Command Line Interface Guide
Page 4
enable authentication 194 enable password 194 ip http authentication 195 ip https authentication 196 login authentication 197 password (Line Configuration 198 password (User EXEC 199 show authentication methods 200 show users accounts 201 show users login-history 202 username 203 5 ACL Commands 205 deny | permit 207 ip access-group 209 no ip access-group 209 mac access-group 210 mac access-list extended 211 mac access-list extended rename 212 show ip access-lists 213 show mac access-list 214 4 Contents
enable authentication 194 enable password 194 ip http authentication 195 ip https authentication 196 login authentication 197 password (Line Configuration 198 password (User EXEC 199 show authentication methods 200 show users accounts 201 show users login-history 202 username 203 5 ACL Commands 205 deny | permit 207 ip access-group 209 no ip access-group 209 mac access-group 210 mac access-list extended 211 mac access-list extended rename 212 show ip access-lists 213 show mac access-list 214 4 Contents
Command Line Interface Guide
Page 7
... limit 274 ip arp inspection trust 275 ip arp inspection validate 275 ip arp inspection vlan 276 permit ip host mac host 277 show arp access-list 278 show ip arp inspection ethernet 279 show ip arp inspection statistics 280 show ip arp inspection vlan 282 Contents 7
... limit 274 ip arp inspection trust 275 ip arp inspection validate 275 ip arp inspection vlan 276 permit ip host mac host 277 show arp access-list 278 show ip arp inspection ethernet 279 show ip arp inspection statistics 280 show ip arp inspection vlan 282 Contents 7
Command Line Interface Guide
Page 11
show arp switch 364 show hosts 364 show ip helper-address 365 show ip interface management 367 16 IPv6 Access List Commands 369 ipv6 access-list 372 ipv6 access-list rename 373 ipv6 traffic-filter 373 show ipv6 access-lists 375 17 IPv6 MLD Snooping Querier Commands 379 ipv6 mld snooping querier (VLAN mode 380 ipv6 mld snooping querier...
show arp switch 364 show hosts 364 show ip helper-address 365 show ip interface management 367 16 IPv6 Access List Commands 369 ipv6 access-list 372 ipv6 access-list rename 373 ipv6 traffic-filter 373 show ipv6 access-lists 375 17 IPv6 MLD Snooping Querier Commands 379 ipv6 mld snooping querier (VLAN mode 380 ipv6 mld snooping querier...
Command Line Interface Guide
Page 58
... (PoE) Configures PoE and displays PoE information. sFlow Configures sFlow monitoring. Virtual LAN Routing (IPv4) Controls virtual LAN routing. Management ACL Configures and displays management access-list information. Virtual Router Redundancy (IPv4) Manages router redundancy on the system. RMON Can be configured through the CLI and displays RMON information. Table 1-1. Configuration and...
... (PoE) Configures PoE and displays PoE information. sFlow Configures sFlow monitoring. Virtual LAN Routing (IPv4) Controls virtual LAN routing. Management ACL Configures and displays management access-list information. Virtual Router Redundancy (IPv4) Manages router redundancy on the system. RMON Can be configured through the CLI and displays RMON information. Table 1-1. Configuration and...
Command Line Interface Guide
Page 60
... Configuration • GC - Logging • LC - Policy Class Map Configuration • R - Router Configuration • ROSPF - Management Access-level • MC - Privileged EXEC • PM - Captive Portal Instance • CMC - Key Chain • KE - Mode ...ARP ACL Configuration • CC - Crypto Configuration • CP - Global Configuration • IC - IP Access List Configuration • KC - Key • L - Line Configuration • MA - MAC-List Configuration • MT - MAC-acl • PE - Policy Map Global Configuration • PCMC - Radius...
... Configuration • GC - Logging • LC - Policy Class Map Configuration • R - Router Configuration • ROSPF - Management Access-level • MC - Privileged EXEC • PM - Captive Portal Instance • CMC - Key Chain • KE - Mode ...ARP ACL Configuration • CC - Crypto Configuration • CP - Global Configuration • IC - IP Access List Configuration • KC - Key • L - Line Configuration • MA - MAC-List Configuration • MT - MAC-acl • PE - Policy Map Global Configuration • PCMC - Radius...
