Reference Guide

ManualsBrandsDell ManualsComputer HardwarePowerEdge VRTX

FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC

2+3\new_system_mifs_ARC2_latest\Cover_Dell_Plasma_templated.fm

PowerEdge VRTX 1Gb Switch

Module — R1-2401

CLI Reference Guide

Regulatory Model: E12M

Summary of content (832 pages)

PAGE 1
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Cover_Dell_Plasma_templated.
PAGE 2
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC Notes, Cautions, and Warnings NOTE: A NOTE indicates important information that helps you make better use of your computer. CAUTION: A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed.indicates either potential damage to hardware, or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death.
PAGE 3
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm Contents 1 Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 2 User Interface Commands . . . . . . . . . . . . 47 enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 login. . . . . . . . . . . . . . . . . . .
PAGE 4
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm do. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 banner exec . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 banner login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 banner motd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 5
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm show cpu utilization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102 clear cpu counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 service cpu-counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103 set system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 6
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm sntp client poll timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124 sntp broadcast client enable . . . . . . . . . . . . . . . . . . . . . . . . 125 sntp anycast client enable . . . . . . . . . . . . . . . . . . . . . . . . . . 125 sntp client enable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126 sntp client enable (Interface) .
PAGE 7
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm 7 Auto-Update and Auto-Configuration . . 153 boot host auto-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153 boot host auto-update . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154 boot host dhcp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154 boot host auto-save . . . . . . . . . . . . . . . . . . . . .
PAGE 8
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm show snmp groups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180 snmp-server user . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181 show snmp users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183 snmp-server filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185 show snmp filters. . .
PAGE 9
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm 11 Web Server Commands . . . . . . . . . . . . . 217 ip http server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217 ip http port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217 ip http timeout-policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218 ip http secure-server . . . . . . . . . .
PAGE 10
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm 13 Line Commands . . . . . . . . . . . . . . . . . . . 237 line . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237 speed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 237 autobaud . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238 exec-timeout. . . . .
PAGE 11
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm passwords aging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 265 passwords history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 266 passwords history hold-time . . . . . . . . . . . . . . . . . . . . . . . . 267 passwords lockout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 268 aaa login-history file . . .
PAGE 12
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm tacacs-server host source-interface . . . . . . . . . . . . . . . . . 288 tacacs-server host source-interface-ipv6. . . . . . . . . . . . . 289 show tacacs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 290 show tacacs key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 291 17 SYSLOG Commands . . . . . . . . . . . . . . .
PAGE 13
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm rmon alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 314 show rmon alarm-table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 show rmon alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317 rmon event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 14
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm dot1x timeout reauth-period . . . . . . . . . . . . . . . . . . . . . . . . 344 dot1x timeout server-timeout. . . . . . . . . . . . . . . . . . . . . . . . 345 dot1x timeout supp-timeout . . . . . . . . . . . . . . . . . . . . . . . . . 346 dot1x timeout tx-period. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347 dot1x traps authentication failure . . . . . . .
PAGE 15
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm show interfaces status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371 show interfaces advertise . . . . . . . . . . . . . . . . . . . . . . . . . . 372 show interfaces description. . . . . . . . . . . . . . . . . . . . . . . . . 374 show interfaces counters . . . . . . . . . . . . . . . . . . . . . . . . . . . 375 show ports jumbo-frame . . . . . . . . . .
PAGE 16
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm green-ethernet short-reach (interface) . . . . . . . . . . . . . . . 399 green-ethernet short-reach force . . . . . . . . . . . . . . . . . . . . 400 green-ethernet short-reach threshold . . . . . . . . . . . . . . . . 401 green-ethernet power-meter reset. . . . . . . . . . . . . . . . . . . 402 show green-ethernet. . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 17
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm bridge multicast forward-all . . . . . . . . . . . . . . . . . . . . . . . . 428 bridge multicast forbidden forward-all . . . . . . . . . . . . . . . 429 mac address-table static . . . . . . . . . . . . . . . . . . . . . . . . . . . 430 clear mac address-table . . . . . . . . . . . . . . . . . . . . . . . . . . . 433 mac address-table aging-time . . . . . . . . . . . . .
PAGE 18
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm lldp receive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 458 lldp timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 459 lldp hold-multiplier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 460 lldp reinit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 19
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm 28 Spanning-Tree Commands . . . . . . . . . . . 491 spanning-tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 491 spanning-tree mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 491 spanning-tree forward-time . . . . . . . . . . . . . . . . . . . . . . . . . 492 spanning-tree hello-time. . . . . . . . . . . . . . . . . . .
PAGE 20
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm show (MST) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 512 exit (MST) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 513 abort (MST) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 514 show spanning-tree. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 21
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm switchport general forbidden vlan . . . . . . . . . . . . . . . . . . . 553 map protocol protocols-group . . . . . . . . . . . . . . . . . . . . . . . 554 switchport general map protocols-group vlan . . . . . . . . . 555 show vlan protocols-groups. . . . . . . . . . . . . . . . . . . . . . . . . 556 map subnet subnets-group . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 22
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm voice vlan enable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 579 voice vlan secure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 580 show voice vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 580 31 IGMP Snooping Commands . . . . . . . . . 583 ip igmp snooping (Global) . . . . . . . . . . . . . . . .
PAGE 23
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm ip igmp last-member-query-interval . . . . . . . . . . . . . . . . . . 602 ip igmp query-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 603 ip igmp query-max-response-time . . . . . . . . . . . . . . . . . . . 604 ip igmp robustness . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 24
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm ip dhcp snooping vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 624 ip dhcp snooping trust. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 624 ip dhcp snooping information option allowed-untrusted 625 ip dhcp snooping verify. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 626 ip dhcp snooping database . . . . . . . . . . . . . . . . .
PAGE 25
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm ip dhcp relay enable (Interface). . . . . . . . . . . . . . . . . . . . . . 645 ip dhcp relay address (Global) . . . . . . . . . . . . . . . . . . . . . . . 646 ip dhcp relay address (Interface). . . . . . . . . . . . . . . . . . . . . 647 show ip dhcp relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 648 ip dhcp information option . . . . . . . . .
PAGE 26
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm show arp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 672 show arp configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 673 ip helper-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 674 show ip helper-address . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 27
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm tunnel mode ipv6ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 710 tunnel source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 712 show ipv6 tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 713 41 IP Routing Protocol-Independent Commands 715 ip route . . . . . . . . . . . . . . . . . . . . .
PAGE 28
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm show time-range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 751 show access-lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 752 show interfaces access-lists . . . . . . . . . . . . . . . . . . . . . . . 753 clear access-lists counters . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 29
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm traffic-shape . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 777 traffic-shape queue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 778 rate-limit (Ethernet) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 779 qos wrr-queue wrtd . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 30
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm ip domain polling-interval . . . . . . . . . . . . . . . . . . . . . . . . . . 804 ip domain retry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 805 ip domain timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 805 ip host. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
PAGE 31
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.fm ipv6 mld query-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 827 ipv6 mld query-max-response-time . . . . . . . . . . . . . . . . . . 828 ipv6 mld robustness . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 829 A Port Features . . . . . . . . . . . . . . . . . . .
PAGE 32
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Dell_Plasma_ARC2TOC.
PAGE 33
3 Preface This guide describes how to use the CLI, and in addition, provides a list of the CLI commands and their arguments. The CLI commands described in this document are organized according to features in separate sections. This section describes how to use the CLI.
PAGE 34
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm Using these passwords, you can raise your user level by entering the command: enable and the password for level 15. The higher level holds only for the current session. The disable command returns the user to a lower level. To create a user and assign it a user level, use the username command. Only users with command level 15, can create users at this level.
PAGE 35
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm CLI Command Modes To configure devices, the CLI is divided into various command modes. Each command mode has its own set of specific commands. Entering a question mark "?" at the console prompt displays a list of commands available for that particular command mode. A specific command, which varies from mode to mode, is used to navigate from one mode to another.
PAGE 36
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm Global Configuration Mode Global Configuration mode commands apply to features that affect the system as a whole, rather than just a specific interface. To enter the Global Configuration mode, enter configure in the Privileged EXEC mode, and press . The Global Configuration mode prompt is displayed.
PAGE 37
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm Starting the CLI The switch can be managed over a connection to the switch console port through the CMC, or via a Telnet connection. The switch is managed by entering command keywords and parameters at the prompt. Using the switch CLI commands is similar to entering commands on a UNIX system.
PAGE 38
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm console (config-oob)# Through CMC GUI a Connect to chassis GUI. b Go to I/O Module Overview -> A Gigabit Ethernet -> Setup page. c Update the OOB IP parameters. 4 Configure the device and enter the necessary commands to complete the required tasks. 5 When finished, exit the session with the quit or exit command.
PAGE 39
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm CLI Command Conventions The following table describes the command syntax conventions. Conventions Description [] In a command line, square brackets indicates an optional entry. {} In a command line, curly brackets indicate a selection of compulsory parameters separated by the | character. One option must be selected.
PAGE 40
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm Port Naming Convention The following describes the types of ports and port naming conventions of the ports on the R1-2401 device. Types of Ports The following ports are found on the R1-2401 switch: • • 24 x 1 Gigabit/s Ethernet Ports.
PAGE 41
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm Specifying Multiple Interfaces Interface Range Interfaces can be specified on an individual basis or within a range.
PAGE 42
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm Entering Commands A CLI command is a series of keywords and arguments. Keywords identify a command, and arguments specify configuration parameters. For example, in the command "show interfaces status gi0/4" show, interfaces and status are keywords, gi is an argument that specifies the interface type, and 0/5 is an argument that specifies the port.
PAGE 43
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm Negating the Effect of Commands For many configuration commands, the prefix keyword "no" can be entered to cancel the effect of a command or reset the configuration to the default value. This guide describes the negation effect for all applicable commands.
PAGE 44
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm Keyboard Key Description Ctrl+A Moves the cursor to the beginning of the command line. Ctrl+E Moves the cursor to the end of the command line. Ctrl+Z / End Returns back to the Privileged EXEC mode from any mode. Backspace key Moves the cursor back one space. Up-arrow key Recalls commands from the history buffer, beginning with the most recent command.
PAGE 45
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.fm IP Address and Out-Of-Band Port The switch supports an Out-of-Band (OOB) port. This port is used for the management network. The IP address assigned to this port cannot be assigned to the in-band ports at the same time. In addition, the OOB port has a default IP address assigned to it: 192.168.2.1 /24.
PAGE 46
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\CLI_Preface_DellPlasma.
PAGE 47
User Interface Commands 4 enable The enable User EXEC mode command enters the Privileged EXEC mode. Syntax enable Parameters N/A Default Configuration The default privilege level is 15. Command Mode User EXEC mode Example The following example enters privilege level 15. console# enable enter password:********** console# Accepted disable The disable Privileged EXEC mode command leaves the Privileged EXEC mode and returns to the User EXEC mode.
PAGE 48
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Parameters N/A Default Configuration The default privilege level is 15. Command Mode Privileged EXEC mode Example The following example returns the user to user level 1. console# disable 1 login The login User EXEC mode command enables changing the user that is logged in. When this command is logged in, the user is prompted for a username/password.
PAGE 49
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm console# login User Name:bob Password:***** console# configure The configure Privileged EXEC mode command enters the Global Configuration mode. Syntax configure [terminal] Parameters terminal—Enter the Global Configuration mode with or without the keyword terminal. Command Mode Privileged EXEC mode Example The following example enters Global Configuration mode.
PAGE 50
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Default Configuration N/A Command Mode All configuration modes Examples The following examples change the configuration mode from Interface Configuration mode to Privileged EXEC mode. console(config-if)# exit console(config)# exit exit (EXEC) The exit User EXEC mode command closes an active terminal session by logging off the device.
PAGE 51
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm end The end command ends the current configuration session and returns to the Privileged EXEC mode. Syntax end Parameters N/A Default Configuration N/A Command Mode All configuration modes Example The following example ends the Global Configuration mode session and returns to the Privileged EXEC mode.
PAGE 52
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Command Mode All configuration modes Example The following example describes the Help system. console# help Help may be requested at any point in a command by entering a question mark '?'. If nothing matches the currently entered incomplete command, the help list is empty. This indicates that there is no command matching the input as it currently appears.
PAGE 53
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Command Mode Line Configuration Mode User Guidelines This command enables saving user-entered commands for a specified line. You can return to previous lines by using the up or down arrows. It is effective from the next time that the user logs in via console/telnet/ssh.
PAGE 54
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Default Configuration The default command history buffer size is 10 commands. Command Mode Line Configuration Mode User Guidelines This command configures the command history buffer size for a particular line. It is effective from the next time that the user logs in via console/telnet/ssh.
PAGE 55
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Default Configuration The default configuration for all terminal sessions is defined by the history Line Configuration Mode command. Command Mode User EXEC mode User Guidelines The command enables the command history for the current session. The default is determined by the history Line Configuration Mode command. This command is effective immediately.
PAGE 56
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Command Mode User EXEC mode User Guidelines The terminal history size EXEC command changes the command history buffer size for the current terminal session. Use the history Line Configuration Mode command to change the default history buffer size. The maximum number of commands in all buffers is 207.
PAGE 57
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm User Guidelines By default, a More prompt is displayed when the output contains more than 24 lines. Pressing the Enter key displays the next line; pressing the Spacebar displays the next screen of output. The terminal datadump command enables dumping all output immediately after entering the show command by removing the pause.
PAGE 58
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Command Mode Privileged EXEC mode Example The following example sets the terminal width to 100 characters console# terminal width 100 terminal prompt Use the terminal prompt User EXEC mode command to enable the terminal prompts. Use terminal no prompt command to disable the terminal prompts. The command is per session and will not be saved in the configuration database.
PAGE 59
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Syntax debug-mode Parameters N/A Default Configuration N/A Command Mode Privileged EXEC mode Example The following example enters Debug mode. console# debug-mode show history The show history User EXEC mode command lists commands entered in the current session.
PAGE 60
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Commands are listed from the first to the most recent command. The buffer remains unchanged when entering into and returning from configuration modes. Example The following example displays all the commands entered while in the current Privileged EXEC mode. console# show version SW version 3.131 (date 23-Jul-2005 time 17:34:19) HW version 1.0.
PAGE 61
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Example The following example displays the privilege level for the user logged on. console# show privilege Current privilege level is 15 do The do command executes an EXEC-level command from Global Configuration mode or any configuration submode. Syntax do command Parameters command—Specifies the EXEC-level command to execute.
PAGE 62
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm 20 20 gi0/1 permanent Required 30 30 gi0/1,gi0/3 permanent Required 31 31 gi0/1 permanent Required 91 91 gi0/1,gi0/4 permanent Required 4093 guestvlan gi0/1,gi0/3 permanent Guest console(config)# banner exec Use the banner exec Global Configuration mode command to specify and enable a message to be displayed after a successful logon.
PAGE 63
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm User Guidelines Follow this command with one or more blank spaces and a delimiting character of your choice. Then enter one or more lines of text, terminating the message with the second occurrence of the delimiting character. Use tokens in the form of $(token) in the message text to customize the banner.
PAGE 64
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm banner login Use the banner login command in Global Configuration mode to specify a message to be displayed before the username and password login prompts. This banner is applied automatically on all the user interfaces: Console, Telnet and SSH and also on the WEB GUI. Use the no form of this command to delete the existing login banner.
PAGE 65
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Use tokens in the form of $(token) in the message text to customize the banner. The tokens are described in the table below: Token Information Displayed in the Banner $(hostname) Displays the host name for the device. $(domain) Displays the domain name for the device. $(bold) Indicates that the next text is a bold text.
PAGE 66
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm login banner. Use the no form of this command to delete the existing MOTD banner. Syntax banner motd d message-text d no banner motd Parameters • d—Delimiting character of user’s choice—a pound sign (#), for example. You cannot use the delimiting character in the banner message. • message-text—The message must start on a new line. You can enter multiline messages.
PAGE 67
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm Token Information displayed in the banner $(bold) Indicates that the next text is a bold text. Using this token again to indicates the end of the bold text. $(inverse) Indicates that the next text is an inverse text. Using this token again indicates the end of the inverse text. $(contact) Displays the system contact string. $(location) Displays the system location string.
PAGE 68
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.
PAGE 69
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.
PAGE 70
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.fm console# configure console(config)# line console console(config-line)# motd-banner console(config-line)# exit console(config)# line telnet console(config-line)# motd-banner console(config-line)# exit console(config)# line ssh console(config-line)# motd-banner show banner Use the show banner commands in User EXEC mode to display the banners that have been defined.
PAGE 71
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.
PAGE 72
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\User_Interface.
PAGE 73
5 Macro Commands macro name Use the macro name Global Configuration mode command to define a macro. If a macro with this name already exists, it overrides the previouslydefined one. Use the no form of this command to delete the macro definition. Global macros define a group of CLI commands that can be run at any time Syntax macro name macro-name no macro name [macro-name] Parameters • macro-name—Name of the macro. Macro names are case sensitive.
PAGE 74
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.fm • Keyword matching is case-sensitive • Applying a macro with keywords does not change the state of the original macro definition. User Feedback The behavior of a macro command requiring user feedback is the same as if the command is entered from terminal: it sends its prompt to the terminal and accepts the user reply.
PAGE 75
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.fm The syntax for this preprocessor command is as follows: #macro keywords $keyword1 $keyword2 $keyword3 where $keywordn is the name of the keyword. Editing a Macro Macros cannot be edited. Modify a macro by creating a new macro with the same name as the existing macro. The newer macro overwrites the existing macro.
PAGE 76
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.fm no negotiation speed $SPEED #macro keywords $DUPLEX $SPEED @ Example 3—The following example shows how to display the keywords using the help character ? (as defined by the macro keywords command above) and then run the macro on the port. The #macro keywords command entered in the macro definition enables the user to receive help for the macro, as shown after the words e.g. below.
PAGE 77
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.fm Parameters • apply—Apply a macro to the specific interface. • trace—Apply and trace a macro to the specific interface. • macro-name—Name of the macro. • parameter-name value—For each parameter defined in the macro, specify its name and value. You can enter up to three parameter-value pairs. Parameter keyword matching is case sensitive.
PAGE 78
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.fm name is appended to the macro history of the interface. The show parser macro command displays the macro history of an interface. A macro applied to an interface range behaves the same way as a macro applied to a single interface. When a macro is applied to an interface range, it is applied sequentially to each interface within the range.
PAGE 79
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.fm macro description Use the macro description Interface Configuration mode command to append a description, for example, a macro name, to the macro history of an interface. Use the no form of this command to clear the macro history of an interface. When the macro is applied to an interface, the switch automatically generates a macro description command with the macro name.
PAGE 80
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.
PAGE 81
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.fm • trace—Apply and trace a macro to the switch. • macro-name—Specify the name of the macro. • parameter-name value—Specify the parameter values required for the switch. You can enter up to three parameter-value pairs. Parameter keyword matching is case sensitive. All matching occurrences of the parameters are replaced with the corresponding value.
PAGE 82
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.fm Enter macro commands one per line. End with the character ‘@’.
PAGE 83
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.fm Examples console(config)# macro global description "set console timeout interval" show parser macro Use the show parser macro User EXEC mode command to display the parameters for all configured macros or for one macro on the switch. Syntax show parser macro [{brief | description [interface interface-id | detailed] | name macro-name}] Parameters • brief—Display the name of all macros.
PAGE 84
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.
PAGE 85
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.fm default interface: company-phone default interface: company-switch default interface: company-router customizable : snmp Example 4 - This is an example of output from the show parser macro description command. console# show parser macro description Global Macro(s): company-global Example 5 - This is an example of output from the show parser macro description interface command.
PAGE 86
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Macro.
PAGE 87
System Management Commands 6 ping Use the ping EXEC mode command to send ICMP echo request packets to another node on the network. Syntax ping [ip] {ipv4-address | hostname} [size packet_size] [count packet_count] [timeout time_out] [source source-address] ping ipv6 {ipv6-address | hostname} [size packet_size] [count packet_count] [timeout time_out] [source source-address] Parameters • ip—Use IPv4 to check the network connectivity. • ipv6—Use IPv6 to check the network connectivity.
PAGE 88
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Default Usage N/A Command Mode Privileged EXEC mode User Guidelines Press Esc to stop pinging. Following are sample results of the ping command: • Destination does not respond—If the host does not respond, a “no answer from host” appears within 10 seconds. • Destination unreachable—The gateway for this destination indicates that the destination is unreachable.
PAGE 89
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm ----10.1.1.1 PING Statistics---4 packets transmitted, 4 packets received, 0% packet loss round-trip (ms) min/avg/max = 7/8/11 Example 2 - Ping a site. console# ping ip yahoo.com Pinging yahoo.com [66.218.71.198] with 64 bytes of data: 64 bytes from 66.218.71.198: icmp_seq=0. time=11 ms 64 bytes from 66.218.71.198: icmp_seq=1. time=8 ms 64 bytes from 66.218.71.198: icmp_seq=2.
PAGE 90
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm 64 bytes from FF02::1: icmp_seq=2. time=1050 ms 64 bytes from FF02::1: icmp_seq=3. time=0 ms 64 bytes from FF02::1: icmp_seq=3. time=70 ms 64 bytes from FF02::1: icmp_seq=4. time=0 ms 64 bytes from FF02::1: icmp_seq=3. time=1050 ms 64 bytes from FF02::1: icmp_seq=4. time=70 ms 64 bytes from FF02::1: icmp_sq=4.
PAGE 91
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm • count packet_count—The number of probes to be sent at each TTL level. The default count is 3. (Range: 1–10) • timeout time_out—The number of seconds to wait for a response to a probe packet. The default is 3 seconds. (Range: 1–60) • source ip-address—One of the interface addresses of the device to use as a source address for the probes.
PAGE 92
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Example console# traceroute ip umaxp1.physics.lsa.umich.edu Type Esc to abort. Tracing the route to umaxp1.physics.lsa.umich.edu (141.211.101.64) 1 i2-gateway.stanford.edu (192.68.191.83) 0 msec 0 msec 0 msec 2 STAN.POS.calren2.NET (171.64.1.213) 0 msec 0 msec 0 msec 3 SUNV--STAN.POS.calren2.net (198.32.249.73) 1 msec 1 msec 1 msec 4 Abilene--QSV.POS.calren2.net (198.32.249.
PAGE 93
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm The following are characters that can appear in the traceroute command output: Field Description * The probe timed out. ? Unknown packet type. A Administratively unreachable. Usually, this output indicates that an access list is blocking traffic. F Fragmentation required and DF is set. H Host unreachable. N Network unreachable. P Protocol unreachable.
PAGE 94
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Default Configuration The default port is the Telnet port (23) on the host. Command Mode Privileged EXEC mode User Guidelines Telnet software supports special Telnet commands in the form of Telnet sequences that map generic terminal control functions to operating systemspecific functions.
PAGE 95
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm ?/help suspends the session (return to system command prompt) Several concurrent Telnet sessions can be opened, enabling switching between the sessions. To open a subsequent session, the current connection has to be suspended by pressing the escape sequence keys (Ctrl-shift-6) and x to return to the system command prompt.
PAGE 96
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.
PAGE 97
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Example The following example displays logging in to IP address 176.213.10.50 via Telnet. console# telnet 176.213.10.50 resume The resume EXEC mode command enables switching to another open Telnet session. Syntax resume [connection] Parameters connection—Specifies the connection number. (Range: 1-4 connections.
PAGE 98
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm no hostname Parameters Name—Specifies the device host name. (Length: 1-160 characters. Maximum label size for each part of the host name: 58). The hostname must start with a letter, end with a letter or digit, and have as interior characters only letters, digits, and hyphens. Default Configuration No host name is defined.
PAGE 99
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm the current day (if the specified time is later than the current time) or on the next day (if the specified time is earlier than the current time). Specifying 00:00 schedules the reload for midnight. The reload must take place within 24 days. • day - Number of the day in the range from 1 to 31. • month - Month of the year. • cancel - Cancels a scheduled reload.
PAGE 100
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Example 2: The following example reloads the operating system in 10 minutes. console# reload in 10 This command will reset the whole system and disconnect your current session. Reload is scheduled for 11:57:08 UTC Fri Apr 21 2012 (in 10 minutes). Do you want to continue? (y/n) [Y] Example 3: The following example reloads the operating system at 13:00.
PAGE 101
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Command Mode Privileged EXEC mode User Guidelines You can use this command to display a pending software reload. To cancel a pending reload, use this command with the cancel parameter. Example The following example displays that reboot is scheduled for 00:00 on Saturday, April-20.
PAGE 102
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm User Guidelines Use the service cpu utilization command to measure information on CPU utilization. Example The following example enables measuring CPU utilization. console(config)# service cpu-utilization show cpu utilization The show cpu utilization Privileged EXEC mode command displays information about CPU utilization.
PAGE 103
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm -------------------------------------------------five seconds: 5%; one minute: 3%; five minutes: 3% clear cpu counters The clear cpu counters EXEC mode command clears traffic counters to and from the CPU. Syntax clear cpu counters Parameters N/A Default Usage N/A Command Mode User EXEC mode Example The following example clears the CPU traffic counters.
PAGE 104
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Parameters N/A Default Usage N/A Command Mode Global Configuration mode User Guidelines Use the show cpu counters command to display the CPU traffic counters. Example The following example enables counting CPU traffic.
PAGE 105
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm User Guidelines The system mode appears in the configuration file header to specify the system mode. It appears even if it specifies the default system mode. Changing the system mode: • Manually setting the system mode: If this command is entered manually, the Startup Configuration file is deleted and the device is rebooted.
PAGE 106
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Syntax show system mode Parameters N/A Default Usage N/A Command Mode EXEC mode Example The following example displays system mode information. console# Feature show system mode State ------------------- --------- Mode: layer-2-only show cpu counters The show cpu counters EXEC mode command displays traffic counter information to and from the CPU.
PAGE 107
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm User Guidelines Use the service cpu-counters command to enable traffic counting to and from the CPU. Example The following example displays the CPU traffic counters. console# show cpu counters CPU counters are active.
PAGE 108
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Example The following example displays information about the active users. console# show users Username Protocol Location ---------- ----------- ------------ Bob Serial John SSH 172.16.0.1 Robert HTTP 172.16.0.8 Betty Telnet 172.16.1.7 Sam 172.16.1.6 show sessions The show sessions EXEC mode command displays open Telnet sessions.
