Command Line Interface Guide
Page 46
... GVRP IGMP Snooping IGMP Snooping Querier IP Addressing IPv6 ACL IPv6 MLD Snooping IPv6 MLD Snooping Querier LACP Link Dependency LLDP Port Aggregator Commands Port Monitor QoS Radius Spanning Tree TACACS+ VLAN Voice VLAN 802.1X Layer 3 Commands ARP (IPv4) DHCP and BOOTP Relay (IPv4) Description Configures DHCP snooping and whether an interface is trusted for rejection of invalid and malicious ARP packets. Configures and manages IP addresses on specific target ports. Configures and displays LLDP information. Monitors activity on the switch. www.dell.com | support.dell.com Table...
... GVRP IGMP Snooping IGMP Snooping Querier IP Addressing IPv6 ACL IPv6 MLD Snooping IPv6 MLD Snooping Querier LACP Link Dependency LLDP Port Aggregator Commands Port Monitor QoS Radius Spanning Tree TACACS+ VLAN Voice VLAN 802.1X Layer 3 Commands ARP (IPv4) DHCP and BOOTP Relay (IPv4) Description Configures DHCP snooping and whether an interface is trusted for rejection of invalid and malicious ARP packets. Configures and manages IP addresses on specific target ports. Configures and displays LLDP information. Monitors activity on the switch. www.dell.com | support.dell.com Table...
Command Line Interface Guide
Page 48
Configures SSH authentication. Configures sFlow monitoring. Configures Web based access to serial port or telnet console. www.dell.com | support.dell.com Table 1-1. Configures Telnet service on the switch and displays Telnet information. Configures SNMP communities, traps and displays SNMP information. Configures the switch clock, name and authorized users. Describes user commands used for entering CLI commands. Manages and displays syslog messages. Can be configured through the CLI and displays RMON information. Controls display of debug output to the switch. 48 System...
Configures SSH authentication. Configures sFlow monitoring. Configures Web based access to serial port or telnet console. www.dell.com | support.dell.com Table 1-1. Configures Telnet service on the switch and displays Telnet information. Configures SNMP communities, traps and displays SNMP information. Configures the switch clock, name and authorized users. Describes user commands used for entering CLI commands. Manages and displays syslog messages. Can be configured through the CLI and displays RMON information. Controls display of debug output to the switch. 48 System...
Command Line Interface Guide
Page 50
... method list when accessing a LC higher privilege level from a remote telnet or console. enable password Sets a local password to control access to accept VLAN assignment by the GC radius RADIUS server. GC aaa authorization network default Enables the switch to the normal level. password Specifies a password on interfaces running IEEE 802.1X. aaa authentication login Defines login authentication. GC login authentication Specifies the login authentication method list for use on a line. IPv6 DHCP Pool Configuration Layer 2 Commands AAA Command Description Mode* aaa...
... method list when accessing a LC higher privilege level from a remote telnet or console. enable password Sets a local password to control access to accept VLAN assignment by the GC radius RADIUS server. GC aaa authorization network default Enables the switch to the normal level. password Specifies a password on interfaces running IEEE 802.1X. aaa authentication login Defines login authentication. GC login authentication Specifies the login authentication method list for use on a line. IPv6 DHCP Pool Configuration Layer 2 Commands AAA Command Description Mode* aaa...
Command Line Interface Guide
Page 59
... Disables DHCP/BOOTP on the OOB port. *NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 49. Mode* PE IPv6 ACL Command Description Mode* {deny | permit} Creates a new rule for an interface or IC VLAN. VLAN ipv6 mld snooping mcrtexpiretime Sets the Multicast Router Present Expiration time. VLAN show ipv6 mld snooping groups Displays the MLD Snooping entries in the MFDB table. GC ipv6 traffic-filter Attaches a specific IPv6 ACL to an interface...
... Disables DHCP/BOOTP on the OOB port. *NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 49. Mode* PE IPv6 ACL Command Description Mode* {deny | permit} Creates a new rule for an interface or IC VLAN. VLAN ipv6 mld snooping mcrtexpiretime Sets the Multicast Router Present Expiration time. VLAN show ipv6 mld snooping groups Displays the MLD Snooping entries in the MFDB table. GC ipv6 traffic-filter Attaches a specific IPv6 ACL to an interface...
Command Line Interface Guide
Page 69
... a server port number. IC spanning-tree priority Configures the spanning tree priority. PE tacacs-server host Specifies a TACACS+ server host. spanning-tree portfast default Enables Portfast mode on spanningtree ports in seconds. spanning-tree transmit hold-count Set the maximum number of each Mode abbreviation, see "Mode Types" on page 49. 69 IC spanning-tree mst priority Configures the switch priority for multiple spanning tree (MST) IC calculations. GC spanning-tree port-priority Configures port priority. TACACS+ Command Description Mode* key...
