Command Line Interface Guide
Page 4
enable authentication 194 enable password 194 ip http authentication 195 ip https authentication 196 login authentication 197 password (Line Configuration 198 password (User EXEC 199 show authentication methods 200 show users accounts 201 show users login-history 202 username 203 5 ACL Commands 205 deny | permit 207 ip access-group 209 no ip access-group 209 mac access-group 210 mac access-list extended 211 mac access-list extended rename 212 show ip access-lists 213 show mac access-list 214 4 Contents
enable authentication 194 enable password 194 ip http authentication 195 ip https authentication 196 login authentication 197 password (Line Configuration 198 password (User EXEC 199 show authentication methods 200 show users accounts 201 show users login-history 202 username 203 5 ACL Commands 205 deny | permit 207 ip access-group 209 no ip access-group 209 mac access-group 210 mac access-list extended 211 mac access-list extended rename 212 show ip access-lists 213 show mac access-list 214 4 Contents
Command Line Interface Guide
Page 6
isdp advertise-v2 239 isdp enable 239 isdp holdtime 240 isdp timer 241 show isdp 241 show isdp entry 243 show isdp interface 244 show isdp neighbors 246 show isdp traffic 248 8 DHCP Layer 2 Relay Commands 251 dhcp l2relay (Interface Configuration 252 dhcp l2relay circuit-id 253 dhcp l2relay remote-id 254 dhcp l2relay trust 254 dhcp l2relay vlan 255 9 DHCP Snooping Commands 257 ip dhcp snooping 258 ip dhcp snooping binding 259 ip dhcp snooping database 260 ip dhcp snooping database write-delay 261 6 Contents
isdp advertise-v2 239 isdp enable 239 isdp holdtime 240 isdp timer 241 show isdp 241 show isdp entry 243 show isdp interface 244 show isdp neighbors 246 show isdp traffic 248 8 DHCP Layer 2 Relay Commands 251 dhcp l2relay (Interface Configuration 252 dhcp l2relay circuit-id 253 dhcp l2relay remote-id 254 dhcp l2relay trust 254 dhcp l2relay vlan 255 9 DHCP Snooping Commands 257 ip dhcp snooping 258 ip dhcp snooping binding 259 ip dhcp snooping database 260 ip dhcp snooping database write-delay 261 6 Contents
Command Line Interface Guide
Page 9
... GVRP Commands 319 garp timer 320 gvrp enable (global 322 gvrp enable (interface 322 gvrp registration-forbid 323 gvrp vlan-creation-forbid 324 show gvrp configuration 325 show gvrp error-statistics 326 show gvrp statistics 328 13 IGMP Snooping Commands 331 ip igmp snooping (interface 332 ip igmp snooping host-time...
... GVRP Commands 319 garp timer 320 gvrp enable (global 322 gvrp enable (interface 322 gvrp registration-forbid 323 gvrp vlan-creation-forbid 324 show gvrp configuration 325 show gvrp error-statistics 326 show gvrp statistics 328 13 IGMP Snooping Commands 331 ip igmp snooping (interface 332 ip igmp snooping host-time...
Command Line Interface Guide
Page 18
... loopguard 547 spanning-tree max-age 548 spanning-tree max-hops 549 spanning-tree mode 549 spanning-tree mst 0 external-cost 550 spanning-tree mst configuration 551 spanning-tree mst cost 552 spanning-tree mst port-priority 553 spanning-tree mst priority 554 spanning-tree portfast 555 spanning-tree portfast bpdufilter...
... loopguard 547 spanning-tree max-age 548 spanning-tree max-hops 549 spanning-tree mode 549 spanning-tree mst 0 external-cost 550 spanning-tree mst configuration 551 spanning-tree mst cost 552 spanning-tree mst port-priority 553 spanning-tree mst priority 554 spanning-tree portfast 555 spanning-tree portfast bpdufilter...
Command Line Interface Guide
Page 41
https port 1063 show captive-portal 1064 show captive-portal status 1065 block 1066 configuration 1067 enable 1067 group 1068 interface 1069 locale 1069 name 1070 protocol 1071 redirect 1071 redirect-url 1072 session-timeout 1072 verification 1073 captive-portal client deauthenticate 1074 show captive-portal client status 1074 show captive-portal configuration client status . . . 1076 show captive-portal interface client status . . . . . 1077 show captive-portal interface configuration status . 1079 clear captive-portal users 1080 Contents 41
https port 1063 show captive-portal 1064 show captive-portal status 1065 block 1066 configuration 1067 enable 1067 group 1068 interface 1069 locale 1069 name 1070 protocol 1071 redirect 1071 redirect-url 1072 session-timeout 1072 verification 1073 captive-portal client deauthenticate 1074 show captive-portal client status 1074 show captive-portal configuration client status . . . 1076 show captive-portal interface client status . . . . . 1077 show captive-portal interface configuration status . 1079 clear captive-portal users 1080 Contents 41
Command Line Interface Guide
Page 42
... user 1081 user group 1082 user name 1083 user password 1084 user session-timeout 1085 show captive-portal configuration 1085 show captive-portal configuration interface . . . . . 1086 show captive-portal configuration locales 1088 show captive-portal configuration status 1089 show trapflags captive-portal 1090 user group 1091 user group moveusers 1092 user group name 1092...
