Command Line Interface Guide
Page 36
... a port. Disables new address learning/forwarding on the device. MAC Access-List Configuration Interface Configuration Privileged EXEC Privileged EXEC Address Table Commands Command Group bridge address bridge multicast filtering ... the bridge table. Access Mode Interface (VLAN) Configuration Global Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Interface Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Global Configuration Privileged EXEC Interface Configuration Interface Configuration Interface Configuration 36 Command Groups
... a port. Disables new address learning/forwarding on the device. MAC Access-List Configuration Interface Configuration Privileged EXEC Privileged EXEC Address Table Commands Command Group bridge address bridge multicast filtering ... the bridge table. Access Mode Interface (VLAN) Configuration Global Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Interface Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Global Configuration Privileged EXEC Interface Configuration Interface Configuration Interface Configuration 36 Command Groups
Command Line Interface Guide
Page 57
.... Displays a brief description of a show privilege Description Enters the privileged EXEC mode. Displays the current privilege level. Access Mode Global Configuration VLAN Database Global Configuration Global Configuration Interface (VLAN) Configuration Interface Configuration Interface Configuration Command Groups 57 Access Mode User EXEC Privileged EXEC Priv/User EXEC Privileged EXEC All Priv/User EXEC After Privileged EXEC All User EXEC...
.... Displays a brief description of a show privilege Description Enters the privileged EXEC mode. Displays the current privilege level. Access Mode Global Configuration VLAN Database Global Configuration Global Configuration Interface (VLAN) Configuration Interface Configuration Interface Configuration Command Groups 57 Access Mode User EXEC Privileged EXEC Priv/User EXEC Privileged EXEC All Priv/User EXEC After Privileged EXEC All User EXEC...
Command Line Interface Guide
Page 58
... general map protocols-group vlan ip internal-usage-vlan mac-to an uplink port. Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration VLAN Configuration Interface Configuration Interface Configuration VLAN configuration Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC 58 Command Groups show vlan mac-to-vlan show vlan show vlan protocolsgroups show vlan internal usage show interfaces switchport...
... general map protocols-group vlan ip internal-usage-vlan mac-to an uplink port. Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration VLAN Configuration Interface Configuration Interface Configuration VLAN configuration Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC Privileged EXEC 58 Command Groups show vlan mac-to-vlan show vlan show vlan protocolsgroups show vlan internal usage show interfaces switchport...
Command Line Interface Guide
Page 59
... the TCP port for use by Certification Authority for user input before automatically logging off . Enables automatic voice VLAN configuration for the voice VLAN. Access Mode Global Configuration Global Configuration Global Configuration Global Configuration Interface configuration (Ethernet, port-channel) Interface configuration (Ethernet, port-channel EXEC mode Web Server Commands Command Group ip http server ip http port ip http...
... the TCP port for use by Certification Authority for user input before automatically logging off . Enables automatic voice VLAN configuration for the voice VLAN. Access Mode Global Configuration Global Configuration Global Configuration Global Configuration Interface configuration (Ethernet, port-channel) Interface configuration (Ethernet, port-channel EXEC mode Web Server Commands Command Group ip http server ip http port ip http...
Command Line Interface Guide
Page 61
... MAC address, attempts to auto. Defines a guest VLAN. Enables authentication based on the interface to access the guest VLAN. Allows multiple hosts (clients) on an 802.1xauthorized port that VLAN. Enables user-based VLAN assignment. Privileged EXEC Privileged EXEC Interface (VLAN) Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Global Configuration Interface Configuration Privileged EXEC Command Groups 61 Enables unauthorized...
... MAC address, attempts to auto. Defines a guest VLAN. Enables authentication based on the interface to access the guest VLAN. Allows multiple hosts (clients) on an 802.1xauthorized port that VLAN. Enables user-based VLAN assignment. Privileged EXEC Privileged EXEC Interface (VLAN) Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Global Configuration Interface Configuration Privileged EXEC Command Groups 61 Enables unauthorized...
Command Line Interface Guide
Page 71
... general ingressfiltering disable Disables port ingress filtering. clear spanning-tree detected- switchport access vlan Configures the VLAN ID when the interface is in customer mode. frame-type tagged-only switchport general allowed vlan Adds or removes VLANs from a general port. switchport access vlan Defines the primary PVLAN. switchport general acceptable- Command Modes 71 spanning-tree mst...
