Command Line Interface Guide
Page 3
... Features 29 Setup Wizard 30 Terminal Command Buffer 30 Negating the Effect of Commands 30 Command Completion 31 Keyboard Shortcuts 31 CLI Command Conventions 32 2 Command Groups 33 Introduction 33 Command Groups 33 ACL Commands 35 AAA Commands 35 Address Table Commands 36 Clock Commands 37 Configuration and Image Files Commands 38 DHCP Snooping Commands 39 Ethernet Configuration Commands 39 GVRP Commands 41 Contents 3
... Features 29 Setup Wizard 30 Terminal Command Buffer 30 Negating the Effect of Commands 30 Command Completion 31 Keyboard Shortcuts 31 CLI Command Conventions 32 2 Command Groups 33 Introduction 33 Command Groups 33 ACL Commands 35 AAA Commands 35 Address Table Commands 36 Clock Commands 37 Configuration and Image Files Commands 38 DHCP Snooping Commands 39 Ethernet Configuration Commands 39 GVRP Commands 41 Contents 3
Command Line Interface Guide
Page 5
Web Server Commands 59 802.1x Commands 60 802.1x Advanced Commands 62 3 Command Modes 63 GC (Global Configuration) Mode 63 IC (Interface Configuration) Mode 67 LC (Line Configuration) Mode 70 MA (Management Access-level) Mode 70 PE (Privileged User EXEC) Mode 70 SP (SSH Public Key) Mode 72 UE (User EXEC) Mode 73 VC (VLAN Configuration) Mode 74 4 ACL Commands 75 ip access-list 75 mac access-list 75 permit (ip 76 deny (IP 78 permit (MAC 80 deny (MAC 81 service-acl 82 show access-lists 83 show interfaces access-lists 84 Contents 5
Web Server Commands 59 802.1x Commands 60 802.1x Advanced Commands 62 3 Command Modes 63 GC (Global Configuration) Mode 63 IC (Interface Configuration) Mode 67 LC (Line Configuration) Mode 70 MA (Management Access-level) Mode 70 PE (Privileged User EXEC) Mode 70 SP (SSH Public Key) Mode 72 UE (User EXEC) Mode 73 VC (VLAN Configuration) Mode 74 4 ACL Commands 75 ip access-list 75 mac access-list 75 permit (ip 76 deny (IP 78 permit (MAC 80 deny (MAC 81 service-acl 82 show access-lists 83 show interfaces access-lists 84 Contents 5
Command Line Interface Guide
Page 6
... ip http authentication 89 ip https authentication 89 show authentication methods 90 password 92 enable password 92 username 93 show users accounts 94 6 Address Table Commands 95 bridge address 95 bridge multicast filtering 96 bridge multicast address 97 bridge multicast forbidden address 98 bridge multicast unregistered 99 bridge multicast forward-all...
... ip http authentication 89 ip https authentication 89 show authentication methods 90 password 92 enable password 92 username 93 show users accounts 94 6 Address Table Commands 95 bridge address 95 bridge multicast filtering 96 bridge multicast address 97 bridge multicast forbidden address 98 bridge multicast unregistered 99 bridge multicast forward-all...
Command Line Interface Guide
Page 10
... ip dhcp snooping binding 183 clear ip dhcp snooping database 184 show ip dhcp snooping 184 show ip dhcp snooping binding 185 12 GVRP Commands 187 gvrp enable (global 187 gvrp enable (interface 187 garp timer 188 gvrp vlan-creation-forbid 189 gvrp registration-forbid 190 clear gvrp ...statistics 191 show gvrp configuration 191 show gvrp statistics 192 13 IGMP Snooping Commands 195 ip igmp snooping (Global 195 ip igmp snooping (Interface 195 ip igmp snooping mrouter 196 ip igmp snooping host-time-out 197 ...
... ip dhcp snooping binding 183 clear ip dhcp snooping database 184 show ip dhcp snooping 184 show ip dhcp snooping binding 185 12 GVRP Commands 187 gvrp enable (global 187 gvrp enable (interface 187 garp timer 188 gvrp vlan-creation-forbid 189 gvrp registration-forbid 190 clear gvrp ...statistics 191 show gvrp configuration 191 show gvrp statistics 192 13 IGMP Snooping Commands 195 ip igmp snooping (Global 195 ip igmp snooping (Interface 195 ip igmp snooping mrouter 196 ip igmp snooping host-time-out 197 ...
