Enterasys Matrix 2G4072-52 Скачать руководство пользователя страница 1214

Страница: 1214 / 1422

Process Overview: Security Configuration

RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment

14-4

Matrix DFE-Platinum and Diamond Series Configuration Guide

14.2 PROCESS OVERVIEW: SECURITY CONFIGURATION

Use the following steps as a guide to configuring security methods on the device:

Setting the Authentication Login Method (

Section 14.3.1

)

Configuring RADIUS (

Section 14.3.2

)

Configuring RFC 3580 Support (

Section 14.3.4

)

Configuring (

Section 14.3.4

)

Configuring 802.1X Authentication (

Section 14.3.5

)

Configuring Port Web Authentication (PWA) (

Section 14.3.6

)

Configuring MAC Authentication (

Section 14.3.7

)

Configuring Convergence End Point (CEP) (

Section 14.3.8

)

Configuring MAC Locking (

Section 14.3.9

)

10.

Configuring Multiple Authentication (

Section 14.3.10

)

11.

Configuring Secure Shell (SSH) (

Section 14.3.11

)

12.

Configuring Access Lists (

Section 14.3.12

)

13.

Configuring Policy-Based Routing (

Section 14.3.13

)

14.

Configuring Denial of Service (DoS) Prevention (

Section 14.3.14

)

15.

Configuring Flow Setup Throttling (FST) (

Section 14.3.15

)

«
...
1212
1213
1214
1215
1216
...
»

Содержание Matrix 2G4072-52

Страница 1: ...Enterasys Matrix DFE Platinum and Diamond Series Configuration Guide Firmware Version 5 41 xx P N 9033800 14 Rev 0C...

Страница 2: ......

Страница 3: ...ERASYS NETWORKS HAS BEEN ADVISED OF KNEW OF OR SHOULD HAVE KNOWN OF THE POSSIBILITY OF SUCH DAMAGES Enterasys Networks Inc 50 Minuteman Road Andover MA 01810 2008 Enterasys Networks Inc All rights res...

Страница 4: ...OVISIONS THE LICENSE THE DISCLAIMER OF WARRANTY AND THE LIMITATION OF LIABILITY IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT OR ARE NOT AUTHORIZED TO ENTER INTO THIS AGREEMENT ENTERASYS IS UNWIL...

Страница 5: ...l security controls as identified on the U S Commerce Control List or iii if the direct product of the technology is a complete plant or any major component of a plant export to Country Groups D 1 or...

Страница 6: ...dge and agree that any breach of Sections 2 4 or 9 of this Agreement by You may cause Enterasys irreparable damage for which recovery of money damages would be inadequate and that Enterasys may be ent...

Страница 7: ...tions 2 9 2 1 3 CLI Command Modes 2 9 2 1 4 Using WebView 2 10 2 1 5 Process Overview CLI Startup and General Configuration 2 10 2 1 6 Starting and Navigating the Command Line Interface 2 12 2 1 6 1 U...

Страница 8: ...ode 2 160 2 3 1 Pre Routing Configuration Tasks 2 160 2 3 2 Reviewing and Configuring Routing Modules 2 162 2 3 3 Enabling Router Configuration Modes 2 167 3 CONFIGURING DISCOVERY PROTOCOLS 3 1 Overvi...

Страница 9: ...tion 5 5 5 3 SNMP Configuration Command Set 5 5 5 3 1 Reviewing SNMP Statistics 5 5 5 3 2 Configuring SNMP Users Groups and Communities 5 12 5 3 3 Configuring SNMP Access Rights 5 26 5 3 4 Configuring...

Страница 10: ...sification Configuration Command Set 8 2 8 3 1 Configuring Policy Profiles 8 2 8 3 2 Assigning Classification Rules to Policy Profiles 8 23 8 3 3 Configuring Policy Class of Service CoS 8 57 8 3 4 Set...

Страница 11: ...ration Command Set 12 2 12 2 1 Configuring Routing Interface Settings 12 2 12 2 2 Managing Router Configuration Files 12 12 12 2 3 Performing a Basic Router Configuration 12 17 12 2 4 Reviewing and Co...

Страница 12: ...ring RFC 3580 14 20 14 3 4 Configuring TACACS 14 24 14 3 5 Configuring 802 1X Authentication 14 39 14 3 6 Configuring Port Web Authentication PWA 14 51 14 3 7 Configuring MAC Authentication 14 78 14 3...

Страница 13: ...p Screen 2 14 2 3 Performing a Keyword Lookup 2 15 2 4 Performing a Partial Keyword Lookup 2 15 2 5 Scrolling Screen Output 2 16 2 6 Abbreviating a Command 2 17 2 7 Completing a Partial Command 2 17 2...

Страница 14: ...Figures xii Matrix DFE Platinum and Diamond Series Configuration Guide...

Страница 15: ...ldp port local info Output Details 3 34 3 5 show lldp port remote info Output Display 3 39 4 1 show port status Output Details 4 27 4 2 show port counters Output Details 4 30 4 3 show port advertise O...

Страница 16: ...Values for Logging Applications 11 17 11 4 show netstat Output Details 11 31 11 5 RMON Monitoring Group Functions and Commands 11 44 11 6 show rmon stats Output Details 11 49 11 7 show rmon alarm Out...

Страница 17: ...13 64 13 4 show ip ospf interface Output Details 13 67 13 5 show ip ospf neighbor Output Details 13 70 13 6 show ip ospf virtual links Output Details 13 71 14 1 show radius Output Details 14 11 14 2...

Страница 18: ...Tables xvi Matrix DFE Platinum and Diamond Series Configuration Guide...

Страница 19: ...perform network management and device configuration operations Establish and manage Virtual Local Area Networks VLANs Manage static and dynamically assigned user policies Establish and manage priority...

Страница 20: ...ex mode auto negotiation flow control port mirroring link aggegation and broadcast suppression Chapter 5 SNMP Configuration describes how to configure SNMP users and user groups access rights target a...

Страница 21: ...d node aliases Chapter 12 IP Configuration describes how to enable IP routing for router mode operation how to configure IP interface settings how to review and configure the routing ARP table how to...

Страница 22: ...Decimal Notation DDN e g 000 000 000 000 in an IP address x A lowercase italic x indicates the generic use of a letter e g xxx indicates any combination of three alphabetic characters n A lowercase i...

Страница 23: ...URES Matrix Series devices support business driven networking with New Enterasys advanced Distributed Forwarding Engine DFE architecture allowing for single IP address management of an entire chassis...

Страница 24: ...de Control the number of received broadcasts that are switched to the other interfaces Set flow control on a port by port basis Set port configurations and port based VLANs Configure ports to prioriti...

Страница 25: ...document contact Enterasys Networks using one of the following methods Before calling Enterasys Networks have the following information ready Your Enterasys Networks service contract number A descript...

Страница 26: ...escription of your network environment for example layout cable type Network load and frame size at the time of trouble if known The device history for example have you returned the device before is t...

Страница 27: ...r work environment and how to prepare to run the device in router mode 2 1 1 Factory Default Settings The following tables list factory default device settings available on the Matrix Series device Ta...

Страница 28: ...query interval is set to 125seconds and response time is set to 100 tenths of a second IP mask and gateway Subnet mask set to 255 0 0 0 default gateway set to 0 0 0 0 IP routes No static routes confi...

Страница 29: ...o 6 significant conditions for all applications MAC aging time Set to 300 seconds MAC locking Disabled globally and on all ports Management Authentication Notification Enabled MTU discovery protocol E...

Страница 30: ...eed Set to 10 Mbps except for 1000BASE X which is set to 1000 Mbps and 100BASE FX which is set to 100 Mbps Port trap All ports are enabled to send link traps Priority classification Classification rul...

Страница 31: ...ning Tree point to point Set to auto for all Spanning Tree ports Spanning Tree port priority All ports with bridge priority are set to 128 medium priority Spanning Tree priority Bridge priority is set...

Страница 32: ...to 9600 baud System contact Set to empty string System location Set to empty string System name Set to empty string Terminal CLI display set to 80 columns and 24 rows Timeout Set to 15 minutes User na...

Страница 33: ...gured Area range OSPF None configured ARP table No permanent entries configured ARP timeout Set to 14 400 seconds Authentication key RIP and OSPF None configured Authentication mode RIP and OSPF None...

Страница 34: ...ss preference is set to 0 MD5 authentication OSPF Disabled with no password set MTU size Set to 1500 bytes on all interfaces OSPF Disabled OSPF cost Set to 10 for all interfaces OSPF network None conf...

Страница 35: ...1 provides an example Figure 2 1 Sample CLI Default Description 2 1 3 CLI Command Modes Each command description in this guide includes a section entitled Command Mode which states whether the comman...

Страница 36: ...ed in the following section Displaying WebView status To display WebView status enter show webview at the CLI command prompt This example shows that WebView is enabled on TCP port 80 the default port...

Страница 37: ...7 Configuring Power over Ethernet PoE Section 2 2 5 8 Downloading a new firmware image Section 2 2 6 9 Reviewing and selecting the boot firmware image Section 2 2 7 10 Starting and configuring Telnet...

Страница 38: ...ging in with a Default User Account If this is the first time your are logging in to the Matrix Series device or if the default user accounts have not been administratively changed proceed as follows...

Страница 39: ...address 2 Enter login user name and password information in one of the following ways If the device s default login and password settings have not been changed follow the steps listed in Section 2 1 6...

Страница 40: ...a specific command will display usage and syntax information for that command This example shows how to display context sensitive help for the set length command login admin Password M A T R I X DFE...

Страница 41: ...s function for all commands beginning with co Figure 2 4 Performing a Partial Keyword Lookup Matrix rw show snmp access SNMP VACM access configuration community SNMP v1 v2c community name configuratio...

Страница 42: ...ss ENTER to advance the output one line at a time The example in Figure 2 5 shows how the show mac command indicates that output continues on more than one screen Figure 2 5 Scrolling Screen Output NO...

Страница 43: ...20 Figure 2 7 shows how when the function is enabled entering conf and pressing the spacebar would be completed as configure Figure 2 7 Completing a Partial Command 2 1 7 Configuring the Line Editor...

Страница 44: ...H Delete character to left of cursor Ctrl I or TAB Complete word Ctrl K Delete all characters after cursor Ctrl L or Ctrl R Re display line Ctrl N Scroll to next command in command history use the CL...

Страница 45: ...PACE Change character cl Change character cw Change word cc Change entire line c Change everything from cursor to end of line i Insert I Insert at beginning of line R Type over characters nrc Replace...

Страница 46: ...s The commands used to configure the line editor are listed below and described in the associated sections as shown show line editor Section 2 1 7 1 set line editor Section 2 1 7 2 p Put last deletion...

Страница 47: ...ine editor mode and Delete character mode show line editor Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to view the current and default line...

Страница 48: ...nly to the current session and will not persist for future sessions Command Type Switch command Command Mode Read Write Examples This example sets the current line editor to vi mode emacs Selects emac...

Страница 49: ...Configuring the Line Editor Matrix DFE Platinum and Diamond Series Configuration Guide 2 23 This example sets the default line editor to emacs mode and sets the selection to persist for future session...

Страница 50: ...new user accounts and passwords Commands The commands used to configure user accounts and passwords are listed below and described in the associated section as shown show system login Section 2 2 1 1...

Страница 51: ...yntax Description None Command Defaults None Command Type Switch command Command Mode Super User Example This example shows how to display login account information In this case device defaults have n...

Страница 52: ...login passwords that will be checked for duplication when the set password command is executed Configured with set system password history Section 2 2 1 7 Password aging Number of days user passwords...

Страница 53: ...ax Description Command Defaults None Command Type Switch command Command Mode Super User Example This example shows how to enable a new user account with the login name netops with super user access p...

Страница 54: ...d to remove a local login user account clear system login username Syntax Description Command Defaults None Command Type Switch command Command Mode Super User Example This example shows how to remove...

Страница 55: ...change their own passwords but cannot enter or modify other system passwords Passwords must be a minimum of 8 characters and a maximum of 40 characters IIf configured password length must conform to...

Страница 56: ...change the Read Write password from the system default blank string This example shows how a user with Read Write access would change his password Matrix su set password rw Please enter new password P...

Страница 57: ...nimum user login password length set system password length characters Syntax Description Command Defaults None Command Type Switch command Command Mode Super User Examples This example shows how to s...

Страница 58: ...ore aging out or to disable user account password aging set system password aging days disable Syntax Description Command Defaults None Command Type Switch command Command Mode Super User Example This...

Страница 59: ...sword duplication This prevents duplicate passwords from being entered into the system with the set password command set system password history size Syntax Description Command Defaults None Command T...

Страница 60: ...ows how to display user lockout settings In this case device defaults have not been changed Table 2 5 provides an explanation of the command output These settings are configured with the set system lo...

Страница 61: ...a super user with the set system login command Section 2 2 1 2 set system lockout attempts attempts time time Syntax Description Command Defaults None Command Type Switch command Command Mode Super U...

Страница 62: ...vent occurs for various management access types The types of access currently supported by the MIB include console telnet ssh and web Commands The CLI commands used to set the Management Authenticatio...

Страница 63: ...the current setting for the Management Authentication Notification MIB show mgmt auth notify Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example Th...

Страница 64: ...pes are enabled set mgmt auth notify enable disable console ssh telnet web Syntax Description Command Defaults If none of the optional Management Authentication Access types are entered than all authe...

Страница 65: ...w command This example shows how to set only the console and telnet authentication access types to be enabled on the Management Authentication Notification MIB That information is then displayed with...

Страница 66: ...mmand to set the current setting for the Management Authentication Notification access types to the default setting of enabled clear mgmt auth notify Syntax Description None Command Defaults None Comm...

Страница 67: ...gement Authentication Notification access types prior to using the clear command then displays the same information after using the clear command Matrix su show mgmt auth notify Management Type Status...

Страница 68: ...ection as shown show ip address Section 2 2 3 1 set ip address Section 2 2 3 2 clear ip address Section 2 2 3 3 show ip gratuitous arp Section 2 2 3 4 set ip gratuitous arp Section 2 2 3 5 clear ip gr...

Страница 69: ...2 3 24 show version Section 2 2 3 25 set system name Section 2 2 3 26 set system location Section 2 2 3 27 set system contact Section 2 2 3 28 set width Section 2 2 3 29 set length Section 2 2 3 30 sh...

Страница 70: ...ip address Use this command to display the system IP address and subnet mask show ip address Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example Th...

Страница 71: ...d ip mask will be set to the natural mask of the ip address and ip gateway will be set to the ip address Command Type Switch command Command Mode Read Write Example This example shows how to set the s...

Страница 72: ...Series Configuration Guide 2 2 3 3 clear ip address Use this command to clear the system IP address clear ip address Syntax Description None Command Defaults None Command Type Switch command Command M...

Страница 73: ...this command to display the gratuitous ARP processing behavior show ip gratuitous arp Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This exam...

Страница 74: ...ARP processing behavior set ip gratuitous arp request reply both Syntax Description Command Defaults Disabled by default Command Type Switch command Command Mode Read Write Example This example sets b...

Страница 75: ...ide 2 49 2 2 3 6 clear ip gratuitous arp Use this command to stop all gratuitous ARP processing clear ip gratuitous arp Syntax Description None Command Defaults None Command Type Switch command Comman...

Страница 76: ...and uptime show system Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to display system information Table 2 6 provides...

Страница 77: ...n 2 2 3 27 System name Name identifying the system Default of a blank string can be changed with the set system name command Section 2 2 3 26 PS1 and PS2 Status Operational status for power supply 1 a...

Страница 78: ...e system s hardware configuration show system hardware Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example The example on the following page shows...

Страница 79: ...MAC Address 11 22 33 44 55 66 Router MAC Address 11 22 33 44 55 67 Hardware Version 5 Firmware Version 02 00 13 BootCode Version 01 00 07 CPU Version 8 PPC 740 750 UpLink Not Present SDRAM 128 MB NVRA...

Страница 80: ...displayed If not specified information for all modules will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display all system utilization informatio...

Страница 81: ...ch CDP 11 0 0 0 0 0 0 Switch Dot1x 12 0 0 0 0 0 0 Switch Filter Database 13 0 0 0 0 0 0 Switch GVRP 14 0 0 0 0 0 0 Switch Host IP 15 0 1 0 1 0 1 Switch IGMP 16 0 0 0 0 0 0 Switch LACP 17 0 0 0 0 0 0 S...

Страница 82: ...0 0 Router IP 38 0 0 0 0 0 0 Router DHCPS 39 0 0 0 0 0 0 Router OSPF 40 0 0 0 0 0 0 Router RIP 41 0 0 0 0 0 0 Router VRRP 42 0 0 0 0 0 0 Router DVMRP 43 0 0 0 0 0 0 Router PIM 44 0 0 0 0 0 0 Router P...

Страница 83: ...1 1000 and represents the of system utilization to use as the trap threshold set system utilization threshold threshold Syntax Description Command Defaults None Command Type Switch command Command Mod...

Страница 84: ...system utilization Use this command to clear the threshold for sending CPU utilization notification messages clear system utilization Syntax Description None Command Defaults None Command Type Switch...

Страница 85: ...isplay the current time of day in the system clock show time Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to display...

Страница 86: ...he time of day on the system clock set time mm dd yyyy hh mm ss Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the s...

Страница 87: ...ax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to display daylight savings time settings Matrix rw show summertime Summerti...

Страница 88: ...tion set summertime enable disable zone Syntax Description Command Defaults If a zone name is not specified none will be applied Command Type Switch command Command Mode Read Write Example This exampl...

Страница 89: ...Mode Read Write start_month Specifies the month of the year to start daylight savings time start_date Specifies the day of the month to start daylight savings time start_year Specifies the year to sta...

Страница 90: ...and Diamond Series Configuration Guide Example This example shows how to set a daylight savings time start date of April 4 2004 at 2 a m and an ending date of October 31 2004 at 2 a m with an offset...

Страница 91: ...t specified none will be applied Command Type Switch command Command Mode Read Write start_week Specifies the week of the month to restart daylight savings time Valid values are first second third fou...

Страница 92: ...nd Series Configuration Guide Example This example shows how set daylight savings time to recur start date of April 4 2004 at 2 a m and an ending date of October 31 2004 at 2 a m with an offset time o...

Страница 93: ...de 2 67 2 2 3 18 clear summertime Use this command to clear the daylight savings time configuration clear summertime Syntax Description None Command Defaults None Command Type Switch command Command M...

Страница 94: ...et prompt prompt_string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the command prompt to Switch 1 prompt_string...

Страница 95: ...eyboard spacebar set cli completion enable disable default Syntax Description Command Defaults If not specified the status setting will not be maintained as the default Command Type Switch command Com...

Страница 96: ...ified none will be set If not specified the cursor will not refresh Command Type Switch command Command Mode Read Write Example This example shows how to execute a command loop 10 times with a 30 seco...

Страница 97: ...w the banner message of the day that will display at session login show banner motd Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This exampl...

Страница 98: ...ion Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the message of the day banner to read Change is the price of survival Winston Church...

Страница 99: ...banner motd Use this command to clear the banner message of the day displayed at session login to a blank string clear banner motd Syntax Description None Command Defaults None Command Type Switch com...

Страница 100: ...nd Series Configuration Guide 2 2 3 25 show version Use this command to display hardware and firmware information Refer to Section 2 2 6 for instructions on how to download a firmware image show versi...

Страница 101: ...GR A13 Hw 0 Bp 01 00 05 Fw 05 01 56 3 7G4202 30 gr a5 Hw 0 Bp 01 00 10 Fw 05 01 56 4 7G4202 30 GR R18 Hw 0 Bp 01 00 05 Fw 05 01 56 5 7K4290 02 040802623111 Hw 2 Bp 01 00 15 Fw 05 01 56 6 7H4382 49 TR...

Страница 102: ...Description Command Defaults If string is not specified the system name will be cleared Command Type Switch command Command Mode Read Write Example This example shows how to set the system name to Inf...

Страница 103: ...escription Command Defaults If string is not specified the location name will be cleared Command Type Switch command Command Mode Read Write Example This example shows how to set the system location s...

Страница 104: ...ion Command Defaults If string is not specified the contact name will be cleared Command Type Switch command Command Mode Read Write Example This example shows how to set the system contact string str...

Страница 105: ...l connected to the device s console port The length of the CLI is set using the set length command as described in Section 2 2 3 30 set width screenwidth Syntax Description Command Defaults None Comma...

Страница 106: ...the CLI will display set length screenlength Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the terminal length to...

Страница 107: ...this command to display the time in seconds an idle console or Telnet CLI session will remain connected before timing out show logout Syntax Description None Command Defaults None Command Type Switch...

Страница 108: ...me in minutes an idle console or Telnet CLI session will remain connected before timing out set logout timeout Syntax Description Command Defaults None Command Type Switch command Command Mode Read Wr...

Страница 109: ...t for the chassis slot slot Optional Displays the alias set for a specified slot in the chassis backplane backplane Optional Displays the alias set for the backplane Valid values are 1 for FTM 1 and 2...

Страница 110: ...and Diamond Series Configuration Guide Example This example shows how to display physical alias information for the chassis In this case the chassis entity is 1 and there is no alias currently set fo...

Страница 111: ...ype Switch command Command Mode Read Write chassis Sets an alias for the chassis slot slot Sets an alias for a specific slot in the chassis backplane backplane Sets an alias for the backplane Valid va...

Страница 112: ...d Set Setting Basic Device Properties 2 86 Matrix DFE Platinum and Diamond Series Configuration Guide Example This example shows how to set the alias for the chassis to chassisone Matrix rw set physic...

Страница 113: ...escription Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set clear the alias set for the chassis chassis Clears the chassis alias slot slo...

Страница 114: ...or a module show physical assetid module module Syntax Description Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to display asset ID informati...

Страница 115: ...o set the asset ID for a module set physical assetid module module string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to...

Страница 116: ...command to reset the asset ID for a module to a zero length string clear physical assetid module module Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Exa...

Страница 117: ...Series device you must purchase and activate a license key If you have purchased a license you can proceed to activate your license as described in this section If you wish to purchase a license conta...

Страница 118: ...will be bound to all modules Example This example shows how to use license key abcdefg123456789 to activate advanced routing features advanced Activates advanced routing features user capacity Activa...

Страница 119: ...2 2 4 2 show license When available and activated use this command to display your license key show license Syntax Description None Command Type Switch command Command Mode Read Write Command Default...

Страница 120: ...mand Type Switch command Command Mode Read Write Command Defaults If not specified the license settings will be cleared from all modules Example This example shows how to clear advanced license key se...

Страница 121: ...e Section 2 2 5 2 clear inlinepower mode Section 2 2 5 3 set inlinepower available Section 2 2 5 4 clear inlinepower available Section 2 2 5 5 set inlinepower powertrap Section 2 2 5 6 clear inlinepow...

Страница 122: ...l Configuration Command Set Configuring Power over Ethernet PoE 2 96 Matrix DFE Platinum and Diamond Series Configuration Guide set port inlinepower Section 2 2 5 17 clear port inlinepower Section 2 2...

Страница 123: ...rnet PoE Matrix DFE Platinum and Diamond Series Configuration Guide 2 97 2 2 5 1 show inlinepower Use this command to display device PoE properties show inlinepower Syntax Description None Command Def...

Страница 124: ...wer Available 1200 Watts 100 of Total Power Detected Total Power Assigned 0 Watts Power Allocation Mode auto Power Trap Status disabled Power Redundancy Status not redundant Power Supply 1 Status inst...

Страница 125: ...Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the chassis power allocation mode to manual auto Assigns automatic m...

Страница 126: ...3 clear inlinepower mode Use this command to reset chassis power allocation to the default mode of auto clear inlinepower mode Syntax Description None Command Defaults None Command Type Switch comman...

Страница 127: ...Write Example This example shows how to set the maximum inline power available to the chassis to 70 percent NOTE If the total power wattage value set with the set inlinepower assigned command Section...

Страница 128: ...this command to reset the percentage of the total power available to a chassis to the default value of 100 clear inlinepower available Syntax Description None Command Defaults None Command Type Switch...

Страница 129: ...P trap message whenever the status of the chassis PoE power supplies or the PoE system redundancy changes set inlinepower powertrap disable enable Syntax Description Command Defaults None Command Type...

Страница 130: ...epower powertrap Use this command to reset chassis power trap messaging back to the default state of disabled clear inlinepower powertrap Syntax Description None Command Defaults None Command Type Swi...

Страница 131: ...e This example shows how to assign 200 watts of power to the module in slot 1 NOTE If the total power wattage value set with this command is greater that the maximum power percentage specified with th...

Страница 132: ...one or more modules clear inlinepower assigned slot number Syntax Description Command Defaults If slot number is not specified power value assignments will be cleared from all modules Command Type Swi...

Страница 133: ...set inlinepower threshold usage threshold module number Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the PoE thres...

Страница 134: ...e PoE usage threshold on a specified module to the default value of 75 percent clear inlinepower threshold module number Syntax Description Command Defaults None Command Type Switch command Command Mo...

Страница 135: ...iption Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the PoE management mode to class on module 1 realtime Manages power based on the...

Страница 136: ...ment mode on a specified module back to the default setting of realtime clear inlinepower management module number Syntax Description Command Defaults None Command Type Switch command Command Mode Rea...

Страница 137: ...E usage threshold is crossed The module s PoE usage threshold must be set using the set inlinepower threshold command as described in Section 2 2 5 10 set inlinepower psetrap disable enable module num...

Страница 138: ...t PoE trap messaging for a module back to default state of disabled clear inlinepower psetrap module number Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write...

Страница 139: ...ommand Type Switch command Command Mode Read Only Example This example shows how to display PoE information for Fast Ethernet ports 11 12 and 13 in module 1 port string Optional Displays information f...

Страница 140: ...ommand Mode Read Write Example This example shows how to enable PoE on port fe 3 1 with critical priority port string Specifies the port s on which to configure PoE admin off auto Sets the PoE adminis...

Страница 141: ...imit Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to rest the PoE priority on port fe 3 1 to low port string Specifies th...

Страница 142: ...9 5 Via the serial console port This procedure is an out of band operation that copies the firmware through the serial port to the device It takes approximately five minutes and requires minimal confi...

Страница 143: ...nload device firmware via the serial console port proceed as follows 1 With the console port connected power up the device The following message displays 2 Before the boot up completes press any key T...

Страница 144: ...on your application When the ZMODEM download is finished the following message displays 8 Set the device baud rate back to 9600 9 Set the terminal baud rate back to 9600 and press ENTER 10 Type setbo...

Страница 145: ...image file are listed below and described in the associated section as shown show boot system Section 2 2 7 1 set boot system Section 2 2 7 2 System Image Loader boot flash0 Volume is OK Loading myima...

Страница 146: ...in Section 2 2 9 1 displays additional information about boot image files Active indicates the image that is currently running and Boot means indicates the image that is currently scheduled to boot ne...

Страница 147: ...mage immediately or choose No to load the new boot image at a later scheduled time by issuing one of the following commands clear config reset or configure The new boot setting will be remembered thro...

Страница 148: ...a remote host The Matrix Series device allows a total of four inbound and or outbound Telnet session to run simultaneously Commands The commands used to enable start and configure Telnet are listed b...

Страница 149: ...1 show telnet Use this command to display the status of Telnet on the device show telnet Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This e...

Страница 150: ...lts None Command Mode Read Write Example This example shows how to disable inbound and outbound Telnet services enable disable Enables or disables Telnet services inbound outbound all Specifies inboun...

Страница 151: ...l of four inbound and or outbound Telnet session to run simultaneously telnet host port Syntax Description Command Defaults If not specified the default port number 23 will be used Command Type Switch...

Страница 152: ...router telnet Use this command to display the state of Telnet service to the router show router telnet Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only...

Страница 153: ...t router telnet Use this command to enable or disable Telnet service to the router interface IP address set router telnet enable disable Syntax Description None Command Defaults None Command Type Swit...

Страница 154: ...clear router telnet Use this command to reset Telnet service to the router to the default state of disabled clear router telnet Syntax Description None Command Defaults None Command Type Switch comma...

Страница 155: ...script file containing CLI commands and at the time of execution enter optional arguments that modify the actions of the commands This feature is intended to simplify the configuration of ports and VL...

Страница 156: ...Configuration and Image Files 2 130 Matrix DFE Platinum and Diamond Series Configuration Guide show file Section 2 2 9 2 show config Section 2 2 9 3 configure Section 2 2 9 4 copy Section 2 2 9 5 del...

Страница 157: ...d Example This example shows how to list all the files in the system Table 2 8 provides an explanation of the command output filename Optional Specifies the file name or directory to list Matrix rw di...

Страница 158: ...l file system Date Date of image file in the local file system CheckSum MD5 checksum calculated across the entire image file used for image identity and verification Location Modules on which this ima...

Страница 159: ...file Use this command to display the contents of an image or configuration file show file filename Syntax Description Command Type Switch Command Mode Read Only Command Defaults None Example This exam...

Страница 160: ...tion Guide Matrix rw show file slot4 sample cfg begin NON DEFAULT CONFIGURATION SLOT TYPE ___ ________________ 1 7G4270 12 2 3 7H4382 49 4 7H4382 49 5 7H4382 49 6 7H4382 49 7 7H4382 49 Router instance...

Страница 161: ...a file show config all facility outfile outfile Syntax Description Command Type Switch Command Mode Read Write Command Defaults If no parameters are specified only non default system configuration se...

Страница 162: ...on default device configuration Matrix rw show config This command shows non default configurations only Use show config all to show both default and non default configurations begin NON DEFAULT CONFI...

Страница 163: ...running configuration will be replaced with the contents of the configuration file which will require an automated reset of the chassis Example This example shows how to execute the myconfig file in t...

Страница 164: ...via FTP with user credentials NOTE The Matrix module to which a configuration file is downloaded must have the same hardware configuration as the Matrix module from which it was uploaded source Speci...

Страница 165: ...via TFTP to the slot 3 directory This example shows how to upload a configuration file via Anonymous FTP from the module in slot 3 This example shows how to copy a configuration file from the slot 3...

Страница 166: ...mmand Type Switch Command Mode Read Write Command Defaults None Examples This example shows how to delete the myconfig configuration file from slot 3 This example shows how to delete the 010300 image...

Страница 167: ...escription Command Type Switch Command Mode Read Write Command Defaults None Example This example uses the copy command to copy the script file named setport scr from IP address 10 1 221 3 to slot 4 N...

Страница 168: ...rses the file and performs the command line argument substitution the commands are converted to the following set port alias fe 1 1 script_set_port set port vlan fe 1 1 100 modify egress set port jumb...

Страница 169: ...frames are allowed in the network If the system receives a frame larger than the destination port supports it will send an ICMP destination unreachable error message indicating to the transmitting sta...

Страница 170: ...ration Guide 2 2 10 1 show mtu Use this command to display the status of the path MTU discovery protocol on the device show mtu Syntax Description None Command Defaults None Command Type Switch comman...