... user 1081 user group 1082 user name 1083 user password 1084 user session-timeout 1085 show captive-portal configuration 1085 show captive-portal configuration interface . . . . . 1086 show captive-portal configuration locales 1088 show captive-portal configuration status 1089 show trapflags captive-portal 1090 user group 1091 user group moveusers 1092 user group name 1092...
Command Line Interface Guide
Page 43
sntp client poll timer 1100 sntp server 1101 sntp trusted-key 1102 sntp unicast client enable 1103 clock timezone hours-offset 1104 no clock timezone 1104 clock summer-time recurring 1105 clock summer-time date 1106 no clock summer-time 1107 show clock 1108 58 Configuration and Image File Commands 1111 clear config 1112 copy 1113 delete backup-config 1116 delete backup-image 1117 delete startup-config 1118 filedescr 1118 script apply 1119 script delete 1120 script list 1120 script validate 1122 Contents 43
sntp client poll timer 1100 sntp server 1101 sntp trusted-key 1102 sntp unicast client enable 1103 clock timezone hours-offset 1104 no clock timezone 1104 clock summer-time recurring 1105 clock summer-time date 1106 no clock summer-time 1107 show clock 1108 58 Configuration and Image File Commands 1111 clear config 1112 copy 1113 delete backup-config 1116 delete backup-image 1117 delete startup-config 1118 filedescr 1118 script apply 1119 script delete 1120 script list 1120 script validate 1122 Contents 43
Command Line Interface Guide
Page 55
... being entered by entering commands from a console terminal connected to the UNIX C shell. A switch can be configured and maintained by a terminal keyboard and the output displayed as text via a terminal monitor. Table 1-1. Command ... entering commands, the user has greater configuration flexibility. This guide also provides information for configuring the PowerConnect switch, details the procedures, and provides configuration examples. System Command Groups Command Group Layer 2 Commands AAA ACL Description Configures connection security including authorization and passwords....
... being entered by entering commands from a console terminal connected to the UNIX C shell. A switch can be configured and maintained by a terminal keyboard and the output displayed as text via a terminal monitor. Table 1-1. Command ... entering commands, the user has greater configuration flexibility. This guide also provides information for configuring the PowerConnect switch, details the procedures, and provides configuration examples. System Command Groups Command Group Layer 2 Commands AAA ACL Description Configures connection security including authorization and passwords....
Command Line Interface Guide
Page 56
... address tables. DHCP l2 Relay Enables the Layer 2 DHCP Relay agent for IPv6. GVRP Configures and displays GVRP configuration and information. IPv6 MLD Snooping Configures IPv6 MLD Snooping. Port Channel Configures and displays Port channel information. DHCP Snooping Configures DHCP snooping and whether an interface is trusted for example ports, storm control, port speed and...
... address tables. DHCP l2 Relay Enables the Layer 2 DHCP Relay agent for IPv6. GVRP Configures and displays GVRP configuration and information. IPv6 MLD Snooping Configures IPv6 MLD Snooping. Port Channel Configures and displays Port channel information. DHCP Snooping Configures DHCP snooping and whether an interface is trusted for example ports, storm control, port speed and...
Command Line Interface Guide
Page 57
Table 1-1. Manages Address Resolution Protocol functions. Configures IPv6 routing and addressing. Configures relay of UDP packets. Configures PIM-SM operations. Configures IPv6 DHCP functions. Manages IPv6 shortest path operations. Configures PIM-DM operations. Configures voice VLANs and displays voice VLAN information Configures and displays commands related to 802.1x security protocol. Manages DHCP/BOOTP operations on the system...
Table 1-1. Manages Address Resolution Protocol functions. Configures IPv6 routing and addressing. Configures relay of UDP packets. Configures PIM-SM operations. Configures IPv6 DHCP functions. Manages IPv6 shortest path operations. Configures PIM-DM operations. Configures voice VLANs and displays voice VLAN information Configures and displays commands related to 802.1x security protocol. Manages DHCP/BOOTP operations on the system...