Command Line Interface Guide
Page 11
show ip igmp snooping mrouter 200 show ip igmp snooping interface 201 show ip igmp snooping groups 202 14 IP Addressing Commands 205 clear host dhcp 205 ip address 205 ip address dhcp 206 ip default-gateway 207 show ip interface 208 arp 209 arp timeout 210 clear arp-cache 210 show arp 211 ip domain-lookup 212 ip domain-name 213 ip name-server 213 ip host 214 clear host 215 show hosts 215 15 IPv6 Addressing 217 ipv6 enable 217 ipv6 address autoconfig 218 ipv6 icmp error-interval 218 show ipv6 icmp error-interval 219 ipv6 address 220 Contents 11
show ip igmp snooping mrouter 200 show ip igmp snooping interface 201 show ip igmp snooping groups 202 14 IP Addressing Commands 205 clear host dhcp 205 ip address 205 ip address dhcp 206 ip default-gateway 207 show ip interface 208 arp 209 arp timeout 210 clear arp-cache 210 show arp 211 ip domain-lookup 212 ip domain-name 213 ip name-server 213 ip host 214 clear host 215 show hosts 215 15 IPv6 Addressing 217 ipv6 enable 217 ipv6 address autoconfig 218 ipv6 icmp error-interval 218 show ipv6 icmp error-interval 219 ipv6 address 220 Contents 11
Command Line Interface Guide
Page 12
ipv6 address link-local 221 ipv6 unreachables 222 ipv6 default-gateway 222 ipv6 mld join-group 223 ipv6 mld version 224 show ipv6 interface 225 show ipv6 route 227 ipv6 nd dad attempts 228 ipv6 host 229 ipv6 neighbor 230 ipv6 set mtu 231 show ipv6 neighbors 232 clear ipv6 neighbors 234 16 iSCSI Commands 235 iscsi enable 235 iscsi target port 235 iscsi cos 237 iscsi aging time 237 iscsi max connections 238 show iscsi 239 show iscsi sessions 240 17 LACP Commands 243 lacp system-priority 243 lacp port-priority 243 lacp timeout 244 12 Contents
ipv6 address link-local 221 ipv6 unreachables 222 ipv6 default-gateway 222 ipv6 mld join-group 223 ipv6 mld version 224 show ipv6 interface 225 show ipv6 route 227 ipv6 nd dad attempts 228 ipv6 host 229 ipv6 neighbor 230 ipv6 set mtu 231 show ipv6 neighbors 232 clear ipv6 neighbors 234 16 iSCSI Commands 235 iscsi enable 235 iscsi target port 235 iscsi cos 237 iscsi aging time 237 iscsi max connections 238 show iscsi 239 show iscsi sessions 240 17 LACP Commands 243 lacp system-priority 243 lacp port-priority 243 lacp timeout 244 12 Contents
Command Line Interface Guide
Page 13
... line 247 speed 247 autobaud 248 exec-timeout 249 show line 250 terminal history 250 terminal history size 251 19 LLDP Commands 253 lldp enable (global 253 lldp enable (interface 253 lldp timer 254 lldp hold-multiplier 255 lldp reinit-delay 256 lldp tx-delay 256 lldp ...
... line 247 speed 247 autobaud 248 exec-timeout 249 show line 250 terminal history 250 terminal history size 251 19 LLDP Commands 253 lldp enable (global 253 lldp enable (interface 253 lldp timer 254 lldp hold-multiplier 255 lldp reinit-delay 256 lldp tx-delay 256 lldp ...
Command Line Interface Guide
Page 14
...permit (management 271 deny (management 272 management access-class 273 show management access-list 273 show management access-class 274 21 PHY Diagnostics Commands 275 test copper-port tdr 275 show copper-ports tdr 275 show copper-ports cable-length 276 show fiber-ports optical-transceiver 277 ...22 Port Channel Commands 281 interface port-channel 281 interface range port-channel 281 channel-group 282 port-channel load-balance 283 show interfaces port-channel 284...
...permit (management 271 deny (management 272 management access-class 273 show management access-list 273 show management access-class 274 21 PHY Diagnostics Commands 275 test copper-port tdr 275 show copper-ports tdr 275 show copper-ports cable-length 276 show fiber-ports optical-transceiver 277 ...22 Port Channel Commands 281 interface port-channel 281 interface range port-channel 281 channel-group 282 port-channel load-balance 283 show interfaces port-channel 284...
