Command Line Interface Guide
Page 4
enable authentication 194 enable password 194 ip http authentication 195 ip https authentication 196 login authentication 197 password (Line Configuration 198 password (User EXEC 199 show authentication methods 200 show users accounts 201 show users login-history 202 username 203 5 ACL Commands 205 deny | permit 207 ip access-group 209 no ip access-group 209 mac access-group 210 mac access-list extended 211 mac access-list extended rename 212 show ip access-lists 213 show mac access-list 214 4 Contents
enable authentication 194 enable password 194 ip http authentication 195 ip https authentication 196 login authentication 197 password (Line Configuration 198 password (User EXEC 199 show authentication methods 200 show users accounts 201 show users login-history 202 username 203 5 ACL Commands 205 deny | permit 207 ip access-group 209 no ip access-group 209 mac access-group 210 mac access-list extended 211 mac access-list extended rename 212 show ip access-lists 213 show mac access-list 214 4 Contents
Command Line Interface Guide
Page 6
isdp advertise-v2 239 isdp enable 239 isdp holdtime 240 isdp timer 241 show isdp 241 show isdp entry 243 show isdp interface 244 show isdp neighbors 246 show isdp traffic 248 8 DHCP Layer 2 Relay Commands 251 dhcp l2relay (Interface Configuration 252 dhcp l2relay circuit-id 253 dhcp l2relay remote-id 254 dhcp l2relay trust 254 dhcp l2relay vlan 255 9 DHCP Snooping Commands 257 ip dhcp snooping 258 ip dhcp snooping binding 259 ip dhcp snooping database 260 ip dhcp snooping database write-delay 261 6 Contents
isdp advertise-v2 239 isdp enable 239 isdp holdtime 240 isdp timer 241 show isdp 241 show isdp entry 243 show isdp interface 244 show isdp neighbors 246 show isdp traffic 248 8 DHCP Layer 2 Relay Commands 251 dhcp l2relay (Interface Configuration 252 dhcp l2relay circuit-id 253 dhcp l2relay remote-id 254 dhcp l2relay trust 254 dhcp l2relay vlan 255 9 DHCP Snooping Commands 257 ip dhcp snooping 258 ip dhcp snooping binding 259 ip dhcp snooping database 260 ip dhcp snooping database write-delay 261 6 Contents
Command Line Interface Guide
Page 9
... GVRP Commands 319 garp timer 320 gvrp enable (global 322 gvrp enable (interface 322 gvrp registration-forbid 323 gvrp vlan-creation-forbid 324 show gvrp configuration 325 show gvrp error-statistics 326 show gvrp statistics 328 13 IGMP Snooping Commands 331 ip igmp snooping (interface 332 ip igmp snooping host-time...
... GVRP Commands 319 garp timer 320 gvrp enable (global 322 gvrp enable (interface 322 gvrp registration-forbid 323 gvrp vlan-creation-forbid 324 show gvrp configuration 325 show gvrp error-statistics 326 show gvrp statistics 328 13 IGMP Snooping Commands 331 ip igmp snooping (interface 332 ip igmp snooping host-time...
Command Line Interface Guide
Page 18
... loopguard 547 spanning-tree max-age 548 spanning-tree max-hops 549 spanning-tree mode 549 spanning-tree mst 0 external-cost 550 spanning-tree mst configuration 551 spanning-tree mst cost 552 spanning-tree mst port-priority 553 spanning-tree mst priority 554 spanning-tree portfast 555 spanning-tree portfast bpdufilter...
... loopguard 547 spanning-tree max-age 548 spanning-tree max-hops 549 spanning-tree mode 549 spanning-tree mst 0 external-cost 550 spanning-tree mst configuration 551 spanning-tree mst cost 552 spanning-tree mst port-priority 553 spanning-tree mst priority 554 spanning-tree portfast 555 spanning-tree portfast bpdufilter...
Command Line Interface Guide
Page 41
https port 1063 show captive-portal 1064 show captive-portal status 1065 block 1066 configuration 1067 enable 1067 group 1068 interface 1069 locale 1069 name 1070 protocol 1071 redirect 1071 redirect-url 1072 session-timeout 1072 verification 1073 captive-portal client deauthenticate 1074 show captive-portal client status 1074 show captive-portal configuration client status . . . 1076 show captive-portal interface client status . . . . . 1077 show captive-portal interface configuration status . 1079 clear captive-portal users 1080 Contents 41
https port 1063 show captive-portal 1064 show captive-portal status 1065 block 1066 configuration 1067 enable 1067 group 1068 interface 1069 locale 1069 name 1070 protocol 1071 redirect 1071 redirect-url 1072 session-timeout 1072 verification 1073 captive-portal client deauthenticate 1074 show captive-portal client status 1074 show captive-portal configuration client status . . . 1076 show captive-portal interface client status . . . . . 1077 show captive-portal interface configuration status . 1079 clear captive-portal users 1080 Contents 41
Command Line Interface Guide
Page 42
... user 1081 user group 1082 user name 1083 user password 1084 user session-timeout 1085 show captive-portal configuration 1085 show captive-portal configuration interface . . . . . 1086 show captive-portal configuration locales 1088 show captive-portal configuration status 1089 show trapflags captive-portal 1090 user group 1091 user group moveusers 1092 user group name 1092...
