Command Line Interface Guide
Page 27
... • Ctrl+Z The following steps: 1 At the Privileged EXEC mode prompt enter the command configure and press . console(config)# 2 Use one of the device "host name" followed by the word "(config)" and "#". The Privileged EXEC mode command configure is used to enter the Global Configuration mode. The Global Configuration mode prompt... consists of the following commands to return from the Global Configuration mode to the Privileged EXEC mode: console# console#configure console(config)#exit console# Using the CLI 27 For example, the Exit command is displayed.
... • Ctrl+Z The following steps: 1 At the Privileged EXEC mode prompt enter the command configure and press . console(config)# 2 Use one of the device "host name" followed by the word "(config)" and "#". The Privileged EXEC mode command configure is used to enter the Global Configuration mode. The Global Configuration mode prompt... consists of the following commands to return from the Global Configuration mode to the Privileged EXEC mode: console# console#configure console(config)#exit console# Using the CLI 27 For example, the Exit command is displayed.
Command Line Interface Guide
Page 28
... crypto key pubkey-chain ssh is used to manage port configuration. Contains commands related to define management access-lists. The Global Configuration mode command qos config-services is used to access the device is very similar to using CLI commands. If access is via a Telnet connection. Most of these commands are...
... crypto key pubkey-chain ssh is used to manage port configuration. Contains commands related to define management access-lists. The Global Configuration mode command qos config-services is used to access the device is very similar to using CLI commands. If access is via a Telnet connection. Most of these commands are...
Command Line Interface Guide
Page 29
... CLI, perform the following features are displayed. • Partial keyword lookup - To see what commands are displayed. The matched parameters for the administrator, enter: Console(config)# username admin password smith When working with the quit or exit command. To assist in the command "show interfaces status ethernet g5," show, interfaces and...
... CLI, perform the following features are displayed. • Partial keyword lookup - To see what commands are displayed. The matched parameters for the administrator, enter: Console(config)# username admin password smith When working with the quit or exit command. To assist in the command "show interfaces status ethernet g5," show, interfaces and...
Command Line Interface Guide
Page 31
..., then the appropriate error message is entered. to the cursor. The following example indicates that the command interface ethernet requires a missing parameter. (config)#interface ethernet %missing mandatory parameter (config)#interface ethernet Keyboard Shortcuts The CLI has a range of keyboard shortcuts to the end of the command line. Ctrl+E Moves the cursor to...
..., then the appropriate error message is entered. to the cursor. The following example indicates that the command interface ethernet requires a missing parameter. (config)#interface ethernet %missing mandatory parameter (config)#interface ethernet Keyboard Shortcuts The CLI has a range of keyboard shortcuts to the end of the command line. Ctrl+E Moves the cursor to...
Command Line Interface Guide
Page 38
...User EXEC Privileged EXEC 38 Command Groups Privileged User EXEC Configuration and Image Files Commands Command Group dir more rename delete startup-config copy delete boot system show running configuration file. Deletes a file from a source to request and Global accept NTP traffic from...the active system image file that the device loads at startup. Configuration Specifies SNTP UDP port of the currently running -config show startup-config show bootvar Description Displays list of the SNTP. Displays the contents of the SNTP server Global Configuration Displays the time...
...User EXEC Privileged EXEC 38 Command Groups Privileged User EXEC Configuration and Image Files Commands Command Group dir more rename delete startup-config copy delete boot system show running configuration file. Deletes a file from a source to request and Global accept NTP traffic from...the active system image file that the device loads at startup. Configuration Specifies SNTP UDP port of the currently running -config show startup-config show bootvar Description Displays list of the SNTP. Displays the contents of the SNTP server Global Configuration Displays the time...
Command Line Interface Guide
Page 62
.... uration (Ethernet) dot1x macauthentication Enables authentication based on the interface access to be taken when a station of which Interface Config- vlan Interface Configuration show dot1x advanced Displays 802.1X advanced features for the switch or for the Privileged EXEC specified interface... Configuration dot1x traps macauthentication failure Enables sending traps when a MAC address was failed in Global authentication of this command Interface Config- Use the no form of the 802.1X MAC authentication access Configuration control. uration (VLAN) dot1x guest-vlan enable ...
.... uration (Ethernet) dot1x macauthentication Enables authentication based on the interface access to be taken when a station of which Interface Config- vlan Interface Configuration show dot1x advanced Displays 802.1X advanced features for the switch or for the Privileged EXEC specified interface... Configuration dot1x traps macauthentication failure Enables sending traps when a MAC address was failed in Global authentication of this command Interface Config- Use the no form of the 802.1X MAC authentication access Configuration control. uration (VLAN) dot1x guest-vlan enable ...
