Command Line Interface Guide
Page 4
enable authentication 194 enable password 194 ip http authentication 195 ip https authentication 196 login authentication 197 password (Line Configuration 198 password (User EXEC 199 show authentication methods 200 show users accounts 201 show users login-history 202 username 203 5 ACL Commands 205 deny | permit 207 ip access-group 209 no ip access-group 209 mac access-group 210 mac access-list extended 211 mac access-list extended rename 212 show ip access-lists 213 show mac access-list 214 4 Contents
enable authentication 194 enable password 194 ip http authentication 195 ip https authentication 196 login authentication 197 password (Line Configuration 198 password (User EXEC 199 show authentication methods 200 show users accounts 201 show users login-history 202 username 203 5 ACL Commands 205 deny | permit 207 ip access-group 209 no ip access-group 209 mac access-group 210 mac access-list extended 211 mac access-list extended rename 212 show ip access-lists 213 show mac access-list 214 4 Contents
Command Line Interface Guide
Page 7
... limit 274 ip arp inspection trust 275 ip arp inspection validate 275 ip arp inspection vlan 276 permit ip host mac host 277 show arp access-list 278 show ip arp inspection ethernet 279 show ip arp inspection statistics 280 show ip arp inspection vlan 282 Contents 7
... limit 274 ip arp inspection trust 275 ip arp inspection validate 275 ip arp inspection vlan 276 permit ip host mac host 277 show arp access-list 278 show ip arp inspection ethernet 279 show ip arp inspection statistics 280 show ip arp inspection vlan 282 Contents 7
Command Line Interface Guide
Page 11
show arp switch 364 show hosts 364 show ip helper-address 365 show ip interface management 367 16 IPv6 Access List Commands 369 ipv6 access-list 372 ipv6 access-list rename 373 ipv6 traffic-filter 373 show ipv6 access-lists 375 17 IPv6 MLD Snooping Querier Commands 379 ipv6 mld snooping querier (VLAN mode 380 ipv6 mld snooping querier...
show arp switch 364 show hosts 364 show ip helper-address 365 show ip interface management 367 16 IPv6 Access List Commands 369 ipv6 access-list 372 ipv6 access-list rename 373 ipv6 traffic-filter 373 show ipv6 access-lists 375 17 IPv6 MLD Snooping Querier Commands 379 ipv6 mld snooping querier (VLAN mode 380 ipv6 mld snooping querier...
Command Line Interface Guide
Page 58
... display of Service options. SNMP Configures SNMP communities, traps and displays SNMP information. Captive Portal Blocks clients from accessing network until user verification is not found. Line Configures the console, SSH, and remote Telnet connection. SSH Configures... Group Description Tunnel Interface (IPv6) Managing tunneling operations. Clock Configures the system clock. Management ACL Configures and displays management access-list information. Virtual LAN Routing (IPv4) Controls virtual LAN routing. Power Over Ethernet (PoE) Configures PoE and displays PoE ...
... display of Service options. SNMP Configures SNMP communities, traps and displays SNMP information. Captive Portal Blocks clients from accessing network until user verification is not found. Line Configures the console, SSH, and remote Telnet connection. SSH Configures... Group Description Tunnel Interface (IPv6) Managing tunneling operations. Clock Configures the system clock. Management ACL Configures and displays management access-list information. Virtual LAN Routing (IPv4) Controls virtual LAN routing. Power Over Ethernet (PoE) Configures PoE and displays PoE ...
Command Line Interface Guide
Page 60
... - Policy Class Map Configuration • R - Router Open Shortest Path First Version 3 • SG - Interface Configuration • IP - IP Access List Configuration • KC - Management Access-level • MC - Router Configuration • ROSPF - Key • L - MAC-List Configuration • MT - Policy Map Configuration • PCGC - MST Configuration • ML - Stack Global Configuration 60 Command Groups...
... - Policy Class Map Configuration • R - Router Open Shortest Path First Version 3 • SG - Interface Configuration • IP - IP Access List Configuration • KC - Management Access-level • MC - Router Configuration • ROSPF - Key • L - MAC-List Configuration • MT - Policy Map Configuration • PCGC - MST Configuration • ML - Stack Global Configuration 60 Command Groups...