... user 1081 user group 1082 user name 1083 user password 1084 user session-timeout 1085 show captive-portal configuration 1085 show captive-portal configuration interface . . . . . 1086 show captive-portal configuration locales 1088 show captive-portal configuration status 1089 show trapflags captive-portal 1090 user group 1091 user group moveusers 1092 user group name 1092...
Command Line Interface Guide
Page 43
sntp client poll timer 1100 sntp server 1101 sntp trusted-key 1102 sntp unicast client enable 1103 clock timezone hours-offset 1104 no clock timezone 1104 clock summer-time recurring 1105 clock summer-time date 1106 no clock summer-time 1107 show clock 1108 58 Configuration and Image File Commands 1111 clear config 1112 copy 1113 delete backup-config 1116 delete backup-image 1117 delete startup-config 1118 filedescr 1118 script apply 1119 script delete 1120 script list 1120 script validate 1122 Contents 43
sntp client poll timer 1100 sntp server 1101 sntp trusted-key 1102 sntp unicast client enable 1103 clock timezone hours-offset 1104 no clock timezone 1104 clock summer-time recurring 1105 clock summer-time date 1106 no clock summer-time 1107 show clock 1108 58 Configuration and Image File Commands 1111 clear config 1112 copy 1113 delete backup-config 1116 delete backup-image 1117 delete startup-config 1118 filedescr 1118 script apply 1119 script delete 1120 script list 1120 script validate 1122 Contents 43
Command Line Interface Guide
Page 55
... commands being entered by entering commands from a console terminal connected to the UNIX C shell. Table 1-1. This guide also provides information for configuring the PowerConnect switch, details the procedures, and provides configuration examples. Configures and displays ACL information. 1 Command Groups Introduction The Command Line Interface (CLI) is a network management application operated through a Telnet session. By...
... commands being entered by entering commands from a console terminal connected to the UNIX C shell. Table 1-1. This guide also provides information for configuring the PowerConnect switch, details the procedures, and provides configuration examples. Configures and displays ACL information. 1 Command Groups Introduction The Command Line Interface (CLI) is a network management application operated through a Telnet session. By...
Command Line Interface Guide
Page 56
DHCP l2 Relay Enables the Layer 2 DHCP Relay agent for rejection of invalid and malicious ARP packets. GVRP Configures and displays GVRP configuration and information. IGMP Snooping Querier Configures IGMP Snooping Querier and displays IGMP Snooping Querier information. LACP Configures and displays LACP information. Port Monitor Monitors activity on Spanning Tree protocol. Dynamic ARP Inspection...
DHCP l2 Relay Enables the Layer 2 DHCP Relay agent for rejection of invalid and malicious ARP packets. GVRP Configures and displays GVRP configuration and information. IGMP Snooping Querier Configures IGMP Snooping Querier and displays IGMP Snooping Querier information. LACP Configures and displays LACP information. Port Monitor Monitors activity on Spanning Tree protocol. Dynamic ARP Inspection...
Command Line Interface Guide
Page 57
... Multicasting on the system. Command Groups 57 Manages DHCP/BOOTP operations on the system. Configures IPv6 DHCP functions. Manages IPv6 shortest path operations. Configures RIP activities. Manages Address Resolution Protocol functions. Configures IGMP operations. Manages Loopback configurations. Configures IP routing and addressing. Configures PIM-DM operations. System Command Groups (continued) Command Group TACACS+ VLAN Voice VLAN...
... Multicasting on the system. Command Groups 57 Manages DHCP/BOOTP operations on the system. Configures IPv6 DHCP functions. Manages IPv6 shortest path operations. Configures RIP activities. Manages Address Resolution Protocol functions. Configures IGMP operations. Manages Loopback configurations. Configures IP routing and addressing. Configures PIM-DM operations. System Command Groups (continued) Command Group TACACS+ VLAN Voice VLAN...
