Command Line Interface Guide
Page 5
Web Server Commands 59 802.1x Commands 60 802.1x Advanced Commands 62 3 Command Modes 63 GC (Global Configuration) Mode 63 IC (Interface Configuration) Mode 67 LC (Line Configuration) Mode 70 MA (Management Access-level) Mode 70 PE (Privileged User EXEC) Mode 70 SP (SSH Public Key) Mode 72 UE (User EXEC) Mode 73 VC (VLAN Configuration) Mode 74 4 ACL Commands 75 ip access-list 75 mac access-list 75 permit (ip 76 deny (IP 78 permit (MAC 80 deny (MAC 81 service-acl 82 show access-lists 83 show interfaces access-lists 84 Contents 5
Web Server Commands 59 802.1x Commands 60 802.1x Advanced Commands 62 3 Command Modes 63 GC (Global Configuration) Mode 63 IC (Interface Configuration) Mode 67 LC (Line Configuration) Mode 70 MA (Management Access-level) Mode 70 PE (Privileged User EXEC) Mode 70 SP (SSH Public Key) Mode 72 UE (User EXEC) Mode 73 VC (VLAN Configuration) Mode 74 4 ACL Commands 75 ip access-list 75 mac access-list 75 permit (ip 76 deny (IP 78 permit (MAC 80 deny (MAC 81 service-acl 82 show access-lists 83 show interfaces access-lists 84 Contents 5
Command Line Interface Guide
Page 6
5 AAA Commands 85 aaa authentication login 85 aaa authentication enable 86 login authentication 87 enable authentication 88 ip http authentication 89 ip https authentication 89 show authentication methods 90 password 92 enable password 92 username 93 show users accounts 94 6 Address Table Commands 95 bridge address 95 ...
5 AAA Commands 85 aaa authentication login 85 aaa authentication enable 86 login authentication 87 enable authentication 88 ip http authentication 89 ip https authentication 89 show authentication methods 90 password 92 enable password 92 username 93 show users accounts 94 6 Address Table Commands 95 bridge address 95 ...
Command Line Interface Guide
Page 9
... port storm-control broadcast enable 173 port storm-control broadcast rate 174 show ports storm-control 175 show system flowcontrol 176 11 DHCP Snooping 179 ip dhcp snooping 179 ip dhcp snooping vlan 179 ip dhcp snooping trust 180 ip dhcp snooping information option allowed-untrusted 180 Contents 9
... port storm-control broadcast enable 173 port storm-control broadcast rate 174 show ports storm-control 175 show system flowcontrol 176 11 DHCP Snooping 179 ip dhcp snooping 179 ip dhcp snooping vlan 179 ip dhcp snooping trust 180 ip dhcp snooping information option allowed-untrusted 180 Contents 9
Command Line Interface Guide
Page 10
... verify 181 ip dhcp snooping database 182 ip dhcp snooping database update-freq 182 ip dhcp snooping binding 183 clear ip dhcp snooping database 184 show ip dhcp snooping 184 show ip dhcp snooping binding 185 12 GVRP Commands 187 gvrp enable (global 187 gvrp enable (interface 187 garp... IGMP Snooping Commands 195 ip igmp snooping (Global 195 ip igmp snooping (Interface 195 ip igmp snooping mrouter 196 ip igmp snooping host-time-out 197 ip igmp snooping mrouter-time-out 197 ip igmp snooping leave-time-out 198 ip igmp snooping querier enable 199 ip igmp snooping querier address ...
... verify 181 ip dhcp snooping database 182 ip dhcp snooping database update-freq 182 ip dhcp snooping binding 183 clear ip dhcp snooping database 184 show ip dhcp snooping 184 show ip dhcp snooping binding 185 12 GVRP Commands 187 gvrp enable (global 187 gvrp enable (interface 187 garp... IGMP Snooping Commands 195 ip igmp snooping (Global 195 ip igmp snooping (Interface 195 ip igmp snooping mrouter 196 ip igmp snooping host-time-out 197 ip igmp snooping mrouter-time-out 197 ip igmp snooping leave-time-out 198 ip igmp snooping querier enable 199 ip igmp snooping querier address ...
