Command Line Interface Guide
Page 8
... 147 boot system 148 show running-config 149 show startup-config 150 show bootvar 152 9 DHCP Snooping 153 ip dhcp snooping 153 ip dhcp snooping vlan 153 ip dhcp snooping trust 154 ip dhcp snooping information option allowed-untrusted 155 ip dhcp snooping verify 155 ip dhcp snooping database 156 ip...
... 147 boot system 148 show running-config 149 show startup-config 150 show bootvar 152 9 DHCP Snooping 153 ip dhcp snooping 153 ip dhcp snooping vlan 153 ip dhcp snooping trust 154 ip dhcp snooping information option allowed-untrusted 155 ip dhcp snooping verify 155 ip dhcp snooping database 156 ip...
Command Line Interface Guide
Page 10
gvrp vlan-creation-forbid 185 gvrp registration-forbid 186 clear gvrp statistics 186 show gvrp configuration 187 show gvrp statistics 188 show gvrp error-statistics 189 12 ...
gvrp vlan-creation-forbid 185 gvrp registration-forbid 186 clear gvrp statistics 186 show gvrp configuration 187 show gvrp statistics 188 show gvrp error-statistics 189 12 ...
Command Line Interface Guide
Page 22
... map protocols-group vlan 481 ip internal-usage-vlan 482 mac-to-vlan 483 show vlan mac-to-vlan 484 show vlan 484 show vlan protocols-groups 485 show vlan internal usage 486 show interfaces switchport 487 37 Voice VLAN 493 voice vlan id 493 voice vlan oui-table 493 voice vlan cos 495 voice vlan aging-timeout 496 voice vlan enable 496 voice...
... map protocols-group vlan 481 ip internal-usage-vlan 482 mac-to-vlan 483 show vlan mac-to-vlan 484 show vlan 484 show vlan protocols-groups 485 show vlan internal usage 486 show interfaces switchport 487 37 Voice VLAN 493 voice vlan id 493 voice vlan oui-table 493 voice vlan cos 495 voice vlan aging-timeout 496 voice vlan enable 496 voice...
Command Line Interface Guide
Page 24
dot1x send-async-request-id 523 show dot1x 524 show dot1x users 527 show dot1x statistics 528 ADVANCED FEATURES 530 dot1x auth-not-req 530 dot1x multiple-hosts 531 dot1x single-host-violation 532 dot1x guest-vlan 533 dot1x guest-vlan enable 534 dot1x mac-authentication 534 dot1x traps mac-authentication failure 535 dot1x radius-attributes vlan 536 show dot1x advanced 537 24 Contents
dot1x send-async-request-id 523 show dot1x 524 show dot1x users 527 show dot1x statistics 528 ADVANCED FEATURES 530 dot1x auth-not-req 530 dot1x multiple-hosts 531 dot1x single-host-violation 532 dot1x guest-vlan 533 dot1x guest-vlan enable 534 dot1x mac-authentication 534 dot1x traps mac-authentication failure 535 dot1x radius-attributes vlan 536 show dot1x advanced 537 24 Contents
Command Line Interface Guide
Page 28
... mode, and are used to enter the Interface Configuration mode to define management access-lists. Contains commands to enter the VLAN Database Interface Configuration mode. • Management Access List - The following example illustrates how to access the Global Configuration mode... and return to manage the member ports as line timeout settings, etc. The vlan database Global Configuration mode command is used to configure the management connections. Contains commands to configure port-channels, for example,...
... mode, and are used to enter the Interface Configuration mode to define management access-lists. Contains commands to enter the VLAN Database Interface Configuration mode. • Management Access List - The following example illustrates how to access the Global Configuration mode... and return to manage the member ports as line timeout settings, etc. The vlan database Global Configuration mode command is used to configure the management connections. Contains commands to configure port-channels, for example,...
Command Line Interface Guide
Page 34
... SSH Commands Syslog Commands System Management Commands TACACS Commands TIC Commands Tunnel Commands User Interface Commands VLAN Commands Voice VLAN Commands 802.1x Commands 34 Command Groups Configures all port configuration options for entering CLI commands. Configures... on the device. Configures and displays RADIUS information. Configures SSH authentication. Configures and displays TIC information. Configures VLANs and displays VLAN information. Monitors activity on Spanning Tree protocol. Displays RMON statistics. Configures SNMP communities, traps and displays SNMP information...
... SSH Commands Syslog Commands System Management Commands TACACS Commands TIC Commands Tunnel Commands User Interface Commands VLAN Commands Voice VLAN Commands 802.1x Commands 34 Command Groups Configures all port configuration options for entering CLI commands. Configures... on the device. Configures and displays RADIUS information. Configures SSH authentication. Configures and displays TIC information. Configures VLANs and displays VLAN information. Monitors activity on Spanning Tree protocol. Displays RMON statistics. Configures SNMP communities, traps and displays SNMP information...
