![Zyxel XS3700-24 [26/371] Chapter 4 aaa commands](/img/pdf.png)
Zyxel XS3700-24 [26/371] Chapter 4 aaa commands
![Zyxel XS3700-24 [26/371] Chapter 4 aaa commands](/views2/1168986/page26/bg1a.png)
Chapter 4 AAA Commands
Ethernet Switch CLI Reference Guide
26
no aaa authorization dot1x Disables authorization of allowing an IEEE 802.1x client to
have different bandwidth limit or VLAN ID assigned via the
external server.
C14
no aaa authorization exec Disables authorization of allowing an administrator which logs
in the Switch through Telnet or SSH to have different access
privilege level assigned via the external server.
C14
Table 11 aaa authorization Command Summary (continued)
COMMAND DESCRIPTION M P
Содержание
- Cli reference guide 1
- Default login details 1
- Ethernet switch series 1
- Intelligent ethernet switches 1
- Quick start guide 1
- Important read carefully before use keep this guide for future reference 2
- It is recommended you use the web configurator to configure the switch 2
- About this cli reference guide 3
- This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation 3
- Document conventions 4
- Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 4
- Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings 4
- Contents overview 6
- Introduction 6
- Reference a g 2 6
- Reference h m 00 6
- Reference n s 03 7
- Appendices and index of commands 39 8
- Reference t z 90 8
- Introduction 9
- Accessing the cli 11
- Console port 11
- Hapter 11
- How to access and use the cli 11
- Telnet 11
- Logging in 12
- The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again 12
- Using shortcuts and getting help 12
- Logging out 13
- Saving your configuration 13
- You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch 13
- Hapter 14
- Privilege level and command mode 14
- Privilege levels 14
- Privilege levels for commands 14
- Privilege levels for login accounts 14
- Privilege levels for sessions 15
- Command modes 16
- Command modes for privilege levels 0 12 16
- Chapter 2 privilege level and command mode 17
- Command modes for privilege levels 13 14 17
- Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another 17
- Ethernet switch cli reference guide 17
- If the session s privilege level is 13 14 the allowed commands are in one of several modes 17
- Table 7 command modes for privilege levels 13 14 and the types of commands in each one 17
- Table 8 changing between command modes for privilege levels 13 14 17
- Listing available commands 18
- Changing the administrator password 19
- Changing the enable password 19
- Hapter 19
- Initial setup 19
- Afterwards you have to use the new ip address to access the switch 20
- Changing the management ip address 20
- Changing the out of band management ip address 20
- Prohibiting concurrent logins 20
- Chapter 3 initial setup 21
- Ethernet switch cli reference guide 21
- Looking at basic system information 21
- Looking at the operating configuration 21
- See chapter 93 on page 327 for more information about these attributes 21
- This is illustrated in the following example 21
- Use this command to look at general system information about the switch 21
- Use this command to look at the current operating configuration 21
- Reference a g 22
- Aaa commands 24
- Command summary 24
- Hapter 24
- Chapter 4 aaa commands 25
- Ethernet switch cli reference guide 25
- Table 10 command summary aaa accounting continued 25
- Table 11 aaa authorization command summary 25
- Chapter 4 aaa commands 26
- Ethernet switch cli reference guide 26
- Table 11 aaa authorization command summary continued 26
- Arp commands 27
- Command summary 27
- Hapter 27
- Chapter 5 arp commands 28
- Command examples 28
- Ethernet switch cli reference guide 28
- Table 13 show ip arp 28
- The following table describes the labels in this screen 28
- This example creates a static arp entry and shows the arp tahle on the switch 28
- Arp inspection commands 29
- Command summary 29
- Hapter 29
- Chapter 6 arp inspection commands 30
- Ethernet switch cli reference guide 30
- Table 16 command summary arp inspection log 30
- Table 17 command summary interface arp inspection 30
- Table 18 command summary arp inspection vlan 30
- Chapter 6 arp inspection commands 31
- Command examples 31
- Ethernet switch cli reference guide 31
- Table 19 show arp inspection filter 31
- The following table describes the labels in this screen 31
- This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet 31
- This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet 31
- Chapter 6 arp inspection commands 32
- Ethernet switch cli reference guide 32
- Table 20 show arp inspection log 32
- The following table describes the labels in this screen 32
- This example displays whether ports are trusted or untrusted ports for arp inspection 32
- Chapter 6 arp inspection commands 33
- Ethernet switch cli reference guide 33
- Table 21 show arp inspection interface port channel 33
- The following table describes the labels in this screen 33
- Arp learning commands 34
- Command examples 34
- Command summary 34
- Hapter 34
- Bandwidth commands 35
- Command summary 35
- Hapter 35
- Chapter 8 bandwidth commands 36
- Command examples ingress 36
- Ethernet switch cli reference guide 36
- Note the sum of cirs cannot be greater than or equal to the uplink bandwidth 36
- Table 24 command summary bandwidth control bandwidth limit 36
- The following section lists the commands for this feature 36
- This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1 36
- Chapter 8 bandwidth commands 37
- Command examples cir pir 37
- Ethernet switch cli reference guide 37
- This example deactivates the outgoing bandwidth limit on port 1 37
- This example displays the bandwidth limits configured on port 1 37
- This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1 37
- Broadcast storm commands 38
- Command summary 38
- Hapter 38
- 128 broadcast packets per second 256 multicast packets per second 39
- Chapter 9 broadcast storm commands 39
- Command example bmstorm limit 39
- Command example broadcast limit multicast limit dlf limit 39
- Ethernet switch cli reference guide 39
- Table 26 command summary storm control bmstorm limit and bstorm control continued 39
- This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps 39
- This example enables broadcast storm control on the switch and configures port 1 to accept up to 39
- 64 dlf packets per second 40
- Chapter 9 broadcast storm commands 40
- Ethernet switch cli reference guide 40
- Cfm commands 41
- Cfm overview 41
- Hapter 41
- How cfm works 41
- Cfm term definition 42
- Chapter 10 cfm commands 43
- Ethernet switch cli reference guide 43
- Table 27 cfm term definitions 43
- Table 28 cfm command user input values 43
- This section lists the common term definition appears in this chapter refer to user s guide for more detailed information about cfm 43
- User input values 43
- Chapter 10 cfm commands 44
- Command summary 44
- Ethernet switch cli reference guide 44
- Table 29 cfm command summary 44
- The following section lists the commands for this feature 44
- Chapter 10 cfm commands 45
- Ethernet switch cli reference guide 45
- Note if you set the format to vid the vlan id should be the same as the vlan id you use to identify the ma 45
- Table 29 cfm command summary continued 45
- Chapter 10 cfm commands 46
- Ethernet switch cli reference guide 46
- Table 29 cfm command summary continued 46
- Command examples 47
- Remember to save new settings using the write memory command 47
- Chapter 10 cfm commands 48
- Ethernet switch cli reference guide 48
- Table 30 show cfm action mipccmdb 48
- The following table describes the labels in this screen 48
- This example displays all neighbors mep port information in the mip ccm databases 48
- This example lists all cfm domains in this example only one md md1 is configured the ma3 with the associated mep port 1 is under this md1 48
- This example starts a loopback test and displays the test result on the console 48
- Chapter 10 cfm commands 49
- Ethernet switch cli reference guide 49
- This example assigns a virtual mac address to port 3 and displays the mac addresses of the ports 2 4 the assigned virtual mac address should be unique in both the switch and the network to which it belongs 49
- This example sets the switch to carry its host name and management ip address 192 68 00 in cfm packets 49
- This example shows remote mep database information the remote mep has been configured to carry its host name and a specified ip address in cfm packets 49
- Classifier commands 50
- Hapter 50
- Chapter 11 classifier commands 51
- Command summary 51
- Ethernet switch cli reference guide 51
- Table 31 command summary classifier 51
- The following section lists the commands for this feature 51
- Chapter 11 classifier commands 52
- Command examples 52
- Ethernet switch cli reference guide 52
- In an ipv4 packet header the protocol field identifies the next level protocol the following table shows some common ipv4 protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 52
- Table 32 common ethernet types and protocol number 52
- Table 33 common ipv4protocol types and protocol numbers 52
- The following table shows some other common ethernet types and the corresponding protocol number 52
- This example creates a classifier for packets with a vlan id of 3 the resulting traffic flow is identified by the name vlan3 the policy command can use the name vlan3 to apply policy rules to this traffic flow see the policy example in chapter 56 on page 217 52
- Cluster commands 54
- Command summary 54
- Hapter 54
- Chapter 12 cluster commands 55
- Command examples 55
- Ethernet switch cli reference guide 55
- Table 35 show cluster member 55
