manualshive.com logo in svg

Fujitsu Siemens Computers PRIMERGY BX, Description

Share
Download
Page 449
Fujitsu Siemens Computers PRIMERGY BX Description Download Page 449

Security Commands   

                 

       

                     

                  Command Reference   

Lan Switch and Router Blade

 

449 

Privileged Exec 

 

 

7.10.3.2 dot1x 

default-login 

This command assigns the authentication login list to use for non-configured users for 802.1x 
port security. This setting is over-ridden by the authentication login list assigned to a specific 
user if the user is configured locally. If this value is not configured, users will be authenticated 
using local authentication only.

 

 

Syntax 

 

dot1x defaultl-login <listname> 

 

<listname> - 

an authentication login list. 

 

 

Default Setting 

None 

Command Mode 

Global Config 

 

 

7.10.3.3 dot1x 

login 

This command assigns the specified authentication login list to the specified user for 802.1x 
port security. The <user> parameter must be a configured user and the <listname> parameter 
must be a configured authentication login list.

 

 

Syntax 

 

dot1x login <user> <listname> 

 

<user> - 

is the login user name. 

<listname> - 

an authentication login list. 

 

Default Setting 

None 

Summary of Contents for PRIMERGY BX

Page 1: ...Lan Switch and Router Blade 1 PRIMERGY BX Blade Server Systems LAN Router and Switch Blade User Interface Description Editon March 2006...

Page 2: ...needs Fax forms for sending us your comments are included at the back of the manual There you will also find the addresses of the relevant User Documentation Department Copyright and Trademarks Copyri...

Page 3: ...uter Blade 3 Important Notes Introduction Networking Planning Making Network Connection Configuration the Switch Blade Web Base Command Interface Command Reference Using SNMP System Defaulting Trouble...

Page 4: ...ting Information Protocol RIP 23 BOOTP DHCP Relay Agent 24 Virtual Router Redundancy Protocol VRRP 24 Router Discovery 24 Virtual LAN VLAN Routing 25 Route Redistribution 25 Route Preferences 25 Open...

Page 5: ...5 6 Software Download 50 5 6 1 In BootROM Back Door CLI 50 5 6 2 In Operation Code CLI 51 6 Web Based Management Interface 54 6 1 Overview 54 6 2 Main Menu 55 6 2 1 System Menu 55 6 2 2 Switching Men...

Page 6: ...Server Commands 382 7 5 5 SNMP Trap Commands 391 7 5 6 HTTP commands 395 7 5 7 Secure Shell SSH Commands 399 7 5 8 DHCP Client Commands 401 7 5 9 DHCP Relay Commands 402 7 6 Spanning Tree Commands 405...

Page 7: ...2 Configuration Commands 471 7 13SNTP Simple Network Time Protocol Commands 474 7 13 1 Show Commands 474 7 13 2 Configuration Commands 476 7 14System Utilities 481 7 14 1 clear 481 7 14 2 copy 489 7...

Page 8: ...Relay Commands 584 7 21 1 show bootpdhcprelay 584 7 21 2 bootpdhcprelay cidoptmode 585 7 21 3 bootpdhcprelay enable 585 7 21 4 bootpdhcprelay maxhopcount 585 7 21 5 bootpdhcprelay minwaittime 586 7 21...

Page 9: ...9 1 Show Commands 629 7 29 2 Configuration Commands 635 7 30Protocol Independent Multicast Dense Mode PIM DM Commands 641 7 30 1 Show Commands 641 7 30 2 Configuration Commands 643 7 31Protocol Indepe...

Page 10: ...lation 1 1 Information About Boards To prevent damage to the device or the components and conductors on it please take great care when you insert or remove it Take great care to ensure that the board...

Page 11: ...from that to which the receiver is connected Consult the dealer or an experienced radio TV technician for help Fujitsu Siemens Computers is not responsible for any radio or television interference cau...

Page 12: ...EN 55024 1998 Electrostatic Discharge according to EN 61000 4 2 1995 Contact Discharge 4 kV Air Discharge 8 kV Radio frequency electromagnetic field according to EN 61000 4 3 1996 80 1000 MHz with 1...

Page 13: ...Compliance Statements Important Notes Lan Switch and Router Blade 13 Taiwan BSMI Class A Australia AS NZS 3548 1995 Class A...

Page 14: ...copper ports uplinks two external module CX4 or XFP connectors for 10 Gigabit ports uplinks 10 internal ports connected to servers through PRIMERGY BX Blade Server mid plane connector of a VHDM type T...

Page 15: ...transmission overhead and reduced host processing overhead Less frames leads to less I O interrupts This facility is typically used for server to server transfers MDI MDIX Support The Ethernet Switch...

Page 16: ...the relevant ports 2 1 2 Layer 2 Features IGMP Snooping IGMP Snooping examines IGMP frame contents when they are forwarded by the Ethernet Switch Module from work stations to an upstream Multicast rou...

Page 17: ...e protocols and algorithms involved in the provision of these services An important requirement included in this standard is the ability to mark frames with a desired Class of Service CoS tag value 0...

Page 18: ...affic belonging to different VLANs to flow over potentially different paths within the virtual bridged LAN 802 1s supports spanning tree by per VLAN Fast Link STP can take up to 30 60 seconds to conve...

Page 19: ...permitted 2 Remote TFTP Server to Local file copy The PRIMERGY BX600 can support to download Configuration File or Operation Code from remote server to local file 3 Local file to remote server The PR...

Page 20: ...are stored and manipulated as text files TFTP Trivial File Transfer Protocol The Ethernet Switch Module supports boot image software and configuration upload download via TFTP Remote Monitoring Remot...

Page 21: ...g RADIUS Global Parameters SSH Secure Shell SSH is a protocol that provides a secure remote connection to an Ethernet Switch Module SSH version 1 and version 2 are currently supported The SSH server f...

Page 22: ...ccess lists use source addresses for matching operations Extended IP access lists use source and destination addresses for matching operations and optional protocol type information for finer granular...

Page 23: ...ess Routing Table Object RTO The Routing Table Object manages a common routing table for all registered routing protocols IP Forwarding Layer The IP Forwarding layer forwards received IP packets that...

Page 24: ...OOTP DHCP messages and generates new BOOTP DHCP messages as a result Virtual Router Redundancy Protocol VRRP PRIMERGY BX600 supports Virtual Router Redundancy Protocol VRRP is designed to provide back...

Page 25: ...s in the VLAN plus the internal bridge router interface if it was received on a routed VLAN Route Redistribution Route Redistribution allows routers running different routing protocols to exchange rou...

Page 26: ...value in the router The default value is 150 The range is 1 to 255 The OSPF specification RFC 2328 requires that preferences must be given to the routes learned via OSPF in the following order intra i...

Page 27: ...Multinetting are Reorganizing servers with no other machine updates Virtual hosting of Web and FTP servers 2 1 8 IP Multicast Features IGMPv3 Internet Group Management Protocol IGMP is the multicast g...

Page 28: ...ulticast packets although unicast information is needed for forwarding packets The Dense Mode version of PIM is most appropriate for networks with relatively plentiful bandwidth and with at least one...

Page 29: ...own which all multicast traffic flows Designated Router DR DR is responsible for sending Join messages to the RP for members on the network and for sending Register messages to the RP for sources on t...

Page 30: ...iver dynamically create a source specific shortest path tree using Join Prune messages and stop traffic from flowing down the shared RP tree using Register Stop Messages when the RP has no downstream...

Page 31: ...x mode and flow control Each port can operate at 10 Mbps 100 Mbps and 1000 Mbps full and half duplex and control the data stream to prevent buffers from overflowing The up link ports can be connected...

Page 32: ...en Power LED Middle 2 Green Identify LED Middle 1 Green 10GbE XFP Port Link Activity BUTTOM Green 10GbE CX4 Port Link Activity System LED There is one Ethernet Switch Module system LED with dual funct...

Page 33: ...Ethernet compliance ensures compatibility with standards based networkcards and switches from any vendor 2 3 2 Performance l Transparent bridging l Aggregate bandwidth up to 32 Gbps l Switching Table...

Page 34: ...is manual are as follows CAUTION Pay particular attention to texts marked with this symbol Failure to observe this warning endangers your life destroys the system or may lead to loss of data Quotation...

Page 35: ...Lan Switch and Router Blade 35 2 5 Target Group This manual is intended for those responsible for installing and configuring network connections This manual contains all the information required to c...

Page 36: ...50 CSA 22 2 No 950 Electromagnetic compatibility Interference emission Harmonic current flicker Interference immunity FCC class A Industry Canada class A EN60005 2 class A EN60005 3 VCCI class A AS NZ...

Page 37: ...outer Blade 37 Environmental conditions Environment class 3K2 Environment class 2K2 DIN IEC 721 part 3 3 DIN IEC 721 part 3 2 Temperature Operating 3K2 Transport 2K2 0 C 50 C 40 C 70 C Humidity 10 90...

Page 38: ...port This allocates the full bandwidth of the Ethernet segment to the devices attached to a single port on the switch And when operating at full duplex the bandwidth of the dedicated segment can be d...

Page 39: ...reasing overall bandwidth and throughput In the figure below the uplink ports are providing 2 Gbps full duplex connectivity to the corporate backbone to the Internet and to other servers Figure 2 Back...

Page 40: ...VLANs can be used for small networks attached to a single switch However tagged VLANs should be used for larger networks and all the VLANs assigned to the inter switch links Figure 3 Making Vlan Conn...

Page 41: ...n the switch to any server or workstation or uplink to a network device such as another switch or a router The 1000BASE T standard uses four pairs of Category 5 twisted pair cable for connections up t...

Page 42: ...t all four wire pairs are connected However it is recommended that for all critical connections or any new cable installations Category 5e enhanced Category 5 cable should be used The Category 5e spec...

Page 43: ...e link 4 3 1000BASE T Pin Assignments 1000BASE T ports support automatic MDI MDI X operation so you can use straight through cables for all network connections to PCs or servers or to other switches A...

Page 44: ...following items are included The Ethernet Switch Module Documentation CD Unpacking the Ethernet Switch Module To unpack the Ethernet Switch Module NOTE Before unpacking the Ethernet Switch Module insp...

Page 45: ...Ethernet Switch Module On the console monitor the MMB application displays a login screen The Ethernet Switch Module bootup screen is displayed Welcome to Management Blade 1 62F Username Console Menu...

Page 46: ...e 2 Console Redirect Switch Blade 3 Set Return Hotkey Ctrl a character Q Enter selection or type 0 to quit 2 Console Redirect Switch Blade Enter selection or type 0 to quit 0 4 Select 2 Console Redire...

Page 47: ...BX Blade Server to the network The Ethernet Switch Module module is connected to PRIMERGY BX Blade Server Management Board MMB through 10 internal ports called the Internal Ports The maximum link spee...

Page 48: ...emulation software is set as follows Connect PRIMERGY BX Blade Server serial port to the Ethernet Switch Module NOTE 1 The default data rate is 115200 No other data rate is required for initial confi...

Page 49: ...T messages are displayed on the terminal and indicate test success or failure As the device boots the bootup test first counts the device memory availability and then continues to boot The following s...

Page 50: ...uration 1 From the BootROM CLI prompt input the following command delete configuration filename The following message is displayed Are you sure you want to delete configuration filename y n 2 Press Y...

Page 51: ...aded it is saved in the other area allocated for the other system image copy On the next boot the device will decompress and run the currently active system image unless chosen otherwise To download a...

Page 52: ...rs TFTP code transfer starting Verifying CRC of file in Flash File System TFTP receive complete storing in Flash File System File transfer operation completed successfully 7 Select the image for the n...

Page 53: ...ftware Download Configuration the Switch Blade Module Lan Switch and Router Blade 53 FSC reload Are you sure you would like to reset the system y n y System will now restart 9 Enter y The device reboo...

Page 54: ...Switching Routing Security QOS and IP Multicast 1 System Menu This section provides information for configuring switch interface port SNMP and trap manager Ping DHCP client SNTP system time defining s...

Page 55: ...Address Resolution Protocol ARP dynamically maps physical MAC addresses to Internet IP addresses This panel displays the current contents of the ARP cache For each connection the following information...

Page 56: ...name of this switch Machine Type The machine type of this switch Machine Model The model within the machine type Serial Number The unique box serial number for this switch Part Number The manufacturi...

Page 57: ...4 Operating System The operating system currently running on the switch Network Processing Device Identifies the network processor hardware Gigabit Ethernet Compliance Codes Transceiver s compliance...

Page 58: ...stem Name Enter the name you want to use to identify this switch You may use up to 31 alpha numeric characters The factory default is blank System Location Enter the location of this switch You may us...

Page 59: ...3 2 Configuring Network Connectivity Page The network interface is the logical interface used for in band connectivity with the switch via any of the switch s front panel ports The configuration para...

Page 60: ...his field is configurable for administrative users and read only for other users Web Mode Specify whether the switch may be accessed from a Web browser If you choose to enable web mode you will be abl...

Page 61: ...imum is 5 which is also the factory default Allow New Telnet Sessions If you set this to no new telnet sessions will not be allowed The factory default is yes Password Threshold When the logon attempt...

Page 62: ...fault value is Enabled Maximum Sessions Specifies the maximum number of Outbound Telnet Sessions allowed Default value is 5 Valid Range is 0 to 5 Session Timeout Specifies the Outbound Telnet login in...

Page 63: ...Telnet the Telnet logon interface closes The default value is 3 Silent Time Sec Use this command to set the amount of time the management console is inaccessible after the number of unsuccessful logon...

Page 64: ...rotocol setting for the selected user account The valid Authentication Protocols are None MD5 or SHA If you select None the user will be unable to access the SNMP data from an SNMP browser If you sele...

Page 65: ...n method Configurable Data Authentication List Name If you are creating a new login list enter the name you want to assign It can be up to 15 alphanumeric characters and is not case sensitive Method 1...

Page 66: ...itch and causes the changes to take effect on the switch These changes will not be retained across a power cycle unless you perform a save Delete Remove the selected authentication login list from the...

Page 67: ...st is used to authenticate the users for port access using the IEEE 802 1x protocol Command Buttons Refresh Update the information on the page 6 2 1 3 10 Defining User Login Page Note This page provid...

Page 68: ...ion If you assign a user to a login list that requires remote authentication the user s access to the switch from all CLI web and telnet sessions will be blocked until the authentication is complete R...

Page 69: ...Search You may also search for an individual MAC address Enter the two byte hexadecimal VLAN ID followed by the six byte hexadecimal MAC address in two digit groups separated by colons for example 01...

Page 70: ...in the table 6 2 1 5 Viewing Logs 6 2 1 5 1 Viewing Buffered Log Configuration Page This log stores messages in memory based upon the settings for message component and severity On stackable systems...

Page 71: ...y The above example indicates a user level message 1 with severity 7 debug on a system that is not stack and generated by component MSTP running in thread id 2110 on Aug 24 05 34 05 by line 318 of fil...

Page 72: ...mit Command Buttons Submit Update the switch with the values you entered 6 2 1 5 4 Configuring Console Log Page This allows logging to any serial device attached to the host Configurable Data Admin St...

Page 73: ...vents After the event is logged and the updated log is saved in FLASH memory the switch will be reset The log can hold at least 2 000 entries the actual number depends on the platform and OS and is er...

Page 74: ...log messages are sent The default port is 514 Specify the port in the text field Severity Filter A log records messages equal to or above a configured severity threshold Select the severity option by...

Page 75: ...the values configured for each collector relay Enable Disable the operation of the syslog function by selecting the corresponding line on the pulldown entry field Local UDP Port This is the port on th...

