Command Line Interface Guide
Page 4
enable authentication 194 enable password 194 ip http authentication 195 ip https authentication 196 login authentication 197 password (Line Configuration 198 password (User EXEC 199 show authentication methods 200 show users accounts 201 show users login-history 202 username 203 5 ACL Commands 205 deny | permit 207 ip access-group 209 no ip access-group 209 mac access-group 210 mac access-list extended 211 mac access-list extended rename 212 show ip access-lists 213 show mac access-list 214 4 Contents
enable authentication 194 enable password 194 ip http authentication 195 ip https authentication 196 login authentication 197 password (Line Configuration 198 password (User EXEC 199 show authentication methods 200 show users accounts 201 show users login-history 202 username 203 5 ACL Commands 205 deny | permit 207 ip access-group 209 no ip access-group 209 mac access-group 210 mac access-list extended 211 mac access-list extended rename 212 show ip access-lists 213 show mac access-list 214 4 Contents
Command Line Interface Guide
Page 6
isdp advertise-v2 239 isdp enable 239 isdp holdtime 240 isdp timer 241 show isdp 241 show isdp entry 243 show isdp interface 244 show isdp neighbors 246 show isdp traffic 248 8 DHCP Layer 2 Relay Commands 251 dhcp l2relay (Interface Configuration 252 dhcp l2relay circuit-id 253 dhcp l2relay remote-id 254 dhcp l2relay trust 254 dhcp l2relay vlan 255 9 DHCP Snooping Commands 257 ip dhcp snooping 258 ip dhcp snooping binding 259 ip dhcp snooping database 260 ip dhcp snooping database write-delay 261 6 Contents
isdp advertise-v2 239 isdp enable 239 isdp holdtime 240 isdp timer 241 show isdp 241 show isdp entry 243 show isdp interface 244 show isdp neighbors 246 show isdp traffic 248 8 DHCP Layer 2 Relay Commands 251 dhcp l2relay (Interface Configuration 252 dhcp l2relay circuit-id 253 dhcp l2relay remote-id 254 dhcp l2relay trust 254 dhcp l2relay vlan 255 9 DHCP Snooping Commands 257 ip dhcp snooping 258 ip dhcp snooping binding 259 ip dhcp snooping database 260 ip dhcp snooping database write-delay 261 6 Contents
Command Line Interface Guide
Page 9
... GVRP Commands 319 garp timer 320 gvrp enable (global 322 gvrp enable (interface 322 gvrp registration-forbid 323 gvrp vlan-creation-forbid 324 show gvrp configuration 325 show gvrp error-statistics 326 show gvrp statistics 328 13 IGMP Snooping Commands 331 ip igmp snooping (interface 332 ip igmp snooping host-time...
... GVRP Commands 319 garp timer 320 gvrp enable (global 322 gvrp enable (interface 322 gvrp registration-forbid 323 gvrp vlan-creation-forbid 324 show gvrp configuration 325 show gvrp error-statistics 326 show gvrp statistics 328 13 IGMP Snooping Commands 331 ip igmp snooping (interface 332 ip igmp snooping host-time...
Command Line Interface Guide
Page 18
... loopguard 547 spanning-tree max-age 548 spanning-tree max-hops 549 spanning-tree mode 549 spanning-tree mst 0 external-cost 550 spanning-tree mst configuration 551 spanning-tree mst cost 552 spanning-tree mst port-priority 553 spanning-tree mst priority 554 spanning-tree portfast 555 spanning-tree portfast bpdufilter...
... loopguard 547 spanning-tree max-age 548 spanning-tree max-hops 549 spanning-tree mode 549 spanning-tree mst 0 external-cost 550 spanning-tree mst configuration 551 spanning-tree mst cost 552 spanning-tree mst port-priority 553 spanning-tree mst priority 554 spanning-tree portfast 555 spanning-tree portfast bpdufilter...
