Planet Networking & Communication SGS-6340-24T4S, SGS-6340-48T4S, SGS-6340-24P4S, SGS-6340-20S4C4X, SGS-6340-16XR Command Manual

1-1

Table of Contents

CHAPTER 1 COMMANDS FOR BASIC SWITCH CONFIGURATION ........................ 1-42

1.1 COMMANDS FOR BASIC CONFIGURATION ............................................................................................ 1-42

1.1.1 Authentication line .................................................................................................................................... 1-42

1.1.2 banner ...................................................................................................................................................... 1-43

1.1.3 boot img .................................................................................................................................................... 1-44

1.1.4 boot startup-config .................................................................................................................................... 1-45

1.1.5 clock set.................................................................................................................................................... 1-46

1.1.6 config ........................................................................................................................................................ 1-47

1.1.7 debug ssh-server ...................................................................................................................................... 1-47

1.1.8 disable ...................................................................................................................................................... 1-48

1.1.9 enable ....................................................................................................................................................... 1-48

1.1.10 enable password .................................................................................................................................... 1-49

1.1.11 end .......................................................................................................................................................... 1-50

1.1.12 exec-timeout ........................................................................................................................................... 1-50

1.1.13 exit .......................................................................................................................................................... 1-51

1.1.14 help ......................................................................................................................................................... 1-52

1.1.15 hostname ................................................................................................................................................ 1-52

1.1.16 ip host ..................................................................................................................................................... 1-53

1.1.17 ipv6 host ................................................................................................................................................. 1-54

1.1.18 ip http server ........................................................................................................................................... 1-55

1.1.19 language ................................................................................................................................................. 1-55

1.1.20 login ........................................................................................................................................................ 1-56

1.1.21 password ................................................................................................................................................ 1-56

1.1.22 privilege .................................................................................................................................................. 1-57

1.1.23 reload ..................................................................................................................................................... 1-58

1.1.24 service password-encryption .................................................................................................................. 1-59

1.1.25 service terminal-length ........................................................................................................................... 1-59

1.1.26 sysContact ................................................................ ................................................................ .............. 1-60

1.1.27 sysLocation ............................................................................................................................................. 1-61

1.1.28 set default ............................................................................................................................................... 1-61

1.1.29 setup ....................................................................................................................................................... 1-62

1.1.30 show clock .............................................................................................................................................. 1-62

1.1.31 show cpu usage ...................................................................................................................................... 1-63

1.1.32 show cpu utilization ................................................................................................................................ 1-64

1.1.33 show memory usage .............................................................................................................................. 1-64

1.1.34 show privilege ......................................................................................................................................... 1-65

1-1

1.1.35 show privilege mode LINE ...................................................................................................................... 1-66

1.1.36 show tech-support .................................................................................................................................. 1-66

1.1.37 show version ........................................................................................................................................... 1-67

1.1.38 username................................................................................................................................................ 1-67

1.1.39 web language ......................................................................................................................................... 1-69

1.1.40 write ........................................................................................................................................................ 1-69

1.1.41 write running-config ................................................................................................................................ 1-70

1.2 COMMANDS FOR TELNET ................................................................................................................... 1-70

1.2.1 aaa authorization config-commands ......................................................................................................... 1-70

1.2.2 accounting exec ........................................................................................................................................ 1-71

1.2.3 accounting command ............................................................................................................................... 1-72

1.2.4 authentication enable ............................................................................................................................... 1-73

1.2.5 authentication ip access-class .................................................................................................................. 1-74

1.2.6 authentication ipv6 access-class .............................................................................................................. 1-74

1.2.7 authentication line login ............................................................................................................................ 1-75

1.2.8 authentication securityip ........................................................................................................................... 1-76

1.2.9 authentication securityipv6 ....................................................................................................................... 1-77

1.2.10 authorization ........................................................................................................................................... 1-78

1.2.11 authorization line vty command .............................................................................................................. 1-79

1.2.12 clear line vty <0-31> ............................................................................................................................... 1-80

1.2.13 crypto key clear rsa ................................................................................................................................ 1-80

1.2.14 terminal length ........................................................................................................................................ 1-80

1.2.15 terminal monitor ...................................................................................................................................... 1-81

1.2.16 telnet ....................................................................................................................................................... 1-82

1.2.17 telnet server enable ................................................................................................................................ 1-83

1.2.18 telnet-server max-connection ................................................................................................................. 1-83

1.2.19 ssh-server authentication-retries ............................................................................................................ 1-84

1.2.20 ssh-server enable ................................................................................................................................... 1-85

1.2.21 ssh-server host-key create rsa ............................................................................................................... 1-85

1.2.22 ssh-server max-connection..................................................................................................................... 1-86

1.2.23 ssh-server timeout ................................................................ ................................................................ .. 1-87

1.2.24 show crypto key ...................................................................................................................................... 1-88

1.2.25 show ssh-server ..................................................................................................................................... 1-88

1.2.26 show telnet login ..................................................................................................................................... 1-88

1.2.27 show users ............................................................................................................................................. 1-89

1.2.28 who ......................................................................................................................................................... 1-90

1.3 COMMANDS FOR CONFIGURING SWITCH IP ......................................................................................... 1-90

1.3.1 interface vlan ............................................................................................................................................ 1-90

1-2

1.3.2 ip address ................................................................................................................................................. 1-91

1.3.3 ipv6 address ............................................................................................................................................. 1-92

1.3.4 ip bootp-client enable ............................................................................................................................... 1-93

1.3.5 ip dhcp-client enable ................................................................................................................................. 1-94

1.4 COMMANDS FOR SNMP..................................................................................................................... 1-95

1.4.1 debug snmp mib ....................................................................................................................................... 1-95

1.4.2 debug snmp kernel ................................................................................................................................... 1-95

1.4.3 rmon enable.............................................................................................................................................. 1-96

1.4.4 show private-mib oid ................................................................................................................................. 1-96

1.4.5 show snmp ............................................................................................................................................... 1-97

1.4.6 show snmp engineid ................................................................................................................................. 1-98

1.4.7 show snmp group ..................................................................................................................................... 1-99

1.4.8 show snmp mib ....................................................................................................................................... 1-100

1.4.9 show snmp status ................................................................................................................................... 1-100

1.4.10 show snmp user ................................................................................................................................... 1-101

1.4.11 show snmp view ................................................................................................................................... 1-101

1.4.12 snmp-server community ....................................................................................................................... 1-102

1.4.13 snmp-server enable .............................................................................................................................. 1-103

1.4.14 snmp-server enable traps ..................................................................................................................... 1-104

1.4.15 snmp-server engineid ........................................................................................................................... 1-105

1.4.16 snmp-server group ............................................................................................................................... 1-105

1.4.17 snmp-server host .................................................................................................................................. 1-106

1.4.18 snmp-server securityip ......................................................................................................................... 1-108

1.4.19 snmp-server securityip ......................................................................................................................... 1-108

1.4.20 snmp-server trap-source ...................................................................................................................... 1-109

1.4.21 snmp-server user .................................................................................................................................. 1-110

1.4.22 snmp-server view .................................................................................................................................. 1-111

1.5 COMMANDS FOR SWITCH UPGRADE ................................................................................................. 1-112

1.5.1 copy（FTP） .......................................................................................................................................... 1-112

1.5.2 copy（TFTP） ........................................................................................................................................ 1-114

1.5.3 ftp-dir ...................................................................................................................................................... 1-115

1.5.4 ftp-server enable ..................................................................................................................................... 1-116

1.5.5 ftp-server timeout .................................................................................................................................... 1-116

1.5.6 ip ftp ........................................................................................................................................................ 1-117

1.5.7 show ftp .................................................................................................................................................. 1-118

1.5.8 show tftp ................................................................................................................................................. 1-118

1.5.9 tftp-server enable .................................................................................................................................... 1-119

1.5.10 tftp-server retransmission-number ........................................................................................................ 1-120

1-3

1.5.11 tftp-server transmission-timeout ............................................................................................................ 1-121

CHAPTER 2 FILE SYSTEM COMMANDS ................................................................. 2-122

2.1 CD .................................................................................................................................................. 2-122

2.2 COPY .............................................................................................................................................. 2-122

2.3 DELETE ........................................................................................................................................... 2-124

2.4 DIR .................................................................................................................................................. 2-124

2.5 FORMAT .......................................................................................................................................... 2-125

2.6 MKDIR ............................................................................................................................................. 2-126

2.7 PWD ................................................................................................................................................ 2-126

2.8 RENAME .......................................................................................................................................... 2-127

2.9 RMDIR ............................................................................................................................................. 2-128

CHAPTER 3 COMMANDS FOR CLUSTER ............................................................... 3-129

3.1 CLEAR CLUSTER NODES ................................................................................................................... 3-129

3.2 CLUSTER AUTO-ADD ......................................................................................................................... 3-129

3.3 CLUSTER COMMANDER ..................................................................................................................... 3-130

3.4 CLUSTER IP-POOL ............................................................................................................................ 3-131

3.5 CLUSTER KEEPALIVE INTERVAL ......................................................................................................... 3-132

3.6 CLUSTER KEEPALIVE LOSS-COUNT .................................................................................................... 3-133

3.7 CLUSTER MEMBER ........................................................................................................................... 3-134

3.8 CLUSTER MEMBER AUTO-TO-USER .................................................................................................... 3-135

3.9 CLUSTER RESET MEMBER ................................................................................................................. 3-135

3.10 CLUSTER RUN ................................................................................................................................ 3-136

3.11 CLUSTER UPDATE MEMBER ............................................................................................................. 3-137

3.12 DEBUG CLUSTER ............................................................................................................................ 3-138

3.13 DEBUG CLUSTER PACKETS ............................................................................................................. 3-139

3.14 SHOW CLUSTER ............................................................................................................................. 3-140

3.15 SHOW CLUSTER MEMBERS ............................................................................................................. 3-141

1-4

3.16 SHOW CLUSTER CANDIDATES.......................................................................................................... 3-142

3.17 SHOW CLUSTER TOPOLOGY ............................................................................................................ 3-142

3.18 RCOMMAND COMMANDER ............................................................................................................... 3-144

3.19 RCOMMAND MEMBER ..................................................................................................................... 3-145

CHAPTER 4 COMMANDS FOR NETWORK PORT CONFIGURATION ................... 4-146

4.1 COMMANDS FOR ETHERNET PORT CONFIGURATION .......................................................................... 4-146

4.1.1 bandwidth ............................................................................................................................................... 4-146

4.1.2 clear counters interface .......................................................................................................................... 4-147

4.1.3 description .............................................................................................................................................. 4-148

4.1.4 flow control ............................................................................................................................................. 4-148

4.1.5 interface ethernet .................................................................................................................................... 4-149

4.1.6 loopback ................................................................................................................................................. 4-150

4.1.7 mdi .......................................................................................................................................................... 4-151

4.1.8 media-type .............................................................................................................................................. 4-151

4.1.9 negotiation .............................................................................................................................................. 4-152

4.1.10 port-rate-statistics interval ..................................................................................................................... 4-153

4.1.11 port-scan-mode ..................................................................................................................................... 4-154

4.1.12 rate-violation ......................................................................................................................................... 4-155

4.1.13 show interface ...................................................................................................................................... 4-156

4.1.14 shutdown .............................................................................................................................................. 4-159

4.1.15 speed-duplex ........................................................................................................................................ 4-160

4.1.16 storm-control ......................................................................................................................................... 4-161

4.1.17 virtual-cable-test ................................................................................................................................... 4-162

4.1.18 switchport discard packet ..................................................................................................................... 4-163

CHAPTER 5 COMMANDS FOR PORT ISOLATION FUNCTION .............................. 5-165

5.1 ISOLATE-PORT GROUP ...................................................................................................................... 5-165

5.2 ISOLATE-PORT GROUP SWITCHPORT INTERFACE ................................................................................ 5-166

5.3 SHOW ISOLATE-PORT GROUP ............................................................................................................ 5-167

CHAPTER 6 COMMANDS FOR PORT LOOPBACK DETECTION FUNCTION ....... 6-168

6.1 DEBUG LOOPBACK-DETECTION ......................................................................................................... 6-168

6.2 LOOPBACK-DETECTION CONTROL ..................................................................................................... 6-168

6.3 LOOPBACK-DETECTION CONTROL-RECOVERY TIMEOUT ...................................................................... 6-169

1-5

6.4 LOOPBACK-DETECTION INTERVAL-TIME ............................................................................................. 6-170

6.5 LOOPBACK-DETECTION SPECIFIED-VLAN ........................................................................................... 6-171

6.6 SHOW LOOPBACK-DETECTION .......................................................................................................... 6-172

CHAPTER 7 COMMANDS FOR ULDP ...................................................................... 7-173

7.1 DEBUG ULDP ................................................................................................................................... 7-173

7.2 DEBUG ULDP ERROR ........................................................................................................................ 7-173

7.3 DEBUG ULDP EVENT ......................................................................................................................... 7-174

7.4 DEBUG ULDP FSM INTERFACE ETHERNET ........................................................................................... 7-175

7.5 DEBUG ULDP INTERFACE ETHERNET .................................................................................................. 7-176

7.6 DEBUG ULDP PACKET ....................................................................................................................... 7-176

7.7 ULDP AGGRESSIVE-MODE ................................................................................................................. 7-177

7.8 ULDP ENABLE .................................................................................................................................. 7-178

7.9 ULDP DISABLE ................................................................................................................................. 7-178

7.10 ULDP HELLO-INTERVAL ................................................................................................................... 7-179

7.11 ULDP MANUAL-SHUTDOWN ............................................................................................................. 7-180

7.12 ULDP RECOVERY-TIME .................................................................................................................... 7-180

7.13 ULDP RESET .................................................................................................................................. 7-181

7.14 SHOW ULDP ................................................................................................................................... 7-182

CHAPTER 8 COMMANDS FOR LLDP FUNCTION ................................................... 8-183

8.1 CLEAR LLDP REMOTE-TABLE ............................................................................................................ 8-183

8.2 DEBUG LLDP .................................................................................................................................... 8-183

8.3 DEBUG LLDP PACKETS ..................................................................................................................... 8-184

8.4 LLDP ENABLE .................................................................................................................................. 8-185

8.5 LLDP ENABLE (PORT) ....................................................................................................................... 8-186

8.6 LLDP MODE ...................................................................................................................................... 8-186

8.7 LLDP MSGTXHOLD ........................................................................................................................... 8-187

8.8 LLDP NEIGHBORS MAX-NUM .............................................................................................................. 8-188

1-6

8.9 LLDP NOTIFICATION INTERVAL ........................................................................................................... 8-189

8.10 LLDP TOOMANYNEIGHBORS ........................................................................................................... 8-189

8.11 LLDP TRANSMIT DELAY ................................................................................................................... 8-190

8.12 LLDP TRANSMIT OPTIONAL TLV........................................................................................................ 8-191

8.13 LLDP TRAP .................................................................................................................................... 8-192

8.14 LLDP TX-INTERVAL ......................................................................................................................... 8-192

8.15 SHOW DEBUGGING LLDP ................................................................................................................. 8-193

8.16 SHOW LLDP ................................................................................................................................... 8-194

8.17 SHOW LLDP INTERFACE ETHERNET .................................................................................................. 8-195

8.18 SHOW LLDP NEIGHBORS INTERFACE ETHERNET ............................................................................... 8-196

8.19 SHOW LLDP TRAFFIC ...................................................................................................................... 8-196

CHAPTER 9 COMMANDS FOR PORT CHANNEL ................................................... 9-198

9.1 DEBUG PORT-CHANNEL .................................................................................................................... 9-198

9.2 INTERFACE PORT-CHANNEL .............................................................................................................. 9-199

9.3 LACP PORT-PRIORITY ....................................................................................................................... 9-199

9.4 LACP SYSTEM-PRIORITY ................................................................................................................... 9-200

9.5 LACP TIMEOUT ................................................................................................................................. 9-201

9.6 LOAD-BALANCE ............................................................................................................................... 9-201

9.7 PORT-GROUP ................................................................................................................................... 9-202

9.8 PORT-GROUP MODE ......................................................................................................................... 9-203

9.9 SHOW PORT-GROUP ......................................................................................................................... 9-204

CHAPTER 10 COMMANDS FOR MTU .................................................................... 10-206

10.1 MTU ............................................................................................................................................ 10-206

CHAPTER 11 COMMANDS FOR EFM OAM ........................................................... 11-207

11.1 CLEAR ETHERNET-OAM ................................................................................................................. 11-207

11.2 DEBUG ETHERNET-OAM ERROR ..................................................................................................... 11-207

1-7

11.3 DEBUG ETHERNET-OAM FSM ......................................................................................................... 11-208

11.4 DEBUG ETHERNET-OAM PACKET .................................................................................................... 11-209

11.5 DEBUG ETHERNET-OAM TIMER ...................................................................................................... 11-209

11.6 ETHERNET-OAM ........................................................................................................................... 11-210

11.7 ETHERNET-OAMETHERNET-OAM ERRORED-FRAME THRESHOLD HIGH .............................................. 11-211

11.8 ETHERNET-OAM ERRORED-FRAME THRESHOLD LOW ...................................................................... 11-211

11.9 ETHERNET-OAM ERRORED-FRAME WINDOW ................................................................................... 11-212

11.10 ETHERNET-OAM ERRORED-FRAME-PERIOD THRESHOLD HIGH ....................................................... 11-213

11.11 ETHERNET-OAM ERRORED-FRAME-PERIOD THRESHOLD LOW ........................................................ 11-214

11.12 ETHERNET-OAM ERRORED-FRAME-PERIOD WINDOW ..................................................................... 11-214

11.13 ETHERNET-OAM ERRORED-FRAME-SECONDS THRESHOLD HIGH .................................................... 11-215

11.14 ETHERNET-OAM ERRORED-FRAME-SECONDS THRESHOLD LOW ..................................................... 11-216

11.15 ETHERNET-OAM ERRORED-FRAME-SECONDS WINDOW ................................................................. 11-217

11.16 ETHERNET-OAM ERRORED-SYMBOL-PERIOD THRESHOLD HIGH ..................................................... 11-217

11.17 ETHERNET-OAM ERRORED-SYMBOL-PERIOD THRESHOLD LOW ...................................................... 11-218

11.18 ETHERNET-OAM ERRORED-SYMBOL-PERIOD WINDOW ................................................................... 11-219

11.19 ETHERNET-OAM LINK-MONITOR ................................................................................................... 11-220

11.20 ETHERNET-OAM MODE ................................................................................................................ 11-220

11.21 ETHERNET-OAM PERIOD ............................................................................................................. 11-221

11.22 ETHERNET-OAM REMOTE-FAILURE ............................................................................................... 11-222

11.23 ETHERNET-OAM TIMEOUT............................................................................................................ 11-223

11.24 SHOW ETHERNET-OAM ................................................................................................................ 11-223

11.25 SHOW ETHERNET-OAM EVENTS ................................................................................................... 11-228

