Command Line Interface Guide
Page 3
Contents 1 Command Groups 55 Introduction 55 Command Groups 55 Layer 2 Commands 61 2 Using the CLI 135 135 Introduction 135 Entering and Editing CLI Commands 135 CLI Command Modes 141 3 Layer 2 Commands 187 Introduction 187 4 AAA Commands 188 aaa authentication enable 190 aaa authentication login 191 aaa authorization network default radius 193 Contents 3
Contents 1 Command Groups 55 Introduction 55 Command Groups 55 Layer 2 Commands 61 2 Using the CLI 135 135 Introduction 135 Entering and Editing CLI Commands 135 CLI Command Modes 141 3 Layer 2 Commands 187 Introduction 187 4 AAA Commands 188 aaa authentication enable 190 aaa authentication login 191 aaa authorization network default radius 193 Contents 3
Command Line Interface Guide
Page 61
...methods for https. GC ip https authentication Specifies authentication methods for use on a line. GC login authentication Specifies the login authentication method list LC for a remote telnet or console. VLAN Configuration • v6ACL - ...enable authentication Specifies the authentication method list when LC accessing a higher privilege level from a remote telnet or console. enable password Sets a local password to control access to accept VLAN assignment GC default...
...methods for https. GC ip https authentication Specifies authentication methods for use on a line. GC login authentication Specifies the login authentication method list LC for a remote telnet or console. VLAN Configuration • v6ACL - ...enable authentication Specifies the authentication method list when LC accessing a higher privilege level from a remote telnet or console. enable password Sets a local password to control access to accept VLAN assignment GC default...
Command Line Interface Guide
Page 155
...not display any configuration the user saved previously automatically is offered for DHCP to configure the management IP address dynamically. • Sets up the default gateway IP address. The user may return later to configure Radius or TACACS+. • Sets up the IP address for the management VLAN ...or enables support for the user to accept. The wizard requires the use of the community string. • Enables CLI login and HTTP access to enter spaces in the community string, their use is discouraged. After completing the wizard, the user is presented only if...
...not display any configuration the user saved previously automatically is offered for DHCP to configure the management IP address dynamically. • Sets up the default gateway IP address. The user may return later to configure Radius or TACACS+. • Sets up the IP address for the management VLAN ...or enables support for the user to accept. The wizard requires the use of the community string. • Enables CLI login and HTTP access to enter spaces in the community string, their use is discouraged. After completing the wizard, the user is presented only if...
Command Line Interface Guide
Page 160
...user name: admin Please enter the user password: ******** Please reenter the user password: ******** Step 3: Next, an IP address is defined on the default VLAN (VLAN #1), of the Management System (A.B.C.D) or wildcard (0.0.0.0) to manage from the network via DHCP (this requires that you use to access ...you have a DHCP server running on setting up user accounts and changing privilege levels, see the user documentation. This is used to login to setup your initial privilege (Level 15) user account. You may request that the system automatically retrieve an IP address from any ...
...user name: admin Please enter the user password: ******** Please reenter the user password: ******** Step 3: Next, an IP address is defined on the default VLAN (VLAN #1), of the Management System (A.B.C.D) or wildcard (0.0.0.0) to manage from the network via DHCP (this requires that you use to access ...you have a DHCP server running on setting up user accounts and changing privilege levels, see the user documentation. This is used to login to setup your initial privilege (Level 15) user account. You may request that the system automatically retrieve an IP address from any ...
Command Line Interface Guide
Page 162
...the setup wizard, and enter CLI mode to the CLI and Web interface. This account is not setup for Dell Network Manager) you can exit the setup wizard at any point by default. For more information on setting up an SNMP version 1 or 3 account, see the user documentation. To ...run the setup wizard (you must respond to the next question to run the setup wizard within 60 seconds)? [Y/N] y Step 1: The system is used to login to manually configure the switch. To setup a user account: 162 Using the CLI Unit 1 - Would you like to setup the SNMP management interface now? ...
...the setup wizard, and enter CLI mode to the CLI and Web interface. This account is not setup for Dell Network Manager) you can exit the setup wizard at any point by default. For more information on setting up an SNMP version 1 or 3 account, see the user documentation. To ...run the setup wizard (you must respond to the next question to run the setup wizard within 60 seconds)? [Y/N] y Step 1: The system is used to login to manually configure the switch. To setup a user account: 162 Using the CLI Unit 1 - Would you like to setup the SNMP management interface now? ...
Command Line Interface Guide
Page 188
... explains the following commands: • aaa authentication dot1x • aaa authentication enable • aaa authentication login • aaa authorization network default radius • enable authentication • enable password • ip http authentication • ip https authentication • login authentication • password (Line Configuration) • password (User EXEC) • show authentication methods • show...
... explains the following commands: • aaa authentication dot1x • aaa authentication enable • aaa authentication login • aaa authorization network default radius • enable authentication • enable password • ip http authentication • ip https authentication • login authentication • password (Line Configuration) • password (User EXEC) • show authentication methods • show...