Command Line Interface Guide
Page 72
...ssh Displays the SSH server configuration. show ipv6 interface Displays the usability status of the IPv6 routing table. show startup-config Displays the startup configuration file contents. show ports storm-control Displays the storm control configuration. test copper-port tdr ... port-channel. show tacacs Displays configuration and statistics for IPv6. show spanning-tree Displays spanning tree configuration. show running-config Displays the contents of logging and the syslog messages stored in the logging file. show syslog-servers Displays the syslog servers...
...ssh Displays the SSH server configuration. show ipv6 interface Displays the usability status of the IPv6 routing table. show startup-config Displays the startup configuration file contents. show ports storm-control Displays the storm control configuration. test copper-port tdr ... port-channel. show tacacs Displays configuration and statistics for IPv6. show spanning-tree Displays spanning tree configuration. show running-config Displays the contents of logging and the syslog messages stored in the logging file. show syslog-servers Displays the syslog servers...
Command Line Interface Guide
Page 75
...list Global Configuration mode command defines an IPv4 Access List and places the device in IPv4 Access List Configuration mode. Console(config)# ip access-list dell-access-1 Console(config-ip-al)# mac access-list The mac access-list Global Configuration mode command enables the MAC-Access List Configuration mode ...command to place the device in IPv4 Access List Configuration mode. Example The following example shows how to define an IPv4 Access List called dell-access-1 and to delete an ACL. Use the no form of this command to remove the Access List. User Guidelines • IPv4...
...list Global Configuration mode command defines an IPv4 Access List and places the device in IPv4 Access List Configuration mode. Console(config)# ip access-list dell-access-1 Console(config-ip-al)# mac access-list The mac access-list Global Configuration mode command enables the MAC-Access List Configuration mode ...command to place the device in IPv4 Access List Configuration mode. Example The following example shows how to define an IPv4 Access List called dell-access-1 and to delete an ACL. Use the no form of this command to remove the Access List. User Guidelines • IPv4...
Command Line Interface Guide
Page 76
...; access-list-name - Command Mode Global Configuration mode. An IPv4 ACL, IPv6 ACL and MAC ACL cannot share the same name. Console(config)# mac access-list macl-acl1 Console(config-mac-al)# permit (ip) The permit IP-Access List Configuration mode command permits traffic if the conditions defined in the permit statement...
...; access-list-name - Command Mode Global Configuration mode. An IPv4 ACL, IPv6 ACL and MAC ACL cannot share the same name. Console(config)# mac access-list macl-acl1 Console(config-mac-al)# permit (ip) The permit IP-Access List Configuration mode command permits traffic if the conditions defined in the permit statement...
Command Line Interface Guide
Page 78
... defined. Example The following example shows how to an ACL, all packets are denied. Command Mode IP-Access List Configuration mode. Console(config)# ip access-list ip-acl1 Console(config-ip-al)# permit rsvp 192.1.1.1 0.0.0.0 any condition exists at the end of the list and those packets that do not match the...
... defined. Example The following example shows how to an ACL, all packets are denied. Command Mode IP-Access List Configuration mode. Console(config)# ip access-list ip-acl1 Console(config-ip-al)# permit rsvp 192.1.1.1 0.0.0.0 any condition exists at the end of the list and those packets that do not match the...
Command Line Interface Guide
Page 80
... and those packets that do not match the defined conditions are permitted. Specifies wildcard bits to be ignored. • vlan-id - Console(config)# ip access-list ip-acl1 Console(config-ip-al)# deny rsvp 192.1.1.1 0.0.0.255 any | {destination destination-wildcard}} [vlan vlan-id] [cos cos cos-wildcard] [ethtype eth-type] [inner-vlan...
... and those packets that do not match the defined conditions are permitted. Specifies wildcard bits to be ignored. • vlan-id - Console(config)# ip access-list ip-acl1 Console(config-ip-al)# deny rsvp 192.1.1.1 0.0.0.255 any | {destination destination-wildcard}} [vlan vlan-id] [cos cos cos-wildcard] [ethtype eth-type] [inner-vlan...
Command Line Interface Guide
Page 81
.... Specify a MAC address and mask. Specifies the MAC address of the host to which the packet was sent. • source-wildcard - Console(config)# mac access-list macl-acl1 Console(config-mac-al)# permit 6:6:6:6:6:6 0:0:0:0:0:0 any vlan 6 deny (MAC) The deny MAC-Access List Configuration mode command denies traffic if the conditions defined in...
.... Specify a MAC address and mask. Specifies the MAC address of the host to which the packet was sent. • source-wildcard - Console(config)# mac access-list macl-acl1 Console(config-mac-al)# permit 6:6:6:6:6:6 0:0:0:0:0:0 any vlan 6 deny (MAC) The deny MAC-Access List Configuration mode command denies traffic if the conditions defined in...
