NETGEAR and the NETGEAR logo are registered trademarks, and ProSafe is a trademark of NETGEAR, Inc.
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this
document are copyright Intoto, Inc.
November 2010
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
EN 55 022 Declaration of Conformance
This is to certify that the ProSafe XSM7224S Managed Stackable Switch is shielded against the generation of radio
interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by
the application of EN 55 022 Class B (CISPR 22).
Certificate of the Manufacturer/Importer
It is hereby certified that the ProSafe XSM7224S Managed Stackable Switch has been suppressed in accordance with the
conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for example,
test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please refer to the
notes in the operating instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß dasProSafe XSM7224S Managed Stackable Switch gemäß der im BMPT-AmtsblVfg 243/
1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte (z.B.
Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der
Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the Class B category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used
near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.
ii
v1.0, November 2010
Page 3
Product and Publication Details
Model Number:XSM7224S
Publication Date:November 2010
Product Family:managed switch
Product Name:ProSafe XSM7224S Managed Stackable Switch
Home or Business Product:Business
Language:English
Publication Part Number:202-10770-01
Publication Version Number1.0
v1.0, November 2010
iii
Page 4
iv
v1.0, November 2010
Page 5
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Captive Portal Local User Commands .........................................................................9-24
Captive Portal User Group Commands ........................................................................9-31
Chapter 10
Command List
viii
v1.0, November 2010
Page 9
About This Manual
This document describes command-line interface (CLI) commands you use to view and configure
XSM7224S software. You can access the CLI by using a direct connection to the serial port or by
using telnet or SSH over a remote network connection.
Note: This document contains both standalone and stacking commands.
Audience
This document is for system administrators who configure and operate systems using XSM7224S
software. It provides an understanding of the configuration options of the software.
Software engineers who integrate software into their hardware platform can also benefit from a
description of the configuration options.
This document assumes that the reader has an understanding of the software base and has read the
appropriate specification for the relevant networking device platform. It also assumes that the
reader has a basic knowledge of Ethernet and networking concepts.
Refer to the release notes for the application-level code. The release notes detail the platformspecific functionality of the Switching, Routing, SNMP, Configuration, Management, and other
packages. The suite of features the packages support is not available on all the platforms to which
software has been ported.
About the Software
The software has two purposes:
•Assist attached hardware in switching frames, based on Layer 2, 3, or 4 information contained
in the frames.
•Provide a complete device management portfolio to the network administrator.
v1.0, November 2010
ix
Page 10
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Scope
The software encompasses both hardware and software support. The software is partitioned to run
in the following processors:
•CPU – This code runs the networking device management portfolio and controls the overall
networking device hardware. It also assists in frame forwarding, as needed and specified. This
code is designed to run on multiple platforms with minimal changes from platform to
platform.
•Networking device processor – This code does the majority of the packet switching, usually at
wire speed. This code is platform dependent, and substantial changes might exist across
products.
Product Concept
Fast Ethernet and Gigabit Ethernet switching continues to evolve from high-end backbone
applications to desktop switching applications. The price of the technology continues to decline,
while performance and feature sets continue to improve. Devices that are capable of switching
Layers 2, 3, and 4 are increasingly in demand. The software provides a flexible solution to these
ever-increasing needs.
The exact functionality provided by each networking device on which the software base runs
varies depending upon the platform and requirements of the FASTPATH software.
The software includes a set of comprehensive management functions for managing both the
software and the network. You can manage the software by using one of the following three
methods:
•Command-Line Interface (CLI)
•Simple Network Management Protocol (SNMP)
•Web-based
Each of the management methods enables you to configure, manage, and control the software
locally or remotely using in-band or out-of-band mechanisms. Management is standards-based,
with configuration parameters and a private MIB providing control for functions not completely
specified in the MIBs.
Conventions, Formats, and Scope
The conventions, formats, and scope of this manual are described in the following paragraphs:
x
v1.0, November 2010
Page 11
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
•Typographical Conventions. This manual uses the following typographical conventions:
ItalicEmphasis, books, CDs, file and server names, extensions
BoldUser input, IP addresses, GUI screen text
FixedCommand prompt, CLI text, code
italicURL links
•Formats. This manual uses the following formats to highlight special messages:
Note: This format is used to highlight information of importance or special interest.
Tip: This format is used to highlight a procedure that will save time or resources.
Warning: Ignoring this type of note may result in a malfunction or damage to the
equipment.
Danger: This is a safety warning. Failure to take heed of this notice may result in
Note: Product updates are available on the NETGEAR, Inc. website at
http://kbserver.netgear.com
v1.0, November 2010
xi
Page 12
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
How to Print This Manual
To print this manual, your computer must have the free Adobe Acrobat reader installed in order to
view and print PDF files. The Acrobat reader is available on the Adobe Web site at
http://www.adobe.com.
Revision History
Part Number
202-10770-01 1.0November 2010 Product update: New firmware and new user Interface
Version
Number
DateDescription
xii
v1.0, November 2010
Page 13
Chapter 1
Using the Command-Line Interface
The command-line interface (CLI) is a text-based way to manage and monitor the system. You can
access the CLI by using a direct serial connection or by using a remote logical connection with
telnet or SSH.
This chapter describes the CLI syntax, conventions, and modes. It contains the following sections:
•“Command Syntax” on page 1-1
•“Command Conventions” on page 1-2
•“Common Parameter Values” on page 1-3
•“Unit/Slot/Port Naming Convention” on page 1-3
•“Using the “No” Form of a Command” on page 1-4
•“Managed Switch Modules” on page 1-5
•“Command Modes” on page 1-5
•“Command Completion and Abbreviation” on page 1-9
•“CLI Error Messages” on page 1-9
•“CLI Line-Editing Conventions” on page 1-10
•“Using CLI Help” on page 1-11
•“Accessing the CLI” on page 1-12
Command Syntax
A command is one or more words that might be followed by one or more parameters. Parameters
can be required or optional values.
Some commands, such as show network or clear vlan, do not require parameters. Other
commands, such as network parms, require that you supply a value after the command. You
must type the parameter values in a specific order, and optional parameters follow required
parameters. The following example describes the network parms command syntax:
Format network parms <ipaddr> <netmask> [gateway]
1-1
v1.0, November 2010
Page 14
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
•network parms is the command name.
•<ipaddr> and <netmask> are parameters and represent required values that you must
enter after you type the command keywords.
•[gateway] is an optional parameter, so you are not required to enter a value in place of the
parameter.
The CLI Command Reference lists each command by the command name and provides a brief
description of the command. Each command reference also contains the following information:
•Format shows the command keywords and the required and optional parameters.
•Mode identifies the command mode you must be in to access the command.
•Default shows the default value, if any, of a configurable setting on the device.
The show commands also contain a description of the information that the command shows.
Command Conventions
In this document, the command name is in bold font. Parameters are in italic font. You
must replace the parameter name with an appropriate value, which might be a name or number.
Parameters are order dependent.
The parameters for a command might include mandatory values, optional values, or keyword
choices. Table 1 describes the conventions this document uses to distinguish between value types.
Table 1. Parameter Conventions
SymbolExampleDescription
<> angle brackets<value>Indicates that you must enter a value in place of the
brackets and text inside them.
[] square brackets[value]Indicates an optional parameter that you can enter in
place of the brackets and text inside them.
{} curly braces{choice1 |
choice2}
| Vertical barschoice1 | choice2Separates the mutually exclusive choices.
[{}] Braces within
square brackets
[{choice1 |
choice2}]
Using the Command-Line Interface1-2
Indicates that you must select a parameter from the list of
choices.
Indicates a choice within an optional element.
v1.0, November 2010
Page 15
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Common Parameter Values
Parameter values might be names (strings) or numbers.To use spaces as part of a name parameter,
enclose the name value in double quotes. For example, the expression “System Name with
Spaces” forces the system to accept the spaces. Empty strings (““) are not valid user-defined
strings. Table 2 describes common parameter values and value formatting.
Table 2. Parameter Descriptions
ParameterDescription
ipaddrThis parameter is a valid IP address. You can enter the IP address in the following
In addition to these formats, the CLI accepts decimal, hexadecimal and octal formats
through the following input formats (where n is any valid hexadecimal, octal or decimal
number):
0xn (CLI assumes hexadecimal format)
0n (CLI assumes octal format with leading zeros)
n (CLI assumes decimal format)
ipv6-addressFE80:0000:0000:0000:020F:24FF:FEBF:DBCB, or
FE80:0:0:0:20F:24FF:FEBF:DBCB, or
FE80::20F24FF:FEBF:DBCB, or
FE80:0:0:0:20F:24FF:128:141:49:32
For additional information, refer to RFC 3513.
Interface or
unit/slot/port
Logical InterfaceRepresents a logical slot and port number. This is applicable in the case of a port-
Character stringsUse double quotation marks to identify character strings, for example, “System Name
Valid slot and port number separated by forward slashes. For example, 0/1 represents
slot number 0 and port number 1.
channel (LAG). You can use the logical unit/slot/port to configure the port-channel.
with Spaces”. An empty string (“”) is not valid.
Unit/Slot/Port Naming Convention
Managed switch software references physical entities such as cards and ports by using a unit/slot/
port naming convention. The software also uses this convention to identify certain logical entities,
such as Port-Channel interfaces.
Using the Command-Line Interface1-3
v1.0, November 2010
Page 16
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
The slot number has two uses. In the case of physical ports, it identifies the card containing the
ports. In the case of logical and CPU ports it also identifies the type of interface or port.
Table 3. Type of Slots
Slot TypeDescription
Physical slot numbers Physical slot numbers begin with zero, and are allocated up to the maximum
number of physical slots.
Logical slot numbers Logical slots immediately follow physical slots and identify port-channel (LAG) or
router interfaces.
CPU slot numbersThe CPU slots immediately follow the logical slots.
The port identifies the specific physical port or logical interface being managed on a given slot.
Table 4. Type of Ports
Port TypeDescription
Physical PortsThe physical ports for each slot are numbered sequentially starting from zero.
Logical InterfacesPort-channel or Link Aggregation Group (LAG) interfaces are logical interfaces
that are only used for bridging functions.
VLAN routing interfaces are only used for routing functions.
Loopback interfaces are logical interfaces that are always up.
Tunnel interfaces are logical point-to-point links that carry encapsulated packets.
CPU portsCPU ports are handled by the driver as one or more physical entities located on
physical slots.
Note: In the CLI, loopback and tunnel interfaces do not use the unit/slot/port format. To
specify a loopback interface, you use the loopback ID. To specify a tunnel
interface, you use the tunnel ID.