Command Line Interface Guide
Page 61
... Public Key-chain • TC - ip http authentication Specifies authentication methods for a remote telnet or console. LC Command Groups 61 TACACS Configuration • UE - IPv6 Access List Configuration • v6CMC • v6DP - IPv6 DHCP Pool Configuration Layer 2 Commands AAA Command Description Mode* aaa authentication dot1x Specifies one or more authentication, GC authorization...
... Public Key-chain • TC - ip http authentication Specifies authentication methods for a remote telnet or console. LC Command Groups 61 TACACS Configuration • UE - IPv6 Access List Configuration • v6CMC • v6DP - IPv6 DHCP Pool Configuration Layer 2 Commands AAA Command Description Mode* aaa authentication dot1x Specifies one or more authentication, GC authorization...
Command Line Interface Guide
Page 62
...Mode Types" on an Ethernet IC interface or a group of interfaces. ACL Command access-list deny|permit ip access-group ip access-group out mac access-group mac access-list extended mac access-list extended rename show users login-history Displays information about login histories of the rules ... accounts Displays information about the local user PE database show ip access-lists Description Mode* Creates an Access Control List (ACL) that are defined for the ACL. 62 Command Groups Attaches a specified access-control list to an interface in the permit statement are matched.
...Mode Types" on an Ethernet IC interface or a group of interfaces. ACL Command access-list deny|permit ip access-group ip access-group out mac access-group mac access-list extended mac access-list extended rename show users login-history Displays information about login histories of the rules ... accounts Displays information about the local user PE database show ip access-lists Description Mode* Creates an Access Control List (ACL) that are defined for the ACL. 62 Command Groups Attaches a specified access-control list to an interface in the permit statement are matched.
Command Line Interface Guide
Page 63
... present in the PE bridge-forwarding database. show bridge address-table Displays statically created entries in port security mode. Command Description Mode* show mac access-list Displays a MAC access list and all Multicast packets on an interface. Address Table Command Description Mode* bridge address Adds a static MAC-layer station source address IC to the...
... present in the PE bridge-forwarding database. show bridge address-table Displays statically created entries in port security mode. Command Description Mode* show mac access-list Displays a MAC access list and all Multicast packets on an interface. Address Table Command Description Mode* bridge address Adds a static MAC-layer station source address IC to the...
Command Line Interface Guide
Page 66
... each Mode abbreviation, see "Mode Types" on page 60. show ip dhcp snooping binding Displays the DHCP snooping binding entries. Dynamic ARP Inspection Command arp access-list clear counters ip arp inspection ip arp inspection filter ip arp inspection limit ip arp inspection trust ip arp inspection validate Description Mode* Creates an...
... each Mode abbreviation, see "Mode Types" on page 60. show ip dhcp snooping binding Displays the DHCP snooping binding entries. Dynamic ARP Inspection Command arp access-list clear counters ip arp inspection ip arp inspection filter ip arp inspection limit ip arp inspection trust ip arp inspection validate Description Mode* Creates an...
Command Line Interface Guide
Page 67
... address combination used in the given VLAN range. show ip arp inspection vlan Displays the Dynamic ARP Inspection PE configuration on a given interface. show arp access-list Displays the configured ARP ACLs with the PE rules.
... address combination used in the given VLAN range. show ip arp inspection vlan Displays the Dynamic ARP Inspection PE configuration on a given interface. show arp access-list Displays the configured ARP ACLs with the PE rules.
Command Line Interface Guide
Page 72
...Multicast Router Present Expiration IC time. IC ipv6 mld snooping (VLAN) Enables MLD Snooping on a selected interface or VLAN. ipv6 access-list rename Changes the name of classification fields defined for an IC interface or VLAN. NOTE: *For the meaning of an IPv6...interface. IPv6 MLD Snooping Command Description Mode* ipv6 mld snooping immediate-leave Enables or disables MLD Snooping immediate- L ipv6 access-list Creates an IPv6 Access Control List (ACL) GC consisting of an IPv6 ACL. VLAN ipv6 mld snooping Sets the MLD Group Membership Interval groupmembership-interval ...