Page 76: ...de Use the pulldown menu to select the port s speed and duplex mode If you select auto the duplex mode and speed will be set by the auto negotiation process Note that the port s maximum capability ful...

Page 77: ...3 and Level 4 Capability You could advertise the port capabilities of a given interface during auto negotiation Non Configurable Data Port Type For normal ports this field will be blank Otherwise the...

Page 78: ...rs Changing the selected MST ID will generate a screen refresh If Spanning Tree is disabled this will be a static value CST instead of a selector Non Configurable Port Status Data Slot Port Identifies...

Page 79: ...te The mode must be enabled in order for the port to participate in Link Aggregation Physical Mode Indicates the port speed and duplex mode In auto negotiation mode the duplex mode and speed are set f...

Page 80: ...ssion Mode for a selected session ID By default Session Mode is enabled Source Port s Specifies the configured port s as mirrored port s Traffic of the configured port s is sent to the probe port Dest...

Page 81: ...menu to select one of the existing community names or select Create to add a new one A valid entry is a case sensitive string of up to 16 characters The default community names are public and private...

Page 82: ...y by selecting Enable or Disable from the pull down menu If you select enable the Community Name must be unique among all valid Community Names or the set request will be rejected If you select disabl...

Page 83: ...eiver Command Buttons Submit Update the switch with the values on this screen If you want the switch to retain the new values across a power cycle you must perform a save Delete Delete the currently s...

Page 84: ...Main Menu Web Based Management Interface Lan Switch and Router Blade 84...

Page 85: ...ackets Receive Packets Discarded The number of inbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher layer protocol A...

Page 86: ...t have been active on this switch since the last reboot Static VLAN Entries The number of presently active VLAN entries on this switch that have been created statically Dynamic VLAN Entries The number...

Page 87: ...r of packets received that were directed to the broadcast address Note that this does not include multicast packets Packets Received with Errors The number of inbound packets that contained errors pre...

Page 88: ...s Clear all the counters resetting all summary and switch detailed statistics to defaults The discarded packets count cannot be cleared Refresh Refresh the data on the screen with the present state of...

Page 89: ...ts RX and TX 1523 2047 Octets The total number of packets including bad packets received or transmitted that were between 1523 and 2047 octets in length inclusive excluding framing bits but including...

Page 90: ...dcast Packets Received The total number of good packets received that were directed to the broadcast address Note that this does not include multicast packets Total Packets Received with MAC Errors Th...

Page 91: ...een 128 and 255 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 256 511 Octets The total number of packets including bad packets received that were betwe...

Page 92: ...exceeded the max permitted frame size This counter has a max increment rate of 815 counts per sec at 10 Mb s Underrun Errors The total number of frames discarded because the transmit FIFO buffer beca...

Page 93: ...ted The count of GMRP PDUs transmitted from the GARP layer GMRP Failed Registrations The number of times attempted GMRP registrations could not be completed Time Since Counters Last Cleared The elapse...

Page 94: ...Main Menu Web Based Management Interface Lan Switch and Router Blade 94...

Page 95: ...received that were directed to the broadcast address Note that this does not include multicast packets Packets Transmitted without Errors The number of frames that have been transmitted by this port t...

Page 96: ...ration changes you have made saved across a system reboot All changes submitted since the previous save or system reboot will be retained by the switch 6 2 1 9 2 Resetting the Switch Page Command Butt...

Page 97: ...Page Command Buttons Reset Select this button to have all passwords reset to their factory default values 6 2 1 9 5 Downloading Specific Files to Switch Flash Page Use this menu to download a file to...

Page 98: ...administratively disabled and there can be no active SSH sessions TFTP Server IP Address Enter the IP address of the TFTP server The factory default is 0 0 0 0 TFTP File Path Target Enter the path on...

Page 99: ...ory default is blank TFTP File Name Target Enter the name you want to give the file being uploaded You may enter up to 32 characters The factory default is blank TFTP File Name Source Specify the file...

Page 100: ...n script files Command Buttons Remove File Send the updated screen to the switch and perform the file remove 6 2 1 9 9 Copying Running Configuration to Flash Page Use this menu to copy a start up conf...

Page 101: ...ping is not received you will see No Reply Received from IP xxx xxx xxx xxx otherwise you will see Reply received from IP xxx xxx xxx xxx send count 5 receive count n Configurable Data IP Address Ente...

Page 102: ...effect on the switch but these changes will not be retained across a power cycle unless a save is performed Viewing Neighbors Information Page Non Configurable Data Use this menu to display CDP neigh...

Page 103: ...counters resetting all switch summary and detailed statistics to default values The discarded packets count cannot be cleared Refresh Refresh the data on the screen with the present state of the data...

Page 104: ...or disable activation of OSPF traps by selecting the corresponding line on the pulldown entry field The factory default is disabled This field can be configured only if the OSPF admin mode is enabled...

Page 105: ...Configuring SNTP Global Configuration Page Configurable Data Client Mode Specifies the mode of operation of SNTP Client An SNTP client may operate in one of the following modes Disable SNTP is not ope...

Page 106: ...interval are discarded Allowed range is 6 to 10 Default value is 6 Unicast Poll Timeout Specifies the number of seconds to wait for an SNTP response when configured in unicast mode Allowed range is 1...

Page 107: ...ed with its peers This is indicated via the leap indicator field on the SNTP message Server Kiss Of DeathThe SNTP server indicated that no further queries were to be sent to this server This is indica...

Page 108: ...ent to it Address Type Specifies the address type of the configured SNTP Server address Allowed types are Unknown IPV4 DNS Default value is Unknown Port Specifies the port on the server to which SNTP...

Page 109: ...e Specifies the local date and time UTC that the response from this server was used to update the system clock Last Attempt Time Specifies the local date and time UTC that this SNTP server was last qu...

Page 110: ...made to this server since last time agent reboot Unicast Server Num Failed Requests Specifies the number of failed SNTP requests made to this server since last reboot 6 2 1 11 5 Configuring Current Ti...

Page 111: ...is not set the switch will only record the time from the factory default set at the last bootup Configurable Data Time Zone Name The name of time zone usually an acronym Range 1 15 characters Time Zon...

Page 112: ...e network portion of the address provided to the client will be based on this new domain Command Buttons Reset Send the updated screen to the switch to restart the DHCP client 6 2 1 12 2 Configuring D...

Page 113: ...VLAN You can only enter data in this field when you are creating a new VLAN The range of the VLAN ID is 1 to 3965 VLAN Name Use this optional field to specify a name for the VLAN It can be up to 32 a...

Page 114: ...1Q standard Tagging Select the tagging behavior for this port in this VLAN The factory default is Untagged The possible values are Tagged all frames transmitted for this VLAN will be tagged Untagged a...

Page 115: ...Main Menu Web Based Management Interface Lan Switch and Router Blade 115...

Page 116: ...ed to untagged or priority tagged frames received on this port The factory default is 1 Acceptable Frame Types Specify how you want the port to handle untagged and priority tagged frames If you select...

Page 117: ...ed frames received on this port are discarded When set to Admit All untagged frames or priority tagged frames received on this port are accepted and assigned the value of the Port VLAN ID for this por...

Page 118: ...are z All ports are assigned to the default VLAN of 1 z All ports are configured with a PVID of 1 z All ports are configured to an Acceptable Frame Types value of Admit All Frames z All ports are con...

Page 119: ...by creating a group Each group has a one to one relationship with a VLAN ID can include one to three protocol definitions and can include multiple ports When you create a group you will choose a name...

Page 120: ...dentify the group created by the user Group IDs are automatically assigned when a group is created by the user Command Buttons Submit Update the switch with the values on this screen If you want the s...

Page 121: ...a port shows as enabled Non Configurable Data Switch GVRP Indicates whether the GARP VLAN Registration Protocol administrative mode for this switch is enabled or disabled The factory default is disab...

Page 122: ...s how frequently LeaveAll PDUs are generated A LeaveAll PDU indicates that all registrations will shortly be deregistered Participants will need to rejoin in order to maintain registration An instance...

Page 123: ...Choose the GARP Multicast Registration Protocol administrative mode for the port by selecting enable or disable from the pull down menu If you select disable the protocol will not be active and Join T...

Page 124: ...a save 6 2 2 4 Managing IGMP Snooping 6 2 2 4 1 Configuring IGMP Snooping Global Configuration Page Use this menu to configure the parameters for IGMP Snooping which is used to build forwarding lists...

Page 125: ...s across a power cycle you must perform a save You will only see this button if you have Read Write access privileges 6 2 2 4 2 Defining IGMP Snooping Interface Configuration Page Configurable Data Sl...

Page 126: ...Membership Interval Multicast Router Present Expiration Time Specify the amount of time you want the switch to wait to receive a query on an interface before removing it from the list of interfaces wi...

Page 127: ...ed in VLAN ID combo box Specifies VLAN ID for which pre configurable Snooping parameters are to be set Admin Mode Enable or disable the Igmp Snooping for the specified VLAN ID Fast Leave Admin Mode En...

Page 128: ...tistics Multicast Router Specifies for the selected interface whether multicast router is enable or disabled Command Buttons Refresh Refetch the database and display it again starting with the first e...

Page 129: ...statistics Non Configurable Data VLAN ID All Vlan Ids for which the Multicast Router Mode is Enabled Multicast Router Multicast Router Mode for Vlan ID 6 2 2 4 8 Configuring Multicast Router VLAN Page...

Page 130: ...L2Mcast Group in the format 01 00 5E xx xx xx You can only change this field when you have selected the Create Filter option You cannot define L2Mcast Group for these MAC addresses 00 00 00 00 00 00...

Page 131: ...ll be displayed All If you choose all the whole table will be displayed MAC Address Search You may also search for an individual L2Mcast address Enter the six byte hexadecimal MAC address for example...

Page 132: ...router port s All Displays all of L2Mcast router port s Configurable Data Filter Specify the entries you want displayed Static If you choose Dynamic only L2Mcast router port s that have been learned...

Page 133: ...ubmit Update the switch with the values on this screen If you want the switch to retain the new values across a power cycle you must perform a save Refresh Refresh the data on the screen with the pres...

Page 134: ...nnel Non Configurable Data Slot Port Slot Port identification of the Port Channel being configured This field will not appear when a new Port Channel is being created Link Status Indicates whether the...

Page 135: ...ation There can be a maximum of 8 ports assigned to a Port Channel 6 2 2 6 Viewing Multicast Forwarding Database 6 2 2 6 1 Viewing All of Multicast Forwarding Database Tables Page The Multicast Forwar...

Page 136: ...s that are listed as the static filtering interfaces Command Buttons Refresh Refresh the data on the screen with the present state of the data in the switch 6 2 2 6 2 Viewing GMRP MFDB Table Page This...

Page 137: ...multicast table entry Possible values are Management Configured Network Configured and Network Assisted Slot port s The list of interfaces that are designated for forwarding Fwd and filtering Flt Com...

Page 138: ...d to identify the configuration currently being used It may be up to 32 alphanumeric characters Configuration Revision Level Identifier used to identify the configuration currently being used The valu...

Page 139: ...ng less than or equal to Bridge Max Age 2 1 The default hello time value is 2 Bridge Forward Delay Specifies the time spent in Listening and Learning mode before forwarding packets Bridge Forward Dela...

Page 140: ...ay parameter Hold Time Minimum time between transmission of Configuration BPDUs CST Regional Root Priority and base MAC address of the CST Regional Root CST Path Cost Path Cost to the CST tree Regiona...

Page 141: ...Data Bridge identifier The bridge identifier for the selected MST instance It is made up using the bridge priority and the base MAC address of the bridge Time since topology change The time in seconds...

Page 142: ...default value is Disable Port Path Cost Set the Path Cost to a new value for the specified port in the common and internal spanning tree It takes a value in the range of 1 to 200000000 Non Configurabl...

Page 143: ...e LAN It is made up from the port priority and the interface number of the port Topology Change Acknowledge Identifies whether the next BPDU to be transmitted for this port would have the topology cha...

Page 144: ...port priority and the interface number of the port Port Up Time Since Counters Last Cleared Time since the counters were last cleared displayed in Days Hours Minutes and Seconds Port Mode Spanning Tre...

Page 145: ...eceived at the selected port STP BPDUs Transmitted Number of STP BPDUs transmitted from the selected port RSTP BPDUs Received Number of RSTP BPDUs received at the selected port RSTP BPDUs Transmitted...

Page 146: ...y or configure data Select All to set the parameters for all ports to the same values Configurable Data Traffic Class Specify which internal traffic class to map the corresponding 802 1p priority Non...

Page 147: ...ring Port Security Administration Mode Page Configurable Data Allow Port Security Used to enable or disable the Port Security feature Command Buttons Submit Applies the new configuration and causes th...

Page 148: ...he MAC Address being added to the list of statically locked MAC addresses for the selected interface Maximum static MAC Addresses allowed Sets the maximum number of dynamically locked MAC addresses on...

Page 149: ...ID Displays the VLAN ID corresponding to the MAC address Delete a Static MAC Address Deletes the MAC address from the Port Security Static MAC address table VLAN ID Displays the VLAN ID corresponding...

Page 150: ...ic port 6 2 2 9 5 Viewing Port Security Violation Status Page Selection Criteria Slot port Select the physical interface for which you want to display data Non configurable data Last Violation MAC Add...

Page 151: ...he up stream port from 11 16 Down Stream Port Select the down stream port from 1 10 6 2 2 10 2 View Link State Status Non Configurable Data Group A Group ID was displayed the numbers of the Group ID T...

Page 152: ...e group interface mode for the selected interface for Port Link up The default is disable Active Port Select the active port from 11 16 Backup Port Select the backup port from 11 16 6 2 2 10 4 View Po...

Page 153: ...MAC Address The unicast MAC address of the device Enter the address as six two digit hexadecimal numbers separated by colons for example 00 06 29 32 81 40 Command Buttons Submit Update the switch wit...

Page 154: ...ired IP Address Specific Static Entry Selecting this allows the user to specify the required IP Address Specific Interface Selecting this allows the user to specify the required interface None Selecte...

Page 155: ...he entry was last refreshed in the ARP Table The format is hh mm ss Command Buttons Submit Update the switch with the values on this screen If you want the switch to retain the new values across a pow...

Page 156: ...in RFC 1213 Non Configurable Data IpInReceives The total number of input datagrams received from interfaces including those received in error IpInHdrErrors The number of input datagrams discarded due...

Page 157: ...this counter would include datagrams counted in ipForwDatagrams if any such packets met this discretionary discard criterion IpNoRoutes The number of IP datagrams discarded because no route could be f...

Page 158: ...sages received IcmpInTimestamps The number of ICMP Timestamp request messages received IcmpInTimestampReps The number of ICMP Timestamp Reply messages received IcmpInAddrMasks The number of ICMP Addre...

Page 159: ...mpOutEchoReps The number of ICMP Echo Reply messages sent IcmpOutTimestamps The number of ICMP Timestamp request messages IcmpOutTimestampReps The number of ICMP Timestamp Reply messages sent IcmpOutA...

Page 160: ...Main Menu Web Based Management Interface Lan Switch and Router Blade 160 Command Buttons Refresh Refresh the data on the screen with the present state of the data in the switch...

Page 161: ...is disable Encapsulation Type Select the link layer encapsulation type for packets transmitted from the specified interface from the pulldown menu The possible values are Ethernet and SNAP The default...

Page 162: ...ct enable OSPF will be activated for the switch The default value is disable You must configure a Router ID before OSPF can become operational You do this on the IP Configuration page or by issuing th...