Using the “No” Form of a Command
The no keyword is a specific form of an existing command and does not represent a new or
distinct command. Almost every configuration command has a no form. In general, use the no
form to reverse the action of a command or reset a value back to the default. For example, the no
Using the Command-Line Interface1-4
v1.0, November 2010
Page 17
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
shutdown configuration command reverses the shutdown of an interface. Use the command
without the keyword no to re-enable a disabled feature or to enable a feature that is disabled by
default. Only the configuration commands are available in the no form.
Managed Switch Modules
Managed switch software consists of flexible modules that can be applied in various combinations
to develop advanced Layer 2/3/4+ products. The commands and command modes available on
your switch depend on the installed modules. Additionally, for some show commands, the output
fields might change based on the modules included in the software.
The software suite includes the following modules:
•Switching (Layer 2)
•Quality of Service
•Management (CLI, Web UI, and SNMP)
•IPv6 Management—Allows management of the device through an IPv6 through an IPv6
address without requiring the IPv6 Routing package in the system. The management address
can be associated with the network port (front-panel switch ports), a routine interface (port or
VLAN) and the Service port.
•Stacking
Not all modules are available for all platforms or software releases.
Command Modes
The CLI groups commands into modes according to the command function. Each of the command
modes supports specific software commands. The commands in one mode are not available until
you switch to that particular mode, with the exception of the User EXEC mode commands. You
can execute the User EXEC mode commands in the Privileged EXEC mode.
The command prompt changes in each command mode to help you identify the current mode.
Table 5 describes the command modes and the prompts visible in that mode.
Note: The command modes available on your switch depend on the software modules
that are installed. For example, a switch that does not support BGPv4 does not have
the Router BGPv4 Command Mode.
Using the Command-Line Interface1-5
v1.0, November 2010
Page 18
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Table 5. CLI Command Modes
Command ModePromptMode Description
User EXECSwitch>Contains a limited set of commands to view
basic system information.
Privileged EXECSwitch#Allows you to issue any EXEC command, enter
the VLAN mode, or enter the Global
Configuration mode.
Global ConfigSwitch (Config)#Groups general setup commands and permits
you to make modifications to the running
configuration.
VLAN ConfigSwitch (Vlan)#Groups all the VLAN commands.
Interface Config Switch (Interface <unit/slot/port>)#
Switch (Config-router)#Contains the BGP4 configuration commands.
Config
MAC Access-list
Switch (Config-mac-access-list)#Allows you to create a MAC Access-List and to
Config
Manages the operation of an interface and
provides access to the router interface
configuration commands.
Use this mode to set up a physical port for a
specific logical connection operation.
telnet settings and console interface settings.
commands.
matching commands. The class match
commands specify Layer 2, Layer 3, and
general match criteria.
commands for IPv4.
commands for IPv6.
enter the mode containing MAC Access-List
configuration commands.
Using the Command-Line Interface1-6
v1.0, November 2010
Page 19
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Table 5. CLI Command Modes (continued)
Command ModePromptMode Description
TACACS ConfigSwitch (Tacacs)#Contains commands to configure properties for
the TACACS servers.
DHCP Pool
Config
DHCPv6 Pool
Config
Switch (Config dhcp-pool)#Contains the DHCP server IP address pool
configuration commands.
Switch (Config dhcp6-pool)#Contains the DHCPv6 server IPv6 address pool
configuration commands.
Stack Global
Config Mode
ARP Access-List
Config Mode
Switch (Config stack)#Allows you to access the Stack Global Config
Mode.
Switch (Config-arp-access-list)#Contains commands to add ARP ACL rules in
an ARP Access List.
Table 6 explains how to enter or exit each mode.
Table 6. CLI Mode Access and Exit
Command ModeAccess MethodExit or Access Previous Mode
User EXECThis is the first level of access. To exit, enter logout.
Privileged EXECFrom the User EXEC mode, enter
enable.
Global ConfigFrom the Privileged EXEC mode,
enter configure.
VLAN ConfigFrom the Privileged EXEC mode,
enter vlan database.
Interface Config From the Global Config mode,
enter
interface <unit/slot/port>
or interface loopback <id>
or interface tunnel <id>
Line ConfigFrom the Global Config mode,
enter
lineconfig.
Policy-Map
Config
Policy-Class-Map
Config
From the Global Config mode,
enter
policy-map <name> in.
From the Policy Map mode enter
class.
To exit to the User EXEC mode, enter exit or
press Ctrl-Z.
To exit to the Privileged EXEC mode, enter exit,
or press Ctrl-Z.
To exit to the Privileged EXEC mode, enter exit,
or press Ctrl-Z.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Policy Map mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
Using the Command-Line Interface1-7
v1.0, November 2010
Page 20
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Table 6. CLI Mode Access and Exit (continued)
Command ModeAccess MethodExit or Access Previous Mode
Class-Map
Config
Ipv6-Class-Map
Config
Router OSPF
Config
Router OSPFv3
Config
Router RIP
Config
Router BGP
Config
MAC Access-list
Config
TACACS ConfigFrom the Global Config mode,
DHCP Pool
Config
From the Global Config mode,
enter
class-map, and specify the
optional keyword ipv4 to specify
the Layer 3 protocol for this class.
See “class-map” on page 5-12 for
more information.
From the Global Config mode,
enter
class-map and specify the
optional keyword ipv6 to specify
the Layer 3 protocol for this class.
See “class-map” on page 5-12 for
more information.
From the Global Config mode,
enter
router ospf.
From the Global Config mode,
enter
ipv6 router ospf.
From the Global Config mode,
enter
router rip.
From the Global Config mode,
enter
router bgp <asnumber>.
From the Global Config mode,
enter
mac access-list extended
<name>.
enter
tacacs-server host
<ip-addr>, where <ip-addr> is
the IP address of the TACACS
server on your network.
From the Global Config mode,
enter
ip dhcp pool<pool-name>.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
Using the Command-Line Interface1-8
v1.0, November 2010
Page 21
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Table 6. CLI Mode Access and Exit (continued)
Command ModeAccess MethodExit or Access Previous Mode
DHCPv6 Pool
Config
Stack Global
Config Mode
ARP Access-List
Config Mode
From the Global Config mode,
enter
ip dhcpv6 pool<pool-name>.
From the Global Config mode,
enter the stack command.
From the Global Config mode,
enter the arp access-list command.
To exit to the Global Config mode, enter exit. To
return to the Privileged EXEC mode, enter Ctrl-Z.
To exit to the Global Config mode, enter the exit
command. To return to the Privileged EXEC
mode, enter Ctrl-Z.
To exit to the Global Config mode, enter the
exit command. To return to the Privileged
EXEC mode, enter Ctrl-Z.
Command Completion and Abbreviation
Command completion finishes spelling the command when you type enough letters of a command
to uniquely identify the command keyword. Once you have entered enough letters, press the
SPACEBAR or TAB key to complete the word.
Command abbreviation allows you to execute a command when you have entered there are enough
letters to uniquely identify the command. You must enter all of the required keywords and
parameters before you enter the command.
CLI Error Messages
If you enter a command and the system is unable to execute it, an error message appears. Table 7
describes the most common CLI error messages.
Table 7. CLI Error Messages
Message TextDescription
% Invalid input detected at '^' marker.Indicates that you entered an incorrect or unavailable command.
The carat (^) shows where the invalid text is detected. This
message also appears if any of the parameters or values are not
recognized.
Using the Command-Line Interface1-9
v1.0, November 2010
Page 22
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Table 7. CLI Error Messages
Message TextDescription
Command not found / Incomplete
command. Use ? to list commands.
Ambiguous commandIndicates that you did not enter enough letters to uniquely identify
Indicates that you did not enter the required keywords or values.
the command.
CLI Line-Editing Conventions
Table 8 describes the key combinations you can use to edit commands or increase the speed of
command entry. You can access this list from the CLI by entering help from the User or
Privileged EXEC modes.
Table 8. CLI Editing Conventions
Key SequenceDescription
DEL or BackspaceDelete previous character
Ctrl-AGo to beginning of line
Ctrl-EGo to end of line
Ctrl-FGo forward one character
Ctrl-BGo backward one character
Ctrl-DDelete current character
Ctrl-U, XDelete to beginning of line
Ctrl-KDelete to end of line
Ctrl-WDelete previous word
Ctrl-TTranspose previous character
Ctrl-PGo to previous line in history buffer
Ctrl-RRewrites or pastes the line
Ctrl-NGo to next line in history buffer
Ctrl-YPrints last deleted character
Ctrl-QEnables serial flow
Ctrl-SDisables serial flow
Ctrl-ZReturn to root command prompt
Tab, <SPACE>Command-line completion
Using the Command-Line Interface1-10
v1.0, November 2010
Page 23
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Table 8. CLI Editing Conventions (continued)
Key SequenceDescription
ExitGo to next lower command prompt
?List available commands, keywords, or parameters
Using CLI Help
Enter a question mark (?) at the command prompt to display the commands available in the current
mode.
(switch) >?
enable Enter into user privilege mode.
help Display help for various special keys.
logout Exit this session. Any unsaved changes are lost.
ping Send ICMP echo packets to a specified IP address.
quit Exit this session. Any unsaved changes are lost.
show Display Switch Options and Settings.
telnet Telnet to a remote host.
Enter a question mark (?) after each word you enter to display available command keywords or
parameters.
(switch) #network ?
javamode Enable/Disable.
mgmt_vlan Configure the Management VLAN ID of the switch.
parms Configure Network Parameters of the router.
protocol Select DHCP, BootP, or None as the network config
protocol.
If the help output shows a parameter in angle brackets, you must replace the parameter with a
value.
(switch) #network parms ?
<ipaddr> Enter the IP address.
If there are no additional command keywords or parameters, or if additional parameters are
optional, the following message appears in the output:
<cr> Press Enter to execute the command
You can also enter a question mark (?) after typing one or more characters of a word to list the
available command or parameters that begin with the letters, as shown in the following example:
Using the Command-Line Interface1-11
v1.0, November 2010
Page 24
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
(switch) #show m?
mac-addr-table mac-address-table monitor
Accessing the CLI
You can access the CLI by using a direct console connection or by using a telnet or SSH
connection from a remote management host.
For the initial connection, you must use a direct connection to the console port. You cannot access
the system remotely until the system has an IP address, subnet mask, and default gateway. You can
set the network configuration information manually, or you can configure the system to accept
these settings from a BOOTP or DHCP server on your network. For more information, see
“Network Interface Commands” on page 7-4.
Using the Command-Line Interface1-12
v1.0, November 2010
Page 25
Stacking Commands
The Stacking Commands chapter includes the following sections:
•“Dedicated Port Stacking” on page 2-1
•“Front Panel Stacking Commands” on page 2-10
•“Non-Stop Forwarding Commands” on page 2-12
•“Stack Firmware Synchronization Commands” on page 2-14
Note: The commands in this chapter are in two functional groups:
•Show commands display switch settings, statistics, and other information.