... general ingressfiltering disable Disables port ingress filtering. clear spanning-tree detected- switchport access vlan Configures the VLAN ID when the interface is in customer mode. frame-type tagged-only switchport general allowed vlan Adds or removes VLANs from a general port. switchport access vlan Defines the primary PVLAN. switchport general acceptable- Command Modes 71 spanning-tree mst...
Command Line Interface Guide
Page 78
...system show system id show users show command without prompting. Lists the open Telnet sessions. Displays information about stack status. Configures the command history buffer size for the current terminal session. bridge multicast forward-all Multicast frames on a port. Sends ... about the active users. Displays the service id information. Enables the command history function for the current terminal session. VC (VLAN Configuration) Mode Command Group Description bridge address Adds a static MAC-layer station source address to select one of a show version telnet...
...system show system id show users show command without prompting. Lists the open Telnet sessions. Displays information about stack status. Configures the command history buffer size for the current terminal session. bridge multicast forward-all Multicast frames on a port. Sends ... about the active users. Displays the service id information. Enables the command history function for the current terminal session. VC (VLAN Configuration) Mode Command Group Description bridge address Adds a static MAC-layer station source address to select one of a show version telnet...
Command Line Interface Guide
Page 98
...-acl input acl-name • no default configuration. Console(config)# mac access-list macl-1 Console (config-mac-acl)# deny 66:66:66:66:66:66 Console(config-mac-acl)# exit Console(config)# service-acl The service-acl Interface (VLAN) Configuration mode command applies an ACL to create a MAC... ACL with rules. Default Configuration This command has no service-acl input • acl-name - console# config console(config)# mac ...
...-acl input acl-name • no default configuration. Console(config)# mac access-list macl-1 Console (config-mac-acl)# deny 66:66:66:66:66:66 Console(config-mac-acl)# exit Console(config)# service-acl The service-acl Interface (VLAN) Configuration mode command applies an ACL to create a MAC... ACL with rules. Default Configuration This command has no service-acl input • acl-name - console# config console(config)# mac ...
Command Line Interface Guide
Page 469
Specifies a list of VLAN IDs to delete a VLAN. Command Mode Global Configuration mode. Syntax • vlan vlan-range • no default configuration. VLAN Commands vlan database The vlan database Global Configuration mode command enters the VLAN Configuration mode. Syntax • vlan database Default Configuration This command has no vlan vlan-range • vlan-range - Example The following example enters the VLAN database mode. Separate non-consecutive VLAN IDs with a comma...
Specifies a list of VLAN IDs to delete a VLAN. Command Mode Global Configuration mode. Syntax • vlan vlan-range • no default configuration. VLAN Commands vlan database The vlan database Global Configuration mode command enters the VLAN Configuration mode. Syntax • vlan database Default Configuration This command has no vlan vlan-range • vlan-range - Example The following example enters the VLAN database mode. Separate non-consecutive VLAN IDs with a comma...
Command Line Interface Guide
Page 470
... Interface Configuration mode for VLAN 1. Syntax • interface vlan vlan-id • vlan-id - Command Mode VLAN Configuration mode. User Guidelines There are no user guidelines for this command. Example The following example VLAN number 1972 is created. Specifies an existing VLAN ID. Console(config)# vlan database Console(config-vlan)# vlan 1972 interface vlan The interface vlan Global Configuration mode command enters the Interface Configuration (VLAN) mode...
... Interface Configuration mode for VLAN 1. Syntax • interface vlan vlan-id • vlan-id - Command Mode VLAN Configuration mode. User Guidelines There are no user guidelines for this command. Example The following example VLAN number 1972 is created. Specifies an existing VLAN ID. Console(config)# vlan database Console(config-vlan)# vlan 1972 interface vlan The interface vlan Global Configuration mode command enters the Interface Configuration (VLAN) mode...
Command Line Interface Guide
Page 480
...Multicast and Broadcast traffic to delete a protocol from a group. FFFF). • encapsulation - Command Mode VLAN Configuration mode. Console(config)# interface ethernet 1/e5 Console(config-if)# switchport protected ethernet 2/g1 map protocol protocols-group The map protocol ...protocols-group VLAN Configuration mode command maps a protocol to the uplink. Command Mode Interface Configuration (Ethernet, port-channel) mode. User Guidelines There are used for this command to override...
