Command Line Interface Guide
Page 5
Web Server Commands 59 802.1x Commands 60 802.1x Advanced Commands 62 3 Command Modes 63 GC (Global Configuration) Mode 63 IC (Interface Configuration) Mode 67 LC (Line Configuration) Mode 70 MA (Management Access-level) Mode 70 PE (Privileged User EXEC) Mode 70 SP (SSH Public Key) Mode 72 UE (User EXEC) Mode 73 VC (VLAN Configuration) Mode 74 4 ACL Commands 75 ip access-list 75 mac access-list 75 permit (ip 76 deny (IP 78 permit (MAC 80 deny (MAC 81 service-acl 82 show access-lists 83 show interfaces access-lists 84 Contents 5
Web Server Commands 59 802.1x Commands 60 802.1x Advanced Commands 62 3 Command Modes 63 GC (Global Configuration) Mode 63 IC (Interface Configuration) Mode 67 LC (Line Configuration) Mode 70 MA (Management Access-level) Mode 70 PE (Privileged User EXEC) Mode 70 SP (SSH Public Key) Mode 72 UE (User EXEC) Mode 73 VC (VLAN Configuration) Mode 74 4 ACL Commands 75 ip access-list 75 mac access-list 75 permit (ip 76 deny (IP 78 permit (MAC 80 deny (MAC 81 service-acl 82 show access-lists 83 show interfaces access-lists 84 Contents 5
Command Line Interface Guide
Page 9
... storm-control broadcast rate 174 show ports storm-control 175 show system flowcontrol 176 11 DHCP Snooping 179 ip dhcp snooping 179 ip dhcp snooping vlan 179 ip dhcp snooping trust 180 ip dhcp snooping information option allowed-untrusted 180 Contents 9
... storm-control broadcast rate 174 show ports storm-control 175 show system flowcontrol 176 11 DHCP Snooping 179 ip dhcp snooping 179 ip dhcp snooping vlan 179 ip dhcp snooping trust 180 ip dhcp snooping information option allowed-untrusted 180 Contents 9
Command Line Interface Guide
Page 10
... dhcp snooping 184 show ip dhcp snooping binding 185 12 GVRP Commands 187 gvrp enable (global 187 gvrp enable (interface 187 garp timer 188 gvrp vlan-creation-forbid 189 gvrp registration-forbid 190 clear gvrp statistics 191 show gvrp configuration 191 show gvrp statistics 192 13 IGMP Snooping Commands 195 ip...
... dhcp snooping 184 show ip dhcp snooping binding 185 12 GVRP Commands 187 gvrp enable (global 187 gvrp enable (interface 187 garp timer 188 gvrp vlan-creation-forbid 189 gvrp registration-forbid 190 clear gvrp statistics 191 show gvrp configuration 191 show gvrp statistics 192 13 IGMP Snooping Commands 195 ip...
Command Line Interface Guide
Page 22
... general acceptable-frame-type tagged-only 458 switchport forbidden vlan 459 switchport mode 460 switchport customer vlan 460 map protocol protocols-group 461 switchport general map protocols-group vlan 462 switchport protected 463 ip internal-usage-vlan 463 show vlan 464 show vlan internal usage 465 show vlan protocols-groups 466 show interfaces switchport 467 22 Contents
... general acceptable-frame-type tagged-only 458 switchport forbidden vlan 459 switchport mode 460 switchport customer vlan 460 map protocol protocols-group 461 switchport general map protocols-group vlan 462 switchport protected 463 ip internal-usage-vlan 463 show vlan 464 show vlan internal usage 465 show vlan protocols-groups 466 show interfaces switchport 467 22 Contents
Command Line Interface Guide
Page 24
... users 502 show dot1x statistics 503 ADVANCED FEATURES 505 dot1x auth-not-req 505 dot1x multiple-hosts 506 dot1x single-host-violation 506 dot1x guest-vlan 507 dot1x guest-vlan enable 508 dot1x mac-authentication 509 dot1x traps mac-authentication failure 509 dot1x radius-attributes...
... users 502 show dot1x statistics 503 ADVANCED FEATURES 505 dot1x auth-not-req 505 dot1x multiple-hosts 506 dot1x single-host-violation 506 dot1x guest-vlan 507 dot1x guest-vlan enable 508 dot1x mac-authentication 509 dot1x traps mac-authentication failure 509 dot1x radius-attributes...
Command Line Interface Guide
Page 28
...be managed over a direct connection to enter the SSH Public Key-chain Configuration mode. • Interface - Contains commands to a VLAN or port-channel. Contains commands to configure port-channels, for use on a UNIX system. Contains commands to configure the management ...Port Channel Interface Configuration mode. • SSH Public Key-chain - NOTE: The following are for example, assigning ports to create a VLAN as a whole. Interface Configuration Mode and Specific Configuration Modes Interface Configuration mode commands are to enter the Interface Configuration mode. •...