- The following table describes the labels in this screen 55
- This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster 55
- Chapter 12 cluster commands 56
- Ethernet switch cli reference guide 56
- Logs out of the member s cli and returns to the cli of the manager 56
- Table 36 show cluster 56
- The following table describes the labels in this screen 56
- This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member 56
- This example looks at the current status of the switch s cluster 56
- Command summary 57
- Date and time commands 57
- Hapter 57
- Chapter 13 date and time commands 58
- Command examples 58
- Ethernet switch cli reference guide 58
- Table 38 time command summary continued 58
- Table 39 timesync command summary 58
- This example sets the current date current time time zone and daylight savings time 58
- Chapter 13 date and time commands 59
- Ethernet switch cli reference guide 59
- Table 40 show timesync 59
- The following table describes the labels in this screen 59
- This example looks at the current time server settings 59
- Data center bridging commands 60
- Hapter 60
- Overview 60
- Pfc ets and dcbx standards 60
- Application priority is used to globally assign a priority to all fcoe traffic on the switch dcbx data center bridging capability exchange ieee 802 qaz 2011 uses lldp link layer discovery protocol to advertize pfc ets and application priority information between switches pfc information should be consistent between connected switches so pfc can be configured automatically using dcbx 61
- Chapter 14 data center bridging commands 61
- Command summary 61
- Ethernet switch cli reference guide 61
- Pfc should be configured the same on connected switch ports if dcbx is used then one switch port must be configured to accept network configuration from the peer switch port auto if both switch ports are configured to accept configuration auto on both switch ports then the configuration of the switch port with the lowest mac address hex value sum is used 61
- Table 41 dcb user input values 61
- Table 42 priority flow control command summary 61
- The following table describes user input values available in multiple commands for this feature 61
- The following table lists the commands for this feature 61
- This section shows the commands and examples for pfc ets application priority and dcbx 61
- Chapter 14 data center bridging commands 62
- Ethernet switch cli reference guide 62
- In the following example pfc on switch a port 1 is set to auto so that it can accept the priority configuration from the peer switch b if switch a did not receive pfc pdu from switch b then priority 2 will be used by switch a 62
- In the following example switch a is not using switch b s configured priorities 62
- In the following example switch a is using switch b s configured priorities 62
- Pfc command examples 62
- Table 42 priority flow control command summary continued 62
- Use the show command to see the pfc configuration operation priority shows whether switch a is using switch b s configured priorities or not 62
- Chapter 14 data center bridging commands 64
- Create and name traffic class ids with weights for the non sp traffic type 64
- Ethernet switch cli reference guide 64
- Ets command example 1 64
- Table 43 ets command summary 64
- Table 44 ets example traffic classes 64
- Table 45 ets example traffic bandwidths 64
- The following table lists the commands for this feature 64
- The guaranteed minimum bandwidth for both san and lan traffic is 2 gbps with a link bandwidth of 10gbps 64
- This is an example where the non editable default traffic class id 0 uses sp queuing lan and san traffic uses wfq queuing with equal weighting of 50 each 64
- Application priority 65
- Chapter 14 data center bridging commands 65
- Ethernet switch cli reference guide 65
- Next configure a port for traffic class es and bind priorities to traffic classes on a port in the next example we configure port 1 and bind priorities 0 1 and 2 to traffic class 2 lan 3 4 5 and 6 to class 1 san and 7 to class 0 the default traffic class 65
- Table 46 ets example priority traffic class id mapping 65
- Table 47 application priority command summary 65
- The following table lists the commands for this feature 65
- This command shows traffic class 65
- Use the application priority command to assign a priority to all fcoe traffic on a switch 65
- Application priority can then be used in conjunction with ets and pfc as shown in the following examples 66
- Application priority command examples 66
- Chapter 14 data center bridging commands 66
- Default traffic class 0 with strict priority for priorities 0 1 2 6 7 traffic class 3 for legacy ethernet traffic guarantee bandwidth 40 for priority 4 5 traffic class 4 for fcoe traffic guarantee bandwidth 60 for priority 3 unicast to non unicast weight ratio is 100 100 66
- Ethernet switch cli reference guide 66
- In the following example all fcoe traffic on the switch is assigned with priority 3 66
- Table 48 ets example 2 traffic classes 66
- This is an application priority command example with ets 66
- This is an application priority command example with pfc 66
- Chapter 14 data center bridging commands 67
- Dcbx uses lldp link layer discovery protocol to exchange pfc ets and application priority information between switches pfc information should be consistent between switches so this can be configured automatically using dcbx 67
- Ethernet switch cli reference guide 67
- In order for switches to exchange information they must send their type length values tlvs in order to be able to read each other s information 67
- See chapter 37 on page 159 for lldp command examples 67
- See chapter 37 on page 159 for more information on lldp 67
- Table 49 dcbx command summary 67
- The following table lists the commands for this feature 67
- This is a dcbx command example 67
- Command summary 68
- Dhcp commands 68
- Hapter 68
- Chapter 15 dhcp commands 69
- Ethernet switch cli reference guide 69
- Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay 69
- Note you have to disable dhcp relay before you can enable dhcp smart relay 69
- Table 51 dhcp relay command summary continued 69
- Table 52 dhcp relay broadcast command summary 69
- Table 53 dhcp smart relay command summary 69
- Chapter 15 dhcp commands 70
- Command 70
- Command examples 70
- Ethernet switch cli reference guide 70
- In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains 70
- Table 53 dhcp smart relay command summary continued 70
- Table 54 dhcp server command summary 70
- 6 0 00 71
- Chapter 15 dhcp commands 71
- Ethernet switch cli reference guide 71
- Figure 3 example global dhcp relay 71
- Figure 4 example dhcp relay for two vlans 71
- In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00 71
- This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled 71
- Vlan1 vlan2 71
- Command summary 73
- Dhcp snooping dhcp vlan commands 73
- Hapter 73
- Chapter 16 dhcp snooping dhcp vlan commands 74
- Ethernet switch cli reference guide 74
- Table 55 dhcp snooping command summary continued 74
- Command examples 75
- Chapter 16 dhcp snooping dhcp vlan commands 76
- Displays dhcp snooping configuration details 76
- Ethernet switch cli reference guide 76
- Command summary 77
- Diffserv commands 77
- Hapter 77
- Command summary 78
- Display commands 78
- Hapter 78
- Command summary 79
- Dvmrp commands 79
- Dvmrp overview 79
- Hapter 79
- Chapter 19 dvmrp commands 80
- Command examples 80
- Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch 80
- Ethernet switch cli reference guide 80
- Figure 6 dvmrp network example 80
- In this example the switch is configured to exchange dvmrp information with other dvmrp enabled routers as shown next the switch is a dvmrp router c dvmrp is activated on ip routing domains 10 0 0 24 and 172 6 24 so that it can exchange dvmrp information with routers a and b 80
- Table 59 command summary dvmrp continued 80
- Cpu protection overview 81
- Error disable and recovery commands 81
- Error disable recovery overview 81
- Hapter 81
- User input values 81
- Chapter 20 error disable and recovery commands 82
- Command summary 82
- Ethernet switch cli reference guide 82
- Table 61 cpu protection command summary 82
- Table 62 errdisable recovery command summary 82
- The following section lists the commands for this feature 82
- Chapter 20 error disable and recovery commands 83
- Command examples 83
- Ethernet switch cli reference guide 83
- Limit the number of arp packets that port 7 can handle to 100 packets per second set to shut down port 7 when the number arp packets the port should handle exceeds the rate limit display the cpu protection settings that you just set for port 7 display the error disable status and action mode for arp packet handling 83
- Table 62 errdisable recovery command summary continued 83
- This example shows you how to configure the following 83
- Chapter 20 error disable and recovery commands 84
- Ethernet switch cli reference guide 84
- This example enables the disabled port recovery function and the recovery timer for the loopguard feature on the switch if a port is shut down due to the specified reason the switch activates the port 300 seconds the default value later this example also shows the number of the disabled port s and the time left before the port s becomes active 84
- Command summary 85
- Ethernet oam commands 85
- Hapter 85
- Ieee 802 ah link layer ethernet oam implementation 85
- Chapter 21 ethernet oam commands 86
- Command examples 86
- Ethernet switch cli reference guide 86
- Table 63 ethernet oam command summary continued 86
- This example enables ethernet oam on port 7 and sets the mode to active 86