•Configuration commands configure features and options of the switch. For every
configuration command, there is a show command that displays the
configuration setting.
Chapter 2
The Primary Management Unit is the unit that controls the stack.
Dedicated Port Stacking
This section describes the commands you use to configure dedicated port stacking.
stack
This command sets the mode to Stack Global Config.
v1.0, November 2010
2-1
Page 26
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Formatstack
ModeGlobal Config
member
This command configures a switch. The <unit> is the switch identifier of the switch to be
added/removed from the stack. The <switchindex> is the index into the database of the
supported switch types, indicating the type of the switch being preconfigured. The switch index is
a 32-bit integer. This command is executed on the Primary Management Unit.
Formatmember <unit> <switchindex>
ModeStack Global Config
Note: Switch index can be obtained by executing the show supported switchtype
command in User EXEC mode.
no member
This command removes a switch from the stack. The <unit> is the switch identifier of the
switch to be removed from the stack. This command is executed on the Primary Management Unit.
Formatno member <unit>
ModeStack Global Config
switch priority
This command configures the ability of a switch to become the Primary Management Unit. The
<unit> is the switch identifier. The <value> is the preference parameter that allows the user
to specify, priority of one backup switch over another. The range for priority is 1 to 15. The switch
with the highest priority value will be chosen to become the Primary Management Unit if the
Stacking Commands2-2
v1.0, November 2010
Page 27
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
active Primary Management Unit fails. The switch priority defaults to the hardware management
preference value 1. Switches that do not have the hardware capability to become the Primary
Management Unit are not eligible for management.
This command changes the switch identifier for a switch in the stack. The <oldunit> is the
current switch identifier on the switch whose identifier is to be changed. The <newunit> is the
updated value of the switch identifier. Upon execution, the switch will be configured with the
configuration information for the new switch, if any. The old switch configuration information will
be retained, however the old switch will be operationally unplugged. This command is executed on
the Primary Management Unit.
Note: If the management unit is renumbered, then the running configuration is no longer
applied (i.e. the stack acts as if the configuration had been cleared)
This command moves the Primary Management Unit functionality from one switch to another.
The <fromunit> is the switch identifier on the current Primary Management Unit. The
<tounit> is the switch identifier on the new Primary Management Unit. Upon execution, the
entire stack (including all interfaces in the stack) is unconfigured and reconfigured with the
configuration on the new Primary Management Unit. After the reload is complete, all stack
management capability must be performed on the new Primary Management Unit. To preserve the
current configuration across a stack move, execute the copy system:running-config
Stacking Commands2-3
v1.0, November 2010
Page 28
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
nvram:startup-config (in Privileged EXEC) command before performing the stack move.
A stack move causes all routes and layer 2 addresses to be lost. This command is executed on the
Primary Management Unit. The system prompts you to confirm the management move.
Formatmovemanagement <fromunit> <tounit>
ModeStack Global Config
slot
This command configures a slot in the system. The <unit/slot> is the slot identifier of the
slot. The <cardindex> is the index into the database of the supported card types, indicating the
type of the card being preconfigured in the specified slot. The card index is a 32-bit integer. If a
card is currently present in the slot that is unconfigured, the configured information will be deleted
and the slot will be re-configured with default information for the card.
Note: Card index can be obtained by executing show supported cardtype command in
User EXEC mode.
Stacking Commands2-4
v1.0, November 2010
Page 29
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
set slot disable
This command configures the administrative mode of the slot(s). If you specify [all], the
command is applied to all slots, otherwise the command is applied to the slot identified by
<unit/slot>.
If a card or other module is present in the slot, this administrative mode will effectively be applied
to the contents of the slot. If the slot is empty, this administrative mode will be applied to any
module that is inserted into the slot. If a card is disabled, all the ports on the device are
operationally disabled and shown as “unplugged” on management screens.
This command unconfigures the administrative mode of the slot(s). If you specify [all], the
command removes the configuration from all slots, otherwise the configuration is removed from
the slot identified by <unit/slot>.
If a card or other module is present in the slot, this administrative mode removes the configuration
from the contents of the slot. If the slot is empty, this administrative mode removes the
configuration from any module inserted into the slot. If a card is disabled, all the ports on the
device are operationally disabled and shown as “unplugged” on management screens.
Formatno set slot disable [<unit/slot> | all]
ModeGlobal Config
set slot power
This command configures the power mode of the slot(s) and allows power to be supplied to a card
located in the slot. If you specify [all], the command is applied to all slots, otherwise the
command is applied to the slot identified by <unit/slot>.
Stacking Commands2-5
v1.0, November 2010
Page 30
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Use this command when installing or removing cards. If a card or other module is present in this
slot, the power mode is applied to the contents of the slot. If the slot is empty, the power mode is
applied to any card inserted into the slot.
Formatset slot power [<unit/slot> | all]
ModeGlobal Config
no set slot power
This command unconfigures the power mode of the slot(s) and prohibits power from being
supplied to a card located in the slot. If you specify [all], the command prohibits power to all
slots, otherwise the command prohibits power to the slot identified by <unit/slot>.
Use this command when installing or removing cards. If a card or other module is present in this
slot, power is prohibited to the contents of the slot. If the slot is empty, power is prohibited to any
card inserted into the slot.
Formatno set slot power [<unit/slot> | all]
ModeGlobal Config
reload (Stack)
This command resets the entire stack or the identified <unit>. The <unit> is the switch
identifier. The system prompts you to confirm that you want to reset the switch.
Formatreload [<unit>]
ModeUser EXEC
show slot
This command displays information about all the slots in the system or for a specific slot.
Formatshow slot [<unit/slot>]
ModeUser EXEC
Stacking Commands2-6
v1.0, November 2010
Page 31
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
SlotThe slot identifier in a <unit/slot> format.
Slot StatusThe slot is empty, full, or has encountered an error
Admin StateThe slot administrative mode is enabled or disabled.
Power StateThe slot power mode is enabled or disabled.
Configured Card
Model Identifier
PluggableCards are pluggable or non-pluggable in the slot.
Power DownIndicates whether the slot can be powered down.
The model identifier of the card preconfigured in the slot. Model Identifier is a 32character field used to identify a card.
If you supply a value for <unit/slot>, the following additional information appears:
TermDefinition
Inserted Card
Model Identifier
Inserted Card
Description
Configured Card
Description
The model identifier of the card inserted in the slot. Model Identifier is a 32-character
field used to identify a card. This field is displayed only if the slot is full.
The card description. This field is displayed only if the slot is full.
The card description of the card preconfigured in the slot.
show supported cardtype
This commands displays information about all card types or specific card types supported in the
system.
If you do not supply a value for <cardindex>, the following output appears:
TermDefinition
Card Index (CID)The index into the database of the supported card types. This index is used when
preconfiguring a slot.
Card Model
Identifier
The model identifier for the supported card type.
Stacking Commands2-7
v1.0, November 2010
Page 32
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
If you supply a value for <cardindex>, the following output appears:
TermDefinition
Card TypeThe 32-bit numeric card type for the supported card.
Model IdentifierThe model identifier for the supported card type.
Card DescriptionThe description for the supported card type.
show switch
This command displays information about all units in the stack or a single unit when you specify
the unit value.
Formatshow switch [<unit>]
ModePrivileged EXEC
TermDefinition
SwitchThe unit identifier assigned to the switch.
When you do not specify a value for <unit>, the following information appears:
TermDefinition
Management
Status
Preconfigured
Model Identifier
Plugged-In Model
Identifier
Switch StatusThe switch status. Possible values for this state are: OK, Unsup ported, Code
Code VersionThe detected version of code on this switch.
Stacking Commands2-8
Indicates whether the switch is the Primary Management Unit, a stack member, or the
status is unassigned.
The model identifier of a preconfigured switch ready to join the stack. The Model
Identifier is a 32-character field assigned by the device manufacturer to identify the
device.
The model identifier of the switch in the stack. Model Identifier is a 32-character field
assigned by the device manufacturer to identify the device.
Mismatch, Config Mismatch, or Not Present.
v1.0, November 2010
Page 33
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
When you specify a value for <unit>, the following information appears:
TermDefinition
Management
Status
Hardware
Management
Preference
Admin
Management
Preference
Switch TypeThe 32-bit numeric switch type.
Model IdentifierThe model identifier for this switch. Model Identifier is a 32-character field assigned by
Switch StatusThe switch status. Possible values are OK, Unsupported, Code Mismatch, Config
Switch
Description
Expected Code
Version
Detected Code
Version
Detected Code in
Flash
Up TimeThe system up time.
Indicates whether the switch is the Primary Management Unit, a stack member, or the
status is unassigned.
The hardware management preference of the switch. The hardware management
preference can be disabled or unassigned.
The administrative management preference value assigned to the switch. This
preference value indicates how likely the switch is to be chosen as the Primary
Management Unit.
the device manufacturer to identify the device.
Mismatch, or Not Present.
The switch description.
The expected code version.
The version of code running on this switch. If the switch is not present and the data is
from pre-configuration, then the code version is “None”.
The version of code that is currently stored in FLASH memory on the switch. This code
executes after the switch is reset. If the switch is not present and the data is from preconfiguration, then the code version is “None”.
show supported switchtype
This commands displays information about all supported switch types or a specific switch type.
InterfaceThe slot and port numbers.
Tx Data RateTrashing data rate in megabits per second on the stacking port.
Tx Error RatePlatform-specific number of transmit errors per second.
Stacking Commands2-11
v1.0, November 2010
Page 36
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
Tx Total ErrorPlatform-specific number of total transmit errors since power-up.
Rx Data RateReceive data rate in megabits per second on the stacking port.
Rx Error RatePlatform-specific number of receive errors per second.
Rx Total ErrorsPlatform-specific number of total receive errors since power-up.
show stack-port diag
This command shows front panel stacking diagnostics for each port and is only intended for Field
Application Engineers (FAEs) and developers. An FAE will advise on the necessity to run this
command and capture this information.
Formatshow stack-port diag
ModePrivileged EXEC
TermDefinition
UnitThe unit number.
InterfaceThe slot and port numbers.
Diagnostic Entry180 character string used for diagnostics.
Diagnostic Entry280 character string used for diagnostics.
Diagnostic Entry380 character string used for diagnostics.
Non-Stop Forwarding Commands
Non-stop forwarding allows the stack units to continue to forward packets if the stack management
unit restarts because of a power failure, hardware failure, or software fault.
Stacking Commands2-12
v1.0, November 2010
Page 37
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
nsf
This command enables non-stop forwarding.
DefaultEnabled
Formatnsf
ModeStack Global Config
no nsf
This command disables non-stop forwarding.