Command Line Interface Guide
Page 36
... the forwarding database. Configures the forwarding state of Multicast addresses. Displays ACLs defined on an interface. Access Mode Interface (VLAN) Configuration Global Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Interface Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Global Configuration Privileged EXEC Interface Configuration Interface Configuration Interface Configuration 36 Command Groups deny (MAC) service-acl show...
... the forwarding database. Configures the forwarding state of Multicast addresses. Displays ACLs defined on an interface. Access Mode Interface (VLAN) Configuration Global Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Interface Configuration Interface (VLAN) Configuration Interface (VLAN) Configuration Global Configuration Privileged EXEC Interface Configuration Interface Configuration Interface Configuration 36 Command Groups deny (MAC) service-acl show...
Command Line Interface Guide
Page 39
...EXEC Privileged EXEC Privileged EXEC DHCP Snooping Commands Command Group ip dhcp snooping Description Globally enables DHCP snooping ip dhcp snooping vlan Enables DHCP snooping on a switch. Configures the DHCP snooping binding file. Access Mode Global Configuration Global Configuration Interface Configuration ...currently running -config show startup-config show ip dhcp snooping binding Configures a port as trusted for all interfaces on a VLAN. show running configuration file. Configures the update frequency of the DHCP snooping binding file. Configures the update frequency of the ...
...EXEC Privileged EXEC Privileged EXEC DHCP Snooping Commands Command Group ip dhcp snooping Description Globally enables DHCP snooping ip dhcp snooping vlan Enables DHCP snooping on a switch. Configures the DHCP snooping binding file. Access Mode Global Configuration Global Configuration Interface Configuration ...currently running -config show startup-config show ip dhcp snooping binding Configures a port as trusted for all interfaces on a VLAN. show running configuration file. Configures the update frequency of the DHCP snooping binding file. Configures the update frequency of the ...
Command Line Interface Guide
Page 41
... router ports. GVRP Commands Command Group gvrp enable (Global) gvrp enable (Interface) garp timer gvrp vlan-creation-forbid gvrp registration-forbid clear gvrp statistics show gvrp configuration show gvrp statistics show ip igmp snooping...Global Configuration Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) User EXEC User EXEC User EXEC Command Groups 41 Enables Internet Group Management Protocol (IGMP) snooping on a specific VLAN. Clears all VLANs, and prevents dynamic VLAN registration on dynamically ...
... router ports. GVRP Commands Command Group gvrp enable (Global) gvrp enable (Interface) garp timer gvrp vlan-creation-forbid gvrp registration-forbid clear gvrp statistics show gvrp configuration show gvrp statistics show ip igmp snooping...Global Configuration Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) Interface (VLAN) User EXEC User EXEC User EXEC Command Groups 41 Enables Internet Group Management Protocol (IGMP) snooping on a specific VLAN. Clears all VLANs, and prevents dynamic VLAN registration on dynamically ...
Command Line Interface Guide
Page 52
... mode. Exits the MST region configuration mode and applies all configuration changes. Overrides the default link-type setting. Sets the default path cost method. Maps VLANs to the MST instance.
... mode. Exits the MST region configuration mode and applies all configuration changes. Overrides the default link-type setting. Sets the default path cost method. Maps VLANs to the MST instance.
Command Line Interface Guide
Page 57
... Privileged EXEC All User EXEC Privileged EXEC User EXEC VLAN Commands Command Group vlan database vlan interface vlan interface range vlan name switchport access vlan switchport trunk allowed vlan Description Enters the VLAN database configuration mode. Enters the interface configuration mode to...highest mode in general mode. Creates a VLAN. Adds or removes VLANs from a port in the CLI mode hierarchy. Access Mode Global Configuration VLAN Database Global Configuration Global Configuration Interface (VLAN) Configuration Interface Configuration Interface Configuration Command Groups ...
... Privileged EXEC All User EXEC Privileged EXEC User EXEC VLAN Commands Command Group vlan database vlan interface vlan interface range vlan name switchport access vlan switchport trunk allowed vlan Description Enters the VLAN database configuration mode. Enters the interface configuration mode to...highest mode in general mode. Creates a VLAN. Adds or removes VLANs from a port in the CLI mode hierarchy. Access Mode Global Configuration VLAN Database Global Configuration Global Configuration Interface (VLAN) Configuration Interface Configuration Interface Configuration Command Groups ...