- Chapter 21 ethernet oam commands 87
- Ethernet switch cli reference guide 87
- Table 64 show ethernet oam discovery 87
- The following table describes the labels in this screen 87
- This example performs ethernet oam discovery from port 7 87
- Chapter 21 ethernet oam commands 88
- Ethernet switch cli reference guide 88
- Table 64 show ethernet oam discovery continued 88
- This example looks at the number of oam packets transferred on port 1 88
- Chapter 21 ethernet oam commands 89
- Ethernet switch cli reference guide 89
- Table 65 show ethernet oam statistics 89
- Table 66 show ethernet oam summary 89
- The following table describes the labels in this screen 89
- This example looks at the configuration of ports on which oam is enabled 89
- Chapter 21 ethernet oam commands 90
- Ethernet switch cli reference guide 90
- Table 66 show ethernet oam summary continued 90
- Command summary 91
- External alarm commands 91
- Hapter 91
- Chapter 22 external alarm commands 92
- Command examples 92
- Ethernet switch cli reference guide 92
- This example configures and shows the name and status of the external alarm s 92
- Command summary 93
- Garp commands 93
- Garp overview 93
- Hapter 93
- Chapter 23 garp commands 94
- Command examples 94
- Ethernet switch cli reference guide 94
- In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds 94
- Green ethernet commands 95
- Green ethernet overview 95
- Hapter 95
- Active displays when eee is enabled and the eee port is up inactive displays when eee is enabled but the eee port is down or the device connected to this port does not support eee unsupported means the switch cannot display the status means eee is not enabled 96
- Chapter 24 green ethernet commands 96
- Command summary 96
- Ethernet switch cli reference guide 96
- Green ethernet command example 96
- In this example the switch supports eee and auto power down per port and short reach globally the following are explanations of the status parameters 96
- Table 69 green ethernet command summary 96
- The following section lists the commands for this feature 96
- Auto power down 97
- Chapter 24 green ethernet commands 97
- Ethernet switch cli reference guide 97
- Normal means auto power down has not reduced the power on this link power down means auto power down has reduced the power on this link unsupported means the switch cannot display the status means auto power down is not enabled 97
- Normal means short reach has not reduced the power on this link low power means short reach has reduced the power on this link unsupported means the switch cannot display the status means short reach is not enabled 97
- Short reach 97
- Chapter 24 green ethernet commands 98
- Ethernet switch cli reference guide 98
- The following example shows how to configure short reach if the switch supports short reach per port 98
- The following example shows the display for short reach if the switch supports short reach per port and showing the status 98
- Command examples 99
- Command summary 99
- Gvrp commands 99
- Hapter 99
- Reference h m 100
- Command summary 102
- Hapter 102
- Https server commands 102
- Chapter 26 https server commands 103
- Command examples 103
- Ethernet switch cli reference guide 103
- Table 72 show https 103
- The following table describes the labels in this screen 103
- This example shows the current https settings statistics and sessions 103
- Chapter 26 https server commands 104
- Ethernet switch cli reference guide 104
- Table 72 show https continued 104
- Table 73 show https session 104
- The following table describes the labels in this screen 104
- This example shows the current https sessions 104
- Chapter 26 https server commands 105
- Ethernet switch cli reference guide 105
- Table 73 show https session continued 105
- Command summary 106
- Guest vlan overview 106
- Hapter 106
- Ieee 802 x authentication commands 106
- Chapter 27 ieee 802 x authentication commands 107
- Command examples 107
- Ethernet switch cli reference guide 107
- Specifies radius server 1 with ip address 10 0 0 port 1890 and the string secretkey as the password 2 specifies the timeout period of 30 seconds that the switch will wait for a response from the radius server 3 enables port authentication on the switch 107
- Table 74 port access authenticator command summary continued 107
- This example configures the switch in the following ways 107
- Command summary 109
- Hapter 109
- Igmp and multicasting commands 109
- Igmp overview 109
- Chapter 28 igmp and multicasting commands 110
- Command examples 110
- Ethernet switch cli reference guide 110
- Sets the switch to flood unknown multicast frames sets the switch to non querier mode 110
- Table 75 igmp command summary continued 110
- Table 76 ipmc command summary 110
- This example configures igmp on the switch with the following settings 110
- Command summary 112
- Hapter 112
- Igmp snooping commands 112
- Chapter 29 igmp snooping commands 113
- Ethernet switch cli reference guide 113
- Table 78 igmp snooping command summary continued 113
- Chapter 29 igmp snooping commands 114
- Ethernet switch cli reference guide 114
- Table 78 igmp snooping command summary continued 114
- Table 79 igmp snooping vlan command summary 114
- Chapter 29 igmp snooping commands 115
- Ethernet switch cli reference guide 115
- Table 79 igmp snooping vlan command summary continued 115
- Table 80 interface igmp command summary 115
- Chapter 29 igmp snooping commands 116
- Ethernet switch cli reference guide 116
- Table 80 interface igmp command summary continued 116
- Chapter 29 igmp snooping commands 117
- Command examples 117
- Ethernet switch cli reference guide 117
- Host timeou 117
- Table 80 interface igmp command summary continued 117
- This example enables igmp snooping on the switch sets the 117
- This example limits the number of multicast groups on port 1 to 5 117
- This example shows the current multicast groups on the switch 117
- Value to 30 seconds and sets the switch to drop packets from unknown multicast groups 117
- Chapter 29 igmp snooping commands 118
- Ethernet switch cli reference guide 118
- Table 81 show multicast 118
- The following table describes the labels in this screen 118
- This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 118
- This example shows the current multicast vlan on the switch 118
- Command summary 119
- Hapter 119
- Igmp filtering commands 119
- Chapter 30 igmp filtering commands 120
- Command examples 120
- Ethernet switch cli reference guide 120
- This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 120
- Command summary 121
- Hapter 121
- Interface commands 121
- 10000 or 4000 122
- Chapter 31 interface commands 122
- Ethernet switch cli reference guide 122
- Table 83 interface command summary continued 122
- Chapter 31 interface commands 123
- Command examples 123
- Ethernet switch cli reference guide 123
- Table 84 show interfaces 123
- The following table describes the labels in this screen 123
- This example looks at the current status of port 1 123
- Chapter 31 interface commands 124
- Ethernet switch cli reference guide 124
- Table 84 show interfaces continued 124
- Chapter 31 interface commands 125
- Ethernet switch cli reference guide 125
- Sets the default port vid to 200 2 sets these ports to accept only tagged frames 125
- Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode 125
- Table 84 show interfaces continued 125
- This example configures ports 1 3 4 and 5 in the following ways 125
- This example configures ports 1 5 in the following ways 125
- Command examples 126
- Command summary 126
- Hapter 126
- Interface route domain mode 126
- Command summary 127
- Hapter 127
- Ip commands 127
- Chapter 33 ip commands 128
- Command examples 128
- Ethernet switch cli reference guide 128
- Table 87 tcp and udp command summary continued 128
- Table 88 show ip tcp 128
- The following table describes the labels in this screen 128
- This example shows the tcp statistics and listener ports see rfc 1213 for more information 128
- Chapter 33 ip commands 129
- Ethernet switch cli reference guide 129
- Table 88 show ip tcp continued 129
- Chapter 33 ip commands 130
- Ethernet switch cli reference guide 130
- Table 88 show ip tcp continued 130
- Table 89 show ip udp 130
- The following table describes the labels in this screen 130
- This example shows the udp statistics and listener ports see rfc 1213 for more information 130
- Command examples 131
- Command summary 131
- Hapter 131
- Ip source binding commands 131
- Chapter 34 ip source binding commands 132
- Ethernet switch cli reference guide 132
- Table 91 show ip source binding 132
- The following table describes the labels in this screen 132
- Hapter 133
- Ipv6 addressing 133
- Ipv6 commands 133
- Ipv6 overview 133
- Ipv6 terms 134
- A loopback address 0 0 0 0 0 0 0 1 or 1 allows a host to send packets to itself it is similar to 127 in ipv4 135
- Chapter 35 ipv6 commands 135
- Ethernet switch cli reference guide 135
- Loopback 135
- Multicast scope allows you to determine the size of the multicast group a multicast address has a predefined prefix of ff00 8 the following table describes some of the predefined multicast addresses 135
- Table 94 predefined multicast address 135
- Table 95 reserved multicast address 135
- The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group 135
- Eui 64 136
- Chapter 35 ipv6 commands 140
- Command summary 140
- Ethernet switch cli reference guide 140
- In the following mld snooping proxy example all connected upstream ports 1 7 are treated as one interface the connection between ports 8 and 9 is blocked by stp to break the loop if there is one query from a router x or mld done or report message from any upstream port it will be broadcast to all connected upstream ports 140
