 ip domain-name............................... ... ... ... .... ...................................... .... ... .. 4-25

4.5.3 ip name-server ................................ ... ... ... .... ... ....................................... ... .. 4-25

4.5.4 ip host.................................... ... .... ... ... ... ....................................... ... ... .... ... .. 4-26

viii

v1.0, October 2008

4.5.5 clear host..................................................................................................... 4-26

4.5.6 show hosts .................................................................................................. 4-26

Chapter 5
Spanning Tree Protocol Commands

5.1 STP Configuration Commands............................................................................... 5-1

5.1.1 spanning-tree ................................................................................................ 5-1

5.1.2 spanning-tree bpdumigrationcheck............................................................... 5-2

5.1.3 spanning-tree configuration name................................................................. 5-2

5.1.4 spanning-tree configuration revision ............................................................. 5-3

5.1.5 spanning-tree edgeport................................................................................. 5-3

5.1.6 spanning-tree edgeport all............................................................................. 5-3

5.1.7 spanning-tree forceversion............................................................................ 5-4

5.1.8 spanning-tree forward-time ........................................................................... 5-4

5.1.9 spanning-tree hello-time................................................................................ 5-5

5.1.10 spanning-tree max-age ............................................................................... 5-5

5.1.11 spanning-tree max-hops.............................................................................. 5-6

5.1.12 spanning-tree mst........................................................................................ 5-6

5.1.13 spanning-tree mst instance......................................................................... 5-7

5.1.14 spanning-tree mst priority............................................................................ 5-8

5.1.15 spanning-tree mst vlan................................................................................ 5-9

5.1.16 spanning-tree port mode............................................................................. 5-9

5.1.17 spanning-tree port mode all......................................................................... 5-9

5.1.18 spanning-tree bpduforwarding................................................................... 5-10

5.2 STP Show Commands ......................................................................................... 5-10

5.2.1 show spanning-tree..................................................................................... 5-10

5.2.2 show spanning-tree summary...................................... ... ... .... ... ... ... ... ......... 5-12

5.2.3 show spanning-tree interface ....................................... ... ... .... ... ... ... ............ 5-13

5.2.4 show spanning-tree mst port detailed ................ ... .... ... ... ... .... ..................... 5-14

5.2.5 show spanning-tree mst port summary ........................................... ... ......... 5-16

5.2.6 show spanning-tree mst summary ..................... ....................................... .. 5-16

5.2.7 show spanning-tree vlan ............................................................................. 5-17

Chapter 6
VLAN Commands

6.1 VLAN Configuration Commands............................................................................. 6-1

6.1.1 vlan association mac..................................................................................... 6-1

v1.0, October 2008

ix

6.1.2 vlan database................................................................................................ 6-2

6.1.3 network mgmt_vlan....................................................................................... 6-2

6.1.4 vlan................................................................................................................ 6-2

6.1.5 vlan acceptframe........................................................................................... 6-3

6.1.6 vlan ingressfilter ............................................................................................ 6-3

6.1.7 vlan makestatic.............................................................................................. 6-4

6.1.8 vlan name...................................................................................................... 6-4

6.1.9 vlan participation ........................................................................................... 6-4

6.1.10 vlan participation all..................................................................................... 6-5

6.1.11 vlan port acceptframe all ............................................................................. 6-5

6.1.12 vlan port pvid all .......................................................................................... 6-6

6.1.13 vlan port tagging all..................................................................................... 6-6

6.1.14 vlan port ingressfilter all.............................. ... ... ... .... ... ... ... ........................... 6-7

6.1.15 vlan protocol group...................................................................................... 6-7

6.1.16 vlan protocol group add protocol................................................................. 6-8

6.1.17 vlan protocol group remove......................................................................... 6-8

6.1.18 protocol group ............................................................................................. 6-8

6.1.19 protocol vlan group...................................................................................... 6-9

6.1.20 protocol vlan group all................................................................................. 6-9

6.1.21 vlan pvid.................................................................................................... 6-10

6.1.22 vlan tagging............................................................................................... 6-10

6.2 VLAN Show Commands....................................................................................... 6-11

6.2.1 show vlan .................................................................................................... 6-11

6.2.2 show vlan <vlan_id>.................................................................................... 6-11

6.2.3 show vlan association mac.......................................................................... 6-13

6.2.4 show vlan port............................................................................................. 6-13

6.3 Double VLAN Commands......................................................... ... .... ..................... 6-14

6.3.1 dvlan-tunnel etherType.......................... ... .......................................... ......... 6-14

6.3.2 mode dot1q-tunnel ...................................................................................... 6-14

6.3.3 mode dvlan-tunnel....................................................................................... 6-15

6.3.4 show dot1q-tunnel....................................................................................... 6-16

6.3.5 show dot1q-tunnel interface........................................................................ 6-16

6.3.6 show dvlan-tunnel ........................ ... ... ... ....................................... ... ... .... ... .. 6-17

6.3.7 show dvlan-tunnel interface................... ... ....................................... ... .... ... .. 6-17

6.4 Provisioning (IEEE 802.1p) Commands ............................................................... 6-17

x

v1.0, October 2008

6.4.1 vlan port priority all...................................................................................... 6-18

6.4.2 vlan priority......... ... ... ... .... ... ....................................... ... ... ... .... ... ... ... ... ......... 6-18

Chapter 7
DHCP Commands

7.1 ip dhcp pool ............................................................................................................ 7-2

7.1.1 client-identifier............................................................................................... 7-2

7.1.2 client-name.................................................................................................... 7-3

7.1.3 default-router................................................................................................. 7-3

7.1.4 dns-server ..................................................................................................... 7-3

7.1.5 hardware-address ......................................................................................... 7-4

7.1.6 host................................................................................................................ 7-4

7.1.7 lease.............................................................................................................. 7-5

7.1.8 network.......................................................................................................... 7-5

7.1.9 bootfile........................................................................................................... 7-5

7.1.10 domain-name .............................................................................................. 7-6

7.1.11 netbios-name-server.................................................................................... 7-6

7.1.12 netbios-node-type........................................................................................ 7-7

7.1.13 next-server .................................................................................................. 7-7

7.1.14 option........................................................................................................... 7-8

7.2 DHCP Server Commands (Global Config Mode) ................................................... 7-8

7.2.1 ip dhcp excluded-address ............................................................................. 7-8

7.2.2 ip dhcp ping packets...................................................................................... 7-9

7.2.3 service dhcp.................................................................................................. 7-9

7.2.4 ip dhcp bootp automatic.............................................................................. 7-10

7.2.5 ip dhcp conflict logging.................................... ... ... .... ... ............................... 7-10

7.3 DHCP Server Clear and Show Commands.......................................................... 7-11

7.3.1 clear ip dhcp binding ................................................................................... 7-11

7.3.2 clear ip dhcp server statistics...................................................................... 7-11

7.3.3 clear ip dhcp conflict.................................................................................... 7-11

7.3.4 show ip dhcp binding................................................................................... 7-11

7.3.5 show ip dhcp global configuration...................................... .... ... ... ... ............ 7-12

7.3.6 show ip dhcp pool configuration................................ ... ... ... .... ..................... 7-12

7.3.7 show ip dhcp server statistics............................................. .... ... ... ... ... .... ... .. 7-13

7.3.8 show ip dhcp conflict................................................................................... 7-14

7.4 DHCP and BOOTP Relay Commands ................................................................. 7-14

v1.0, October 2008

xi

7.4.1 ip dhcp relay information option ...................................... ... .... ... .................. 7-15

7.4.2 bootpdhcprelay............................................................................................ 7-15

7.4.3 bootpdhcprelay maxhopcount..................................................................... 7-16

7.4.4 bootpdhcprelay minwaittime........................................................................ 7-16

7.4.5 bootpdhcprelay serverip.............................................................................. 7-17

7.4.6 show bootpdhcprelay .................................................................................. 7-17

7.4.7 bootpdhcprelay backup-serverip................................................................. 7-18

Chapter 8
GARP, GVRP, and GMRP Commands

8.1 set garp timer join................................................................................................... 8-1

8.1.1 set garp timer leave....................................................................................... 8-2

8.1.2 set garp timer leaveall................................................................................... 8-3

8.1.3 show garp...................................................................................................... 8-3

8.2 GVRP Commands .................................................................................................. 8-4

8.2.1 set gvrp adminmode...................................................................................... 8-4

8.2.2 set gvrp interfacemode.................................................................................. 8-4

8.2.3 show gvrp configuration ................................................................................ 8-5

8.3 GMRP Commands.................................................................................................. 8-6

8.3.1 set gmrp adminmode..................................................................................... 8-6

8.3.2 set gmrp interfacemode................................................................................. 8-7

8.3.3 show gmrp configuration............................................................................... 8-7

8.3.4 show mac-address-table gmrp...................................................................... 8-9

Chapter 9
Port-Based Traffic Control Commands

9.1 Port Security Commands............................. ... ... .... .......................................... ... ... . 9-1

9.1.1 port-security................................................................................................... 9-1

9.1.2 port-security max-dynamic............................................................................ 9-2

9.1.3 port-security max-static................................................................................. 9-3

9.1.4 port-security mac-address............................................................................. 9-3

9.1.5 port-security mac-address move.................................. ... ... .... ... ... ... ... .... ....... 9-3

9.1.6 show port-security......................................................................................... 9-4

9.1.7 show port-security......................................................................................... 9-4

9.1.8 show port-security dynamic........................................................................... 9-4

9.1.9 show port-security static................................................................................ 9-4

9.1.10 show port-security violation......................................................................... 9-5

xii

v1.0, October 2008

9.2 Storm Control Commands........ ... ... ... .... ... ... ... ... .... ... ... ... .... ... ... ... .... ....................... 9-5

9.2.1 storm-control broadcast................................................................................. 9-5

9.2.2 storm-control multicast all.............................................................................. 9-6

9.2.3 storm-control unicast all ................................................................................ 9-6

9.2.4 storm-control broadcast................................................................................. 9-7

9.2.5 storm-control multicast.................................................................................. 9-7

9.2.6 storm-control unicast..................................................................................... 9-8

9.2.7 storm-control flowcontrol............................................................................... 9-8

9.2.8 show storm-control........................................................................................ 9-9

9.3 Protected Port Commands ..................................................................................... 9-9

9.3.1 switchport protected...................................................................................... 9-9

9.3.2 show switchport protected........................ ....................................... ... .... ... .. 9-10

9.4 Private Group Commands........... ... ... .......................................... .... ... ... ............... 9-10

9.4.1 switchport private-group.............................................................................. 9-10

9.4.2 no switchport private group................ ... ... .... ... ... ... .... ... ... ............................ 9-11

9.4.3 private-group name..................................................................................... 9-11

9.4.4 no private-group name................................................................................ 9-11

9.4.5 show private-group...................................................................................... 9-12

Chapter 10
SNMP Commands

10.1 SNMP Configuration Commands.................. ... .... ... ... ....................................... .. 10-1

10.1.1 snmp-server .................................. ... ... ... .... ...................................... .... ... .. 10-1

10.1.2 snmp-server community...... ....................................... ... ... .... ... ... ............... 10-2

10.1.3 snmp-server community ipaddr........................................ .... ... ... ............... 10-2

10.1.4 snmp-server community ipmask................................................................ 10-3

10.1.5 snmp-server community mode.................................................................. 10-3

10.1.6 snmp-server community ro........................................................................ 10-4

10.1.7 snmp-server community rw....................................................................... 10-4

10.1.8 snmp-server traps violation........................ ...................................... .... ... .. 10-4

10.1.9 snmp-server traps ...................................... ... ... ... .... .................................. 10-5

10.1.10 snmp-server traps bcaststorm........................................ .... ... ... ... ... .... ... .. 10-5

10.1.11 snmp-server traps linkmode .............................. .... ... ... ... .... ..................... 10-6

10.1.12 snmp-server traps multiusers............ ....................................... ... ... .... ... .. 10-6

10.1.13 snmp-server traps stpmode............................... .... ... ... ... .... ... .................. 10-6

10.1.14 snmptrap ................................................................................................. 10-7

v1.0, October 2008

xiii

10.1.15 snmptrap snmpversion... ... ... .... ... ... ... ....................................... ... ... .... ... .. 10-8

10.1.16 snmptrap ipaddr ... ... .... ... ... ... .... ... ... ... ... .... ... ... ... .... ... ... ... ......................... 10-8

10.1.17 snmptrap mode .... ... .... ... ... ... .... ... ... ... ... .... ... ... ......................................... 10-8

10.1.18 snmp trap link-status............ .... ... ... ... ... .... ... ....................................... ... .. 10-9

10.1.19 snmp trap link-status all........................................................................... 10-9

10.2 SNMP Show Commands.................................................................................. 10-10

10.2.1 show snmpcommunity............................................................................. 10-10

10.2.2 show snmptrap....... ... .... ... ....................................... ... ... ... .... ... ... ... ... ....... 10-11

10.2.3 show trapflags ............................... ... ... ... .... ... ... ... .... ... ... ... ....................... 10-11

Chapter 11
Port-Based Access and Authentication Commands

11.1 Port-Based Network Access Control Commands ............................................... 11-1

11.1.1 authentication login.................................................................................... 11-1

11.1.2 clear dot1x statistics .................................................................................. 11-3

11.1.3 clear radius statistics ................................................................................. 11-3

11.1.4 dot1x defaultlogin ...................................................................................... 11-3

11.1.5 dot1x initialize............................................................................................ 11-3

11.1.6 dot1x login ................................................................................................. 11-3

11.1.7 dot1x max-req............................................................................................ 11-4

11.1.8 dot1x port-control....................................................................................... 11-4

11.1.9 dot1x port-control all.................................................................................. 11-5

11.1.10 dot1x re-authenticate............................................................................... 11-5

11.1.11 dot1x re-authentication ............................................................................ 11-6

11.1.12 dot1x system-auth-control ....................................................................... 11-6

11.1.13 dot1x timeout........................................................................................... 11-6

11.1.14 dot1x port-method ................................................................................... 11-8

11.1.15 dot1x user................................................................................................ 11-8

11.1.16 users defaultlogin .................................................................................... 11-8

11.1.17 users login ............................................................................................... 11-9

11.1.18 show authentication................................................................................. 11-9

11.1.19 show authentication users....................................................................... 11-9

11.1.20 show dot1x ............................................................................................ 11-10

11.1.21 show dot1x users......................................................................... ... .... ... 11-13

11.1.22 show users authentication........... ... ... ... .... ... ... ... .... ... ... .......................... 11-13

11.2 RADIUS Commands ......................................................................................... 11-14

xiv

v1.0, October 2008

11.2.1 radius accounting mode .......................................................................... 11-14

11.2.2 radius server host.................................................................................... 11-14

11.2.3 radius server key .................................................................. ... ... ... ... .... ... 11-15

11.2.4 radius server msgauth............................................................................. 11-16

11.2.5 radius server primary. .... ... ... ... .... ...................................... .... ... ... ... ... ....... 11-16

11.2.6 radius server retransmit........................................................................... 11-16

11.2.7 radius server timeout........ ... ... .... ...................................... .... ... ... ... ... ....... 11-17

11.2.8 show radius ............................................................................................. 11-17

11.2.9 show radius accounting........................................................................... 11-18

11.2.10 show radius statistics............................................................................. 11-19

11.3 802.1x Option 81 Commands .............................. ... ... ... .... ... ... ... .... ... ... ... ... .... ... 11-21

11.3.1 radius server attribute 4........................................................................... 11-21

11.3.2 no radius server attribute 4............... ... ... .... ... ... ... .... ... ... ... .... ... ... ... ... .... ... 11-21