Formatno nsf
ModeStack Global Config
show nsf
This command shows the status of non-stop forwarding.
Stack firmware synchronization provides an automatic mechanism to synchronize the firmware on
stack members whose firmware version differs from the version running on the stack manager.
This operation can result in either an upgrade or downgrade of firmware on the mismatched stack
member. However, this operation does not attempt to synchronize the stack to the latest firmware
in the stack.
During firmware transfer and upgrade, operations such as code download and move management
can result in undesirable behavior, such as firmware corruption on a code mismatched stack
member. As a result, you receive an error if you try to access the following operations from the
user interface during stack firmware synchronization:
•Move management
•Unit renumbering
•Code download
Stacking Commands2-14
v1.0, November 2010
Page 39
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
•Delete image
•Update bootcode
•Clear config
A reboot operation is allowed during stack firmware synchronization.
If the firmware is corrupted during stack firmware synchronization, manual intervention by the
administrator is required to restore the switch to working condition.
During stack firmware synchronization, traps are generated on start, completion, or failure.
Note:
•Non-deterministic upgrade behavior
On bootup, the image that gets synchronized depends on the one that becomes the manager.
Which code version the new stack synchronizes to is fully deterministic, but might not be
obvious to the user as it depends entirely on which unit becomes the manager. This might be
decided by a MAC address comparison. If the administrator wants a particular version to be
used by the stack, he should first ensure that this particular unit becomes stack manager.
•Bootcode Upgrades
Bootcode upgrades are not initiated by the stack firmware synchronization.
boot auto-copy-sw
This command enables or disables stack firmware synchronization.
This command enables downgrading the firmware version on the stack member if the firmware
version on the manager is older than the firmware version on the member.
This chapter describes the switching commands available in the managed switch CLI.
The Switching Commands chapter includes the following sections:
•“Port Configuration Commands” on page 3-2
•“show port description” on page 3-9
•“VLAN Commands” on page 3-32
•“Double VLAN Commands” on page 3-47
•“Voice VLAN Commands” on page 3-50
•“Provisioning (IEEE 802.1p) Commands” on page 3-52
•“Protected Ports Commands” on page 3-53
•“Private Group Commands” on page 3-56
•“GVRP Commands” on page 3-61
•“GMRP Commands” on page 3-63
•“Port-Based Network Access Control Commands” on page 3-66
•“Storm-Control Commands” on page 3-82
•“Port-Channel/LAG (802.3ad) Commands” on page 3-94
•“Port Mirroring” on page 3-115
•“Static MAC Filtering” on page 3-118
•“DHCP Snooping Configuration Commands” on page 3-123
•“Dynamic ARP Inspection Commands” on page 3-134
•“IGMP Snooping Configuration Commands” on page 3-142
•“IGMP Snooping Querier Commands” on page 3-151
•“Port Security Commands” on page 3-157
•“LLDP (802.1AB) Commands” on page 3-161
v1.0, November 2010
3-1
Page 43
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
•“LLDP-MED Commands” on page 3-172
•“Denial of Service Commands” on page 3-183
•“MAC Database Commands” on page 3-195
•“ISDP Commands” on page 3-197
•“Priority-Based Flow control commands” on page 3-203
Warning: The commands in this chapter are in one of three functional groups:
•Show commands display switch settings, statistics, and other information.
•Configuration commands configure features and options of the switch. For every
configuration command, there is a show command that displays the
configuration setting.
•Clear commands clear some or all of the settings to factory defaults.
Port Configuration Commands
This section describes the commands you use to view and configure port settings.
interface
This command gives you access to the Interface Config mode, which allows you to enable or
modify the operation of an interface (port).
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
interface range
This command gives you access to a range of port interfaces, allowing the same port configuration
to be applied to a set of ports.
Formatinterface range <unit/slot/port>-<unit/slot/port>
ModeGlobal Config
interface vlan
This command gives you access to the vlan virtual interface mode, which allows certain port
configurations (for example, the IP address) to be applied to the VLAN interface. Type a question
mark (?) after entering the interface configuration mode to see the available options.
Formatinterface vlan <vlan id>
ModeGlobal Config
interface lag
This command gives you access to the LAG (link aggregation, or port channel) virtual interface,
which allows certain port configurations to be applied to the LAG interface. Type a question mark
(?) after entering the interface configuration mode to see the available options.
Note: The IP address cannot be assigned to a LAG virtual interface. The interface must
be put under a VLAN group and an IP address assigned to the VLAN group.
Formatinterface lag <lag id>
ModeGlobal Config
auto-negotiate
This command enables automatic negotiation on a port.
Defaultenabled
Switching Commands3-3
v1.0, November 2010
Page 45
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Formatauto-negotiate
ModeInterface Config
no auto-negotiate
This command disables automatic negotiation on a port.
Note: Automatic sensing is disabled when automatic negotiation is disabled.
auto-negotiate all
Formatno auto-negotiate
ModeInterface Config
This command enables automatic negotiation on all ports.
Defaultenabled
Formatauto-negotiate all
ModeGlobal Config
no auto-negotiate all
This command disables automatic negotiation on all ports.
Formatno auto-negotiate all
ModeGlobal Config
Switching Commands3-4
v1.0, November 2010
Page 46
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
description
Use this command to create an alpha-numeric description of the port.
Use the mtu command to set the maximum transmission unit (MTU) size, in bytes, for frames that
ingress or egress the interface. You can use the mtu command to configure jumbo frame support
for physical and port-channel (LAG) interfaces. For the standard 7000 series implementation, the
MTU size is a valid integer between 1522 - 9216 for tagged packets and a valid integer between
1518 - 9216 for untagged packets.
Note: To receive and process packets, the Ethernet MTU must include any extra bytes
that Layer-2 headers might require. To configure the IP MTU size, which is the
maximum size of the IP packet (IP Header + IP payload), see “ip mtu” on page 4-
100h100BASE-T half duplex
100f100BASE-T full duplex
10h10BASE-T half duplex
10f10BASE-T full duplex
Definition
speed all
This command sets the speed and duplex setting for all interfaces.
Formatspeed all {<100 | 10> <half-duplex | full-duplex>}
ModeGlobal Config
Acceptable
Values
100h100BASE-T half duplex
100f100BASE-T full duplex
10h10BASE-T half duplex
10f10BASE-T full duplex
Definition
Switching Commands3-7
v1.0, November 2010
Page 49
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
show port
This command displays port information.
Formatshow port {<unit/slot/port> | all}
ModePrivileged EXEC
TermDefinition
InterfaceValid slot and port number separated by forward slashes.
TypeIf not blank, this field indicates that this port is a special type of port. The possible
values are:
• Mirror - this port is a monitoring port. For more information, see “Port Mirroring” on
page 3-115.
• PC Mbr- this port is a member of a port-channel (LAG).
• Probe - this port is a probe port.
Admin ModeThe Port control administration state. The port must be enabled in order for it to be
allowed into the network. - May be enabled or disabled. The factory default is enabled.
Physical ModeThe desired port speed and duplex mode. If auto-negotiation support is selected, then
the duplex mode and speed is set from the auto-negotiation process. Note that the
maximum capability of the port (full duplex -100M) is advertised. Otherwise, this object
determines the port's duplex mode and transmission rate. The factory default is Auto.
Physical StatusThe port speed and duplex mode.
Link StatusThe Link is up or down.
Link TrapThis object determines whether or not to send a trap when link status changes. The
factory default is enabled.
LACP ModeLACP is enabled or disabled on this port.
show port protocol
This command displays the Protocol-Based VLAN information for either the entire system, or for
the indicated group.
Formatshow port protocol {<groupid> | all}
ModePrivileged EXEC
Switching Commands3-8
v1.0, November 2010
Page 50
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
Group NameThe group name of an entry in the Protocol-based VLAN table.
Group IDThe group identifier of the protocol group.
Protocol(s)The type of protocol(s) for this group.
VLANThe VLAN associated with this Protocol Group.
Interface(s)Lists the unit/slot/port interface(s) that are associated with this Protocol Group.
show port description
This command displays the port description for every port.
Formatshow port description <unit/slot/port>
ModePrivileged EXEC
TermDefinition
InterfaceValid slot and port number separated by forward slashes
DescriptionShows the port description configured via the “description” command
show port status
This command displays the Protocol-Based VLAN information for either the entire system, or for
the indicated group.
Formatshow port status {<unit/slot/port> | all}
ModePrivileged EXEC
TermDefinition
InterfaceValid slot and port number separated by forward slashes.
Media Type“Copper” or “Fiber” for combo port.
STP ModeIndicate the spanning tree mode of the port.
Switching Commands3-9
v1.0, November 2010
Page 51
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
Physical ModeEither “Auto” or fixed speed and duplex mode.
Physical StatusThe actual speed and duplex mode.
Link StatusWhether the link is Up or Down.
Loop StatusWhether the port is in loop state or not.
Partner Flow
Control
Whether the remote side is using flow control or not.
Switching Commands3-10
v1.0, November 2010
Page 52
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Spanning Tree Protocol (STP) Commands
This section describes the commands you use to configure Spanning Tree Protocol (STP). STP
helps prevent network loops, duplicate messages, and network instability.
spanning-tree
This command sets the spanning-tree operational mode to enabled.
This command sets the spanning-tree operational mode to disabled. While disabled, the spanningtree configuration is retained and can be changed, but is not activated.
Formatno spanning-tree
ModeGlobal Config
spanning-tree bpdufilter default
Use this command to enable BPDU Filter on all the edge port interfaces.
Use this command to force a transmission of rapid spanning tree (RSTP) and multiple spanning
tree (MSTP) BPDUs. Use the <unit/slot/port> parameter to transmit a BPDU from a
specified interface, or use the all keyword to transmit BPDUs from all interfaces. This command
forces the BPDU transmission when you execute it, so the command does not change the system
configuration or have a “no” version.
This command sets the Configuration Identifier Name for use in identifying the configuration that
this switch is currently using. The <name> is a string of up to 32 characters.
Defaultbase MAC address in hexadecimal notation
Formatspanning-tree configuration name
ModeGlobal Config
<name>
no spanning-tree configuration name
This command resets the Configuration Identifier Name to its default.
Formatno spanning-tree configuration name
ModeGlobal Config
Switching Commands3-13
v1.0, November 2010
Page 55
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
spanning-tree configuration revision
This command sets the Configuration Identifier Revision Level for use in identifying the
configuration that this switch is currently using. The Configuration Identifier Revision Level is a
number in the range of 0 to 65535.
This command sets the Configuration Identifier Revision Level for use in identifying the
configuration that this switch is currently using to the default value.
This command specifies that this port is an Edge Port within the common and internal spanning
tree. This allows this port to transition to Forwarding State without delay.
