CHAPTER 1 COMMANDS FOR BASIC SWITCH CONFI GURATION ..........................1-50
1.1COMMANDS FOR BASIC CONFIGURATION ............................................................................................ 1-50
1.1.1 Authe nti cat ion lin e login ........................................................................................................................ 1-50
1.1.5 clock set ................................................................................................................................................ 1-53
1.1.11 end ...................................................................................................................................................... 1-55
1.1.14 help ..................................................................................................................................................... 1-57
1.1.16 ip host ................................................................................................................................................. 1-58
1.1.18 ip http server ....................................................................................................................................... 1-59
1.1.19 language ............................................................................................................................................. 1-59
1.1.23 service passw ord-encryption ............................................................................................................... 1-61
1.1.24 service terminal-length ........................................................................................................................ 1-62
1.1.27 set default ........................................................................................................................................... 1-63
1.1.29 show clock .......................................................................................................................................... 1-64
1.1.30 show cpu usage .................................................................................................................................. 1-65
1.1.31 show memory usage ........................................................................................................................... 1-65
1.1.32 show privilege ..................................................................................................................................... 1-66
1.1.33 show temperature ............................................................................................................................... 1-66
1.1.34 show tech-support ............................................................................................................................... 1-66
1-2
XGS3 Command Guide
1.1.35 show version ....................................................................................................................................... 1-67
1.1.37 web language ...................................................................................................................................... 1-68
1.2.5 authentication security ip v 6 .................................................................................................................... 1-71
1.2.17 show ssh-server .................................................................................................................................. 1-78
1.2.18 show telnet login ................................................................................................................................. 1-79
1.2.19 who ..................................................................................................................................................... 1-79
1.3COMMANDS FOR CONFIGURING SWITCH IP ......................................................................................... 1-79
1.3.2 ip address ............................................................................................................................................. 1-80
1.4.4 show private-mib oid ............................................................................................................................. 1-84
1.4.5 show snmp ............................................................................................................................................ 1-84
1.4.6 show snmp engineid ............................................................................................................................. 1-86
1.4.7 show snmp group .................................................................................................................................. 1-86
1.4.8 show snmp mib ..................................................................................................................................... 1-87
1-3
XGS3 Command Guide
1.4.9 show snmp status ................................................................................................................................. 1-87
1.4.10 show snmp user .................................................................................................................................. 1-88
1.4.11 show snmp view .................................................................................................................................. 1-88
1.4.12 snmp-server commun it y ...................................................................................................................... 1-89
1.4.16 snmp-server group .............................................................................................................................. 1-92
1.4.21 snmp-server user ................................................................................................................................ 1-95
1.5.6 ip ftp .................................................................................................................................................... 1-101
1.5.7 show ftp ............................................................................................................................................... 1-101
1.5.8 show tftp .............................................................................................................................................. 1-102
CHAPTER 2 FILE SYSTEM COMMANDS ...................................................................2-105
2.1 CD .................................................................................................................................................. 2-105
2.4 DIR .................................................................................................................................................. 2-107
2.5 FORM AT .......................................................................................................................................... 2-107
3.7 CLUSTER MEMBER ........................................................................................................................... 3-115
3.8 CLUSTER MEMBER AUTO-TO-USER .................................................................................................... 3-115
3.9 CLUSTER RESET MEMBER ................................................................................................................. 3-116
3.10 CLUSTER RUN ................................................................................................................................ 3-116
3.11 CLUSTER UPDATE MEMBER ............................................................................................................. 3-117
4.1.4 flow control .......................................................................................................................................... 4-127
4.1.8 name ................................................................................................................................................... 4-129
4.1.14 show interface ................................................................................................................................... 4-133
7.13 SHOW ULDP ................................................................................................................................... 7-154
CHAPTER 8 COMMANDS FOR LLDP FUNCTION ........................................................ 8-1
8.15 SHOW DEBUGGING LLDP ..................................................................................................................... 8-9
8.16 SHOW LLDP ..................................................................................................................................... 8-10
8.17 SHOW LLDP INTERFACE ETHERNET .................................................................................................... 8-10
8.18 SHOW LLDP NEIGHBORS INTERFACE ETHERNET ................................................................................. 8-11
8.19 SHOW LLDP TRAFFIC ........................................................................................................................ 8-12
CHAPTER 9 COMMANDS FOR PORT CHANNEL .......................................................9-13
12.1.10 no garp timer ................................................................................................................................... 12-51
12.1.11 name ............................................................................................................................................... 12-52
12.1.14 show dot1q-tunnel ........................................................................................................................... 12-54
12.1.15 show garp timer .............................................................................................................................. 12-55
12.1.16 show gvrp fsm information .............................................................................................................. 12-56
12.1.17 show gvrp leaveAll fsm information ................................................................................................. 12-56
12.1.18 show gvrp leavetimer running ......................................................................................................... 12-57
12.1.19 show gvrp port-member .................................................................................................................. 12-58
12.1.20 show gvrp port registerd vlan .......................................................................................................... 12-58
12.1.21 show gvrp timer running information ............................................................................................... 12-59
12.1.22 show gvrp vlan registerd port .......................................................................................................... 12-60
12.1.23 show vlan ........................................................................................................................................ 12-60
12.1.24 show vlan-translation ...................................................................................................................... 12-62
1-8
XGS3 Command Guide
12.1.25 switchport access vla n .................................................................................................................... 12-62
12.1.26 switchport forbidde n vl an ................................................................................................................ 12-63
12.1.27 switchport hybrid all o w ed vlan ........................................................................................................ 12-64
12.1.39 vlan-translation miss drop ............................................................................................................... 12-72
12.2COMMANDS FOR DYNAMIC VLANCONFIGURATION ......................................................................... 12-74
12.2.1 dynamic-vlan mac-v la n prefer ........................................................................................................... 12-74
12.2.6 show dynamic-vlan prefer ................................................................................................................. 12-77
12.2.7 show mac-vlan .................................................................................................................................. 12-78
12.2.8 show mac-vlan interface ................................................................................................................... 12-78
12.2.9 show protocol-vlan ............................................................................................................................ 12-79
12.2.10 show subnet-vlan ............................................................................................................................ 12-79
12.2.11 show subnet-vlan interface .............................................................................................................. 12-80
12.3COMMANDS FOR VOICE VLANCONFIGURATION ............................................................................. 12-82
12.3.1 show voice-vlan ................................................................................................................................ 12-82
13.1.4 show mac-address-table ................................................................................................................... 13-88
13.2COMMANDS FOR MAC ADDRESS BINDING CONFIGURATION .............................................................. 13-89
13.2.3 show port-security ............................................................................................................................. 13-90
13.2.4 show port-security address ............................................................................................................... 13-91
13.2.5 show port-security interface .............................................................................................................. 13-92
14.1.4 name ................................................................................................................................................. 14-99
14.1.5 no .................................................................................................................................................... 14-100
14.1.11 spanning-tree format ..................................................................................................................... 14-104
14.2.2 show mst-pending ........................................................................................................................... 14-119
14.2.3 show spanning-tree ......................................................................................................................... 14-120
14.2.4 show spanning-tr ee mst config ....................................................................................................... 14-122
CHAPTER 15 COMMANDS FOR QOS AND PBR .................................................... 15-124
15.2 CLASS ......................................................................................................................................... 15-124
15.5 DROP .......................................................................................................................................... 15-126
15.6 MATCH ........................................................................................................................................ 15-127
15.8 MLS Q OS COS .............................................................................................................................. 15-130
15.9 MLS QOS INTERNA L -PRIORITY ....................................................................................................... 15-130
17.5 SET ............................................................................................................................................. 17-158
17.6 SHOW MLS QOS EGRESS GREEN REMARK ...................................................................................... 17-159
17.7 SHOW MLS QOS MAPS .................................................................................................................. 17-159
CHAPTER 18 COMMANDS FOR FLEXIBLE QINQ .................................................. 18-160
18.2 MATCH ........................................................................................................................................ 18-161
18.4 SET ............................................................................................................................................. 18-162
CHAPTER 19 COMMANDS FOR LAYER 3 FORWARDING ..................................... 19-164
19.1COMMANDS FOR LAYER 3INTERFACE ........................................................................................... 19-164
19.1.6 ip vrf ................................................................................................................................................ 19-167
19.1.7 ip vrf forwarding vrfName ................................................................................................................ 19-168
19.1.10 show ip route vrf ............................................................................................................................ 19-170
19.1.11 show ip vrf ..................................................................................................................................... 19-170
19.2.11 ip address ...................................................................................................................................... 19-178
19.2.30 show ip interface ........................................................................................................................... 19-189
19.2.31 show ip traffic ................................................................................................................................ 19-189
19.2.32 show ipv6 interface ....................................................................................................................... 19-191
19.2.33 show ipv6 route ............................................................................................................................. 19-193
19.2.34 show ipv6 neighbors ..................................................................................................................... 19-194
19.2.35 show ipv6 traffic ............................................................................................................................ 19-195
19.2.36 show ipv6 redirect ......................................................................................................................... 19-196
19.2.37 show ipv6 tunnel ........................................................................................................................... 19-197
19.3COMMANDS FOR IPROUTE AGGREGATION ................................................................................... 19-200
19.3.1 ip fib optimize .................................................................................................................................. 19-200
19.4COMMANDS FOR URPF ............................................................................................................... 19-201
19.4.1 show urpf ........................................................................................................................................ 19-201
19.5.5 ip proxy-arp ..................................................................................................................................... 19-204
19.5.6 show arp ......................................................................................................................................... 19-204
19.5.7 show arp traffic ................................................................................................................................ 19-205
19.6COMMANDS FOR HARDWARE TUNNEL CAPACITY........................................................................... 19-206
CHAPTER 22 COMMAND FOR ARP GUARD ............................................................22-14
1-14
XGS3 Command Guide
22.1 ARP-GUARD IP ............................................................................................................................... 22-14
CHAPTER 23 COMMAND FOR ARP LOCAL PROXY ................................................23-15
23.1 IP LOCAL PROXY-ARP ..................................................................................................................... 23-15
CHAPTER 24 COMMANDS FOR GRATUITOUS ARP CONFIGURATION .................24-16
24.1 IP GRATUITOUS-ARP ....................................................................................................................... 24-16
24.2 SHOW IP GRATUITOUS-ARP ............................................................................................................. 24-17
CHAPTER 25 COMMANDS FOR KEEPALIVE GATEWAY .........................................25-18
26.1.2 clear ip dhcp binding ......................................................................................................................... 26-20
26.1.3 clear ip dhcp conflict ......................................................................................................................... 26-21
26.1.4 clear ip dhcp server statisti cs ............................................................................................................ 26-22
