manualshive.com logo in svg

Phoenix Contact FL SWITCH GHS 12G/8, User Manual, Page: 125 / 242

Share
Download
Phoenix Contact FL SWITCH GHS 12G/8 User Manual Download Page 125

MAC Database Commands

8039_en_01

PHOENIX CONTACT

2-97

show dos-control

This command displays Denial of Service configuration information.

MAC D

ATABASE

 C

OMMANDS

This section describes the commands you use to configure and view information about the 

MAC databases.

bridge aging-tim

e

This command configures the forwarding database address aging timeout in seconds. The 

<seconds>

 parameter must be within the range of 10 to 1,000,000 seconds. 

no bridge aging-time

This command sets the forwarding database address aging timeout to the default value. 

Format

show dos-control

Mode

Privileged EXEC

Term

Definition

SIPDIP Mode

May be enabled or disabled. The factory default is disabled.

First Fragment 

Mode

May be enabled or disabled. The factory default is disabled.

Min TCP Hdr Size 

<0-255>

The factory default is 20.

TCP Fragment 

Mode

May be enabled or disabled. The factory default is disabled.

TCP Flag Mode

May be enabled or disabled. The factory default is disabled.

L4 Port Mode

May be enabled or disabled. The factory default is disabled.

ICMP Mode

May be enabled or disabled. The factory default is disabled.

Max ICMP Pkt Size 

<0-1023>

The factory default is 512.

Default

300

Format

bridge aging-time 

<10-1,000,000>

Mode

Global Config

Format

no bridge aging-time

Mode

Global Config

RSPSupply  -  1-888-532-2706 -  www.RSPSupply.com

http://www.RSPSupply.com/p-14161-Phoenix-Contact-2700271-FL-SWITCH-GHS-4G/12-Modular-Ethernet-Switch.aspx

Summary of Contents for FL SWITCH GHS 12G/8

Page 1: ...for FL SWITCH GHS 12G 8 FL SWITCH GHS 4G 12 User Manual Order No Gigabit Modular Switch RSPSupply 1 888 532 2706 www RSPSupply com http www RSPSupply com p 14161 Phoenix Contact 2700271 FL SWITCH GHS...

Page 2: ...RSPSupply 1 888 532 2706 www RSPSupply com http www RSPSupply com p 14161 Phoenix Contact 2700271 FL SWITCH GHS 4G 12 Modular Ethernet Switch aspx...

Page 3: ...LI interface of the Gigabit Modular Switches UM EN FL SWITCH GHS CLI 01 Designation Revision Order No FL SWITCH GHS 2989200 FL SWITCH GHS 4G 12 2700271 FL FXT 2989307 User Manual RSPSupply 1 888 532 2...

Page 4: ...ion concerning proper operation and ease of use This is the safety alert symbol It is used to alert you to potential personal injury hazards Obey all safety messages that follow this symbol to avoid p...

Page 5: ...arantees as to the reliability accuracy or completeness of the information All information made available in the technical data is supplied without any accompanying guarantee whether expressly mention...

Page 6: ...ation on Phoenix Contact products and our Terms and Conditions can be found on the Internet at www phoenixcontact com Make sure you always use the latest documentation It can be downloaded at www phoe...

Page 7: ...ng tree forward time 2 9 spanning tree hello time 2 9 spanning tree max age 2 10 spanning tree max hops 2 10 spanning tree mst 2 11 spanning tree mst instance 2 12 spanning tree mst priority 2 12 span...

Page 8: ...ow vlan brief 2 29 show vlan port 2 29 show vlan association subnet 2 30 show vlan association mac 2 30 vlan port priority all 2 31 vlan priority 2 31 set garp timer join 2 31 set garp timer leave 2 3...

Page 9: ...ector max delay 2 52 Note lacp actor admin 2 52 Note lacp actor admin key 2 52 Note lacp actor admin state 2 53 Note lacp actor admin state individual 2 53 Note lacp actor admin state longtimeout 2 54...

Page 10: ...r interface 2 72 show igmpsnooping mrouter vlan 2 72 show mac address table igmpsnooping 2 73 set igmp querier 2 73 set igmp querier query interval 2 74 set igmp querier timer expiry 2 74 set igmp que...

Page 11: ...detail 2 92 dos control sipdip 2 94 dos control firstfrag 2 94 dos control tcpfrag 2 95 dos control tcpflag 2 95 dos control l4port 2 96 Note dos control icmp 2 96 Note show dos control 2 97 Note brid...

Page 12: ...dence mapping 4 4 show classofservice ip dscp mapping 4 5 show classofservice trust 4 5 show interfaces cos queue 4 5 mac access list extended 4 6 Note mac access list extended rename 4 7 Note deny pe...

Page 13: ...lan 5 22 Example enable passwd 5 22 Example enable passwd encrypted password 5 22 Example logout 5 22 ping 5 23 Example quit 5 24 reload 5 24 copy 5 24 Table 11 sntp broadcast client poll interval 5 2...

Page 14: ...xsessions 6 12 Note sshcon timeout 6 13 Note show ip ssh 6 13 Note crypto certificate generate 6 14 Note crypto key generate rsa 6 14 Note crypto key generate dsa 6 15 Note ip http server 6 15 Note ip...

Page 15: ...CP Relay Agent in Interface Config Mode 6 28 MRP Commands 6 29 Spanning Tree enhanced Commands 6 29 Profinet Commands 6 30 Digital Input CLI commands 6 30 Link Monitoring CLI commands 6 30 Alarm conta...

Page 16: ...xample radius server msgauth 6 42 Example radius server primary 6 43 Example radius server retransmit 6 43 Example radius server timeout 6 43 Example show radius 6 44 Example show radius accounting 6...

Page 17: ...s that might be followed by one or more parameters Parameters can be required or optional values Some commands such as show network or clear vlan do not require parameters Other commands such as netwo...