Страница 171: ...2 set mtu Use this command to disable or re enable path MTU discovery protocol on the device set mtu enable disable Syntax Description Command Defaults None Command Type Switch command Command Mode R...

Страница 172: ...eries Configuration Guide 2 2 10 3 clear mtu Use this command to reset the state of the path MTU discovery protocol back to enabled clear mtu Syntax Description None Command Defaults None Command Type...

Страница 173: ...Configuration Guide 2 147 2 2 11 Pausing Clearing and Closing the CLI Purpose To clear the CLI screen or to close your CLI session Commands The commands used to clear and close the CLI session are li...

Страница 174: ...nd Diamond Series Configuration Guide 2 2 11 1 cls clear screen Use this command to clear the screen for the current CLI session cls Syntax Description None Command Defaults None Command Type Switch c...

Страница 175: ...nd Type Switch command Command Mode Read Only Example This example shows how to exit a CLI session NOTE By default device timeout occurs after 15 minutes of user inactivity automatically closing your...

Страница 176: ...the user defined switch and router configuration parameters or to schedule a system reset in order to load a new boot image Commands The commands used to reset the device and clear the configuration...

Страница 177: ...to display information about scheduled device resets show reset Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This command shows how to displ...

Страница 178: ...on on how to do this refer to the Matrix Installation Guide shipped with your device mod Specifies a module to be reset system Resets the system nemcpu mod nemcpu Resets the CPU on a Matrix Security M...

Страница 179: ...de 2 153 This example shows how to cancel a scheduled system reset This example shows how to reset a Matrix Security Module installed on the DFE in slot 4 Matrix rw reset cancel Reset cancelled Matrix...

Страница 180: ...how to schedule a reset at 8 p m on October 12 This example shows how to schedule a reset at a specific future time and include a reason for the reset hh mm Schedules the hour and minute of the reset...

Страница 181: ...nd Defaults If a reason is not specified none will be applied Command Type Switch command Command Mode Read Write Example This example shows how to schedule a device reset in 5 hours and 20 minutes hh...

Страница 182: ...its factory defaults If that module is in a chassis with other active modules it will inherit system settings from the system For a list of factory device default settings refer to Section 2 1 1 clear...

Страница 183: ...Series Configuration Guide 2 157 2 2 13 Gathering Technical Support Information Purpose To gather common technical support information Command The command used to display technical support related in...

Страница 184: ...system hardware Section 2 2 3 8 show vlan Section 7 3 1 1 show vlan static Section 7 3 1 1 show logging all Section 11 2 1 1 show snmp counters Section 5 3 1 2 show port status Section 4 3 2 2 show sp...

Страница 185: ...ts to slot 1 as a support3 txt file There is no display example as the list of commands is quite lengthy Click on the hyper links in the Command Defaults section above which contains a list of the ind...

Страница 186: ...ection 2 3 2 Important Notice Startup and general configuration of the Matrix Series device must occur from the switch CLI For details on how to start the device and configure general platform setting...

Страница 187: ...2 Step 2 Enable router mode router module Switch Matrix rw Section 2 3 2 4 Step 3 Enable router Privileged EXEC mode enable Router Matrix Router1 Section 2 3 3 Step 4 Enable global router configurati...

Страница 188: ...commands used to review and configure routing modules are listed below and described in the associated sections as shown show router Section 2 3 2 1 set router Section 2 3 2 2 clear router Section 2...

Страница 189: ...and Type Switch command Command Mode Read Write Example This example shows how to display which modules are configured for routing Table 2 10 provides an explanation of the command output Matrix rw sh...

Страница 190: ...tion Guide 2 3 2 2 set router Use this command to configure routing on a module set router module Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example T...

Страница 191: ...e this command to disable routing on a module clear router module Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set dis...

Страница 192: ...This must be a module previously configured for routing using the set router command as described in Section 2 3 2 2 Routing may be configured on one or two modules router module Syntax Description Co...

Страница 193: ...on your current configuration mode the specific module and the interface types and numbers configured for routing on your system Table 2 11 Router CLI Configuration Modes Use this mode To Access metho...

Страница 194: ...tication key chain Type key and the key id from Key Chain Configuration Mode Matrix Router1 config keychain key Route Map Configuration Mode Configure route maps 1 99 Type route map an id number and p...

Страница 195: ...nfiguration Mode Matrix Router1 config slb vserver IP Local Pool Configuration Mode Configure a local address pool as a DHCP subnet Type ip local pool and the local pool name from Global Configuration...

Страница 196: ...ters Type client identifier and the identifier or hardware address and an address from any DHCP configuration mode Matrix Router1 config dhcp host NOTE To jump to a lower configuration mode type exit...

Страница 197: ...Enterasys Discovery Protocol on page 3 4 The Cisco Discovery Protocol described in Section 3 2 3 Cisco Discovery Protocol on page 3 12 The IEEE 802 1AB Link Layer Discovery Protocol LLDP and LLDP Med...

Страница 198: ...ighbors port string Syntax Description Command Defaults If port string is not specified all Network Neighbor Discovery information will be displayed Command Type Switch command Command Mode Read Only...

Страница 199: ...codp 120 7 22 1 ge 1 6 0001f45b601f 120 7 22 1 ciscodp 120 7 22 1 ge 3 1 00 01 f4 00 71 9c ge 1 25 lldp ge 3 2 00 01 f4 00 71 9c ge 1 26 lldp ge 3 5 00 01 f4 96 0f fd ge 3 1 lldp ge 3 6 00 01 f4 96 0f...

Страница 200: ...r network topology When enabled CDP allows Enterasys devices to send periodic PDUs about themselves to neighboring devices Commands The commands used to review and configure the CDP discovery protocol...

Страница 201: ...xample This example shows how to display CDP information for ports fe 1 1 through fe 1 9 port string Optional Displays CDP status for a specific port For a detailed description of possible port string...

Страница 202: ...al in seconds at which CDP configuration messages can be set The default of 180 seconds can be reset with the set cdp hold time command For details refer to Section 3 2 2 5 CDP Authentication Code Aut...

Страница 203: ...is example shows how to globally enable CDP This example shows how to enable the CDP for port fe 1 2 This example shows how to disable the CDP for port fe 1 2 auto disable enable Auto enables disables...

Страница 204: ...different domains and will not be entered into each other s CDP neighbor tables A device with the default authentication code 16 null characters will recognize all devices no matter what their authen...

Страница 205: ...al frequency in seconds of the CDP discovery protocol set cdp interval frequency Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows...

Страница 206: ...ld time value for CDP discovery protocol configuration messages set cdp hold time hold time Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This ex...

Страница 207: ...ameter must be entered Command Type Switch command Command Mode Read Write Example This example shows how to reset the CDP state to auto enabled state Optional Resets the global CDP state to auto enab...

Страница 208: ...boring devices The Cisco Discovery Protocol is also used to manage the Cisco module of the Convergence End Points CEP IP phone detection function described in Section 14 3 8 Commands The commands used...

Страница 209: ...an explanation of the command output Matrix show ciscodp CiscoDP Auto Timer 60 Holdtime TTL 180 Device ID 00E06314BD57 Last Change WED FEB 08 01 07 45 2006 Table 3 2 show ciscodp Output Details Outpu...

Страница 210: ...ghboring devices will hold PDU transmissions from the sending device Default value of 180 can be changed with the set ciscodp holdtime command as described in Section 3 2 3 5 Device ID The MAC address...

Страница 211: ...all ports Command Type Switch command Command Mode Read Only Example This example shows how to display Cisco Discovery Protocol information for ports fe 1 1 through fe 1 5 Table 3 3 provides an explan...

Страница 212: ...state of enabled can be changed using the set ciscodp port command Section 3 2 3 6 VVID Whether a Voice VLAN ID has been set on this port Default of none can changed using the set ciscodp port comman...

Страница 213: ...ly on the device set ciscodp status auto enable disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to enable Cisco Disc...

Страница 214: ...seconds between Cisco Discovery Protocol PDU transmissions set ciscodp timer time Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example show...

Страница 215: ...s This is the amount of time in seconds neighboring devices will hold PDU transmissions from the sending device set ciscodp holdtime time Syntax Description Command Defaults None Command Type Switch c...

Страница 216: ...e connected to the Cisco IP phone is unaffected by this setting If the switch port is configured to a Cisco DP trust state of trusted with the trust ext trusted parameter of this command this setting...

Страница 217: ...frames trust ext Set the extended trust mode on the port trusted Instruct attached phone to allow the device connected to it to transmit traffic containing any CoS or Layer 2 802 1p marking This is t...

Страница 218: ...shows how to set the Cisco DP port voice VLAN ID to 3 on port fe 1 6 and enable the port operational state This example shows how to set the Cisco DP extended trust mode to untrusted on port fe 1 5 a...

Страница 219: ...ear global CiscoDP enable status to default of auto timer Clear the time between CiscoDP PDU transmissions to default of 60 seconds holdtime Clear the time to live for CiscoDP PDU data to default of 1...

Страница 220: ...ols Command Set Cisco Discovery Protocol 3 24 Matrix DFE Platinum and Diamond Series Configuration Guide This example shows how to clear the Cisco DP port status on port fe 1 5 Matrix clear ciscodp po...

Страница 221: ...of location databases and in the case of VoIP provision of E911 services Extended and automated power management of Power over Ethernet endpoints Inventory management allowing network administrators...

Страница 222: ...ldp port trap Section 3 2 4 3 show lldp port tx tlv Section 3 2 4 4 show lldp port location info Section 3 2 4 5 Step Task Command s 1 Configure global system LLDP parameters set lldp tx interval set...

Страница 223: ...n 3 2 4 11 set lldp med fast repeat Section 3 2 4 12 set lldp port status Section 3 2 4 13 set lldp port trap Section 3 2 4 14 set lldp port med trap Section 3 2 4 15 set lldp port location info Secti...

Страница 224: ...example shows how to display LLDP configuration information Matrix ro show lldp Message Tx Interval 30 Message Tx Hold Multiplier 4 Notification Tx Interval 5 MED Fast Start Count 3 Tx Enabled Ports...

Страница 225: ...and show lldp port status port string Syntax Description Command Defaults If port string is not specified LLDP status information will be displayed for all ports Command Type Switch command Command Mo...

Страница 226: ...ications with the set lldp port trap command and to send LLDP MED notifications with the set lldp port med trap command show lldp port trap port string Syntax Description Command Defaults If port stri...

Страница 227: ...uration information will be displayed for all ports Command Type Switch command Command Mode Read Only Example This example shows how to display transmit TLV information for three ports port string Op...

Страница 228: ...mand show lldp port location info port string Syntax Description Command Defaults If port string is not specified port location configuration information will be displayed for all ports Command Type S...

Страница 229: ...played for all ports Command Type Switch command Command Mode Read Only Example This example shows how to display the local system information stored for port fe 4 1 Table 3 4 describes the output fie...

Страница 230: ...gged 10 3 5 video conferencing tagged 10 3 5 streaming video tagged 10 3 5 video signaling tagged 10 3 5 ECS ELIN 1234567890123456789012345 PoE Device PSE device PoE Power Source primary PoE MDI Suppo...

Страница 231: ...erational Speed Duplex Type IEEE 802 3 Extensions MAC PHY Configuration Status TLV Lists the operational MAU type duplex and speed of the port If the received TLV indicates that auto negotiation is su...

Страница 232: ...g Entity PSE PoE Power Source LLDP MED Extensions Extended Power via MDI TLV Displayed only when a port has PoE capabilities Value can be primary or backup indicating whether the PSE is using its prim...

Страница 233: ...PoE capabilities Indicates the total power the port is capable of sourcing over a maximum length cable based on its current configuration in milli Watts PoE Power Priority LLDP MED Extensions Extende...

Страница 234: ...ommand Mode Read Only Example This example shows how to display the remote system information stored for port ge 3 1 The remote system information was received from an IP phone which is an LLDP MED en...

Страница 235: ...er 4610 Table 3 5 show lldp port remote info Output Display Output Field What it Displays Remote Port Id Displays whatever port Id information received in the LLDPDU from the remote device In this cas...

Страница 236: ...fied then all values default and non default are displayed for the specified ports all Display information about all network policy applications voice Display information about only the voice applicat...

Страница 237: ...work policy information for ge 1 1 Matrix ro show lldp port network policy all ge 1 1 Ports Application State Tag Vlan Id Cos Dscp ge 1 1 voice enabled untagged 1 0 0 voice signaling enabled untagged...

Страница 238: ...e transmissions initiated by changes in the LLDP local system information set lldp tx interval frequency Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Ex...

Страница 239: ...tiplier value set lldp hold multiplier multiplier val Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example sets the transmit interval to 20...

Страница 240: ...P notifications are sent when a remote system change has been detected set lldp trap interval frequency Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Exa...

Страница 241: ...sending LLDP MED TLVs at a fast start rate on that port Use this command to set the number of successive LLDPDUs with LLDP MED TLVs to be sent for one complete fast start interval set lldp med fast r...

Страница 242: ...mmand Command Mode Read Write Example This example enables both transmitting LLDPDUs and receiving and processing LLDPDUs from remote systems on ports ge 1 1 through ge 1 6 tx enable Enable transmitti...

Страница 243: ...s detected set lldp port trap enable disable port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example enables transmitting LLDP tra...

Страница 244: ...device has been attached or removed from the port set lldp port med trap enable disable port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example...

Страница 245: ...witch command Command Mode Read Write Example After you configure a location information value you must also configure the port to send the Location Information TLV with the set lldp port tx tlv comma...

Страница 246: ...DP TLV Value sent is the administratively assigned name for the system sys desc System Description optional basic LLDP TLV Value sent is sysDescr object defined in RFC 3418 sys cap System Capabilities...

Страница 247: ...t s MAC and PHY med cap LLDP MED Capabilities TLV Value sent indicates the capabilities whether the device supports location information network policy extended power via MDI and Device Type network c...

Страница 248: ...guration Guide Command Defaults None Command Type Switch command Command Mode Read Write Example This example configures the management address MED capability MED network policy and MED location ident...

Страница 249: ...lication This application will not be advertised if the voice application is configured with the same parameters guest voice Configure the guest voice application guest voice signaling Configure the g...

Страница 250: ...lso configure the port to send the Network Policy TLV with the set lldp port tx tlv command vid vlan id dot1p Optional VLAN identifier for the port The value of vlan id can range from 1 to 4094 Use do...

Страница 251: ...mond Series Configuration Guide 3 55 Example This example configures the voice application TLV on port fe 2 1 and then configures the port to send the Network Policy TLV Matrix rw set lldp port networ...

Страница 252: ...efault value of 30 seconds all Return all LLDP configuration parameters to their default values including port LLDP configuration parameters tx interval Return the number of seconds between transmissi...

Страница 253: ...ue of both both transmitting and processing received LLDPDUs are enabled clear lldp port status port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read write...

Страница 254: ...d to return the port LLDP trap setting to the default value of disabled clear lldp port trap port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read write Ex...

Страница 255: ...eturn the port LLDP MED trap setting to the default value of disabled clear lldp port med trap port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read write...

Страница 256: ...alue of null clear lldp port location info elin port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read write Example This example returns the location infor...

Страница 257: ...mand will be applied to the guest voice application guest voice signaling Command will be applied to the guest voice signaling application softphone voice Command will be applied to the softphone voic...

Страница 258: ...rite Example This example returns all network policy values for all applications on port ge 1 1 to their default values dscp Optional Clear the DSCP value to be used to provide Diffserv node behavior...

Страница 259: ...sic LLDP TLV from being transmitted in LLDPDUs sys desc Disable the System Description optional basic LLDP TLV from being transmitted in LLDPDUs sys cap Disable the System Capabilities optional basic...

Страница 260: ...ggr Disable the Link Aggregation IEEE 802 3 Extensions TLV from being transmitted in LLDPDUs max frame Disable the Maximum Frame Size IEEE 802 3 Extensions TLV from being transmitted in LLDPDUs med ca...

Страница 261: ...on 4 3 1 Switch Ports The Matrix Series modules and standalone devices have fixed front panel switch ports and depending on the model optional expansion module slots The numbering scheme used to ident...

Страница 262: ...nstalled in a Matrix N7 or E7 chassis can be 0 through 7 with 0 designating virtual system ports lag vlan host loopback and 1 designating the left most module slot in the chassis Slot location for mod...

Страница 263: ...dule in chassis slot 1 This example shows the port string syntax for specifying Fast Ethernet ports 1 3 7 8 9 and 10 in the module in chassis slot 1 This example shows the port string syntax for speci...

Страница 264: ...mary Port String Syntax Used in the CLI 4 4 Matrix DFE Platinum and Diamond Series Configuration Guide This example shows the port string syntax for specifying all ports of any interface type in all m...

Страница 265: ...3 1 2 Reviewing switch port status Section 4 3 2 3 Disabling enabling and naming switch ports Section 4 3 3 4 Setting switch port speed and duplex mode Section 4 3 4 5 Enabling disabling jumbo frame s...

Страница 266: ...the associated section as shown show console Section 4 3 1 1 clear console Section 4 3 1 2 show console baud Section 4 3 1 3 set console baud Section 4 3 1 4 clear console baud Section 4 3 1 5 show c...

Страница 267: ...tring Syntax Description Command Defaults If port string is not specified properties for all console ports will be displayed Command Type Switch command Command Mode Read Only Example This example sho...

Страница 268: ...one or more console ports clear console port string Syntax Description Command Defaults If port string is not specified properties for all console ports will be cleared Command Type Switch command Co...

Страница 269: ...e ports show console baud port string Syntax Description Command Defaults If port string is not specified baud rate for all console ports will be displayed Command Type Switch command Command Mode Rea...

Страница 270: ...yntax Description Command Defaults If port string is not specified baud rate will be set for all console ports Command Type Switch command Command Mode Read Write Example This example shows how to set...

Страница 271: ...one or more console ports clear console baud port string Syntax Description Command Defaults If port string is not specified baud rate will be cleared for all console ports Command Type Switch command...

Страница 272: ...onsole flowcontrol port string Syntax Description Command Defaults If port string is not specified the flow control setting for all console ports will be displayed Command Type Switch command Command...

Страница 273: ...If port string is not specified flow control will be set for all console ports Command Type Switch command Command Mode Read Write Example This example shows how to enable DSR DTR flow control for con...

Страница 274: ...r more console ports clear console flowcontrol port string Syntax Description Command Defaults If port string is not specified flow control will be cleared for all console ports Command Type Switch co...

Страница 275: ...nsole bits port string Syntax Description Command Defaults If port string is not specified the bits per character setting for all console ports will be displayed Command Type Switch command Command Mo...

Страница 276: ...s port string Syntax Description Command Defaults If port string is not specified bits per character will be set for all console ports Command Type Switch command Command Mode Read Write Example This...

Страница 277: ...more console ports clear console bits port string Syntax Description Command Defaults If port string is not specified bits per character will be cleared for all console ports Command Type Switch comm...

Страница 278: ...show console stopbits port string Syntax Description Command Defaults If port string is not specified stop bits per character will be displayed for all console ports Command Type Switch command Comma...

Страница 279: ...oneandhalf two port string Syntax Description Command Defaults If port string is not specified stop bits per character will be set for all console ports Command Type Switch command Command Mode Read W...

Страница 280: ...console ports clear console stopbits port string Syntax Description Command Defaults If port string is not specified stop bits per character will be cleared for all console ports Command Type Switch...

Страница 281: ...e console ports show console parity port string Syntax Description Command Defaults If port string is not specified parity type for all console ports will be displayed Command Type Switch command Comm...

Страница 282: ...If port string is not specified parity type will be set for all console ports Command Type Switch command Command Mode Read Write Example This example shows how to enable even parity checking on conso...

Страница 283: ...more console ports clear console parity port string Syntax Description Command Defaults If port string is not specified parity type will be cleared for all console ports Command Type Switch command C...

Страница 284: ...and statistical information about traffic received and transmitted through one or all switch ports on the device Commands The commands used to review port status are listed below and described in the...

Страница 285: ...Defaults If port string is not specified operational status information for all ports will be displayed Command Type Switch command Command Mode Read Only Examples This example shows how to display op...

Страница 286: ...les This example shows how to display status information for port ge 3 1 through 4 This example shows how to display status information for console ports port string Optional Displays status for speci...

Страница 287: ...Oper Status Operating status up or down Admin Status Whether the specified port is enabled up or disabled down For details on using the set port disable command to change the default port status of en...

Страница 288: ...g is not specified counter statistics will be displayed for all ports If mib2 or switch are not specified all counter statistics will be displayed for the specified port s Command Type Switch command...

Страница 289: ...fe 3 1 Port fe 3 1 MIB2 Interface 1 Bridge Port 2 No counter discontinuity time MIB2 Interface Counters In Octets 0 In Unicast Pkts 0 In Multicast Pkts 0 In Broadcast Pkts 0 In Discards 0 In Errors 0...

Страница 290: ...2 show port counters Output Details Output What It Displays Port Port designation For a detailed description of possible port string values refer to Section 4 1 1 MIB2 Interface MIB2 interface design...

Страница 291: ...nkloss Optional Displays ports down due to link loss linkflap Optional Displays ports down due to link flap violation For more information on configuring the link flap function refer to Section 4 3 8...

Страница 292: ...e This example shows how to display operation status causes for ports ge 1 1 through 6 In this case port ge 1 6 is down due to a link loss lag Optional Displays ports dormant due to Link Aggregation G...

Страница 293: ...ill be overridden for all ports Command Type Switch command Command Mode Read Write Example This example shows how to override all operational causes on all ports port string Optional Overrides causes...

Страница 294: ...ll ports are enabled at device startup You may want to disable ports for security or to troubleshoot network issues Commands The commands used to enable and disable ports are listed below and describe...

Страница 295: ...ively disable one or more ports set port disable port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to disable Fast...

Страница 296: ...atively enable one or more ports set port enable port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to enable Fast...

Страница 297: ...ion Command Defaults If port string is not specified aliases for all ports will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display alias informat...

Страница 298: ...ommand Defaults If string is not specified the alias assigned to the port will be cleared Command Type Switch command Command Mode Read Write Example This example shows how to assign the alias managem...

Страница 299: ...inkdown Use this command to display the status of the force link down function show forcelinkdown Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Examp...

Страница 300: ...link down function When enabled this forces ports in the operstatus down state to become disabled set forcelinkdown enable disable Syntax Description Command Defaults None Command Type Switch command...

Страница 301: ...clear forcelinkdown Use this command to resets the force link down function to the default state of disabled clear forcelinkdown Syntax Description None Command Defaults None Command Type Switch comm...

Страница 302: ...ult duplex mode Half for half duplex or Full for full duplex for one or more ports Commands The commands used to review and set port speed and duplex mode are listed below and described in the associa...

Страница 303: ...Defaults If port string is not specified default speed settings for all ports will display Command Type Switch command Command Mode Read Only Example This example shows how to display the default spee...

Страница 304: ...t speed port string 10 100 1000 Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set Fast Ethernet port 3 in module3 to a...

Страница 305: ...Defaults If port string is not specified default duplex settings for all ports will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display the defau...

Страница 306: ...aults None Command Type Switch command Command Mode Read Write Example This example shows how to set Fast Ethernet port 17 in module 1 to full duplex NOTE This command will only take effect on ports t...

Страница 307: ...se To review enable and disable jumbo frame support on one or more ports This allows Gigabit Ethernet ports to transmit frames up to 10 KB in size Commands The commands used to review enable and disab...

Страница 308: ...mand Defaults If port string is not specified jumbo frame support status for all ports will display Command Type Switch command Command Mode Read Only Example This example shows how to display the sta...

Страница 309: ...umbo frame support for 1 Gigabit Ethernet port 14 in module 3 This example shows how to enable jumbo frame support for router in slot 2 router instance 1 NOTE By default jumbo frame support is disable...

Страница 310: ...iption Command Defaults If port string is not specified jumbo frame support status will be reset on all ports Command Type Switch command Command Mode Read Write Example This example shows how to rese...

Страница 311: ...ands In normal operation with all capabilities enabled advertised ability enables a port to advertise that it has the ability to operate in any mode The user may choose to configure a port so that onl...

Страница 312: ...n Command Defaults If port string is not specified auto negotiation status for all ports will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display...

Страница 313: ...tring enable disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to disable auto negotiation on 1 Gigabit Ethernet port...

Страница 314: ...tring is not specified the mode for all ports will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display MDI MDIX mode for 1 Gigabit Ethernet port 1...

Страница 315: ...tring is not specified mode will be set for all ports Command Type Switch command Command Mode Read Write Example This example shows how to force 1 Gigabit Ethernet port 14 in module 3 to MDIX configu...

Страница 316: ...lear port mdix port string Syntax Description Command Defaults If port string is not specified mode will be reset for all ports Command Type Switch command Command Mode Read Write Example This example...

Страница 317: ...mmand Mode Read Only Example This example shows how to display advertised ability fe 1 16 Table 4 3 provides an explanation of the command output port string Optional Displays advertised ability for s...

Страница 318: ...ex mode 100txfd 100BASE TX full duplex mode 1000x 1000BASE X LX SX CXhalfduplexmode 1000xfd 1000BASE X LX SX CX full duplex mode 1000t 1000BASE T half duplex mode 1000tfd 1000BASE T full duplex mode o...

Страница 319: ...scription of possible port string values refer to Section 4 1 1 10t Optional Advertises 10BASE T half duplex mode 10tfd Optional Advertises 10BASE T full duplex mode 100tx Optional Advertises 100BASE...

Страница 320: ...tion and Advertised Ability 4 60 Matrix DFE Platinum and Diamond Series Configuration Guide Command Mode Read Write Example This example shows how to set fe 3 4 to advertise 100BASE TX full duplex ope...

Страница 321: ...Optional Clears 100BASE TX half duplex mode from the port s advertised ability 100txfd Optional Clears 100BASE TX full duplex mode from the port s advertised ability 1000x Optional Clears 1000BASE X L...

Страница 322: ...and Diamond Series Configuration Guide Command Defaults If not specified all modes of advertised ability will be cleared Command Type Switch command Command Mode Read Write Example This example shows...

Страница 323: ...ntrol Flow control is used to manage the transmission between two devices as specified by IEEE 802 3x to prevent receiving ports from being overwhelmed by frames from transmitting devices Commands The...

Страница 324: ...Optional Displays flow control state for specific port s For a detailed description of possible port string values refer to Section 4 1 1 Matrix rw show port flowcontrol fe 1 1 5 Port TX Admin TX Ope...

Страница 325: ...RX Admin Whether or not the port is administratively enabled or disabled for acknowledging received flow control frames RX Oper Whether or not the port is operationally enabled or disabled for acknow...

Страница 326: ...one Command Type Switch command Command Mode Read Write Example This example shows how to enable ports fe 3 1 through 5 to send and receive flow control packets port string Specifies port s for which...

Страница 327: ...and eventually send notification trap to stop such a condition If left unresolved the link flapping condition can be detrimental to network stability because it can trigger Spanning Tree and routing t...

Страница 328: ...efaults If port string is not specified the trap status for all ports will be displayed Command Type Switch command Command Mode Read Write Example This example shows how to display link trap status f...

Страница 329: ...et port trap port string enable disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to disable link traps for Fast Ether...

Страница 330: ...ction metrics portsupported Displays ports which can support the link flap detection function actsupported Displays link flap detection actions supported by system hardware maximum Displays the maximu...

Страница 331: ...by link flap detection due to a violation This example shows how to display the link flap parameters table violations Displays the number of link flap violations since the last reset port string Opti...

Страница 332: ...disabled S Syslog entry will be generated T SNMP trap will be generated Threshold Number of link down transitions necessary to trigger the link flap action Interval Time interval in seconds for accum...

Страница 333: ...atrix DFE Platinum and Diamond Series Configuration Guide 4 73 TimeElapsed Time in seconds since the last link down event Violations Number of link flap violations on listed ports since system start T...

Страница 334: ...ly and on all ports If disabled globally after per port settings have been configured using the commands later in this chapter per port settings will be retained set linkflap globalstate disable enabl...

Страница 335: ...escription Command Defaults If port string is not specified all ports will be disabled or enabled Command Type Switch command Command Mode Read Write Example This example shows how to enable the link...

Страница 336: ...ng interval_value Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Examples This example shows how to set the link flap interval on port fe 1 4 to 1000 seco...

Страница 337: ...None Command Type Switch command Command Mode Read Write Examples This example shows how to set the link flap violation action on port fe 1 4 to generating a Syslog entry port string Specifies the por...

Страница 338: ...g is not specified actions will be cleared on all ports Command Type Switch command Command Mode Read Write Examples This example shows how to clear all link flap violation actions on all ports port s...

Страница 339: ...ntax Description Command Defaults None Command Type Switch command Command Mode Read Write Examples This example shows how to set the link flap threshold on port fe 1 4 to 5 port string Specifies the...

Страница 340: ...time port string downtime_value Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Examples This example shows how to set the link flap downtime on port fe 1...

Страница 341: ...p down port string Syntax Description Command Defaults If port string is not specified all ports disabled by a link flap violation will be made operational Command Type Switch command Command Mode Rea...

Страница 342: ...ied settings and or statistics will be cleared on all ports Command Type Switch command Command Mode Read Write Examples This example shows how to clear all link flap options on port fe 1 4 all stats...

Страница 343: ...amount of received broadcast frames that the specified port will be allowed to switch out to other ports Broadcast suppression protects against broadcast storms leaving more bandwidth available for cr...

Страница 344: ...net port 2 in module 2 Table 4 7 provides an explanation of the command output port string Optional Displays broadcast status for specific port s For a detailed description of possible port string val...

Страница 345: ...onfiguration Guide 4 85 Peak Rate pkts s Peak rate of broadcast transmission received on this port in packets per second Peak Rate Time ddd hh mm ss Time in day hours minutes and seconds the peak rate...

Страница 346: ...ription Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set broadcast suppression to 800 packets per second on Fast Ethernet ports 1 through...

Страница 347: ...If not specified both threshold and peak settings will be cleared Command Type Switch command Command Mode Read Write Example This example shows how to clear all broadcast suppression settings on Fas...

Страница 348: ...e 4 4 1 Supported Mirrors The following types of ports can participate in mirroring on the Matrix Series device Physical ports including front panel and FTM 1 ports Virtual ports including Link Aggreg...

Страница 349: ...port will also be used for IP traffic Port failure or link recovery in a LAG will cause an automatic re distribution of the DIP SIP conversations 4 4 3 Active Destination Port Configurations The Matri...

Страница 350: ...tting Port Mirroring Purpose To review and configure port mirroring on the device Commands The commands used to review and configure port mirroring are listed below and described in the associated sec...

Страница 351: ...those ports show port mirroring Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to display port mirroring information In...

Страница 352: ...nable disable Enables or disables the mirroring of IGMP multicast frames source Specifies the source port designation This is the port on which the traffic will be monitored For a description of port...