26.1.6 debug ip dhcp client .......................................................................................................................... 26-23
26.1.7 debug ip dhcp relay ........................................................................................................................... 26-23
26.1.8 debug ip dhcp server ........................................................................................................................ 26-23
26.1.14 ip dhcp conflict logging .................................................................................................................... 26-27
26.1.15 ip dhcp excluded-address ............................................................................................................... 26-28
26.1.16 ip dhcp pool ..................................................................................................................................... 26-28
26.1.17 ip dhcp conflict ping-detection enable ............................................................................................. 26-29
26.1.18 ip dhcp ping packets ....................................................................................................................... 26-29
26.1.19 ip dhcp ping timeout ........................................................................................................................ 26-30
26.1.26 service dhcp .................................................................................................................................... 26-35
26.1.27 show ip dhcp binding ...................................................................................................................... 26-35
26.1.28 show ip dhcp conflict ....................................................................................................................... 26-36
26.1.29 show ip dhcp relay information option ............................................................................................. 26-36
26.1.30 show ip dhcp server statist ic s ......................................................................................................... 26-37
26.2COMMANDS FOR DHCPREL AY CONFIGURATION ............................................................................ 26-38
26.2.1 ip forward-protocol udp bootps .......................................................................................................... 26-38
26.2.2 ip helper-address .............................................................................................................................. 26-39
26.2.3 show ip forward-protocol ................................................................................................................... 26-39
26.2.4 show ip helper-address ..................................................................................................................... 26-40
CHAPTER 27 COMMANDS FOR DHCPV6 .................................................................27-41
27.22 PREFIX-DELEGATION POOL ........................................................................................................... 27-54
27.23 SERVICE DHCPV6 ......................................................................................................................... 27-55
27.24 SHOW I P V6 DHCP ......................................................................................................................... 27-56
27.25 SHOW I P V6 DHCP BINDING ............................................................................................................ 27-56
27.26 SHOW I P V6 DHCP CONFLICT .......................................................................................................... 27-57
27.27 SHOW I P V6 DHCP INTERFACE ........................................................................................................ 27-57
27.28 SHOW I P V6 DHCP POOL ................................................................................................................ 27-58
1-16
XGS3 Command Guide
27.29 SHOW I P V6 DHCP STATISTICS ........................................................................................................ 27-58
27.30 SHOW I P V6 GENERAL-PREFIX ....................................................................................................... 27-61
27.31 SHOW I P V6 LOCAL POOL .............................................................................................................. 27-61
CHAPTER 28 COMMANDS FOR DHCP OPTION 82 ..................................................28-62
28.1 DEBUG IP DHCP RELAY PACKET ....................................................................................................... 28-62
28.2 IP DHCP RELAY INFORMATION OPTION .............................................................................................. 28-62
28.3 IP DHCP RELAY INFORMATION OPTION DELIMITER ............................................................................. 28-63
28.4 IP DHCP RELAY INFORMATION OPTION REMOTE-ID ............................................................................ 28-63
28.5 IP DHCP RELAY INFORMATION OPTION REMOTE-ID FORMAT ............................................................... 28-64
28.6 IP DHCP RELAY INFORMATION OPTION SELF-DEFINED REMOTE-ID ...................................................... 28-65
28.7 IP DHCP RELAY INFORMATION OPTION SELF-DEFINED REMOTE-ID FORM AT ......................................... 28-66
28.8 IP DHCP RELAY INFORMATION OPTION SELF-DEFINED SUBSCRIBER-ID ............................................... 28-66
28.9 IP DHCP RELAY INFORMATION OPTION SELF-DEFINED SUBSCRIBER-ID FORMAT .................................. 28-67
28.10 IP DHCP RELAY INFORMATION OPTION SUBSCRIBER-ID .................................................................... 28-68
28.11 IP DHCP RELAY INFORMATION OPTION SUBSCRIBER-ID FORM AT ....................................................... 28-68
28.12 IP DHCP RELAY INFORMATION POLICY ............................................................................................ 28-69
28.13 IP DHCP SERVER RELAY INFORMATION ENABLE .............................................................................. 28-70
28.14 SHOW IP DHCP RELAY INFORMATION OPTION .................................................................................. 28-71
CHAPTER 29 COMMANDS FOR DHCPV6 OPTION37, 38 ........................................29-72
29.1COMMANDS FOR DHCPV6 OPTION37,38 ....................................................................................... 29-72
29.1.1 address range ................................................................................................................................... 29-72
29.1.2 class .................................................................................................................................................. 29-73
29.1.3 ipv6 dhcp class ................................................................................................................................. 29-73
29.1.19 ipv6 dhcp use class ......................................................................................................................... 29-83
30.7 IP DHCP SNOOPING......................................................................................................................... 30-92
30.8 IP DHCP SNOOPING ACTION ............................................................................................................. 30-92
30.9 IP DHCP SNOOPING ACTION MAXNUM .............................................................................................. 30-93
30.10 IP DHCP SNOOPING BINDING ......................................................................................................... 30-94
30.11 IP DHCP SNOOPING BINDING ARP ................................................................................................... 30-94
30.12 IP DHCP SNOOPING BINDING DOT1X ............................................................................................... 30-95
30.13 IP DHCP SNOOPING BINDING USER ................................................................................................. 30-96
30.14 IP DHCP SNOOPING BINDING USER-CONTROL ................................................................................. 30-96
30.15 IP DHCP SNOOPING BINDING USER-CONTROL MAX-USER ................................................................. 30-97
30.16 IP DHCP SNOOPING INFORMATION ENABLE ..................................................................................... 30-98
30.17 IP DHCP SNOOPING INFORMATION O P TION ALLOW-UNTRUSTED ....................................................... 30-99
30.18 IP DHCP SNOOPING INFORMATION OPTION DELIMITER ..................................................................... 30-99
30.19 IP DHCP SNOOPING INFORMATION OPTION REMOTE-ID .................................................................. 30-100
30.20 IP DHCP SNOOPING INFORMATION OPTION SELF-DEFINED REMOTE-ID ............................................ 30-101
30.21 IP DHCP SNOOPING INFORMATION O P TI O N SELF-DEFINED REMOTE-ID FORMAT ............................... 30-101
30.22 IP DHCP SNOOPING INFORMATION OPTION SELF-DEFINED SUBSCRIBER-ID ..................................... 30-102
30.23 IP DHCP SNOOPING INFORMATION OPTION SELF-DEFINED SUBSCRIBER-ID FORMAT ........................ 30-103
30.24 IP DHCP SNOOPING INFORMATION OPTION SUBSCRIBER-ID ........................................................... 30-103
30.25 IP DHCP SNOOPING INFORMATION OPTION SUBSCRIBER-ID FORM AT .............................................. 30-104
30.26 IP DHCP SNOOPING LIMIT-RATE ................................................................................................... 30-105
30.27 IP DHCP SNOOPING TRUST .......................................................................................................... 30-106
30.28 IP USER HELPER-ADDRESS ......................................................................................................... 30-106
30.29 IP USER PRIVATE PACKET VERSION TWO ...................................................................................... 30-107
30.30 SHOW IP DHCP SNOOPING ........................................................................................................... 30-108
1-18
XGS3 Command Guide
30.31 SHOW IP DHCP SNOOPING BINDING ALL ....................................................................................... 30-111
30.32 SHOW TRUSTVIEW STATUS .......................................................................................................... 30-112
CHAPTER 31 COMMANDS FOR ROUTING POLICY ............................................... 31-113
31.1 IP PREFIX-LIST DESCRIPTION ......................................................................................................... 31-113
31.2 IP PREFIX-LIST SEQ ...................................................................................................................... 31-114
31.3 IP PREFIX-LIST SEQUENCE-NUMBER .............................................................................................. 31-115
31.4 MATCH AS-PATH ........................................................................................................................... 31-115
31.5 MATCH COMMUNITY ...................................................................................................................... 31-116
31.6 MATCH INTERFACE ....................................................................................................................... 31-116
31.7 MATCH IP ..................................................................................................................................... 31-117
31.8 MATCH IPV6 ADDRESS .................................................................................................................. 31-118
31.9 MATCH IPV6 NEXT-HOP ................................................................................................................. 31-118
31.10 MATCH METRIC .......................................................................................................................... 31-119
31.11 MATCH ORIG I N ........................................................................................................................... 31-119
31.12 MATCH ROUTE-TYPE ................................................................................................................... 31-120
31.13 MATCH TAG ................................................................................................................................ 31-121
31.15 SET AGGREGATOR ..................................................................................................................... 31-122
31.16 SET AS-PATH .............................................................................................................................. 31-123
31.17 SET ATOMIC-AGGREGATE ........................................................................................................... 31-123
31.18 SET COMM-LIST ......................................................................................................................... 31-124
31.19 SET COMMUNITY ........................................................................................................................ 31-124
31.20 SET EX TC OMMUNITY ................................................................................................................... 31-125
31.21 SET IP NEXT-HOP ........................................................................................................................ 31-126
31.22 SET LOCAL-PREFERENCE ........................................................................................................... 31-126
31.23 SET METRIC ............................................................................................................................... 31-127
31.24 SET METRIC-TYPE ...................................................................................................................... 31-127
31.25 SET ORIGIN ................................................................................................................................ 31-128
31.26 SET ORIGINATOR-ID .................................................................................................................... 31-129
31.27 SET TAG .................................................................................................................................... 31-129
31.28 SET VPNV4 NEXT-HOP ................................................................................................................ 31-130
31.29 SET WEIGHT ............................................................................................................................... 31-130
31.30 SHOW IP PREFIX-LIST <LIST-NAME> ............................................................................................ 31-131
31.31 SHOW IP PREFIX-LIST<DETAIL|SUMMARY> ................................................................................... 31-132
31.32 SHOW ROUTE-MAP ..................................................................................................................... 31-133
31.33 SHOW ROUTER-ID ...................................................................................................................... 31-133
CHAPTER 32 COMMANDS FOR STATIC ROUTE .................................................... 32-135
32.1 IP ROUTE ..................................................................................................................................... 32-135
1-19
XGS3 Command Guide
32.2 IP ROUTE VRF .............................................................................................................................. 32-136
32.3 SHOW IP ROUTE ........................................................................................................................... 32-137
32.4 SHOW IP ROUTE VRF ..................................................................................................................... 32-138
CHAPTER 33 COMMANDS FOR RIP........................................................................ 33-140
33.35 SHOW DEBUGGING RIP ............................................................................................................... 33-162
1-20
XGS3 Command Guide
33.36 SHOW IP PROTOCOLS RIP ........................................................................................................... 33-162
33.37 SHOW IP RIP .............................................................................................................................. 33-164
33.38 SHOW IP RIP DATABASE .............................................................................................................. 33-164
33.39 SHOW IP RIP INTERFACE ............................................................................................................. 33-165
33.40 SHOW IP RIP AGGREGATE ........................................................................................................... 33-166
33.42 VERSION .................................................................................................................................... 33-167
CHAPTER 34 COMMANDS FOR RIPNG .................................................................. 34-169
34.19 SHOW DEBUGGING IPV6 RIP ........................................................................................................ 34-180
34.20 SHOW I P V6 RIP INTERFACE ......................................................................................................... 34-180
34.21 SHOW I P V6 RIP REDISTRIBUTE .................................................................................................... 34-181
34.22 SHOW I P V6 PROTOCOLS RIP ....................................................................................................... 34-182
34.23 SHOW I P V6 RIP .......................................................................................................................... 34-183
34.24 SHOW I P V6 RIP DATABASE .......................................................................................................... 34-183
34.25 SHOW I P V6 RIP AGGREGATE ....................................................................................................... 34-184
34.26 SHOW I P V6 RIP REDISTRIBUTE .................................................................................................... 34-185
CHAPTER 35 COMMANDS FOR OSPF .................................................................... 35-187
35.1 AREA AUTHENTICATION ................................................................................................................ 35-187
35.2 AREA DEFAULT-COST .................................................................................................................... 35-187
1-21
XGS3 Command Guide
35.3 AREA FILTER-LIST ........................................................................................................................ 35-188
35.4 AREA NSSA .................................................................................................................................. 35-189
35.5 AREA RANGE ............................................................................................................................... 35-190
35.6 AREA STUB .................................................................................................................................. 35-191
35.7 AREA VIRTUAL-LINK ..................................................................................................................... 35-191
35.25 HOST AREA ................................................................................................................................ 35-202
35.26 IP OSPF AUTHENTICATION ........................................................................................................... 35-203
35.27 IP OSPF AUTHENTICATION-KEY .................................................................................................... 35-204
35.28 IP OSPF COST ............................................................................................................................ 35-204
35.29 IP OSP F DATABASE-FILTER .......................................................................................................... 35-205
35.30 IP OSPF DEAD -INTERVAL ............................................................................................................. 35-205
35.31 IP OSPF DISABLE ALL ................................................................................................................. 35-206
35.32 IP OSPF HELLO-INTERVAL ........................................................................................................... 35-207
35.33 IP OSPF MESSAGE-DIGEST-KEY ................................................................................................... 35-207
35.34 IP OSPF MTU .............................................................................................................................. 35-208
35.35 IP OSPF MTU-IGNORE ................................................................................................................. 35-209