Command Line Interface Guide
Page 15
24 QoS Commands 289 qos 289 show qos 289 wrr-queue cos-map 290 wrr-queue bandwidth 291 priority-queue out num-of-queues 292 traffic-shape 293 rate-limit (Ethernet 293 show qos interface 294 qos map dscp-queue 296 qos trust (Global 296 qos trust (Interface 297 qos cos 298 show qos map 298 25 Radius Commands 301 radius-server host 301 radius-server key 302 radius-server retransmit 303 radius-server source-ip 304 radius-server source-ipv6 304 radius-server timeout 305 radius-server deadtime 306 show radius-servers 306 Contents 15
24 QoS Commands 289 qos 289 show qos 289 wrr-queue cos-map 290 wrr-queue bandwidth 291 priority-queue out num-of-queues 292 traffic-shape 293 rate-limit (Ethernet 293 show qos interface 294 qos map dscp-queue 296 qos trust (Global 296 qos trust (Interface 297 qos cos 298 show qos map 298 25 Radius Commands 301 radius-server host 301 radius-server key 302 radius-server retransmit 303 radius-server source-ip 304 radius-server source-ipv6 304 radius-server timeout 305 radius-server deadtime 306 show radius-servers 306 Contents 15
Command Line Interface Guide
Page 16
... rmon alarm-table 318 show rmon alarm 319 rmon event 321 show rmon events 322 show rmon log 323 rmon table-size 325 27 SNMP Commands 327 snmp-server community 327 snmp-server view 328 snmp-server filter 329 snmp-server contact 330 snmp-server location 331 snmp-server enable traps...
... rmon alarm-table 318 show rmon alarm 319 rmon event 321 show rmon events 322 show rmon log 323 rmon table-size 325 27 SNMP Commands 327 snmp-server community 327 snmp-server view 328 snmp-server filter 329 snmp-server contact 330 snmp-server location 331 snmp-server enable traps...
Command Line Interface Guide
Page 17
... snmp engineid 341 show snmp 341 show snmp views 342 show snmp groups 343 show snmp filters 344 show snmp users 345 28 Spanning-Tree Commands 347 spanning-tree 347 spanning-tree mode 347 spanning-tree forward-time 348 spanning-tree hello-time 349 spanning-tree max-age 350 spanning-tree...
... snmp engineid 341 show snmp 341 show snmp views 342 show snmp groups 343 show snmp filters 344 show snmp users 345 28 Spanning-Tree Commands 347 spanning-tree 347 spanning-tree mode 347 spanning-tree forward-time 348 spanning-tree hello-time 349 spanning-tree max-age 350 spanning-tree...
Command Line Interface Guide
Page 18
show (mst 360 exit (mst 361 abort (mst 361 spanning-tree pathcost method 362 spanning-tree bpdu 362 clear spanning-tree detected-protocols 363 show spanning-tree 364 Spanning-tree guard root 376 29 SSH Commands 377 ip ssh port 377 ip ssh server 377 crypto key generate dsa 378 crypto key generate rsa 379 ip ssh pubkey-auth 379 crypto key pubkey-chain ssh 380 user-key 380 key-string 381 show ip ssh 382 show crypto key mypubkey 384 show crypto key pubkey-chain ssh 385 30 Syslog Commands 387 logging on 387 logging 387 logging console 389 logging buffered 389 18 Contents
show (mst 360 exit (mst 361 abort (mst 361 spanning-tree pathcost method 362 spanning-tree bpdu 362 clear spanning-tree detected-protocols 363 show spanning-tree 364 Spanning-tree guard root 376 29 SSH Commands 377 ip ssh port 377 ip ssh server 377 crypto key generate dsa 378 crypto key generate rsa 379 ip ssh pubkey-auth 379 crypto key pubkey-chain ssh 380 user-key 380 key-string 381 show ip ssh 382 show crypto key mypubkey 384 show crypto key pubkey-chain ssh 385 30 Syslog Commands 387 logging on 387 logging 387 logging console 389 logging buffered 389 18 Contents
Command Line Interface Guide
Page 20
show version 415 asset-tag 416 show system id 417 32 TACACS Commands 419 tacacs-server host 419 tacacs-server key 420 tacacs-server timeout 420 tacacs-server source-ip 421 show tacacs 422 33 TIC Commands 423 passwords min-length 423 password-aging 424 passwords aging 424 passwords history 425 passwords history hold-time 426 passwords lockout 426 aaa login-history file 427 set username active 428 set line active 428 set enable-password active 429 show passwords configuration 429 show users login-history 431 20 Contents
show version 415 asset-tag 416 show system id 417 32 TACACS Commands 419 tacacs-server host 419 tacacs-server key 420 tacacs-server timeout 420 tacacs-server source-ip 421 show tacacs 422 33 TIC Commands 423 passwords min-length 423 password-aging 424 passwords aging 424 passwords history 425 passwords history hold-time 426 passwords lockout 426 aaa login-history file 427 set username active 428 set line active 428 set enable-password active 429 show passwords configuration 429 show users login-history 431 20 Contents
Command Line Interface Guide
Page 22
36 VLAN Commands 451 vlan database 451 vlan 451 interface vlan 452 interface range vlan 453 name 453 switchport access vlan 454 switchport trunk allowed vlan 455 switchport ...
36 VLAN Commands 451 vlan database 451 vlan 451 interface vlan 452 interface range vlan 453 name 453 switchport access vlan 454 switchport trunk allowed vlan 455 switchport ...