Page 18: ...s might be names strings or numbers To use spaces as part of a name parameter enclose the name value in double quotes For example the expression System Name with Spaces forces the system to accept the...

Page 19: ...imal format 0n CLI assumes octal format with leading zeros n CLI assumes decimal format ipv6 address FE80 0000 0000 0000 020F 24FF FEBF DBCB or FE80 0 0 0 20F 24FF FEBF DBCB or FE80 20F24FF FEBF DBCB...

Page 20: ...tware suite includes the following modules Switching Layer 2 Routing Layer 3 IPv6 IPv6 routing Multicast BGP 4 Quality of Service Management CLI Web UI and SNMP IPv6 Management Allows management of th...

Page 21: ...EC Switch Contains a limited set of commands to view basic system information Privileged EXEC Switch Allows you to issue any EXEC command enter the VLAN mode or enter the Global Configuration mode Glo...

Page 22: ...fig ap Contains commands to configure entries in the local AP database which is used for AP validation AP Profile Config Mode Switch Config ap profile Contains commands to configure the default AP pro...

Page 23: ...t To return to the Privileged EXEC mode enter Ctrl Z Router BGP Config From the Global Config mode enter router bgp asnumber To exit to the Global Config mode enter exit To return to the Privileged EX...

Page 24: ...d keywords and parameters before you enter the command AP Profile VAP Config Mode From the AP Profile Radio Config mode enter vap 0 7 where 0 7 is the VAP ID To exit to AP Profile Radio Configmode ent...

Page 25: ...ndicates that you did not enter the required keywords or values Ambiguous command Indicates that you did not enter enough letters to uniquely identify the command Table 8 CLI Editing Conventions Key S...

Page 26: ...rotocol Select DHCP BootP or None as the network config protocol If the help output shows a parameter in angle brackets you must replace the parameter with a value switch network parms ipaddr Enter th...

Page 27: ...t You cannot access the system remotely until the system has an IP address subnet mask and default gateway You can set the network configuration information manually or you can configure the system to...

Page 28: ...FL SWITCH GHS CLI 1 12 PHOENIX CONTACT 8039_en_01 RSPSupply 1 888 532 2706 www RSPSupply com http www RSPSupply com p 14161 Phoenix Contact 2700271 FL SWITCH GHS 4G 12 Modular Ethernet Switch aspx...

Page 29: ...rt Caution The commands in this chapter are in one of three functional groups Show commands display switch settings statistics and other information Configuration commands configure features and optio...

Page 30: ...for tagged packets and a valid integer between 1518 9216 for untagged packets no mtu This command sets the default MTU size in bytes for the interface Format no auto negotiate Mode Interface Config D...

Page 31: ...rt channel LAG interfaces but not on VLAN routing interfaces Default enabled Format shutdown Mode Interface Config Format no shutdown Mode Interface Config Note You can use the shutdown all command on...

Page 32: ...possible values are Mirror this port is a monitoring port For more information see Port Mirroring on page 65 PC Mbr this port is a member of a port channel LAG Probe this port is a probe port Admin Mo...

Page 33: ...not to send a trap when link status changes The factory default is enabled LACP Mode LACP is enabled or disabled on this port Term Definition Format show port protocol groupid all Mode Privileged EXEC...

Page 34: ...anning tree bpduflood Use this command to enable BPDU Flood on the interface Format no spanning tree Mode Global Config Default disabled Format spanning tree bpdufilter Mode Interface Config Default d...

Page 35: ...ecute it so the command does not change the system configuration or have a no version spanning tree configuration name This command sets the Configuration Identifier Name for use in identifying the co...

Page 36: ...ge Port within the common and internal spanning tree This allows this port to transition to Forwarding State without delay no spanning tree edgeport This command specifies that this port is not an Edg...

Page 37: ...to 30 with the value being greater than or equal to Bridge Max Age 2 1 no spanning tree forward time This command sets the Bridge Forward Delay parameter for the common and internal spanning tree to t...

Page 38: ...the default value spanning tree max hops This command sets the MSTP Max Hops parameter to a new value for the common and internal spanning tree The max hops value is a range from 1 to 127 no spanning...

Page 39: ...a specific multiple spanning tree instance or the common and internal spanning tree instance depending on the mstid parameter The port priority value is a number in the range of 0 to 240 in increments...

Page 40: ...mmand sets the bridge priority for a specific multiple spanning tree instance The parameter mstid is a number that corresponds to the desired existing multiple spanning tree instance The priority valu...

Page 41: ...no spanning tree mst vlan This command removes an association between a multiple spanning tree instance and a VLAN so that the VLAN is again be associated with the common and internal spanning tree Th...

Page 42: ...splayed Default disabled Format spanning tree port mode all Mode Global Config Format no spanning tree port mode all Mode Global Config Default disabled Format spanning tree rootguard Mode Interface C...

Page 43: ...sion of Configuration Bridge Protocol Data Units BPDUs Bridge Max Hops Bridge max hops count for the device CST Regional Root Bridge Identifier of the CST Regional Root It is made up using the bridge...

Page 44: ...disabled BPDU Flood Enabled or disabled BPDU Guard Enabled or disabled Root Guard Enabled or disabled Port Up Time Since Counters Last Cleared Time since port was reset displayed in days hours minutes...

Page 45: ...ifier of the designated root for this port Designated Port Cost Path Cost offered to the LAN by the Designated Port Designated Bridge Bridge Identifier of the bridge with the Designated Port Designate...

Page 46: ...st for this port Term Definition Format show spanning tree mst port summary mstid slot port all Mode Privileged EXEC User EXEC Term Definition MST Instance ID The MST instance associated with this por...

Page 47: ...rotocol Version parameter BPDU Guard Mode Enabled or disabled BPDU Filter Mode Enabled or disabled Configuration Name Identifier used to identify the configuration currently being used Configuration R...