Command Line Interface Guide
Page 61
... v6ACL - GC aaa authorization network Enables the switch to the GC normal level. enable authentication Specifies the authentication method list when LC accessing a higher privilege level from a remote telnet or console. password Specifies a password on interfaces running IEEE 802.1X...SSH Public Key-chain • TC - GC ip https authentication Specifies authentication methods for GC accessing higher privilege levels. SSH Public Key • SK - IPv6 Access List Configuration • v6CMC • v6DP - aaa authentication login Defines login authentication. enable password Sets...
... v6ACL - GC aaa authorization network Enables the switch to the GC normal level. enable authentication Specifies the authentication method list when LC accessing a higher privilege level from a remote telnet or console. password Specifies a password on interfaces running IEEE 802.1X...SSH Public Key-chain • TC - GC ip https authentication Specifies authentication methods for GC accessing higher privilege levels. SSH Public Key • SK - IPv6 Access List Configuration • v6CMC • v6DP - aaa authentication login Defines login authentication. enable password Sets...
Command Line Interface Guide
Page 62
... each Mode abbreviation, see "Mode Types" on page 60. Renames the existing MAC Access Control List GC (ACL) name. NOTE: *For the meaning of interfaces. ACL Command access-list deny|permit ip access-group ip access-group out mac access-group mac access-list extended mac access-list extended rename show users login-history Displays information about login histories of the...
... each Mode abbreviation, see "Mode Types" on page 60. Renames the existing MAC Access Control List GC (ACL) name. NOTE: *For the meaning of interfaces. ACL Command access-list deny|permit ip access-group ip access-group out mac access-group mac access-list extended mac access-list extended rename show users login-history Displays information about login histories of the...
Command Line Interface Guide
Page 63
.... bridge multicast forward-all Multicast packets on the port while the port is in the bridge- Command Groups 63 Command Description Mode* show mac access-list Displays a MAC access list and all of all Enables forwarding of the rules PE that can be a forwarding-unregistered- bridge aging-time Sets the address table aging time...
.... bridge multicast forward-all Multicast packets on the port while the port is in the bridge- Command Groups 63 Command Description Mode* show mac access-list Displays a MAC access list and all of all Enables forwarding of the rules PE that can be a forwarding-unregistered- bridge aging-time Sets the address table aging time...
Command Line Interface Guide
Page 66
... Command Groups PE show ip dhcp snooping database Displays the DHCP snooping configuration PE related to filter invalid ARP packets. Dynamic ARP Inspection Command arp access-list clear counters ip arp inspection ip arp inspection filter ip arp inspection limit ip arp inspection trust ip arp inspection validate Description Mode* Creates an...
... Command Groups PE show ip dhcp snooping database Displays the DHCP snooping configuration PE related to filter invalid ARP packets. Dynamic ARP Inspection Command arp access-list clear counters ip arp inspection ip arp inspection filter ip arp inspection limit ip arp inspection trust ip arp inspection validate Description Mode* Creates an...
Command Line Interface Guide
Page 67
... the interface configuration mode to an interface. show ip arp inspection Displays the statistics of a IC given Ethernet interface when not using autonegotiation. show arp access-list Displays the configured ARP ACLs with the PE rules. Ethernet Configuration Command clear counters description duplex flowcontrol interface ethernet interface range ethernet mtu Description Mode...
... the interface configuration mode to an interface. show ip arp inspection Displays the statistics of a IC given Ethernet interface when not using autonegotiation. show arp access-list Displays the configured ARP ACLs with the PE rules. Ethernet Configuration Command clear counters description duplex flowcontrol interface ethernet interface range ethernet mtu Description Mode...
