Command Line Interface Guide
Page 8
... 147 boot system 148 show running-config 149 show startup-config 150 show bootvar 152 9 DHCP Snooping 153 ip dhcp snooping 153 ip dhcp snooping vlan 153 ip dhcp snooping trust 154 ip dhcp snooping information option allowed-untrusted 155 ip dhcp snooping verify 155 ip dhcp snooping database 156 ip...
... 147 boot system 148 show running-config 149 show startup-config 150 show bootvar 152 9 DHCP Snooping 153 ip dhcp snooping 153 ip dhcp snooping vlan 153 ip dhcp snooping trust 154 ip dhcp snooping information option allowed-untrusted 155 ip dhcp snooping verify 155 ip dhcp snooping database 156 ip...
Command Line Interface Guide
Page 10
gvrp vlan-creation-forbid 185 gvrp registration-forbid 186 clear gvrp statistics 186 show gvrp configuration 187 show gvrp statistics 188 show gvrp error-statistics 189 12 ...
gvrp vlan-creation-forbid 185 gvrp registration-forbid 186 clear gvrp statistics 186 show gvrp configuration 187 show gvrp statistics 188 show gvrp error-statistics 189 12 ...
Command Line Interface Guide
Page 22
... map protocols-group vlan 481 ip internal-usage-vlan 482 mac-to-vlan 483 show vlan mac-to-vlan 484 show vlan 484 show vlan protocols-groups 485 show vlan internal usage 486 show interfaces switchport 487 37 Voice VLAN 493 voice vlan id 493 voice vlan oui-table 493 voice vlan cos 495 voice vlan aging-timeout 496 voice vlan enable 496 voice...
... map protocols-group vlan 481 ip internal-usage-vlan 482 mac-to-vlan 483 show vlan mac-to-vlan 484 show vlan 484 show vlan protocols-groups 485 show vlan internal usage 486 show interfaces switchport 487 37 Voice VLAN 493 voice vlan id 493 voice vlan oui-table 493 voice vlan cos 495 voice vlan aging-timeout 496 voice vlan enable 496 voice...
Command Line Interface Guide
Page 24
dot1x send-async-request-id 523 show dot1x 524 show dot1x users 527 show dot1x statistics 528 ADVANCED FEATURES 530 dot1x auth-not-req 530 dot1x multiple-hosts 531 dot1x single-host-violation 532 dot1x guest-vlan 533 dot1x guest-vlan enable 534 dot1x mac-authentication 534 dot1x traps mac-authentication failure 535 dot1x radius-attributes vlan 536 show dot1x advanced 537 24 Contents
dot1x send-async-request-id 523 show dot1x 524 show dot1x users 527 show dot1x statistics 528 ADVANCED FEATURES 530 dot1x auth-not-req 530 dot1x multiple-hosts 531 dot1x single-host-violation 532 dot1x guest-vlan 533 dot1x guest-vlan enable 534 dot1x mac-authentication 534 dot1x traps mac-authentication failure 535 dot1x radius-attributes vlan 536 show dot1x advanced 537 24 Contents
Command Line Interface Guide
Page 28
... to configure the management connections. The interface ethernet Global Configuration mode command is used to enter the Interface Configuration mode to create a VLAN as the commands in the Ethernet interface mode, and are the Interface Configuration modes: • Line Interface - Console(config)# To... illustrates how to access the Global Configuration mode and return to enter the Line Configuration command mode. • VLAN Database - These include commands such as a single entity. Contains commands to configure an Ethernet type interface. • Port Channel - The...
... to configure the management connections. The interface ethernet Global Configuration mode command is used to enter the Interface Configuration mode to create a VLAN as the commands in the Ethernet interface mode, and are the Interface Configuration modes: • Line Interface - Console(config)# To... illustrates how to access the Global Configuration mode and return to enter the Line Configuration command mode. • VLAN Database - These include commands such as a single entity. Contains commands to configure an Ethernet type interface. • Port Channel - The...
Command Line Interface Guide
Page 34
... Commands SSH Commands Syslog Commands System Management Commands TACACS Commands TIC Commands Tunnel Commands User Interface Commands VLAN Commands Voice VLAN Commands 802.1x Commands 34 Command Groups Configures all port configuration options for entering CLI commands. Monitors...Manages and displays syslog messages. Configures and displays TIC information. Configures tunnel routing configurations. Configures Voice VLANs and displays VLAN information. Configures and manages IP addresses on specific target ports. Configures and displays management access-list information. ...
... Commands SSH Commands Syslog Commands System Management Commands TACACS Commands TIC Commands Tunnel Commands User Interface Commands VLAN Commands Voice VLAN Commands 802.1x Commands 34 Command Groups Configures all port configuration options for entering CLI commands. Monitors...Manages and displays syslog messages. Configures and displays TIC information. Configures tunnel routing configurations. Configures Voice VLANs and displays VLAN information. Configures and manages IP addresses on specific target ports. Configures and displays management access-list information. ...
