Command Line Interface (CLI) Guide (.htm)
Page 15
... 303 spanning-tree forward-time 304 spanning-tree hello-time 305 spanning-tree max-age 305 spanning-tree priority 306 spanning-tree disable 307 spanning-tree cost 307 spanning-tree port-priority 308 spanning-tree portfast 309 spanning-tree link-type 310 spanning-tree pathcost method 310 spanning-tree bpdu 311 clear... spanning-tree detected-protocols 312 spanning-tree mst priority 312 spanning-tree mst max-hops 313 spanning-tree mst port-priority 314 spanning-tree mst cost 314 spanning-tree mst configuration 315 Contents 15
... 303 spanning-tree forward-time 304 spanning-tree hello-time 305 spanning-tree max-age 305 spanning-tree priority 306 spanning-tree disable 307 spanning-tree cost 307 spanning-tree port-priority 308 spanning-tree portfast 309 spanning-tree link-type 310 spanning-tree pathcost method 310 spanning-tree bpdu 311 clear... spanning-tree detected-protocols 312 spanning-tree mst priority 312 spanning-tree mst max-hops 313 spanning-tree mst port-priority 314 spanning-tree mst cost 314 spanning-tree mst configuration 315 Contents 15
Command Line Interface (CLI) Guide (.htm)
Page 27
...port. Displays the port-lock status. PRELIMINARY 9/13/06 - Configures the port security learning mode. Displays statically created entries in locked ports. Displays current dynamic addresses in the bridgeforwarding database. clear bridge port security port security mode Removes any learned entries from the forwarding database. port security max port... multicast filtering show ports security show ports security addresses Configures.... Disables new address learning/forwarding on the port while the port is... Displays all entries in port security mode. Privileged EXEC...
...port. Displays the port-lock status. PRELIMINARY 9/13/06 - Configures the port security learning mode. Displays statically created entries in locked ports. Displays current dynamic addresses in the bridgeforwarding database. clear bridge port security port security mode Removes any learned entries from the forwarding database. port security max port... multicast filtering show ports security show ports security addresses Configures.... Disables new address learning/forwarding on the port while the port is... Displays all entries in port security mode. Privileged EXEC...
Command Line Interface (CLI) Guide (.htm)
Page 29
... vlan Description Enable filtering of the currently running -config show startup-config show ip dhcp filtering Configure a port as trusted for DHCP filtering purposes. Display the DHCP filtering configuration. Configuration and Image Files Commands Command Group...to configure multiple Ethernet type interfaces. Access Mode Global Configuration Global Configuration Interface Configuration DELL CONFIDENTIAL - Deletes a file from a source to a destination. Renames a file. Disables interfaces. Enters the interface configuration mode to configure an Ethernet type interface. FOR ...
... vlan Description Enable filtering of the currently running -config show startup-config show ip dhcp filtering Configure a port as trusted for DHCP filtering purposes. Display the DHCP filtering configuration. Configuration and Image Files Commands Command Group...to configure multiple Ethernet type interfaces. Access Mode Global Configuration Global Configuration Interface Configuration DELL CONFIDENTIAL - Deletes a file from a source to a destination. Renames a file. Disables interfaces. Enters the interface configuration mode to configure an Ethernet type interface. FOR ...
Command Line Interface (CLI) Guide (.htm)
Page 31
...time-out. Global Configuration Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) User EXEC User EXEC DELL CONFIDENTIAL - Configures the leave-time-out. gvrp registration-forbid clear gvrp statistics show gvrp configuration show gvrp statistics show ip igmp ... on a specific VLAN. Configures the host-time-out. gvrp enable (Interface) Enables GVRP on the port. FOR PROOF ONLY Command Groups 31 Enables or disables dynamic VLAN creation. GVRP Commands Command Group gvrp enable (Global) Description Enables GVRP globally. Clears all ...