Command Line Interface Guide
Page 82
... service-acl The service-acl Interface Configuration (Ethernet, port-channel) mode command applies an ACL to the CoS. • eth-type - Console(config)# mac access-list macl1 Console (config-mac-acl)# deny 6:6:6:6:6:6:0:0:0:0:0:0 any condition exists at the end of this command to an ACL, all packets are denied. Specifies wildcard bits to...
... service-acl The service-acl Interface Configuration (Ethernet, port-channel) mode command applies an ACL to the CoS. • eth-type - Console(config)# mac access-list macl1 Console (config-mac-acl)# deny 6:6:6:6:6:6:0:0:0:0:0:0 any condition exists at the end of this command to an ACL, all packets are denied. Specifies wildcard bits to...
Command Line Interface Guide
Page 83
... VLAN 2. User Guidelines There are no user guidelines for this command. Example The following example displays access lists defined on the device. Console(config)# interface eth g1 Console(config-if)# service-acl input macl1 show access-lists The show access-lists IP access list ACL1 permit 234 172.30.40.1 0.0.0.0 any permit...
... VLAN 2. User Guidelines There are no user guidelines for this command. Example The following example displays access lists defined on the device. Console(config)# interface eth g1 Console(config-if)# service-acl input macl1 show access-lists The show access-lists IP access list ACL1 permit 234 172.30.40.1 0.0.0.0 any permit...
Command Line Interface Guide
Page 86
...-name - Specify at least one from the following example configures authentication login. Uses username "$enabx$." Uses the line password for accessing higher privilege levels. Console (config)# aaa authentication login default radius local enable none aaa authentication enable The aaa authentication enable Global Configuration mode command defines authentication method lists for authentication...
...-name - Specify at least one from the following example configures authentication login. Uses username "$enabx$." Uses the line password for accessing higher privilege levels. Console (config)# aaa authentication login default radius local enable none aaa authentication enable The aaa authentication enable Global Configuration mode command defines authentication method lists for authentication...
Command Line Interface Guide
Page 87
... that the authentication algorithm tries, in the command line. • All aaa authentication enable default requests sent by the device to name this list. Console (config)# aaa authentication enable default enable login authentication The login authentication Line Configuration mode command specifies the login authentication method list for a remote telnet, SSH or...
... that the authentication algorithm tries, in the command line. • All aaa authentication enable default requests sent by the device to name this list. Console (config)# aaa authentication enable default enable login authentication The login authentication Line Configuration mode command specifies the login authentication method list for a remote telnet, SSH or...
Command Line Interface Guide
Page 88
... the enable authentication command. User Guidelines • There are no user guidelines for a console. Console (config)# line console Console (config-line)# enable authentication default 88 AAA Commands Command Mode Line Configuration mode. Console (config)# line console Console (config-line)# login authentication default enable authentication The enable authentication Line Configuration mode command specifies the authentication...
... the enable authentication command. User Guidelines • There are no user guidelines for a console. Console (config)# line console Console (config-line)# enable authentication default 88 AAA Commands Command Mode Line Configuration mode. Console (config)# line console Console (config-line)# login authentication default enable authentication The enable authentication Line Configuration mode command specifies the authentication...
Command Line Interface Guide
Page 89
... mode command specifies authentication methods for authentication. none Uses no ip http authentication • method1 [method2...] - Command Mode Global Configuration mode. Console (config)# ip http authentication radius local Console (config)# ip http authentication tacacs local ip https authentication The ip https authentication Global Configuration mode command specifies authentication methods for authentication. tacacs...
... mode command specifies authentication methods for authentication. none Uses no ip http authentication • method1 [method2...] - Command Mode Global Configuration mode. Console (config)# ip http authentication radius local Console (config)# ip http authentication tacacs local ip https authentication The ip https authentication Global Configuration mode command specifies authentication methods for authentication. tacacs...
Command Line Interface Guide
Page 90
... the command line. Syntax • show authentication methods The authentication methods Privilege EXEC mode command displays information about the authentication methods. Console (config)# ip https authentication radius local Console (config)# ip https authentication tacacs local show authentication methods Default Configuration This command has no default configuration. 90 AAA Commands Uses the list...
... the command line. Syntax • show authentication methods The authentication methods Privilege EXEC mode command displays information about the authentication methods. Console (config)# ip https authentication radius local Console (config)# ip https authentication tacacs local show authentication methods Default Configuration This command has no default configuration. 90 AAA Commands Uses the list...
Command Line Interface Guide
Page 92
... from another device configuration. password The password Line Configuration mode command specifies a password on a line. Example The following example specifies a password 'secret' on a line. Console (config-line)# password secret enable password The enable password Global Configuration mode command sets a local password to control access to 159 characters in length. • level...
... from another device configuration. password The password Line Configuration mode command specifies a password on a line. Example The following example specifies a password 'secret' on a line. Console (config-line)# password secret enable password The enable password Global Configuration mode command sets a local password to control access to 159 characters in length. • level...