Command Line Interface Guide
Page 36
... learned entries from becoming a forward-all Multicast port. Configures the maximum number of unregistered multicast addresses. Access Mode Interface (VLAN) Configuration Global Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Interface Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Global Configuration Privileged EXEC Interface Configuration Interface Configuration Interface Configuration 36 Command Groups MAC Access-List Configuration Interface...
... learned entries from becoming a forward-all Multicast port. Configures the maximum number of unregistered multicast addresses. Access Mode Interface (VLAN) Configuration Global Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Interface Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Global Configuration Privileged EXEC Interface Configuration Interface Configuration Interface Configuration 36 Command Groups MAC Access-List Configuration Interface...
Command Line Interface Guide
Page 39
... the currently running -config show startup-config show ip dhcp snooping binding Configures a port as trusted for all interfaces on a VLAN. Configures a switch to accept DHCP packets with option-82 information from an untrusted port. Configures the update frequency of the DHCP...Privileged EXEC Privileged EXEC Privileged EXEC DHCP Snooping Commands Command Group ip dhcp snooping Description Globally enables DHCP snooping ip dhcp snooping vlan Enables DHCP snooping on a switch. Configures the update frequency of the DHCP snooping binding file. Displays the DHCP snooping binding...
... the currently running -config show startup-config show ip dhcp snooping binding Configures a port as trusted for all interfaces on a VLAN. Configures a switch to accept DHCP packets with option-82 information from an untrusted port. Configures the update frequency of the DHCP...Privileged EXEC Privileged EXEC Privileged EXEC DHCP Snooping Commands Command Group ip dhcp snooping Description Globally enables DHCP snooping ip dhcp snooping vlan Enables DHCP snooping on a switch. Configures the update frequency of the DHCP snooping binding file. Displays the DHCP snooping binding...
Command Line Interface Guide
Page 41
...Group Management Protocol (IGMP) snooping. Enables GVRP on a specific VLAN Defines the source IP address that the IGMP Snooping querier uses. Clears all VLANs, and prevents dynamic VLAN registration on dynamically learned Multicast router interfaces. Displays GVRP statistics....on the port. Displays Multicast groups learned by IGMP snooping. Access Mode Global Configuration Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) User EXEC User EXEC User EXEC Command Groups 41 De-registers all the GVRP statistics ...
...Group Management Protocol (IGMP) snooping. Enables GVRP on a specific VLAN Defines the source IP address that the IGMP Snooping querier uses. Clears all VLANs, and prevents dynamic VLAN registration on dynamically learned Multicast router interfaces. Displays GVRP statistics....on the port. Displays Multicast groups learned by IGMP snooping. Access Mode Global Configuration Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) User EXEC User EXEC User EXEC Command Groups 41 De-registers all the GVRP statistics ...
Command Line Interface Guide
Page 52
... the default link-type setting. Configures the path cost for the specified spanning-tree instance. Configures the number of a port. Displays Spanning Tree configuration. Maps VLANs to the MST instance. Interface Configuration Interface Configuration Interface Configuration Global Configuration Global Configuration Interface Configuration Privileged EXEC Global Configuration Global Configuration Interface Configuration Interface...
... the default link-type setting. Configures the path cost for the specified spanning-tree instance. Configures the number of a port. Displays Spanning Tree configuration. Maps VLANs to the MST instance. Interface Configuration Interface Configuration Interface Configuration Global Configuration Global Configuration Interface Configuration Privileged EXEC Global Configuration Global Configuration Interface Configuration Interface...
Command Line Interface Guide
Page 57
... exit (Configuration) exit end help system. Enters the interface configuration mode to the Privileged EXEC mode. Configures the VLAN ID when the interface is in the CLI mode hierarchy. Exits any configuration mode to the next highest mode in...Priv/User EXEC After Privileged EXEC All User EXEC Privileged EXEC User EXEC VLAN Commands Command Group vlan database vlan interface vlan interface range vlan name switchport access vlan switchport trunk allowed vlan Description Enters the VLAN database configuration mode. Changes a login username. Enables the global configuration ...
... exit (Configuration) exit end help system. Enters the interface configuration mode to the Privileged EXEC mode. Configures the VLAN ID when the interface is in the CLI mode hierarchy. Exits any configuration mode to the next highest mode in...Priv/User EXEC After Privileged EXEC All User EXEC Privileged EXEC User EXEC VLAN Commands Command Group vlan database vlan interface vlan interface range vlan name switchport access vlan switchport trunk allowed vlan Description Enters the VLAN database configuration mode. Changes a login username. Enables the global configuration ...