Page 163: ...type of the default route Non Configurable Data ASBR Mode Reflects whether the ASBR mode is enabled or disabled Enable implies that the router is an autonomous system border router Router automatical...

Page 164: ...Summary LSAs Select enable or disable from the pulldown menu If you select enable summary LSAs will be imported into stub areas Metric Value Enter the metric value you want applied for the default ro...

Page 165: ...roughout the area If the area is a stub area then these are the possible options for which you may configure the external routing capability otherwise the only option is Import External LSAs Import Ex...

Page 166: ...ommand Buttons Create Stub Area Configure the area as a stub area Delete Stub Area Delete the stub area designation The area will be returned to normal state Create NSSA Configure the area ads a NSSA...

Page 167: ...default route advertised into the area Valid values range from 1 to 16 777 215 Metric Type The type of metric for the stub area where valid types are OSPF Metric Regular OSPF metric Comparable Cost Ex...

Page 168: ...cted enable the address range will be advertised outside the area via a Network Summary LSA The default is enable Non Configurable Data Area ID The OSPF area IP address The IP Address of an address ra...

Page 169: ...unt The total number of area border routers reachable within this area This is initially zero and is calculated in each SPF Pass AS Border Router Count The total number of Autonomous System border rou...

Page 170: ...ns Refresh Refresh the data on the screen with the present state of the data in the switch 6 2 3 3 6 Configuring OSPF Interface Selection Criteria Slot port Select the interface for which data is to b...

Page 171: ...before declaring that the router is down This parameter must be the same for all routers attached to a network This value should a multiple of the Hello Interval e g 4 Valid values range from 1 to 214...

Page 172: ...er s interface to the network is looped back either in hardware or software The interface is unavailable for regular data traffic However it may still be desirable to gain information on the quality o...

Page 173: ...gnated Router The identity of the Backup Designated Router for this network in the view of the advertising router The Backup Designated Router is identified here by its router ID Set to 0 0 0 0 if the...

Page 174: ...Main Menu Web Based Management Interface Lan Switch and Router Blade 174...

Page 175: ...ets are sent as unicasts along this adjacency Also used in router LSAs as the Link ID for the attached network if the neighboring router is selected to be designated router The Neighbor IP address is...

Page 176: ...state a Hello packet has recently been seen from the neighbor However bidirectional communication has not yet been established with the neighbor i e the router itself did not appear in the neighbor s...

Page 177: ...Configurable Data Router ID The 32 bit integer in dotted decimal format that uniquely identifies the router within the autonomous system AS The Router ID is set on the IP Configuration page If you wa...

Page 178: ...a corruption of an advertisement This corruption can occur while an advertisement is being flooded or while it is being held in a router s memory This field is the checksum of the complete contents of...

Page 179: ...nsit Delay for the specified interface This specifies the estimated number of seconds it takes to transmit a link state update packet over the selected interface Valid values range from 1 to 3600 seco...

Page 180: ...uter Hello Packets are sent to the neighbor every HelloInterval seconds Designated Router This router is itself the Designated Router on the attached network Adjacencies are established to all other r...

Page 181: ...val for the virtual link in units of seconds This specifies how long a router will wait to see a neighbor router s Hello packets before declaring that the router is down This parameter must be the sam...

Page 182: ...stribution by OSPF This select box would appear only if the user selects Create option as Configured Source The valid values are Static Connected RIP and BGP Metric Sets the metric value to be used as...

Page 183: ...re in the corresponding address bit When an access list rule includes a destination IP address and netmask an extended access list the destination IP address is compared to the network mask of the des...

Page 184: ...the source was pre configured otherwise 0 and can be modified The valid values are 0 to 4294967295 Subnets Whether the subnetted routes should be redistributed or not Distribute List The Access List...

Page 185: ...select enable Relay Agent options will be added to requests before they are forwarded to the server and removed from replies before they are forwarded to clients Command Buttons Submit Send the updat...

Page 186: ...reset Requests Relayed The total number of BOOTP DHCP requests forwarded to the server since the last time the switch was reset Packets Discarded The total number of BOOTP DHCP packets discarded by th...

Page 187: ...hanges will not be retained across a power cycle unless a save is performed 6 2 3 5 2 Configuring Domain Name You can use this panel to change the configuration parameters for the domain names that ca...

Page 188: ...urable Data Name Server Specifies all the existing domain name servers along with an additional option Create When the user selects Create another text box IP Address appears where the user may enter...

Page 189: ...sses This panel displays the current contents of the DNS cache Non Configurable Data Domain Name List The domain name associated with this record IP address The IP address associated with this record...

Page 190: ...ost This is a text string of up to 64 characters containing the encoded unicast IP address of a host Command Buttons Submit Sends the updated configuration to the switch Configuration changes take eff...

Page 191: ...Host Routes Select Mode Select enable or disable from the pulldown menu If you select enable the router will be accept host routes The default is enabled Default Information Originate Enable or Disab...

Page 192: ...f the following RIP 1 only RIP version 1 formatted packets will be received RIP 2 only RIP version 2 formatted packets will be received Both packets will be received in either format None no RIP contr...

Page 193: ...authentication key This key will be included in the clear in the OSPF header of all packets sent on the network All routers on the network must be configured with the same key Encrypt If you select En...

Page 194: ...atic Connected OSPF and Create Available Source This select box is a dynamic selector and would be populated by only those Source Routes that have not previously been configured for redistribution by...

Page 195: ...on IP address of the route The source IP netmask in the access list rule is treated as a wildcard mask indicating which bits in the source IP address must match the destination address of the route No...

Page 196: ...of redistributed routes for the given Source Route Displays Unconfigured when not configured Match List of Routes redistributed when OSPF is selected as Source The list may include one or more of Inte...

Page 197: ...sent from the interface Minimum Advertise Interval Enter the minimum time in seconds allowed between router advertisements sent from the interface Advertise Lifetime Enter the value in seconds to be...

Page 198: ...he maximum time in seconds allowed between router advertisements sent from the interface Minimum Advertise Interval The minimum time in seconds allowed between router advertisements sent from the inte...

Page 199: ...ss The IP route prefix for the destination Subnet Mask Also referred to as the subnet network mask this indicates the portion of the IP interface address that identifies the attached network Protocol...

Page 200: ...ectly attached network Total Number of Routes The total number of routes in the route table Command Buttons Refresh Refresh the data on the screen with the present state of the data in the switch 6 2...

Page 201: ...esent state of the data in the switch 6 2 3 8 3 Configuring Router Static Route Entry Selection Criteria Network Address Specifies the IP route prefix for the destination In order to create a route a...

Page 202: ...in the path towards the destination The next router will always be one of the adjacent neighbors or the IP address of the local interface for a directly attached network When creating a route the next...

Page 203: ...gured next hop Command Buttons Add Route Go to a separate page where a route can be created 6 2 3 8 5 Configuring Router Route Preference Use this panel to configure the default preference for each pr...

Page 204: ...ype 2 OSPF Type 1 The OSPF type 1 route preference value in the router The default value is 13 The range is 1 to 255 The OSPF specification RFC 2328 requires that preferences must be given to the rout...

Page 205: ...port The interface assigned to the VLAN for routing MAC Address The MAC Address assigned to the VLAN Routing Interface Command Buttons Create Send the updated configuration to the switch Configuration...

Page 206: ...ing VLAN Routing Summary Information Non Configurable Data VLAN ID The ID of the VLAN whose data is displayed in the current table row Slot port The Slot port assigned to the VLAN Routing Interface MA...

Page 207: ...ve or inactive Select enable or disable from the pulldown menu The default is disable Command Buttons Submit Send the updated configuration to the switch Configuration changes take effect immediately...

Page 208: ...the same the priority gets set to the default value of 100 Advertisement Interval Enter the time in seconds between the transmission of advertisement packets by this virtual router Enter a number betw...

Page 209: ...er it will preempt the master router if it has a priority greater than the master virtual router s priority provided the master is not the owner of the virtual router IP address Disable if the Virtual...

Page 210: ...nally unique identifier the 16 bit constant identifying the VRRP address block and the 8 bit VRID Auth Type The type of authentication in use for the Virtual Router None Simple State The current state...

Page 211: ...fferent than the one configured for the local virtual router Authentication Failure The total number of VRRP packets received that did not pass the authentication check IP TTL Errors The total number...

Page 212: ...Access Control Page Configurable Data Administrative Mode This selector lists the two options for administrative mode enable and disable The default value is disabled Command Buttons Submit Sends the...

Page 213: ...APOL EAP Request Identity frame to the supplicant The transmit period must be a number in the range of 1 to 65535 The default value is 30 Changing the value will not change the configuration until the...

Page 214: ...only selectable if the control mode is auto If the button is not selectable it will be grayed out Once this button is pressed the action is immediate It is not required to press the Submit button for...

Page 215: ...equest Identity frame to the supplicant The transmit period is a number in the range of 1 to 65535 Supplicant Timeout This field displays the configured supplicant timeout for the selected port The su...

Page 216: ...first version of the 802 1x specification This field is not configurable PAE Capabilities This field displays the port access entity PAE functionality of the selected port Possible values are Authent...

Page 217: ...Auto The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges between the supplicant authenticator and the authentication server Operating Control Mo...

Page 218: ...een received by this authenticator EAPOL Frames Transmitted This displays the number of EAPOL frames of any type that have been transmitted by this authenticator EAPOL Start Frames Received This displ...

Page 219: ...y this authenticator in which the frame type is not recognized EAP Length Error Frames Received This displays the number of EAPOL frames that have been received by this authenticator in which the fram...

Page 220: ...cess Privileges Page Selection Criteria Port Selects the port to configure Configurable Data Users Selects the users that have access to the specified port or ports Command Buttons Submit Sends the up...

Page 221: ...information on the page 6 2 4 2 Managing RADIUS 6 2 4 2 1 Configuring RADIUS Configuration Page Configurable Data Max Number of Retransmits The value of the maximum number of times a request packet i...

Page 222: ...ansmit value on each will be exhausted before the next server is attempted A retransmit will not occur until the configured timeout value on that server has passed without a response from the RADIUS s...

Page 223: ...x is checked If the box is not checked anything entered in the Secret field will have no affect and will not be retained This field is only displayed if the user has READWRITE access Primary Server Se...

Page 224: ...ere received from this server Access Rejects The number of RADIUS Access Reject packets including both valid and invalid packets that were received from this server Access Challenges The number of RAD...

Page 225: ...ield is only configurable if the add item is selected Port Specifies the UDP Port to be used by the accounting server The valid range is 0 65535 If the user has READONLY access the value is displayed...

Page 226: ...nsmissions Accounting Retransmissions Displays the number of RADIUS Accounting Request packets retransmitted to this RADIUS accounting server Accounting Responses Displays the number of RADIUS packets...

Page 227: ...ADIUS Statistics Page Command Buttons Clear All RADIUS Statistics This button will clear the accounting server authentication server and RADIUS statistics 6 2 4 3 Defining TACACS Configuration 6 2 4 3...

Page 228: ...erver Command Buttons Submit Send the updated screen to the switch Changes take effect on the switch but these changes will not be retained across a power cycle unless a save is performed Clear All Re...

Page 229: ...le Transport Layer Security Version 1 0 The currently configured value is shown when the web page is displayed The default value is enabled SSL Version 3 This field is used to enable or disable Secure...

Page 230: ...Version 2 This select field is used to Enable or Disable Protocol Level 2 for SSH The currently configured value is shown when the web page is displayed The default value is Enable Maximum Number of...

Page 231: ...a set of rules which are matched sequentially against a packet When a packet meets the match criteria of a rule the specified rule action Permit Deny is taken and the additional rules are not checked...

Page 232: ...e unless a save is performed Delete Removes the currently selected IP ACL from the switch configuration 6 2 5 1 2 Viewing IP Access Control List Summary Page Non Configurable Data IP ACL ID The IP ACL...

Page 233: ...of rules has been reached For each rule a packet must match all the specified criteria in order to be true against that rule and for the specified rule action Permit Deny to take place Configurable Da...

Page 234: ...IN ECHO FTP FTPDATA HTTP SMTP SNMP TELNET TFTP and WWW Each of these values translates into its equivalent port number which is used as both the start and end of the port range Source L4 Port Number S...

Page 235: ...IP header This is an optional configuration Enter an integer from 0 to 7 IP TOS Configuration The IP TOS field in a packet is defined as all eight bits of the Service Type octet in the IP header The...

Page 236: ...cified created using the MAC ACL Rule Configuration menu Selection Criteria MAC ACL A new MAC Access Control List may be created or the configuration of an existing MAC ACL can be updated based on sel...

Page 237: ...Access Control List Summary Page Non Configurable Data MAC ACL Name MAC ACL identifier Rules The number of rules currently configured for the MAC ACL Direction The direction of packet traffic affecte...

Page 238: ...Valid range of Queue Ids is 0 to 6 Redirect Interface Specifies the specific egress interface where the matching traffic stream is forced bypassing any forwarding decision normally performed by the d...

Page 239: ...ttons Submit Send the updated configuration to the switch Configuration changes take effect immediately These changes will not be retained across a power cycle unless a save is performed Delete Remove...

Page 240: ...greater than the highest sequence number currently in use for this interface and direction will be used Valid range is 1 to 4294967295 Non Configurable Data Slot Port Displays selected interface Direc...

Page 241: ...the mode from which one can be selected The default value is enable While disabled the DiffServ configuration is retained when saved and can be changed but it is not activated When enabled Diffserv s...

Page 242: ...d to a specified class The match criterion Every denotes that every packet is considered to match the specified class and no additional input information is needed The content of this drop down list v...

Page 243: ...er Displays name of the configured class of type all or any referenced by the specified class of the same type For the specified class type of acl the ACL number attached to the specified class is dis...

Page 244: ...alphanumeric string from 1 to 31 characters uniquely identifying a policy Non Configurable Data Policy Type In indicates the type is specific to inbound traffic direction Only when a new policy is cr...

Page 245: ...or removed from the policy Policy Attribute Selector This lists all attributes supported for this type of policy from which one can be selected Non Configurable Data Policy Type Displays type of the...

Page 246: ...available to Read Write users when Slot Port is specified as All Configurable Data Policy In This lists all the policy names of type In from which one can be selected If none is selected this will det...

Page 247: ...ice level statistical information in tabular form for all interfaces in the system to which a DiffServ policy has been attached in the inbound and or outbound traffic directions Use the Counter Mode S...

Page 248: ...s or Packets The default is Packets Slot Port List of all valid slot number and port number combinations in the system that have a DiffServ policy currently attached in either direction from which one...

Page 249: ...elnet sets match criteria to Telnet destination port Any sets match criteria to all traffic Create a DiffServ Policy and adds the DiffServ Policy to the DiffServ Class created If Policing is set to YE...

Page 250: ...und Priority defines the type of policing conform action where High sets action to markdscp ef Med sets action to markdscp af31 and Low sets action to send When Policing is disabled Outbound Priority...

Page 251: ...hen in untrusted mode Valid Range is 0 to 7 Non IP Traffic Class Displays traffic class i e queue to which all non IP traffic is directed when in trust ip precedence or trust ip dscp mode Valid Range...

Page 252: ...Main Menu Web Based Management Interface Lan Switch and Router Blade 252...

Page 253: ...Range is 0 to 100 in increments of 5 The value 0 means maximum is unlimited Command Buttons Restore Defaults Restores default settings Submit Send the updated configuration to the switch Configuratio...