Page 48: ...d VLAN identification number ID 1 is reserved for the default VLAN The VLAN range is 2 4094 vlan acceptframe This command sets the frame acceptance mode per interface For VLAN Only mode untagged frame...

Page 49: ...ering is disabled frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN vlan makestatic This...

Page 50: ...string Format vlan name 2 4094 name Mode VLAN Config Format no vlan name 2 4094 Mode VLAN Config Format vlan participation exclude include auto 1 4094 Mode Interface Config Participation Options Defin...

Page 51: ...iving interface are admitted and forwarded to ports that are members of that VLAN exclude The interface is never a member of this VLAN This is equivalent to registration forbidden auto The interface i...

Page 52: ...dentification number no vlan port tagging all This command configures the tagging behavior for all interfaces in a VLAN to disabled If tagging is disabled traffic is transmitted as untagged frames The...

Page 53: ...ip arp and ipx vlan protocol group remove This command removes the protocol based VLAN group that is identified by this groupid protocol group This command attaches a vlanid to the protocol based VLA...

Page 54: ...hysical interfaces to the protocol based VLAN identified by groupid You can associate multiple interfaces with a group but you can only associate each interface and protocol combination with one group...

Page 55: ...LAN to disabled If tagging is disabled traffic is transmitted as untagged frames The ID is a valid VLAN identification number vlan association subnet This command associates a VLAN to a specific IP su...

Page 56: ...N Config Format vlan association mac macaddr vlanid Mode VLAN database Format no vlan association mac macaddr Mode VLAN database Default transparent Format vlan database mode tagging Mode Privileged E...

Page 57: ...configured degree of participation of this port in this VLAN The permissible values are Include This port is always a member of this VLAN This is equivalent to registration fixed in the IEEE 802 1Q st...

Page 58: ...ort are discarded When set to Admit All untagged frames or priority tagged frames received on this port are accepted and assigned the value of the Port VLAN ID for this port With either option VLAN ta...

Page 59: ...to register with the switch for membership in VLANS by using GVMP or multicast groups by using GVMP set garp timer join This command sets the GVRP join time for one port Interface Config mode or all G...

Page 60: ...rt to the default and only has an effect when GVRP is enabled set garp timer leaveall This command sets how frequently Leave All PDUs are generated A Leave All PDU indicates that all registrations wil...

Page 61: ...ode This command enables GVRP on the system Default 1000 Format set garp timer leaveall 200 6000 Mode Interface Config Global Config Format no set garp timer leaveall Mode Interface Config Global Conf...

Page 62: ...rd slash Join Timer The interval between the transmission of GARP PDUs registering or re registering membership for an attribute Current attributes are a VLAN or multicast group There is an instance o...

Page 63: ...lity is disabled on that interface GARP functionality is subsequently re enabled if routing is disabled and port channel LAG membership is removed from an interface that has GARP enabled LeaveAll Time...

Page 64: ...20 centiseconds 0 2 seconds The finest granularity of specification is 1 centisecond 0 01 seconds Leave Timer The period of time to wait after receiving an unregister request for an attribute before...

Page 65: ...AN The range is 1 to the maximumVLAN ID supported by the platform Format show mac address table gmrp Mode Privileged EXEC Term Definition Mac Address A unicast MAC address for which the switch has for...

Page 66: ...will be returned dot1x max req This command sets the maximum number of times the authenticator state machine on this port will transmit an EAPOL EAP Request Identity frame before timing out the suppli...

Page 67: ...the specified port to the default value dot1x port control all This command sets the authentication mode to use on all ports Select force unauthorized to specify that the authenticator PAE uncondition...

Page 68: ...system auth control Use this command to enable the dot1x authentication support on the switch While disabled the dot1x configuration is retained and can be changed but is not activated no dot1x system...

Page 69: ...er used by the authenticator state machine on this port to define periods of time in which it will not attempt to acquire a supplicant The quiet period must be a value in the range 0 65535 tx period T...

Page 70: ...e values are authorized unauthorized Reauthentication Enabled Indicates whether re authentication is enabled on this port Key Transmission Enabled Indicates if the key is transmitted to the supplicant...

Page 71: ...he range of 1 and 65535 Reauthentication Enabled Indicates if reauthentication is enabled on this port Possible values are True or False Key Transmission Enabled Indicates if the key is transmitted to...

Page 72: ...of percentage of the interface speed for an interface When you use this command broadcast storm recovery mode is enabled on the interface and broadcast storm recovery is active If the rate of L2 broad...

Page 73: ...face speed for all interfaces If the mode is enabled broadcast storm recovery is active and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold the...

Page 74: ...traffic will be dropped Therefore the rate of multicast traffic will be limited to the configured threshold no storm control multicast level This command sets the multicast storm recovery threshold t...

Page 75: ...multicast storm recovery storm control unicast This command enables unicast storm recovery mode for an interface If the mode is enabled unicast storm recovery is active and if the rate of unknown L2...

Page 76: ...recovery storm control unicast all This command enables unicast storm recovery mode for all interfaces If the mode is enabled unicast storm recovery is active and if the rate of unknown L2 unicast des...

Page 77: ...y for all interfaces storm control flowcontrol This command enables 802 3x flow control for the switch and only applies to full duplex mode ports no storm control flowcontrol This command disables 802...

Page 78: ...cipate in the same protocols A static port channel interface does not require a partner system to be able to aggregate its member ports port channel This command configures a new port channel LAG and...

Page 79: ...clear the port channels see clear port channel on page 22 lacp admin key Use this command to configure the administrative value of the key for the port channel The value range of key is 0 to 65535 Fo...

Page 80: ...his command to configure the administrative value of the LACP actor admin key The valid range for key is 0 65535 Mode Interface Config Note This command is only applicable to port channel interfaces F...

Page 81: ...individual Use this command to set LACP actor admin state to individual Note This command is only applicable to physical interfaces Format no lacp actor admin key Mode Interface Config Default 0x07 F...