...be managed over a direct connection to enter the SSH Public Key-chain Configuration mode. • Interface - Contains commands to a VLAN or port-channel. Contains commands to configure port-channels, for use on a UNIX system. Contains commands to configure the management ...Port Channel Interface Configuration mode. • SSH Public Key-chain - NOTE: The following are for example, assigning ports to create a VLAN as a whole. Interface Configuration Mode and Specific Configuration Modes Interface Configuration mode commands are to enter the Interface Configuration mode. •...
Command Line Interface Guide
Page 34
...displays QoS information. Describes user commands used for example ports, storm control, port speed and auto-negotiation. Configures VLANs and displays VLAN information. Configures and displays Port channel information. Configures commands related to the device. Configures and displays LACP information... Commands SSH Commands Syslog Commands System Management Commands TACACS Commands TIC Commands Tunnel Commands User Interface Commands VLAN Commands Voice VLAN Commands Web Server Commands 802.1x Commands 34 Command Groups Configures all port configuration options for entering ...
...displays QoS information. Describes user commands used for example ports, storm control, port speed and auto-negotiation. Configures VLANs and displays VLAN information. Configures and displays Port channel information. Configures commands related to the device. Configures and displays LACP information... Commands SSH Commands Syslog Commands System Management Commands TACACS Commands TIC Commands Tunnel Commands User Interface Commands VLAN Commands Voice VLAN Commands Web Server Commands 802.1x Commands 34 Command Groups Configures all port configuration options for entering ...
Command Line Interface Guide
Page 36
... the address table aging time. Interface Configuration port security routed secure- Adds MAC-layer secure addresses to specific VLAN address ports. Configuration bridge multicast unregistered Configures the forwarding state of Multicast addresses. Global Configuration clear bridge Removes any...on a line. Global Configuration bridge multicast address Registers MAC-layer Multicast addresses to the bridge VLAN table, and adds static ports to the VLAN bridge table. Line Configuration Global Configuration Global Configuration Privileged User EXEC Address Table Commands Command ...
... the address table aging time. Interface Configuration port security routed secure- Adds MAC-layer secure addresses to specific VLAN address ports. Configuration bridge multicast unregistered Configures the forwarding state of Multicast addresses. Global Configuration clear bridge Removes any...on a line. Global Configuration bridge multicast address Registers MAC-layer Multicast addresses to the bridge VLAN table, and adds static ports to the VLAN bridge table. Line Configuration Global Configuration Global Configuration Privileged User EXEC Address Table Commands Command ...
Command Line Interface Guide
Page 37
... Sets the time zone for the SNTP client. Configuration sntp trusted-key Authenticates the identity of addresses present in all or at a Privileged User specific VLAN. Configuration sntp authentication-key Defines an authentication key for received Network Time Global Protocol (NTP) traffic from servers. Privileged User EXEC Clock Commands Command Group...
... Sets the time zone for the SNTP client. Configuration sntp trusted-key Authenticates the identity of addresses present in all or at a Privileged User specific VLAN. Configuration sntp authentication-key Defines an authentication key for received Network Time Global Protocol (NTP) traffic from servers. Privileged User EXEC Clock Commands Command Group...
Command Line Interface Guide
Page 39
... Access Mode ip dhcp snooping Globally enables Dynamic Host Configuration Protocol (DHCP) snooping Global Configuration ip dhcp snooping vlan Enables DHCP snooping on an untrusted port the source MAC address in a DHCP packet matches the client hardware address...Interface Configuration (Ethernet, port-channel) ip dhcp snooping information option allowed-untrusted Configures a switch to verify that on a VLAN. EXEC Ethernet Configuration Commands Command Group interface ethernet interface range ethernet shutdown Description Access Mode Enters the Interface Configuration mode to...
... Access Mode ip dhcp snooping Globally enables Dynamic Host Configuration Protocol (DHCP) snooping Global Configuration ip dhcp snooping vlan Enables DHCP snooping on an untrusted port the source MAC address in a DHCP packet matches the client hardware address...Interface Configuration (Ethernet, port-channel) ip dhcp snooping information option allowed-untrusted Configures a switch to verify that on a VLAN. EXEC Ethernet Configuration Commands Command Group interface ethernet interface range ethernet shutdown Description Access Mode Enters the Interface Configuration mode to...