Page 254: ...es in the selected interface cannot exceed defined maximum 100 Scheduler Type Specifies the type of scheduling used for this queue Scheduler Type can only be one of the following strict weighted Defau...

Page 255: ...s the minimum guaranteed bandwidth allotted to this queue The value 0 means no guaranteed minimum Sum of individual Minimum Bandwidth values for all queues in the selected interface cannot exceed defi...

Page 256: ...n the DVMRP routing table that have a non infinite metric Command Buttons Submit Send the updated configuration to the switch Configuration changes take effect immediately These changes will not be re...

Page 257: ...ata for a DVMRP interface Otherwise you will see a message telling you that no router interfaces are available and the configuration summary screen will not be displayed Non Configurable Data Interfac...

Page 258: ...the selected interface This is the time left before this neighbor entry will age out and is not applicable if the neighbor router s state is down Generation ID The DVMRP generation ID for the specifie...

Page 259: ...the source mask to identify the source network for this table entry Source Mask The network mask used with the source IP address Next Hop Interface The outgoing interface for this next hop Type The n...

Page 260: ...k which has been pruned Expiry Time The amount of time remaining before this prune should expire at the upstream neighbor If no prune messages have been received from downstream neighbors this is set...

Page 261: ...to the source subnet Expiry Time The minimum amount of time remaining before this entry will be aged out Up Time The time since the route represented by this entry was learned by the router Command B...

Page 262: ...meter IGMP is robust to robustness variable 1 packet losses Valid values are from 1 to 255 The default value is 2 Query Interval Enter the frequency in seconds at which IGMP host query packets are to...

Page 263: ...not be retained across a power cycle unless a save is performed 6 2 6 2 3 Viewing IGMP Configuration Summary Selection Criteria Slot port Select the slot and port for which data is to be displayed Sl...

Page 264: ...1 Last Member Query Count The number of queries to be sent on receiving a leave group report Querier The address of the IGMP querier on the IP subnet to which the selected interface is attached Queri...

Page 265: ...ticast Group IP Select the IP multicast group address for which data is to be displayed If no group membership reports have been received on the selected interface you will not be able to make this se...

Page 266: ...ived this timer is reset to the group membership timer While this timer is non zero the local router ignores any IGMPv1 and IGMPv3 leave messages for this group that it receives on the selected interf...

Page 267: ...onfiguration Page Selection Criteria Admin Mode Select enable or disable to set the administrative status of Multicast Forwarding in the router The default is disabled Non Configurable Data Protocol S...

Page 268: ...multicast data packet will not be forwarded from the selected interface You should enter a number between 0 and 255 If you enter 0 all multicast packets for the selected interface will be forwarded Y...

Page 269: ...this entry will age out and be removed from the table RPF Neighbor The IP address of the Reverse Path Forwarding neighbor Protocol The multicast routing protocol which created this entry The possibili...

Page 270: ...cts to the neighbor router for the given source IP address Command Buttons Submit Send the updated configuration to the router Configuration changes take effect immediately These changes will not be r...

Page 271: ...Slot port Select the router interface for which the administratively scoped boundary is to be configured Configurable Data Group IP Enter the multicast group address for the start of the range of add...

Page 272: ...n with the present state of the data in the router 6 2 6 4 Configuring Multicast Mdebug 6 2 6 4 1 Configuring Mrinfo Run Page Use this screen to initiate an mrinfo command You can use the mrinfo comma...

Page 273: ...to process the results after you have initiated the mrinfo command The contents of the screen have to be refreshed to display the latest results 6 2 6 4 3 Configuring Mstat Run Page Use this screen to...

Page 274: ...across the hop The right half of the screen displays statistics for the path in two groups Within each group the columns are the number of packets lost the number of packets sent the percentage lost...

Page 275: ...from the source to a destination branch for a multicast distribution tree Configurable Data Source IP Enter the IP address of a multicast capable source This is the unicast address of the beginning o...

Page 276: ...en hops The time taken for the trace request to be forwarded from the previous hop to this hop Command Buttons New Mtrace Redirect the web browser to the Mtrace Run screen so that you can initiate ano...

Page 277: ...seconds between PIM hello messages transmitted from the selected interface The default value is 30 Valid values are from 10 to 3600 Command Buttons Submit Send the updated configuration to the router...

Page 278: ...me a neighbor of the local router Expiry Time The minimum time remaining before this PIM neighbor will be aged out Command Buttons Refresh Refresh the data on the screen with the present state of the...

Page 279: ...immediately These changes will not be retained across a power cycle unless a save is performed 6 2 6 6 2 Viewing PIM SM Global Configuration Page Non Configurable Data Admin Mode The administrative st...

Page 280: ...values are from 1 to 255 The default value is 0 CBSR Hash Mask Length Enter the CBSR hash mask length to be advertised in bootstrap messages if this interface is elected as the bootstrap router This...

Page 281: ...is used to indicate that the local interface is not a candidate BSR interface CBSR Hash Mask Length The CBSR hash mask length to be advertised in bootstrap messages if this interface is elected as the...

Page 282: ...he component when it is a candidate Rendezvous Point in the local domain Command Buttons Refresh Refresh the data on the screen with the present state of the data in the router 6 2 6 6 6 Viewing PIM S...

Page 283: ...he screen with the present state of the data in the router 6 2 6 6 8 Configuring PIM SM Static RP Configuration Page Configurable Data IP Address IP Address of the RP to be created or deleted Group Gr...

Page 284: ...Main Menu Web Based Management Interface Lan Switch and Router Blade 284...

Page 285: ...at Commands are followed by values parameters or both Example 1 IP address ipaddr netmask gateway Ip address is the command name ipaddr netmask are the required values for the command gateway is the o...

Page 286: ...of 0 0 0 0 is invalid macaddr The MAC address format is six hexadecimal numbers separated by colons for example 00 06 29 32 81 40 areaid Area IDs may be entered in dotted decimal notation for example...

Page 287: ...rr designates that the requested value was not internally accessible This should never happen and indicates that there is a case in the software that is not handled correctly The value of designates t...

Page 288: ...ting with the switch Syntax show arp Default Setting None Command Mode Privileged Exec Display Message MAC Address A unicast MAC address for which the switch has forwarding and or filtering informatio...

Page 289: ...ent code Time The time this event occurred Note Event log information is retained across a switch reset 7 3 4 show running config This command is used to display capture the current setting of differe...

Page 290: ...s switch brief information and MIBs supported Syntax show sysinfo Default Setting None Command Mode Privileged Exec Display Message System Description The text used to identify this switch System Name...

Page 291: ...ry default is blank System Contact Text used to identify a contact person for this switch May be up to 31 alphanumeric characters The factory default is blank MAC Address The burned in MAC address use...

Page 292: ...h For example if the release was 1 the version was 2 and the maintenance number was 4 the format would be 1 2 4 Operating Code Version The release version maintenance number of the code currently runn...

Page 293: ...hine type Loader Version The release version maintenance number of the loader code currently running on the switch For example if the release was 1 the version was 2 and the maintenance number was 4 t...

Page 294: ...command displays the Port monitoring information for the system Syntax show interface status slot port all slot port is the desired interface number all This parameter displays information for all in...

Page 295: ...his command displays statistics information for all interfaces Default Setting None Command Mode Privileged Exec Display Message The display parameters when the argument is slot port are as follows Pa...

Page 296: ...port or for all CPU traffic based upon the argument Syntax show interface counters detailed slot port switchport slot port is the desired interface number switchport This parameter specifies whole swi...

Page 297: ...mber of packets including bad packets received that were between 256 and 511 octets in length inclusive excluding framing bits but including FCS octets Packets RX and TX 512 1023 Octets The total numb...

Page 298: ...but including FCS octets Packets Transmitted 65 127 Octets The total number of packets including bad packets received that were between 65 and 127 octets in length inclusive excluding framing bits bu...

Page 299: ...GMRP PDUs transmitted from the GARP layer GMRP Failed Registrations The number of times attempted GMRP registrations could not be completed STP BPDUs Transmitted Spanning Tree Protocol Bridge Protoco...

Page 300: ...address including those that were discarded or not sent Transmit Packets Discarded The number of outbound packets which were chosen to be discarded even though no errors had been detected to prevent...

Page 301: ...f the interface Broadcast Packets Transmitted The total number of packets that higher level protocols requested to be transmitted to the Broadcast address including those that were discarded or not se...

Page 302: ...t port slot port slot port slot port slot port slot port slot port slot port is the desired interface number Default Setting None Command Mode Global Config 7 4 1 6 speed duplex This command is used t...

Page 303: ...duplex half duplex Half duplex all This command represents all interfaces Default Setting None Command Mode Global Config 7 4 1 7 negotiate This command enables automatic negotiation on a port The def...

Page 304: ...the capabilities on specific interface Syntax capabilities 10 100 full duplex half duplex 1000 full duplex no capabilities 10 100 full duplex half duplex 1000 full duplex 10 10BASE T 100 100BASE T 10...

Page 305: ...ts all interfaces no This command removes the advertised capability with using parameter Default Setting 10 half duplex 10 full duplex 100 half duplex 100 full duplex and 1000 full duplex Command Mode...

Page 306: ...s Syntax storm control flowcontrol no storm control flowcontrol no This command disables 802 3x flow control for the specific interface Default Setting Disabled Command Mode Interface Config 7 4 1 10...

Page 307: ...the administrator can enter a MAC Address to display the table entry for the requested MAC address and all entries following the requested MAC address Syntax show mac addr table macaddr all macaddr en...

Page 308: ...s GMRP Learned The value of the corresponding instance was learned via GMRP and applies to Multicast Other The value of the corresponding instance does not fall into one of the other categories 7 4 2...

Page 309: ...tes Note This software version only supports IVL systems Type This displays the type of the entry Static entries are those that are configured by the end user Dynamic entries are added to the table as...

Page 310: ...col Source The component that is responsible for this entry in the Multicast Forwarding Database Possible values are IGMP Snooping GMRP and Static Filtering Description The text description of this mu...

Page 311: ...etting None Command Mode Privileged Exec Display Message Address Aging Timout This displays the total number of seconds for Forwarding Database table 7 4 2 7 mac address table aging time This command...

Page 312: ...o 16 alphanumeric characters including blanks The default is blank VLAN ID 1 is always named Default This field is optional VLAN Type Type of VLAN which can be Default VLAN ID 1 can be static one that...

Page 313: ...port to be dynamically registered in this VLAN via GVRP The port will not participate in this VLAN unless a join request is received on this port This is equivalent to registration normal in the IEEE...

Page 314: ...electors on the top line Port VLAN ID The VLAN ID that this port will assign to untagged frames or priority tagged frames received on this port The value must be for an existing VLAN The factory defau...

Page 315: ...de Global Config 7 4 3 6 vlan This command creates a new VLAN and assigns it an ID The ID is a valid VLAN identification number ID 1 is reserved for the default VLAN VLAN range is 2 3965 Syntax vlan v...

Page 316: ...This command sets the name of a VLAN to a blank string The VLAN ID is a valid VLAN identification number ID range is 1 3965 Default Setting The name for VLAN ID 1 is always Default The name for other...

Page 317: ...cceptance mode per interface For VLAN Only mode untagged frames or priority frames received on this interface are discarded For Admit All mode untagged frames or priority frames received on this inter...

Page 318: ...or Admit all mode The other one is for all interfaces no This command sets the frame acceptance mode for all interfaces to Admit All For Admit All mode untagged frames or priority frames received on t...

Page 319: ...p of the receiving interface are admitted and forwarded to ports that are members of that VLAN Syntax switchport ingress filtering all no switchport ingress filtering all all All interfaces no This co...

Page 320: ...r all interfaces to 1 Default Setting 1 Command Mode Global Config 7 4 3 13 switchport allowed vlan This command configures the degree of participation for a specific interface in a VLAN The ID is a v...

Page 321: ...erfaces add The interface is always a member of this VLAN This is equivalent to registration fixed tagged all frames transmitted for this VLAN will be tagged untagged all frames transmitted for this V...

Page 322: ...erfaces in a VLAN to be enabled If tagging is enabled traffic is transmitted as tagged frames If tagging is disabled traffic is transmitted as untagged frames The ID is a valid VLAN identification num...

Page 323: ...g Syntax switchport priority all 0 7 0 7 The range for the priority is 0 7 all All interfaces Default Setting 0 Command Mode Global Config 7 4 3 16 switchport protocol group This command adds the phys...

Page 324: ...nd Mode Interface Config This command adds a protocol based VLAN group to the system The group name is a character string of 1 to 16 characters When it is created the protocol group will be assigned a...

Page 325: ...aces from this protocol based VLAN group that is identified by this group name Default Setting None Command Mode Global Config This command adds the protocol to the protocol based VLAN identified by g...

Page 326: ...den vlan This command used to configure forbidden VLANs Syntax switchport forbidden vlan add remove vlanid no switchport forbidden vlanid VLAN ID Range 1 3965 add VLAND ID to add remove VLAND ID to re...

Page 327: ...This displays the slot port of the interface that this row in the table describes Join Timer Specifies the interval between the transmission of GARP PDUs registering or re registering membership for...

Page 328: ...his command displays Generic Attributes Registration Protocol GARP information for one or All interfaces Syntax show gmrp configuration slot port all slot port An interface number all All interfaces D...

Page 329: ...It may be enabled or disabled If this parameter is disabled Join Time Leave Time and Leave All Time have no effect The factory default is disabled 7 4 4 4 show garp configuration This command displays...

Page 330: ...4 4 6 bridge ext gmrp This command enables GARP Multicast Registration Protocol GMRP on the system The default value is disabled Syntax bridge ext gmrp no bridge ext gmrp no This command disables GARP...

Page 331: ...all all All interfaces no This command disables GVRP GARP VLAN Registration Protocol for all ports If GVRP is disabled Join Time Leave Time and Leave All Time have no effect Default Setting Disabled C...

Page 332: ...an interface that has GMRP enabled Default Setting Disabled Command Mode Interface Config This command enables GMRP Multicast Registration Protocol on all interfaces If an interface which has GMRP ena...

Page 333: ...to 20 centiseconds 0 2 seconds This command has an effect only when GVRP and GMRP are enabled Default Setting 20 centiseconds 0 2 seconds Command Mode Interface Config This command sets the GVRP join...

Page 334: ...are enabled Syntax garp timer leave 20 600 no garp timer leave 20 600 leave time Range 20 600 in centiseconds no This command sets the GVRP leave time per port to 60 centiseconds 0 6 seconds Note Thi...

Page 335: ...ll PDUs are generated per port A Leave All PDU indicates that all registrations will be unregistered Participants would need to rejoin in order to maintain registration The value applies per port and...

Page 336: ...RP are enabled Syntax garp timer leaveall all 200 6000 no garp timer leaveall all 200 6000 leave time Range 200 6000 in centiseconds all All interfaces no This command sets how frequently Leave All PD...

Page 337: ...nooping is enabled Vlan Enabled for IGMP Snooping This is the list of interfaces on which IGMP Snooping is enabled 7 4 5 1 2 show ip igmp snooping mrouter This command displays information on statical...

Page 338: ...ies learned through IGMP snooping Default Setting None Command Mode Privileged Exec Display Message VLAN This displays VLAN ID value MAC Addr This displays multicast group MAC addresses Type This disp...

Page 339: ...ting the interface from the entry This value may be configured Max Response Time This displays the amount of time the switch will wait after sending a query on an interface participating in the VLAN b...

Page 340: ...2 3600 in seconds no This command sets the IGMP Group Membership Interval time on the system to 260 seconds Default Setting 260 seconds Command Mode Global Config Interface Config 7 4 5 2 3 ip igmp s...

