Command Line Interface Guide
Page 3
Contents 1 Command Groups 55 Introduction 55 Command Groups 55 Layer 2 Commands 61 2 Using the CLI 135 135 Introduction 135 Entering and Editing CLI Commands 135 CLI Command Modes 141 3 Layer 2 Commands 187 Introduction 187 4 AAA Commands 188 aaa authentication enable 190 aaa authentication login 191 aaa authorization network default radius 193 Contents 3
Contents 1 Command Groups 55 Introduction 55 Command Groups 55 Layer 2 Commands 61 2 Using the CLI 135 135 Introduction 135 Entering and Editing CLI Commands 135 CLI Command Modes 141 3 Layer 2 Commands 187 Introduction 187 4 AAA Commands 188 aaa authentication enable 190 aaa authentication login 191 aaa authorization network default radius 193 Contents 3
Command Line Interface Guide
Page 61
... console. User EXEC • VLAN - • SP - VLAN Configuration • v6ACL - aaa authentication login Defines login authentication. enable password Sets a local password to control access to accept VLAN assignment GC default radius by the RADIUS server. GC login authentication Specifies the login authentication method list LC for http. IPv6 Access List Configuration • v6CMC •...
... console. User EXEC • VLAN - • SP - VLAN Configuration • v6ACL - aaa authentication login Defines login authentication. enable password Sets a local password to control access to accept VLAN assignment GC default radius by the RADIUS server. GC login authentication Specifies the login authentication method list LC for http. IPv6 Access List Configuration • v6CMC •...
Command Line Interface Guide
Page 155
...only a few items instead of the community string. Although spaces are allowed in the community string. During a subsequent login, the user may choose to the factory default settings. For example, the system does not display event notification or system status messages. While the wizard is given...user saved previously automatically is not used by the SNMP manager. • Enables CLI login and HTTP access to accept. The wizard requires the use the wizard initially, the session defaults to the CLI mode with a warning to the community string or reconfigure the access ...
...only a few items instead of the community string. Although spaces are allowed in the community string. During a subsequent login, the user may choose to the factory default settings. For example, the system does not display event notification or system status messages. While the wizard is given...user saved previously automatically is not used by the SNMP manager. • Enables CLI login and HTTP access to accept. The wizard requires the use the wizard initially, the session defaults to the CLI mode with a warning to the community string or reconfigure the access ...
Command Line Interface Guide
Page 160
... Next, an IP address is defined on setting up user accounts and changing privilege levels, see the user documentation. This is used to login to access the CLI, Web interface, or SNMP interface for the switch. Optionally you may setup other accounts and change privilege levels later....Management Station. {0.0.0.0}: 192.168.2.1 Step 2: Now we need to setup your initial privilege (Level 15) user account. For more information on the default VLAN (VLAN #1), of the Management System (A.B.C.D) or wildcard (0.0.0.0) to manage from the network via DHCP (this requires that you use to the ...
... Next, an IP address is defined on setting up user accounts and changing privilege levels, see the user documentation. This is used to login to access the CLI, Web interface, or SNMP interface for the switch. Optionally you may setup other accounts and change privilege levels later....Management Station. {0.0.0.0}: 192.168.2.1 Step 2: Now we need to setup your initial privilege (Level 15) user account. For more information on the default VLAN (VLAN #1), of the Management System (A.B.C.D) or wildcard (0.0.0.0) to manage from the network via DHCP (this requires that you use to the ...
Command Line Interface Guide
Page 162
...Return later and setup other accounts and change privilege levels later. This account is not setup for Dell Network Manager) you up an SNMP version 1 or 3 account, see the user documentation. You can exit..., see the user documentation). To manage the switch using the default system configuration.Note: You can skip the setup wizard, and enter CLI mode to Dell Easy Setup Wizard The Setup Wizard guides you through the initial switch...run the setup wizard within 60 seconds)? [Y/N] y Step 1: The system is used to login to select management unit)> Applying configuration, please wait ...