35.36 IP OSPF NETWORK ..................................................................................................................... 35-209
35.37 IP OSPF P R I ORITY ....................................................................................................................... 35-210
35.38 IP OSPF RETRANSMIT-INTERVAL .................................................................................................. 35-211
35.39 IP OSPF TRANSMIT-DELAY ........................................................................................................... 35-211
CHAPTER 36 COMMANDS FOR OSPFV3 ............................................................... 36-233
36.1 AREA DEFAULT COST .................................................................................................................... 36-233
36.2 AREA RANGE ............................................................................................................................... 36-233
36.3 AREA STUB .................................................................................................................................. 36-234
36.4 AREA VIRTUAL-LINK ..................................................................................................................... 36-235
CHAPTER 39 COMMANDS FOR GRE TUNNEL CONFIGUR ATION ...........................39-2
39.1 DEBUG GRE ..................................................................................................................................... 39-2
39.2 IP ADDRESS ..................................................................................................................................... 39-3
39.3 IP ROUTE ......................................................................................................................................... 39-3
43.5 OSPF GRACEFUL-RESTART HELPER NEVER ........................................................................................ 43-3
43.6 SHOW IP OSPF ................................................................................................................................. 43-3
1-28
XGS3 Command Guide
43.7 SHOW IP OSPF GRACEFUL-RESTART .................................................................................................. 43-4
44.1PUBLIC COMMANDS FOR MULTICAST ................................................................................................ 44-6
44.1.1 show ip mroute .................................................................................................................................... 44-6
44.2COMMANDS FOR PIM-DM ................................................................................................................ 44-7
44.2.1 debug pim timer sat ............................................................................................................................ 44-7
44.2.3 ip mroute ............................................................................................................................................. 44-8
44.2.4 ip pim bsr-border ................................................................................................................................. 44-9
44.2.5 ip pim dense-mode ............................................................................................................................. 44-9
44.2.6 ip pim dr-priority ................................................................................................................................ 44-10
44.2.7 ip pim exclude-genid ......................................................................................................................... 44-10
44.2.8 ip pim hello-holdtime ......................................................................................................................... 44-11
44.2.9 ip pim hello-interval ........................................................................................................................... 44-12
44.2.10 ip pim multica st -routing ................................................................................................................... 44-12
44.2.11 ip pim neighbor-filter ........................................................................................................................ 44-13
44.2.12 ip pim scope-border ........................................................................................................................ 44-14
44.2.13 ip pim state-refresh origination-interval ........................................................................................... 44-14
44.2.14 show ip pim interface ...................................................................................................................... 44-15
44.2.15 show ip pim mroute dense-mode .................................................................................................... 44-15
44.2.16 show ip pim neighbor ...................................................................................................................... 44-17
44.2.17 show ip pim nexthop ....................................................................................................................... 44-18
44.3COMMANDS FOR PIM-SM .............................................................................................................. 44-19
44.3.1 clear ip pim bsr rp-set........................................................................................................................ 44-19
44.3.10 ip mroute ......................................................................................................................................... 44-24
44.3.11 ip multicast unresolved-ca che agi ng-time ....................................................................................... 44-25
44.3.12 ip pim accept-register ...................................................................................................................... 44-25
44.3.13 ip pim bsr-border ............................................................................................................................. 44-26
44.3.14 ip pim bsr-candidate ........................................................................................................................ 44-26
44.3.15 ip pim cisco -register-checksum ....................................................................................................... 44-27
44.3.16 ip pim dr-priority .............................................................................................................................. 44-28
1-29
XGS3 Command Guide
44.3.17 ip pim exclude-genid ....................................................................................................................... 44-28
44.3.18 ip pim hello-holdtime ....................................................................................................................... 44-29
44.3.19 ip pim hello-interval ......................................................................................................................... 44-30
44.3.20 ip pim ignore-rp-set-priority ............................................................................................................. 44-30
44.3.21 ip pim jp-timer ................................................................................................................................. 44-31
44.3.22 ip pim multica st -routing ................................................................................................................... 44-32
44.3.23 ip pim neighbor-filter ....................................................................................................................... 44-32
44.3.24 ip pim register-rate-limit................................................................................................................... 44-33
44.3.25 ip pim register-rp-reachability .......................................................................................................... 44-33
44.3.26 ip pim register-source...................................................................................................................... 44-34
44.3.27 ip pim register-suppression ............................................................................................................. 44-35
44.3.28 ip pim rp-address ............................................................................................................................ 44-35
44.3.29 ip pim rp-candidate ......................................................................................................................... 44-36
44.3.30 ip pim rp-register-kat ....................................................................................................................... 44-37
44.3.31 ip pim scope-border ........................................................................................................................ 44-37
44.3.32 ip pim sparse-mode......................................................................................................................... 44-38
44.3.33 show ip pim bsr-router..................................................................................................................... 44-39
44.3.34 show ip pim interface ...................................................................................................................... 44-39
44.3.35 show ip pim mroute sparse-mode ................................................................................................... 44-40
44.3.36 show ip pim neighbor ...................................................................................................................... 44-41
44.3.37 show ip pim nexthop ....................................................................................................................... 44-42
44.3.38 show ip pim rp-hash ........................................................................................................................ 44-43
44.3.39 show ip pim rp mapping .................................................................................................................. 44-44
44.4COMMANDS FOR MSDPCONFIGURATION ....................................................................................... 44-44
44.4.6 clear msdp stat ist ic s .......................................................................................................................... 44-47
44.4.12 debug msdp keepal iv e .................................................................................................................... 44-50
44.4.29 show msdp global ........................................................................................................................... 44-60
44.4.30 show msdp local-sa-cache .............................................................................................................. 44-61
44.4.31 show msdp peer .............................................................................................................................. 44-62
44.4.32 show msdp sa-cache ...................................................................................................................... 44-63
44.4.33 show msdp sa-cache summary ....................................................................................................... 44-65
44.4.34 show msdp statistics ....................................................................................................................... 44-66
44.4.35 show msdp summary ...................................................................................................................... 44-67
44.7.2 ip dvmrp enable ................................................................................................................................ 44-77
44.7.3 ip dvmrp metric ................................................................................................................................. 44-77
44.7.4 ip dvmrp multicast-routing ................................................................................................................. 44-78
1-31
XGS3 Command Guide
44.7.5 ip dvmrp output-report-delay ............................................................................................................. 44-78
44.7.6 ip dvmrp reject-non-pruners .............................................................................................................. 44-79
44.7.7 ip dvmrp tunnel ................................................................................................................................. 44-80
44.7.8 show ip dvmrp ................................................................................................................................... 44-80
44.7.9 show ip dvmrp interface .................................................................................................................... 44-81
44.7.10 show ip dvmrp neighbor .................................................................................................................. 44-82
44.7.11 show ip dvmrp prune ....................................................................................................................... 44-82
44.7.12 show ip dvmrp route ........................................................................................................................ 44-83
44.8COMMANDS FOR DCSCM .............................................................................................................. 44-84
44.8.3 ip multicast destination-control access-group ................................................................................... 44-86
44.8.4 ip multicast destination-control access-group (sip) ........................................................................... 44-87
44.8.5 ip multicast destination-control access-group (vmac) ....................................................................... 44-88
44.8.6 ip multicast policy .............................................................................................................................. 44-88
44.8.7 ip multicast sou rc e -control ................................................................................................................ 44-89
44.8.8 ip multicast sou rc e -control access-group .......................................................................................... 44-89
44.8.10 show ip multicast destination-control............................................................................................... 44-91
44.8.11 show ip multicast destination-control access-list ............................................................................. 44-91
44.8.12 show ip multicast policy................................................................................................................... 44-92
44.8.13 show ip multicast source-control ..................................................................................................... 44-92
44.8.14 show ip multicast source-control acc ess-list ................................................................................... 44-93
44.9COMMANDS FOR IGMP .................................................................................................................. 44-94
44.9.1 clear ip igmp group ........................................................................................................................... 44-94
44.9.4 ip igmp access-group ........................................................................................................................ 44-95
44.9.5 ip igmp immediate-leave ................................................................................................................... 44-96
44.9.6 ip igmp join-group ............................................................................................................................. 44-97
44.9.7 ip igmp last-member-query-interval ................................................................................................... 44-97
44.9.8 ip igmp limit ....................................................................................................................................... 44-98
44.9.9 ip igmp query-interval ........................................................................................................................ 44-98
44.9.10 ip igmp query-max-response-time ................................................................................................... 44-99
44.9.11 ip igmp query-timeout .................................................................................................................... 44-100
44.9.12 ip igmp robust-variable .................................................................................................................. 44-100
44.9.13 ip igmp static-group ....................................................................................................................... 44-101
44.9.14 ip igmp version .............................................................................................................................. 44-102
44.9.15 show ip igmp groups ..................................................................................................................... 44-102
1-32
XGS3 Command Guide
44.9.16 show ip igmp interfac e .................................................................................................................. 44-104
44.10COMMANDS FOR IGMPSNOOPING ............................................................................................. 44-105
44.10.1 clear ip igmp snooping vlan ........................................................................................................... 44-105
44.10.2 clear ip igmp snooping vlan <1-4094> mrouter-port ...................................................................... 44-105
44.10.3 debug igmp snooping all/packet/event/timer/mf c .......................................................................... 44-106
44.10.4 ip igmp snooping ........................................................................................................................... 44-106
44.10.5 ip igmp snooping proxy ................................................................................................................. 44-107
44.10.6 ip igmp snooping vlan ................................................................................................................... 44-107
44.10.7 ip igmp snooping vlan immedi ate-leave ........................................................................................ 44-108
44.10.8 ip igmp snooping vlan l2-general-querier ...................................................................................... 44-108
44.10.9 ip igmp snooping vlan l2-general-querier-source .......................................................................... 44-109
44.10.10 ip igmp snooping vlan l2-general-querier-version ....................................................................... 44-110
44.10.11 ip igmp snooping vlan limit .......................................................................................................... 44-110
44.10.12 ip igmp snooping vlan mrouter-port interface ............................................................................... 44-111
44.10.13 ip igmp snooping vlan mrouter-port learnpim .............................................................................. 44-112
44.10.14 ip igmp snooping vlan mrpt ......................................................................................................... 44-112
44.10.15 ip igmp snooping vlan query-interval ........................................................................................... 44-113
44.10.16 ip igmp snooping vlan query-mrsp .............................................................................................. 44-113
44.10.17 ip igmp snooping vlan query-robustness ..................................................................................... 44-114
44.10.18 ip igmp snooping vlan report source-address ............................................................................. 44-115
44.10.19 ip igmp snooping vlan specific-query-mrsp ................................................................................. 44-115
44.10.20 ip igmp snooping vlan static-group .............................................................................................. 44-116
44.10.21 ip igmp snooping vlan suppression-query-time ........................................................................... 44-117
44.10.22 show ip igmp snooping ................................................................................................................ 44-117
44.11COMMANDS FOR IGMPPROXY................................................................................................... 44-119
44.11.1 clear ip igmp proxy agggroup ........................................................................................................ 44-119
44.11.2 debug igmp proxy all ..................................................................................................................... 44-119
44.11.7 ip igmp proxy ................................................................................................................................. 44-122
44.11.8 ip igmp proxy aggregate ................................................................................................................ 44-122