11.26 SHOW ETHERNET-OAM LINK-EVENTS CONFIGURATION .................................................................. 11-230

CHAPTER 12 COMMANDS FOR PORT SECURITY............................................... 12-231

12.1 CLEAR PORT-SECURITY ................................................................................................................ 12-231

12.2 SHOW PORT-SECURITY ................................................................................................................. 12-232

1-8

12.3 SWITCHPORT PORT-SECURITY ....................................................................................................... 12-233

12.4 SWITCHPORT PORT-SECURITY AGING ............................................................................................ 12-233

12.5 SWITCHPORT PORT-SECURITY MAC-ADDRESS ................................................................................ 12-234

12.6 SWITCHPORT PORT-SECURITY MAC-ADDRESS STICKY .................................................................... 12-235

12.7 SWITCHPORT PORT-SECURITY MAXIMUM ........................................................................................ 12-236

12.8 SWITCHPORT PORT-SECURITY VIOLATION ...................................................................................... 12-237

CHAPTER 13 COMMANDS FOR DDM ....................................................................... 13-1

13.1 CLEAR TRANSCEIVER THRESHOLD-VIOLATION ................................................................................... 13-1

13.2 DEBUG TRANSCEIVER ....................................................................................................................... 13-1

13.3 SHOW TRANSCEIVER ........................................................................................................................ 13-2

13.4 SHOW TRANSCEIVER THRESHOLD-VIOLATION .................................................................................... 13-3

13.5 TRANSCEIVER-MONITORING .............................................................................................................. 13-4

13.6 TRANSCEIVER-MONITORING INTERVAL ............................................................................................... 13-5

13.7 TRANSCEIVER THRESHOLD ............................................................................................................... 13-5

CHAPTER 14 COMMANDS FOR LLDP-MED ............................................................. 14-7

14.1 CIVIC LOCATION ............................................................................................................................... 14-7

14.2 {DESCRIPTION-LANGUAGE | PROVINCE-STATE | CITY | COUNTY | STREET | LOCATIONNUM | LOCATION | FLOOR

| ROOM | POSTAL | OTHERINFO} ................................................................................................................ 14-8

14.3 ECS LOCATION ................................................................................................................................. 14-9

14.4 LLDP MED FAST COUNT..................................................................................................................... 14-9

14.5 LLDP MED TRAP ............................................................................................................................. 14-10

14.6 LLDP TRANSMIT MED TLV ALL .......................................................................................................... 14-11

14.7 LLDP TRANSMIT MED TLV CAPABILITY .............................................................................................. 14-12

14.8 LLDP TRANSMIT MED TLV EXTENDPOE ............................................................................................. 14-12

14.9 LLDP TRANSMIT MED TLV INVENTORY .............................................................................................. 14-13

14.10 LLDP TRANSMIT MED TLV NETWORKPOLICY ................................................................................... 14-14

14.11 NETWORK POLICY ........................................................................................................................ 14-15

1-9

14.12 SHOW LLDP ................................................................................................................................. 14-16

14.13 SHOW LLDP [INTERFACE ETHERNET <IFNAME>] .......................................................................... 14-17

14.14 SHOW LLDP NEIGHBORS ............................................................................................................... 14-18

CHAPTER 15 COMMANDS FOR BPDU-TUNNEL .................................................... 15-19

15.1 BPDU-TUNNEL DMAC ...................................................................................................................... 15-19

15.2 BPDU-TUNNEL STP ......................................................................................................................... 15-20

15.3 BPDU-TUNNEL GVRP ...................................................................................................................... 15-21

15.4 BPDU-TUNNEL ULDP ....................................................................................................................... 15-21

15.5 BPDU-TUNNEL LACP ....................................................................................................................... 15-22

15.6 BPDU-TUNNEL DOT1X ..................................................................................................................... 15-23

CHAPTER 16 COMMANDS FOR EEE ENERGY-SAVING ........................................ 16-24

16.1 EEE ENABLE .................................................................................................................................. 16-24

CHAPTER 17 VLAN CONFIGURATION .................................................................... 17-25

17.1 COMMANDS FOR VLAN CONFIGURATION........................................................................................ 17-25

17.1.1 debug gvrp event .................................................................................................................................. 17-25

17.1.2 debug gvrp packet ................................................................................................................................ 17-26

17.1.3 dot1q-tunnel enable .............................................................................................................................. 17-27

17.1.4 dot1q-tunnel selective enable ............................................................................................................... 17-28

17.1.5 dot1q-tunnel selective s-vlan ................................................................................................................ 17-28

17.1.6 dot1q-tunnel tpid ................................................................................................................................... 17-29

17.1.7 garp timer join ....................................................................................................................................... 17-30

17.1.8 garp timer leave .................................................................................................................................... 17-31

17.1.9 garp timer leaveAll ................................................................................................................................ 17-31

17.1.10 gvrp (Global) ....................................................................................................................................... 17-32

17.1.11 gvrp (Port) ........................................................................................................................................... 17-33

17.1.12 no garp timer ...................................................................................................................................... 17-33

17.1.13 name .................................................................................................................................................. 17-34

17.1.14 private-vlan ......................................................................................................................................... 17-35

17.1.15 private-vlan association ...................................................................................................................... 17-36

17.1.16 show dot1q-tunnel .............................................................................................................................. 17-37

17.1.17 show garp timer .................................................................................................................................. 17-38

17.1.18 show gvrp fsm information ................................................................ ................................ .................. 17-38

1-10

17.1.19 show gvrp leaveAll fsm information .................................................................................................... 17-39

17.1.20 show gvrp leavetimer running information .......................................................................................... 17-40

17.1.21 show gvrp port-member ...................................................................................................................... 17-41

17.1.22 show gvrp port registerd vlan .............................................................................................................. 17-42

17.1.23 show gvrp timer running information ................................................................................................... 17-43

17.1.24 show gvrp vlan registerd port .............................................................................................................. 17-44

17.1.25 show vlan............................................................................................................................................ 17-45

17.1.26 show vlan-translation .......................................................................................................................... 17-46

17.1.27 switchport access vlan ........................................................................................................................ 17-47

17.1.28 switchport forbidden vlan .................................................................................................................... 17-47

17.1.29 switchport hybrid allowed vlan ............................................................................................................ 17-48

17.1.30 switchport hybrid native vlan ............................................................................................................... 17-49

17.1.31 switchport interface ............................................................................................................................. 17-50

17.1.32 switchport mode ................................................................................................................................. 17-51

17.1.33 switchport mode trunk allow-null ......................................................................................................... 17-52

17.1.34 switchport trunk allowed vlan .............................................................................................................. 17-53

17.1.35 switchport trunk native vlan ................................................................................................................ 17-54

17.1.36 vlan ..................................................................................................................................................... 17-54

17.1.37 vlan internal ........................................................................................................................................ 17-55

17.1.38 vlan ingress enable ............................................................................................................................. 17-56

17.1.39 vlan-translation ................................................................................................................................... 17-57

17.1.40 vlan-translation enable ....................................................................................................................... 17-58

17.2 COMMANDS FOR MULTI-TO-ONE VLAN TRANSLATION .................................................................... 17-58

17.2.1 vlan-translation n-to-1 ........................................................................................................................... 17-58

17.2.2 show vlan-translation n-to-1 .................................................................................................................. 17-59

17.3 COMMANDS FOR DYNAMIC VLAN CONFIGURATION ......................................................................... 17-60

17.3.1 dynamic-vlan mac-vlan prefer ............................................................................................................... 17-60

17.3.2 dynamic-vlan subnet-vlan prefer ........................................................................................................... 17-61

17.3.3 mac-vlan ............................................................................................................................................... 17-62

17.3.4 mac-vlan vlan ....................................................................................................................................... 17-63

17.3.5 protocol-vlan ......................................................................................................................................... 17-63

17.3.6 show dynamic-vlan prefer ..................................................................................................................... 17-64

17.3.7 show mac-vlan ...................................................................................................................................... 17-65

17.3.8 show mac-vlan interface ....................................................................................................................... 17-66

17.3.9 show protocol-vlan ................................................................................................................................ 17-66

17.3.10 show subnet-vlan ................................................................................................................................ 17-67

17.3.11 show subnet-vlan interface ................................................................................................................. 17-68

17.3.12 subnet-vlan ......................................................................................................................................... 17-68

1-11

17.3.13 switchport mac-vlan enable ................................................................................................................ 17-69

17.3.14 switchport subnet-vlan enable ............................................................................................................ 17-70

17.4 COMMANDS FOR VOICE VLAN CONFIGURATION ............................................................................. 17-71

17.4.1 show voice-vlan .................................................................................................................................... 17-71

17.4.2 switchport voice-vlan enable................................................................................................................. 17-71

17.4.3 voice-vlan ............................................................................................................................................. 17-72

17.4.4 voice-vlan vlan ...................................................................................................................................... 17-73

CHAPTER 18 COMMANDS FOR MAC ADDRESS TABLE CONFIGURATION ....... 18-75

18.1 COMMANDS FOR MAC ADDRESS TABLE CONFIGURATION ............................................................... 18-75

18.1.1 clearCollisionMacTable ......................................................................................................................... 18-75

18.1.2 clear mac-address-table dynamic ......................................................................................................... 18-75

18.1.3 mac-address-learning cpu-control ........................................................................................................ 18-76

18.1.4 mac-address-table aging-time .............................................................................................................. 18-77

18.1.5 mac-address-table static | static-multicast | blackhole .......................................................................... 18-78

18.1.6 showCollisionMacTable ........................................................................................................................ 18-79

18.1.7 show mac-address-table....................................................................................................................... 18-79

18.2 COMMANDS FOR MAC ADDRESS BINDING CONFIGURATION .............................................................. 18-80

18.2.1 clear port-security dynamic ................................................................................................................... 18-80

18.2.2 show port-security ................................................................................................................................ 18-81

18.2.3 show port-security address ................................................................................................ ................... 18-82

18.2.4 show port-security interface ................................................................ ................................ .................. 18-83

18.2.5 switchport port-security ......................................................................................................................... 18-84

18.2.6 switchport port-security mac-address ................................................................................................... 18-85

18.2.7 switchport port-security maximum ........................................................................................................ 18-85

18.2.8 switchport port-security violation ........................................................................................................... 18-86

18.3 COMMANDS FOR MAC NOTIFICATION ............................................................................................. 18-87

18.3.1 clear mac-notification statistics ............................................................................................................. 18-87

18.3.2 mac-address-table notification .............................................................................................................. 18-88

18.3.3 mac-address-table notification history-size ........................................................................................... 18-88

18.3.4 mac-address-table notification interval ................................................................................................. 18-89

18.3.5 mac-notification .................................................................................................................................... 18-90

18.3.6 show mac-notification summary ........................................................................................................... 18-90

18.3.7 snmp-server enable traps mac-notification ........................................................................................... 18-91

CHAPTER 19 COMMANDS FOR MSTP .................................................................... 19-93

19.1 COMMANDS FOR MSTP ................................................................................................................. 19-93

1-12

19.1.1 abort ..................................................................................................................................................... 19-93

19.1.2 exit ........................................................................................................................................................ 19-93

19.1.3 instance vlan ......................................................................................................................................... 19-94

19.1.4 name .................................................................................................................................................... 19-95

19.1.5 no ......................................................................................................................................................... 19-95

19.1.6 revision-level ......................................................................................................................................... 19-96

19.1.7 show ..................................................................................................................................................... 19-97

19.1.8 spanning-tree ........................................................................................................................................ 19-97

19.1.9 spanning-tree cost ................................................................................................................................ 19-98

19.1.10 spanning-tree digest-snooping ........................................................................................................... 19-99

19.1.11 spanning-tree format ......................................................................................................................... 19-100

19.1.12 spanning-tree forward-time ............................................................................................................... 19-101

19.1.13 spanning-tree hello-time ................................................................................................................... 19-102

19.1.14 spanning-tree link-type p2p .............................................................................................................. 19-103

19.1.15 spanning-tree maxage ...................................................................................................................... 19-103

19.1.16 spanning-tree max-hop ..................................................................................................................... 19-104

19.1.17 spanning-tree mcheck ...................................................................................................................... 19-105

19.1.18 spanning-tree mode .......................................................................................................................... 19-106

19.1.19 spanning-tree mst configuration ....................................................................................................... 19-106

19.1.20 spanning-tree mst cost ..................................................................................................................... 19-107

19.1.21 spanning-tree cost-format ................................................................................................ ................. 19-109

19.1.22 spanning-tree mst loopguard ............................................................................................................ 19-110

19.1.23 spanning-tree mst port-priority ........................................................................................................... 19-111

19.1.24 spanning-tree mst priority .................................................................................................................. 19-111

19.1.25 spanning-tree mst rootguard ............................................................................................................. 19-112

19.1.26 spanning-tree portfast ....................................................................................................................... 19-113

19.1.27 spanning-tree port-priority ................................................................................................................. 19-114

19.1.28 spanning-tree priority ........................................................................................................................ 19-115

19.1.29 spanning-tree rootguard ................................................................................................................... 19-115

19.1.30 spanning-tree tcflush (Global mode) ................................................................................................. 19-116

19.1.31 spanning-tree tcflush (Port mode) .................................................................................................... 19-117

19.1.32 spanning-tree transmit-hold-count .................................................................................................... 19-118

19.2 COMMANDS FOR MONITOR AND DEBUG ........................................................................................ 19-119

19.2.1 debug spanning-tree ........................................................................................................................... 19-119

19.2.2 show mst-pending .............................................................................................................................. 19-119

19.2.3 show spanning-tree ............................................................................................................................ 19-120

19.2.4 show spanning-tree mst config ........................................................................................................... 19-123

CHAPTER 20 COMMANDS FOR QOS .................................................................... 20-124

1-13

20.1 ACCOUNTING ............................................................................................................................... 20-124

20.2 CLASS ......................................................................................................................................... 20-125

20.3 CLASS-MAP ................................................................................................................................. 20-125

20.4 CLEAR MLS QOS STATISTICS ......................................................................................................... 20-126

20.5 DROP .......................................................................................................................................... 20-127

20.6 MATCH ........................................................................................................................................ 20-128

20.7 MLS QOS COS .............................................................................................................................. 20-129

20.8 MLS QOS MAP .............................................................................................................................. 20-130

20.9 MLS QOS QUEUE ALGORITHM ........................................................................................................ 20-131

20.10 MLS QOS QUEUE WRR WEIGHT .................................................................................................... 20-132

20.11 MLS QOS QUEUE WDRR WEIGHT .................................................................................................. 20-133

20.12 MLS QOS QUEUE BANDWIDTH ..................................................................................................... 20-133

20.13 MLS QOS TRUST ......................................................................................................................... 20-134

20.14 POLICY ...................................................................................................................................... 20-135

20.15 POLICY AGGREGATE ................................................................................................................... 20-137

20.16 POLICY-MAP .............................................................................................................................. 20-138

20.17 SERVICE-POLICY INPUT .............................................................................................................. 20-139

20.18 SERVICE-POLICY INPUT VLAN ...................................................................................................... 20-140

20.19 SET ........................................................................................................................................... 20-140

20.20 SHOW CLASS-MAP ..................................................................................................................... 20-141

20.21 SHOW POLICY-MAP..................................................................................................................... 20-142

20.22 SHOW MLS QOS INTERFACE ........................................................................................................ 20-143

20.23 SHOW MLS QOS MAPS ................................................................................................................ 20-146

20.24 SHOW MLS QOS VLAN ................................................................................................................. 20-148

20.25 TRANSMIT .................................................................................................................................. 20-149

CHAPTER 21 COMMANDS FOR FLOW-BASED REDIRECTION .......................... 21-151

21.1 ACCESS-GROUP REDIRECT TO INTERFACE ETHERNET ..................................................................... 21-151

1-14

21.2 SHOW FLOW-BASED-REDIRECT ..................................................................................................... 21-152

CHAPTER 22 COMMANDS FOR FLEXIBLE QINQ ................................................ 22-153

22.1 MATCH ........................................................................................................................................ 22-153

22.2 SERVICE-POLICY .......................................................................................................................... 22-154

22.3 SET ............................................................................................................................................. 22-155

CHAPTER 23 COMMANDS FOR LAYER 3 MANAGEMENT .................................. 23-157

23.1 COMMANDS FOR LAYER 3 INTERFACE ........................................................................................... 23-157

23.1.1 description .......................................................................................................................................... 23-157

23.1.2 interface vlan .......................................................................................................................................... 23-1

23.1.3 show ip route .......................................................................................................................................... 23-1

23.2 COMMANDS FOR IPV4/V6 CONFIGURATION ........................................................................................ 23-3

23.2.1 clear ip traffic .......................................................................................................................................... 23-3

23.2.2 clear ipv6 neighbor ................................................................................................................................. 23-3

23.2.3 debug ip icmp ......................................................................................................................................... 23-4

23.2.4 debug ip packet ...................................................................................................................................... 23-5

23.2.5 debug ipv6 packet .................................................................................................................................. 23-6

23.2.6 debug ipv6 icmp ..................................................................................................................................... 23-6

23.2.7 debug ipv6 nd ......................................................................................................................................... 23-7

23.2.8 ip address ............................................................................................................................................... 23-8

23.2.9 ip default-gateway .................................................................................................................................. 23-9

23.2.10 ip route................................................................................................................................................ 23-10

23.2.11 ipv6 address ....................................................................................................................................... 23-11

23.2.12 ipv6 default-gateway ........................................................................................................................... 23-12

23.2.13 ipv6 nd dad attempts .......................................................................................................................... 23-13

23.2.14 ipv6 nd ns-interval .............................................................................................................................. 23-13

23.2.15 ipv6 neighbor ...................................................................................................................................... 23-14

23.2.16 show ip interface ................................................................................................................................. 23-15

23.2.17 show ip traffic ...................................................................................................................................... 23-15

23.2.18 show ipv6 interface ............................................................................................................................. 23-17

23.2.19 show ipv6 route .................................................................................................................................. 23-19

23.2.20 show ipv6 neighbors ........................................................................................................................... 23-21

23.2.21 show ipv6 traffic .................................................................................................................................. 23-22

23.3 COMMANDS FOR ARP CONFIGURATION .......................................................................................... 23-23

23.3.1 arp ........................................................................................................................................................ 23-23

23.3.2 clear arp-cache ..................................................................................................................................... 23-24

1-15

23.3.3 clear arp traffic ...................................................................................................................................... 23-24

23.3.4 debug arp ............................................................................................................................................. 23-25

23.3.5 show arp ............................................................................................................................................... 23-25

23.3.6 show arp traffic ..................................................................................................................................... 23-27

CHAPTER 24 COMMANDS FOR RIP........................................................................ 24-28

24.1 ACCEPT-LIFETIME ........................................................................................................................... 24-28

24.2 CLEAR IP RIP ROUTE ....................................................................................................................... 24-29

24.3 DEBUG RIP..................................................................................................................................... 24-30