Страница 353: ...Platinum and Diamond Series Configuration Guide 4 93 Example This example shows how to enable port mirroring of transmitted and received frames with fe 1 4 as the source port and fe 1 11 as the target...

Страница 354: ...Command Type Switch command Command Mode Read Write Example This example shows how to clear port mirroring between source port fe 1 4 and target port fe 1 11 igmp mcast Clears IGMP multicast mirrorin...

Страница 355: ...ers i e a server or to a router 4 5 1 LACP Operation For each aggregatable port in the device LACP Maintains configuration information reflecting the inherent properties of the individual links as wel...

Страница 356: ...et of capabilities associated with each port and with each aggregator as understood by a given device A means of identifying a LAG and its associated aggregator 4 5 2 LACP Terminology Table 4 8 define...

Страница 357: ...regator ports allow only underlying ports with keys matching theirs to join their LAG Actor and Partner An actor is the local device sending LACPDUs Its protocol partner is the device on the other end...

Страница 358: ...simply no available aggregators or if none of the aggregators have a matching admin key and system priority 802 1x authentication is enabled and ports that would otherwise aggregate are not 802 1X aut...

Страница 359: ...on as shown show lacp Section 4 5 4 1 set lacp Section 4 5 4 2 clear lacp state Section 4 5 4 3 set lacp asyspri Section 4 5 4 4 set lacp aadminkey Section 4 5 4 5 clear lacp Section 4 5 4 6 set lacp...

Страница 360: ...state port string Syntax Description Command Defaults If state is not specified aggregator information will be displayed for specified ports If port string is not specified link aggregation informati...

Страница 361: ...nation Actor Local device participating in LACP negotiation Partner Remote device participating in LACP negotiation System Identifier MAC addresses for actor and partner System Priority System priorit...

Страница 362: ...mand to disable or enable the Link Aggregation Control Protocol LACP on the device LACP is enabled by default set lacp disable enable Syntax Description Command Defaults None Command Type Switch comma...

Страница 363: ...Guide 4 103 4 5 4 3 clear lacp state Use this command to reset LACP to the default state of enabled clear lacp state Syntax Description None Command Defaults None Command Type Switch command Command...

Страница 364: ...l be allowed to use the aggregator set lacp asyspri value Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the LACP sy...

Страница 365: ...physical ports with oper keys matching those of their aggregators will be allowed to aggregate set lacp aadminkey port string value Syntax Description Command Defaults None Command Type Switch comman...

Страница 366: ...ority or admin key settings clear lacp asyspri aadminkey port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to clea...

Страница 367: ...c LAGs discussed in Section 4 5 3 apply to statically created LAGs Static LAG configuration should be performed by personnel who are knowledgeable about Link Aggregation Misconfiguration can result in...

Страница 368: ...onfiguring Link Aggregation 4 108 Matrix DFE Platinum and Diamond Series Configuration Guide Example This example shows how to add port fe 1 6 to the LAG of aggregator port 48 Matrix rw set lacp stati...

Страница 369: ...x Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to remove Fast Ethernet port 6 in module 1 from the LAG of aggregator port 48 lag...

Страница 370: ...lag Use this command to display the status of the single port LAG function show lacp singleportlag Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Exam...

Страница 371: ...LAGs When enabled this maintains LAGs when only one port is receiving protocol transmissions from a partner set lacp singleportlag enable disable Syntax Description Command Defaults None Command Type...

Страница 372: ...g Use this command to reset the single port LAG function back to the default state of disabled clear lacp singleportlag Syntax Description None Command Defaults None Command Type Switch command Comman...

Страница 373: ...summary counters sort port lag Syntax Description Command Defaults None Command Type Switch command Command Mode Read Only port port string Displays LACP information for specific port s For a detailed...

Страница 374: ...ectedAggID none PartnerAdminState DCSGlp AttachedAggID none PartnerOperState DC Glp MuxState Detached PartnerAdminSystemID 00 00 00 00 00 00 DebugRxState port Disabled PartnerOperSystemID 00 00 00 00...

Страница 375: ...port fe 1 12 counters Port Instance fe 1 12 LACPDUsRx 0 MarkerPDUsRX 0 LACPDUsTx 0 MarkerPDUsTx 0 IllegalRx 0 MarkerResponsePDUsRx 0 UnknownRx 0 MarkerResponsePDUsTx 0 ActorSyncTransitionCount 0 Partn...

Страница 376: ...s aadminkey set actor values Corresponding commands and parameters beginning with a p such as padminkey set corresponding partner values Actor refers to the local device participating in LACP negotiat...

Страница 377: ...PDUs every 1 sec vs 30 sec default lacpagg Aggregation on this port lacpsync Transition to synchronization state lacpcollect Transition to collection state lacpdist Transition to distribution state la...

Страница 378: ...ered Command Type Switch command Command Mode Read Write Example This example shows how to set the actor admin key to 3555 for port ge 3 16 padminstate lacpactive lacptimeout lacpagg lacpsync lacpcoll...

Страница 379: ...LACP settings will be cleared For a detailed description of possible port string values refer to Section 4 1 1 aadminkey Clears a port s actor admin key aportpri Clears a port s actor port priority a...

Страница 380: ...ype Switch command Command Mode Read Write Example This example shows how to clear all link aggregation parameters for port ge 3 16 padminstate lacpactive lacptimeout lacpagg lacpsync lacpcollect lacp...

Страница 381: ...flowRegeneration Use this command to display the LACP flow regeneration state show lacp flowRegeneration Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Onl...

Страница 382: ...oad balance existing flows to take advantage of ports added to the LAG When flow regeneration is disabled and a new port joins a LAG LACP will only distribute new flows over the increased number of po...

Страница 383: ...owRegeneration Use this command to reset LACP flow regeneration to its default state disabled clear lacp flowRegeneration Syntax Description None Command Defaults None Command Type Switch command Comm...

Страница 384: ...p outportAlgorithm Use this command to display the current LACP outport algorithm show lacp outportAlgorithm Syntax Description None Command Defaults None Command Type Switch command Command Mode Read...

Страница 385: ...Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the LACP outport algorithm to DA SA dip sip Specifies that destinati...

Страница 386: ...outportAlgorithm Use this command to reset LACP to DIP SIP its default outport algorithm clear lacp outportAlgorithm Syntax Description None Command Defaults None Command Type Switch command Command M...

Страница 387: ...escription of functionality Version 2 SNMPv2c The second release of SNMP described in RFC 1907 has additions and enhancements to data types counter size and protocol operations Version 3 SNMPv3 This i...

Страница 388: ...his component accepts outgoing PDUs from the dispatcher and prepares them for transmission by wrapping them in a message header and returning them to the dispatcher The message processing subsystem al...

Страница 389: ...access would either Permit or restrict the group s switch management access to the MIB s specified by the context MIB object ID value or Allow the group to have SNMP management access to one or more r...

Страница 390: ...a SNMPv3 This example grants the powergroup SNMPv3 management access from all router modules when operating in router mode This example grants the powergroup SNMPv3 management access from the router r...

Страница 391: ...Section 5 3 7 8 Creating a basic SNMP trap notification Section 5 3 8 5 3 SNMP CONFIGURATION COMMAND SET 5 3 1 Reviewing SNMP Statistics Purpose To review SNMP statistics Commands The commands used t...

Страница 392: ...Read Only Example This example shows how to display SNMP engine properties Table 5 2 shows a detailed explanation of the command output Matrix rw show snmp engineid EngineId 80 00 15 f8 03 00 e0 63 9d...

Страница 393: ...xample This example shows how to display SNMP counter values Matrix rw show snmp counters mib2 SNMP group counters snmpInPkts 396601 snmpOutPkts 396601 snmpInBadVersions 0 snmpInBadCommunityNames 0 sn...

Страница 394: ...ongDigests 0 usmStatsDecryptionErrors 0 Table 5 3 show snmp counters Output Details Output What It Displays snmpInPkts Number of messages delivered to the SNMP entity from the transport service snmpOu...

Страница 395: ...PDUs delivered to the SNMP protocol entity with the value of the error status field as readOnly snmpInGenErrs Number of SNMP PDUs delivered to the SNMP protocol entity with the value of the error sta...

Страница 396: ...h the value of the error status field as badValue snmpOutGenErrs Number of SNMP PDUs generated by the SNMP protocol entity with the value of the error status field as genErr snmpOutGetRequests Number...

Страница 397: ...were dropped because they appeared outside of the authoritative SNMP engine s window usmStatsUnknownUserNames Number of packets received by the SNMP engine that were dropped because they referenced a...

Страница 398: ...collection of users who share the same SNMP access privileges Community A name used to authenticate SNMPv1 and v2 users Commands The commands used to review and configure SNMP users groups and communi...

Страница 399: ...nformation will be displayed If user is not specified information about all SNMP users will be displayed If remote is not specified user information about the local SNMP engine will be displayed If no...

Страница 400: ...guest SNMP user information EngineId 00 00 00 63 00 00 00 a1 00 00 00 00 Username Guest Auth protocol usmNoAuthProtocol Privacy protocol usmNoPrivProtocol Storage type nonVolatile Row status active Ta...

Страница 401: ...applied If privacy is not specified no encryption will be applied If storage type is not specified nonvolatile will be applied Command Type Switch command Command Mode Read Write user Specifies a nam...

Страница 402: ...ond Series Configuration Guide Example This example shows how to create a new SNMP user named netops By default this user will be registered on the local SNMP engine without authentication and encrypt...

Страница 403: ...model list clear snmp user user remote remote Syntax Description Command Defaults If remote is not specified the user will be removed from the local SNMP engine Command Type Switch command Command Mod...

Страница 404: ...all SNMP groups will be displayed If user is not specified information about all SNMP users will be displayed If security model is not specified user information about all SNMP versions will be displa...

Страница 405: ...ty user name public Group name Anyone Storage type nonVolatile Row status active Security model SNMPv1 Security user name public router1 Group name Anyone Storage type nonVolatile Row status active Ta...

Страница 406: ...rage type is not specified nonvolatile storage will be applied Command Type Switch command Command Mode Read Write Example This example shows how to create an SNMP group called anyone assign a user na...

Страница 407: ...v2c usm Syntax Description Command Defaults If not specified settings related to all security models will be cleared Command Type Switch command Command Mode Read Write Example This example shows how...

Страница 408: ...ommand Defaults If name is not specified information will be displayed for all SNMP communities Command Type Switch command Command Mode Read Only Example This example shows how to display information...

Страница 409: ...l be applied Command Type Switch command community Specifies a community group name securityname securityname Optional Specifies an SNMP security name to associate with this community context context...

Страница 410: ...figuration Guide Command Mode Read Write Examples This example shows how to set an SNMP community name called vip This example shows how to grant SNMP management privileges to vip community from routi...

Страница 411: ...3 2 9 clear snmp community Use this command to delete an SNMP community name clear snmp community name Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Exam...

Страница 412: ...Rights Purpose To review and configure SNMP access rights assigning viewing privileges and security levels to SNMP user groups Commands The commands used to review and configure SNMP access are liste...

Страница 413: ...authentication or privacy are not specified access information for all security levels will be displayed If context is not specified all contexts will be displayed If volatile nonvolatile or read only...

Страница 414: ...ity model USM Security level noAuthNoPriv Read View All Write View Notify View All Context match exact match Storage type nonVolatile Row status active Group NightOperator Security model USM Security...

Страница 415: ...ew SNMP MIB objects Write View Name of the view that allows this group to configure the contents of the SNMP agent Notify View Name of the view that allows this group to send an SNMP trap message Cont...

Страница 416: ...essages sent on behalf of the user are protected from disclosure context context exact prefix Optional Sets the context for this access configuration and specifies that the match must be exact matchin...

Страница 417: ...l be applied If write view is not specified none will be applied If notify view is not specified none will be applied If storage type is not specified entries will be stored as permanent and will be h...

Страница 418: ...cleared If context is not specified none will be applied Command Type Switch command Command Mode Read Write Example This example shows how to clear SNMP version 3 access for the mis group via the aut...

Страница 419: ...s Purpose To review and configure SNMP MIB views SNMP views map SNMP objects to access rights Commands The commands used to review and configure SNMP MIB views are listed below and described in the as...

Страница 420: ...ject volatile nonvolatile read only Syntax Description Command Defaults If no parameters are specified all SNMP MIB view configuration information will be displayed Command Type Switch command Command...

Страница 421: ...torage type nonVolatile Row status active View Name All Subtree OID 0 0 Subtree mask View Type included Storage type nonVolatile Row status active View Name Network Subtree OID 1 3 6 1 2 1 Subtree mas...

Страница 422: ...xt allows all SNMP agents to access all management information MIBs When created using the set snmp access command Section 5 3 3 2 other contexts can be applied to limit access to a subset of manageme...

Страница 423: ...ee use will be included If storage type is not specified nonvolatile permanent will be applied Command Type Switch command Command Mode Read Write Example This example shows how to set an SNMP MIB vie...

Страница 424: ...lete an SNMPv3 MIB view clear snmp view viewname subtree Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to delete SNMP MIB...

Страница 425: ...ircumstances SNMP notifications will be sent A target parameter entry can be bound to a target IP address allowed to receive SNMP notification messages with the set snmp targetaddr command Section 5 3...

Страница 426: ...targetParams volatile nonvolatile read only Syntax Description Command Defaults If targetParams is not specified entries associated with all target parameters will be displayed If not specified entri...

Страница 427: ...arams Security Name public Message Proc Model SNMPv2c Security Level noAuthNoPriv Storage type nonVolatile Row status active Target Parameter Name v3ExampleParams Security Name CharlieDChief Message P...

Страница 428: ...DFE Platinum and Diamond Series Configuration Guide Storage type Whether entry is stored in volatile nonvolatile or read only memory Row status Status of this entry active notInService or notReady Tab...

Страница 429: ...mand Command Mode Read Write paramsname Specifies a name identifying parameters used to generate SNMP messages to a particular target user user Specifies an SNMPv1 or v2 community name or an SNMPv3 us...

Страница 430: ...onfiguration Guide Example This example shows how to set SNMP target parameters named v1ExampleParams for a user named fred using version 3 security model and message processing and authentication Mat...

Страница 431: ...target parameter configuration clear snmp targetparams targetParams Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to clea...

Страница 432: ...ication messages An address configuration can be linked to optional SNMP transmit or target parameters such as timeout retry count and UDP port set with the set snmp targetparams command Section 5 3 5...

Страница 433: ...played for a target address Command Type Switch command Command Mode Read Only Example This example shows how to display SNMP target address information Table 5 9 shows a detailed explanation of the c...

Страница 434: ...gs a location to the target address as a place to send notifications IP Address Target IP address UDP Port Number of the UDP port of the target host to use Target Mask Target IP address mask Timeout T...

Страница 435: ...32 bytes ipaddr Specifies the IP address of the target param param Specifies an entry in the SNMP target parameters table which is used when generating a message to the target Maximum length is 32 byt...

Страница 436: ...ne will be set If not specified storage type will be nonvolatile Command Type Switch command Command Mode Read Write Example This example shows how to configure a trap notification called TrapSink Thi...

Страница 437: ...rgetaddr Use this command to delete an SNMP target address entry clear snmp targetaddr targetAddr Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example T...

Страница 438: ...SNMP trap configuration showing how SNMP notification parameters are associated with security and authorization criteria target parameters and mapped to a management target address refer to Section 5...

Страница 439: ...be displayed If volatile nonvolatile or read only are not specified all storage type entries will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to dis...

Страница 440: ...ow snmp notify Output Details Output What It Displays Notify name A unique identifier used to index the SNMP notify table Notify Tag Name of the entry in the SNMP notify table Notify Type Type of noti...

Страница 441: ...d Defaults If not specified message type will be set to trap If not specified storage type will be set to nonvolatile Command Type Switch command Command Mode Read Write Example This example shows how...

Страница 442: ...ar snmp notify Use this command to clear an SNMP notify configuration clear snmp notify notify Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This...

Страница 443: ...filtering is associated with any SNMP target then no filtering will take place Traps or informs notifications will be sent to all destinations in the SNMP targetAddrTable that have tags matching those...

Страница 444: ...y filter information will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display SNMP notify filter information In this case the notify profile pilot...

Страница 445: ...Syntax Description Command Defaults If not specified mask is not set If not specified subtree will be included If storage type is not specified nonvolatile permanent will be applied Command Type Switc...

Страница 446: ...ation clear snmp notifyfilter profile subtree oid or mibobject Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to delete the...

Страница 447: ...ion Command Defaults If no parameters are specified all notify profile information will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display SNMP n...

Страница 448: ...ve SNMP notifications set snmp notifyprofile profile targetparam targetparam volatile nonvolatile Syntax Description Command Defaults If storage type is not specified nonvolatile permanent will be app...

Страница 449: ...ion clear snmp notifyprofile profile targetparam targetparam Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to delete SNMP...

Страница 450: ...in Step 1 3 Verify if any applicable SNMP notification entries exist or create a new one You will use this entry to send SNMP notification messages to the appropriate management targets created in St...

Страница 451: ...ve the key that SNMP is looking for is the notification entry created with the set snmp notify command which in this case is a key labeled entry1 2 Searches for the doors matching such a key For examp...

Страница 452: ...in fact there The agent checks targetparams entries and determines this description was made with the set snmp targetparams command which tells exactly which SNMP protocol to use and what community n...

Страница 453: ...time to reconfigure the network s active topology when physical topology or configuration parameter changes occur It selects one switch as the root of a Spanning Tree connected active topology and as...

Страница 454: ...the following functions Creating a single Spanning Tree from any arrangement of switching or bridging elements Compensating automatically for the failure removal or addition of any device in an activ...

Страница 455: ...d on reception of agreement BPDUs Control of port forwarding state based on reception of disputed BPDUs Communicating port non forwarding status through traps and syslog messages Disabling a port base...

Страница 456: ...ow of time the port is forced into blocking and held there until it is manually unlocked via management 6 1 4 Process Overview Spanning Tree Configuration Use the following steps as a guide in the Spa...

Страница 457: ...ed section as shown show spantree stats Section 6 2 1 1 show spantree version Section 6 2 1 2 set spantree version Section 6 2 1 3 clear spantree version Section 6 2 1 4 show spantree stpmode Section...

Страница 458: ...set spantree bridgehellomode Section 6 2 1 28 clear spantree bridgehellomode Section 6 2 1 29 show spantree hello Section 6 2 1 31 set spantree hello Section 6 2 1 31 clear spantree hello Section 6 2...

Страница 459: ...Section 6 2 1 56 show spantree spanguardtimeout Section 6 2 1 57 set spantree spanguardtimeout Section 6 2 1 58 clear spantree spanguardtimeout Section 6 2 1 59 show spantree spanguardlock Section 6...

Страница 460: ...ning Tree Bridge Parameters 6 8 Matrix DFE Platinum and Diamond Series Configuration Guide clear spantree newroottrapenable Section 6 2 1 73 clear spantree default Section 6 2 1 74 show spantree debug...

Страница 461: ...be displayed If sid is not specified information for Spanning Tree 0 will be displayed If active is not specified information for all ports will be displayed regardless of whether or not they have re...

Страница 462: ...3d Bridge ID Priority 32768 Bridge Max Age 20 sec Bridge Hello Time 2 sec Bridge Forward Delay 15 sec Topology Change Count 7 Time Since Top Change 00 days 03 19 15 Max Hops 20 Table 6 1 show spantre...

Страница 463: ...n 6 2 1 34 Bridge Hello Time Amount of time in seconds the bridge sends BPDUs This is a default value or is assigned using the set spantree hello command For details refer to Section 6 2 1 31 Bridge F...

Страница 464: ...dress 00 e0 63 93 79 0f Bridge ID Priority 0 Bridge Max Age 20 sec Bridge Hello Time 2 sec Bridge Forward Delay 15 sec Topology Change Count 5 Time Since Top Change 00 days 03 16 54 Max Hops 20 SID Po...

Страница 465: ...is assigned by the Spanning Tree protocol and determines the behavior of the port either sending or receiving BPDUs and forwarding or blocking data traffic Cost The port cost Priority The priority of...

Страница 466: ...ersion Use this command to display the current version of the Spanning Tree protocol running on the device show spantree version Syntax Description None Command Defaults None Command Type Switch comma...

Страница 467: ...example shows how to globally change the Spanning Tree version from the default of MSTP to RSTP NOTE In most networks Spanning Tree version should not be changed from its default setting of mstp Mult...

Страница 468: ...iguration Guide 6 2 1 4 clear spantree version Use this command to reset the Spanning Tree version to MSTP mode clear spantree version Syntax Description None Command Defaults None Command Type Switch...

Страница 469: ...17 6 2 1 5 show spantree stpmode Use this command to display the Spanning Tree Protocol STP mode setting show spantree stpmode Syntax Description None Command Defaults None Command Type Switch command...

Страница 470: ...e Use this command to globally enable or disable the Spanning Tree Protocol STP mode set spantree stpmode none ieee8021 Syntax Description Command Defaults None Command Type Switch command Command Mod...

Страница 471: ...spantree stpmode Use this command to reset the Spanning Tree protocol mode to the default setting of IEEE802 1 This re enables Spanning Tree clear spantree stpmode Syntax Description None Command Defa...

Страница 472: ...this command to display the setting for the maximum number of user configurable Spanning Tree instances show spantree maxconfigurablestps Syntax Description None Command Defaults None Command Type Sw...

Страница 473: ...ree instances set spantree maxconfigurablestps numstps Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the STP max co...

Страница 474: ...maxconfigurablestps Use this command to clear the setting for the maximum number of user configurable Spanning Tree instances clear spantree maxconfigurablestps Syntax Description None Command Defaul...

Страница 475: ...mand to display a list of Multiple Spanning Tree MST instances configured on the device show spantree mstilist Syntax Description None Command Defaults None Command Type Switch command Command Mode Re...

Страница 476: ...et spantree msti sid sid create delete Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to create MST instance 2 sid sid Sets...

Страница 477: ...3 clear spantree msti Use this command to delete one or more Multiple Spanning Tree instances clear spantree msti sid Syntax Description Command Defaults None Command Type Switch command Command Mode...

Страница 478: ...mapped to FIDs this shows to which SID a VLAN is mapped show spantree mstmap fid fid Syntax Description Command Defaults If fid is not specified information for all assigned FIDs will be displayed Com...

Страница 479: ...escription Command Defaults If sid is not specified FID s will be mapped to Spanning Tree 0 Command Type Switch command Command Mode Read Write Example This example shows how to map FID 3 to SID 2 fid...

Страница 480: ...on Guide 6 2 1 16 clear spantree mstmap Use this command to map a FID back to SID 0 clear spantree mstmap fid Syntax Description Command Defaults None Command Type Switch command Command Mode Read Wri...

Страница 481: ...Description Command Defaults If not specified SID assignment will be displayed only for VLANs assigned to any SID other than SID 0 Command Type Switch command Command Mode Read Only Example This exam...

Страница 482: ...None Command Type Switch command Command Mode Read Only Example This example shows how to display the MST configuration identifier elements In this case the default revision level of 0 and the default...

Страница 483: ...ration name and or revision level set spantree mstcfgid cfgname name rev level Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows h...

Страница 484: ...d to reset the MST revision level to a default value of 0 and the configuration name to a default string representing the bridge MAC address clear spantree mstcfgid Syntax Description None Command Def...

Страница 485: ...de Use this command to display the Spanning Tree bridge priority mode setting show spantree bridgeprioritymode Syntax Description None Command Defaults None Command Type Switch command Command Mode Re...

Страница 486: ...scribed in set spantree priority Section 6 2 1 25 set spantree bridgeprioritymode 8021d 8021t Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This...

Страница 487: ...e bridgeprioritymode Use this command to reset the Spanning Tree bridge priority mode to the default setting of 802 1t clear spantree bridgeprioritymode Syntax Description None Command Defaults None C...

Страница 488: ...pantree priority sid Syntax Description Command Defaults If sid is not specified priority will be shown for Spanning Tree 0 Command Type Switch command Command Mode Read Only Example This example show...

Страница 489: ...rity sid Syntax Description Command Defaults If sid is not specified priority will be set on Spanning Tree 0 Command Type Switch command Command Mode Read Write Examples This example shows how to set...

Страница 490: ...shows how to set the bridge priority to 10000 on all SIDs with 8021t priority mode enabled This example shows how to set the bridge priority to 1000 on all SIDs with 8021t priority mode enabled Matrix...

Страница 491: ...o the default value of 32768 clear spantree priority sid Syntax Description Command Defaults If sid is not specified priority will be reset on Spanning Tree 0 Command Type Switch command Command Mode...

Страница 492: ...lo time is being used When disabled per port administrative hello times are being used show spantree bridgehellomode Syntax Description None Command Defaults None Command Type Switch command Command M...

Страница 493: ...Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to disable single Spanning Tree hello mode on the device Per port hello times can n...

Страница 494: ...spantree bridgehellomode Use this command to reset the Spanning Tree administrative hello mode to enabled clear spantree bridgehellomode Syntax Description None Command Defaults None Command Type Swit...

Страница 495: ...43 6 2 1 30 show spantree hello Use this command to display the Spanning Tree hello time show spantree hello Syntax Description None Command Defaults None Command Type Switch command Command Mode Read...

Страница 496: ...he device will transmit BPDUs indicating it is active set spantree hello interval Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example show...

Страница 497: ...6 2 1 32 clear spantree hello Use this command to reset the Spanning Tree hello time to the default value of 2 seconds clear spantree hello Syntax Description None Command Defaults None Command Type...

Страница 498: ...show spantree maxage Use this command to display the Spanning Tree maximum aging time show spantree maxage Syntax Description None Command Defaults None Command Type Switch command Command Mode Read...

Страница 499: ...messages at regular intervals Any port that ages out STP information provided in the last configuration message becomes the designated port for the attached LAN If it is a root port a new root port i...

Страница 500: ...35 clear spantree maxage Use this command to reset the maximum aging time for a Spanning Tree to the default value of 20 seconds clear spantree maxage Syntax Description None Command Defaults None Co...

Страница 501: ...ow spantree fwddelay Use this command to display the Spanning Tree forward delay time show spantree fwddelay Syntax Description None Command Defaults None Command Type Switch command Command Mode Read...

Страница 502: ...e every device must receive information about topology changes before it starts to forward frames In addition each port needs time to listen for conflicting information that would make it return to a...

Страница 503: ...38 clear spantree fwddelay Use this command to reset the Spanning Tree forward delay to the default setting of 15 seconds clear spantree fwddelay Syntax Description None Command Defaults None Command...

Страница 504: ...ree autoedge Use this command to display the status of automatic edge port detection show spantree autoedge Syntax Description None Command Defaults None Command Type Switch command Command Mode Read...

Страница 505: ...this command to enable or disable the automatic edge port detection function set spantree autoedge disable enable Syntax Description Command Defaults None Command Type Switch command Command Mode Read...

Страница 506: ...41 clear spantree autoedge Use this command to reset automatic edge port detection to the default state of enabled clear spantree autoedge Syntax Description None Command Defaults None Command Type S...

Страница 507: ...e legacypathcost Use this command to display the default Spanning Tree path cost setting show spantree legacypathcost Syntax Description None Command Defaults None Command Type Switch command Command...

Страница 508: ...ble Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the default path cost values to 802 1D NOTE By default legacy pat...

Страница 509: ...spantree legacypathcost Use this command to set the Spanning Tree default value for legacy path cost to 802 1t values clear spantree legacypathcost Syntax Description None Command Defaults None Comman...

Страница 510: ...d to display the status of topology change trap suppression on Rapid Spanning Tree edge ports show spantree tctrapsuppress Syntax Description None Command Defaults None Command Type Switch command Com...

Страница 511: ...ented from sending topology change traps This is because there is usually no need for network management to monitor edge port STP transition states such as when PCs are powered on When topology change...

Страница 512: ...1 47 clear spantree tctrapsuppress Use this command to clear topology change trap suppression settings clear spantree tctrapsuppress Syntax Description None Command Defaults None Command Type Switch c...

Страница 513: ...6 2 1 48 show spantree txholdcount Use this command to display the maximum BPDU transmission rate show spantree txholdcount Syntax Description None Command Defaults None Command Type Switch command C...

Страница 514: ...l be transmitted before transmissions are subject to a one second timer set spantree txholdcount txholdcount Syntax Description Command Defaults None Command Type Switch command Command Mode Read Writ...

Страница 515: ...6 63 6 2 1 50 clear spantree txholdcount Use this command to reset the transmit hold count to the default value of 6 clear spantree txholdcount Syntax Description None Command Defaults None Command Ty...

Страница 516: ...51 show spantree maxhops Use this command to display the Spanning Tree maximum hop count show spantree maxhops Syntax Description None Command Defaults None Command Type Switch command Command Mode R...

Страница 517: ...the information for a particular Spanning Tree instance may traverse via relay of BPDUs within the applicable MST region before being discarded set spantree maxhops max_hop_count Syntax Description C...

Страница 518: ...ion Guide 6 2 1 53 clear spantree maxhops Use this command to reset the maximum hop count to the default value of 20 clear spantree maxhops Syntax Description None Command Defaults None Command Type S...

Страница 519: ...w spantree spanguard Use this command to display the status of the Spanning Tree span guard function show spantree spanguard Syntax Description None Command Defaults None Command Type Switch command C...

Страница 520: ...a BPDU when that port has been defined as an edge user port as described in Section 6 2 2 20 This port will remain disabled until the amount of time defined by the set spantree spanguardtimeout Secti...

Страница 521: ...ar spantree spanguard Use this command to resets the status of the Spanning Tree span guard function to disabled clear spantree spanguard Syntax Description None Command Defaults None Command Type Swi...

Страница 522: ...spanguardtimeout Use this command to display the Spanning Tree span guard timeout setting show spantree spanguardtimeout Syntax Description None Command Defaults None Command Type Switch command Comma...

Страница 523: ...mount of time in seconds an edge port will remain locked by the span guard function set spantree spanguardtimeout timeout Syntax Description Command Defaults None Command Type Switch command Command M...

Страница 524: ...ee spanguardtimeout Use this command to reset the Spanning Tree span guard timeout to the default value of 300 seconds clear spantree spanguardtimeout Syntax Description None Command Defaults None Com...

Страница 525: ...s show spantree spanguardlock port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to display the span guard lock stat...

Страница 526: ...led it locks ports that receive BPDUs when those ports have been defined as edge user ports as described in Section 6 2 2 20 clear spantree spanguardlock port string set spantree spanguardlock port st...

Страница 527: ...enable Use this command to displays the state of the Spanning Tree span guard trap function show spantree spanguardtrapenable Syntax Description None Command Defaults None Command Type Switch command...

Страница 528: ...g of an SNMP trap message when span guard detects that an unauthorized port has tried to join the Spanning Tree set spantree spanguardtrapenable disable enable Syntax Description Command Defaults None...