Command Line Interface Guide
Page 72
...) Enables MLD Snooping on the system (Global GC Config Mode). IC leave admin mode on a VLAN or interface. show ipv6 access-lists Displays an IPv6 access list (and the rules PE defined for the IP header of each Mode abbreviation, see "Mode Types" on a particular VLAN VLAN and...interface or VLAN. IPv6 ACL Command Description Mode* {deny | permit} Creates a new rule for an IC interface or VLAN. L ipv6 access-list Creates an IPv6 Access Control List (ACL) GC consisting of classification fields defined for it with a VLAN ID in that VLAN. 72 Command Groups ipv6...
...) Enables MLD Snooping on the system (Global GC Config Mode). IC leave admin mode on a VLAN or interface. show ipv6 access-lists Displays an IPv6 access list (and the rules PE defined for the IP header of each Mode abbreviation, see "Mode Types" on a particular VLAN VLAN and...interface or VLAN. IPv6 ACL Command Description Mode* {deny | permit} Creates a new rule for an IC interface or VLAN. L ipv6 access-list Creates an IPv6 Access Control List (ACL) GC consisting of classification fields defined for it with a VLAN ID in that VLAN. 72 Command Groups ipv6...
Command Line Interface Guide
Page 104
...Controls the advertisement of an IC interface. Mode* ROSPF IC RC PE ROSPF Sets a default for the specified IC interface. Specifies the access list to treat an interface as a point- Sets the OSPF Authentication Type and Key for the specified IC interface. Command auto-cost bandwidth ...capability opaque clear ip ospf default-information originate default-metric distance ospf distribute-list out enable exit-overflow-interval external-lsdb-limit ip ospf area ip ospf authentication ip ospf cost ip ospf dead-interval ip...
...Controls the advertisement of an IC interface. Mode* ROSPF IC RC PE ROSPF Sets a default for the specified IC interface. Specifies the access list to treat an interface as a point- Sets the OSPF Authentication Type and Key for the specified IC interface. Command auto-cost bandwidth ...capability opaque clear ip ospf default-information originate default-metric distance ospf distribute-list out enable exit-overflow-interval external-lsdb-limit ip ospf area ip ospf authentication ip ospf cost ip ospf dead-interval ip...
Command Line Interface Guide
Page 112
...the router discovery information for all PE interfaces, or for the metric of default routes. Specifies the access list to filter routes received RIP from the interface. Routing Information Protocol Command auto-summary default-information originate default-metric distance ...rip distribute-list out Description Enables the RIP auto-summarization mode. Controls the advertisement of distributed RIP routes. Router Discovery Protocol...
...the router discovery information for all PE interfaces, or for the metric of default routes. Specifies the access list to filter routes received RIP from the interface. Routing Information Protocol Command auto-summary default-information originate default-metric distance ...rip distribute-list out Description Enables the RIP auto-summarization mode. Controls the advertisement of distributed RIP routes. Router Discovery Protocol...
Command Line Interface Guide
Page 122
... rule. Management ACL Command Description Mode* deny (management) Defines a deny rule. MA show management access- Displays the active management access-list. Displays management access-lists. Password Management Command passwords aging passwords history Description Mode* Implements aging on page 60. Enables the ...UE speed Sets the line baud rate. PE class show management access- show line Displays line parameters. MA management access-class Defines which management access-list is used. PE list NOTE: *For the meaning of each Mode abbreviation, see "Mode...
... rule. Management ACL Command Description Mode* deny (management) Defines a deny rule. MA show management access- Displays the active management access-list. Displays management access-lists. Password Management Command passwords aging passwords history Description Mode* Implements aging on page 60. Enables the ...UE speed Sets the line baud rate. PE class show management access- show line Displays line parameters. MA management access-class Defines which management access-list is used. PE list NOTE: *For the meaning of each Mode abbreviation, see "Mode...
Command Line Interface Guide
Page 143
... Multiple Spanning Tree configuration mode. • Line Interface - The Global Configuration mode command management access-list is used to enter the Management Access List configuration mode. Global Configuration Mode Global Configuration commands apply to features that affect the system as ...mode. The Privileged EXEC mode command configure is used to enter into the IPv6 DHCP Pool mode. • Management Access List - console(config)# Interface and Other Specific Configuration Modes Interface configuration modes are the Interface Configuration and other specific configuration ...