Command Line Interface Guide
Page 41
https port 1063 show captive-portal 1064 show captive-portal status 1065 block 1066 configuration 1067 enable 1067 group 1068 interface 1069 locale 1069 name 1070 protocol 1071 redirect 1071 redirect-url 1072 session-timeout 1072 verification 1073 captive-portal client deauthenticate 1074 show captive-portal client status 1074 show captive-portal configuration client status . . . 1076 show captive-portal interface client status . . . . . 1077 show captive-portal interface configuration status . 1079 clear captive-portal users 1080 Contents 41
https port 1063 show captive-portal 1064 show captive-portal status 1065 block 1066 configuration 1067 enable 1067 group 1068 interface 1069 locale 1069 name 1070 protocol 1071 redirect 1071 redirect-url 1072 session-timeout 1072 verification 1073 captive-portal client deauthenticate 1074 show captive-portal client status 1074 show captive-portal configuration client status . . . 1076 show captive-portal interface client status . . . . . 1077 show captive-portal interface configuration status . 1079 clear captive-portal users 1080 Contents 41
Command Line Interface Guide
Page 42
... user 1081 user group 1082 user name 1083 user password 1084 user session-timeout 1085 show captive-portal configuration 1085 show captive-portal configuration interface . . . . . 1086 show captive-portal configuration locales 1088 show captive-portal configuration status 1089 show trapflags captive-portal 1090 user group 1091 user group moveusers 1092 user group name 1092...
... user 1081 user group 1082 user name 1083 user password 1084 user session-timeout 1085 show captive-portal configuration 1085 show captive-portal configuration interface . . . . . 1086 show captive-portal configuration locales 1088 show captive-portal configuration status 1089 show trapflags captive-portal 1090 user group 1091 user group moveusers 1092 user group name 1092...
Command Line Interface Guide
Page 43
sntp client poll timer 1100 sntp server 1101 sntp trusted-key 1102 sntp unicast client enable 1103 clock timezone hours-offset 1104 no clock timezone 1104 clock summer-time recurring 1105 clock summer-time date 1106 no clock summer-time 1107 show clock 1108 58 Configuration and Image File Commands 1111 clear config 1112 copy 1113 delete backup-config 1116 delete backup-image 1117 delete startup-config 1118 filedescr 1118 script apply 1119 script delete 1120 script list 1120 script validate 1122 Contents 43
sntp client poll timer 1100 sntp server 1101 sntp trusted-key 1102 sntp unicast client enable 1103 clock timezone hours-offset 1104 no clock timezone 1104 clock summer-time recurring 1105 clock summer-time date 1106 no clock summer-time 1107 show clock 1108 58 Configuration and Image File Commands 1111 clear config 1112 copy 1113 delete backup-config 1116 delete backup-image 1117 delete startup-config 1118 filedescr 1118 script apply 1119 script delete 1120 script list 1120 script validate 1122 Contents 43
Command Line Interface Guide
Page 55
...output displayed as text via a terminal monitor. Configures and displays ACL information. Command Groups 55 Basic installation configuration is based solely on textual input and output... driven software application. System Command Groups Command Group Layer 2 Commands AAA ACL Description Configures connection security including authorization and passwords. The CLI can be completed before using this ...and describes the command functionality. By directly entering commands, the user has greater configuration flexibility. The CLI is a basic command-line interpreter similar to an EIA/...
...output displayed as text via a terminal monitor. Configures and displays ACL information. Command Groups 55 Basic installation configuration is based solely on textual input and output... driven software application. System Command Groups Command Group Layer 2 Commands AAA ACL Description Configures connection security including authorization and passwords. The CLI can be completed before using this ...and describes the command functionality. By directly entering commands, the user has greater configuration flexibility. The CLI is a basic command-line interpreter similar to an EIA/...
Command Line Interface Guide
Page 56
... 2 DHCP Relay agent for example ports, storm control, port speed and auto-negotiation. Ethernet Configuration Configures all port configuration options for an interface. IGMP Snooping Configures IGMP snooping and displays IGMP configuration and IGMP information. Port Channel Configures and displays Port channel information. DHCP Snooping Configures DHCP snooping and whether an interface is trusted for filtering. QoS...
... 2 DHCP Relay agent for example ports, storm control, port speed and auto-negotiation. Ethernet Configuration Configures all port configuration options for an interface. IGMP Snooping Configures IGMP snooping and displays IGMP configuration and IGMP information. Port Channel Configures and displays Port channel information. DHCP Snooping Configures DHCP snooping and whether an interface is trusted for filtering. QoS...
Command Line Interface Guide
Page 57
...) Routing Information Protocol (IPv4) Description Configures and displays TACACS+ information. Configures relay of UDP packets. Configures PIM-SM operations. Table 1-1. Configures DVMRP operations. Configures IPv6 routing and addressing. Manages Loopback configurations. Command Groups 57 Manages IGMP Proxy on the system. Configures PIM-DM operations. Configures voice VLANs and displays voice VLAN information Configures and displays commands related to 802...
...) Routing Information Protocol (IPv4) Description Configures and displays TACACS+ information. Configures relay of UDP packets. Configures PIM-SM operations. Table 1-1. Configures DVMRP operations. Configures IPv6 routing and addressing. Manages Loopback configurations. Command Groups 57 Manages IGMP Proxy on the system. Configures PIM-DM operations. Configures voice VLANs and displays voice VLAN information Configures and displays commands related to 802...