Command Line Interface Guide
Page 11
show ip igmp snooping mrouter 200 show ip igmp snooping interface 201 show ip igmp snooping groups 202 14 IP Addressing Commands 205 clear host dhcp 205 ip address 205 ip address dhcp 206 ip default-gateway 207 show ip interface 208 arp 209 arp timeout 210 clear arp-cache 210 show arp 211 ip domain-lookup 212 ip domain-name 213 ip name-server 213 ip host 214 clear host 215 show hosts 215 15 IPv6 Addressing 217 ipv6 enable 217 ipv6 address autoconfig 218 ipv6 icmp error-interval 218 show ipv6 icmp error-interval 219 ipv6 address 220 Contents 11
show ip igmp snooping mrouter 200 show ip igmp snooping interface 201 show ip igmp snooping groups 202 14 IP Addressing Commands 205 clear host dhcp 205 ip address 205 ip address dhcp 206 ip default-gateway 207 show ip interface 208 arp 209 arp timeout 210 clear arp-cache 210 show arp 211 ip domain-lookup 212 ip domain-name 213 ip name-server 213 ip host 214 clear host 215 show hosts 215 15 IPv6 Addressing 217 ipv6 enable 217 ipv6 address autoconfig 218 ipv6 icmp error-interval 218 show ipv6 icmp error-interval 219 ipv6 address 220 Contents 11
Command Line Interface Guide
Page 15
24 QoS Commands 289 qos 289 show qos 289 wrr-queue cos-map 290 wrr-queue bandwidth 291 priority-queue out num-of-queues 292 traffic-shape 293 rate-limit (Ethernet 293 show qos interface 294 qos map dscp-queue 296 qos trust (Global 296 qos trust (Interface 297 qos cos 298 show qos map 298 25 Radius Commands 301 radius-server host 301 radius-server key 302 radius-server retransmit 303 radius-server source-ip 304 radius-server source-ipv6 304 radius-server timeout 305 radius-server deadtime 306 show radius-servers 306 Contents 15
24 QoS Commands 289 qos 289 show qos 289 wrr-queue cos-map 290 wrr-queue bandwidth 291 priority-queue out num-of-queues 292 traffic-shape 293 rate-limit (Ethernet 293 show qos interface 294 qos map dscp-queue 296 qos trust (Global 296 qos trust (Interface 297 qos cos 298 show qos map 298 25 Radius Commands 301 radius-server host 301 radius-server key 302 radius-server retransmit 303 radius-server source-ip 304 radius-server source-ipv6 304 radius-server timeout 305 radius-server deadtime 306 show radius-servers 306 Contents 15
Command Line Interface Guide
Page 18
show (mst 360 exit (mst 361 abort (mst 361 spanning-tree pathcost method 362 spanning-tree bpdu 362 clear spanning-tree detected-protocols 363 show spanning-tree 364 Spanning-tree guard root 376 29 SSH Commands 377 ip ssh port 377 ip ssh server 377 crypto key generate dsa 378 crypto key generate rsa 379 ip ssh pubkey-auth 379 crypto key pubkey-chain ssh 380 user-key 380 key-string 381 show ip ssh 382 show crypto key mypubkey 384 show crypto key pubkey-chain ssh 385 30 Syslog Commands 387 logging on 387 logging 387 logging console 389 logging buffered 389 18 Contents
show (mst 360 exit (mst 361 abort (mst 361 spanning-tree pathcost method 362 spanning-tree bpdu 362 clear spanning-tree detected-protocols 363 show spanning-tree 364 Spanning-tree guard root 376 29 SSH Commands 377 ip ssh port 377 ip ssh server 377 crypto key generate dsa 378 crypto key generate rsa 379 ip ssh pubkey-auth 379 crypto key pubkey-chain ssh 380 user-key 380 key-string 381 show ip ssh 382 show crypto key mypubkey 384 show crypto key pubkey-chain ssh 385 30 Syslog Commands 387 logging on 387 logging 387 logging console 389 logging buffered 389 18 Contents
Command Line Interface Guide
Page 20
show version 415 asset-tag 416 show system id 417 32 TACACS Commands 419 tacacs-server host 419 tacacs-server key 420 tacacs-server timeout 420 tacacs-server source-ip 421 show tacacs 422 33 TIC Commands 423 passwords min-length 423 password-aging 424 passwords aging 424 passwords history 425 passwords history hold-time 426 passwords lockout 426 aaa login-history file 427 set username active 428 set line active 428 set enable-password active 429 show passwords configuration 429 show users login-history 431 20 Contents
show version 415 asset-tag 416 show system id 417 32 TACACS Commands 419 tacacs-server host 419 tacacs-server key 420 tacacs-server timeout 420 tacacs-server source-ip 421 show tacacs 422 33 TIC Commands 423 passwords min-length 423 password-aging 424 passwords aging 424 passwords history 425 passwords history hold-time 426 passwords lockout 426 aaa login-history file 427 set username active 428 set line active 428 set enable-password active 429 show passwords configuration 429 show users login-history 431 20 Contents
Command Line Interface Guide
Page 22
... forbidden vlan 459 switchport mode 460 switchport customer vlan 460 map protocol protocols-group 461 switchport general map protocols-group vlan 462 switchport protected 463 ip internal-usage-vlan 463 show vlan 464 show vlan internal usage 465 show vlan protocols-groups 466 show interfaces switchport 467 22 Contents
... forbidden vlan 459 switchport mode 460 switchport customer vlan 460 map protocol protocols-group 461 switchport general map protocols-group vlan 462 switchport protected 463 ip internal-usage-vlan 463 show vlan 464 show vlan internal usage 465 show vlan protocols-groups 466 show interfaces switchport 467 22 Contents
Command Line Interface Guide
Page 28
... Global Configuration mode command crypto key pubkey-chain ssh is used to the switch console port, or via a Telnet connection, ensure the device has an IP address defined, corresponding management access is granted, and the workstation used to access the device is used to entering commands on the console line only...