Страница 529: ...ardtrap enable Use this command to reset the Spanning Tree span guard trap function back to the default state of enabled clear spantree spanguardtrapenable Syntax Description None Command Defaults Non...

Страница 530: ...show spantree backuproot sid Syntax Description Command Defaults If sid is not specified status will be shown for Spanning Tree 0 Command Type Switch command Command Mode Read Only Example This examp...

Страница 531: ...vent the root bridge is lost If this happens the backup root will dynamically lower its bridge priority so that it will be selected as the new root over the lost root bridge set spantree backuproot si...

Страница 532: ...Spanning Tree backup root function to the default state of disabled clear spantree backuproot sid Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example T...

Страница 533: ...dable Use this command to display the state of the Spanning Tree backup root trap function show spantree backuproottrapenable Syntax Description None Command Defaults None Command Type Switch command...

Страница 534: ...hen SNMP trap messageing is configured this sends a trap message when the back up root function makes a Spanning Tree the new root of the network set spantree backuproottrapenable enable disable Synta...

Страница 535: ...ackuproottrapenable Use this command to resets the Spanning Tree backup root trap function to the default state of disabled clear spantree backuproottrapenable Syntax Description None Command Defaults...

Страница 536: ...trapendable Use this command to display the state of the Spanning Tree new root trap function show spantree newroottrapenable Syntax Description None Command Defaults None Command Type Switch command...

Страница 537: ...rap function When SNMP trap messaging is configured this sends a trap message when a Spanning Tree becomes the new root of the network set spantree newroottrapenable enable disable Syntax Description...

Страница 538: ...ewroottrapenable Use this command to reset the Spanning Tree new root trap function back to the default state of enabled clear spantree newroottrapenable Syntax Description None Command Defaults None...

Страница 539: ...a Spanning Tree clear spantree default sid Syntax Description Command Defaults If sid is not specified defaults will be restored on Spanning Tree 0 Command Type Switch command Command Mode Read Write...

Страница 540: ...o port information will be displayed If sid is not specified debug counters will be displayed for Spanning Tree 0 Command Type Switch command Command Mode Read Only port port string Optional Displays...

Страница 541: ...0 STP TC BPDU Rx Count 0 STP TC BPDU Tx Count 0 RST BPDU Rx Count 81812 RST BPDU Tx Count 790319 RST TC BPDU Rx Count 2131 RST TC BPDU Tx Count 26623 MST BPDU Rx Count 0 MST BPDU Tx Count 0 MST CIST T...

Страница 542: ...s Configuration Guide 6 2 1 76 clear spantree debug Use this command to clear Spanning Tree debug counters clear spantree debug Syntax Description None Command Defaults None Command Type Switch comman...

Страница 543: ...meters are listed below and described in the associated section as shown show spantree portenable Section 6 2 2 1 set spantree portenable Section 6 2 2 2 clear spantree portenable Section 6 2 2 3 show...

Страница 544: ...n Guide show spantree adminedge Section 6 2 2 19 set spantree adminedge Section 6 2 2 20 clear spantree adminedge Section 6 2 2 21 show spantree operedge Section 6 2 2 22 show spantree adminpoint Sect...

Страница 545: ...able port port string Syntax Description Command Defaults If port string is not specified status will be displayed for all ports Command Type Switch command Command Mode Read Only Example This example...

Страница 546: ...set spantree portenable port string enable disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to enable Spanning Tree p...

Страница 547: ...more Spanning Tree ports to enabled clear spantree portenable port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to...

Страница 548: ...ortadmin port port string Syntax Description Command Defaults If port string is not specified status will be displayed for all ports Command Type Switch command Command Mode Read Only Example This exa...

Страница 549: ...set spantree portadmin port string disable enable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to disable Spanning Tree o...

Страница 550: ...o enable on one or more ports clear spantree portadmin port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to reset...

Страница 551: ...forces a port to transmit MSTP BPDUs set spantree protomigration port string true Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example show...

Страница 552: ...l Spanning Tree ports If sid is not specified current port state will be displayed for Spanning Tree 0 Command Type Switch command Command Mode Read Only Example This example shows how to display the...

Страница 553: ...e topology of the bridged LAN It receives Spanning Tree configuration messages but does not forward packets show spantree blockedports sid Syntax Description Command Defaults If sid is not specified b...

Страница 554: ...pecified port priority will be displayed for all Spanning Tree ports If sid is not specified port priority will be displayed for Spanning Tree 0 Command Type Switch command Command Mode Read Only Exam...

Страница 555: ...Command Mode Read Write Example This example shows how to set the priority of fe 1 3 to 240 on SID 1 port string Specifies the port s for which to set Spanning Tree port priority For a detailed descri...

Страница 556: ...s If sid is not specified port priority will be set for Spanning Tree 0 Command Type Switch command Command Mode Read Write Example This example shows how to reset the priority of fe 1 3 to 128 on SID...

Страница 557: ...Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the hello time to 3 seconds for port fe 1 4 NOTE This command can be...

Страница 558: ...eset the hello time for one or more Spanning Tree ports to the default of 2 seconds clear spantree porthello port string Syntax Description Command Defaults None Command Type Switch command Command Mo...

Страница 559: ...for all Spanning Tree ports If sid is not specified port cost will be displayed for all Spanning Trees Command Type Switch command Command Mode Read Only Example This example shows how to display the...

Страница 560: ...be displayed If sid is not specified admin path cost for Spanning Tree 0 will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display the admin path c...

Страница 561: ...3 2 on SID 1 NOTE By default this value is set to 0 which forces the port to recalculate Spanning Tree path cost based on the speed of the port and whether or not legacy path cost is enabled For deta...

Страница 562: ...efaults If sid is not specified admin path cost will be reset for Spanning Tree 0 Command Type Switch command Command Mode Read Write Example This example shows how to reset the admin path cost to 0 f...

Страница 563: ...ion Command Defaults If port string is not specified edge port administrative status will be displayed for all Spanning Tree ports Command Type Switch command Command Mode Read Only Example This examp...

Страница 564: ...port set spantree adminedge port string true false Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set fe 1 11 as an edge...

Страница 565: ...g Tree port to non edge status clear spantree adminedge port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to reset...

Страница 566: ...escription Command Defaults If port string is not specified edge port operating status will be displayed for all Spanning Tree ports Command Type Switch command Command Mode Read Only Example This exa...

Страница 567: ...ing Syntax Description Command Defaults If port string is not specified status will be displayed for all Spanning Tree port s Command Type Switch command Command Mode Read Only Example This example sh...

Страница 568: ...x Description Command Defaults If not specified status will be displayed for all ports Command Type Switch command Command Mode Read Only Example This example shows how to display the point to point s...

Страница 569: ...Command Mode Read Write Example This example shows how to set the LAN attached to fe 1 3 as a point to point segment port string Specifies the port on which to set point to point protocol status For a...

Страница 570: ...ment attached to a Spanning Tree port to auto mode clear spantree adminpoint port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This examp...

Страница 571: ...ct parameters are listed below and described in the associated section as shown set spantree lp Section 6 2 3 1 show spantree lp Section 6 2 3 2 clear spantree lp Section 6 2 3 3 show spantree lplock...

Страница 572: ...atures 6 120 Matrix DFE Platinum and Diamond Series Configuration Guide set spantree disputedbpduthreshold Section 6 2 3 18 show spantree disputedbpduthreshold Section 6 2 3 19 clear spantree disputed...

Страница 573: ...dence over per port STP enable disable portAdmin Normally portAdmin disabled would cause a port to go immediately to forwarding If Loop Protect is enabled that port should go to listening and remain t...

Страница 574: ...ports If no SID is specified SID 0 is assumed Command Type Switch command Command Mode Read Only Example This example shows how to display Loop Protect status on fe 2 3 port string Optional Specifies...

Страница 575: ...and Defaults If no SID is specified SID 0 is assumed Command Type Switch command Command Mode Read Write Example This example shows how to return the Loop Protect state on fe 2 3 to disabled port stri...

Страница 576: ...k command show spantree lplock port port string sid sid Syntax Description Command Defaults If no port string is specified status is displayed for all ports If no SID is specified SID 0 is assumed Com...

Страница 577: ...mmand Mode Read Only Example This example shows how to clear Loop Protect lock from ge 1 1 port string Specifies port s for which to clear the Loop Protect lock For a detailed description of possible...

Страница 578: ...s used If the value is false then there is some ambiguity as to whether an Active Partner timeout is due to a loop protection event or is a normal situation due to the fact that the partner port does...

Страница 579: ...ring Spanning Tree Loop Protect Features Matrix DFE Platinum and Diamond Series Configuration Guide 6 127 Example This example shows how to set the Loop Protect capable partner to true for ge 1 1 Matr...

Страница 580: ...ommand Defaults If no port string is specified Loop Protect capability for link partners is displayed for all ports Command Type Switch command Command Mode Read Only Example This example shows how to...

Страница 581: ...ult state of false clear spantree lpcapablepartner port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to reset the...

Страница 582: ...global integer variable that provides protection in the case of intermittent failures The default value is 3 If the event counter reaches the threshold within a given period the event window then the...

Страница 583: ...lpthreshold Use this command to display the current value of the Loop Protect event threshold show spantree lpthreshold Syntax Description None Command Defaults None Command Type Switch command Comman...

Страница 584: ...ar spantree lpthreshold Use this command to return the Loop Protect event threshold to its default value of 3 clear spantree lpthreshold Syntax Description None Command Defaults None Command Type Swit...

Страница 585: ...op Protect Window is a timer value in seconds that defines a period during which Loop Protect events are counted The default value is 180 seconds If the timer is set to 0 the event counter is not rese...

Страница 586: ...pantree lpwindow Use this command to display the current Loop Protect event window value show spantree lpwindow Syntax Description None Command Defaults None Command Type Switch command Command Mode R...

Страница 587: ...spantree lpwindow Use this command to reset the Loop Protect event window to the default value of 180 seconds clear spantree lpwindow Syntax Description None Command Defaults None Command Type Switch...

Страница 588: ...disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Usage Loop Protect traps are sent when a Loop Protect event occurs that is when a port goes to lis...

Страница 589: ...apenable Use this command to display the current status of Loop Protect event notification show spantree lptrapenable Syntax Description None Command Defaults None Command Type Switch command Command...

Страница 590: ...penable Use this command to return the Loop Protect event notification state to its default state of disabled clear spantree lptrapenable Syntax Description None Command Defaults None Command Type Swi...

Страница 591: ...is forced to the listening state Refer to the 802 1Q 2005 standard IEEE Standard for Local and Metropolitan Area Networks Virtual Bridged Local Area Networks for a full description of the dispute mech...

Страница 592: ...t Configuring Spanning Tree Loop Protect Features 6 140 Matrix DFE Platinum and Diamond Series Configuration Guide Example This example shows how to set the disputed BPDU threshold value to 5 Matrix r...

Страница 593: ...bpduthreshold Use this command to display the current value of the disputed BPDU threshold show spantree disputedbpduthreshold Syntax Description None Command Defaults None Command Type Switch command...

Страница 594: ...e this command to return the disputed BPDU threshold to its default value of 0 meaning that disputed BPDU traps should not be sent clear spantree disputedbpduthreshold Syntax Description None Command...

Страница 595: ...nd Command Mode Read Only Usage Exceptional conditions causing a port to be placed in listening or blocking state include a Loop Protect event receipt of disputed BPDUs and loopback detection Example...

Страница 596: ...Spanning Tree Configuration Command Set Configuring Spanning Tree Loop Protect Features 6 144 Matrix DFE Platinum and Diamond Series Configuration Guide...

Страница 597: ...security 7 1 VLAN CONFIGURATION SUMMARY Virtual LANs allow the network administrator to partition network traffic into logical groups and control the flow of that traffic through the network Once the...

Страница 598: ...entheses 1 Review existing VLANs Section 7 3 1 2 Create and name VLANs Section 7 3 2 3 Assign port VLAN IDs and ingress filtering Section 7 3 3 4 Configure VLAN Egress Section 7 3 4 5 Create a secure...

Страница 599: ...o display a list of VLANs currently configured on the device to determine how one or more VLANs were created the ports allowed and disallowed to transmit traffic belonging to VLAN s and if those ports...

Страница 600: ...ed to static and dynamic VLANs will be displayed Command Type Switch command Command Mode Read Only static Optional Displays information related to static VLANs Static VLANs are manually created using...

Страница 601: ...1 NAME DEFAULT VLAN Status Enabled VLAN Type Permanent FID 1 Creation Time 4 days 9 hours 4 minutes 50 seconds ago Egress Ports host 0 1 fe 1 1 10 ge 2 1 4 fe 3 1 7 lag 0 1 32 Forbidden Egress Ports N...

Страница 602: ...g and Naming Static VLANs Purpose To create a new static VLAN or to enable or disable existing VLAN s Commands The commands used to create and name static VLANs are listed below and described in the a...

Страница 603: ...lts None Command Type Switch command Command Mode Read Write Examples This example shows how to create VLAN 3 This example shows how to disable VLAN 3 NOTES Each VLAN ID must be unique If a duplicate...

Страница 604: ...ame for a new or existing VLAN set vlan name vlan list vlan name Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the...

Страница 605: ...mand to remove a static VLAN from the list of VLANs recognized by the device clear vlan vlan list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example T...

Страница 606: ...Use this command to remove the name of a VLAN from the VLAN list clear vlan name vlan list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This exa...

Страница 607: ...d PVID override has been enabled for a policy profile and assigned to port s associated with the PVID as described in Section 8 3 1 2 For more information about configuring user policy profiles includ...

Страница 608: ...7 12 Matrix DFE Platinum and Diamond Series Configuration Guide show vlan constraint Section 7 3 3 9 set vlan constraint Section 7 3 3 10 clear vlan constraint Section 7 3 3 11 show port discard Sect...

Страница 609: ...string is not specified port VLAN information for all ports will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display PVIDs assigned to Fast Ethern...

Страница 610: ...ort string pvid modify egress no modify egress Syntax Description Command Defaults If not specified the egress list will be modified Command Type Switch command Command Mode Read Write NOTE For inform...

Страница 611: ...ows how to add fe 1 10 to the port VLAN list of VLAN 4 PVID 4 Since VLAN 4 is a new VLAN it is created Then port fe 1 10 is added to VLAN 4 s untagged egress list and is cleared from the egress list o...

Страница 612: ...host VLAN ID 1 clear port vlan port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to reset the Fast Ethernet ports...

Страница 613: ...ch command Command Mode Read Only Example This example shows how to display the interface entry for VLAN 1 Table 7 2 provides an explanation of the command output vlan list Displays the MIB2 interface...

Страница 614: ...ies will be created as nonvolatile Command Type Switch command Command Mode Read Write Example This example shows how to create a volatile interface entry mapped to VLAN 1 vlan list Specifies the VLAN...

Страница 615: ...e this command to clear the MIB II interface entry mapped to a VLAN clear vlan interface vlan list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example...

Страница 616: ...string Syntax Description Command Defaults If port string is not specified ingress filtering status for all ports will be displayed Command Type Switch command Command Mode Read Only Example This exa...

Страница 617: ...a VLAN ID on the port s egress list then the frame is dropped Ingress filtering is implemented according to the IEEE 802 1Q standard set port ingress filter port string disable enable Syntax Descript...

Страница 618: ...s If vlan list is not specified settings for all VLANs will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display the constraint settings for VLAN 1...

Страница 619: ...nd Diamond Series Configuration Guide 7 23 VLAN SET Constraint set ID VLAN SET TYPE Whether or not this constraint is sharing the same filter database as other VLANs in this set or is using an indepen...

Страница 620: ...VLAN constraint will be set to independent Command Type Switch command Command Mode Read Write Example This example shows how to apply a constraint 3 to VLAN 1 using an independent filtering database...

Страница 621: ...to clear a constraint applied to a VLAN clear vlan constraint vlan list set num Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows...

Страница 622: ...s received show port discard port string Syntax Description Command Defaults If port string is not specified frame discarded mode will be displayed for all ports Command Type Switch command Command Mo...

Страница 623: ...Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set Fast Ethernet port 7 in module2 to discard both tagged and untagged frames...

Страница 624: ...ult setting none clear port discard port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to reset Fast Ethernet port...

Страница 625: ...on or through dynamic mechanisms i e GVRP policy classification or Enterasys dynamic egress Setting a port to forbidden prevents it from participating in the specified VLAN and ensures that any dynami...

Страница 626: ...ple This example shows you how to show VLAN egress information for Fast Ethernet ports 1 through 3 in module 1 In this case all three ports are allowed to transmit VLAN 1 frames as tagged and VLAN 10...

Страница 627: ...example shows how to add Fast Ethernet ports 5 through 10 in module 1 to the egress list of VLAN 7 This means that these ports will transmit VLAN 7 frames as tagged vlan list Specifies the VLAN where...

Страница 628: ...his example shows how to forbid Fast Ethernet ports 13 through 15 in module 1 from joining VLAN 7 and disallow egress on those ports This example shows how to allow Fast Ethernet port 2 in module 1 to...

Страница 629: ...ort 14 in module 3 from the egress list of VLAN 9 This example shows how to remove all Fast Ethernet ports in module 2 from the egress list of VLAN 4 vlan list Specifies the number of the VLAN from wh...

Страница 630: ...ss vlan list Syntax Description Command Defaults If vlan list is not specified status for all VLANs where dynamic egress is enabled will be displayed Command Type Switch command Command Mode Read Only...

Страница 631: ...d the port receiving a tagged frame to the VLAN egress list of the port according to the frame VLAN ID set vlan dynamicegress vlan list enable disable Syntax Description Command Defaults None Command...

Страница 632: ...Table 7 4 and described in the associated sections as shown This example assumes the management station is attached to fe 1 1 and wants untagged frames The process described in this section would be...

Страница 633: ...rmation is transmitted out GVRP configured ports on the device in a GARP formatted frame using the GVRP multicast MAC address A switch router that receives this frame examines the frame and extracts t...

Страница 634: ...as a member of VLAN Blue Port declaring VLAN Blue D R 3680_77 1 1 2 3 D R D Switch 1 1 R R 3 Switch 2 1 2 D R D 2 1 4 6 8 10 12 14 16 3 5 7 9 11 13 15 18 17 20 22 24 26 28 30 32 19 21 23 25 27 29 31 3...

Страница 635: ...ation Guide 7 39 Commands The commands used to configure GVRP are listed below and described in the associated section as shown show gvrp Section 7 3 6 1 show garp timer Section 7 3 6 2 set gvrp Secti...

Страница 636: ...e This example shows how to display GVRP status for the device and for Fast Ethernet port 1 in module 2 Table 7 5 provides an explanation of the command output port string Optional Displays GVRP confi...

Страница 637: ...x DFE Platinum and Diamond Series Configuration Guide 7 41 GVRP status Whether GVRP is enabled or disabled on the port Last PDU Origin MAC address of the last GVRP frame received on the port Table 7 5...

Страница 638: ...rmation will be displayed for all ports Command Type Switch command Command Mode Read Only Example This example shows how to display GARP timer information on Fast Ethernet ports 1 through 10 in modul...

Страница 639: ...Matrix rw show garp timer fe 1 1 10 Port based GARP Configuration Timer units are centiseconds Port Number Join Leave Leaveall fe 1 1 20 60 1000 fe 1 2 20 60 1000 fe 1 3 20 60 1000 fe 1 4 20 60 1000 f...

Страница 640: ...ed for all ports Command Type Switch command Command Mode Read Write Examples This example shows how to enable GVRP globally on the device This example shows how to disable GVRP globally on the device...

Страница 641: ...port string Syntax Description Command Defaults If port string is not specified GVRP status will be cleared for all ports Command Type Switch command Command Mode Read Write Examples This example show...

Страница 642: ...set the leave timer value to 300 centiseconds for all ports NOTE The setting of these timers is critical and should only be changed by personnel familiar with the 802 1Q standards documentation which...

Страница 643: ...d Set Enabling Disabling GVRP Matrix DFE Platinum and Diamond Series Configuration Guide 7 47 This example shows how to set the leaveall timer value to 20000 centiseconds for all ports Matrix rw set g...

Страница 644: ...red Command Type Switch command Command Mode Read Write Example This example shows how to reset the GARP leave timer to 60 centiseconds on Fast Ethernet port 5 in module 2 join Optional Resets the joi...

Страница 645: ...d frame filtering policies configured for a particular VLAN or Class of Service CoS Assign or unassign ports to policy profiles so that only ports activated for a profile will be allowed to transmit f...

Страница 646: ...3 POLICY CLASSIFICATION CONFIGURATION COMMAND SET 8 3 1 Configuring Policy Profiles Purpose To review create change and remove policy profiles for managing network resources Commands The commands used...

Страница 647: ...ix DFE Platinum and Diamond Series Configuration Guide 8 3 show policy syslog Section 8 3 1 12 set policy syslog Section 8 3 1 13 clear policy syslog Section 8 3 1 14 set policy maptable Section 8 3 1...

Страница 648: ...de Read Only Example This example shows how to display policy information for policy profile 11 all profile index Displays policy information for all profile indexes or a specific profile index consec...

Страница 649: ...is enabled CoS Status Whether or not Class of Service override is enabled or disabled for this profile If all the classification rules associated with this profile are missed then this parameter if s...

Страница 650: ...ssed then this parameter if specified determines default behavior pvid pvid Optional Specifies the PVID to assign to packets if PVID override is enabled and invoked as the default behavior cos status...

Страница 651: ...d Optional Appends this policy profile setting to settings previously specified for this policy profile by the egress vlans forbidden vlans or untagged vlans parameters If append is not used previous...

Страница 652: ...his command to delete a policy profile entry clear policy profile profile index Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows...

Страница 653: ...Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to display invalid policy action and count information action count all Shows the action the de...

Страница 654: ...valid action default policy drop forward Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to assign a drop action to invalid...

Страница 655: ...Use this command to reset the action the device will apply to an invalid or unknown policy to the default action of applying the default policy clear policy invalid action Syntax Description None Com...

Страница 656: ...ules to overwrite all tagged TCI frames ingressing on those ports show port tcioverwrite port string Syntax Description Command Defaults If port string is not specified TCI overwrite status will be di...

Страница 657: ...n the VLAN tag s TCI field It will also overwrite ingressing frames tagged to a port VLAN and policy assignment if a policy has not already been assigned set port tcioverwrite port string enable disab...

Страница 658: ...w policy accounting Use this command to display the status of policy accounting show policy accounting Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only...

Страница 659: ...licy accounting which controls the collection of classification rule statistics This function is enabled by default set policy accounting enable disable Syntax Description Command Defaults None Comman...

Страница 660: ...Guide 8 3 1 11 clear policy accounting Use this command to restore policy accounting to its default state of enabled clear policy accounting Syntax Description None Command Defaults None Command Type...

Страница 661: ...chine readable or human readable show policy syslog machine readable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to displ...

Страница 662: ...Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the device formatting of rule usage messages as machine readable machine readable Set t...

Страница 663: ...uman readable clear policy syslog machine readable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to clear the machine read...

Страница 664: ...and Mode Read Write Example This example shows how to set the Policy Profile mappings table for VLAN 3 and for Policy ID 8 This example shows how to use both tunnel and policy attributes in the RADIUS...

Страница 665: ...show policy maptable vlan list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Example This example shows the Policy Profile mappings table for all configured V...

Страница 666: ...command to clear the VLAN ID Policy Profile mappings table clear policy maptable vlan list response Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example...

Страница 667: ...y profiles and ports are listed below and described in the associated section as shown show policy rule Section 8 3 2 1 show policy capability Section 8 3 2 2 set policy classify set policy rule Secti...

Страница 668: ...pid admin pid syslog enable disable verbose trap enable disable disable port enable disable usage list display if used Syntax Description attribute Displays the attributes of the specified rules all...

Страница 669: ...ort rules udpdestport Displays UDP destination port rules udpsourceportip Displays UDP source port rules vlantag Displays VLAN tag rules data Not required for ipfrag classification Displays rules for...

Страница 670: ...d or forwarded dynamic pid dynamic pid Displays rules associated with a specific dynamic policy profile index ID cos cos Optional Displays rules for a Class of Service value admin pid admin pid Displa...

Страница 671: ...5 2 Ether 33011 0x80F3 16 All A NV Y Y 105 2 Ether 33079 0x8137 16 All A NV Y Y 101 Matrix rw show policy rule admin pid 1 Admin Rule Type Rule Data Mk PortStr RS ST S T D dPID aPID U admin Port fe 1...

Страница 672: ...t Syslog is enabled Y or disabled for this rule T Whether or not SNMP traps are enabled Y or disabled for this rule D Whether or not the port disable feature is enabled Y or disabled for this rule Vla...

Страница 673: ...iable traffic attributes The next two columns from the left indicate how policy profiles may be assigned either administratively or dynamically The next four columns from the left indicate the actions...

Страница 674: ...urce address X X X X X X X X X IPX destination address X X X X X X X X X IPX source socket X X X X X X X X X IPX destination socket X X X X X X X X X IPX transmission control X X X X X X X X X IPX typ...

Страница 675: ...led when created profile index Specifies that this is an administrative rule or associates this classification rule with a policy profile index configured with the set policy profile command Section 8...

Страница 676: ...ination IPX address udpportsource UDP port source 0 65535 udpportdest UDP port destination 0 65535 tcpportsource TCP port source 0 65535 tcpportdest TCP port destination 0 65535 ipxsourcesocket Classi...

Страница 677: ...able port enable disable Syntax Description NOTE Classification rules are automatically enabled when created admin profile profile index Specifies that this is an administrative rule or associates thi...

Страница 678: ...Information port Classifies based on port string tcpdestportip Classifies based on TCP destination port with optional post fix IP address tcpsourceportip Classifies based on TCP source port optional...

Страница 679: ...e type non volatile volatile Adds or removes this entry from non volatile storage vlan vlan Classifies to a VLAN ID drop forward Specifies that packets within this classification will be dropped or fo...

Страница 680: ...cation rule 2 as an administrative profile and assign it to ingress port fe 1 1 This example shows how to classify all Ethernet II Type 1526 frames to administrative policy profile 2 Table 8 3 provide...

Страница 681: ...packet 0 255 1 8 ipxclass Transmission control Class of Service field in IPX 0 255 1 8 Destination or Source IPX Network ipxdest ipxsource IPX Address 0 0xffffffff 1 32 Destination or Source IPX Socke...

Страница 682: ...portip TCP Port Number with optional post fix IP address ab c d e f 0 65535 1 1 1 1 or 0 0xFFFF 1 1 1 1 1 48 Destination or Source UDP port udpsourceportip udpdestportip UDP Port Number with optional...

Страница 683: ...all pid entries Deletes all rules associated with the specified policy profile index ID ether Deletes associated Ethernet II classification rule icmptype Deletes associated ICMP classification rule i...

Страница 684: ...port classification rule with optional post fix IP address tcpsourceportip Deletes associated TCP source port classification rule with optional post fix IP address udpdestportip Deletes associated UDP...

Страница 685: ...fication Rules to Policy Profiles Matrix DFE Platinum and Diamond Series Configuration Guide 8 41 Example This example shows how to delete all classification rule entries associated with policy profil...

Страница 686: ...guration Guide 8 3 2 6 clear policy all rules Use this command to remove all admin and classification rules clear policy all rules Syntax Description None Command Defaults None Command Type Switch com...

Страница 687: ...Write Example This example shows how to assign an administrative rule with an index of 20 to port fe 1 3 NOTE The set policy rule command Section 8 3 2 4 used with the admin profile parameter will ass...

Страница 688: ...play a list of currently supported traffic rules applied to the admininstrative profile for one or more ports show policy allowed type port string verbose Syntax Description Command Defaults If verbos...

Страница 689: ...TED AND ALLOWED TRAFFIC RULE TYPES o Means Traffic Rule Type is supported on this bridge port Means Traffic Rule Type is supported and allowed on this bridge port TRAFFIC RULE TYPES MAC IPX IPv6 IP UD...

Страница 690: ...ify Use this command to display a count of the number of times the device has dropped Syslog and or trap notifications of rule usage on ports show policy dropped notify Syntax Description None Command...

Страница 691: ...nly rule type 1 source MAC address classification to be applied to the admin profile for port ge 1 5 This example shows how to clear only rule type 27 VLAN classification from the allowed rule type li...

Страница 692: ...s currently assigned to the admin profile for one or more ports This will reassign the default setting which is all rules are allowed clear policy allowed type port string Syntax Description Command D...

Страница 693: ...d rule This command is only in effect if the port disable function has been enabled using the set policy rule command as described in Section 8 3 2 4 show policy disabled ports Syntax Description None...

Страница 694: ...on has been enabled using the set policy rule command as described in Section 8 3 2 4 To become active again disabled ports must also be removed from the policy usage list as described in Section 8 3...

Страница 695: ...s those associated with an administrative profile rule or those associated with a specific profile rule Valid profile index values are 1 1023 ether Clears Ethernet II rule usage statistics icmptype Cl...

Страница 696: ...usage statistics tci Clears Tag Control Information rule usage statistics tcpdestport Clears TCP destination port rule usage statistics tcpsourceport Clears TCP source port rule usage statistics udpd...

Страница 697: ...se the auto clear function has not been configured all Displays all auto clear status information link Displays rule usage when a link s operating status of up is detected interval Displays the interv...

Страница 698: ...how to clear the rule usage list when a rule assigning a profile is activated on all Fast Ethernet ports link Enables or disables autoclear when link operstatus up is detected interval interval Specif...

Страница 699: ...all link interval profile ports Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to clear all policy auto clear settings all...

Страница 700: ...to clear rule port hit indications on one or more ports clear policy port hit all port list port list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Exam...

Страница 701: ...ransmit queues as described in this section Configuring transmit queueing and rate limiting on a per port basis as described in Chapter 9 By defult policy based CoS is disabled on the device and defau...

Страница 702: ...ction 8 3 3 2 show cos port type Section 8 3 3 3 CoS CLI Displays on Matrix DFE Gold or NSA Systems Some of the CLI output in this section shows examples of CoS configurations on a Matrix DFE Platinum...

Страница 703: ...ion 8 3 3 10 set cos port resource irl Section 8 3 3 11 clear cos port resource irl Section 8 3 3 12 set cos port resource txq Section 8 3 3 13 clear cos port resource txq Section 8 3 3 14 show cos re...

Страница 704: ...on Guide 8 3 3 1 show cos state Use this command to display the Class of Service enable state show cos state Syntax Description None Command Defaults None Command Type Switch command Command Mode Read...

Страница 705: ...8 61 8 3 3 2 set cos state Use this command to enable or disable Class of Service set cos state enable disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read W...

Страница 706: ...which is available only on Matrix DFE Platinum Series chassis based modules designates the DFE Platinum 7G4270 12 module Port type 1 designates all other modules including Gold DFE and NSA modules Ot...

Страница 707: ...Kbps kilobits per second Mbps megabits per second Gbps gigabits per second Tbps terabits per second Number of slices Port type Number of Supported Eligible Unselected Index description queues rate typ...