Command Line Interface Guide
Page 58
...telnet console. Password Management Provides password management. Configuration and Image Manages the switch configuration files. Power Over Ethernet (PoE) Configures PoE and displays PoE information. RMON Can be configured through the CLI and displays RMON information. ... Portal Blocks clients from accessing network until user verification is not found. Utility Commands Auto Config Automatically configures switch when a configuration file is established. Virtual Router Redundancy (IPv4) Manages router redundancy on the system. System Command Groups...
...telnet console. Password Management Provides password management. Configuration and Image Manages the switch configuration files. Power Over Ethernet (PoE) Configures PoE and displays PoE information. RMON Can be configured through the CLI and displays RMON information. ... Portal Blocks clients from accessing network until user verification is not found. Utility Commands Auto Config Automatically configures switch when a configuration file is established. Virtual Router Redundancy (IPv4) Manages router redundancy on the system. System Command Groups...
Command Line Interface Guide
Page 59
Table 1-1. Describes user commands used for entering CLI commands. Configures the switch clock, name and authorized users. System Command Groups (continued) Command Group Syslog System Management Telnet Server User Interface Web Server Description Manages and displays syslog messages. Configures web-based access to the switch. Configures Telnet service on the switch and displays Telnet information. Command Groups 59
Table 1-1. Describes user commands used for entering CLI commands. Configures the switch clock, name and authorized users. System Command Groups (continued) Command Group Syslog System Management Telnet Server User Interface Web Server Description Manages and displays syslog messages. Configures web-based access to the switch. Configures Telnet service on the switch and displays Telnet information. Command Groups 59
Command Line Interface Guide
Page 60
... tables on the following pages use these abbreviations for Command Mode names. • ARPA - ARP ACL Configuration • CC - Captive Portal Configuration • CPI - Key Chain • KE - Logging • LC - Router Configuration • ROSPF - Stack Global Configuration 60 Command Groups Management Access-level • MC - Router Open Shortest Path First • ROSV3 - Line...
... tables on the following pages use these abbreviations for Command Mode names. • ARPA - ARP ACL Configuration • CC - Captive Portal Configuration • CPI - Key Chain • KE - Logging • LC - Router Configuration • ROSPF - Stack Global Configuration 60 Command Groups Management Access-level • MC - Router Open Shortest Path First • ROSV3 - Line...
Command Line Interface Guide
Page 61
.... LC Command Groups 61 SSH Public Key-chain • TC - VLAN Configuration • v6ACL - GC ip https authentication Specifies authentication methods for http. IPv6 DHCP Pool Configuration Layer 2 Commands AAA Command Description Mode* aaa authentication dot1x Specifies one or ... accounting (AAA) methods for a remote telnet or console. password Specifies a password on interfaces running IEEE 802.1X. TACACS Configuration • UE - GC login authentication Specifies the login authentication method list LC for use on a line. aaa authentication enable...
.... LC Command Groups 61 SSH Public Key-chain • TC - VLAN Configuration • v6ACL - GC ip https authentication Specifies authentication methods for http. IPv6 DHCP Pool Configuration Layer 2 Commands AAA Command Description Mode* aaa authentication dot1x Specifies one or ... accounting (AAA) methods for a remote telnet or console. password Specifies a password on interfaces running IEEE 802.1X. TACACS Configuration • UE - GC login authentication Specifies the login authentication method list LC for use on a line. aaa authentication enable...
Command Line Interface Guide
Page 63
... while the port is in the bridge- bridge multicast forbidden Forbids a port to the group. Enables the forwarding of Multicast addresses. IC port security max Configures the maximum addresses that are defined for the ACL. show bridge address-table Displays statically created entries in port security mode. PE static forwarding database...
... while the port is in the bridge- bridge multicast forbidden Forbids a port to the group. Enables the forwarding of Multicast addresses. IC port security max Configures the maximum addresses that are defined for the ACL. show bridge address-table Displays statically created entries in port security mode. PE static forwarding database...
Command Line Interface Guide
Page 64
...-lock status. PE clear isdp table Clears entries in locked PE ports. isdp timer Sets period of neighboring devices. GC/IC isdp holdtime Configures the hold time for the specified PE interface. isdp enable Enables ISDP on page 60. CDP Interoperability Command Description Mode* clear isdp counters... interface Displays ISDP settings for ISDP packets that GC the switch transmits. PE show bridge multicast filtering Displays the Multicast filtering configuration. PE isdp advertise-v2 Enables the sending of ISDP version 2 packets GC from the device.