... Global Configuration mode command crypto key pubkey-chain ssh is used to the switch console port, or via a Telnet connection, ensure the device has an IP address defined, corresponding management access is granted, and the workstation used to access the device is used to entering commands on the console line only...
Command Line Interface Guide
Page 34
... information. Describes user commands used for example ports, storm control, port speed and auto-negotiation. Configures and manages IP addresses on Spanning Tree protocol Configures SSH authentication. Configures SNMP communities, traps and displays SNMP information. Configures TACACS commands... banners on the device. Configures commands related to the device. Ethernet Configuration GVRP Commands IGMP Snooping Commands IP Addressing Commands IPv6 Addressing Commands iSCSI Commands LACP Commands Line Commands Login Banner Commands Management ACL Commands PHY Diagnostics...
... information. Describes user commands used for example ports, storm control, port speed and auto-negotiation. Configures and manages IP addresses on Spanning Tree protocol Configures SSH authentication. Configures SNMP communities, traps and displays SNMP information. Configures TACACS commands... banners on the device. Configures commands related to the device. Ethernet Configuration GVRP Commands IGMP Snooping Commands IP Addressing Commands IPv6 Addressing Commands iSCSI Commands LACP Commands Line Commands Login Banner Commands Management ACL Commands PHY Diagnostics...
Command Line Interface Guide
Page 35
...in IPv4 Access List Configuration mode. Global Configuration Specifies authentication methods for accessing higher Global privilege levels. IP-Access List Configuration permit (MAC) Defines permit conditions of an MAC ACL. Global Configuration Defines authentication ... deny statement match. Privileged EXEC AAA Commands Command Group aaa authentication login aaa authentication enable enable authentication ip http authentication ip https authentication show access-lists Displays access control lists (ACLs) defined on interfaces. Specifies authentication methods for...
...in IPv4 Access List Configuration mode. Global Configuration Specifies authentication methods for accessing higher Global privilege levels. IP-Access List Configuration permit (MAC) Defines permit conditions of an MAC ACL. Global Configuration Defines authentication ... deny statement match. Privileged EXEC AAA Commands Command Group aaa authentication login aaa authentication enable enable authentication ip http authentication ip https authentication show access-lists Displays access control lists (ACLs) defined on interfaces. Specifies authentication methods for...
Command Line Interface Guide
Page 39
...database Configures the update frequency ofthe DHCP update-freq snooping binding file. EXEC show ip dhcp snooping Displays the DHCP snooping configuration. Global Configuration ip dhcp snooping binding Configures the DHCP snooping binding database and Privileged EXEC to add ...Configures the DHCP snooping binding file. DHCP Snooping Commands Command Group Description Access Mode ip dhcp snooping Globally enables Dynamic Host Configuration Protocol (DHCP) snooping Global Configuration ip dhcp snooping vlan Enables DHCP snooping on a switch. EXEC Ethernet Configuration Commands ...
...database Configures the update frequency ofthe DHCP update-freq snooping binding file. EXEC show ip dhcp snooping Displays the DHCP snooping configuration. Global Configuration ip dhcp snooping binding Configures the DHCP snooping binding database and Privileged EXEC to add ...Configures the DHCP snooping binding file. DHCP Snooping Commands Command Group Description Access Mode ip dhcp snooping Globally enables Dynamic Host Configuration Protocol (DHCP) snooping Global Configuration ip dhcp snooping vlan Enables DHCP snooping on a switch. EXEC Ethernet Configuration Commands ...
Command Line Interface Guide
Page 41
...enable (interface) garp timer gvrp vlan-creation-forbid gvrp registration-forbid clear gvrp statistics show gvrp configuration show ip igmp snooping interface Displays IGMP snooping configuration. Clears all VLANs, and prevents dynamic VLAN registration on dynamically learned Multicast ...Configuration Interface Configuration Interface Configuration Privileged User EXEC User EXEC User EXEC IGMP Snooping Commands Command Group Description Access Mode ip igmp snooping (Global) Enables Internet Group Management Protocol (IGMP) Global snooping. User EXEC Command Groups 41 De-...