Command Line Interface Guide
Page 24
39 802.1x Commands 491 aaa authentication dot1x 491 dot1x system-auth-control 492 dot1x port-control 492 dot1x re-authentication 493 dot1x timeout re-authperiod 494 dot1x re-...
39 802.1x Commands 491 aaa authentication dot1x 491 dot1x system-auth-control 492 dot1x port-control 492 dot1x re-authentication 493 dot1x timeout re-authperiod 494 dot1x re-...
Command Line Interface Guide
Page 25
... the modes is as follows: User EXEC mode, Privileged EXEC mode, Global Configuration mode, and Interface Configuration mode. From each mode a specific command is divided into different command modes. CLI Command Modes Introduction To assist in using the CLI. Using the CLI 25 The standard order to assist in configuring devices, the CLI...
... the modes is as follows: User EXEC mode, Privileged EXEC mode, Global Configuration mode, and Interface Configuration mode. From each mode a specific command is divided into different command modes. CLI Command Modes Introduction To assist in using the CLI. Using the CLI 25 The standard order to assist in configuring devices, the CLI...
Command Line Interface Guide
Page 26
... directly into the device, the user is automatically in the device. A password prompt is displayed. Only a limited subset of the privileged commands set operating system parameters: The password is not displayed on the screen and is displayed as a privileged user. The user-level prompt consists...mode prompt consists of the device "host name" followed by "#". The Privileged mode gives access to prevent unauthorized use because many of commands are restricted on a global level. User EXEC Mode After logging into the Privileged EXEC mode. To enter the Privileged EXEC mode from...
... directly into the device, the user is automatically in the device. A password prompt is displayed. Only a limited subset of the privileged commands set operating system parameters: The password is not displayed on the screen and is displayed as a privileged user. The user-level prompt consists...mode prompt consists of the device "host name" followed by "#". The Privileged mode gives access to prevent unauthorized use because many of commands are restricted on a global level. User EXEC Mode After logging into the Privileged EXEC mode. To enter the Privileged EXEC mode from...
Command Line Interface Guide
Page 27
... mode and returns to features that affect the system as a whole, rather than just a specific interface. The Privileged EXEC mode command configure is used to return from the Global Configuration mode to the Privileged EXEC mode: • exit • end • Ctrl+Z ...Privileged Exec mode and return back to enter the Global Configuration mode. The following steps: 1 At the Privileged EXEC mode prompt enter the command configure and press . The Global Configuration mode prompt is used to the User EXEC mode: console>enable Enter Password: ****** console# console#disable...
... mode and returns to features that affect the system as a whole, rather than just a specific interface. The Privileged EXEC mode command configure is used to return from the Global Configuration mode to the Privileged EXEC mode: • exit • end • Ctrl+Z ...Privileged Exec mode and return back to enter the Global Configuration mode. The following steps: 1 At the Privileged EXEC mode prompt enter the command configure and press . The Global Configuration mode prompt is used to the User EXEC mode: console>enable Enter Password: ****** console# console#disable...
Command Line Interface Guide
Page 28
...granted, and the workstation used to enter the Management Access List Configuration mode. • Ethernet - Contains commands to define management access-lists. The Global Configuration mode command interface ethernet is used to access the device is via a Telnet connection. If access is connected to... the device prior to using CLI commands. Contains commands to manually specify other device SSH public keys. NOTE: The following are used to enter the Port Channel Interface Configuration ...
...granted, and the workstation used to enter the Management Access List Configuration mode. • Ethernet - Contains commands to define management access-lists. The Global Configuration mode command interface ethernet is used to access the device is via a Telnet connection. If access is connected to... the device prior to using CLI commands. Contains commands to manually specify other device SSH public keys. NOTE: The following are used to enter the Port Channel Interface Configuration ...
Command Line Interface Guide
Page 29
...show, interfaces and status are not displayed. When a different user is required to set a password for this command are two instances where the help is an assortment of a command. The User Exec mode is entered, and the prompt "Console>" is displayed. 2 Configure the device and ...• Keyword lookup - For example, in the Privileged EXEC mode command mode the login command is manually entered. The standard command to complete the required tasks. 3 When finished, exit the session with the CLI, the command options are keywords, ethernet is entered in using the CLI, perform ...
...show, interfaces and status are not displayed. When a different user is required to set a password for this command are two instances where the help is an assortment of a command. The User Exec mode is entered, and the prompt "Console>" is displayed. 2 Configure the device and ...• Keyword lookup - For example, in the Privileged EXEC mode command mode the login command is manually entered. The standard command to complete the required tasks. 3 When finished, exit the session with the CLI, the command options are keywords, ethernet is entered in using the CLI, perform ...