11.3.3 authorization network radius....................................... ... ... .... ... ... ... ... .... ... 11-21

11.3.4 no authorization network radius........ ... ... .... ... ... ... .................................... 11-22

11.4 TACAS+ Commands......................................................................................... 11-22

11.4.1 tacads-server host................................................................................... 11-22

11.4.2 no tacacs-server host .................................... ... ... .... ................................ 11-22

11.4.3 tacacs-server key ... ... .... ... ....................................... ... ... ... .... ... ... ... ... ....... 11-23

11.4.4 no tacacs-server key ..................................... ... ... .... ... ... ... .... ... ... ... .......... 11-23

11.4.5 tacacs-server timeout .................................... ....................................... ... 11-23

11.4.6 no tacacs-server timeout ............................... ... ....................................... 11-23

11.4.7 key........................................................................................................... 11-24

11.4.8 port .......................................................................................................... 11-24

11.4.9 priority...................................................................................................... 11-24

11.4.10 timeout................................................................................................... 11-24

11.4.11 show tacacs.......... ... .... ... ... ... .... ... ... ... ... .......................................... .... ... 11-24

Chapter 12
Port-Channel/LAG (802.3ad) Commands

12.1 Port-Channel Configuration Commands............................................................. 12-1

12.1.1 addport...................... .... ...................................... .... ... ... ... .... ..................... 12-2

12.1.2 delet eport (Interfac e Config) ... .... ... ....................................... ... ... ... ... ......... 12-2

12.1.3 deleteport (Global Config)................... ... .... ...................................... .... ... .. 12-2

12.1.4 port-channel ......................................................................... ... ... ... ... ......... 12-2

12.1.5 clear port-channel............................. ... ... .... ... .......................................... .. 12-3

v1.0, October 2008

xv

12.1.6 port lacpmode................................ ... ... ....................................... ... ... .... ... .. 12-3

12.1.7 port lacpmode all....... .... ... ... ... .... ...................................... .... ... ... ... ... ......... 12-3

12.1.8 port-channel adminmode............................... ... ... .... ... ... ... ......................... 12-4

12.1.9 port-channel name ........................................ ... ... .... ... ... ... .... ..................... 12-4

12.1.10 port-channel linktrap.............................................. ... ... ............................ 12-4

12.1.11 hashing-mode.... ... ....................................... ... ... .... ... ... ............................ 12-5

12.2 Port-Channel Show Commands............................................. ... .... ... ... ... ............ 12-5

12.2.1 show port-channel...................................................... ... ... .... ... .................. 12-6

12.2.2 show port-channel...................................................... ... ... .... ... .................. 12-6

Chapter 13
Quality of Service (QoS) Commands

13.1 Class of Service (CoS) Commands.................................................................... 13-1

13.1.1 classofservice dot1p-mapping............................. .... ... ... ... .... ... ... ............... 13-2

13.1.2 classofservice ip-precedence-mapping............................................ .... ... .. 13-2

13.1.3 classofservice ip-dscp-mapping.... ... ... ... .... ... ... ... .... ... ... ... .... ... .................. 13-3

13.1.4 classofservice trust................................. .... ... ... ... ...................................... 13-3

13.1.5 cos-queue min-bandwidth.......................................................... ... ... ......... 13-4

13.1.6 cos -queue strict.......................................................... ... ... .... ..................... 13-4

13.1.7 traffic-shape............................................................................................... 13-4

13.1.8 show classofservice dot1p-mapping ....................................... ... ... ... .... ... .. 13-5

13.1.9 show classofservice ip-precedence-mapping............................. ... ... .... ... .. 13-5

13.1.10 show classofservic e ip-ds cp-mapping.. .... ... ... ... .... ... ... ... .... ... ... ... ... .... ... .. 13-6

13.1.11 show classofservice trust......................................................................... 13-6

13.1.12 show interfaces cos-queue...................................................................... 13-6

13.2 Differentiated Services (DiffServ) Commands ........................................... .... ... .. 13-7

13.2.1 diffserv.............................................................................. .... ... ... ............... 13-8

13.3 DiffServ Class Commands.................................................................................. 13-9

13.3.1 class-map............................................... .... ... ... ....................................... .. 13-9

13.3.2 class-map rename................................................................................... 13-10

13.3.3 match ethertype....................................................................................... 13-10

13.3.4 match any................................................................................................ 13-11

13.3.5 match class-map........................................................... ... .... ... ... ... ... .... ... 13-11

13.3.6 match cos................................................................................................ 13-12

13.3.7 match destination-address mac .............................................................. 13-12

13.3.8 match dstip.............................................................................................. 13-12

xvi

v1.0, October 2008

13.3.9 match dstl4port........................................................................................ 13-12

13.3.10 match ip dscp ........................................................................................ 13-13

13.3.11 match ip precedence ............................................................................. 13-13

13.3.12 match ip tos........................................................................................... 13-14

13.3.13 match protocol....................................................................................... 13-14

13.3.14 match source-address mac................................................................... 13-15

13.3.15 match srcip............................................................................................ 13-15

13.3.16 match srcl4port...................................................................................... 13-15

13.3.17 match vlan............................................................................................. 13-16

13.4 DiffServ Policy Commands............................................................................... 13-16

13.4.1 policy-map............................................................................................... 13-17

13.4.2 assign-queue........................................................................................... 13-17

13.4.3 drop......................................................................................................... 13-18

13.4.4 conform-color .......................................................................................... 13-18

13.4.5 class........................................................................................................ 13-18

13.4.6 mark cos.................................................................................................. 13-19

13.4.7 mark ip-dscp............................................................................................ 13-20

13.4.8 mark ip-precedence................................................................................. 13-20

13.4.9 police-simple ........................................................................................... 13-20

13.4.10 policy-map rename................................................................................ 13-21

13.5 DiffServ Service Commands............................................................................. 13-21

13.5.1 service-policy........................................................................................... 13-21

13.6 DiffServ Show Commands................................................................................ 13-22

13.6.1 show class-map....................................................................................... 13-23

13.6.2 show diffserv ........................................................................................... 13-23

13.6.3 show policy-map...................................................................................... 13-24

13.6.4 show diffserv service............................................................................... 13-27

13.6.5 show diffserv service brief...... .... ...................................... .... ... ... ... ... .... ... 13-27

13.6.6 show policy-map interface....................................................................... 13-28

13.6.7 show service-policy................................................................................. 13-28

13.7 MAC Access Control List (ACL) Commands .................................................... 13-29

13.7.1 mac access-list extended........................................................................ 13-29

13.7.2 mac access-list extended rename........................................................... 13-30

13.7.3 {deny|permit}........................................................................................... 13-30

13.7.4 mac access-group................................................................................... 13-32

v1.0, October 2008

xvii

13.7.5 show mac ac ces s-lis ts................................... ... ... .................................... 13-32

13.8 IP Access Control List (ACL) Commands......................................................... 13-33

13.8.1 access-list................................................................................................ 13-34

13.8.2 ip access-group....................................................................................... 13-35

13.8.3 show ip acc es s-lis ts.................................... ... ... ... .... ... ... .......................... 13-36

13.8.4 show access-lists .................................................................................... 13-37

Chapter 14
Routing Commands

14.1 Address Resolution Protocol (ARP) Commands ................................................ 14-1

14.1.1 arp................................................................. ... ... .... ... ... ............................ 14-2

14.1.2 ip proxy-arp ......................................... ... .... ...................................... .... ... .. 14-2

14.1.3 arp cachesize.......................................................... ... ... ... ......................... 14-3

14.1.4 arp dynamicrenew.. ... .... ... ... ... .... ...................................... .... ... ... ... ... ......... 14-3

14.1.5 arp purge............. ... ... .... ...................................... .... ... ... ... .... ..................... 14-3

14.1.6 arp resptime ........................................ ... .... ... ... ... .... .................................. 14-3

14.1.7 arp retries......................... ....................................... ... ... ... .... ... .................. 14-4

14.1.8 arp timeout .............................................................................. ... ... ............ 14-4

14.1.9 clear arp-cache........................... ... ... ... ... .... ... ... ....................................... .. 14-5

14.1.10 show arp.................................................................................................. 14-5

14.1.11 show arp brief.................................................... .... ... ... ... ......................... 14-6

14.2 IP Routing Commands......................... ... ... ... ... .... ... ... ....................................... .. 14-7

14.2.1 routing ........................................................................... ... .... ... ... ... ............ 14-7

14.2.2 ip routing........................................... ... ... .... ... ... ....................................... .. 14-7

14.2.3 ip address............................................... .... ... ... ... .... ... ............................... 14-8

14.2.4 ip route .......................................... ... ... ... ....................................... ... .... ... .. 14-8

14.2.5 ip route default........................................ .... ... ... ... .... .................................. 14-9

14.2.6 ip route distance...................................................... ... ............................... 14-9

14.2.7 ip forwarding............................................................................................ 14-10

14.2.8 ip mtu....................................................................................................... 14-10

14.2.9 encapsulation...................................................... .... ... ... ... .... ... ... ... .......... 14-11

14.2.10 clear ip route all..................................................................................... 14-12

14.2.11 show ip .................................................................................................. 14-12

14.2.12 show ip interface ................................................................................... 14-13

14.2.13 show ip interface ................................................................................... 14-14

14.2.14 show ip route......................................................................................... 14-14

xviii

v1.0, October 2008

14.2.15 show ip route bestroutes....................................................................... 14-15

14.2.16 show ip route entry................................................................................ 14-15

14.2.17 show ip route preferences..................................................................... 14-16

14.2.18 show ip stats.......................................................................................... 14-17

14.3 Virtual LAN Routing Commands....................................................................... 14-17

14.3.1 vlan routing.............................................................................................. 14-17

14.3.2 show ip vlan................................... ... ... ... .... ... ... ... .... ... ... .......................... 14-17

14.4 Virtual Router Redundancy Protocol (VRRP) Commands................................ 14-18

14.4.1 ip vrrp ...................................................................................................... 14-19

14.4.2 ip vrrp ...................................................................................................... 14-19

14.4.3 ip vrrp mode ............................................................................................ 14-20

14.4.4 ip vrrp ip................................................................................................... 14-20

14.4.5 ip vrrp authentication............................................................................... 14-20

14.4.6 ip vrrp preempt........................................................................................ 14-21

14.4.7 ip vrrp priority........................................................................................... 14-21

14.4.8 ip vrrp timers advertise............................................................................ 14-22

14.4.9 show ip vrrp int erface stats.. ... .... ... ... ... ... .... ... ... ... .... ... ... ... .... ... ................ 14-22

14.4.10 show ip vrrp........................................................................................... 14-24

14.4.11 show ip vrrp interface ............................................................................ 14-24

14.4.12 show ip vrrp interface <unit/slot/port> ................................................... 14-25

14.5 Open Shortest Path First (OSPF) Commands.................................................. 14-25

14.5.1 router ospf............................................................................................... 14-26

14.5.2 enable (OSPF) ........................................................................................ 14-26

14.5.3 ip ospf...................................................................................................... 14-26

14.5.4 1583compatibility..................................................................................... 14-27

14.5.5 area default-cost...................................................................................... 14-27

14.5.6 area nssa................................................................................................. 14-27

14.5.7 area nssa default-info-originate............................................................... 14-28

14.5.8 area nssa no-redistribute (OSPF) ........................................................... 14-28

14.5.9 area nssa no-summary (OSPF) .............................................................. 14-28

14.5.10 area nssa translator-role (OSPF) .......................................................... 14-28

14.5.11 area nssa translator-stab-intv................................................................ 14-29

14.5.12 area range............................................................................................. 14-29

14.5.13 area stub ............................................................................................... 14-29

14.5.14 area stub summarylsa........................................................................... 14-30

v1.0, October 2008

xix

14.5.15 area virtual-link...................................................................................... 14-30

14.5.16 area virtual-link authentication............................................................... 14-31

14.5.17 area virtual-link dead-interval ................................................................ 14-31

14.5.18 area virtual-link hello-interval................................................................. 14-32

14.5.19 area virtual-link retransmit-interval ........................................................ 14-32

14.5.20 area virtual-link transmit-delay .............................................................. 14-33

14.5.21 default-information originate (OSPF)..................................................... 14-33

14.5.22 default-metric (OSPF) ........................................................................... 14-34

14.5.23 distance ospf ......................................................................................... 14-34

14.5.24 distribute-list out.................................................................................... 14-35

14.5.25 exit-overflow-interval ............................................................................. 14-35

14.5.26 external-lsdb-limit.................................................................................. 14-36

14.5.27 ip ospf areaid......................................................................................... 14-36

14.5.28 ip ospf authentication ............................................................................ 14-36

14.5.29 ip ospf cost ............................................................................................ 14-37

14.5.30 ip ospf dead-interval.............................................................................. 14-37

14.5.31 ip ospf hello-interval .............................................................................. 14-38

14.5.32 ip ospf priority........................................................................................ 14-38

14.5.33 ip ospf retransmit-interval...................................................................... 14-39

14.5.34 ip ospf transmit-delay ............................................................................ 14-39

14.5.35 ip ospf mtu-ignore.................................................................................. 14-40

14.5.36 router-id................................................................................................. 14-40

14.5.37 redistribute............................................................................................. 14-40

14.5.38 maximum-paths..................................................................................... 14-41

14.5.39 trapflags................................................................................................. 14-41

14.5.40 show ip ospf .......................................................................................... 14-42

14.5.41 show ip ospf area .................................................................................. 14-44

14.5.42 show ip ospf database........................................................................... 14-45

14.5.43 show ip ospf interface............................................................................ 14-45

14.5.44 show ip ospf interface <unit/slot/port>................................................... 14-46

14.5.45 show ip ospf interface stats................................................................... 14-48

14.5.46 show ip ospf neighbor ........................................................................... 14-49

14.5.47 show ip ospf neighbor <ipaddr> ............................................................ 14-50

14.5.48 show ip ospf range ................................................................................ 14-51

14.5.49 show ip ospf stub table.......................................................................... 14-52

xx

v1.0, October 2008

14.5.50 show ip ospf virtual-link ......................................................................... 14-52

14.5.51 show ip ospf virtual-link <area_id>........................................................ 14-53

14.6 Routing Information Protocol (RIP) Commands ............................................... 14-54

14.6.1 router rip.................................................................................................. 14-54

14.6.2 enable (RIP)............................................................................................ 14-54

14.6.3 ip rip......................................................................................................... 14-54

14.6.4 auto-summary ......................................................................................... 14-55

14.6.5 default-information originate (RIP) .......................................................... 14-55

14.6.6 default-metric (RIP)................................................................................. 14-55

14.6.7 distance rip.............................................................................................. 14-56

14.6.8 distribute-list out...................................................................................... 14-56

14.6.9 ip rip authentication................................................................................. 14-57

14.6.10 ip rip receive version ............................................................................. 14-57

14.6.11 ip rip send version .......... ... ... .... ... ... ... ... .... ... ... ... .................................... 14-58

14.6.12 hostroutesaccept................................................................................... 14-58

14.6.13 split-horizon........................................................................................... 14-59

14.6.14 redistribute............................................................................................. 14-59

14.6.15 show ip rip ............................................................................................. 14-60

14.6.16 show ip rip interface .............................................................................. 14-61

14.6.17 show ip rip interface <unit/slot/port>...................................................... 14-61

Chapter 15
IGMP Snooping Commands

15.1 IGMP Snooping Configurat ion Commands....................... ... ... ... .... ... ... ... ... .... ... .. 15-2

15.1.1 ip igmpsnooping......................... ... ... ... ... .... ... ....................................... ... .. 15-2