44.11.9 ip igmp proxy downstream ............................................................................................................ 44-123
44.11.10 ip igmp proxy limit ........................................................................................................................ 44-123
44.11.11 ip igmp proxy multicast-source .................................................................................................... 44-124
44.11.12 ip igmp proxy unsolicited-report interval ...................................................................................... 44-124
44.11.13 ip igmp proxy unsolicited-report robustness ................................................................................ 44-125
44.11.14 ip igmp proxy upstream ............................................................................................................... 44-125
1-33
XGS3 Command Guide
44.11.15 ip multicas t ssm ........................................................................................................................... 44-126
44.11.16 ip pim bsr-border ......................................................................................................................... 44-127
44.11.17 show debugging igmp proxy ........................................................................................................ 44-127
44.11.18 show ip igmp proxy ...................................................................................................................... 44-128
44.11.19 show ip igmp proxy mroute ......................................................................................................... 44-129
44.11.20 show ip igmp proxy upstream groups .......................................................................................... 44-130
45.7.14 ipv6 mld version .............................................................................................................................. 45-64
45.7.15 show ipv6 mld groups ..................................................................................................................... 45-65
45.7.16 show ipv6 mld interface................................................................................................................... 45-66
45.7.17 show ipv6 mld join-group ................................................................................................................ 45-66
45.8COMMANDS FOR MLDSNOOPING CONFIGURATION ......................................................................... 45-67
49.16 SWITCHPORT ND DYNAMIC MAXIMU M ............................................................................................. 49-11
49.17 VLAN MAC-ADDRESS DYNAMIC MAXIMUM ....................................................................................... 49-12
CHAPTER 50 COMMANDS FOR AM CONFIGURATION .............................................50-1
50.1 AM EN ABLE ..................................................................................................................................... 50-1
50.2 AM PORT ......................................................................................................................................... 50-1
50.3 AM IP-POOL ..................................................................................................................................... 50-2
50.4 AM MAC-IP-POOL ............................................................................................................................. 50-2
50.5 NO AM ALL ....................................................................................................................................... 50-3
50.6 SHOW AM ........................................................................................................................................ 50-3
CHAPTER 51 COMMANDS FOR TACACS+ .................................................................51-1
51.1 TACACS-SERVER AUTH EN TICATION HOST ........................................................................................... 51-1
60.10 SHOW VRRP ................................................................................................................................. 60-15
62.9 MRPP RING ...................................................................................................................................... 62-5
62.10 MRPP RING PRI MARY-PORT ............................................................................................................. 62-6
62.11 MRPP RING SECONDARY-PORT ........................................................................................................ 62-7
62.13 SHOW MRPP .................................................................................................................................. 62-8
62.14 SHOW MRPP STAT ISTICS ................................................................................................................. 62-8
CHAPTER 63 COMMANDS FOR ULPP ........................................................................63-1
63.2 CONTROL VLAN ................................................................................................................................ 63-1
64.2 SHOW ULSM GROUP ......................................................................................................................... 64-1
64.3 ULSM GROUP ................................................................................................................................... 64-2
64.4 ULSM GROUP {UPLINK | DOWNLINK} .................................................................................................. 64-2
CHAPTER 65 COMMANDS FOR MIRRORING CONFIGURATION ..............................65-4
65.1 MONITOR SESSION SOURCE INTE RFACE ............................................................................................. 65-4
67.9 SHOW SFLOW .................................................................................................................................. 67-6
CHAPTER 68 COMMANDS FOR SNTP ........................................................................68-8
68.3 SNTP POL LTIME ................................................................................................................................ 68-9
68.4 SNTP SERVER .................................................................................................................................. 68-9
68.5 SHOW SNTP ................................................................................................................................... 68-10
CHAPTER 69 COMMANDS FOR NTP ..........................................................................69-1
69.16 NTP SERVER .................................................................................................................................. 69-8
70.2 DEBUG DNS ..................................................................................................................................... 70-1
70.4 DNS LOOKUP ................................................................................................................................... 70-3
70.5 SHOW DNS NAME-SERVER ................................................................................................................ 70-3
70.6 SHOW DNS DOMAIN-LIST ................................................................................................................... 70-4
70.7 SHOW DNS HOSTS ............................................................................................................................ 70-4
70.8 SHOW DNS CONFIG ........................................................................................................................... 70-5
70.9 SHOW DNS CLIENT ........................................................................................................................... 70-5
70.10 IP DOMAIN-LOOKUP ........................................................................................................................ 70-6
70.11 IP DOMAIN-LIST .............................................................................................................................. 70-6
70.12 IP DNS SERVER .............................................................................................................................. 70-7
70.13 IP DNS SERVER QUEUE MAXIMUM .................................................................................................... 70-7
1-45
XGS3 Command Guide
70.14 IP DNS SERVER QUEUE TIMEOUT ..................................................................................................... 70-8
CHAPTER 71 COMMANDS FOR SUMMER TIME ........................................................71-1
72.9 SHOW DEBUGGING ......................................................................................................................... 72-11
72.10 SHOW FLASH ............................................................................................................................... 72-12
72.11 SHOW HISTORY ............................................................................................................................ 72-12
72.12 SHOW HISTORY ALL-USERS ........................................................................................................... 72-13
72.13 SHOW LOGGING BUFFERED .......................................................................................................... 72-14
72.14 SHOW LOGGING EXECUTED-COMMANDS STATE .............................................................................. 72-14
72.15 SHOW LOGGING SOURCE .............................................................................................................. 72-15
72.16 SHOW MEMORY ............................................................................................................................ 72-15
72.17 SHOW RUNNING-CONFIG ............................................................................................................... 72-16
72.18 SHOW STARTUP-CONFIG ............................................................................................................... 72-17
72.19 SHOW SWITCHPORT INTERFACE .................................................................................................... 72-17
72.20 SHOW TCP ................................................................................................................................... 72-18
72.21 SHOW TCP IPV6 ............................................................................................................................ 72-19
72.22 SHOW TELNET LOGIN.................................................................................................................... 72-19
72.23 SHOW TEMPERATURE ................................................................................................................... 72-20
72.24 SHOW TECH-SUPPORT .................................................................................................................. 72-20
72.25 SHOW UDP ................................................................................................................................... 72-21
72.26 SHOW UDP IPV6 ........................................................................................................................... 72-21
72.27 SHOW VERSION ............................................................................................................................ 72-22
CHAPTER 73 COMMANDS FOR RELO AD SWITCH AFTER SPECIFIED TIME .........73-1
73.1 RELOAD AFTER ................................................................................................................................ 73-1
73.3 SHOW RELOAD ................................................................................................................................. 73-2
CHAPTER 74 COMMANDS FOR DEBUGGING AND DIAGNOSIS FOR PACKETS
RECEIVED AND SENT BY CPU ....................................................................................74-1
75.4 SHOW MPLS ..................................................................................................................................... 75-6
75.5 SHOW MPLS ENABLE ........................................................................................................................ 75-7
75.6 SHOW MPLS FORWARDING-TABLE ..................................................................................................... 75-7
75.7 SHOW MPLS FTN-TABLE BRIEF .......................................................................................................... 75-8
75.8 SHOW MPLS FTN-TABLE DETA IL ......................................................................................................... 75-8
75.9 SHOW MPLS ILM-TABLE .................................................................................................................. 75-10
75.10 SHOW MPLS VRF-TABLE ............................................................................................................... 75-11
76.43 SHOW LDP ................................................................................................................................... 76-27
76.44 SHOW LDP ADJACENCY ................................................................................................................ 76-29
76.45 SHOW LDP DOWNSTREAM ............................................................................................................. 76-29
76.46 SHOW LDP FEC ............................................................................................................................ 76-30
76.47 SHOW LDP INTERFACE .................................................................................................................. 76-31
76.48 SHOW LDP LSP ............................................................................................................................. 76-31
76.49 SHOW LDP SESSION ..................................................................................................................... 76-32
76.50 SHOW LDP STATISTICS .................................................................................................................. 76-32
76.51 SHOW LDP TARGETED-PEERS ....................................................................................................... 76-33
76.52 SHOW LDP UPSTREAM .................................................................................................................. 76-34
76.53 SHOW MPLS LDP DISCOVERY ........................................................................................................ 76-34
76.54 SHOW MPLS LDP FEC .................................................................................................................... 76-35
76.55 SHOW MPLS LDP NEIGHBOR .......................................................................................................... 76-35
1-48
XGS3 Command Guide
76.56 SHOW MPLS LDP PARAMETER ....................................................................................................... 76-36
76.57 SHOW MPLS LDP SES SI O N ............................................................................................................ 76-38
77.9 IP ROUTE ......................................................................................................................................... 77-5
77.10 IP ROUTE VRF ................................................................................................................................ 77-6
77.11 IP VRF............................................................................................................................................ 77-7
77.12 IP VRF FORWARDING VRFNAME ....................................................................................................... 77-7
77.19 SHOW IP BGP VPNV4 .................................................................................................................... 77-13
77.20 SHOW IP ROUTE VRF..................................................................................................................... 77-14
77.21 SHOW IP VRF ............................................................................................................................... 77-14
1-49
XGS3 Command Guide
Chapter 1 Commands for Basic Switch
Configuration
1.1 Commands for Basic Conf igur a tion
1.1.1 Authentication line login
Command:
authentication line {console | sty | web} login {local | radius | tacacs}
No authentication line {console | sty | web} login
Function:
Configure VTY (login with Telnet and SSH), Web and Console, so as to select the priority of the authentication mode
for the login user. The no form command restores the default authenticati on mode .
Default:
No configuration is enabled for the console login method by default. Local authentication is enabled for the VTY and
Web login method by default.
Command Mode:
Global Mode.
Usage Guide:
The authentication method for Console, VTY and Web login can be configured respectively. And authentication
method can be any one or combination of Local, RADIUS or TACCACS. When login method is configuration in
combination, the preference goes from left to right. If the users have passed the authentication method,
authentication method of lower preferences will be ignored. To be mentioned, if the user receives correspond
protocol’s answer whether refuse or incept, it will not attempt the next authentication method (Exception: if the local
authentication method failed, it will attempt the next authentication method); it will attempt the next authentication
method if it receives nothing. And AAA function RADIUS server should be configured before the RADIUS
configuration method can be used. And TACACS server should be configured before the TACACS configuration
method can be used.
The authentication line console login c ommand is exclusive with the login command. The authentication line console login command configures the switch to use the Console login method. And the login command makes the
Console login to use the passwords configured by the password command for authentication.
If local authentication is configured while no local users are configured, users will be able to login the switch via the
Console method.
Example:
To configure the Telnet and ssh login method to use RADIUS authentication method.
1-50
XGS3 Command Guide
Switch(config)# authenticat ion line vty login lo cal radi us
This command is used to configure the information displayed when the login authentication of a telnet or console
user is successful, the no command configures that the information is not displayed when the authentication is
successful.
Parameters: .
<LINE>: The information displayed when the authentication is successful, length limit from 1 to 100 characters.
Command Mode:
Global Mode.
Default:
Do not show the information when the authentication is successful.
Example:
Switch(config)#banner motd Welc ome
1.1.3 boot img
Command:
boot img <img-file-url>{primary | backup}
Function:
Configure the first and second img files used in the next boot of the main control boardcard.
Parameters: .
primary means to configure the first IMG file, backup means to configure the second IMG file, <img-file-url> is the full
path of the booting IMG file, the format of which is as follows:
1. The file path comprises of two parts: device prefix used as the root directory (flash:/) and the file name. No
space is allowed in each part or between two parts.
2. The suffix of all file names should be .img.
3. The length of the full file path should be no longer than 128 characters, while the file name no longer than 80
characters.
1-51
XGS3 Command Guide
Command Mode:
Admin Mode.
Default:
The factory original configuration only specifies the first booting IMG file, the nos.img file in the FLASH, without the
second one.
Example:
1. Set flash:/nos.img as the second booting IMG file used in the next booting of the system.
Switch#boot img flash:/nos.im g backup
2. Set flash:/5.4.128.0_nos.img as the first booting IMG file used in the next booting of the system.
Switch#boot img flash:/5.4.128.0_nos.img primary
1.1.4 boot startup-config
Command:
boot startup-config { NULL | <file-url> }
Function:
Configure the CGF file used in the next booting of the main control boardcard.
Parameters:
The NULL keyword means to use the factory original configuration as the next booting configuration. Setting the he
CGF file used in the next booting as NULL equals to implementing “set default” and “write”. <file-url> is t he f ull path
of CGF file used in the next booting.
1. The file path compri se s of two parts: device prefix used as th e root dir e ctory ( fl ash :/) an d th e fil e name. No space
is allowed in each part or between two parts.
2. The suffix of all file names should be .cfg.
3. The length of the full file path should be no longer than 128 characters, while the file name no longer than 80
characters.
Command Mode:
Admin Mode.
Default Settings:
None.
Example:
1. Set flash:/ startup.cfg as the booting CFG file used in the next booting of the system.
Switch# boot startup-configflash:/ startup.cfg
2. Set flash:/ test-trunk.cfg as the booting CFG file used in the next booting of the system.
Switch#boot startup-config flash:/ test-trunk.cfg
1-52
XGS3 Command Guide
1.1.5 clock set
Command:
clock set <HH:MM:SS> <YYYY.MM.DD>
Function:
Set system date and time.