24.4 DEBUG RIP REDISTRIBUTE MESSAGE SEND ...................................................................................... 24-31

24.5 DEBUG RIP REDISTRIBUTE ROUTE RECEIVE ...................................................................................... 24-31

24.6 DEFAULT-INFORMATION ORIGINATE.................................................................................................. 24-32

24.7 DEFAULT-METRIC ........................................................................................................................... 24-32

24.8 DISTANCE ...................................................................................................................................... 24-33

24.9 DISTRIBUTE-LIST ............................................................................................................................ 24-34

24.10 IP RIP AGGREGATE-ADDRESS ........................................................................................................ 24-35

24.11 IP RIP AUTHENTICATION KEY-CHAIN ............................................................................................... 24-36

24.12 IP RIP AUTHENTICATION MODE ....................................................................................................... 24-36

24.13 IP RIP AUTHENTICATION STRING .................................................................................................... 24-37

24.14 IP RIP AUTHENTICATION CISCO-COMPATIBLE .................................................................................. 24-38

24.15 IP RIP RECEIVE-PACKET ................................................................................................................ 24-39

24.16 IP RIP RECEIVE VERSION ............................................................................................................... 24-40

24.17 IP RIP SEND-PACKET ..................................................................................................................... 24-41

24.18 IP RIP SEND VERSION .................................................................................................................... 24-41

24.19 IP RIP SPLIT-HORIZON ................................................................................................................... 24-42

24.20 KEY ............................................................................................................................................. 24-43

24.21 KEY CHAIN ................................................................................................................................... 24-44

24.22 KEY-STRING ................................................................................................................................. 24-44

24.23 MAXIMUM-PREFIX ......................................................................................................................... 24-45

1-16

24.24 NEIGHBOR ................................................................................................................................... 24-46

24.25 NETWORK .................................................................................................................................... 24-47

24.26 OFFSET-LIST ................................................................................................................................ 24-48

24.27 PASSIVE-INTERFACE ..................................................................................................................... 24-48

24.28 RECV-BUFFER-SIZE ...................................................................................................................... 24-49

24.29 REDISTRIBUTE ............................................................................................................................. 24-50

24.30 ROUTE ........................................................................................................................................ 24-51

24.31 ROUTER RIP ................................................................................................................................. 24-51

24.32 SEND-LIFETIME ............................................................................................................................ 24-52

24.33 SHOW DEBUGGING RIP ................................................................................................................. 24-53

24.34 SHOW IP PROTOCOLS RIP ............................................................................................................. 24-54

24.35 SHOW IP RIP ................................................................................................................................ 24-55

24.36 SHOW IP RIP DATABASE ................................................................................................................ 24-56

24.37 SHOW IP RIP INTERFACE ............................................................................................................... 24-57

24.38 SHOW IP RIP AGGREGATE ............................................................................................................. 24-57

24.39 TIMERS BASIC .............................................................................................................................. 24-58

24.40 VERSION ...................................................................................................................................... 24-59

CHAPTER 25 COMMANDS FOR OSPF .................................................................... 25-61

25.1 AREA AUTHENTICATION .................................................................................................................. 25-61

25.2 AREA DEFAULT-COST ...................................................................................................................... 25-62

25.3 AREA FILTER-LIST .......................................................................................................................... 25-62

25.4 AREA NSSA .................................................................................................................................... 25-63

25.5 AREA RANGE ................................................................................................................................. 25-64

25.6 AREA STUB .................................................................................................................................... 25-65

25.7 AREA VIRTUAL-LINK ....................................................................................................................... 25-66

25.8 AUTO-COST REFERENCE-BANDWIDTH.............................................................................................. 25-67

25.9 COMPATIBLE RFC1583 ................................................................................................................... 25-68

1-17

25.10 CLEAR IP OSPF PROCESS ............................................................................................................. 25-69

25.11 DEBUG OSPF EVENTS ................................................................................................................... 25-69

25.12 DEBUG OSPF IFSM ........................................................................................................................ 25-70

25.13 DEBUG OSPF LSA ......................................................................................................................... 25-71

25.14 DEBUG OSPF NFSM ...................................................................................................................... 25-71

25.15 DEBUG OSPF NSM ........................................................................................................................ 25-72

25.16 DEBUG OSPF PACKET ................................................................................................................... 25-72

25.17 DEBUG OSPF ROUTE .................................................................................................................... 25-73

25.18 DEBUG OSPF REDISTRIBUTE MESSAGE SEND ................................................................................. 25-73

25.19 DEBUG OSPF REDISTRIBUTE ROUTE RECEIVE ................................................................................. 25-74

25.20 DEFAULT-INFORMATION ORIGINATE ............................................................................................... 25-75

25.21 DEFAULT-METRIC ......................................................................................................................... 25-76

25.22 DISTANCE .................................................................................................................................... 25-76

25.23 DISTRIBUTE-LIST .......................................................................................................................... 25-77

25.24 FILTER-POLICY ............................................................................................................................. 25-78

25.25 HOST AREA .................................................................................................................................. 25-79

25.26 IP OSPF AUTHENTICATION ............................................................................................................. 25-80

25.27 IP OSPF AUTHENTICATION-KEY ...................................................................................................... 25-81

25.28 IP OSPF COST .............................................................................................................................. 25-81

25.29 IP OSPF DATABASE-FILTER ............................................................................................................ 25-82

25.30 IP OSPF DEAD-INTERVAL ............................................................................................................... 25-83

25.31 IP OSPF DISABLE ALL ................................................................................................................... 25-84

25.32 IP OSPF HELLO-INTERVAL ............................................................................................................. 25-84

25.33 IP OSPF MESSAGE-DIGEST-KEY ..................................................................................................... 25-85

25.34 IP OSPF MTU ................................................................................................................................ 25-86

25.35 IP OSPF MTU-IGNORE ................................................................................................................... 25-87

25.36 IP OSPF NETWORK ....................................................................................................................... 25-88

1-18

25.37 IP OSPF PRIORITY ......................................................................................................................... 25-88

25.38 IP OSPF RETRANSMIT-INTERVAL .................................................................................................... 25-89

25.39 IP OSPF TRANSMIT-DELAY ............................................................................................................. 25-90

25.40 KEY ............................................................................................................................................. 25-91

25.41 KEY CHAIN ................................................................................................................................... 25-92

25.42 LOG-ADJACENCY-CHANGES DETAIL .............................................................................................. 25-92

25.43 MAX-CONCURRENT-DD ................................................................................................................. 25-93

25.44 NEIGHBOR ................................................................................................................................... 25-94

25.45 NETWORK AREA ........................................................................................................................... 25-94

25.46 OSPF ABR-TYPE ........................................................................................................................... 25-95

25.47 OSPF ROUTER-ID .......................................................................................................................... 25-96

25.48 OVERFLOW DATABASE ................................................................................................................. 25-97

25.49 OVERFLOW DATABASE EXTERNAL ................................................................................................. 25-98

25.50 PASSIVE-INTERFACE ..................................................................................................................... 25-98

25.51 REDISTRIBUTE ............................................................................................................................. 25-99

25.52 REDISTRIBUTE OSPF .................................................................................................................. 25-100

25.53 ROUTER OSPF ............................................................................................................................ 25-101

25.54 SHOW IP OSPF ........................................................................................................................... 25-101

25.55 SHOW IP OSPF BORDER-ROUTERS ............................................................................................... 25-103

25.56 SHOW IP OSPF DATABASE ........................................................................................................... 25-104

25.57 SHOW IP OSPF INTERFACE .......................................................................................................... 25-105

25.58 SHOW IP OSPF NEIGHBOR ........................................................................................................... 25-106

25.59 SHOW IP OSPF REDISTRIBUTE ..................................................................................................... 25-107

25.60 SHOW IP OSPF ROUTE ................................................................................................................ 25-108

25.61 SHOW IP OSPF VIRTUAL-LINKS .................................................................................................... 25-109

25.62 SHOW IP ROUTE PROCESS-DETAIL ............................................................................................... 25-110

25.63 SHOW IP PROTOCOLS ................................................................................................................. 25-111

1-19

25.64 SUMMARY-ADDRESS................................................................................................................... 25-112

25.65 TIMERS SPF ............................................................................................................................... 25-113

CHAPTER 26 IPV4 MULTICAST PROTOCOL ................................ ............................ 26-1

26.1 ANTI-ARPSCAN ENABLE .................................................................................................................... 26-1

26.2 ANTI-ARPSCAN PORT-BASED THRESHOLD .......................................................................................... 26-1

26.3 ANTI-ARPSCAN IP-BASED THRESHOLD ............................................................................................... 26-2

26.4 ANTI-ARPSCAN TRUST ...................................................................................................................... 26-3

26.5 ANTI-ARPSCAN TRUST IP .................................................................................................................. 26-4

26.6 ANTI-ARPSCAN RECOVERY ENABLE ................................................................................................... 26-5

26.7 ANTI-ARPSCAN RECOVERY TIME ........................................................................................................ 26-5

26.8 ANTI-ARPSCAN LOG ENABLE ............................................................................................................. 26-6

26.9 ANTI-ARPSCAN TRAP ENABLE ........................................................................................................... 26-7

26.10 SHOW ANTI-ARPSCAN ..................................................................................................................... 26-8

26.11 DEBUG ANTI-ARPSCAN ................................................................................................................... 26-9

CHAPTER 27 COMMANDS FOR PREVENTING ARP SPOOFING .......................... 27-11

27.1 IP ARP-SECURITY UPDATEPROTECT ................................................................................................. 27-11

27.2 IP ARP-SECURITY LEARNPROTECT ................................................................................................... 27-11

27.3 IP ARP-SECURITY CONVERT ............................................................................................................ 27-12

27.4 CLEAR IP ARP DYNAMIC .................................................................................................................. 27-13

27.5 CLEAR IPV6 ND DYNAMIC ................................................................................................................ 27-13

CHAPTER 28 COMMAND FOR ARP GUARD .......................................................... 28-15

28.1 ARP-GUARD IP ............................................................................................................................... 28-15

CHAPTER 29 COMMANDS FOR GRATUITOUS ARP CONFIGURATION ............... 29-16

29.1 IP GRATUITOUS-ARP ....................................................................................................................... 29-16

29.2 SHOW IP GRATUITOUS-ARP ............................................................................................................. 29-17

CHAPTER 30 COMMANDS FOR DHCP ................................................................... 30-18

1-20

30.1 COMMANDS FOR DHCP SERVER CONFIGURATION .......................................................................... 30-18

30.1.1 bootfile .................................................................................................................................................. 30-18

30.1.2 clear ip dhcp binding ............................................................................................................................. 30-18

30.1.3 clear ip dhcp conflict ............................................................................................................................. 30-19

30.1.4 clear ip dhcp server statistics ................................................................................................................ 30-20

30.1.5 client-identifier ...................................................................................................................................... 30-21

30.1.6 debug ip dhcp client .............................................................................................................................. 30-21

30.1.7 debug ip dhcp relay .............................................................................................................................. 30-22

30.1.8 debug ip dhcp server ............................................................................................................................ 30-22

30.1.9 Admin Mode.default-router ................................................................................................................... 30-23

30.1.10 dns-server ........................................................................................................................................... 30-23

30.1.11 domain-name ...................................................................................................................................... 30-24

30.1.12 hardware-address ............................................................................................................................... 30-25

30.1.13 host ..................................................................................................................................................... 30-25

30.1.14 ip dhcp conflict logging ....................................................................................................................... 30-26

30.1.15 ip dhcp disable .................................................................................................................................... 30-27

30.1.16 ip dhcp excluded-address ................................................................................................................... 30-28

30.1.17 ip dhcp pool ........................................................................................................................................ 30-28

30.1.18 ip dhcp conflict ping-detection enable ................................................................................................. 30-29

30.1.19 ip dhcp ping packets ........................................................................................................................... 30-30

30.1.20 ip dhcp ping timeout ........................................................................................................................... 30-31

30.1.21 lease ................................................................................................................................................... 30-31

30.1.22 max-lease-time ................................................................................................................................... 30-32

30.1.23 netbios-name-server ........................................................................................................................... 30-33

30.1.24 netbios-node-type ............................................................................................................................... 30-34

30.1.25 network-address ................................................................................................................................ . 30-34

30.1.26 next-server .......................................................................................................................................... 30-35

30.1.27 option .................................................................................................................................................. 30-36

30.1.28 service dhcp ....................................................................................................................................... 30-37

30.1.29 show ip dhcp binding .......................................................................................................................... 30-37

30.1.30 show ip dhcp conflict .......................................................................................................................... 30-38

30.1.31 show ip dhcp relay information option ................................................................................................ 30-39

30.1.32 show ip dhcp server statistics ............................................................................................................. 30-39

30.2 COMMANDS FOR DHCP RELAY CONFIGURATION ............................................................................ 30-41

30.2.1 ip dhcp broadcast suppress ................................................................................................ .................. 30-41

30.2.2 ip dhcp relay share-vlan <vlanid> sub-vlan <vlanlist> .......................................................................... 30-42

30.2.3 ip forward-protocol udp bootps ............................................................................................................. 30-42

30.2.4 ip helper-address .................................................................................................................................. 30-43

30.2.5 show ip forward-protocol....................................................................................................................... 30-44

1-21

30.2.6 show ip helper-address ........................................................................................................................ 30-44

CHAPTER 31 COMMANDS FOR DHCPV6 ................................................................. 31-2

31.1 CLEAR IPV6 DHCP BINDING ............................................................................................................... 31-2

31.2 CLEAR IPV6 DHCP CONFLICT ............................................................................................................. 31-2

31.3 CLEAR IPV6 DHCP STATISTICS ........................................................................................................... 31-3

31.4 DEBUG IPV6 DHCP CLIENT PACKET .................................................................................................... 31-4

31.5 DEBUG IPV6 DHCP DETAIL ................................................................................................................. 31-4

31.6 DEBUG IPV6 DHCP RELAY PACKET ..................................................................................................... 31-5

31.7 DEBUG IPV6 DHCP SERVER ............................................................................................................... 31-5

31.8 DNS-SERVER ................................................................................................................................... 31-6

31.9 DOMAIN-NAME ................................................................................................................................. 31-7

31.10 EXCLUDED-ADDRESS ..................................................................................................................... 31-7

31.11 IPV6 ADDRESS ............................................................................................................................... 31-8

31.12 IPV6 DHCP CLIENT PD ..................................................................................................................... 31-9

31.13 IPV6 DHCP CLIENT PD HINT ........................................................................................................... 31-10

31.14 IPV6 DHCP POOL .......................................................................................................................... 31-11

31.15 IPV6 DHCP RELAY DESTINATION .................................................................................................... 31-12

31.16 IPV6 DHCP SERVER ...................................................................................................................... 31-13

31.17 IPV6 GENERAL-PREFIX ................................................................................................................. 31-13

31.18 IPV6 LOCAL POOL ........................................................................................................................ 31-14

31.19 LIFETIME ..................................................................................................................................... 31-15

31.20 NETWORK-ADDRESS .................................................................................................................... 31-16

31.21 PREFIX-DELEGATION .................................................................................................................... 31-17

31.22 PREFIX-DELEGATION POOL ........................................................................................................... 31-18

31.23 SERVICE DHCPV6 ......................................................................................................................... 31-19

31.24 SHOW IPV6 DHCP ......................................................................................................................... 31-19

31.25 SHOW IPV6 DHCP BINDING ............................................................................................................ 31-20

1-22

31.26 SHOW IPV6 DHCP CONFLICT .......................................................................................................... 31-21

31.27 SHOW IPV6 DHCP INTERFACE ........................................................................................................ 31-21

31.28 SHOW IPV6 DHCP POOL ................................................................................................................ 31-22

31.29 SHOW IPV6 DHCP STATISTICS ........................................................................................................ 31-22

31.30 SHOW IPV6 GENERAL-PREFIX ....................................................................................................... 31-25

31.31 SHOW IPV6 LOCAL POOL .............................................................................................................. 31-25

CHAPTER 32 COMMANDS FOR DHCP OPTION 82 ................................................ 32-26

32.1 DEBUG IP DHCP RELAY PACKET ....................................................................................................... 32-26

32.2 IP DHCP RELAY INFORMATION OPTION .............................................................................................. 32-26

32.3 IP DHCP RELAY INFORMATION OPTION DELIMITER ............................................................................. 32-27

32.4 IP DHCP RELAY INFORMATION OPTION REMOTE-ID ............................................................................ 32-28

32.5 IP DHCP RELAY INFORMATION OPTION REMOTE-ID FORMAT ............................................................... 32-29

32.6 IP DHCP RELAY INFORMATION OPTION SELF-DEFINED REMOTE-ID ...................................................... 32-30

32.7 IP DHCP RELAY INFORMATION OPTION SELF-DEFINED REMOTE-ID FORMAT ......................................... 32-31

32.8 IP DHCP RELAY INFORMATION OPTION SELF-DEFINED SUBSCRIBER-ID ............................................... 32-31

32.9 IP DHCP RELAY INFORMATION OPTION SELF-DEFINED SUBSCRIBER-ID FORMAT .................................. 32-32

32.10 IP DHCP RELAY INFORMATION OPTION SUBSCRIBER-ID .................................................................... 32-33

32.11 IP DHCP RELAY INFORMATION OPTION SUBSCRIBER-ID FORMAT ....................................................... 32-34

32.12 IP DHCP RELAY INFORMATION POLICY ............................................................................................ 32-35

32.13 IP DHCP SERVER RELAY INFORMATION ENABLE .............................................................................. 32-36

32.14 SHOW IP DHCP RELAY INFORMATION OPTION .................................................................................. 32-36

CHAPTER 33 IPV4 MULTICAST PROTOCOL ................................ .......................... 33-38

33.1 OPTION 43 ASCII LINE ................................................................................................................... 33-38

33.2 OPTION 43 HEX WORD .................................................................................................................. 33-39

33.3 OPTION 43 IP A.B.C.D ................................................................................................................... 33-39

33.4 OPTION 60 ASCII LINE ................................................................................................................... 33-40

33.5 OPTION 60 HEX WORD .................................................................................................................. 33-41

1-23

33.6 OPTION 60 IP A.B.C.D ................................................................................................................... 33-42

CHAPTER 34 COMMANDS FOR DHCPV6 OPTION37, 38 ...................................... 34-43

34.1 COMMANDS FOR DHCPV6 OPTION37, 38 ....................................................................................... 34-43

34.1.1 address range ....................................................................................................................................... 34-43

34.1.2 class ..................................................................................................................................................... 34-44

34.1.3 ipv6 dhcp class ..................................................................................................................................... 34-44

34.1.4 ipv6 dhcp relay remote-id ..................................................................................................................... 34-45

34.1.5 ipv6 dhcp relay remote-id option ........................................................................................................... 34-46

34.1.6 ipv6 dhcp relay subscriber-id ................................................................................................................ 34-47

34.1.7 ipv6 dhcp relay subscriber-id option ..................................................................................................... 34-47