This command sets the Bridge Forward Delay parameter to a new value for the common and
internal spanning tree. The forward-time value is in seconds within a range of 4 to 30, with the
value being greater than or equal to “(Bridge Max Age / 2) + 1”.
This command selects whether loop guard or root guard is enabled on an interface. If neither is
enabled, then the port operates in accordance with the multiple spanning tree protocol.
enables the propagation of received topology change notifications and topology
.
v1.0, November 2010
Page 58
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
no spanning-tree tcnguard
This command
disables the propagation of received topology change notifications and topology
changes to other ports.
Formatno spanning-tree tcnguard
ModeGlobal Config
spanning-tree max-age
This command sets the Bridge Max Age parameter to a new value for the common and internal
spanning tree. The max-age value is in seconds within a range of 6 to 40, with the value being less
than or equal to 2 x (Bridge Forward Delay - 1).
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
no spanning-tree max-hops
This command sets the Bridge Max Hops parameter for the common and internal spanning tree to
the default value.
Formatno spanning-tree max-hops
ModeGlobal Config
spanning-tree mst
This command sets the Path Cost or Port Priority for this port within the multiple spanning tree
instance or in the common and internal spanning tree. If you specify an <mstid> parameter that
corresponds to an existing multiple spanning tree instance, the configurations are done for that
multiple spanning tree instance. If you specify 0 (defined as the default CIST ID) as the
<mstid>, the configurations are done for the common and internal spanning tree instance.
If you specify the cost option, the command sets the path cost for this port within a multiple
spanning tree instance or the common and internal spanning tree instance, depending on the
<mstid> parameter. You can set the path cost as a number in the range of 1 to 200000000 or
auto. If you select auto the path cost value is set based on Link Speed.
If you specify the external-cost option, this command sets the external-path cost for MST instance
‘0’ i.e. CIST instance. You can set the external cost as a number in the range of 1 to 200000000 or
auto. If you specify auto, the external path cost value is set based on Link Speed.
If you specify the port-priority option, this command sets the priority for this port within a
specific multiple spanning tree instance or the common and internal spanning tree instance,
depending on the <mstid> parameter. The port-priority value is a number in the range of 0 to 240
in increments of 16.
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
no spanning-tree mst
This command sets the Path Cost or Port Priority for this port within the multiple spanning tree
instance, or in the common and internal spanning tree to the respective default values. If you
specify an <mstid> parameter that corresponds to an existing multiple spanning tree instance,
you are configuring that multiple spanning tree instance. If you specify 0 (defined as the default
CIST ID) as the <mstid>, you are configuring the common and internal spanning tree instance.
If the you specify cost, this command sets the path cost for this port within a multiple spanning
tree instance or the common and internal spanning tree instance, depending on the <mstid>
parameter, to the default value, i.e. a path cost value based on the Link Speed.
If you specify external-cost, this command sets the external path cost for this port for mst ‘0’
instance, to the default value, i.e. a path cost value based on the Link Speed.
If you specify port-priority, this command sets the priority for this port within a specific multiple
spanning tree instance or the common and internal spanning tree instance, depending on the
<mstid> parameter, to the default value.
This command adds a multiple spanning tree instance to the switch. The parameter <mstid> is a
number within a range of 1 to 4094, that corresponds to the new instance ID to be added. The
maximum number of multiple instances supported by the switch is 4.
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
no spanning-tree mst instance
This command removes a multiple spanning tree instance from the switch and reallocates all
VLANs allocated to the deleted instance to the common and internal spanning tree. The parameter
<mstid> is a number that corresponds to the desired existing multiple spanning tree instance to
be removed.
This command sets the bridge priority for a specific multiple spanning tree instance. The
parameter <mstid> is a number that corresponds to the desired existing multiple spanning tree
instance. The priority value is a number within a range of 0 to 61440 in increments of 4096.
If you specify 0 (defined as the default CIST ID) as the <mstid>, this command sets the Bridge
Priority parameter to a new value for the common and internal spanning tree. The bridge priority
value is a number within a range of 0 to 61440. The twelve least significant bits are masked
according to the 802.1s specification. This causes the priority to be rounded down to the next
lower valid priority.
This command sets the bridge priority for a specific multiple spanning tree instance to the default
value. The parameter <mstid> is a number that corresponds to the desired existing multiple
spanning tree instance.
If 0 (defined as the default CIST ID) is passed as the <mstid>, this command sets the Bridge
Priority parameter for the common and internal spanning tree to the default value.
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
spanning-tree mst vlan
This command adds an association between a multiple spanning tree instance and one or more
VLANs so that the VLAN(s) are no longer associated with the common and internal spanning tree.
The parameter <mstid> is a number that corresponds to the desired existing multiple spanning
tree instance. The vlan range can be specified as a list or as a range of values. To specify a list of
VLANs, enter a list of VLAN IDs, each separated by a comma with no spaces in between. To
specify a range of VLANs, separate the beginning and ending VLAN ID with a dash ("-").
This command removes an association between a multiple spanning tree instance and one or more
VLANs so that the VLAN(s) are again associated with the common and internal spanning tree.
This command sets the Administrative Switch Port State for this port to enabled.
Defaultdisabled
Formatspanning-tree port mode
ModeInterface Config
no spanning-tree port mode
This command sets the Administrative Switch Port State for this port to disabled.
Formatno spanning-tree port mode
ModeInterface Config
Switching Commands3-21
v1.0, November 2010
Page 63
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
spanning-tree port mode all
This command sets the Administrative Switch Port State for all ports to enabled.
Defaultdisabled
Formatspanning-tree port mode all
ModeGlobal Config
no spanning-tree port mode all
This command sets the Administrative Switch Port State for all ports to disabled.
Formatno spanning-tree port mode all
ModeGlobal Config
spanning-tree edgeport all
This command specifies that every port is an Edge Port within the common and internal spanning
tree. This allows all ports to transition to Forwarding State without delay.
Formatspanning-tree edgeport all
ModeGlobal Config
no spanning-tree edgeport all
This command disables Edge Port mode for all ports within the common and internal spanning
tree.
Formatno spanning-tree edgeport all
ModeGlobal Config
Switching Commands3-22
v1.0, November 2010
Page 64
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
spanning-tree bpduforwarding
Normally a switch will not forward Spanning Tree Protocol (STP) BPDU packets if STP is
disabled. However, if in some network setup, the user wishes to forward BDPU packets received
from other network devices, this command can be used to enable the forwarding.
This command displays spanning tree settings for the common and internal spanning tree. The
following details are displayed.
Formatshow spanning-tree
Mode• Privileged EXEC
• User EXEC
TermDefinition
Bridge PrioritySpecifies the bridge priority for the Common and Internal Spanning tree (CST). The
value lies between 0 and 61440. It is displayed in multiples of 4096.
Bridge Identifier The bridge identifier for the CST. It is made up using the bridge priority and the base
MAC address of the bridge.
Time Since
Topology
Change
Switching Commands3-23
Time in seconds.
v1.0, November 2010
Page 65
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
Topology
Change Count
Topology
Change
Designated
Root
Root Path Cost Value of the Root Path Cost parameter for the common and internal spanning tree.
Root Port
Identifier
Root Port Max
Age
Root Port
Bridge Forward
Delay
Hello TimeConfigured value of the parameter for the CST.
Bridge Hold
Time
Bridge Max
Hops
CST Regional
Root
Regional Root
Path Cost
Associated
FIDs
Associated
VLANs
Number of times changed.
Boolean value of the Topology Change parameter for the switch indicating if a topology
change is in progress on any port assigned to the common and internal spanning tree.
The bridge identifier of the root bridge. It is made up from the bridge priority and the base
MAC address of the bridge.
Identifier of the port to access the Designated Root for the CST
Derived value.
Derived value.
Minimum time between transmission of Configuration Bridge Protocol Data Units
(BPDUs).
Bridge max-hops count for the device.
Bridge Identifier of the CST Regional Root. It is made up using the bridge priority and the
base MAC address of the bridge.
Path Cost to the CST Regional Root.
List of forwarding database identifiers currently associated with this instance.
List of VLAN IDs currently associated with this instance.
show spanning-tree brief
This command displays spanning tree settings for the bridge. The following information appears.
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
Bridge PriorityConfigured value.
Bridge IdentifierThe bridge identifier for the selected MST instance. It is made up using the
bridge priority and the base MAC address of the bridge.
Bridge Max AgeConfigured value.
Bridge Max HopsBridge max-hops count for the device.
Bridge Hello TimeConfigured value.
Bridge Forward DelayConfigured value.
Bridge Hold TimeMinimum time between transmission of Configuration Bridge Protocol Data
Units (BPDUs).
show spanning-tree interface
This command displays the settings and parameters for a specific switch port within the common
and internal spanning tree. The <unit/slot/port> is the desired switch port. The following
details are displayed on execution of the command.
TermDefinition
Hello TimeAdmin hello time for this port.
Port ModeEnabled or disabled.
BPDU Guard EffectEnabled or disabled.
Root GuardEnabled or disabled.
Loop GuardEnabled or disabled.
TCN GuardEnable or disable the propagation of received topology change notifications and
topology changes to other ports.
BPDU Filter ModeEnabled or disabled.
BPDU Flood ModeEnabled or disabled.
Auto EdgeTo enable or disable the feature that causes a port that has not seen a BPDU for
‘edge delay’ time, to become an edge port and transition to forwarding faster.
Port Up Time Since
Counters Last Cleared
Time since port was reset, displayed in days, hours, minutes, and seconds.
<unit/slot/port>
Switching Commands3-25
v1.0, November 2010
Page 67
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
STP BPDUs
Transmitted
STP BPDUs ReceivedSpanning Tree Protocol Bridge Protocol Data Units received.
RSTP BPDUs
Transmitted
RSTP BPDUs Received Rapid Spanning Tree Protocol Bridge Protocol Data Units received.
MSTP BPDUs
Transmitted
MSTP BPDUs Received Multiple Spanning Tree Protocol Bridge Protocol Data Units received.
Spanning Tree Protocol Bridge Protocol Data Units sent.
Rapid Spanning Tree Protocol Bridge Protocol Data Units sent.
Multiple Spanning Tree Protocol Bridge Protocol Data Units sent.
show spanning-tree mst port detailed
This command displays the detailed settings and parameters for a specific switch port within a
particular multiple spanning tree instance. The parameter <mstid> is a number that corresponds
to the desired existing multiple spanning tree instance. The <unit/slot/port> is the desired
switch port.
Formatshow spanning-tree mst port detailed <mstid> <unit/slot/port>
Mode• Privileged EXEC
• User EXEC
TermDefinition
MST Instance ID The ID of the existing MST instance.