Command Line Interface Guide
Page 189
... return an error, specify none as the final method in Global Configuration mode to create an authentication login list. To ensure that the authentication succeeds even if all authentication servers for authentication Uses no authentication Default Configuration No authentication method is defined. aaa authentication dot1x Use the aaa authentication dot1x command in...
... return an error, specify none as the final method in Global Configuration mode to create an authentication login list. To ensure that the authentication succeeds even if all authentication servers for authentication Uses no authentication Default Configuration No authentication method is defined. aaa authentication dot1x Use the aaa authentication dot1x command in...
Command Line Interface Guide
Page 191
...) AAA Commands 191 To ensure that the authentication algorithm tries in the command line. console(config)# aaa authentication enable default enable aaa authentication login Use the aaa authentication login command in . • list-name - For enable to be authenticated on Radius servers, add "$enabx$" users ...used to name this list. Example The following example sets authentication when accessing higher privilege levels. Syntax aaa authentication login {default|list-name} method1 [method2...] no authentication is used only if the previous method returns an error, not if ...
...) AAA Commands 191 To ensure that the authentication algorithm tries in the command line. console(config)# aaa authentication enable default enable aaa authentication login Use the aaa authentication login command in . • list-name - For enable to be authenticated on Radius servers, add "$enabx$" users ...used to name this list. Example The following example sets authentication when accessing higher privilege levels. Syntax aaa authentication login {default|list-name} method1 [method2...] no authentication is used only if the previous method returns an error, not if ...
Command Line Interface Guide
Page 192
...authentication. Uses the local username database for authentication. Command Mode Global Configuration mode User Guidelines The default and optional list names created with the login authentication command. The additional methods of all TACACS+ servers for authentication. To ensure that the ...is an authentication failure. "defaultList" is any character string used by telnet and SSH and only contains the method local. Default Configuration The default login lists are "defaultList" and "networkList." Uses the line password for a particular protocol, where list-name is used to...
...authentication. Uses the local username database for authentication. Command Mode Global Configuration mode User Guidelines The default and optional list names created with the login authentication command. The additional methods of all TACACS+ servers for authentication. To ensure that the ...is an authentication failure. "defaultList" is any character string used by telnet and SSH and only contains the method local. Default Configuration The default login lists are "defaultList" and "networkList." Uses the line password for a particular protocol, where list-name is used to...
Command Line Interface Guide
Page 193
... switch does not accept VLAN assignments by the RADIUS server. console(config)#aaa authorization network default radius AAA Commands 193 console(config)# aaa authentication login default radius local enable none aaa authorization network default radius Use the aaa authorization network default radius command in a particular VLAN based on the external RADIUS server. Name of the...
... switch does not accept VLAN assignments by the RADIUS server. console(config)#aaa authorization network default radius AAA Commands 193 console(config)# aaa authentication login default radius local enable none aaa authorization network default radius Use the aaa authorization network default radius command in a particular VLAN based on the external RADIUS server. Name of the...
Command Line Interface Guide
Page 197
... table: Keyword local none radius tacacs Source or destination Uses the local username database for authentication. Syntax login authentication {default|list-name} AAA Commands 197 console(config)# ip https authentication radius local login authentication Use the login authentication command in the command line. Uses the list of this command. To return to specify the...
... table: Keyword local none radius tacacs Source or destination Uses the local username database for authentication. Syntax login authentication {default|list-name} AAA Commands 197 console(config)# ip https authentication radius local login authentication Use the login authentication command in the command line. Uses the list of this command. To return to specify the...
Command Line Interface Guide
Page 198
...the indicated list created with the command aaa authentication login. Default Configuration Uses the default set with the aaa authentication login command. Syntax password password [encrypted] no user guidelines. console(config)# line console console(config-line)# login authentication default password (Line Configuration) Use the password command in ... - Password for a console. no form of this level. (Range: 8- 64 characters) • encrypted - Uses the default list created with the aaa authentication login command. • list-name - To remove the password, use the no...
...the indicated list created with the command aaa authentication login. Default Configuration Uses the default set with the aaa authentication login command. Syntax password password [encrypted] no user guidelines. console(config)# line console console(config-line)# login authentication default password (Line Configuration) Use the password command in ... - Password for a console. no form of this level. (Range: 8- 64 characters) • encrypted - Uses the default list created with the aaa authentication login command. • list-name - To remove the password, use the no...
Command Line Interface Guide
Page 200
... This command has no user guidelines. Command Mode Privileged EXEC mode User Guidelines This command has no default configuration. Syntax show authentication methods Login Authentication Method Lists defaultList : local Enable Authentication Method Lists 200 AAA Commands console>password Enter old password:******** Enter new password:******** Confirm new password:******** show authentication ...
... This command has no user guidelines. Command Mode Privileged EXEC mode User Guidelines This command has no default configuration. Syntax show authentication methods Login Authentication Method Lists defaultList : local Enable Authentication Method Lists 200 AAA Commands console>password Enter old password:******** Enter new password:******** Confirm new password:******** show authentication ...