Страница 708: ...E Platinum chassis based systems only DFE P or DFE G 8 IRL for port type 1 IRL Number of slices Number of queues The total number of slices of transmit resources that can be divided among port queues...

Страница 709: ...CoS units of measure will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to show all Class of Service IRL unit of measure information irl txq Optional...

Страница 710: ...ed all rate limiting information for all port types will be displayed Command Type Switch command Command Mode Read Only irl txq Optional Displays inbound rate limiting or transmit queue information g...

Страница 711: ...s queue Q 0 0 Q 1 0 Q 2 0 Q 3 0 Q 4 0 Q 5 0 Q 6 0 Q 7 0 Q 8 0 Q 9 0 Q 10 0 Q 11 0 Q 12 0 Q 13 0 Q 14 0 Q 15 64 Percentage queue Q 0 0 Q 1 0 Q 2 0 Q 3 0 Q 4 0 Q 5 0 Q 6 0 Q 7 0 Q 8 0 Q 9 0 Q 10 0 Q 11...

Страница 712: ...nd Type Switch command Command Mode Read Write Example This example shows how to create a CoS inbound rate limiting port group entry named test irl with a port group ID of 1 and a port type ID of 1 gr...

Страница 713: ...roup type index entry name ports Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to delete the CoS inbound rate limiting por...

Страница 714: ...allocations will be applied Command Type Switch command group type index Specifies a transmit queue port group type index for this entry Valid entries are in the form of group type Group can be 0 7 w...

Страница 715: ...S Matrix DFE Platinum and Diamond Series Configuration Guide 8 71 Command Mode Read Write Example This example shows how to create a CoS transmit queue port group entry named test txq with a port grou...

Страница 716: ...b percentage Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to clear all non default CoS transmit queue port group entries...

Страница 717: ...ce violators Syntax Description Command Defaults If no options are specified all rate limiting information for all port types will be displayed Command Type Switch command Command Mode Read Only irl t...

Страница 718: ...figuration information for port group 0 1 Matrix rw show cos port resource irl 0 1 after the rate value indicates an invalid rate value Group Index Resource Type Unit Rate Rate Limit Type Action 0 1 0...

Страница 719: ...of group type Group can be 0 7 with 0 designating the default group and 1 7 reserved for user defined groups Default port type values cannot be changed and are 0 for the Matrix DFE Platinum 7G4270 12...

Страница 720: ...itch command Command Mode Read Write Example This example shows how to configure Class of Service port resource IRL entry 0 for port group 0 1 assigning an inbound rate limit of 512 kilobits per secon...

Страница 721: ...ociated rate limiter Command Type Switch command Command Mode Read Write Example This example shows how to clear all inbound rate limiting settings associated with port group 0 1 resource entry 0 all...

Страница 722: ...up type index Specifies a transmit queue port group type index for this entry Valid entries are in the form of group type Group can be 0 7 with 0 designating the default group and 1 7 reserved for use...

Страница 723: ...Platinum and Diamond Series Configuration Guide 8 79 Example This example shows how to configure a Class of Service port resource entry for port group 0 1 assigning 50 percent of the total available...

Страница 724: ...ts If no options are specified all associated non default settings will be cleared Command Type Switch command Command Mode Read Write Example This example shows how to clear all port resource setting...

Страница 725: ...ference txq irl group type index reference Syntax Description Command Defaults If no options are specified all reference information for all port types will be displayed Command Type Switch command Co...

Страница 726: ...xample shows how to show all transmit queue reference configuration information for port group 0 1 Matrix rw show cos reference txq 0 1 Group Index Reference Type Queue 0 1 0 txq 0 0 1 1 txq 0 0 1 2 t...

Страница 727: ...gure inbound rate limiting reference entry 0 for port group 0 1 referencing resources defined by IRL resource entry 0 group type index Specifies an inbound rate limiting port group type index for this...

Страница 728: ...configurations clear cos reference irl all group type index reference Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to cle...

Страница 729: ...configure inbound rate limiting reference entry 0 for port group 0 1 referencing resources defined by TXQ resource entry 0 group type index Specifies a transmit queue port group type index for this en...

Страница 730: ...eference configurations clear cos reference txq all group type index reference Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows h...

Страница 731: ...show cos settings cos list Syntax Description Command Defaults If not specified all CoS entries will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to s...

Страница 732: ...e This example shows how to create CoS entry 2 with a priority value of 3 and bind it to transmit queue reference ID 5 cos list Specifies a Class of Service entry Valid values are 0 255 priority prior...

Страница 733: ...nd Command Mode Read Write Example This example shows how to clear the priority and transmit queue reference values for CoS entry 2 cos list Specifies a Class of Service entry to clear all Clears all...

Страница 734: ...ns are specified all inbound rate limiting violation information will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to show any CoS inbound rate limiti...

Страница 735: ...tions are specified all information for all types of CoS violations will be displayed Command Type Switch command Command Mode Read Write Example This example shows how to clear both status and counte...

Страница 736: ...5 clear cos all entries Use this command to clears all Class of Service entries except priority settings 0 7 clear cos all entries Syntax Description None Command Defaults None Command Type Switch com...

Страница 737: ...edge device as part of the authentication process This ID is then used by the device to place the port and its user into a predefined policy profile consisting of a set of rules and limitations to be...

Страница 738: ...slog default trap default Syntax Description Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to display the status of Syslog message sending whe...

Страница 739: ...nable disable trap default enable disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to disable the sending of Syslog m...

Страница 740: ...Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to reset the sending of Syslog messages when a dynamic rule is applied to enabled override Resets the s...

Страница 741: ...nsmit queues 0 15 of traffic for each port A priority 0 through 7 can be set on each port with 0 being the lowest priority A port receiving a frame without priority information in its tag header is as...

Страница 742: ...characteristics as follows Display or change the port default Class of Service CoS transmit priority 0 through 7 of each port for frames that are received ingress without priority information in thei...

Страница 743: ...Defaults If port string is not specified priority for all ports will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display the port priority for the...

Страница 744: ...mmand Type Switch command Command Mode Read Write Example This example shows how to set a default priority of 6 on fe 1 3 Frames received by this port without priority information in their frame heade...

Страница 745: ...all frames received without a priority value in its header to be set to priority 0 clear port priority port string Syntax Description Command Defaults None Command Type Switch command Command Mode Re...

Страница 746: ...ransmit frames according to the port priority transmit queues set using the set port priority command described back in Section 9 3 1 2 or according to a priority based on a percentage of port transmi...

Страница 747: ...riority queue priority Syntax Description Command Defaults If priority is not specified all priority queue information will be displayed Command Type Switch command Command Mode Read Only Examples Thi...

Страница 748: ...nsmit Queue Mapping 9 8 Matrix DFE Platinum and Diamond Series Configuration Guide This example shows how to display the transmit queues associated with priority 3 Matrix rw show port priority queue 3...

Страница 749: ...2 through 0 set port priority queue port string priority queue Syntax Description Command Defaults None Command Mode Read Write Example This example shows how to set priority 5 frames received on fe...

Страница 750: ...settings back to defaults for one or more ports clear port priority queue port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example...

Страница 751: ...ion Guide 9 11 9 3 3 Configuring Quality of Service QoS Purpose To configure Layer 2 QoS transmit queues on one or more ports Command Descriptions The commands to configure the Quality of Service are...

Страница 752: ...isplay the current algorithm and transmit queue weights configured on fe 2 1 through 5 port string Optional Specifies port s for which to display QoS settings For a detailed description of possible po...

Страница 753: ...13 value14 value15 Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to change the arbitration values for the four transmit qu...

Страница 754: ...clear port transmit queue values clear port txq port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to clear transmi...

Страница 755: ...he interface type Rate limit is configured for a given port and list of priorities The list of priorities can include one some or all of the eight 802 1p priority levels Once configured the rate of al...

Страница 756: ...port string Optional Displays rate limiting information for specific port s For a detailed description of possible port string values refer to Section 4 1 1 Matrix rw show port ratelimit fe 2 1 Global...

Страница 757: ...t Displays Port Number Port designation For a detailed description of possible port string values refer to Section 4 1 1 Index Resource index for this port Threshold kB s Port rate limiting threshold...

Страница 758: ...ring globally disables or enables the port rate limiting function When entered with a port string disables or enables rate limiting on specific port s when the global function is enabled port string S...

Страница 759: ...onfiguration Guide 9 19 Command Type Switch command Command Mode Read Write Example This example shows how to globally enable rate limiting configure rate limiting for inbound traffic on port fe 2 1 i...

Страница 760: ...t string index Syntax Description Command Defaults If not specified all index entries will be reset Command Type Switch command Command Mode Read Write Example This example shows how to clear all rate...

Страница 761: ...ch device can determine which if any multicast traffic needs to be forwarded to each of its ports At Layer 3 multicast switch devices use this information along with a multicast routing protocol to su...

Страница 762: ...ely broadcasts its service to the network and any hosts that want to receive the multicast register with their local multicast switch router Although this approach reduces the network overhead require...

Страница 763: ...ET 10 4 1 Enabling Disabling IGMP Purpose To display IGMP information and to enable or disable IGMP snooping on the device Commands The commands used to display enable and disable IGMP are listed belo...

Страница 764: ...y the status of IGMP on one or more VLAN s show igmp enable vlan list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to disp...

Страница 765: ...et igmp enable Use this command to enable IGMP on one or more VLANs set igmp enable vlan list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This...

Страница 766: ...igmp disable Use this command to disable IGMP on one or more VLANs set igmp enable vlan list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This...

Страница 767: ...sable Section 10 4 2 3 show igmp grp full action Section 10 4 2 4 set igmp grp full action Section 10 4 2 5 show igmp config Section 10 4 2 6 set igmp config Section 10 4 2 7 set igmp delete Section 1...

Страница 768: ...he IGMP query status of one or more VLANs show igmp query vlan list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to displa...

Страница 769: ...his command to enable IGMP querying on one or more VLANs set igmp query enable vlan list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This examp...

Страница 770: ...s command to disable IGMP querying on one or more VLANs set igmp query disable vlan list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This examp...

Страница 771: ...what action to take with multicast frames when the multicast IGMP group table is full show igmp grp full action Command Defaults None Command Type Switch command Command Mode Read Only Example This ex...

Страница 772: ...t igmp grp full action action Syntax Description Command Defaults Flood multicast frames to the Vlan Command Type Switch command Command Mode Read Write Example This example shows how to flood multica...

Страница 773: ...his example shows how to display IGMP configuration information for VLAN 1 Table 10 1 shows a detailed explanation of command output For details on using the set igmp config command to set these param...

Страница 774: ...vice Vlan IGMP Version Whether or not IGMP version is 1 or 2 VlanQuerier IP address of the IGMP querier VlanQueryMaxResponse Time Maximum query response time in tenths of a second VlanRobustness Robus...

Страница 775: ...id values are from 1 to 65535 seconds This value works together with max resp time to remove ports from an IGMP group igmp version igmp version Optional Specifies the IGMP version Valid values are 1 I...

Страница 776: ...Set Configuring IGMP 10 16 Matrix DFE Platinum and Diamond Series Configuration Guide Example This example shows how to set the IGMP query interval time to 250 seconds on VLAN 1 Matrix rw set igmp co...

Страница 777: ...ve IGMP configuration settings for one or more VLANs set igmp delete vlan list Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows h...

Страница 778: ...his example shows how to display IGMP group information for VLAN 105 In this example the device knows to forward all multicast traffic for IP group address 224 0 0 2 VLAN 105 to Fast Ethernet port 2 i...

Страница 779: ...static IGMP information will be displayed for all groups Command Type Switch command Command Mode Read Only Example This example shows how to display static IGMP information for VLAN 105 The display...

Страница 780: ...ption Command Defaults If not specified the static entry will be created and not modified Command Type Switch command Command Mode Read Write Example This example shows how to add port fe 1 3 to the I...

Страница 781: ...ion Command Defaults If not specified the static entry will be removed and not modified Command Type Switch command Command Mode Read Write Example This example shows how to remove port fe 1 3 from th...

Страница 782: ...ls Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to display the binding of IP protocol id to IGMP classification Matrix rw show igmp protocols...

Страница 783: ...ntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to change IGMP routing protocols to a protocol id of 3 classification classifi...

Страница 784: ...r the binding of IP protocol id to IGMP classification clear igmp protocols protocol id protocol id Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example...

Страница 785: ...None Command Type Switch command Command Mode Read Only Example This example shows how to display igmp information for vlan 12 vlan vlan list Show IGMP info for the given VLAN Matrix rw show igmp vla...

Страница 786: ...the all IGMP reporter information portlist portlist portlist Port or range of ports group group group group IP address none means show all groups vlan list vlan list vlan list VLAN ID or range of IDs...

Страница 787: ...one Command Type Switch command Command Mode Read Only Example This example shows how to display all the IGMP flow information portlist portlist portlist Port or range of ports group group group group...

Страница 788: ...and Mode Read Only Example This example shows how to display the IGMP counters Matrix rw show igmp counters Igmp Counters Igmp Group Table is Full false Igmp Version 1 Queries transmitted 0 Igmp Versi...

Страница 789: ...After executing this command the chassis must be reset in order for the new number of groups supported to take effect set igmp number groups number Syntax Description Command Defaults None Command Typ...

Страница 790: ...displays both the currently active number of groups and the configured number that will take effect at the next reboot show igmp number groups Syntax Description None Command Defaults None Command Typ...

Страница 791: ...11 2 1 Monitoring Network Events and Status Section 11 2 2 Configuring SMON Section 11 2 3 Configuring RMON Section 11 2 4 Managing Network Addresses and Routes Section 11 2 5 Configuring SNTP Sectio...

Страница 792: ...and described in the associated section as shown show logging all Section 11 2 1 1 show logging server Section 11 2 1 2 set logging server Section 11 2 1 3 clear logging server Section 11 2 1 4 show l...

Страница 793: ...x DFE Platinum and Diamond Series Configuration Guide 11 3 11 2 1 1 show logging all Use this command to display all configuration information for system logging show logging all Syntax Description No...

Страница 794: ...89 CLI 6 1 8 90 SNMP 6 1 8 91 Webview 6 1 8 93 System 6 1 8 95 RtrFe 6 1 8 96 Trace 6 1 8 105 RtrLSNat 6 1 8 111 FlowLimt 6 1 8 112 UPN 6 1 8 117 AAA 6 1 8 118 Router 6 1 8 140 AddrNtfy 6 1 8 141 OSPF...

Страница 795: ...11 2 1 9 Defaults Default facility name severity level and UDP port designation as described below For details on setting this value using the set logging defaults command refer to Section 11 2 1 6 IP...

Страница 796: ...og server information will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display Syslog server configuration information For an explanation of the c...

Страница 797: ...acility facility Optional Specifies the server s facility name Valid values are local0 to local7 severity severity Optional Specifies the severity level at which the server will log messages Valid val...

Страница 798: ...been assigned If not specified facility severity and port will be set to defaults configured with the set logging default command Section 11 2 1 6 If state is not specified the server will not be enab...

Страница 799: ...move a server from the Syslog server table clear logging server index Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This command shows how to rem...

Страница 800: ...display the Syslog server default values show logging default Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This command shows how to displa...

Страница 801: ...default facility name to local2 and the severity level to 4 error logging facility facility Specifies the default facility name Valid values are local0 to local7 severity severity Specifies the defau...

Страница 802: ...r must be entered All three optional keywords must be entered to reset all logging values to defaults Command Type Switch command Command Mode Read Write Example This example shows how to reset the Sy...

Страница 803: ...If not specified information for all applications will be displayed Command Type Switch command Command Mode Read Only mnemonic all Optional Displays severity level for one or all applications config...

Страница 804: ...application Application Current Severity Level Server List 88 RtrAcl 6 1 8 89 CLI 6 1 8 90 SNMP 6 1 8 91 Webview 6 1 8 93 System 6 1 8 95 RtrFe 6 1 8 96 Trace 6 1 8 105 RtrLSNat 6 1 8 111 FlowLimt 6 1...

Страница 805: ...abbreviation of the textual description for applications being logged Current Severity Level Severity level at which the server is logging messages for the listed application This range from 1 to 8 a...

Страница 806: ...plication command as described in Section 11 2 1 8 Sample values and their corresponding applications are listed in Table 11 3 all Sets the logging severity level for all applications level level Opti...

Страница 807: ...ion Accounting AddrNtfy Address Add and Move Notification CLI Command Line Interface FlowLimit Flow Limiting LACP Link Aggregation Control Protocol OSPF Open Shortest Path First Routing Protocol Route...

Страница 808: ...um and Diamond Series Configuration Guide Command Mode Read Write Example This example shows how to set the severity level for SSH Secure Shell to 4 so that error conditions will be logged for that ap...

Страница 809: ...f 6 notifications of significant conditions clear logging application mnemonic all Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example sho...

Страница 810: ...logging to the console and a persistent file show logging local Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to displ...

Страница 811: ...logging local console enable disable file enable disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This command shows how to enable logging...

Страница 812: ...Guide 11 2 1 13 clear logging local Use this command to clear the console and persistent store logging for the local session clear logging local Syntax Description None Command Defaults None Command...

Страница 813: ...this command will be temporary if the current CLI session is using Telnet or SSH but persistent on the console set logging here enable disable Syntax Description Command Defaults None Command Type Sw...

Страница 814: ...11 2 1 15 clear logging here Use this command to clear the logging state for the current CLI session clear logging here Syntax Description None Command Defaults None Command Type Switch command Comma...

Страница 815: ...gged show logging buffer Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows a portion of the information displayed with the sho...

Страница 816: ...tory to set the size of the history buffer and to display and disconnect current user sessions Commands Commands to monitor switch network events and status are listed below and described in the assoc...

Страница 817: ...tory buffer includes all the switch commands entered up to a maximum of 50 as specified in the set history command Section 11 2 2 3 history Syntax Description None Command Defaults None Command Type S...

Страница 818: ...ration Guide 11 2 2 2 show history Use this command to display the size in lines of the history buffer show history Syntax Description None Command Defaults None Command Type Switch command Command Mo...

Страница 819: ...escription Command Defaults If default is not specified the history setting will not be persistent Command Type Switch command Command Mode Read Write Example This example shows how to set the size of...

Страница 820: ...display statistics for all the current active network connections icmp Optional Shows Internet Control Message Protocol ICMP statistics ip Optional Shows Internet Protocol IP statistics routes Option...

Страница 821: ...Output Details Output What It Displays PCB Protocol Control Block designation Proto Type of protocol running on the connection Recv Q Number of queries received over the connection Send Q Number of q...

Страница 822: ...ch command Command Mode Read Write Examples This example shows how to ping IP address 134 141 89 29 In this case this host is alive In this example the host at IP address is not responding s Optional...

Страница 823: ...from 134 141 89 29 icmp seq 6 time 0 ms 64 bytes from 134 141 89 29 icmp seq 7 time 0 ms 64 bytes from 134 141 89 29 icmp seq 8 time 0 ms 64 bytes from 134 141 89 29 icmp seq 9 time 0 ms 134 141 89 2...

Страница 824: ...lnet session s logged in to the switch show users Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to use the show users...

Страница 825: ...ll users tell dest all message Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to tell all users about a system reset dest S...

Страница 826: ...Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Examples This example shows how to close a Telnet session to host 134 141 192 119 This example shows how to...

Страница 827: ...onfigure SMON Switched Network Monitoring on the device Commands Commands to configure SMON are listed below and described in the associated section as shown show smon priority Section 11 2 3 1 set sm...

Страница 828: ...ll priority queues will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display SMON priority 0 statistics for 1 Gigabit Ethernet port 14 in module 3...

Страница 829: ...mand Type Switch command Command Mode Read Write Example This example shows how set the device to gather SMON priority statistics from 1 Gigabit Ethernet port 14 in module 3 create enable disable Crea...

Страница 830: ...x Description Command Defaults If port string is not specified priority statistics will be cleared on all ports Command Type Switch command Command Mode Read Write Example This example shows how clear...

Страница 831: ...ommand Type Switch command Command Mode Read Only Example This example shows how to display SMON VLAN 1 statistics for 1 Gigabit Ethernet port 14 in module 3 port string Optional Displays SMON VLAN st...

Страница 832: ...pe Switch command Command Mode Read Write Example This example shows how set the device to gather SMON VLAN related statistics from 1 Gigabit Ethernet port 14 in module 3 create enable disable Creates...

Страница 833: ...If port string is not specified VLAN statistics counting configurations will be cleared for all ports Command Type Switch command Command Mode Read Write Example This example shows how clear an SMON V...

Страница 834: ...MON monitoring groups supported on Matrix Series devices each group s function and the elements it monitors and the associated configuration commands needed Table 11 5 RMON Monitoring Group Functions...

Страница 835: ...4 10 Event Controls the generation and notification of events from the device Event type description last time event was sent show rmon event Section 11 2 4 11 set rmon event properties Section 11 2 4...

Страница 836: ...pN Section 11 2 4 19 set rmon topN properties Section 11 2 4 20 set rmon topN status Section 11 2 4 21 clear rmon topN Section 11 2 4 22 Matrix Records statistics for conversations between two IP addr...

Страница 837: ...nel Section 11 2 4 27 set rmon channel Section 11 2 4 28 clear rmon channel Section 11 2 4 29 show rmon filter Section 11 2 4 30 set rmon filter Section 11 2 4 31 clear rmon filter Section 11 2 4 32 P...

Страница 838: ...MON statistics for Fast Ethernet port 20 in module 1 port string Optional Displays RMON statistics for specific port s For a detailed description of possible port string values refer to Section 4 1 1...

Страница 839: ...that were greater than 1518 bytes and had either a bad FCS or a bad CRC Packets Total number of frames including bad frames broadcast frames and multicast frames received on this interface Broadcast...

Страница 840: ...4 bytes in length excluding framing bits but including FCS bytes 65 127 Octets Total number of frames including bad frames received that were between 65 and 127 bytes in length excluding framing bits...

Страница 841: ...Defaults If owner is not specified monitor will be applied Command Type Switch command Command Mode Read Write Example This example shows how to configure RMON statistics entry 2 for fe 1 20 index Spe...

Страница 842: ...dex list to defaults Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to delete RMON statistics entry 2 index list Specifies...

Страница 843: ...Switch command Command Mode Read Only Example This example shows how to display RMON history entries for Fast Ethernet port 14 in module 3 A control entry displays first followed by actual entries cor...

Страница 844: ...3 14 Index 1001 Status 1 valid Owner monitor Data Source 1 3 6 1 2 1 2 2 1 1 11001 Interval 30 Buckets Requested 50 Buckets Granted 50 Sample 2304 Interval Start 0 days 19 hours 11 minutes 35 seconds...

Страница 845: ...ecified interval will be set to 30 seconds If owner is not specified monitor will be applied Command Type Switch command Command Mode Read Write Example This example shows how configure RMON history e...

Страница 846: ...refer to Section 11 2 4 5 clear rmon history index list to defaults Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to delet...

Страница 847: ...arm index Syntax Description Command Defaults If index is not specified information about all RMON alarm entries will be displayed Command Type Switch command Command Mode Read Only Example This examp...

Страница 848: ...Sample Type Whether the monitoring method is an absolute or a delta sampling Startup Alarm Whether alarm generated when this entry is first enabled is rising falling or either Interval Interval in sec...

Страница 849: ...object to be monitored NOTE This parameter is not mandatory for executing the command but must be specified in order to enable the alarm entry configuration type absolute delta Optional Specifies the...

Страница 850: ...rising RMON alarm This entry will conduct monitoring of the delta between samples every 30 seconds revent revent Specifies the index number of the RMON event to be triggered when the rising threshold...

Страница 851: ...None Command Type Switch command Command Mode Read Write Example This example shows how to enable RMON alarm entry 3 NOTE An RMON alarm entry can be created using this command configured using the se...

Страница 852: ...4 10 clear rmon alarm Use this command to delete an RMON alarm entry clear rmon alarm index Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This e...

Страница 853: ...e This example shows how to display RMON event entry 3 Table 11 8 provides an explanation of the command output index Optional Displays RMON properties and log entries for a specific entry index ID Ma...

Страница 854: ...ion Text string description of this event Type Whether the event notification will be a log entry and SNMP trap both or none Community SNMP community name if message type is set to trap Last Time Sent...

Страница 855: ...pplied If owner is not specified monitor will be applied Command Type Switch command Command Mode Read Write index Specifies an index number for this entry Maximum number of entries is 100 Maximum val...

Страница 856: ...figuration Guide Example This example shows how to create and enable an RMON event entry called STP topology change that will send both a log entry and an SNMP trap message to the public community Mat...

Страница 857: ...Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to enable RMON event entry 1 NOTE An RMON event entry can be created using t...

Страница 858: ...n event Use this command to delete an RMON event entry and any associated log entries clear rmon event index Syntax Description Command Defaults None Command Type Switch command Command Mode Read Writ...

Страница 859: ...etwork show rmon host port string address creation Syntax Description Command Defaults If port string is not specified information about all ports will be displayed If address or creation are not spec...

Страница 860: ...orresponding to the control entry For a description of the types of statistics shown refer to Table 11 6 Matrix rw show rmon host Host Index 1 Interface 21009 Table size 100 Last deletion 766048 Statu...

Страница 861: ...r will be applied Command Type Switch command Command Mode Read Write Example This example shows how to configure RMON host entry 1 on Fast Ethernet port 5 in module 1 index Specifies an index number...

Страница 862: ...le an RMON host entry set rmon host status index enable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to enable RMON host...

Страница 863: ...4 18 clear rmon host Use this command to delete an RMON host entry clear rmon host index Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This exam...

Страница 864: ...ax Description Command Defaults If index is not specified information about all entries will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display a...

Страница 865: ...up time when this report was last started HostIndex Index number of the host table for which this top N report will be prepared Rate Base Type of counter and corresponding integer value activated wit...

Страница 866: ...lied If owner is not specified monitor will be applied Command Type Switch command index Specifies an index number for this entry An entry will automatically be created if an unused index number is ch...

Страница 867: ...um and Diamond Series Configuration Guide 11 77 Command Mode Read Write Example This example shows how to configure RMON TopN entry 1 for host 1 with a sampling interval of 60 seconds and a maximum nu...

Страница 868: ...le an RMON topN entry set rmon topN status index enable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to enable RMON TopN...

Страница 869: ...4 22 clear rmon topN Use this command to delete an RMON TopN entry clear rmon topN index Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This exam...

Страница 870: ...t specified information about source and destination addresses will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display RMON matrix properties and...

Страница 871: ...rix table for this interface Last deletion System up time when the last entry was deleted from the matrix table associated with this entry Status Whether this matrix entry is enabled valid or disabled...

Страница 872: ...pecified monitor will be applied Command Type Switch command Command Mode Read Write Example This example shows how to configure RMON matrix entry 1 for fe 1 1 index Specifies an index number for this...

Страница 873: ...matrix entry set rmon matrix status index enable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to enable RMON matrix entr...

Страница 874: ...clear rmon matrix Use this command to delete an RMON matrix entry clear rmon matrix index Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This exa...

Страница 875: ...specified information about all channels will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display RMON channel information for fe 2 12 port strin...

Страница 876: ...e action of the filters on this channel as matched Packets will be accepted on filter matches failed Packets will be accepted if they fail a match control on off Optional Enables or disables control o...

Страница 877: ...be set to off If onevent and offevent are not specified none will be applied If event status is not specified ready will be applied If a description is not specified none will be applied If owner is...

Страница 878: ...4 29 clear rmon channel Use this command to clear an RMON channel entry clear rmon channel index Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example Th...

Страница 879: ...er entries will be displayed Command Type Switch command Command Mode Read Only Example This example shows how to display all RMON filter entries and channel information index index channel channel Op...

Страница 880: ...hosen Maximum number of entries is 10 Maximum value is 65535 channel_index Specifies the channel to which this filter will be applied offset offset Optional Specifies an offset from the beginning of t...

Страница 881: ...ring RMON Matrix DFE Platinum and Diamond Series Configuration Guide 11 91 Command Mode Read Write Example This example shows how to create RMON filter 1 and apply it to channel 9 Matrix rw set rmon f...

Страница 882: ...to clear an RMON filter entry clear rmon filter index index channel channel Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how...

Страница 883: ...control entries show rmon capture index nodata Syntax Description Command Defaults If no options are specified all buffer control entries and associated captured packets will be displayed Command Type...

Страница 884: ...slice 128 Download size 100 Download offset 0 Max Octet Requested 50000 Max Octet Granted 50000 Start time 1 days 0 hours 51 minutes 15 seconds Owner monitor captureEntry 1 Buff control 28062 Pkt ID 9...

Страница 885: ...ecified it will be set to monitor index Specifies a buffer control entry channel Specifies the channel to which this capture entry will be applied action lock wrap Optional Specifies the action of the...

Страница 886: ...guring RMON 11 96 Matrix DFE Platinum and Diamond Series Configuration Guide Command Type Switch command Command Mode Read Write Example This example shows how to create RMON capture entry 1 to listen...

Страница 887: ...4 35 clear rmon capture Use this command to clears an RMON capture entry clear rmon capture index Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example T...

Страница 888: ...ommands to manage switch network addresses and routes are listed below and described in the associated section as shown show arp Section 11 2 5 1 set arp Section 11 2 5 2 clear arp Section 11 2 5 3 sh...

Страница 889: ...an explanation of the command output Matrix rw show arp LINK LEVEL ARP TABLE IP Address Phys Address Flags Interface 10 20 1 1 00 00 5e 00 01 1 S host0 134 142 21 194 00 00 5e 00 01 1 S host0 134 142...

Страница 890: ...will not be sent to the host Command Type Switch command Command Mode Read Write Example This example shows how to map IP address 198 133 219 232 to MAC address 00 00 0c 40 0f bc ip address Specifies...

Страница 891: ...ommand to delete a specific entry or all entries from the switch s ARP table clear arp ip all Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This...

Страница 892: ...figuration Guide 11 2 5 4 show rad Use this command to display the status of the RAD Runtime Address Discovery protocol on the switch show rad Syntax Description None Command Defaults None Command Typ...

Страница 893: ...configuration file from the network set rad enable disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to disable RAD NO...

Страница 894: ...ly Example This example shows how to display the IP routing table Table 11 12 provides an explanation of the command output Matrix rw show ip route ROUTE TABLE Destination Gateway Mask TOS Flags Refcn...

Страница 895: ...outing entry R host or net unreachable D created dynamically by redirect M modified dynamically by redirect d message confirmed C generate new routes on use X external daemon resolves name L generated...

Страница 896: ...going probe packet m max ttl Optional Specifies the maximum time to live TTL used in outgoing probe packets p port Optional Specifies the base UDP port number used in probes q nqueries Optional Specif...

Страница 897: ...t routing tables will be used If d is not specified the debug socket option will not be used If not specified tos will be set to 0 If F is not specified the don t fragment bit will not be applied If g...