...-lock status. PE clear isdp table Clears entries in locked PE ports. isdp timer Sets period of neighboring devices. GC/IC isdp holdtime Configures the hold time for the specified PE interface. isdp enable Enables ISDP on page 60. CDP Interoperability Command Description Mode* clear isdp counters... interface Displays ISDP settings for ISDP packets that GC the switch transmits. PE show bridge multicast filtering Displays the Multicast filtering configuration. PE isdp advertise-v2 Enables the sending of ISDP version 2 packets GC from the device.
Command Line Interface Guide
Page 65
...an GC/IC interface. DHCP Snooping Command Description Mode* clear ip dhcp snooping Clears all DHCP Snooping statistics. ip dhcp snooping database Configures the interval in seconds at which the GC write-delay DHCP Snooping database will be stored in persistent storage. ip dhcp snooping limit... of GC VLANs. dhcp l2relay remote-id Enables user to trust a received IC DHCP Option 82. GC ip dhcp snooping database Configures the persistent location of DHCP messages filtered by IC the DHCP Snooping application. PE statistics ip dhcp snooping Enables DHCP snooping globally or...
...an GC/IC interface. DHCP Snooping Command Description Mode* clear ip dhcp snooping Clears all DHCP Snooping statistics. ip dhcp snooping database Configures the interval in seconds at which the GC write-delay DHCP Snooping database will be stored in persistent storage. ip dhcp snooping limit... of GC VLANs. dhcp l2relay remote-id Enables user to trust a received IC DHCP Option 82. GC ip dhcp snooping database Configures the persistent location of DHCP messages filtered by IC the DHCP Snooping application. PE statistics ip dhcp snooping Enables DHCP snooping globally or...
Command Line Interface Guide
Page 66
..." on the received ARP packets. 66 Command Groups show ip dhcp snooping Displays the DHCP snooping global and per PE port configuration. Configures the ARP ACL to filter invalid ARP packets. Enables additional validation checks like source GC MAC address validation, destination MAC address ...snooping. IC ip dhcp snooping verify Enables the verification of the PE interfaces interfaces. Command Description Mode* ip dhcp snooping trust Configure a port as trusted for Dynamic IC ARP Inspection. show ip dhcp snooping Displays the DHCP Snooping status of the source MAC...
..." on the received ARP packets. 66 Command Groups show ip dhcp snooping Displays the DHCP snooping global and per PE port configuration. Configures the ARP ACL to filter invalid ARP packets. Enables additional validation checks like source GC MAC address validation, destination MAC address ...snooping. IC ip dhcp snooping verify Enables the verification of the PE interfaces interfaces. Command Description Mode* ip dhcp snooping trust Configure a port as trusted for Dynamic IC ARP Inspection. show ip dhcp snooping Displays the DHCP Snooping status of the source MAC...
Command Line Interface Guide
Page 67
... IC given Ethernet interface when not using autonegotiation. show ip arp inspection ethernet Displays the Dynamic ARP Inspection PE configuration on page 60. Ethernet Configuration Command clear counters description duplex flowcontrol interface ethernet interface range ethernet mtu Description Mode* Clears statistics on a given ... of the ARP packets PE statistics processed by IC adjusting the maximum size of VLANs. show arp access-list Displays the configured ARP ACLs with the PE rules. NOTE: *For the meaning of each Mode abbreviation, see "Mode Types" on all...
... IC given Ethernet interface when not using autonegotiation. show ip arp inspection ethernet Displays the Dynamic ARP Inspection PE configuration on page 60. Ethernet Configuration Command clear counters description duplex flowcontrol interface ethernet interface range ethernet mtu Description Mode* Clears statistics on a given ... of the ARP packets PE statistics processed by IC adjusting the maximum size of VLANs. show arp access-list Displays the configured ARP ACLs with the PE rules. NOTE: *For the meaning of each Mode abbreviation, see "Mode Types" on all...
Command Line Interface Guide
Page 68
...IC together with Broadcast packets. show interfaces advertise Displays information about auto negotiation PE advertisement. show interfaces configuration Displays the configuration for the entire PE switch. storm-control unicast Enables Unicast storm control. show interfaces counters Displays traffic ...negotiation Enables auto-negotiation operation for all the GVRP statistics information. show storm-control Displays the storm control configuration. UE show interfaces status Displays the status for the IC speed and duplex parameters of a given interface....
...IC together with Broadcast packets. show interfaces advertise Displays information about auto negotiation PE advertisement. show interfaces configuration Displays the configuration for the entire PE switch. storm-control unicast Enables Unicast storm control. show interfaces counters Displays traffic ...negotiation Enables auto-negotiation operation for all the GVRP statistics information. show storm-control Displays the storm control configuration. UE show interfaces status Displays the status for the IC speed and duplex parameters of a given interface....