15.1.2 ip igmpsnooping interfacemode ....................... ... .... ... ... ... ......................... 15-3

15.1.3 ip igmpsnooping groupmembership-interval ........................................ ... .. 15-3

15.1.4 ip igmpsnooping maxresponse................................ ... ... ... ......................... 15-4

15.1.5 ip igmpsnooping mcrtexpiretime................................. ... ... .... ..................... 15-4

15.1.6 ip igmp mrouter ............................................. ... ... .... ... ... ... ......................... 15-5

15.1.7 ip igmp mrouter interface............................... ... ... ...................................... 15-5

15.1.8 ip igmpsnooping unknown-multicast ....................................... ... ... ... .... ... .. 15-6

15.2 IGMP Snooping Show Comm ands.. .......................................... ......................... 15-6

15.2.1 show ip igmp .......................................... .... ... ... ... .... .................................. 15-6

15.2.2 show ip igmp mrouter interface ..................................... ... .... ... ... ... ............ 15-8

15.2.3 show ip igmp mrouter vlan ......... ... ... ... ... .... ... ... ....................................... .. 15-8

v1.0, October 2008

xxi

15.2.4 show mac-address-table igmpsnooping.................................................... 15-8

15.3 IGMP Querier Commands......................................................... .... ..................... 15-9

15.3.1 ip igmpsnooping querier.......................................................................... 15-10

15.3.2 ip igmpsnooping querier ip-address........................................................ 15-10

15.3.3 ip igmpsnooping querier query-interval................................................... 15-11

15.3.4 show ip igmpsnooping querier .... ... ... ... ... .... ... ... ... .... ... ... ... .... ... ... ... ... .... ... 15-11

Chapter 16
Stacking Commands

16.1 Dedicated Port Stacking ......................................... ....................................... ... .. 16-1

16.1.1 stack.......................................................................................................... 16-1

16.1.2 member............................................................... .... ... ... ... ......................... 16-2

16.1.3 switch priority........................................................................ ... ... ............... 16-2

16.1.4 switch renumber...................................................... ... ... ... .... ..................... 16-3

16.1.5 movemanagement...................................... ... ... ....................................... .. 16-3

16.1.6 archive copy-sw................... ... .... ... ... ... ....................................... ... ... .... ... .. 16-3

16.1.7 archive download-sw.............................. .... ... ... ... .... ... ... ... .... ..................... 16-4

16.1.8 slot................................................................................. ... .... ... ... ... ............ 16-4

16.1.9 set slot disable............................................ ... ... ... ...................................... 16-5

16.1.10 set slot power ................................. ... ... .... ... ... ... .... ... ... ... .... ... ... ... ... ......... 16-5

16.1.11 reload....................................................................................................... 16-6

16.1.12 show slot ................................................................................................. 16-6

16.1.13 show supported cardtype........................................................................ 16-7

16.1.14 show switch............................................................................................. 16-8

16.1.15 show supported switchtype..................................................................... 16-9

16.2 Front Panel Stacking Commands..................................................................... 16-10

16.2.1 stack-port................................................................................................. 16-10

16.2.2 qos-mode ......................................... ... ... .... ... ... ....................................... 16-11

16.2.3 show stack-port....................................................... ... ... ... .... ... ... ... .......... 16-11

16.2.4 show stack-port counters ........................................................................ 16-12

16.2.5 show stack-port diag ............................................................................... 16-12

Chapter 17
LLDP and LLDP-MED Commands

17.1 LLDP Commands ................................ ...................................... .... ... ... ... ... ......... 17-1

17.1.1 lldp transmit................................................... ... ... .... ... ... ............................ 17-1

17.1.2 no lldp transmit................................................. ... .... .................................. 17-1

xxii

v1.0, October 2008

17.1.3 lldp receive.......................................................... .... ... ... ... .... ..................... 17-1

17.1.4 no lldp receive............................................................... ... .... ... ... ............... 17-2

17.1.5 lldp timers...................................................... ... ... .... ... ... ............................ 17-2

17.1.6 no lldp timers................................................. ....................................... ... .. 17-2

17.1.7 lldp transmit-tlv........................................................... ... ... ......................... 17-2

17.1.8 no lldp transmit-tlv......................................................... ... ......................... 17-3

17.1.9 lldp transmit-mgmt............................................ ... .... .................................. 17-3

17.1.10 no lldp transmit-mgmt........ ... .... ... ... ... ....................................... ... ... .... ... .. 17-3

17.1.11 lldp notification......................................................................................... 17-3

17.1.12 no lldp notification................................. .... ... ... ... .... ... ... ............................ 17-3

17.1.13 lldp notification-interval................................................ ... .... ... ... ... ... ......... 17-3

17.1.14 no lldp notification-interval.... .... ... ... ... ....................................... ... ... .... ... .. 17-4

17.1.15 clear lldp statistics ............................. ... .... ... ... ... ...................................... 17-4

17.1.16 clear lldp remote-data..................................... ... .... .................................. 17-4

17.1.17 show lldp ................................................................................................. 17-4

17.1.18 show lldp interface.................................... ... ... ... .... ... ............................... 17-5

17.1.19 show lldp statistics................................................................................... 17-5

17.1.20 show lldp remote-device........................................ ... ... ... ......................... 17-6

17.1.21 show lldp remote-device detail............. .... ... ... ... .... ... ... ............................ 17-6

17.1.22 show lldp local-device ....................................... .... ... ... ... .... ..................... 17-7

17.1.23 show lldp local-device detail.................................................................... 17-8

17.2 LLDP-MED Commands............................................. ... .... ... ... ............................ 17-9

17.2.1 lldp med............................................ ... ... .... ... ... ....................................... .. 17-9

17.2.2 no lldp med................................................. ... ... ... ...................................... 17-9

17.2.3 lldp med confignotification................ ... ... .... ... ... ....................................... .. 17-9

17.2.4 no lldp med confignotification.................................................................. 17-10

17.2.5 lldp med transmit-tlv................................................................................ 17-10

17.2.6 no lldp med transmit-tlv........................................................................... 17-10

17.2.7 lldp med faststartrepeatcount.................................................................. 17-10

17.2.8 no lldp med faststartrepeatcount...... ... ... .... ... ....................................... ... 17-11

17.2.9 show lldp med .. ... ... ... .......................................... .... ... ... ... ....................... 17-11

17.2.10 show lldp med interface......................................................................... 17-11

17.2.11 show lldp med local-device detail.......................................................... 17-12

17.2.12 show lldp med remote-device................................................................ 17-13

17.2.13 show lldp med remote-device detail...................................................... 17-13

v1.0, October 2008

xxiii

Chapter 18
System Maintenance Commands

18.1 System Information and Statistics Commands................................................... 18-1

18.1.1 show arp switc h...... ... .... ... ... ... .... ... ... ... ....................................... ... ... .... ... .. 18-1

18.1.2 show eventlog ........................................ .... ... ... ... ...................................... 18-2

18.1.3 show hardware....... ... .... ...................................... .... ... ... ... .... ..................... 18-2

18.1.4 show int erface .................................. ... ... .... ... ... ... .... ... ... ... ......................... 18-3

18.1.5 show int erface ethernet.................................................... .... ... ... ... ............ 18-5

18.1.6 show logging ........................................................................................... 18-14

18.1.7 show mac-addr-table............................................................................... 18-15

18.1.8 clear mac-addr-table ............................................................................... 18-16

18.1.9 show running-config................................................................................ 18-16

18.1.10 show running-config interface ............................................................... 18-16

18.1.11 terminal length....................................................................................... 18-17

18.1.12 show sysinfo.......................................................................................... 18-17

18.2 System Utility Commands................................................................................. 18-18

18.2.1 traceroute................................................................................................ 18-18

18.2.2 clear config.............................................................................................. 18-18

18.2.3 clear counters.......................................................................................... 18-18

18.2.4 clear igmpsnooping................................................................................. 18-18

18.2.5 clear pass................................................................................................ 18-19

18.2.6 enable passwd ........................................................................................ 18-19

18.2.7 clear port-channel.................................................................................... 18-19

18.2.8 clear traplog............................................................................................. 18-19

18.2.9 clear vlan................................................................................................. 18-19

18.2.10 copy....................................................................................................... 18-19

18.2.11 logout..................................................................................................... 18-21

18.2.12 ping........................................................................................................ 18-21

18.2.13 reload .................................................................................................... 18-22

18.3 Logging Commands.......................................................................................... 18-22

18.3.1 logging buffered....................................................................................... 18-22

18.3.2 logging buffered wrap.............................................................................. 18-22

18.3.3 logging console ....................................................................................... 18-23

18.3.4 logging host............................................................................................. 18-23

18.3.5 logging host remove................................................................................ 18-23

xxiv

v1.0, October 2008

18.3.6 logging port.............................................................................................. 18-24

18.3.7 logging syslog.......................................................................................... 18-24

18.3.8 show logging ........................................................................................... 18-24

18.3.9 show logging buffered............................................................................. 18-26

18.3.10 clear logging buffered............................................................................ 18-26

18.3.11 show logging hosts................................................................................ 18-26

18.3.12 show logging traplogs............................................................................ 18-27

18.4 CLI Command Logging Co mmand ................................................................... 18-27

18.4.1 logging cli-command ............................................................................... 18-27

18.5 Configuration Scripting Commands.................................................................. 18-28

18.5.1 script apply.............................................................................................. 18-29

18.5.2 script delete............................................................................................. 18-29

18.5.3 script list .................................................................................................. 18-29

18.5.4 show script .............................................................................................. 18-29

18.6 Packet Capture................................................................................................. 18-30

18.6.1 capture transmit packet........................................................................... 18-30

18.6.2 capture receive packet............................................................................ 18-30

18.6.3 capture all packets .................................................................................. 18-31

18.6.4 capture wrap............................................................................................ 18-31

18.6.5 show capture packets.............................................................................. 18-31

18.7 Dumping System Information ........................................................................... 18-32

18.8 Setting the Output Length of show running-config............................................ 18-32

18.8.1 terminal length......................................................................................... 18-32

18.8.2 terminal no length.................................................................................... 18-32

18.9 Save.................................................................................................................. 18-32

Chapter 19
UDP Relay Commands

19.1 UDP Relay Configuratio n Commands ............. .... ... ... ... .... ... ... ... .... ..................... 19-2

19.1.1 ip helper-address (global config mode)............... .... ... ... ... .... ... ... ... ... .... ... .. 19-2

19.1.2 ip helper-address (interface config mode)................................................. 19-3

19.2 UDP Relay Show Command s................. ... ... ... ....................................... ... .... ... .. 19-3

19.2.1 show ip helper-addre ss .......................... .... ... ....................................... ... .. 19-3

Appendix A
Command Changes from Release 3 to Release 5

v1.0, October 2008

xxv

xxvi

v1.0, October 2008

This chapter introduces the Command Line Interface Reference for the ProSafe 7200RS
Series Layer-2 Stackable Switches with Static Routing, Software Version 7.3. It describes
the command-line interface (CLI) commands used to view and configure the 7200RS
Series Stackable Switch software. You can access the CLI by using a direct connection to
the serial port or by using telnet or SSH over a remote network connection.

1.1 Audience

This document is for system administrators who configure and operate systems using
7200RS Series Stackable Switch software. Software engineers who integrate 7200RS
Series Stackable Switch software into their hardware platform can also benefit from a
description of the configuration options.

This document assumes that the reader has an understanding of the 7200RS Series
Stackable Switch software base and has read the appropriate specification for the relevant
networking device platform. It also assumes that the reader has a basic knowledge of
Ethernet and networking concepts.

Chapter 1

About This Manual

1.2 Scope

This manual is written for the 7200RS Series Stackable Switch according to these
specifications:

Table 1-1. Manual Specifications

Product ProSafe 7200RS Series Layer-2 Managed Stackable Switch
Manual Part Number 202-10455-01
Manual Publication Date October 2008

About This Manual 1-1

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Note: Product updates are available on the NETGEAR Web site at

http://kbserver.netgear.com/products/.

1.3 Typographical Conventions

This guide uses the following typographical conventions:

Table 1-2. Typographical conventions

Italic Emphasis, books, CDs, file and server names, extensions

Bold User input, IP addresses, GUI screen text

Fixed Command prompt, CLI text, code.

Italic URL link

1.4 Special Message Formats

This guide uses the following formats to highlight special messages:

Note: This format is used to highlight of importance or special interest.

Tip: A time-saving or resource-saving procedural step.

Warning: This is a warning of possible damage to the equipment or software

malfunction.

1-2 About This Manual

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Danger: Ignoring this type of warning could result in personal injury or death.

1.5 How to Use This Manual

The HTML version of this manual includes the following:

• Buttons and for browsing forwards or backwards through the manual
one page at a time.

• A button that displays the table of contents and possibly an button.
Double-click on a link in the table of contents or index to navigate directly to where
the topic is described in the manual.

• A button to access the full NETGEAR, Inc. online knowledge base for the
product model.

• Links to PDF versions of the full manual and individual chapters.

1.6 How to Print this Manual

To print this manual, choose one of the following options.

• Printing a Page in the HTML View.

Each page in the HTML version of the manual is dedicated to a major topic. Use the
Print button on the browser toolbar to print the page contents.

• Printing a Chapter.

Use the PDF of This Chapter link at the top left of any page.
– Click the PDF of This Chapter link at the top right of any page in the chapter you

want to print. The PDF version of the chapter you were viewing opens in a
browser window.

Your computer must have the free Adobe Acrobat reader installed in order to view
and print PDF files. The Acrobat reader is available on the Adobe Web site at

http://www.adobe.com.

About This Manual 1-3

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

– Click the print icon in the window toolbar.

Tip: If your printer supports printing of two or more pages on a single sheet

of paper, you can save paper and printer ink by clicking the printer
Properties button and increasing the number of pages per sheet.

• Printing the Full Manual.

Use the Complete PDF Manual link at the top left of any page.
– Click the Complete PDF Manual link at the top left of any page in the manual.

The PDF version of the complete manual opens in a browser window.

– Click the print icon in the window toolbar.

Tip: If your printer supports printing of two or more pages on a single sheet

of paper, you can save paper and printer ink by clicking the printer
Properties button and increasing the number of pages per sheet.

1.7 Revision History

Table 1-3 lists the revision history of this manual.

Table 1-3. Revision History of This Manual

Document Part
Number

202-10455-01 1.0 October 2008 Document for version 7.3 software release

1-4 About This Manual

Version Publication Date Change Description

v1.0, October 2008

Chapter 2

Overview

The 7200RS Series Stackable Switch software has two purposes:

• Assist attached hardware in switching frames, based on Layer 2, 3, or 4 information
contained in the frames.

• Provide a complete device management portfolio to the network administrator.

The 7200RS Series Stackable Switchs suppo rt the sa m e co mm an ds , ex ce p t in these ca s es

Table 2-1. Exceptions to Feature Support Among the 7200RS Series Switches

Commands

Routing 14 XX XX

Stacking 16 XX

Documented
in Chapter

2.1 Product Concept

Fast Ethernet and Gigabit Ethernet switching continues to evolve from high-end backbone
applications to desktop switching applications. The price of the technology continues to
decline, while performance and feature sets continue to improve. Devices that are capable
of switching Layers 2, 3, and 4 are increasingly in demand. 7200RS Series Stackable
Switch software provides a flexible solution to these ever-increasing needs.

The exact functionality provided by each networking device on which the 7200RS Series
Stackable Switch software base runs varies depending upon the platform and requirements
of NETGEAR.