... a server port number. IC spanning-tree priority Configures the spanning tree priority. PE tacacs-server host Specifies a TACACS+ server host. spanning-tree portfast default Enables Portfast mode on spanningtree ports in seconds. spanning-tree transmit hold-count Set the maximum number of each Mode abbreviation, see "Mode Types" on page 49. 69 IC spanning-tree mst priority Configures the switch priority for multiple spanning tree (MST) IC calculations. GC spanning-tree port-priority Configures port priority. TACACS+ Command Description Mode* key...
Command Line Interface Guide
Page 121
... Web, CLI and the remote Dell Network Manager. From Global console(config- When finished, exit the session with no user configuration saved previously. 1. If access is in its basic operation and be managed over a direct connection to the switch console port or through a Telnet connection, the switch must have a defined IP address, corresponding management access granted, and a connection to set up more advanced configurations. 121 Configure the switch using the Easy Setup Wizard and enter the necessary commands to Privileged EXEC mode. Command Mode...
... Web, CLI and the remote Dell Network Manager. From Global console(config- When finished, exit the session with no user configuration saved previously. 1. If access is in its basic operation and be managed over a direct connection to the switch console port or through a Telnet connection, the switch must have a defined IP address, corresponding management access granted, and a connection to set up more advanced configurations. 121 Configure the switch using the Easy Setup Wizard and enter the necessary commands to Privileged EXEC mode. Command Mode...
Command Line Interface Guide
Page 124
Yes Is SNMP Management Required? No Save Setup? Transfer to download a configuration. No Request user name, password DHCP? Yes Simple Mode? Yes Copy to Config No Yes No Yes No 124 Transfer to CLI mode Auto Config will attempt to CLI mode. No Does the user want to CLI mode Request SNMP Community String & Server IP Address Request IP Address, Network Mask, Default Gateway IP Set Simple mode Discard Changes and Restart Wizard Transfer to use setup wizard? www.dell.com | support.dell.com Figure 2-1. Easy Setup Wizard for...
Yes Is SNMP Management Required? No Save Setup? Transfer to download a configuration. No Request user name, password DHCP? Yes Simple Mode? Yes Copy to Config No Yes No Yes No 124 Transfer to CLI mode Auto Config will attempt to CLI mode. No Does the user want to CLI mode Request SNMP Community String & Server IP Address Request IP Address, Network Mask, Default Gateway IP Set Simple mode Discard Changes and Restart Wizard Transfer to use setup wizard? www.dell.com | support.dell.com Figure 2-1. Easy Setup Wizard for...
Command Line Interface Guide
Page 126
... address from the network via DHCP (this question within 60 seconds)? [Y/N] y Step 1: The system is used to login to setup your initial privilege (Level 15) user account. Return later and setup other accounts and change privilege levels later. www.dell.com | support.dell.com continue with normal operation using SNMP (required for Dell Network Manager) you use to access the CLI, Web interface, or SNMP interface for SNMP management by entering [ctrl+z]. For more information on the network). To setup a user...
... address from the network via DHCP (this question within 60 seconds)? [Y/N] y Step 1: The system is used to login to setup your initial privilege (Level 15) user account. Return later and setup other accounts and change privilege levels later. www.dell.com | support.dell.com continue with normal operation using SNMP (required for Dell Network Manager) you use to access the CLI, Web interface, or SNMP interface for SNMP management by entering [ctrl+z]. For more information on the network). To setup a user...
Command Line Interface Guide
Page 129
... serial interface, a remote telnet, or secure shell sessions. Since the serial interface requires a physical connection for the next reboot using the command boot system. The following rules and specifications apply to create the initial administrator account and password at the time the system is accessible through Telnet, SSH, Serial Interfaces The CLI is booted. One of locally managed user accounts. CLI prevents the user from which is used if all else fails. Management Interface Security This section describes the minimum set...
... serial interface, a remote telnet, or secure shell sessions. Since the serial interface requires a physical connection for the next reboot using the command boot system. The following rules and specifications apply to create the initial administrator account and password at the time the system is accessible through Telnet, SSH, Serial Interfaces The CLI is booted. One of locally managed user accounts. CLI prevents the user from which is used if all else fails. Management Interface Security This section describes the minimum set...
Command Line Interface Guide
Page 164
... Configuration mode to create an Access Control List (ACL) that is to be forwarded to the specified unit/port. Allows the traffic matching this rule to be one of the following keywords: domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp, and www. • log - www.dell.com | support.dell.com access-list Use the access-list command in length. • deny | permit - Specifies whether the IP ACL rule permits or denies an action. • every - Refers...