...Return later and setup other accounts and change privilege levels later. This account is not setup for Dell Network Manager) you up an SNMP version 1 or 3 account, see the user documentation. You can exit..., see the user documentation). To manage the switch using the default system configuration.Note: You can skip the setup wizard, and enter CLI mode to Dell Easy Setup Wizard The Setup Wizard guides you through the initial switch...run the setup wizard within 60 seconds)? [Y/N] y Step 1: The system is used to login to select management unit)> Applying configuration, please wait ...
Command Line Interface Guide
Page 188
... explains the following commands: • aaa authentication dot1x • aaa authentication enable • aaa authentication login • aaa authorization network default radius • enable authentication • enable password • ip http authentication • ip https authentication • login authentication • password (Line Configuration) • password (User EXEC) • show authentication methods • show...
... explains the following commands: • aaa authentication dot1x • aaa authentication enable • aaa authentication login • aaa authorization network default radius • enable authentication • enable password • ip http authentication • ip https authentication • login authentication • password (Line Configuration) • password (User EXEC) • show authentication methods • show...
Command Line Interface Guide
Page 189
... an error, specify none as the final method in Global Configuration mode to create an authentication login list. At least one from the following example uses the aaa authentication dot1x default command with no aaa authentication dot1x default • method1 - To ensure that the authentication succeeds even if all authentication servers for authentication...
... an error, specify none as the final method in Global Configuration mode to create an authentication login list. At least one from the following example uses the aaa authentication dot1x default command with no aaa authentication dot1x default • method1 - To ensure that the authentication succeeds even if all authentication servers for authentication...
Command Line Interface Guide
Page 191
... x is specified as the final method in the command line. Note that enable will not succeed for enable authentication. Syntax aaa authentication login {default|list-name} method1 [method2...] no authentication method is used only if the previous method returns an error, not if it fails. Uses... of methods when a user logs in Global Configuration mode to them. console(config)# aaa authentication enable default enable aaa authentication login Use the aaa authentication login command in . • list-name - To ensure that the authentication succeeds even if all methods return an error, ...
... x is specified as the final method in the command line. Note that enable will not succeed for enable authentication. Syntax aaa authentication login {default|list-name} method1 [method2...] no authentication method is used only if the previous method returns an error, not if it fails. Uses... of methods when a user logs in Global Configuration mode to them. console(config)# aaa authentication enable default enable aaa authentication login Use the aaa authentication login command in . • list-name - To ensure that the authentication succeeds even if all methods return an error, ...
Command Line Interface Guide
Page 192
... the authentication algorithm tries, in the command line. Specify at least one from the following example configures authentication login. 192 AAA Commands Default Configuration The default login lists are used if the RADIUS server is an authentication failure. • method1 [method2...] - Uses the... even if all TACACS+ servers for authentication. Command Mode Global Configuration mode User Guidelines The default and optional list names created with the login authentication command. Example The following table: Keyword enable line local none radius tacacs Source or ...
... the authentication algorithm tries, in the command line. Specify at least one from the following example configures authentication login. 192 AAA Commands Default Configuration The default login lists are used if the RADIUS server is an authentication failure. • method1 [method2...] - Uses the... even if all TACACS+ servers for authentication. Command Mode Global Configuration mode User Guidelines The default and optional list names created with the login authentication command. Example The following table: Keyword enable line local none radius tacacs Source or ...
Command Line Interface Guide
Page 193
... switch does not accept VLAN assignments by the RADIUS server. console(config)#aaa authorization network default radius AAA Commands 193 Name of the authentication. Example The following example enables RADIUS-assigned VLANs.... authorization list • radius - Syntax aaa authorization network default radius no aaa authorization network default radius • default - console(config)# aaa authentication login default radius local enable none aaa authorization network default radius Use the aaa authorization network default radius command in a particular VLAN based on the external ...
... switch does not accept VLAN assignments by the RADIUS server. console(config)#aaa authorization network default radius AAA Commands 193 Name of the authentication. Example The following example enables RADIUS-assigned VLANs.... authorization list • radius - Syntax aaa authorization network default radius no aaa authorization network default radius • default - console(config)# aaa authentication login default radius local enable none aaa authorization network default radius Use the aaa authorization network default radius command in a particular VLAN based on the external ...