Страница 898: ...e hop 1 is the Matrix Series switch hop 2 is 14 1 0 45 and hop 3 is back to the host IP address Round trip times for each of the three UDP probes are displayed next to each hop Matrix rw traceroute 19...

Страница 899: ...oute destination default gateway Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to add an IP route from 192 122 173 42 to 1...

Страница 900: ...his command to delete switch IP routing table entries clear ip route destination default Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This examp...

Страница 901: ...hrough the switching process use the show mac command as described in Section 11 2 5 11 show port mac port string Syntax Description Command Defaults If port string is not specified MAC addresses for...

Страница 902: ...are specified all MAC addresses for the device will be displayed Command Mode Read Only agetime Optional Display the time in seconds that a learned MAC address will stay in the filtering database add...

Страница 903: ...12 11 88 3 fe 1 3 mgmt perm Table 11 13 show mac Output Details Output What It Displays MAC Address MAC addresses mapped to the port s shown FID Filter database identifier Port Port designation Type A...

Страница 904: ...the entry will be permanent Command Mode Read Write Example This example shows how to set the MAC timeout period to 600 seconds agetime time Specifies the timeout period in seconds for aging learned M...

Страница 905: ...imeout period all Clear all MAC address entries This will even clear permanent entries address address MAC address to clear ex 00 01 F4 56 78 90 if not specified clear command shall be scoped to all M...

Страница 906: ...d Set Managing Switch Network Addresses and Routes 11 116 Matrix DFE Platinum and Diamond Series Configuration Guide This example shows how to clear all the MAC addresses associated with port fe 1 3 M...

Страница 907: ...cription Command Defaults If port string is not specified MAC address traps for all ports will be displayed Command Mode Read Only Example This example shows how to display the status of MAC address t...

Страница 908: ...tring enable disable Syntax Description Command Defaults If port string is not specified MAC address traps will be globally enabled or disabled Command Mode Read Write Example This example shows how t...

Страница 909: ...cription Command Defaults If port string is not specified MAC address traps for all ports will be displayed Command Mode Read Only Example This example shows how to display the status of MAC address t...

Страница 910: ...tring enable disable Syntax Description Command Defaults If port string is not specified MAC address traps will be globally enabled or disabled Command Mode Read Write Example This example shows how t...

Страница 911: ...ction as shown show sntp Section 11 2 6 1 set sntp client Section 11 2 6 2 clear sntp client Section 11 2 6 3 set sntp server Section 11 2 6 4 clear sntp server Section 11 2 6 5 set sntp broadcastdela...

Страница 912: ...ow to display SNTP client settings Table 11 14 provides an explanation of the command output Matrix rw show sntp SNTP Version 3 Current Time TUE SEP 09 16 13 33 2003 Timezone EST offset from UTC is 4...

Страница 913: ...terval between SNTP unicast requests Default of 512 seconds can be reset using the set sntp poll interval command Section 11 2 6 8 Poll Retry Number of poll retries to a unicast SNTP server Default of...

Страница 914: ...nt broadcast unicast disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to enable SNTP in broadcast mode broadcast Enab...

Страница 915: ...figuration Guide 11 125 11 2 6 3 clear sntp client Use this command to clear the SNTP client s operational mode clear sntp client Syntax Description None Command Defaults None Command Type Switch comm...

Страница 916: ...rvers can be set as SNTP servers set sntp server ip address precedence Syntax Description Command Defaults If precedence is not specified 1 will be applied Command Type Switch command Command Mode Rea...

Страница 917: ...rom the SNTP server list clear sntp server ip address all Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to remove the serv...

Страница 918: ...the round trip delay in microseconds for SNTP broadcast frames set sntp broadcastdelay time Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This ex...

Страница 919: ...1 129 11 2 6 7 clear sntp broadcast delay Use this command to clear the round trip delay time for SNTP broadcast frames clear sntp broadcastdelay Syntax Description None Command Defaults None Command...

Страница 920: ...Use this command to set the poll interval between SNTP unicast requests set sntp poll interval interval Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Ex...

Страница 921: ...Guide 11 131 11 2 6 9 clear sntp poll interval Use this command to clear the poll interval between unicast SNTP requests clear sntp poll interval Syntax Description None Command Defaults None Command...

Страница 922: ...oll retry Use this command to set the number of poll retries to a unicast SNTP server set sntp poll retry retry Syntax Description Command Defaults None Command Type Switch command Command Mode Read W...

Страница 923: ...ide 11 133 11 2 6 11 clear sntp poll retry Use this command to clear the number of poll retries to a unicast SNTP server clear sntp poll retry Syntax Description None Command Defaults None Command Typ...

Страница 924: ...this command to set the poll timeout in seconds for a response to a unicast SNTP request set sntp poll timeout timeout Syntax Description Command Defaults None Command Type Switch command Command Mode...

Страница 925: ...Configuration Guide 11 135 11 2 6 13 clear sntp poll timeout Use this command to clear the SNTP poll timeout clear sntp poll timeout Syntax Description None Command Defaults None Command Type Switch...

Страница 926: ...Use this command to display SNTP time zone settings show timezone Syntax Description None Command Defaults None Command Type Switch command Command Mode Read Only Example This example shows how to di...

Страница 927: ...tax Description Command Defaults If offset hours or minutes are not specified none will be applied Command Type Switch command Command Mode Read Write Example This example shows how to set the time zo...

Страница 928: ...d Series Configuration Guide 11 2 6 16 clear timezone Use this command to remove SNTP time zone adjustment values clear timezone Syntax Description None Command Defaults None Command Type Switch comma...

Страница 929: ...s what network protocols are running on one or more ports Commands Commands to configure node aliases are listed below and described in the associated section as shown show nodealias Section 11 2 7 1...

Страница 930: ...the command output port string Optional Displays node alias properties for specific port s For a detailed description of possible port string values refer to Section 4 1 1 Matrix rw show nodealias ge...

Страница 931: ...Guide 11 141 Vlan ID VLAN ID associated with this alias MAC Address MAC address associated with this alias Protocol Networking protocol running on this port Address Source IP When applicable a protoco...

Страница 932: ...rp dec bpdu udp Optional Displays node alias entries for one of the following protocols Internet Protocol Appletalk Media Access Control Hot Standby Routing Protocol Dynamic Host Control Protocol Serv...

Страница 933: ...ith 00 e0 Refer back to Table 11 15 for a description of the command output Matrix rw show nodealias mac 00 e0 bpdu Port lag 0 1 Time 0 days 01 hrs 34 mins 53 secs Alias ID 306783575 Active true Vlan...

Страница 934: ...col IP related entries will be displayed from all source addresses If port string is not specified node alias entries will be displayed for all ports Command Mode Read Only ip apl mac hsrp dhcps dhcpc...

Страница 935: ...his example shows how to display node alias entries for IP traffic on ge 3 16 Refer back to Table 11 15 for a description of the command output Matrix rw show nodealias protocol ip ge 3 16 Port ge 3 1...

Страница 936: ...and Mode Read Only Example This example shows how to display node alias configuration settings for ports fe 2 1 through 9 Table 11 16 provides an explanation of the command output port string Optional...

Страница 937: ...tails Output What It Displays Port Number Port designation Max Entries Maximum number of alias entries configured for this port Set using the set nodealias maxentries command Section 11 2 7 6 Used Ent...

Страница 938: ...e aliases cannot be statically created but can be deleted using the clear node alias command as described in Section 11 2 7 7 set nodealias enable disable port string Syntax Description Command Defaul...

Страница 939: ...nodealias maxentries val port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the maximum node alias entries t...

Страница 940: ...faults None Command Type Switch command Command Mode Read Write Example This example shows how to clear all node alias entries on fe 1 3 port string port string Specifies the port s on which to remove...

Страница 941: ...e maximum entries value clear nodealias config port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to reset the node...

Страница 942: ...and the path the frame takes through the switch Operation NetFlow can be enabled on all ports on a Matrix system including fixed front panel ports LAG ports NEM ports and FTM1 backplane ports Router...

Страница 943: ...es not support aggregation caches Provides 4 predefined templates The appropriate template is selected for each flow depending on whether the flow is routed or switched and whether it is a TCP UDP pac...

Страница 944: ...ated section as shown show netflow Section 11 2 8 1 set netflow cache Section 11 2 8 2 clear netflow cache Section 11 2 8 3 set netflow export destination Section 11 2 8 4 clear netflow export destina...

Страница 945: ...yed Command Type Switch command Command Mode Read Only Example This example shows how to display both Netflow configuration information and statistics config Optional Show the NetFlow configuration st...

Страница 946: ...etFlow 11 156 Matrix DFE Platinum and Diamond Series Configuration Guide Disabled Ports lag 0 1 48 ge 1 1 10 12 22 24 52 Export Statistics Network Packets Sampled 232 Exported Packets 43 Exported Reco...

Страница 947: ...in the Matrix system A NetFlow cache maintains NetFlow information for all active flows By default NetFlow caches are not created set netflow cache enable disable Syntax Description Command Defaults...

Страница 948: ...free up the NetFlow caches on each DFE blade in the Matrix system When this command is executed NetFlow is effectively disabled on the system clear netflow cache Syntax Description None Command Defaul...

Страница 949: ...collector destination per Matrix system can be configured set netflow export destination ip address udp port Syntax Description Command Defaults None Command Type Switch command Command Mode Read Wri...

Страница 950: ...e collector address per Matrix system is supported entering the IP address and UDP port information is not required Executing this command without any parameters will return the collector address to N...

Страница 951: ...mand Mode Read Write Usage Each DFE blade in the Matrix system will transmit a NetFlow packet when It has accumulated the maximum number of NetFlow records per packet which is 30 or It has accumulated...

Страница 952: ...export interval Use this command to clear NetFlow export interval to its default of 30 minutes clear netflow export interval Syntax Description None Command Defaults None Command Type Switch command C...

Страница 953: ...on a port set netflow port port string enable disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to enable NetFlow coll...

Страница 954: ...eturn a port to the default NetFlow collection state of disabled clear netflow port port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example Thi...

Страница 955: ...ation about NetFlow version support Use the show netflow config command Section 11 2 8 1 to display the current NetFlow version set netflow export version 5 9 Syntax Description Command Defaults None...

Страница 956: ...ow flow record format used to export data to the default of Version 5 Use the show netflow config command Section 11 2 8 1 to display the current NetFlow version clear netflow export version Syntax De...

Страница 957: ...emplates are retransmitted when either The packet refresh rate is reached or The template timeout is reached Template refresh based on the timeout period is only performed by the master DFE blade to a...

Страница 958: ...settings of a 20 packet refresh rate and a 30 minute timeout may not be optimal for your environment For example a switch processing an extremely slow flow rate of say 20 packets per half hour would...

Страница 959: ...and Defaults At least one of the refresh rate or timeout parameters must be specified although both can be specified on one command line Command Type Switch command Command Mode Read Write Example Thi...

Страница 960: ...Logging And Network Management Command Set Configuring NetFlow 11 170 Matrix DFE Platinum and Diamond Series Configuration Guide...

Страница 961: ...Performing a basic router configuration Section 12 2 3 4 Reviewing and configuring the ARP table Section 12 2 4 5 Reviewing and configuring broadcast settings Section 12 2 5 6 Reviewing IP traffic an...

Страница 962: ...r and processed locally Routing interface configuration commands in this guide will configure either a VLAN or loopback interface depending on your choice of parameters as shown in Table 12 1 For deta...

Страница 963: ...ity status of interfaces configured for IP to set IP addresses for interfaces and to enable interfaces for IP routing at device startup Commands The commands used to review and configure interface set...

Страница 964: ...uter show interface vlan vlan id loopback loopback id lo local id Syntax Description Command Type Router command Command Mode Any router mode Command Defaults If interface type is not specified inform...

Страница 965: ...escription of this output refer to Table 12 2 Matrix Router1 show interface Vlan 1 is Administratively DOWN Vlan 1 is Operationally DOWN Mac Address is 0001 f4da 2cba The name of this device is Vlan 1...

Страница 966: ...itch CLI before they can be configured for IP routing For details on creating VLANs and configuring them for IP refer to Section 2 3 2 Each VLAN or loopback interface must be configured for routing se...

Страница 967: ...thold round robin Syntax Description Command Syntax of the no Form The no form of this command disables ECM mode no ip ecm forwarding algorithm Command Type Router command Command Mode Global configu...

Страница 968: ...ation for all routing interfaces will be displayed Example This example shows how to display configuration information for VLAN 1 vlan vlan id loopback loopback id lo loopback id Optional Displays inf...

Страница 969: ...igured on this interface using the commands described in Section 14 3 12 IP Helper Address Whether or not an IP address has been designated for forwarding UDP datagrams from this interface Set using t...

Страница 970: ...emoves the specified IP address and disables the interface for IP processing no ip address ip address ip mask Command Type Router command Command Mode Interface configuration Matrix Router1 config if...

Страница 971: ...erface to automatically be enabled at device startup no shutdown Syntax Description None Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaul...

Страница 972: ...each router configuration in the event that DFE modules are added or removed from the Matrix chassis This section demonstrates managing configuration files while operating in router mode only For a sa...

Страница 973: ...yntax Description None Command Type Router command Command Mode Any router mode Command Defaults None Example This example shows how to display the current router operating configuration Matrix Router...

Страница 974: ...Command Defaults If no parameters are specified the running configuration will be displayed to the terminal session NOTE The write file command must be executed in order to save the router configurati...

Страница 975: ...5 Example This example shows how to display the router specific configuration to the terminal Matrix Router1 write terminal Enable Config t interface vlan 1 iP Address 182 127 63 1 255 255 255 0 no sh...

Страница 976: ...he device and remove the routing configuration By default IP routing is enabled when interfaces are configured for it as described in Section 12 2 1 no ip routing Syntax Description None Command Type...

Страница 977: ...still possible to use router only commands to configure the router To do so you need to add router config wrappers to your existing router config files as shown in Figure 12 1 Figure 12 1 Example of...

Страница 978: ...Figure 12 1 for an example of a basic config file 3 Save the configuration using the write file command as described in Section 12 2 2 2 12 2 3 4 Moving a Config File from Another Routing Module To c...

Страница 979: ...xy ARP on an interface and to set a MAC address on an interface Commands The commands used to review and configure the ARP table are listed below and described in the associated section as shown show...

Страница 980: ...meters are specified all entries in the ARP cache will be displayed ip address Optional Displays ARP entries related to a specific IP address vlan vlan id Optional Displays only ARP entries learned th...

Страница 981: ...show ip arp 134 141 235 165 Protocol Address Age min Hardware Addr Type Interface Internet 134 141 235 165 0002 1664 a5b3 ARPA Vlan2 Matrix Router1 show ip arp vlan 2 Protocol Address Age min Hardware...

Страница 982: ...The no form of this command removes the specified permanent ARP entry no arp ip address Command Type Router command Command Mode Global configuration Matrix Router1 config Command Defaults None Examp...

Страница 983: ...r a gratuitous ARP reply or request no ip gratuitous arp Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None Example This example sho...

Страница 984: ...ng command enabled ip gratuitous arp learning both reply request Syntax Description Command Syntax of the no Form The no form of this command disables gratuitous ARP learning no ip gratuitous arp lear...

Страница 985: ...end node to the requesting host Proxy ARP can lessen bandwidth use on slow speed WAN links It is enabled by default ip proxy arp Syntax Description None Command Syntax of the no Form The no form of th...

Страница 986: ...ter1 config if Vlan 1 Command Defaults None Example This example shows how to set an IP MAC address of 000A 000A 000B on VLAN 1 NOTE By default every routing interface uses the same MAC address If the...

Страница 987: ...t seconds Syntax Description Command Syntax of the no Form The no form of this command restores the default value of 14 400 seconds no arp timeout seconds Command Type Router command Command Mode Glob...

Страница 988: ...uide 12 2 4 8 clear arp cache Use this command to delete all nonstatic dynamic entries from the ARP table clear arp cache Syntax Description None Configuration Mode Privileged EXEC Matrix Router1 Comm...

Страница 989: ...29 12 2 5 Configuring Broadcast Settings Purpose To configure IP broadcast settings Commands The commands used to configure IP broadcast settings are listed below and described in the associated secti...

Страница 990: ...broadcast Syntax Description None Command Syntax of the no Form The no form of this command disables IP directed broadcast globally no ip directed broadcast Command Type Router command Command Mode I...

Страница 991: ...ort Command Type Router command Command Mode Global configuration Matrix Router config udp Specifies UDP as the IP forwarding protocol port Optional Specifies a destination port that controls which UD...

Страница 992: ...d on that segment A routing module can forward the DHCP request to a server located on another network if IP forward protocol is enabled for UDP as described in Section 12 2 5 2 and the address of the...

Страница 993: ...d Syntax of the no Form The no form of this command disables the forwarding of UDP datagrams to the specified address no ip helper address address Command Type Router command Command Mode Interface co...

Страница 994: ...d to execute traceroute Commands The commands used to review IP traffic and configure routes are listed below and described in the associated section as shown show router limits route table Section 12...

Страница 995: ...this command to display the chassis based router limit setting show router limits route table Syntax Description None Command Type Switch command Command Mode Read Only Command Defaults None Example T...

Страница 996: ...s example shows how to set the route table limit to 17000 NOTE This command must be executed from the switch CLI route table Sets the route table limit Valid values are 1 25000 This parameter will als...

Страница 997: ...Use this command to reset the chassis based route table limits to default value of 12000 clear router limits route table Syntax Description None Command Type Switch command Command Mode Read Write Co...

Страница 998: ...nformation on configuring RIP parameters refer to Section 13 2 2 NOTE Enabling CIDR for RIP on the Matrix Series device requires using the no auto summary command as described in Section 13 2 2 16 to...

Страница 999: ...w ip traffic Use this command to display IP traffic statistics show ip traffic softpath Syntax Description Command Type Router command Command Mode Any router mode Command Defaults If softpath is not...

Страница 1000: ...ted 0 forwarded 0 no route ICMP Statistics Rcvd 4 total 0 checksum errors 0 redirects 0 unreachable 4 echo 0 echo reply 0 mask requests 0 quench 0 parameter 0 timestamp 0 time exceeded Sent 6 total 0...

Страница 1001: ...on Guide 12 41 12 2 6 6 clear ip stats Use this command to clear all IP traffic counters IP ICMP UDP TCP IGMP and ARP clear ip stats Syntax Description None Configuration Mode Privileged EXEC Matrix R...

Страница 1002: ...tabase contains all the active static routes all the RIP routes and up to three best routes to each network as determined by OSPF The RTM selects up to three of the best routes to each network and ins...

Страница 1003: ...utes directly connected to VLANs 1 and 2 two static routes connected to VLAN 1 one indirectly and one via another network IP and one RIP route Distance cost is displayed as x y Matrix Router1 show ip...

Страница 1004: ...atrix Router1 config Command Defaults If distance is not specified the default value of 1 will be applied If permanent and tag are not specified the route will be set as non permanent with no tag assi...

Страница 1005: ...gned a tag of 1 This example shows how to set IP address 10 1 2 3 as the next hop gateway to destination address 10 0 0 0 The route is set as permanent and assigned a tag of 20 This example shows how...

Страница 1006: ...een disabled using no ip icmp this command will re enable it on the routing interface ip icmp echo reply mask reply Syntax Description Command Syntax of the no Form The no form of this command disable...

Страница 1007: ...cription Command Type Router command Command Mode Privileged EXEC Matrix Router1 Command Defaults None Examples This example shows output from a successful ping to IP address 182 127 63 23 This exampl...

Страница 1008: ...e to display a round trip path to host 192 167 252 46 In this case hop 1 is an unnamed router at 192 167 201 2 hop 2 is rtr10 at 192 4 9 10 hop 3 is rtr43 at 192 167 208 43 and hop 4 is back to the ho...

Страница 1009: ...ndidate Section 12 2 7 5 show ip pim bsr Section 12 2 7 6 show ip pim interface Section 12 2 7 7 show ip pim neighbor Section 12 2 7 8 show ip pim rp Section 12 2 7 9 show ip pim rp hash Section 12 2...

Страница 1010: ...interface ip pim sparse mode Syntax Description None Command Syntax of the no Form The no form of this command disables PIM on an interface no ip pim sparse mode Command Type Router command Command M...

Страница 1011: ...will be automatically applied If priority is not specified 1 will be applied pim interface Interface of the BSR candidate This interface must be enabled with PIM as described in Section 12 2 7 1 hash...

Страница 1012: ...trix DFE Platinum and Diamond Series Configuration Guide Example This example sets the hash mask length to 30 and DR priority to 77 on VLAN 1 Matrix Router1 config interface vlan 1 Matrix Router1 conf...

Страница 1013: ...ommand Syntax of the no Form The no form of this command disables the DR functionality no ip dr priority Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan...

Страница 1014: ...s group address group mask Command Type Router command Command Mode Global configuration Matrix Router1 config Command Defaults If not specified a priority value of 192 will be assigned Example This e...

Страница 1015: ...face group address group mask Command Type Router command Command Mode Global configuration Matrix Router1 config Command Defaults If not specified a DR priority value of 192 will be assigned Example...

Страница 1016: ...display BootStrap Router BSR information Table 12 4 provides an explanation of the command output Matrix Router1 show ip pim bsr PIMv2 Elected Bootstrap Router Information BSR Address 10 0 0 1 Bsr Pr...

Страница 1017: ...SR Uptime Interval that this router has been up in hours minutes seconds After 24 hours format will change into days hours and after a week will change into weeks days BSR Expiry Period in which the n...

Страница 1018: ...display PIM interface information Table 12 5 provides an explanation of the command output interface Optional Displays information about a specific PIM interface This interface must be enabled with P...

Страница 1019: ...eceiving PIM hello messages from other PIM routers on the interface Query Intvl Interval between Hello messages Default is 30 seconds DR Prior Designated router priority value on the interface Set wit...

Страница 1020: ...o display PIM neighbor information Table 12 6 provides an explanation of the command output interface Optional Displays information about a specific PIM interface This interface must be enabled with P...

Страница 1021: ...1 Expires Interval in hours minutes and seconds until the entry will be removed from the IP multicast routing table Mode Mode in which the interface is operating DR Indicates that this neighbor is a d...

Страница 1022: ...mples This example shows how to display information about active RPs This example shows how to display RP mapping information group Optional Displays active RPs for any existing multicast group s mapp...

Страница 1023: ...Table 12 7 show ip pim rp Output Details Output What It Displays Group s Address of the multicast group s about which to display RP data RP Address of the RP for that group Priority RP priority value...

Страница 1024: ...lected for a specified group show ip pim rp hash group address Syntax Description Command Type Router command Command Mode Privileged EXEC Matrix Router1 Command Defaults None Example This example sho...

Страница 1025: ...m neighbors For more information on configuring DVMRP refer to Section 13 2 4 show ip mroute unicast source address multicast group address summary Syntax Description Command Type Router command Comma...

Страница 1026: ...555 910 and 920 Matrix Router1 show ip mroute IP Multicast Routing Table Flags D Dense S Sparse C Connected L Local P Pruned R RP bit set F Register flag T SPT bit set J Join SPT Timers Uptime Expire...

Страница 1027: ...Syntax Description Command Type Router command Command Mode Any router mode Command Defaults If no optional parameters are specified detailed information about all source and destination addresses wil...

Страница 1028: ...t table show ip rfp Syntax Description None Command Type Router command Command Mode Any router mode Command Defaults None Example This example shows the reverse path information for IP address 80 80...

Страница 1029: ...he following considerations must be taken into account when configuring LSNAT on Matrix Series devices On chassis based systems only one router per chassis will be allowed to run LSNAT at a given time...

Страница 1030: ...selected for this client Subsequent packets from clients are compared to the list of bindings If there is a match the packet is sent to the same server previously selected for this client If there is...

Страница 1031: ...e use one binding hardware resource instead of one per service per client In order to use sticky persistence the following configuration criteria are required Sticky persistence must be configured for...

Страница 1032: ...on those real servers by means of the vserver http virtual server However clients can directly access realserver1 and realserver2 for any services other than HTTP If you combine the two mechanisms tha...

Страница 1033: ...nnections to the real server maxconns Section 12 2 8 10 Optional Specify a weight load number for the real server weight Section 12 2 8 11 Configure a virtual server Optional Display the virtual serve...

Страница 1034: ...2 8 20 Display or clear server load balancing connections and statistics Optional Display server load balancing connections and statistics show ip slb conns Section 12 2 8 21 show ip slb stats Section...

Страница 1035: ...e Command Defaults If detail is not specified summary information about all configured server farms will be displayed Example This example shows how to display LSNAT server farm summary information de...

Страница 1036: ...his is port 21 ip slb ftpctrlport port number Syntax Description Command Syntax of the no Form The no form of this command resets the FTP control port to 21 no ip slb ftpctrlport Command Type Router c...

Страница 1037: ...Syntax Description Command Syntax of the no Form The no form of this command deletes the server farm from the LSNAT configuration no ip slb serverfarm serverfarmname Command Type Router command Comma...

Страница 1038: ...ommand Defaults If not specified port 0 will be applied Example This example shows how to add a real server at 10 1 2 3 to the server farm named httpserver and to configure the port number to be used...

Страница 1039: ...command resets the selection algorithm to Round Robin no predictor Command Type Router command Command Mode SLB Server Farm Configuration mode Matrix Router1 config slb sfarm Command Defaults If not s...

Страница 1040: ...d is used in conjunction with the persistence level sticky command described in Section 12 2 8 18 sticky Syntax Description None Command Syntax of the no Form The no form of this command removes this...

Страница 1041: ...les show how to display summary and detailed information about real servers in the ten server farm detail Optional Displays detailed output for a specific server farm or for all configured server farm...

Страница 1042: ...l server 0 Current state of this real server UP Maximum Connections Unlimited Real Server Weight 3 InService Real Server IP 10 3 0 2 Real Server Port 80 Fail Detect Ping Retries 4 Ping Interval 200 Fa...

Страница 1043: ...sult in an error condition on this server Defaults can be changed using the faildetect command as described in Section 12 2 8 9 Fail Detect Type Whether or not the failure detection mechanism is ICMP...

Страница 1044: ...ntax of the no Form The no form of this command removes the real server from service no inservice Command Type Router command Command Mode SLB Real Server Configuration mode Matrix Router1 config slb...

Страница 1045: ...SLB Real Server Configuration mode Matrix Router1 config slb real Command Defaults If not specified ping will be chosen as the fail detection type ping int seconds Specifies an ICMP ping failure dete...

Страница 1046: ...s example shows how to set the ping interval to 10 seconds and the retry number to 6 for the real server at IP 10 1 2 3 in the httpserver server farm Matrix Router1 config ip slb serverfarm httpserver...

Страница 1047: ...command Command Mode SLB Real Server Configuration mode Matrix Router1 config slb real Command Defaults None Example This example shows how to limit the number of connections to 20 on the real server...

Страница 1048: ...eight number Command Type Router command Command Mode SLB Real Server Configuration mode Matrix Router1 config slb real Command Defaults None Example This example shows how to set the weight load numb...

Страница 1049: ...tual servers will be displayed If detail is not specified summary information will be displayed Examples This example shows how to display summary information about all LSNAT virtual servers detail Op...

Страница 1050: ...ccess to the real server s Virtual Server test Start IP to End IP 169 254 1 1 to 169 254 1 9 Table 12 10 show ip slb vservers Output Details Output What It Displays Virtual Server Name of the virtual...

Страница 1051: ...rver IP address Configured using the virtual command as described in Section 12 2 8 15 Note that currently only FTP is supported client s allowed to use the virtual server s Clients with permission to...

Страница 1052: ...ix Router1 config Command Defaults None Example This example shows how to identify a virtual server named virtual http and enable configuration mode for that virtual server Note that this example also...

Страница 1053: ...Command Defaults None Example This example shows how to associate the virtual server named virtual http to the httpserver server farm serverfarm name Specifies a server farm name Must be previously co...

Страница 1054: ...he virtual server port Specifies a TCP or UDP port number 0 through 65535 or port name to be used by this virtual server Specifying 0 indicates all ports can be used by this virtual server and should...

Страница 1055: ...s and TCP port for the virtual http virtual server Matrix Router1 config ip slb serverfarm httpserver Matrix Router1 config slb sfarm real 10 1 2 1 port 80 Matrix Router1 config slb real inservice Mat...

Страница 1056: ...config slb vserver Command Defaults None Example This example shows how to enable virtual server named virtual http Matrix Router1 config ip slb serverfarm httpserver Matrix Router1 config slb sfarm...

Страница 1057: ...f the no Form The no form of this command removes permission for a client to use the virtual server no client ip address network mask Command Type Router command Command Mode SLB Virtual Server Config...

Страница 1058: ...mmand Type Router command Command Mode SLB Virtual Server Configuration mode Matrix Router1 config slb vserver tcp ssl sticky Optional Specifies the type of binding that is used to connect a client to...

Страница 1059: ...real exit Matrix Router1 config slb sfarm exit Matrix Router1 config ip slb vserver virtual http Matrix Router1 config slb vserver serverfarm httpserver Matrix Router1 config slb vserver virtual 10 1...

Страница 1060: ...client ip end Syntax Description Command Syntax of the no Form The no form of this command removes non LSNAT access permission from the specified clients no allow accessservers client ip start client...

Страница 1061: ...None Command Syntax of the no Form The no form of this command removes direct access for all clients no ip slb allowaccess_all Command Type Router command Command Mode Global configuration mode Matri...

Страница 1062: ...rix Router1 config slb real exit Matrix Router1 config slb sfarm real 10 1 2 3 port 80 Matrix Router1 config slb real inservice Matrix Router1 config slb real exit Matrix Router1 config slb sfarm exit...

Страница 1063: ...how to display summary information about active server load balancing connections detail Optional Displays detailed output for a specific virtual server a specific client or for all configured virtual...

Страница 1064: ...reply state Connection Flow ID 2 Real Server IP 172 17 1 2 Client IP 169 225 1 50 Real Server Port 21 Client Port 1110 Protocol TCP Created Time stamp 2004 3 24 14 34 07 Connection State outgoing ser...

Страница 1065: ...w ip slb stats Use this command to display load server balancing statistics show ip slb stats Syntax Description None Command Type Router command Command Mode Any router mode Command Defaults None Exa...

Страница 1066: ...ss Syntax Description Command Type Router command Command Mode Any router mode Command Defaults If client is not specified all server load balancing active sticky connections are displayed Examples Th...

Страница 1067: ...owid serverfarm serverfarm vserver vserver Syntax Description Command Type Router command Command Mode Privileged EXEC Matrix Router1 Command Defaults None Example This example shows how to remove all...

Страница 1068: ...Mode Read Only Command Defaults If no options are specified all LSNAT router limits including the route table limit setting as shown in Section 12 2 6 1 will be displayed Example This example shows h...

Страница 1069: ...ecified maximum configs will be set to the default value of 50 That is up to 50 server farms 50 virtual servers and 50 direct access entries can be NOTE This command must be executed from the switch C...