Command Line Interface Guide
Page 58
... the internal usage VLAN of VLANs used for protocol-based VLAN assignment. Configures the VLAN membership mode of the specified VLAN, and the VLAN ID is in customer mode. Sets a protocol-based classification rule. show vlan mac-to-vlan show vlan show vlan protocolsgroups show vlan internal usage show...MAC-to a protocol group. Disables port ingress filtering. Discards untagged frames at ingress. Maps a protocol to -VLAN database. Displays VLAN information. Adds or removes VLANs from a general port. Adds MAC addresses to the MAC-to an uplink port. Displays a list of ...
... the internal usage VLAN of VLANs used for protocol-based VLAN assignment. Configures the VLAN membership mode of the specified VLAN, and the VLAN ID is in customer mode. Sets a protocol-based classification rule. show vlan mac-to-vlan show vlan show vlan protocolsgroups show vlan internal usage show...MAC-to a protocol group. Disables port ingress filtering. Discards untagged frames at ingress. Maps a protocol to -VLAN database. Displays VLAN information. Adds or removes VLANs from a general port. Adds MAC addresses to the MAC-to an uplink port. Displays a list of ...
Command Line Interface Guide
Page 59
... the device from a browser. Voice VLAN Commands Command Group voice vlan id voice vlan oui-table voice vlan cos voice vlan aging-timeout voice vlan enable voice vlan secure show voice vlan Description Enables voice VLAN and configures voice VLAN ID. Configures the secure mode for user... a web browser to be configured from a secured browser. Sets the interval the system waits for the voice VLAN. Access Mode Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Generates and displays ...
... the device from a browser. Voice VLAN Commands Command Group voice vlan id voice vlan oui-table voice vlan cos voice vlan aging-timeout voice vlan enable voice vlan secure show voice vlan Description Enables voice VLAN and configures voice VLAN ID. Configures the secure mode for user... a web browser to be configured from a secured browser. Sets the interval the system waits for the voice VLAN. Access Mode Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Global Configuration Generates and displays ...
Command Line Interface Guide
Page 61
...to be taken, when a station whose MAC address is not the supplicant MAC address, attempts to access the guest VLAN. Enables unauthorized users on the station's MAC address. show dot1x users show dot1x statistics dot1x auth-not-req dot1x multiple... was failed in authentication of the 802.1X MAC authentication access control. Privileged EXEC Privileged EXEC Interface (VLAN) Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Global Configuration Interface Configuration Privileged EXEC Command Groups 61...
...to be taken, when a station whose MAC address is not the supplicant MAC address, attempts to access the guest VLAN. Enables unauthorized users on the station's MAC address. show dot1x users show dot1x statistics dot1x auth-not-req dot1x multiple... was failed in authentication of the 802.1X MAC authentication access control. Privileged EXEC Privileged EXEC Interface (VLAN) Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Interface Configuration Global Configuration Interface Configuration Privileged EXEC Command Groups 61...
Command Line Interface Guide
Page 64
.... Specifies or modifies the device host name. Enters the interface configuration mode of the DHCP snooping binding file. Enters the interface configuration (VLAN) mode. Creates Layer 2 ACLs. Configures the update frequency of a specific port-channel. Enables GVRP globally. Configures a switch to -... logging gvrp enable (Global) hostname interface ethernet interface port-channel interface range ethernet interface range port-channel interface range vlan interface vlan ip access-list ip access-list ip address ip default-gateway ip dhcp snooping ip dhcp snooping database ip dhcp snooping...
.... Specifies or modifies the device host name. Enters the interface configuration mode of the DHCP snooping binding file. Enters the interface configuration (VLAN) mode. Creates Layer 2 ACLs. Configures the update frequency of a specific port-channel. Enables GVRP globally. Configures a switch to -... logging gvrp enable (Global) hostname interface ethernet interface port-channel interface range ethernet interface range port-channel interface range vlan interface vlan ip access-list ip access-list ip address ip default-gateway ip dhcp snooping ip dhcp snooping database ip dhcp snooping...
Command Line Interface Guide
Page 68
.... Enables configuring an MST region by entering the Multiple Spanning Tree (MST) mode. Configures the Spanning Tree priority. Enters the VLAN database configuration mode. Maps CoS values to a specific egress queue. Enables forwarding all bridge multicast unregistered channel-group Description Enables Back... pathcost method spanning-tree priority stack master tacacs-server host tacacs-server key tacacs-server source-ip tacacs-server timeout username vlan database wrr-queue cos-map Defines BPDU handling when Spanning Tree is aged out. Forces selection of a stack master. Sets...