... Configuration mode to create an Access Control List (ACL) that is to be forwarded to the specified unit/port. Allows the traffic matching this rule to be one of the following keywords: domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp, and www. • log - www.dell.com | support.dell.com access-list Use the access-list command in length. • deny | permit - Specifies whether the IP ACL rule permits or denies an action. • every - Refers...
Command Line Interface Guide
Page 535
.../identity frame to adjust for unusual circumstances, such as unreliable links or specific behavioral problems with MAC-based 802.1X authentication is 8. Example The following command limits the number of clients supported on the port when MAC-based 802.1X authentication is enabled on port 1/g2 to 8. console(config)# interface ethernet 1/g16 console(config-if-1/g16)# dot1x max-req 6 dot1x max-users Use the dot1x max-users command in Interface Configuration mode to set the maximum number of times...
.../identity frame to adjust for unusual circumstances, such as unreliable links or specific behavioral problems with MAC-based 802.1X authentication is 8. Example The following command limits the number of clients supported on the port when MAC-based 802.1X authentication is enabled on port 1/g2 to 8. console(config)# interface ethernet 1/g16 console(config-if-1/g16)# dot1x max-req 6 dot1x max-users Use the dot1x max-users command in Interface Configuration mode to set the maximum number of times...
User's Guide
Page 5
... Update Boot Code 91 Reset the System 92 Restore Configuration to Factory Defaults 92 Password Recovery Procedure 93 Sample Configuration Process 93 Initial Connection 94 Device Default Settings 99 Enabling Remote Management 99 Configuring Secure Management Access (HTTPS 102 6 Configuring System Information Overview 103 Asset 104 System Health 106 Versions 107 System Resources 108 Time Zone Configuration 109 Summer Time Configuration 110 Clock Detail 112 Reset 113 SNTP Global Settings 115 SNTP Authentication 116 SNTP Server 119 Managing Logs 122 Global Settings...
... Update Boot Code 91 Reset the System 92 Restore Configuration to Factory Defaults 92 Password Recovery Procedure 93 Sample Configuration Process 93 Initial Connection 94 Device Default Settings 99 Enabling Remote Management 99 Configuring Secure Management Access (HTTPS 102 6 Configuring System Information Overview 103 Asset 104 System Health 106 Versions 107 System Resources 108 Time Zone Configuration 109 Summer Time Configuration 110 Clock Detail 112 Reset 113 SNTP Global Settings 115 SNTP Authentication 116 SNTP Server 119 Managing Logs 122 Global Settings...
User's Guide
Page 21
Dynamic ARP Inspection relies on all ports. Storm control limits the amount of incoming and outgoing packets from broadcasting the traffic to all ports on the switch. In IPv6, MLD snooping performs a similar function. Port Mirroring Port mirroring monitors and mirrors network traffic by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255. Broadcast Storm Control When Layer 2 frames are forwarded, broadcast, unknown unicast, and multicast frames are identified by forwarding copies of broadcast...
Dynamic ARP Inspection relies on all ports. Storm control limits the amount of incoming and outgoing packets from broadcasting the traffic to all ports on the switch. In IPv6, MLD snooping performs a similar function. Port Mirroring Port mirroring monitors and mirrors network traffic by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255. Broadcast Storm Control When Layer 2 frames are forwarded, broadcast, unknown unicast, and multicast frames are identified by forwarding copies of broadcast...
User's Guide
Page 33
... network resources. The implementation of MLD v2 is used to specific resources while blocking off any neighboring multicast routers. For information about defining ACLs, see "Dot1x Authentication." Supplicants are of multicast listeners, the nodes that only authorized users have access to provide traffic flow control, restrict contents of routing updates, decide which multicast addresses are authenticated through the port. Security Features Access Control Lists (ACL) Access Control Lists (ACLs) ensure that want to receive the multicast data packets...
... network resources. The implementation of MLD v2 is used to specific resources while blocking off any neighboring multicast routers. For information about defining ACLs, see "Dot1x Authentication." Supplicants are of multicast listeners, the nodes that only authorized users have access to provide traffic flow control, restrict contents of routing updates, decide which multicast addresses are authenticated through the port. Security Features Access Control Lists (ACL) Access Control Lists (ACLs) ensure that want to receive the multicast data packets...
User's Guide
Page 67
Installation and Configuration Flow Chart Connect Switch and Console Power on Hardware Setup Yes Suspend Bootup Choose option 2 Boot menu (Special functions) Reboot No Loading program from flash to RAM Yes Enter Wizard No Initial Configuration: IP Address, Subnetmask, Users Basic Security configuration Wizard Configuration Process Standard Switch Installation Advanced Configuration: IP Address from DHCP, IP Address from bootp, Security management Advanced Switch Installation Configuring Dell PowerConnect 65 Figure 5-1.