Command Line Interface Guide
Page 58
... console, SSH, and remote Telnet connection. PHY Diagnostics Diagnoses and displays the interface status. Table 1-1. sFlow Configures sFlow monitoring. Utility Commands Auto Config Automatically configures switch when a configuration file is established. Virtual LAN Routing (IPv4) Controls virtual LAN routing. Captive Portal Blocks clients from accessing network until user verification is not found. System...
... console, SSH, and remote Telnet connection. PHY Diagnostics Diagnoses and displays the interface status. Table 1-1. sFlow Configures sFlow monitoring. Utility Commands Auto Config Automatically configures switch when a configuration file is established. Virtual LAN Routing (IPv4) Controls virtual LAN routing. Captive Portal Blocks clients from accessing network until user verification is not found. System...
Command Line Interface Guide
Page 59
Table 1-1. Configures Telnet service on the switch and displays Telnet information. Command Groups 59 System Command Groups (continued) Command Group Syslog System Management Telnet Server User Interface Web Server Description Manages and displays syslog messages. Configures the switch clock, name and authorized users. Describes user commands used for entering CLI commands. Configures web-based access to the switch.
Table 1-1. Configures Telnet service on the switch and displays Telnet information. Command Groups 59 System Command Groups (continued) Command Group Syslog System Management Telnet Server User Interface Web Server Description Manages and displays syslog messages. Configures the switch clock, name and authorized users. Describes user commands used for entering CLI commands. Configures web-based access to the switch.
Command Line Interface Guide
Page 60
... - Management Access-level • MC - Router RIP Configuration • RC - IP Access List Configuration • KC - Key • L - Router Configuration • ROSPF - Captive Portal Configuration • CPI - Privileged EXEC • PM - Policy Map Configuration • PCGC - Interface Configuration • IP - MST Configuration • ML - Policy Map Global Configuration • PCMC - ARP ACL Configuration • CC - Captive Portal Instance •...
... - Management Access-level • MC - Router RIP Configuration • RC - IP Access List Configuration • KC - Key • L - Router Configuration • ROSPF - Captive Portal Configuration • CPI - Privileged EXEC • PM - Policy Map Configuration • PCGC - Interface Configuration • IP - MST Configuration • ML - Policy Map Global Configuration • PCMC - ARP ACL Configuration • CC - Captive Portal Instance •...
Command Line Interface Guide
Page 61
...GC accessing higher privilege levels. GC login authentication Specifies the login authentication method list LC for https. IPv6 Access List Configuration • v6CMC • v6DP - LC Command Groups 61 • SP - enable authentication Specifies the authentication ...Defines login authentication. password Specifies a password on interfaces running IEEE 802.1X. TACACS Configuration • UE - SSH Public Key • SK - IPv6 DHCP Pool Configuration Layer 2 Commands AAA Command Description Mode* aaa authentication dot1x Specifies one or more ...
...GC accessing higher privilege levels. GC login authentication Specifies the login authentication method list LC for https. IPv6 Access List Configuration • v6CMC • v6DP - LC Command Groups 61 • SP - enable authentication Specifies the authentication ...Defines login authentication. password Specifies a password on interfaces running IEEE 802.1X. TACACS Configuration • UE - SSH Public Key • SK - IPv6 DHCP Pool Configuration Layer 2 Commands AAA Command Description Mode* aaa authentication dot1x Specifies one or more ...
Command Line Interface Guide
Page 63
bridge aging-time Sets the address table aging time. IC port security max Configures the maximum addresses that are defined for the ACL. PE static forwarding database. NOTE: *For the meaning of each Mode abbreviation, see "Mode Types" on ...
bridge aging-time Sets the address table aging time. IC port security max Configures the maximum addresses that are defined for the ACL. PE static forwarding database. NOTE: *For the meaning of each Mode abbreviation, see "Mode Types" on ...
Command Line Interface Guide
Page 64
...* clear isdp counters Clears the ISDP counters. Command Description Mode* show isdp entry Displays ISDP entries. PE show bridge multicast filtering Displays the Multicast filtering configuration. GC/IC isdp holdtime Configures the hold time for the specified PE interface. isdp enable Enables ISDP on page 60. show isdp traffic Displays ISDP statistics.