34.1.8 ipv6 dhcp relay subscriber-id select delimiter ....................................................................................... 34-48

34.1.9 ipv6 dhcp server remote-id option ........................................................................................................ 34-49

34.1.10 ipv6 dhcp server select relay-forw ...................................................................................................... 34-50

34.1.11 ipv6 dhcp server subscriber-id option ................................................................................................. 34-51

34.1.12 ipv6 dhcp snooping remote-id ............................................................................................................. 34-51

34.1.13 ipv6 dhcp snooping remote-id option .................................................................................................. 34-52

34.1.14 ipv6 dhcp snooping remote-id policy .................................................................................................. 34-53

34.1.15 ipv6 dhcp snooping subscriber-id ....................................................................................................... 34-54

34.1.16 ipv6 dhcp snooping subscriber-id option ............................................................................................ 34-55

34.1.17 ipv6 dhcp snooping subscriber-id policy ............................................................................................. 34-55

34.1.18 ipv6 dhcp snooping subscriber-id select delimiter .............................................................................. 34-56

34.1.19 ipv6 dhcp use class ............................................................................................................................ 34-57

34.1.20 remote-id subscriber-id ....................................................................................................................... 34-58

34.2 COMMANDS FOR MONITORING AND DEBUGGING ............................................................................. 34-59

34.2.1 debug ipv6 dhcp detail .......................................................................................................................... 34-59

34.2.2 debug ipv6 dhcp relay packet ............................................................................................................... 34-60

34.2.3 debug ipv6 dhcp snooping packet ........................................................................................................ 34-61

34.2.4 show ipv6 dhcp relay option ................................................................................................................. 34-62

34.2.5 show ipv6 dhcp snooping option ........................................................................................................... 34-62

CHAPTER 35 COMMANDS FOR DHCP SNOOPING ............................................... 35-64

35.1 DEBUG IP DHCP SNOOPING BINDING ................................................................................................ 35-64

35.2 DEBUG IP DHCP SNOOPING EVENT ................................................................................................... 35-64

35.3 DEBUG IP DHCP SNOOPING PACKET ................................................................................................. 35-65

35.4 DEBUG IP DHCP SNOOPING PACKET INTERFACE................................................................................ 35-65

1-24

35.5 DEBUG IP DHCP SNOOPING UPDATE ................................................................................................. 35-66

35.6 ENABLE TRUSTVIEW KEY ................................................................................................................ 35-66

35.7 IP DHCP SNOOPING......................................................................................................................... 35-67

35.8 IP DHCP SNOOPING ACTION ............................................................................................................. 35-68

35.9 IP DHCP SNOOPING ACTION MAXNUM .............................................................................................. 35-69

35.10 IP DHCP SNOOPING BINDING ......................................................................................................... 35-69

35.11 IP DHCP SNOOPING BINDING DOT1X ............................................................................................... 35-70

35.12 IP DHCP SNOOPING BINDING USER ................................................................................................. 35-71

35.13 IP DHCP SNOOPING BINDING USER-CONTROL ................................................................................. 35-72

35.14 IP DHCP SNOOPING BINDING USER-CONTROL MAX-USER ................................................................. 35-73

35.15 IP DHCP SNOOPING INFORMATION ENABLE ..................................................................................... 35-74

35.16 IP DHCP SNOOPING INFORMATION OPTION ALLOW-UNTRUSTED (REPLACE|) ..................................... 35-75

35.17 IP DHCP SNOOPING INFORMATION OPTION DELIMITER ..................................................................... 35-75

35.18 IP DHCP SNOOPING INFORMATION OPTION REMOTE-ID .................................................................... 35-76

35.19 IP DHCP SNOOPING INFORMATION OPTION SELF-DEFINED REMOTE-ID .............................................. 35-77

35.20 IP DHCP SNOOPING INFORMATION OPTION SELF-DEFINED REMOTE-ID FORMAT ................................. 35-78

35.21 IP DHCP SNOOPING INFORMATION OPTION SELF-DEFINED SUBSCRIBER-ID ....................................... 35-78

35.22 IP DHCP SNOOPING INFORMATION OPTION SELF-DEFINED SUBSCRIBER-ID FORMAT .......................... 35-79

35.23 IP DHCP SNOOPING INFORMATION OPTION SUBSCRIBER-ID ............................................................. 35-80

35.24 IP DHCP SNOOPING INFORMATION OPTION SUBSCRIBER-ID FORMAT ................................................ 35-81

35.25 IP DHCP SNOOPING LIMIT-RATE ..................................................................................................... 35-82

35.26 IP DHCP SNOOPING TRUST ............................................................................................................ 35-83

35.27 IP USER HELPER-ADDRESS ........................................................................................................... 35-83

35.28 IP USER PRIVATE PACKET VERSION TWO ........................................................................................ 35-84

35.29 SHOW IP DHCP SNOOPING ............................................................................................................. 35-85

35.30 SHOW IP DHCP SNOOPING BINDING ALL ......................................................................................... 35-88

35.31 SHOW TRUSTVIEW STATUS ............................................................................................................ 35-90

1-25

CHAPTER 36 COMMANDS FOR DHCP SNOOPING OPTION 82 ............................ 36-91

36.1 IP DHCP SNOOPING INFORMATION ENABLE ....................................................................................... 36-91

CHAPTER 37 IPV4 MULTICAST PROTOCOL ................................ .......................... 37-92

37.1 COMMANDS FOR DCSCM .............................................................................................................. 37-92

37.1.1 access-list (Multicast Destination Control) ............................................................................................ 37-92

37.1.2 access-list (Multicast Source Control) .................................................................................................. 37-93

37.1.3 ip multicast destination-control access-group ....................................................................................... 37-94

37.1.4 ip multicast destination-control access-group (sip) ............................................................................... 37-95

37.1.5 ip multicast destination-control access-group (vmac) ........................................................................... 37-96

37.1.6 ip multicast policy ................................................................................................................................. 37-96

37.1.7 ip multicast source-control .................................................................................................................... 37-97

37.1.8 ip multicast source-control access-group.............................................................................................. 37-98

37.1.9 multicast destination-control ................................................................................................................. 37-99

37.1.10 show ip multicast destination-control ................................................................................................ 37-100

37.1.11 show ip multicast destination-control access-list ............................................................................... 37-101

37.1.12 show ip multicast policy .................................................................................................................... 37-101

37.1.13 show ip multicast source-control ....................................................................................................... 37-102

37.1.14 show ip multicast source-control access-list ..................................................................................... 37-103

37.2 COMMANDS FOR IGMP SNOOPING ............................................................................................... 37-104

37.2.1 clear ip igmp snooping vlan ................................................................................................................ 37-104

37.2.2 clear ip igmp snooping vlan <1-4094> mrouter-port ........................................................................... 37-104

37.2.3 debug igmp snooping all/packet/event/timer/mfc ................................................................................ 37-105

37.2.4 ip igmp snooping ................................................................................................................................ 37-105

37.2.5 ip igmp snooping proxy ....................................................................................................................... 37-106

37.2.6 ip igmp snooping vlan ......................................................................................................................... 37-107

37.2.7 ip igmp snooping vlan immediate-leave .............................................................................................. 37-107

37.2.8 ip igmp snooping vlan l2-general-querier ............................................................................................ 37-108

37.2.9 ip igmp snooping vlan l2-general-querier-source ................................................................................ 37-109

37.2.10 ip igmp snooping vlan l2-general-querier-version ............................................................................. 37-110

37.2.11 ip igmp snooping vlan limit ................................................................................................................ 37-110

37.2.12 ip igmp snooping vlan interface (ethernet | port-channel|) IFNAME limit ........................................... 37-111

37.2.13 ip igmp snooping vlan mrouter-port interface .................................................................................... 37-112

37.2.14 ip igmp snooping vlan mrouter-port learnpim .................................................................................... 37-113

37.2.15 ip igmp snooping vlan mrpt ................................................................ ............................................... 37-114

37.2.16 ip igmp snooping vlan query-interval ................................................................................................ 37-114

37.2.17 ip igmp snooping vlan query-mrsp .................................................................................................... 37-115

37.2.18 ip igmp snooping vlan query-robustness .......................................................................................... 37-116

1-26

37.2.19 ip igmp snooping vlan report source-address ................................................................................... 37-117

37.2.20 ip igmp snooping vlan specific-query-mrsp ................................................................ ....................... 37-117

37.2.21 ip igmp snooping vlan static-group ................................................................................................... 37-118

37.2.22 ip igmp snooping vlan suppression-query-time ................................................................................. 37-119

37.2.23 show ip igmp snooping ..................................................................................................................... 37-120

CHAPTER 38 IPV6 MULTICAST PROTOCOL ................................ ........................ 38-122

38.1 COMMANDS FOR MLD SNOOPING CONFIGURATION ....................................................................... 38-122

38.1.1 clear ipv6 mld snooping vlan .............................................................................................................. 38-122

38.1.2 clear ipv6 mld snooping vlan <1-4094> mrouter-port ......................................................................... 38-122

38.1.3 debug mld snooping all/packet/event/timer/mfc .................................................................................. 38-123

38.1.4 ipv6 mld snooping ............................................................................................................................... 38-124

38.1.5 ipv6 mld snooping vlan ....................................................................................................................... 38-124

38.1.6 ipv6 mld snooping vlan immediate-leave ............................................................................................ 38-125

38.1.7 ipv6 mld snooping vlan l2-general-querier .......................................................................................... 38-126

38.1.8 ipv6 mld snooping vlan limit ................................................................ ................................ ................ 38-127

38.1.9 ipv6 mld snooping vlan mrouter-port interface .................................................................................... 38-127

38.1.10 ipv6 mld snooping vlan mrouter-port learnpim6 ................................................................................ 38-128

38.1.11 ipv6 mld snooping vlan mrpt ............................................................................................................. 38-129

38.1.12 ipv6 mld snooping vlan query-interval .............................................................................................. 38-129

38.1.13 ipv6 mld snooping vlan query-mrsp .................................................................................................. 38-130

38.1.14 ipv6 mld snooping vlan query-robustness......................................................................................... 38-131

38.1.15 ipv6 mld snooping vlan static-group.................................................................................................. 38-132

38.1.16 ipv6 mld snooping vlan suppression-query-time ............................................................................... 38-132

38.1.17 show ipv6 mld snooping ................................................................................................................... 38-133

CHAPTER 39 COMMANDS FOR MULTICAST VLAN ............................................ 39-136

39.1 MULTICAST-VLAN ......................................................................................................................... 39-136

39.2 MULTICAST-VLAN ASSOCIATION..................................................................................................... 39-136

39.3 MULTICAST-VLAN ASSOCIATION INTERFACE ................................................................................... 39-137

CHAPTER 40 COMMANDS FOR ACL .................................................................... 40-139

40.1 ABSOLUTE-PERIODIC/PERIODIC ..................................................................................................... 40-139

40.2 ABSOLUTE START......................................................................................................................... 40-140

40.3 ACCESS-LIST (IP EXTENDED) ......................................................................................................... 40-141

40.4 ACCESS-LIST (IP STANDARD) ........................................................................................................ 40-143

1-27

40.5 ACCESS-LIST(MAC EXTENDED)...................................................................................................... 40-143

40.6 ACCESS-LIST(MAC-IP EXTENDED) .................................................................................................. 40-144

40.7 ACCESS-LIST(MAC STANDARD) ..................................................................................................... 40-146

40.8 CLEAR ACCESS-GROUP STATISTIC ................................................................................................. 40-147

40.9 FIREWALL .................................................................................................................................... 40-148

40.10 IP ACCESS EXTENDED ................................................................................................................. 40-149

40.11 IP ACCESS STANDARD ................................................................................................................ 40-149

40.12 IPV6 ACCESS-LIST ...................................................................................................................... 40-150

40.13 IPV6 ACCESS STANDARD ............................................................................................................ 40-151

40.14 IPV6 ACCESS EXTENDED ............................................................................................................. 40-152

40.15 {IP|IPV6|MAC|MAC-IP} ACCESS-GROUP ........................................................................................ 40-152

40.16 MAC ACCESS EXTENDED ............................................................................................................. 40-153

40.17 MAC-IP ACCESS EXTENDED ......................................................................................................... 40-154

40.18 PERMIT | DENY (IP EXTENDED)..................................................................................................... 40-155

40.19 PERMIT | DENY(IP STANDARD) ..................................................................................................... 40-156

40.20 PERMIT | DENY(IPV6 EXTENDED) ................................................................................................. 40-157

40.21 PERMIT | DENY(IPV6 STANDARD) ................................................................................................. 40-158

40.22 PERMIT | DENY(MAC EXTENDED) ................................................................................................. 40-159

40.23 PERMIT | DENY(MAC-IP EXTENDED) ............................................................................................. 40-160

40.24 SHOW ACCESS-LISTS ................................................................................................................. 40-162

40.25 SHOW ACCESS-GROUP ............................................................................................................... 40-164

40.26 SHOW FIREWALL ........................................................................................................................ 40-165

40.27 SHOW IPV6 ACCESS-LISTS .......................................................................................................... 40-165

40.28 SHOW TIME-RANGE .................................................................................................................... 40-166

40.29 TIME-RANGE .............................................................................................................................. 40-167

CHAPTER 41 COMMANDS FOR 802.1X ................................................................ 41-168

41.1 DEBUG DOT1X DETAIL .................................................................................................................. 41-168

1-28

41.2 DEBUG DOT1X ERROR .................................................................................................................. 41-169

41.3 DEBUG DOT1X FSM ...................................................................................................................... 41-169

41.4 DEBUG DOT1X PACKET ................................................................................................................. 41-170

41.5 DOT1X ACCEPT-MAC .................................................................................................................... 41-171

41.6 DOT1X EAPOR ENABLE ................................................................................................................. 41-172

41.7 DOT1X ENABLE ............................................................................................................................ 41-172

41.8 DOT1X IPV6 PASSTHROUGH .......................................................................................................... 41-173

41.9 DOT1X GUEST-VLAN ..................................................................................................................... 41-174

41.10 DOT1X MACFILTER ENABLE ........................................................................................................ 41-175

41.11 DOT1X MACBASED PORT-DOWN-FLUSH ....................................................................................... 41-176

41.12 DOT1X MAX-REQ ........................................................................................................................ 41-176

41.13 DOT1X USER ALLOW-MOVEMENT ................................................................................................ 41-177

41.14 DOT1X USER FREE-RESOURCE.................................................................................................... 41-178

41.15 DOT1X MAX-USER MACBASED .................................................................................................... 41-178

41.16 DOT1X MAX-USER USERBASED ................................................................................................... 41-179

41.17 DOT1X PORTBASED MODE SINGLE-MODE..................................................................................... 41-180

41.18 DOT1X PORT-CONTROL .............................................................................................................. 41-181

41.19 DOT1X PORT-METHOD ................................................................................................................ 41-182

41.20 DOT1X PRIVATECLIENT ENABLE .................................................................................................. 41-183

41.21 DOT1X PRIVATECLIENT PROTECT ENABLE .................................................................................... 41-183

41.22 DOT1X RE-AUTHENTICATE .......................................................................................................... 41-184

41.23 DOT1X RE-AUTHENTICATION ....................................................................................................... 41-185

41.24 DOT1X TIMEOUT QUIET-PERIOD ................................................................................................... 41-185

41.25 DOT1X TIMEOUT RE-AUTHPERIOD................................................................................................ 41-186

41.26 DOT1X TIMEOUT TX-PERIOD ........................................................................................................ 41-187

41.27 DOT1X UNICAST ENABLE ............................................................................................................ 41-187

41.28 SHOW DOT1X ............................................................................................................................. 41-188

1-29

CHAPTER 42 COMMANDS FOR THE NUMBER LIMITATION FUNCTION OF MAC AND

IP IN PORT, VLAN ........................................................................... 42-191

42.1 DEBUG IP ARP COUNT ................................................................................................................... 42-191

42.2 DEBUG IPV6 ND COUNT ................................................................................................................. 42-192

42.3 DEBUG SWITCHPORT ARP COUNT .................................................................................................. 42-192

42.4 DEBUG SWITCHPORT MAC COUNT ................................................................................................. 42-193

42.5 DEBUG SWITCHPORT ND COUNT .................................................................................................... 42-194

42.6 DEBUG VLAN MAC COUNT ............................................................................................................. 42-195

42.7 IP ARP DYNAMIC MAXIMUM ............................................................................................................ 42-195

42.8 IPV6 ND DYNAMIC MAXIMUM .......................................................................................................... 42-196

42.9 MAC-ADDRESS QUERY TIMEOUT .................................................................................................... 42-197

42.10 SHOW ARP-DYNAMIC COUNT ....................................................................................................... 42-198

42.11 SHOW MAC-ADDRESS DYNAMIC COUNT........................................................................................ 42-199

42.12 SHOW ND-DYNAMIC COUNT ......................................................................................................... 42-199

42.13 SWITCHPORT ARP DYNAMIC MAXIMUM ......................................................................................... 42-200

42.14 SWITCHPORT MAC-ADDRESS DYNAMIC MAXIMUM ......................................................................... 42-201

42.15 SWITCHPORT MAC-ADDRESS VIOLATION ...................................................................................... 42-202

42.16 SWITCHPORT ND DYNAMIC MAXIMUM ........................................................................................... 42-203

42.17 VLAN MAC-ADDRESS DYNAMIC MAXIMUM ..................................................................................... 42-204

CHAPTER 43 COMMANDS FOR AM CONFIGURATION ....................................... 43-206

43.1 AM ENABLE ................................................................................................................................. 43-206

43.2 AM PORT ..................................................................................................................................... 43-206

43.3 AM IP-POOL ................................................................................................................................. 43-207

43.4 AM MAC-IP-POOL ......................................................................................................................... 43-208

43.5 NO AM ALL ................................................................................................................................... 43-209

43.6 SHOW AM .................................................................................................................................... 43-209

CHAPTER 44 COMMANDS FOR SECURITY FEATURE ........................................ 44-211

1-30

44.1 DOSATTACK-CHECK SRCIP-EQUAL-DSTIP ENABLE .......................................................................... 44-211

44.2 DOSATTACK-CHECK TCP-FLAGS ENABLE ....................................................................................... 44-211

44.3 DOSATTACK-CHECK SRCPORT-EQUAL-DSTPORT ENABLE ............................................................... 44-212

44.4 DOSATTACK-CHECK ICMP-ATTACKING ENABLE ............................................................................... 44-213

44.5 DOSATTACK-CHECK ICMPV4-SIZE ................................................................................................. 44-214

CHAPTER 45 COMMANDS FOR TACACS+ ........................................................... 45-215

45.1 TACACS-SERVER AUTHENTICATION HOST ....................................................................................... 45-215

45.2 TACACS-SERVER KEY ................................................................................................................... 45-216

45.3 TACACS-SERVER NAS-IPV4 ........................................................................................................... 45-216

45.4 TACACS-SERVER TIMEOUT ............................................................................................................ 45-217