7200RS Series Stackable Switch software includes a set of comprehensive management
functions for managing both the switch and the network. You can manage the 7200RS
Series Stackable Switch software by using one of the following three methods:

• Web-based

• VT100 interface

Switch Model

FSM726E FSM7226RS FSM7250RS GSM7224R GSM7248R

Overview 2-1

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

• Simple Network Management Protocol (SNMP)

Each of the management methods enables you to configure, manage, and control the
software locally or remotely using in-band or out-of-band mechanisms. Management is
standards-based, with configuration parameters and a private MIB providing control for
functions not completely specified in the MIBs.

2.2 Using the Command-Line Interface

The command-line interface (CLI) is a text-based way to manage and monitor the system.
You can access the CLI by using a direct serial connection or by using a remote logical
connection with telnet or SSH.

This section describes the CLI syntax, conventions, and modes. It contains the following
topics:

• Section 2.2.1 “Command Syntax” on page 2

• Section 2.2.2 “Command Conventions” on page 3

• Section 2.2.3 “Unit-Slot-Port Naming Convention” on page 5

• Section 2.2.4 “Using the “No” Form of a Command” on page 5

• Section 2.2.5 “Command Modes” on page 6

• Section 2.2.6 “Entering CLI Commands” on page 8

• Section 2.2.7 “Using CLI Help” on page 10

• Section 2.2.8 “Accessing the CLI” on page 11

2.2.1 Command Syntax

A command is one or more words that might be followed by one or more parameters.
Parameters can be required or optional values.

Some commands, such as
Other commands, such as
command. You must type the parameter values in a specific order, and optional parameters
follow required parameters. The following example describes the
command syntax:

Format

• network parms is the command name.

2-2 Overview

show network or clear vlan, do not require parameters.
network parms, require that you supply a value after the

network parms

network parms <ipaddr> <netmask> [gateway]

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

• <ipaddr> and <netmask> are parameters and represent requ ired values that you must
enter after you type the command keywords.

•

[gateway] is an optional parameter, so you are not required to enter a value in place

of the parameter.

The CLI Command Reference lists each command by the command name and provides a
brief description of the command. Each command reference also contains the following
information:

• Format shows the command keywords and the required and optional parameters.

• Mode identifies the command mode you must be in to access the command.

• Default shows the default value, if any, of a configurable setting on the device.

The

show commands also contain a description of the information that the command

displays.

2.2.2 Command Conventions

In this document, the command name is in bold font. Parameters are in italic font. You
must replace the parameter name with an appropriate value, which might be a name or
number. Parameters are order dependent.

The parameters for a command might include mandatory values, optional values, or
keyword choices. Table 2-2 describes the conventions this document uses to distinguish
between value types.

Table 2-2. Parameter Conventions

Symbol Example Description

<> angle brackets <value> Indicates that you must enter a value in

place of the brackets and text inside them.

[] square brackets [value] Indicates an optional parameter that you

can enter in place of the brackets and text
inside them.

{} curly braces {choice1 | choice2} Indicates that you must select a

parameter from the list of choices.
| Vertical bars choice1 | choice2 Separates the mutually exclusive choices.
[{}] Braces within

square brackets

Overview 2-3

[{choice1} choice2}] Indicate a choice within an optional

element.

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

2.2.2.1 Common Parameter Values

Parameter values might be names (strings) or numbers. To use spaces as part of a name
parameter, enclose the name value in double quotes. For example, the expression “System
Name with Spaces” forces the system to accept the spaces. Empty strings (“ ”) are not
valid user-defined strings. Table 2-3 describes common parameter values and value
formatting.

Table 2-3. Parameter Descriptions

Parameter Description

ipaddr This parameter is a valid IP address. You can enter the IP address

in the following formats:

a (32 bits)
a.b (8.24 bits)
a.b.c (8.8.16 bits)
a.b.c.d

In addition to these formats, the CLI accepts decimal, hexidecimal
and octal formats through the following input formats (where n is
any valid hexidecimal, octal or decimal number):

0xn (CLI assumes hexidecimal format)
0n (CLI assumes octal format with leading zeros)
n (CLI assumes decimal format)

macaddr The MAC address format is six hexadecimal numbers separated by

colons, for example 00:06:29:32:81:40.

areaid Enter area IDs in dotted-decimal notation (for example, 0.0.0.1). An

area ID of 0.0.0.0 is reserved for the backbone. Area IDs have the
same format as IP addresses but are distinct from IP addresses.
You can use the IP network number of the sub-netted network for
the area ID.

routerid Enter the value of <routerid> in dotted-decimal notation, such as

0.0.0.1. A router ID of 0.0.0.0 is invalid.

Interface or unit/slot/port Valid slot and port number separated by forward slashes. For

example, 0/1 represents slot number 0 and port number 1.

Logical Interface Logical slot and port number. This is applicable in the case of a

port-channel (LAG). You can use the logical unit/slot/port to
configure the port-channel.

Character strings Use double quotation marks to identify character strings, for

example, “System Name with Spaces”. An empty string (“”) is not
valid.

(8.8.8.8)

2-4 Overview

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

2.2.3 Unit-Slot-Port Naming Convention

7200RS Series Stackable Switch software references physical entities such as cards and
ports by using a Unit-Slot-Port (USP) naming convention. The software also uses this
convention to identify certain logical entities, such as port-channel interfaces.

The slot number has two uses. In the case of physical ports, it identifies the card
containing the ports. In the case of logical and CPU ports it also identifies the type of
interface or port.

Table 2-4. Type of Slots

Slot T y pe Description

Physical slot numbers Physical slot numbers begin with zero, and are allocated up to the

maximum number of physical slots.

Logical slot numbers Logical slots immediately follow physical slots and identify port-

channel (LAG) or router interfaces.

CPU slot numbers The CPU slots immediately follow the logical slots.

The port identifies the specific physical port or logical interface being managed on a given
slot.

Table 2-5. Type of Ports

Port Type Description

Physical Ports The physical ports for each slot are numbered sequentially starting

from zero. For example, port one will be “0/1” with slot number
always as zero.

Logical Interfaces Port-channel or Link Aggregation Group (LAG) interfaces are

logical interfaces that are only used for bridging functions.
VLAN routing interfaces are only used for routing functions.

CPU ports CPU ports are handled by the driver as one or more physical

entities located on physical slots.

2.2.4 Using the “No” Form of a Command

The no keyword is a specific form of an existing command and does not represent a new
or distinct command. Almost every configuration command has a
the

no form to reverse the action of a command or reset a value back to the default. For

example, the
Use the command without the keyword

no shutdown configuration command reverses the shutdown of an interface.

no to re-enable a disabled feature or to enable a

feature that is disabled by default.
Only the configuration commands are available in the

Overview 2-5

no form.

no form. In general, use

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

2.2.5 Command Modes

The CLI groups commands into modes according to the command function. Each of the
command modes supports specific 7200RS Series Stackable Switch software commands.
The commands in one mode are not available until you switch to that particular mode,
with the exception of the User EXEC mode commands. You can execute the User EXEC
mode commands in the Privileged EXEC mode.

The command prompt changes in each command mode to help you identify the current
mode. Table 2-6 describes the command modes and the prompts visible in that mode.

Table 2-6. CLI Command Modes

Command Mode Prompt Mode Description

User EXEC

Privileged EXEC

Global Config

VLAN Config
Interface Config

Line Config

Policy Map Config

Switch>

Switch#

Switch (Config)#

Switch (Vlan)#
Switch (Interface <unit/slot/

port>)#

Switch (line)#

Switch (Config policy-map)#

Contains a limited set of
commands to view basic system
information.

Allows you to issue any EXEC
command, enter the VLAN
mode, or enter the Global
Configuration mode.

Groups general setup commands
and permits you to make
modifications to the running
configuration.

Groups all the VLAN commands.
Allows you to enable or modify

the operation of an interface and
provides access to the router
interface configuration
commands.
Use this mode to set up a
physical port for a specific logical
connection operation.

Allows you to configure various
telnet settings and the console
interface.

Allows you to access the QoS
Policy-Map configuration mode
to configure the QoS Policy-Map.

2-6 Overview

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Table 2-6. CLI Command Modes (continued)

Command Mode Prompt Mode Description

Policy Class Config

Class Map Config

Tacacs Config

MAC Access-list
Config

DHCP Pool Config

Stack Global
Config Mode

Switch (Config policy-class-map)#

Switch (Config class-map)#

Switch (Tacacs)#

Switch (Config mac-access-list)#

Switch (Config dhcp-pool)#

Switch (Config stack)#

Consists of class creation,
deletion, and matching
commands. The class match
commands specify Layer 2,
Layer 3, and general match
criteria.

Allows you to access the QoS
Class-Map configuration mode to
configure QoS class maps.

Allows you to access the Tacacs
configuration commands.

Allows you to create a MAC
Access-List and to enter the
mode containing Mac Access­List configuration commands.

Allows you to access the DHCP
Pool configuration.

Allows you to access the Stack
Global Config Mode.

Table 2-7 explains how to enter or exit each command mode.

Table 2-7. CLI Mode Access and Exit

Command Mode Access Method Exit or Access Previous Mode

User EXEC This is the first level of access. To exit, enter logout.
Privileged EXEC From the User EXEC mode, enter

enable.

Global Config From the Privileged EXEC mode, enter

configure.

VLAN Config From the Privileged EXEC mode, enter

vlan database.

Interface Config From the Global Config mode, enter

interface <unit/slot/port>.

Line Config From the Global Config mode, enter

lineconfig.

Overview 2-7

v1.0, October 2008

To exit to the User EXEC mode, enter
exit or press Ctrl-Z.

To exit to the Privileged EXEC mode,
enter exit, or press Ctrl-Z.

To exit to the Privileged EXEC mode,
enter exit, or press Ctrl-Z.

To exit to the Global Config mode,
enter exit. To return to the Privileged
EXEC mode, enter Ctrl-Z.

To exit to the Global Config mode,
enter exit. To return to the Privileged
EXEC mode, enter Ctrl-Z.

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Table 2-7. CLI Mode Access and Exit (continued)

Command Mode Access Method Exit or Access Previous Mode

Policy-Map
Config

Policy-Class-Map
Config

Class-Map
Config

Tacacs
Config

MAC Access-list
Config

DHCP Pool
Config

Stack Global
Config Mode

From the Global Config mode, enter
policy-map.

From the Policy Map mode enter
class.

From the Global Config mode, enter
class-map.

From the Global Config mode, enter

tacacs-server host <ip­address|hostname>.

From the Global Config mode enter

mac access-list extended

<name>.
From the Global Config mode, enter

ip dhcp pool

From the Global Config mode, enter the
stack command.

<name>.

To exit to the Global Config mode,
enter exit. To return to the Privileged
EXEC mode, enter Ctrl-Z.

To exit to the Policy Map mode, enter
exit. To return to the Privileged

mode, enter Ctrl-Z.

EXEC

To exit to the Global Config mode,
enter exit. To return to the Privileged
EXEC mode, enter Ctrl-Z.

To exit to the Global Config mode,
enter exit. To return to the Privileged
EXEC mode, enter Ctrl-Z.

To exit to the Global Config mode,
enter exit. To return to the Privileged
EXEC mode, enter Ctrl-Z.

To exit to the Global Config mode,
enter exit. To return to the Privileged
EXEC mode, enter Ctrl-Z.

To exit to the Global Config mode,
enter the exit command. To return
to the Privileged EXEC mode, enter
Ctrl-Z.

2.2.6 Entering CLI Commands

The 7200RS Series Stackable Switch supports several features to help you enter
commands.

2.2.6.1 Command Completion and Abbreviation

Command completion finishes spelling the command when you type enough letters of a
command to uniquely identify the command keyword. Once you have entered enough
letters, press the SPACEBAR or TAB key to complete the word.

Command abbreviation allows you to execute a command when you type enough letters of
a command to uniquely identify the command. You must enter all of the required
keywords and parameters before you enter the command.

2-8 Overview

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

2.2.6.2 CLI Error Messages

If you enter a command and the system is unable to execute it, an error message appears.
Table 2-8 describes the most common CLI error messages.

Table 2-8. CLI Error Messages

Message Text Description

% Invalid input detected at '^'
marker.

Command not found / Incomplete
command. Use ? to list commands.

Ambiguous command Indicates that you did not enter enough letters to

Indicates that you entered an incorrect or
unavailable command. The carat (^) shows
where the invalid text is detected. This message
also appears if any of the parameters or values
are not recognized.

Indicates that you did not enter the required
keywords or values.

uniquely identify the command.

2.2.6.3 CLI Line-Editing Conventions

Table 2-9 describes the key combinations you can use to edit commands or increase the
speed of command entry. You can access this list from the CLI by entering

help from the

User or Privileged EXEC modes.

Table 2-9. CLI Editing Conventions

Key Sequence Description

DEL or Backspace Delete previous character
Ctrl-A Go to beginning of line
Ctrl-E Go to end of line
Ctrl-F Go forward one character
Ctrl-B Go backward one character
Ctrl-D Delete current character
Ctrl-U, X Delete to beginning of line
Ctrl-K Delete to end of line
Ctrl-W Delete previous word
Ctrl-T Transpose previous character
Ctrl-P Go to previous line in history buffer
Ctrl-R Rewrites or pastes the line
Ctrl-N Go to next line in history buffer
Ctrl-Y Prints last deleted character
Ctrl-Q Enables serial flow

Overview 2-9

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Table 2-9. CLI Editing Conventions

Key Sequence Description

Ctrl-S Disables serial flow
Ctrl-Z Return to root command prompt
Tab, <SPACE> Command-line completion
Exit Go to next lower command prompt
? List available commands, keywords, or parameters

2.2.7 Using CLI Help

Enter a question mark (?) at the command prompt to display the commands available in
the current mode.

(switch) >?

enable Enter into user privilege mode.
help Display help for various special keys.
logout Exit this session. Any unsaved changes are lost.
ping Send ICMP echo packets to a specified IP address.
show Display switch options and settings.

Enter a question mark (?) after each word you enter to display available command
keywords or parameters.

(switch) #network ?

javamode Enable/Disable.
parms Configure Network Parameters of the router.
protocol Select DHCP, BootP, or None as the network config
protocol.
mgmt_vlan Configure the Management VLAN ID of the switch.

If the help output shows a parameter in angle brackets, you must replace the parameter
with a value.

(switch) #network parms ?

<ipaddr> Enter the IP Address.

If there are no additional command keywords or parameters, or if additional parameters
are optional, the following message appears in the output:

<cr> Press Enter to execute the command

2-10 Overview

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

You can also enter a question mark (?) after typing one or more characters of a word to list
the available command or parameters that begin with the letters, as shown in the following
example:

(switch) #show m?

mac-addr-table mac-address-table monitor

2.2.8 Accessing the CLI

You can access the CLI by using a direct console connection or by using a telnet or SSH
connection from a remote management host.

For the initial connection, you must use a direct connection to the console port. You
cannot access the system remotely until the system has an IP address and subnet mask.
You can set the network configuration information manually, or you can configure the
system to accept these settings from a BOOTP or DHCP server on your network. For more
information, see Section 3.1 “Network Interface Commands” on page 1.

Overview 2-11

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

2-12 Overview

v1.0, October 2008

Chapter 3

Administrative Access Commands

This section describes the management access and basic port configuration commands
available in the 7200RS Series Stackable Switch CLI.

This section contains the following topics:

• Section 3.1 “Network Interface Commands” on page 1

• Section 3.3 “Console Port Access Commands” on page 6

• Section 3.4 “Telnet Commands” on page 9

• Section 3.5 “Secure Shell (SSH) Command” on page 14

• Section 3.6 “Hypertext Transfer Protocol (HTTP) Commands” on page 16

• Section 3.7 “User Account Commands” on page 22
The commands in this section are divided into two functional groups:

• Show commands display switch settings, statistics, and other information.