- Report 140
- Table 96 ipv6 user input values 140
- Table 97 ipv6 address command summary 140
- The following section lists the commands for this feature 140
- The following table describes user input values available in multiple commands for this feature 140
- Chapter 35 ipv6 commands 141
- Ethernet switch cli reference guide 141
- Note make sure an ipv6 router is available in the vlan network before using this command on the switch 141
- Table 97 ipv6 address command summary continued 141
- Chapter 35 ipv6 commands 142
- Ethernet switch cli reference guide 142
- Table 97 ipv6 address command summary continued 142
- Table 98 ipv6 dhcp relay command summary 142
- Chapter 35 ipv6 commands 143
- Ethernet switch cli reference guide 143
- Note the switch applies the time interval in increments of 10 for example if you set a time interval from 1280 to 1289 milliseconds the switch uses the time interval of 1280 milliseconds 143
- Table 100 ipv6 mld snooping proxy command summary 143
- Table 99 ipv6 icmp and ping6 command summary 143
- Chapter 35 ipv6 commands 144
- Ethernet switch cli reference guide 144
- Table 100 ipv6 mld snooping proxy command summary continued 144
- Chapter 35 ipv6 commands 145
- Ethernet switch cli reference guide 145
- Table 100 ipv6 mld snooping proxy command summary continued 145
- Chapter 35 ipv6 commands 146
- Ethernet switch cli reference guide 146
- Table 100 ipv6 mld snooping proxy command summary continued 146
- Chapter 35 ipv6 commands 147
- Ethernet switch cli reference guide 147
- Table 101 ipv6 nd command summary 147
- Chapter 35 ipv6 commands 148
- Ethernet switch cli reference guide 148
- Table 101 ipv6 nd command summary continued 148
- Table 102 ipv6 neighbor command summary 148
- Chapter 35 ipv6 commands 149
- Command examples 149
- Ethernet switch cli reference guide 149
- Table 102 ipv6 neighbor command summary continued 149
- This example shows how to enable ipv6 in vlan 1 and display the link local address the switch automatically generated and other ipv6 information for the vlan 149
- This example shows how to manually configure two ipv6 addresses one uses the eui 64 format one doesn t in vlan 1 and then display the result before using ipv6 address commands you have to enable ipv6 in the vlan and this has the switch generate a link local address for the interface 149
- Chapter 35 ipv6 commands 150
- Ethernet switch cli reference guide 150
- There are three addresses created in total for vlan 1 the address 2001 db8 c18 1 219 cbff fe00 1 64 is created with the interface id 219 cbff fe00 1 generated using the eui 64 format the address 2001 db8 c18 1 12b 64 is created exactly the same as what you entered in the command 150
- This example shows the switch owns l displays in the t field two manually configured permanent ip addresses 2001 1234 and fe80 219 cbff fe00 1 it also displays a neighbor fe80 2d0 59ff feb8 103c in vlan 1 is reachable from the switch 150
- Chapter 35 ipv6 commands 151
- Ethernet switch cli reference guide 151
- Table 103 show ipv6 neighbor 151
- The following table describes the labels in this screen 151
- This example sends ping requests to an ethernet device with ipv6 address fe80 2d0 59ff feb8 103c in vlan 1 the device also responds the pings 151
- By default windows xp and windows 2003 support ipv6 this example shows you how to use the ipv6 install command on windows xp 2003 to enable ipv6 this also displays how to use the ipconfig command to see auto generated ip addresses 152
- Chapter 35 ipv6 commands 152
- Ethernet switch cli reference guide 152
- Example enabling ipv6 on windows xp 2003 152
- This example configures a static ipv6 route to forward packets with ipv6 prefix 2100 and prefix length 64 to the gateway with ipv6 address fe80 219 cbff fe01 101 in vlan 1 152
- Example http accessing the switch using ipv6 153
- How you access the switch using http varies depending on the operating system os and the type of browser you use and the type of address you want to access 153
- Ipv6 is installed and enabled by default in windows vista use the ipconfig command to check your automatic configured ipv6 address as well you should see at least one ipv6 address available for the interface on your computer 153
- It s recommended to use internet explorer 7 or firefox to access the switch s web gui 153
- Make sure you have enabled ipv6 on your computer see section 35 use the ipconfig command in the command prompt to check the ipv6 address on your computer the example uses an interface with address fe80 2d0 59ff feb8 103c to 153
- This example shows you how to access the switch using http on windows xp 153
- Command summary 156
- Hapter 156
- Layer 2 protocol tunnel l2pt commands 156
- Chapter 36 layer 2 protocol tunnel l2pt commands 157
- Command examples 157
- Ethernet switch cli reference guide 157
- Table 105 l2pt command summary continued 157
- This example enables l2pt on the switch and sets the destination mac address for encapsulating layer 2 protocol packets received on an access port 157
- Chapter 36 layer 2 protocol tunnel l2pt commands 158
- Ethernet switch cli reference guide 158
- This example displays l2pt settings and status on port 3 you can also see how many cdp stp vtp lacp pagp and udld packets received on this port are encapsulated decapsulated or dropped 158
- This example enables l2pt for stp cdp and vtp packets on port 3 it also sets l2pt mode to access for this port 158
- This example sets l2pt mode to tunnel for port 4 158
- Hapter 159
- Link layer discovery protocol lldp commands 159
- Lldp overview 159
- Chapter 37 link layer discovery protocol lldp commands 160
- Command summary 160
- Ethernet switch cli reference guide 160
- Lldp med link layer discovery protocol for media endpoint devices is an enhanced extension to lldp especially for voice applications you can use lldp med to advertise location based information of emergency calls and or network policies for voice video streaming 160
- Table 106 lldp command summary 160
- The following section lists the commands for this feature 160
- Chapter 37 link layer discovery protocol lldp commands 161
- Ethernet switch cli reference guide 161
- Table 106 lldp command summary continued 161
- Chapter 37 link layer discovery protocol lldp commands 162
- Ethernet switch cli reference guide 162
- Table 106 lldp command summary continued 162
- Chapter 37 link layer discovery protocol lldp commands 163
- Ethernet switch cli reference guide 163
- Note make sure the lldp packet transmitting interval is shorter than its ttl to have the switch s device information being updated in the neighboring devices before it ages out 163
- Table 106 lldp command summary continued 163
- Chapter 37 link layer discovery protocol lldp commands 164
- Command examples 164
- Ethernet switch cli reference guide 164
- See chapter 14 on page 60 for dcb configuration and examples 164
- This example enables lldp on the switch sets port 2 to send and receive lldp packets and allows the switch to send optional basic management tlvs such as management address port description and system description tlvs on port 2 this example also shows the lldp settings on port 2 and global lldp settings on the switch 164
- This example shows global switch lldp settings 164
- Chapter 37 link layer discovery protocol lldp commands 165
- Ethernet switch cli reference guide 165
- Lldp settings on a port 165
- Switch lldp settings 165
- Table 107 165
- Table 108 165
- The following table describes the labels in this screen 165
- This example shows lldp settings on a port 165
- Chapter 37 link layer discovery protocol lldp commands 166
- Continued 166
- Ethernet switch cli reference guide 166
- Lldp settings on a por 166
- Switch lldp statistics 166
- Table 108 166
- Table 109 166
- The following table describes the labels in this screen 166
- This example shows global switch lldp statistics 166
- This example shows lldp statistics on a port 166
- Chapter 37 link layer discovery protocol lldp commands 167
- Ethernet switch cli reference guide 167
- Lldp statistics on a port 167
- Local lldp information 167
- Table 110 167
- Table 111 167
- The following table describes the labels in this screen 167
- This example shows local switch the switch you re accessing lldp information 167
- Chapter 37 link layer discovery protocol lldp commands 168
- Ethernet switch cli reference guide 168
- Local switch lldp information on a port 168
- Table 112 168
- The following table describes the labels in this screen 168
- This example shows local switch the switch you re accessing lldp information on a port 168
- Chapter 37 link layer discovery protocol lldp commands 169
- Continued 169
- Ethernet switch cli reference guide 169
- Local switch lldp information on a por 169
- Remote switch lldp information 169
- Table 112 169
- Table 113 169
- The following table describes the labels in this screen 169
- This example shows remote switch the switch connected to the port on the switch you re accessing lldp information 169
- Chapter 37 link layer discovery protocol lldp commands 170
- Continued 170
- Ethernet switch cli reference guide 170
- Remote switch lldp informatio 170
- Table 113 170
- Command summary 171
- Hapter 171
- Load sharing commands 171
- Load sharing overview 171
- Chapter 38 load sharing commands 172
- Command examples 172
- Ethernet switch cli reference guide 172
- Table 114 load sharing command summary continued 172
- This example enables equal cost multipath ecmp routing on the switch and sets the switch to use a packet s source and destination ip addresses to determine the routing path for the packet 172
- Command examples 173
- Command summary 173