Page 82: ...mand to set the LACP actor admin state to active Format no lacp actor admin state individual Mode Interface Config Format lacp actor admin state longtimeout Mode Interface Config Note This command is...

Page 83: ...CP Actor s SystemID The range for priority is 0 to 255 no lacp actor system priority Use this command to configure the priority value associated with the Actor s SystemID Default 0x80 Format lacp acto...

Page 84: ...ive value of actor state for the protocol partner lacp partner admin state individual Use this command to set LACP partner admin state to individual Default 0x0 Format lacp partner admin key key Mode...

Page 85: ...ive Mode Interface Config Note This command is only applicable to physical interfaces Format no lacp partner admin state individual Mode Interface Config Format lacp partner admin state longtimeout Mo...

Page 86: ...lacp partner port priority Use this command to configure the default LACP partner port priority Format no lacp partner admin state passive Mode Interface Config Default 0x80 Format lacp partner port...

Page 87: ...e the default administrative value of priority associated with the Partner s System ID port channel static This command enables the static mode on a port channel LAG interface By default the static mo...

Page 88: ...mand disables Link Aggregation Control Protocol LACP on a port port lacpmode all This command enables Link Aggregation Control Protocol LACP on all ports no port lacpmode all This command disables Lin...

Page 89: ...al Config no port lacptimeout This command sets the timeout for all physical interfaces of a particular device type actor or partner back to their default values port channel adminmode This command en...

Page 90: ...l with the same administrative mode setting port channel name This command defines a name for the port channel LAG The interface is a logical slot port for a configured port channel and name is an alp...

Page 91: ...Admin Key The administrative value of the Key Port Priority The priority value assigned to the Aggregation Port Admin State The administrative values of the actor state as transmitted by the Actor in...

Page 92: ...Valid slot and port number separated by a forward slash Port Channel Name The name of this port channel LAG You may enter any string of up to 15 alphanumeric characters Link State Indicates whether th...

Page 93: ...the destination monitored port and all VLANs Once the port is removed from the VLAN you must manually add the port to any desired VLANs Use the source interface slot port parameter or destination int...

Page 94: ...has IGMP Snooping enabled The IGMP application supports the following activities Validation of the IP header checksum as well as the IGMP header checksum and Mode Global Config Note The session id pa...

Page 95: ...LAG IGMP Snooping functionality is disabled on that interface IGMP Snooping functionality is re enabled if you disable routing or remove port channel LAG membership from an interface that has IGMP Sno...

Page 96: ...his prevents the inadvertent dropping of the other hosts that were connected to the same layer 2 LAN port but were still interested in receiving multicast traffic directed to that group Also fast leav...

Page 97: ...terface or VLAN The Maximum Response time is the amount of time in seconds that a switch will wait after sending a query on an interface because it did not receive a report for a particular group in t...

Page 98: ...ime This command sets the Multicast Router Present Expiration time to 0 The time is set for the system on a particular interface or a VLAN set igmp mrouter This command configures the VLAN ID vlanId t...

Page 99: ...rguments slot port or vlan_id are not used the command displays the following information Mode Interface Config Format no set igmp mrouter vlan_id Mode Interface Config Default disabled Format set igm...

Page 100: ...nfigured Term Definition VLAN ID The VLAN ID IGMP Snooping Admin Mode Indicates whether IGMP Snooping is active on the VLAN Fast Leave Mode Indicates whether IGMP Snooping Fast leave is active on the...

Page 101: ...s If a VLAN has IGMP Snooping Querier enabled and IGMP Snooping is operationally disabled on it IGMP Snooping Querier functionality is disabled on that VLAN IGMP Snooping functionality is re enabled i...

Page 102: ...timer expiry Use this command to set the IGMP Querier timer expiration period It is the time period that the switch remains in Non Querier mode once it has discovered that there is a Multicast Querie...

Page 103: ...s source address is better less than the Snooping Querier s address it stops sending periodic queries If the Snooping Querier wins the election then it will continue sending periodic queries no set i...

Page 104: ...hether iGMP Snooping Querier is active on the VLAN VLAN Operational State Indicates whether IGMP Snooping Querier is in Querier or Non Querier state When the switch is in Querier state it will send ou...

Page 105: ...g no port security This command disables port locking for one Interface Config or all Global Config ports port security max dynamic This command sets the maximum number of dynamically locked MAC addre...

Page 106: ...ort security mac address This command removes a MAC address from the list of statically locked MAC addresses port security mac address move This command converts dynamically locked MAC addresses to st...

Page 107: ...urity slot port all Mode Privileged EXEC Term Definition Admin Mode Port Locking mode for the entire system This field displays if you do not supply any parameters Term Definition Admin Mode Port Lock...

Page 108: ...his information lldp transmit Use this command to enable the LLDP advertise capability no lldp transmit Use this command to return the local data transmission capability to the default lldp receive Us...

Page 109: ...mmand to specify which optional type length values TLVs in the 802 1AB basic management set are transmitted in the LLDPDUs Use sys name to transmit the system name TLV To configure the system name see...

Page 110: ...command to cancel inclusion of the management information in LLDPDUs lldp notification Use this command to enable remote data change notifications no lldp notification Use this command to disable not...

Page 111: ...le including MED related information show lldp Use this command to display a summary of the current LLDP configuration Default 5 Format lldp notification interval interval Mode Global Config Format no...

Page 112: ...the interface sends optional TLVs in the LLDPDUs The TLV codes can be 0 Port Description 1 System Name 2 System Description or 3 System Capability Mgmt Shows whether the interface transmits system ma...

Page 113: ...on Format show lldp remote device slot port all Mode Privileged EXEC Term Definition Local Interface The interface that received the LLDPDU from the remote device Chassis ID The ID of the remote devic...

Page 114: ...lid information Term Definition Format show lldp local device slot port all Mode Privileged EXEC Term Definition Interface The interface in a slot port format Port ID The port ID associated with this...