PAGE 109
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Example The following example displays open Telnet sessions. console# show sessions Connection Host Address Port Byte ---------- ------------- ---------- ----- ---- 1 Remote router 172.16.1.1 23 89 2 172.16.1.2 172.16.1.2 23 8 The following table describes significant fields shown above. Field Description Connection The connection number.
PAGE 110
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm System Contact: System Name: switch151400 System Location: System MAC Address: 00:24:ab:15:14:00 System Object ID: 1.1.3.6 Unit Temperature (Celsius) Status ---- --------------------- -----1 42 OK show version The show version EXEC mode command displays system version information.
PAGE 111
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.
PAGE 112
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Parameters session—Show information for specific session only. Available values are: management, 802.1x, port, fdb, port-mirroring, spanning-tree, vlan, voicevlan, ip-addressing, network-security and qos-acl.
PAGE 113
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm User Guidelines CAUTION: Avoid running multiple show tech-support commands on a switch or multiple switches on the network segment. Doing so may cause starvation of some time sensitive protocols, such as STP. The show tech-support command may time out if the configuration file output takes longer to display than the configured session time out time.
PAGE 114
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.
PAGE 115
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.fm Example The following example assigns the asset-tag 2365491870 to the device. console(config)# asset-tag 2365491870 show system id The show system id EXEC mode command displays the system identity information. Syntax show system id Command Mode User EXEC mode Example The following example displays the system identity information.
PAGE 116
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\System_Management.
PAGE 117
7 Clock Commands clock set The clock set Privileged EXEC mode command manually sets the system clock. Syntax clock set hh:mm:ss {[day month] | [month day]} year Parameters • hh:mm:ss—Specifies the current time in hours (military format), minutes, and seconds. (Range: hh: 0-23, mm: 0-59, ss: 0-59) • day—Specifies the current day of the month. (Range: 1-31) • month—Specifies the current month using the first three letters of the • year—Specifies the current year. (Range: 2000–2037) month name.
PAGE 118
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm clock source The clock source Global Configuration mode command configures an external time source for the system clock. Use the no form of this command to disable the external time source. Syntax clock source [sntp] no clock source Parameters • sntp—Specifies that an SNTP server is the external clock source. Default Configuration There is no external clock source.
PAGE 119
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm clock timezone Use the clock timezone Global Configuration command to set the time zone for display purposes. Use the no form of this command to set the time to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT), which is the same. Syntax clock timezone zone hours-offset [minutes-offset] no clock timezone Parameters • zone—The acronym of the time zone.
PAGE 120
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm (Daylight Saving Time). Use the no form of this command to configure the software not to automatically switch to summer time.
PAGE 121
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm Command Mode Global Configuration mode User Guidelines In both the date and recurring forms of the command, the first part of the command specifies when summer time begins, and the second part specifies when it ends. All times are relative to the local time zone. The start time is relative to standard time. The end time is relative to summer time.
PAGE 122
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm Syntax sntp authentication-key key-number md5 key-value no sntp authentication-key key-number Parameters • key-number—Specifies the key number. (Range: 1–4294967295) • key-value—Specifies the key value. (Length: 1–8 characters) Default Configuration No authentication key is defined.
PAGE 123
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm Default Configuration Authentication is disabled. Command Mode Global Configuration mode User Guidelines The command is relevant for both Unicast and Broadcast. Examples The following example enables authentication for received SNTP traffic and sets the key and encryption key.
PAGE 124
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm User Guidelines The command is relevant for both received unicast and broadcast. Examples The following example authenticates key 8.
PAGE 125
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm sntp broadcast client enable The sntp broadcast client enable Global Configuration mode command enables SNTP Broadcast clients. Use the no form of this command to disable SNTP Broadcast clients. Syntax sntp broadcast client enable no sntp broadcast client enable Parameters N/A Default Configuration The SNTP Broadcast client is disabled.
PAGE 126
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm Syntax sntp anycast client enable Parameters N/A Default Configuration The SNTP anycast client is disabled. Command Mode Global Configuration mode User Guidelines Use this command to enable the SNTP Anycast client. Example The following example enables SNTP Anycast clients.
PAGE 127
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm Command Mode Global Configuration mode Interface Configuration mode User Guidelines Use the sntp client enable command to enable SNTP Broadcast and Anycast clients.
PAGE 128
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm Example The following example enables the SNTP broadcast and anycast client on an interface. console(config)# interface vlan 100 console(config-if)# sntp client enable console(config-if)# exit sntp unicast client enable The sntp unicast client enable Global Configuration mode command enables the device to use Simple Network Time Protocol (SNTP)-predefined Unicast clients.
PAGE 129
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm sntp unicast client poll The sntp unicast client poll Global Configuration mode command enables polling for the SNTP predefined Unicast clients. Use the no form of this command to disable the polling for the SNTP client. Syntax sntp unicast client poll no sntp unicast client poll Parameters N/A Default Configuration Polling is disabled.
PAGE 130
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm Syntax sntp server {ip-address | hostname} [poll] [key keyid] no sntp server [ip-address | hostname] Parameters • ip-address—Specifies the server IP address. This can be an IPv4, IPv6 or • hostname—Specifies the server hostname. Only translation to IPv4 addresses is supported. (Length: 1–158 characters.
PAGE 131
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm sntp source-interface Use the sntp source-interface Global Configuration mode command to specify the source interface whose IPv4 address will be used as the source IPv4 address for communication with IPv4 SNTP servers. Use the no form of this command to restore the default configuration.
PAGE 132
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm sntp source-interface-ipv6 Use the sntp source-interface-ipv6 Global Configuration mode command to specify the source interface whose IPv6 address will be used ad the Source IPv6 address for communication with IPv6 SNTP servers. Use the no form of this command to restore the default configuration.
PAGE 133
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm sntp port The sntp port Global Configuration mode command specifies a SNTP User Datagram Protocol (UDP) port. Use the no form of this command to use the SNTP server default port. Syntax sntp port port-number no sntp port Parameters • port-number—Specifies the UDP port number used by an SNTP server. (Range 1–65535). Default Configuration The default port number is 123.
PAGE 134
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm Parameters • detail—Displays the time zone and summer time configuration. Command Mode User EXEC mode User Guidelines Before the time, there is displayed either a star (*), period (.), or blank: • star (*)—The clock is invalid. • period (.)—The clock was set manually. • blank—The clock was set by SNTP.
PAGE 135
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm Begins at first Sunday of Apr at 02:00. Ends at first Tuesday of Sep at 02:00. Offset is 60 minutes. Summertime (Static): Acronym is GMT Recurring every year. Begins at first Sunday of Mar at 10:00. Ends at first Sunday of Sep at 10:00. Offset is 60 minutes.
PAGE 136
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm ----------------------------------2 John123 3 Alice456 ----------------------------------Authentication is not required for synchronization. No trusted keys Unicast Clients: enabled Unicast Clients Polling: enabled Server: 1.1.1.121 Polling: disabled Encryption Key: disabled Server: dns_server1.comapany.
PAGE 137
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.fm Command Mode Privileged EXEC mode Example The following example displays the SNTP servers status: console# show sntp status Clock is synchronized, stratum 4, reference is 176.1.1.8, unicast Reference time is afe2525e.70597b34 (00:10:22.438 PDT Jul 5 1993) Unicast servers: Server: 176.1.1.8 Source: DHCPv4 on VLAN 1 Status: Up Last response: 19:58:22.
PAGE 138
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Clock.
PAGE 139
Configuration & Image File Commands 8 copy The copy Privileged EXEC mode command copies a source file to a destination file. Syntax copy source-url destination-url Parameters • source-url—Specifies the source file URL or source file reserved keyword • destination-url—Specifies the destination file URL or destination file to be copied. (Length: 1–160 characters) reserved keyword. (Length: 1–160 characters).
PAGE 140
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm Default Configuration Sensitive data is excluded if no method was specified Command Mode Privileged EXEC mode User Guidelines The location of the file system dictates the format of the source or destination URL. The entire copying process may take several minutes and differs from protocol to protocol and from network to network.
PAGE 141
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm • *.prv files cannot be copied. The following table describes the characters displayed by the system when copy is being run: Character Description ! For network transfers, indicates that the copy process is taking place. Each exclamation point indicates successful transfer of ten packets (512 bytes each). .
PAGE 142
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm • Storing the Running Config or Startup Config on a Server Use the copy running-config destination-url command to copy the current configuration file to a network server using TFTP. Use the copy startup-config destination-url command to copy the startup configuration file to a network server.
PAGE 143
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm write Use the write Privileged EXEC mode command to save the running configuration to the startup configuration file. Syntax write [memory] Parameters This command has no arguments or keywords. Command Mode Privileged EXEC mode Examples The following example shows how to overwrite the startup-config file with the running-config file with the write command.
PAGE 144
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm Parameters • url—Specifies the location URL or reserved keyword of the file to be deleted. (Length: 1–160 characters) Command Mode Privileged EXEC mode User Guidelines The following keywords and URL prefixes are supported • flash://—URL of the FLASH file. • startup-config—Startup configuration file. • WORD—Name of file (e.g. backup-config). *.sys, *.
PAGE 145
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm Example Example 1. The following example displays the list of files on a flash file system with static images. The Flash size column for all files except dynamic image specifies the maximum allowed size. The Data size column for dynamic images specifies the real size in the FLASH occupied by the file.
PAGE 146
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm Command Mode Privileged EXEC mode User Guidelines The following keywords and URL prefixes are supported • flash://—URL of the FLASH file. • startup-config—Startup configuration file. • WORD—Name of file (e.g. backup-config). Files are displayed in ASCII format, except for the images, which are displayed in a hexadecimal format. *.prv files cannot be displayed.
PAGE 147
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm Default Configuration This command has no arguments or keywords. Command Mode Privileged EXEC mode User Guidelines The following keywords and URL prefixes are supported • flash://—URL of the FLASH file. • startup-config—Startup configuration file. • WORD—Name of file (e.g. backup-config). *.sys and *.prv files cannot be renamed.
PAGE 148
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm Command Mode Privileged EXEC mode User Guidelines Use the show bootvar command to display the active image. Example The following example specifies that image-1 is the active system image file loaded by the device at startup. The results of this command is displayed in show bootvar.
PAGE 149
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm speed 1000 exit no lldp run interface vlan 1 ip address 1.1.1.1 255.0.0.0 exit line console exec-timeout 0 exit console# show startup-config Use the show startup-config Privileged EXEC mode command to display the Startup Configuration file contents. Syntax show startup-config Parameters This command has no arguments or keywords.
PAGE 150
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm speed 1000 exit no lldp run interface vlan 1 ip address 1.1.1.1 255.0.0.0 exit line console exec-timeout 0 exit console# show bootvar Use the show bootvar EXEC mode command to display the active system image file that was loaded by the device at startup, and to display the system image file that will be loaded after rebooting the switch.
PAGE 151
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.fm 1 image-1 1.1.0.73 19-Jun-2011 18:10:49 Not active* 2 image-2 1.1.0.
PAGE 152
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Configuration_Image.
PAGE 153
Auto-Update and AutoConfiguration 9 boot host auto-config Use the boot host auto-config Global Configuration mode command to enable auto configuration via DHCP. Use the no form of this command to disable DHCP auto configuration. Syntax boot host auto-config no boot host auto-config Parameters N/A Default Configuration Enabled by default with the auto option. Command Mode Global Configuration mode User Guidelines The TFTP protocol is used to download/upload a configuration file. Example Example.
PAGE 154
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Auto-Update.fm boot host auto-update Use the boot host auto-update Global Configuration mode command to enable the support of auto update via DHCP. Use the no form of this command to disable DHCP auto configuration. Syntax boot host auto-update no boot host auto-update Parameters N/A Default Configuration Enabled by default with the auto option.
PAGE 155
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Auto-Update.fm Parameters N/A Default Configuration Disabled. Command Mode Global Configuration mode User Guidelines Configuring boot host dhcp does not take effect until the next reboot.
PAGE 156
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Auto-Update.fm Examples console# boot host auto-save show boot Use the show boot Privilege EXEC mode command to show the status of the IP DHCP Auto Config process.
PAGE 157
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Auto-Update.
PAGE 158
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Auto-Update.fm Image Download via DHCP: enabled console# show boot Auto Config -----------Config Download via DHCP: enabled Next Boot Config Download via DHCP: force Configuration file auto-save: enabled Auto Update ----------Image Download via DHCP: enabled Auto Update State: Downloaded indirect image file Indirect Image filename: /image/indirectimage.
PAGE 159
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Auto-Update.fm Example show ip dhcp tftp-server tftp server address active 1.1.1.
PAGE 160
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Auto-Update.
PAGE 161
Management ACL Commands 10 management access-list The management access-list Global Configuration mode command configures a management access list (ACL) and enters the Management Access-list Configuration mode. Use the no form of this command to delete an ACL. Syntax management access-list name no management access-list name Parameters name—Specifies the ACL name.
PAGE 162
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Management_ACL.fm For IPv6 management traffic that is tunneled in IPv4 packets, the management ACL is applied first on the external IPv4 header (rules with the service field are ignored), and then again on the inner IPv6 header.
PAGE 163
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Management_ACL.fm Parameters • interface-id — Specify an interface ID. The interface ID can be one of the following types: Ethernet port, Port-channel or VLAN • service service — Specifies the service type. Possible values are: Telnet, SSH, HTTP, HTTPS and SNMP. • ipv4-address — Specifies the source IPv4 address.
PAGE 164
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Management_ACL.fm deny (Management) The deny Management Access-list Configuration mode command sets permit rules (ACEs) for the management access list (ACL). Syntax deny [interface-id] [service service] deny ip-source {ipv4-address | ipv6-address/ipv6-prefix-length} [mask {mask | prefix-length}] [interface-id] [service service] Parameters • interface-id—Specifies an interface ID.
PAGE 165
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Management_ACL.fm Example The following example denies all ports in the ACL called mlist. console(config)# management access-list mlist console(config-macl)# switchdeny management access-class The management access-class Global Configuration mode command restricts management connections by defining the active management access list (ACL).
PAGE 166
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Management_ACL.fm show management access-list The show management access-list Privileged EXEC mode command displays management access lists (ACLs). Syntax show management access-list [name] Parameters name—Specifies the name of a management access list to be displayed. (Length: 1–32 characters) Default Configuration All management ACLs are displayed.
PAGE 167
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Management_ACL.fm Command Mode Privileged EXEC mode Example The following example displays the active management ACL information.
PAGE 168
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Management_ACL.
PAGE 169
SNMP Commands 11 snmp-server server Use the snmp-server server Global Configuration mode command to enable the device to be configured by the SNMP protocol. Use the no form of this command to disable this function.
PAGE 170
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Syntax snmp-server community community-string [ro | rw | su] [ip-address | ipv6address] [mask mask | prefix prefix-length] [view view-name] [type {router | oob}] no snmp-server community community-string [ip-address] [type {router | oob}] Parameters • community-string—Define the password that permits access to the SNMP protocol. (Range: 1–20 characters).
PAGE 171
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Default Configuration No community is defined Command Mode Global Configuration mode User Guidelines The logical key of the command is the pair (community, ip-address). If ipaddress is omitted, the key is (community, All-IPs). This means that there cannot be two commands with the same community, ip address pair. The view-name is used to restrict the access rights of a community string.
PAGE 172
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Parameters • community-string—Define the password that permits access to the SNMP protocol. (Range: 1–20 characters). • ip-address—Management station IP address. The default is all IP addresses. This can be an IPv4 address, IPv6 or IPv6z address. See IPv6 Address Conventions. • mask—Specifies the mask of the IPv4 address.
PAGE 173
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Example Defines a password tom for the group abcd that enables this group to access the management station 1.1.1.121 with prefix 8. console(config)# snmp-server community-group tom abcd 1.1.1.
PAGE 174
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm If the source interface is not the outgoing interface, the minimal IPv4 address defined on the source interface is applied. If there is no available IPv4 source address, a SYSLOG message is issued when attempting to send an SNMP trap or inform. Use the no snmp-server source-interface traps command to remove the source interface for SNMP traps.
PAGE 175
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Default Configuration The IPv6 source address is the IPv6 address of the outgoing interface and selected in accordance with RFC6724. If no parameters are specified in no snmp-server source-interface, the default is both traps and informs.
PAGE 176
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Syntax snmp-server view view-name oid-tree {included | excluded} no snmp-server view view-name [oid-tree] Parameters • view-name—Specifies the name for the view that is being created or updated. (Length: 1–30 characters) • oid-tree—Specifies the ASN.1 subtree object identifier to be included or excluded from the view.
PAGE 177
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Example The following example creates a view that includes all objects in the MIB-II system group except for sysServices (System 7) and all objects for interface 1 in the MIB-II interface group (this format is specified on the parameters specified in ifEntry). console(config)# snmp-server view user-view system included console(config)# snmp-server view user-view system.
PAGE 178
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Name OID Tree Type ---------------- ---------------------- ---------- Default iso Included Default snmpNotificationMIB Excluded DefaultSuper iso Included snmp-server group Use the snmp-server group Global Configuration mode command to configure an SNMP group. Groups are used to map SNMP users to SNMP views. Use the no form of this command to remove an SNMP group.
PAGE 179
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm • read readview—Specifies the view name that enables viewing only. (Length: 1–30 characters) • write writeview—Specifies the view name that enables configuring the agent. (Length: 1–30 characters) Default Configuration No group entry exists. If notifyview is not specified, the notify view is not defined.
PAGE 180
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm show snmp groups Use the show snmp groups Privileged EXEC mode command to display the configured SNMP groups. Syntax show snmp groups [groupname] Parameters groupname—Specifies the group name. (Length: 1–30 characters) Default Configuration Display all groups.
PAGE 181
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Field Description Views Read View name enabling viewing the agent contents. If unspecified, all objects except the community-table and SNMPv3 user and access tables are available. Write View name enabling data entry and managing the agent contents. Notify View name enabling specifying an inform or a trap.
PAGE 182
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm • md5—Specifies the HMAC-MD5-96 authentication level. • Sha—Specifies the HMAC-SHA-96 authentication level. • auth-password—Specifies the authentication password. Range: Up to 32 characters. • priv-password—Specifies the privacy password (The encryption algorithm used is data encryption standard - DES). Range: Up to 64 characters. Default Configuration No group entry exists.
PAGE 183
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm when computing the authentication and privacy digests from the password. If the remote engine ID is not configured first, the configuration command fails.
PAGE 184
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.
PAGE 185
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Priv Password (encrypted) User name : : u1OnlyAuth Group name : group1 Authentication Algorithm : SHA Privacy Algorithm : None Remote : Auth Password (encrypted): 8nPzy2hzuba9pG3iiC/q0451RynUn7kq94L9WORFrRM= Priv Password (encrypted) : snmp-server filter The snmp-server filter Global Configuration mode command creates or updates an SNMP server notification filter.
PAGE 186
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Command Mode Global Configuration mode User Guidelines This command can be entered multiple times for the same filter. If an object identifier is included in two or more lines, later lines take precedence. The command's logical key is the pair (filter-name, oid-tree).
PAGE 187
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Example The following example displays the configured SNMP filters. console# show snmp filters user-filter Name OID Tree Type ------------ --------------------- --------- user-filter 1.3.6.1.2.1.1 Included user-filter 1.3.6.1.2.1.1.7 Excluded user-filter 1.3.6.1.2.1.2.2.1.*.
PAGE 188
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm • version 3—SNMPv2 traps or informs are used • Authentication options are available for SNMP v3 only. The following options are available: – noauth—Specifies no authentication of a packet. – auth—Specifies authentication of a packet without encryption. – priv—Specifies authentication of a packet with encryption.
PAGE 189
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm User Guidelines The logical key of the command is the list (ip-address/hostname, traps/informs, version). When configuring SNMP v1 or v2 notifications recipient, the software automatically generates a notification view for that recipient for all MIBs. For SNMPv3 the software does not automatically create a user or a notify view.
PAGE 190
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Default Configuration The default engine ID is defined per standard as: • First 4 octets: First bit = 1, the rest is IANA Enterprise number = 674. • Fifth octet: Set to 3 to indicate the MAC address that follows. • Last 6 octets: The device MAC address. Command Mode Global Configuration mode User Guidelines To use SNMPv3, an engine ID must be specified for the device.
PAGE 191
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm snmp-server engineID remote To specify the SNMP engine ID of a remote SNMP device, use the snmpserver engineID remote Global Configuration mode command. Use the no form of this command to remove the configured engine ID.
PAGE 192
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm show snmp engineID Use the show snmp engineID Privileged EXEC mode command to display the local SNMP engine ID. Syntax show snmp engineID Parameters N/A Default Configuration N/A Command Mode Privileged EXEC mode Example The following example displays the SNMP engine ID.
PAGE 193
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Default Configuration SNMP traps are enabled. Command Mode Global Configuration mode User Guidelines If no snmp-server enable traps has been entered, you can enable failure traps by using snmp-server trap authentication as shown in the example. Example The following example enables SNMP traps except for SNMP failure traps.
PAGE 194
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm User Guidelines The command snmp-server enable traps enables all traps including failure traps. Therefore, if that command is enabled (it is enabled by default), this command is not necessary. Example The following example disables all SNMP traps and enables only failed authentication traps.
PAGE 195
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm snmp-server location Use the snmp-server location Global Configuration mode command to set the value of the system location string. Use the no form of this command to remove the location string. Syntax snmp-server location text no snmp-server location Parameters text—Specifies the system location information.
PAGE 196
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm • name value—Specifies a list of names and value pairs. Each name and value must be a valid string. In the case of scalar MIBs, there is only a single name-value pair. In the case of an entry in a table, there is at least one name-value pair, followed by one or more fields.
PAGE 197
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Default Configuration Generation of SNMP link-status traps is enabled Command Mode Interface Configuration mode Example The following example disables generation of SNMP link-status traps. console(config)# interface gi0/1 console(config-if)# # no snmp trap link-status show snmp Use the show snmp Privileged EXEC mode command to display the SNMP status.
PAGE 198
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Example The following example displays the SNMP communications status.
PAGE 199
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.fm Target Address Type Usernam e ----------192.122.173.42 ---Inform ------Bob Secur ity Level -----Priv UDP Port ---162 Filter name ----- TO Sec --15 Retri es -----3 System Contact: Robert System Location: Marketing The following table describes the significant fields shown in the display. Field Description Community-string The community access string permitting access to SNMP.
PAGE 200
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\SNMP.
PAGE 201
12 RSA and Certificate Commands Keys and Certificates The device automatically generates default RSA/DSA keys and certificates at following times: • When the device is booted following a software upgrade. • When the device is booted with an empty configuration. • When user-defined keys/certificates are deleted. Some commands in this section are used to generate user-defined RSA/DSA keys and certificates that replace the default keys and are used by SSL and SSH server commands.
PAGE 202
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.fm The following table describes how keys/certificates can be copied from one type of configuration file to another (using the copy command). Destination File Type Copy from Running Config. Copy from Startup Config. Copy from Remote/Local Backup Config. File Startup Config. All keys/certificates Option is are copied (but only not user-defined ones supported.
PAGE 203
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.fm Default Configuration The application creates a default key automatically. Command Mode Global Configuration mode User Guidelines DSA keys are generated in pairs - one public DSA key and one private DSA key. If the device already has DSA keys default or user defined, a warning is displayed with a prompt to replace the existing keys with new keys.
PAGE 204
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.fm Parameters N/A Default Configuration The application creates a default key automatically. Command Mode Global Configuration mode User Guidelines RSA keys are generated in pairs - one public RSA key and one private RSA key. If the device already has RSA keys, a warning is displayed with a prompt to replace the existing keys with new keys.
PAGE 205
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.fm Parameters N/A Default Configuration DSA and RSA key pairs do not exist. Command Mode Global Configuration mode User Guidelines DSA/RSA keys are imported in pairs - one public DSA/RSA key and one private DSA/RSA key. If the device already has DSA/RSA keys, a warning is displayed with a prompt to replace the existing keys with new keys.
PAGE 206
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.
PAGE 207
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.fm Parameters • mypubkey—Displays only the public key. • rsa—Displays the RSA key. • dsa—Displays the DSA key. Default Configuration N/A Command Mode Privileged EXEC mode User Guidelines See Keys and Certificates for information on how to display and copy this key pair. Example The following example displays the SSH public DSA keys on the device.
PAGE 208
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.fm Syntax crypto certificate number generate [key-generate [length]] [cn commonname] [ou organization-unit] [or organization] [loc location] [st state] [cu country] [duration days] Parameters • number—Specifies the certificate number. (Range: 1–2) • key-generate length—Regenerates SSL RSA key and specifies the SSL's RSA key length.
PAGE 209
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.fm Command Mode Global Configuration mode User Guidelines If the RSA key does not exist, you must use the parameter key-generate. If both certificates 1 and 2 have been generated, use the ip https certificate command to activate one of them. See Keys and Certificates for information on how to display and copy this key pair.
PAGE 210
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.fm Parameters • number—Specifies the certificate number. (Range: 1–2) • The following elements can be associated with the key. When the key is displayed, they are also displayed. – cn common- name—Specifies the fully qualified device URL or IP address. (Length: 1–64 characters).
PAGE 211
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.fm Example The following example displays the certificate request for HTTPS.
PAGE 212
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.fm Parameters • number—Specifies the certificate number. (Range: 1–2). Default Configuration N/A Command Mode Global Configuration mode User Guidelines To end the session (return to the command line to enter the next command), enter a blank line. The imported certificate must be based on a certificate request created by the crypto cerificate request command.
PAGE 213
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.
PAGE 214
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.
PAGE 215
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.fm WVZd0n1fXhMacoflgnnEmweIzmrqXBs= -----END CERTIFICATE----. Certificate imported successfully. Issued by : C= , ST= , L= , CN=0.0.0.0, O= , OU= Valid From: Jan 24 18:41:24 2011 GMT Valid to: Jan 24 18:41:24 2012 GMT Subject: C=US , ST= , L= , CN=router.gm.
PAGE 216
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RSA_and_Certificates.