...time-out. Global Configuration Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) User EXEC User EXEC DELL CONFIDENTIAL - Configures the leave-time-out. gvrp registration-forbid clear gvrp statistics show gvrp configuration show gvrp statistics show ip igmp ... on a specific VLAN. Configures the host-time-out. gvrp enable (Interface) Enables GVRP on the port. FOR PROOF ONLY Command Groups 31 Enables or disables dynamic VLAN creation. GVRP Commands Command Group gvrp enable (Global) Description Enables GVRP globally. Clears all ...
Command Line Interface (CLI) Guide (.htm)
Page 40
...Restarts the protocol migration process on all interfaces or on a specific port. Configures the number of a port. PRELIMINARY 9/13/06 - Configures the spanning tree bridge maximum age. spanning-tree disable Disables spanning tree on the specified interface. spanning-tree cost Configures the spanning...max-age Configures the spanning tree bridge forward time. spanning-tree priority Configures the spanning tree priority. www.dell.com | support.dell.com Spanning Tree Commands Command Group spanning-tree Description Enables spanning tree functionality. spanning-tree link-type Overrides...
...Restarts the protocol migration process on all interfaces or on a specific port. Configures the number of a port. PRELIMINARY 9/13/06 - Configures the spanning tree bridge maximum age. spanning-tree disable Disables spanning tree on the specified interface. spanning-tree cost Configures the spanning...max-age Configures the spanning tree bridge forward time. spanning-tree priority Configures the spanning tree priority. www.dell.com | support.dell.com Spanning Tree Commands Command Group spanning-tree Description Enables spanning tree functionality. spanning-tree link-type Overrides...
Command Line Interface (CLI) Guide (.htm)
Page 45
...Interface Configuration Interface Configuration Interface Configuration Privileged EXEC Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration DELL CONFIDENTIAL - VLAN Commands Command Group vlan database Description Enters the VLAN database configuration mode. private-vlan ... switchport mode Associates the primary VLAN and community VLANs. Disables port ingress filtering. Adds or removes VLANs from a general port. Defines the private-vlan port VLANs. Defines the port as a member of the specified VLAN, and the ...
...Interface Configuration Interface Configuration Interface Configuration Privileged EXEC Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration DELL CONFIDENTIAL - VLAN Commands Command Group vlan database Description Enters the VLAN database configuration mode. private-vlan ... switchport mode Associates the primary VLAN and community VLANs. Disables port ingress filtering. Adds or removes VLANs from a general port. Defines the private-vlan port VLANs. Defines the port as a member of the specified VLAN, and the ...
Command Line Interface (CLI) Guide (.htm)
Page 53
...specific egress queu IC (Interface Configuration) Mode Command Description back-pressure Enables Back Pressure on a port. DELL CONFIDENTIAL - Establishes a username-based authentication system. channel-group Associates a port with TACACS+ servers. Configures the spanning tree bridge maximum age. Sets the default pathcost method. ...Configures the display order of the units in an MST region before the BDPU is discarded and the port information is disabled on an interface Configures the spanning tree bridge forward time. spanning-tree bpdu spanning-tree forward-time...
...specific egress queu IC (Interface Configuration) Mode Command Description back-pressure Enables Back Pressure on a port. DELL CONFIDENTIAL - Establishes a username-based authentication system. channel-group Associates a port with TACACS+ servers. Configures the spanning tree bridge maximum age. Sets the default pathcost method. ...Configures the display order of the units in an MST region before the BDPU is discarded and the port information is disabled on an interface Configures the spanning tree bridge forward time. spanning-tree bpdu spanning-tree forward-time...
Command Line Interface (CLI) Guide (.htm)
Page 54
...address ip address dhcp Acquires an IP address on an interface. www.dell.com | support.dell.com dot1x guest-vlan Defines a guest VLAN. dot1x multiple-hosts Allows multiple hosts (clients) on the port. gvrp registration-forbid De-registers all VLANs, and prevents dynamic VLAN ...registration on an 802.1x-authorized port, that the device remains in the quiet state following a failed authentication exchange. gvrp vlan-creation-forbid Enables or disables dynamic VLAN creation. dot1x max-req Sets the maximum number of an ...