Page 115: ...the ports to send the topology change notification no ldp med confignotification Use this command to disable notifications System Capabilities Supported Indicates the primary function s of the device...

Page 116: ...are included Format lldp med transmit tlv capabilities ex pd ex pse inventory location network policy Mode Interface Config Term Definition capabilities Transmit the LLDP capabilities TLV ex pd Transm...

Page 117: ...rtrepeatcount count Mode Global Config Format no lldp med faststartrepeatcount Mode Global Config Default By default the capabilities and network policy TLVs are included Format lldp med transmit tlv...

Page 118: ...Disabled Disabled 0 1 1 0 2 Up Disabled Disabled Disabled 0 1 1 0 3 Down Disabled Disabled Disabled 0 1 1 0 4 Down Disabled Disabled Disabled 0 1 1 0 5 Down Disabled Disabled Disabled 0 1 1 0 6 Down D...

Page 119: ...command FL SWITCH GHS Firmware Routing show lldp med local device detail 1 0 8 LLDP MED Local Device Detail Interface 1 0 8 Network Policies Media Policy Application Type voice Vlan ID 10 Priority 5 D...

Page 120: ...mple The following shows example CLI display output for the command FL SWITCH GHS Firmware Routing show lldp med remote device all LLDP MED Remote Device Summary Local Interface Device Class 1 0 8 Cla...

Page 121: ...DSCP 1 Unknown False Tagged True Media Policy Application Type streamingvideo Vlan ID 20 Priority 1 DSCP 2 Unknown False Tagged True Inventory Hardware Rev xxx xxx xxx Firmware Rev xxx xxx xxx Softwa...

Page 122: ...IP address Destination IP address SIP DIP Denial of Service protection If the mode is enabled Denial of Service prevention is active for this type of attack If packets ingress with SIP DIP the packets...

Page 123: ...ntrol tcpflag This command enables TCP Flag Denial of Service protections If the mode is enabled Denial of Service prevention is active for this type of attacks If packets ingress having TCP Flag SYN...

Page 124: ...of attack If ICMP Echo Request PING packets ingress having a size greater than the configured value the packets will be dropped if the mode is enabled no dos control icmp This command disables Maximu...

Page 125: ...PDIP Mode May be enabled or disabled The factory default is disabled First Fragment Mode May be enabled or disabled The factory default is disabled Min TCP Hdr Size 0 255 The factory default is 20 TCP...

Page 126: ...mac address table multicast macaddr Mode Privileged EXEC Term Definition MAC Address A multicast MAC address for which the switch has forwarding and or filtering information The format is two digit h...

Page 127: ...stMFDBEntries Ever Used The largest number of entries that have been present in the Multicast Forwarding Database table This value is also known as the MFDB high water mark Current Entries The current...

Page 128: ...FL SWITCH GHS CLI 2 100 PHOENIX CONTACT 8039_en_01 RSPSupply 1 888 532 2706 www RSPSupply com http www RSPSupply com p 14161 Phoenix Contact 2700271 FL SWITCH GHS 4G 12 Modular Ethernet Switch aspx...

Page 129: ...his command resets the version of IGMP to the default value ip igmp last member query count This command sets the number of Group Specific Queries sent before the router assumes that there are no loca...

Page 130: ...no ip igmp query interval This command resets the query interval for the specified interface to the default value This is the frequency at which IGMP Host Query packets are transmitted on this interf...

Page 131: ...is expected to have a lot of loss the Robustness variable may be increased for the interface The range for robustness is 1 to 255 no ip igmp robustness This command sets the robustness value to defau...

Page 132: ...is specified this command displays the registered multicast groups on the interface in detail Format no ip igmp startup query count Mode Interface Config Default 31 Format ip igmp startup query interv...

Page 133: ...ied multicast group address on this interface Expiry Time The amount of time remaining to remove this entry before it is aged out Version1 Host Timer The time remaining until the local router assumes...

Page 134: ...ileged EXEC Term Definition Interface Valid unit slot and port number separated by forward slashes Interface IP The IP address of the interface participating in the multicast group State The interface...

Page 135: ...interface stats slot port Modes Privileged EXEC User EXEC Term Definition Querier Status The status of the IGMP router whether it is running in Querier mode or Non Querier mode Querier IP Address The...

Page 136: ...at no ip igmp proxy unsolicit rprt interval Mode Interface Config Format ip igmp proxy reset status Mode Interface Config Format show ip igmp proxy Modes Privileged EXEC User EXEC Term Definition Inte...

Page 137: ...he number of times the IGMP Proxy has been stopped and started Term Definition Format show ip igmp proxy interface Modes Privileged EXEC User EXEC Term Definition Interface Index The slot port of the...

Page 138: ...The interface number of the IGMP Proxy Group Address The IP address of the multicast group Last Reporter The IP address of host that last sent a membership report for the current group on the network...

Page 139: ...Mode Privileged EXEC Default disable Format interface Set Static_mcast add_port mac_addr Mode Privileged EXEC Default disable Format interface Set Static_mcast rem_port mac_addr Mode Privileged EXEC D...

Page 140: ...FL SWITCH GHS CLI 3 12 PHOENIX CONTACT 8039_en_01 RSPSupply 1 888 532 2706 www RSPSupply com http www RSPSupply com p 14161 Phoenix Contact 2700271 FL SWITCH GHS 4G 12 Modular Ethernet Switch aspx...

Page 141: ...ing This command maps an IP DSCP value to an internal traffic class The ipdscp value is specified as either an integer from 0 to 63 or symbolically through one of the following keywords af11 af12 af13...

Page 142: ...nning config command because Dot1p is the default no classofservice trust This command sets the interface mode to the default value Format classofservice ip dscp mapping ipdscp trafficclass Mode Globa...

Page 143: ...es the default weighted scheduler mode for each specified queue traffic shape This command specifies the maximum transmission bandwidth limit for the interface as a whole Also known as rate shaping tr...