Command Line Interface Guide
Page 58
..., and remote Telnet connection. Password Management Provides password management. PHY Diagnostics Diagnoses and displays the interface status. sFlow Configures sFlow monitoring. Clock Configures the system clock. Management ACL Configures and displays management access-list information. SSH Configures SSH authentication. 58 Command Groups Virtual LAN Routing (IPv4) Controls virtual LAN routing. Files Denial of Service...
..., and remote Telnet connection. Password Management Provides password management. PHY Diagnostics Diagnoses and displays the interface status. sFlow Configures sFlow monitoring. Clock Configures the system clock. Management ACL Configures and displays management access-list information. SSH Configures SSH authentication. 58 Command Groups Virtual LAN Routing (IPv4) Controls virtual LAN routing. Files Denial of Service...
Command Line Interface Guide
Page 59
Configures web-based access to the switch. Command Groups 59 Describes user commands used for entering CLI commands. Table 1-1. Configures Telnet service on the switch and displays Telnet information. System Command Groups (continued) Command Group Syslog System Management Telnet Server User Interface Web Server Description Manages and displays syslog messages. Configures the switch clock, name and authorized users.
Configures web-based access to the switch. Command Groups 59 Describes user commands used for entering CLI commands. Table 1-1. Configures Telnet service on the switch and displays Telnet information. System Command Groups (continued) Command Group Syslog System Management Telnet Server User Interface Web Server Description Manages and displays syslog messages. Configures the switch clock, name and authorized users.
Command Line Interface Guide
Page 60
...; RC - Router Open Shortest Path First Version 3 • SG - Stack Global Configuration 60 Command Groups Global Configuration • IC - Logging • LC - Interface Configuration • IP - MAC-acl • PE - Line Configuration • MA - MST Configuration • ML - Policy Class Map Configuration • R - Router Open Shortest Path First • ROSV3 - Privileged EXEC • PM - Management Access...
...; RC - Router Open Shortest Path First Version 3 • SG - Stack Global Configuration 60 Command Groups Global Configuration • IC - Logging • LC - Interface Configuration • IP - MAC-acl • PE - Line Configuration • MA - MST Configuration • ML - Policy Class Map Configuration • R - Router Open Shortest Path First • ROSV3 - Privileged EXEC • PM - Management Access...
Command Line Interface Guide
Page 61
...levels. aaa authentication enable Defines authentication method lists for a remote telnet or console. LC Command Groups 61 IPv6 Access List Configuration • v6CMC • v6DP - aaa authentication login Defines login authentication. ip http authentication Specifies authentication methods for https... TC - GC aaa authorization network Enables the switch to the GC normal level. SSH Public Key • SK - VLAN Configuration • v6ACL - • SP - GC ip https authentication Specifies authentication methods for http. password Specifies a password on ...
...levels. aaa authentication enable Defines authentication method lists for a remote telnet or console. LC Command Groups 61 IPv6 Access List Configuration • v6CMC • v6DP - aaa authentication login Defines login authentication. ip http authentication Specifies authentication methods for https... TC - GC aaa authorization network Enables the switch to the GC normal level. SSH Public Key • SK - VLAN Configuration • v6ACL - • SP - GC ip https authentication Specifies authentication methods for http. password Specifies a password on ...
Command Line Interface Guide
Page 63
... Displays the number of addresses present in the PE bridge-forwarding database. bridge multicast forbidden Forbids a port to the bridge table. IC port security max Configures the maximum addresses that are defined for the ACL. bridge aging-time Sets the address table aging time. bridge multicast forward- Enables the forwarding of...
... Displays the number of addresses present in the PE bridge-forwarding database. bridge multicast forbidden Forbids a port to the bridge table. IC port security max Configures the maximum addresses that are defined for the ACL. bridge aging-time Sets the address table aging time. bridge multicast forward- Enables the forwarding of...
Command Line Interface Guide
Page 64
... bridge multicast Displays Multicast MAC address table PE address-table information. isdp enable Enables ISDP on page 60. 64 Command Groups GC/IC isdp holdtime Configures the hold time for the specified PE interface. PE NOTE: *For the meaning of each Mode abbreviation, see "Mode Types" on page 60. ... isdp counters Clears the ISDP counters. PE clear isdp table Clears entries in locked PE ports. show bridge multicast filtering Displays the Multicast filtering configuration. show ports security addresses Displays current dynamic addresses in the ISDP table.