...Multicast Router Present Expiration IC time. IC ipv6 mld snooping (VLAN) Enables MLD Snooping on a selected interface or VLAN. ipv6 access-list rename Changes the name of classification fields defined for an IC interface or VLAN. NOTE: *For the meaning of an IPv6...interface. IPv6 MLD Snooping Command Description Mode* ipv6 mld snooping immediate-leave Enables or disables MLD Snooping immediate- L ipv6 access-list Creates an IPv6 Access Control List (ACL) GC consisting of an IPv6 ACL. VLAN ipv6 mld snooping Sets the MLD Group Membership Interval groupmembership-interval ...
Command Line Interface Guide
Page 104
Resets specific OSPF states. Mode* ROSPF IC RC PE ROSPF Sets a default for IC the specified interface. Specifies the access list to treat an interface as a point- ROSPF Enables OSPFv2 and sets the area ID of default routes. Sets the OSPF Authentication Type and...Sets the OSPF dead interval for OSPF. Command auto-cost bandwidth capability opaque clear ip ospf default-information originate default-metric distance ospf distribute-list out enable exit-overflow-interval external-lsdb-limit ip ospf area ip ospf authentication ip ospf cost ip ospf dead-interval ip ospf hello...
Resets specific OSPF states. Mode* ROSPF IC RC PE ROSPF Sets a default for IC the specified interface. Specifies the access list to treat an interface as a point- ROSPF Enables OSPFv2 and sets the area ID of default routes. Sets the OSPF Authentication Type and...Sets the OSPF dead interval for OSPF. Command auto-cost bandwidth capability opaque clear ip ospf default-information originate default-metric distance ospf distribute-list out enable exit-overflow-interval external-lsdb-limit ip ospf area ip ospf authentication ip ospf cost ip ospf dead-interval ip ospf hello...
Command Line Interface Guide
Page 112
... the advertisement of RIP in seconds, IC allowed between sending router advertisements from this interface. Specifies the access list to filter routes received RIP from the interface. Routing Information Protocol Command auto-summary default-information originate default-metric distance rip... distribute-list out Description Enables the RIP auto-summarization mode. ip irdp preference Configures the preference of the router advertisement ...
... the advertisement of RIP in seconds, IC allowed between sending router advertisements from this interface. Specifies the access list to filter routes received RIP from the interface. Routing Information Protocol Command auto-summary default-information originate default-metric distance rip... distribute-list out Description Enables the RIP auto-summarization mode. ip irdp preference Configures the preference of the router advertisement ...
Command Line Interface Guide
Page 122
... active management access-list. GC management access-list Defines a management access-list, and enters GC the access-list for configuration and GC enters the line configuration command mode. UE speed Sets the line baud rate. MA management access-class Defines which management access-list is used....of each Mode abbreviation, see "Mode Types" on page 60. show management access- Management ACL Command Description Mode* deny (management) Defines a deny rule. Displays management access-lists. LC NOTE: *For the meaning of each Mode abbreviation, see "Mode ...
... active management access-list. GC management access-list Defines a management access-list, and enters GC the access-list for configuration and GC enters the line configuration command mode. UE speed Sets the line baud rate. MA management access-class Defines which management access-list is used....of each Mode abbreviation, see "Mode Types" on page 60. show management access- Management ACL Command Description Mode* deny (management) Defines a deny rule. Displays management access-lists. LC NOTE: *For the meaning of each Mode abbreviation, see "Mode ...
Command Line Interface Guide
Page 143
... RIP Configuration mode. • Router OSPFv3 Configuration - Global configuration mode command router ospf is used to enter the Management Access List configuration mode. Global configuration mode command ipv6 router ospf is used to enter into the Router OSPFv3 Configuration mode. •... Mode - Global configuration mode command ipv6 dhcp pool is used to enter into the IPv6 DHCP Pool mode. • Management Access List - The Global Configuration mode command spanning-tree mst configuration is used to enter into the Multiple Spanning Tree configuration mode. •...