...address ip address dhcp Acquires an IP address on an interface. www.dell.com | support.dell.com dot1x guest-vlan Defines a guest VLAN. dot1x multiple-hosts Allows multiple hosts (clients) on the port. gvrp registration-forbid De-registers all VLANs, and prevents dynamic VLAN ...registration on an 802.1x-authorized port, that the device remains in the quiet state following a failed authentication exchange. gvrp vlan-creation-forbid Enables or disables dynamic VLAN creation. dot1x max-req Sets the maximum number of an ...
Command Line Interface (CLI) Guide (.htm)
Page 55
... ingress mirrored packets. Defines the primary PVLAN. Enables each port trust state while the system is in basic mode. Disables interfaces. DELL CONFIDENTIAL - Configures the maximum number of addresses that may be learned on the port while the port is in port security mode Configures the port security learning mode Adds MAC-layer secure addresses to a routed...
... ingress mirrored packets. Defines the primary PVLAN. Enables each port trust state while the system is in basic mode. Disables interfaces. DELL CONFIDENTIAL - Configures the maximum number of addresses that may be learned on the port while the port is in port security mode Configures the port security learning mode Adds MAC-layer secure addresses to a routed...
Command Line Interface (CLI) Guide (.htm)
Page 100
... Console(config)# bridge multicast filtering DELL CONFIDENTIAL - Syntax bridge multicast filtering no form of this example, bridge multicast filtering is disabled. To disable filtering multicast addresses, use the bridge multicast forward-all command to enable forwarding all ports. Command Mode Global Configuration mode ... not change the unregistered multicast addresses state to drop on the switch ports. • If multicast routers exist on port 1/e16 to the bridge table. www.dell.com | support.dell.com Example The following example adds a permanent static MAC-layer station source...
... Console(config)# bridge multicast filtering DELL CONFIDENTIAL - Syntax bridge multicast filtering no form of this example, bridge multicast filtering is disabled. To disable filtering multicast addresses, use the bridge multicast forward-all command to enable forwarding all ports. Command Mode Global Configuration mode ... not change the unregistered multicast addresses state to drop on the switch ports. • If multicast routers exist on port 1/e16 to the bridge table. www.dell.com | support.dell.com Example The following example adds a permanent static MAC-layer station source...
Command Line Interface (CLI) Guide (.htm)
Page 103
... all multicast packets. • interface-list - Separate non-consecutive Ethernet ports with a comma and no form of ports. • port-channel-number-list - Default Configuration This setting is disabled Command Mode Interface Configuration (VLAN) mode User Guidelines There are no spaces... remove} {ethernet interface-list | port-channel portchannel-number-list} no bridge multicast forward-all multicast packets on port 2/e9 within VLAN 8. a hyphen is used to designate a range of this command. DELL CONFIDENTIAL - Separate non-consecutive port-channels with a comma and no user...
... all multicast packets. • interface-list - Separate non-consecutive Ethernet ports with a comma and no form of ports. • port-channel-number-list - Default Configuration This setting is disabled Command Mode Interface Configuration (VLAN) mode User Guidelines There are no spaces... remove} {ethernet interface-list | port-channel portchannel-number-list} no bridge multicast forward-all multicast packets on port 2/e9 within VLAN 8. a hyphen is used to designate a range of this command. DELL CONFIDENTIAL - Separate non-consecutive port-channels with a comma and no user...
Command Line Interface (CLI) Guide (.htm)
Page 104
... of ports. • port-channel-number-list - a hyphen is disabled. Default Configuration This setting is used to it unconditionally. • This command prevents a port from becoming a multicast router port. Does not forbid forwarding all multicast packets on port 1/e8 are forwarded to designate a range of this example, all multicast packets. • interface-list - www.dell.com | support.dell...
... of ports. • port-channel-number-list - a hyphen is disabled. Default Configuration This setting is used to it unconditionally. • This command prevents a port from becoming a multicast router port. Does not forbid forwarding all multicast packets on port 1/e8 are forwarded to designate a range of this example, all multicast packets. • interface-list - www.dell.com | support.dell...