• Configuration commands configure features and options of the switch. For every
configuration command, there is a show command that displays the configuration
setting.

To manage the device by using SNMP, see “SNMP Commands” in Chapter 10.

3.1 Network Interface Commands

This section describes the commands you use to configure a logical interface for
management access.

3.1.1 enable

This command gives you access to the Privileged EXEC mode. From the Privileged
EXEC mode, you can configure the network interface.

Format
Mode User EXEC

Administrative Access Commands 3-1

enable

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.1.2 network parms (parameter)

This command sets the IP Address, subnet mask and gateway of the device. The IP
Address and the gateway must be on the same subnet.

Format

network (parms | parameter) <ipaddr> <netmask>
[<gateway>]

Mode Privileged EXEC

3.1.3 network mgmt_vlan

This command configures the Management VLAN ID.

Default 1
Format

network mgmt_vlan <1-4069>

Mode Privileged EXEC

3.1.3.1 no network mgmt_vlan

This command sets the Management VLAN ID to the default.

Format

no network mgmt_vlan

Mode Privileged EXEC

3.1.4 network protocol

This command specifies the network configuration protocol to be used. If you modify this
value, change is effective immediately. If you modify this value, the change is effective
immediately. If you use the
BootP server until a response is received. If you use the
periodically sends requests to a DHCP server until a response is received. If you use the

none parameter, you must configure the network information for the switch manually.

Default none
Format
Mode Privileged EXEC

bootp parameter, the switch periodically sends requests to a

network protocol {none | bootp | dhcp}

dhcp parameter, the switch

3-2 Administrative Access Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.1.5 show network

This command displays configuration settings associated with the switch's network
interface. The network interface is the logical interface used for in-band connectivity with
the switch via any of the switch's front panel ports. The configuration parameters
associated with the switch's network interface do not affect the configuration of the front
panel ports through which traffic is switched or routed.

Format

show network

Modes Privileged EXEC

User EXEC

IP Address The IP address of the interface. The factory default value is

0.0.0.0

Subnet Mask The IP subnet mask for this interface. The factory default

value is 0.0.0.0

Default Gateway The default gateway for this IP interface. The factory default

value is 0.0.0.0

Burned In MAC
Address The burned in MAC address used for in-band connectivity.

Locally
Administered
MAC Address If desired, a locally administered MAC address can be con-

figured for in-band connectivity. To take effect, 'MAC
Address Type' must be set to 'Locally Administered'. Enter
the address as twelve hexadecimal digits (6 bytes) with a
colon between each byte. Bit 1 of byte 0 must be set to a 1
and bit 0 to a 0, i.e. byte 0 should have the following mask
'xxxx xx10'. The MAC address used by this bridge when it
must be referred to in a unique fashion. It is recommended
that this be the numerically smallest MAC address of all ports
that belong to this bridge. However it is only required to be
unique. When concatenated with dot1dStpPriority a unique
BridgeIdentifier is formed which is used in the Spanning Tree
Protocol.

MAC Address
Type Specifies which MAC address should be used for in-band

connectivity. The choices are the burned in or the Locally
Administered address. The factory default is to use the
burned in MAC address.

Administrative Access Commands 3-3

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Network
Configuration
Protocol Current Indicates which network protocol is being used. The options

are bootp | dhcp | none.

Java Mode Specifies if the switch should allow access to the Java applet

in the header frame. Enabled means the applet can be viewed.
The factory default is disabled.

Web Mode Specifies if the switch should allow access to the Web Inter-

face.

3.2 Configuring the Switch Management CPU (ezconfig)

Format ezconfig
Mode Privileged EXEC

To manage the switch via the web GUI or telnet, an IP address needs to be assigned to the
switch management CPU. Whereas there are CLI commands that can be used to do this,
ezconfig simplifies the task. The tool is applicable to all NETGEAR 7000-series managed
switches, and allows you to configure the following parameters:

1. The administrator’s user password and administrator-enable password

2. Management CPU IP address and network mask

3. System name and location information

The tool is interactive and uses questions to guide you through the steps required to
perform its task. At the end of the session, it will ask you if you want to save the changed
information. To see exactly what has been changed by ezconfig at the end of the session,
use the show running-config command.

To perform any switch configuration o t her than the items listed above, use other CLI
commands or the Web GUI.

3-4 Administrative Access Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

The following is an example of an ezconfig session.

NETGEAR EZ Configuration Utility

-------------------------------­Hello and Welcome!

This utility will walk you thru assigning the IP address for the switch
management CPU. It will allow you to save the changes at the end. After
the session, simply use the newly assigned IP address to access the Web
GUI using any public domain Web browser.

Admin password not defined. Do you want to change the password?
(Y/N/Q) y
Enter new password:********
Confirm new password:********
Password Changed!

The 'enable' password required for switch configuration via the command
line interface is currently not configured. Do you wish to change it (Y/
N/Q)? y

Enter new password:********
Confirm new password:********
Password Changed!

Assigning an IP address to your switch management

Current IP Address Configuration

-------------------------------­IP address: 0.0.0.0
Subnet mask: 0.0.0.0
Gateway address: 0.0.0.0

Would you like to assign an IP address now (Y/N/Q)? y

IP Address: 10.10.10.1
Subnet mask: 255.255.255.0
Gateway address: 10.10.10.10

Do you want to assign switch name and location information (Y/N/Q)? y

System Name: testunit1
System Location: testlab
System Contact: Bud Lightyear

Administrative Access Commands 3-5

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

There are changes detected, do you wish to save the changes permanently
(Y/N)? y

The configuration changes have been saved succesfully. Please enter
'show running-config' to see the final configuration.

Thanks for using EzConfig!

3.3 Console Port Access Commands

This section describes the commands you use to configure the console port. You can use a
serial cable to connect a management host directly to the console port of the switch.

3.3.1 configuration

This command gives you access to the Global Config mode. From the Global Config
mode, you can configure a variety of system settings, including user accounts. From the
Global Config mode, you can enter other command modes, including Line Config mode.

Format
Mode Privileged EXEC

configuration

3.3.2 lineconfig

This command gives you access to the Line Config mode, which allows you to configure
various telnet settings and the console port.

Format
Mode Global Config

3-6 Administrative Access Commands

lineconfig

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.3.3 serial baudrate

This command specifies the communication rate of the terminal interface. The supported
rates are 1200, 2400, 4800, 9600, 19200, 38400, 57600, 115200.

Default 9600
Format

Mode Line Config

3.3.3.1 no serial baudrate

This command sets the communication rate of the terminal interface.

serial baudrate {1200 | 2400 | 4800 | 9600 | 19200
| 38400 | 57600 | 115200}

Format
Mode Line Config

3.3.4 serial timeout

This command specifies the maximum connect time (in minutes) without console activity .
A value of 0 indicates that a console can be connected indefinitely. The time range is 0 to

160.

Default 5
Format
Mode Line Config

3.3.4.1 no serial timeout

This command sets the maximum connect time (in minutes) without console activity.

Format
Mode Line Config

no serial baudrate

serial timeout <0-160>

no serial timeout

Administrative Access Commands 3-7

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.3.5 show serial

This command displays serial communication settings for the switch.

Format
Modes Privileged EXEC

Serial Port Login
Timeout
(minutes) Specifies the time, in minutes, of inactivity on a Serial port

Baud Rate (bps) The default baud rate at which the serial port will try to con-

Character Size
(bits) The number of bits in a character. The number of bits is

Flow Control Whether Hardware Flow-Control is enabled or disabled.

Stop Bits The number of Stop bits per character. The number of Stop

Parity Type The Parity Method used on the Serial Port. The Parity

show serial

User EXEC

connection, after which the Switch will close the connection.
Any numeric value between 0 and 160 is allowed, the factory
default is 5. A value of 0 disables the timeout.

nect. The available values are 1200, 2400, 4800, 9600,
19200, 38400,57600, and 1 15200 b aud. The factory defau lt is
9600 baud.

always 8.

Hardware Flow Control is always disabled.

bits is always 1.

Method is always None.

3-8 Administrative Access Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.4 Telnet Commands

This section describes the commands you use to configure and view telnet settings. You
can use telnet to manage the device from a remote management host.

3.4.1 telnet

This command establishes a new outbound telnet connection to a remote host. The host
value must be a valid IP address. Valid values for port should be a valid decimal integer in
the range of 0 to 65535, where the default value is 23. If [debug] is used, the current telnet
options enabled is displayed. The optional line parameter sets the outbound telnet
operational mode as ‘linemode’, where by default, the operational mode is ‘character
mode’. The noecho option disables local echo.

Format
Modes Privileged EXEC

telnet <host> <port> [debug] [line] [noecho]

User EXEC

3.4.2 transport input telnet

This command regulates new telnet sessions. If sessions are enabled, new telnet sessions
can be established until there are no more sessions available. If sessions are disabled, no
new telnet sessions are established. An established session remains active until the session
is ended or an abnormal network error ends the session.

Default enabled
Format
Mode Line Config

3.4.2.1 no transport input telnet

This command disables telnet sessions. If sessions are disabled, no new telnet sessions are
established.

Format
Mode Line Config

Administrative Access Commands 3-9

transport input telnet

no transport input telnet

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.4.3 transport output telnet

This command regulates new outbound telnet connections. If enabled, new outbound
telnet sessions can be established until it reaches the maximum number of simultaneous
outbound telnet sessions allowed. If disabled, no new outbound telnet session can be
established. An established session remains active until the session is ended or an
abnormal network error ends it.

Default enabled
Format

transport output telnet

Mode Line Config

3.4.3.1 no transport output telnet

This command disables new outbound telnet connections. If disabled, no new outbound
telnet connection can be established.

Format

no transport output telnet

Mode Line Config

3.4.4 session-limit

This command specifies the maximum number of simultaneous outbound telnet sessions.
A value of 0 indicates that no outbound telnet session can be established.

Default 5
Format

session-limit <0-5>

Mode Line Config

3.4.4.1 no session-limit

This command sets the maximum number of simultaneous outbound telnet sessions to the
default value.

Format

no session-limit

Mode Line Config

3-10 Administrative Access Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.4.5 session-timeout

This command sets the telnet session timeout value.The timeout value unit of time is
minutes. A value of 0 indicates that a session remains active indefinitely.

Default 0
Format

session-timeout <0-160>

Mode Line Config

3.4.5.1 no session-timeout

This command sets the telnet session timeout value to the default. The timeout value unit
of time is minutes.

Format

no session-timeout

Mode Line Config

3.4.6 telnetcon maxsessions

This command specifies the maximum number of telnet connection sessions that can be
established. A value of 0 indicates that no telnet connection can be established. The range
is 0 to 5.

Default 5
Format

telnetcon maxsessions <0-5>

Mode Privileged EXEC

3.4.6.1 no telnetcon maxsessions

This command sets the maximum number of telnet connection sessions that can be
established to the default value.

Format

no telnetcon maxsessions

Mode Privileged EXEC

Administrative Access Commands 3-11

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.4.7 telnetcon timeout

This command sets the telnet connection session timeout value, in minutes. A session is
active as long as the session has not been idle for the value you set, which ranges from 1­160 minutes.

Note: Changing the timeout value for active sessions does not become effective

until the session is reaccessed. Also, any keystroke activates the new
timeout duration.

Default 5
Format
Mode Privileged EXEC

3.4.7.1 no telnetcon timeout

This command sets the telnet connection session timeout value to the default.

Note: Changing the timeout value for active sessions does not become effective

until the session is reaccessed. Also, any keystroke activates the new
timeout duration.

telnetcon timeout <1-160>

Format

no telnetcon timeout

Mode Privileged EXEC

3.4.8 show telnet

This command displays the current outbound telnet settings.

Format
Modes Privileged EXEC

Outbound Telnet
Login Timeout Indicates the number of minutes an outbound telnet session is

3-12 Administrative Access Commands

show telnet

User EXEC

allowed to remain inactive before being logged off.

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Maximum Number
of Outbound
Telnet Sessions Indicates the number of simultaneous outbound telnet con-

nections allowed.

Allow New
Outbound Telnet
Sessions Indicates whether outbound telnet sessions are allowed.

3.4.9 show telnetcon

This command displays telnet settings.

Format

show telnetcon

Modes Privileged EXEC

User EXEC

Remote
Connection Login
Timeout
(minutes) This object indicates the number of minutes a remote connec-

tion session is allowed to remain inactive before being logged
off. May be specified as a number from 1 to 160. The factory
default is 5.

Maximum Number
of Remote
Connection
Sessions This object indicates the number of simultaneous remote con-

nection sessions allowed. The factory default is 5.

Allow New Telnet
Sessions Indicates that new telnet sessions will not be allowed when

set to no. The factory default value is yes.

Administrative Access Commands 3-13

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.5 Secure Shell (SSH) Command

This section describes the commands you use to configure SSH access to the switch. Use
SSH to access the switch from a remote management host.

Note: The system allows a maximum of 5 SSH sessions.

3.5.1 ip ssh

This command is used to enable SSH.

Default disabled
Format
Mode Privileged EXEC

3.5.1.1 no ip ssh

This command is used to disable SSH.

Format
Mode Privileged EXEC

3.5.2 ip ssh protocol

This command is used to set or remove protocol levels (or versions) for SSH. Either SSH1
(1), SSH2 (2), or both SSH 1 and SSH 2 (1 and 2) can be set.

Default 1 and 2
Format
Mode Privileged EXEC

ip ssh

no ip ssh

ip ssh protocol [1] [2]

3-14 Administrative Access Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.5.3 sshcon maxsessions

This command specifies the maximum number of SSH connection sessions that can be
established. A value of 0 indicates that no ssh connection can be established. The range is
0 to 5.

Default 5
Format
Mode Privileged EXEC

3.5.3.1 no sshcon maxsessions

This command sets the maximum number of allowed SSH connection sessions to the
default value.

Format
Mode Privileged EXEC

3.5.4 sshcon timeout

This command sets the SSH connection session timeout value, in minutes. A session is
active as long as the session has been idle for the value set. The time is a decimal value
from 1 to 160.

Changing the timeout value for active sessions does not become effective until the session
is re accessed. Also, any keystroke activates the new timeout duration.

Default 5
Format
Mode Privileged EXEC

sshcon maxsessions <0-5>

no sshcon maxsessions

sshcon timeout <1-160>

3.5.4.1 no sshcon timeout

This command sets the SSH connection session timeout value, in minutes, to the default.
Changing the timeout value for active sessions does not become effective until the session

is re accessed. Also, any keystroke activates the new timeout duration.

Format

no sshcon timeout

Mode Privileged EXEC

Administrative Access Commands 3-15

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.5.5 show ip ssh

This command displays the ssh settings.

Format
Mode Privileged EXEC
Administrative

Mode This field indicates whether the administrative mode of SSH

Protocol Level The protocol level may have the values of version 1, version

Connections This field specifies the current SSH connections.

show ip ssh

is enabled or disabled.

2 or both versions 1 and version 2.

3.6 Hypertext Transfer Protocol (HTTP) Commands

This section describes the commands you use to configure HTTP access to the switch.
Access to the switch by using a Web browser is enabled by default. Everything you can
view and configure by using the CLI is also available by using the Web.

3.6.1 ip http secure-port

This command is used to set the SSL port where port can be 1-65535 and the default is
port 443.

Default 443
Format
Mode Privileged EXEC

3.6.1.1 no ip http secure-port

This command is used to reset the SSL port to the default value.