45.5 DEBUG TACACS-SERVER .............................................................................................................. 45-218

CHAPTER 46 COMMANDS FOR RADIUS .............................................................. 46-219

46.1 AAA ENABLE ................................................................................................................................ 46-219

46.2 AAA-ACCOUNTING ENABLE ........................................................................................................... 46-219

46.3 AAA-ACCOUNTING UPDATE ........................................................................................................... 46-220

46.4 DEBUG AAA PACKET ..................................................................................................................... 46-221

46.5 DEBUG AAA DETAIL ATTRIBUTE ..................................................................................................... 46-222

46.6 DEBUG AAA DETAIL CONNECTION .................................................................................................. 46-222

46.7 DEBUG AAA DETAIL EVENT ............................................................................................................ 46-223

46.8 DEBUG AAA ERROR ...................................................................................................................... 46-224

46.9 RADIUS NAS-IPV4 ......................................................................................................................... 46-224

46.10 RADIUS NAS-IPV6 ....................................................................................................................... 46-225

46.11 RADIUS-SERVER ACCOUNTING HOST ........................................................................................... 46-226

46.12 RADIUS-SERVER AUTHENTICATION HOST ..................................................................................... 46-227

46.13 RADIUS-SERVER DEAD-TIME ....................................................................................................... 46-228

46.14 RADIUS-SERVER KEY .................................................................................................................. 46-229

46.15 RADIUS-SERVER RETRANSMIT ..................................................................................................... 46-230

1-31

46.16 RADIUS-SERVER TIMEOUT ........................................................................................................... 46-231

46.17 RADIUS-SERVER ACCOUNTING-INTERIM-UPDATE TIMEOUT ............................................................ 46-231

46.18 SHOW AAA AUTHENTICATED-USER .............................................................................................. 46-232

46.19 SHOW AAA AUTHENTICATING-USER ............................................................................................. 46-233

46.20 SHOW AAA CONFIG ..................................................................................................................... 46-234

46.21 SHOW RADIUS AUTHENTICATED-USER COUNT .............................................................................. 46-235

46.22 SHOW RADIUS AUTHENTICATING-USER COUNT ............................................................................. 46-236

46.23 SHOW RADIUS COUNT ................................................................................................................. 46-236

CHAPTER 47 COMMANDS FOR SSL CONFIGURATION ...................................... 47-238

47.1 IP HTTP SECURE-SERVER .............................................................................................................. 47-238

47.2 IP HTTP SECURE-PORT ................................................................................................................. 47-238

47.3 IP HTTP SECURE- CIPHERSUITE ..................................................................................................... 47-239

47.4 SHOW IP HTTP SECURE-SERVER STATUS ........................................................................................ 47-240

47.5 DEBUG SSL .................................................................................................................................. 47-241

CHAPTER 48 COMMANDS FOR IPV6 SECURITY RA ........................................... 48-242

48.1 IPV6 SECURITY-RA ENABLE ........................................................................................................... 48-242

48.2 IPV6 SECURITY-RA ENABLE ........................................................................................................... 48-243

48.3 SHOW IPV6 SECURITY-RA ............................................................................................................. 48-243

48.4 DEBUG IPV6 SECURITY-RA ............................................................................................................ 48-244

CHAPTER 49 COMMANDS FOR MAB ................................................................... 49-245

49.1 AUTHENTICATION MAB .................................................................................................................. 49-245

49.2 CLEAR MAC-AUTHENTICATION-BYPASS BINDING............................................................................. 49-246

49.3 DEBUG MAC-AUTHENTICATION-BYPASS ......................................................................................... 49-246

49.4 MAC-AUTHENTICATION-BYPASS BINDING-LIMIT............................................................................... 49-247

49.5 MAC-AUTHENTICATION-BYPASS ENABLE ........................................................................................ 49-248

49.6 MAC-AUTHENTICATION-BYPASS SPOOFING-GARP-CHECK ............................................................... 49-249

1-32

49.7 MAC-AUTHENTICATION-BYPASS TIMEOUT OFFLINE-DETECT ............................................................ 49-249

49.8 MAC-AUTHENTICATION-BYPASS TIMEOUT QUIET-PERIOD ................................................................. 49-250

49.9 MAC-AUTHENTICATION-BYPASS TIMEOUT STALE-PERIOD ................................................................ 49-251

49.10 MAC-AUTHENTICATION-BYPASS USERNAME-FORMAT .................................................................... 49-252

49.11 SHOW MAC-AUTHENTICATION-BYPASS ......................................................................................... 49-252

CHAPTER 50 COMMANDS FOR PPPOE INTERMEDIATE AGENT ...................... 50-255

50.1 DEBUG PPPOE INTERMEDIATE AGENT PACKET {RECEIVE | SEND} INTERFACE ETHERNET <INTERFACE-NAME>

.......................................................................................................................................................... 50-255

50.2 PPPOE INTERMEDIATE-AGENT ....................................................................................................... 50-256

50.3 PPPOE INTERMEDIATE-AGENT (PORT) ........................................................................................... 50-256

50.4 PPPOE INTERMEDIATE-AGENT CIRCUIT-ID ...................................................................................... 50-257

50.5 PPPOE INTERMEDIATE-AGENT DELIMITER....................................................................................... 50-258

50.6 PPPOE INTERMEDIATE-AGENT FORMAT .......................................................................................... 50-259

50.7 PPPOE INTERMEDIATE-AGENT REMOTE-ID ...................................................................................... 50-259

50.8 PPPOE INTERMEDIATE-AGENT TRUST ............................................................................................ 50-260

50.9 PPPOE INTERMEDIATE-AGENT TYPE SELF-DEFINED CIRCUIT-ID ........................................................ 50-261

50.10 PPPOE INTERMEDIATE-AGENT TYPE SELF-DEFINED REMOTE-ID ..................................................... 50-262

50.11 PPPOE INTERMEDIATE-AGENT TYPE TR-101 CIRCUIT-ID ACCESS-NODE-ID ...................................... 50-262

50.12 PPPOE INTERMEDIATE-AGENT TYPE TR-101 CIRCUIT-ID IDENTIFIER-STRING OPTION DELIMITER ....... 50-263

50.13 PPPOE INTERMEDIATE-AGENT VENDOR-TAG STRIP ....................................................................... 50-264

50.14 SHOW PPPOE INTERMEDIATE-AGENT ACCESS-NODE-ID ................................................................. 50-265

50.15 SHOW PPPOE INTERMEDIATE-AGENT IDENTIFIER-STRING OPTION DELIMITER .................................. 50-266

50.16 SHOW PPPOE INTERMEDIATE-AGENT INFO ................................................................................... 50-267

CHAPTER 51 COMMANDS FOR WEB PORTAL CONFIGURATION ..................... 51-268

51.1 CLEAR WEBPORTAL BINDING ........................................................................................................ 51-268

51.2 DEBUG WEBPORTAL BINDING ........................................................................................................ 51-269

51.3 DEBUG WEBPORTAL ERROR .......................................................................................................... 51-269

1-33

51.4 DEBUG WEBPORTAL EVENT .......................................................................................................... 51-270

51.5 DEBUG WEBPORTAL PACKET ........................................................................................................ 51-271

51.6 IP DHCP SNOOPING BINDING WEBPORTAL ...................................................................................... 51-272

51.7 SHOW WEBPORTAL ...................................................................................................................... 51-272

51.8 SHOW WEBPORTAL BINDING ......................................................................................................... 51-273

51.9 WEBPORTAL BINDING-LIMIT .......................................................................................................... 51-274

51.10 WEBPORTAL ENABLE ................................................................................................................. 51-275

51.11 WEBPORTAL ENABLE (PORT) ...................................................................................................... 51-276

51.12 WEBPORTAL NAS-IP ................................................................................................................... 51-277

51.13 WEBPORTAL REDIRECT ............................................................................................................... 51-277

CHAPTER 52 COMMANDS FOR VLAN-ACL ......................................................... 52-279

52.1 CLEAR VACL STATISTIC VLAN ........................................................................................................ 52-279

52.2 SHOW VACL VLAN ........................................................................................................................ 52-279

52.3 VACL IP ACCESS-GROUP ............................................................................................................... 52-281

52.4 VACL IPV6 ACCESS-GROUP ........................................................................................................... 52-282

52.5 VACL MAC ACCESS-GROUP ........................................................................................................... 52-283

52.6 VACL MAC-IP ACCESS-GROUP ....................................................................................................... 52-283

CHAPTER 53 COMMANDS FOR SAVI ................................................................... 53-285

53.1 COMMANDS FOR SAVI ................................................................................................................. 53-285

53.1.1 ipv6 cps prefix ..................................................................................................................................... 53-285

53.1.2 ipv6 cps prefix check enable ............................................................................................................... 53-286

53.1.3 ipv6 dhcp snooping trust ..................................................................................................................... 53-286

53.1.4 ipv6 nd snooping trust ........................................................................................................................ 53-287

53.1.5 savi check binding .............................................................................................................................. 53-288

53.1.6 savi enable ......................................................................................................................................... 53-289

53.1.7 savi ipv6 binding num ......................................................................................................................... 53-290

53.1.8 savi ipv6 check source binding ........................................................................................................... 53-290

53.1.9 savi ipv6 check source ip-address mac-address ................................................................................ 53-292

53.1.10 savi ipv6 {dhcp-only | slaac-only | dhcp-slaac} enable ...................................................................... 53-292

53.1.11 savi ipv6 mac-binding-limit ................................................................................................................ 53-293

1-34

53.1.12 savi max-dad-dalay .......................................................................................................................... 53-294

53.1.13 savi max-dad-prepare-delay ............................................................................................................. 53-295

53.1.14 savi max-slaac-life ............................................................................................................................ 53-295

53.1.15 savi timeout bind-protect................................................................................................................... 53-296

53.2 COMMANDS FOR MONITOR AND DEBUG ........................................................................................ 53-297

53.2.1 debug ipv6 dhcp snooping binding ..................................................................................................... 53-297

53.2.2 debug ipv6 dhcp snooping event ........................................................................................................ 53-298

53.2.3 debug ipv6 dhcp snooping packet ...................................................................................................... 53-298

53.2.4 debug ipv6 nd snooping binding ......................................................................................................... 53-299

53.2.5 debug ipv6 nd snooping event ............................................................................................................ 53-300

53.2.6 debug ipv6 nd snooping packet .......................................................................................................... 53-300

53.2.7 show savi ipv6 check source binding .................................................................................................. 53-301

CHAPTER 54 COMMANDS FOR MRPP ................................................................. 54-303

54.1 CONTROL-VLAN ........................................................................................................................... 54-303

54.2 CLEAR MRPP STATISTICS .............................................................................................................. 54-304

54.3 DEBUG MRPP ............................................................................................................................... 54-304

54.4 ENABLE ....................................................................................................................................... 54-305

54.5 ERRP DOMAIN .............................................................................................................................. 54-306

54.6 FAIL-TIMER .................................................................................................................................. 54-307

54.7 HELLO-TIMER ............................................................................................................................... 54-307

54.8 MRPP EAPS COMPATIBLE .............................................................................................................. 54-308

54.9 MRPP ENABLE .............................................................................................................................. 54-309

54.10 MRPP ERRP COMPATIBLE ............................................................................................................ 54-310

54.11 MRPP POLL-TIME ........................................................................................................................ 54-311

54.12 MRPP RING ................................................................................................................................ 54-311

54.13 MRPP RING PRIMARY-PORT ......................................................................................................... 54-312

54.14 MRPP RING SECONDARY-PORT .................................................................................................... 54-313

54.15 NODE-MODE .............................................................................................................................. 54-313

54.16 SHOW MRPP .............................................................................................................................. 54-314

54.17 SHOW MRPP STATISTICS ............................................................................................................. 54-315

1-35

CHAPTER 55 COMMANDS FOR ULPP .................................................................. 55-316

55.1 CLEAR ULPP FLUSH COUNTER INTERFACE ..................................................................................... 55-316

55.2 CONTROL VLAN ............................................................................................................................ 55-316

55.3 DEBUG ULPP ERROR .................................................................................................................... 55-317

55.4 DEBUG ULPP EVENT ..................................................................................................................... 55-318

55.5 DEBUG ULPP FLUSH CONTENT INTERFACE ..................................................................................... 55-319

55.6 DEBUG ULPP FLUSH {SEND | RECEIVE} INTERFACE ......................................................................... 55-320

55.7 DESCRIPTION ............................................................................................................................... 55-320

55.8 FLUSH DISABLE ARP ..................................................................................................................... 55-321

55.9 FLUSH DISABLE MAC .................................................................................................................... 55-322

55.10 FLUSH DISABLE MAC-VLAN ......................................................................................................... 55-323

55.11 FLUSH ENABLE ARP .................................................................................................................... 55-323

55.12 FLUSH ENABLE MAC ................................................................................................................... 55-324

55.13 FLUSH ENABLE MAC-VLAN .......................................................................................................... 55-325

55.14 PREEMPTION DELAY ................................................................................................................... 55-326

55.15 PREEMPTION MODE .................................................................................................................... 55-326

55.16 PROTECT VLAN-REFERENCE-INSTANCE ....................................................................................... 55-327

55.17 SHOW ULPP FLUSH COUNTER INTERFACE .................................................................................... 55-328

55.18 SHOW ULPP FLUSH-RECEIVE-PORT ............................................................................................. 55-329

55.19 SHOW ULPP GROUP .................................................................................................................... 55-329

55.20 ULPP CONTROL VLAN ................................................................................................................. 55-330

55.21 ULPP FLUSH DISABLE ARP .......................................................................................................... 55-331

55.22 ULPP FLUSH DISABLE MAC.......................................................................................................... 55-332

55.23 ULPP FLUSH DISABLE MAC-VLAN ................................................................................................ 55-333

55.24 ULPP FLUSH ENABLE ARP ........................................................................................................... 55-333

55.25 ULPP FLUSH ENABLE MAC .......................................................................................................... 55-334

55.26 ULPP FLUSH ENABLE MAC-VLAN ................................................................................................. 55-335

1-36

55.27 ULPP GROUP ............................................................................................................................. 55-335

55.28 ULPP GROUP MASTER ................................................................................................................ 55-336

55.29 ULPP GROUP SLAVE ................................................................................................................... 55-337

CHAPTER 56 IPV4 MULTICAST PROTOCOL ................................ ........................ 56-338

56.1 DEBUG ULSM EVENT ..................................................................................................................... 56-338

56.2 SHOW ULSM GROUP ..................................................................................................................... 56-338

56.3 ULSM GROUP ............................................................................................................................... 56-339

56.4 ULSM GROUP {UPLINK | DOWNLINK} .............................................................................................. 56-340

CHAPTER 57 COMMANDS FOR MIRRORING CONFIGURATION ........................ 57-341

57.1 MONITOR SESSION SOURCE INTERFACE ......................................................................................... 57-341

57.2 MONITOR SESSION SOURCE INTERFACE ACCESS-LIST ..................................................................... 57-342

57.3 MONITOR SESSION DESTINATION INTERFACE .................................................................................. 57-342

57.4 SHOW MONITOR ........................................................................................................................... 57-343

CHAPTER 58 COMMANDS FOR SFLOW ............................................................... 58-345

58.1 SFLOW AGENT-ADDRESS .............................................................................................................. 58-345

58.2 SFLOW ANALYZER ........................................................................................................................ 58-345

58.3 SFLOW COUNTER-INTERVAL .......................................................................................................... 58-346

58.4 SFLOW DATA-LEN ......................................................................................................................... 58-347

58.5 SFLOW DESTINATION .................................................................................................................... 58-348

58.6 SFLOW HEADER-LEN .................................................................................................................... 58-348

58.7 SFLOW PRIORITY .......................................................................................................................... 58-349

58.8 SFLOW RATE ................................................................................................................................ 58-350

58.9 SHOW SFLOW .............................................................................................................................. 58-351

CHAPTER 59 COMMANDS FOR RSPAN CONFIGURATION ................................ 59-353

59.1 REMOTE-SPAN ............................................................................................................................. 59-353

59.2 MONITOR SESSION REMOTE VLAN ................................................................................................. 59-354

1-37

59.3 MONITOR SESSION REFLECTOR-PORT ............................................................................................ 59-354

CHAPTER 60 COMMANDS FOR ERSPAN ............................................................. 60-356

60.1 MONITOR SESSION ....................................................................................................................... 60-356

60.2 MONITOR SESSION DESTINATION TUNNEL ...................................................................................... 60-357

CHAPTER 61 COMMANDS FOR SNTP .................................................................. 61-358

61.1 CLOCK TIMEZONE......................................................................................................................... 61-358

61.2 DEBUG SNTP ................................................................................................................................ 61-358

61.3 SNTP POLLTIME ............................................................................................................................ 61-359

61.4 SNTP SERVER .............................................................................................................................. 61-360

61.5 SHOW SNTP ................................................................................................................................. 61-361

CHAPTER 62 COMMANDS FOR NTP .................................................................... 62-362

62.1 CLOCK TIMEZONE......................................................................................................................... 62-362

62.2 DEBUG NTP ADJUST ..................................................................................................................... 62-362

62.3 DEBUG NTP AUTHENTICATION ....................................................................................................... 62-363

62.4 DEBUG NTP EVENTS ..................................................................................................................... 62-364

62.5 DEBUG NTP PACKET ..................................................................................................................... 62-365

62.6 DEBUG NTP SYNC ......................................................................................................................... 62-365

62.7 NTP ACCESS-GROUP .................................................................................................................... 62-366

62.8 NTP AUTHENTICATE ...................................................................................................................... 62-367

62.9 NTP AUTHENTICATION-KEY ........................................................................................................... 62-367

62.10 NTP BROADCAST SERVER COUNT ................................................................................................ 62-368

62.11 NTP DISABLE.............................................................................................................................. 62-369

62.12 NTP ENABLE .............................................................................................................................. 62-370

62.13 NTP IPV6 MULTICAST CLIENT ....................................................................................................... 62-370

62.14 NTP MULTICAST CLIENT .............................................................................................................. 62-371

62.15 NTP SERVER .............................................................................................................................. 62-372

1-38

62.16 NTP TRUSTED-KEY ..................................................................................................................... 62-373

62.17 SHOW NTP STATUS ..................................................................................................................... 62-373

62.18 SHOW NTP SESSION ................................................................................................................... 62-374

CHAPTER 63 COMMANDS FOR SUMMER TIME .................................................. 63-376

63.1 CLOCK SUMMER-TIME ABSOLUTE .................................................................................................. 63-376

63.2 CLOCK SUMMER-TIME RECURRING ................................................................................................ 63-377

63.3 CLOCK SUMMER-TIME RECURRING ................................................................................................ 63-378

CHAPTER 64 COMMANDS FOR DNSV4/V6 .......................................................... 64-379

64.1 CLEAR DYNAMIC-HOST ................................................................................................................. 64-379

64.2 DEBUG DNS ................................................................................................................................. 64-379

64.3 DNS-SERVER ............................................................................................................................... 64-380