Page 341: ...Snooping on all interfaces Default Setting Disabled Command Mode Global Config 7 4 5 2 4 ip igmp snooping mcrtrexpiretime This command sets the Multicast Router Present Expiration time on the system...

Page 342: ...ault Setting 10 seconds Command Mode Global Config Interface Config 7 4 5 2 6 ip igmp snooping immediate leave This command enables or disables IGMP Snooping fast leave admin mode on a selected interf...

Page 343: ...t router interface When configured as a multicast router interface the interface is treated as a multicast router interface in all VLANs Syntax ip igmp snooping mrouter interface no ip igmp snooping m...

Page 344: ...vlan static This command is used to add a port to a multicast group Syntax ip igmp snooping vlan vlanid static macaddr interface slot port vlanid VLAN ID Range 1 3965 macaddr Multicast group MAC addr...

Page 345: ...Membership Interval time is the amount of time in seconds that a switch will wait for a report from a particular group on a particular interface which is participating in the VLAN before deleting the...

Page 346: ...xresponse 1 3965 1 3965 VLAN ID Range 1 3965 no This command sets the IGMP maximum response time on a particular VLAN to the default value Default Setting 10 Command Mode Vlan Database 7 4 5 2 12 set...

Page 347: ...om its forwarding table entry upon receiving an IGMP leave message for that multicast group without first sending out MAC based general queries to the interface Fast leave admin mode should be enabled...

Page 348: ...ach port channel the following information is displayed Logical Interface The field displays logical slot and the logical port Port Channel Name This field displays the name of the port channel Link S...

Page 349: ...nnel LAG in slot port notation There can be a maximum of eight ports assigned to a given port channel LAG Port Speed Speed of the port channel port Type This field displays the status designating whet...

Page 350: ...annel with the same administrative mode setting Syntax port channel adminmode all no port channel adminmode all no This command disables a port channel LAG The option all sets every configured port ch...

Page 351: ...al slot port all no port channel linktrap logical slot port all logical slot port Port Channel Interface number all all Port Channel interfaces no This command disables link trap notifications for the...

Page 352: ...nnel name up to 15 characters Default Setting None Command Mode Global Config 7 4 6 7 adminmode This command enables a port channel LAG members The interface is a logical slot and port for a configure...

Page 353: ...n Control Protocol LACP on all ports Syntax lacp all no lacp all all All interfaces no This command disables Link Aggregation Control Protocol LACP on all ports Default Setting Enabled Command Mode Gl...

Page 354: ...rt Channel is 6 7 4 6 10 delete channel group This command deletes the port from the port channel LAG The interface is a logical slot and port number of a configured port channel Syntax delete channel...

Page 355: ...7 4 7 Storm Control 7 4 7 1 show storm control This command is used to display broadcast storm control information Syntax show storm control broadcast Default Setting None Command Mode Privileged Exe...

Page 356: ...ast Rate Displays rate for storm control multicast This command is used to display unicast storm control information Syntax show storm control unicast Default Setting None Command Mode Privileged Exec...

Page 357: ...broadcast no This command disables broadcast storm recovery mode on the selected interface The threshold implementation follows a percentage pattern If the broadcast traffic on any Ethernet port exce...

Page 358: ...ables multicast storm recovery mode on the selected interface Default Setting None Command Mode Interface Config This command enables multicast storm recovery mode on all interfaces Syntax storm contr...

Page 359: ...nfig This command enables unicast storm recovery mode on all interfaces Syntax storm control unicast no storm control unicast no This command disables unicast storm recovery mode on all interfaces Def...

Page 360: ...st storms by setting a threshold level for broadcast traffic on all ports Syntax switchport broadcast all packet rate 1 2 3 4 1 Threshold level represents 64 pps packet per second 2 Threshold level re...

Page 361: ...t your network from multicast storms by setting a threshold level for multicast traffic on all ports Syntax switchport multicast all packet rate 1 2 3 4 1 Threshold level represents 64 pps packet per...

Page 362: ...lt Setting Level 4 Command Mode Interface Config This command will protect your network from unicast storms by setting a threshold level for unicast traffic on all ports Syntax switchport unicast all...

Page 363: ...Priority Displays the 802 1p priority to be mapped Traffic Class Displays internal traffic class to map the corresponding 802 1p priority 7 4 8 2 queue cos map This command is used to assign class of...

Page 364: ...ng feature is enabled or disabled The possible values are enabled and disabled Probe Port is the slot port that is configured as the probe port If this value has not been configured Not Configured wil...

Page 365: ...monitor session session id source destination slot port Interface number no This command removes the probe port or the mirrored port from a monitor session port monitoring Default Setting None Comman...

Page 366: ...id Session ID no This command disables port monitoring function for a monitor session 7 5 Management Commands 7 5 1 Network Commands 7 5 1 1 show ip interface This command displays configuration sett...

Page 367: ...e factory default value is 0 0 0 0 Management VLAN ID Specifies the management VLAN ID 7 5 1 2 show ip redirects This command displays IP default gateway for this switch Syntax show ip redirects Defau...

Page 368: ...4 show ip ipv6 This command displays the IPv6 forwarding status of all ports Syntax show ip ipv6 Default Setting None Command Mode Privileged Exec Display Message Intf Interface number Type Status of...

Page 369: ...mand Mode Interface Config 7 5 1 6 interface vlan This command is used to enter Interface vlan configuration mode Syntax interface vlan vlanid vlanid VLAN ID Range 1 3965 Default Setting None Command...

Page 370: ...igned to management VLAN 7 5 1 8 ip default gateway This command sets the IP Address of the default gateway Syntax ip default gateway gateway no ip default gateway gateway IP address of the default ga...

Page 371: ...from DHCP none Obtains IP address by setting configuration Default Setting None Command Mode Interface Vlan Config 7 5 1 10 ip filter This command is used to enable the IP filter function Syntax ip f...

Page 372: ...filter IP address Default Setting None Command Mode Global Config 7 5 1 11 ip ipv6 This command is used to enable the Ipv6 function on specific interface Syntax ip ipv6 no ip ipv6 no disable IPv6 Defa...

Page 373: ...are 1200 2400 4800 9600 19200 38400 57600 and 115200 bauds Character Size The number of bits in a character The number of bits is always 8 Flow Control Whether Hardware Flow Control is enabled or disa...

Page 374: ...minal interface The supported rates are 1200 2400 4800 9600 19200 38400 57600 115200 Syntax baudrate 1200 2400 4800 9600 19200 38400 57600 115200 no baudrate no This command sets the communication rat...

Page 375: ...hreshold This command is used to set the password instruction threshold limiting the number of failed login attempts Syntax password threshold 0 120 no password threshold threshold max threshold Range...

Page 376: ...command establishes a new outbound telnet connection to a remote host Syntax telnet host port debug line echo host A hostname or a valid IP address port A valid decimal integer in the range of 0 to 6...

Page 377: ...Sessions This object indicates the number of simultaneous remote connection sessions allowed The factory default is 5 Allow New Telnet Sessions Indicates that new telnet sessions will not be allowed...

Page 378: ...w timeout duration Syntax exec timeout 1 160 no exec timeout sec max connect time Range 1 160 no This command sets the remote connection session timeout value in minutes to the default Note Changing t...

Page 379: ...e 0 5 no This command sets the maximum value to be 5 Default Setting 5 Command Mode Telnet Config 7 5 3 7 sessions This command regulates new telnet sessions If sessions are enabled new telnet session...

Page 380: ...und telnet session can be established An established session remains active until the session is ended or an abnormal network error ends it Syntax telnet sessions no telnet sessions no This command di...

Page 381: ...ve sessions does not become effective until the session is reaccessed Any keystroke will also activate the new timeout duration Syntax telnet exec timeout 1 160 no telnet exec timeout 1 160 max connec...

Page 382: ...s the number of simultaneous outbound telnet connections allowed Allow New Outbound Telnet Sessions Indicates whether outbound telnet sessions will be allowed 7 5 4 SNMP Server Commands 7 5 4 1 show s...

Page 383: ...s For example if the IP Address 9 47 128 0 and the corresponding Subnet Mask 255 255 255 0 a range of incoming IP addresses would match That is the incoming IP Address could equal 9 47 128 0 9 47 128...

Page 384: ...raps will be sent OSPF Traps May be enabled or disabled The factory default is disabled Indicates whether OSPF traps will be sent PIM Traps May be enabled or disabled The factory default is disabled I...

Page 385: ...ne Command Mode Global Config 7 5 4 6 snmp server community This command adds and names a new SNMP community A community name is a name associated with the switch and with a set of SNMP managers that...

Page 386: ...community manages the switch according to its access right If the community is disabled no SNMP requests using this community are accepted In this case the SNMP manager associated with this community...

Page 387: ...ll allow access from any IP address The name is the applicable community name Syntax snmp server community ipmask ipmask name no snmp server community ipmask name name community name ipmask a client I...

Page 388: ...IP address Otherwise this value is ANDed with the mask to determine the range of allowed client IP addresses The name is the applicable community name Syntax snmp server host ipaddr name no snmp serve...

Page 389: ...DVMRP trap Default Setting Enabled Command Mode Global Config This command enables Link Up Down traps for the entire switch When enabled link traps are sent only if the Link Trap flag setting associa...

Page 390: ...an existing terminal interface session Syntax snmp server enable traps multiusers no snmp server enable traps multiusers no This command disables Multiple User trap Default Setting Enabled Command Mo...

Page 391: ...snmp server enable traps stpmode no snmp server enable traps stpmode no This command disables the sending of new root traps and topology change notification traps Default Setting Enabled Command Mode...

Page 392: ...send traps to the receiver Status A pull down menu that indicates the receiver s status enabled or disabled and allows the administrator user to perform actions on this user entry Enable send traps to...

Page 393: ...This command disables link status traps for all interfaces Note This command is valid only when the Link Up Down Flag is enabled see snmpserver enable traps linkmode Default Setting Disabled Command M...

Page 394: ...NMP trap receiver table must be unique for the same community name If you make multiple entries using the same IP address and community name the first entry is retained and processed All duplicate ent...

Page 395: ...is command displays the http settings for the switch Syntax show ip http Default Setting None Command Mode Privileged Exec Display Message HTTP Mode Unsecure This field indicates whether the HTTP mode...

Page 396: ...Java applet Syntax ip javamode no ip javamode no This command disallows access to the Java applet in the header frame of the Web interface When access is disabled the user cannot view the Java applet...

Page 397: ...t immediately All interfaces are affected Syntax ip http server no ip http server no This command disables access to the switch through the Web interface When access is disabled the user cannot login...

Page 398: ...ure HTTP Default Setting Disabled Command Mode Global Config 7 5 6 7 ip http secure protocol This command is used to set protocol levels versions The protocol level can be set to TLS1 SSL3 or to both...

Page 399: ...cates whether the administrative mode of SSH is enabled or disabled Protocol Levels The protocol level may have the values of version 1 version 2 or both versions SSH Sessions Currently Active This fi...

Page 400: ...SSH 1 and SSH 2 1 and 2 can be set Syntax ip ssh protocol protocollevel1 protocollevel2 protocollevel1 2 The protocol level can be set to SSH1 SSH2 or to both SSH 1 and SSH 2 Default Setting SSH1 and...

Page 401: ...ates that a session remains active indefinitely The time is a decimal value from 0 to 160 Changing the timeout value for active sessions does not become effective until the session is reaccessed Any k...

Page 402: ...This command is used to specify the DCHP client identifier for this switch Use the no form to restore to default value Syntax ip dhcp client identifier text text hex hex no ip dhcp client identifier...

Page 403: ...ed to the IP address you entered in the Server IP address field Server IP Address IP address of the BOOTP DHCP server or the IP address of the next BOOTP DHCP Relay Agent Circuit Id Option Mode This i...

Page 404: ...d to reset to the default value Default Setting 4 Command Mode Global Config 7 5 9 3 Bootpdhcprelay serverip This command is used to configure the server IP Address for BootP DHCP Relay on the system...

Page 405: ...and that displays the configuration setting 7 6 1 Show Commands 7 6 1 1 show spanning tree This command displays spanning tree settings for the common and internal spanning tree The following details...

Page 406: ...nce 7 6 1 2 show spanning tree interface This command displays the settings and parameters for a specific switch port within the common and internal spanning tree The slot port is the desired switch p...

Page 407: ...entifier displays VLAN ID Associated Instance Identifier for the associated multiple spanning tree instance or CST if associated with the common and internal spanning tree 7 6 1 4 show spanning tree m...

Page 408: ...nce Associated FIDs List of forwarding database identifiers associated with this instance Associated VLANs List of VLAN IDs associated with this instance This command displays summary information abou...

Page 409: ...switch port within the common and internal spanning tree The slot port is the desired switch port In this case the following are displayed Port Identifier The port identifier for this port within the...

Page 410: ...94 indicates a particular MST instance The parameter slot port all indicates the desired switch port or all ports If 0 defined as the default CIST ID is passed as the 0 4094 then the status summary is...

Page 411: ...meter Configuration Name TConfigured name Configuration Revision Level Configured value Configuration Digest Key Calculated value Configuration Format Selector Configured value MST Instances List of a...

Page 412: ...tree no This command sets the spanning tree operational mode to be disabled While disabled the spanning tree configuration is retained and can be changed but is not activated Default Setting Disabled...

Page 413: ...nfiguration name name is a string of at most 32 alphanumeric characters no This command resets the Configuration Identifier Name to its default Default Setting The base MAC address displayed using hex...

Page 414: ...PDUs are transmitted rather than MST BPDUs IEEE 802 1d functionality supported 2 rstp RST BPDUs are transmitted rather than MST BPDUs IEEE 802 1w functionality supported 3 mstp MST BPDUs are transmitt...

Page 415: ...e Global Config 7 6 2 6 spanning tree hello time This command sets the Hello Time parameter to a new value for the common and internal spanning tree The hellotime value is in whole seconds within a ra...

Page 416: ...g tree max age 6 40 the Bridge Max Age value Range 6 40 no This command sets the Bridge Max Age parameter for the common and internal spanning tree to the default value that is 20 Default Setting 20 C...

Page 417: ...ree The instance 1 3965 is a number that corresponds to the desired existing multiple spanning tree instance to be removed Default Setting None Command Mode Global Config This command sets the bridge...

Page 418: ...Default Setting 32768 Command Mode Global Config This command adds an association between a multiple spanning tree instance and a VLAN The VLAN will no longer be associated with the common and interna...

Page 419: ...000 or auto If auto is specified the pathcost value will be set based on Link Speed Syntax spanning tree mst 0 4094 cost 1 200000000 auto no spanning tree mst 0 4094 cost 0 4094 multiple spanning tree...

Page 420: ...ree mst 0 4094 port priority 0 240 no spanning tree mst 0 4094 port priority 0 4094 multiple spanning tree instance ID no This command sets the Path Cost or Port Priority for this port within the mult...

Page 421: ...Administrative Switch Port State for all ports to enabled Syntax spanning tree port mode all no spanning tree port mode all all All interfaces no This command sets the Administrative Switch Port Stat...

Page 422: ...Management Commands 7 7 1 Show Commands 7 7 1 1 show logging This command displays logging Syntax show logging Default Setting None Command Mode Privileged Exec Display Message Logging Client Local P...

Page 423: ...es Relayed The number of messages that are relayed Log Messages Ignored The number of messages that are ignored 7 7 2 show logging buffered This command displays the message log maintained by the swit...