Port IdentifierThe port identifier for the specified port within the selected MST instance. It is made up
from the port priority and the interface number of the port.
Port PriorityThe priority for a particular port within the selected MST instance. The port priority is
displayed in multiples of 16.
Port Forwarding
State
Port RoleEach enabled MST Bridge Port receives a Port Role for each spanning tree. The port
Auto-Calculate
Port Path Cost
Port Path CostConfigured value of the Internal Port Path Cost parameter.
Current spanning tree state of this port.
role is one of the following values: Root Port, Designated Port, Alternate Port, Backup
Port, Master Port or Disabled Port
Indicates whether auto calculation for port path cost is enabled.
Switching Commands3-26
v1.0, November 2010
Page 68
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
Designated
Root
Root Path Cost The path cost to get to the root bridge for this instance. The root path cost is zero if the
Designated
Bridge
Designated Port
Identifier
Loop
Inconsistent
State
Transitions Into
Loop
Inconsistent
State
Transitions Out
of Loop
Inconsistent
State
The Identifier of the designated root for this port.
bridge is the root bridge for that instance.
Bridge Identifier of the bridge with the Designated Port.
Port on the Designated Bridge that offers the lowest cost to the LAN.
The current loop inconsistent state of this port in this MST instance. When in loop
inconsistent state, the port has failed to receive BPDUs while configured with loop guard
enabled. Loop inconsistent state maintains the port in a "blocking" state until a
subsequent BPDU is received.
The number of times this interface has transitioned into loop inconsistent state.
The number of times this interface has transitioned out of loop inconsistent state.
If you specify 0 (defined as the default CIST ID) as the <mstid>, this command displays the
settings and parameters for a specific switch port within the common and internal spanning tree.
The <unit/slot/port> is the desired switch port. In this case, the following are displayed.
TermDefinition
Port IdentifierThe port identifier for this port within the CST.
Port PriorityThe priority of the port within the CST.
Port Forwarding
State
Port RoleThe role of the specified interface within the CST.
Auto-Calculate
Port Path Cost
Port Path CostThe configured path cost for the specified interface.
Auto-Calculate
External Port
Path Cost
The forwarding state of the port within the CST.
Indicates whether auto calculation for port path cost is enabled or not (disabled).
Indicates whether auto calculation for external port path cost is enabled.
Switching Commands3-27
v1.0, November 2010
Page 69
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
External Port
Path Cost
Designated
Root
Root Path Cost The root path cost to the LAN by the port.
Designated
Bridge
Designated Port
Identifier
Topology
Change
Acknowledgem
ent
Hello TimeThe hello time in use for this port.
Edge PortThe configured value indicating if this port is an edge port.
Edge Port
Status
Point To Point
MAC Status
CST Regional
Root
CST Internal
Root Path Cost
Loop
Inconsistent
State
Transitions Into
Loop
Inconsistent
State
Transitions Out
of Loop
Inconsistent
State
The cost to get to the root bridge of the CIST across the boundary of the region. This
means that if the port is a boundary port for an MSTP region, then the external path cost
is used.
Identifier of the designated root for this port within the CST.
The bridge containing the designated port.
Port on the Designated Bridge that offers the lowest cost to the LAN.
Value of flag in next Configuration Bridge Protocol Data Unit (BPDU) transmission
indicating if a topology change is in progress for this port.
The derived value of the edge port status. True if operating as an edge port; false
otherwise.
Derived value indicating if this port is part of a point to point link.
The regional root identifier in use for this port.
The internal root path cost to the LAN by the designated external port.
The current loop inconsistent state of this port in this MST instance. When in loop
inconsistent state, the port has failed to receive BPDUs while configured with loop guard
enabled. Loop inconsistent state maintains the port in a "blocking" state until a
subsequent BPDU is received.
The number of times this interface has transitioned into loop inconsistent state.
The number of times this interface has transitioned out of loop inconsistent state.
Switching Commands3-28
v1.0, November 2010
Page 70
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
show spanning-tree mst port summary
This command displays the settings of one or all ports within the specified multiple spanning tree
instance. The parameter <mstid> indicates a particular MST instance. The parameter {<unit/slot/port> | all} indicates the desired switch port or all ports.
If you specify 0 (defined as the default CIST ID) as the <mstid>, the status summary displays for
one or all ports within the common and internal spanning tree.
TermDefinition
MST Instance ID The MST instance associated with this port.
InterfaceValid slot and port number separated by forward slashes.
STP ModeIndicates whether spanning tree is enabled or disabled on the port.
TypeCurrently not used.
STP StateThe forwarding state of the port in the specified spanning tree instance.
Port RoleThe role of the specified port within the spanning tree.
DescIndicates whether the port is in loop inconsistent state or not. This field is blank if the loop
guard feature is not available.
show spanning-tree mst port summary active
This command displays settings for the ports within the specified multiple spanning tree instance
that are active links.
Formatshow spanning-tree mst port summary
Mode• Privileged EXEC
• User EXEC
TermDefinition
mstidThe ID of the existing MST instance.
Interfaceunit/slot/port
Switching Commands3-29
v1.0, November 2010
<mstid> active
Page 71
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
STP ModeIndicates whether spanning tree is enabled or disabled on the port.
TypeCurrently not used.
STP StateThe forwarding state of the port in the specified spanning tree instance.
Port RoleThe role of the specified port within the spanning tree.
DescIndicates whether the port is in loop inconsistent state or not. This field is blank if the loop
guard feature is not available.
show spanning-tree mst summary
This command displays summary information about all multiple spanning tree instances in the
switch. On execution, the following details are displayed.
This command sets the Management VLAN ID to the default.
Formatno network mgmt_vlan
ModePrivileged EXEC
Switching Commands3-32
v1.0, November 2010
Page 74
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
vlan
This command creates a new VLAN and assigns it an ID. The ID is a valid VLAN identification
number (ID 1 is reserved for the default VLAN). The vlan-list contains VlanId's in range <14093>. Separate non-consecutive IDs with ',' and no spaces and no zeros in between the range; Use
'-' for range.
Formatvlan <vlan-list>
ModeVLAN Config
no vlan
This command deletes an existing VLAN. The ID is a valid VLAN identification number (ID 1 is
reserved for the default VLAN). The vlan-list contains VlanId's in range <1-4093>. Separate nonconsecutive IDs with ',' and no spaces and no zeros in between the range; Use '-' for range.
Formatno vlan <vlan-list>
ModeVLAN Config
vlan acceptframe
This command sets the frame acceptance mode per interface. For VLAN Only mode, untagged
frames or priority frames received on this interface are discarded. For Admit All mode, untagged
frames or priority frames received on this interface are accepted and assigned the value of the
interface VLAN ID for this port. With either option, VLAN tagged frames are forwarded in
accordance with the IEEE 802.1Q VLAN Specification.
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
no vlan acceptframe
This command resets the frame acceptance mode for the interface to the default value.
Formatno vlan acceptframe
ModeInterface Config
vlan ingressfilter
This command enables ingress filtering. If ingress filtering is disabled, frames received with
VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and
forwarded to ports that are members of that VLAN.
This command disables ingress filtering. If ingress filtering is disabled, frames received with
VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and
forwarded to ports that are members of that VLAN.
Formatno vlan ingressfilter
ModeInterface Config
vlan makestatic
This command changes a dynamically created VLAN (one that is created by GVRP registration) to
a static VLAN (one that is permanently configured and defined). The ID is a valid VLAN
identification number. VLAN range is 2-4093.
Formatvlan makestatic <2-4093>
ModeVLAN Config
Switching Commands3-34
v1.0, November 2010
Page 76
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
vlan name
This command changes the name of a VLAN. The name is an alphanumeric string of up to 32
characters, and the ID is a valid VLAN identification number. ID range is 1-4093.
Default• VLAN ID 1 - default
• other VLANS - blank string
Formatvlan name <1-4093> <name>
ModeVLAN Config
no vlan name
This command sets the name of a VLAN to a blank string.
Formatno vlan name <1-4093>
ModeVLAN Config
vlan participation
This command configures the degree of participation for a specific interface in a VLAN. The ID is
a valid VLAN identification number, and the interface is a valid interface number.
Formatvlan participation {exclude | include | auto} <1-4093>
ModeInterface Config
Participation options are:
Participation
Options
includeThe interface is always a member of this VLAN. This is equivalent to registration fixed.
excludeThe interface is never a member of this VLAN. This is equivalent to registration
autoThe interface is dynamically registered in this VLAN by GVRP. The interface will not
Switching Commands3-35
Definition
forbidden.
participate in this VLAN unless a join request is received on this interface. This is
equivalent to registration normal.
v1.0, November 2010
Page 77
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
vlan participation all
This command configures the degree of participation for all interfaces in a VLAN. The ID is a
valid VLAN identification number.
Formatvlan participation all {exclude | include | auto} <1-4093>
ModeGlobal Config
You can use the following participation options:
Participation
Options
includeThe interface is always a member of this VLAN. This is equivalent to registration fixed.
excludeThe interface is never a member of this VLAN. This is equivalent to registration
autoThe interface is dynamically registered in this VLAN by GVRP. The interface will not
Definition
forbidden.
participate in this VLAN unless a join request is received on this interface. This is
equivalent to registration normal.
vlan port acceptframe all
This command sets the frame acceptance mode for all interfaces.
Defaultall
Formatvlan port acceptframe all {vlanonly | all}
ModeGlobal Config
The modes defined as follows:
ModeDefinition
VLAN Only
mode
Admit All mode Untagged frames or priority frames received on this interface are accepted and assigned
Untagged frames or priority frames received on this interface are discarded.
the value of the interface VLAN ID for this port.
With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q
VLAN Specification.
Switching Commands3-36
v1.0, November 2010
Page 78
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
no vlan port acceptframe all
This command sets the frame acceptance mode for all interfaces to Admit All. For Admit All
mode, untagged frames or priority frames received on this interface are accepted and assigned the
value of the interface VLAN ID for this port. With either option, VLAN tagged frames are
forwarded in accordance with the IEEE 802.1Q VLAN Specification.
Formatno vlan port acceptframe all
ModeGlobal Config
vlan port ingressfilter all
This command enables ingress filtering for all ports. If ingress filtering is disabled, frames
received with VLAN IDs that do not match the VLAN membership of the receiving interface are
admitted and forwarded to ports that are members of that VLAN.
Defaultdisabled
Formatvlan port ingressfilter all
ModeGlobal Config
no vlan port ingressfilter all
This command disables ingress filtering for all ports. If ingress filtering is disabled, frames
received with VLAN IDs that do not match the VLAN membership of the receiving interface are
admitted and forwarded to ports that are members of that VLAN.
Formatno vlan port ingressfilter all
ModeGlobal Config
vlan port pvid all
This command changes the VLAN ID for all interface.