64.4 DNS LOOKUP ............................................................................................................................... 64-381

64.5 SHOW DNS NAME-SERVER ............................................................................................................ 64-382

64.6 SHOW DNS DOMAIN-LIST ............................................................................................................... 64-383

64.7 SHOW DNS HOSTS ........................................................................................................................ 64-383

64.8 SHOW DNS CONFIG ....................................................................................................................... 64-384

64.9 SHOW DNS CLIENT ....................................................................................................................... 64-385

64.10 IP DOMAIN-LOOKUP .................................................................................................................... 64-385

64.11 IP DOMAIN-LIST .......................................................................................................................... 64-386

64.12 IP DNS SERVER .......................................................................................................................... 64-387

64.13 IP DNS SERVER QUEUE MAXIMUM ................................................................................................ 64-388

64.14 IP DNS SERVER QUEUE TIMEOUT ................................................................................................. 64-388

CHAPTER 65 COMMANDS FOR SHOW ................................................................ 65-390

65.1 CLEAR HISTORY ALL-USERS .......................................................................................................... 65-390

65.2 CLEAR LOGGING .......................................................................................................................... 65-390

65.3 HISTORY ALL-USERS MAX-LENGTH ................................................................................................ 65-391

1-39

65.4 LOGGING ..................................................................................................................................... 65-391

65.5 LOGGING EXECUTED-COMMANDS .................................................................................................. 65-392

65.6 LOGGING LOGHOST SEQUENCE-NUMBER ....................................................................................... 65-393

65.7 PING............................................................................................................................................ 65-394

65.8 PING6.......................................................................................................................................... 65-395

65.9 SHOW BOOT-FILES ....................................................................................................................... 65-397

65.10 SHOW DEBUGGING ..................................................................................................................... 65-398

65.11 SHOW FLASH ............................................................................................................................. 65-399

65.12 SHOW HISTORY .......................................................................................................................... 65-399

65.13 SHOW HISTORY ALL-USERS ......................................................................................................... 65-400

65.14 SHOW LOGGING BUFFERED ........................................................................................................ 65-401

65.15 SHOW LOGGING EXECUTED-COMMANDS STATE ............................................................................ 65-402

65.16 SHOW LOGGING SOURCE ............................................................................................................ 65-403

65.17 SHOW MEMORY .......................................................................................................................... 65-403

65.18 SHOW RUNNING-CONFIG ............................................................................................................. 65-404

65.19 SHOW RUNNING-CONFIG CURRENT-MODE .................................................................................... 65-405

65.20 SHOW STARTUP-CONFIG ............................................................................................................. 65-406

65.21 SHOW SWITCHPORT INTERFACE .................................................................................................. 65-406

65.22 SHOW TCP ................................................................................................................................. 65-407

65.23 SHOW TCP IPV6 .......................................................................................................................... 65-408

65.24 SHOW TELNET LOGIN.................................................................................................................. 65-409

65.25 SHOW TECH-SUPPORT ................................................................................................................ 65-409

65.26 SHOW UDP ................................................................................................................................. 65-410

65.27 SHOW UDP IPV6 ......................................................................................................................... 65-410

65.28 SHOW VERSION .......................................................................................................................... 65-411

65.29 TRACEROUTE ............................................................................................................................ 65-411

65.30 TRACEROUTE6 .......................................................................................................................... 65-412

1-40

CHAPTER 66 COMMANDS FOR RELOAD SWITCH AFTER SPECIFIED TIME ... 66-414

66.1 RELOAD AFTER ............................................................................................................................ 66-414

66.2 RELOAD CANCEL ......................................................................................................................... 66-415

66.3 SHOW RELOAD ............................................................................................................................. 66-415

CHAPTER 67 COMMANDS FOR DEBUGGING AND DIAGNOSIS FOR PACKETS

RECEIVED AND SENT BY CPU ...................................................... 67-417

67.1 CLEAR CPU-RX-STAT PROTOCOL ................................................................................................... 67-417

67.2 CPU-RX-RATELIMIT PROTOCOL ...................................................................................................... 67-417

67.3 CPU-RX-RATELIMIT TOTAL ............................................................................................................. 67-418

67.4 DEBUG DRIVER ............................................................................................................................ 67-419

67.5 SHOW CPU-RX PROTOCOL ............................................................................................................ 67-420

CHAPTER 68 COMMANDS FOR POE .................................................................... 68-421

68.1 COMMANDS FOR POE CONFIGURATION ........................................................................................ 68-421

68.1.1 power inline dynamic detect enable .................................................................................................... 68-421

68.1.2 power inline dynamic detect interval <30-300> ................................................................................... 68-422

68.1.3 power inline enable (Global) ............................................................................................................... 68-422

68.1.4 power inline enable (Port) ................................................................................................................... 68-423

68.1.5 power inline high-inrush ...................................................................................................................... 68-424

68.1.6 power inline legacy ................................................................ ............................................................. 68-425

68.1.7 power inline max (Global) ................................................................................................................... 68-425

68.1.8 power inline max (Port) ....................................................................................................................... 68-426

68.1.9 power inline police .............................................................................................................................. 68-427

68.1.10 power inline priority ........................................................................................................................... 68-428

68.2 COMMANDS FOR POE MONITORING AND DEBUGGING ................................................................... 68-429

68.2.1 Monitoring and Debugging Information ............................................................................................... 68-429

1-41

Chapter 1 Commands for Basic Switch

Configuration

1.1 Commands for Basic Configuration

1.1.1 Authentication line

Command:

authentication line {console | vty | web} login {local | radius | tacacs}
no authentication line {console | vty | web} login

Function:

Configure VTY (login with Telnet and SSH), Web and Console, so as to select the priority of the authentication mode
for the login user. The no form command restores the default authentication mode.

Default:

No configuration is enabled for the console login method by default. Local authentication is enabled for the VTY and
Web login method by default.

Command Mode:

Global Mode.

Usage Guide:

The authentication method for Console, VTY and Web login can be configured respectively. And authentication
method can be any one or combination of Local, RADIUS and TACACS. When login method is configuration in
combination, the preference goes from left to right. If the users have passed the authentication method,
authentication method of lower preferences will be ignored. To be mentioned, the user can login as long as a
authentication method is passed. AAA function and RADIUS server should be configured before the RADIUS
authentication can be used.

The authentication line console login command is exclusive with the login command. The authentication line
console login command configures the switch to use the Console login method. And the login command makes the
Console login to use the passwords configured by the password command for authentication.

If local authentication is configured while no local users are configured, users will be able to login the switch via the
Console method.

1-42

Example:

Configure the Telnet and ssh login method to Local and RADIUS authentication method.
Switch(config)# authentication line vty login local radius

Relative Command:

aaa enable, radius-server authentication host, tacacs-server authentication host, tacacs-server key

1.1.2 banner

Command:

banner motd <LINE>
no banner motd

Function:

This command is used to configure the information displayed when the login authentication of a telnet or console
user is successful, the no command configures that the information is not displayed when the authentication is
successful.

Parameters:

<LINE>: The information displayed when the authentication is successful, length limit from 1 to 100 characters.

Default:

Do not show the information when the authentication is successful.

Command mode:

Global mode.

Example:

Switch(config)#banner motd Welcome

1-43

1.1.3 boot img

Command:

boot img <img-file-url> {primary | backup}

Function:

Configure the first and second img files used in the next boot of the switch.

Parameters:

Primary means to configure the first IMG file, backup means to configure the second IMG file, <img-file-url> is the full
path of the booting IMG file, the format of which is as follows:

1. The file path comprises of three parts: device prefix used as the root directory (flash:/), sub-directory, and the file
name. No space is allowed in each part or between two parts.

2. The suffix of all file names should be .img.

3. The length of the full file path should not be longer than 128 characters, while the file name cannot be longer than
80 characters.

Command Mode:

Admin Mode.

Default:

The factory original configuration only specifies the first booting IMG file, it is nos.img file in the FLASH, without the
second booting IMG file.

Usage Guide:

The first and second img files can only use .img files stored in switch.

Example:

Set flash:/nos.img as the second booting IMG file used in the next booting of the switch.
Switch#boot img flash:/nos.img backup

1-44

1.1.4 boot startup-config

Command:

boot startup-config {NULL | <file-url> }

Function:

Configure the CFG file used in the next booting of the switch.

Parameters:

The NULL keyword means to use the factory original configuration as the next booting configuration. Setting the
CFG file used in the next booting as NULL equals to implementing set default and write commands. <file-url> is the
full path of CFG file used in the next booting. The format of which is as follows:

1. The file path comprises of three parts: device prefix used as the root directory (flash:/), sub-directory, and the file
name. No space is allowed in each part or between two parts.

2. The suffix of all file names should be .cfg.

3. The length of the full file path should not be longer than 128 characters, while the file name cannot be longer than
80 characters.

Command Mode:

Admin Mode.

Default Settings:

None.

Usage Guide:

Configure the CFG file used in the next booting can only use .cfg files stored in the switch.

Example:

Set flash:/ startup.cfg as the CFG file used in the next booting of the switch.
Switch# boot startup-config flash:/ startup.cfg

1-45

1.1.5 clock set

Command:

clock set <HH:MM:SS> <YYYY.MM.DD>

Function:

Set system date and time.

Parameter:

<HH:MM:SS>is the current time, and the valid scope for HH is 0 to 23, MM and SS 0 to 59; <YYYY.MM.DD> is the
current year, month and date, and the valid scope for YYYY is 1970~2038, MON meaning month, and DD between 1
to 31.

Command mode:

Admin Mode.

Default:

upon first time start-up, it is defaulted to 2006.1.1 0: 0: 0.

Usage guide:

The switch cannot continue timing with power off, hence the current date and time must be first set at environments
where exact time is required.

Example:

To set the switch current date and time to 2002.8.1 23: 0: 0:
Switch#clock set 23:0:0 2002.8.1

Relative

Command: show clock

1-46

1.1.6 config

Command:

config [terminal]

Function:

Enter Global Mode from Admin Mode.

Parameter:

[terminal] indicates terminal configuration.

Command mode:

Admin Mode

Example:

Switch#config

1.1.7 debug ssh-server

Command:

debug ssh-server
no debug ssh-server

Function:

Display SSH server debugging information; the “no debug ssh-server” command stops displaying SSH server
debugging information.

Default:

This function is disabled by default.

Command mode:

Admin Mode.

1-47

1.1.8 disable

Command:

Disable

Function:

Disable admin mode.

Parameter:

None.

Default:

None.

Command mode:

Admin Mode.

Usage Guide:

None.

Example:

Switch#disable
Switch>

1.1.9 enable

Command:

enable [<1-15>]

Function:

Use enable command to enter Admin Mode from User Mode, or change the privilege level of the users.

Command mode:

User Mode/ Admin Mode.

Default:

None.

1-48

Usage Guide:

To prevent unauthorized access of non-admin user, user authentication is required (i.e. Admin user password is
required) when entering Admin Mode from User Mode. If the correct Admin user password is entered, Admin Mode
access is granted; if 3 consecutive entry of Admin user password are all wrong, it remains in the User Mode. When
the user’s privilege is changed from the low level to the high level, it needs to authenticate the password of the
corresponding level, or else it will not authenticate the password. Set the Admin user password under Global Mode

with “enable password” command.

Example:

Switch>enable
Switch#

1.1.10 enable password

Command:

enable password [level <1-15>] [0 | 7] <password>
no enable password [level <1-15>]

Function:

Configure the password used for enter Admin Mode from the User Mode,

The “no enable password” command deletes this password.

Parameter:

level <1-15> is used to specify the privilege level, the default level is 15. <password> is the password for the user. If

input option 0 on password setting, the password is not encrypted; if input option 7, the password is encrypted.

Command mode:

Global Mode

Default:

This password is empty by system default

Usage Guide:

Configure this password to prevent unauthorized entering Admin Mode. It is recommended to set the password at

the initial switch configuration. Also, it is recommended to exit Admin Mode with “exit” command when the

administrator needs to leave the terminal for a long time.

1-49

Example:

Configure the command for general users to enter the admin mode by rule as test.
Switch(config)#enable password 0 test

1.1.11 end

Command:

End

Function:

Quit current mode and return to Admin mode when not at User Mode/ Admin Mode.

Command mode:

Except User Mode/ Admin Mode

Example:

Quit VLAN mode and return to Admin mode.
Switch(config-vlan1)#end
Switch#

1.1.12 exec-timeout

Command:

exec-timeout <minutes> [<seconds>]
no exec-timeout

Function:

Configure the timeout of exiting admin mode. The “no exec-timeout” command restores the default value.

Parameters:

<minute> is the time value shown in minute and ranges between 0~35791. <seconds> is the time value shown in
seconds and ranges between 0~59.

Command mode:

Global mode

1-50

Default:

Default timeout is 10 minutes.

Usage guide:

To secure the switch, as well to prevent malicious actions from unauthorized user, the time will be count from the last
configuration the admin had made, and the system will exit the admin mode at due time. It is required to enter admin
code and password to enter the admin mode again. The timeout timer will be disabled when the timeout is set to 0.

Example:

Set the admin mode timeout value to 6 minutes.
Switch(config)#exec-timeout 6
Set the admin mode timeout value to 5 minutes, 30 seconds.
Switch(config)#exec-timeout 5 30

1.1.13 exit

Command:

Exit

Function:

Quit current mode and return to its previous mode.

Command mode:

All Modes

Usage Guide:

This command is to quit current mode and return to its previous mode.

Example:

Quit global mode to its previous mode
Switch#exit
Switch#

1-51

1.1.14 help

Command:

Help

Function:

Output brief description of the command interpreter help system.

Command mode:

All configuration modes.

Usage Guide:

An instant online help provided by the switch. Help command displays information about the whole help system,

including complete help and partial help. The user can type in ‘?’ any time to get online help.

Example:

switch(config)#help
CLI provides advanced help feature. When you need help, anytime at the command line please press '?'.

If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options.
Two styles of help are provided:

1. Full help is available when you are ready to enter a command argument (e.g. 'show ?') and describes each
possible argument.

2. Partial help is provided when an abbreviated argument is entered and you want to know what arguments match
the input (e.g. 'show ve?'.)

1.1.15 hostname

Command:

hostname <hostname>
no hostname

Function:

Set the prompt in the switch command line interface. The no operation cancels the configuration.

Parameter:

<hostname> is the string for the prompt, up to 64 characters are allowed.

1-52

Command mode:

Global Mode

Default:

The default prompt is relative with the switch.

Usage Guide:

With this command, the user can set the CLI prompt of the switch according to their own requirements.

Example:

Set the prompt to “Test”.
Switch(config)#hostname Test
Test(config)#

1.1.16 ip host

Command:

ip host <hostname> <ip_addr>
no ip host {<hostname>|all}

Function:

Set the mapping relationship between the host and IP address; the “no ip host” parameter of this command will

delete the mapping.

Parameter:

<hostname> is the host name, up to 64 characters are allowed; <ip_addr> is the corresponding IP address for the
host name, takes a dot decimal format; all is all of the host name.

Command mode:

Global Mode

Usage Guide:

Set the association between host and IP address, which can be used in commands like “ping <host>“.

1-53

Example:

Set IP address of a host with the hostname of “beijing” to 200.121.1.1.
Switch(config)#ip host beijing 200.121.1.1

Command related: telnet, ping, traceroute

1.1.17 ipv6 host

Command:

ipv6 host <hostname> <ipv6_addr>
no ipv6 host { <hostname> | all}

Function:

Configure the mapping relationship between the IPv6 address and the host; the no command deletes this mapping
relationship.

Parameter:

<hostname> is the name of the host, containing max 64 characters; <ipv6_addr> is the IPv6 address
corresponding to the host name. all is all the host address.

Command Mode:

Global Mode

Usage Guide:

Configure a fixed corresponding relationship between the host and the IPv6 address, applicable in commands such
as traceroute6 <host>, etc.

Example:

Set the IPv6 address of the host named beijing to 2001:1:2:3::1.
Switch(config)#ipv6 host beijing 2001:1:2:3::1

Command related: ping6, traceroute6

1-54

1.1.18 ip http server

Command:

ip http server
no ip http server

Function:

Enable Web configuration; the “no ip http server” command disables Web configuration

Command mode:

Global mode

Usage guide:

Web configuration is for supplying an interface configured with HTTP for the user, which is straight and visual, easy
to understand.

Example:

Enable Web Server function and enable Web configurations.
Switch(config)#ip http server

1.1.19 language

Command:

language {chinese | english}

Function:

Set the language for displaying the help information.

Parameter:

chinese for Chinese display; english for English display.

Command mode:

Admin and Config Mode.

Default:

The default setting is English display.

1-55

Usage Guide:

Switch provides help information in two languages, the user can select the language according to their preference.
After the system restart, the help information display will revert to English.

1.1.20 login

Command:

Login
no login

Function:

login enable password authentication, no login command cancels the login configuration.

Command mode:

Global mode

Default:

No login by default

Usage guide:

By using this command, users have to enter the password set by password command to enter normal user mode
with console; no login cancels this restriction.

Example:

Enable password
Switch(config)#login

1.1.21 password

Command:

password [0 | 7] <password>
no password

Function:

Configure the password used for enter normal user mode on the console. The “no password” command deletes this

password.

1-56

Parameter:

password is the password for the user. If input option 0 on password setting, the password is not encrypted; if input

option 7, the password is encrypted.

Command mode:

Global mode

Default:

This password is empty by system default

Usage guide:

When both this password and login command are configured, users have to enter the password set by password
command to enter normal user mode on console.

Example:

Switch(config)#password 0 test
Switch(config)#login

1.1.22 privilege

Command:

privilege mode level <1-15> LINE
no privilege mode level <1-15> LINE

Function:

Configure the level for the specified command, the no command restores the original level of the command.

Parameters:

mode: register mode of the command, ‘Tab’ or ‘?’ is able to show all register modes
<1-15> is the level, its range between 1 and 15
LINE: the command needs to be configured, it supports the command abbreviation

Command Mode:

Global mode

1-57

Usage Guide:

This function cannot change the command itself. LINE must be the whole command format, the command with the
abbreviation format must be analyzed successfully. For half-baked command, false command about writing and
command that abbreviation cannot be analyzed successfully, the configuration is failure. For changing the command
line with the parameter, it should fill in the parameter which is able to be selected discretionarily according to the
required format. However, level of the no command is able to be set optionally and it does not affect the result. When
using no command, LINE must be the configured command line. If the command line with the parameter, the
parameter must be matched with the configured command.

Example:

Change the level of show ip route command to level 5.
Switch(config)#privilege exec level 5 show ip route
Change the level of peer A.B.C.D command to level 6.
Switch(config)#privilege router-msdp level 6 peer 1.2.3.4
Restore the original level for show ip route command.
Switch(config)#no privilege exec level 5 show ip route
Restore the original level for peer A.B.C.D command.
Switch(config)#no privilege router-msdp level 6 peer 1.2.3.4

1.1.23 reload

Command:

Reload

Function:

Warm reset the switch.