- Hapter 173
- Logging commands 173
- Command examples 174
- Command summary 174
- Hapter 174
- Login account commands 174
- Password encryption 174
- Command summary 176
- Hapter 176
- Loopguard commands 176
- Chapter 41 loopguard commands 177
- Command examples 177
- Ethernet switch cli reference guide 177
- Table 117 show loopguard 177
- The following table describes the labels in this screen 177
- This example enables loopguard on ports 1 3 177
- Command summary 178
- Hapter 178
- Mac address commands 178
- Chapter 42 mac address commands 179
- Command examples 179
- Ethernet switch cli reference guide 179
- Table 118 mac mac aging time and mac flush command summary continued 179
- Table 119 show mac address table 179
- The following table describes the labels in this screen 179
- This example shows the current mac address table 179
- Command summary 180
- Hapter 180
- Mac authentication commands 180
- Mac authentication overview 180
- Chapter 43 mac authentication commands 181
- Command examples 181
- Ethernet switch cli reference guide 181
- Table 120 mac authentication command summary continued 181
- This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed 181
- Command summary 182
- Hapter 182
- Mac based vlan 182
- Mac based vlan overview 182
- Chapter 44 mac based vlan 183
- Command example add source mac address 183
- Command example remove source mac address 183
- Ethernet switch cli reference guide 183
- This example adds a binding source mac address to a mac based vlan with mac address 00 11 22 33 44 55 vlan id number 3 and priority level 6 183
- This example deletes a binding source mac address to a mac based vlan with mac address 00 11 22 33 44 55 183
- Command summary 184
- Hapter 184
- Mac filter commands 184
- Command example 185
- Command example filter source 185
- Command summary 186
- Hapter 186
- Mac forward commands 186
- Command summary 187
- Hapter 187
- Mac pinning commands 187
- Chapter 47 mac pinning commands 188
- Command examples 188
- Ethernet switch cli reference guide 188
- This example enables mac pinning on the switch and port 3 it also shows the mac pinning status 188
- Hapter 189
- Mirror commands 189
- Chapter 48 mirror commands 190
- Command summary 190
- Ethernet switch cli reference guide 190
- Table 127 mirror command summary 190
- Table 128 mirror filter command summary 190
- The following section lists the commands for this feature 190
- Chapter 48 mirror commands 191
- Command examples 191
- Ethernet switch cli reference guide 191
- Table 129 rmirror command summary 191
- This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3 191
- Chapter 48 mirror commands 192
- Ethernet switch cli reference guide 192
- This example creates an rmirror vlan with a vlan id of 200 on the switch sets port 6 as the reflector port and sets the priority of mirrored traffic to 3 in this rmirror vlan when the switch is the source device this example also specifies the ports 4 and 5 on which traffic will be mirrored and shows the rmirror vlan settings 192
- This example displays the mirror settings of the switch after you configured in the example above 192
- Command summary 193
- Hapter 193
- Mrstp commands 193
- Mrstp overview 193
- Chapter 49 mrstp commands 194
- Command examples 194
- Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1 194
- Ethernet switch cli reference guide 194
- In this example we enable mrstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 194
- Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 194
- Table 130 command summary mrstp 194
- This example configures mrstp in the following way 194
- Command summary 195
- Hapter 195
- Mstp commands 195
- Chapter 50 mstp commands 196
- Command examples 196
- Ethernet switch cli reference guide 196
- Table 132 mstp instance command summary 196
- This example shows the current mstp configuration 196
- Chapter 50 mstp commands 197
- Ethernet switch cli reference guide 197
- Table 133 show mstp 197
- The following table describes the labels in this screen 197
- This example shows the current cist configuration mstp instance 0 197
- Chapter 50 mstp commands 198
- Ethernet switch cli reference guide 198
- Table 134 show mstp instance 198
- The following table describes the labels in this screen 198
- Command examples 200
- Command summary 200
- Hapter 200
- Multiple login commands 200
- Command summary 201
- Hapter 201
- Mvr commands 201
- Command examples 202
- Reference n s 203
- Command summary 205
- Hapter 205
- Ospf commands 205
- Ospf overview 205
- Chapter 53 ospf commands 206
- Ethernet switch cli reference guide 206
- Table 138 ospf command summary continued 206
- Chapter 53 ospf commands 207
- Ethernet switch cli reference guide 207
- Note you cannot set two routing protocols to have the same administrative distance 207
- Table 138 ospf command summary continued 207
- Chapter 53 ospf commands 208
- Command examples 208
- Ethernet switch cli reference guide 208
- Figure 7 ospf network example 208
- In this example the switch a is an area border router abr in an ospf network 208
- Table 138 ospf command summary continued 208
- In this example the switch z is a redistributor between a rip network and an ospf network it summarizes 4 routing entries 192 68 24 192 68 1 24 learned from rip router a into 192 68 22 and then sends it to ospf router b 209
- Is also set to 1 as this router should participate in router elections 209
- This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the 209
- This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication 209
- Chapter 53 ospf commands 210
- Ethernet switch cli reference guide 210
- From the example above the third octet of all the four network ip addresses is 00001000 00001001 00001010 000001011 respectively the first 4 digits 000010 are the common part among these ip addresses so 192 68 22 can be used to represent all of the 4 networks the following example shows you how to configure the ospf summary address and then show all redistribution entries 210
- This example shows you how to enable the redistribution for rip protocol and then show all redistribution entries 210
- Command summary 211
- Hapter 211
- Password commands 211
- Password encryption 211
- Command examples 212
- Command summary 213
- Hapter 213
- Poe commands 213
- Chapter 55 poe commands 214
- Command examples 214
- Ethernet switch cli reference guide 214
- Table 140 pwr command summary continued 214
- This example enables power over ethernet poe on ports 1 4 and enables traps when the power usage reaches 25 214
- This example sets the maximum amount of power allowed for port 2 to 7500 mw 214
- Chapter 55 poe commands 215
- Ethernet switch cli reference guide 215
- Table 141 show pwr 215
- The following table describes the labels in this screen 215
- This example shows the current status and configuration of power over ethernet 215
- Chapter 55 poe commands 216
- Ethernet switch cli reference guide 216
- Note if the management mode is set to consumption this field shows na 216
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 216
- Table 141 show pwr continued 216
- Command summary 217
- Hapter 217
- Policy commands 217
- Chapter 56 policy commands 218
- Ethernet switch cli reference guide 218
- Table 142 policy command summary 218
- Chapter 56 policy commands 219
- Command examples 219
- Ethernet switch cli reference guide 219
- Table 142 policy command summary 219
- This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 11 on page 50 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets 219
- Chapter 56 policy commands 220
- Ethernet switch cli reference guide 220
- This example creates a policy policy1 for the traffic flow identified via classifier class1 see the classifier example in chapter 11 on page 50 this policy forwards class1 packets to port 8 220
- Command summary 221
- Hapter 221
- Policy route commands 221
- 9 it then shows the policy routing information 222
- By default the switch forwards all packets to the default gateway this example configures a layer 3 classifier class 1 to group traffic with source ip address 192 68 3 this example also creates a policy routing rule in profile profile 1 to set the 222
- Chapter 57 policy route commands 222
- Command examples 222
- Ethernet switch cli reference guide 222
- To forward packets that match the layer 3 classifier to the gateway with ip address 222
- Command summary 223
- Hapter 223
- Port security commands 223
- Chapter 58 port security commands 224
- Command examples 224
- Ethernet switch cli reference guide 224
- Table 144 port security command summary continued 224
- This example enables port security on port 1 and limits the number of learned mac addresses to 5 224
- Command examples 225
- Command summary 225
- Hapter 225
- Port based vlan commands 225
- Hapter 226
- Port state 226
- Pppoe ia commands 226
- Pppoe intermediate agent overview 226
- Chapter 60 pppoe ia commands 227
- Command summary 227
- Ethernet switch cli reference guide 227
- Table 146 pppoe intermediate agent command summary 227
- The following section lists the commands for this feature 227
- The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port 227
- Chapter 60 pppoe ia commands 228
- Ethernet switch cli reference guide 228
- Table 146 pppoe intermediate agent command summary continued 228
- Chapter 60 pppoe ia commands 229
- Command examples 229
- Ethernet switch cli reference guide 229
- This example is more advanced it assumes a pppoe ia client is connected to port 2 and a pppoe ia server is connected to port 5 if we want pppoe ia to work port 2 and port 5 must be belong to the some vlan and the pppoe ia must be enabled globally and in this corresponding vlan we also need to set port 5 as trust port then the last thing we need to do is to decide which sub options the received padi padr or padt packet needs to carry here assume both circuit id and remote id should be carried 229