Command Line Interface Guide
Page 197
... Specify at least one from the following example configures https authentication. To return to specify the login authentication method list for authentication. Syntax login authentication {default|list-name} AAA Commands 197 Command Mode Global Configuration mode User Guidelines The additional methods of ...it fails. This action has the same effect as the final method in Line Configuration mode to the default specified by the authentication login command, use the no authentication. Example The following table: Keyword local none radius tacacs Source or destination ...
... Specify at least one from the following example configures https authentication. To return to specify the login authentication method list for authentication. Syntax login authentication {default|list-name} AAA Commands 197 Command Mode Global Configuration mode User Guidelines The additional methods of ...it fails. This action has the same effect as the final method in Line Configuration mode to the default specified by the authentication login command, use the no authentication. Example The following table: Keyword local none radius tacacs Source or destination ...
Command Line Interface Guide
Page 198
... password [encrypted] no form of this level. (Range: 8- 64 characters) • encrypted - Uses the default list created with the aaa authentication login command. Default Configuration Uses the default set with the command aaa authentication login. Example The following example specifies the default authentication method for this command. To remove the password, use the no password •...
... password [encrypted] no form of this level. (Range: 8- 64 characters) • encrypted - Uses the default list created with the aaa authentication login command. Default Configuration Uses the default set with the command aaa authentication login. Example The following example specifies the default authentication method for this command. To remove the password, use the no password •...
Command Line Interface Guide
Page 200
...about the authentication methods. Command Mode Privileged EXEC mode User Guidelines This command has no default configuration. Syntax show authentication methods Default Configuration This command has no user guidelines. Example The following example displays the authentication ...configuration. console>password Enter old password:******** Enter new password:******** Confirm new password:******** show authentication methods Use the show authentication methods Login ...
...about the authentication methods. Command Mode Privileged EXEC mode User Guidelines This command has no default configuration. Syntax show authentication methods Default Configuration This command has no user guidelines. Example The following example displays the authentication ...configuration. console>password Enter old password:******** Enter new password:******** Confirm new password:******** show authentication methods Use the show authentication methods Login ...
Command Line Interface Guide
Page 201
Command Mode Privileged EXEC mode User Guidelines This command has no default configuration. AAA Commands 201 Syntax show users accounts command in Privileged EXEC mode to display information about the local user database. enableList : local Line Login Method List Console defaultList Telnet defaultList SSH defaultList Enable Method List enableList enableList enableList HTTPS HTTP DOT1X :local :local :none show users accounts Use the show users accounts [long] Default Configuration This command has no user guidelines.
Command Mode Privileged EXEC mode User Guidelines This command has no default configuration. AAA Commands 201 Syntax show users accounts command in Privileged EXEC mode to display information about the local user database. enableList : local Line Login Method List Console defaultList Telnet defaultList SSH defaultList Enable Method List enableList enableList enableList HTTPS HTTP DOT1X :local :local :none show users accounts Use the show users accounts [long] Default Configuration This command has no user guidelines.
Command Line Interface Guide
Page 202
... AAA Commands Command Mode Privileged EXEC mode User Guidelines This command has no default configuration. False show users login-history Use the show users accounts UserName Lockout Privilege Password Password Aging Expiry date admin 15 --- --- console#show users login-history command in Global Configuration mode to display information about the local user database...
... AAA Commands Command Mode Privileged EXEC mode User Guidelines This command has no default configuration. False show users login-history Use the show users accounts UserName Lockout Privilege Password Password Aging Expiry date admin 15 --- --- console#show users login-history command in Global Configuration mode to display information about the local user database...
Command Line Interface Guide
Page 203
... user. (Range: 1-20 characters) • password - The name of this command. Level 0 can be assigned by a level 15 user to another switch configuration. The default privilege level is defined. This value can be 0 [zero] if the no passwords min-length command has been executed.) • level... for the user. (Range: 8-64 characters. To remove a user name use the no username name • name - The user level. console#show users login-history Login Time Username Protocol Location Jan 19 2005 08:23:48 Bob Serial Jan 19 2005 08:29:29 Robert HTTP 172.16.0.8 Jan 19 2005...