Command mode:

Admin Mode.

Usage Guide:

The user can use this command to restart the switch without power off.

1-58

1.1.24 service password-encryption

Command:

service password-encryption
no service password-encryption

Function:

Encrypt system password. The “no service password-encryption” command cancels the encryption.

Command mode:

Global Mode

Default:

No service password-encryption by system default

Usage guide:

The current unencrypted passwords as well as the coming passwords configured by password, enable password, ip
ftp and username command will be encrypted by executed this command. no service password-encryption cancels
this function however encrypted passwords remain unchanged.

Example:

Encrypt system passwords
Switch(config)#service password-encryption

1.1.25 service terminal-length

Command:

service terminal-length <0-512>
no service terminal-length

Function:

Configure the columns of characters displayed in each screen on terminal (vty). The “no service terminal-length”
command cancels the screen shifting operation.

Parameter:

Columns of characters displayed on each screen of vty, ranging between 0-512.

1-59

Command mode:

Global Mode

Usage guide:

Configure the columns of characters displayed on each screen of the terminal. The columns of characters displayed
on each screen on the telent.ssh client and the Console will be following this configuration.

Example:

Set the number of vty threads to 20.
Switch(config)#service terminal-length 20

1.1.26 sysContact

Command:

sysContact <LINE>
no sysContact

Function:

Set the factory contact mode, the “no sysContact” command reset the switch to factory settings.

Parameter:

<LINE> is the prompt character string, range from 0 to 255 characters.

Command mode:

Global Mode

Default:

The factory settings.

Usage guide:

The user can set the factory contact mode bases the fact instance.

Example:

Set the factory contact mode to test.
Switch(config)#sysContact test

1-60

1.1.27 sysLocation

Command:

sysLocation <LINE>
no sysLocation

Function:

Set the factory address, the “no sysLocation” command reset the switch to factory settings.

Parameter:

<LINE> is the prompt character string, range from 0 to 255 characters.

Command mode:

Global Mode

Default:

The factory settings.

Usage guide:

The user can set the factory address bases the fact instance.

Example:

Set the factory address to test.
Switch(config)#sysLocation test

1.1.28 set default

Command:

set default

Function:

Reset the switch to factory settings.

Command mode:

Admin Mode.

1-61

Usage Guide:

Reset the switch to factory settings. That is to say, all configurations made by the user to the switch will disappear.
When the switch is restarted, the prompt will be the same as when the switch was powered on for the first time.

Note: After the command, “write” command must be executed to save the operation. The switch will reset to factory

settings after restart.

Example:

Switch#set default
Are you sure? [Y/N] = y
Switch#write
Switch#reload

1.1.29 setup

Command:

Setup

Function:

Enter the Setup Mode of the switch.

Command mode:

Admin Mode.

Usage Guide:

Switch provides a Setup Mode, in which the user can configure IP addresses, etc.

1.1.30 show clock

Command:

show clock

Function:

Display the current system clock.

Command mode:

Admin and Configuration Mode.

1-62

Usage Guide:

If the system clock is inaccurate, user can adjust the time by examining the system date and clock.

Example:

Switch#show clock
Current time is TUE AUG 22 11：00：01 2002

Command related: clock set

1.1.31 show cpu usage

Command:

show cpu usage [<slotno>]

Function:

Show CPU usage rate.

Command mode:

Admin and configuration mode.

Usage Guide:

Check the current usage of CPU resource by show cpu usage command. Only the chassis switch uses slotno
parameter which is used to show the CPU usage rate of the card on specified slot, if there is no parameter, the
default is current card.

Example:

Show the current usage rate of CPU.
Switch#show cpu usage
Last 5 second CPU IDLE: 87%
Last 30 second CPU IDLE: 89%
Last 5 minute CPU IDLE: 89%

From running CPU IDLE: 89%

1-63

1.1.32 show cpu utilization

Command:

show cpu utilization

Function:

Show the current CPU utilization rate.
Parameter:

None.

Default:

None.

Command mode:

Admin mode.
Usage Guide:

This command is used to show CPU utilization rate in the past 5 seconds, 30 seconds and 5 minutes.

Example:

Show CPU utilization rate.

Switch#show cpu utilization

Last 5 second CPU USAGE: 9%

Last 30 second CPU USAGE: 11%

Last 5 minute CPU USAGE: 11%

From running CPU USAGE: 11%

1.1.33 show memory usage

Command:

show memory usage [<slotno>]

Function:

Show memory usage rate.

Command mode:

Admin and configuration mode.

1-64

Usage Guide:

Check the current usage of memory resource by show memory usage command. Only the chassis switch uses

slotno parameter which is used to show the memory usage rate of card on the specified slot, if there is no parameter,

the default is current card.

Example:

Show the current usage rate of the memory.
Switch#show memory usage

The memory total 128 MB, free 58914872 bytes, usage is 56.10%

1.1.34 show privilege

Command:

show privilege

Function:

Show privilege of the current users.

Parameter:

None.

Command Mode:

All configuration modes

Example:

Show privilege of the current user.

Switch(Config)#show privilege

Current privilege level is 15

1-65

1.1.35 show privilege mode LINE

Command:

show privilege mode LINE

Function:

Show the level of the specified command.

Parameters:

mode: register mode of the command, ‘Tab’ or ‘?’ is able to show all register modes

LINE: the command needs to be configured, it supports the command abbreviation

Command Mode:

Admin and configuration mode

Usage Guide:

LINE must be the whole command format, the abbreviation format is used to the command which can be analyzed

successfully. For half-baked command, false command about writing and command that abbreviation cannot be

analyzed successfully, the level of them cannot be shown.

Example:

Show the level of privilege command.

Switch(config)#show privilege exec show ip route

The command : show ip route

Privilege is : 15

1.1.36 show tech-support

Command:

show tech-support [no-more]

Function:

Display the operational information and the task status of the switch. The technique specialist use this command to

diagnose whether the switch operate normally.

1-66

Parameter:

no-more: Display the operational information and the task status of the switch directly, do not connect the user by

“more”.

Command mode:

Admin and Configuration Mode.

Usage Guide:

This command is used to collect the relative information when the switch operation is malfunctioned.

Example:

Switch#show tech-support

1.1.37 show version

Command:

show version

Function:

Display the version information of the switch.

Command mode:

Admin and Configuration Mode.

Usage Guide:

This command is used to show the version of the switch, it includes the hardware version and the software version

information.

Example:

Switch#show version.

1.1.38 username

Command:

username <username> [privilege <privilege>] [password [0 | 7] <password>]

no username <username>

1-67

Function:

Configure local login username and password along with its privilege level.

Parameter:

<username> is the username, its range should not exceed 32 characters. <privilege> is the maximum privilege

level of the commands that the user is able to execute, its value is limited between 1 and 15, and 1 by default.

<password> is the password for the user. If input option 0 on password setting, the password is not encrypted; if

input option 7, the password is encrypted (Use 32 bits password encrypted by MD5).

Command Mode:

Global Mode.

Usage Guide:

There are two available choices for the preferences of the registered commands in the switch. They are 1 and 15.

Preference of 1 is for the commands of the normal user configuration mode. Preference of 15 is for the commands

registered in modes other than the normal user configuration modes. 16 local users at most can be configured

through this command, and the maximum length of the password should be no less than 32.

Notice: The user can log in user and priority after the command configures, before issuing the command

authentication line console login local, it should be made sure that at one user has be configured as preference level

of 15, in order to login the switch and make configuration changes in privileged mode and global mode. If there are

no configured local users with preference level of 15, while only Local authentication is configured for the Console

login method, the switch can be login without any authentication. When using the HTTP method to login the switch,

only users with preference level of 15 can login the switch, users with preference level other than 15 will be denied.

Example:

Configure an administrator account named admin, with the preference level as 15. And configure two normal
accounts with its preference level as 1. Then enable local authentication method.
Above all the configurations, only the admin user is able to login the switch in privileged mode through Telnet or
Console login method, user1 and user2 can only login the switch in normal user mode through the telnet and console
login method. For HTTP login method, only the admin user can pass the authentication configuration, user1 and
user2 will be denied.
Switch(config)#username admin privilege 15 password 0 admin
Switch(config)# username user1 privilege 1 password 7
4a7d1ed414474e4033ac29ccb8653d9b (The password is 32 bits password encrypted by MD5)
Switch(config)# username user2 password 0 user2
Switch(config)# authentication line console login local

1-68

1.1.39 web language

Command:

web language {chinese | english}

Function:

Set the language for displaying the HTTP Server information.

Parameter:

chinese for Chinese display; english for English display.

Command mode:

Admin Mode

Default:

The default setting is English display.

Usage Guide:

The user can select the language according to their preference.

1.1.40 write

Command:

Write

Function:

Save the currently configured parameters to the Flash memory.

Command mode:

Admin Mode.

Usage Guide:

After a set of configuration with desired functions, the setting should be saved to the specified configuration file, so

that the system can revert to the saved configuration automatically in the case of accidentally powered off or power

failure. This is the equivalent to the copy running-config startup-config command.

1-69

1.1.41 write running-config

Command:

write running-config [<startup-config-file-name>]

Function:

Save the current running config as .cfg file to Flash Memory.

Parameters:

<startup-config-file-name> is the full path of the cfg file. The format of which is as follows:

1. The file path comprises of two parts: device prefix used as the root directory (flash:/) and the file name. No space is
allowed in each part or between two parts.

2. The suffix of all file names should be .cfg.

3. The length of the full file path should not be longer than 128 characters, while the file name cannot be longer than
80 characters.

Command Mode:

Admin Mode.

Usage Guide:

Config file saved by Flash Memory can be used for startup file.

Example:

Save the current running config as .cfg file with name of 123.

Switch#write running-config 123.cfg

1.2 Commands for Telnet

1.2.1 aaa authorization config-commands

Command:

aaa authorization config-commands

no aaa authorization config-commands

Function:

Enable command authorization function for the login user with VTY (login with Telnet and SSH). The no command

disables this function. Only enabling this command and configuring command authorization manner, it will request to

authorize when executing some command.

1-70

Default:

Disable.

Command Mode:

Global Mode.

Usage Guide:

Only after configuring this command and configuring command authorization manner and authorization selection

priority of login user with VTY, it can be authorized when configuring command with corresponding command level

for login user with VTY.

Example:

Enable VTY command authorization function.

Switch(config)# aaa authorization config-commands

1.2.2 accounting exec

Command:

accounting line {console | vty} exec {start-stop | stop-only | none} method1 [method2…]

no accounting line {console | vty} exec

Function:

Configure the list of the accounting method for the login user with VTY (login with Telnet and SSH) and Console. The

no command restores the default accounting method.

Parameters:

line selects the accounting line, including console, vty (telnet and ssh); start-stop sends the accounting start or the

accounting stop when the user is logging or exit the login; stop-only sends the accounting stop when the user exits

the login only; none does not send the accounting start or the accounting stop; method is the list of the accounting

method, it only supports tacacs keyword; tacacs uses the remote TACACS+ server to count.

Default:

There is no accounting.

Command Mode:

Global Mode.

1-71

Usage Guide:

console and vty login method are able to set the corresponding accounting method respectively, the accounting

method only supports TACACS+ method currently.

Example:

Configure the login accounting with the telnet method.

Switch(config)#accounting line vty exec start-stop tacacs

1.2.3 accounting command

Command:

accounting line {console | vty} command <1-15> {start-stop | stop-only | none} method1 [method2…]

no accounting line {console | vty} command <1-15>

Function:

Configure the list of the command accounting method with VTY (login with Telnet and SSH) and Console. The no

command restores the default accounting method.

Parameters:

line selects the accounting line, including console, vty (telnet and ssh); command <1-15> is the level of the

accounting command; start-stop sends the accounting start or the accounting stop when the user is logging or exit

the login; stop-only sends the accounting stop when the user exits the login only; none does not send the

accounting start or the accounting stop; method is the list of the accounting method, it only supports tacacs keyword;

tacacs uses the remote TACACS+ server to count.

Default:

There is no accounting method.

Command Mode:

Global Mode.

Usage Guide:

console and vty login method are able to set the corresponding command accounting method respectively, the

accounting method only supports TACACS+ method currently. Only the stop information of the accounting is

recorded, whether command accounting configures start-stop method or stop-only method.

1-72

Example:

Configure the command accounting with the telnet method.

Switch(config)#authorization line vty command 15 start-stop tacacs

1.2.4 authentication enable

Command:

authentication enable method1 [method2…]

no authentication enable

Function:

Configure the list of the enable authentication method. The no command restores the default authentication method.

Parameters:

method is the list of the authentication method, it must be among local, tacacs and radius keywords; local uses the

local database to authenticate; tacacs uses the remote TACACS+ authentication server to authenticate; radius uses

the remote RADIUS authentication server to authenticate.

Default:

The local authentication is enable command by default.

Command Mode:

Global Mode.

Usage Guide:

The enable authentication method can be any one or combination of Local, RADIUS and TACACS. When login

method is configuration in combination, the preference goes from left to right. If the users have passed the

authentication method, authentication method of lower preferences will be ignored. To be mentioned, if the user

receives corresponding protocol’s answer whether refuse or incept, it will not attempt the next authentication method

(Exception: if the local authentication method failed, it will attempt the next authentication method); it will attempt the

next authentication method if it receives nothing. And AAA function RADIUS server should be configured before the

RADIUS configuration method can be used. And TACACS server should be configured before the TACACS

configuration method can be used.

Example:

Configure the enable authentication method to be tacacs and local.

Switch(config)#authentication enable tacacs local

1-73

1.2.5 authentication ip access-class

Command:

authentication ip access-class {<num-std>|<name>}

no authentication ip access-class

Function:

Binding standard IP ACL protocol to login with Telnet/SSH/Web; the no form command will cancel the binding ACL.

Parameters:

<num-std> is the access-class number for standard numeric ACL, ranging between 1-99; <name> is the

access-class name for standard ACL, the character string length is ranging between 1 and 32.

Default:

The binding ACL to Telnet/SSH/Web function is closed by default.

Command Mode:

Global Mode.

Example:

Binding standard IP ACL protocol to access-class 1.

Switch(config)#authentication ip access-class 1 in

1.2.6 authentication ipv6 access-class

Command:

authentication ipv6 access-class {<num-std>|<name>}

no authentication ipv6 access-class

Function:

Binding standard IPv6 ACL protocol to login with Telnet/SSH/Web; the no form command will cancel the binding ACL.

Parameters:

<num-std> is the access-class number for standard numeric ACL, ranging between 500-599; <name> is the

access-class name for standard ACL, the character string length is ranging between 1 and 32.

1-74

Default:

The binding ACL to Telnet/SSH/Web function is closed by default.

Command Mode:

Global Mode.

Example:

Binding standard IP ACL protocol to access-class 500.

Switch(config)#authentication ipv6 access-class 500 in

1.2.7 authentication line login

Command:

authentication line {console | vty | web} login method1 [method2…]

no authentication line {console | vty | web} login

Function:

Configure VTY (login with Telnet and SSH), Web and Console, so as to select the list of the authentication method

for the login user. The no form command restores the default authentication method.

Parameters:

line selects the login line, including console, vty (telnet and ssh) and web; method is the list of the authentication

method, it must be among local, tacacs and radius keywords; local uses the local database to authenticate; tacacs

uses the remote TACACS+ authentication server to authenticate; radius uses the remote RADIUS authentication

server to authenticate.

Default:

No configuration is enabled for the console login method by default. Local authentication is enabled for the VTY and

Web login method by default.

Command Mode:

Global Mode.

Usage Guide:

The authentication method for Console, VTY and Web login can be configured respectively. And authentication

method can be any one or combination of Local, RADIUS and TACACS. When login method is configuration in

combination, the preference goes from left to right. If the users have passed the authentication method,

1-75

authentication method of lower preferences will be ignored. To be mentioned, if the user receives corresponding

protocol’s answer whether refuse or incept, it will not attempt the next authentication method (Exception: if the local

authentication method failed, it will attempt the next authentication method); it will attempt the next authentication

method if it receives nothing. And AAA function RADIUS server should be configured before the RADIUS

configuration method can be used. And TACACS server should be configured before the TACACS configuration

method can be used.

The authentication line console login command is exclusive with the “login” command. The authentication line

console login command configures the switch to use the Console login method. And the login command makes the

Console login to use the passwords configured by the password command for authentication.

If local authentication is configured while no local users are configured, users will be able to login the switch via the

Console method.

Example:

Configure the telnet and ssh login with the remote RADIUS authentication.

Switch(config)#authentication line vty login radius

Relative Command: aaa enable，radius-server authentication host，tacacs-server authentication host，

tacacs-server key

1.2.8 authentication securityip

Command:

authentication securityip <ip-addr>

no authentication securityip <ip-addr>

Function:

To configure the trusted IP address for Telnet and HTTP login method. The no form of this command will remove the

trusted IP address configuration.

Parameters:

<ip-addr> is the trusted IP address of the client in dotted decimal format which can login the switch.

Default:

No trusted IP address is configured by default.

Command Mode:

Global Mode.

1-76

Usage Guide:

IP address of the client which can login the switch is not restricted before the trusted IP address is not configured.

After the trusted IP address is configured, only clients with trusted IP addresses are able to login the switch. Up to 32

trusted IP addresses can be configured in the switch.

Example:

To configure 192.168.1.21 as the trusted IP address.

Switch(config)# authentication securityip 192.168.1.21

1.2.9 authentication securityipv6

Command:

authentication securityipv6 <ipv6-addr>

no authentication securityipv6 <ipv6-addr>

Function:

To configure the security IPv6 address for Telnet and HTTP login method. The no form of this command will remove

the specified configuration.

Parameters:

<ipv6-addr> is the security IPv6 address which can login the switch.

Default:

No security IPv6 addresses are configured by default.

Command Mode:

Global Mode.

Usage Guide:

IPv6 address of the client which can login the switch is not restricted before the security IPv6 address is not

configured. After the security IPv6 address is configured, only clients with security IPv6 addresses are able to login

the switch. Up to 32 security IPv6 addresses can be configured in the switch.

Example:

Configure the security IPv6 address is 2001:da8:123:1::1.

Switch(config)# authentication securityipv6 2001:da8:123:1::1

1-77

1.2.10 authorization

Command:

authorization line {console | vty | web} exec method [method…]

no authorization line {console | vty | web} exec

Function:

Configure the list of the authorization method for the login user with VTY (login with Telnet and SSH), Web and

Console. The no command restores the default authorization method.

Parameters:

line selects the authorization line, including console, vty (telnet and ssh) and web; method is the list of the

authorization method, it must be among local, tacacs and radius keywords; local uses the local database to

authorize; tacacs uses the remote TACACS+ server to authorize; radius uses the remote RADIUS server to

authorize.

Default:

There is no authorization mode.

Command Mode:

Global Mode.