Command Line Interface (CLI) Guide (.htm)
Page 106
...) Default Configuration This setting is disabled. Forwards packets with unlearned source addresses. Discards packets with unlearned source addresses, but does not learn the address. • discard - Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are...clear bridge port security The port security Interface Configuration mode command locks the port, thereby, blocking unknown traffic and preventing the port from learning new addresses. Discards packets with unlearned source addresses. PRELIMINARY 9/13/06 - www.dell.com | support.dell.com ...
...) Default Configuration This setting is disabled. Forwards packets with unlearned source addresses. Discards packets with unlearned source addresses, but does not learn the address. • discard - Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are...clear bridge port security The port security Interface Configuration mode command locks the port, thereby, blocking unknown traffic and preventing the port from learning new addresses. Discards packets with unlearned source addresses. PRELIMINARY 9/13/06 - www.dell.com | support.dell.com ...
Command Line Interface (CLI) Guide (.htm)
Page 107
...set to the maximum addresses allowed on the port. Console(config)# interface ethernet 1/e7 Console(config-if)# port security mode dynamic DELL CONFIDENTIAL - FOR PROOF ONLY Address Table ...Commands 107 Example In this command. Console(config)# interface ethernet 1/e1 Console(config-if)# port security forward trap 100 port security mode The port security mode Interface Configuration mode command configures the port security mode. Deletes the current dynamic MAC addresses associated with the port and disables...
...set to the maximum addresses allowed on the port. Console(config)# interface ethernet 1/e7 Console(config-if)# port security mode dynamic DELL CONFIDENTIAL - FOR PROOF ONLY Address Table ...Commands 107 Example In this command. Console(config)# interface ethernet 1/e1 Console(config-if)# port security forward trap 100 port security mode The port security mode Interface Configuration mode command configures the port security mode. Deletes the current dynamic MAC addresses associated with the port and disables...
Command Line Interface (CLI) Guide (.htm)
Page 115
... Guidelines There are displayed: Console# show ports security Port ---1/e1 1/e2 1/e3 Status ------Locked Unlocked Locked Learning -------Dynamic Dynamic Disabled Action ------Discard Discard, Shutdown Maximum ------3 28 8 Trap ------Enable Disable Frequency --------100 - PRELIMINARY 9/13/06 - DELL CONFIDENTIAL - show ports security The show ports security [ethernet interface | port-channel port-channel-number] • interface - A valid port-channel number. FOR PROOF ONLY Address...
... Guidelines There are displayed: Console# show ports security Port ---1/e1 1/e2 1/e3 Status ------Locked Unlocked Locked Learning -------Dynamic Dynamic Disabled Action ------Discard Discard, Shutdown Maximum ------3 28 8 Trap ------Enable Disable Frequency --------100 - PRELIMINARY 9/13/06 - DELL CONFIDENTIAL - show ports security The show ports security [ethernet interface | port-channel port-channel-number] • interface - A valid port-channel number. FOR PROOF ONLY Address...
Command Line Interface (CLI) Guide (.htm)
Page 117
... locked port 1/e1 are displayed. Console# show ports security addresses ethernet 1/e1 Port ---1/e1 Status -------Disabled Learning -------Lock Current ------- Disabled Lock - Console# show ports security addresses Port ---1/e1 1/e2 1/e3 1/e4 1/e5 1/e6 ch1 ch2 Status Learning Current -------- -------- ------- FOR PROOF ONLY Address Table Commands 117 Disabled Lock - Example In this example, dynamic addresses in port-channel ch1 Disabled Lock - Maximum ------1 DELL...
... locked port 1/e1 are displayed. Console# show ports security addresses ethernet 1/e1 Port ---1/e1 Status -------Disabled Learning -------Lock Current ------- Disabled Lock - Console# show ports security addresses Port ---1/e1 1/e2 1/e3 1/e4 1/e5 1/e6 ch1 ch2 Status Learning Current -------- -------- ------- FOR PROOF ONLY Address Table Commands 117 Disabled Lock - Example In this example, dynamic addresses in port-channel ch1 Disabled Lock - Maximum ------1 DELL...