... bridge multicast Displays Multicast MAC address table PE address-table information. isdp enable Enables ISDP on page 60. 64 Command Groups GC/IC isdp holdtime Configures the hold time for the specified PE interface. PE NOTE: *For the meaning of each Mode abbreviation, see "Mode Types" on page 60. ... isdp counters Clears the ISDP counters. PE clear isdp table Clears entries in locked PE ports. show bridge multicast filtering Displays the Multicast filtering configuration. show ports security addresses Displays current dynamic addresses in the ISDP table.
Command Line Interface Guide
Page 65
... all DHCP Snooping statistics. PE statistics ip dhcp snooping Enables DHCP snooping globally or on page 60. GC ip dhcp snooping database Configures the persistent location of DHCP messages filtered by IC the DHCP Snooping application. ip dhcp snooping loginvalid Enables logging of the DHCP GC...IC messages. dhcp l2relay remote-id Enables user to trust a received IC DHCP Option 82. Command Groups 65 ip dhcp snooping database Configures the interval in seconds at which the GC write-delay DHCP Snooping database will be stored in persistent storage. DHCP l2 Relay Command...
... all DHCP Snooping statistics. PE statistics ip dhcp snooping Enables DHCP snooping globally or on page 60. GC ip dhcp snooping database Configures the persistent location of DHCP messages filtered by IC the DHCP Snooping application. ip dhcp snooping loginvalid Enables logging of the DHCP GC...IC messages. dhcp l2relay remote-id Enables user to trust a received IC DHCP Option 82. Command Groups 65 ip dhcp snooping database Configures the interval in seconds at which the GC write-delay DHCP Snooping database will be stored in persistent storage. DHCP l2 Relay Command...
Command Line Interface Guide
Page 66
...GC VLAN or a range of the source MAC GC mac-address address with the client MAC address in the received DHCP message. Configures an interface as trusted for DHCP snooping. GC Resets the statistics for Dynamic ARP PE Inspection on page 60. Enables additional validation ... MAC address validation or IP address validation on the received ARP packets. 66 Command Groups Command Description Mode* ip dhcp snooping trust Configure a port as trusted for Dynamic IC ARP Inspection. show ip dhcp snooping Displays the DHCP snooping filtration PE statistics statistics. IC ip...
...GC VLAN or a range of the source MAC GC mac-address address with the client MAC address in the received DHCP message. Configures an interface as trusted for DHCP snooping. GC Resets the statistics for Dynamic ARP PE Inspection on page 60. Enables additional validation ... MAC address validation or IP address validation on the received ARP packets. 66 Command Groups Command Description Mode* ip dhcp snooping trust Configure a port as trusted for Dynamic IC ARP Inspection. show ip dhcp snooping Displays the DHCP snooping filtration PE statistics statistics. IC ip...
Command Line Interface Guide
Page 67
... flowcontrol interface ethernet interface range ethernet mtu Description Mode* Clears statistics on a given interface. GC Enters the interface configuration mode to GC configure multiple Ethernet type interfaces. Enables jumbo frames on all the VLANs in ARP packet validation. show ip arp inspection...For the meaning of a packet or maximum transmission unit (MTU). show arp access-list Displays the configured ARP ACLs with the PE rules. permit ip host mac host Configures a rule for a valid IP address and ARPA MAC address combination used in the given VLAN ...
... flowcontrol interface ethernet interface range ethernet mtu Description Mode* Clears statistics on a given interface. GC Enters the interface configuration mode to GC configure multiple Ethernet type interfaces. Enables jumbo frames on all the VLANs in ARP packet validation. show ip arp inspection...For the meaning of a packet or maximum transmission unit (MTU). show arp access-list Displays the configured ARP ACLs with the PE rules. permit ip host mac host Configures a rule for a valid IP address and ARPA MAC address combination used in the given VLAN ...
Command Line Interface Guide
Page 68
... given Ethernet IC interface when not using auto-negotiation. Command Description Mode* negotiation Enables auto-negotiation operation for all configured interfaces. UE show interfaces status Displays the status for the IC speed and duplex parameters of a given interface. ... Enables Unicast storm control. Enables GVRP globally. show storm-control Displays the storm control configuration. UE show interfaces configuration Displays the configuration for all configured UE interfaces. IC storm-control multicast Enables the switch to count Multicast packets IC together...
... given Ethernet IC interface when not using auto-negotiation. Command Description Mode* negotiation Enables auto-negotiation operation for all configured interfaces. UE show interfaces status Displays the status for the IC speed and duplex parameters of a given interface. ... Enables Unicast storm control. Enables GVRP globally. show storm-control Displays the storm control configuration. UE show interfaces configuration Displays the configuration for all configured UE interfaces. IC storm-control multicast Enables the switch to count Multicast packets IC together...