Страница 1070: ...up to 500 real servers and 500 client access entries can be configured Example This example shows how to set the LSNAT configuration limit to 25 This means that up to 25 server farms 25 virtual server...

Страница 1071: ...d Mode Read Write Command Defaults If no options are specified all LSNAT limits will be reset Example This example shows how to reset all chassis based LSNAT limits NOTE This command must be executed...

Страница 1072: ...ited period of time or until the client explicitly relinquishes the address Manual A client s IP address is assigned by the network administrator and DHCP is used simply to convey the assigned address...

Страница 1073: ...Except for clear and show commands most DHCP configuration commands can be executed in most of the DHCP command modes shown in Table 12 12 CLI examples in this section will show a command being execu...

Страница 1074: ...2 2 9 5 ip dhcp pool Section 12 2 9 6 domain name Section 12 2 9 7 dns server Section 12 2 9 8 netbios name server Section 12 2 9 9 netbios node type Section 12 2 9 10 default router Section 12 2 9 11...

Страница 1075: ...ation Guide 12 115 client class Section 12 2 9 17 client identifier Section 12 2 9 18 client name Section 12 2 9 19 hardware address Section 12 2 9 20 show ip dhcp binding Section 12 2 9 21 clear ip d...

Страница 1076: ...e ip dhcp server Syntax Description None Command Syntax of the no Form The no form of this command disables DHCP server features on one or all routing interfaces no ip dhcp Command Type Router command...

Страница 1077: ...Form The no form of this command removes the local address pool no ip local pool name subnet mask Command Type Router command Command Mode Global configuration Matrix Router1 config Command Defaults N...

Страница 1078: ...m the list of addresses excluded from the local pool no exclude ip address number Command Type Router command Command Mode IP Local Pool configuration Matrix Router1 ip local pool Command Defaults Non...

Страница 1079: ...sting client ip dhcp ping packets number Syntax Description Command Syntax of the no Form The no form of this command prevents the sever from pinging IP addresses no ip dhcp ping packets Command Type...

Страница 1080: ...ut ip dhcp ping timeout milliseconds Syntax Description Command Syntax of the no Form The no form of this command resets the ping timeout to the default value of 500 no ip dhcp ping timeout Command Ty...

Страница 1081: ...he no form of this command deletes a DHCP address pool no ip dhcp pool name Command Type Router command Command Mode Global configuration Matrix Router1 config Command Defaults None Example This examp...

Страница 1082: ...cription Command Syntax of the no Form The no form of this command deletes a DHCP domain name no ip dhcp domain name domain Command Type Router command Command Mode Any DHCP configuration mode Command...

Страница 1083: ...es the DNS server list no dns server Command Type Router command Command Mode Any DHCP configuration mode Command Defaults If address2 address8 is not specified no additional addresses will be configu...

Страница 1084: ...S WINS server list no netbios name server Command Type Router command Command Mode Any DHCP configuration mode Command Defaults If address2 address8 is not specified no additional addresses will be co...

Страница 1085: ...rm of this command deletes the NetBIOS node type no netbios node type Command Type Router command Command Mode Any DHCP configuration mode Command Defaults None Example This example shows how to speci...

Страница 1086: ...ult router list no netbios name server Command Type Router command Command Mode Any DHCP configuration mode Command Defaults If address2 address8 is not specified no additional addresses will be confi...

Страница 1087: ...ntax Description Command Syntax of the no Form The no form of this command deletes the boot image association no bootfile Command Type Router command Command Mode Any DHCP configuration mode Command D...

Страница 1088: ...e client to receive the TFTP server address when downloading a boot file image next server primary ip secondary ip Syntax Description Command Syntax of the no Form The no form of this command removes...

Страница 1089: ...HCP options no option code instance number Command Type Router command Command Mode Any DHCP configuration mode Command Defaults If instance is not specified none 0 will be applied Examples This examp...

Страница 1090: ...d Diamond Series Configuration Guide This example shows how to configure DHCP option 72 which assigns one or more Web servers for DHCP clients In this case two Web server addresses are configured Matr...

Страница 1091: ...command Command Mode Any DHCP configuration mode Command Defaults If hours or minutes are not specified no values will be configured Example This example shows how to set a one hour lease to the loca...

Страница 1092: ...1 config dhcp pool Command Defaults If not specified DHCP server will examine its defined IP address pools for a mask or prefix length If no mask is found in the IP address pool database the Class A B...

Страница 1093: ...uring each client separately This command also enables DHCP class configuration mode client class name Syntax Description Command Syntax of the no Form The no form of this command deletes a client cla...

Страница 1094: ...ifier no client identifier unique identifier Command Type Router command Command Mode Any DHCP configuration mode Command Defaults If client class is not specified none will be assigned Example This e...

Страница 1095: ...outer command Command Mode Any DHCP configuration mode Command Defaults If client class is not specified none will be assigned Example This example shows how to assign soho1 as a client name in client...

Страница 1096: ...pe Router command Command Mode Any DHCP configuration mode Command Defaults If type is not specified Ethernet will be applied Example This example shows how to specify 0001 f401 2710 as an Ethernet MA...

Страница 1097: ...mand Defaults If ip address is not specified information about all address bindings will be shown Example This example shows how to display the DHCP binding address parameters including an associated...

Страница 1098: ...P address bindings clear ip dhcp binding address Syntax Description Command Type Router command Command Mode Privileged EXEC Matrix Router1 Command Defaults None Example This example shows how to dele...

Страница 1099: ...ommand Type Router command Command Mode Any DHCP configuration mode Command Defaults None Example This example shows how to display DHCP server statistics Matrix Router1 show ip dhcp server statistics...

Страница 1100: ...Database agents Agents configured in the DHCP database Automatic bindings IP addresses that have been automatically mapped to the Ethernet MAC addresses of hosts found in the DHCP database Manual bin...

Страница 1101: ...2 9 24 clear ip dhcp server statistics Use this command to reset all DHCP server counters clear ip dhcp server statistics Syntax Description None Command Type Router command Command Mode Privileged EX...

Страница 1102: ...IP Configuration Command Set Configuring Dynamic Host Configuration Protocol DHCP 12 142 Matrix DFE Platinum and Diamond Series Configuration Guide...

Страница 1103: ...uring OSPF Section 13 2 3 4 Configuring DVMRP Section 13 2 4 5 Configuring IRDP Section 13 2 5 6 Configuring VRRP Section 13 2 6 ROUTER The commands covered in this chapter can be executed only when t...

Страница 1104: ...s 13 2 2 Configuring RIP Purpose To enable and configure the Routing Information Protocol RIP RIP Configuration Task List and Commands Table 13 1 lists the tasks and commands associated with RIP confi...

Страница 1105: ...3 2 2 14 ip rip authentication mode Section 13 2 2 15 Disable automatic route summarization necessary for enabling CIDR no auto summary Section 13 2 2 16 Disable triggered updates ip rip disable trigg...

Страница 1106: ...s command disables RIP no router rip Command Type Router command Command Mode Global configuration Matrix Router1 config Command Defaults None Example This example shows how to enable RIP NOTE You mus...

Страница 1107: ...nd Syntax of the no Form The no form of this command removes the network from the RIP routing process no network ip address Command Type Router command Command Mode Router configuration Matrix Router1...

Страница 1108: ...uting information neighbor ip address Syntax Description Command Syntax of the no Form The no form of this command disables point to point routing exchanges no neighbor ip address Command Type Router...

Страница 1109: ...RIP administrative distance is set to 120 The distance command can be used to change this value resetting RIP s route preference in relation to other routes as shown in the table below distance weigh...

Страница 1110: ...nfiguring RIP 13 8 Matrix DFE Platinum and Diamond Series Configuration Guide Example This example shows how to change the default administrative distance for RIP to 1001 Matrix Router1 config router...

Страница 1111: ...rm The no form of this command removes an offset no ip rip offset in out Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None Example...

Страница 1112: ...router Command Defaults None Example This example shows how to set RIP timers to a 5 second update time a 10 second invalid interval a 20 second holdown time and a 60 second flush time basic Specifie...

Страница 1113: ...ted by the RIP module no ip rip send version Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None Example This example shows how to se...

Страница 1114: ...ersion of the RIP module update packets that are accepted on the interface no ip rip receive version Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Co...

Страница 1115: ...y chain as described in Section 13 2 2 9 2 Add a key to the chain as described in Section 13 2 2 10 3 Specify an authentication string for the key as described in Section 13 2 2 11 4 Set the time peri...

Страница 1116: ...ey chain name Syntax Description Command Syntax of the no Form The no form of this command deletes the specified key chain no key chain name Command Type Router command Command Mode Global configurati...

Страница 1117: ...Command Type Router command Command Mode Key chain configuration Matrix Router1 config keychain Command Defaults None Example This example shows how to create authentication key 3 within the key chai...

Страница 1118: ...tion string no key string text Command Type Router command Command Mode Key chain key configuration Matrix Router1 config keychain key Command Defaults None Example This example shows how to create an...

Страница 1119: ...will begin to be valid to be received Valid input is hours minutes seconds hh mm ss month Specifies the month the authentication key will begin to be valid to be received Valid input is the first thr...

Страница 1120: ...ne Examples This example shows how to allow the password authentication key to be received as valid on its RIP configured interface beginning at 2 30 on November 30 2002 with no ending time infinitely...

Страница 1121: ...ychain key start time Specifies the time of day the authentication key will begin to be valid to be sent Valid input is hours minutes seconds hh mm ss month Specifies the month the authentication key...

Страница 1122: ...o allow the password authentication key to be sent as valid on its RIP configured interface beginning at 2 30 on November 30 2002 with no ending time infinitely Matrix Router1 config router key chain...

Страница 1123: ...authentication no ip rip authentication keychain name Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None Examples This example shows...

Страница 1124: ...use of authentication no ip rip authentication mode Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None Example This example shows h...

Страница 1125: ...routing information on the Matrix Series device To verify which routes are summarized for an interface use the show ip protocols command as described in Section 12 2 6 4 no auto summary Syntax Descrip...

Страница 1126: ...these triggered updates By default triggered updates are enabled on a RIP interface ip rip disable triggered updates Syntax Description None Command Syntax of the no Form The no form of this command a...

Страница 1127: ...twork is unreachable rather than implying it by not including the network in routing updates ip split horizon poison Syntax Description None Command Syntax of the no Form The no form of this command d...

Страница 1128: ...passive interface vlan vlan id Command Type Router command Command Mode Router configuration Matrix Router1 config router Command Defaults None Example This example shows how to set VLAN 2 as a passiv...

Страница 1129: ...mand Syntax of the no Form The no use of this command denies the reception of RIP updates no receive interface vlan vlan id Command Type Router command Command Mode Router configuration Matrix Router1...

Страница 1130: ...ion Matrix Router1 config router Command Defaults None Example This example shows how to suppress the network 192 5 34 0 from being advertised in outgoing routing updates access list number Specifies...

Страница 1131: ...ly non subnetted routes will be redistributed connected Specifies that non RIP routing information discovered via directly connected interfaces will be redistributed ospf Specifies that OSPF routing i...

Страница 1132: ...atinum and Diamond Series Configuration Guide Example This example shows how to redistribute routing information discovered through OSPF process ID 1 non subnetted routes into RIP update messages Matr...

Страница 1133: ...ctivate your license as described back in Section 2 2 4 in order to enable the OSPF command set If you wish to purchase an advanced routing license contact Enterasys Networks Sales NOTE Activating you...

Страница 1134: ...2 3 12 Configure OSPF Areas Configure an administrative distance distance ospf Section 13 2 3 13 Define the range of addresses to be used by Area Boundary Routers ABRs area range Section 13 2 3 14 Ena...

Страница 1135: ...3 23 show ip ospf database Section 13 2 3 24 show ip ospf border routers Section 13 2 3 25 show ip ospf interface Section 13 2 3 26 show ip ospf neighbor Section 13 2 3 27 show ip ospf virtual links...

Страница 1136: ...mand Defaults None Example This example shows how to enable routing for OSPF process 1 NOTES You must execute the router ospf command to enable the protocol before completing many OSPF specific config...

Страница 1137: ...nd Command Mode Router configuration Matrix Router1 config router Command Defaults None Example This example shows how to configure IP address 182 127 62 1 0 0 0 31 as OSPF area 0 ip address Specifies...

Страница 1138: ...interfaces configured for IP routing router id ip address Syntax Description Command Syntax of the no Form The no form of this command resets the router ID to the first interface configured for IP ro...

Страница 1139: ...s the default of 10 ip ospf cost cost Syntax Description Command Syntax of the no Form The no form of this command resets the OSPF cost to the default of 10 no ip ospf cost Command Type Router command...

Страница 1140: ...a designated router ip ospf priority number Syntax Description Command Syntax of the no Form The no form of this command resets the value to the default of 1 no ip ospf priority Command Type Router co...

Страница 1141: ...d Type Router command Command Mode Router configuration Matrix Router1 config router Command Defaults None Example This example shows how to set spf delay time to 7 seconds and hold time to 3 spf dela...

Страница 1142: ...ax Description Command Syntax of the no Form The no form of this command resets the retransmit interval value to the default 5 seconds no ip ospf retransmit interval Command Type Router command Comman...

Страница 1143: ...o Form The no form of this command resets the retransmit interval value to the default 1 second no ip ospf transmit delay Command Type Router command Command Mode Interface configuration Matrix Router...

Страница 1144: ...mmand sets the hello interval value to the default 10 seconds for broadcast and point to point networks 30 seconds for non broadcast and point to multipoint networks no ip ospf hello interval Command...

Страница 1145: ...d sets the dead interval value to the default 40 seconds no ip ospf dead interval Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None...

Страница 1146: ...ospf authentication key Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults If password is not specified the password will be set to a bl...

Страница 1147: ...rface no ip ospf message digest key keyid Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None Example This example shows how to enabl...

Страница 1148: ...routes as shown in the table below distance ospf external inter area intra area weight Syntax Description Command Syntax of the no Form The no form of this command resets OSPF administrative distance...

Страница 1149: ...uide 13 47 Command Defaults If route type is not specified the distance value will be applied to all OSPF routes Example This example shows how to change the default administrative distance for extern...

Страница 1150: ...x of the no Form The no form of this command stops the routes from being summarized no area area id range ip address ip mask Command Type Router command Command Mode Router configuration Matrix Router...

Страница 1151: ...configuration Matrix Router1 config router Command Defaults None Example This example shows how to enable MD5 authentication on OSPF area 10 0 0 0 area id Specifies the OSPF area in which to enable a...

Страница 1152: ...command Command Mode Router configuration Matrix Router1 config router Command Defaults If no summary is not specified the stub area will be able to receive LSAs Example The following example shows ho...

Страница 1153: ...form of this command removes the cost value from the summary route that is sent into the stub area no area area id default cost Command Type Router command Command Mode Router configuration Matrix Ro...

Страница 1154: ...omains area area id nssa default information originate Syntax Description Command Syntax of the no Form The no form of this command changes the NSSA back to a plain area no area area id nssa default i...

Страница 1155: ...cimal values or IP addresses A transit area is an area through which a virtual link is established ip address Specifies the IP address of the ABR A virtual link is established from the ABR where virtu...

Страница 1156: ...ter command Command Mode Router configuration Matrix Router1 config router Command Defaults None Example This example shows how to configure a virtual link between OSPF area 0 0 0 2 and ABR network 13...

Страница 1157: ...jacencies from being formed on an interface passive interface vlan vlan id Syntax Description Command Syntax of the no Form The no form of this command disables passive OSPF mode no passive ospf vlan...

Страница 1158: ...for the connected RIP or static redistribution route This value should be consistent with the designation protocol metric type type value Optional Specifies the external link type associated with the...

Страница 1159: ...Command Defaults If metric value is not specified 0 will be applied If type value is not specified type 2 external route will be applied If subnets is not specified only non subnetted routes will be r...

Страница 1160: ...will be restored database overflow external exit overflow interval interval limit limit warning level level Syntax Description Command Syntax of the no Form The no form of this command removes the dat...

Страница 1161: ...the OSPF database exit overflow interval to 240 seconds the overflow limit to 3800 LSAs and the warning level to 2500 LSAs Matrix Router1 config router ospf 1 Matrix Router1 config router database ov...

Страница 1162: ...OSPF 13 60 Matrix DFE Platinum and Diamond Series Configuration Guide 13 2 3 23 show ip ospf Use this command to display OSPF information show ip ospf Syntax Description None Command Type Router comm...

Страница 1163: ...of interfaces in this area is 0 Area has no authentication SPF algorithm executed 65 times Area ranges are Link State Update Interval is 00 30 00 and due in 00 03 12 Link State Age Interval is 00 00...

Страница 1164: ...id Optional Specifies the link state identifier Valid values are IP addresses router Displays router Type 1 link state records in their detailed format Router records are originated by all routers net...

Страница 1165: ...ion of the command output database summary Displays a numerical summary of the contents of the link state database Matrix Router1 show ip ospf database OSPF Router with ID 182 127 64 1 Displaying Net...

Страница 1166: ...oadcast network Router Link States Shows the ID of the router originating the record Summary Link States Shows the summary network prefix ADV Router Router ID of the router originating the link state...

Страница 1167: ...s output shows that an intra area route has been established to destination border router 192 168 22 1 via neighboring router 192 168 11 1 on the VLAN 2 interface in area 0 The OSPF cost of this route...

Страница 1168: ...y all OSPF related information for VLAN 1 Table 13 4 provides an explanation of the command output vlan vlan id Optional Displays OSPF information for a specific VLAN This VLAN must be configured for...

Страница 1169: ...interface priority value which is either default or assigned with the ip ospf priority command For details refer to Section 13 2 3 5 Designated Router id The router ID of the designated router on this...

Страница 1170: ...E Platinum and Diamond Series Configuration Guide Adjacent neighbor count Number of adjacent FULL state neighbors over this interface Adjacent with neighbor IP address of the adjacent neighbor Table 1...

Страница 1171: ...ng If vlan id is not specified OSPF neighbors will be displayed for all VLANs configured for routing Example This example shows how to use the show ospf neighbor command detail Optional Displays detai...

Страница 1172: ...how ip ospf neighbor Output Details Output What It Displays ID Neighbor s router ID of the OSPF neighbor Pri Neighbor s priority over this interface State Neighbor s OSPF communication state Dead Int...

Страница 1173: ...F virtual links information Table 13 6 provides an explanation of the command output Matrix Router1 show ip ospf virtual links Virtual Link to router 5 5 5 1 is UP Transit area 0 0 0 2 via interface V...

Страница 1174: ...transmitted through the virtual link State Interface state assigned to a virtual link which is point to point Timer intervals configured Timer intervals configured for the virtual link including Hello...

Страница 1175: ...lished and routes to be reconverged clear ip ospf process process id Syntax Description Command Type Router command Command Mode Privileged EXEC Matrix Router1 Command Defaults None Example This examp...

Страница 1176: ...em Command Type Router command Command Mode Privileged EXEC Matrix Router1 Command Defaults None Example This example shows how to enable OSPF protocol debugging output to display information about Li...

Страница 1177: ...ty rfc1583compatible Syntax Description None Command Syntax of the no Form The no form of this command removes OSPF RFC 1583 compatible no rfc1583compatible Command Type Router command Command Mode Ro...

Страница 1178: ...eceive from a particular multicast group the router can send a prune message back up the distribution tree to stop subsequent packets from traveling where there are no members DVMRP will periodically...

Страница 1179: ...Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None Example This example shows how to enable DVMRP on VLAN 1 NOTE IGMP must be enabled on all VLA...

Страница 1180: ...d Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None Example This example shows how to set a DVMRP of 16 on VLAN 1 metric Specifies a metric...

Страница 1181: ...r mode Command Defaults None Example This example shows how to display DVMRP routing table entries In this case the routing table has 5 entries The first entry shows that the source network 60 1 1 0 2...

Страница 1182: ...S Neighbor supports SNMP M Neighbor supports mtrace DVMRP Routing Table 5 entries 60 1 1 0 24 2 uptime 1 24 2 expires 0 2 3 via neighbor 40 1 1 3 version 3 255 flags VPGN gen id 0x336ff052 50 50 50 0...

Страница 1183: ...determine the address of a router it can use as a default gateway Commands The commands used to enable and configure IRDP are listed below and described in the associated section as shown ip irdp Sect...

Страница 1184: ...terface ip irdp Syntax Description None Command Syntax of the no Form The no form of this command disables IRDP on an interface no ip irdp Command Type Router command Command Mode Interface configurat...

Страница 1185: ...rm of this command resets the maximum advertisement interval to the default value of 600 seconds no irdp maxadvertinterval Command Type Router command Command Mode Interface configuration Matrix Route...

Страница 1186: ...m holdtime setting and resets the minimum advertisement interval to the default value of three fourths of the maxadvertinterval value no irdp minadvertinterval Command Type Router command Command Mode...

Страница 1187: ...lue no irdp holdtime Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None Example This example shows how to set the IRDP hold time to...

Страница 1188: ...preference value to the default of 0 no irdp preference Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None Example This example show...

Страница 1189: ...command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Command Defaults None Example This example shows how to advertise IP address 183 255 0 162 with a preference of 1 on VLAN...

Страница 1190: ...than multicast transmissions By default the router sends IRDP advertisements via multicast no ip irdp multicast Syntax Description None Command Type Router command Command Mode Interface configuratio...

Страница 1191: ...ace configuration Matrix Router1 config if Vlan 1 Command Defaults If vlan vlan id is not specified IRDP information for all interfaces will be displayed Example This example shows how to display IRDP...

Страница 1192: ...nabled routers decide who will become master and who will become backup in the event the master fails Commands The commands used to enable and configure VRRP are listed below and described in the asso...

Страница 1193: ...rations from the running configuration no router vrrp Command Type Router command Command Mode Global configuration Matrix Router1 config Command Defaults None Example This example shows how enable VR...

Страница 1194: ...vrid Command Type Router command Command Mode Router configuration Matrix Router1 config router Command Defaults None Example This example shows how to create a VRRP session on VLAN 1 with a VRID of 1...

Страница 1195: ...er IP address can be either an address configured on the routing interface or an address that falls within the range of any networks configured on the routing interface All of the virtual router IP ad...

Страница 1196: ...e interface VLAN 1 VRID 1 All 5 addresses fall within the range of networks configured on the VLAN 1 routing interface because VLAN 1 has a primary IP address of 182 127 62 1 24 and secondary IP addre...

Страница 1197: ...on VLAN 1 VRID 1 vlan vlan id Specifies the number of the VLAN on which to configure VRRP priority This VLAN must be configured for IP routing as described in Section 2 3 2 vrid Specifies a unique Vi...

Страница 1198: ...enabled management stations that use ping to poll devices will be able to see that the virtual router is available when the backup router assumes the role of master master icmp reply vlan vlan id vri...

Страница 1199: ...vrid interval Syntax Description Command Syntax of the no Form The no form of this command clears the VRRP advertise interval value no advertise interval vlan vlan id vrid interval Command Type Router...

Страница 1200: ...ng VRRP 13 98 Matrix DFE Platinum and Diamond Series Configuration Guide Example This example shows how set an advertise interval of 3 seconds on VLAN 1 VRID 1 Matrix Router1 config router vrrp Matrix...

Страница 1201: ...critical ip vlan vlan id vrid ip address critical priority Syntax Description Command Syntax of the no Form The no form of this command clears the critical IP address no critical ip vlan vlan id vrid...

Страница 1202: ...rix DFE Platinum and Diamond Series Configuration Guide Example This example shows how to set IP address 182 127 62 3 as a critical IP address associated with VLAN 1 VRID 1 Matrix Router1 config route...

Страница 1203: ...empt vlan id vrid Command Type Router command Command Mode Router configuration Matrix Router1 config router Command Defaults None Example This example shows how to disable preempt mode on VLAN 1 VRID...

Страница 1204: ...ommand Syntax of the no Form The no form of this command clears the preempt delay timer no preempt delay vlan id vrid Command Type Router command Command Mode Router configuration Matrix Router1 confi...

Страница 1205: ...ing VRRP Matrix DFE Platinum and Diamond Series Configuration Guide 13 103 Example This example shows how to set the preempt delay to 60 seconds on VLAN 1 VRID 1 Matrix Router1 config router vrrp Matr...

Страница 1206: ...config router Command Defaults None Example This example shows how to enable VRRP on VLAN 1 VRID 1 NOTE Before enabling VRRP you must set the other options described in this section Once enabled you c...

Страница 1207: ...the no Form The no form of this command clears VRRP authentication no ip vrrp authentication key Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan 1 Comman...

Страница 1208: ...Command Defaults None Example This example shows how to set the VRRP MD5 authentication password to qwer on VLAN 1 VRID 1 vrid Specifies the Virtual Router ID VRID Valid values are from 1 to 255 md5...

Страница 1209: ...nd to display VRRP routing information show ip vrrp Syntax Description None Command Type Router command Command Mode Any router mode Command Defaults None Example This example shows how to display VRR...

Страница 1210: ...Routing Protocol Configuration Command Set Configuring VRRP 13 108 Matrix DFE Platinum and Diamond Series Configuration Guide...

Страница 1211: ...3 5 Support for RADUIS RFC 3580 and TACACS can be found in the following sections Section 14 3 2 Section 14 3 3 and Section 14 3 4 SNMP user or community names used for authentication and authorizatio...

Страница 1212: ...etails refer to Section 14 3 11 IP Access Lists ACLs permits or denies access to routing interfaces based on protocol and inbound and or outbound IP address restrictions configured in access lists For...

Страница 1213: ...includes a Filter ID matching a policy profile name configured on the switch the switch then dynamically applies the policy profile to the physical port the user device is authenticating on Filter ID...

Страница 1214: ...ction 14 3 4 4 Configuring TACACS Section 14 3 4 5 Configuring 802 1X Authentication Section 14 3 5 6 Configuring Port Web Authentication PWA Section 14 3 6 7 Configuring MAC Authentication Section 14...

Страница 1215: ...D SET 14 3 1 Setting the Authentication Login Method Purpose To configure the authentication login method Commands The commands used to configure the authentication login method are listed below and d...

Страница 1216: ...tication login Use this command to display the current authentication login method show authentication login Syntax Description None Command Type Switch command Command Mode Read Only Command Defaults...

Страница 1217: ...Mode Read Write Command Defaults None Example This example shows how to set the authentication login method to use the local password settings any Specifies that the authentication protocol will be se...

Страница 1218: ...clear authentication login Use this command to reset the authentication login method to the default setting of any clear authentication login Syntax Description None Command Type Switch command Comman...

Страница 1219: ...server parameters including IP address timeout period authentication realm and number of user login attempts allowed Reset RADIUS server settings to default values Configure a RADIUS accounting serve...

Страница 1220: ...uration information state Optional Displays the RADIUS client s enable status retries Optional Displays the number of retry attempts before the RADIUS server times out authtype Optional Displays the R...

Страница 1221: ...y attempts before the RADIUS server times out The default value of 3 can be reset using the set radius command as described in Section 14 3 2 2 RADIUS timeout Maximum amount of time in seconds to esta...

Страница 1222: ...ables the RADIUS client retries number of retries Specifies the number of retry attempts before the RADIUS server times out Valid values are from 1 to 10 Default is 3 timeout timeout Specifies the max...

Страница 1223: ...hentication port 1812 and an authentication password of pwsecret As previously noted the server secret password entered here must match that already configured as the Read Write rw password on the RAD...

Страница 1224: ...Examples This example shows how to clear all settings on all RADIUS servers This example shows how to reset the RADIUS timeout to the default value of 20 seconds state Optional Resets the RADIUS clien...

Страница 1225: ...Example This example shows how to display RADIUS accounting configuration information In this case RADIUS accounting is enabled and global default settings have not been changed One server has been co...

Страница 1226: ...ion Guide For details on enabling and configuring RADIUS accounting refer to Section 14 3 2 5 Matrix rw show radius accounting Accounting state Enabled Accounting update interval 1800 secs Accounting...

Страница 1227: ...conds between each RADIUS accounting interim update when accumulated accounting data is sent to the server for a session Valid values are 180 2147483647 retries retries Sets the maximum number of atte...

Страница 1228: ...e server secret password entered here must match that already configured as the Read Write rw password on the RADIUS accounting server This example shows how to set the RADIUS accounting timeout to 30...

Страница 1229: ...mand Command Mode Read Write Command Defaults None Example This example shows how to reset the RADIUS accounting timeout to 5 seconds on all servers server index all Clears the configuration on one or...

Страница 1230: ...Point and itself The AAA server will then describe the level of service which should be provided This may include authentication success session duration and class of service to be provided Enterasys...

Страница 1231: ...l VLAN Authorization configuration information will be displayed Example This example shows how to display VLAN Authorization configuration information for ports ge 1 1 3 port list Optional Displays t...

Страница 1232: ...able VLAN Authorization This example shows how to enable VLAN Authorization for port ge 1 1 for tagged packets enable disable enable Enable VLAN Authorization disable Disable VLAN Authorization port p...

Страница 1233: ...uthorization port list all Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example This example shows how to clear VLAN Authorization This example shows ho...

Страница 1234: ...client and server settings to default values Commands The commands used to review and configure TACACS are listed below and described in the associated section as shown show tacacs Section 14 3 4 1 s...

Страница 1235: ...e This example shows how to display all TACACS configuration information Table 14 2 provides an explanation of the command output state Optional Displays only the TACACS client status Matrix ro show t...

Страница 1236: ...enabled or disabled TACACS singleconnect state Whether TACACS singleconnect is enabled or disabled When enabled the TACACS client sends multiple requests over a single TCP connection TACACS service Th...

Страница 1237: ...n Command Defaults None Command Type Switch command Command Mode Read Write Usage The TACACS client can be enabled on the switch anytime with or without a TACACS server online If the TACACS server is...

Страница 1238: ...lts None Command Type Switch command Command Mode Read Only Example This example displays configuration information for all configured TACACS servers index Display the configuration of the TACACS serv...

Страница 1239: ...Type Switch command Command Mode Read Write Example This example configures TACACS server 1 The default timeout value of 10 seconds will be applied all Specify the timeout value for all configured TAC...

Страница 1240: ...ed TACACS servers clear tacacs server all index timeout Syntax Description Command Defaults If timeout is not specified the affected TACACS servers will be removed Command Type Switch command Command...

Страница 1241: ...mmand Type Switch command Command Mode Read Only Examples This example shows how to display client session authorization information This example shows how to display client session accounting state a...

Страница 1242: ...ifies the name of the service that the TACACS client will request from the TACACS server The name specified here must match the name of a service configured on the server read only attribute value Spe...

Страница 1243: ...the Matrix switch The parameter values must match a service and access level attribute value pairs configured on the server for the session to be authorized If the parameter values do not match the s...

Страница 1244: ...his example shows how to return all the session authorization parameters to their default values authorization Clears the TACACS session authorization parameters service Clears the TACACS session auth...