Parameter:
<HH:MM:SS>is the current time, and the valid scope for HH is 0 to 23, MM and SS 0 to 59; <YYYY.MM.DD> is t he
current year, month and date, and the valid scope for YYYY is 1970~2038, MON meaning month, and DD between 1
to 31.
Command mode:
Admin Mode.
Default:
upon first time start-up, it is defaulted to 2006.1.1 0: 0: 0.
Usage guide:
The switch can not continue timing with power off, hence the current date and time must be first set at environments
where exact time is required.
Example:
To set the switch current date and time to 2002.8.1 23: 0: 0:
Switch#clock set 23:0:0 2002.8.1
Relative Command:
show clock
1.1.6 config
Command:
config [terminal]
Function:
Enter Global Mode from Admin Mode.
Parameter:
[terminal] indicates terminal configuration.
Command mode:
Admin Mode
Example:
Switch#config
1-53
XGS3 Command Guide
Switch>
1.1.7 debug ssh-server
Command:
debug ssh-server
no debug ssh-server
Function:
Display SSH server debugging information; the “no debug ssh-server” command stops displaying SSH server
debugging information.
Default:
This function is disabled by default.
Command mode:
Admin Mode.
1.1.8 disable
Command:
disable
Function:
Disable admin mode.
Command mode:
Admin Mode.
Example:
Switch#disable
1.1.9 enable
Command:
enable
Function:
Use enable command to enter Admin Mode from User Mode.
Command mode:
User Mode/ Admin Mode.
Usage Guide:
To prevent unauthorized access of non-admin user, user authentication is required (i.e. Admin user password is
required) when entering Admin Mode from User Mode. If the correct Admin user password is entered, Admin Mode
access is granted; if 3 consecutive entry of Admin user password are all wrong, it remains in the User Mode. Set the
Admin user password under Global Mode with “enable password” command.
1-54
XGS3 Command Guide
Switch#
Example:
Switch>enable
1.1.10 enable password
Command:
enable passw ord [0|7] <password>
no enable password
Function:
Configure the password used for enter Admin Mode from the User Mode,
The “no enable password” command deletes this passwo rd.
Parameter:
password is the password for the user. If input option 0 on password setting, the password is not encrypted; if input option 7, the password is encrypted.
Command mode:
Global Mode
Default:
This password is empty by system default
Usage Guide:
Configure this password to prevent unauthorized entering Admin Mode. It is recommended to set the password at
the initial switch configuration. Also, it is recommended to exit Admin Mode with “exit” command when the
administrator needs to leave the terminal for a long time.
1.1.11 end
Command:
end
Function:
Quit current mode and return to Admin mode when not at User Mode/ Admin Mode.
Command mode:
Except User Mode/ Admin Mode
Example:
Quit VLAN mode and return to Admin mode.
Switch(config-vlan1)#end
Switch#
1-55
XGS3 Command Guide
1.1.12 exec-timeout
Command:
exec-timeout <minutes> [<seconds>]
no exec-timeout
Function:
Configure the timeout of exiting admin mode. The “no exec-timeout” command restores the default value.
Parameters:
<minute> is the time value shown in minute and ranges between 0~35791.
<seconds> is the time value shown in seconds and ranges between 0~59.
Command mode:
Global mode
Default:
Default timeout is 10 minutes.
Usage guide:
To secure the switch, as well to prevent mal ic iou s a ctio ns f rom unauthorized u ser, the time will be count from the last
configuration the admin had m ade, an d the sy st em w ill exit the admin mode at due time. It is required to enter admin
code and password to enter the admin mode again. The timeout timer will be disabled when the timeout is set to 0.
Example:
Set the admin mode timeout value to 6 minutes
Switch(config)#exec-timeout 6
Set the admin mode timeout value to 5 minutes, 30 seconds
Switch(config)#exec-timeout 5 3 0
1.1.13 exit
Command:
exit
Function:
Quit current mode and return to it’s previous mode.
Command mode:
All Modes
Usage Guide:
This command is to quit current mode and return to it’s previous mode.
Example:
Quit global mode to it’s previous mode
Switch#exit
1-56
XGS3 Command Guide
Switch#
1.1.14 help
Command:
help
Function:
Output brief description of the command interpreter help system.
Command mode:
All configuration modes.
Usage Guide:
An instant online help provided by the switch. Help command displays information about the whole help system,
including complete help and part ial help. T he user can type in ? any time to get online help.
Example:
switch(config)#help
PLANETOS CLI provides advanced help feature. When you need help, anytime at the command line please press
'?'. If nothing matches, the he lp list w ill b e empty and you mu st backup until entering a '?' shows the availab le option s.
Two styles of help are provided:
1. Full help is available when you are ready to enter acommand argument (e.g. 'show ?') and describes each
possible argument.
2. Partial help is provided when an abbreviated argument is entered and you want to know what arguments match
the input (e.g. 'show ve?'.)
1.1.15 hostname
Command:
hostname <hostname>
no hostname
Function:
Set the prompt in the switch command line interface. The no operation cancels the configuration.
Parameter:
<hostname> is the string for the prompt, up to 30 characters are allowed.
Command mode:
Global Mode
Default:
The default prompt is relatived with the switch.
1-57
XGS3 Command Guide
Test(config)#
Usage Guide:
With this command, the user can set the CLI prompt of the switch according to their own requirements.
Example:
Set the prompt to “Test”.
Switch(config)#hostname Test
1.1.16 ip host
Command:
ip host <hostname> <ip_addr>
no ip host {<hostname>|all}
Function:
Set the mapping relationship between the host and IP address; the “no ip host” parameter of this command will
delete the mapping.
Parameter:
<hostname> is the host name, up to 15 characters are allowed;
<ip_addr> is the corresponding IP address for the host name, takes a dot decimal format;
all is all of the host name.
Command mode:
Global Mode
Usage Guide:
Set the association between host and IP address, which can be used in commands like “ping <host>“.
Example:
Set IP address of a host with the hostname of “beijing” to 200.121.1.1.
Switch(config)#ip host beijing 200.121.1.1
Command related:
telnet, ping, traceroute
1.1.17 ipv6 host
Command:
ipv6 host <hostname> <ipv6_addr>
no ipv6 host {<hostname>|all}
Function:
Configure the mapping relationship between the IPv6 address and the host; the “no ipv6 host <hostname>”
command deletes this mapping relationship.
Parameter:
1-58
XGS3 Command Guide
<hostname> is the name of the host, containing max 15 characters;
<ipv6_addr> is the IPv6 address corresponding to the host name.
<all> is all the host address.
Command Mode:
Global Mode
Usage Guide:
Configure a fixed corresponding relationship between the host and the IPv6 address, applicable in commands such
as “traceroute6 <host>”, etc.
Example:
Set the IPv6 address of the host named beijing to 2001:1:2:3::1
Switch(config)#ipv6 host beijing 2001:1:2:3::1
Command related:
ping6,traceroute6
1.1.18 ip http server
Command:
ip http server
no ip http server
Function:
Enable Web configuration; the “no ip http server” command disables Web configuration
Command mode:
Global mode
Usage guide:
Web configuation is for supplying a interface configured with HTTP for the user, which is straight and visual, esay to
understand.
Example:
Enable Web Server function and enable Web configurations.
Switch(config)#ip http server
1.1.19 language
Command:
language {chinese | english}
Function:
Set the language for displaying the help information.
Parameter:
1-59
XGS3 Command Guide
chinese for Chinese display;
english for English display.
Command mode:
Admin and Config Mode.
Default:
The default setting is English display.
Usage Guide:
Switch provides help information in two languages, the user can select the language according to their preference.
After the system restart, the help information display will revert to English.
1.1.20 login
Command:
login
no login
Function:
login enable password authentication, no login command cancels the login configuration.
Command mode:
Global mode
Default:
No login by default
Usage guide:
By using this command, users have to enter the password set by password command to enter normal user mode
with console; no login cancels this restriction.
Example:
Enable password
Switch(config)#login
1.1.21 password
Command:
password [0|7] <password>
no password
Function:
Configure the pas sw or d us ed f or ent er n or ma l u ser mo de on the console. The “no password” command delete s this
password.
Parameter:
1-60
XGS3 Command Guide
Switch(config)#login
password is the configured code. Encryption will be performed by entering 8.
Command mode:
Global mode
Default:
This password is empty by system default
Usage guide:
When both this password and login command are configured, users have to enter the password set by password
command to enter normal user mode on console.
Example:
Switch(config)#password 0 test
1.1.22 reload
Command:
reload
Function:
Warm reset the switch.
Command mode:
Admin Mode.
Usage Guide:
The user can use this command to restart the switch without power off.
1.1.23 service password-encryption
Command:
service password-encryption
no service password-encryption
Function:
Encrypt system password. T he “no serv ice password-encryption” command cancels the encryption.
Command mode:
Global Mode
Default:
No service password-encryption by system default
Usage guide:
The current unencrypted passwords as well as the coming passwords configured by password, enable password
and username command will be encrypted by executed this command. no service password-encryption cancels this
function however encrypted passwords remain unchanged.
1-61
XGS3 Command Guide
Example:
Encrypt system passwords
Switch(config)#service password-encryption
1.1.24 service terminal-length
Command:
service terminal-length <0-512>
no service terminal-length
Function:
Configure the columns of characters displayed in each screen on terminal (vty). The “no service terminal-length”
command cancels the screen shifting operation.
Parameter:
Columns of characters displayed on each screen of vty, ranging between 0-512.
Command mode:
Global Mode
Usage guide:
Configure the columns of characters displayed on each screen of the terminal. The columns of characters displayed
on each screen on the telent.ssh client and the Console will be following this config urati on.
Example:
Set the number of vty threads to 20.
Switch(config)#service t erminal-length 20
1.1.25 sysContact
Command:
sysContact <LINE>
no sysContact
Function:
Set the factory contact mode, the “no sysContact” command reset the switch to factory settings.
Parameter:
<LINE> is the prompt character string, range from 0 to 255 characters.
Command mode:
Global Mode
Default:
Thefactory settings.
Usage guide:
1-62
The user can set the factory contact mode bases the fact instance.
Example:
Set the factory contact mode to test.
Switch(config)#sysContact test
1.1.26 sysLocation
Command:
sysLocation <LINE>
no sysLocation
Function:
Set the factory address, the “no sysLocation” command reset the switch to factory settings.
Parameter:
<LINE> is the prompt character string, range from 0 to 255 characters.
XGS3 Command Guide
Command mode:
Global Mode
Default:
Thefactory settings.
Usage guide:
The user can set the factory address bases the fact instance.
Example:
Set the factory address to test.
Switch(config)#sysLocation test
1.1.27 set default
Command:
set default
Function:
Reset the switch to factory settings.
Command mode:
Admin Mode.
Usage Guide:
Reset the switch to factory settings. That is to say, all configurations made by the user to the switch will disappear.
When the switch is restarted, the prompt will be the same as when the switch was powered on for the first time.
Note:
After the command, “write” command must be executed to save the operation. The switch will reset to factory
1-63
settings after restart.
Switch#reload
Example:
Switch#set default
Are you sure? [Y/N] = y
Switch#write
1.1.28 setup
Command:
setup
Function:
Enter the Setup Mode of the switch.
XGS3 Command Guide
Command mode:
Admin Mode.
Usage Guide:
Switch provides a Setup Mode, in which the user can configure IP addre ss es, etc.
1.1.29 show clock
Command:
show clock
Function:
Display the curre nt syst e m cl o ck.
Command mode:
Admin and Configuration Mode.
Usage Guide:
If the system clock is inaccurate, user can adjust the time by examining the system date and clock.
Example:
Switch#show clock
Current time is TUE AUG 22 11:00:01 2002
Command related:
clock set
1-64
XGS3 Command Guide
From running CPU IDLE: 89%
The memory total 128 MB, free 58914872 bytes, usage is 56.10%
1.1.30 show cpu usage
Command:
show cpu usage [<slotno>]
Function:
Show CPU usage rate.
Command mode:
Admin and Configuration Mode.