...Multicast and Broadcast traffic to delete a protocol from a group. FFFF). • encapsulation - Command Mode VLAN Configuration mode. Console(config)# interface ethernet 1/e5 Console(config-if)# switchport protected ethernet 2/g1 map protocol protocols-group The map protocol ...protocols-group VLAN Configuration mode command maps a protocol to the uplink. Command Mode Interface Configuration (Ethernet, port-channel) mode. User Guidelines There are used for this command to override...
Command Line Interface Guide
Page 483
...-vlan The mac-to-vlan VLAN Configuration mode command adds MAC addresses to the MAC-to -vlan mac-address • mac-address - Syntax • mac-to-vlan mac-address vlan-id • no form of this command to the list. • vlan-id - Use the no mac-to -VLAN database. Command Mode VLAN Configuration mode.... If the same MAC is mapped to more than one VLAN. Specifies the MAC address to be...
...-vlan The mac-to-vlan VLAN Configuration mode command adds MAC addresses to the MAC-to -vlan mac-address • mac-address - Syntax • mac-to-vlan mac-address vlan-id • no form of this command to the list. • vlan-id - Use the no mac-to -VLAN database. Command Mode VLAN Configuration mode.... If the same MAC is mapped to more than one VLAN. Specifies the MAC address to be...
Command Line Interface Guide
Page 496
... this command to default. Console (config)# voice vlan aging-timeout 2000 voice vlan enable The voice vlan enable Interface Configuration mode command enables automatic voice VLAN configuration for a port. Use the no form of this command to return to disable automatic voice VLAN configuration. Syntax • voice vlan enable • no voice vlan aging-timeout • minutes - Command Mode Global...
... this command to default. Console (config)# voice vlan aging-timeout 2000 voice vlan enable The voice vlan enable Interface Configuration mode command enables automatic voice VLAN configuration for a port. Use the no form of this command to return to disable automatic voice VLAN configuration. Syntax • voice vlan enable • no voice vlan aging-timeout • minutes - Command Mode Global...
Command Line Interface Guide
Page 497
... can be the voice VLAN ID or any other VLAN. console(config-if)# voice vlan secure Voice VLAN 497 Example The following example enables automatic voice VLAN configuration for a port console(config-if)# voice vlan enable voice vlan secure The voice vlan secure Interface Configuration mode command configures the secure mode for the voice VLAN. Example The following example configures the current port...
... can be the voice VLAN ID or any other VLAN. console(config-if)# voice vlan secure Voice VLAN 497 Example The following example enables automatic voice VLAN configuration for a port console(config-if)# voice vlan enable voice vlan secure The voice vlan secure Interface Configuration mode command configures the secure mode for the voice VLAN. Example The following example configures the current port...
Command Line Interface Guide
Page 499
Voice VLAN VLAN ID: 8 CoS: 6 Interface Enabled Secure 1/e1 Yes Yes 1/e2 Yes Yes 1/e3 Yes Yes 1/e4 Yes Yes 1/e5 No No 1/e6 No No 1/e7 No No 1/e8 No No 1/e9 No No Activated Yes No Yes Yes Voice VLAN 499 Console Switch# show voice vlan Aging timeout: 1440 minutes OUI table MAC Address-Prefix Description 00:E0:BB 3COM 00:03:6B Cisco 00:E0:75 Veritel 00:D0:1E Pingtel 00:01:E3 Simens 00:60:B9 NEC/Philips 00:0F:E2 Huawei-3COM . Example The following example displays the voice VLAN configuration.
Voice VLAN VLAN ID: 8 CoS: 6 Interface Enabled Secure 1/e1 Yes Yes 1/e2 Yes Yes 1/e3 Yes Yes 1/e4 Yes Yes 1/e5 No No 1/e6 No No 1/e7 No No 1/e8 No No 1/e9 No No Activated Yes No Yes Yes Voice VLAN 499 Console Switch# show voice vlan Aging timeout: 1440 minutes OUI table MAC Address-Prefix Description 00:E0:BB 3COM 00:03:6B Cisco 00:E0:75 Veritel 00:D0:1E Pingtel 00:01:E3 Simens 00:60:B9 NEC/Philips 00:0F:E2 Huawei-3COM . Example The following example displays the voice VLAN configuration.
Command Line Interface Guide
Page 530
... EAP Response frames (other than Resp/Id frames) that have been received by this command to disable access to the VLAN. The number of EAPOL frames that have been received by this Authenticator. Use the no dot1x auth-not-req 530 802... have been received by this Authenticator. ADVANCED FEATURES dot1x auth-not-req The dot1x auth-not-req VLAN Configuration mode command enables unauthorized devices access to the VLAN. The following table describes the significant fields shown in the display: Field EapolFramesRx EapolFramesTx EapolStartFramesRx EapolLogoffFramesRx EapolRespIdFramesRx...