...enable (interface) garp timer gvrp vlan-creation-forbid gvrp registration-forbid clear gvrp statistics show gvrp configuration show ip igmp snooping interface Displays IGMP snooping configuration. Clears all VLANs, and prevents dynamic VLAN registration on dynamically learned Multicast ...Configuration Interface Configuration Interface Configuration Privileged User EXEC User EXEC User EXEC IGMP Snooping Commands Command Group Description Access Mode ip igmp snooping (Global) Enables Internet Group Management Protocol (IGMP) Global snooping. User EXEC Command Groups 41 De-...
Command Line Interface Guide
Page 42
... Deletes entries from the DHCP server. Global Configuration Sets the available name servers. Interface Configuration Sets an IP address Interface Configuration Acquires an IP address on the device. Global Configuration Configures how long an entry remains in the ARP cache. Global ...names and addresses. 42 Command Groups IP Addressing Commands Command Group clear host dhcp ip address ip address dhcp ip default-gateway show ip interface arp arp timeout clear arp-cache show arp ip domain-lookup ip domain-name ip name-server ip host clear host show hosts Description...
... Deletes entries from the DHCP server. Global Configuration Sets the available name servers. Interface Configuration Sets an IP address Interface Configuration Acquires an IP address on the device. Global Configuration Configures how long an entry remains in the ARP cache. Global ...names and addresses. 42 Command Groups IP Addressing Commands Command Group clear host dhcp ip address ip address dhcp ip default-gateway show ip interface arp arp timeout clear arp-cache show arp ip domain-lookup ip domain-name ip name-server ip host clear host show hosts Description...
Command Line Interface Guide
Page 49
... Improves RADIUS response times when servers are unavailable. Enables a Remote Monitoring (RMON) MIB history statistics group on an interface. Configuration radius-server source-ip Specifies the source IP address used for communication Global with RADIUS servers. Privileged User EXEC RMON Commands Command Group show rmon statistics rmon collection history show rmon collection...
... Improves RADIUS response times when servers are unavailable. Enables a Remote Monitoring (RMON) MIB history statistics group on an interface. Configuration radius-server source-ip Specifies the source IP address used for communication Global with RADIUS servers. Privileged User EXEC RMON Commands Command Group show rmon statistics rmon collection history show rmon collection...
Command Line Interface Guide
Page 53
... device. Limits syslog messages displayed from a SSH server. SSH Commands Command Group ip ssh port ip ssh server crypto key generate dsa crypto key generate rsa ip ssh pubkey-auth crypto key pubkey-chain ssh user-key key-string show ip ssh show crypto key mypubkey show crypto key pubkey-chain ssh Description Access...
... device. Limits syslog messages displayed from a SSH server. SSH Commands Command Group ip ssh port ip ssh server crypto key generate dsa crypto key generate rsa ip ssh pubkey-auth crypto key pubkey-chain ssh user-key key-string show ip ssh show crypto key mypubkey show crypto key pubkey-chain ssh Description Access...
Command Line Interface Guide
Page 55
... User EXEC Global Configuration User EXEC TACACS Commands Command Group tacacs-server host tacacs-server key tacacs-server source-ip show system id Lists the open Telnet sessions Displays system information. Configuration passwords history Configures the number of password... version information. Configuration passwords aging Configures the aging time of username passwords and Global enables passwords. Specifies the source IP address that are Global required before a password in Global the local database. Global Configuration Sets the authentication encryption key...
... User EXEC Global Configuration User EXEC TACACS Commands Command Group tacacs-server host tacacs-server key tacacs-server source-ip show system id Lists the open Telnet sessions Displays system information. Configuration passwords history Configures the number of password... version information. Configuration passwords aging Configures the aging time of username passwords and Global enables passwords. Specifies the source IP address that are Global required before a password in Global the local database. Global Configuration Sets the authentication encryption key...
Command Line Interface Guide
Page 56
... Command Groups Privileged EXEC show ipv6 tunnel Displays information on the ISATAP tunnel. tunnel isatap solicitationinterval Configures the interval between DNS Queries (before Global the IP address of the ISATAP router is no active ISATAP Configuration router). show users login-history Displays information about the passwords management Privileged EXEC configuration. Interface...
... Command Groups Privileged EXEC show ipv6 tunnel Displays information on the ISATAP tunnel. tunnel isatap solicitationinterval Configures the interval between DNS Queries (before Global the IP address of the ISATAP router is no active ISATAP Configuration router). show users login-history Displays information about the passwords management Privileged EXEC configuration. Interface...
Command Line Interface Guide
Page 58
... general mode. Interface Configuration switchport general pvid Configures the PVID when the interface is the "port default VLAN ID (PVID)". protocols-group vlan Interface Configuration ip internal-usage-vlan Reserves a VLAN as a member of a port.
... general mode. Interface Configuration switchport general pvid Configures the PVID when the interface is the "port default VLAN ID (PVID)". protocols-group vlan Interface Configuration ip internal-usage-vlan Reserves a VLAN as a member of a port.