PAGE 217
Web Server Commands 13 ip http server Use the ip http server Global Configuration mode command to enable configuring and monitoring the device from a web browser. Use the no form of this command to disable this function. Syntax ip http server no ip http server Parameters N/A Default Configuration HTTP server is enabled. Command Mode Global Configuration mode Example The following example enables configuring the device from a web browser.
PAGE 218
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Web_Server.fm Syntax ip http port port-number no ip http port Parameters port port-number—For use by the HTTP server. (Range: 1–65534) Default Configuration The default port number is 80. Command Mode Global Configuration mode Example The following example configures the http port number as 100.
PAGE 219
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Web_Server.fm Default Configuration 600 seconds Command Mode Global Configuration mode User Guidelines To specify no timeout, enter the ip http timeout-policy 0 command. Example The following example configures the http timeout to be 1000 seconds.
PAGE 220
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Web_Server.fm Example console(config)# ip http secure-server ip http secure-port Use the ip http secure-port Global Configuration mode command to specify the TCP port to be used by the secure web browser. To use the default port, use the no form of this command.
PAGE 221
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Web_Server.fm Parameters number—Specifies the certificate number. (Range: 1–2) Default Configuration The default certificate number is 1. Command Mode Global Configuration mode User Guidelines First, use crypto certificate generate to generate one or two HTTPS certificates. Then use this command to specify which is the active certificate.
PAGE 222
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Web_Server.fm Interactive timeout: 10 minutes show ip https The show ip https Privileged Privileged EXEC mode command displays the HTTPS server configuration. Syntax show ip https Command Mode Privileged EXEC mode Example The following example displays the HTTPS server configuration.
PAGE 223
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Web_Server.fm ssl version Use the ssl version Global Configuration mode command to define the version of the supported SSL. Use the no form to return to the default. Syntax ssl version {v2&v3 | v3} no ssl version Parameters • v2&v3— SSLv2 and SSLv3 are supported. • v3 —Only versions starting with SSLv3 are supported.
PAGE 224
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Web_Server.
PAGE 225
14 Telnet, Secure Shell and Secure Login Commands ip telnet server Use the ip telnet server Global Configuration mode command to enable the device as a Telnet server that accepts connection requests from remote Telnet clients. Remote Telnet clients can configure the device through the Telnet connections. Use the no form of this command to disable the Telnet server functionality on the device.
PAGE 226
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Telnet_SSH_and_Slogin.fm Example The following example enables the device to be configured from a Telnet server. console(config)# ip telnet server ip ssh server The ip ssh server Global Configuration mode command enables the device to be an SSH server and so to accept connection requests from remote SSH clients. Remote SSH clients can manage the device through the SSH connection.
PAGE 227
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Telnet_SSH_and_Slogin.fm ip ssh port The ip ssh port Global Configuration mode command specifies the TCP port used by the SSH server. Use the no form of this command to restore the default configuration. Syntax ip ssh port port-number no ip ssh port Parameters • port-number—Specifies the TCP port number to be used by the SSH server. (Range: 1–65535).
PAGE 228
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Telnet_SSH_and_Slogin.fm no ip ssh password-auth Default Configuration Password authentication of incoming SSH sessions is disabled. Command Mode Global Configuration mode User Guidelines This command enables password key authentication by a local SSH server of remote SSH clients.
PAGE 229
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Telnet_SSH_and_Slogin.fm Parameters • auto-login—Specifies that the device management AAA authentication (CLI login) is not needed. By default, the login is required after the SSH authentication. Default Configuration Public key authentication of incoming SSH sessions is disabled.
PAGE 230
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Telnet_SSH_and_Slogin.fm Example The following example enables authentication of the SSH client. console(config)# ip ssh pubkey-auth crypto key pubkey-chain ssh The crypto key pubkey-chain ssh Global Configuration mode command enters the SSH Public Key-chain Configuration mode. This mode is used to manually specify device public keys, such as SSH client public keys.
PAGE 231
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Telnet_SSH_and_Slogin.
PAGE 232
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Telnet_SSH_and_Slogin.fm User Guidelines After entering this command, the existing key, if any, associated with the user will be deleted. You must follow this command with the key-string command to configure the key to the user. Example The following example enables manually configuring an SSH public key for SSH public key-chain bob.
PAGE 233
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Telnet_SSH_and_Slogin.fm User Guidelines Use the key-string SSH Public Key-string Configuration mode command without the row parameter to specify which SSH public key is to be interactively configured next. Enter a row with no characters to complete the command. Use the key-string row SSH Public Key-string Configuration mode command to specify the SSH public key, row by row.
PAGE 234
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Telnet_SSH_and_Slogin.fm show ip ssh The show ip ssh Privileged EXEC mode command displays the SSH server configuration. Syntax show ip ssh Command Mode Privileged EXEC mode Example The following example displays the SSH server configuration. console# show ip ssh SSH server enabled. Port: 22 RSA key was generated. DSA (DSS) key was generated.
PAGE 235
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Telnet_SSH_and_Slogin.fm Field Description Auth Code The authentication Code (HMAC-MD5, HMAC-SHA1) or Password show crypto key pubkey-chain ssh The show crypto key pubkey-chain ssh Privileged EXEC mode command displays SSH public keys stored on the device.
PAGE 236
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Telnet_SSH_and_Slogin.
PAGE 237
Line Commands 15 line The line Global Configuration mode command identifies a specific line for configuration and enters the Line Configuration command mode. Syntax line {console | telnet | ssh} Parameters • console—Enters the terminal line mode. • telnet—Configures the device as a virtual terminal for remote access (Telnet). • ssh—Configures the device as a virtual terminal for secured remote access (SSH).
PAGE 238
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Line.fm Syntax speed bps no speed Parameters bps—Specifies the baud rate in bits per second (bps). Possible values are 4800, 9600, 19200, 38400, 57600, and 115200. Default Configuration The default speed is 115200 bps. Command Mode Line Configuration Mode User Guidelines The configured speed is only applied when autobaud is disabled. This configuration applies to the current session only.
PAGE 239
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Line.fm Command Mode Line Configuration Mode User Guidelines When this command is enabled, it is activated as follows: connect the console to the device and press the Enter key twice. The device detects the baud rate automatically. Example The following example enables autobaud.
PAGE 240
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Line.fm Example The following example sets the telnet session idle time interval before automatic logoff to 20 minutes and 10 seconds. console(config)# line telnet console(config-line)# exec-timeout 20 10 show line The show line Privileged EXEC mode command displays line parameters. Syntax show line [console | telnet | ssh] Parameters • console—Displays the console configuration.
PAGE 241
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Line.fm Stopbits: 1 Telnet configuration: Telnet is enabled. Interactive timeout: 10 minutes 10 seconds History: 10 SSH configuration: SSH is enabled.
PAGE 242
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Line.
PAGE 243
16 Authentication, Authorization and Accounting aaa authentication login Use the aaa authentication login Global Configuration mode command to set one or more authentication methods to be applied during login. Use the no form of this command to restore the default authentication method. Syntax aaa authentication login {default | list-name} method1 [method2...
PAGE 244
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Keyword Description tacacs Uses the list of all TACACS+ servers for authentication. Default Configuration If no methods are specified, the default are the locally-defined users and passwords. This is the same as entering the command aaa authentication login local.
PAGE 245
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Syntax aaa authentication enable {default | list-name} method [method2...]} no aaa authentication enable {default | list-name} Parameters • default—Uses the listed authentication methods that follow this argument as the default method list, when accessing higher privilege levels. • list-name —Specifies a name for the list of authentication methods • method [method2...
PAGE 246
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm User Guidelines Create a list by entering the aaa authentication enable list-name method1 [method2...] command where list-name is any character string used to name this list. The method argument identifies the list of methods that the authentication algorithm tries, in the given sequence. The default and list names created by this command are used with the enable authentication command.
PAGE 247
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm no login authentication Parameters • default—Uses the default list created with the aaa authentication login command. • list-name—Uses the specified list created with the aaa authentication login command.
PAGE 248
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Syntax enable authentication {default | list-name} no enable authentication Parameters • default—Uses the default list created with the aaa authentication enable command. • list-name—Uses the specified list created with the aaa authentication enable command. Default Configuration default.
PAGE 249
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm ip http authentication The ip http authentication Global Configuration mode command specifies authentication methods for HTTP server access. Use the no form of this command to restore the default authentication method. Syntax ip http authentication aaa login-authentication method1 [method2...] no ip http authentication aaa login-authentication Parameters • method [method2...
PAGE 250
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Example The following example specifies the HTTP access authentication methods. console(config)# ip http authentication aaa loginauthentication radius local none show authentication methods The show authentication methods Privileged EXEC mode command displays information about the authentication methods.
PAGE 251
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Example The following example displays the authentication configuration.
PAGE 252
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Default Configuration No password is defined. Command Mode Line Configuration Mode Example The following example specifies the password ‘secret’ on a console. console(config)# line console console(config-line)# password secret enable password Use the enable password Global Configuration mode command to set a local password to control access to normal and privilege levels.
PAGE 253
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm User Guidelines When the administrator configures a new enable password, this password is encrypted automatically and saved to the configuration file. No matter how the password was entered, it appears in the configuration file with the keyword encrypted and the encrypted value.
PAGE 254
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Parameters N/A Default Configuration The service password recovery is enabled by default. Command Mode Global Configuration mode User Guidelines • If password recovery is enabled, the user can access the boot menu and trigger the password recovery in the boot menu. All configuration files and user files are kept.
PAGE 255
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm username Use the username Global Configuration mode command to establish a username-based authentication system. Use the no form to remove a user name. Syntax username name nopassword | {password {unencrypted-password | {encrypted encrypted-password}}} no username name Parameters • name—The name of the user.
PAGE 256
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Examples Example 1 - Sets an unencrypted password for user tom (level 15). It will be encrypted in the configuration file. console(config)# username tom password 1234 show users accounts The show users accounts Privileged EXEC mode command displays information about the users local database.
PAGE 257
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm The following table describes the significant fields shown in the display: Field Description Username The user name. Password Expiry date The user's password expiration date. aaa accounting login Use the aaa accounting login command in Global Configuration mode to enable accounting of device management sessions. Use the no form of this command to disable accounting.
PAGE 258
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm The following table describes the supported RADIUS accounting attributes values, and in which messages they are sent by the switch. Name Start Message Stop Message Description User-Name (1) Yes Yes User’s identity. NAS-IP-Address (4) Yes Yes The switch IP address that is used for the session with the RADIUS server.
PAGE 259
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Name Description Start Message Stop Message rem-addr IP address.of the user Yes Yes elapsed-time Indicates how long the user was logged in. No Yes reason Reports why the session was terminated. No Yes Example console(config)# aaa accounting login start-stop group radius aaa accounting dot1x To enable accounting of 802.
PAGE 260
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm The device uses the configured priorities of the available RADIUS servers in order to select the RADIUS server. If a new supplicant replaces an old supplicant (even if the port state remains authorized), the software sends a stop message for the old supplicant and a start message for the new supplicant.
PAGE 261
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Name Start Stop Description Nas-Port-Type (61) Yes Yes Indicates the supplicant physical port type. Example console(config)# aaa accounting dot1x start-stop group radius show accounting The show accounting EXEC mode command displays information as to which type of accounting is enabled on the switch.
PAGE 262
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm passwords min-length To configure the minimal length required for passwords in the local database, use the passwords min-length command in Global Configuration mode. Use the no form to remove the requirement. Syntax passwords min-length length no passwords min-length Parameters • length—Specifies the minimal length required for passwords.
PAGE 263
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm passwords strength-check enable Use the passwords strength-check enable Global Configuration mode command to enforce minimum password strength. The no form of this command disables enforcing password strength.
PAGE 264
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm passwords strength minimum character-classes Use the passwords strength minimum character-classes Global Configuration mode command to configure the minimal classes required for passwords in the local database. Use the no form to remove the requirement.
PAGE 265
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Syntax passwords strength max-limit repeated-characters number no passwords strength max-limit repeated-characters Parameters • number—The maximum number of characters in the new password that can be repeated consecutively. (Range: 0–16).
PAGE 266
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Command Mode Global Configuration mode User Guidelines Aging is relevant only to users of the local database and to enable a password. To disable password aging, use passwords aging 0. Using no passwords aging sets the aging time to the default. Example The following example configures the aging time to be 24 days.
PAGE 267
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm User Guidelines The setting is relevant to local users’ passwords, line passwords and enable passwords. Password history is not checked during a configuration download. The password history is kept even if the password history check is disabled. The password history for a user is kept as long as the user is defined.
PAGE 268
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm User Guidelines The setting is relevant to local users’ passwords, line passwords and enable passwords. The passwords are not deleted from the history database when they are not relevant for the password history tracking. Increasing the hold time might "return back" passwords. Example The following example configures the duration that a password is relevant for tracking passwords history.
PAGE 269
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm The account is not locked out for access from the local console. A user can release accounts that are locked out by using the set username active, set enable-password active and set line active Privileged EXEC mode commands. Disabling lockout unlocks all users. Re-enabling lockout resets the authentication failures counters.
PAGE 270
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Example The following example enables writing to the login history file. console(config)# aaa login-history file set username active The set username active Privileged EXEC mode command reactivates a locked out user account. Syntax set username name active Parameters • name—Specifies the user name: (Length: 1–20 characters).
PAGE 271
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Parameters • console—Reactivates the console terminal line. • telnet—Reactivates the virtual terminal for remote (Telnet) console access. • ssh—Reactivates the virtual terminal for secured remote (SSH) console access. Default Configuration N/A Command Mode Privileged EXEC mode Example The following example reactivates the virtual terminal for remote (Telnet) console access.
PAGE 272
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm Example The following example reactivates a local password. console# set enable-password 15 active show passwords configuration The show passwords configuration Privileged EXEC mode command displays information about the password management configuration.
PAGE 273
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.fm SSH show users login-history The show users login-history Privileged EXEC mode command displays information about the user’s login history. Syntax show users login-history [username name] Parameters • name—Name of the user. (Range: 1–20 characters).
PAGE 274
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\AAA.
PAGE 275
RADIUS Commands 17 radius-server host Use the radius-server host Global Configuration mode command to configure a RADIUS server host. Use the no form of the command to delete the specified RADIUS server host. Syntax radius-server host {ip-address | hostname} [auth-port auth-port-number] [acct-port acct-port-number] [timeout timeout] [retransmit retries] [deadtime deadtime] [key key-string] [source source-ip] [priority priority] [usage {login | dot1.
PAGE 276
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Radius.fm • key key-string—Specifies the authentication and encryption key for all RADIUS communications between the device and the RADIUS server. This key must match the encryption used on the RADIUS daemon. To specify an empty string, enter "". (Length: 0–128 characters). If this parameter is omitted, the globally-configured radius key will be used.
PAGE 277
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Radius.fm Example The following example specifies a RADIUS server host with IP address 192.168.10.1, authentication request port number 20, and a 20-second timeout period. console(config)# radius-server host 192.168.10.
PAGE 278
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Radius.fm radius-server retransmit Use the radius-server retransmit Global Configuration mode command to specify the number of times the software searches the list of RADIUS server hosts. Use the no form of this command to restore the default configuration.
PAGE 279
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Radius.fm no radius-server host source-interface Parameters • interface-id—Specifies the source interface. Default Configuration The source IPv4 address is the IPv4 address defined on the outgoing interface and belonging to next hop IPv4 subnet.
PAGE 280
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Radius.fm Parameters • interface-id—Specifies the source interface. Default Configuration The IPv6 source address is the IPv6 address defined on the outgoing interface and selected in accordance with RFC6724.
PAGE 281
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Radius.fm Parameters • timeout timeout-seconds—Specifies the timeout value in seconds. (Range: 1–30). Default Configuration The default timeout value is 3 seconds. Command Mode Global Configuration mode Example The following example sets the timeout interval on all RADIUS servers to 5 seconds.
PAGE 282
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Radius.fm Command Mode Global Configuration mode Example The following example sets all RADIUS server deadtimes to 10 minutes. console(config)# radius-server deadtime 10 show radius-servers Use the show radius-servers Privileged EXEC mode command to display the RADIUS server settings.
PAGE 283
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Radius.fm show radius-servers key Use the show radius-servers key Privileged EXEC mode command to display the RADIUS server key settings. Syntax show radius-servers key Command Mode Privileged EXEC mode Example The following example displays RADIUS server key settings console# show radius-servers key IP address ---------172.16.1.1 172.16.1.
PAGE 284
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Radius.
PAGE 285
TACACS+ Commands 18 tacacs-server host Use the tacacs-server host Global Configuration mode command to specify a TACACS+ host. Use the no form of this command to delete the specified TACACS+ host. Syntax tacacs-server host {ip-address | hostname} [single-connection] [port portnumber] [timeout timeout] [key key-string] [priority priority] no tacacs-server host {ip-address | hostname} Parameters • host ip-address—Specifies the TACACS+ server host IP address.
PAGE 286
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\TACACS.fm • priority priority—Specifies the order in which the TACACS+ servers are used, where 0 is the highest priority. (Range: 0-65535) Default Configuration No TACACS+ host is specified. The default port-number is 1812. If timeout is not specified, the global value (set in the tacacs-server timeout command) is used.
PAGE 287
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\TACACS.fm Parameters • key-string—Specifies the authentication and encryption key for all TACACS+ communications between the device and the TACACS+ server. This key must match the encryption used on the TACACS+ daemon. (Length: 0–128 characters) Default Configuration The default key is an empty string.
PAGE 288
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\TACACS.fm Example The following example sets the timeout value to 30 for all TACACS+ servers. console(config)# tacacs-server timeout 30 tacacs-server host source-interface Use the tacacs-server host source-interface Global Configuration mode command to specify the source interface which IPv4 address will be used as the Source IPv4 address for communication with IPv4 TACACS+ servers.
PAGE 289
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\TACACS.fm Example The following example configures the VLAN 10 as the source interface.
PAGE 290
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\TACACS.fm Example The following example configures the VLAN 10 as the source interface. console(config)# tacacs-server host source-interface-ipv6 vlan 100 show tacacs Use the show tacacs Privileged EXEC mode command to display configuration and statistical information for a TACACS+ server.
PAGE 291
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\TACACS.fm Source IPv4 interface: vlan 120 Source IPv6 interface: vlan 10 show tacacs key Use the show tacacs key Privileged EXEC mode command to display the configured key of the TACACS+ server. Syntax show tacacs key [ip-address] Parameters • ip-address—Specifies the TACACS+ server name or IP address.
PAGE 292
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\TACACS.
PAGE 293
19 SYSLOG Commands logging on Use the logging on Global Configuration mode command to enable message logging. This command sends debug or error messages asynchronously to designated locations. Use the no form of this command to disable the logging. Syntax logging on no logging on Parameters N/A Default Configuration Message logging is enabled.
PAGE 294
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.fm logging host Use the logging host Global Configuration command to log messages to the specified SYSLOG server. Use the no form of this command to delete the SYSLOG server with the specified address from the list of SYSLOG servers.
PAGE 295
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.fm User Guidelines You can use multiple SYSLOG servers. Examples console(config)# logging host 1.1.1.121 console(config)# logging host 3000::100/SYSLOG1 logging console Use the logging console Global Configuration mode command to limit messages logged to the console to messages to a specific severity level. Use the no form of this command to restore the default.
PAGE 296
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.fm logging buffered Use the logging buffered Global Configuration mode command to limit the SYSLOG message display to messages with a specific severity level, and to define the buffer size (number of messages that can be stored). Use the no form of this command to cancel displaying the SYSLOG messages, and to return the buffer size to default.
PAGE 297
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.fm the second example, the buffer size is set to 100 and severity level informational. console(config)# logging buffered debugging console(config)# logging buffered 100 informational clear logging Use the clear logging Privileged EXEC mode command to clear messages from the internal logging buffer.
PAGE 298
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.fm Syntax logging file level no logging file Parameters level—Specifies the severity level of SYSLOG messages sent to the logging file. The possible values are: emergencies, alerts, critical, errors, warnings, notifications, informational and debugging. Default Configuration The default severity level is errors.
PAGE 299
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.fm Command Mode Privileged EXEC mode Example The following example clears messages from the logging file. console# clear logging file Clear Logging File [Y/N] aaa logging Use the aaa logging Global Configuration mode command to enable logging AAA logins. Use the no form of this command to disable logging AAA logins.
PAGE 300
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.fm Example The following example enables logging AAA login events. console(config)# aaa logging login file-system logging Use the file-system logging Global Configuration mode command to enable logging file system events. Use the no form of this command to disable logging file system events.
PAGE 301
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.fm management logging Use the management logging Global Configuration mode command to enable logging Management Access List (ACL) deny events (rejected logins). Use the no form of this command to disable logging management access list events.
PAGE 302
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.fm Syntax show logging Parameters N/A Default Configuration N/A Command Mode Privileged EXEC mode Example The following example displays the logging status and the SYSLOG messages stored in the internal buffer. console# show logging Logging is enabled. Console Logging: Level info. Console Messages: 0 Dropped. Buffer Logging: Level info.
PAGE 303
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.fm show logging file Use the show logging file Privileged EXEC mode command to display the logging status and the SYSLOG messages stored in the logging file. Syntax show logging file Parameters N/A Default Configuration N/A Command Mode Privileged EXEC mode Example The following example displays the logging status and the SYSLOG messages stored in the logging file.
PAGE 304
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.
PAGE 305
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.fm Example The following example provides information about the SYSLOG servers. console# show syslog-servers Device Configuration -------------------IP address Port Facility Severity Description ------------- ---- --------- -------- -------------- 1.1.1.
PAGE 306
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Syslog.
PAGE 307
Remote Network Monitoring (RMON) Commands 20 show rmon statistics Use the show rmon statistics Privileged EXEC mode command to display RMON Ethernet statistics. Syntax show rmon statistics {interface-id} Parameters interface-id—Specifies an interface ID. The interface ID can be one of the following types: Ethernet port or Port-channel. Command Mode Privileged EXEC mode Example The following example displays RMON Ethernet statistics for port gi0/1.
PAGE 308
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm The following table describes the significant fields displayed. Field Description Dropped Total number of events in which packets were dropped by the probe due to lack of resources. Note that this number is not necessarily the number of packets dropped. It is the number of times this condition was detected.
PAGE 309
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm Field Description Jabbers Total number of packets received, longer than 1518 octets (excluding framing bits, but including FCS octets), and either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error).
PAGE 310
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm no rmon collection stats index Parameters • index—The requested group of statistics index.(Range: 1–65535) • owner ownername—Records the name of the owner of the RMON group of statistics. If unspecified, the name is an empty string. (Range: Valid string) • buckets bucket-number—A value associated with the number of buckets specified for the RMON collection history group of statistics.
PAGE 311
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm Example The following example displays all RMON history group statistics. console# Index show rmon collection stats Interface Interval Requested Granted Samples Samples Owner ----- --------- -------- --------- ------- ------- 1 gi0/1 30 50 50 CLI 2 gi0/1 1800 50 50 Manager The following table describes the significant fields shown in the display.
PAGE 312
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm • period seconds—Specifies the period of time in seconds to display.
PAGE 313
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.
PAGE 314
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm Field Description Undersize Number of packets received during this sampling interval that were less than 64 octets long (excluding framing bits but including FCS octets) and were otherwise well formed. Oversize Number of packets received during this sampling interval that were longer than 1518 octets (excluding framing bits but including FCS octets) but were otherwise well formed.
PAGE 315
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm Parameters • index—Specifies the alarm index. (Range: 1–65535) • mib-object-id—Specifies the object identifier of the variable to be sampled. (Valid OID) • interval—Specifies the interval in seconds during which the data is sampled and compared with rising and falling thresholds. (Range: 1–4294967295) • rising-threshold—Specifies the rising threshold value.
PAGE 316
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm falling —Specifies that if the first sample (after this entry becomes valid) is less than or equal to falling-threshold, a single falling alarm is generated. – • owner name—Specifies the name of the person who configured this alarm. (Valid string) Default Configuration The default method type is absolute. The default startup direction is rising-falling.
PAGE 317
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm Example The following example displays the alarms table. console# show rmon alarm-table Index OID Owner ----- ---------------------- ------- 1 1.3.6.1.2.1.2.2.1.10.1 CLI 2 1.3.6.1.2.1.2.2.1.10.1 Manager 3 1.3.6.1.2.1.2.2.1.10.
PAGE 318
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm Alarm 1 ------OID: 1.3.6.1.2.1.2.2.1.10.1 Last sample Value: 878128 Interval: 30 Sample Type: delta Startup Alarm: rising Rising Threshold: 8700000 Falling Threshold: 78 Rising Event: 1 Falling Event: 1 Owner: CLI The following table describes the significant fields shown in the display: Field Description Alarm Alarm index. OID Monitored variable OID.
PAGE 319
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm Field Description Rising Threshold Sampled statistic rising threshold. When the current sampled value is greater than or equal to this threshold, and the value at the last sampling interval is less than this threshold, a single event is generated. Falling Threshold Sampled statistic falling threshold.
PAGE 320
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm • community text—Specifies the SNMP community (password) used when an SNMP trap is sent. (Octet string; length: 0–127 characters). Note this must be a community used in the definition of an SNMP host using the “snmp-server host” command. • description text—Specifies a comment describing this event.
PAGE 321
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm Example The following example displays the RMON event table.
PAGE 322
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm Command Mode Privileged EXEC mode Example The following example displays event 1 in the RMON log table. console# show rmon log 1 Maximum table size: 500 (800 after reset) Time Event Description ----- -------------- ------------------- 1 MIB Var.: 1.3.6.1.2.1.2.2.1.10. 53, Delta, Rising, Actual Val: 800, Thres.
PAGE 323
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.fm The default log table size is 200 entries. Command Mode Global Configuration mode User Guidelines The configured table size takes effect after the device is rebooted. Example The following example configures the maximum size of RMON history tables to 100 entries.
PAGE 324
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\RMON.
PAGE 325
802.1X Commands 21 aaa authentication dot1x Use the aaa authentication dot1x Global Configuration mode command to specify which servers are used for authentication when 802.1X authentication is enabled. Use the no form of this command to restore the default configuration.
PAGE 326
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Example The following example sets the 802.1X authentication mode to RADIUS server authentication. Even if no response was received, authentication succeeds. console(config)# aaa authentication dot1x default radius none clear dot1x statistics Use the clear dot1x statistics Privileged EXEC mode command to clear 802.1X statistics.
PAGE 327
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm dot1x auth-not-req Use the dot1x auth-not-req Interface Configuration (VLAN) mode command to enable unauthorized devices access to a VLAN. Use the no form of this command to disable access to a VLAN. Syntax dot1x auth-not-req no dot1x auth-not-req Parameters N/A Default Configuration Access is enabled.
PAGE 328
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm dot1x authentication Use the dot1x authentication Interface Configuration mode command to enable authentication methods on a port. Use the no format of the command to return to the default. Syntax dot1x authentication [802.1x] no dot1x authentication Parameters • 802.1x—Enables authentication based on 802.1X (802.1X-based authentication). Default Configuration 802.
PAGE 329
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Syntax dot1x guest-vlan no dot1x guest-vlan Parameters N/A Default Configuration No VLAN is defined as a guest VLAN. Command Mode Interface (VLAN) Configuration mode User Guidelines Use the dot1x guest-vlan enable command to enable unauthorized users on an interface to access the guest VLAN. A device can have only one global guest VLAN.
PAGE 330
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Syntax dot1x guest-vlan enable no dot1x guest-vlan enable Parameters N/A Default Configuration The default configuration is disabled. Command Mode Interface (Ethernet) Configuration mode User Guidelines The port cannot belong to the guest VLAN. This command cannot be configured if the monitoring VLAN is enabled on the interface.
PAGE 331
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm dot1x guest-vlan timeout Use the dot1x guest-vlan timeout Global Configuration mode command to set the time delay between enabling 802.1X (or port up) and adding a port to the guest VLAN. Use the no form of this command to restore the default configuration.
PAGE 332
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm dot1x host-mode Use the dot1x host-mode Interface Configuration mode command to allow a single host (client) or multiple hosts on an IEEE 802.1X-authorized port. Use the no form of this command to return to the default setting. Syntax dot1x host-mode {multi-host | single-host | multi-sessions} Parameters    multi-host—Enable multiple-hosts mode. single-host—Enable single-hosts mode.
PAGE 333
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm VLAN tag is the RADIUS-assigned VLAN or the unauthenticated VLANs. See the dot1x radius-attributes vlan command to enable RADIUS VLAN assignment at a port. The switch removes from the FDB all MAC addresses learned on a port when its authentication status is changed from authorized to unauthorized.
PAGE 334
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm If this command changes the port mode to multi-session when authentication is enabled, the state of all attached hosts is set to unauthorized. To change the port mode to single-host or multi-host, set the port (dot1x port-control) to force-unauthorized, change the port mode to single-host or multi-host, and set the port to authorization auto.
PAGE 335
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Syntax dot1x max-hosts count no dot1x max-hosts Parameters • count—Specifies the maximum number of authorized hosts allowed on the interface. May be any 32-bits positive number. Default Configuration No limitation. Command Mode Interface (Ethernet) Configuration mode User Guidelines By default, the number of authorized hosts allowed on an interface is not limited.
PAGE 336
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Syntax dot1x max-req count no dot1x max-req Parameters • count—Specifies the maximum number of times that the device sends an EAP request/identity frame before restarting the authentication process. (Range: 1–10). Default Configuration The default maximum number of attempts is 2.
PAGE 337
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Parameters • auto—Enables 802.1X authentication on the port and causes it to transition to the authorized or unauthorized state, based on the 802.1X authentication exchange between the device and the client. • force-authorized—Disables 802.1X authentication on the interface and causes the port to transition to the authorized state without any authentication exchange required.
PAGE 338
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm dot1x radius-attributes filter-id Use the dot1x radius-attributes filter-id Interface Configuration mode command to enable user-based ACL/Qos-Policy assignment. Use the no form of this command to disable user-based ACL/Qos-Policy assignment.
PAGE 339
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Syntax dot1x radius-attributes vlan [reject | static] no dot1x radius-attributes vlan Parameters • reject—If the RADIUS server authorized the supplicant, but did not provide a supplicant VLAN the supplicant is rejected. If the parameter is omitted, this option is applied by default.
PAGE 340
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm If the last authorized host assigned to a VLAN received from RADIUS connected to a port in the multi-sessions mode changes its status to unauthorized, the port is removed from the VLAN, if it is not in the static configuration. See the User Guidelines of the dot1x host-mode command for more information. If 802.1X is disabled the port static configuration is reset.
PAGE 341
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Example 2. This example enables user-based VLAN assignment. If the RADIUS server authorized the supplicant but did not provide a supplicant VLAN, the supplicant is accepted and the static VLAN configurations is used.
PAGE 342
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm dot1x reauthentication Use the dot1x reauthentication Interface Configuration mode command to enable periodic re-authentication of the client. Use the no form of this command to return to the default setting. Syntax dot1x reauthentication no dot1x reauthentication Parameters N/A Default Configuration Periodic re-authentication is disabled.
PAGE 343
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Default Configuration Disabled. Command Mode Global Configuration mode Example The following example enables 802.1X globally.
PAGE 344
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm User Guidelines During the quiet period, the device does not accept or initiate authentication requests. The default value of this command should only be changed to adjust to unusual circumstances, such as unreliable links or specific behavioral problems with certain clients and authentication servers.
PAGE 345
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Command Mode Interface (Ethernet) Configuration mode User Guidelines The command is only applied to the 802.1x authentication method.
PAGE 346
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm by the timeout period (both specified by the radius-server retransmit command), and selecting the lower of the two values. Example The following example sets the time interval between retransmission of packets to the authentication server to 3600 seconds.
PAGE 347
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm User Guidelines The default value of this command should be changed only to adjust to unusual circumstances, such as unreliable links or specific behavioral problems with certain clients and authentication servers. The command is only applied to the 802.1x authentication method.
PAGE 348
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm User Guidelines The default value of this command should be changed only to adjust to unusual circumstances, such as unreliable links or specific behavioral problems with certain clients and authentication servers. The command is only applied to the 802.1x authentication method.
PAGE 349
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm A rate limit is applied to the traps: not more than one trap of this type can be sent in 10 seconds. Example The following example enables sending traps when a MAC address fails to be authorized by the 802.1X mac-authentication access control. console(config)# dot1x traps authentication failure 802.
PAGE 350
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Example The following example enables sending traps when a MAC address is successfully authorized by the 802.1X MAC-authentication access control.
PAGE 351
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm For BPDU messages whose MAC addresses are not the supplicant MAC address are not discarded in Protect mode. BPDU message whose MAC addresses are not the supplicant MAC address cause a shutdown in Shutdown mode. Example console(config)# interface gi0/1 console(config-if)# dot1x violation-mode protect show dot1x Use the show dot1x Privileged EXEC mode command to display the 802.
PAGE 352
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Unathenticated VLANs: 100, 1000, 1021 Guest VLAN: VLAN 11, timeout 30 sec Authentication failure traps are enables for 802.1x+mac Authentication success traps are enables for 802.1x gi0/2 Host mode: single-host Authentication methods: 802.
PAGE 353
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Host mode: multi-host Authentication methods: 802.1x+mac Port Adminstrated status: auto Port Operational status: authorized Guest VLAN: disabled VLAN Radius Attribute: disabled Server-timeout: 30 sec Aplied Authenticating Server: Radius Applied Authentication method: 802.
PAGE 354
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm – multi-sessions • Port Administrated status—The port administration (configured) mode. Possible values: force-auth, force-unauth, auto. • Port Operational status—The port operational (actual) mode. Possible values: authorized or unauthorized. • Username—Username representing the supplicant identity. This field shows the username if the port control is auto.
PAGE 355
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm show dot1x statistics Use the show dot1x statistics Privileged EXEC mode command to display 802.1X statistics for the specified port. Syntax show dot1x statistics interface interface-id Parameters • interface-id—Specify an Ethernet port. Default Configuration N/A Command Mode Privileged EXEC mode Example The following example displays 802.1X statistics for gi0/1.
PAGE 356
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm The following table describes the significant fields shown in the display: Field Description EapolFramesRx Number of valid EAPOL frames of any type that have been received by this Authenticator. EapolFramesTx Number of EAPOL frames of any type that have been transmitted by this Authenticator.
PAGE 357
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm Syntax show dot1x users [username username] Parameters • username username—Specifies the supplicant username (Length: 1–160 characters). Default Configuration Display all users. Command Mode Privileged EXEC mode Example The following commands displays all 802.
PAGE 358
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\802_1X.fm D E L L C O N F I D E N T I A L – P R E L I M I N A R Y 4 / 3 / 1 4 - F O R P R O O F O N LY 358 802.
PAGE 359
22 Ethernet Configuration Commands NOTE: Some CLI commands or parameters described below are not applicable for fiber ports. Refer to Port Features. interface Use the interface Global Configuration mode command to enter Interface configuration mode in order to configure an interface. Syntax interface interface-id Parameters interface-id—Specifies an interface ID. The interface ID can be one of the following types: Ethernet port, port-channel, VLAN, range, OOB, IP interface or tunnel.
PAGE 360
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm interface range Use the interface range command to execute a command on multiple ports at the same time. Syntax interface range interface-id-list Parameters interface-id-list—Specify list of interface IDs.
PAGE 361
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Parameters N/A Default Configuration The interface is enabled. Command Mode Interface Configuration mode User Guidelines The shutdown command set a value of ifAdminStatus (see RFC 2863) to DOWN. When ifAdminStatus is changed to DOWN, ifOperStatus will be also changed to DOWN.
PAGE 362
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm console(config-if)# Example 3—The following example shuts down vlan 100. console(config)# interface vlan 100 console(config-if)# shutdown console(config-if)# Example 4—The following example shuts down tunnel 1. console(config)# interface tunnel 1 console(config-if)# shutdown console(config-if)# Example 5—The following example shuts down Port Channel 3.
PAGE 363
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Default Configuration The interface does not have a description. Command Mode Interface (Ethernet, Port Channel) Configuration mode Example The following example adds the description ‘SW#3’ to gi0/4.
PAGE 364
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm User Guidelines The no speed command in a port-channel context returns each port in the port-channel to its maximum capability. Example The following example configures the speed of gi0/4 to 1000 Mbps operation.
PAGE 365
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm console(config-if)# duplex full negotiation Use the negotiation Interface (Ethernet, Port Channel) Configuration mode command to enable auto-negotiation operation for the speed and duplex parameters and master-slave mode of a given interface. Use the no form of this command to disable auto-negotiation. Syntax negotiation [capability [capability2...
PAGE 366
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Example The following example enables auto-negotiation on gi0/1. console(config)# interface gi0/1 console(config-if)# negotiation flowcontrol Use the flowcontrol Interface (Ethernet, Port Channel) Configuration mode command to configure the Flow Control on a given interface. Use the no form of this command to disable Flow Control.
PAGE 367
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm console(config-if)# flowcontrol on mdix Use the mdix IInterface (Ethernet) Configuration mode command to enable cable crossover on a given interface. Use the no form of this command to disable cable crossover. Syntax mdix {on | auto} no mdix Parameters • on—Enables manual MDIX. • auto—Enables automatic MDI/MDIX. Default Configuration The default setting is Auto.
PAGE 368
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm back-pressure Use the back-pressure IInterface (Ethernet) Configuration mode command to enable back pressure on a specific interface. Use the no form of this command to disable back pressure. Syntax back-pressure no back-pressure Default Configuration Back pressure is disabled.
PAGE 369
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Default Configuration Jumbo frames are disabled on the device. Command Mode Global Configuration mode User Guidelines This command takes effect only after resetting the device. Example The following example enables jumbo frames on the device.
PAGE 370
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm set interface active Use the set interface active Privileged EXEC mode command to reactivate an interface that was shut down. Syntax set interface active {interface-id} Parameters interface-id—Specifies an interface ID. The interface ID can be one of the following types: Ethernet port or port-channel.
PAGE 371
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm • detailed—Displays information for non-present ports in addition to present ports. Default Configuration Display all interfaces. If detailed is not used, only present ports are displayed.
PAGE 372
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm • detailed—Displays information for non-present ports in addition to present ports. Command Mode Privileged EXEC mode Default Configuration Display for all interfaces. If detailed is not used, only present ports are displayed. Example The following example displays the status of all configured interfaces.
PAGE 373
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Parameters • interface-id—Specifies an interface ID. The interface ID can be one of the following types: Ethernet port or port-channel. • detailed—Displays information for non-present ports in addition to present ports. Default Configuration Display for all interfaces. If detailed is not used, only present ports are displayed.
PAGE 374
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm 10h 10f 100h --- --- ---- Admin Local link Advertisement yes yes yes yes yes yes Oper Local link Advertisement no no yes - - Remote Local link Advertisement - 100 f 1000f --- yes yes yes ----yes yes yes yes - Priority Resolution console# show interfaces advertise gi0/1 Port: gi0/1 Type: 1G-Copper Link state: Up Auto negotiation: disabled.
PAGE 375
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Command Mode Privileged EXEC mode Example The following example displays the description of all configured interfaces.
PAGE 376
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Command Mode Privileged EXEC mode Example The following example displays traffic seen by all the physical interfaces.
PAGE 377
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Field Description InBcastPkts Number of received broadcast packets. OutOctets Number of transmitted octets. OutUcastPkts Number of transmitted Unicast packets. OutMcastPkts Nmber of transmitted Unicast packets. OutBcastPkts Number of transmitted Broadcast packets.
PAGE 378
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Field Description Transmitted Pause Frames Number of MAC Control frames transmitted on this interface with an opcode indicating the PAUSE operation. show ports jumbo-frame Use the show ports jumbo-frame Privileged EXEC mode command to display the whether jumbo frames are enabled on the device.
PAGE 379
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Syntax storm-control broadcast enable no storm-control broadcast enable Parameters N/A Default Configuration Disabled Command Mode Interface (Ethernet) Configuration mode User Guidelines Use the storm-control include-multicast Interface Configuration command to count Multicast packets and optionally unknown Unicast packets in the storm control calculation.
PAGE 380
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Default Configuration 8500 Command Mode Interface (Ethernet) Configuration mode User Guidelines Use the storm-control broadcast enable Interface Configuration command to enable storm control. The calculated rate includes the 20 bytes of Ethernet framing overhead (preamble+SFD+IPG).
PAGE 381
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.fm Example console(config)# interface gi0/1 console(config-if)# storm-control include-multicast show storm-control Use the show storm-control Privileged EXEC mode command to display the configuration of storm control for all ports or for a specific one. Syntax show storm-control [interface-id | detailed] Parameters • interface-id—Specifies an Ethernet port.
PAGE 382
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Ethernet.
PAGE 383
PHY Diagnostics Commands 23 NOTE: Some CLI commands or parameters described below are not applicable for fiber ports. Refer to Port Features. test cable-diagnostics tdr Use the test cable-diagnostics tdr Privileged EXEC mode command to use Time Domain Reflectometry (TDR) technology to diagnose the quality and characteristics of a copper cable attached to a port. Syntax test cable-diagnostics tdr interface interface-id Parameters interface-id—Specifies an Ethernet port ID.
PAGE 384
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Phy_Diagnostics.fm Example 2 - Test the copper cables attached to port 2 (a combo port with fiber active).
PAGE 385
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Phy_Diagnostics.fm gi0/2 Short gi0/3 Test has not been performed gi0/4 Open 50 13:32:00 23 July 2010 64 13:32:00 23 July 2010 show cable-diagnostics cable-length Use the show cable-diagnostics cable-length Privileged EXEC mode command to display the estimated copper cable length attached to all ports or to a specific port.
PAGE 386
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Phy_Diagnostics.
PAGE 387
EEE Commands 24 NOTE: Some CLI commands or parameters described below are not applicable for fiber ports. Refer to Port Features. eee enable (global) Use the eee enable Global Configuration command to enable the EEE mode globally. Use the no format of the command to disable the mode. Syntax eee enable no eee enable Default Configuration EEE is enabled.
PAGE 388
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\EEE.fm eee enable (interface) Use the eee enable Interface Configuration command to enable the EEE mode on an Ethernet port. Use the no format of the command to disable the mode. Syntax eee enable no eee enable Parameters N/A Default Configuration EEE is enabled.
PAGE 389
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\EEE.fm no eee lldp enable Parameters N/A Default Configuration Enabled Command Mode Interface (Ethernet) Configuration mode User Guidelines Enabling EEE LLDP advertisement enables devices to choose and change system wake-up times in order to get the optimal energy saving mode.
PAGE 390
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\EEE.fm Examples Example 1 - The following displays brief Information about all ports.
PAGE 391
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\EEE.fm Example 4 - The following is the information displayed when the port is in status UP and does not support EEE.
PAGE 392
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\EEE.fm Example 6 - The following is the information displayed when EEE is disabled on the port.
PAGE 393
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\EEE.fm Local Tx Timer: 10 usec Resolved Timer: 25 usec Local Rx Timer: 20 usec Example 8 - The following is the information displayed when EEE and EEE LLDP are running on the port.
PAGE 394
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\EEE.
PAGE 395
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\EEE.
PAGE 396
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\EEE.
PAGE 397
25 Green Ethernet NOTE: Some CLI commands or parameters described below are not applicable for fiber ports. Refer to Port Features. green-ethernet energy-detect (global) Use the green-ethernet energy-detect Global Configuration mode command to enable Green-Ethernet Energy-Detect mode globally. Use the no form of this command to disabled it. Syntax green-ethernet energy-detect no green-ethernet energy-detect Parameters N/A Default Configuration Disabled.
PAGE 398
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\750_Green_Ethernet.fm Syntax green-ethernet energy-detect no green-ethernet energy-detect Parameters N/A Default Configuration Disabled. Command Mode Interface (Ethernet) Configuration mode User Guidelines Energy-Detect only works on copper ports. When a port is enabled for auto selection, copper/fiber Energy-Detect cannot work.
PAGE 399
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\750_Green_Ethernet.fm Default Configuration Disabled. Command Mode Global Configuration mode Example console(config)# green-ethernet short-reach green-ethernet short-reach (interface) Use the green-ethernet short-reach Interface Configuration mode command to enable green-ethernet short-reach mode on a port. Use the no form of this command to disable it on a port.
PAGE 400
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\750_Green_Ethernet.fm When the interface is set to enhanced mode, after the VCT length check has completed and set the power to low, an active monitoring for errors is done continuously. In the case of errors crossing a certain threshold, the PHY will be reverted to long reach. Note that EEE cannot be enabled if the Short-Reach mode is enabled.
PAGE 401
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\750_Green_Ethernet.fm green-ethernet short-reach threshold Use the green-ethernet short-reach threshold Global Configuration mode command to set the maximum cable length for applying short-reach. Use the no form of this command to return to default.
PAGE 402
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\750_Green_Ethernet.fm Example console(config)# interface gi0/1 console(config-if)# green-ethernet short-reach threshold 30 green-ethernet power-meter reset Use the green-ethernet power meter reset Privileged EXEC mode command to reset the power save meter.
PAGE 403
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\750_Green_Ethernet.fm • detailed—Displays information for non-present ports in addition to present ports. Default Configuration Display for all ports. If detailed is not used, only present ports are displayed.
PAGE 404
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\750_Green_Ethernet.
PAGE 405
Port Channel Commands 26 channel-group Use the channel-group Interface (Ethernet) Configuration mode command to associate a port with a port-channel. Use the no form of this command to remove a port from a port-channel. Syntax channel-group port-channel mode {on | auto} no channel-group Parameters • port-channel—Specifies the port channel number for the current port to join. • mode—Specifies the mode of joining the port channel.
PAGE 406
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Port_Channel.fm Example The following example forces port gi0/1 to join port-channel 1 without an LACP operation. console(config)# interface gi0/1 console(config-if)# channel-group 1 mode on port-channel load-balance Use the port-channel load-balance Global Configuration mode command to configure the load balancing policy of the port channeling.
PAGE 407
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Port_Channel.fm show interfaces port-channel Use the show interfaces port-channel Privileged EXEC mode command to display port-channel information for all port channels or for a specific port channel. Syntax show interfaces port-channel [interface-id] Parameters interface-id—Specify an interface ID. The interface ID must be a Port Channel.
PAGE 408
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Port_Channel.
PAGE 409
Address Table Commands 27 bridge multicast filtering Use the bridge multicast filtering Global Configuration mode command to enable the filtering of Multicast addresses. Use the no form of this command to disable Multicast address filtering. Syntax bridge multicast filtering no bridge multicast filtering Default Configuration Multicast address filtering is disabled. All Multicast addresses are flooded to all ports.
PAGE 410
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm bridge multicast mode Use the bridge multicast mode IInterface (VLAN) Configuration mode command to configure the Multicast bridging mode. Use the no form of this command to return to the default configuration.
PAGE 411
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.
PAGE 412
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm bridge multicast address Use the bridge multicast address IInterface (VLAN) Configuration mode command to register a MAC-layer Multicast address in the bridge table and statically add or remove ports to or from the group. Use the no form of this command to unregister the MAC address.
PAGE 413
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Static Multicast addresses can be defined on static VLANs only. You can execute the command before the VLAN is created.
PAGE 414
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm • ethernet interface-list—Specifies a list of Ethernet ports. Separate nonconsecutive Ethernet ports with a comma and no spaces. Use a hyphen to designate a range of ports. • port-channel port-channel-list—Specifies a list of port channels. Separate nonconsecutive port-channels with a comma and no spaces. Use a hyphen to designate a range of port channels.
PAGE 415
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Syntax bridge multicast ip-address ip-multicast-address [[add | remove] {interfacelist | port-channel port-channel-list}] no bridge multicast ip-address ip-multicast-address Parameters • ip-multicast-address—Specifies the group IP Multicast address. • add—Adds ports to the group. • remove—Removes ports from the group. • interface-list—Specifies a list of Ethernet ports.
PAGE 416
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm console(config-if)# bridge multicast ip-address 239.2.2.2 The following example registers the IP address and adds ports statically. console(config)# interface vlan 8 console(config-if)# gi0/4 bridge multicast ip-address 239.2.2.
PAGE 417
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Command Mode Interface (VLAN) Configuration mode User Guidelines Before defining forbidden ports, the Multicast group should be registered. You can execute the command before the VLAN is created. Example The following example registers IP address 239.2.2.2, and forbids the IP address on port gi0/4 within VLAN 8.
PAGE 418
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm • ethernet interface-list—Specifies a list of Ethernet ports. Separate nonconsecutive Ethernet ports with a comma and no spaces. Use a hyphen to designate a range of ports. • port-channel port-channel-list—Specifies a list of port channels. Separate nonconsecutive port-channels with a comma and no spaces; use a hyphen to designate a range of port channels.
PAGE 419
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Parameters • ip-address—Specifies the source IP address. • ip-multicast-address—Specifies the group IP Multicast address. • add—Forbids adding ports to the group for the specific source IP address. • remove—Forbids removing ports from the group for the specific source IP address. • ethernet interface-list—Specifies a list of Ethernet ports.
PAGE 420
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm bridge multicast ipv6 mode Use the bridge multicast ipv6 mode Interface (VLAN) Configuration mode command to configure the Multicast bridging mode for IPv6 Multicast packets. Use the no form of this command to return to the default configuration.
PAGE 421
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.
PAGE 422
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm bridge multicast ipv6 ip-address Use the bridge multicast ipv6 ip-address IInterface (VLAN) Configuration mode command to register an IPv6 Multicast address to the bridge table, and statically add or remove ports to or from the group. Use the no form of this command to unregister the IPv6 address.
PAGE 423
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm You can execute the command before the VLAN is created. Example Example 1 - The following example registers the IPv6 address to the bridge table: console(config)# interface vlan 8 console(config-if)# FF00:0:0:0:4:4:4:1 bridge multicast ipv6 ip-address Example 2 - The following example registers the IPv6 address and adds ports statically.
PAGE 424
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm • ethernet interface-list—Specifies a list of Ethernet ports. Separate nonconsecutive Ethernet ports with a comma and no spaces. Use a hyphen to designate a range of ports. • port-channel port-channel-list—Specifies a list of port channels. Separate nonconsecutive port-channels with a comma and no spaces. Use a hyphen to designate a range of port channels.
PAGE 425
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Syntax bridge multicast ipv6 source ipv6-source-address group ipv6-multicast- address [[add | remove] {ethernet interface-list | port-channel port-channellist}] no bridge multicast ipv6 source ipv6-address group ipv6-multicast-address Parameters • ipv6-source-address—Specifies the source IPv6 address. • ipv6-multicast-address—Specifies the group IPv6 Multicast address.
PAGE 426
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm bridge multicast ipv6 forbidden source group Use the bridge multicast ipv6 forbidden source group IInterface (VLAN) Configuration mode command to forbid adding or removing a specific IPv6 source address - Multicast address pair to or from specific ports. Use the no form of this command to return to the default configuration.
PAGE 427
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm User Guidelines Before defining forbidden ports, the Multicast group should be registered. You can execute the command before the VLAN is created.
PAGE 428
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Command Mode Interface (Ethernet, Port Channel) Configuration mode User Guidelines Do not enable unregistered Multicast filtering on ports that are connected to routers, because the 224.0.0.x address range should not be filtered. Note that routers do not necessarily send IGMP reports for the 224.0.0.x range. You can execute the command before the VLAN is created.
PAGE 429
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm • port-channel port-channel-list—Specifies a list of port channels. Separate nonconsecutive port-channels with a comma and no spaces. Use a hyphen to designate a range of port channels. Default Configuration Forwarding of all Multicast packets is disabled.
PAGE 430
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm • port-channel port-channel-list—Specifies a list of port channels. Separate nonconsecutive port-channels with a comma and no spaces; use a hyphen to designate a range of port channels. Default Configuration Ports are not forbidden to dynamically join Multicast groups. The default option is add.
PAGE 431
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Parameters • mac-address—MAC address (Range: Valid MAC address) • vlan-id— Specify the VLAN • interface-id—Specify an interface ID. The interface ID can be one of the following types: Ethernet port or port-channel (Range: valid ethernet port, valid port-channel) • permanent—The permanent static MAC address. The keyword is applied by the default.
PAGE 432
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm – delete-on-reset – delete-on-timeout A static MAC address may be added in any port mode. • secure— A MAC address added manually or learned in a secure mode. Use the mac address-table static command with the secure keyword to add a secure MAC address. The MAC address cannot be relearned. A secure MAC address may be added only in a secure port mode.
PAGE 433
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm clear mac address-table Use the clear mac address-table Privileged EXEC mode command to remove learned or secure entries from the forwarding database (FDB).
PAGE 434
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm mac address-table aging-time Use the mac address-table aging-time Global configuration command to set the aging time of the address table. Use the no form of this command to restore the default. Syntax mac address-table aging-time seconds no mac address-table aging-time Parameters seconds—Time is number of seconds.
PAGE 435
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm • discard—Discards packets with unlearned source addresses. • discard-shutdown—Discards packets with unlearned source addresses and shuts down the port. • trap seconds—Sends SNMP traps and specifies the minimum time interval in seconds between consecutive traps. (Range: 1–1000000) Default Configuration The feature is disabled by default. The default mode is discard.
PAGE 436
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Example The following example forwards all packets to port gi0/1 without learning addresses of packets from unknown sources and sends traps every 100 seconds, if a packet with an unknown source address is received.
PAGE 437
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm User Guidelines The default port mode is called regular. In this mode, the port allows unlimited learning of dynamic addresses. The static MAC addresses may be added on the port manually by the mac address-table static command. The command may be used only when the interface in the regular (nonsecure with unlimited MAC learning) mode.
PAGE 438
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Default Configuration This default maximum number of addresses is 1. Command Mode Interface (Ethernet, Port Channel) Configuration mode User Guidelines The command may be used only when the interface in the regular (nonsecure with unlimited MAC learning) mode. Use this command to change the default value before the port security command.
PAGE 439
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Default Configuration No addresses are defined. Command Mode Interface (Ethernet, Port Channel) Configuration mode. It cannot be configured for a range of interfaces (range context). User Guidelines This command enables adding secure MAC addresses to a routed port in port security mode. The command is available when the port is a routed port and in port security mode.
PAGE 440
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm • interface-id—Displays entries for a specific interface ID. The interface ID can be one of the following types: Ethernet port or port-channel. • mac-address—Displays entries for a specific MAC address. Default Configuration If no parameters are entered, the entire table is displayed.
PAGE 441
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm -------- --------------------- ---------- ---------1 00:3f:bd:45:5a:b1 static gi0/4 show mac address-table count Use the show mac address-table count Privileged EXEC mode command to display the number of addresses present in the Forwarding Database. Syntax show mac address-table count [vlan vlan | interface interface-id] Parameters • vlan—Specifies VLAN.
PAGE 442
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm show bridge multicast mode Use the show bridge multicast mode Privileged EXEC mode command to display the Multicast bridging mode for all VLANs or for a specific VLAN. Syntax show bridge multicast mode [vlan vlan-id] Parameters vlan vlan-id—Specifies the VLAN ID.
PAGE 443
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.
PAGE 444
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm User Guidelines A MAC address can be displayed in IP format only if it is within the range 0100.5e00.0000 through 0100.5e7f.ffff. Multicast router ports (defined statically or discovered dynamically) are members in all MAC groups. Ports that were defined via the bridge multicast forbidden forward-all command are displayed in all forbidden MAC entries.
PAGE 445
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Multicast address table for VLANs in IPv4-SRC-GROUP bridging mode: Vlan Group Address Source address Type Ports ---- --------------- --------------- -------- ----- 1 gi0/1 224.2.2.251 11.2.2.3 Dynamic Forbidden ports for Multicast addresses: Vlan Group Address Source Address Ports ---- --------------- --------------- ------8 239.2.2.2 * gi0/4 8 239.2.2.2 1.1.
PAGE 446
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm show bridge multicast address-table static Use the show bridge multicast address-table static Privileged EXEC mode command to display the statically-configured Multicast addresses.
PAGE 447
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Example The following example displays the statically-configured Multicast addresses. console# show bridge multicast address-table static MAC-GROUP table Vlan MAC Address Ports ---- -------------- -------- 1 0100.9923.
PAGE 448
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.
PAGE 449
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Parameters vlan-id—Specifies the VLAN ID. (Range: Valid VLAN) Default Configuration N/A Command Mode Privileged EXEC mode Example The following example displays the Multicast configuration for VLAN 1.
PAGE 450
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Command Mode Privileged EXEC mode Example The following example displays the unregistered Multicast configuration. console# show bridge multicast unregistered Port Unregistered ------- ------------- gi0/1 Forward gi0/2 Filter gi0/3 Filter show ports security Use the show ports security Privileged EXEC mode command to display the port-lock status.
PAGE 451
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Example The following example displays the port-lock status of all ports.
PAGE 452
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Address_Table.fm Parameters • interface-id—Specifies an interface ID. The interface ID can be one of the following types: Ethernet port or port-channel. • detailed—Displays information for non-present ports in addition to present ports. Default Configuration Display for all interfaces. If detailed is not used, only present ports are displayed.
PAGE 453
Port Monitor Commands 28 port monitor Use the port monitor Interface Configuration (Ethernet) mode command to start a port monitoring session (mirroring). Use the no form of this command to stop a port monitoring session. Syntax port monitor src-interface-id [rx | tx] no port monitor src-interface-id Parameters • rx—Monitors received packets only. If no option is specified, it monitors both rx and tx. • tx—Monitors transmitted packets only. If no option is specified, it monitors both rx and tx.
PAGE 454
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Port_Monitor.fm Source ports cannot be destination ports at the same time. The following restrictions apply to ports that are configured to be monitor ports: • The port is not a member in a port-channel. • An IP interface is not configured on the port. • GVRP is not enabled on the port.
PAGE 455
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Port_Monitor.fm console(config-if)# exit show ports monitor Use the show ports monitor EXEC mode command to display the port monitoring status. Syntax show ports monitor Command Mode User EXEC mode Example The following example displays the port monitoring status.
PAGE 456
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Port_Monitor.
PAGE 457
LLDP Commands 29 lldp run Use the lldp run Global Configuration mode command to enable LLDP. To disable LLDP, use the no form of this command. Syntax lldp run no lldp run Parameters N/A. Default Configuration Enabled Command Mode Global Configuration mode Example console(config)# lldp run lldp transmit Use the lldp transmit Interface (Ethernet) Configuration mode command to enable transmitting LLDP on an interface. Use the no form of this command to stop transmitting LLDP on an interface.
PAGE 458
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Parameters N/A Default Configuration Enabled Command Mode Interface (Ethernet) Configuration mode console(config-if)# User Guidelines LLDP manages LAG ports individually. LLDP sends separate advertisements on each port in a LAG. LLDP operation on a port is not dependent on the STP state of a port. I.e. LLDP frames are sent on blocked ports. If a port is controlled by 802.
PAGE 459
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Default Configuration Enabled Command Mode Interface (Ethernet) Configuration mode User Guidelines LLDP manages LAG ports individually. LLDP data received through LAG ports is stored individually per port. LLDP operation on a port is not dependent on the STP state of a port. I.e. LLDP frames are received on blocked ports. If a port is controlled by 802.
PAGE 460
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Command Mode Global Configuration mode Example The following example sets the interval for sending LLDP updates to 60 seconds. console(config)# lldp timer 60 lldp hold-multiplier Use the lldp hold-multiplier Global Configuration mode command to specify how long the receiving device holds a LLDP packet before discarding it.
PAGE 461
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Example The following example sets the LLDP packet hold time interval to 90 seconds. console(config)# lldp timer 30 console(config)# lldp hold-multiplier 3 lldp reinit Use the lldp reinit Global Configuration mode command to specify the minimum time an LLDP port waits before reinitializing LLDP transmission. Use the no form of this command to revert to the default setting.
PAGE 462
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm changes in the LLDP local systems MIB. Use the no form of this command to restore the default configuration. Syntax lldp tx-delay seconds no lldp tx-delay Parameters tx-delay seconds—Specifies the delay in seconds between successive LLDP frame transmissions initiated by value/status changes in the LLDP local systems MIB (range: 1-8192 seconds).
PAGE 463
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Parameters • tlv—Specifies the TLVs to be included. Available optional TLVs are: portdesc, sys-name, sys-desc, sys-cap, 802.3-mac-phy, 802.3-lag, 802.3-maxframe-size. • none—Clear all optional TLVs from the interface. If the 802.1 protocol is selected, see the command below.
PAGE 464
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm lldp optional-tlv 802.1 ppvid add ppvid - The Protocol Port VLAN ID (PPVID) is advertised. The PPVID is the PVID that is used depending on the packet’s protocol. lldp optional-tlv 802.1 ppvid remove ppvid - The PPVID is not advertised. lldp optional-tlv 802.1 vlan add vlan-id - This vlan-id is advertised. lldp optional-tlv 802.1 vlan remove vlan-id - This vlan-id is not advertised.
PAGE 465
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm lldp management-address Use the lldp management-address Interface (Ethernet) Configuration mode command to specify the management address advertised by an interface. Use the no form of this command to stop advertising management address information.
PAGE 466
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm User Guidelines Each port can advertise one IP address. Example The following example sets the LLDP management address advertisement mode to automatic on gi0/2.
PAGE 467
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm lldp notifications interval Use the lldp notifications interval Global Configuration mode command to configure the maximum transmission rate of LLDP notifications. Use the no form of this command to return to the default.
PAGE 468
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm • tlv—Specifies the TLV that should be included. Available TLVs are: Network-Policy, Location, Inventory. The Capabilities TLV is always included if LLDP-MED is enabled.
PAGE 469
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Command Mode Interface (Ethernet) Configuration mode Example The following example enables sending LLDP MED topology change notifications on gi0/2. console(config)# interface gi0/2 console(config-if)# enable lldp med notifications topology-change lldp med fast-start repeat-count When a port comes up, LLDP can send packets more quickly than usual using its fast-start mechanism.
PAGE 470
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Example console(config)# lldp med fast-start repeat-count 4 lldp med network-policy (global) Use the lldp med network-policy Global Configuration mode command to define a LLDP MED network policy. The lldp med network-policy command creates the network policy, which is attached to a port by lldp med network-policy (interface). The network policy defines how LLDP packets are constructed.
PAGE 471
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm • vlan-type—Specifies if the application is using a tagged or an untagged VLAN. • up priority—User Priority (Layer 2 priority) to be used for the specified application. • dscp value—DSCP value to be used for the specified application. Default Configuration No network policy is defined.
PAGE 472
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Syntax lldp med network-policy {add | remove} number no lldp med network-policy number Parameters • number—Specifies the network policy sequential number. The range is 132 • add/remove number—Attaches/removes the specified network policy to the interface. Default Configuration No network policy is attached to the interface.
PAGE 473
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Syntax clear lldp table [interface-id] Parameters interface-id—Specifies a port ID. Default Configuration If no interface is specified, the default is to clear the LLDP table for all ports.
PAGE 474
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm • data—Specifies the location data in the format defined in ANSI/TIA 1057: dotted hexadecimal data: Each byte in a hexadecimal character string is two hexadecimal digits. Bytes are separated by a period or colon. (Length: coordinate: 16 bytes. Civic-address: 6-160 bytes. Ecs-elin: 10-25 bytes) Default Configuration The location is not configured.
PAGE 475
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Command Mode Global Configuration mode User Guidelines The host name should be configured to be a unique value. If the chassis ID configured to be used in LLDP packets is empty, LLDP uses the default chassis ID (specified above). Example The following example configures the chassis ID to be the MAC address.
PAGE 476
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Examples Example 1 - Display LLDP configuration for all ports. console# show lldp configuration State: Enabled Timer: 30 Seconds Hold multiplier: 4 Reinit delay: 2 Seconds Tx delay: 2 Seconds Notifications interval: 5 seconds Port State Optional TLVs Address Notifications -------- ----- -------------- ----------- ------------ gi0/1 RX,TX PD, SN, SD, SC 172.16.1.
PAGE 477
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm PPVIDs: VLANs: Protocols: The following table describes the significant fields shown in the display: Field Description Timer The time interval between LLDP updates. Hold multiplier The amount of time (as a multiple of the timer interval) that the receiving device holds a LLDP packet before discarding it.
PAGE 478
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Parameters • interface-id—Specifies the port ID. • detailed—Displays information for non-present ports in addition to present ports. Default Configuration If no port ID is entered, the command displays information for all ports. If detailed is not used, only present ports are displayed.
PAGE 479
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Port Capabilities Network Policy Location Notifications Inventory ------- --------- -------------- --------- ---------gi0/1 Yes Yes Yes --------- Enabled Yes Network policies: Location: Civic-address: 61:62:63:64:65:66 show lldp local tlvs-overloading When an LLDP packet contains too much information for one packet, this is called overloading.
PAGE 480
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm LLDP-MED Capabilities 9 Transmitted LLDP-MED Location 200 Transmitted 802.1 1360 Overloading Total: 1600 bytes Left: 100 bytes show lldp local Use the show lldp local Privileged EXEC mode command to display the LLDP information that is advertised from a specific port. Syntax show lldp local interface-id Parameters Interface-id—Specifies a port ID.
PAGE 481
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm 802.3 MAC/PHY Configuration/Status Auto-negotiation support: Supported Auto-negotiation status: Enabled Auto-negotiation Advertised Capabilities: 100BASE-TX full duplex, 1000BASE-T full duplex Operational MAU type: 1000BaseTFD 802.3 Link Aggregation Aggregation capability: Capable of being aggregated Aggregation status: Not currently in aggregation Aggregation port ID: 1 802.
PAGE 482
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Serial number: 7978399 Manufacturer name: Manufacturer Model name: Model 1 Asset ID: Asset 123 console# show lldp local gi0/2 LLDP is disabled. show lldp neighbors Use the show lldp neighbors Privileged EXEC mode command to display information about neighboring devices discovered using LLDP. The information can be displayed for all ports or for a specific port.
PAGE 483
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.
PAGE 484
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm PSE Power Pair: Signal PSE Power class: 1 802.3 Link Aggregation Aggregation capability: Capable of being aggregated Aggregation status: Not currently in aggregation Aggregation port ID: 1 802.3 Maximum Frame Size: 1522 802.3 EEE Remote Tx: 25 usec Remote Rx: 30 usec Local Tx Echo: 30 usec Local Rx Echo: 25 usec 802.1 PVID: 1 802.1 PPVID: 2 supported, enabled 802.1 VLAN: 2(VLAN2) 802.
PAGE 485
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Manufacturer name: VP Model name: TR12 Asset ID: 9 LLDP-MED Location Coordinates: 54:53:c1:f7:51:57:50:ba:5b:97:27:80:00:00:67:01 The following table describes significant LLDP fields shown in the display: Field Description Port The port number. Device ID The neighbor device’s configured ID (name) or MAC address. Port ID The neighbor device’s port ID.
PAGE 486
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Field Description Operational MAU type The port MAU type. LLDP MED Capabilities The sender's LLDP-MED capabilities. Device type The device type. Indicates whether the sender is a Network Connectivity Device or Endpoint Device, and if an Endpoint, to which Endpoint Class it belongs.
PAGE 487
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Field Description Power value The total power in watts required by a PD device from a PSE device, or the total power a PSE device is capable of sourcing over a maximum length cable based on its current configuration. LLDP MED - Location Coordinates, Civic address, ECS ELIN. The location information raw data.
PAGE 488
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.
PAGE 489
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.fm Field Description Auto-negotiation support The auto-negotiation support status on the port. (Supported or Not Supported) Auto-negotiation status The active status of auto-negotiation on the port. (Enabled or Disabled) Auto-negotiation Advertised Capabilities The port speed/duplex/flow-control capabilities advertised by the auto-negotiation. Operational MAU type The port MAU type.
PAGE 490
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LLDP.
PAGE 491
Spanning-Tree Commands 30 spanning-tree Use the spanning-tree Global Configuration mode command to enable spanning-tree functionality. Use the no form of this command to disable the spanning-tree functionality. Syntax spanning-tree no spanning-tree Parameters N/A Default Configuration Spanning-tree is enabled. Command Mode Global Configuration mode Example The following example enables spanning-tree functionality.
PAGE 492
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Syntax spanning-tree mode {stp| rstp | mst} no spanning-tree mode Parameters • stp—Specifies that STP is enabled. • rstp—Specifies that the Rapid STP is enabled. • mst—Specifies that the Multiple STP is enabled. Default Configuration The default is STP.
PAGE 493
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Syntax spanning-tree forward-time seconds no spanning-tree forward-time Parameters seconds—Specifies the spanning-tree forward time in seconds. (Range: 4–30) Default Configuration 15 seconds.
PAGE 494
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Default Configuration 2 seconds. Command Mode Global Configuration mode User Guidelines When configuring the Hello time, the following relationship should be maintained: Max-Age >= 2*(Hello-Time + 1) Example The following example configures the spanning-tree bridge hello time to 5 seconds.
PAGE 495
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm User Guidelines When configuring the maximum age, the following relationships should be maintained: 2*(Forward-Time - 1) >= Max-Age Max-Age >= 2*(Hello-Time + 1) Example The following example configures the spanning-tree bridge maximum age to 10 seconds.
PAGE 496
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm The switch with the lowest priority is the root of the spanning tree. When more than one switch has the lowest priority, the switch with the lowest MAC address is selected as the root. Example The following example configures the spanning-tree priority to 12288.
PAGE 497
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm spanning-tree cost Use the spanning-tree cost Interface (Ethernet, Port Channel) Configuration mode command to configure the spanning-tree path cost for a port. Use the no form of this command to restore the default configuration. Syntax spanning-tree cost cost no spanning-tree cost Parameters cost—Specifies the port path cost.
PAGE 498
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm spanning-tree port-priority Use the spanning-tree port-priority Interface (Ethernet, Port Channel) Configuration mode command to configure the port priority. Use the no form of this command to restore the default configuration. Syntax spanning-tree port-priority priority no spanning-tree port-priority Parameters priority—Specifies the port priority.
PAGE 499
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Syntax spanning-tree portfast [auto] no spanning-tree portfast Parameters auto—Specifies that the software waits for 3 seconds (with no Bridge Protocol Data Units (BPDUs) received on the interface) before putting the interface into the PortFast mode. Default Configuration PortFast mode is disabled.
PAGE 500
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm • shared—Specifies that the port link type is shared. Default Configuration The device derives the port link type from the duplex mode. A full-duplex port is considered a point-to-point link and a half-duplex port is considered a shared link. Command Mode Interface (Ethernet, Port Channel) Configuration mode Example The following example enables shared spanning-tree on gi0/4.
PAGE 501
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Command Mode Global Configuration mode User Guidelines This command applies to all the spanning tree instances on the switch. • If the short method is selected, the switch calculates the default cost as 100. • If the long method is selected, the switch calculates the default cost as 20000. Example The following example sets the default path cost method to Long.
PAGE 502
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Default Configuration The default setting is flooding. Command Mode Global Configuration mode User Guidelines The filtering and flooding modes are relevant when the spanning tree is disabled globally or on a single interface. Example The following example defines the BPDU packet handling mode as flooding when the spanning tree is disabled on an interface.
PAGE 503
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Default Configuration The spanning-tree bpdu (Global) command determines the default configuration. Command Mode Interface (Ethernet, Port Channel) Configuration mode Example The following example defines the BPDU packet as flooding when the spanning tree is disabled on gi0/3.
PAGE 504
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm When Root Guard is enabled, the port changes to the alternate state if the spanning-tree calculations select the port as the root port. Example The following example prevents gi0/1 from being the root port of the device.
PAGE 505
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Example The following example shuts down gi0/4 when it receives a BPDU.
PAGE 506
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm spanning-tree mst priority Use the spanning-tree mst priority Global Configuration mode command to configure the device priority for the specified spanning-tree instance. Use the no form of this command to restore the default configuration.
PAGE 507
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm spanning-tree mst max-hops Use the spanning-tree mst max-hops Global Configuration mode command to configure the number of hops in an MST region before the BDPU is discarded and the port information is aged out. Use the no form of this command to restore the default configuration.
PAGE 508
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Parameters • instance-id—Specifies the spanning tree instance ID. (Range: 1–15) • priority—Specifies the port priority. (Range: 0–240 in multiples of 16) Default Configuration The default port priority is 128. Command Mode Interface (Ethernet, Port Channel) Configuration mode User Guidelines The priority value must be a multiple of 16.
PAGE 509
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Parameters • instance-id—Specifies the spanning-tree instance ID. (Range: 1–15) • cost—Specifies the port path cost.
PAGE 510
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm User Guidelines For two or more switches to be in the same MST region, they must contain the same VLAN mapping, the same configuration revision number, and the same name. Example The following example configures an MST region.
PAGE 511
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm User Guidelines All VLANs that are not explicitly mapped to an MST instance are mapped to the common and internal spanning tree (CIST) instance (instance 0) and cannot be unmapped from the CIST. For two or more devices to be in the same MST region, they must have the same VLAN mapping, the same configuration revision number, and the same name.
PAGE 512
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm console(config)# spanning-tree mst configuration console(config-mst)# name region1 revision (MST) Use the revision MST Configuration mode command to define the MST configuration revision number. Use the no form of this command to restore the default configuration. Syntax revision value no revision Parameters value—Specifies the MST configuration revision number.
PAGE 513
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Parameters • current—Displays the current MST region configuration. • pending—Displays the pending MST region configuration. Default Configuration N/A Command Mode MST Configuration mode Example The following example displays a pending MST region configuration console(config-mst)# show pending Gathering information ..........
PAGE 514
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Command Mode MST Configuration mode Example The following example exits the MST Configuration mode and saves changes. console(config)# spanning-tree mst configuration console(config-mst)# exit console(config)# abort (MST) Use the abort MST Configuration mode command to exit the MST Configuration mode without applying the configuration changes.
PAGE 515
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm show spanning-tree Use the show spanning-tree Privileged EXEC mode command to display the spanning-tree configuration. Syntax show spanning-tree [interface-id] [instance instance-id] show spanning-tree [detail] [active | blockedports] [instance instance-id] show spanning-tree mst-configuration Parameters • instance instance-id—Specifies the spanning tree instance ID.
PAGE 516
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.
PAGE 517
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Interfaces Name -----gi0/1 gi0/2 gi0/3 gi0/4 console# State -----Enable d Enable d Disabl ed Enable d Prio. No -----128.1 128.2 128.3 128.
PAGE 518
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Name -------gi0/1 gi0/2 gi0/3 gi0/4 console# State ------Enable d Enable d Disabl ed Enable d Prio.Nbr --------128.1 128.2 128.3 128.
PAGE 519
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Prio.Nb ------128.1 128.2 128.3 128.
PAGE 520
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Prio.Nbr -----128.1 128.2 128.
PAGE 521
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Name -------gi0/4 console# State Prio.Nbr Cost Sts ------ ---------- --128.
PAGE 522
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Number of transitions to forwarding state: 1 BPDU: sent 2, received 120638 Port 2 (gi0/2) enabled State: Forwarding Port id: 128.2 Type: Shared (configured: auto) STP Designated bridge Priority: 32768 Designated port id: 128.
PAGE 523
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Number of transitions to forwarding state: N/A BPDU: sent N/A, received N/A console# show spanning-tree ethernet gi0/1 Port 1 (gi0/1) enabled State: Forwarding Port id: 128.1 Type: P2p (configured: auto) RSTP Designated bridge Priority: 32768 Designated port id: 128.
PAGE 524
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm IST Master ID Priority 32768 Address 00:02:4b:29:7a:00 This switch is the IST master. Hello Time 2 secMax Age 20 sec Forward Delay 15 sec Max hops 20 Interfaces Name State Sts Role ---- ------- -------- Prio.Nbr Cost ----- --- ---- gi0/1 gi0/2 gi0/3 gi0/4 Enable d Enable d Enable d Enable d 20000 20000 20000 20000 FRW FRW FRW FRW Root 128.1 128.2 128.3 128.
PAGE 525
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Interfaces Name State Sts Role ---- ------- -------- Prio.Nbr Cost ----- --- ---- gi0/1 gi0/2 gi0/3 gi0/4 Enable d Enable d Enable d Enable d 20000 20000 20000 20000 FRW FRW BLK FRW Boun Boun console# show spanning-tree detail 128.1 128.2 128.3 128.
PAGE 526
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Port 1 (gi0/1) enabled State: Forwarding Port id: 128.1 Type: P2p (configured: auto) Boundary RSTP Designated bridge Priority: 32768 Designated port id: 128.
PAGE 527
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Port 4 (gi0/4) enabled State: Forwarding Port id: 128.4 Type: Shared (configured: auto) Internal Designated bridge Priority: 32768 Designated port id: 128.
PAGE 528
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Port 1 (gi0/1) enabled State: Forwarding Port id: 128.1 Type: P2p (configured: auto) Boundary RSTP Designated bridge Priority: 32768 Designated port id: 128.
PAGE 529
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Port 4 (gi0/4) enabled State: Forwarding Port id: 128.4 Type: Shared (configured: auto) Internal Designated bridge Priority: 32768 Designated port id: 128.
PAGE 530
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm console# show spanning-tree Spanning tree enabled mode MSTP Default port cost method: long ###### MST 0 Vlans Mapped: 1-9 CST Root ID Priority 32768 Address 00:01:42:97:e0:00 This switch is root for CST and IST master.
PAGE 531
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.fm Example The following examples display spanning-tree BPDU information: console# show spanning-tree bpdu The following is the output if the global BPDU handling command is not supported.
PAGE 532
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Spanning-Tree.
PAGE 533
VLAN Commands 31 vlan database Use the vlan database Global Configuration mode command to enter the VLAN Configuration mode. This mode is used to create VLAN(s) and define the default VLAN. Use the exit command to return to Global Configuration mode. Syntax vlan database Parameters N/A Default Configuration VLAN 1 exists by default. Command Mode Global Configuration mode Example The following example enters the VLAN Configuration mode, creates VLAN 1972 and exits VLAN Configuration mode.
PAGE 534
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm vlan Use the vlan VLAN Configuration mode or Global Configuration mode command to create a VLAN and assign it a name (if only a single VLAN is being created). Use the no form of this command to delete the VLAN(s). Syntax vlan vlan-range | {vlan-id [name vlan-name]} no vlan vlan-range Parameters • vlan-range—Specifies a list of VLAN IDs.
PAGE 535
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.
PAGE 536
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.
PAGE 537
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm interface vlan Use the interface vlan Global Configuration mode command to enter the Interface Configuration (VLAN) mode for a specific VLAN. After this command is entered, all commands configure this VLAN. Syntax interface vlan vlan-id Parameters • vlan-id—Specifies the VLAN to be configured.
PAGE 538
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Parameters • vlan-range—Specifies a list of VLANs. Separate nonconsecutive VLANs with a comma and no spaces. Use a hyphen to designate a range of VLANs. Default Configuration N/A Command Mode Global Configuration mode User Guidelines Commands under the interface VLAN range context are executed independently on each VLAN in the range.
PAGE 539
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Default Configuration No name is defined. Command Mode Interface (VLAN) Configuration mode User Guidelines The VLAN name must be unique. Example The following example assigns VLAN 19 the name Marketing.
PAGE 540
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm User Guidelines Note that packets are subject to all filtering rules and Filtering Database (FDB) decisions. Use this command to isolate Unicast, Multicast, and Broadcast traffic at Layer 2 from other protected ports (that are not associated with the same community as the ingress interface) on the same switch.
PAGE 541
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Example console# show interfaces protected-ports Interface State Community --------- ------------- --------- gi0/1 Protected 1 gi0/2 Protected Isolated gi0/3 Unprotected 20 gi0/4 Unprotected Isolated switchport community Use the switchport community Interface Configuration mode command to associate a protected port with a community.
PAGE 542
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Example console(config)# interface gi0/1 console(config-if)# switchport community 1 switchport Use the switchport Interface Configuration mode command to put an interface that is in Layer 3 mode into Layer 2 mode. Use the no form of this command to put an interface in Layer 3 mode.
PAGE 543
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm console(config-if)# no switchport switchport mode Use the switchport mode Interface Configuration mode command to configure the VLAN membership mode. Use the no form of this command to restore the default configuration.
PAGE 544
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Example Example 1 - The following example configures gi0/1 as an access port (untagged layer 2) VLAN port. console(config)# interface gi0/1 console(config-if)# switchport mode access console(config-if)# switchport access vlan 2 Example 2 - The following example puts the port gi0/2 into private-vlan host mode.
PAGE 545
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Command Mode Interface (Ethernet, Port Channel) Configuration mode User Guidelines When the port is assigned to a different VLAN, it is automatically removed from its previous VLAN and added it to the new VLAN. If the port is assigned to none, it is removed from the previous VLAN and not assigned to any other VLAN. A non-existed VLAN can be assigned as an Access VLAN.
PAGE 546
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm • add vlan-list—List of VLAN IDs to add to the port. Separate nonconsecutive VLAN IDs with a comma and no spaces. Use a hyphen to designate a range of IDs. • remove vlan-list—List of VLAN IDs to remove from a port. Separate nonconsecutive VLAN IDs with a comma and no spaces. Use a hyphen to designate a range of IDs.
PAGE 547
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm no switchport trunk native vlan Parameters • vlan-id—Specifies the native VLAN ID. • none—Specifies the access port cannot belong to any VLAN. Default Configuration The default native VLAN is the Default VLAN.
PAGE 548
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm VLANs to/from a general port and configure whether packets on the egress are tagged or untagged. Use the no form of this command to reset to the default. Syntax switchport general allowed vlan {add | remove} vlan-list [tagged | untagged] no switchport general allowed vlan Parameters • add vlan-list—List of VLAN IDs to add. Separate nonconsecutive VLAN IDs with a comma and no spaces.
PAGE 549
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Example The example adds gi0/1 and to VLAN 2 and 3. Packets are tagged on the egress: console(config)# interface gi0/1 console(config-if)# switchport general allowed vlan add 2-3 tagged switchport general pvid Use the switchport general pvid Interface Configuration mode command to configure the Port VLAN ID (PVID) of an interface when it is in general mode.
PAGE 550
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.
PAGE 551
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm console(config-if)# switchport general ingress-filtering disable switchport general acceptable-frame-type The switchport general acceptable-frame-type Interface Configuration mode command configures the types of packets (tagged/untagged) that are filtered (discarded) on the interface. Use the no form of this command to return ingress filtering to the default.
PAGE 552
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm switchport customer vlan Use the switchport customer vlan Interface Configuration mode command to set the port's VLAN when the interface is in customer mode (set by the switchport mode command). Use the no form of this command to restore the default configuration. Syntax switchport customer vlan vlan-id no switchport customer vlan Parameters • vlan-id—Specifies the customer VLAN.
PAGE 553
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm switchport general forbidden vlan Use the switchport general forbidden vlan Interface Configuration mode command to forbid adding/removing specific VLANs to/from a port. Use the no form of this command to restore the default configuration.
PAGE 554
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm map protocol protocols-group Use the map protocol protocols-group VLAN Configuration mode command to map a protocol to a group of protocols. This protocol group can then be used in switchport general map protocols-group vlan. Use the no form of this command to delete a protocol from a group.
PAGE 555
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm • ipx Example The following example maps the IP protocol to protocol group number 213.
PAGE 556
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm • Subnet-based VLAN (best match among the rules) • Protocol-based VLAN • PVID Example The following example forwards packets with protocols belong to protocolgroup 1 to VLAN 8.
PAGE 557
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Example The following example displays protocols-groups information.
PAGE 558
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm User Guidelines Forwarding of packets based on their IP subnet requires setting up groups of IP subnets and then mapping these groups to VLANs. Example The following example maps an IP subnet to the group of IP subnets 4. It then maps this group of IP subnets to VLAN 8 console(config)# vlan database console(config-vlan)# map subnet 172.16.1.
PAGE 559
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm User Guidelines The VLAN classification rule priorities are: 1. 2. 3. 4. MAC-based VLAN (Best match among the rules) Subnet-based VLAN (Best match among the rules) Protocol-based VLAN PVID Example The following example maps an IP subnet to the group of IP subnets 4. It then maps this group of IP subnets to VLAN 8 console(config)# vlan database console(config-vlan)# map subnet 172.16.1.
PAGE 560
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Example The following example displays subnets-groups information. console# show vlan subnets-groups IP Subnet Address Mask Group ID ----------------- ----------- -------------1.1.1.1 32 1 172.16.2.
PAGE 561
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.
PAGE 562
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm no private-vlan Parameters • primary—Designate the VLAN as a primary VLAN. • community—Designate the VLAN as a community VLAN. • isolated—Designate the VLAN as an isolated VLAN. Default Configuration No private VLANs are configured.
PAGE 563
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Syntax private-vlan association [add | remove] secondary-vlan-list no private-vlan association Parameters • add secondary-vlan-list—List of VLAN IDs of type secondary to add to a primary VLAN. Separate nonconsecutive VLAN IDs with a comma and no spaces. Use a hyphen to designate a range of IDs.This is the default action.
PAGE 564
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Example The following example associate secondary VLAN 20,21,22 and 24 to primary VLAN 2. console(config)# interface vlan 2 console(config-if)# private-vlan association add 20-22,24 switchport private-vlan mapping Use the switchport private-vlan mapping Interface Configuration mode command to configure the VLANs of the private VLAN promiscuous port.
PAGE 565
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Example The following example add promiscuous port gi0/1 to primary VLAN 10 and to secondary VLAN 20. console(config)# interface gi0/4 console(config-if)# switchport private-vlan mapping 10 add 20 switchport private-vlan host-association Use the switchport private-vlan host-association Interface Configuration mode command to configure the VLANs of the private VLAN host port.
PAGE 566
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Example The following example set port gi0/4 to secondary VLAN 20 in primary VLAN 10. console(config)# interface gi0/1 console(config-if)# switchport private-vlan host-association 10 20 show vlan private-vlan Use the show vlan private-vlan EXEC mode command to display private VLAN information.
PAGE 567
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.
PAGE 568
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm A Multicast TV VLAN cannot be enabled if a guest VLAN is enabled on the interface. Example The following example enables gi0/4 to receive Multicast transmissions from VLAN 11.
PAGE 569
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Example The following example enables gi0/4 to receive Multicast transmissions from VLANs 5, 6, 7. console(config)# interface gi0/4 console(config-if)# switchport customer multicast-tv vlan add 5-7 show vlan multicast-tv Use the show vlan Multicast-tv EXEC mode command to display the source and receiver ports of Multicast-TV VLAN.
PAGE 570
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm ip internal-usage-vlan The system assigns a VLAN to every IP address. In rare cases, this might conflict with a user requirement for that VLAN. In this case, use the ip internal-usage-vlan Interface Configuration mode command to reserve a different VLAN as the internal usage VLAN of an interface. Use the no form of this command to restore the default configuration.
PAGE 571
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm • Recreate the IP interface (another internal usage VLAN is assigned to this IP interface) or use this command to explicitly define the internal usage VLAN. Example The following example reserves unused VLAN 200 as the internal usage VLAN of gi0/3.
PAGE 572
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\VLAN.fm Example The following example displays the VLANs used internally by the device.
PAGE 573
Voice VLAN Commands 32 voice vlan state The voice vlan state Global Configuration mode command sets the type of voice VLAN that is functional on the device or disables voice VLAN entirely. The no format of the command returns to the default. Syntax voice vlan state {oui-enabled | disabled] no voice vlan state Parameters • oui-enabled—Voice VLAN is of type OUI. • disabled—Voice VLAN is disabled.
PAGE 574
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Voice_VLAN.fm Disable the voice VLAN before changing the voice VLAN trigger. console(config)# voice vlan state disabled console(config)# voice vlan state oui-enabled voice vlan id Use the voice vlan id Global Configuration mode command to statically configure the VLAN identifier of the voice VLAN. The no format of the command returns the voice VLAN to the default VLAN (1).
PAGE 575
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Voice_VLAN.fm Are you sure you want to continue? (Y/N)[Y] Y 30-Apr-2011 00:19:36 %VLAN-I-VoiceVlanCreated: Voice Vlan ID 35 was created. console(config)# 30-Apr-2011 00:19:51 %VLAN-I-ReceivedFromVSDP: Voice VLAN updated by VSDP. Voice VLAN-ID 35, VPT 5, DSCP 46 voice vlan oui-table Use the voice vlan oui-table Global Configuration mode command to configure the voice OUI table.
PAGE 576
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Voice_VLAN.fm OUI Description 00:60:b9 NEC/Philips Phone 00:d0:1e Pingtel Phone 00:e0:75 Veritel Polycom Phone 00:e0:bb 3COM Phone Command Mode Global Configuration mode User Guidelines The classification of a packet from VoIP equipment/phones is based on the packet’s OUI in the source MAC address. OUIs are globally assigned (administered) by the IEEE.
PAGE 577
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Voice_VLAN.fm Parameters • src—QoS attributes are applied to packets with OUIs in the source MAC address. See the User Guidelines of voice vlan oui-table. • all—QoS attributes are applied to packets that are classified to the Voice VLAN. Default Configuration The default mode is src.
PAGE 578
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Voice_VLAN.fm Command Mode Global Configuration mode Example The following example sets the OUI voice VLAN CoS to 7 and does not do remarking. console(config)# voice vlan cos 7 voice vlan aging-timeout Use the voice vlan aging-timeout Global Configuration mode command to set the OUI Voice VLAN aging timeout interval. Use the no form of this command to restore the default configuration.
PAGE 579
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Voice_VLAN.fm voice vlan enable Use the voice vlan enable Interface Configuration mode mode command to enable OUI voice VLAN configuration on an interface. Use the no form of this command to disable OUI voice VLAN configuration on an interface.
PAGE 580
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Voice_VLAN.fm voice vlan secure Use the voice vlan secure Interface Configuration mode mode command to enable the secure mode for the OUI voice VLAN. Use the no form of this command to disable the secure mode (see User Guidelines for an explanation of secure mode).
PAGE 581
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Voice_VLAN.fm Syntax show voice vlan [type oui [{interface-id | detailed}] ] Parameters • type oui—Common and OUI-voice-VLAN specific parameters are displayed. • interface-id—Specifies an Ethernet port ID. • detailed—Displays information for non-present ports in addition to present ports. Default Configuration If the type parameter is omitted the current Voice VLAN type is used.
PAGE 582
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Voice_VLAN.
PAGE 583
IGMP Snooping Commands 33 ip igmp snooping (Global) Use the ip igmp snooping Global Configuration mode command to enable Internet Group Management Protocol (IGMP) snooping. Use the no form of this command to disable IGMP snooping. Syntax ip igmp snooping no ip igmp snooping Default Configuration Disabled. Command Mode Global Configuration mode Example The following example enables IGMP snooping.
PAGE 584
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm Parameters • vlan-id—Specifies the VLAN. Default Configuration Disabled Command Mode Global Configuration mode User Guidelines IGMP snooping can be enabled only on static VLANs. IGMPv1, IGMPv2, and IGMPv3 Snooping are supported. To activate IGMP snooping, bridge multicast filtering must be enabled by the bridge multicast filtering command.
PAGE 585
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm Default Configuration Learning pim-dvmrp is enabled. Command Mode Global Configuration mode User Guidelines Multicast router ports are learned according to: • Queries received on the port • PIM/PIMv2 received on the port • DVMRP received on the port • MRDISC received on the port • MOSPF received on the port You can execute the command before the VLAN is created.
PAGE 586
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm Default Configuration No ports defined Command Mode Global Configuration mode User Guidelines A port that is defined as a Multicast router port receives all IGMP packets (reports and queries) as well as all Multicast data. You can execute the command before the VLAN is created.
PAGE 587
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm Command Mode Global Configuration mode User Guidelines A port that is a forbidden mrouter port cannot be a Multicast router port (i.e. cannot be learned dynamically or assigned statically). You can execute the command before the VLAN is created.
PAGE 588
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm User Guidelines Static Multicast addresses can only be defined on static VLANs. You can execute the command before the VLAN is created. You can register an entry without specifying an interface. Using the no command without a port-list removes the entry. Example console(config)# ip igmp snooping vlan 1 static 239.2.2.
PAGE 589
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm User Guidelines Use this command to define the Multicast transmissions on a Multicast-TV VLAN. The configuration is only relevant for an Access port that is a member in the configured VLAN as a Multicast-TV VLAN.
PAGE 590
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm Example The following example disables the IGMP Snooping querier globally: console(config)# no ip igmp snooping querier ip igmp snooping querier address Use the ip igmp snooping querier address Global Configuration mode command to define globally the source IP address that the IGMP snooping querier uses. Use the no form of this command to return to default.
PAGE 591
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm Example The following example define IP address 10.5.234.205 as the Querier Snooping IP address on a VLAN if it is not configured for the VLAN console(config)# ip igmp snooping querier address 10.5.234.205 ip igmp snooping vlan querier Use the ip igmp snooping vlan querier Global Configuration mode command to enable the IGMP Snooping querier on a specific VLAN.
PAGE 592
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm ip igmp snooping vlan querier address Use the ip igmp snooping vlan querier address Global Configuration mode command to define the source IP address that the IGMP snooping querier uses. Use the no form of this command to return to default.
PAGE 593
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm Snooping querier on a specific VLAN. Use the no form of this command to disable Querier election mechanism. Syntax ip igmp snooping vlan vlan-id querier election no ip igmp snooping vlan vlan-id querier election Parameters • vlan-id—Specifies the VLAN.
PAGE 594
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm Example The following example disables IGMP Snooping Querier election on VLAN 1: console(config)# no ip igmp snooping vlan 1 querier election ip igmp snooping vlan querier version Use the ip igmp snooping vlan querier version Global Configuration mode command to configure the IGMP version of an IGMP Snooping querier on a specific VLAN.
PAGE 595
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm ip igmp snooping vlan immediate-leave Use the ip igmp snooping vlan immediate-leave Global Configuration mode command to enable the IGMP Snooping Immediate-Leave processing on a VLAN. Use the no format of the command to disable IGMP Snooping Immediate-Leave processing.
PAGE 596
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm Syntax show ip igmp snooping groups [vlan vlan-id] [address ip-multicast-address] [source ip-address] Parameters • vlan vlan-id—Specifies the VLAN ID. • address ip-multicast-address—Specifies the IP multicast address. • source ip-address—Specifies the IP source address.
PAGE 597
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm Syntax show ip igmp snooping interface vlan-id Parameters • vlan-id—Specifies the VLAN ID. Command Mode User EXEC mode Example The following example displays the IGMP snooping configuration for VLAN 1000 console# show ip igmp snooping interface 1000 IGMP Snooping is globally enabled IGMP Snooping Querier is globally enabled IGMP snooping querier global address: 194.10.12.
PAGE 598
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm show ip igmp snooping mrouter The show ip igmp snooping mrouter EXEC mode command displays information on dynamically learned Multicast router interfaces for all VLANs or for a specific VLAN. Syntax show ip igmp snooping mrouter [interface vlan-id] Parameters • vlan-id—Specifies the VLAN ID.
PAGE 599
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.fm Command Mode User EXEC mode Example The following example displays the IP addresses associated with all Multicast TV VLANs. console# show ip igmp snooping multicast-tv VLAN IP Address ---- ----------1000 239.255.0.0 1000 239.255.0.1 1000 239.255.0.2 1000 239.255.0.3 1000 239.255.0.4 1000 239.255.0.5 1000 239.255.0.6 1000 239.255.0.
PAGE 600
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP_Snooping.
PAGE 601
34 IGMP Commands ip igmp last-member-query-count To configure the Internet Group Management Protocol (IGMP) last member query counter, use the ip igmp last-member-query-count command in interface configuration mode. To restore the default value, use the no form of this command. Syntax ip igmp last-member-query-count count no ip igmp last-member-query-count Parameters count—The number of times that group- or group-source-specific queries are sent upon receipt of a message indicating a leave.
PAGE 602
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP.fm exit ip igmp last-member-query-interval To configure the Internet Group Management Protocol (IGMP) last member query interval, use the ip igmp last-member-query-interval command in interface configuration mode. To restore the default IGMP query interval, use the no form of this command.
PAGE 603
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP.fm ip igmp query-interval To configure the frequency at which the IGMP querier sends Internet Group Management Protocol (IGMP) host-query messages from an interface, use the ip igmp query-interval command in interface configuration mode. To restore the default IGMP query interval, use the no form of this command.
PAGE 604
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP.fm ip igmp query-max-response-time To configure the maximum response time advertised in Internet Group Management Protocol (IGMP) queries, use the ip igmp query-max-responsetime command in interface configuration mode. To restore the default value, use the no form of this command.
PAGE 605
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP.fm Example The following example configures a maximum response time of 8 seconds: console(config)# interface vlan 100 console(config-if)# ip igmp query-max-response-time 8 console(config-if)# exit ip igmp robustness To configure the Internet Group Management Protocol (IGMP) robustness variable, use the ip igmp robustness command in interface configuration mode.
PAGE 606
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IGMP.
PAGE 607
35 Link Aggregation Control Protocol Commands lacp system-priority Use the lacp system-priority Global Configuration mode command to set the system priority. Use the no form of this command to restore the default configuration. Syntax lacp system-priority value no lacp system-priority Parameters value—Specifies the system priority value. (Range: 1–65535) Default Configuration The default system priority is 1.
PAGE 608
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LACP.fm Syntax lacp port-priority value no lacp port-priority Parameters value—Specifies the port priority. (Range: 1use the no form of this command65535) Default Configuration The default port priority is 1. Command Mode Interface (Ethernet) Configuration mode Example The following example sets the priority of gi0/1.
PAGE 609
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LACP.fm Default Configuration The default port timeout value is Long. Command Mode Interface (Ethernet) Configuration mode Example The following example assigns a long administrative LACP timeout to gi0/1.
PAGE 610
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LACP.
PAGE 611
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LACP.
PAGE 612
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\LACP.fm Example The following example displays LACP information about port-channel 1.
PAGE 613
36 GARP VLAN Registration Protocol Commands gvrp enable (Global) Use the gvrp enable Global Configuration mode command to enable the Generic Attribute Registration Protocol (GARP) VLAN Registration Protocol (GVRP) globally. Use the no form of this command to disable GVRP on the device. Syntax gvrp enable no gvrp enable Parameters N/A Default Configuration GVRP is globally disabled. Command Mode Global Configuration mode Example The following example enables GVRP globally on the device.
PAGE 614
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\GVRP.fm gvrp enable (Interface) Use the gvrp enable Interface (Ethernet, Port Channel) Configuration mode command to enable GVRP on an interface. Use the no form of this command to disable GVRP on an interface. Syntax gvrp enable no gvrp enable Default Configuration GVRP is disabled on all interfaces.
PAGE 615
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\GVRP.fm no garp timer Parameters • • The following specify the type of timer. The possible values are: – join—Specifies the GARP join timer. The timer value for this type of timer specifies the time interval between the two join messages sent by the GARP application. – leave—Specifies the GARP leave timer.
PAGE 616
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\GVRP.fm Set the same GARP timer values on all Layer 2-connected devices to ensure proper operation of the GARP application. Example The following example sets the leave timer for gi0/4 to 900 milliseconds.
PAGE 617
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\GVRP.fm registration on the port. Use the no form of this command to allow dynamic registration of VLANs on a port. Syntax gvrp registration-forbid no gvrp registration-forbid Default Configuration Dynamic registration of VLANs on the port is allowed. Command Mode Interface (Ethernet, Port Channel) Configuration mode Example The following example forbids dynamic registration of VLANs on gi0/2.
PAGE 618
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\GVRP.fm Example The following example clears all GVRP statistical information on gi0/4. console# clear gvrp statistics gi0/4 show gvrp configuration Use the show gvrp configuration EXEC mode command to display GVRP configuration information, including timer values, whether GVRP and dynamic VLAN creation are enabled, and which ports are running GVRP.
PAGE 619
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\GVRP.fm Port(s) GVRP RegistDynamic Status ration VLAN Creation ----------- -------------------gi0/1 Enabled Forbidden Disabled gi0/2 Enabled Normal Enabled Timers(ms) Join Leave Leave All ---- ----- --------600 200 10000 1200 400 20000 show gvrp statistics Use the show gvrp statistics EXEC mode command to display GVRP statistics for all interfaces or for a specific interface.
PAGE 620
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\GVRP.fm Example The following example displays GVRP statistical information.
PAGE 621
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\GVRP.fm Default Configuration All GVRP error statistics are displayed. Command Mode User EXEC mode Example The following example displays GVRP error statistics.
PAGE 622
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\GVRP.
PAGE 623
DHCP Snooping Commands 37 ip dhcp snooping Use the ip dhcp snooping Global Configuration mode command to enable Dynamic Host Configuration Protocol (DHCP) Snooping globally. Use the no form of this command to restore the default configuration. Syntax ip dhcp snooping no ip dhcp snooping Parameters N/A Default Configuration DHCP snooping is disabled. Command Mode Global Configuration mode User Guidelines For any DHCP Snooping configuration to take effect, DHCP Snooping must be enabled globally.
PAGE 624
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm ip dhcp snooping vlan Use the ip dhcp snooping vlan Global Configuration mode command to enable DHCP Snooping on a VLAN. Use the no form of this command to disable DHCP Snooping on a VLAN. Syntax ip dhcp snooping vlan vlan-id no ip dhcp snooping vlan vlan-id Parameters • vlan-id—Specifies the VLAN ID. Default Configuration DHCP Snooping on a VLAN is disabled.
PAGE 625
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Syntax ip dhcp snooping trust no ip dhcp snooping trust Parameters N/A Default Configuration The interface is untrusted. Command Mode Interface (Ethernet, Port Channel) Configuration mode User Guidelines Configure as trusted the ports that are connected to a DHCP server or to other switches or routers. Configure the ports that are connected to DHCP clients as untrusted.
PAGE 626
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Parameters N/A Default Configuration DHCP packets with option-82 information from an untrusted port are discarded. Command Mode Global Configuration mode Example The following example allows a device to accept DHCP packets with option82 information from an untrusted port.
PAGE 627
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Example The following example configures a device to verify that the source MAC address in a DHCP packet received on an untrusted port matches the client hardware address. console(config)# ip dhcp snooping verify ip dhcp snooping database Use the ip dhcp snooping database Global Configuration mode command to enable the DHCP Snooping binding database file.
PAGE 628
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Example The following example enables the DHCP Snooping binding database file. console(config)# ip dhcp snooping database ip dhcp snooping database update-freq Use the ip dhcp snooping database update-freq Global Configuration mode command to set the update frequency of the DHCP Snooping binding database file. Use the no form of this command to restore the default configuration.
PAGE 629
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm the database. Use the no form of this command to delete entries from the binding database. Syntax ip dhcp snooping binding mac-address vlan-id ip-address interface-id expiry {seconds | infinite} no ip dhcp snooping binding mac-address vlan-id Parameters • mac-address—Specifies a MAC address. • vlan-id—Specifies a VLAN number. • ip-address—Specifies an IP address.
PAGE 630
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Example The following example adds a binding entry to the DHCP Snooping binding database. console(config)# ip dhcp snooping binding 0060.704C.73FF 23 176.10.1.1 gi0/4 expiry 900 clear ip dhcp snooping database Use the clear ip dhcp snooping database Privileged EXEC mode command to clear the DHCP Snooping binding database.
PAGE 631
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Parameters • interface-id—Specifies an interface ID. The interface ID can be one of the following types: Ethernet port or Port-channel. Command Mode User EXEC mode Example The following example displays the DHCP snooping configuration.
PAGE 632
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Parameters • mac-address mac-address—Specifies a MAC address. • ip-address ip-address—Specifies an IP address. • vlan vlan-id—Specifies a VLAN ID. • interface-id—Specifies an interface ID. The interface ID can be one of the following types: Ethernet port or Port-channel.
PAGE 633
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Parameters • mac-address—Specifies a MAC address. • vlan-id—Specifies a VLAN number. • ip-address—Specifies an IP address. • interface-id—Specifies an interface ID. The interface ID can be one of the following types: Ethernet port or Port-channel. Default Configuration No static binding exists.
PAGE 634
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Parameters N/A Default Configuration ARP inspection is disabled. Command Mode Global Configuration mode User Guidelines Note that if a port is configured as an untrusted port, then it should also be configured as an untrusted port for DHCP Snooping, or the IP-address-MACaddress binding for this port should be configured statically.
PAGE 635
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Command Mode Global Configuration mode User Guidelines This command enables ARP inspection on a VLAN based on the DHCP snooping database. Use the ip arp inspection list assign Global Configuration mode command to enable static ARP inspection. Example The following example enables DHCP Snooping based ARP inspection on VLAN 23.
PAGE 636
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm User Guidelines The device does not check ARP packets that are received on the trusted interface; it only forwards the packets. For untrusted interfaces, the device intercepts all ARP requests and responses. It verifies that the intercepted packets have valid IP-to-MAC address bindings before updating the local cache and before forwarding the packet to the appropriate destination.
PAGE 637
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm User Guidelines The following checks are performed: • Source MAC address: Compares the source MAC address in the Ethernet header against the sender MAC address in the ARP body. This check is performed on both ARP requests and responses. • Destination MAC address: Compares the destination MAC address in the Ethernet header against the target MAC address in the ARP body.
PAGE 638
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Command Mode Global Configuration mode User Guidelines Use the ip arp inspection list assign command to assign the list to a VLAN. Example The following example creates the static ARP binding list ‘servers’ and enters the ARP list configuration mode.
PAGE 639
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm console(config-arp-list)# ip 172.16.1.1 mac 0060.704C.7321 console(config-arp-list)# ip 172.16.1.2 mac 0060.704C.7322 ip arp inspection list assign Use the ip arp inspection list assign Global Configuration mode command to assign a static ARP binding list to a VLAN. Use the no form of this command to delete the assignment.
PAGE 640
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Syntax ip arp inspection logging interval {seconds | infinite} no ip arp inspection logging interval Parameters • seconds—Specifies the minimum time interval between successive ARP • infinite—Specifies that SYSLOG messages are not generated. SYSLOG messages. A 0 value means that a system message is immediately generated.
PAGE 641
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Command Mode User EXEC mode Example The following example displays the ARP inspection configuration.
PAGE 642
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm Example The following example displays the static ARP binding list. console# show ip arp inspection list List name: servers Assigned to VLANs: 1,2 IP ----------172.16.1.1 172.16.1.2 ARP -------------0060.704C.7322 0060.704C.
PAGE 643
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.fm 2 1500100 80 clear ip arp inspection statistics Use the clear ip arp inspection statistics Privileged EXEC mode command to clear statistics ARP Inspection statistics globally. Syntax clear ip arp inspection statistics [vlan vlan-id] Parameters • vlan-id—Specifies VLAN ID.
PAGE 644
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCP_Snooping.
PAGE 645
DHCP Relay Commands 38 ip dhcp relay enable (Global) Use the ip dhcp relay enable Global Configuration mode command to enable the DHCP relay feature on the device. Use the no form of this command to disable the DHCP relay feature. Syntax ip dhcp relay enable no ip dhcp relay enable Parameters N/A Default Configuration DHCP relay feature is disabled. Command Mode Global Configuration mode Example The following example enables the DHCP relay feature on the device.
PAGE 646
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DCHP_Relay.fm Syntax ip dhcp relay enable no ip dhcp relay enable Parameters N/A Default Configuration Disabled Command Mode Interface Configuration mode User Guidelines The operational status of DHCP Relay on an interface is active if one of the following conditions exist: • DHCP Relay is globally enabled, and there is an IP address defined on the interface.
PAGE 647
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DCHP_Relay.fm Syntax ip dhcp relay address ip-address no ip dhcp relay address [ip-address] Parameters • ip-address—Specifies the DHCP server IP address. Up to 8 servers can be defined. Default Configuration No server is defined. Command Mode Global Configuration mode User Guidelines Use the ip dhcp relay address command to define a global DHCP Server IP address.
PAGE 648
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DCHP_Relay.fm no ip dhcp relay address [ip-address] Parameters • ip-address—Specifies the DHCP server IP address. Up to 8 servers can be defined. Default Configuration No server is defined. Command Mode Interface Configuration mode User Guidelines Use the ip dhcp relay address command to define a DHCP Server IP address per the interface.
PAGE 649
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DCHP_Relay.fm Example Example 1. Option 82 is not supported: console# show ip dhcp relay DHCP relay is globally enabled Option 82 is Disabled Maximum number of supported VLANs without IP Address is 256 Number of DHCP Relays enabled on VLANs without IP Address is 0 DHCP relay is not configured on any port. DHCP relay is not configured on any vlan. No servers configured Example 2.
PAGE 650
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DCHP_Relay.fm Number of DHCP Relays enabled on VLANs without IP Address: 2 DHCP relay is enabled on Ports: gi0/1,po1-2 Active: gi0/1 Inactive: po1-2 DHCP relay is enabled on VLANs: 1, 2, 4, 5 Active: 1, 2, 4, 5 Inactive: Global Servers: 1.1.1.1 , 2.2.2.2 Example 3.
PAGE 651
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DCHP_Relay.fm Syntax ip dhcp information option no ip dhcp information option Parameters N/A Default Configuration DHCP option-82 data insertion is disabled. Command Mode Global Configuration mode User Guidelines DHCP option 82 would be enabled only if DHCP snooping or DHCP relay are enabled.
PAGE 652
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DCHP_Relay.fm Example The following example displays the DHCP Option 82 configuration.
PAGE 653
DHCPv6 Commands 39 ipv6 dhcp client stateless Use the ipv6 dhcp client stateless command in Interface Configuration mode to enable DHCP for an IPv6 client process and to enable request for stateless configuration through the interface on which the command is run. To disable requests for stateless configuration, use the no form of this command. Syntax ipv6 dhcp client stateless no ipv6 dhcp client stateless Parameters This command has no arguments or keywords.
PAGE 654
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCPv6.
PAGE 655
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCPv6.fm User Guidelines This command restarts DHCP for an IPv6 client on a specified interface after first releasing and unconfiguring previously-acquired prefixes and other configuration options (for example, Domain Name System [DNS] servers).
PAGE 656
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCPv6.fm User Guidelines The ipv6 dhcp client information refresh command specifies the information refresh time. If the server does not sends an information refresh time option then a value configured by the command is used. Use the infinite keyword, to prevent refresh, if the server does not send an information refresh time option.
PAGE 657
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCPv6.fm Command Mode Interface Configuration mode User Guidelines The ipv6 dhcp client information refresh minimum command specifies the minimum acceptable information refresh time. If the server sends an information refresh time option of less than the configured minimum refresh time, the configured minimum refresh time will be used instead.
PAGE 658
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCPv6.fm no ipv6 dhcp duid-en Parameters • enterprise-number—The vendor’s registered Private Enterprise number as • identifier—The vendor-defined non-empty hex string (up to 64 hex maintained by IANA. characters). If the number of the character is not even ’0’ is added at the right. Each 2 hex characters can be separated by a period or colon.
PAGE 659
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCPv6.fm show ipv6 dhcp Use the show ipv6 dhcp command in User EXEC or Privileged EXEC mode to display the Dynamic DHCP unique identifier (DUID) on a specified device.This information is relevant for DHCPv6 clients and DHCPv6 relays.
PAGE 660
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCPv6.fm Example 2. The following is sample output from this command when the switch’s UDID format is the vendor-based on link-layer address: console# show ipv6 dhcp The switch’s DHCPv6 unique identifier(DUID)is 000300010024012607AA Format: 3 Hardware type: 1 MAC Address: 0024.0126.
PAGE 661
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCPv6.
PAGE 662
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DHCPv6.fm Stateless Service is enabled Reconfigure service is enabled Information Refresh Minimum Time: 600 seconds Information Refresh Time: 86400 seconds Remain Information Refresh Time: 0 seconds DHCP server: Address FE80::202:FCFF:FEA1:7439, DUID 000300010002FCA17400 Preference: 20 Received Information Refresh Time: 3600 seconds DNS Servers: 1001::1, 2001::10 DNS Domain Search List: company.
PAGE 663
IP Addressing Commands 40 IP addresses and Layer 2 Interfaces IP addresses can be configured on the following Layer 2 interfaces: • Ethernet port • Port channel • VLAN • OOB port Lists of Commands ip address Use the ip address Interface Configuration (Ethernet, VLAN, Port-channel) mode command to define an IP address for an interface. Use the no form of this command to remove an IP address definition.
PAGE 664
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm • prefix-length—Specifies the number of bits that comprise the IP address • default-gateway ip-address—Specifies the default gateway IP address. The route is gotten a metric of 1 for an In-Band interface and 1 for OOB. prefix. The prefix length must be preceded by a forward slash (/). (Range: 8–30) Default Configuration No IP address is defined for interfaces.
PAGE 665
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm console(config-if)# ip address 131.108.1.27 255.255.255.0 Example 2. The following example configures 3 overlapped IP addresses. console(config)# interface vlan 1 console(config-if)# ip address 1.1.1.1 255.0.0.0 console(config)# exit console(config)# interface vlan 2 console(config-if)# ip address 1.2.1.1 255.255.0.0 console(config)# This IP address overlaps IP address 1.1.1.
PAGE 666
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm Parameters N/A Command Mode Interface Configuration mode User Guidelines Use the ip address dhcp command to enable DHCP client on the interface. The ip address dhcp command removes all the manually configured addresses on the interface.
PAGE 667
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm Command Mode Privileged EXEC mode User Guidelines Use the renew dhcp command to renew a DHCP address on an interface. This command does not enable DHCP client on an interface and if DHCP client is not enabled on the interface, the command returns an error message.
PAGE 668
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm The ip default-gateway command adds the default route with metric of 1 for the gateway connected on an In-Band interface and 1 for the gateway connected on OOB. Use the no ip default-gateway ip-address command to delete one default gateway. Use the no ip default-gateway command to delete all default gateways. Example The following example defines default gateway 192.168.1.1.
PAGE 669
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm console# show ip interface !source_precedence_is_supported && !broadcast_address_configuration_is_supported && !ip_redirects_is_supported IP Address I/F I/F Status Type Directed ------------- ------ ----------- ------- -------- ----- UP/UP Valid admin/oper 10.5.230.232/24 vlan 1 Status Broadcast Static 10.5.234.202/24 vlan 4 UP/DOWN Static 10.5.240.
PAGE 670
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm • mac-address—MAC address to map to the specified IP address or IP alias. • interface-id—Address pair is added for specified interface. Command Mode Global Configuration mode Default Configuration No permanent entry is defined. If no interface ID is entered, address pair is relevant to all interfaces.
PAGE 671
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm Default Configuration The default ARP timeout is 60000 seconds, if IP Routing is enabled, and 300 seconds if IP Routing is disabled. Command Mode Global Configuration mode Example The following example configures the ARP timeout to 12000 seconds.
PAGE 672
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm Example console(config)# interface vlan 1 console(config-if)# arp timeout 12000 clear arp-cache Use the clear arp-cache Privileged EXEC mode command to delete all dynamic entries from the ARP cache. Syntax clear arp-cache Command Mode Privileged EXEC mode Example The following example deletes all dynamic entries from the ARP cache.
PAGE 673
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm User Guidelines Since the associated interface of a MAC address can be aged out from the FDB table, the Interface field can be empty. If an ARP entry is associated with an IP interface that is defined on a port or port-channel, the VLAN field is empty. Example The following example displays entries in the ARP table.
PAGE 674
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm ARP timeout: 80000 Seconds Interface configuration: VLAN 1: ARP timeout:60000 Seconds VLAN 10: ARP timeout:70000 Seconds VLAN 20: ARP timeout:80000 Second (Global) ip helper-address Use the ip helper-address Global Configuration mode command to enable the forwarding of UDP Broadcast packets received on an interface to a specific (helper) address.
PAGE 675
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm Command Mode Global Configuration mode User Guidelines This command forwards specific UDP Broadcast packets from one interface to another, by specifying a UDP port number to which UDP Broadcast packets with that destination port number are forwarded.
PAGE 676
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm Syntax show ip helper-address Parameters This command has no arguments or key words. Command Mode Privileged EXEC mode User Guidelines Example The following example displays the IP helper addresses configuration on the system: console# show ip Interface Helper Address UDP Ports ------------ -------------- ------------------- 192.168.1.1 172.16.8.
PAGE 677
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.fm User Guidelines If no interfaces are specified, all interfaces on which DHCP client is enabled are displayed. If an interface is specified, only information about the specified interface is displayed. Example The following is sample output of the show ip dhcp client interface command: console# show ip dhcp client interface VLAN 100 is in client mode Address: 170.10.100.
PAGE 678
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Addressing_MeS.
PAGE 679
IPv6 Commands 41 clear ipv6 neighbors Use the clear ipv6 neighbors command in privileged EXEC mode to delete all entries in the IPv6 neighbor discovery cache, except static entries.
PAGE 680
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm no ipv6 address [ipv6-address/prefix-length] Parameters • ipv6-address—Specifies the IPv6 network assigned to the interface. This argument must be in the form documented in RFC4293 where the address is specified in hexadecimal using 16-bit values between colons. • prefix-length—The length of the IPv6 prefix.
PAGE 681
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm configuration on an interface and enable IPv6 processing on the interface. Addresses are configured depending on the prefixes received in Router Advertisement messages. To remove the address from the interface, use the no form of this command. Syntax ipv6 address autoconfig no ipv6 address autoconfig Parameters N/A. Default Configuration Stateless Auto configuration is disabled.
PAGE 682
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm Example The following example assigns the IPv6 address automatically: console(config)# interface vlan 100 console(config-if)# ipv6 address autoconfig console(config-if)# exit ipv6 address link-local Use the ipv6 address link-local command in Interface Configuration mode to configure an IPv6 link local address for an interface and enable IPv6 processing on the interface.
PAGE 683
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm The ipv6 address link-local command cannot be applied to define an IPv6 address on an ISATAP interface. Using the no IPv6 address command without arguments removes all manually-configured IPv6 addresses from an interface, including link local manually configured addresses.
PAGE 684
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm User Guidelines The command is an alias of the ipv6 route command with the predefined (default) route: ipv6 route ::/0 ipv6-address | interface-id See the definition of the ipv6 route command for details. Examples Example 1. The following example defines a default gateway with a global IPv6 address: console(config)# ipv6 default-gateway 5::5 Example 2.
PAGE 685
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm Command Mode Interface Configuration mode User Guidelines This command automatically configures an IPv6 link-local Unicast address on the interface while also enabling the interface for IPv6 processing. The no ipv6 enable command does not disable IPv6 processing on an interface that is configured with an explicit IPv6 address.
PAGE 686
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm Command Mode Global Configuration mode User Guidelines Use this command to limit the rate at which IPv6 ICMP error messages are sent. A token bucket algorithm is used with one token representing one IPv6 ICMP error message. Tokens are placed in the virtual bucket at a specified interval until the maximum number of tokens allowed in the bucket is reached.
PAGE 687
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm no ipv6 nd dad attempts Parameters • value—The number of neighbor solicitation messages. The acceptable range is from 0 to 600. Configuring a value of 0 disables duplicate address detection processing on the specified interface; a value of 1 configures a single transmission without follow-up transmissions.
PAGE 688
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm Duplicate address detection is suspended on interfaces that are administratively down. While an interface is administratively down, the Unicast IPv6 addresses assigned to the interface are set to a pending state. Duplicate address detection is automatically restarted on an interface when the interface returns to being administratively up.
PAGE 689
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm console(config-if)# ipv6 nd dad attempts 5 console(config-if)# exit console(config)# interface vlan 2 console(config-if)# ipv6 nd dad attempts 0 console(config-if)# exit ipv6 neighbor Use the ipv6 neighbor command in Global Configuration mode to configure a static entry in the IPv6 neighbor discovery cache.
PAGE 690
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm If the specified IPv6 address is a global IPv6 address it must belong to one of static on-link prefixes defined in the interface. When a static on-link prefix is deleted all static entries in the IPv6 neighbor discovery cache corresponding the prefix is deleted to.
PAGE 691
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm Example 2. The following example deletes the static entry in the IPv6 neighbor discovery cache for a neighbor with the IPv6 address 2001:0DB8::45A and link-layer address 0002.7D1A.9472 on VLAN 1: console(config)# no ipv6 neighbor 2001:0DB8::45A vlan1 Example 3.
PAGE 692
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm Command Mode Interface Configuration mode User Guidelines If the switch receives a Unicast packet destined for itself that uses a protocol it does not recognize, it sends an ICMPv6 unreachable message to the source.
PAGE 693
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm Command Mode User EXEC mode Privileged EXEC mode User Guidelines Use this command to validate the IPv6 status of an interface and its configured addresses. This command also displays the parameters that IPv6 uses for operation on this interface and any configured features. If the interface’s hardware is usable, the interface is marked up.
PAGE 694
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.
PAGE 695
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm • number of DAD attempts:—Number of consecutive neighbor solicitation messages that are sent on the interface while duplicate address detection is performed. • ND reachable time—Displays the neighbor discovery reachable time (in milliseconds) assigned to this interface.
PAGE 696
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.
PAGE 697
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm • ICMP redirects—The state of Internet Control Message Protocol (ICMP) IPv6 redirect messages on the interface (the sending of the messages is enabled or disabled). • ND DAD—The state of duplicate address detection on the interface (enabled or disabled).
PAGE 698
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.
PAGE 699
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm DAD is not supported on NBMA interfaces. The switch will enable DAD automatically when the user change the type of the tunnel to manual if a the parameter value bigger than 0. • number of DAD attempts:—Number of consecutive neighbor solicitation messages that are sent on the interface while duplicate address detection is performed.
PAGE 700
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm • ND router advertisements—Specifies the interval (in seconds) for neighbor discovery router advertisements sent on this interface and the amount of time before the advertisements expire. • ND advertised default router preference is Medium—The DRP for the router on a specific interface.
PAGE 701
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.
PAGE 702
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm • • ipv6-address—Specifies the IPv6 address of the neighbor. This argument must be in the form documented in RFC4293 where the address is specified in hexadecimal using 16-bit values between colons. ipv6-hostname—Specifies the IPv6 host name of the remote networking device. Default Configuration All IPv6 ND cache entries are listed.
PAGE 703
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm IPv6 Address Router Age Link-layer Addr 2000:0:0:4::2 Yes 0 0003.a0d6.141e State Interface REACH VLAN1 Field Descriptions: • Total number of entries—Number of entries (peers) in the cache. • IPv6 Address—IPv6 address of neighbor or interface. • Age—Time (in minutes) since the address was confirmed to be reachable. A hyphen (-) indicates a static entry.
PAGE 704
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm • protocol—Displays routes for the specified routing protocol using any of these keywords: bgp, isis, ospf, or rip; or displays routes for the specified type of route using any of these keywords: connected, static, nd, or icmp. • interface interface-id—Identifier of an interface. Default Configuration All IPv6 routing information for all active routing tables is displayed.
PAGE 705
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.fm via fe80::200:cff:fe4a:dfa8 VLAN 1 Lifetime 1784 sec ND> 2001::/64 [0/0] via :: VLAN 100 ND> 2002:1:1:1::/64 [0/0] via :: VLAN 100 ND> 3001::/64 [0/0] via :: VLAN 101 ND> 4004::/64 [0/0] via :: VLAN 110 Example 2.
PAGE 706
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IPv6_Router.
PAGE 707
IPv6 Tunnel Commands 42 interface tunnel Use the interface tunnel Global Configuration mode command to enter the Interface Configuration (Tunnel) mode. Syntax interface tunnel number Parameters • number—Specifies the tunnel number. Default Configuration N/A Command Mode Global Configuration mode Example The following example enters the Interface Configuration (Tunnel) mode.
PAGE 708
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Tunnel New Edition.fm Syntax tunnel isatap solicitation-interval seconds no tunnel isatap solicitation-interval Parameters • seconds—Specifies the time interval in seconds between ISATAP router solicitation messages. (Range: 10–3600). Default Configuration The default time interval between ISATAP router solicitation messages is 10 seconds.
PAGE 709
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Tunnel New Edition.fm Parameters • number—Specifies the number router solicitation refresh messages that the device sends. (Range: 1–20). Default Configuration The default number of router solicitation refresh messages that the device sends is 3.
PAGE 710
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Tunnel New Edition.fm Default Configuration The automatic tunnel router's default domain name is ISATAP. Command Mode Interface (Tunnel) Configuration mode User Guidelines This command determines the string that the host uses for automatic tunnel router lookup in the IPv4 DNS procedure. By default, the string ISATAP is used for the corresponding automatic tunnel types.
PAGE 711
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Tunnel New Edition.fm Default Configuration IPv6 tunnel interfaces are not configured. Command Mode Interface (Tunnel) Configuration mode User Guidelines IPv6 tunneling consists of encapsulating IPv6 packets within IPv4 packets for transmission across an IPv4 routing infrastructure.
PAGE 712
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Tunnel New Edition.fm console(config-if)# ipv6 address 3ffe:b00:c18:1::/64 eui-64 console(config-if)# exit tunnel source Use the tunnel source Interface Configuration (Tunnel) mode command to set the local (source) IPv4 address of a tunnel interface. The no form deletes the tunnel local address.
PAGE 713
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Tunnel New Edition.fm When the tunnel local IPv4 address is changed the IPv6 interface on the tunnel is re-enabled that causes removing static IPv6 configuration on the tunnel (for example, global IPv6 addresses, static IPv6 routes via the tunnel, etc.). Example console(config)# interface tunnel 1 console(config-if)# tunnel source 120.12.3.
PAGE 714
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\Tunnel New Edition.fm Tunnel Local Ipv4 address : 192.1.3.4 Router DNS name : ISATAP Router IPv4 addresses 1.1.1.1 Detected 100.1.1.1 Detected 14.1.100.
PAGE 715
43 IP Routing Protocol-Independent Commands ip route To establish static routes, use the ip route command in global configuration mode. To remove static routes, use the no form of this command. Syntax ip route prefix {mask | /prefix-length} {{ip-address [metric value]}} no ip route prefix {mask | /prefix-length} [ip-address] Parameters • prefix—IP route prefix for the destination. • mask—Prefix mask for the destination. • /prefix-length—Prefix mask for the destination.
PAGE 716
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Routing_MeS.fm User Guidelines Use the no ip route comand without the ip-address parameter to remove all static routes to the given subnet. Use the no ip route comand with the ip-address parameter to remove only one static route to the given subnet via the given next hop. Example Example 1—The following example shows how to route packets for network 172.31.0.0 to a router at 172.31.6.
PAGE 717
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Routing_MeS.fm ip routing To enable IP routing, use the ip routing command in global configuration mode. To disable IP routing, use the no form of this command. Syntax ip routing no ip routing Parameters This command has no arguments or keywords. Default Configuration IP routing is disabled. Command Mode Global Configuration mode User Guidelines Use the command to enable IP Routing.
PAGE 718
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Routing_MeS.fm show ip route To display the current state of the routing table, use the show ip route command in user EXEC or privileged EXEC mode. Syntax show ip route [address ip-address {mask [longer-prefixes]} [static | rejected | icmp | connected] Parameters • address ip-address—IP address about which routing information should be displayed. • mask—The value of the subnet mask.
PAGE 719
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Routing_MeS.fm Maximum Parallel Paths: 1 (1 after reset) IP Forwarding: disabled Codes: > - best, C - connected, S - static, I - ICMP IP Routing Table - 5 entries Code IP Route Distance/ Next Hop Metric ------ ------------------- ----------- IP Address Last Time Outgoing Updated Interface --------------- ------------- ------------ S> 10.10.0.0/16 1/128 10.119.254.
PAGE 720
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Routing_MeS.fm performed with the mask and the result is compared with 10.16.0.0. Any destinations that fall into that range are displayed in the output: console# show ip route 10.16.0.0 255.255.0.
PAGE 721
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Routing_MeS.
PAGE 722
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\IP_Routing_MeS.
PAGE 723
44 ACL Commands ip access-list (IP extended) Use the ip access-list extended Global Configuration mode command to name an IPv4 access list (ACL) and to place the device in IPv4 Access List Configuration mode. All commands after this command refer to this ACL. The rules (ACEs) for this ACL are defined in the permit ( IP ) and deny ( IP ) commands. The service-acl input command is used to attach this ACL to an interface. Use the no form of this command to remove the access list.
PAGE 724
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm permit ( IP ) Use the permit IP Access-list Configuration mode command to set permit conditions for an IPv4 access list (ACL). Permit conditions are also known as access control entries (ACEs). Use the no form of the command to remove the access control entry.
PAGE 725
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.
PAGE 726
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm • icmp-type—Specifies an ICMP message type for filtering ICMP packets.
PAGE 727
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm • log-input—Specifies sending an informational SYSLOG message about the packet that matches the entry. Because forwarding/dropping is done in hardware and logging is done in software, if a large number of packets match an ACE containing a log-input keyword, the software might not be able to match the hardware processing rate, and not all packets will be logged.
PAGE 728
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.
PAGE 729
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm Parameters • protocol—The name or the number of an IP protocol. Available protocol names: icmp, igmp, ip, tcp, egp, igp, udp, hmp, rdp, idpr, ipv6, ipv6:rout, ipv6:frag, idrp, rsvp, gre, esp, ah, ipv6:icmp, eigrp, ospf, ipinip, pim, l2tp, isis. To match any protocol, use the Ip keyword. (Range: 0–255) • source—Source IP address of the packet.
PAGE 730
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm www (80). For UDP enter a number or one of the following values: biff (512), bootpc (68), bootps (67), discard (9), dnsix (90), domain (53), echo (7), mobile-ip (434), nameserver (42), netbios-dgm (138), netbios-ns (137), non500-isakmp (4500), ntp (123), rip (520), snmp 161), snmptrap (162), sunrpc (111), syslog (514), tacacs-ds (49), talk (517), tftp (69), time (37), who (513), xdmcp (177).
PAGE 731
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm If a range of ports is used for source port, it is counted again if it is also used for destination port. Example console(config)# ip access-list extended server console(config-ip-al)# deny ip 176.212.0.0 00.255.
PAGE 732
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm conditions. (The former two match conditions allow for ICMPv6 neighbor discovery.) The IPv6 neighbor discovery process uses the IPv6 network layer service, therefore, by default, IPv6 ACLs implicitly allow IPv6 neighbor discovery packets to be sent and received on an interface.
PAGE 733
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.
PAGE 734
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm • destination-prefix/length—The destination IPv6 network or class of networks about which to set permit conditions. This argument must be in the form documented in RFC 3513 where the address is specified in hexadecimal using 16-bit values between colons. • dscp number—Specifies the DSCP value. (Range: 0–63) • precedence number—Specifies the IP precedence value.
PAGE 735
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm • log-input—Specifies sending an informational SYSLOG message about the packet that matches the entry. Because forwarding/dropping is done in hardware and logging is done in software, if a large number of packets match an ACE containing a log-input keyword, the software might not be able to match the hardware processing rate, and not all packets will be logged.
PAGE 736
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.
PAGE 737
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm • source-prefix/length—The source IPv6 network or class of networks about which to set permit conditions. This argument must be in the format documented in RFC 3513 where the address is specified in hexadecimal using 16-bit values between colons. • destination-prefix/length—The destination IPv6 network or class of networks about which to set permit conditions.
PAGE 738
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm • match-all list-of-flags—List of TCP flags that should occur. If a flag should be set it is prefixed by “+”.If a flag should be unset it is prefixed by “-”. Available options are +urg, +ack, +psh, +rst, +syn, +fin, -urg, -ack, -psh, -rst, -syn and -fin. The flags are concatenated to a one string. For example: +fin-ack.
PAGE 739
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm mac access-list Use the mac access-list Global Configuration mode command to define a Layer 2 access list (ACL) based on source MAC address filtering and to place the device in MAC Access-list Configuration mode. All commands after this command refer to this ACL. The rules (ACEs) for this ACL are defined in the permit ( MAC ) and deny (MAC) commands.
PAGE 740
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm permit ( MAC ) Use the permit command in MAC Access-list Configuration mode to set permit conditions (ACEs) for a MAC ACL. Use the no form of the command to remove the access control entry.
PAGE 741
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm • log-input—Specifies sending an informational SYSLOG message about the packet that matches the entry. Because forwarding/dropping is done in hardware and logging is done in software, if a large number of packets match an ACE containing a log-input keyword, the software might not be able to match the hardware processing rate, and not all packets will be logged.
PAGE 742
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm • source-wildcard—Wildcard bits to be applied to the source MAC address. Use ones in the bit position that you want to be ignored. • destination—Destination MAC address of the packet. • destination-wildcard—Wildcard bits to be applied to the destination • eth-type—The Ethernet type in hexadecimal format of the packet. • vlan-id—The VLAN ID of the packet. (Range: 1–4094).
PAGE 743
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm service-acl input Use the service-acl input command in Interface Configuration mode to bind an access list(s) (ACL) to an interface. Use the no form of this command to remove all ACLs from the interface. Syntax service-acl input acl-name1 [acl-name2] [default-action {deny-any | permit- any}] no service-acl input Parameters • acl-name—Specifies an ACL to apply to the interface.
PAGE 744
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm • An ACL cannot be bound to a port that is already bound to an ACL, without first removing the current ACL. Both ACLs must be mentioned at the same time in this command. • When the user binds ACL to an interface, TCAM resources will be consumed. One TCAM rule for each MAC or IP ACE and two TCAM rules for each IPv6 ACE.
PAGE 745
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm Command Mode Interface Configuration mode (Ethernet, Port-Channel) User Guidelines If you want to define multiple protocols on the same interface, those protocols should be defined in the same command.
PAGE 746
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm service-acl output Use the service-acl output command in Interface Configuration mode to control access to an interface on the egress (transmit path). Use the no form of this command to remove the access control. Syntax service-acl output acl-name1 [acl-name2 no service-acl output Parameters acl-name-Specifies an ACL to apply to the interface. See the user guidelines.
PAGE 747
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm Example This example binds an egress ACL to a port: console(config)# mac access-list extended server console(config-mac-al)# permit 00:00:00:00:00:01 00:00:00:00:00:ff any console(config-mac-al)# exit console(config)# interface gi0/1 console(config-if)# service-acl output server time-range Use the time-range Global Configuration mode command to define time ranges for different functions.
PAGE 748
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm User Guidelines After adding the name of a time range with this command, use the absolute and periodic commands to actually configure the time-range. Multiple periodic commands are allowed in a time range. Only one absolute command is allowed.
PAGE 749
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm absolute Use the absolute Time-range Configuration mode command to specify an absolute time when a time range is in effect. Use the no form of this command to remove the time limitation.
PAGE 750
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm console(config-time-range)# absolute start 12:00 1 jan 2005 console(config-time-range)# absolute end 12:00 31 dec 2005 periodic Use the periodic Time-range Configuration mode command to specify a recurring (weekly) time range for functions that support the time-range feature. Use the no form of this command to remove the time limitation.
PAGE 751
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm Default Configuration There is no periodic time when the time range is in effect. Command Mode Time-range Configuration mode User Guidelines The second occurrence of the day can be at the following week, e.g. Thursday–Monday means that the time range is effective on Thursday, Friday, Saturday, Sunday, and Monday. The second occurrence of the time can be on the following day, e.g.
PAGE 752
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm -------------absolute start 12:00 1 Jan 2005 end 12:00 31 Dec 2005 periodic Monday 12:00 to Wednesday 12:00 show access-lists Use the show access-lists Privileged EXEC mode command to display access control lists (ACLs) configured on the switch. Syntax show access-lists [name] show access-liststime-range-active [name] Parameters • name—Specifies the name of the ACL.
PAGE 753
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm permit 234 172.30.19.1 0.0.0.255 any time-range weekdays console# show access-lists ACL1 Extended IP access list ACL1 permit 234 172.30.40.1 0.0.0.0 any permit 234 172.30.8.8 0.0.0.0 any show interfaces access-lists Use the show interfaces access-lists Privileged EXEC mode command to display access lists (ACLs) applied on interfaces.
PAGE 754
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.fm Syntax clear access-lists counters [interface-id] Parameters interface-id—Specifies an interface ID. The interface ID can be one of the following types: Ethernet port or port-channel.
PAGE 755
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.
PAGE 756
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ACL.
PAGE 757
45 Quality of Service (QoS) Commands qos Use the qos Global Configuration mode command to enable QoS on the device and set its mode. Use the no form of this command to disable QoS on the device. Syntax qos [basic | advanced no qos Parameters • basic—QoS basic mode. If no option is specified, the QoS mode defaults to the basic mode. • advanced—Specifies the QoS advanced mode, which enables the full range of QoS configuration.
PAGE 758
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm show qos Use the show qos EXEC mode command to display the QoS information for the device. The trust mode is displayed for the QoS basic mode. Syntax show qos Parameters N/A Default Configuration Disabled Command Mode Command Mode Privileged EXEC mode User Guidelines Trust mode is displayed if QoS is enabled in basic mode.
PAGE 759
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm class-map The class-map command and its subcommands are used to define packet classification, marking, and aggregate policing as part of a globally-named service policy applied on a per-interface basis. A class map consists of one or more ACLs (see ACL Commands). It defines a traffic flow by determining which packets match some or all of the criteria specified in the ACLs.
PAGE 760
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm User Guidelines The class-map enters Class-map Configuration mode. In this mode, up to two match commands can be entered to configure the criteria for this class. Each match specifies an ACL. When using two match commands, each must point to a different type of ACL, such as: one IP ACL and one MAC ACL. The classification is by first match, therefore, the order of the ACLs is important.
PAGE 761
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Command Mode Privileged EXEC mode Example The following example displays the class map for Class1. console(config)# show class-map Class Map matchAny class1 Match access-group mac match Use the match Class-map Configuration mode command to bind the ACLs that belong to the class-map being configured. Use the no form of this command to delete the ACLs.
PAGE 762
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm console(config-cmap)# match access-group enterprise policy-map A policy map contains one or more class maps and an action that is taken if the packet matches the class map. Policy maps may be bound to ports/portchannels. Use the policy-map Global Configuration mode command to creates a policy map and enter the Policy-map Configuration mode.
PAGE 763
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm The match criteria is for a class map. Only one policy map per interface is supported. The same policy map can be applied to multiple interfaces and directions. The service-policy command binds a policy map to a port/port-channel. Example The following example creates a policy map called Policy1 and enters the Policy-map Configuration mode.
PAGE 764
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm User Guidelines This is the same as creating a class map and then binding it to the policy map. You can specify an existing class map in this command, or you can use the access-group parameter to create a new class map. After the policy-map is defined, use the service-policy command to attach it to a port/port-channel.
PAGE 765
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Example The following example displays all policy maps. console(config)# show policy-map Policy Map policy1 class class1 set IP dscp 7 Policy Map policy2 class class 2 police 96000 4800 exceed-action drop class class3 police 124000 96000 exceed-action policed-dscp-transmit trust Use the trust Policy-map Class Configuration mode command to configure the trust state.
PAGE 766
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm User Guidelines Use this command to distinguish the QoS trust behavior for certain traffic from others. For example, incoming traffic with certain DSCP values can be trusted. A class map can be configured to match and trust the DSCP values in the incoming traffic.
PAGE 767
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm set Use the set Policy-map Class Configuration mode command to select the value that QoS uses as the DSCP value, the egress queue or to set user priority values. This command is only available when QoS is in advanced mode. Syntax set {dscp new-dscp | queue queue-id | cos new-cos} no set Parameters • dscp new-dscp—Specifies the new DSCP value for the classified traffic.
PAGE 768
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm console(config)# class-map c1 console(config-cmap)# match access-group ip1 console(config-cmap)# exit console(config)# policy-map p1 console(config-pmap)# class c1 console(config-pmap-c)# set dscp 56 police Use the police Policy-map Class Configuration mode command to define the policer for classified traffic. This defines another group of actions for the policy map (per class map).
PAGE 769
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Default Usage N/A Command Mode Policy-map Class Configuration mode. User Guidelines Policing uses a token bucket algorithm. CIR represents the speed with which the token is added to the bucket. CBS represents the depth of the bucket. Example The following example defines a policer for classified traffic.
PAGE 770
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Command Mode Interface (Ethernet) Configuration mode User Guidelines Only one policy map per interface per direction is supported. Example Example 1—The following example attaches a policy map called Policy1 to the input interface.
PAGE 771
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm policed-dscp-transmit—Remarks the packet DSCP. – Default Configuration No aggregate policer is defined. Command Mode Global Configuration mode User Guidelines Define an aggregate policer if the policer aggregates traffic from multiple class maps. Aggregate policers cannot aggregate traffic from multiple devices.
PAGE 772
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm show qos aggregate-policer Use the show qos aggregate-policer EXEC mode command to display aggregate policers This command is only available in QoS advanced mode. Syntax show qos aggregate-policer [aggregate-policer-name] Parameters aggregate-policer-name—Specifies the aggregate policer name. Default Configuration All policers are displayed.
PAGE 773
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm no police aggregate aggregate-policer-name Parameters aggregate-policer-name—Specifies the aggregate policer name. Command Mode Policy-map Class Configuration mode. User Guidelines An aggregate policer can be applied to multiple classes in the same policy map. An aggregate policer cannot be applied across multiple policy maps or interfaces.
PAGE 774
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Syntax wrr-queue cos-map queue-id cos0... cos7 no wrr-queue cos-map [queue-id] Parameters • queue-id—Specifies the queue number to which the CoS values are mapped. • cos0... cos7—Specifies up to 8 CoS values to map to the specified queue number. (Range: 0–7) Default Configuration The default CoS value mapping to 8 queues is as follows: CoS value 0 is mapped to queue 1.
PAGE 775
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm wrr-queue bandwidth Use the wrr-queue bandwidth global Configuration command to assign Weighted Round Robin (WRR) weights to egress queues. The weight ratio determines the frequency at which the packet scheduler removes packets from each queue. Use the no form of this command to restore the default configuration. Syntax wrr-queue bandwidth weight1 weight2...
PAGE 776
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Example The following assigns WRR values to the queues. console(config)# priority-queue out num-of-queues 0 console(config)# wrr-queue bandwidth 6 6 6 6 6 6 6 6 priority-queue out num-of-queues An expedite queue is a strict priority queue, which is serviced until empty before the other lower priority queues are serviced.
PAGE 777
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm indicates that the corresponding weight in the wrr-queue bandwidth Interface Configuration mode command is ignored (not used in the ratio calculation). Example The following example configures the number of expedite queues as 2. console(config)# priority-queue out num-of-queues 2 traffic-shape The egress port shaper controls the traffic transmit rate (Tx rate) on a port.
PAGE 778
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Example The following example sets a traffic shaper on gi0/1 when the average traffic rate exceeds 64 kbps or the normal burst size exceeds 4096 bytes. console(config)# interface gi0/1 console(config-if)# traffic-shape 64 4096 traffic-shape queue The egress port shaper controls the traffic transmit rate (Tx rate) on a queue on a port.
PAGE 779
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Example The following example sets a shaper on queue 1 on gi0/1 when the average traffic rate exceeds 124000 kbps or the normal burst size exceeds 9600 bytes. console(config)# interface gi0/1 console(config-if)# traffic-shape queue 1 64 4096 rate-limit (Ethernet) Use the rate-limit Interface Configuration mode command to limit the incoming traffic rate on a port.
PAGE 780
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Example The following example limits the incoming traffic rate on gi0/1 to 150,000 kbps. console(config)# interface gi0/1 console(config-if)# rate-limit 150000 qos wrr-queue wrtd Use the qos wrr-queue wrtd Global Configuration mode command to enable Weighted Random Tail Drop (WRTD). Use the no form of this command to disable WRTD.
PAGE 781
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm show qos wrr-queue wrtd Use the show qos wrr-queue wrtd Exec mode command to display the Weighted Random Tail Drop (WRTD) configuration.
PAGE 782
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm • queueing—Displays the queue's strategy (WRR or EF), the weight for WRR queues, the CoS to queue map and the EF priority. • policers—Displays all the policers configured for this interface, their settings, and the number of policers currently unused (on a VLAN). • shapers—Displays the shaper of the specified interface and the shaper for the queue on the specified interface.
PAGE 783
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.
PAGE 784
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Example 3—This is an example of the output from the show qos interface shapers command.
PAGE 785
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.
PAGE 786
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm qos wrr-queue threshold Use the qos wrr-queue threshold Global Configuration mode command to assign queue thresholds globally. Use the no form of this command to restore the default configuration. This command is only available in QoS advanced mode.
PAGE 787
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm qos map policed-dscp Use the qos map policed-dscp Global Configuration mode command to configure the policed-DSCP map for remarking purposes. Use the no form of this command to restore the default configuration. Syntax qos map policed-dscp dscp-list to dscp-mark-down no qos map policed-dscp [dscp-list] Parameters • dscp- list—Specifies up to 8 DSCP values, separated by spaces.
PAGE 788
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm qos map dscp-queue Use the qos map dscp-queue Global Configuration mode command to configure the DSCP to queue map. Use the no form of this command to restore the default configuration. Syntax qos map dscp-queue dscp-list to queue-id no qos map dscp-queue [dscp-list] Parameters • dscp-list—Specifies up to 8 DSCP values, separated by spaces.
PAGE 789
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm This command is only available in QoS advanced mode. Syntax qos map dscp-dp dscp-list to dp no qos map dscp-dp [dscp-list] Parameters • dscp-list—Specifies up to 8 DSCP values, with values separated by a space. (Range: 0–63) • dp—Specifies the Drop Precedence value to which the DSCP values are mapped. (values: 0,2) where 2 is the highest Drop Precedence).
PAGE 790
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Parameters • cos— Specifies that ingress packets are classified with packet CoS values. Untagged packets are classified with the default port CoS value. • dscp—Specifies that ingress packets are classified with packet DSCP values. Default Configuration CoS is the default trust mode.
PAGE 791
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm qos trust (Interface) Use the qos trust Interface Configuration (Ethernet, Port-channel) mode command to enable port trust state while the system is in the basic QoS mode. Use the no form of this command to disable the trust state on each port. Syntax qos trust no qos trust Parameters N/A Default Configuration Each port is enabled while the system is in basic mode.
PAGE 792
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Parameters default-cos—Specifies the default CoS value (VPT value) of the port. If the port is trusted and the packet is untagged, then the default CoS value become the CoS value. (Range: 0–7) Default Configuration The default CoS value of a port is 0.
PAGE 793
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Command Mode Global Configuration mode User Guidelines Apply the DSCP-to-DSCP-mutation map to a port at the boundary of a Quality of Service (QoS) administrative domain. If two QoS domains have different DSCP definitions, use the DSCP-to-DSCP-mutation map to translate a set of DSCP values to match the definition of another domain. Apply the map to ingress and to DSCP-trusted ports only.
PAGE 794
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Default Configuration The default map is the Null map, which means that each incoming DSCP value is mapped to the same DSCP value. Command Mode Global Configuration mode User Guidelines This is the only map that is not globally configured. It is possible to have several maps and assign each one to a different port.
PAGE 795
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.
PAGE 796
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm qos statistics policer Use the qos statistics policer Interface Configuration (Ethernet, Portchannel) mode command to enable counting in-profile and out-of-profile. Use the no form of this command to disable counting. This command is relevant only when policers are defined.
PAGE 797
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Syntax qos statistics aggregate-policer aggregate-policer-name no qos statistics aggregate-policer aggregate-policer-name Parameters aggregate-policer-name—Specifies the aggregate policer name. Default Configuration Counting in-profile and out-of-profile is disabled.
PAGE 798
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm Default Configuration Set 1: All interfaces, all queues, high DP. Set 2: All interfaces, all queues, low DP. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. If the queue parameter is all, traffic in cascading ports is also counted. Example The following example enables QoS statistics for output queues for counter set 1.
PAGE 799
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.fm User Guidelines Up to 16 sets of counters can be enabled for policers. The counters can be enabled in the creation of the policers. Use the qos statistics queues Global Configuration mode command to enable QoS statistics for output queues. Example The following example displays Quality of Service statistical information.
PAGE 800
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\QoS.
PAGE 801
DNS Client Commands 46 clear host Use the clear host command in privileged EXEC mode to delete dynamic hostname-to-address mapping entries from the DNS client name-to-address cache. Syntax clear host {hostname | *} Parameters • hostname—Name of the host for which hostname-to-address mappings are to be deleted from the DNS client name-to-address cache. • *—Specifies that all the dynamic hostname-to-address mappings are to be deleted from the DNS client name-to-address cache.
PAGE 802
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DNS_Client.fm Example The following example deletes all dynamic entries from the DNS client name-to-address cache. console# clear host * ip domain lookup Use the ip domain lookup command in Global Configuration mode to enable the IP Domain Naming System (DNS)-based host name-to-address translation. To disable the DNS, use the no form of this command.
PAGE 803
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DNS_Client.fm To delete the static defined default domain name, use the no form of this command. Syntax ip domain name name no ip domain name Parameters name—Default domain name used to complete unqualified host names. Do not include the initial period that separates an unqualified name from the domain name. Length: 1–158 characters. Maximum label length of each domain level is 63 characters.
PAGE 804
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DNS_Client.fm ip domain polling-interval Use the ip domain polling-interval command in Global Configuration mode to specify the polling interval. Use the no form of this command to return to the default behavior. Syntax ip domain polling-interval seconds no ip domain polling-interval Parameters seconds—Polling interval in seconds. The range is from (2*(R+1)*T) to 3600.
PAGE 805
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DNS_Client.fm ip domain retry Use the ip domain retry command in Global Configuration mode to specify the number of times the device will send Domain Name System (DNS) queries when there is no replay. To return to the default behavior, use the no form of this command. Syntax ip domain retry number no ip domain retry Parameters number—Number of times to retry sending a DNS query to the DNS server.
PAGE 806
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DNS_Client.fm To return to the default behavior, use the no form of this command. Syntax ip domain timeout seconds no ip domain timeout Parameters seconds—Time, in seconds, to wait for a response to a DNS query. The range is from 1 to 60. Default Configuration The default value is 2 seconds.
PAGE 807
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DNS_Client.fm Parameters • hostname—Name of the host. (Length: 1–158 characters. Maximum label length of each domain level is 63 characters). • address1—Associated host IP address (IPv4 or IPv6, if IPv6 stack is • address2...address8—Up to seven additional associated IP addresses, supported). delimited by a single space (IPv4 or IPv6, if IPv6 stack is supported).
PAGE 808
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DNS_Client.fm ip name-server Use the ip name-server command in Global Configuration mode to specify the address of one or more name servers to use for name and address resolution. Use the no form of this command to remove the static specified addresses. Syntax ip name-server server1-address [server-address2...erver-address8] no ip name-server [server-address1...
PAGE 809
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DNS_Client.fm show hosts Use the show hosts command in privileged EXEC mode to display the default domain name, the style of name lookup service, a list of name server hosts, and the cached list of hostnames and addresses. Syntax show hosts [all | hostname] Parameters • all—The specified host name cache information is to be displayed for all configured DNS views. This is the default.
PAGE 810
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\DNS_Client.fm static website.com dhcpv6 vlan 100 1 qqtca.com dhcpv6 vlan 100 2 company.com dhcpv6 vlan 1100 1 pptca.com Name Server Table Source Interface Preference IP Address static 1 192.0.2.204 static 2 192.0.2.205 static 3 192.0.2.105 DHCPv6 vlan 100 1 2002:0:22AC::11:231A:0BB4 DHCPv4 vlan 1 1 192.1.122.20 DHCPv4 vlan 1 2 154.1.122.
PAGE 811
MLD Snooping Commands 47 ipv6 mld snooping (Global) The ipv6 mld snooping Global Configuration mode command enables IPv6 Multicast Listener Discovery (MLD) snooping. To disable IPv6 MLD snooping, use the no form of this command. Syntax ipv6 mld snooping no ipv6 mld snooping Parameters N/A Default Configuration IPv6 MLD snooping is disabled. Command Mode Global Configuration mode Example The following example enables IPv6 MLD snooping.
PAGE 812
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm Syntax ipv6 mld snooping vlan vlan-id no ipv6 mld snooping vlan vlan-id Parameters • vlan-id—Specifies the VLAN. Default Configuration Disabled Command Mode Global Configuration mode User Guidelines MLD snooping can only be enabled on static VLANs. MLDv1 and MLDv2 are supported.
PAGE 813
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm no ipv6 mld snooping querier Parameters N/A Default Configuration Enabled Command Mode Global Configuration mode User Guidelines To run the MLD Snooping querier on a VLAN, you have enable it globally and on the VLAN.
PAGE 814
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm Command Mode Global Configuration mode User Guidelines The MLD Snooping querier can be enabled on a VLAN only if MLD Snooping is enabled for that VLAN.
PAGE 815
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm If the MLD Querier election mechanism is enabled, the MLD Snooping querier supports the standard MLD Querier election mechanism specified in RFC2710 and RFC3810. If MLD Querier election mechanism is disabled, MLD Snooping Querier delays sending General Query messages for 60 seconds from the time it was enabled.
PAGE 816
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm • querier version {1 | 2}—Specifies the MLD version. Default Configuration MLDv1.
PAGE 817
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm User Guidelines Multicast router ports can be configured statically with the bridge multicast forward-all command. You can execute the command before the VLAN is created.
PAGE 818
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm A port that is defined as a Multicast router port receives all MLD packets (reports and queries) as well as all Multicast data. You can execute the command before the VLAN is created and for a range of ports as shown in the example.
PAGE 819
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm User Guidelines A port that is forbidden to be defined as a Multicast router port (mrouter port) cannot be learned dynamically or assigned statically. The bridge multicast forward-all command was used in older versions to forbid dynamic learning of Multicast router ports. You can execute the command before the VLAN is created.
PAGE 820
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm User Guidelines Static multicast addresses can only be defined on static VLANs. You can execute the command before the VLAN is created. You can register an entry without specifying an interface. Using the no command without a port-list removes the entry.
PAGE 821
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm Command Mode Global Configuration mode User Guidelines You can execute the command before the VLAN is created. Example console(config)# ipv6 mld snooping vlan 1 immediate-leave show ipv6 mld snooping groups The show ipv6 mld snooping groups EXEC mode command displays the multicast groups learned by the MLD snooping.
PAGE 822
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm contains the ports which have issued an explicit Exclude for that specific source in a multicast group. The Reporters That Are Forbidden Statically list contains the list of ports that have asked to receive a Multicast flow but were defined as forbidden for that multicast group in a multicast bridge.
PAGE 823
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm Parameters • vlan-id—Specifies the VLAN ID. Default Configuration Display information for all VLANs. Command Mode User EXEC mode Example The following example displays the MLD snooping configuration for VLAN 1000.
PAGE 824
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD_Snooping.fm show ipv6 mld snooping mrouter The show ipv6 mld snooping mrouter EXEC mode command displays information on dynamically learned Multicast router interfaces for all VLANs or for a specific VLAN. Syntax show ipv6 mld snooping mrouter [interface vlan-id] Parameters • interface vlan-id—Specifies the VLAN ID. Default Configuration Display information for all VLANs.
PAGE 825
48 MLD Commands ipv6 mld last-member-query-count To configure the Multicast Listener Discovery (MLD) last member query counter, use the ipv6 mld last-member-query-count command in interface configuration mode. To restore the default value, use the no form of this command. Syntax ipv6 mld last-member-query-count count no ipv6 mld last-member-query-count Parameters count—The number of times that group- or group-source-specific queries are sent upon receipt of a message indicating a leave.
PAGE 826
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD.fm exit ipv6 mld last-member-query-interval To configure the Multicast Listener Discovery (MLD) last member query interval, use the ipv6 mld last-member-query-interval command in interface configuration mode. To restore the default MLD query interval, use the no form of this command.
PAGE 827
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD.fm ipv6 mld query-interval To configure the frequency at which the switch sends Multicast Listener Discovery (MLD) host-query messages, use the ipv6 mld query-interval command in interface configuration mode. To return to the default frequency, use the no form of this command.
PAGE 828
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD.fm ipv6 mld query-max-response-time To configure the maximum response time advertised in Multicast Listener Discovery (MLD) queries, use the ipv6 mld query-max-response-time command in interface configuration mode. To restore the default value, use the no form of this command.
PAGE 829
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD.fm Example The following example configures a maximum response time of 8 seconds: console(config)# interface vlan 100 console(config-if)# ipv6 mld query-max-response-time 8 console(config-if)# exit ipv6 mld robustness To configure the Multicast Listener Discovery (MLD) robustness variable, use the ipv6 mld robustness command in interface configuration mode.
PAGE 830
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\MLD.
PAGE 831
49 Port Features Overview The network ports of the switch are divided into internal and external ports. The internal ports are connected to blade servers cards through the mid-plan of the chassis.
PAGE 832
FILE LOCATION: C:\Users\gina\Desktop\Checkout_new\CLI Folders\Dell Plasma-ARC 2+3\new_system_mifs_ARC2_latest\ARC Port Configuration.fm console(config-if)# Example 2: This example shows that running the command that disables short-reach on an internal port is ignored (there is no reaction by the system).