Format
Mode Privileged EXEC

3-16 Administrative Access Commands

ip http secure-port <portid>

no ip http secure-port

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.6.2 ip http secure-protocol

This command is used to set protocol levels (versions). The protocol level can be set to
TLS1, SSL3 or to both TLS1 and SSL3.

Default SSL3 and TLS1
Format

ip http secure-protocol [SSL3] [TLS1]

Mode Privileged EXEC

3.6.3 ip http secure-server

This command is used to enable the secure socket layer for secure HTTP.

Default disabled
Format
Mode Privileged EXEC

3.6.3.1 no ip http secure-server

This command is used to disable the secure socket layer for secure HTTP.

ip http secure-server

Format

no ip http secure-server

Mode Privileged EXEC

3.6.4 ip http server

This command enables access to the switch through the Web interface. When access is
enabled, you can login to the switch from the Web interface. When access is disabled, you
cannot login to the switch's Web server. Disabling the Web interface takes effect
immediately and affects all interfaces.

Default enabled
Format
Mode Privileged EXEC

3.6.4.1 no ip http server

This command disables access to the switch through the Web interface. When access is
disabled, you cannot login to the switch's Web server.

Format
Mode Privileged EXEC

Administrative Access Commands 3-17

ip http server

no ip http server

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.6.5 ip http java

This command enables the Web Java mode. The Java mode applies to both secure and
unsecure Web connections.

Default enabled
Format

ip http java

Mode Privileged EXEC

3.6.5.1 no ip http java

This command disables the Web Java mode. The Java mode applies to both secure and
unsecure Web connections.

Format

no ip http java

Mode Privileged EXEC

3.6.6 ip http session hard-timeout

Configures the hard timeout for un-secure HTTP sessions in hours. Configuring this value
to zero will give an infinite hard-timeout. When this timeout expires, the user will be
forced to re-authenticate. This timer begins on initiation of the web session and is
unaffected by the activity level of the connection.

Default 24
Format
Mode Privileged EXEC

ip http session hard-timeout <0-168>

3.6.6.1 no ip http session hard-timeout

Restores the hard timeout for un-secure HTTP sessions to the default value

Format

no ip http session hard-timeout

Mode Privileged EXEC

3.6.7 ip http session maxsessions

This command limits the number of allowable un-secure HTTP sessions. Zero is the
configurable minimum.

Default 16
Format
Mode Privileged EXEC

3-18 Administrative Access Commands

ip http session maxsessions <0-16>

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.6.7.1 no ip http session maxsessions

Restores the the number of allowable un-secure HTTP sessions to the default value.

Format

no ip http session maxsessions

Mode Privileged EXEC

3.6.8 ip http session soft-timeout

Configures the soft timeout for un-secure HTTP sessions in minutes. Configuring this
value to zero will give an infinite soft-timeout. When this timeout expires the user will be
forced to re-authenticate. This timer begins on initiation of the Web session and is re­started with each access to the switch.

Default 60
Format

ip http session soft-timeout <0-60>

Mode Privileged EXEC

3.6.8.1 no ip http session soft-timeout

Resets the soft timeout for un-secure HTTP sessions to the default value.

Format

no ip http session soft-timeout

Mode Privileged EXEC

3.6.9 ip http secure-session hard-timeout

Configures the hard timeout for secure HTTP sessions in hours. When this timeout
expires, the user is forced to re-authenticate. This timer begins on initiation of the Web
session and is unaffected by the activity level of the connection. The secure-session hard
timeout cannot be set to zero (infinite).

Default 24
Format
Mode Privileged EXEC

3.6.9.1 no ip http secure-session hard-timeout

Resets the hard timeout for secure HTTP sessions to the default value

ip http secure-session hard-timeout <1-168>

Format

no ip http secure-session hard-timeout

Mode Privileged EXEC

Administrative Access Commands 3-19

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.6.10 ip http secure-session maxsessions

This command limits the number of secure HTTP sessions. Zero is the configurable
minimum.

Default 16
Format

ip http secure-session maxsessions <0-16>

Mode Privileged EXEC

3.6.10.1 no ip http secure-session maxsessions

Restores the the number of allowable secure HTTP sessions to the default value.

Format

no ip http secure-session maxsessions

Mode Privileged EXEC

3.6.11 ip http secure-session soft-timeout

Configures the soft timeout for secure HTTP sessions in minutes. When this timeout
expires the user will be forced to re-authenticate. This timer begins on initiation of the
Web session and is re-started with each access to the switch. The secure-session soft
timeout cannot be set to zero (infinite).

Default 60
Format

ip http secure-session soft-timeout <1-60>

Mode Privileged EXEC

3.6.11.1 no ip http secure-session soft-timeout

Resets the soft timeout for secure HTTP sessions to the default value.

Format

no ip http secure-session soft-timeout

Mode Privileged EXEC

3.6.12 network javamode

This command specifies whether or not the switch should allow access to the Java applet
in the header frame of the Web interface. When access is enabled, the Java applet can be
viewed from the Web interface. When access is disabled, the user cannot view the Java
applet.

Default enabled
Format

3-20 Administrative Access Commands

network javamode

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Mode Privileged EXEC

3.6.12.1 no network javamode

This command disallows access to the Java applet in the header frame of the Web
interface. When access is disabled, the user cannot view the Java applet.

Format

no network javamode

Mode Privileged EXEC

3.6.13 show ip http

This command displays the http settings for the switch.

Format
Mode Privileged EXEC
HTTP Mode

(Unsecure) Indicates the unsecure administrative mode.
Java Mode The java applet administrative mode, which applies to both

Maximum
Allowable HTTP
Sessions The number of allowable unsecure HTTP sessions.

HTTP Session
Hard Timeout The hard timeout for unsecure HTTP sessions in hours.

HTTP Session
Soft Timeout The soft timeout for unsecure HTTP sessions in minutes.

HTTP Mode
(Secure) The secure HTTP server administrative mode.

Secure Port The secure HTTP server port number.
Secure Port

Protocol Level(s) The protocol level may have the values SSL3, TSL1, or both

Maximum
Allowable HTTPS
Sessions The number of allowable secure HTTP sessions.

HTTPS Session
Hard Timeout The hard timeout for secure HTTP sessions in hours.

HTTPS Session
Soft Timeout The soft timeout for secure HTTP sessions in minutes.

show ip http

secure and unsecure web connections.

SSL3 and TSL1.

Administrative Access Commands 3-21

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.7 User Account Commands

This section describes the commands you use to add, manage, and delete system users.
The 7200RS Series Stackable Switch has two default users: admin and guest. The admin
user can view and configure system settings, and the guest user can view settings.

Note: You cannot delete the admin user, and there is only one user allowed with

read/write privileges. You can configure up to five read-only users on the
system.

3.7.1 users name

This command adds a new user account, if space permits. The account <username> can be
up to eight characters in length. You can use alphanumeric characters as well as the dash
(‘-’) and underscore (‘_’). The

You can define up to six user names.

Format
Mode Global Config

<username> is not case-sensitive.

users name <username>

3.7.1.1 no users name

This command removes a user account.

Format

no users name <username>

Mode Global Config

Note: You cannot delete the “admin” user account.

3-22 Administrative Access Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.7.2 users passwd

Use this command to change a password. Passwords are a maximum of eight
alphanumeric characters. If a user is authorized for authentication or encryption is
enabled, the password length must be at least eight alphanumeric characters. The
username and password are not case-sensitive. When you change a password, a prompt
asks for the old password. If there is no password, press enter.

Default no password
Format
Mode Global Config

3.7.2.1 no users passwd

This command sets the password of an existing user to blank. When you change a
password, a prompt asks for the old password. If there is no password, press enter.

Format
Mode Global Config

users passwd <username>

no users passwd <username>

3.7.3 users snmpv3 accessmode

This command specifies the snmpv3 access privileges for the specified login user. The
valid accessmode values are
name for which the specified access mode applies. The default is
“admin” user and

readonly for all other users

Default admin - readwrite; other - readonly
Format

Mode Global Config

3.7.3.1 no users snmpv3 accessmode

This command sets the snmpv3 access privileges for the specified user as readwrite for
the “admin” user and readonly for all other users. The
for which the specified access mode will apply.

Format
Mode Global Config

Administrative Access Commands 3-23

readonly or readwrite. The <username> is the login user

readwrite for the

users snmpv3 accessmode <username> {readonly |

readwrite}

<username> value is the user name

no users snmpv3 accessmode <username>

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.7.4 users snmpv3 authentication

This command specifies the authentication protocol to be used for the specified user. The valid authentication
protocols are none, md5 or sha. If you specify md5 or sha, the login password is also used as

the snmpv3 authentication password and therefore must be at least eight characters in
length. The

Default no authentication
Format

Mode Global Config

3.7.4.1 no users snmpv3 authentication

This command sets the authentication protocol to be used for the specified user to none.
The

<username> is the user name for which the specified authentication protocol is used.

<username> is the user name associated with the authentication protocol.

users snmpv3 authentication <username> {none | md5
| sha}

Format

users snmpv3 authentication <username>

Mode Global Config

3.7.5 users snmpv3 encryption

This command specifies the encryption protocol used for the specified user . The valid
encryption protocols are

If you select
key

must be 8 to 64 characters long. If you select the des protocol but do not provide a

des, you can specify the required key on the command line. The encryption

key, the user is prompted for the key. When you use the
is also used as the snmpv3 encryption password, so it must be a minimum of eight
characters. If you select

The

<username> value is the login user name associated with the specified encryption.

Default no encryption
Format

Mode Global Config

des or none.

none, you do not need to provide a key.

users snmpv3 encryption <username> {none |

des[key]}

des protocol, the login password

3-24 Administrative Access Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

3.7.5.1 no users snmpv3 encryption

This command sets the encryption protocol to none. The
name for which the specified encryption protocol will be used.

Format
Mode Global Config

3.7.6 show loginsession

This command displays current telnet and serial port connections to the switch.

Format
Mode Privileged EXEC
ID Login Session ID
User Name The name the user will use to login using the serial port or

Connection From IP address of the Telnet client machine or EIA-232 for the

Idle Time Time this session has been idle.
Session Time Total time this session has been connected.
Session Type Shows the type of session, which can be HTTP, HTTPS, tel-

<username> is the login user

no users snmpv3 encryption <username>

show loginsession

Telnet.

serial port connection.

net, serial, or SSH

3.7.7 show users

This command displays the configured user names and their settings. This command is
only available for users with Read/Write privileges.

SNMP is available on the system.

Format show users
Mode Privileged EXEC
User Name The name the user enters to login using the serial port, Telnet

or Web.

Access Mode Shows whether the user is able to change parameters on the

switch (Read/Write) or is only able to view them (Read
Only). As a factory default, the “admin” user has Read/Write

Administrative Access Commands 3-25

v1.0, October 2008

The SNMPv3 fields will only be displayed if

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

access and the “guest” has Read Only access. There can only
be one Read/Write user and up to five Read Only users.

SNMPv3 Access
Mode This field displays the SNMPv3 Access Mode. If the value is

ReadWrite, the SNMPv3 user is able to set and

set to
retrieve parameters on the system. If the value is set to

dOnly,

the SNMPv3 user is only able to retrieve parameter

Rea-

information. The SNMPv3 access mode may be different
than the CLI and Web access mode.

SNMPv3
Authentication This field displays the authentication protocol to be used for

the specified login user.

SNMPv3
Encryption This field displays the encryption protocol to be used for the

specified login user.

3.7.8 disconnect

This command closes a telnet session.

Format

disconnect {<sessionID> | all}

Mode Privileged EXEC

3-26 Administrative Access Commands

v1.0, October 2008

Chapter 4

Port and System Setup Commands

This section describes general port and system setup commands available in the 7200RS
Series Stackable Switch CLI.

This section contains the following topics:

• Section 4.1 “Port Configuration Commands” on page 1

• Section 4.2 “Pre-login Banner and System Prompt Commands” on page 10

• Section 4.3 “Simple Network Time Protocol (SNTP) Commands” on page 11

• Section 4.4 “MAC Address and MAC Database Commands” on page 17

• Section 4.5 “DNS Client Commands” on page 24

The commands in this section are in one of three functional groups:

• Show commands display switch settings, statistics, and other information.

• Configuration commands configure features and options of the switch. For every
configuration command, there is a show command that displays the configuration
setting.

• Copy commands transfer or save configuration and informational files to and from the
switch.

4.1 Port Configuration Commands

This section describes the commands you use to view and configure port settings.

4.1.1 interface

This command gives you access to the Interface Config mode, which allows you to enable
or modify the operation of an interface.

Format
Mode Global Config

Port and System Setup Commands 4-1

interface <unit/slot/port>

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.1.2 interface range

This command gives you access to a range of port interfaces, allowing the same port
configuration to be applied to a set of ports.

Format
Mode Global Config

4.1.3 interface vlan

This command gives you access to to the vlan virtual interface mode, which allows certain
port configurations (for example, the IP address) to be applied to the VLAN interface.
Type a question mark (?) after entering the interface configuration mode to see the
available options.

Format
Mode Global Config

4.1.4 interface lag

This command gives you access to the LAG (link aggregation, or port channel) virtual
interface, which allows certain port configurations to be applied to the LAG interface.
Type a question mark (?) after entering the interface configuration mode to see the
available options.

Note: The IP address cannot be assigned to a LAG virtual interface. The interface

must be put under a VLAN group and an IP address assigned to the VLAN
group.

interface range <unit/slot/port>-<unit/slot/port>

interface vlan <vlan id>

Format
Mode Global Config

interface lag <lag id>

4.1.5 auto-negotiate

This command enables automatic negotiation on a port.

Default enabled
Format
Mode Interface Config

4-2 Port and System Setup Commands

auto-negotiate

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.1.5.1 no auto-negotiate

This command disables automatic negotiation on a port.

Note: Automatic sensing is disabled when automatic negotiation is disabled.

Format
Mode Interface Config

4.1.6 auto-negotiate all

This command enables automatic negotiation on all ports. The default value is enable.

Format
Mode Global Config

4.1.6.1 no auto-negotiate all

This command disables automatic negotiation on all ports.

Format
Mode Global Config

4.1.7 description

Use this command to create an alpha-numeric description of th e port. The length can be up
to 64 characters.

Format
Mode Interface Config

no auto-negotiate

auto-negotiate all

no auto-negotiate all

description <description>

Port and System Setup Commands 4-3

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.1.8 mtu

This command sets the maximum transmission unit (MTU) size, in bytes, for physical and
port-channel (LAG) interfaces. For the standard implementation, the MTU size is a valid
integer between 1522 - 9216 for tagged packets and a valid integer between 1518 - 9216
for untagged packets.

Note: To receive and process packets, the Ethernet MTU must include any extra

bytes that Layer-2 headers might require. To configure the IP MTU size,
which is the maximum size of the IP packet (IP Header + IP payload), see

Section 14.2.8 “ip mtu” on page 10.

Default 1518 (untagged)
Format
Mode Interface Config

4.1.8.1 no mtu

This command sets the default MTU size (in bytes) for the interface.

Format
Mode Interface Config

4.1.9 shutdown

This command disables a port.

Note: You can use the shutdown command on physical and port-channel (LAG)

Default enabled
Format
Mode Interface Config

mtu <1518-9216>

no mtu

interfaces, but not on VLAN routing interfaces.

shutdown

4-4 Port and System Setup Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.1.9.1 no shutdown

This command enables a port.

Note: You can use the no shutdown command on physical and port-channel

(LAG) interfaces, but not on VLAN routing interfaces.

Format
Mode Interface Config

4.1.10 shutdown all

This command disables all ports.

Note: You can use the shutdown command on physical and port-channel (LAG)

interfaces, but not on VLAN routing interfaces.