.... Enables configuring an MST region by entering the Multiple Spanning Tree (MST) mode. Configures the Spanning Tree priority. Enters the VLAN database configuration mode. Maps CoS values to a specific egress queue. Enables forwarding all bridge multicast unregistered channel-group Description Enables Back... pathcost method spanning-tree priority stack master tacacs-server host tacacs-server key tacacs-server source-ip tacacs-server timeout username vlan database wrr-queue cos-map Defines BPDU handling when Spanning Tree is aged out. Forces selection of a stack master. Sets...
Command Line Interface Guide
Page 69
... the action to be taken, when a station whose MAC address is not the supplicant MAC address, attempts to access the guest VLAN. Sets the time for the retransmission of a given ethernet interface when not using auto-negotiation. Enables unauthorized users on an 802.... timeout server-timeout dot1x timeout supp-timeout dot1x timeout tx-period duplex flowcontrol garp timer gvrp enable (Interface) gvrp registration-forbid gvrp vlan-creation-forbid ip address ip address dhcp Adds a description to an Extensible Authentication Protocol (EAP) - Enables periodic re-authentication of ...
... the action to be taken, when a station whose MAC address is not the supplicant MAC address, attempts to access the guest VLAN. Sets the time for the retransmission of a given ethernet interface when not using auto-negotiation. Enables unauthorized users on an 802.... timeout server-timeout dot1x timeout supp-timeout dot1x timeout tx-period duplex flowcontrol garp timer gvrp enable (Interface) gvrp registration-forbid gvrp vlan-creation-forbid ip address ip address dhcp Adds a description to an Extensible Authentication Protocol (EAP) - Enables periodic re-authentication of ...
Command Line Interface Guide
Page 70
... each port trust state while the system is in basic mode. Defines an IPv6 default gateway. Adds MAC-layer secure addresses to a VLAN. Displays port monitoring status Configures the default port CoS value. Configures the default port CoS value. Configures a name to a routed port... Enables automatic crossover on an interface. 70 Command Modes Changes the Multicast Listener Discovery Protocol (MLD) version. ip internal-usage-vlan ipv6 default-gateway ipv6 mld join-group ipv6 mld version lacp port-priority lacp timeout mdix name negotiation port monitor port security...
... each port trust state while the system is in basic mode. Defines an IPv6 default gateway. Adds MAC-layer secure addresses to a VLAN. Displays port monitoring status Configures the default port CoS value. Configures the default port CoS value. Configures a name to a routed port... Enables automatic crossover on an interface. 70 Command Modes Changes the Multicast Listener Discovery Protocol (MLD) version. ip internal-usage-vlan ipv6 default-gateway ipv6 mld join-group ipv6 mld version lacp port-priority lacp timeout mdix name negotiation port monitor port security...
Command Line Interface Guide
Page 71
...of a given Ethernet interface when not using autonegotiation. switchport forbidden vlan Forbids adding specific VLANs to permit or deny. frame-type tagged-only switchport general allowed vlan Adds or removes VLANs from a general port. switchport general ingressfiltering disable Disables port ingress...MST) calculations. spanning-tree port-priority Configures port priority. speed Configures the speed of a port. switchport customer vlan Set the port's VLAN when the interface is in access mode. Command Modes 71 sntp client enable (Interface) Enables the Simple Network Time...
...of a given Ethernet interface when not using autonegotiation. switchport forbidden vlan Forbids adding specific VLANs to permit or deny. frame-type tagged-only switchport general allowed vlan Adds or removes VLANs from a general port. switchport general ingressfiltering disable Disables port ingress...MST) calculations. spanning-tree port-priority Configures port priority. speed Configures the speed of a port. switchport customer vlan Set the port's VLAN when the interface is in access mode. Command Modes 71 sntp client enable (Interface) Enables the Simple Network Time...
Command Line Interface Guide
Page 72
...console. Specifies a password on an egress port. Sets the shaper on a line. Configures the baud rate of the specified VLAN, and the VLAN ID is detected. MC (MST Configuration) Mode Command Group abort (mst) exit (mst) Description Exits the MST region configuration... mode without applying configuration changes. switchport trunk allowed vlan switchport trunk native vlan traffic-shape Adds or removes VLANs from a remote telnet or console. LC (Line Configuration) Mode Command Group autobaud enable authentication exec-...
...console. Specifies a password on an egress port. Sets the shaper on a line. Configures the baud rate of the specified VLAN, and the VLAN ID is detected. MC (MST Configuration) Mode Command Group abort (mst) exit (mst) Description Exits the MST region configuration... mode without applying configuration changes. switchport trunk allowed vlan switchport trunk native vlan traffic-shape Adds or removes VLANs from a remote telnet or console. LC (Line Configuration) Mode Command Group autobaud enable authentication exec-...