...* clear isdp counters Clears the ISDP counters. Command Description Mode* show isdp entry Displays ISDP entries. PE show bridge multicast filtering Displays the Multicast filtering configuration. GC/IC isdp holdtime Configures the hold time for the specified PE interface. isdp enable Enables ISDP on page 60. show isdp traffic Displays ISDP statistics.
Command Line Interface Guide
Page 65
...maximum rate of DHCP messages filtered by IC the DHCP Snooping application. dhcp l2relay trust Configures an interface to set the DHCP Option 82 GC Circuit ID for a VLAN. ip dhcp snooping database Configures the interval in seconds at which the GC write-delay DHCP Snooping database will be stored...the L2 DHCP Relay agent for a set the DHCP Option 82 GC Remote ID for an GC/IC interface. GC/IC ip dhcp snooping binding Configures a static DHCP Snooping binding. dhcp l2relay circuit-id Enables user to trust a received IC DHCP Option 82. ip dhcp snooping loginvalid Enables logging...
...maximum rate of DHCP messages filtered by IC the DHCP Snooping application. dhcp l2relay trust Configures an interface to set the DHCP Option 82 GC Circuit ID for a VLAN. ip dhcp snooping database Configures the interval in seconds at which the GC write-delay DHCP Snooping database will be stored...the L2 DHCP Relay agent for a set the DHCP Option 82 GC Remote ID for an GC/IC interface. GC/IC ip dhcp snooping binding Configures a static DHCP Snooping binding. dhcp l2relay circuit-id Enables user to trust a received IC DHCP Option 82. ip dhcp snooping loginvalid Enables logging...
Command Line Interface Guide
Page 66
... MAC address validation or IP address validation on page 60. show ip dhcp snooping Displays the DHCP snooping global and per PE port configuration. Configures the ARP ACL to be used for DHCP snooping. Dynamic ARP Inspection Command arp access-list clear counters ip arp inspection ip arp ... 66 Command Groups show ip dhcp snooping binding Displays the DHCP snooping binding entries. NOTE: *For the meaning of the PE interfaces interfaces. Configures an interface as trusted for a single GC VLAN or a range of the source MAC GC mac-address address with the client MAC address ...
... MAC address validation or IP address validation on page 60. show ip dhcp snooping Displays the DHCP snooping global and per PE port configuration. Configures the ARP ACL to be used for DHCP snooping. Dynamic ARP Inspection Command arp access-list clear counters ip arp inspection ip arp ... 66 Command Groups show ip dhcp snooping binding Displays the DHCP snooping binding entries. NOTE: *For the meaning of the PE interfaces interfaces. Configures an interface as trusted for a single GC VLAN or a range of the source MAC GC mac-address address with the client MAC address ...
Command Line Interface Guide
Page 67
... interface when not using autonegotiation. show ip arp inspection ethernet Displays the Dynamic ARP Inspection PE configuration on page 60. Ethernet Configuration Command clear counters description duplex flowcontrol interface ethernet interface range ethernet mtu Description Mode* Clears statistics on a...MAC address combination used in the given VLAN range. show ip arp inspection vlan Displays the Dynamic ARP Inspection PE configuration on an interface by Dynamic ARP Inspection. show ip arp inspection Displays the statistics of VLANs. NOTE: *For the...
... interface when not using autonegotiation. show ip arp inspection ethernet Displays the Dynamic ARP Inspection PE configuration on page 60. Ethernet Configuration Command clear counters description duplex flowcontrol interface ethernet interface range ethernet mtu Description Mode* Clears statistics on a...MAC address combination used in the given VLAN range. show ip arp inspection vlan Displays the Dynamic ARP Inspection PE configuration on an interface by Dynamic ARP Inspection. show ip arp inspection Displays the statistics of VLANs. NOTE: *For the...
Command Line Interface Guide
Page 68
...Command Groups show interfaces description Displays the description for all the GVRP statistics information. UE show interfaces configuration Displays the configuration for all configured UE interfaces. IC storm-control multicast Enables the switch to count Multicast packets IC together with Broadcast... packets. Enables GVRP globally. UE show statistics ethernet Displays statistics for one port or for all configured interfaces. IC speed Configures the speed of a given Ethernet IC interface when not using auto-negotiation. Adjusts the GARP application ...
...Command Groups show interfaces description Displays the description for all the GVRP statistics information. UE show interfaces configuration Displays the configuration for all configured UE interfaces. IC storm-control multicast Enables the switch to count Multicast packets IC together with Broadcast... packets. Enables GVRP globally. UE show statistics ethernet Displays statistics for one port or for all configured interfaces. IC speed Configures the speed of a given Ethernet IC interface when not using auto-negotiation. Adjusts the GARP application ...