Usage Guide:
Check the current usage of CPU r esource by show cpu usage command. Only the chassis switch uses slotno
parameter which is used to show the CPU usage rate of the card on specified slot, if there is no parameter, the
default is current card.
Example:
Show the current usage rate of CPU.
Switch#show cpu usage
Last 5 second CPU IDLE: 87%
Last 30 second CPU IDLE: 89%
Last 5 minute CPU IDLE: 89%
Command related:
clock set
1.1.31 show memory usage
Command:
show memory usage [<slotno>]
Function:
Show memory usage rate.
Command mode:
Admin and Configuration Mode.
Usage Guide:
Check the current usage of memory resource by show memory usage command. Only the chassis switch uses slotno parameter w hic h is us ed to show the memory usage rate of card o n t he specified slot, if th er e is n o parameter,
the default is current card.
Example:
Show the current usage rate of the memory.
Switch#show memory usage
1-65
1.1.32 show privilege
Current privilege level is 15
Command:
show privilege
Function:
Show privilege of the current users.
Command mode:
All configuration modes
Example:
Show privilege of the current user.
Switch(Config)#show privilege
1.1.33 show temperature
XGS3 Command Guide
Command:
show temperature
Function:
Display the current temputerature of the switch CPU.
Command mode:
All mode.
Usage Guide:
This command is used to monitor the temperature of the switch CPU.
Example:
Display the current temperature of the switch CPU.
Switch(Config)#show temperature
Temperature: 47.0625 ℃
1.1.34 show tech-support
Command:
show tech-support [no-more]
Function:
Display the operational information and the task status of the switch. The technique specialist use this command to
diagnose whether the switch operate normally.
Parameter:
no-more: Display the operational information and the task status of the switch directly, do not connect the user by
1-66
“more”.
Command mode:
Admin and Configuration Mode.
Usage Guide:
This command is used to collect the relative information when the switch operat ion is malfuncti oned.
Example:
Switch#show tech-support
1.1.35 show version
Command:
show version
Function:
Display the version information of the switch.
XGS3 Command Guide
Command mode:
Admin and Configuration Mode.
Usage Guide:
this command is used to show the v er si on in form at i on of t he s witch, including the hardw are v er sio n an d the sof tware
version information.
Example:
Switch#show version
1.1.36 username
Command:
username <username> [privilege <privilege>] [password <0|7> <password>]
no username <username>
Function:
Configure local login username and password along with its privilege level.
Parameter:
<username> is the name of the user.
<privilege> is the maximum privilege level of the commands that the user is able to execute, its value is limited
between 1 and 15, and 1 by default.
<password> is the password for the user. If input option 7 on password setting, the password is encrypted; if input
option 0, the password is not processed.
Command Mode:
Global Mode.
1-67
XGS3 Command Guide
Usage Guide:
There are two available choices for the preferences of the registered commands in the switch. They are 1 and 15.
Preference of 1 is for the commands of the normal user configuration mode. Preference of 15 is for the commands
registered in modes other than the normal user configuration modes. 16 local users at most can be configured
through this command, and the maximum length of the password should be no less than 32.
Notice:
The user can log in user and priority after the command configures, before issuing the command authentication line
console login local, it should be made sure that at one user has be configured as preference level of 15, in order to
login the switch and ma ke con figurat ion change s in pr ivileg ed mod e and gl obal m ode. If ther e are no conf igured local
users with preference level of 15, while only Local authentication is configured for the Console login method, the
switch can be login without any authentication. When using the HTTP method to login the switch, only users with
preference level of 15 can login the switch, users with preference level other than 15 will be denied.
Example:
Configure an administrator account named admin, with the preference level as 15. And configure two normal
accounts with its preference level as 1. Then enable local authentication method.
Above all the configurations, only the admin user is able to login the switch in privileged mode through Telnet or
Console login method, user1 a nd user 2 ca n only log in the switch in normal user mode through the telnet and console
login method. For HTTP login method, only the admin user can pass the authentication configuration, user1 and
user2 will be denied.
Switch(config)#username admin privilege 15 password 0 admin
Switch(config)# username user1 privilege 1 password 7 user1
Switch(config)# username user2 password 0 user2
Switch(config)# authenticat ion line con so le logi n local
1.1.37 web language
Command:
web language {chinese | english}
Function:
Set the language for displaying the HTTP Server information.
Parameter:
chinese for Chinese display;
english for English display.
Command mode:
Admin Mode
Default:
The default setting is English display.
Usage Guide:
1-68
XGS3 Command Guide
The user can select the language according to their preference.
1.1.38 write
Command:
write
Function:
Save the currently configured p aram eters to the Flash memory.
Command mode:
Admin Mode.
Usage Guide:
After a set of configuration with desired functions, the setting should be saved to the Flash memory, so that the
system can revert to the saved configuration automatically in the case of accidentally powered off or power failure.
This is the equivalent to the copy running-config startup-config command.
1.2 Commands for Telnet
1.2.1 authentication ip access-class
Command:
authentication ip access-class {<num-std>|<name>}
no authentication ip access-class
Function:
Binding standard IP ACL protocol tologin with Telnet/SSH/Web; the no form command will cancel the binding ACL.
Parameters:
<num-std> is the access-class number for standard numeric ACL, ranging between 1-99;
<name> is the access-class name for standard ACL, the character string length is ranging between 1-32.
Default:
The binding ACL to Telnet/SSH/Web function is closed by default.
Command Mode:
Global Mode.
Example:
Binding standard IP ACL protocol to access-class 1.
Switch(config)#authentication ip access-class 1 in
1.2.2 authentication ipv6 access-class
1-69
XGS3 Command Guide
Command:
authentication ipv6 access-class {<num-std>|<name>}
no authentication ipv6 access-class
Function:
Binding standard IPv6 ACL protocol tologin with Telnet/SSH/Web; the no form command will cancel the binding ACL.
Parameters:
<num-std> is the access-class number for standard numeric ACL, ranging between 500-599;
<name> is the access-class name for standard ACL, the character string length is ranging between 1-32.
Default:
The binding ACL to Telnet/SSH/Web function is closed by default.
Command Mode:
Global Mode.
Example:
Binding standard IP ACL protocol to access-class 500.
Switch(config)#authenti cat ion i pv 6 acces s-class 500
1.2.3 authentication line login
Command:
authentication line {console | vty | web} login {local | radius | tacacs}
no authentication line {console | vty | web} login
Function:
Configure VTY (login with Telnet and SSH), Web and Console, so as to select the priority of the authentication mode
for the login user. The no form command restores the default authenti cation mode.
Default:
No configuration is enabled for the console login method by default. Local authentication is enabled for the VTY and
Web login method by default.
Command Mode:
Global Mode.
Usage Guide:
The authentication method for Console, VTY and Web login can be configured respectively. And authentication
method can be any one or combination of Local, RADIUS or TACACS. When login method is configuration in
combination, the preference goes from left to right. If the users have passed the authentication method,
authentication method of lower preferences will be ignored. To be mentioned, if the user receives correspond
protocol’s answer whether refuse or incept, it will not attempt the next authentication method (Except io n: i f the l ocal
authentication method failed, it will attempt the next authentication method); it will attempt the next authentication
method if it receives nothing. And AAA function RADIUS server should be configured before the RADIUS
configuration method can be used. And TACACS server should be configured before the TACACS configuration
1-70
XGS3 Command Guide
method can be used.
The authentication line console login command is exclusive with the “login” command. The authentication line console login command c onfigures the sw itch to us e the Console login method. And the login command makes the
Console login to use the passwords configured by the password command for authentication.
If local authentication is configured while no local users are configured, users will be able to login the switch via the
Console method.
Example:
Configure the remote login authentication mode to radius.
Switch(config)#authentication login r adi us
Relative Command:
aaa enable, radius-server authentication host
1.2.4 authentication securityip
Command:
authentication securityip <ip
no authentication securityip <ip-addr>
Function:
To configure the trusted IP address for Telnet and HTTP login method. The no form of this command will remove the
trusted IP address configuration.
Parameters:
<ip-addr> is the trusted IP address of the client in dotted decimal format which can login the switch.
Default:
No trusted IP address is configured by default.
Command Mode:
Global Mode.
Usage Guide:
IP address of the client which can login the switch is not restricted before the trusted IP address is not configured.
After the trusted IP address is configured, only clients with trusted IP addre ss es are able to login the switch. Up to 32
trusted IP addresses can be configured in the switch.
Example:
To configure 192.168.1.21 as the trusted IP address.
Switch(config)# authenticat ion sec urity ip 192.168.1.21
1.2.5 authentication securityipv6
Command:
1-71
XGS3 Command Guide
authentication securityipv6 <ipv6-addr>
no authentication securityipv6 <ipv6-addr>
Function:
To configure the trusted IPv6 address for Telnet and HTTP login method. The no form of this command will remove
the specified configuration.
Parameters:
<ipv6-addr> is the trusted IPv6 address which can login the switch.
Default:
No trusted IPv6 addresses are configured by default.
Command Mode:
Global Mode.
Usage Guide:
IPv6 address of the client which can login the switch is not restricted before the trusted IPv6 address is not
configured. After the trusted IPv6 address is configu red, only clients with trust ed IPv 6 addresses are able to login the
switch. Up to 32 trusted IPv6 addresses can be configured in the switch.
Example:
Configure the secure IPv6 address is 2001:da8:123:1::1.
Switch(config)# authenticat ion sec urity ipv 6 2001:da8:123:1::1
1.2.6 authorization
Command:
uthorization line {console | vty | web} exec {local | radius | tacacs}
no authorization line {console | vty | web} exec
Function:
Configure VTY (login with Telnet an d SS H), Web and Console, so as to select the priority of the authorization mode
for the login user. The no form command restores the default authorization mode.
Default:
There is no authorization mode.
Command Mode:
Global Mode.
Usage Guide:
The authorization method for Console, VTY and Web login can be configured respectively. And authorization method
can be any one or combination of Local, RADIUS or TACACS. When login method is configuration in combination,
the preference goes from left to right. If the users have passed the authorization method, authorization method of
lower preferences will be ignored. To be mentioned, if the user receives corresponding protocol’s answer whether
refuse or incept, it will not attempt the next authorization method; it will attempt the next authorization method if it
receives nothing. And AAA function RADIUS server should be configured before the RADIUS configuration method
1-72
XGS3 Command Guide
can be used. And TACACS server should be configured before the TACACS configuration method can be used.
The local users adopt username command permission while authorization command is not configured, the users
login the switch via RADIUS/TACACS method and works under common mode.
Example:
Configure the telnet authentication mode to RADIUS.
Switch(config)#authorization line vty exec radius
1.2.7 terminal length
Command:
terminal length <0-512>
terminal no length
Function:
Set columns of characters displayed in each screen on terminal; the “terminal no length” cancels the screen
switching operation and display content once in all.
Parameter:
Columns of characters displayed in each screen, ranging between 0-512 (0 refers to non-stop display).
Command mode:
Admin Mode.
Default:
Default columns is 25.
Usage guide:
Set length of characters displayed in each screen on terminal, so that the-More-message will be shown when
displayed information exceeds the screen. Press any key to show information in next screen. Default length is 25.
Example:
Configure treads in each display to 20.
Switch#terminal length 20
1.2.8 terminal monitor
Command:
terminal monitor
terminal no monitor
Function:
Copy debugging messages to current display terminal; the “terminal no monitor” command restores to the default
value.
Command mode:
1-73
XGS3 Command Guide
Admin Mode.
Usage guide:
Configures whether the current debugging messages is displayed on this terminal. If this command is configured on
telnet or SSH clients, debug messages will be sent to that client. The debug message is displayed on console by
default.
<ip-addr> is the IP address of the remote host, shown in dotted decimal notation;
<ipv6-addr> is the IPv6 address of the remote host;
<hostname> is the name of the remote host, containing max 30 characters;
<port> is the port number, ranging between 0~65535.
Command Mode:
Admin Mode.
Usage Guide:
This command is used when the switch is applied as Telnet client, for logging on remote host to configure. When a
switch is applied as a Telnet client, it can only establish one TCP connection with the remote host. To connect to
another remote host, the current TCP connection must be disconnected with a hotkey “CTRL+ \”. To telnet a host
name, mapping relationship between the host name and the IP/IPv6 address should be previously configured. For
required commands please refer to ip host and ipv6 host. In case a host corresponds to both an IPv4 and an IPv6
addresses, the IPv6 should be preferred when telneting this host name.