Command Line Interface (CLI) Guide (.htm)
Page 126
...SNTP broadcast clients. console(config)# sntp anycast client enable sntp client enable (Interface) The sntp client enable Interface Configuration (Ethernet, port-channel, VLAN) mode command enables the Simple Network Time Protocol (SNTP) client on a specific interface. This applies to enable ... Command Mode Global Configuration mode User Guidelines • Polling time is disabled. FOR PROOF ONLY Syntax sntp anycast client enable no form of this command. 126 Clock DELL CONFIDENTIAL - To disable the SNTP anycast client, use the no sntp anycast client enable Default ...
...SNTP broadcast clients. console(config)# sntp anycast client enable sntp client enable (Interface) The sntp client enable Interface Configuration (Ethernet, port-channel, VLAN) mode command enables the Simple Network Time Protocol (SNTP) client on a specific interface. This applies to enable ... Command Mode Global Configuration mode User Guidelines • Polling time is disabled. FOR PROOF ONLY Syntax sntp anycast client enable no form of this command. 126 Clock DELL CONFIDENTIAL - To disable the SNTP anycast client, use the no sntp anycast client enable Default ...
Command Line Interface (CLI) Guide (.htm)
Page 127
...the device to use the no sntp unicast client enable Default Configuration The SNTP unicast client is disabled on Ethernet port 1/e3. Command Mode Global Configuration mode DELL CONFIDENTIAL - Syntax sntp unicast client enable no form of this command. Command Mode Interface configuration (...Ethernet, port-channel, VLAN) mode User Guidelines • Use the sntp broadcast client enable Global Configuration mode command to ...
...the device to use the no sntp unicast client enable Default Configuration The SNTP unicast client is disabled on Ethernet port 1/e3. Command Mode Global Configuration mode DELL CONFIDENTIAL - Syntax sntp unicast client enable no form of this command. Command Mode Interface configuration (...Ethernet, port-channel, VLAN) mode User Guidelines • Use the sntp broadcast client enable Global Configuration mode command to ...
Command Line Interface (CLI) Guide (.htm)
Page 205
...number. FOR PROOF ONLY LACP Commands 205 DELL CONFIDENTIAL - Syntax show lacp port-channel Privileged EXEC mode command displays LACP information for a port-channel. Default Configuration This command has no default configuration. Port 1/e1 LACP Protocol State: LACP State Machines... counters: periodic tx timer: current while timer: wait while timer: Port Disabled State Detached State No Periodic State FALSE TRUE FALSE UNSELECTED FALSE FALSE FALSE 0 0 0 show lacp port-channel The show lacp port-channel [port_channel_number] • port_channel_number - PRELIMINARY 9/13/06 -
...number. FOR PROOF ONLY LACP Commands 205 DELL CONFIDENTIAL - Syntax show lacp port-channel Privileged EXEC mode command displays LACP information for a port-channel. Default Configuration This command has no default configuration. Port 1/e1 LACP Protocol State: LACP State Machines... counters: periodic tx timer: current while timer: wait while timer: Port Disabled State Detached State No Periodic State FALSE TRUE FALSE UNSELECTED FALSE FALSE FALSE 0 0 0 show lacp port-channel The show lacp port-channel [port_channel_number] • port_channel_number - PRELIMINARY 9/13/06 -
User's Guide (.htm)
Page 237
... MAC addresses. Configuring Switch Information 237 Configuring Port Security Network security can be enhanced by limiting access on a specific port only to the point when it is unknown to a locked port are activated from the Port Security page. The MAC address list can...been reset. The Ports page provides links for configuring port functionality including advanced features such as storm control and port mirroring, and for performing virtual port tests. NOTE: In order to enable port security, enable the Multiple Hosts feature on specific ports. Disabled ports are either it was...
... MAC addresses. Configuring Switch Information 237 Configuring Port Security Network security can be enhanced by limiting access on a specific port only to the point when it is unknown to a locked port are activated from the Port Security page. The MAC address list can...been reset. The Ports page provides links for configuring port functionality including advanced features such as storm control and port mirroring, and for performing virtual port tests. NOTE: In order to enable port security, enable the Multiple Hosts feature on specific ports. Disabled ports are either it was...