... Multiple Spanning Tree configuration mode. • Line Interface - The Global Configuration mode command management access-list is used to enter the Management Access List configuration mode. Global Configuration Mode Global Configuration commands apply to features that affect the system as ...mode. The Privileged EXEC mode command configure is used to enter into the IPv6 DHCP Pool mode. • Management Access List - console(config)# Interface and Other Specific Configuration Modes Interface configuration modes are the Interface Configuration and other specific configuration ...
Command Line Interface Guide
Page 145
...Logging - Configures the parameters for the SNMP server community. • Crypto Certificate Request - Configures conditions required to enter the MAC Access-List configuration mode. • TACACS - Configures the parameters for the RADIUS server. • SNMP Host Configuration - is the current... following is typically the user-configured hostname established by the hostname command. [command mode] - • MAC Access-List - Configures the parameters for the TACACS server. • Radius - Configures the parameters for the SNMP v3 server host. •...
...Logging - Configures the parameters for the SNMP server community. • Crypto Certificate Request - Configures conditions required to enter the MAC Access-List configuration mode. • TACACS - Configures the parameters for the RADIUS server. • SNMP Host Configuration - is the current... following is typically the user-configured hostname established by the hostname command. [command mode] - • MAC Access-List - Configures the parameters for the TACACS server. • Radius - Configures the parameters for the SNMP v3 server host. •...
Command Line Interface Guide
Page 147
... Prompt Line Interface From Global Configuration mode, use the exit command, or press + to Privileged EXEC mode. Exit or Access Previous Mode To exit to Global Configuration mode, use the line command. Configuration classmap)# mode, use the management access-list command. console(configline)# Management Access-List From Global Configuration mode, use the class- map command.
... Prompt Line Interface From Global Configuration mode, use the exit command, or press + to Privileged EXEC mode. Exit or Access Previous Mode To exit to Global Configuration mode, use the line command. Configuration classmap)# mode, use the management access-list command. console(configline)# Management Access-List From Global Configuration mode, use the class- map command.
Command Line Interface Guide
Page 148
...- TACACS From Global Configuration mode, use the crypto key pubkeychain ssh command. Command Mode Access Method Command Prompt Exit or Access Previous Mode MAC Access List From Global Configuration mode, use the user- Chain pubkey-key)# mode, use the mac access-list command. console(tacacs)# To exit to Global Configuration mode, use the exit command, or...
...- TACACS From Global Configuration mode, use the crypto key pubkeychain ssh command. Command Mode Access Method Command Prompt Exit or Access Previous Mode MAC Access List From Global Configuration mode, use the user- Chain pubkey-key)# mode, use the mac access-list command. console(tacacs)# To exit to Global Configuration mode, use the exit command, or...
Command Line Interface Guide
Page 187
... ARP Inspection Commands • Ethernet Configuration Commands • GVRP Commands • IGMP Snooping Commands • IGMP Snooping Querier Commands • IP Addressing Commands • IPv6 Access List Commands • IPv6 MLD Snooping Querier Commands • LACP Commands • Link Dependency Commands Layer 2 Commands 187 3 Layer 2 Commands Introduction The chapters that follow describe...
... ARP Inspection Commands • Ethernet Configuration Commands • GVRP Commands • IGMP Snooping Commands • IGMP Snooping Querier Commands • IP Addressing Commands • IPv6 Access List Commands • IPv6 MLD Snooping Querier Commands • LACP Commands • Link Dependency Commands Layer 2 Commands 187 3 Layer 2 Commands Introduction The chapters that follow describe...
Command Line Interface Guide
Page 205
ACL Commands This chapter explains the following commands: • access-list • deny | permit • ip access-group • no ip access-group • mac access-group • mac access-list extended • mac access-list extended rename • show ip access-lists • show mac access-list 4 ACL Commands 205
ACL Commands This chapter explains the following commands: • access-list • deny | permit • ip access-group • no ip access-group • mac access-group • mac access-list extended • mac access-list extended rename • show ip access-lists • show mac access-list 4 ACL Commands 205