- This is an example of how to enable and configure pppoe ia for vlans 229
- This is an example of how to enable and disable pppoe ia on the switch 229
- This is an example of how to set a pppoe ia trust port 229
- Because we didn t assign the appended string for remote id in examples 1 and 2 the switch appends a string to carry the client s mac address as default if we want the remote id to carry the forportvlanremoteidtest information for a specific vlan on a port we can add the following configuratio 230
- Similarly we can let the circuit id carry the information which we configure 230
- The following examples show you how to configure the vendor specific tag for pppoe ia they assume there is a pppoe ia client connected to port 2 and pppoe ia server or up link port connected to port 5 230
- This is a variation of the previous one and uses the same initial setup client on port 2 server on port 5 230
- Vendor specific tag examples 230
- Additionally we can let the circuit id or remote id carry the user configured information from a specific port whose priority is less than the specific vlan on a port setting 231
- Chapter 60 pppoe ia commands 231
- Ethernet switch cli reference guide 231
- Since we didn t assign the appended string for remote id in example 1 and 2 it will carry the client s mac address as default 231
- Hapter 232
- Legacy pvlan overview 232
- Private vlan commands 232
- Command examples 233
- Legacy pvlan command summary 233
- That applies to vlan 123 ports 7 and 8 are the promiscuour ports in vlan 123 other ports in this vlan are added to the isolated port list automatically and cannot communicate with each other the isolated ports in vlan 123 can send and receive traffic from ports 7 and 8 this example also shows all private vlan rules configured on the 233
- The following section lists the commands for this feature 233
- This example sets a private vlan rule 233
- Command summary 234
- Private vlan 234
- That applies to vlan 111 ports 1 2 and 24 belong to vlan 111 ports 1 and 2 are added to the isolated port list automatically and cannot communicate with each other port 24 is the uplink port and also the promiscuour port in this vlan the isolated ports in vlan 111 can send and receive traffic from the uplink port 24 this example also shows all private vlan rules configured on the 234
- The following section lists the commands for this feature 234
- This example sets a private vlan rule 234
- Chapter 61 private vlan commands 235
- Command example 235
- Ethernet switch cli reference guide 235
- Table 148 private vlan command summary continued 235
- This example sets private vlan 100 as a primary private vlan private vlan 101 as a community private vlan and private vlan 102 as an isolated private vlan vlans 101 and 102 are secondary private vlans that are associated primary private vlan 101 use the specified show command to display all private vlan configurations on the switch 235
- Chapter 61 private vlan commands 236
- Ethernet switch cli reference guide 236
- Command summary 237
- Hapter 237
- Protocol based vlan commands 237
- Protocol based vlan overview 237
- Chapter 62 protocol based vlan commands 238
- Command examples 238
- Ethernet switch cli reference guide 238
- Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed 238
- Table 149 protocol based vlan command summary continued 238
- This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6 238
- Hapter 239
- Queuing commands 239
- Queuing overview 239
- Chapter 63 queuing commands 240
- Command summary port by port configuration 240
- Ethernet switch cli reference guide 240
- For example using the default setting q0 on port 1 gets a guaranteed bandwidth of 240
- Note some models only support 4 queues 240
- Table 150 queuing command summary 240
- The following section lists the commands for this feature 240
- Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows 240
- Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues 240
- Chapter 63 queuing commands 241
- Command examples port by port configuration 241
- Ethernet switch cli reference guide 241
- Table 150 queuing command summary continued 241
- This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 241
- Chapter 63 queuing commands 242
- Command examples system wide 242
- Command summary system wide configuration 242
- Ethernet switch cli reference guide 242
- Note some models only support 4 queues 242
- Table 151 queueing command summary 242
- The following section lists the commands for this feature 242
- This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7 242
- This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 242
- Command summary 243
- Hapter 243
- Radius commands 243
- Chapter 64 radius commands 244
- Command examples 244
- Ethernet switch cli reference guide 244
- Table 153 radius accounting command summary continued 244
- This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server 244
- Command summary 245
- Hapter 245
- Remote management commands 245
- Chapter 65 remote management commands 246
- Command examples 246
- Ethernet switch cli reference guide 246
- Table 156 service control command summary continued 246
- This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all 246
- Chapter 65 remote management commands 247
- Ethernet switch cli reference guide 247
- This example disables all snmp and icmp access to the 247
- Command summary 248
- Hapter 248
- Rip commands 248
- Rip overview 248
- Chapter 66 rip commands 249
- Command examples 249
- Enables rip enters the ip routing domain 172 6 with subnet mask 255 55 55 sets the rip direction in this routing domain to both and the version to 2 with subnet broadcasting v2b the switch will send and receive rip packets in this routing domain 249
- Ethernet switch cli reference guide 249
- Note you cannot set two routing protocols to have the same administrative distance 249
- Table 157 rip command summary continued 249
- This example 249
- Hapter 250
- Rmon overview 250
- User input values 250
- Chapter 67 rmon 251
- Command summary 251
- Ethernet switch cli reference guide 251
- Table 160 rmon command summary 251
- The following section lists the commands for this feature 251
- Chapter 67 rmon 252
- Ethernet switch cli reference guide 252
- Event index number 2 enable event logging and snmp traps yes the trap s community public who will handle this alarm operator additional description for this event entry test 252
- Rmon alarm command example 252
- Rmon event command example 252
- Syntax 252
- This example also shows how to display the setting results 252
- This example shows how to configure the switch s action when an rmon event using the following settings 252
- Alarm index number 2 variable getting the number of errored packets received on port 1 how often to get a data sample every 60 seconds sampling method delta when to send an alarm when the value is higher than the rising threshold the rising threshold 50 which event s action should be taken for the rising alarm 2 see section 67 on page 252 the falling threshold 0 which event s action should be taken for the falling alarm 0 see section 67 on page 252 who will handle this alarm operator 253
- Chapter 67 rmon 253
- Ethernet switch cli reference guide 253
- This example shows you how to configure an alarm using the following settings 253
- Chapter 67 rmon 254
- Ethernet switch cli reference guide 254
- Rmon statistics command example 254
- The ethernet statistics table entry s index number 1 collecting data samples from which port 12 254
- This example also shows how to display the data collection results 254
- This example also shows how to display the setting results 254
- This example shows how to configure the settings to display current network traffic statistics using the following settings 254
- Chapter 67 rmon 255
- Ethernet switch cli reference guide 255
- Rmon history command example 255
- The history control table entry s index number 1 how many data sampling data you want to store 10 time interval between data samplings 10 seconds collecting data samples from which port 12 255
- This example also shows how to display the data collection results 255
- This example shows how to configure the settings to display historical network traffic statisticsusing the following settings 255
- Command summary 256
- Hapter 256
- Running configuration commands 256
- Switch configuration file 256
- Chapter 68 running configuration commands 257
- Command examples 257
- Ethernet switch cli reference guide 257
- Table 162 running config command summary 257
- The following section lists the commands for this feature 257
- This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8 257
- This example resets the switch to the factory default settings 257
- Command summary 258
- Hapter 258
- Sflow overview 258
- Chapter 69 sflow 259
- Command examples 259
- Ethernet switch cli reference guide 259
- Table 163 sflow command summary continued 259
- This example enables the sflow agent on the switch and configures an sflow collector with the ip address 10 8 and udp port 6343 this example also enables sflow on ports 1 2 3 and 4 and configures the same collector sample rate and poll interval for these ports 259
- Hapter 260
- Smart isolation commands 260
- Smart isolation overview 260
- Command summary 261
- The uplink port connected to the internet should be the root port otherwise with smart isolation enabled the isolated ports cannot access the internet 261
- Chapter 70 smart isolation commands 262
