Alcatel-Lucent 060321-10, Rev. B, Cli Reference Manual

Page: 2345 / 2354

OmniSwitch CLI Reference Guide March 2011 page 17 AAA Commands
show policy server statistics
show policy server rules
show policy server events
AAA Commands
aaa radius-server server [host { hostname | ip_address } [ hostname2 | ip_address2 ]] [key
secret ] [retransmit retries ] [timeout seconds ] [auth-port auth _ port ] [acct-port acct_port ]
no aaa radius server server
aaa -server server [host { hostname | ip_address } { hostname2 | ip_address2 }] [key
secret ]
[timeout seconds ] [port port ]
no aaa -server server
aaa ldap-server server_name [host { hostname | ip_address } [{ hostname2 | ip_address2 }]] [dn
dn_name ] [password super_password ] [base search_base ] [retransmit retries ] [timeout
seconds ] [ssl | no ssl] [port port ]
no aaa ldap-server server-name
aaa authentication {console | telnet | ftp | http | snmp | ssh | default} server1 [ server2 ...] [local]
no aaa authentication [console | telnet | ftp | http | snmp | ssh | default]
aaa authentication {console | telnet | ftp | http | snmp | ssh} default
aaa accounting session
server1 [ server2 ...] [local]
no accounting session
aaa accounting command
server1 [ server2 ...] [local]
no accounting command
user
username [password password ] [expiration { day | date }] [read-only | read-write
[ families... | domains...| all | none]] [no snmp | no auth | sha | md5 | sha+des | md5+des]
[console-only {enable | disable}]
no user username
password
user password-size min
size
user password-expiration { day | disable}
user password-policy cannot-contain-username {enable | disable}
user password-policy min-uppercase
number
user password-policy min-uppercase number
user password-policy min-digit number
user password-policy min-nonalpha number
user password-history number
user password-min-age days
user lockout-window minutes
user lockout-threshold number
user lockout-duration minutes
user username {lockout | unlock}
show aaa server [ server_name ]
show aaa authentication
show aaa accounting
show user [
username ]
show user password-policy
show user lockout-setting
show aaa priv hexa [
domain or family ]
Port Mapping Commands
port-mapping port_mapping_sessionid {enable | disable}
no port-mapping port_mapping_sessionid
port-mapping session_id unknown-unicast-flooding {enable
| disable}
show port-mapping [ port_mapping_sessionid ]
Learned Port Security Commands
port-security {port slot/port [ -port2
]
| chassis} [learning-enable | learning-disable]
no port-security port slot/port [ -port2
]
port-security chassis learning-disable
port-security learning-window
minutes [convert-to-static {enable | disable}]
no port-security learning-window
port-security port
slot/port [ -port2
]
maximum number
port-security port slot/port [ -port2
]
max-filtering number
port-security port slot/port [ -port2
]
mac-range [low mac_address | high mac_address | low
mac_address high mac_address ]
port-security port slot/port [ -port2
]
violation {restrict | shutdown}
port-security port slot/port [ -port2
]
learn-trap-threshold number
show port-security {port [ slot/port [ -port2
]
|
slot
slot ]}
show violation {port slot/port
[
-port2
]
| linkagg linkagg_id
[
-linkagg_id2
]
}
show port-security learning-window
clear violation {
port
slot/port
[
-port2
]
|
linkagg
agg_num
[
-agg_num2
]}
Port Mirroring and Monitoring Commands
port-mirroring port_mirror_sessionid source { slot/port [- port2 ] [ slot/port [- port2 ]...]
destination slot/port [rpmir-vlan vlan_id ] [bidirectional |inport |outport] [unblocked
vlan_id ]
[enable | disable]
port-mirroring port_mirror_sessionid no source { slot/port [- port2 ] [ slot/port [- port2 ]...]
port-mirroring port_mirror_sessionid {enable | disable}
no port-mirroring port_mirror_sessionid
port-monitoring port_monitor_sessionid source slot/port
[{no file | file filename [size filesize ] | [overwrite {on | off}]}]
[inport | outport | bidirectional] [timeout seconds ] [enable | disable] [capture-type {full |
brief}]