Installation and Configuration Flow Chart Connect Switch and Console Power on Hardware Setup Yes Suspend Bootup Choose option 2 Boot menu (Special functions) Reboot No Loading program from flash to RAM Yes Enter Wizard No Initial Configuration: IP Address, Subnetmask, Users Basic Security configuration Wizard Configuration Process Standard Switch Installation Advanced Configuration: IP Address from DHCP, IP Address from bootp, Security management Advanced Switch Installation Configuring Dell PowerConnect 65 Figure 5-1.
User's Guide
Page 75
... (level 15). Configuring Dell PowerConnect 73 The initial account is designed to guide you in this section). • IP subnet mask for the network • Default gateway (next hop router) IP address for the management VLAN. Note: After making any configuration changes, the new configuration must be saved before rebooting. The Easy Setup Wizard guides you through the serial interface. Configuration Overview Before configuring the switch, obtain the following configuration on the switch: • Establishes...
... (level 15). Configuring Dell PowerConnect 73 The initial account is designed to guide you in this section). • IP subnet mask for the network • Default gateway (next hop router) IP address for the management VLAN. Note: After making any configuration changes, the new configuration must be saved before rebooting. The Easy Setup Wizard guides you through the serial interface. Configuration Overview Before configuring the switch, obtain the following configuration on the switch: • Establishes...
User's Guide
Page 79
... for SNMP management by default. This account is used to login to access the CLI, Web interface, or SNMP interface for the switch. Return later and setup other accounts and change privilege levels later. Set up an SNMP version 1 or 3 account, see the user documentation. This is the IP address you use to the CLI and Web interface. The system is not setup for Dell Network Manager) you can . You may request that has been collected: User Account setup = root Password = ******** Configuring Dell PowerConnect...
... for SNMP management by default. This account is used to login to access the CLI, Web interface, or SNMP interface for the switch. Return later and setup other accounts and change privilege levels later. Set up an SNMP version 1 or 3 account, see the user documentation. This is the IP address you use to the CLI and Web interface. The system is not setup for Dell Network Manager) you can . You may request that has been collected: User Account setup = root Password = ******** Configuring Dell PowerConnect...
User's Guide
Page 170
... during login and through encrypted protocol exchanges between the device and TACACS+ server. The TACACS+ Settings page contains both user-defined and the default TACACS+ settings for validation of users accessing the device. To display the TACACS+ Settings page, click System > Management Security > TACACS+ in the CLI Reference Guide: • AAA Commands. Assigning Enable Passwords Using CLI Commands For information about the CLI commands that perform this function, see the following services...
... during login and through encrypted protocol exchanges between the device and TACACS+ server. The TACACS+ Settings page contains both user-defined and the default TACACS+ settings for validation of users accessing the device. To display the TACACS+ Settings page, click System > Management Security > TACACS+ in the CLI Reference Guide: • AAA Commands. Assigning Enable Passwords Using CLI Commands For information about the CLI commands that perform this function, see the following services...
User's Guide
Page 362
... VLAN is updated with a broadcast or multicast destination address is a creative effort to the network. Managing LAGs and Ports Attached to a host group. Eventually, the packet is intended for the selected VLAN. In the case of multicast packets, however, this approach could lead to less efficient use of the groups announced in the CLI Reference Guide: • Address Table Commands IGMP Snooping Internet Group Management Protocol (IGMP) Snooping is a feature that allows a switch to forward multicast traffic intelligently...
... VLAN is updated with a broadcast or multicast destination address is a creative effort to the network. Managing LAGs and Ports Attached to a host group. Eventually, the packet is intended for the selected VLAN. In the case of multicast packets, however, this approach could lead to less efficient use of the groups announced in the CLI Reference Guide: • Address Table Commands IGMP Snooping Internet Group Management Protocol (IGMP) Snooping is a feature that allows a switch to forward multicast traffic intelligently...
Configuration Guide
Page 91
... authorized users to port mirroring, where all traffic encountered on a specific interface is called rules, that enables hardware hit count collection and reporting. You cannot configure a given ACL rule with a "log" parameter that provide security by the ACL classification rules. MAC ACLs operate on another interface. ACLs can configure mirror or redirect attributes for each ACL logging rule that accumulated a nonzero hit count during that in a router connecting two internal networks. The PowerConnect 6200 Series switch supports ACL configuration...
... authorized users to port mirroring, where all traffic encountered on a specific interface is called rules, that enables hardware hit count collection and reporting. You cannot configure a given ACL rule with a "log" parameter that provide security by the ACL classification rules. MAC ACLs operate on another interface. ACLs can configure mirror or redirect attributes for each ACL logging rule that accumulated a nonzero hit count during that in a router connecting two internal networks. The PowerConnect 6200 Series switch supports ACL configuration...