Page 144: ...face The slot port parameter is optional and is only valid on platforms that support independent per port class of service mappings If specified the IP Precedence mapping table of the interface is dis...

Page 145: ...ass of service mappings If specified the class of service queue configuration of the interface is displayed If omitted the most recent global configuration settings are displayed Format show classofse...

Page 146: ...AC access list If a MAC ACL by this name already exists this command enters Mac Access List config mode to allow updating the existing MAC ACL Minimum Bandwidth The minimum transmission bandwidth guar...

Page 147: ...o indicate a match on any value in that field The remaining command parameters are all optional but the most frequently used parameters appear in the same relative order as shown in the command format...

Page 148: ...t parameter allows the traffic matching this rule to be forwarded to the specified slot port The assign queue and redirect parameters are only valid for a permit rule Table 9 Ethertype Keyword and 4 d...

Page 149: ...ereas the Global Config mode setting is applied to all interfaces The VLAN keyword is only valid in the Global Config mode The Interface Config mode command is only available on platforms that support...

Page 150: ...rd mask has 0 s in a bit position that must be checked A 1 in a bit position of the ACL mask indicates the corresponding bit can be ignored access list This command creates an IP Access Control List A...

Page 151: ...P address and source netmask for match condition of the IP ACL rule eq portkey 0 65535 Specifies the source layer 4 port match condition for the IP ACL rule You can use the port number which ranges fr...

Page 152: ...fied for this command a sequence number that is one greater than the highest sequence number currently in use for this interface and direction is used no ip access group This command removes a specifi...

Page 153: ...ddress for this rule Source IP Mask The source IP Mask for this rule Source L4 Port Keyword The source port for this rule Destination IP Address The destination IP address for this rule Destination IP...

Page 154: ...er precedence order If a sequence number is already in use for this interface and direction the specified access list replaces the currently attached access list using that sequence number If the sequ...

Page 155: ...age is marked as the backup image for subsequent reboots show bootvar This command displays the version information and the activation status for the current active and backup images The command also...

Page 156: ...rk or service ports ARP entries associated with routing interfaces are not listed show eventlog This command displays the event log which contains error messages from the system The event log is not c...

Page 157: ...ivileged EXEC Note The show version command will replace the show hardware command in future releases of the software Format show version Mode Privileged EXEC Term Definition Switch Description Text u...

Page 158: ...te that this does not include multicast packets Packets Transmitted Without Error The total number of packets transmitted out of the interface Transmit Packets Errors The number of outbound packets th...

Page 159: ...rwarding Database Address Table entries now active on the switch including learned and static entries VLAN Entries Currently In Use The number of VLAN entries presently occupying the VLAN table Time S...

Page 160: ...9_en_01 When you specify a value for slot port the command displays the following information RSPSupply 1 888 532 2706 www RSPSupply com http www RSPSupply com p 14161 Phoenix Contact 2700271 FL SWITC...

Page 161: ...of packets including bad packets received and transmitted that were 64 octets in length excluding framing bits but including FCS octets Packets RX and TX 65 127 Octets The total number of packets incl...

Page 162: ...ts inclusive but had a bad Frame Check Sequence FCS with a non integral number of octets Rx FCS Errors The total number of packets received that had a length excluding framing bits but including FCS o...

Page 163: ...rt to its segment Unicast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to a subnetwork unicast address including those that were discarded or no...

Page 164: ...received by this authenticator EAPOL Frames Transmitted The number of EAPOL frames of any type that have been transmitted by this authenticator Time Since Counters Last Cleared The elapsed time in da...

Page 165: ...mber of outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher layer protocol A possible reason for discarding a pack...

Page 166: ...rned The value of the corresponding instance was learned by observing the source MAC addresses of incoming traffic and is currently in use Management The value of the corresponding instance system MAC...

Page 167: ...splay the User Password even if you set one different from the default Note If you issue the show running config command from a serial connection access to the switch through remote connections such a...

Page 168: ...5 48 lines The command terminal length 0 disables pagination and as a result the output of the show running config command is displayed immediately no terminal length Use this command to set the term...

Page 169: ...ng when the log file reaches full capacity Otherwise when the log file reaches full capacity logging stops no logging buffered wrap This command disables wrapping of in memory logging and configures l...

Page 170: ...dr hostname is the IP address of the logging host The addresstype indicates the type of address ipv4 or ipv6 or dns being passed The port value is a port number from 1 to 65535 You can specify the sev...

Page 171: ...portid parameter is an integer with a range of 1 65535 no logging syslog This command disables syslog logging show logging This command displays logging configuration information Format logging host r...

Page 172: ...sages Received Number of messages received by the log process This includes messages that are dropped or ignored Log Messages Dropped Number of messages that could not be processed due to error or lac...

Page 173: ...n the local host from which syslog messages are sent Host Status The state of logging to configured syslog hosts If the status is disable no logging occurs Term Definition Format show logging traplogs...

Page 174: ...initTtl maxTtl maxTtl maxFail maxFail interval interval count count port port size size Mode Privileged EXEC Parameter Description ipaddr hostname The ipaddr value should be a valid IP address The ho...

Page 175: ...t should proceed When you enter y you automatically reset the current configuration on the switch to the default values It does not reset the switch clear counters This command clears the statistics f...

Page 176: ...er the enable password between devices without having to know the password The password parameter must be exactly 128 hexidecimal characters logout This command closes the current telnet connection or...

Page 177: ...msec min avg max 274 279 276 Example ping failure In Case of Unreachable Destination FL SWITCH GHS Firmware Routing ping 192 168 254 222 count 3 Format logout Modes Privileged EXEC User EXEC Default T...

Page 178: ...g it off Reset means that all network connections are terminated and the boot code executes The switch uses the stored configuration to initialize the switch You are prompted to confirm that the reset...

Page 179: ...me url Copies a specified configuration script file to a server nvram startup config nvram backup config Copies the startup configuration to the backup configuration nvram startup config url Copies th...