... user. (Range: 1-20 characters) • password - The name of this command. Level 0 can be assigned by a level 15 user to another switch configuration. The default privilege level is defined. This value can be 0 [zero] if the no passwords min-length command has been executed.) • level... for the user. (Range: 8-64 characters. To remove a user name use the no username name • name - The user level. console#show users login-history Login Time Username Protocol Location Jan 19 2005 08:23:48 Bob Serial Jan 19 2005 08:29:29 Robert HTTP 172.16.0.8 Jan 19 2005...
Command Line Interface Guide
Page 520
Default Configuration The default variable setting is all . Command Mode Radius mode User Guidelines User must enter the mode corresponding to specify the usage type of the following example specifies usage type login. Variable can be one of the server. Syntax usage type • type - Example The following values: login, ...a specific Radius server before executing this command. console(config)#radius-server host 192.143.120.123 console(config-radius)#usage login 520 RADIUS Commands Example The following example specifies the timeout setting for the designated Radius Server.
Default Configuration The default variable setting is all . Command Mode Radius mode User Guidelines User must enter the mode corresponding to specify the usage type of the following example specifies usage type login. Variable can be one of the server. Syntax usage type • type - Example The following values: login, ...a specific Radius server before executing this command. console(config)#radius-server host 192.143.120.123 console(config-radius)#usage login 520 RADIUS Commands Example The following example specifies the timeout setting for the designated Radius Server.
Command Line Interface Guide
Page 1202
Syntax debug clear Default Configuration There is executed. User Guidelines There are no usage guidelines for this command. Example console#debug auto-voip debug clear Use the debug clear ... be enabled in which it is no usage guidelines for this command. Command Mode Privileged EXEC mode. The output of "debug" trace output on the login session in order to disable all debug traces. User Guidelines There are no default configuration for this command. Command Mode Privileged EXEC mode.
Syntax debug clear Default Configuration There is executed. User Guidelines There are no usage guidelines for this command. Example console#debug auto-voip debug clear Use the debug clear ... be enabled in which it is no usage guidelines for this command. Command Mode Privileged EXEC mode. The output of "debug" trace output on the login session in order to disable all debug traces. User Guidelines There are no default configuration for this command. Command Mode Privileged EXEC mode.
Command Line Interface Guide
Page 1203
... tracing. Use the "no" form of this command is not persistent across resets. appears on all login sessions for the life of the login session. Syntax debug console Default Configuration Display of this command to enable dot1x packet tracing. Syntax debug dot1x packet [ receive | transmit...Mode Privileged EXEC mode. Serviceability Tracing Packet Commands 1203 The effect of debug traces is disabled by default. User Guidelines There are no debug dot1x packet [ receive | transmit ] Default Configuration Display of this command. The configuration of dot1x traces is disabled by...
... tracing. Use the "no" form of this command is not persistent across resets. appears on all login sessions for the life of the login session. Syntax debug console Default Configuration Display of this command to enable dot1x packet tracing. Syntax debug dot1x packet [ receive | transmit...Mode Privileged EXEC mode. Serviceability Tracing Packet Commands 1203 The effect of debug traces is disabled by default. User Guidelines There are no debug dot1x packet [ receive | transmit ] Default Configuration Display of this command. The configuration of dot1x traces is disabled by...
Configuration Guide
Page 106
... access services offered by systems that are authorized to do so. The PowerConnect 6200 Series switch supports the authenticator role only, in which it is responsible for communicating with the 802.1x default login. 802.1x port based access control is enabled for the system, and...Controller Access Control System (TACACS+) 802.1x Network Access Control Examples This section contains examples of supplicants that Port. • Supplicant - The PowerConnect 6200 Series switch achieves access control by a system. A PAE (Port Access Entity) can be desirable in order for authentication at 10....
... access services offered by systems that are authorized to do so. The PowerConnect 6200 Series switch supports the authenticator role only, in which it is responsible for communicating with the 802.1x default login. 802.1x port based access control is enabled for the system, and...Controller Access Control System (TACACS+) 802.1x Network Access Control Examples This section contains examples of supplicants that Port. • Supplicant - The PowerConnect 6200 Series switch achieves access control by a system. A PAE (Port Access Entity) can be desirable in order for authentication at 10....