Default enabled
Format
Mode Global Config

4.1.10.1 no shutdown all

This command enables all ports.

Note: You can use the shutdown command on physical and port-channel (LAG)

interfaces, but not on VLAN routing interfaces.

no shutdown

shutdown all

Format

no shutdown all

Mode Global Config

4.1.11 speed

This command sets the speed and duplex setting for the interface.

Format
Mode Interface Config

Port and System Setup Commands 4-5

speed {<100 | 10> <half-duplex | full-duplex>}

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Acceptable values are:

100h 100BASE-T half duplex
100f 100BASE-T full duplex
10h 10BASE-T half duplex
10f 10BASE-T full duplex

4.1.12 speed all

This command sets the speed and duplex setting for all interfaces.

Format
Mode Global Config

Acceptable values are:

100h 100BASE-T half-duplex
100f 100BASE-T full duplex
10h 10BASE-T half duplex
10f 10BASE-T full duplex

speed all {<100 | 10> <half-duplex | full-duplex>}

4.1.13 monitor session

This command configures a probe port and a monitored port for monitor session (port
monitoring). To enable port monitoring, you must add a source inte rface, destination
interface, and enable the mode. If enabled, the probe port monitors all the traffic received
and transmitted on the physical monitored port.

Note: When a port is defined as the probe port (destination interface), the

traffic from that port will not be forwarded.

Format

Mode Global Config

4-6 Port and System Setup Commands

monitor session <session-id> {source interface
<unit/slot/port> | destination interface <unit/
slot/port> | mode}

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.1.13.1 no monitor session

This command removes the monitor session (port monitoring) designation from the source
probe port, the destination monitored port and all VLANs. Once the port is removed from
the VLAN, the user must manually add the port to any desired VLANs.

Note: This command sets the monitor session (port monitoring) mode to disable

and removes the source and destination interfaces.

Format

no monitor session <session-id>

Mode Global Config

4.1.14 no monitor

This command removes all the source ports and a destination port and restores the default
value for mirroring session mode for all the configured sessions.

Note: This is a stand-alone “no” command. This command does not have a

“normal” form.

Default enabled
Format

no monitor

Mode Global config

4.1.15 show monitor session

This command displays the port monitoring information for the system. The <sessionid>
parameter is an integer.

Format
Mode Privileged EXEC
Session ID The session identifying number.

show monitor session <sessionid>

Admin Mode Indicates whether the Port Monitoring feature is enabled or

disabled. The possible values are enable and disable.

Probe Port The interface configured as the probe port.
Mirrored Port

Port and System Setup Commands 4-7

The interface configured as the mirrored port.

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.1.16 show port

This command displays port information.

Format
Mode Privileged EXEC
Interface Valid slot and port number separated by forward slashes.
Type If not blank, this field indicates that this port is a special type

Probe - this port is a probe port.
Admin Mode Selects the Port control administration state. The port must be

Physical Mode Selects the desired port speed and duplex mode. If auto-nego-

Physical Status Indicates the port speed and duplex mode.

show port {<unit/slot/port> | all}

of port. The possible values are:
Mon - this port is a monitoring port. Look at the Port Moni-

toring screens to find out more information.
Lag - this port is a member of a port-channel (LAG).

enabled in order for it to be allowed into the network. - May
be enabled or disabled. The factory default is enabled.

tiation support is selected, then the duplex mode and speed is
set from the auto-negotiation process. Note that the maxi­mum capability of the port (full duplex -100M) is advertised.
Otherwise, this object determines the port's duplex mode and
transmission rate. The factory default is Auto.

Link Status Indicates whether the Link is up or down.
Link Trap This object determines whether or not to send a trap when

link status changes. The factory default is enabled.

LACP Mode Displays whether LACP is enabled or disabled on this port.

4.1.17 show port description

This command displays the port description for every port

Format
Mode Privileged EXEC
Interface Valid slot and port number separated by forward slashes.
Description Shows the port description configured via the “description”

4-8 Port and System Setup Commands

show port description <unit/slot/port>

command

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.1.18 show port protocol

This command displays the Protocol-Based VLAN information for either the entire
system, or for the indicated group.

Format
Mode Privileged EXEC
Group Name This field displays the group name of an entry in the Proto-

Group ID This field displays the group identifier of the protocol group.
Protocol(s) This field indicates the type of protocol(s) for this group.
VLAN This field indicates the VLAN associated with this Protocol

Interface(s) This field lists the unit/slot/port interface(s) that are associ-

4.1.19 show port status

This command displays the output with current port attributes and operational status.

Format
Mode Privileged Exec
Interface Valid slot and port number separated by forward slashes.
Media Type “Copper” or “Fiber” for combo port.
STP Mode Indicate the spanning tree mode of the port.
Physical Mode Either “Auto” or fixed speed and duplex mode.
Physical Status The actual speed and duplex mode

show port protocol {<groupid> | all}

col-based VLAN table.

Group.

ated with this Protocol Group.

show port status {<unit/slot/port> | all}

Link Status Whether the link is Up or Down.
Loop Status Whether the port is in loop state or not.
Partner Flow

Control Whether the remote side is using flow control or not.

Port and System Setup Commands 4-9

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.2 Pre-login Banner and System Prompt Commands

This section describes the commands you use configure the pre-login banner and the
system prompt. The pre-login banner is the text that displays before you login at the
prompt.

4.2.1 copy

The copy command includes the option to upload or down load the CLI Bann er to or from
the switch. You can specify local URLs by using TFTP, Xmodem, Ymodem, or Zmodem.

Default none
Format

copy nvram:clibanner <Code Sample Variable><tftp://

Mode Privileged EXEC

4.2.2 set prompt

copy <Code Sample Variable><tftp://<ipaddr>/<filepath>/

<filename>><Code Sample Variable>

nvram:clibanner

<ipaddr>/<filepath>/<filename>><Code Sample Variable>

User:

This command changes the name of the prompt. The length of name may be up to 64
alphanumeric characters.

Format

set prompt <prompt_string>

Mode Privileged EXEC

4-10 Port and System Setup Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.3 Simple Network Time Protocol (SNTP) Commands

This section describes the commands you use to automatically configure the system time
and date by using SNTP.

4.3.1 sntp broadcast client poll-interval

This command sets the poll interval for SNTP broadcast clients in seconds as a power of
two where <poll-interval> can be a value from 6 to 16.

Default 6
Format

sntp broadcast client poll-interval <poll-inter­val>

Mode Global Config

4.3.1.1 no sntp broadcast client poll-interval

This command resets the poll interval for SNTP broadcast client back to the default value.

Format

no sntp broadcast client poll-interval

Mode Global Config

4.3.2 sntp client mode

This command enables Simple Network Time Protocol (SNTP) client mode and may set
the mode to either broadcast or unicast.

Default disabled
Format
Mode Global Config

4.3.2.1 no sntp client mode

This command disables Simple Network Time Protocol (SNTP) client mode.

Format
Mode Global Config

sntp client mode [broadcast | unicast]

no sntp client mode

Port and System Setup Commands 4-11

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.3.3 sntp client port

This command sets the SNTP client port id to a value from 1-65535.

Default 123
Format
Mode Global Config

4.3.3.1 no sntp client port

This command resets the SNTP client port back to its default value.

sntp client port <portid>

Format

no sntp client port

Mode Global Config

4.3.4 sntp unicast client poll-interval

This command sets the poll interval for SNTP unicast clients in seconds as a power of two

<poll-interval> can be a value from 6 to 16. When the value of the poll interval

where
is from 17 to 16284, the value is interpreted to be in units of seconds.

Default 6
Format

sntp unicast client poll-interval <poll-interval>

Mode Global Config

4.3.4.1 no sntp unicast client poll-interval

This command resets the poll interval for SNTP unicast clients to its default value.

Format

no sntp unicast client poll-interval

Mode Global Config

4.3.5 sntp unicast client poll-timeout

This command sets the poll timeout for SNTP unicast clients in seconds to a value from 1-

30.

Default 5
Format

sntp unicast client poll-timeout <poll-timeout>

Mode Global Config

4-12 Port and System Setup Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.3.5.1 no sntp unicast client poll-timeout

This command resets the poll timeout for SNTP unicast clients to its default value.

Format

no sntp unicast client poll-timeout

Mode Global Config

4.3.6 sntp unicast client poll-retry

This command will set the poll retry for SNTP unicast clients to a value from 0 to 10.

Default 1
Format

sntp unicast client poll-retry <poll-retry>

Mode Global Config

4.3.6.1 no sntp unicast client poll-retry

This command will reset the poll retry for SNTP unicast clients to its default value.

Format

no sntp unicast client poll-retry

Mode Global Config

4.3.7 sntp multicast client poll-interval

This command will set the poll interval for SNTP multicast clients in seconds as a power
of two where

Default 6
Format

Mode Global Config

4.3.7.1 no sntp multicast client poll-interval

This command resets the poll interval for SNTP multicast clients to its default value.

Format
Mode Global Config

<poll-interval> can be a value from 6 to 16.

sntp multicast client poll-interval <poll-inter­val>

no sntp multicast client poll-interval

Port and System Setup Commands 4-13

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.3.8 sntp server

This command configures an SNTP server (a maximum of three). The optional priority
can be a value of 1-3, the version a value of 1-4, and the port id a value of 1-65535.

Format

Mode Global Config

4.3.8.1 no sntp server

This command deletes an server from the configured SNTP servers.

Format
Mode Global Config

4.3.9 show sntp

This command is used to display SNTP settings and status.

Format
Mode Privileged EXEC
Last Update Time Time of last clock update.
Last Attempt

Time Time of last transmit query (in unicast mode).
Last Attempt

Status Status of the last SNTP request (in unicast mode) or unsolic-

Broadcast Count Current number of unsolicited broadcast messages that have

sntp server <ipaddress> [<priority> [<version>
[<portid>]]]

no sntp server remove <ipaddress>

show sntp

ited message (in broadcast mode).

been received and processed by the SNTP client since last
reboot.

Multicast Count Current number of unsolicited multicast messages that have

been received and processed by the SNTP client since last
reboot

4.3.10 show sntp client

This command is used to display SNTP client settings.

Format
Mode Privileged EXEC

4-14 Port and System Setup Commands

show sntp client

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Client Supported
Modes Supported SNTP Modes (Broadcast, Unicast, or Multicast).

SNTP Version The highest SNTP version the client supports
Port SNTP Client Port
Client Mode Configured SNTP Client Mode
Poll Interval Poll interval value for SNTP clients in seconds as a power of

two.

Poll Timeout Poll timeout value in seconds for SNTP clients.
Poll Retry Poll retry value for SNTP clients.

4.3.11 show sntp server

This command is used to display SNTP server settings and configured servers.

Format

show sntp server

Mode Privileged EXEC
Server IP

Address IP Address of configured SNTP Server
Server Type Address Type of Server.
Server Stratum Claimed stratum of the server for the last received valid

packet.

Server Reference
ID Reference clock identifier of the server for the last received

valid packet.

Server Mode SNTP Server mode.
Server Max

Entries Total number of SNTP Servers allowed.
Server Current

Entries Total number of SNTP configured.

For each configured server:

IP Address IP Address of configured SNTP Server.
Address Type Address Type of configured SNTP server.
Priority IP priority type of the configured server.
Version SNTP Version number of the server. The protocol version

used to query the server in unicast mode.

Port and System Setup Commands 4-15

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Port Server Port Number
Last Attempt

Time Last server attempt time for the specified server.
Last Attempt

Status Last server attempt status for the server.
Total Unicast

Requests Number of requests to the server.
Failed Unicast

Requests Number of failed requests from server.

4.3.12 clock timezone

When using SNTP/NTP time servers to update the switch’s clock, the time data received
from the server is based on Coordinated Universal Time (UTC) which is the same as
Greenwich Mean Time (GMT). This may not be the time zone in which the switch is
located. Use the clock timezone command to configure a time zone specifying the number
of hours and optionally the number of minutes difference from UTC. To set the switch
clock to UTC, use the no form of the command.

Format

clock timezone zone-name +/-hours-offset [+/-minutes-off-

set]

[no] clock timezone

Parameters

Zone name A name to associate with the time zone
Hours-offset Number of hours difference with UTC
Minutes-offset Number of minutes difference with UTC

Mode Global Config
Default

4-16 Port and System Setup Commands

[no] clock timezone

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.4 MAC Address and MAC Database Commands

This section describes the commands you use to configure and view information about the
system MAC address and the MAC address table.

4.4.1 network mac-address

This command sets locally administered MAC addresses. The following rules apply:

• Bit 6 of byte 0 (called the U/L bit) indicates whether the address is universally
administered (b'0') or locally administered (b'1').

• Bit 7 of byte 0 (called the I/G bit) indicates whether the destination address is an
individual address (b'0') or a group address (b'1').

• The second character, of the twelve character macaddr, must be 2, 6, A or E.

A locally administered address must have bit 6 On (b'1') and bit 7 Off (b'0').

Format
Mode Privileged EXEC

4.4.2 network mac-type

This command specifies whether the switch uses the burned in MAC address or the
locally-administered MAC address.

Default burnedin
Format
Mode Privileged EXEC

4.4.2.1 no network mac-type

This command resets the value of MAC address to its default.

Format no network mac-type
Mode Privileged EXE

network mac-address <macaddr>

network mac-type {local | burnedin}

Port and System Setup Commands 4-17

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.4.3 macfilter

This command adds a static MAC filter entry for the MAC address <macaddr> on the
VLAN <vlanid>. The <macaddr> parameter must be specified as a 6-byte hexadecimal
number in the format of b1:b2:b3:b4:b5:b6.

The restricted MAC Addresses are: 00:00:00:00:00:00, 01:80:C2:00:00:00 to
01:80:C2:00:00:0F, 01:80:C2:00:00:20 to 01:80:C2:00:00:21, and FF:FF:FF:FF:FF:FF.

The <vlanid> parameter must identify a valid VLAN.
Up to 100 static MAC filters may be created.

Format macfilter
Mode Global Config

4.4.3.1 no macfilter

This command removes all filtering restrictions and the static MAC filter entry for the
MAC address <macaddr> on the VLAN <vlanid>. The <macaddr> parameter must be
specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.

The <vlanid> parameter must identify a valid VLAN.

<macaddr> <vlanid>

Format no macfilter

<macaddr> <vlanid>

Mode Global Config

4.4.4 macfilter adddest

This command adds the interface to the destination filter set for the MAC filter with the
given <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as
a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.

The <vlanid> parameter must identify a valid VLAN.

Format macfilter adddest
Mode Interface Config

4-18 Port and System Setup Commands

<macaddr> <vlanid>

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.4.4.1 no macfilter adddest

This command removes a port from the destination filter set for the MAC filter with the
given <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified as
a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.

The <vlanid> parameter must identify a valid VLAN.

Format no macfilter adddest

<macaddr> <vlanid>

Mode Interface Config

4.4.5 macfilter adddest all

This command adds all interfaces to the destination filter set for the MAC filter with the
given <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified
as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.

The <vlanid> parameter must identify a valid VLAN.

Format macfilter adddest
Mode Global Config

4.4.5.1 no macfilter adddest all

This command removes all ports from the destination filter set for the MAC filter with the
given <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be specified
as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.

The <vlanid> parameter must identify a valid VLAN.

Format no macfilter adddest all
Mode Global Config

4.4.6 macfilter addsrc

This command adds the interface to the source filter set for the MAC filter with the MAC
address of <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be
specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.

The <vlanid> parameter must identify a valid VLAN.