... EAP Response frames (other than Resp/Id frames) that have been received by this command to disable access to the VLAN. The number of EAPOL frames that have been received by this Authenticator. Use the no dot1x auth-not-req 530 802... have been received by this Authenticator. ADVANCED FEATURES dot1x auth-not-req The dot1x auth-not-req VLAN Configuration mode command enables unauthorized devices access to the VLAN. The following table describes the significant fields shown in the display: Field EapolFramesRx EapolFramesTx EapolStartFramesRx EapolLogoffFramesRx EapolRespIdFramesRx...
Command Line Interface Guide
Page 536
... successful authentication the port remains member in the unauthenticated VLANs and in the multiple sessions mode (multiple hosts with authentication). • When RADIUS attributes are supported only in the Guest VLAN. Other static VLAN configuration is not applied on the port. • If the supplicant VLAN does not exist on the switch, the supplicant is...
... successful authentication the port remains member in the unauthenticated VLANs and in the multiple sessions mode (multiple hosts with authentication). • When RADIUS attributes are supported only in the Guest VLAN. Other static VLAN configuration is not applied on the port. • If the supplicant VLAN does not exist on the switch, the supplicant is...
User's Guide
Page 133
...type. 4 Click Apply Changes. IPv4 Interface Parameters CLI Commands CLI Command Description ip address ip-address {mask | Sets an IP address. configured for setting fields displayed in the IPv4 Interfaces Parameters page. The Interface Parameters Table page opens. Deleting IPv4 Addresses 1 Open the IPv4 Interface...address [ip-address] Removes an IP address show ip interface [ethernet Displays the usability status of interfaces interface-number | vlan vlan- id | port-channel number] Configuring System Information 133 The parameters are modified, and the device is updated.
...type. 4 Click Apply Changes. IPv4 Interface Parameters CLI Commands CLI Command Description ip address ip-address {mask | Sets an IP address. configured for setting fields displayed in the IPv4 Interfaces Parameters page. The Interface Parameters Table page opens. Deleting IPv4 Addresses 1 Open the IPv4 Interface...address [ip-address] Removes an IP address show ip interface [ethernet Displays the usability status of interfaces interface-number | vlan vlan- id | port-channel number] Configuring System Information 133 The parameters are modified, and the device is updated.
User's Guide
Page 265
...before EAP request are added to the port. - Enables unauthorized users to the VLAN configured on the RADIUS server. • Guest VLAN - Prevents unauthorized users from accessing the guest VLAN. • Periodic Reauthentication - The reauthentication period is defined in which the selected... port is authorized during the RADIUS server authentication. Disable - The field value is not applied to the supplicant VLAN as untagged. - Static VLAN configuration is seconds. The supplicant is reauthenticated. Enable - Disable - The field default is 60 seconds. The field ...
...before EAP request are added to the port. - Enables unauthorized users to the VLAN configured on the RADIUS server. • Guest VLAN - Prevents unauthorized users from accessing the guest VLAN. • Periodic Reauthentication - The reauthentication period is defined in which the selected... port is authorized during the RADIUS server authentication. Disable - The field value is not applied to the supplicant VLAN as untagged. - Static VLAN configuration is seconds. The supplicant is reauthenticated. Enable - Disable - The field default is 60 seconds. The field ...
User's Guide
Page 355
... vlan {add vlan-list | remove vlan-list} Adds or removes VLANs from a trunk port. Defining VLAN Membership Groups Using CLI Commands The following table summarizes the equivalent CLI commands for assigning ports to VLAN groups. Creates a VLAN. Adds a name to a VLAN. Table 7-27. Table 7-26. VLAN Membership Group CLI Commands CLI Command vlan database vlan {vlan-range} name string Description Enters the VLAN configuration...
... vlan {add vlan-list | remove vlan-list} Adds or removes VLANs from a trunk port. Defining VLAN Membership Groups Using CLI Commands The following table summarizes the equivalent CLI commands for assigning ports to VLAN groups. Creates a VLAN. Adds a name to a VLAN. Table 7-27. Table 7-26. VLAN Membership Group CLI Commands CLI Command vlan database vlan {vlan-range} name string Description Enters the VLAN configuration...