Default1
Formatvlan port pvid all <1-4093>
ModeGlobal Config
Switching Commands3-37
v1.0, November 2010
Page 79
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
no vlan port pvid all
This command sets the VLAN ID for all interfaces to 1.
Formatno vlan port pvid all
ModeGlobal Config
vlan port tagging all
This command configures the tagging behavior for all interfaces in a VLAN to enabled. If tagging
is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as
untagged frames. The ID is a valid VLAN identification number.
Formatvlan port tagging all <1-4093>
ModeGlobal Config
no vlan port tagging all
This command configures the tagging behavior for all interfaces in a VLAN to disabled. If tagging
is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification
number.
Formatno vlan port tagging all
ModeGlobal Config
vlan protocol group
This command adds protocol-based VLAN groups to the system. When it is created, the protocol
group will be assigned a unique number (1-128) that will be used to identify the group in
subsequent commands.
Formatvlan protocol group <1-128>
ModeGlobal Config
Switching Commands3-38
v1.0, November 2010
Page 80
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
no vlan protocol group
This command removes a protocol group.
Formatno vlan protocol group <1-128>
ModeGlobal Config
vlan protocol group name
This command assigns a name to a protocol-based VLAN groups. The groupname variable can be
a character string of 0 to 16 characters.
Formatvlan protocol
ModeGlobal Config
group name <1-128> <groupname>
no vlan protocol group name
This command removes the name from a protocol-based VLAN groups.
Formatno vlan protocol
ModeGlobal Config
group name <1-128>
vlan protocol group add protocol
This command adds the protocol to the protocol-based VLAN identified by groupid. Agroup may
have more than one protocol associated with it. Each interface and protocolcombination can only
be associated with one group. If adding a protocol to a group causes any conflicts with interfaces
currently associated with the group, this command fails and the protocol is not added to the group.
The possible values for protocol-list includes the keywords ip, arp, and ipx and hexadecimal or
decimal values ranging from 0x0600 (1536) to 0xFFFF (65535). The protocol list can accept up to
16 protocols separated by a comma.
Defaultnone
Formatvlan protocol group add protocol <groupid> ethertype {<protocol-
list>|arp|ip|ipx}
ModeGlobal Config
Switching Commands3-39
v1.0, November 2010
Page 81
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
no vlan protocol group add protocol
This command removes the <protocol> from this protocol-based VLAN group that is
identified by this <groupid>. The possible values for protocol are ip, arp, and ipx.
Formatno vlan protocol group add protocol <groupid> ethertype {<protocol-
list>|arp|ip|ipx}
ModeGlobal Config
protocol group
This command attaches a <vlanid> to the protocol-based VLAN identified by <groupid>.
A group may only be associated with one VLAN at a time, however the VLAN association can be
changed.
Defaultnone
Formatprotocol group <groupid> <vlanid>
ModeVLAN Config
no protocol group
This command removes the <vlanid> from this protocol-based VLAN group that is identified
by this <groupid>.
Formatno protocol group <groupid> <vlanid>
ModeVLAN Config
protocol vlan group
This command adds the physical interface to the protocol-based VLAN identified by
<groupid>. You can associate multiple interfaces with a group, but you can only associate each
interface and protocol combination with one group. If adding an interface to a group causes any
conflicts with protocols currently associated with the group, this command fails and the
interface(s) are not added to the group.
Switching Commands3-40
v1.0, November 2010
Page 82
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
Defaultnone
Formatprotocol vlan group <groupid>
ModeInterface Config
no protocol vlan group
This command removes the interface from this protocol-based VLAN group that is identified by
this <groupid>.
Formatno protocol vlan group <groupid>
ModeInterface Config
protocol vlan group all
This command adds all physical interfaces to the protocol-based VLAN identified by
<groupid>. You can associate multiple interfaces with a group, but you can only associate each
interface and protocol combination with one group. If adding an interface to a group causes any
conflicts with protocols currently associated with the group, this command will fail and the
interface(s) will not be added to the group.
Defaultnone
Formatprotocol vlan group all <groupid>
ModeGlobal Config
no protocol vlan group all
This command removes all interfaces from this protocol-based VLAN group that is identified by
this <groupid>.
Formatno protocol vlan group all <groupid>
ModeGlobal Config
Switching Commands3-41
v1.0, November 2010
Page 83
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
This command configures the tagging behavior for a specific interface in a VLAN to enabled. If
tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is
transmitted as untagged frames. The vlan-list contains VlanId's in range <1-4093>. Separate nonconsecutive IDs with ',' and no spaces and no zeros in between the range; Use '-' for range.
This command configures the tagging behavior for a specific interface in a VLAN to disabled. If
tagging is disabled, traffic is transmitted as untagged frames. The vlan-list contains VlanId's in
range <1-4093>. Separate non-consecutive IDs with ',' and no spaces and no zeros in between the
range; Use '-' for range.
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
vlan association subnet
This command associates a VLAN to a specific IP-subnet.
Formatvlan association subnet <ipaddr> <netmask> <1-4093>
ModeVLAN Config
no vlan association subnet
This command removes association of a specific IP-subnet to a VLAN.
Formatno vlan association subnet <ipaddr> <netmask>
ModeVLAN Config
vlan association mac
This command associates a MAC address to a VLAN.
Formatvlan association mac
ModeVLAN database
<macaddr> <1-4093>
no vlan association mac
This command removes the association of a MAC address to a VLAN.
Formatno vlan association mac
ModeVLAN database
Switching Commands3-43
<macaddr>
v1.0, November 2010
Page 85
show vlan
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
This command displays a list of all configured VLAN
Formatshow vlan
Mode• Privileged EXEC
• User EXEC
TermDefinition
VLAN IDThere is a VLAN Identifier (VID) associated with each VLAN. The range of the VLAN ID
is 1 to 4093.
VLAN NameA string associated with this VLAN as a convenience. It can be up to 32 alphanumeric
characters long, including blanks. The default is blank. VLAN ID 1 always has a name of
“Default.” This field is optional.
VLAN TypeType of VLAN, which can be Default (VLAN ID = 1) or static (one that is configured and
permanently defined), or Dynamic (one that is created by GVRP registration).
.
show vlan <vlanid>
This command displays detailed information, including interface information, for a specific
VLAN. The ID is a valid VLAN identification number.
Formatshow vlan <vlanid>
Mode• Privileged EXEC
• User EXEC
TermDefinition
VLAN IDThere is a VLAN Identifier (VID) associated with each VLAN. The range of the VLAN ID
is 1 to 3965.
VLAN NameA string associated with this VLAN as a convenience. It can be up to 32 alphanumeric
characters long, including blanks. The default is blank. VLAN ID 1 always has a name of
“Default.” This field is optional.
VLAN TypeType of VLAN, which can be Default (VLAN ID = 1) or static (one that is configured and
permanently defined), or Dynamic (one that is created by GVRP registration).
InterfaceValid slot and port number separated by forward slashes. It is possible to set the
parameters for all ports by using the selectors on the top line.
Switching Commands3-44
v1.0, November 2010
Page 86
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
CurrentThe degree of participation of this port in this VLAN. The permissible values are:
• Include - This port is always a member of this VLAN. This is equivalent to registration
fixed in the IEEE 802.1Q standard.
• Exclude - This port is never a member of this VLAN. This is equivalent to registration
forbidden in the IEEE 802.1Q standard.
• Autodetect - To allow the port to be dynamically registered in this VLAN via GVRP. The
port will not participate in this VLAN unless a join request is received on this port. This
is equivalent to registration normal in the IEEE 802.1Q standard.
ConfiguredThe configured degree of participation of this port in this VLAN. The permissible values
are:
• Include - This port is always a member of this VLAN. This is equivalent to registration
fixed in the IEEE 802.1Q standard.
• Exclude - This port is never a member of this VLAN. This is equivalent to registration
forbidden in the IEEE 802.1Q standard.
• Autodetect - To allow the port to be dynamically registered in this VLAN via GVRP. The
port will not participate in this VLAN unless a join request is received on this port. This
is equivalent to registration normal in the IEEE 802.1Q standard.
TaggingThe tagging behavior for this port in this VLAN.
• Tagged - Transmit traffic for this VLAN as tagged frames.
• Untagged - Transmit traffic for this VLAN as untagged frames.
show vlan brief
This command displays a list of all configured VLANs.
Formatshow vlan brief
Mode• Privileged EXEC
• User EXEC
TermDefinition
VLAN IDThere is a VLAN Identifier (vlanid) associated with each VLAN. The range of the VLAN
ID is 1 to 3965.
VLAN NameA string associated with this VLAN as a convenience. It can be up to 32 alphanumeric
characters long, including blanks. The default is blank. VLAN ID 1 always has a name of
“Default.” This field is optional.
VLAN TypeType of VLAN, which can be Default (VLAN ID = 1) or static (one that is configured and
permanently defined), or a Dynamic (one that is created by GVRP registration).
Switching Commands3-45
v1.0, November 2010
Page 87
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
show vlan port
This command displays VLAN port information.
Formatshow vlan port {<unit/slot/port> | all}
Mode• Privileged EXEC
• User EXEC
TermDefinition
InterfaceValid slot and port number separated by forward slashes. It is possible to set the
parameters for all ports by using the selectors on the top line.
Port VLAN IDThe VLAN ID that this port will assign to untagged frames or priority tagged frames
received on this port. The value must be for an existing VLAN. The factory default is 1.
Acceptable
Frame Types
Ingress
Filtering
GVRPMay be enabled or disabled.
Default Priority The 802.1p priority assigned to tagged packets arriving on the port.
The types of frames that may be received on this port. The options are 'VLAN only' and
'Admit All'. When set to 'VLAN only', untagged frames or priority tagged frames received
on this port are discarded. When set to 'Admit All', untagged frames or priority tagged
frames received on this port are accepted and assigned the value of the Port VLAN ID for
this port. With either option, VLAN tagged frames are forwarded in accordance to the
802.1Q VLAN specification.
May be enabled or disabled. When enabled, the frame is discarded if this port is not a
member of the VLAN with which this frame is associated. In a tagged frame, the VLAN is
identified by the VLAN ID in the tag. In an untagged frame, the VLAN is the Port VLAN ID
specified for the port that received this frame. When disabled, all frames are forwarded in
accordance with the 802.1Q VLAN bridge specification. The factory default is disabled.
show vlan association subnet
This command displays the VLAN associated with a specific configured IP-Address and net mask.
If no IP address and net mask are specified, the VLAN associations of all the configured IPsubnets are displayed.
Formatshow vlan association subnet [<ipaddr> <netmask>]
ModePrivileged EXEC
Switching Commands3-46
v1.0, November 2010
Page 88
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
IP SubnetThe IP address assigned to each interface.