Command Line Interface Guide
Page 201
Syntax show users accounts command in Privileged EXEC mode to display information about the local user database. enableList : local Line Login Method List Console defaultList Telnet defaultList SSH defaultList Enable Method List enableList enableList enableList HTTPS HTTP DOT1X :local :local :none show users accounts Use the show users accounts [long] Default Configuration This command has no user guidelines. AAA Commands 201 Command Mode Privileged EXEC mode User Guidelines This command has no default configuration.
Syntax show users accounts command in Privileged EXEC mode to display information about the local user database. enableList : local Line Login Method List Console defaultList Telnet defaultList SSH defaultList Enable Method List enableList enableList enableList HTTPS HTTP DOT1X :local :local :none show users accounts Use the show users accounts [long] Default Configuration This command has no user guidelines. AAA Commands 201 Command Mode Privileged EXEC mode User Guidelines This command has no default configuration.
Command Line Interface Guide
Page 202
... command in Global Configuration mode to display information about the local user database. console#show users login-history [long] • name - Example The following example displays information about the login history of user. (Range: 1-20 characters) Default Configuration This command has no user guidelines. Syntax show users accounts UserName Lockout Privilege Password Password...
... command in Global Configuration mode to display information about the local user database. console#show users login-history [long] • name - Example The following example displays information about the login history of user. (Range: 1-20 characters) Default Configuration This command has no user guidelines. Syntax show users accounts UserName Lockout Privilege Password Password...
Command Line Interface Guide
Page 203
... password [level level] [encrypted] no form of the user. (Range: 1-20 characters) • password - The default privilege level is defined. The user level. AAA Commands 203 Default Configuration No user name is 1. console#show users login-history Login Time Username Protocol Location Jan 19 2005 08:23:48 Bob Serial Jan 19 2005 08...
... password [level level] [encrypted] no form of the user. (Range: 1-20 characters) • password - The default privilege level is defined. The user level. AAA Commands 203 Default Configuration No user name is 1. console#show users login-history Login Time Username Protocol Location Jan 19 2005 08:23:48 Bob Serial Jan 19 2005 08...
Command Line Interface Guide
Page 520
Default Configuration The default variable setting is all . Command Mode Radius mode User Guidelines User must enter the mode corresponding to specify the usage type of the following example specifies usage type login. console(config)#radius-server host 192.143.120.123 console(config-radius)#usage login... 520 RADIUS Commands Variable can be one of the server. Example The following values: login, 802.1x or all . Example The following...
Default Configuration The default variable setting is all . Command Mode Radius mode User Guidelines User must enter the mode corresponding to specify the usage type of the following example specifies usage type login. console(config)#radius-server host 192.143.120.123 console(config-radius)#usage login... 520 RADIUS Commands Variable can be one of the server. Example The following values: login, 802.1x or all . Example The following...
Command Line Interface Guide
Page 1202
... User Guidelines There are no usage guidelines for this command. The output of "debug" trace output on the login session in order to disable all debug traces. User Guidelines There are no default configuration for this command. Command Mode Privileged EXEC mode. Example console#debug auto-voip debug clear Use the debug...
... User Guidelines There are no usage guidelines for this command. The output of "debug" trace output on the login session in order to disable all debug traces. User Guidelines There are no default configuration for this command. Command Mode Privileged EXEC mode. Example console#debug auto-voip debug clear Use the debug...
Command Line Interface Guide
Page 1203
... for this command is not persistent across resets. Syntax debug console Default Configuration Display of debug traces is disabled by default. Use the "no" form of the login session. Serviceability Tracing Packet Commands 1203 The configuration of this command remains in effect for the life of this command to enable dot1x packet tracing... [ receive | transmit ] no usage guidelines for which debug console has been enabled. Command Mode Privileged EXEC mode. The effect of dot1x traces is disabled by default. User Guidelines There are no debug dot1x packet [ receive | transmit...
... for this command is not persistent across resets. Syntax debug console Default Configuration Display of debug traces is disabled by default. Use the "no" form of the login session. Serviceability Tracing Packet Commands 1203 The configuration of this command remains in effect for the life of this command to enable dot1x packet tracing... [ receive | transmit ] no usage guidelines for which debug console has been enabled. Command Mode Privileged EXEC mode. The effect of dot1x traces is disabled by default. User Guidelines There are no debug dot1x packet [ receive | transmit...
Configuration Guide
Page 106
... server - Port Access Control provides a means of preventing unauthorized access by supplicants or users to publicly accessible bridge ports or departmental LANs. The PowerConnect 6200 Series switch achieves access control by enforcing authentication of supplicants that are authorized to do so. The authenticator PAE is also responsible for submitting....10.10.10. The process creates a new authentication list, called radiusList, which the PAE is responsible for communicating with the 802.1x default login. 802.1x port based access control is associated with the supplicant.
... server - Port Access Control provides a means of preventing unauthorized access by supplicants or users to publicly accessible bridge ports or departmental LANs. The PowerConnect 6200 Series switch achieves access control by enforcing authentication of supplicants that are authorized to do so. The authenticator PAE is also responsible for submitting....10.10.10. The process creates a new authentication list, called radiusList, which the PAE is responsible for communicating with the 802.1x default login. 802.1x port based access control is associated with the supplicant.