Page 424: ...Note Trap log information is not retained across a switch reset 7 7 3 1 show logging hosts This command displays all configured logging hosts Syntax show logging hosts Default Setting None Command Mo...

Page 425: ...ode Privileged Exec This command enables wrapping of in memory logging when full capacity reached Otherwise when full capacity is reached logging stops Syntax logging buffered wrap no logging buffered...

Page 426: ...ng to the console Default Setting None Command Mode Privileged Exec 7 7 4 3 logging host This command enables logging to a host where up to eight hosts can be configured Syntax logging host hostaddres...

Page 427: ...ault Setting None Command Mode Privileged Exec This command reconfigures the IP address of the log server Syntax logging host reconfigure hostindex hostaddress hostindex Index of the log server hostad...

Page 428: ...t Setting None Command Mode Privileged Exec This command sets the local port number of the LOG client for logging messages Syntax logging syslog port portid no logging syslog port no Resets the local...

Page 429: ...e configuration script to the switch The apply command backs up the running configuration and then starts applying the commands in the script file Application of the commands stops at the first failur...

Page 430: ...eted all Delete all scripts presented in the switch Default Setting None Command Mode Privileged Exec 7 8 3 script list This command lists all scripts present on the switch as well as the total number...

Page 431: ...SNMPv3 fields will only be displayed if SNMP is available on the system Syntax show users Default Setting None Command Mode Privileged Exec Display Message User Name The name the user will use to logi...

Page 432: ...account username can be up to eight characters in length The name may be comprised of alphanumeric characters as well as the dash and underscore _ The username is not case sensitive Six user names can...

Page 433: ...authentication method none no use authentication method no This command sets the authentication protocol to be used for the specified login user to none The username is the login user name for which t...

Page 434: ...user name for which the specified encryption protocol will be used Default Setting No encryption Command Mode Global Config 7 10 Security Commands 7 10 1 Show Commands 7 10 1 1 show users authenticati...

Page 435: ...Authentication Login List This displays the authentication login listname Method 1 This displays the first method in the specified authentication login list if any Method 2 This displays the second m...

Page 436: ...show dot1x This command is used to show the status of the dot1x Administrative mode Syntax show dot1x Default Setting None Command Mode Privileged Exec Display Message Administrative mode Indicates w...

Page 437: ...he value is expressed in seconds and will be in the range of 1 to 65535 Supplicant Timeout The timer used by the authenticator state machine on this port to timeout the supplicant The value is express...

Page 438: ...d Frames Received The number of EAP response identity frames that have been received by this authenticator EAP Response Frames Received The number of valid EAP response frames other than resp id frame...

Page 439: ...authorized unauthorized Reauthentication Enabled Indicates whether re authentication is enabled on this port Port Status Indicates if the key is transmitted to the supplicant for the specified port 7...

Page 440: ...10 show radius This command is used to display the various RADIUS configuration items for the switch Syntax show radius Default Setting None Command Mode Privileged Exec Display Message Current Server...

Page 441: ...ounting server is displayed RADIUS Accounting Server IP Address IP Address of the configured RADIUS accounting server Round Trip Time The time interval in centiseconds between the most recent Accounti...

Page 442: ...es Server IP Address The IP address of radius server Round Trip Time The time interval in hundredths of a second between the most recent Access Reply Access Challenge and the Access Request that match...

Page 443: ...is command display configured information of the TACACS Syntax show tacacs Default Setting None Command Mode Privileged Exec Display Message Admin Mode Displays TACACS administration mode Server 1 Por...

Page 444: ...Server 3 Mode Current TACACS server admin mode disable master or slave 7 10 1 14 show port security This command shows the port security settings for the entire system Syntax show port security Defaul...

Page 445: ...the dynamically locked MAC addresses for port Syntax show port security dynamic slot port Default Setting None Command Mode Privileged Exec Display Message MAC address Dynamically locked MAC address T...

Page 446: ...st does not exist a new authentication login list is first created and then the authentication methods are set in the authentication login list The maximum number of authentication login methods is th...

Page 447: ...for any component 3 The login list is the default login list included with the default configuration and was not created using config authentication login create The default login list cannot be dele...

Page 448: ...e Note that the login list associated with the admin user cannot be changed to prevent accidental lockout from the switch Syntax username login user listname user is the login user name listname an au...

Page 449: ...t configured users will be authenticated using local authentication only Syntax dot1x defaultl login listname listname an authentication login list Default Setting None Command Mode Global Config 7 10...

Page 450: ...system auth control no This command is used to disable the dot1x authentication support on the switch Default Setting Disabled Command Mode Global Config 7 10 3 5 dot1x user This command adds the spe...

Page 451: ...lled port mode to reflect the outcome of the authentication exchanges between the supplicant authenticator and the authentication server Syntax dot1x port control all auto force authorized force unaut...

Page 452: ...o Command Mode Interface Config 7 10 3 7 dot1x max req This command sets the maximum number of times the authenticator state machine on this port will transmit an EAPOL EAP Request Identity frame befo...

Page 453: ...ns the re authentication sequence on the specified port This command is only valid if the control mode for the specified port is auto If the control mode is not auto an error will be returned Syntax d...

Page 454: ...535 supp timeout Sets the value in seconds of the timer used by the authenticator state machine on this port to timeout the supplicant The supp timeout must be a value in the range 1 65535 server time...

Page 455: ...mand If the optional port parameter is used the command will configure the UDP port number to use to connect to the configured RADIUS server In order to configure the UDP port number the IP address mu...

Page 456: ...ddr parameter must match the IP address of the previously configured RADIUS authentication accounting server Default Setting None Command Mode Global Config 7 10 4 3 radius sever key This command is u...

Page 457: ...uest packet is re transmitted when no response is received from the RADIUS server to the default value that is 10 Default Setting 10 Command Mode Global Config 7 10 4 5 radius server timeout This comm...

Page 458: ...r this RADIUS client The primary server is the one that is used by default for handling RADIUS requests The remaining configured servers are only used if the primary server cannot be reached A maximum...

Page 459: ...d is used to enable disable the TACACS function Syntax tacacs no tacacs no This command is used to disable the TACACS function Default Setting Disabled Command Mode Global Config 7 10 5 2 tacacs mode...

Page 460: ...igure the TACACS server IP address Syntax tacacs server ip 1 3 ipaddr no tacacs server ip 1 3 ipaddr An IP address 1 3 The valid value of index is 1 2 and 3 no This command is used to remove the TACAC...

Page 461: ...5 5 tacacs key This command is used to configure the TACACS server shared secret key Syntax tacacs key 1 3 no tacacs key 1 3 Note that the length of the secret key is up to 32 characters 1 3 The vali...

Page 462: ...imeout This command is used to configure the TACACS request timeout of an instance Syntax tacacs timeout 1 3 1 255 no tacacs timeout 1 3 1 255 max timeout Range 1 to 255 1 3 The valid value of index i...

Page 463: ...Config 7 10 6 2 port security max dynamic This command sets the maximum of dynamically locked MAC addresses allowed on a specific port Syntax port security max dynamic 0 600 no port security max dynam...

Page 464: ...nd resets the maximum number of statically locked MAC addresses allowed on a specific port to its default value Default Setting 20 Command Mode Interface Config 7 10 6 4 port security mac address This...

Page 465: ...5 port security mac address move This command converts dynamically locked MAC addresses to statically locked addresses Syntax port security mac address move Default Setting None Command Mode Interface...

Page 466: ...r vs CDP status CDP CDP enable or disable 7 11 1 2 show cdp neighbors This command displays the CDP neighbor information Syntax show cdp neighbors Default Setting None Command Mode Privileged Exec Dis...

Page 467: ...affic Default Setting None Command Mode Privileged Exec Display Message Incoming packet number Received legal CDP packets number from neighbors Outgoing packet number Transmitted CDP packets number fr...

Page 468: ...ified interface Syntax cdp run no cdp run no This command is used to disable CDP on a specified interface Default Setting Enabled Command Mode Interface Config This command is used to enable CDP for a...

Page 469: ...no cdp timer 5 254 interval time Range 5 254 no This command is used to reset the interval time to the default value Default Setting 60 Command Mode Global Config 7 11 2 4 cdp holdtime This command i...

Page 470: ...mand Mode Privileged Exec Display Message Group A Group ID was displayed the numbers of the Group ID Mode For the admin mode to disable or enable or not Up Down port s The list of interfaces that are...

Page 471: ...dmin mode of redundant function and use no command to disable the function Syntax link state no link state Default Setting Disable Command Mode Global Config 7 12 2 2 link State group This command is...

Page 472: ...Syntax link state group enable group id no link state group enable group id Default Setting Disable Command Mode Global Config 7 12 2 5 link State group This command is to Set upstream port or downst...

Page 473: ...e Destroy the port backup group Use port backup group to create a group Use no command to destroy the group Syntax Port backup group no port backup group Default Setting 0 Command Mode Global Config 7...

Page 474: ...Default Setting Disable Command Mode Global Config 7 13 SNTP Simple Network Time Protocol Commands 7 13 1 Show Commands 7 13 1 1 show sntp This command displays the current time and configuration sett...

Page 475: ...Multicast SNTP Version The highest SNTP version the client supports Port SNTP Client Port Client Mode Configured SNTP Client Mode Unicast Poll Interval Poll interval value for SNTP clients in seconds...

Page 476: ...query the server in unicast mode Port Server Port Number Last Attempt Time Last server attempt time for the specified server Last Update Status Last server attempt status for the server Total Unicast...

Page 477: ...roadcast unicast no sntp client mode no This command will disable Simple Network Time Protocol SNTP client mode Default Setting None Command Mode Global Config 7 13 2 3 sntp client port This command w...

Page 478: ...conds where value is 6 to 10 no This command will reset the poll interval for SNTP unicast clients to its default value Default Setting The default value is 6 Command Mode Global Config 7 13 2 5 sntp...

Page 479: ...ge is 0 to 10 no This command will reset the poll retry for SNTP unicast clients to its default value Default Setting The default value is 1 Command Mode Global Config 7 13 2 7 sntp server This comman...

Page 480: ...n name IP address of the SNTP server addresstype The address type is ipv4 or dns 1 3 The range is 1 to 3 version The range is 1 to 4 portid The range is 1 to 65535 no This command deletes an server fr...

Page 481: ...rs 0 12 Number of hours before after UTC Range 0 12 hours 0 59 Number of minutes before after UTC Range 0 59 minutes before utc Sets the local time zone before east of UTC after utc Sets the local tim...

Page 482: ...Setting None Command Mode Privileged Exec 7 14 1 3 clear eventlog This command is used to clear the event log which contains error messages from the system Syntax clear eventlog Default Setting None C...

Page 483: ...ts without powering off the switch The switch is automatically reset when this command is processed You are prompted to confirm that the reset should proceed Syntax clear config Default Setting None C...

Page 484: ...s for a specified slot port or for all the ports or for the entire switch based upon the argument Syntax clear counters slot port all slot port is the desired interface number all All interfaces Defau...

Page 485: ...ult Setting None Command Mode Privileged Exec 7 14 1 10 clear cdp This command is used to clear the CDP neighbors information and the CDP packet counters Syntax clear cdp traffic traffic this command...

Page 486: ...ommand changes Privileged EXEC password Syntax enable passwd Default Setting None Command Mode Global Config 7 14 1 13 clear igmp snooping This command clears the tables managed by the IGMP Snooping f...

Page 487: ...x clear port channel Default Setting None Command Mode Privileged Exec 7 14 1 15 clear ip filter This command is used to clear all ip filter entries Syntax clear ip filter Default Setting None Command...

Page 488: ...l All interfaces Default Setting None Command Mode Privileged Exec 7 14 1 17 clear radius statistics This command is used to clear all RADIUS statistics Syntax clear radius statistics Default Setting...

Page 489: ...g or image respectively The command can be used to the save the running config to flash by specifying the source as running config and the destination as startup config filename The command can also b...

Page 490: ...ere url xmodem tftp ipaddr path file destfilename name of the image file or the script file url xmodem or tftp ipaddr path file sshkey rsa1 SSH RSA1 Key file sshkey rsa2 SSH RSA2 Key file sshkey dsa S...

Page 491: ...the pre login banner file Syntax copy clibanner url copy url clibanner no clibanner url xmodem or tftp ipaddr path file no Delete CLI banner Default Setting None Command Mode Privileged Exec 7 14 3 d...

Page 492: ...e run time operation code Default Setting None Command Mode Privileged Exec Display Message Column Heading Description date The date that the file was created file name The name of the file file type...

Page 493: ...ivileged Exec 7 14 7 ping This command checks if another computer is on the network and listens for connections To use this command configure the switch for network in band connection as described in...

Page 494: ...Count 5 Size 32 Command Mode Privileged Exec 7 14 8 traceroute This command is used to discover the routes that packets actually take when traveling to their destination through the network on a hop b...

Page 495: ...ogging cli command This command enables the CLI command Logging feature The Command Logging component enables the switch to log all Command Line Interface CLI commands issued on the system Syntax logg...

Page 496: ...that all network connections are terminated and the boot code executes The switch uses the stored configuration to initialize the switch You are prompted to confirm that the reset should proceed A suc...

Page 497: ...isconnect 0 10 all 0 11 telnet session ID all all telnet sessions Default Setting None Command Mode Privileged Exec 7 14 14 hostname This command is used to set the prompt string Syntax hostname promp...

Page 498: ...d processed based on defined criteria The filtering criteria are defined by a class The processing is defined by a policy s attributes Policy attributes may be defined on a per class instance basis an...

Page 499: ...o here as class references a given class definition can contain at most one reference to another class which can be combined with other match criteria The referenced class is truly a reference and not...

Page 500: ...ass match commands specifying layer 3 layer 2 and general match criteria The class match criteria are also known as class rules with a class definition consisting of one or more rules to identify the...

Page 501: ...m the referenced access list at the time of class creation Thus any subsequent changes to the referenced ACL definition do not affect the DiffServ class To pick up the latest ACL definition the DiffSe...

Page 502: ...h any This command adds to the specified class definition a match condition whereby all packets are considered to belong to the class Syntax match any Default None Command Mode Class Map Config 7 15 2...

Page 503: ...validity or the change attempt shall fail The total number of class rules formed by the complete reference class chain includes both predecessor and successor classes must not exceed a platform speci...

Page 504: ...ftpdata http smtp snmp telnet tftp www Each of these translates into its equivalent port number which is used as both the start and end of a port range To specify the match condition using a numeric...

Page 505: ...to 0 and tosmask set to 03 hex Default None Command Mode Class Map Config 7 15 2 10 match ip precedence This command adds to the specified class definition a match condition based on the value of the...

Page 506: ...re alternative ways to specify a match criterion for the same Service Type field in the IP header but with a slightly different user notation Note In essence this the free form version of the IP DSCP...

Page 507: ...sk note that although it resembles a standard subnet mask this bit mask need not be contiguous Default None Command Mode Class Map Config 7 15 2 14 match srcl4port This command adds to the specified c...

Page 508: ...to an interface in a particular direction to form a service The user specifies the policy name when the policy is created The DiffServ CLI does not necessarily require that users associate only one t...

Page 509: ...onfig 7 15 3 2 drop This command specifies that all packets for the associated traffic stream are to be dropped at ingress Syntax drop Command Mode Policy Class Map Config 7 15 3 3 redirect This comma...

Page 510: ...he class map name parameter is the name of an existing Diffserv class map where different ones must be used for the conform and exceed colors Syntax conform color class map name class map name Name of...

Page 511: ...statements Syntax class classname classname is the name of an existing DiffServ class Note that this command causes the specified policy to create a reference to the class definition Command Mode Poli...