Format
Mode Interface Config

all

macfilter addsrc <macaddr> <vlanid>

Port and System Setup Commands 4-19

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.4.6.1 no macfilter addsrc

This command removes a port from the source filter set for the MAC filter with the MAC
address of <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be
specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.

The <vlanid> parameter must identify a valid VLAN.

Format

no macfilter addsrc <macaddr> <vlanid>

Mode Interface Config

4.4.7 macfilter addsrc all

This command adds all interfaces to the source filter set for the MAC filter with the MAC
address of <macaddr> and <vlanid>. You must specify the <macaddr> parameter as a 6­byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The <vlanid> parameter
must identify a valid VLAN.

Format
Mode Global Config

4.4.7.1 no macfilter addsrc all

macfilter addsrc all

This command removes a port from the source filter set for the MAC filter with the MAC
address of <macaddr> and VLAN of <vlanid>. The <macaddr> parameter must be
specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.

The <vlanid> parameter must identify a valid VLAN.

Format

no macfilter addsrc all

Mode Global Config

4-20 Port and System Setup Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.4.8 bridge aging-time

This command configures the forwarding database address aging timeout in seconds. In an
IVL system, the

Default 300
Format
Mode Global Config

[fdbid | all] parameter is required.

bridge aging-time <10-1,000,000> [fdbid | all]

Seconds The

Forwarding
Database ID The forwarding database ID (

4.4.8.1 no bridge aging-time

This command sets the forwarding database address aging timeout to 300 seconds. In an
IVL system, the

[fdbid | all] parameter is required.

Format
Mode Global Config
Forwarding

Database ID Fdbid (Forwarding database ID) indicates which forwarding

<seconds> parameter must be within the range of 10 to

1,000,000 seconds.

fdbid) indicates which for-

warding database's aging timeout is being configured. Use

all option to configure the agetime of all forwarding

the
databases.

no bridge aging-time [fdbid | all]

database's aging timeout is being configured. All is used to
configure all forwarding database's agetime.

Port and System Setup Commands 4-21

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.4.9 show forwardingdb agetime

This command displays the timeout for address aging. In an IVL system, the [fdbid |

all] parameter is required.

Default all
Format

show forwardingdb agetime [fdbid | all]

Mode Privileged EXEC
Forwarding DB

ID Forwarding database ID indicates the forwarding database

whose aging timeout is to be shown. The all option is used to
display the aging timeouts associated with all forwarding
databases.

Agetime In an IVL system, this parameter displays the address aging

timeout for the associated forwarding database.

4.4.10 show mac-address-table multicast

This command displays the Multicast Forwarding Database (MFDB) information. If you
enter the command with no parameter, the entire table is displayed. You can display the
table entry for one MAC Address by specifying the MAC address as an optional
parameter.

Format
Mode Privileged EXEC

show mac-address-table multicast <macaddr>

MAC Address A multicast MAC address for which the switch has forward-

ing and or filtering information. The format is two-digit hexa­decimal numbers separated by colons, for example
01:23:45:67:89:AB. In an IVL system the MAC address will
be displayed as a MAC address and VLAN ID combination
of 8 bytes.

Type This displays the type of the entry. Static entries are those that

are configured by the end user. Dynamic entries are added to
the table as a result of a learning process or protocol.

Component The component that is responsible for this entry in the Multi-

cast Forwarding Database. Possible values are IGMP Snoop­ing, GMRP, and Static Filtering.

Description The text description of this multicast table entry.

4-22 Port and System Setup Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

Interfaces The list of interfaces that are designated for forwarding

(Fwd:) and filtering (Flt:).

Forwarding
Interfaces The resultant forwarding list is derived from combining all

the component’s forwarding interfaces and removing the
interfaces that are listed as the static filtering interfaces.

4.4.11 show mac-address-table static

This command displays the Static MAC Filtering information for all Static MAC Filters. If
you select
value for
Static MAC Filter information only for that MAC address and VLAN.

<all>, all the Static MAC Filters in the system are displayed. If you supply a

<macaddr>, you must also enter a value for <vlanid>, and the system displays

Format

show mac-address-table static {<macaddr> <vlanid>
| all}

Mode Privileged EXEC
MAC Address Is the MAC Address of the static MAC filter entry.
VLAN ID Is the VLAN ID of the static MAC filter entry.
Source Port(s) Indicates the source port filter set's slot and port(s).
Destination

Port(s) Indicates the destination port filter set's slot and port(s).

4.4.12 show mac-address-table stats

This command displays the Multicast Forwarding Database (MFDB) statistics.

Format
Mode Privileged EXEC
Total Entries Displays the total number of entries that can possibly be in

Most MFDB
Entries Ever
Used Displays the largest number of entries that have been present

Current Entries Displays the current number of entries in the MFDB.

Port and System Setup Commands 4-23

show mac-address-table stats

the Multicast Forwarding Database table.

in the Multicast Forwarding Database table. This value is also
known as the MFDB high-water mark.

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.5 DNS Client Commands

The Domain Name System (DNS) is an Internet directory service. DNS is used to translate
domain names to IP addresses. A DNS Client (often referred to as a resolver) uses a
defined protocol to obtain resource data from name servers on its network.

The DNS Client component must be globally enabled or disabled. When the client is
enabled, it provides a hostname lookup service to other components in the switch. The
client contacts one or more DNS servers to resolve a hostname to an IP address. The DNS
servers list is configured by providing an IP address for each DNS name server, and server
precedence is determined by the order in which the servers are added to this list. A default
domain name can be configured, which defines the domain to use when performing a
lookup on an unqualified hostname. Static hostname-to-address mappings can be added
and removed from the local cache.

The DNS client supports 128 entries in the DNS cache. Any applica tion component
requiring a DNS lookup may request services from the DNS client. When the DNS client
is administratively disabled the local cache is purged. Changes to the name server
configuration do not affect the cache. If a stacking switchover occurs, the new Master unit
begins with a cleared cache.

The following applications support domain name in addition to the IP address format:

Radius
DHCP Relay
SNTP
SNMP
TFTP
SYSLOG
Ping
UDP Relay

4-24 Port and System Setup Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.5.1 ip domain-lookup

To enable the IP Domain Naming System (DNS)-based host name-to-address translation,
use the ip domain-lookup global configuration command. T o disable the DNS, use the no
form of this command

Format

[no] ip domain-lookup

Mode Global Config
Default enabled

4.5.2 ip domain-name

T o define a d efault domain name (<name>) that the software uses to complete unqualified
host names (names without a dotted-decimal domain name), use the ip domain-name
global configuration command. To remove default domain name, use the no form of this
command.

Default domain used to complete unqualified host names. Do not include the initial period
that separates an unqualified name from the domain name.

<name> is a string of 1 to 255 characters.

Format

Mode Global Config

ip domain-name name
no ip domain-name

4.5.3 ip name-server

T o set the available name servers, use the ip name-server global configuration command.
<server-address> is IP addresses of the name server. Up to 8 servers can be defined in one
command, or by using multiple commands.
the order they were entered.

Format

To remove a name server, use the no form of this command.

[no] ip name-server server-address1 [server-address2 

server-address8]

Mode Global Config

Port and System Setup Commands 4-25

v1.0, October 2008

The preference of the servers is determined by

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

4.5.4 ip host

To define static host name <name> to IP address <address> mapping in the host cache,
use the ip host global configuration command. The <name> string is from 1 to 255
characters. To remove the name-to-address mapping, use the no form of this command.

Format
Mode Global Config

[no] ip host name address

4.5.5 clear host

To delete entries from the host name-to-address cache, use the clear host Privileged
EXEC command

Format clear host [name | *]
Mode Privileged EXEC Mode

.

4.5.6 show hosts

To display the default domain name, a list of name server hosts, the static and the cached
list of host names and addresses, use the show hosts EXEC command.

Format
Mode Privileged EXEC Mode

show hosts [name]

4-26 Port and System Setup Commands

v1.0, October 2008

Chapter 5

Spanning Tree Protocol Commands

This section describes the spanning tree protocol (STP) commands available in the
7200RS Series Stackable Switch CLI. STP helps prevent network loops, duplicate
messages, and network instability.

The STP Commands section includes the following topics:

• Section 5.1 “STP Configuration Commands” on page 1

• Section 5.2 “STP Show Commands” on page 10

The commands in this section are in one of two functional groups:

• Show commands display switch settings, statistics, and other information.

• Configuration commands configure features and options of the switch. For every
configuration command, there is a show command that displays the configuration
setting.

5.1 STP Configuration Commands

This section describes the commands you use to configure Spanning Tree Protocol (STP).

Note: STP is enabled by default. If STP is disabled, the system does not generate

BPDU messages.

5.1.1 spanning-tree

This command sets the spanning-tree operational mode to enabled.

Default enabled
Format
Mode Global Config

Spanning Tree Protocol Commands 5-1

spanning-tree

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

5.1.1.1 no spanning-tree

This command sets the spanning-tree operational mode to disabled. While disabled, the
spanning-tree configuration is retained and can be changed, but is not activated.

Format

no spanning-tree

Mode Global Config

5.1.2 spanning-tree bpdumigrationcheck

This command enables BPDU migration check on a given interface. The all option
enables BPDU migration check on all interfaces.

Format

spanning-tree bpdumigrationcheck {<unit/slot/port>
| all}

Mode Global Config

5.1.2.1 no spanning-tree bpdumigrationcheck

This command disables BPDU migration check on a given interface. The all option
disables BPDU migration check on all interfaces.

Format

no spanning-tree bpdumigrationcheck {<unit/slot/
port> | all}

Mode Global Config

5.1.3 spanning-tree configuration name

This command sets the Configuration Identifier Name for use in identifying the
configuration that this switch is currently using. The
characters.

Default base MAC address in hexadecimal notation
Format
Mode Global Config

5.1.3.1 no spanning-tree configuration name

spanning-tree configuration name <name>

<name> is a string of up to 32

This command resets the Configuration Identifier Name to its default.

Format

no spanning-tree configuration name

Mode Global Config

5-2 Spanning Tree Protocol Commands

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

5.1.4 spanning-tree configuration revision

This command sets the Configuration Identifier Revision Level for use in identifying the
configuration that this switch is currently using. The Configuration Identifier Revision
Level is a number in the range of 0 to 65535.

Default 0
Format

spanning-tree configuration revision <0-65535>

Mode Global Config

5.1.4.1 no spanning-tree configuration revision

This command sets the Configuration Identifier Revision Level for use in identifying the
configuration that this switch is currently using to the default value, i.e. 0.

Format

no spanning-tree configuration revision

Mode Global Config

5.1.5 spanning-tree edgeport

This command specifies that this port is an Edge Port within the common and internal
spanning tree. This allows this port to transition to Forwarding State without delay.

Format
Mode Interface Config

5.1.5.1 no spanning-tree edgeport

This command specifies that this port is not an Edge Port within the common and internal
spanning tree.

Format
Mode Interface Config

spanning-tree edgeport

no spanning-tree edgeport

5.1.6 spanning-tree edgeport all

This command specifies that every port is an Edge Port within the common and internal
spanning tree. This allows all ports to transition to Forwarding State without delay.

Format
Mode Global Config

Spanning Tree Protocol Commands 5-3

spanning-tree edgeport all

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

5.1.6.1 no spanning-tree edgeport all

This command disables Edge Port mode for all ports within the common and internal
spanning tree.

Format

spanning-tree edgeport all

Mode Global Config

5.1.7 spanning-tree forceversion

This command sets the Force Protocol Version parameter to a new value. The Force
Protocol Version can be one of the following:

• 802.1d - ST BPDUs are transmitted rather than MST BPDUs (IEEE 802.1d
functionality supported)

• 802.1w - RST BPDUs are transmitted rather than MST BPDUs (IEEE 802.1w
functionality supported)

• 802.1s - MST BPDUs are transmitted (IEEE 802.1s functionality supported)

Default 802.1s
Format

Mode Global Config

spanning-tree forceversion <802.1d | 802.1w |

802.1s>

5.1.7.1 no spanning-tree forceversion

This command sets the Force Protocol Version parameter to the default value, i.e. 802.1s.

Format

no spanning-tree forceversion

Mode Global Config

5.1.8 spanning-tree forward-time

This command sets the Bridge Forward Delay parameter to a new value for the common
and internal spanning tree. The forward-time value is in seconds within a range of 4 to 30,
with the value being greater than or equal to “(Bridge Max Age / 2) + 1”.

Default 15
Format
Mode Global Config

5-4 Spanning Tree Protocol Commands

spanning-tree forward-time <4-30>

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

5.1.8.1 no spanning-tree forward-time

This command sets the Bridge Forward Delay parameter for the common and internal
spanning tree to the default value of 15.

Format

no spanning-tree forward-time

Mode Global Config

5.1.9 spanning-tree hello-time

This command sets the Admin Hello Time parameter to a new value for the common and
internal spanning tree. The hello time
10, with the value being less than or equal to (Bridge Max Age / 2) - 1.

Default 2

<value> is in whole seconds within a range of 1 to

Format

spanning-tree hello-time <1-10>

Mode Interface Config

5.1.9.1 no spanning-tree hello-time

This command sets the admin Hello Time parameter for the common and internal
spanning tree to the default value.

Format

no spanning-tree hello-time

Mode Interface Config

5.1.10 spanning-tree max-age

This command sets the Bridge Max Age parameter to a new value for the common and
internal spanning tree. The max-age value is in seconds within a range of 6 to 40, with the
value being less than or equal to 2 x (Bridge Forward Delay - 1).

Default 20
Format
Mode Global Config

5.1.10.1 no spanning-tree max-age

This command sets the Bridge Max Age parameter for the common and internal spanning
tree to the default value of 20.

Format
Mode Global Config

spanning-tree max-age <6-40>

no spanning-tree max-age

Spanning Tree Protocol Commands 5-5

v1.0, October 2008

Command Line Interface Reference for the ProSafe 7200RS Series Layer-2 Stackable Switches

5.1.11 spanning-tree max-hops

This command sets the MSTP Max Hops parameter to a new value for the common and
internal spanning tree. The max-hops value is a range from 1 to 127.

Default 20
Format

spanning-tree max-hops <1-127>

Mode Global Config

5.1.11.1 no spanning-tree max-hops

This command sets the Bridge Max Hops parameter for the common and internal spanning
tree to the default value.

Format

no spanning-tree max-hops

Mode Global Config

5.1.12 spanning-tree mst

This command sets the Path Cost or Port Priority for this port within the multiple spanning
tree instance or in the common and internal spanning tree. If you specify an
parameter that corresponds to an existing multiple spanning tree instance, the
configurations are done for that multiple spanning tree instance. If you specify 0 (defined
as the default CIST ID) as the

<mstid>, the configurations are done for the common and

internal spanning tree instance.

<mstid>

If you specify the cost option, the command sets the path cost for this port within a
multiple spanning tree instance or the common and internal spanning tree instance,
depending on the

<mstid> parameter. You can set the path cost as a number in the range of

1 to 200000000 or auto. If you select auto the path cost value is set based on Link Speed.
If you specify the external-cost option, this command sets the external-path cost for MST

instance ‘0’ i.e. CIST instance. You can set the external cost as a number in the range of 1
to 200000000 or auto. If you specify auto, the ex ternal path cost v alue is set based on Li nk
Speed.

If you specify the port-priority option, this command sets the priority for this port within
a specific multiple spanning tree instance or the common and internal spanning tree
instance, depending on the

<mstid> parameter. The port-priority value is a number in the

range of 0 to 240 in increments of 16.

Default cost: auto; external-cost: auto; port-priority: 128
Format

5-6 Spanning Tree Protocol Commands

spanning-tree mst <mstid> {{cost <1-200000000> |
auto} |

v1.0, October 2008