Page 180: ...nsfer Protocol HTTP Commands on page 15 url nvram sslpem server Downloads an HTTP secure server certificate url nvram startup config Downloads the startup configuration file to the system url nvram sy...

Page 181: ...This command resets the poll interval for SNTP unicast clients to its default value sntp unicast client poll timeout This command will set the poll timeout for SNTP unicast clients in seconds to a val...

Page 182: ...ommand resets the poll interval for SNTP multicast clients to its default value sntp server This command configures an SNTP server a maximum of three The optional priority can be a value of 1 3 the ve...

Page 183: ...Status Status of the last SNTP request in unicast mode or unsolicited message in broadcast mode Broadcast Count Current number of unsolicited broadcast messages that have been received and processed b...

Page 184: ...igured Term Definition IP Address Hostname IP address or hostname of configured SNTP Server Address Type Address Type of configured SNTP server Priority IP priority type of the configured server Versi...

Page 185: ...bootp parameter the switch periodically sends requests to a BootP server until a response is received If you use the dhcp parameter the switch periodically sends requests to a DHCP server until a resp...

Page 186: ...s apply Bit 6 of byte 0 called the U L bit indicates whether the address is universally administered b 0 or locally administered b 1 Bit 7 of byte 0 called the I G bit indicates whether the destinatio...

Page 187: ...y with the switch via any of the switch s front panel ports The configuration parameters associated with the switch s network interface do not affect the configuration of the front panel ports through...

Page 188: ...0 to a 0 i e byte 0 should have the following mask xxxx xx10 The MAC address used by this bridge when it must be referred to in a unique fashion It is recommended that this be the numerically smalles...

Page 189: ...to the console port of the switch Mode Privileged EXEC Term Definition IP Address The IP address of the interface The factory default value is 0 0 0 0 Subnet Mask The IP subnet mask for this interfac...

Page 190: ...baudrate This command sets the communication rate of the terminal interface serial timeout This command specifies the maximum connect time in minutes without console activity A value of 0 indicates th...

Page 191: ...inactivity on a Serial port connection after which the Switch will close the connection Any numeric value between 0 and 160 is allowed the factory default is 5 A value of 0 disables the timeout Baud...

Page 192: ...ession no transport input telnet Use this command to prevent new Telnet sessions from being established transport output telnet This command regulates new outbound Telnet connections If enabled new ou...

Page 193: ...lt value session timeout This command sets the Telnet session timeout value The timeout value unit of time is minutes no session timeout This command sets the Telnet session timeout value to the defau...

Page 194: ...This command sets the Telnet connection session timeout value to the default Default 5 Format telnetcon maxsessions 0 5 Mode Privileged EXEC Format no telnetcon maxsessions Mode Privileged EXEC Note W...

Page 195: ...mum Number of Outbound Telnet Sessions The number of simultaneous outbound Telnet connections allowed Allow New Outbound Telnet Sessions Indicates whether outbound Telnet sessions will be allowed Form...

Page 196: ...ure shell server sshcon maxsessions This command specifies the maximum number of SSH connection sessions that can be established A value of 0 indicates that no ssh connection can be established The ra...

Page 197: ...ons does not become effective until the session is re accessed Also any keystroke activates the new timeout duration show ip ssh This command displays the ssh settings Format no sshcon maxsessions Mod...

Page 198: ...ce crypto key generate rsa Use this command to generate an RSA key pair for SSH The new key files will overwrite any existing generated or downloaded RSA key files no crypto key generate rsa Use this...

Page 199: ...ugh the Web interface When access is enabled the user can login to the switch from the Web interface When access is disabled the user cannot login to the switch s Web server Disabling the Web interfac...

Page 200: ...timeout expires the user will be forced to re authenticate This timer begins on initiation of the web session and is unaffected by the activity level of the connection no ip http session hard timeout...

Page 201: ...resets the soft timeout for un secure HTTP sessions to the default value ip http secure session hard timeout This command configures the hard timeout for secure HTTP sessions in hours When this timeo...

Page 202: ...n of the Web session and is re started with each access to the switch The secure session soft timeout can not be set to zero infinite no ip http secure session soft timeout This command restores the s...

Page 203: ...Unsecure The unsecure HTTP server administrative mode Java Mode The java applet administrative mode which applies to both secure and un secure web connections Maximum Allowable HTTP Sessions The numbe...

Page 204: ...tp sessions in minutes Certificate Present Indicates whether the secure server certificate files are present on the device Certificate Generation in Progress Indicates whether certificate generation i...

Page 205: ...is authorized for authentication or encryption is enabled the password length must be at least eight alphanumeric characters The password is case sensitive When you change a password a prompt asks fo...

Page 206: ...values are readonly or readwrite The username is the login user name for which the specified access mode applies The default is readwrite for the admin user and readonly for all other users You must...

Page 207: ...sers snmpv3 encryption This command specifies the encryption protocol used for the specified user The valid encryption protocols are des or none If you select des you can specify the required key on t...

Page 208: ...fault the admin user has Read Write access and the guest has Read Only access There can only be one Read Write user and up to five Read Only users SNMPv3 Access Mode The SNMPv3 Access Mode If the valu...

Page 209: ...be stored for each user account When a local user changes his or her password the user will not be able to reuse any password stored in password history This ensures that users don t reuse their passw...

Page 210: ...ed out from further switch access Only a user with read write access can re activate a locked user account Password lockout does not apply to logins from the serial console The valid range is 1 5 The...

Page 211: ...artup config Upload copy nvram startup config url The memory card can be cleared with the command clear memcard Some Card information is displayed by using show memcard which results in the following...

Page 212: ...Relay Agent no service dhcp relay agent disable DHCP Relay Agent ip dhcp relay agent server ipaddr Configure DHCP server IP address ip dhcp relay agent remote id ip address Set the DHCP remote ID opti...