Command Line Interface Guide
Page 41
... snooping interface Displays IGMP snooping configuration. Configuration ip igmp snooping host-time-out Configures the host-time-out. VLAN Configuration ip igmp snooping leave-time-out Configures the leave-time-out. Displays GVRP statistics. Configuration ip igmp snooping... Group Management Protocol (IGMP) Global snooping. show ip igmp snooping groups Displays Multicast groups learned by IGMP snooping. VLAN Configuration show gvrp statistics Description Enables GVRP globally. Displays GVRP configuration information. User EXEC Command Groups 41 GVRP Commands ...
... snooping interface Displays IGMP snooping configuration. Configuration ip igmp snooping host-time-out Configures the host-time-out. VLAN Configuration ip igmp snooping leave-time-out Configures the leave-time-out. Displays GVRP statistics. Configuration ip igmp snooping... Group Management Protocol (IGMP) Global snooping. show ip igmp snooping groups Displays Multicast groups learned by IGMP snooping. VLAN Configuration show gvrp statistics Description Enables GVRP globally. Displays GVRP configuration information. User EXEC Command Groups 41 GVRP Commands ...
Command Line Interface Guide
Page 52
... guard root Configures port priority for the specified MST instance Interface Configuration Configures the path cost for multiple spanning tree (MST) calculations. Global Configuration Maps VLANS to Global MSTP instances. Configuration Restarts the protocol migration process (force the renegotiation with neighboring switches) on all interfaces or on an interface. MST Configuration...
... guard root Configures port priority for the specified MST instance Interface Configuration Configures the path cost for multiple spanning tree (MST) calculations. Global Configuration Maps VLANS to Global MSTP instances. Configuration Restarts the protocol migration process (force the renegotiation with neighboring switches) on all interfaces or on an interface. MST Configuration...
Command Line Interface Guide
Page 57
... terminal datadump history size debug-mode show history show command Privileged without 'prompting'. All Switches the mode to a VLAN. Enters the Interface Configuration (VLAN) mode. Configures a name to debug. Displays a brief description of all the output from the show privilege do...User EXEC mode. All Ends the current configuration session and returns to configure multiple VLANs. Enters the Interface Configuration mode to the All previous command mode. Creates a VLAN. User Interface Commands Command Group enable disable login configure exit(configuration) exit(EXEC) ...
... terminal datadump history size debug-mode show history show command Privileged without 'prompting'. All Switches the mode to a VLAN. Enters the Interface Configuration (VLAN) mode. Configures a name to debug. Displays a brief description of all the output from the show privilege do...User EXEC mode. All Ends the current configuration session and returns to configure multiple VLANs. Enters the Interface Configuration mode to the All previous command mode. Creates a VLAN. User Interface Commands Command Group enable disable login configure exit(configuration) exit(EXEC) ...
Command Line Interface Guide
Page 58
...vlan Displays VLAN information. Interface Configuration switchport forbidden vlan Forbids adding specific VLANs to a named group of the specified VLAN, and Interface vlan the VLAN ID is in access Interface mode. Interface Configuration show vlan protocolsgroups Displays protocols-groups information. Interface Configuration switchport access vlan Configures the VLAN...interface is in general mode. switchport access vlan Configures the VLAN membership mode of VLANs being used for protocol-based VLAN assignment. Interface Configuration switchport general Disables ...
...vlan Displays VLAN information. Interface Configuration switchport forbidden vlan Forbids adding specific VLANs to a named group of the specified VLAN, and Interface vlan the VLAN ID is in access Interface mode. Interface Configuration show vlan protocolsgroups Displays protocols-groups information. Interface Configuration switchport access vlan Configures the VLAN...interface is in general mode. switchport access vlan Configures the VLAN membership mode of VLANs being used for protocol-based VLAN assignment. Interface Configuration switchport general Disables ...
Command Line Interface Guide
Page 59
... to be configured from a browser. show voice vlan Displays the Voice VLAN status. voice vlan cos Sets the Voice VLAN Class Of Service. voice vlan enable Enables automatic Voice VLAN configuration for the Voice VLAN. Configuration Sets the interval the system waits for user... browser to Global configure the device. voice vlan oui-table Configure the Voice OUI table. voice vlan aging-timeout Sets the Voice VLAN aging timeout. Voice VLAN Commands Command Group voice vlan id Description Enters the VLAN Configuration mode. Global Configuration Generates a HTTPS ...
... to be configured from a browser. show voice vlan Displays the Voice VLAN status. voice vlan cos Sets the Voice VLAN Class Of Service. voice vlan enable Enables automatic Voice VLAN configuration for the Voice VLAN. Configuration Sets the interval the system waits for user... browser to Global configure the device. voice vlan oui-table Configure the Voice OUI table. voice vlan aging-timeout Sets the Voice VLAN aging timeout. Voice VLAN Commands Command Group voice vlan id Description Enters the VLAN Configuration mode. Global Configuration Generates a HTTPS ...