... RIP Configuration mode. • Router OSPFv3 Configuration - Global configuration mode command router ospf is used to enter the Management Access List configuration mode. Global configuration mode command ipv6 router ospf is used to enter into the Router OSPFv3 Configuration mode. •... Mode - Global configuration mode command ipv6 dhcp pool is used to enter into the IPv6 DHCP Pool mode. • Management Access List - The Global Configuration mode command spanning-tree mst configuration is used to enter into the Multiple Spanning Tree configuration mode. •...
Command Line Interface Guide
Page 145
... Certificate Request - Configures the parameters for the SNMP v3 server host. • SNMP Community Configuration - Configures conditions required to enter the MAC Access-List configuration mode. • TACACS - • MAC Access-List - is the name of the system command prompt: [device name][([command mode-[object]])][#|>] [device name] - For example, if the current configuration mode...
... Certificate Request - Configures the parameters for the SNMP v3 server host. • SNMP Community Configuration - Configures conditions required to enter the MAC Access-List configuration mode. • TACACS - • MAC Access-List - is the name of the system command prompt: [device name][([command mode-[object]])][#|>] [device name] - For example, if the current configuration mode...
Command Line Interface Guide
Page 147
...mode, use the line command. console(configline)# Management Access-List From Global Configuration mode, use the policy-map class command. map command. console(configmacal)# Policy-Class-Map From Global Configuration mode, use the management access-list command. To exit to Global Configuration mode, use ...the exit command, or press + to Privileged EXEC mode. Exit or Access Previous Mode To exit to Global Configuration mode, use the exit...
...mode, use the line command. console(configline)# Management Access-List From Global Configuration mode, use the policy-map class command. map command. console(configmacal)# Policy-Class-Map From Global Configuration mode, use the management access-list command. To exit to Global Configuration mode, use ...the exit command, or press + to Privileged EXEC mode. Exit or Access Previous Mode To exit to Global Configuration mode, use the exit...
Command Line Interface Guide
Page 148
... + to Privileged EXEC mode. To return to the SSH Public keychain mode, use the exit command, or press + to Privileged EXEC mode. Command Mode Access Method Command Prompt Exit or Access Previous Mode MAC Access List From Global Configuration mode, use the tacacs-server host command. TACACS From Global Configuration mode, use the mac...
... + to Privileged EXEC mode. To return to the SSH Public keychain mode, use the exit command, or press + to Privileged EXEC mode. Command Mode Access Method Command Prompt Exit or Access Previous Mode MAC Access List From Global Configuration mode, use the tacacs-server host command. TACACS From Global Configuration mode, use the mac...
Command Line Interface Guide
Page 187
... ARP Inspection Commands • Ethernet Configuration Commands • GVRP Commands • IGMP Snooping Commands • IGMP Snooping Querier Commands • IP Addressing Commands • IPv6 Access List Commands • IPv6 MLD Snooping Querier Commands • LACP Commands • Link Dependency Commands Layer 2 Commands 187 Layer 2 commands provide a logical organization for Ethernet packets...
... ARP Inspection Commands • Ethernet Configuration Commands • GVRP Commands • IGMP Snooping Commands • IGMP Snooping Querier Commands • IP Addressing Commands • IPv6 Access List Commands • IPv6 MLD Snooping Querier Commands • LACP Commands • Link Dependency Commands Layer 2 Commands 187 Layer 2 commands provide a logical organization for Ethernet packets...
Command Line Interface Guide
Page 205
ACL Commands This chapter explains the following commands: • access-list • deny | permit • ip access-group • no ip access-group • mac access-group • mac access-list extended • mac access-list extended rename • show ip access-lists • show mac access-list 4 ACL Commands 205
ACL Commands This chapter explains the following commands: • access-list • deny | permit • ip access-group • no ip access-group • mac access-group • mac access-list extended • mac access-list extended rename • show ip access-lists • show mac access-list 4 ACL Commands 205