- Command examples 262
- Ethernet switch cli reference guide 262
- Table 165 show smart isolation 262
- The following table describes the labels in this screen 262
- This example enables smart isolation and displays smart isolation status and information on the switch you should have configured rstp or mrstp on the switch in order to have smart isolation work by adding the designated port s to the isolated port list you also have created vlan 200 and configured a private vlan rule for vlan 200 to put ports 3 4 and 5 in the isolated port list in this example the designated port 7 is added to the isolated port list after smart isolation is enabled 262
- Chapter 70 smart isolation commands 263
- Ethernet switch cli reference guide 263
- Table 165 show smart isolation continued 263
- Command summary 264
- Hapter 264
- Snmp server commands 264
- Chapter 71 snmp server commands 265
- Ethernet switch cli reference guide 265
- Table 167 snmp server command summary continued 265
- Chapter 71 snmp server commands 266
- Ethernet switch cli reference guide 266
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 266
- Table 167 snmp server command summary continued 266
- Table 168 snmp server trap destination enable traps command summary 266
- Chapter 71 snmp server commands 267
- Ethernet switch cli reference guide 267
- Table 168 snmp server trap destination enable traps command summary continued 267
- Chapter 71 snmp server commands 268
- Command examples 268
- Ethernet switch cli reference guide 268
- This example sets the switch to not send the linkup and linkdown traps received on port 3 to the snmp manager 268
- This example shows you how to display all snmp user information on the switch 268
- This example shows you how to display the snmp information on the switch 268
- Hapter 269
- Overview 269
- Stacking commands 269
- Command summary 270
- If two or more switches have stacking force master enabled then the switch will use stacking priority to determine which is master if they have the same stacking priority then the switch with the longest up time is selected uptime is measured in increments of 10 minutes the switch with the higher number of increments is selected if they have the same uptime then the switch with the lowest mac address will be the master 270
- Master election occurs when stacking standalone mode changes or when a stacking port is temporarily disconnected in stacking mode 270
- Stacking force master 2 highest stacking priority 3 longest system up time 4 lowest mac address 270
- Stacking will automatically choose a master switch in a stack but you can overwrite that by actively forcing a switch to become a master switch using the stacking force master command this master switch will have the highest priority over all other stacked switches even when they have same priority value 270
- The following section lists the commands for this feature 270
- Chapter 72 stacking commands 271
- Command examples 271
- Ethernet switch cli reference guide 271
- Select a switch to be the master change its mode to stacking mode you will see a message asking you to confirm the change press y to confirm and the switch will reboot automatically using a new config01 2 after reboot completes the master led will turn on 3 force the switch to be master configure stacking priority to a high value such as 63 and set its slot id to 1 271
- Table 170 stacking command summary continued 271
- Use show system information to show current switch stacking mode 271
- Chapter 72 stacking commands 273
- Ethernet switch cli reference guide 273
- Use these commands to then see the stacking status of the stack see details of the slots in the stack and see details of an individual slot 273
- Chapter 72 stacking commands 274
- Ethernet switch cli reference guide 274
- Use these commands to see the stacking mode on a switch 274
- Command summary 275
- Hapter 275
- Stp and rstp commands 275
- Chapter 73 stp and rstp commands 276
- Command examples 276
- Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20 276
- Ethernet switch cli reference guide 276
- Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 276
- Table 171 spanning tree command summary continued 276
- This example configures stp in the following ways 276
- Chapter 73 stp and rstp commands 277
- Ethernet switch cli reference guide 277
- Table 172 show spanning tree config 277
- The following table describes the labels in this screen 277
- This example shows the current stp settings 277
- Chapter 73 stp and rstp commands 278
- Ethernet switch cli reference guide 278
- In this example we enable rstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 278
- Table 172 show spanning tree config continued 278
- Command examples 279
- Command summary 279
- Hapter 279
- Ssh commands 279
- Chapter 74 ssh commands 280
- Ethernet switch cli reference guide 280
- Table 174 show ssh 280
- The following table describes the labels in this screen 280
- This example shows the general ssh settings 280
- Command summary 281
- Hapter 281
- Static multicast commands 281
- Command examples 282
- Command summary 283
- Hapter 283
- Static route commands 283
- Chapter 76 static route commands 284
- Command examples 284
- Ethernet switch cli reference guide 284
- For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68 284
- Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses 284
- Table 177 show ip route 284
- The following table describes the labels in this screen 284
- This example shows the current routing table 284
- You can create this static route if it is inactive however 284
- Chapter 76 static route commands 285
- Ethernet switch cli reference guide 285
- You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54 285
- Command summary 286
- Hapter 286
- Subnet based vlan commands 286
- Subnet based vlan overview 286
- Chapter 77 subnet based vlan commands 287
- Command examples 287
- Ethernet switch cli reference guide 287
- Table 178 subnet based vlan command summary continued 287
- This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24 287
- Command summary 288
- Hapter 288
- Syslog commands 288
- Chapter 78 syslog commands 289
- Ethernet switch cli reference guide 289
- Table 182 syslog type command summary continued 289
- Reference t z 290
- Command summary 292
- Hapter 292
- Tacacs commands 292
- Command summary 293
- Hapter 293
- Tech support commands 293
- Tech support overview 293
- Chapter 80 tech support commands 294
- Command examples 294
- Ethernet switch cli reference guide 294
- This example sets the mbuf threshold to 60 checks the mbuf threshold setting and generates the mbuf log report 294
- Chapter 80 tech support commands 295
- Ethernet switch cli reference guide 295
- This example sets the cpu threshold to 80 and time to 5 then uses the command show logging to see the log 295
- Command summary 296
- Hapter 296
- Tftp commands 296
- About time range 297
- Command summary 297
- Hapter 297
- Time range commands 297
- Chapter 82 time range commands 298
- Ethernet switch cli reference guide 298
- The following are some examples of using the time range commands 298
- Command summary 299
- Hapter 299
- Trunk commands 299
- Chapter 83 trunk commands 300
- Command examples 300
- Ethernet switch cli reference guide 300
- Table 189 lacp command summary 300
- Table 190 show trunk 300
- The following table describes the labels in this screen 300
- This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation 300
- This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2 300
- This example looks at the current trunks 300
- Chapter 83 trunk commands 301
- Ethernet switch cli reference guide 301
- Table 190 show trunk continued 301
- Table 191 show lacp 301
- The following table describes the labels in this screen 301
- This example shows the current lacp settings 301
- Command summary 302
- Hapter 302
- Trtcm commands 302
- Trtcm overview 302
- Chapter 84 trtcm commands 303
- Command examples 303
- Ethernet switch cli reference guide 303
- Sets the switch to inspect the dscp value of packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets 303
- Table 192 trtcm command summary continued 303
- This example activates trtcm on the switch with the following settings 303
- Chapter 84 trtcm commands 304
- Enable trtcm on the switch enable diffserv on the switch set the switch to inspect the dscp value of packets color aware mode create a trtcm dscp profile with the name abc and set dscp value 1 for green packets 2 for yellow packets 3 for red packets associate the profile abc with port 1 enable trtcm on port 1 enable diffserv on port 1 set the committed information rate cir to 4000 kpbs set the peak information rate pir to 4500 kbps display the settings of this example 304
- Ethernet switch cli reference guide 304
- This examples activates trtcm on the switch with the following settings 304
- Hapter 305
- Vlan commands 305
- Vlan configuration overview 305
- Vlan overview 305
- Command summary 306
- See chapter 31 on page 121 for interface port channel commands 306
- The following section lists the commands for the ingress checking feature 306
- The following section lists the commands for this feature 306
- Vlan ingress checking implementation differs across switch models 306
- Chapter 85 vlan commands 307
- Command examples 307
- Ethernet switch cli reference guide 307
- Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode 307
- Table 194 vlan1q ingress check command summary 307
- Table 195 ingress check command summary 307
- This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000 307
- This example deletes entry 2 in the static vlan table 307
- This example shows the vlan table 307
- Chapter 85 vlan commands 308