Example:
The switch Telnets to a remote host whose IP address is 20.1.1.1.
Switch#telnet 20.1.1.1 23
Connecting Host 20.1.1.1 Port 23
Service port is 23
Connected to 20.1.1.1
login:123
password:***
XGS3>
1-74
XGS3 Command Guide
1.2.10 telnet server enable
Command:
telnet server enable
no telnet server enable
Function:
Enable the Telnet server functi on in the switch: the “no tel net serv er enable” command disa bles the Telnet function in
the switch.
Default:
Telnet server function is enabled by default.
Command mode:
Global Mode
Usage Guide:
This command is available in Console only. The administrator can use this command to enable or disable the Telnet
client to login to the switch.
Configure the max connection number supported by the Telnet service of the switch.
Parameters:
<max-connection-number>: the max connection number supported by the Telnet service, ranging from 5 to 16.
The default option will restore the default configuration.
Default:
The system default value of the max connection number is 5.
Command Mode:
Global Mode
Usage Guide:
None.
Example:
Set the max connection number supported by the Telnet service as 10.
Switch(config)#telnet-server max-connection 10
1-75
XGS3 Command Guide
1.2.12 ssh-server authentication-retries
Command:
ssh-server authentication-retries <authentication-retries>
no ssh-server authentication-retries
Function:
Configure the number of times for retrying SSH authentication; the “no ssh-server authentication-retries”
command restores the default number of times for retrying SSH authentication.
Parameter:
<authentication-retries > is the number of times for retrying authentication; valid range is 1 to 10.
Command mode:
Global Mode
Default:
The number of times for retrying SSH authentication is 3 by default.
Example:
Set the number of times for retrying SSH authentication to 5.
modulus is the modulus which is used to compute the host key; valid range is 768 to 2048. The default value is
1024.
Command mode:
Global Mode
Default:
The system uses the key generated when the ssh-server is started at the first time.
Usage Guide:
This command is used to generate the new host key. When SSH client logs on the server, the new host key is used
for authentication. After the new host key is generated and “write” command is used to save the configuration, the
system uses this key for authentication all the time. Because it takes quite a long time to compute the new key and
some clients are not compatible with the key generated by the modulus 2048, it is recommended to use the key
which is generated by the default modulus 1024.
Configure the max connection number supported by the SSH service of the switch.
Parameters:
<max-connection-number>: the max connection number supported by the SSH service, ranging from 5 to 16. The
default option will restore the defaul t configuration.
Default:
The system default value of the max connection number is 5.
Command Mode:
Global Mode
Usage Guide:
None.
Example:
Set the max connection number supported by the SSH service as 10.
1-77
XGS3 Command Guide
ssh-server login user number 2
Switch(config)#ssh-server max-connection 10
1.2.16 ssh-server timeout
Command:
ssh-server timeout <timeout>
no ssh-server timeout
Function:
Configure timeout value for SSH authentication; the “no ssh-server timeout” command restores the default timeout
value for SSH authentication.
Parameter:
<timeout> is timeout value; valid range is 10 to 600 seconds.
Command mode:
Global Mode
Default:
SSH authentication timeout is 180 seconds by default.
Example:
Set SSH authentication timeout to 240 seconds.
Switch(config)#ssh-server timeout 240
1.2.17 show ssh-server
Command:
show ssh-server
Function:
Display SSH state and users which log on currently.
Command mode:
Admin Mode.
Example:
Switch#show ssh-server
ssh server is enabled
ssh-server timeout 180s
ssh-server authentication-retries 3
ssh-server max-connection number 6
1-78
XGS3 Command Guide
aa
Telnet user a login from 192.168.1.20
1.2.18 show telnet login
Command:
show telnet login
Function:
Display the information of th e Telnet client which currently establishes a Telnet connection with the switch.
Command mode:
Admin and Configuration Mode.
Usage Guide:
Check the Telnet client messages connected through Telnet with the switch.
Example:
Switch #show telnet login
Authenticate login by local
Login user:
1.2.19 who
Command:
who
Command mode:
All configuration modes
Example:
Show the current login users with vty.
Switch #who
1.3 Commands for Configuring Switch IP
1.3.1 interface vlan
Command:
interface vlan <vlan-id>
no interface vlan <vlan-id>
Function:
Enter the VLAN interface configuration mode; the no operation of this command will delete the existing VLAN
interface.
1-79
XGS3 Command Guide
Switch(Config-if-Vlan1)#
Switch(config)#
Parameters:
<vlan-id> is the VLAN ID of an existing VLAN, ranging from 1 to 4094.
Command Mode:
Global Configuration Mode.
Usage Guide:
Users should first make sure the existence of a VLAN before configuring it. Us er “exit” command to quit the VLAN
interface configuration mode back to the globa l confi guration mode.
Example:
Enter the VLAN interface configuration mode of VLAN1.
Switch(config)#interfac e vlan 1
1.3.2 ip address
Command:
ip address <ip-address> <mask> [secondary]
no ip address [<ip-address> <mask>] [secondary]
Function:
Set the IP address and mask for the specified VLAN interface; the “no ip address <ip address><mask>
[secondary]” command deletes the specified IP address setting.
Parameter:
<ip-address> is the IP address in dot decimal format;
<mask> is the subnet mask in dot decimal format;
[secondary] indicates the IP configured is a secondary IP address.
Default:
No IP address is configured upon switch shipment.
Command mode:
VLAN Interface Mode
Usage Guide:
A VLAN interface must be created first before the user can assign an IP address to the switch.
Example:
Set 10.1.128.1/24 as the IP address of VLAN1 interface.
Configure aggregatable global unicast address, site-local address and link-local address for the interface.
Parameters:
<ipv6address> is the prefix of an IPV6 address;
<prefix-length>is the length of the prefix of an IPV6 address, ranging from 3 to 128;
eui-64 means that the eui64 interface id of the interface will automatically create an IPV6 address.
Command Mode:
Interface Configuration Mode.
Default
None.
Usage Guide:
The prefix of an IPV6 address should not be a multicast address, or other kinds of IPV6 addresses with specific
usage. Different layer-three VLAN interfaces are forbidden to share a same address prefix. As for any global unicast
address, the prefix should be limited in the range from 2001:: to 3fff ::,with a length no shorter than 3. And the prefix
length of a site-local address or a link-local address should not be shorter than 10.
Examples:
Configure an IPV6 address at the layer-three interface of VLAN1: set the prefix as 2001:3f:ed8::99, the length of
which is 64.
Enable the switch to be a BootP Client and obtain IP address and gateway address through BootP negotiation; the
“no ip bootp-client enable” command disables the BootP Client function and releases the IP address obtained in
BootP.
Default:
BootP client function is disabled by default.
Command mode:
VLAN Interface Mode
1-81
XGS3 Command Guide
Switch(config)#
Switch(config)#
Usage Guide:
Obtaining IP address through BootP, Manual configuration and DHCP are mutually exclusive, enabling any two
methods for obtaining IP address is not allowed. Note: To obtain IP address via BootP, a DHCP server or a BootP
server is required in the network.
Enables the switch to be a DHCP client and obtain IP address and gateway address through DHCP negotiation; the
“no ip dhcp-client enable” command disables the DHCP client function and releases the IP address obtained in
DHCP. Note: To obtain IP address via DHCP, a DHCP server is required in the network.
Default:
the DHCP client function is disabled by default.
Command mode:
VLAN Interface Mode
Usage Guide:
Obtaining IP address by DHCP, Manual configuration and BootP are mutually exclusive, enabling any 2 methods for
obtaining an IP address is not allowed.
Example:
Getting an IP address through DHCP.
Switch(config)#interfac e vlan 1
Switch(Config-if-Vlan1)#ip dhcp-client enable
Switch(Config-if-Vlan1)#exit
1-82
XGS3 Command Guide
1.4 Commands for SNMP
1.4.1 debug snmp mib
Command:
debug snmp mib
no debug snmp mib
Function:
Enable the SNMP mib debugging; the "no debug snmp mib” command disables the debugging.
Command Mode:
Admin Mode.
Usage Guide:
When user encounters problems in applying SNMP, the SNMP debugging is available to locate the problem causes.
Example:
Switch#debug snmp mib
1.4.2 debug snmp kernel
Command:
debug snmp kernel
no debug snmp kernel
Function:
Enable the SNMP kernel debugging; the “no debug snmp kernel” command disables the debugging function.
Command Mode:
Admin Mode.
Usage Guide:
When user encounters problems in applying SNMP, the SNMP debugging is available to locate the problem causes.
Example:
Switch#debug snmp kernel
1.4.3 rmon enable
Command:
rmon enable
no rmon enable
Function:
1-83
Enable RMON; the “no rmon enable” command disables RMON.
Private MIB OID:1.3.6.1.4.1.6339
Command mode:
Global Mode
Default:
RMON is disabled by default.
Example:
Enable RMON.
Switch(config)#rmon enable
Disable RMON.
Switch(config)#no rmon enabl e
1.4.4 show private-mib oid
Command:
XGS3 Command Guide
show private-mib oid
Function:
Show the original oid of the private mib.
Command mode:
Admin and configuration mode.
Usage Guide:
Check the beginning oid of the private mib by show private-mib oid command.
Example:
Show the original oid of the private mib.
Switch#show private-mib oid
1.4.5 show snmp
Command:
show snmp
Function:
Display all SNMP counter information.
Command mode:
Admin and Configuration Mode.
Example:
Switch#show snmp
1-84
0 SNMP packets input
0 SNMP trap PDUs
snmp packets input
Total number of SNMP packet inputs.
unknown community name
Number of community name error packets.
Number of permission for community name error
packets.
encoding errors
Number of encoding error packets.
number of requested variable
Number of variables requested by NMS.
number of altered variables
Number of variables set by NMS.
get-request PDUs
Number of packets received by “get” requests.
Number of packets received by “getnext”
requests.
set-request PDUs
Number of packets received by “set” requests.
snmp packets output
Total number of SNMP packet outputs.
too big errors
Number of “Too_ big” error SNMP packets.
maximum packet siz e
Maximum length of SNMP packets.
MIB objects.
0 Bad SNMP version errors
0 Unknown community name
0 Illegal operat i on for com mun ity name supp lie d
0 Encoding errors
0 Number of requested variables
0 Number of altered variables
0 Get-request PDUs
0 Get-next PDUs
0 Set-request PDUs
0 SNMP packets output
0 Too big errors (Max packet size 1500)
0 No such name errors
0 Bad values errors
0 General errors
XGS3 Command Guide
0 Get-response PDUs
Displayed information Explanation
bad snmp version errors Number of version information error packets.
illegal operation for community name supplied
get-next PDUs
no such name errors Number of packets requesting for non-existent
1-85
bad values errors
Number of “Bad_values” error SNMP packets.
general errors
Number of “General_error s” er r or SN MP packets.
response PDUs
Number of response packets s ent.
trap PDUs
Number of Trap p ac kets sent.
SNMP engineID:3138633303f1276c Engine Boots is:1
Displayed Information
Explanation
SNMP engineID
Engine number
Engine Boots
Engine boot counts
Notify View:one
Displayed Information
Explanation
1.4.6 show snmp engineid
Command:
show snmp engineid
Function:
Display the engine ID commands.
Command Mode:
Admin and Configuration Mode.
Example:
XGS3 Command Guide
Switch#show snmp engineid
1.4.7 show snmp group
Command:
show snmp group
Function:
Display the group information comman ds.
Command Mode:
Admin and Configuration Mode.
Example:
Switch#show snmp group
Group Name:initial Security Level:noAuthnoPriv
Read View:one
Write View:<no writeview specified>
1-86
Group Name
Group name
Security level
Security level
Read View
Read view name
Write View
Write view name
Notify View
Notify view name
<no writeview specified>
No view name specified by the user
Security IP Information:
Displayed information
Description
Community string
Community string
Community access
Community access permission
Trap-rec-address
IP address which is used to receive Trap.