Page 213: ...enhanced Commands no spanning tree large tree support Format no spanning tree large tree support Mode Global Config no spanning tree fast ring detection Format no spanning tree fast ring detection Mod...

Page 214: ...st parameter contact_1 or contact_2 for a special mode where special modes depend on the 1st parameter global Alarm contact is enabled globally i e all it is armed for any event that might be configur...

Page 215: ...characters snmp server community This command adds and names a new SNMP community A community name is a name associated with the switch and with a set of SNMP managers that manage it with a specified...

Page 216: ...from which SNMP clients may use that community to access the device A value of 255 255 255 255 will allow access from only one station and will use that machine s IP address for the client IP address...

Page 217: ...This command restricts access to switch information The access mode is read write also called private snmp server enable traps violation This command enables the sending of new violation traps design...

Page 218: ...is enabled See snmp trap link status on page 37 no snmp server enable traps linkmode This command disables Link Up Down traps for the entire switch Format no snmp server enable traps violation Mode In...

Page 219: ...MP trap address can be set using both an IPv4 address format as well as an IPv6 global address format Example The following shows an example of the CLI command admin snmptrap mytrap ip6addr 3099 2 Def...

Page 220: ...abled trap receivers are inactive not able to receive traps Default snmpv2 Format snmptrap name ipaddr snmpversion snmpversion Mode Global Config Format no snmptrap name ipaddr Mode Global Config Note...

Page 221: ...is valid only when the Link Up Down Flag is enabled See snmp server enable traps linkmode on page 34 Format snmp trap link status Mode Interface Config Note This command is valid only when the Link U...

Page 222: ...from which this device will accept SNMP packets with the associated community The requesting entity s IP address is ANDed with the Subnet Mask before being compared to the IP address Note If the Subne...

Page 223: ...the same time either through Telnet or the serial port Spanning Tree Flag Can be enabled or disabled The factory default is enabled Indicates whether spanning tree traps are sent Broadcast Storm Flag...

Page 224: ...radius accounting mode This command is used to set the RADIUS accounting function to the default value i e the RADIUS accounting function is disabled radius server attribute 4 Use this command to set...

Page 225: ...nfiguration The IP address or hostname you specify must match that of a previously configured accounting server If you use the optional port parameter the command configures the UDP port to use when c...

Page 226: ...to enter the key in encrypted format enter the key along with the encrypted keyword In the show running config command s display these secret keys are displayed in encrypted format You cannot show the...

Page 227: ...et is re transmitted when no response is received from the RADIUS server The retries value is an integer in the range of 1 to 15 no radius server retransmit This command sets the maximum number of tim...

Page 228: ...use for authentication Number of configured servers The number of configured authentication servers including DNS configured server Max number of retransmits The configured value of the maximum numbe...

Page 229: ...ng Request that matched it from the RADIUS accounting server Requests The number of RADIUS Accounting Request packets sent to this accounting server This number does not include retransmissions Retran...

Page 230: ...ets sent to this server This number does not include retransmissions Access Retransmission The number of RADIUS Access Request packets retransmitted to this RADIUS authentication server Access Accepts...

Page 231: ...ript file for displaying management access show telnet Displays the information about remote connections Display information about direct connections show serial End of the script file script apply Th...

Page 232: ...e option is intended to be used as a tool for script development Validation identifies potential problems It might not identify all problems with a given script on any given device Format script list...

Page 233: ...tree forward time 2 9 spanning tree hello time 2 9 spanning tree max age 2 10 spanning tree max hops 2 10 spanning tree mst 2 11 spanning tree mst instance 2 12 spanning tree mst priority 2 12 spanni...

Page 234: ...show vlan brief 2 29 show vlan port 2 29 show vlan association subnet 2 30 show vlan association mac 2 30 vlan port priority all 2 31 vlan priority 2 31 set garp timer join 2 31 set garp timer leave 2...

Page 235: ...ctor max delay 2 52 Note lacp actor admin 2 52 Note lacp actor admin key 2 52 Note lacp actor admin state 2 53 Note lacp actor admin state individual 2 53 Note lacp actor admin state longtimeout 2 54...

Page 236: ...ter interface 2 72 show igmpsnooping mrouter vlan 2 72 show mac address table igmpsnooping 2 73 set igmp querier 2 73 set igmp querier query interval 2 74 set igmp querier timer expiry 2 74 set igmp q...

Page 237: ...etail 2 92 dos control sipdip 2 94 dos control firstfrag 2 94 dos control tcpfrag 2 95 dos control tcpflag 2 95 dos control l4port 2 96 Note dos control icmp 2 96 Note show dos control 2 97 Note bridg...

Page 238: ...cedence mapping 4 4 show classofservice ip dscp mapping 4 5 show classofservice trust 4 5 show interfaces cos queue 4 5 mac access list extended 4 6 Note mac access list extended rename 4 7 Note deny...

Page 239: ...an 5 22 Example enable passwd 5 22 Example enable passwd encrypted password 5 22 Example logout 5 22 ping 5 23 Example quit 5 24 reload 5 24 copy 5 24 Table 11 sntp broadcast client poll interval 5 26...

Page 240: ...maxsessions 6 12 Note sshcon timeout 6 13 Note show ip ssh 6 13 Note crypto certificate generate 6 14 Note crypto key generate rsa 6 14 Note crypto key generate dsa 6 15 Note ip http server 6 15 Note...

Page 241: ...P Relay Agent in Interface Config Mode 6 28 MRP Commands 6 29 Spanning Tree enhanced Commands 6 29 Profinet Commands 6 30 Digital Input CLI commands 6 30 Link Monitoring CLI commands 6 30 Alarm contac...

Page 242: ...Example radius server msgauth 6 42 Example radius server primary 6 43 Example radius server retransmit 6 43 Example radius server timeout 6 43 Example show radius 6 44 Example show radius accounting...

Reviews:

No comments