- Ethernet switch cli reference guide 308
- Table 196 show vlan 308
- The following table describes the labels in this screen 308
- This example enables ingress checking on ports 1 5 308
- Chapter 85 vlan commands 309
- Ethernet switch cli reference guide 309
- Table 197 show vlan counters 309
- The following table describes the labels in this screen 309
- This example displays concurrent incoming packet statistics for vlan 1 309
- Chapter 85 vlan commands 310
- Ethernet switch cli reference guide 310
- Table 197 show vlan counters continued 310
- Command summary 311
- Hapter 311
- Ip interfaces overview 311
- Vlan ip commands 311
- Chapter 86 vlan ip commands 312
- Command examples 312
- Ethernet switch cli reference guide 312
- See section 3 on page 20 for an example of how to configure a vlan management ip address 312
- Table 198 vlan ip address command summary continued 312
- Command summary 313
- Hapter 313
- Vlan mapping commands 313
- Chapter 87 vlan mapping commands 314
- Command examples 314
- Ethernet switch cli reference guide 314
- This example enables vlan mapping on port 4 314
- This example enables vlan mapping on the switch and creates a vlan mapping rule to translate the vlan id from 123 to 234 in the packets received on port 4 314
- Command summary 315
- Hapter 315
- Vlan port isolation commands 315
- Command summary 316
- Hapter 316
- Vlan stacking commands 316
- A 37 24 317
- B 48 24 317
- Chapter 89 vlan stacking commands 317
- Command examples 317
- Customer a customer a 317
- Customer b customer b 317
- Ethernet switch cli reference guide 317
- Figure 10 example vlan stacking 317
- In the following example figure both a and b are service provider s network spn customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device x and then stripping those tags at edge device y as the data frames leave the network 317
- Table 201 vlan stacking command summary continued 317
- Vlan 24 vlan 24 317
- Chapter 89 vlan stacking commands 318
- Ethernet switch cli reference guide 318
- This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3 318
- Command summary 319
- Hapter 319
- Vlan trunking commands 319
- Command summary 320
- Hapter 320
- Voice vlan commands 320
- Voice vlan overview 320
- Chapter 91 voice vlan commands 321
- Command example 321
- Ethernet switch cli reference guide 321
- This example configures voice vlan to port number 5 priority level number 6 and displays voice vlan session 321
- Chapter 91 voice vlan commands 322
- Ethernet switch cli reference guide 322
- This example sets the vlan ports for voice vlan as seen in the above example normal port is 5 to 10 fixed port is 11 to 20 and forbidden port is 21 to 28 port numbers can be higher if the switch model has 48 ports 322
- Command summary 323
- Hapter 323
- Vrrp commands 323
- Vrrp overview 323
- Chapter 92 vrrp commands 324
- Command examples 324
- Ethernet 324
- Ethernet switch cli reference guide 324
- Figure 11 example vrrp 324
- Table 204 vrrp command summary continued 324
- The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router 324
- Chapter 92 vrrp commands 325
- Ethernet switch cli reference guide 325
- This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 11 on page 324 325
- Chapter 92 vrrp commands 326
- Ethernet switch cli reference guide 326
- This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 11 on page 324 326
- Additional commands 327
- Command summary 327
- Hapter 327
- Chapter 93 additional commands 328
- Ethernet switch cli reference guide 328
- Table 206 command summary additional enable mode continued 328
- Chapter 93 additional commands 329
- Ethernet switch cli reference guide 329
- Table 206 command summary additional enable mode continued 329
- Table 207 command summary additional configure mode 329
- Chapter 93 additional commands 330
- Command examples 330
- Ethernet switch cli reference guide 330
- Table 208 cable diagnostics 330
- The following table describes the labels in this screen 330
- This example checks the cable pairs on ports 1 and 4 330
- Chapter 93 additional commands 331
- Ethernet switch cli reference guide 331
- Table 209 ping 331
- Table 210 show alarm status 331
- The following table describes the labels in this screen 331
- This example sends ping requests to an ethernet device with ip address 172 6 7 54 331
- This example shows the current status of the various alarms in the switch 331
- Chapter 93 additional commands 332
- Ethernet switch cli reference guide 332
- Table 210 show alarm status continued 332
- Table 211 show cpu utilization 332
- The following table describes the labels in this screen 332
- This example shows the current and recent cpu utilization 332
- Chapter 93 additional commands 333
- Ethernet switch cli reference guide 333
- Table 212 show hardware monitor 333
- The following table describes the labels in this screen 333
- This example looks at the current sensor readings from various places in the hardware the display for your switch may be different 333
- Chapter 93 additional commands 334
- Ethernet switch cli reference guide 334
- Table 212 show hardware monitor continued 334
- This example displays multicast vlan configuration on the 334
- Chapter 93 additional commands 335
- Ethernet switch cli reference guide 335
- Note if the management mode is set to consumption this field shows na 335
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 335
- Table 213 show multicast vlan 335
- Table 214 show poe status 335
- Table 215 show system information 335
- The following table describes the labels in this screen 335
- This example looks at general system information about the switch 335
- This example shows the current status of power over ethernet 335
- Chapter 93 additional commands 336
- Ethernet switch cli reference guide 336
- For temperature voltage transmission bias transmission and receiving power as shown 336
- Table 215 show system information continued 336
- This example displays run time sfp small form facter pluggable parameters on ports 9 the first sfp port 0 with an sfp transceiver installed and 10 the second sfp port 1 no sfp transceiver installed on the 336
- You can also see the alarm and warning threasholds 336
- Chapter 93 additional commands 337
- Ethernet switch cli reference guide 337
- For temperature voltage transmission bias transmission and receiving power as shown 337
- This example displays route information to an ethernet device with ip address 337
- This example displays run time sfp small form facter pluggable parameters on port 21 on the 337
- This example displays the firmware version the switch is currently using 337
- This example runs an internal loopback test on ports 3 6 337
- You can also see the alarm and warning threasholds 337
- Appendices and index of commands 339
- Default values 341
- Ppendix 341
- Certifications 342
- Copyright 342
- Legal information 342
- Ppendix 342
- Zyxel limited warranty 343
- Index of commands 345
- Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable 345
- Ethernet switch cli reference guide 346
- Index of commands 346
- Ethernet switch cli reference guide 347
- Index of commands 347
- Ethernet switch cli reference guide 348
- Index of commands 348
- Ethernet switch cli reference guide 349
- Index of commands 349
- Ethernet switch cli reference guide 350
- Index of commands 350
- Ethernet switch cli reference guide 351
- Index of commands 351
- Ethernet switch cli reference guide 352
- Index of commands 352
- Ethernet switch cli reference guide 353
- Index of commands 353
- Ethernet switch cli reference guide 354
- Index of commands 354
- Ethernet switch cli reference guide 355
- Index of commands 355
- Ethernet switch cli reference guide 356
- Index of commands 356
- Ethernet switch cli reference guide 357
- Index of commands 357
- Ethernet switch cli reference guide 358
- Index of commands 358
- Ethernet switch cli reference guide 359
- Index of commands 359
- Ethernet switch cli reference guide 360
- Index of commands 360
- Ethernet switch cli reference guide 361
- Index of commands 361
- Ethernet switch cli reference guide 362
- Index of commands 362
- Ethernet switch cli reference guide 363
- Index of commands 363
- Ethernet switch cli reference guide 364
- Index of commands 364
- Ethernet switch cli reference guide 365
- Index of commands 365
- Ethernet switch cli reference guide 366
- Index of commands 366
- Ethernet switch cli reference guide 367
- Index of commands 367
- Ethernet switch cli reference guide 368
- Index of commands 368
- Ethernet switch cli reference guide 369
- Index of commands 369
- Ethernet switch cli reference guide 370
- Index of commands 370
- Ethernet switch cli reference guide 371
- Index of commands 371
Похожие устройства
- HP pavilion g7-2371er, e6h10ea Инструкция по эксплуатации
- HP 650, h0w49es Инструкция по эксплуатации
- Zyxel XS3900-48F Инструкция по эксплуатации
- Zyxel XS3900-48F Технические характеристики
- Zyxel XS3900-48F Справочник командного интерфейса
- HP scanjet enterprise 7000 s2 Инструкция по эксплуатации
- HP scanjet professional 3000 s2 Инструкция по эксплуатации
- Zyxel MC1000-SFP-FP Инструкция по эксплуатации
- Zyxel MC1000-SFP-FP Технические характеристики
- HP scanjet g4010 Инструкция по эксплуатации
- HP probook 6570b, c3c70es Инструкция по эксплуатации
- HP laserjet pro 500 m521dw Инструкция по эксплуатации
- Zyxel NXC2500 Инструкция по эксплуатации
- Zyxel NXC2500 Инструкция по установке
- Zyxel NXC2500 Технические характеристики
- Zyxel NXC2500 Справочник командного интерфейса
- HP laserjet pro 500 m521dn Инструкция по эксплуатации
- HP scanjet 300 Инструкция по эксплуатации
- HP scanjet 200 Инструкция по эксплуатации
- HP designjet t120 Инструкция по эксплуатации