Command Line Interface Guide
Page 58
... adding specific VLANs to -VLAN database. show vlan mac-to-vlan show vlan show vlan protocolsgroups show vlan internal usage show interfaces switchport Displays the MAC-to a port. Displays VLAN information. Adds MAC addresses to the MAC-to -vlan Set the port's VLAN when the interface is the "port default VLAN ID (PVID)". switchport trunk native vlan switchport general allowed vlan switchport general...
... adding specific VLANs to -VLAN database. show vlan mac-to-vlan show vlan show vlan protocolsgroups show vlan internal usage show interfaces switchport Displays the MAC-to a port. Displays VLAN information. Adds MAC addresses to the MAC-to -vlan Set the port's VLAN when the interface is the "port default VLAN ID (PVID)". switchport trunk native vlan switchport general allowed vlan switchport general...
Command Line Interface Guide
Page 59
... HTTPS certificate. Global Configuration Global Configuration Command Groups 59 Configures the voice OUI table. Sets the voice VLAN aging timeout. Displays the voice VLAN status. Privileged EXEC Imports a certificate signed by a web browser to configure the device. Specifies the TCP...input before automatically logging off . Voice VLAN Commands Command Group voice vlan id voice vlan oui-table voice vlan cos voice vlan aging-timeout voice vlan enable voice vlan secure show voice vlan Description Enables voice VLAN and configures voice VLAN ID. Sets the interval the system ...
... HTTPS certificate. Global Configuration Global Configuration Command Groups 59 Configures the voice OUI table. Sets the voice VLAN aging timeout. Displays the voice VLAN status. Privileged EXEC Imports a certificate signed by a web browser to configure the device. Specifies the TCP...input before automatically logging off . Voice VLAN Commands Command Group voice vlan id voice vlan oui-table voice vlan cos voice vlan aging-timeout voice vlan enable voice vlan secure show voice vlan Description Enables voice VLAN and configures voice VLAN ID. Sets the interval the system ...
Command Line Interface Guide
Page 61
... the specified interface. Enables authentication based on the interface to access the guest VLAN. Defines a guest VLAN. Privileged EXEC Privileged EXEC Interface (VLAN) Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Global Configuration ...auth-not-req dot1x multiple-hosts dot1x single-hostviolation dot1x guest-vlan dot1x guest-vlan enable dot1x macauthentication dot1x traps macauthentication failure dot1x radius-attributes vlan show dot1x advanced Displays active 802.1x authenticated users. Enables ...
... the specified interface. Enables authentication based on the interface to access the guest VLAN. Defines a guest VLAN. Privileged EXEC Privileged EXEC Interface (VLAN) Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Global Configuration ...auth-not-req dot1x multiple-hosts dot1x single-hostviolation dot1x guest-vlan dot1x guest-vlan enable dot1x macauthentication dot1x traps macauthentication failure dot1x radius-attributes vlan show dot1x advanced Displays active 802.1x authenticated users. Enables ...
Command Line Interface Guide
Page 64
...-system logging gvrp enable (Global) hostname interface ethernet interface port-channel interface range ethernet interface range port-channel interface range vlan interface vlan ip access-list ip access-list ip address ip default-gateway ip dhcp snooping ip dhcp snooping database ip dhcp snooping ...database update-freq ip dhcp snooping information option allowed-untrusted ip dhcp snooping trust ip dhcp snooping verify ip dhcp snooping vlan ip domain-lookup ip domain-name ip host Sets a local password to control access to configure multiple portchannels. Creates Layer 2 ACLs...
...-system logging gvrp enable (Global) hostname interface ethernet interface port-channel interface range ethernet interface range port-channel interface range vlan interface vlan ip access-list ip access-list ip address ip default-gateway ip dhcp snooping ip dhcp snooping database ip dhcp snooping ...database update-freq ip dhcp snooping information option allowed-untrusted ip dhcp snooping trust ip dhcp snooping verify ip dhcp snooping vlan ip domain-lookup ip domain-name ip host Sets a local password to control access to configure multiple portchannels. Creates Layer 2 ACLs...
Command Line Interface Guide
Page 68
... (MST) mode. Configures the Spanning Tree priority. Forces selection of unregistered multicast addresses. Establishes a username-based authentication system. Enters the VLAN database configuration mode. Forbids a port from becoming a forward-all TACACS+ communications between the device and the TACACS+ daemon. Configures the ... method spanning-tree priority stack master tacacs-server host tacacs-server key tacacs-server source-ip tacacs-server timeout username vlan database wrr-queue cos-map Defines BPDU handling when Spanning Tree is aged out. Configures the number of hops in...
... (MST) mode. Configures the Spanning Tree priority. Forces selection of unregistered multicast addresses. Establishes a username-based authentication system. Enters the VLAN database configuration mode. Forbids a port from becoming a forward-all TACACS+ communications between the device and the TACACS+ daemon. Configures the ... method spanning-tree priority stack master tacacs-server host tacacs-server key tacacs-server source-ip tacacs-server timeout username vlan database wrr-queue cos-map Defines BPDU handling when Spanning Tree is aged out. Configures the number of hops in...
Command Line Interface Guide
Page 69
Configures the action to be taken, when a station whose MAC address is not the supplicant MAC address, attempts to access the guest VLAN. Sets the number of packets to an Extensible Authentication Protocol (EAP) - Adjusts the GARP application join, leave, and leaveall GARP timer ... dot1x timeout server-timeout dot1x timeout supp-timeout dot1x timeout tx-period duplex flowcontrol garp timer gvrp enable (Interface) gvrp registration-forbid gvrp vlan-creation-forbid ip address ip address dhcp Adds a description to the client, before resending the request. Sets the maximum number of times ...
Configures the action to be taken, when a station whose MAC address is not the supplicant MAC address, attempts to access the guest VLAN. Sets the number of packets to an Extensible Authentication Protocol (EAP) - Adjusts the GARP application join, leave, and leaveall GARP timer ... dot1x timeout server-timeout dot1x timeout supp-timeout dot1x timeout tx-period duplex flowcontrol garp timer gvrp enable (Interface) gvrp registration-forbid gvrp vlan-creation-forbid ip address ip address dhcp Adds a description to the client, before resending the request. Sets the maximum number of times ...
Command Line Interface Guide
Page 70
... a description of an interface. Enables each port trust state. Starts a port monitoring session. Enables the device to a VLAN. ip internal-usage-vlan ipv6 default-gateway ipv6 mld join-group ipv6 mld version lacp port-priority lacp timeout mdix name negotiation port monitor port security... priority qos cos qos cos qos trust (Interface) qos trust (Interface) rate-limit (Ethernet) rmon collection history Reserves a VLAN as the internal usage VLAN of the powered device type attached to a routed port. Defines an IPv6 default gateway. Configures a name to count Multicast packets...
... a description of an interface. Enables each port trust state. Starts a port monitoring session. Enables the device to a VLAN. ip internal-usage-vlan ipv6 default-gateway ipv6 mld join-group ipv6 mld version lacp port-priority lacp timeout mdix name negotiation port monitor port security... priority qos cos qos cos qos trust (Interface) qos trust (Interface) rate-limit (Ethernet) rmon collection history Reserves a VLAN as the internal usage VLAN of the powered device type attached to a routed port. Defines an IPv6 default gateway. Configures a name to count Multicast packets...
Command Line Interface Guide
Page 71
... speed of a port. Discards untagged frames at ingress. spanning-tree guard root Enables root guard on an interface. switchport access vlan Defines the primary PVLAN. service-acl Sets the default ace action to an uplink port. Shutsdown an interface when it receives a... cost for a port. shutdown Disables interfaces. spanning-tree link-type Overrides the default link-type setting. switchport mode Configures the VLAN membership mode of a port switchport protected Overrides the FDB (Forwarding Database)decision, and sends all the Spanning Tree instances in access...
... speed of a port. Discards untagged frames at ingress. spanning-tree guard root Enables root guard on an interface. switchport access vlan Defines the primary PVLAN. service-acl Sets the default ace action to an uplink port. Shutsdown an interface when it receives a... cost for a port. shutdown Disables interfaces. spanning-tree link-type Overrides the default link-type setting. switchport mode Configures the VLAN membership mode of a port switchport protected Overrides the FDB (Forwarding Database)decision, and sends all the Spanning Tree instances in access...
Command Line Interface Guide
Page 72
... list for a particular line. Sets the expiration time of line passwords in general mode. Configures the baud rate of the specified VLAN, and the VLAN ID is detected. MA (Management Access-level) Mode Command Group deny (Management) permit (Management) Description Defines a deny rule....Command Modes Configures the interval that the system waits until user input is the "port default VLAN ID (PVID)". switchport trunk allowed vlan switchport trunk native vlan traffic-shape Adds or removes VLANs from a remote telnet or console. Defines the port as a member of the line. ...
... list for a particular line. Sets the expiration time of line passwords in general mode. Configures the baud rate of the specified VLAN, and the VLAN ID is detected. MA (Management Access-level) Mode Command Group deny (Management) permit (Management) Description Defines a deny rule....Command Modes Configures the interval that the system waits until user input is the "port default VLAN ID (PVID)". switchport trunk allowed vlan switchport trunk native vlan traffic-shape Adds or removes VLANs from a remote telnet or console. Defines the port as a member of the line. ...