Usage Guide:

The authorization method for Console, VTY and Web login can be configured respectively. And authorization method
can be any one or combination of Local, RADIUS or TACACS. When login method is configuration in combination,
the preference goes from left to right. If the users have passed the authorization method, authorization method of
lower preferences will be ignored. To be mentioned, if the user receives corresponding protocol’s answer whether
refuse or incept, it will not attempt the next authorization method; it will attempt the next authorization method if it
receives nothing. And AAA function RADIUS server should be configured before the RADIUS configuration method
can be used. And TACACS server should be configured before the TACACS configuration method can be used.
The local users adopt username command permission while authorization command is not configured, the users
login the switch via RADIUS/TACACS method and works under common mode.

Example:

Configure the telnet authorization method to RADIUS.

Switch(config)#authorization line vty exec radius

1-78

1.2.11 authorization line vty command

Command:

authorization line vty command <1-15> {local | radius | tacacs} (none|)

no authorization line vty command <1-15>

Function:

Configure command authorization manner and authorization selection priority of login user with VTY (login with

Telnet and SSH). The no command recovers to be default manner.

Default:

The authorization manner is not configured as default.

Command Mode:

Global Mode.

Usage Guide:

Configure the authorization manner when VTY login user configures command, the manners include any

combination of Local, RADIUS and TACACS, the manner of none is just as the last manner. When using

combination authorization manners, the priority of the front authorization manner is the highest and the others are in

descending order; if the authorization with high priority passed, it is successful to configure command and the back

authorization manner will be ignored. Notice: as long as one authorization manner receives a clear response of the

corresponding agreement. Whether it is received or refused, the next authorization manner will not be attempted. If

the clear response is not received, try the next manner. When using RADIUS authorization, AAA function must be

enabled and configure RADIUS server. when using TACACS authorization, TACACS server must be configured.

None is the manner of escaping and it only can be the last manner. This manner returns to passed authorization

directly and it is successful to configure the command.

Example:

Configure level 1 command authorization manner of telnet login user as TACACS.

Switch(config)#authorization line vty command 1 tacacs

1-79

1.2.12 clear line vty <0-31>

Command:

clear line vty <0-31>

Function:

Delete the logged user information on the appointed line, force user to get down the line who logs in through telnet or

ssh.

Command mode:

Admin Mode.

Usage guide:

After inputting this command, there is need to judge for this command, “Confirm[Y/N]: “, when inputting “Y“ or “y“, run

to delete; when inputting “？“, do not run to delete, print the notice information only. When inputting other characters,

do not run to delete.

1.2.13 crypto key clear rsa

Command:

crypto key clear rsa

Function:

Clear the secret key of ssh.

Command mode:

Admin Mode.

1.2.14 terminal length

Command:

terminal length <0-512>

terminal no length

Function:

Set length of characters displayed in each screen on terminal; the “terminal no length” cancels the screen switching

operation and display content once in all.

1-80

Parameter:

Length of characters displayed in each screen, ranging between 0-512 (0 refers to non-stop display).

Command mode:

Admin Mode.

Default:

Default Length is 25.

Usage guide:

Set length of characters displayed in each screen on terminal, so that the-More-message will be shown when

displayed information exceeds the screen. Press any key to show information in next screen. Default length is 25.

Example:

Configure length of characters in each display to 20.

Switch#terminal length 20

1.2.15 terminal monitor

Command:

terminal monitor

terminal no monitor

Function:

Copy debugging messages to current display terminal; the “terminal no monitor” command restores to the default

value.

Command mode:

Admin Mode.

Usage guide:

Configures whether the current debugging messages is displayed on this terminal. If this command is configured

on telnet or SSH clients, debug messages will be sent to that client. The debug message is displayed on

console by default.

Example:

Switch#terminal monitor

1-81

1.2.16 telnet

Command:

telnet [vrf <vrf-name>] {<ip-addr> | <ipv6-addr> | host <hostname>} [<port>]

Function:

Login on the remote host by Telnet

Parameter:

<vrf-name> is the specific VRF name; <ip-addr> is the IP address of the remote host, shown in dotted decimal

notation; <ipv6-addr> is the IPv6 address of the remote host; <hostname> is the name of the remote host,

containing max 64 characters; <port> is the port number, ranging between 0 and 65535.

Command Mode:

Admin Mode.

Usage Guide:

This command is used when the switch is applied as Telnet client, for logging on remote host to configure. When a

switch is applied as a Telnet client, it can only establish one TCP connection with the remote host. To connect to

another remote host, the current TCP connection must be disconnected with a hotkey “CTRL+ \”. To telnet a host

name, mapping relationship between the host name and the IP/IPv6 address should be previously configured. For

required commands please refer to ip host and ipv6 host. In case a host corresponds to both an IPv4 and an IPv6

addresses, the IPv6 should be preferred when telneting this host name.
Example:

The switch telnets to a remote host whose IP address is 20.1.1.1.

Switch#telnet 20.1.1.1 23

Connecting Host 20.1.1.1 Port 23...

Service port is 23

Connected to 20.1.1.1

login:123

password:***

router>

1-82

1.2.17 telnet server enable

Command:

telnet server enable

no telnet server enable

Function:

Enable the Telnet server function in the switch: the “no telnet server enable” command disables the Telnet function in

the switch.

Default:

Telnet server function is enabled by default.

Command mode:

Global Mode

Usage Guide:

This command is available in Console only. The administrator can use this command to enable or disable the Telnet

client to login to the switch.

Example:

Disable the Telnet server function in the switch.

Switch(config)#no telnet server enable

1.2.18 telnet-server max-connection

Command:

telnet-server max-connection {<max-connection-number> | default}

Function:

Configure the max connection number supported by the Telnet service of the switch.

Parameters:

<max-connection-number>: the max connection number supported by the Telnet service, ranging from 5 to 16. The

default option will restore the default configuration.

1-83

Default:

The system default value of the max connection number is 5.

Command Mode:

Global Mode

Usage Guide:

None.

Example:

Set the max connection number supported by the Telnet service as 10.

Switch(config)#telnet-server max-connection 10

1.2.19 ssh-server authentication-retries

Command:

ssh-server authentication-retries <authentication-retries>

no ssh-server authentication-retries

Function:

Configure the number of times for retrying SSH authentication; the “no ssh-server authentication-retries”

command restores the default number of times for retrying SSH authentication.

Parameter:

< authentication-retries > is the number of times for retrying authentication; valid range is 1 to 10.

Command mode:

Global Mode

Usage Guide:

None.

Default:

The number of times for retrying SSH authentication is 3 by default.

1-84

Example:

Set the time for retrying SSH authentication to 5.

Switch(config)#ssh-server authentication-retries 5

1.2.20 ssh-server enable

Command:

ssh-server enable

no ssh-server enable

Function:

Enable SSH function on the switch; the “no ssh-server enable” command disables SSH function.

Command mode:

Global Mode

Default:

SSH function is disabled by default.

Usage Guide:

In order that the SSH client can log on the switch, the users need to configure the SSH user and enable SSH

function on the switch.

Example:

Enable SSH function on the switch.

Switch(config)#ssh-server enable

1.2.21 ssh-server host-key create rsa

Command:

ssh-server host-key create rsa [modulus < modulus >]

Function:

Generate new RSA host key.

1-85

Parameter:

modulus is the modulus which is used to compute the host key; valid range is 768 to 2048. The default value is

1024.

Command mode:

Global Mode

Default:

The system uses the key generated when the ssh-server is started at the first time.

Usage Guide:

This command is used to generate the new host key. When SSH client logs on the server, the new host key is used

for authentication. After the new host key is generated and “write” command is used to save the configuration, the

system uses this key for authentication all the time. Because it takes quite a long time to compute the new key and

some clients are not compatible with the key generated by the modulus 2048, it is recommended to use the key

which is generated by the default modulus 1024.

Example:

Generate new host key.

Switch(config)#ssh-server host-key create rsa

1.2.22 ssh-server max-connection

Command:

ssh-server max-connection {<max-connection-number>|default}

Function:

Configure the max connection number supported by the SSH service of the switch.

Parameters:

<max-connection-number>: the max connection number supported by the SSH service, ranging from 5 to 16. The

default option will restore the default configuration.

Default:

The system default value of the max connection number is 5.

1-86

Command Mode:

Global Mode

Usage Guide:

None.

Example:

Set the max connection number supported by the SSH service as 10.

Switch(config)#ssh-server max-connection 10

1.2.23 ssh-server timeout

Command:

ssh-server timeout <timeout>

no ssh-server timeout

Function:

Configure timeout value for SSH authentication; the “no ssh-server timeout” command restores the default timeout

value for SSH authentication.

Parameter:

<timeout> is timeout value; valid range is 10 to 600 seconds.

Command mode:

Global Mode

Default:

SSH authentication timeout is 180 seconds by default.

Usage Guide:

This command is used to set SSH authentication timeout, the default timeout is 180 seconds.

Example:

Set SSH authentication timeout to 240 seconds.

Switch(config)#ssh-server timeout 240

1-87

1.2.24 show crypto key

Command:

show crypto key

Function:

Show the secret key of ssh.

Command mode:

Admin Mode.

1.2.25 show ssh-server

Command:

show ssh-server

Function:

Display SSH state and users which log on currently.

Command mode:

Admin Mode.

Example:

Switch#show ssh-server

ssh server is enabled

ssh-server timeout 180s

ssh-server authentication-retries 3

ssh-server max-connection number 6

ssh-server login user number 2

1.2.26 show telnet login

Command:

show telnet login

Function:

Display the information of the Telnet client which currently establishes a Telnet connection with the switch.

1-88

Command Mode:

Admin and Configuration Mode.

Usage Guide:

Check the Telnet client messages connected through Telnet with the switch.

Example:

Switch#show telnet login

Authenticate login by local

Login user:

Aa

1.2.27 show users

Command:

show users

Function:

Show the user information who logs in through telnet or ssh. It includes line number, user name and user IP.

Command mode:

Admin Mode.

Usage Guide:

When inputting this command, show the user information who logs in through telnet or ssh. It includes line number,

user name and user IP. Because 16 telnet users and 16 ssh users are supported at most currently, vty0-15 are used

for telnet, and 16-31 are used for ssh.

Example:

Switch#show users

Line User Location

vty 16 a 192.168.1.1

vty 0 admin 192.168.1.2

vty 17 mab 192.168.1.13

vty 1 test 192.168.1.40

1-89

1.2.28 who

Command:

Who

Function:

Show the current login users with vty.

Parameter:

None.

Command Mode:

All configuration modes

Example:

Show the current login users with vty.

Switch#who

Telnet user a login from 192.168.1.20

1.3 Commands for Configuring Switch IP

1.3.1 interface vlan

Command:

interface vlan <vlan-id>

no interface vlan <vlan-id>

Function:

Enter the VLAN interface configuration mode; the no operation of this command will delete the existing VLAN

interface.

Parameters:

<vlan-id> is the VLAN ID of an existing VLAN, ranging from 1 to 4094.

Command Mode:

Global Configuration Mode.

1-90

Usage Guide:

Users should first make sure the existence of a VLAN before configuring it. User “exit” command to quit the VLAN

interface configuration mode back to the global configuration mode.

Example:

Enter the VLAN interface configuration mode of VLAN1.

Switch(config)#interface vlan 1

Switch(Config-if-Vlan1)#

1.3.2 ip address

Command:

ip address <ip-address> <mask> [secondary]

no ip address [<ip-address> <mask>] [secondary]
Function:

Set the IP address and mask for the specified VLAN interface; the “no ip address <ip address> <mask>

[secondary]” command deletes the specified IP address setting.

Parameter:

<ip-address> is the IP address in dot decimal format; <mask> is the subnet mask in dot decimal format;

[secondary] indicates the IP configured is a secondary IP address.

Default:

No IP address is configured upon switch shipment.

Command mode:

VLAN Interface Mode

Usage Guide:

A VLAN interface must be created first before the user can assign an IP address to the switch.

Example:

Set 10.1.128.1/24 as the IP address of VLAN1 interface.

Switch(config)#interface vlan 1

Switch(Config-if-Vlan1)#ip address 10.1.128.1 255.255.255.0

Switch(Config-if-Vlan1)#exit

Switch(config)#

Relative Command: ip bootp-client enable, ip dhcp-client enable

1-91

1.3.3 ipv6 address

Command:

ipv6 address <ipv6address | prefix-length> [eui-64]

no ipv6 address <ipv6address | prefix-length> [eui-64]

Function:

Configure aggregatable global unicast address, site-local address and link-local address for the interface.

Parameters:

<ipv6address> is the prefix of an IPV6 address; <prefix-length>is the length of the prefix of an IPV6 address,

ranging from 3 to 128; eui-64 means that the eui64 interface id of the interface will automatically create an IPV6

address.

Command Mode:

Interface Configuration Mode.

Default:

None.

Usage Guide:

The prefix of an IPV6 address should not be a multicast address, or other kinds of IPV6 addresses with specific

usage. Different layer-three VLAN interfaces are forbidden to share a same address prefix. As for any global unicast

address, the prefix should be limited in the range from 2001:: to 3fff ::, with a length no shorter than 3. And the prefix

length of a site-local address or a link-local address should not be shorter than 10.

Examples:

Configure an IPV6 address at the layer-three interface of VLAN1: set the prefix as 2001:3f:ed8::99, the length of

which is 64.

Switch(Config-if-Vlan1)#ipv6 address 2001:3f:ed8::99/64

1-92

1.3.4 ip bootp-client enable

Command:

ip bootp-client enable

no ip bootp-client enable

Function:

Enable the switch to be a BootP Client and obtain IP address and gateway address through BootP negotiation; the

“no ip bootp-client enable” command disables the BootP Client function and releases the IP address obtained in

BootP.

Default:

BootP client function is disabled by default.

Command mode:

VLAN Interface Mode

Usage Guide:

Obtaining IP address through BootP, Manual configuration and DHCP are mutually exclusive, enabling any two

methods for obtaining IP address is not allowed. Note: To obtain IP address via BootP, a DHCP server or a BootP

server is required in the network.

Example:

Get IP address through BootP.

Switch(config)#interface vlan 1

Switch(Config-if-Vlan1)#ip bootp-client enable

Switch (Config-if-Vlan1)#exit

Switch(config)#

Relative command: ip address, ip dhcp-client enable

1-93

1.3.5 ip dhcp-client enable

Command:

ip dhcp-client enable

no ip dhcp-client enable

Function:

Enables the switch to be a DHCP client and obtain IP address and gateway address through DHCP negotiation; the

“no ip dhcp-client enable” command disables the DHCP client function and releases the IP address obtained in

DHCP. Note: To obtain IP address via DHCP, a DHCP server is required in the network.

Default:

the DHCP client function is disabled by default.

Command mode:

VLAN Interface Mode

Usage Guide:

Obtaining IP address by DHCP, Manual configuration and BootP are mutually exclusive, enabling any 2 methods for

obtaining an IP address is not allowed.

Example:

Getting an IP address through DHCP.

Switch(config)#interface vlan 1

Switch(Config-if-Vlan1)#ip dhcp-client enable

Switch(Config-if-Vlan1)#exit

Switch(config)#

1-94

1.4 Commands for SNMP

1.4.1 debug snmp mib

Command:

debug snmp mib

no debug snmp mib

Function:

Enable the SNMP mib debugging; the "no debug snmp mib” command disables the debugging.

Command Mode:

Admin Mode.

Usage Guide:

When user encounters problems in applying SNMP, the SNMP debugging is available to locate the problem causes.

Example:

Switch#debug snmp mib

1.4.2 debug snmp kernel

Command:

debug snmp kernel

no debug snmp kernel

Function:

Enable the SNMP kernel debugging; the “no debug snmp kernel” command disables the debugging function.

Command Mode:

Admin Mode.

Usage Guide:

When user encounters problems in applying SNMP, the SNMP debugging is available to locate the problem causes.

Example:

Switch#debug snmp kernel

1-95

1.4.3 rmon enable

Command:

rmon enable

no rmon enable

Function:

Enable RMON; the “no rmon enable” command disables RMON.

Command mode:

Global Mode

Default:

RMON is enabled by default.

Example:

Enable RMON.

Switch(config)#rmon enable

Disable RMON.

Switch(config)#no rmon enable

1.4.4 show private-mib oid

Command:

show private-mib oid

Function:

Show the original oid of the private mib.

Command mode:

Admin and configuration mode.

Usage Guide:

Check the beginning oid of the private mib by show private-mib oid command.

1-96

Example:

Show the original oid of the private mib.

Switch#show private-mib oid

Private MIB OID:1.3.6.1.4.1.6339

1.4.5 show snmp

Command:

show snmp

Function:

Display all SNMP counter information.

Command mode:

Admin and Configuration Mode.

Example:

Switch#show snmp

0 SNMP packets input

0 Bad SNMP version errors

0 Unknown community name

0 Illegal operation for community name supplied

0 Encoding errors

0 Number of requested variables

0 Number of altered variables

0 Get-request PDUs

0 Get-next PDUs

0 Set-request PDUs

0 SNMP packets output

0 Too big errors (Max packet size 1500)

0 No such name errors

0 Bad values errors

0 General errors

0 Get-response PDUs

0 SNMP trap PDUs

1-97

Displayed information

Explanation

snmp packets input

Total number of SNMP packet inputs.

bad snmp version errors

Number of version information error packets.
unknown community name

Number of community name error packets.

illegal operation for community name supplied

Number of permission for community name error packets.

encoding errors

Number of encoding error packets.

number of requested variable

Number of variables requested by NMS.

number of altered variables

Number of variables set by NMS.

get-request PDUs

Number of packets received by “get” requests.

get-next PDUs

Number of packets received by “getnext” requests.

set-request PDUs

Number of packets received by “set” requests.

snmp packets output

Total number of SNMP packet outputs.

too big errors

Number of “Too_ big” error SNMP packets.

maximum packet size

Maximum length of SNMP packets.

no such name errors

Number of packets requesting for non-existent MIB
objects.

bad values errors

Number of “Bad_values” error SNMP packets.

general errors

Number of “General_errors” error SNMP packets.

response PDUs

Number of response packets sent.

trap PDUs

Number of Trap packets sent.

1.4.6 show snmp engineid

Command:

show snmp engineid

Function:

Display the engine ID commands.

Command Mode:

Admin and Configuration Mode.

1-98

Example:

Displayed Information

Explanation

SNMP engineID

Engine number

Engine Boots

Engine boot counts

Displayed Information

Explanation

Group Name

Group name

Security level

Security level

Read View

Read view name

Write View

Write view name

Notify View

Notify view name

<no writeview specified>

No view name specified by the user

Switch#show snmp engineid

SNMP engineID:3138633303f1276c Engine Boots is:1

1.4.7 show snmp group

Command:

show snmp group

Function:

Display the group information commands.

Command Mode:

Admin and Configuration Mode.

Example:

Switch#show snmp group

Group Name:initial Security Level:noAuthnoPriv

Read View:one

Write View:<no writeview specified>

Notify View:one

1-99