Page 512: ...The IP Precedence value is an integer from 0 to 7 Syntax mark ip precedence 0 7 Command Mode Policy Class Map Config Policy Type In Incompatibilities Mark IP DSCP Police all forms 7 15 3 10 police sim...

Page 513: ...required and is specified as an integer from 0 7 Command Mode Policy Class Map Config Restrictions Only one style of police command simple is allowed for a given class instance in a particular policy...

Page 514: ...ctional interface Only one policy may be assigned at any one time to an interface in a particular direction The policy type in out must match the interface direction to which it is attached This set o...

Page 515: ...irection at any one time 7 15 4 2 no service policy This command detaches a policy from an interface in a particular direction Syntax no service policy in policy map name The command can be used in th...

Page 516: ...imultaneously they must all be true to indicate a class match For a type of any each match criterion is evaluated sequentially and only one need be true to indicate a class match Class type acl rules...

Page 517: ...ce this class was created Ref Class Name The name of an existing DiffServ class whose match conditions are being referenced by the specified class definition 7 15 5 2 show diffserv This command displa...

Page 518: ...ass of service value that is set in the 802 1p header of outbound packets This is not displayed if the mark cos was not specified Mark IP DSCP Denotes the mark re mark value used as the DSCP for traff...

Page 519: ...olicy Non Conform DSCP Value This field displays the DSCP mark value if this action is markdscp Non Conform IP Precedence Value This field displays the IP Precedence mark value if this action is markp...

Page 520: ...or brevity 7 15 5 5 show diffserv service brief This command displays all interfaces in the system to which a DiffServ policy has been attached The direction parameter is optional if specified only se...

Page 521: ...e in the specified direction for any reason due to DiffServ treatment Interface Sent Octets Packets A cumulative count of the octets packets forwarded by this service interface in the specified direct...

Page 522: ...out direction Note None of the counters listed here are guaranteed to be supported on all platforms Only supported counters are shown in the display output 7 15 5 7 show service policy This command d...

Page 523: ...ermit or Deny Source MAC Address Displays the source MAC address for this rule Source MAC Mask Displays the source MAC mask for this rule Destination MAC Address Displays the destination MAC address f...

Page 524: ...The name of the MAC ACL rule Rules The number of rule in this ACL Direction Denotes the direction in which this MAC ACL is attached to the set of interfaces listed The possible values are Inbound or O...

Page 525: ...r this rule Destination IP Mask This field displays the destination IP Mask for this rule Destination Ports This field displays the destination port range for this rule Service Type Field Match This f...

Page 526: ...e existing ACL Syntax mac access list extended name no mac access list extended name name It uniquely identifies the MAC access list Default Setting None Command Mode Global Config 7 16 2 2 mac access...

Page 527: ...alue of 01 80 c2 xx xx xx hex where xx indicates a don t care The remaining command parameters are all optional The Ethertype may be specified as either a keyword or a four digit hexadecimal value fro...

Page 528: ...e whereas the Global Config mode setting is applied to all interfaces The Interface Config mode command is only available on platforms that support independent per port class of service queue configur...

Page 529: ...ecifies a destination ip address and destination mask for match condition of the ACL rule specified by the dstip and dstmask parameters The command specifies the TOS for an ACL rule depending on a mat...

Page 530: ...show queue cos map This command displays the current Dot1p 802 1p priority mapping to internal traffic classes for a specific interface The slot port parameter is optional and is only valid on platfo...

Page 531: ...is displayed If omitted the most recent global configuration settings are displayed Syntax show queue ip precedence mapping slot port slot port The interface number Default Setting None Command Mode...

Page 532: ...OS trust mode is set to either trust ip dscp or trust ip precedence Untrusted Traffic Class The traffic class used for all untrusted traffic This is only displayed when the COS trust mode is set to un...

Page 533: ...smission bandwidth guarantee for the queue expressed as a percentage A value of 0 means bandwidth is not guaranteed and the queue operates using best effort This is a configured value Scheduler Type I...

Page 534: ...pping of the queue priority and the mapped traffic class Default Setting None Command Mode Global Config 7 17 2 2 queue ip precedence mapping This command maps an IP precedence value to an internal tr...

Page 535: ...7 The range of mapped traffic class is 0 to 7 no Reset to the default mapping of the IP precedence and the mapped traffic class Default Setting None Command Mode Global Config 7 17 2 3 queue trust Thi...

Page 536: ...service trust mode to untrusted for all interfaces Default Setting None Command Mode Global Config 7 17 2 4 queue cos queue min bandwidth This command specifies the minimum transmission bandwidth guar...

Page 537: ...idth all bw 0 bw 1 bw 6 no queue cos queue min bandwidth all bw 0 bw 1 bw 6 Each Valid range is 0 to 100 in increments of 5 and the total sum is less than or equal to 100 no This command restores the...

Page 538: ...on a per port basis Default Setting None Command Mode Interface Config This command activates the strict priority scheduler mode for each specified queue on a device Syntax queue cos queue strict all...

Page 539: ...w Valid range is 0 to 100 in increments 5 no This command restores the default shaping rate value Default Setting None Command Mode Interface Config This command specifies the maximum transmission ban...

Page 540: ...None Command Mode Privileged Exec Display Message Age Time Is the time it takes for an ARP entry to age out This value was configured into the unit Age time is measured in seconds Response Time Is the...

Page 541: ...2 show ip arp brief This command displays the brief Address Resolution Protocol ARP table information Syntax show ip arp brief Default Setting None Command Mode Privileged Exec Display Message Age Ti...

Page 542: ...hed to an existing routing interface The value for macaddress is a unicast MAC address for that device Syntax arp ipaddr macaddr no arp ipaddr macaddr ipaddr Is the IP address of a device on a subnet...

Page 543: ...lt Setting Enabled Command Mode Interface Config 7 18 2 3 arp cachesize This command configures the maximum number of entries in the ARP cache Syntax arp cachesize 256 1920 no arp cachesize 256 1920 T...

Page 544: ...ipaddr ipaddr The IP address to be removed from the ARP table Default Setting None Command Mode Privileged Exec 7 18 2 6 arp resptime This command configures the ARP request response timeout Syntax a...

Page 545: ...t time Syntax arp timeout 15 21600 no arp timeout 15 21600 Represents the IP ARP entry ageout time in seconds The range is 15 to 21600 seconds no This command configures the default ageout time for IP...

Page 546: ...acket from the local router to the final destination Routing Mode Show whether the routing mode is enabled or disabled IP Forwarding Mode Disable or enable the forwarding of IP frames Maximum Next Hop...

Page 547: ...e physical link data rate of the specified interface This is measured in Megabits per second Mbps MAC Address Is the physical address of the specified interface Encapsulation Type Is the encapsulation...

Page 548: ...ute The possibilities are local static OSPF or RIP Next Hop Intf The outgoing router interface to use when forwarding traffic to the next destination Next Hop IP Address The outgoing router IP address...

Page 549: ...ecified interface Default Setting None Command Mode Privileged Exec Display Message Network Address Is a valid network address identifying the network on the specified interface Subnet Mask Is a mask...

Page 550: ...ield displays the static route preference value OSPF Intra This field displays the OSPF intra route preference value OSPF Inter This field displays the OSPF inter route preference value OSPF Ext T1 Th...

Page 551: ...switch Syntax ip routing no ip routing no Disable the IP Router Admin Mode for the master switch Default Setting Enabled Command Mode Global Config 7 19 2 3 ip address This command configures an IP ad...

Page 552: ...255 The precedence value of this route The range is 1 to 255 no delete all next hops to a destination static route If the optional nextHopRtr parameter is designated the next hop is deleted and if th...

Page 553: ...ese commands Changing the default precedence does not update the precedence of existing static routes even if they were assigned the original default precedence The new default precedence will only be...

Page 554: ...ing Enabled Command Mode Interface Config 7 19 2 9 ip mtu This command sets the IP Maximum Transmission Unit MTU on a routing interface The IP MTU is the size of the largest IP packet that can be tran...

Page 555: ...rame is routed to a VLAN 7 20 Open Shortest Path First OSPF Commands 7 20 1 Show Commands 7 20 1 1 show ip ospf This command displays information relevant to the OSPF router Syntax show ip ospf Defaul...

Page 556: ...ments received determined to be new instantiations External LSDB Limit The maximum number of non default AS external LSAs entries that can be stored in the link state database Default metric RDefault...

Page 557: ...show ip ospf database Default Setting None Command Mode Privileged Exec User Exec Display Messages Router ID Is a 32 bit dotted decimal number representing the LSDB interface Area ID Is the IP addres...

Page 558: ...Hello Interval for the specified interface This is a configured value Dead Interval A number representing the OSPF Dead Interval for the specified interface This is a configured value LSA Ack Interval...

Page 559: ...ic interface Syntax show ip ospf interface stats slot port slot port Interface number Default Setting None Command Mode Privileged Exec User Exec Display Messages OSPF Area ID The area id of this OSPF...

Page 560: ...ucial OSPF capabilities Router Priority Displays the OSPF priority for the specified interface The priority of an interface is a priority integer from 0 to 255 A value of 0 indicates that the router i...

Page 561: ...al number representing the neighbor interface IP Address An IP address representing the neighbor interface Neighbor Interface Index Is a slot port identifying the neighbor interface index State The ty...

Page 562: ...Exec Display Messages Area ID The area id of the requested OSPF area IP Address An IP Address which represents this area range Subnet Mask A valid subnet mask for this area range Lsdb Type The type of...

Page 563: ...neighbor areaid Area ID neighbor Neighbor s router ID Default Setting None Command Mode Privileged Exec User Exec Display Messages Area ID The area id of the requested OSPF area Neighbor Router ID Th...

Page 564: ...al for the OSPF virtual interface Dead Interval Is the configured dead interval for the OSPF virtual interface Retransmit Interval Is the configured retransmit interval for the OSPF virtual interface...

Page 565: ...20 2 3 ip ospf This command enables OSPF on a router interface Syntax ip ospf no ip ospf no This command disables OSPF on a router interface Default Setting Disabled Command Mode Interface Config 7 2...

Page 566: ...e Router OSPF Config 7 20 2 5 area default cost This command configures the monetary default cost for the stub area Syntax area areaid default cost 1 16777215 areaid Area ID 1 16777215 The default cos...

Page 567: ...t route advertised into the NSSA Syntax area areaid nssa default info originate 1 16777215 comparable non comparable areaid Area ID 1 16777215 The metric of the default route The range is 1 to 1677721...

Page 568: ...Setting None Command Mode Router OSPF Config 7 20 2 10 area nssa translator role This command configures the translator role of the NSSA Syntax area areaid nssa translator role always candidate areaid...

Page 569: ...e range is 0 to 3600 Default Setting None Command Mode Router OSPF Config 7 20 2 12 area range This command creates a specified area range for a specified NSSA Syntax area areaid range ipaddr subnetma...

Page 570: ...icantly reduce the link state database of routers within the stub area Syntax area areaid stub no area areaid stub areaid Area ID no This command deletes a stub area for the specified area ID Default...

Page 571: ...key is composed of standard displayable non control keystrokes from a standard 101 102 key keyboard The authentication key must be 8 bytes or less if the authentication type is simple If the type is...

Page 572: ...40 seconds Command Mode Router OSPF Config 7 20 2 17 area virtual link hello interval This command configures the hello interval for the OSPF virtual interface on the interface identified by areaid a...

Page 573: ...transmit interval for the OSPF virtual interface on the interface identified by areaid and neighborid Default Setting The default value of retransmit interval is 5 seconds Command Mode Router OSPF Con...

Page 574: ...ate always metric 1 16777215 metric type 1 2 no default information originate metric metric type always Sets the router advertise 0 0 0 0 0 0 0 0 metric The range of the metric is 1 to 16777215 metric...

Page 575: ...ven to the routes learned via OSPF in the following order intra inter type 1 type 2 Syntax distance ospf intra inter type1 type2 preference no distance ospf intra inter type1 type2 preference The rang...

Page 576: ...figures the exit overflow interval for OSPF It describes the number of seconds after entering Overflow state that a router will wait before attempting to leave the Overflow State This allows the route...

Page 577: ...to the OSPF backbone and or any regular OSPF area Syntax external lsdb limit 1 2147483647 no external lsdb limit 1 2147483647 The range of external LSDB limit for OSPF is 1 to 2147483674 no This comma...

Page 578: ...ple key encrypt key keyid no ip ospf authentication key It is composed of standard displayable non control keystrokes from a Standard 101 102 key keyboard The authentication key must be 8 bytes or les...

Page 579: ...ied interface Syntax ip ospf dead interval 1 2147483647 no ip ospf dead interval 1 2147483647 It is a valid positive integer which represents the length of time in seconds that a router s Hello packet...

Page 580: ...no This command sets the default OSPF hello interval for the specified interface Default Setting The default hello interval is 10 seconds Command Mode Interface Config 7 20 2 31 ip ospf priority This...

Page 581: ...s for adjacencies belonging to this router interface This value is also used when retransmitting database and link state request packets no This command sets the default OSPF retransmit Interval for t...

Page 582: ...iption packets specify the size of the largest IP packet that can be sent without fragmentation on the interface When a router receives a Database Description packet it examines the MTU advertised by...

Page 583: ...specified source protocol routers Syntax redistribute rip static connected metric 0 16777215 metric type 1 2 tag 0 4294967295 subnets no redistribute rip static connected metric metric type tag subne...

Page 584: ...s 1 to 1 Default Setting The default value is 1 Command Mode Router OSPF Config 7 21 Bootp DHCP Relay Commands 7 21 1 show bootpdhcprelay This command displays the BootP DHCP Relay information Syntax...

Page 585: ...on mode for BootP DHCP Relay on the system Syntax bootpdhcprelay cidoptmode no bootpdhcprelay cidoptmode Default Setting Disabled Command Mode Global Config 7 21 3 bootpdhcprelay enable This command e...

Page 586: ...the system When the BOOTP relay agent receives a BOOTREQUEST message it may use the seconds since client began booting field of the request as a factor in deciding whether to relay the request or not...

Page 587: ...P or DHCP client request Syntax ip dhcp restart Default Setting None Command Mode Global Config 7 21 8 ip dhcp client identifier This commands specifies the DHCP client identifier for the switch Synta...

Page 588: ...command displays the static host name to address mapping table Syntax show hosts Default Setting None Command Mode Privileged Exec Display Message Domain Name List Domain Name IP Address IP address o...

Page 589: ...Number of the DNS query packets been sent Response Number of the DNS response packets been received 7 22 1 3 show dns cache This command displays all entries in the DNS cache table Syntax show dns cac...

Page 590: ...mapping entry Default Setting None Command Mode Privileged Exec 7 22 2 2 clear hosts This command clears the entire static host name to address mapping table Syntax clear hosts Default Setting None C...

Page 591: ...ntries Syntax ip domain list name no ip domain list name name Default domain name used to complete unqualified host names Do not include the initial period that separates an unqualified name from the...

Page 592: ...y from the table Note The listed name servers are queried in the specified sequence until a response is received or the end of the list is reached with no response Default Setting None Command Mode Pr...

Page 593: ...entries in the domain name list table Syntax clear domain list Default Setting None Command Mode Privileged Exec 7 22 2 8 clear dns This command sets the DNS configuration to default value Syntax clea...

Page 594: ...leged Exec 7 22 2 10 clear dns counter This command clears the statistics of all entries in the DNS cache table Syntax clear dns cache Default Setting None Command Mode Privileged Exec 7 23 Routing In...