1.4.8 show snmp mib
Command:
show snmp mib
Function:
Display all MIB supported by the switch.
Command Mode:
XGS3 Command Guide
Admin and Configuration Mode.
1.4.9 show snmp status
Command:
show snmp status
Function:
Display SNMP configuration information.
Command mode:
Admin and Configuration Mode.
Example:
Switch#show snmp status
Trap enable
RMON enable
Community Information:
V1/V2c T rap Host Infor mat ion:
V3 Trap Host Infor mat ion:
1-87
Trap enable
Enable or disable to send Trap.
SecurityIP
IP address of the NMS which is allowed to
access Agent
Row status:active
Displayed Information
Explanation
User name
User name
Engine ID
Engine ID
Priv Protocol
Employed encryption algorithm
Auth Protocol
Employed identification algorithm
Row status
User state
View Name:readview 1. -Included active
1.4.10 show snmp user
Command:
show snmp user
Function:
Display the user information command s.
Command Mode:
Admin and Configuration Mode.
Example:
Switch#show snmp user
XGS3 Command Guide
User name: initialsha
Engine ID: 1234567890
Auth Protocol:MD5 Priv Protocol:DES-CBC
1.4.11 show snmp view
Command:
show snmp view
Function:
Display the view information commands.
Command Mode:
Admin and Configuration Mode.
Example:
Switch#show snmp view
1-88
1.3. Excluded active
Displayed Information
Explanation
View Name
View name
1.and1.3.
OID number
Included
The view includes sub trees rooted by this OID
The view does not include sub trees rooted by
this OID
no snmp-server community <string> [access {<num-std>|<name>}] [ipv6-access
{<ipv6-num-std>|<ipv6-name>}]
Function:
Configure the community string for the switch; the “no snmp-server community <string> [access
{<num-std>|<name>}] [ipv6-access {<ipv6-num-std> |<ipv6-name>}] “command deletes the configured
community string.
Parameter:
<string> is the community string set;
ro | rw is the specified access mode to MIB, ro for read-only and rw for read-write.
<num-std> is the access-class number for standard numeric ACL, ranging between 1-99;
<name> is the access-class name for standard ACL, the character string length is ranging between 1-32;
<ipv6-num-std> is the access-class number for standard numeric IPv6 ACL, ranging between 500-599;
<name> is the access-class name for standard IPv6 ACL, the character string length is ranging between 1-32.
<read-view-name> is the name of readable view which includes 1-32 charact ers .
<write-view-name> is the name of writable view which includes 1-32 characters.
Command mode:
Global Mode
Usage Guide:
The switch supports up to 4 community strings. It can realize the access-control for specifically community view by
binding the community name to specifically readable view or writable view.
Example:
Add a community string named “private” with read-write permission.
Switch(config)#snmp-server community rw private
1-89
Add a community string named “public” with read-only permission.
Switch(config)#snmp-server community ro public
Modify the read-write community string named “private” to read-only.
Switch(config)#snmp-server community ro private
Delete community string “private”.
Switch(config)#no snmp-server community private
Bind the read-only community str in g “public” to readable view “pviewr”.
Switch(config)#snmp-server community ro public read pviewr
Bind the read-write community string “private” to readable view “pviewr” and writable view “pvieww”.
Switch(config)#snmp-server community rw private read pviewr write pvieww
1.4.13 snmp-server enable
XGS3 Command Guide
Command:
snmp-server enable
no snmp-server enable
Function:
Enable the SNMP proxy server function on the switch. The “no snmp-server enable” command disables the SNMP
proxy server function
Command mode:
Global mode
Default:
SNMP proxy server function is disabled by system default.
Usage guide:
To perform configuration management o n th e switch with netw ork mana ge sof t w ar e, t he S N MP proxy server function
has to be enabled with this command.
Example:
Enable the SNMP proxy server function on the swit ch.
Switch(config)#snmp-server enable
1.4.14 snmp-server enable traps
Command:
snmp-server enable traps
no snmp-server enable traps
1-90
XGS3 Command Guide
Function:
Enable the switch to sen d Trap message; the “no snmp-serv er enabl e t raps” command disables the switch to se nd
Trap message.
Command mode:
Global Mode
Default:
Forbid to send Trap message.
Usage Guide:
When Trap me ss age i s e nab led, if Down/Up in d ev ice ports or of system oc curs , the device will sen d Trap messages
to NMS that receives Trap messages.
Example:
Enable to send Trap mes sage s.
Switch(config)#snmp-server enable traps
Disable to send Trap me ssa ge s.
Switch(config)#no snmp-server enable traps
1.4.15 snmp-server engineid
Command:
snmp-server engineid <engine-string>
no snmp-server engineid
Function:
Configure the engine ID; the “no" form of this command restores to the default engine ID.
Command Mode:
Global mode
Parameter:
<engine-string> is the engine ID shown in 1-32 digit hex characters.
Default:
Default value is the company ID plus local MAC address.
This command is used to configure a new group; the “no” form of this command deletes this group.
Command Mode:
Global Mode
Parameter:
<group-string> group name which includes 1-32 characters
NoauthNopriv Applies the non recognizing and non encrypting safety level
AuthNopriv Applies the recognizing but non encrypting safety level
AuthPriv Applies the recognizing and encrypting safety level
read-string Name of readable view which includes 1-32 characters
write-string Name of writable view which includes 1-32 characters
notify-string Name of trappable view which includes 1-32 ch aract ers
<num-std> is the access-class number for standard numeric ACL, ranging between 1-99;
<name> is the access-class name for standard ACL, the character string length is ranging between 1-32;
<ipv6-num-std> is the access-class number for standard numeric IPv6 ACL, ranging between 500-599;
<name> is the access-class name for standard IPv6 ACL, the character string length is ranging between 1-32.
Usage Guide:
There is a default view “v1defaultviewname” in the system. It is recommended to use this view as the view name of
the notification. If the read or write view name is empty, corresponding operation will be disabled.
Example:
Create a group CompanyGroup, with the safety level of recognizing andencrypting, the read viewname isreadview,
and the writing is disabled.
Switch (config)#snmp-server group CompanyGroup AuthPriv read readview
deletet group
Switch (config)#no snmp-server group CompanyGroup AuthPriv
As for the v1/v2c versi ons th is com mand conf igure s the IPv4 or IPv6 address and Trap community character string of
the network manage station receiving the SNMP Trap message. And for v3 version, this command is used for
receiving the network manage st ation IPv4 or IPv6 address and the T r ap user name and saf ety lev el; the “no” form o f
this command cancels this IPv4 or IPv6 address.
Command Mode:
Global Mode.
Parameter:
<host-ipv4-addr> | <host-ipv6-addr> is the IP address of the NMS managing station which receives Trap
message.
v1 | v2c | v3 i s theversion number when sending the trap.
NoauthNopriv | AuthNopriv | AuthPriv is the safety level v3 trap is applied, which may be non encrypted and non
authentication, non encrypted and authentication, encrypted and authentication.
<user-string> i s the community character string applied when sending the Trap message at v1/v2, and will be the
user name at v3.
Usage Guide:
The Community character string configured in this command is the default community string of the RMON event
group. If the RMON event group has no community character string configured, the community character string
configured in this command w ill be appl ied w hen sendin g the Trap of RMON, and if the community character string i s
configured, its configuration will be applied when sending the RMON trap. This command allows configuration the
IPv4 or IPv6 address of the network manage station receiving the SNMP Trap message, but configure the version
number as v1 and v2c of the IPv4 and IPv6 address are less than 8 in all.
no snmp-server user <user-string> [access {<num-std>|<name>}] [ipv6-access
{<ipv6-num-std>|<ipv6-name>}]
Function:
Add a new user to an SNMP group; the "no” form of this command deletes this user.
Command Mode:
Global Mode.
Parameter:
<user-string> is the user name containing 1-32 characters.
<group-string> is the name of the group the user belongs to, containing 1-32 characters.
authPriv use DES for the packet encryption.
authNoPriv not use DES for the packet encryption.
auth perform packet authentication.
md5 packet authentication using HMAC MD5 algorithm.
sha packet authentication using HMAC SHA algorithm.
<word > user password, containing 8-32 character.
<num-std> is the access-class number for standard numeric ACL, ranging between 1-99;
1-95
XGS3 Command Guide
<name> is the access-class name for standard ACL, the character string length is ranging between 1-32;
<ipv6-num-std> is the access-class number for standard numeric IPv6 ACL, ranging between 500-599;
<name> is the access-class name for standard IPv6 ACL, the character string length is ranging between 1-32.
Usage Guide:
If the encryption and a ut he nti c ation is not selected, the defau lt s et tin gs will be no encryption and no authentication. If
the encryption is selected, the authentication must be done. When deleting a user, if correct username and incorrect
group name is inputted, the user can still be deleted.
Example:
Add a new user tester in the UserGroup with an encryption safety level and HMAC md5 for authentication, the
password is hellohello
Switch (config)#snmp-server user tester UserGroup authPriv auth md5 hellohello
<source-url> is the location of the source files or directories to be copied;
<destination-url> is the destinatio n addres s to which the files or dir ectorie s to be c opied; forms of <source-url> and
<destination-url> vary depending on different locations of the files or directories.
ascii indicates the ASCII standard will be adopted;
binary indicates that the bin ary system w ill be adopted in the file transmission (def ault tr ansmi ssion method).When
URL represents an FTP address, its form should be:
ftp://<username>:<password>@{<ipaddress>|<ipv6address>|<hostname> }/<filename>,amongst <username> is the
FTP user name,<password> is the FTP user passwor d,<ipaddress>|<ipv6address> is the IPv4 or IPv6 address of
the FTP server/client,<hostname> is the name of the host mapping with the IPv6 address,it does not support the file
download and upload with hosts mapping with IPv4 addresses,<filename> is the name of the FTP upload/download
file.
Special keywords of the filename
Command Mode:
Admin Mode.
Usage Guide:
This command supports command line hints, namely if the user can enter commands in following forms: copy
<filename> ftp:// or copy ftp:// <filename> and press Enter, following hints will be provided by the system:
ftp server ip/ipv6 address [x.x.x.x]/[x:x::x:x] >
ftp username>
ftp password>
1-97
XGS3 Command Guide
Keywords
Source or destination addresses
running-config
Running configuration files
startup-config
Startup configuration files
ftp filename>
Requesting for FTP server address, user name, password and file name
Examples:
(1) Save images in the FLA SH to the FTP server of 10.1.1.1, FTP server userna me is Switch, password is s uperuser
<source-url> is the location of the source files or directories to be copied;
<destination-url> is the destinatio n addres s to w hich the files or di rect ories to be copi ed; forms of <source-url> and
<destination-url> vary depending on different locations of the files or directories.
ascii indicates the ASCII standard will be adopted;
binary indicates that the bin ary system w ill be adopted in the file tran smissio n(default transmission method).When
URL represents an TFTP address, its form should be: tftp://{<ipaddress>|<ipv6address>|<hostname>}/<filename>,
amongst <ipaddress>| <ipv6address> is the IPv4 or IPv6 address of the TFTP server/client, <hostname> is the
name of the host mapping with the IPv6 address, it does not support the file download and upload with hosts
mapping with IPv4 addresses,<filename> is the name of the TFTP upload/download file.
Special keyword of the filename
1-98
XGS3 Command Guide
nos.img
System files
nos.rom
System startup files
Command Mode:
Admin Mode.
Usage Guide:
This command supports command line hints, namely if the user can enter commands in following forms: copy
<filename> tftp:// or copy tftp:// <filename> and press Enter, following hints will be provided by the system:
tftp server ip/ipv6 address[x.x.x.x]/[x:x::x:x]>
tftp filename>
Requesting for TFTP server address, file name
Example:
(1) Save images in the FLASH to the TFTP server of 10.1.1.1
Switch#copy nos.img tftp://10.1.1.1/nos.img
(2) Obtain system file nos.img from the TFTP server 10.1.1.1
Switch#copy tftp://10. 1 .1.1 / no s .img no s.i mg
(3) Save images in the FLASH to the TFTP server of 2004:1:2:3::6