Command Line Interface Guide
Page 62
...traps macauthentication failure Enables sending traps when a MAC address was failed in Global authentication of this command Interface Config- VLAN Configuration dot1x multiple-hosts Allows multiple hosts (clients) on an 802.1X-authorized port with the dot1x port-control ... (Ethernet) dot1x macauthentication Enables authentication based on the interface access to access the interface. (Ethernet) dot1x guest-vlan Defines a Guest VLAN. vlan Interface Configuration show dot1x advanced Displays 802.1X advanced features for the switch or for the Privileged EXEC specified interface...
...traps macauthentication failure Enables sending traps when a MAC address was failed in Global authentication of this command Interface Config- VLAN Configuration dot1x multiple-hosts Allows multiple hosts (clients) on an 802.1X-authorized port with the dot1x port-control ... (Ethernet) dot1x macauthentication Enables authentication based on the interface access to access the interface. (Ethernet) dot1x guest-vlan Defines a Guest VLAN. vlan Interface Configuration show dot1x advanced Displays 802.1X advanced features for the switch or for the Privileged EXEC specified interface...
Command Line Interface Guide
Page 64
... gvrp enable (global) hostname interface ethernet show interfaces port-channel interface ethernet interface range port-channel interface range vlan interface tunnel interface vlan ip default-gateway ip domain-lookup ip domain-name ip host ip http authentication ip http port ip https ...IGMP) snooping Sets the available name servers. Enters the Interface Configuration mode of this command to return to configure multiple VLANs. Enters the Interface Configuration (VLAN) mode. Configures a TCP port for http. Enables GVRP globally. Defines static host name-to configure multiple ethernet type...
... gvrp enable (global) hostname interface ethernet show interfaces port-channel interface ethernet interface range port-channel interface range vlan interface tunnel interface vlan ip default-gateway ip domain-lookup ip domain-name ip host ip http authentication ip http port ip https ...IGMP) snooping Sets the available name servers. Enters the Interface Configuration mode of this command to return to configure multiple VLANs. Enters the Interface Configuration (VLAN) mode. Configures a TCP port for http. Enables GVRP globally. Defines static host name-to configure multiple ethernet type...
Command Line Interface Guide
Page 67
...802.1X MAC authentication access control. Enables unauthorized users access to that the switch sends an EAP request/identity frame to the Guest VLAN. Associates a port with TACACS servers. Sets an IP address on the interface an access to the client, before the IP address ...client. tacacs-server source-ip tacacs-server timeout tacacs-server host tunnel isatap query-interval tunnel isatap robustness tunnel isatap solicitationinterval username vlan database wrr-queue cos-map Specifies the source IP address that will be used for the automatic tunnel router domain name. Configures...
...802.1X MAC authentication access control. Enables unauthorized users access to that the switch sends an EAP request/identity frame to the Guest VLAN. Associates a port with TACACS servers. Sets an IP address on the interface an access to the client, before the IP address ...client. tacacs-server source-ip tacacs-server timeout tacacs-server host tunnel isatap query-interval tunnel isatap robustness tunnel isatap solicitationinterval username vlan database wrr-queue cos-map Specifies the source IP address that will be used for the automatic tunnel router domain name. Configures...
Command Line Interface Guide
Page 68
...Configures Multicast Listener Discovery (MLD) reporting for an interface. Enables IPv6 processing on a given interface. Enables or disables dynamic VLAN creation. Configures the Flow Control on an interface. Configures an IPv6 address for a specified group. Configures the number of ... address, attempts to an Extensible Authentication Protocol (EAP) - Sets the number of the interface. De-registers all VLANs, and prevents dynamic VLAN registration on a specified interface. Changes the Multicast Listener Discovery Protocol (MLD) version. Configures the full/half duplex ...
...Configures Multicast Listener Discovery (MLD) reporting for an interface. Enables IPv6 processing on a given interface. Enables or disables dynamic VLAN creation. Configures the Flow Control on an interface. Configures an IPv6 address for a specified group. Configures the number of ... address, attempts to an Extensible Authentication Protocol (EAP) - Sets the number of the interface. De-registers all VLANs, and prevents dynamic VLAN registration on a specified interface. Changes the Multicast Listener Discovery Protocol (MLD) version. Configures the full/half duplex ...
Command Line Interface Guide
Page 69
port security routed secureaddress Adds MAC-layer secure addresses to a VLAN. qos trust (Interface) Enables each port trust state while the system is in basic mode. spanning-tree cost Configures the spanning tree path cost for ...
port security routed secureaddress Adds MAC-layer secure addresses to a VLAN. qos trust (Interface) Enables each port trust state while the system is in basic mode. spanning-tree cost Configures the spanning tree path cost for ...