Страница 1245: ...accounting or authorization configuration parameters are displayed which at this time includes only the enabled disabled status Command Type Switch command Command Mode Read Write Example This exampl...

Страница 1246: ...sion When per command accounting is enabled the TACACS server will log accounting information such as start and stop times IP address of the client and so forth for each command executed during the se...

Страница 1247: ...ntax Description Command Defaults If state is not specified all single connection configuration parameters are displayed which at this time includes only the enabled disabled state Command Type Switch...

Страница 1248: ...n When enabled the TACACS client will use a single TCP connection for all requests to a given TACACS server set tacacs singleconnect enable disable Syntax Description Command Defaults None Command Typ...

Страница 1249: ...thorize supplicants will be allowed to simultaneously utilize more than one access entity Access Entities responsible for maintaining state counters and statistics for an individual supplicant An acce...

Страница 1250: ...nfiguration Guide Commands The commands used to review and configure 802 1X are listed below and described in the associated section as shown show dot1x Section 14 3 5 1 show dot1x auth config Section...

Страница 1251: ...displayed If index is not specified information for all access entities will be displayed auth config Optional Displays authentication configuration information access entity Optional Displays access...

Страница 1252: ...abled Matrix rw show dot1x auth diag fe 1 1 Port 1 Auth Diag Enter Connecting 0 EAP Logoffs While Connecting 0 Enter Authenticating 0 Success While Authenticating 0 Timeouts While Authenticating 0 Fai...

Страница 1253: ...s Rx 0 Session Octets Tx 0 Session Frames Rx 0 Session Frames Tx 0 Session Id 1 00 00 00 00 00 00 Session Authentic Method Remote Auth Server Session Time 0 secs Session Terminate Cause Port Failure S...

Страница 1254: ...hentication state machine quietperiod Optional Displays the value set for quiet period currently in use by the authenticator PAE state machine reauthenabled Optional Displays the state of reauthentica...

Страница 1255: ...ample shows how to display all 802 1X authentication configuration settings for fe 2 24 Matrix rw show dot1x auth config authcontrolled portcontrol fe 1 1 Port 1 Auth controlled port control Auto Matr...

Страница 1256: ...ified the reinitialization or reauthentication setting will be applied to all ports If index is not specified all access entities will be affected Examples This example shows how to enable 802 1X This...

Страница 1257: ...authentication on the port and allows all frames received on the port to be forwarded forced unauth Forced unauthorized mode which effectively disables 802 1X authentication on the port When 802 1X i...

Страница 1258: ...out Specifies a timeout period in seconds for the authentication server used by the backend authentication state machine Valid values are 1 300 supptimeout timeout Specifies a timeout period in second...

Страница 1259: ...olled portcontrol Optional Resets the 802 1X port control mode to auto keytxenabled Optional Resets the 802 1X key transmission state to disabled false maxreq Optional Resets the maximum requests valu...

Страница 1260: ...ple shows how to reset the 802 1X port control mode to auto on all ports This example shows how to reset reauthentication control to disabled on ports fe 1 1 3 This example shows how to reset the 802...

Страница 1261: ...cated state of the user a login page or a logout page will display When a user submits username and password the switch then authenticates the user via a preconfigured RADIUS server If the login is su...

Страница 1262: ...t will enable the selective services required for PWA This rule will forward ARP requests allow access to a server at IP 1 2 3 4 that acts as both a DNS and DHCP server and be assigned as the default...

Страница 1263: ...tion 14 3 6 5 set pwa banner Section 14 3 6 6 clear pwa banner Section 14 3 6 7 set pwa displaylogo Section 14 3 6 8 set pwa redirecttime Section 14 3 6 9 set pwa ipaddress Section 14 3 6 10 set pwa p...

Страница 1264: ...isplayed for all ports Command Type Switch command Command Mode Read Only Examples This example shows how to display PWA information for ge 2 1 Table 14 3 provides an explanation of the command output...

Страница 1265: ...ancedmode command as described in Section 14 3 6 12 PWA Logo Whether the Enterasys Networks logo will be displayed or hidden at user login Default state of enabled displayed can be changed using the s...

Страница 1266: ...Period Amount of time a port will be in the held state after a user unsuccessfully attempts to log on to the network Default value of 60 can be changed using the set pwa quietperiod command as describ...

Страница 1267: ...Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to enable port web authentication NOTE Port Web Authentication cannot be enabled if either MAC...

Страница 1268: ...is command to set a port web authentication host name This is a URL for accessing the PWA login page set pwa hostname name Syntax Description Command Defaults None Command Type Switch command Command...

Страница 1269: ...iguration Guide 14 59 14 3 6 4 clear pwa hostname Use this command to clear the port web authentication host name clear pwa hostname Syntax Description None Command Defaults None Command Type Switch c...

Страница 1270: ...ide 14 3 6 5 show pwa banner Use this command to display the port web authentication login banner string show pwa banner Syntax Description None Command Defaults None Command Type Switch command Comma...

Страница 1271: ...s command to configure a string to be displayed as the PWA login banner set pwa banner string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This...

Страница 1272: ...uration Guide 14 3 6 7 clear pwa banner Use this command to reset the PWA login banner to a blank string clear pwa banner Syntax Description None Command Defaults None Command Type Switch command Comm...

Страница 1273: ...mand to set the display options for the Enterasys Networks logo set pwa displaylogo display hide Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example Th...

Страница 1274: ...A login success page redirect time set pwa redirecttime time Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set the PWA...

Страница 1275: ...nd station from which PWA will prevent network access until the user is authenticated set pwa ipaddress ip address Syntax Description Command Defaults None Command Type Switch command Command Mode Rea...

Страница 1276: ...p Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set a the PWA protocol to CHAP chap pap Sets the PWA protocol to CHAP P...

Страница 1277: ...uthenticated PWA ports can type any URL into a browser and be presented the PWA login page on their initial web access They will also be granted guest networking privileges set pwa enhancedmode enable...

Страница 1278: ...orking When enhanced mode is enabled as described in Section 14 3 6 12 PWA will use this name to grant network access to guests without established login names and passwords set pwa guestname name Syn...

Страница 1279: ...nfiguration Guide 14 69 14 3 6 14 clear pwa guestname Use this command to clear the PWA guest user name clear pwa guestname Syntax Description None Command Type Switch command Command Defaults None Co...

Страница 1280: ...hanced mode is enabled as described in Section 14 3 6 12 PWA will use this password and the guest user name to grant network access to guests without established login names and passwords set pwa gues...

Страница 1281: ...y privileges to users without established login names and passwords set pwa gueststatus authnone authradius disable Syntax Description Command Type Switch command Command Defaults None Command Mode Re...

Страница 1282: ...authenticated state set pwa initialize port string Syntax Description Command Type Switch command Command Defaults If port string is not specified all ports will be initialized Command Mode Read Write...

Страница 1283: ...set pwa quietperiod time port string Syntax Description Command Type Switch command Command Defaults If port string is not specified quiet period will be set for all ports Command Mode Read Write Exa...

Страница 1284: ...s requests port string Syntax Description Command Type Switch command Command Defaults If port string is not specified maximum requests will be set for all ports Command Mode Read Write Example This e...

Страница 1285: ...will respond to requests If a default policy exists on the port it will be ignored in the unauthenticated state NOTE In order for PWA enhanced mode to operate port control mode must be set to auto fo...

Страница 1286: ...nd Set Configuring Port Web Authentication PWA 14 76 Matrix DFE Platinum and Diamond Series Configuration Guide Example This example shows how to set the PWA control mode to auto for all ports Matrix...

Страница 1287: ...session information for all ports will be displayed Command Mode Read Only Example This example shows how to display PWA session information port string Optional Displays PWA session information for...

Страница 1288: ...Chapter 8 Commands The commands needed to review enable disable and configure MAC authentication are listed below and described in the associated section as shown show macauthentication Section 14 3 7...

Страница 1289: ...MAC Authentication Matrix DFE Platinum and Diamond Series Configuration Guide 14 79 clear macauthentication reauthperiod Section 14 3 7 17 set macauthentication quietperiod Section 14 3 7 18 clear ma...

Страница 1290: ...le 14 4 provides an explanation of the command output port string Optional Displays MAC authentication information for specific port s For a detailed description of possible port string values refer t...

Страница 1291: ...to authenticate the full address i e authentication server timeout causes the next attempt to start once again with a full MAC authentication Default is 48 and cannot be reset Port Port designation F...

Страница 1292: ...mation will be displayed for all MAC authentication ports Example This example shows how to display MAC session information Table 14 5 provides an explanation of the command output Matrix rw show maca...

Страница 1293: ...or this port set using the set macauthentication reauthperiod command described in Section 14 3 7 16 Reauthentications Whether or not reauthentication is enabled or disabled on this port Set using the...

Страница 1294: ...this command to globally enable or disable MAC authentication set macauthentication enable disable Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example...

Страница 1295: ...this command to set a MAC authentication password set macauthentication password password Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Examples This exa...

Страница 1296: ...clear macauthentication password Use this command to clear the MAC authentication password clear macauthentication password Syntax Description None Command Type Switch command Command Mode Read Write...

Страница 1297: ...et the number of significant bits of the MAC address to use for authentication set macauthentication significant bits number Syntax Description Command Type Switch command Command Mode Read Write Comm...

Страница 1298: ...gnificant bits Use this command to clear the MAC authentication significant bits setting clear macauthentication significant bits Syntax Description None Command Type Switch command Command Mode Read...

Страница 1299: ...le This example shows how to enable MAC authentication on ge 2 1 though 5 NOTE Enabling port s for MAC authentication requires globally enabling MAC authentication on the device as described in Sectio...

Страница 1300: ...cated number port string Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example This example shows how to set the number of allowed MAC authentication ses...

Страница 1301: ...Syntax Description Command Type Switch command Command Mode Read Write Command Defaults If port string is not specified the number of allowed authentication sessions will be cleared on all ports Exam...

Страница 1302: ...ve any currently active sessions on those ports set macauthentication portinitialize port string Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example Th...

Страница 1303: ...ession to re initialize and remove the session set macauthentication macinitialize mac_addr Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example This ex...

Страница 1304: ...hentication reauthentication enable disable port string Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example This example shows how to enable MAC reauth...

Страница 1305: ...n one or more MAC authentication ports set macauthentication portreauthenticate port string Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example This ex...

Страница 1306: ...hentication of a MAC address set macauthentication macreauthenticate mac_addr Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example This example shows ho...

Страница 1307: ...ation reauthperiod time port string Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example This example shows how to set the MAC reauthentication period t...

Страница 1308: ...thperiod port string Syntax Description Command Type Switch command Command Mode Read Write Command Defaults If port string is not specified the reauthentication period will be cleared on all ports Ex...

Страница 1309: ...port string Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example This example shows how to set the macauthentication quiet period to 120 seconds 2 minut...

Страница 1310: ...ue The default value is 0 never clear macauthentication quietperiod port string Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example This example shows...

Страница 1311: ...group IP address or a UDP TCP port number for detection Default UDP ports are 1718 1719 1720 Default group address is 224 0 1 41 The commands in this section can be used to configure H 323 detection u...

Страница 1312: ...how cep policy Section 14 3 8 3 show cep port Section 14 3 8 4 set cep Section 14 3 8 5 set cep port Section 14 3 8 6 set cep policy Section 14 3 8 7 set cep detection Section 14 3 8 8 set cep detecti...

Страница 1313: ...ommand Defaults None Command Mode Read Only Example This example shows how to display CEP connections for port fe 1 21 port string Displays CEP status for one or more ports For a detailed description...

Страница 1314: ...ommand Defaults If no detection id is specified all CEP detection parameters are displayed Command Mode Read Only Examples This example shows how to display CEP detection information detection id Opti...

Страница 1315: ...se this command to display the global policies of all supported CEP types show cep policy Syntax Description None Command Defaults None Command Mode Read Only Examples This example shows how to displa...

Страница 1316: ...supported CEP types show cep port port string Syntax Description Command Defaults None Command Mode Read Only Examples This example shows how to display CEP status information for port fe 1 21 port s...

Страница 1317: ...e 14 107 14 3 8 5 set cep Use this command to globally enable or disable CEP detection set cep enable disable Syntax Description Command Defaults None Command Type Switch command Command Mode Read Wri...

Страница 1318: ...ommand Command Mode Read Write Example This example shows how to enable Cisco phone detection on port fe 3 1 port string Specifies the port s to enable or disable For a detailed description of possibl...

Страница 1319: ...s described in Chapter 8 set cep policy cisco h323 siemens sip index Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to assi...

Страница 1320: ...tion Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to create CEP detection group 1 NOTE This command applies only to Siemens H 323 and SIP ph...

Страница 1321: ...y 3 manual detection types Siemens H323 SIP Under manual detection configuration for each of the types the Endpoint Phone Type will be listed correctly However the high and low ports will not reflect...

Страница 1322: ...e Command Type Switch command Command Mode Read Write Example This example shows how to set an IP address of 10 1 1 3 and mask for detection group 1 NOTE This command applies only to Siemens H 323 and...

Страница 1323: ...in Section 14 3 8 12 set cep detection id id protocol tcp udp both none Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to...

Страница 1324: ...tection id id porthigh portlow port Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to set port 65 as the minimum port to be...

Страница 1325: ...ring Syntax Description Command Defaults If no port string is specified all existing CEP connections on all ports are cleared Command Type Switch command Command Mode Read Write Example This example s...

Страница 1326: ...itch command Command Mode Read Write all Restores factory defaults to all CEP configuration information policy Restore factory defaults to CEP policy configuration detection detection id Restore facto...

Страница 1327: ...Configuration Guide 14 117 Examples This example shows how to clear all CEP policy parameters This example shows how to clear detection id 4 parameters This example shows how to clears ports fe 1 1 5...

Страница 1328: ...hose with the locked MAC address es for that port Commands The commands needed to configure MAC locking are listed below and described in the associated section as shown show maclock Section 14 3 9 1...

Страница 1329: ...C locking information for ge 2 1 through 5 Table 14 6 provides an explanation of the command output port_string Optional Displays MAC locking status for specified port s For a detailed description of...

Страница 1330: ...o Section 14 3 9 3 and Section 14 3 9 5 Trap Status Whether MAC lock trap messaging is enabled or disabled on the port For details on setting this status using the set maclock trap command refer to Se...

Страница 1331: ...orts in module 2 firstarrival Optional Displays MAC locking information about end stations first connected to MAC locked ports static Optional Displays MAC locking information about static management...

Страница 1332: ...show maclock stations Output Details Output What It Displays Port Number Port designation For a detailed description of possible port_string values refer to Section 4 1 1 MAC address MAC address of th...

Страница 1333: ...yntax Description Command Defaults If port_string is not specified MAC locking will be enabled on all ports Command Type Switch command Command Mode Read Write Example This example shows how to enable...

Страница 1334: ...disable port_string Syntax Description Command Defaults If port_string is not specified MAC locking will be disabled on all ports Command Type Switch command Command Mode Read Write Example This exam...

Страница 1335: ...n between MAC address 00 a0 c9 0d 32 11 and port fe 2 3 NOTE Configuring one or more ports for MAC locking requires globally enabling it on the device first using the set maclock enable command as des...

Страница 1336: ...t_string value Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to restrict MAC locking to 6 MAC addresses on fe 2 3 port_str...

Страница 1337: ...aclock move port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to move all current first arrival MACs to static ent...

Страница 1338: ...per port to the default value of 600 clear maclock firstarrival port string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how...

Страница 1339: ...t maclock static port_string value Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to restrict MAC locking to 4 static addre...

Страница 1340: ...er port to the default value of 20 clear maclock static port_string Syntax Description Command Defaults None Command Type Switch command Command Mode Read Write Example This example shows how to reset...

Страница 1341: ...val and set maclock static commands Violating MAC addresses are dropped from the device s routing table set maclock trap port_string enable disable Syntax Description Command Defaults None Command Typ...

Страница 1342: ...faults None Command Type Switch command Command Mode Read Write Example This example shows how to clear MAC locking between MAC address 00 a0 c9 0d 32 11 and port fe 2 3 all Clears all static MAC lock...

Страница 1343: ...H4383 49 and 7H4385 49 Uplink modules defined as modular SFP 10 Gbps and 100 FX ports support up to 128 authenticated users per port Uplink modules include the following 7G4202 30 7G4270 12 7G4280 19...

Страница 1344: ...lear multiauth station Section 14 3 10 9 show multiauth session Section 14 3 10 10 show multiauth idle timeout Section 14 3 10 11 set multiauth idle timeout Section 14 3 10 12 clear multiauth idle tim...

Страница 1345: ...trict Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Examples This example shows how to enable multiple authentication multi Allows the system to use mult...

Страница 1346: ...uration Guide 14 3 10 2 clear multiauth mode Use this command to clear the system authentication mode clear multiauth mode Syntax Description None Command Type Switch command Command Mode Read Write C...

Страница 1347: ...the precedence of the authentication methods will determine which RADIUS returned filter ID will be processed and result in an applied traffic policy profile set multiauth precedence dot1x mac pwa Sy...

Страница 1348: ...multiauth precedence Use this command to clear the system s multiple authentication administrative precedence clear multiauth precedence Syntax Description None Command Type Switch command Command Mo...

Страница 1349: ...command Command Mode Read Only Command Defaults If port string is not specified multiple authentication information will be displayed for all ports Example This example shows how to display multiple...

Страница 1350: ...Mode Read Write Command Defaults None Examples This example shows how to set the port multiple authentication mode to required on ge 3 14 mode auth opt auth reqd force auth force unauth Specifies the...

Страница 1351: ...rs port string Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Examples This example shows how to clear the port multiple authentication mode on all 1 Giga...

Страница 1352: ...nd Defaults If no options are specified multiple authentication station entries will be displayed for all MAC addresses and ports Example This example shows how to display multiple authentication stat...

Страница 1353: ...on Command Type Switch command Command Mode Read Write Command Defaults If not specified multiple authentication station entries will be cleared for all MAC addresses Example This example shows how to...

Страница 1354: ...d Mode Read Only Command Defaults If no options are specified multiple authentication session entries will be displayed for all sessions authentication types MAC addresses and ports all Optional Displ...

Страница 1355: ...ix rw show multiauth session Multiple authentication session entries Port fe 2 2 Station address 00 01 f4 2b 4f 8b Auth status success Last attempt MON MAY 08 14 34 42 2006 Agent type pwa Session appl...

Страница 1356: ...sion This will display the idle timeout vlaues in seconds for the following authentication types dot1x pwa mac and cep show multiauth idle timeout Syntax Description None Command Type Switch command C...

Страница 1357: ...nds for each of the multiple authentication types Examples This example shows how to set the idle timeout session for cep and mac authentication to 500 seconds This example shows how to set the idle t...

Страница 1358: ...o 300 seconds for all authentication types Command Type Switch command Command Mode Read Write Examples This example shows how to clear the idle timeout session values for cep and mac authentication t...

Страница 1359: ...e session This will display the session timeout values in seconds for the following authentication types dot1x pwa mac and cep show multiauth session timeout Syntax Description None Command Type Switc...

Страница 1360: ...ows how to set the session timeout value for an active session for cep and mac authentication to 500 seconds This example shows how to set the session timeout value for an active session for all the a...

Страница 1361: ...ommand Type Switch command Command Mode Read Write Examples This example shows how to clear the session timeout values for an active session for cep and mac authentication types to the default value o...

Страница 1362: ...sable and configure the Secure Shell SSH protocol which provides secure Telnet Commands The commands used to review and configure SSH are listed below and described in the associated section as shown...

Страница 1363: ...53 14 3 11 1 show ssh state Use this command to display the current status of SSH on the device show ssh state Syntax Description None Command Type Switch command Command Mode Read Only Command Defaul...

Страница 1364: ...nable disable or reinitialize SSH server on the device set ssh enable disable reinitialize Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example This exa...

Страница 1365: ...tkey Use this command to set or reinitialize new SSH authentication keys set ssh hostkey reinitialize Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Examp...

Страница 1366: ...11 4 show router ssh Use this command to display the state of SSH service to the router show router ssh Syntax Description None Command Type Switch command Command Mode Read Only Command Defaults Non...

Страница 1367: ...outer ssh Use this command to enables or disable SSH service to the router set router ssh enable disable Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Ex...

Страница 1368: ...lear router ssh Use this command to reset SSH service to the router to the default state of disabled clear router ssh Syntax Description None Command Type Switch command Command Mode Read Write Comman...

Страница 1369: ...rotocol and source IP address restrictions Commands The commands used to review and configure security access lists are listed below and described in the associated section as shown show access lists...

Страница 1370: ...s list which permits or denies ICMP UDP and IP frames based on restrictions configured with the one of the access list commands For details on configuring standard access lists refer to Section 14 3 1...

Страница 1371: ...st numbers for standard ACLs are 1 to 99 For extended ACLs valid values are 100 to 199 access list number Specifies a standard access list number Valid values are from 1 to 99 insert replace entry Opt...

Страница 1372: ...st portions of the network addresses Any host with a source address that does not match the access list statements will be rejected protocol Specifies an IP protocol for which to deny or permit access...

Страница 1373: ...guration Command Set Configuring Access Lists Matrix DFE Platinum and Diamond Series Configuration Guide 14 163 This example moves entry 16 to the beginning of ACL 22 Matrix Router1 config access list...

Страница 1374: ...in an ACL access list access list number move destination source1 source2 To log entries within an ACL access list access list number log 1 5000 all To apply ACL restrictions to IP UDP TCP or ICMP pac...

Страница 1375: ...umber in the range to be moved Source2 optional is the last entry number in the range to be moved If not specified only the source1 entry will be moved deny permit Denies or permits access if specifie...

Страница 1376: ...bers Possible operands include lt port Match only packets with a lower port number gt port Match only packets with a greater port number eq port Match only packets on a given port number neq port Matc...

Страница 1377: ...e types If operator and port are not specified access parameters will be applied to all TCP or UDP ports Examples This example shows how to define access list 101 to deny ICMP transmissions from any s...

Страница 1378: ...8 Matrix DFE Platinum and Diamond Series Configuration Guide This example shows how to define access list 102 to deny TCP packets transmitted from any IP source port with a the DiffServ value set to 5...

Страница 1379: ...config if Vlan vlan_id Command Defaults None Example This example shows how to apply access list 1 for all inbound frames on VLAN 1 Through the definition of access list 1 only frames with destinatio...

Страница 1380: ...oes match the ACL check is exited and the map having the ACL matching the packet is checked for further routing instruction If the action of that map is permit and a next hop is specified policy based...

Страница 1381: ...Security Configuration Command Set Configuring Policy Based Routing Matrix DFE Platinum and Diamond Series Configuration Guide 14 171 ip policy pinger Section 14 3 13 9...

Страница 1382: ...e IP addresses matching ACL lists 2 3 4 8 or 110 will be forwarded to next hop 10 2 1 1 10 2 2 1 or 10 2 3 1 The route map list was created using the route map command Section 14 3 13 2 The packet sou...

Страница 1383: ...an existing route map list by specifying the list s id number and a new sequence number id number Specifies a route map list ID number to which this route map will be added If an unused ID number is...

Страница 1384: ...ion Guide Command Defaults If permit or deny is not specified this command will enable route map or policy based routing configuration mode If sequence number is not specified 10 will be applied Examp...

Страница 1385: ...emoves the match between an access list and this route map no match ip address access list number Command Type Router command Command Modes Policy based routing configuration Matrix Router1 config rou...

Страница 1386: ...yntax of the no Form The no form of this command deletes next hop IP address es no set next hop next hop1 next hop2 next hop5 Command Type Router command Command Mode Policy based routing configuratio...

Страница 1387: ...of the command output Matrix Router1 config show ip policy Interface Route map Priority Load policy Pinger Interval Retries 3 103 first first available off 3 3 2 102 only round robin on 10 4 Table 14...

Страница 1388: ...the ip policy pinger command as described in Section 14 3 13 9 Interval PBR next hop ping interval in seconds Default of 3 can be reset using the ip policy pinger command as described in Section 14 3...

Страница 1389: ...ns a route map list no ip policy route map Command Type Router command Command Mode Interface configuration Matrix Router1 config if Vlan vlan_id Command Defaults None Example This example shows how t...

Страница 1390: ...mand Mode Interface configuration Matrix Router1 config if Vlan vlan_id Command Defaults None Example This example shows how to set the IP policy priority on VLAN 1 to last only first last Prioritizes...

Страница 1391: ...Command Syntax of the no Form The no form of this command resets the next hop behavior to first available no ip policy load policy Command Type Router command Command Mode Interface configuration Mat...

Страница 1392: ...and Defaults If not specified interval will be set to 3 seconds If not specified retries will be set to 3 Example This example shows how to configure the PBR ping interval to 5 and retries to 4 on VLA...

Страница 1393: ...hich will protect the router from attacks and notify administrators via Syslog Commands The commands used to configure DoS prevention are listed below and described in the associated section as shown...

Страница 1394: ...how to display Denial of Service security status and counters For details on how to set these parameters refer to Section 14 3 14 2 NOTE When fragmented ICMP packets protection is enabled the Ping of...

Страница 1395: ...onfig if Vlan vlan_id Command Defaults None land Enables land attack protection and automatically discards illegal frames This can be enabled globally or per interface fragmicmp Enables fragmented ICM...

Страница 1396: ...le shows how to globally enable land attack and large ICMP packets protection for packets larger than 2000 bytes This example shows how to enable spoofed address checking on the VLAN 1 interface Matri...

Страница 1397: ...clear hostdos counters Use this command to clear Denial of Service security counters clear hostdos counters Syntax Description None Command Type Router command Command Mode Global configuration Matrix...

Страница 1398: ...trators to Globally enable FST on the switch and on a port by port basis Configure the maximum flows allowed per user classification port type and the actions that will occur when flow limits are reac...

Страница 1399: ...d Series Configuration Guide 14 189 set flowlimit port Section 14 3 15 8 clear flowlimit port class Section 14 3 15 9 set flowlimit shutdown Section 14 3 15 10 set flowlimit notification Section 14 3...

Страница 1400: ...ing information will be displayed for all ports Example This example shows how to display flow limiting information for Fast Ethernet port 1 in module 2 In this case it is enabled for FST with an unsp...

Страница 1401: ...Use this command to globally enable or disable flow setup throttling set flowlimit enable disable Syntax Description Command Type Switch command Command Mode Read Write Command Defaults None Example T...

Страница 1402: ...serverport aggregateduser interswitchlink unspecified Syntax Description Command Type Switch command Command Mode Read Write Command Defaults If classification port type is not specified none will be...

Страница 1403: ...uring Flow Setup Throttling FST Matrix DFE Platinum and Diamond Series Configuration Guide 14 193 Example This example shows how to set the flow limit 1 to 12 flows on ports classified as user ports M...

Страница 1404: ...Type Switch command Command Mode Read Write Command Defaults If not specified the limit will be removed from all port classification types Example This example shows how to remove flow limit 1 from al...

Страница 1405: ...an be defined per user classification Action number must correspond to a flow limit configured using the set flowlimit limit command as described in Section 14 3 15 3 notify Optional When flow limit i...

Страница 1406: ...Guide Command Defaults If action is not specified no action will be applied If classification port type is not specified none will be applied Example This example shows how to set flow limiting actio...

Страница 1407: ...d all action types will be removed If not specified the action will be removed from all port classifications Example This example shows how to remove flow limiting action 1 from all port classificatio...

Страница 1408: ...rt serverport aggregateduser interswitchlink unspecified Syntax Description Command Type Switch command Command Mode Read Only Command Defaults If port classification type is not specified information...

Страница 1409: ...atrix rw show flowlimit class Flow setup throttling class configuration Class Limit Action userPort limit1 800 action1 notify limit2 1000 action2 disable notify serverPort limit1 5000 action1 notify l...

Страница 1410: ...interface previously disabled by a flow limiting action set flowlimit port enable disable class userport serverport aggregateduser interswitchlink unspecified status operational port string Syntax De...

Страница 1411: ...etup Throttling FST Matrix DFE Platinum and Diamond Series Configuration Guide 14 201 Example This example shows how to assign the user port classification type to Fast Ethernet ports 3 5 in module 2...

Страница 1412: ...rties clear flowlimit port class port string Syntax Description Command Type Switch command Command Mode Read Write Command Defaults If port string is not specified classifications will be removed fro...

Страница 1413: ...red with a disable action to shut down For information on using the set flowlimit limit command to configure set a disable action on a port refer to Section 14 3 15 3 set flowlimit shutdown enable dis...

Страница 1414: ...ified flow limit is reached For information on using the set flowlimit limit command to configure a trap action on a port refer to Section 14 3 15 3 set flowlimit notification disable enable interval...

Страница 1415: ...interval Use this command to reset the SNMP flow limit notification interval to the default value of 120 seconds clear flowlimit notification interval Syntax Description None Command Type Switch comma...

Страница 1416: ...one or more port s clear flowlimit stats port string Syntax Description Command Type Switch command Command Mode Read Write Command Defaults If port string is not specified statistics will be reset o...

Страница 1417: ...5 simple password 13 44 Port web 14 51 RADIUS server 14 12 14 17 14 27 RIP 13 13 SSH 14 155 VRRP 13 105 Auto negotiation 4 51 B Banner for Message of the Day 2 72 Baud Rate 4 10 Broadcast settings for...

Страница 1418: ...ow Setup Throttling FST 14 20 14 188 G Getting Help 1 3 GVRP enabling and disabling 7 44 purpose of 7 37 timer 7 46 H H 323 detection 14 101 Hardware show system 2 52 2 74 Hello Packets 13 42 to 13 43...

Страница 1419: ...iscovery Protocol 2 143 Multicast Filtering 10 1 10 2 Multiple Authentication 14 133 Multiple Spanning Tree Protocol MSTP 6 1 N Name setting for a VLAN 7 8 setting for the system 2 76 Neighbors OSPF 1...

Страница 1420: ...unters reviewing statistics 4 28 duplex mode setting 4 42 enabling and disabling 4 34 flow control 4 63 MAC lock 14 123 mirroring 4 90 priority configuring 9 2 speed setting 4 42 status reviewing 4 24...

Страница 1421: ...ameters 6 5 features 6 2 Loop Protect feature 6 2 port parameters 6 91 Rapid Spanning Tree Protocol RSTP 6 1 Split Horizon 13 25 Stub Areas 13 50 Syslog 11 2 System Information displaying basic 2 50 s...

Страница 1422: ...RP 7 37 ingress filtering 7 11 naming 7 8 reviewing existing 7 3 secure management creating 7 36 VRRP authentication 13 105 configuration mode enabling 13 91 creating a session 13 92 critical IP 13 99...

Результаты поиска

Содержание Matrix 2G4072-52

Отзывы:

Enterasys Matrix 2G4072-52, Руководство по настройке, Страница: 1214 / 1422

Результаты поиска

Содержание Matrix 2G4072-52

Отзывы: