Command Line Interface Guide
Page 8
... 147 boot system 148 show running-config 149 show startup-config 150 show bootvar 152 9 DHCP Snooping 153 ip dhcp snooping 153 ip dhcp snooping vlan 153 ip dhcp snooping trust 154 ip dhcp snooping information option allowed-untrusted 155 ip dhcp snooping verify 155 ip dhcp snooping database 156 ip...
... 147 boot system 148 show running-config 149 show startup-config 150 show bootvar 152 9 DHCP Snooping 153 ip dhcp snooping 153 ip dhcp snooping vlan 153 ip dhcp snooping trust 154 ip dhcp snooping information option allowed-untrusted 155 ip dhcp snooping verify 155 ip dhcp snooping database 156 ip...
Command Line Interface Guide
Page 10
gvrp vlan-creation-forbid 185 gvrp registration-forbid 186 clear gvrp statistics 186 show gvrp configuration 187 show gvrp statistics 188 show gvrp error-statistics 189 12 ...
gvrp vlan-creation-forbid 185 gvrp registration-forbid 186 clear gvrp statistics 186 show gvrp configuration 187 show gvrp statistics 188 show gvrp error-statistics 189 12 ...
Command Line Interface Guide
Page 22
... map protocols-group vlan 481 ip internal-usage-vlan 482 mac-to-vlan 483 show vlan mac-to-vlan 484 show vlan 484 show vlan protocols-groups 485 show vlan internal usage 486 show interfaces switchport 487 37 Voice VLAN 493 voice vlan id 493 voice vlan oui-table 493 voice vlan cos 495 voice vlan aging-timeout 496 voice vlan enable 496 voice...
... map protocols-group vlan 481 ip internal-usage-vlan 482 mac-to-vlan 483 show vlan mac-to-vlan 484 show vlan 484 show vlan protocols-groups 485 show vlan internal usage 486 show interfaces switchport 487 37 Voice VLAN 493 voice vlan id 493 voice vlan oui-table 493 voice vlan cos 495 voice vlan aging-timeout 496 voice vlan enable 496 voice...
Command Line Interface Guide
Page 24
dot1x send-async-request-id 523 show dot1x 524 show dot1x users 527 show dot1x statistics 528 ADVANCED FEATURES 530 dot1x auth-not-req 530 dot1x multiple-hosts 531 dot1x single-host-violation 532 dot1x guest-vlan 533 dot1x guest-vlan enable 534 dot1x mac-authentication 534 dot1x traps mac-authentication failure 535 dot1x radius-attributes vlan 536 show dot1x advanced 537 24 Contents
dot1x send-async-request-id 523 show dot1x 524 show dot1x users 527 show dot1x statistics 528 ADVANCED FEATURES 530 dot1x auth-not-req 530 dot1x multiple-hosts 531 dot1x single-host-violation 532 dot1x guest-vlan 533 dot1x guest-vlan enable 534 dot1x mac-authentication 534 dot1x traps mac-authentication failure 535 dot1x radius-attributes vlan 536 show dot1x advanced 537 24 Contents
Command Line Interface Guide
Page 28
... ethernet Global Configuration mode command is used to enter the Interface Configuration mode to enter the Line Configuration command mode. • VLAN Database - The Global Configuration mode prompt is used to enter the Port Channel Interface Configuration mode. 28 Using the CLI The following...mode. • Ethernet - Contains commands to a port-channel. Contains commands to configure port-channels, for example, assigning ports to create a VLAN as a single entity. Most of the device host name followed by (config) and #. To enter the Global Configuration mode, at the ...
... ethernet Global Configuration mode command is used to enter the Interface Configuration mode to enter the Line Configuration command mode. • VLAN Database - The Global Configuration mode prompt is used to enter the Port Channel Interface Configuration mode. 28 Using the CLI The following...mode. • Ethernet - Contains commands to a port-channel. Contains commands to configure port-channels, for example, assigning ports to create a VLAN as a single entity. Most of the device host name followed by (config) and #. To enter the Global Configuration mode, at the ...
Command Line Interface Guide
Page 34
... Commands SSH Commands Syslog Commands System Management Commands TACACS Commands TIC Commands Tunnel Commands User Interface Commands VLAN Commands Voice VLAN Commands 802.1x Commands 34 Command Groups Configures all port configuration options for entering CLI commands. Monitors... login banners on specific target ports. Diagnoses and displays the interface status. Configures SSH authentication. Configures VLANs and displays VLAN information. Ethernet Configuration GVRP Commands IGMP Snooping Commands IP Addressing Commands IPv6 Addressing Commands LACP Commands Line Commands...
... Commands SSH Commands Syslog Commands System Management Commands TACACS Commands TIC Commands Tunnel Commands User Interface Commands VLAN Commands Voice VLAN Commands 802.1x Commands 34 Command Groups Configures all port configuration options for entering CLI commands. Monitors... login banners on specific target ports. Diagnoses and displays the interface status. Configures SSH authentication. Configures VLANs and displays VLAN information. Ethernet Configuration GVRP Commands IGMP Snooping Commands IP Addressing Commands IPv6 Addressing Commands LACP Commands Line Commands...
Command Line Interface Guide
Page 36
... bridge table, and adds static ports to permit or deny. Sets the Address Table aging time. Access Mode Interface (VLAN) Configuration Global Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Interface Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Global Configuration Privileged EXEC Interface Configuration Interface Configuration Interface Configuration 36 Command Groups deny (MAC) service-acl show...
... bridge table, and adds static ports to permit or deny. Sets the Address Table aging time. Access Mode Interface (VLAN) Configuration Global Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Interface Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Global Configuration Privileged EXEC Interface Configuration Interface Configuration Interface Configuration 36 Command Groups deny (MAC) service-acl show...
Command Line Interface Guide
Page 39
...Privileged EXEC Privileged EXEC Privileged EXEC DHCP Snooping Commands Command Group ip dhcp snooping Description Globally enables DHCP snooping ip dhcp snooping vlan Enables DHCP snooping on a switch. Configures the update frequency of the DHCP snooping binding file. Displays the DHCP snooping ...the currently running -config show startup-config show ip dhcp snooping binding Configures a port as trusted for all interfaces on a VLAN. Configures a switch to accept DHCP packets with option-82 information from an untrusted port. Configures the update frequency of the DHCP...
...Privileged EXEC Privileged EXEC Privileged EXEC DHCP Snooping Commands Command Group ip dhcp snooping Description Globally enables DHCP snooping ip dhcp snooping vlan Enables DHCP snooping on a switch. Configures the update frequency of the DHCP snooping binding file. Displays the DHCP snooping ...the currently running -config show startup-config show ip dhcp snooping binding Configures a port as trusted for all interfaces on a VLAN. Configures a switch to accept DHCP packets with option-82 information from an untrusted port. Configures the update frequency of the DHCP...
Command Line Interface Guide
Page 41
...the port. Access Mode Global Configuration Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) User EXEC User EXEC User EXEC Command Groups 41 Clears all VLANs, and prevents dynamic VLAN registration on a specific VLAN Defines the source IP address that the IGMP...the mrouter-time-out. GVRP Commands Command Group gvrp enable (Global) gvrp enable (Interface) garp timer gvrp vlan-creation-forbid gvrp registration-forbid clear gvrp statistics show gvrp configuration show gvrp statistics show ip igmp snooping groups ...
...the port. Access Mode Global Configuration Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) User EXEC User EXEC User EXEC Command Groups 41 Clears all VLANs, and prevents dynamic VLAN registration on a specific VLAN Defines the source IP address that the IGMP...the mrouter-time-out. GVRP Commands Command Group gvrp enable (Global) gvrp enable (Interface) garp timer gvrp vlan-creation-forbid gvrp registration-forbid clear gvrp statistics show gvrp configuration show gvrp statistics show ip igmp snooping groups ...
Command Line Interface Guide
Page 52
... is disabled on all the Spanning Tree instances in an MST region before the BDPU is discarded and the port information is aged out. Maps VLANs to the MST instance. Defines the configuration name.
... is disabled on all the Spanning Tree instances in an MST region before the BDPU is discarded and the port information is aged out. Maps VLANs to the MST instance. Defines the configuration name.
Command Line Interface Guide
Page 57
... EXEC All User EXEC Privileged EXEC User EXEC VLAN Commands Command Group vlan database vlan interface vlan interface range vlan name switchport access vlan switchport trunk allowed vlan Description Enters the VLAN database configuration mode. Configures the VLAN ID when the interface is in the current ... a name to the next highest mode in general mode. Ends the current configuration session and returns to configure multiple VLANs. Creates a VLAN. Displays a brief description of a show privilege Description Enters the privileged EXEC mode. Displays the current privilege level. ...
... EXEC All User EXEC Privileged EXEC User EXEC VLAN Commands Command Group vlan database vlan interface vlan interface range vlan name switchport access vlan switchport trunk allowed vlan Description Enters the VLAN database configuration mode. Configures the VLAN ID when the interface is in the current ... a name to the next highest mode in general mode. Ends the current configuration session and returns to configure multiple VLANs. Creates a VLAN. Displays a brief description of a show privilege Description Enters the privileged EXEC mode. Displays the current privilege level. ...
Command Line Interface Guide
Page 58
... Displays the MAC-to an uplink port. Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration VLAN Configuration Interface Configuration Interface Configuration VLAN configuration Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC 58 Command Groups switchport trunk native...
... Displays the MAC-to an uplink port. Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration VLAN Configuration Interface Configuration Interface Configuration VLAN configuration Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC 58 Command Groups switchport trunk native...
Command Line Interface Guide
Page 59
... browser. Sets the interval the system waits for use by a web browser to be configured from a secured browser. Configures the active certificate for the voice VLAN. Access Mode Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Generates and displays certificate requests for a port. Global Configuration...
... browser. Sets the interval the system waits for use by a web browser to be configured from a secured browser. Configures the active certificate for the voice VLAN. Access Mode Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Generates and displays certificate requests for a port. Global Configuration...
Command Line Interface Guide
Page 61
Enables authentication based on an 802.1xauthorized port that has the dot1x port-control Interface Configuration mode command set to that VLAN. Displays 802.1x statistics for the specified interface. Configures the action to be taken, when a station whose MAC address is not the ...supplicant MAC address, attempts to access the guest VLAN. Enables unauthorized users on the interface to access the interface. Enables sending traps when a MAC address was failed in authentication of the 802.1X...
Enables authentication based on an 802.1xauthorized port that has the dot1x port-control Interface Configuration mode command set to that VLAN. Displays 802.1x statistics for the specified interface. Configures the action to be taken, when a station whose MAC address is not the ...supplicant MAC address, attempts to access the guest VLAN. Enables unauthorized users on the interface to access the interface. Enables sending traps when a MAC address was failed in authentication of the 802.1X...
Command Line Interface Guide
Page 64
...Configures the update frequency of a specific port-channel. Enables logging file system events. Enters the interface configuration mode to configure multiple VLANs. Creates Layer 2 ACLs. Specifies or modifies the device host name. Enters the interface configuration mode to complete unqualified host names... gvrp enable (Global) hostname interface ethernet interface port-channel interface range ethernet interface range port-channel interface range vlan interface vlan ip access-list ip access-list ip address ip default-gateway ip dhcp snooping ip dhcp snooping database ip dhcp...
...Configures the update frequency of a specific port-channel. Enables logging file system events. Enters the interface configuration mode to configure multiple VLANs. Creates Layer 2 ACLs. Specifies or modifies the device host name. Enters the interface configuration mode to complete unqualified host names... gvrp enable (Global) hostname interface ethernet interface port-channel interface range ethernet interface range port-channel interface range vlan interface vlan ip access-list ip access-list ip address ip default-gateway ip dhcp snooping ip dhcp snooping database ip dhcp...
Command Line Interface Guide
Page 68
... method spanning-tree priority stack master tacacs-server host tacacs-server key tacacs-server source-ip tacacs-server timeout username vlan database wrr-queue cos-map Defines BPDU handling when Spanning Tree is aged out. Enables configuring an MST region by.... Configures the device priority for the communication with a Port-channel. 68 Command Modes Establishes a username-based authentication system. Enters the VLAN database configuration mode. Configures the Spanning Tree priority. Configures the Spanning Tree bridge maximum age. Specifies the source IP address that will ...
... method spanning-tree priority stack master tacacs-server host tacacs-server key tacacs-server source-ip tacacs-server timeout username vlan database wrr-queue cos-map Defines BPDU handling when Spanning Tree is aged out. Enables configuring an MST region by.... Configures the device priority for the communication with a Port-channel. 68 Command Modes Establishes a username-based authentication system. Enters the VLAN database configuration mode. Configures the Spanning Tree priority. Configures the Spanning Tree bridge maximum age. Specifies the source IP address that will ...
Command Line Interface Guide
Page 69
...the client, before resending the request. Sets the time for the retransmission of the port Enables user-based VLAN assignment. Command Modes 69 description dot1x guest-vlan dot1x guest-vlan enable dot1x mac-authentication dot1x max-req dot1x multiple-hosts dot1x port-control dot1x radius-attributes...dot1x timeout tx-period duplex flowcontrol garp timer gvrp enable (Interface) gvrp registration-forbid gvrp vlan-creation-forbid ip address ip address dhcp Adds a description to access the guest VLAN. Enables unauthorized users on an 802.1x-authorized port, that the device remains in ...
...the client, before resending the request. Sets the time for the retransmission of the port Enables user-based VLAN assignment. Command Modes 69 description dot1x guest-vlan dot1x guest-vlan enable dot1x mac-authentication dot1x max-req dot1x multiple-hosts dot1x port-control dot1x radius-attributes...dot1x timeout tx-period duplex flowcontrol garp timer gvrp enable (Interface) gvrp registration-forbid gvrp vlan-creation-forbid ip address ip address dhcp Adds a description to access the guest VLAN. Enables unauthorized users on an 802.1x-authorized port, that the device remains in ...
Command Line Interface Guide
Page 70
... for physical ports. Assigns an administrative LACP timeout. Configures a name to a routed port. Adds MAC-layer secure addresses to a VLAN. Configures the administrative mode of the incoming traffic. Enables each port trust state while the system is in basic mode. Configures the priority...priority qos cos qos cos qos trust (Interface) qos trust (Interface) rate-limit (Ethernet) rmon collection history Reserves a VLAN as the internal usage VLAN of the powered device type attached to the interface. Enables Broadcast storm control. Enables automatic crossover on an interface. Adds...
... for physical ports. Assigns an administrative LACP timeout. Configures a name to a routed port. Adds MAC-layer secure addresses to a VLAN. Configures the administrative mode of the incoming traffic. Enables each port trust state while the system is in basic mode. Configures the priority...priority qos cos qos cos qos trust (Interface) qos trust (Interface) rate-limit (Ethernet) rmon collection history Reserves a VLAN as the internal usage VLAN of the powered device type attached to the interface. Enables Broadcast storm control. Enables automatic crossover on an interface. Adds...
Command Line Interface Guide
Page 71
... sends all the Spanning Tree instances in customer mode. show ports monitor Transmits tagged ingress mirrored packets. switchport customer vlan Set the port's VLAN when the interface is in the interface. switchport general acceptable- rmon collection history Enables a Remote Monitoring (RMON) ...multiple Spanning Tree (MST) calculations. speed Configures the speed of a port. frame-type tagged-only switchport general allowed vlan Adds or removes VLANs from a general port. spanning-tree mst port-priority Configures the priority of a given Ethernet interface when not using...
... sends all the Spanning Tree instances in customer mode. show ports monitor Transmits tagged ingress mirrored packets. switchport customer vlan Set the port's VLAN when the interface is in the interface. switchport general acceptable- rmon collection history Enables a Remote Monitoring (RMON) ...multiple Spanning Tree (MST) calculations. speed Configures the speed of a port. frame-type tagged-only switchport general allowed vlan Adds or removes VLANs from a general port. spanning-tree mst port-priority Configures the priority of a given Ethernet interface when not using...
Command Line Interface Guide
Page 72
... a deny rule. Specifies the login authentication method list for a particular line. Configures the baud rate of the specified VLAN, and the VLAN ID is detected. Exits the MST region configuration mode and applies all configuration changes. 72 Command Modes Defines a permit rule...mst) exit (mst) Description Exits the MST region configuration mode without applying configuration changes. switchport trunk allowed vlan switchport trunk native vlan traffic-shape Adds or removes VLANs from a remote telnet or console. Specifies a password on an egress port. Sets the shaper on a ...
... a deny rule. Specifies the login authentication method list for a particular line. Configures the baud rate of the specified VLAN, and the VLAN ID is detected. Exits the MST region configuration mode and applies all configuration changes. 72 Command Modes Defines a permit rule...mst) exit (mst) Description Exits the MST region configuration mode without applying configuration changes. switchport trunk allowed vlan switchport trunk native vlan traffic-shape Adds or removes VLANs from a remote telnet or console. Specifies a password on an egress port. Sets the shaper on a ...