Page 595: ...djacent routes will be summarized into single entries in order to reduce the total number of entries The default is enabled Host Routes Accept Mode Select enable or disable from the pulldown menu If y...

Page 596: ...when uses simple or encrypt authentication Authentication Key ID It is a Key ID when uses MD5 encryption for RIP authentication Default Metric A number which represents the metric used for default ro...

Page 597: ...e it Link State The mode of the interface up or down 7 23 2 Configuration Commands 7 23 2 1 enable rip This command resets the default administrative mode of RIP in the router active Syntax enable no...

Page 598: ...mmary no auto summary no This command disables the RIP auto summarization mode Default Setting Disable Command Mode Router RIP Config 7 23 2 4 default information originate This command is used to set...

Page 599: ...o This command is used to reset the default metric of distributed routes to its default value Default Setting Not configured Command Mode Router RIP Config 7 23 2 6 distance rip This command sets the...

Page 600: ...RIP split horizon mode None mode will not use RIP split horizon mode Simple mode will be that a route is not advertised on the interface over which it is learned Poison mode will be that routes learne...

Page 601: ...edistributed by the source protocol no This command is used to cancel the access list to filter routes received from the source protocol Default Setting 0 Command Mode Router RIP Config 7 23 2 10 redi...

Page 602: ...tion This command sets the RIP Version 2 Authentication Type and Key for the specified interface The value of type is either none simple or encrypt The value for authentication key key must be 16 byte...

Page 603: ...ackets to be received Syntax ip rip receive version rip1 rip2 both none no ip rip receive version no This command configures the interface to allow RIP control packets of the default version s to be r...

Page 604: ...e all Show router discovery information for all interfaces Default Setting None Command Mode Privileged Exec User Exec Display Message Ad Mode Displays the advertise mode which indicates whether route...

Page 605: ...sable Router Discovery on an interface Default Setting Disabled Command Mode Interface Config 7 24 3 ip irdp broadcast This command configures the address to be used to advertise the router for the in...

Page 606: ...is 3 maxadvertinterval 600 1800 Command Mode Global Config 7 24 5 ip irdp maxadvertinterval This commands configures the maximum time in seconds allowed between sending router advertisements from the...

Page 607: ...irdp preference This command configures the preferability of the address as a default router address relative to other router addresses on the same subnet Syntax ip irdp preference 2147483648 2147483...

Page 608: ...ces It will be displayed above the per VLAN information VLAN ID Is the identifier of the VLAN Logical Interface Indicates the logical slot port associated with the VLAN routing interface IP Address Di...

Page 609: ...essage Admin Mode Displays the administrative mode for VRRP functionality on the switch Router Checksum Errors Represents the total number of VRRP packets received with an invalid VRRP checksum value...

Page 610: ...lt Setting None Command Mode Privileged Exec User Exec Display Message VRID Represents the router ID of the virtual router Primary IP Address This field represents the configured IP Address for the Vi...

Page 611: ...RP packets received by the virtual router with IP TTL time to live not equal to 255 Zero Priority Packets Received Represents the total number of VRRP packets received by virtual router with a priorit...

Page 612: ...removes all VRRP configuration details of the virtual router configured on a specific interface Default Setting None Command Mode Interface Config 7 26 2 2 ip vrrp ip This commands also designates the...

Page 613: ...o Disable the virtual router configured on the specified interface Disabling the status field stops a virtual router Default Setting Disabled Command Mode Interface Config 7 26 2 4 ip vrrp authenticat...

Page 614: ...ID is 1 to 255 no This command sets the default preemption mode value for the virtual router configured on a specified interface Default Setting Enabled Command Mode Interface Config 7 26 2 6 ip vrrp...

Page 615: ...dvertisement value for a virtual router Default Setting The default value of advertisement interval is 1 Command Mode Interface Config 7 27 Distance Vector Multicast Routing Protocol DVMRP Commands Th...

Page 616: ...t Valid slot and port number separated by forward slashes Interface Mode This field indicates the mode of this interface Possible values are Enabled and Disabled State This field indicates the current...

Page 617: ...of the DVMRP neighbor for which this entry contains information State This field displays the state of the neighboring router The possible value for this field are ACTIVE or DOWN Up Time This field i...

Page 618: ...ork is a LEAF or a BRANCH 7 27 1 5 show ip dvmrp prune This command displays the table listing the router s upstream prune information Syntax show ip dvmrp prune Default Setting None Command Mode Priv...

Page 619: ...subnet This field has a different meaning than the Interface Metric field Expiry Time secs This field indicates the expiry time in seconds This is the time remaining for this route to age out Up Time...

Page 620: ...ement Protocol IGMP Commands This section provides a detailed explanation of the IGMP commands The commands are divided into the following different groups Show commands are used to display device set...

Page 621: ...not enabled Querier Status This displays whether the interface has IGMP in Querier mode or Non Querier mode Groups This displays the list of multicast groups that are registered on this interface If d...

Page 622: ...Time 1 10 of a second This field indicates the maximum query response time advertised in IGMPv2 queries on this interface This is a configured value Robustness This field displays the tuning for the...

Page 623: ...displayed Interface Valid slot and port number separated by forward slashes Group Compatibility Mode The group compatibility mode v1 v2 or v3 for the specified group on this interface Source Filter Mo...

Page 624: ...the local system is the querier the value of this object is zero Wrong Version Queries This field indicates the number of queries received whose IGMP version does not match the IGMP version of the int...

Page 625: ...umber of Group Specific Queries sent before the router assumes that there are no local members on the interface Syntax ip igmp last member query count 1 20 no ip igmp last member query count 1 20 The...

Page 626: ...rface This is the frequency at which IGMP Host Query packets are transmitted on this interface Syntax ip igmp query interval 1 3600 no ip igmp query interval 1 3600 The range for 1 3600 is 1 to 3600 s...

Page 627: ...ing 100 Command Mode Interface Config 7 28 2 7 ip igmp robustness This command configures the robustness that allows tuning of the interface The robustness is the tuning for the expected packet loss o...

Page 628: ...ault value Default Setting 2 Command Mode Interface Config 7 28 2 9 ip igmp startup query interval This command sets the interval between General Queries sent by a Querier on startup on the interface...

Page 629: ...ield displays the maximum number of entries allowed in the multicast table Number Of Packets For Which Source Not Found This displays the number of packets for which the source is not found Number Of...

Page 630: ...rated by forward slashes Group IP The group IP address Mask The group IP mask 7 29 1 3 show ip mcast interface This command displays the multicast information for the specified interface Syntax show i...

Page 631: ...ess of the RPF neighbor Flags This field displays the flags associated with this entry If the summary parameter is specified the following fields are displayed Source IP This field displays the IP add...

Page 632: ...he multicast routing protocol by which this entry was created Incoming Interface This field displays the interface on which the packet for this group arrives Outgoing Interface List This field display...

Page 633: ...which this packet is forwarded This command displays all the static routes configured in the static mcast table if is specified or displays the static route associated with the particular sourceipaddr...

Page 634: ...ghbor Neighbor The neighbor associated with the router interface Metric The metric value associated with this neighbor TTL The TTL threshold associated with this neighbor Flags Status of the neighbor...

Page 635: ...he address of the intermediate router at the specified hop distance Mcast Protocol In Use The multicast routing protocol used for the out interface of the specified intermediate router TTL Threshold T...

Page 636: ...ast packet source The groupipaddr is the IP address of the next hop toward the source The metric is the cost of the route entry for comparison with other routes to the source network and is a value in...

Page 637: ...the routes in the mroute table entries containing the specified groupipaddr The group address is the Group Destination IP address of the multicast packet Syntax no ip mcast mroute group groupipaddr s...

Page 638: ...ask is a group IP mask Default Setting None Command Mode Interface Config 7 29 2 5 ip multicast ttl threshold This command applies the given ttlthreshold to a routing interface The ttlthreshold is the...

Page 639: ...unicast router id of the host running mstat The results of this command will be available in the results bufferpool which can be displayed by using show mstat If a debug command is already in progres...

Page 640: ...e command is issued The group is the multicast address of the group to be displayed The default value is 224 2 0 1 If a debug command is already in execution a message is displayed and the new request...

Page 641: ...is disabled this router does not respond to the mtrace queries it receives from other router devices Default Setting None Command Mode Global Config 7 30 Protocol Independent Multicast Dense Mode PIM...

Page 642: ...port Interface number Default Setting None Command Mode Privileged Exec Display Message Interface Mode This field indicates whether PIM DM is enabled or disabled on the specified interface This is a...

Page 643: ...cates the IP Address of the Designated Router for this interface 7 30 1 4 show ip pimdm neighbor This command displays the neighbor information for PIM DM on the specified interface Syntax show ip pim...

Page 644: ...can be enabled Default Setting Disabled Command Mode Global Config 7 30 2 2 ip pimdm mode This command sets administrative mode of PIM DM on an interface to enabled Syntax ip pimdm mode no ip pimdm mo...

Page 645: ...Independent Multicast Sparse Mode PIM SM Commands 7 31 1 Show Commands 7 31 1 1 show ip pimsm This command displays the system wide information for PIM SM Syntax show ip pimsm Default Setting None Co...

Page 646: ...splays the table containing objects specific to a PIM domain One row exists for each domain to which the router is connected Syntax show ip pimsm componenttable Default Setting None Command Mode Privi...

Page 647: ...idate bootstrap router This is a configured value CRP Preference This field shows the preference value as a candidate rendezvous point on this interface CBSR Hash Mask Length This field shows the hash...

Page 648: ...nd port number separated by forward slashes IP Address This field displays the IP Address of the neighbor on an interface Up Time This field indicates the time since this neighbor has become active on...

Page 649: ...er which uniquely identifies the component Each protocol instance connected to a separate domain should have a different index value If the candidate parameter is specified the follow fields are displ...

Page 650: ...roup Address This field displays the group address supported by the RP Group Mask This field displays the group mask for the group address 7 31 2 Configuration Commands 7 31 2 1 ip pimsm This command...

Page 651: ...in seconds no This command is used to reset the global join prune interval for PIM SM router to the default value Default Setting 60 Command Mode Global Config 7 31 2 3 ip pimsm register rate limit Th...

Page 652: ...p router to switch to the shortest path to the default value Default Setting 50 Command Mode Global Config 7 31 2 5 ip pimsm staticrp This command is used to create RP IP address for the PIM SM router...

Page 653: ...ode This command sets administrative mode of PIM SM multicast routing on a routing interface to enable Syntax ip pimsm mode no ip pimsm mode no This command sets administrative mode of PIM SM multicas...

Page 654: ...R preference is 1 to 255 Syntax ip pimsm cbsrpreference 1 255 no ip pimsm cbsrpreference 1 255 The preference value for the local interface no This command is used to reset the CBSR preference for a p...

Page 655: ...om 1 to 255 and the value of 1 is used to indicate that the local interface is not a Candidate RP interface The active router interface with the highest IP Address and crppreference greater than 1 is...

Page 656: ...on on your host computer 2 Verify that the management station and switch are configured to the same IP domain 3 Configure the community name and access rights for network management access via SNMP 4...

Page 657: ...74 SNMP USER BASED SM MIB v3 usm my RFC 2575 SNMP VIEW BASED ACM MIB v3 acm my RFC 2576 SNMP COMMUNITY MIB coex my RFC 2618 RADIUS AUTH CLIENT MIB radius_auth_client my RFC 2620 RADIUS ACC CLIENT MIB...

Page 658: ...fastpath_keying my OUTBOUNDTELNET PRIVATE MIB fastpath_telnet my DVMRP STD MIB dvmrp my MULTICAST MIB fastpathmulticast my MGMT SECURITY MIB fastpath_mgmt_security my COS MIB fastpath_qos_cos my QOS M...

Page 659: ...to different variables in this MIB group The variables supported by this group are listed in the following table RFC 2233 IF MIB interfaces ifNumber No RO ifMIBObjects ifTableLastChange YES RO ifStac...

Page 660: ...icastPkts Yes RO ifInBroadcastPkts Yes RO ifOutMulticastPkts Yes RO ifOutBroadcastPkts Yes RO ifHCInOctets Yes RO ifHCInUcastPkts Yes RO ifHCInMulticastPkts Yes RO ifHCInBroadcastPkts Yes RO ifHCOutOc...

Page 661: ...s ifStackHigherLayer ifStackLowerLayer ifStackStatus No RC ifRcvAddressTable Indicies ifIndex ifRcvAddressAddress ifRcvAddressStatus No RC ifRcvAddressType No RC ifTestTable Index ifTestId ifTestStatu...

Page 662: ...itch and Router Blade 662 8 3 Supported Traps SNMP traps supported include the following items RFC No Title RFC 1215 coldStart warmStart linkDown linkUp th ti ti F il RFC 1493 newRoot topologyChange R...

Page 663: ...TP Port 80 Traps Authentication Flag Enable Link Up Down Flag Enable Multiple Users Flag Enable Spanning Tree Flag Enable DVMRP Traps Disable OSPF Traps Disable PIM Traps Disable SNMP Communities publ...

Page 664: ...lient disable IGMP Snooping disable Port Mirroring disable 802 3ad enable Static MAC Filtering Protocol VLANs 802 1D W S disable SNTP Client disable TACACS disable CDP enable StormControl disable Link...

Page 665: ...ered wrap no logging console no logging syslog no logging syslog port bridge ext no bridge ext gmrp no bridge ext gvrp ip ip javamode ip dhcp client identifier text Default system clear config ip dhcp...

Page 666: ...g tree no spanning tree spanning tree configuration name Default system clear config spanning tree configuration name MAC address spanning tree configuration revision 0 spanning tree forward time 15 s...

Page 667: ...r ip 1 tacacs timeout 1 3 tacacs retry 1 5 no tacacs mode 1 tacacs port 2 49 no tacacs key 2 no tacacs server ip 2 tacacs timeout 2 3 tacacs retry 2 5 no tacacs mode 2 tacacs port 3 49 no tacacs key 3...

Page 668: ...6 0 queue ip dscp mapping 17 0 queue ip dscp mapping 18 0 queue ip dscp mapping 19 0 queue ip dscp mapping 20 0 queue ip dscp mapping 21 0 queue ip dscp mapping 22 0 queue ip dscp mapping 23 0 queue i...

Page 669: ...val 0 area 0 0 0 0 default cost 1 area 0 0 0 0 stub summarylsa no external lsdb limit no redistribute connected no redistribute static no redistribute rip distance ospf type2 150 distance ospf type1 1...

Page 670: ...e ip rip send version rip2 ip rip receive version both no ip irdp ip irdp holdtime 1800 ip irdp maxadvertinterval 600 ip irdp minadvertinterval 450 ip irdp preference 0 no ip irdp broadcast ip proxy a...

Page 671: ...e mapping 7 3 queue cos queue min bandwidth 0 0 0 0 0 0 0 0 queue cos queue strict 0 1 2 3 4 5 6 7 queue cos queue traffic shape 0 shutdown no shutdown snmp snmp trap link status garp garp timer join...

Page 672: ...max dynamic 600 port security max static 20 snmp server no snmp server enable traps violation routing no routing encapsulation encapsulation ethernet mtu mtu 1518 SSL SSH key SSH SSH DSA Key SSH RSA1...

Page 673: ...ure the cable is plugged into both the switch and corresponding device Verify that the proper cable type is used and its length does not exceed specified limits Check the adapter on the attached devic...

Page 674: ...frames Check that you have a valid network connection to the switch and that the port you are using has not been disabled Check network cabling between the management station and the switch Cannot ac...

Reviews:

No comments

Brands by name

Popular brands

Load more brands