IP MaskThe subnet mask.
VLAN IDThere is a VLAN Identifier (VID) associated with each VLAN.
show vlan association mac
This command displays the VLAN associated with a specific configured MAC address. If no
MAC address is specified, the VLAN associations of all the configured MAC addresses are
displayed.
Formatshow vlan association mac [<macaddr>]
ModePrivileged EXEC
TermDefinition
MAC AddressA MAC address for which the switch has forwarding and or filtering information. The
format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for example
01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as 8 bytes.
VLAN IDThere is a VLAN Identifier (VID) associated with each VLAN.
Double VLAN Commands
This section describes the commands you use to configure double VLAN (DVLAN). Double
VLAN tagging is a way to pass VLAN traffic from one customer domain to another through a
Metro Core in a simple and cost effective manner. The additional tag on the traffic helps
differentiate between customers in the MAN while preserving the VLAN identification of the
individual customers when they enter their own 802.1Q domain.
dvlan-tunnel ethertype
This command configures the ether-type for all interfaces. The ether-type may have the values of
802.1Q, vMAN, or custom. If the ether-type has a value of custom, the optional value of the
custom ether type must be set to a value from 0 to 65535.
Switching Commands3-47
v1.0, November 2010
Page 89
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
no mode dvlan-tunnel
This command is used to disable Double VLAN Tunneling on the specified interface. By default,
Double VLAN Tunneling is disabled.
Formatno mode dvlan-tunnel
ModeInterface Config
show dot1q-tunnel
Use this command without the optional parameters to display all interfaces enabled for Double
VLAN Tunneling. Use the optional parameters to display detailed information about Double
VLAN Tunneling for the specified interface or all interfaces.
TermDefinition
InterfaceValid slot and port number separated by forward slashes.
ModeThe administrative mode through which Double VLAN Tunneling can be enabled or
disabled. The default value for this field is disabled.
EtherTypeA 2-byte hex EtherType to be used as the first 16 bits of the DVLAN tunnel. There are
three different EtherType tags. The first is 802.1Q, which represents the commonly used
value of 0x8100. The second is vMAN, which represents the commonly used value of
0x88A8. If EtherType is not one of these two values, then it is a custom tunnel value,
representing any value in the range of 0 to 65535.
show dvlan-tunnel
Use this command without the optional parameters to display all interfaces enabled for Double
VLAN Tunneling. Use the optional parameters to display detailed information about Double
VLAN Tunneling for the specified interface or all interfaces.
Switching Commands3-49
v1.0, November 2010
Page 91
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
InterfaceValid slot and port number separated by forward slashes.
ModeThe administrative mode through which Double VLAN Tunneling can be enabled or
disabled. The default value for this field is disabled.
EtherTypeA 2-byte hex EtherType to be used as the first 16 bits of the DVLAN tunnel. There are
three different EtherType tags. The first is 802.1Q, which represents the commonly used
value of 0x8100. The second is vMAN, which represents the commonly used value of
0x88A8. If EtherType is not one of these two values, then it is a custom tunnel value,
representing any value in the range of 0 to 65535.
Voice VLAN Commands
This section describes the commands you use for Voice VLAN. Voice VLAN enables switch ports
to carry voice traffic with defined priority so as to enable separation of voice and data traffic
coming onto the port. The benefits of using Voice VLAN is to ensure that the sound quality of an
IP phone could be safeguarded from deteriorating when the data traffic on the port is high.
Also the inherent isolation provided by VLANs ensures that inter-VLAN traffic is under
management control and that network- attached clients cannot initiate a direct attack on voice
components. QoS-based on IEEE 802.1P class of service (CoS) uses classification and scheduling
to sent network traffic from the switch in a predictable manner. The system uses the source MAC
of the traffic traveling through the port to identify the IP phone data flow.
voice vlan (Global Config)
Use this command to enable the Voice VLAN capability on the switch.
When the interface parameter is not specified, only the global mode of the Voice VLAN is
displayed.
TermDefinition
Administrative
Mode
The Global Voice VLAN mode.
When the interface is specified:
.
TermDefinition
Voice VLAN Interface Mode The admin mode of the Voice VLAN on the interface.
Voice VLAN IDThe Voice VLAN ID
Voice VLAN PriorityThe do1p priority for the Voice VLAN on the port.
Voice VLAN UntaggedThe tagging option for the Voice VLAN traffic.
Voice VLAN CoS OverrideThe Override option for the voice traffic arriving on the port.
Voice VLAN StatusThe operational status of Voice VLAN on the port.
Provisioning (IEEE 802.1p) Commands
This section describes the commands you use to configure provisioning, which allows you to
prioritize ports.
Switching Commands3-52
v1.0, November 2010
Page 94
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
vlan port priority all
This command configures the port priority assigned for untagged packets for all ports presently
plugged into the device. The range for the priority is 0-7. Any subsequent per port configuration
will override this configuration setting.
Formatvlan port priority all <priority>
ModeGlobal Config
vlan priority
This command configures the default 802.1p port priority assigned for untagged packets for a
specific interface. The range for the priority is 0–7.
This section describes commands you use to configure and view protected ports on a switch.
Protected ports do not forward traffic to each other, even if they are on the same VLAN. However,
protected ports can forward traffic to all unprotected ports in their group. Unprotected ports can
forward traffic to both protected and unprotected ports. Ports are unprotected by default.
If an interface is configured as a protected port, and you add that interface to a Port Channel or
Link Aggregation Group (LAG), the protected port status becomes operationally disabled on the
interface, and the interface follows the configuration of the LAG port. However, the protected port
configuration for the interface remains unchanged. Once the interface is no longer a member of a
LAG, the current configuration for that interface automatically becomes effective.
Switching Commands3-53
v1.0, November 2010
Page 95
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
switchport protected (Global Config)
Use this command to create a protected port group. The <groupid> parameter identifies the set
of protected ports. Use the name <name> pair to assign a name to the protected port group. The
name can be up to 32 alphanumeric characters long, including blanks. The default is blank.
Note: Port protection occurs within a single switch. Protected port configuration does not
affect traffic between ports on two different switches. No traffic forwarding is
possible between two protected ports.
Formatswitchport protected <groupid> name <name>
ModeGlobal Config
no switchport protected (Global Config)
Use this command to remove a protected port group. The groupid parameter identifies the set of
protected ports. Use the name keyword to remove the name from the group.
FormatNO switchport protected <groupid> name
ModeGlobal Config
switchport protected (Interface Config)
Use this command to add an interface to a protected port group. The <groupid> parameter
identifies the set of protected ports to which this interface is assigned. You can only configure an
interface as protected in one group.
Note: Port protection occurs within a single switch. Protected port configuration does not
affect traffic between ports on two different switches. No traffic forwarding is
possible between two protected ports.
Defaultunprotected
Switching Commands3-54
v1.0, November 2010
Page 96
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
Group IDThe number that identifies the protected port group.
NameAn optional name of the protected port group. The name can be up to 32 alphanumeric
characters long, including blanks. The default is blank.
List of Physical
Ports
List of ports, which are configured as protected for the group identified with <groupid>. If
no port is configured as protected for this group, this field is blank.
show interfaces switchport
This command displays the status of the interface (protected/unprotected) under the groupid.
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
TermDefinition
NameA string associated with this group as a convenience. It can be up to 32 alphanumeric
characters long, including blanks. The default is blank. This field is optional.
Protected portIndicates whether the interface is protected or not. It shows TRUE or FALSE. If the group
is a multiple groups then it shows TRUE in Group <groupid>.
Private Group Commands
This section describes commands used to configure private group and view private group
configuration information.
Private group can be used to create a group of ports that can or can not share traffic to each others
in the same VLAN group. The main application is to isolate a group of users from another without
using VLAN.
switchport private-group
This command is used to assign one port or a range of ports to private group <privategroup-name>
(or <private-group-id>).
The ingress traffic from a port in private group can be forwarded to other ports either in the same
private group or anyone in the same VLAN that are not in a private group.
By default, a port does not belong to any private group. A port cannot be in more than one private
group. An error message should return when that occurred. To change a port’s private group, first
the port must be removed from its private group.
Defaultport not associated with any group.
Formatswitchport private-group [<privategroup-name>|<privategroup-id>]
ModeInterface Config
Switching Commands3-56
v1.0, November 2010
Page 98
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
no switchport private group
This command is used to remove the specified port from the given private group.
This command is used to create a private group with name <private-group-name>. The name
string can be up to 24 bytes of non-blank characters. The total number of private groups is 192
such that the valid range for the ID is <1-192>.
The <private-group-id> field is optional. If not specified, a group id not used will be assigned
automatically.
The mode can be either “isolated” or “community”. When in “isolated” mode, the member port in
the group cannot forward its egress traffic to any other members in the same group. By default, the
mode is “community” mode that each member port can forward traffic to other members in the
same group, but not to members in other groups.
TermDefinition
InterfaceValid slot and port number separated by forward slashes.
Port VLANID
Private Group IDTotal number of private groups is 192.
The VLAN ID associated with the port.
Private Group
Name
Private GroupThe mode can be either “isolated” or “community”.
The name string can be up to 24 bytes of non-blank characters
GARP Commands
This section describes the commands you use to configure Generic Attribute Registration Protocol
(GARP) and view GARP status. The commands in this section affect both GARP VLAN
Registration Protocol (GVRP) and Garp Multicast Registration Protocol (GMRP). GARP is a
protocol that allows client stations to register with the switch for membership in VLANS (by using
GVMP) or multicast groups (by using GVMP).
set garp timer join
This command sets the GVRP join time for one port (Interface Config mode) or all (Global Config
mode) and per GARP. Join time is the interval between the transmission of GARP Protocol Data
Units (PDUs) registering (or re-registering) membership for a VLAN or multicast group. This
command has an effect only when GVRP is enabled. The time is from 10 to 100 (centiseconds).
The value 20 centiseconds is 0.2 seconds.
Switching Commands3-58
v1.0, November 2010
Page 100
ProSafe XSM7224S Managed Stackable Switch CLI Manual, Software Version 9.0
This command sets the GVRP join time (for one or all ports and per GARP) to the default and only
has an effect when GVRP is enabled.
Formatno set garp timer join
Mode• Interface Config
• Global Config
set garp timer leave
This command sets the GVRP leave time for one port (Interface Config mode) or all ports (Global
Config mode) and only has an effect when GVRP is enabled. Leave time is the time to wait after
receiving an unregister request for a VLAN or a multicast group before deleting the VLAN entry.
This can be considered a buffer time for another station to assert registration for the same attribute
in order to maintain uninterrupted service. The leave time is 20 to 600 (centiseconds). The value
60 centiseconds is 0.6 seconds.