CLI Reference Guide-R03
Table Of Contents
- How to Use This Guide
- Contents
- Figures
- Tables
- Getting Started
- Command Line Interface
- Using the Command Line Interface
- General Commands
- System Management Commands
- SNMP Commands
- Remote Monitoring Commands
- Authentication Commands
- User Accounts and Privilege Levels
- Authentication Sequence
- RADIUS Client
- TACACS+ Client
- AAA
- Web Server
- Telnet Server
- Secure Shell
- 802.1X Port Authentication
- Management IP Filter
- PPPoE Intermediate Agent
- pppoe intermediate-agent
- pppoe intermediate- agent format-type
- pppoe intermediate- agent port-enable
- pppoe intermediate- agent port-format- type
- pppoe intermediate- agent trust
- pppoe intermediate- agent vendor-tag strip
- clear pppoe intermediate-agent statistics
- show pppoe intermediate-agent info
- show pppoe intermediate-agent statistics
- General Security Measures
- Port Security
- Network Access (MAC Address Authentication)
- network-access aging
- network-access mac-filter
- mac-authentication reauth-time
- network-access dynamic-qos
- network-access dynamic-vlan
- network-access guest-vlan
- network-access link-detection
- network-access link- detection link-down
- network-access link- detection link-up
- network-access link- detection link-up- down
- network-access max- mac-count
- network-access mode mac-authentication
- network-access port- mac-filter
- mac-authentication intrusion-action
- mac-authentication max-mac-count
- clear network-access
- show network-access
- show network-access mac-address-table
- show network-access mac-filter
- Web Authentication
- DHCP Snooping
- ip dhcp snooping
- ip dhcp snooping information option
- ip dhcp snooping information policy
- ip dhcp snooping verify mac-address
- ip dhcp snooping vlan
- ip dhcp snooping information option circuit-id
- ip dhcp snooping trust
- clear ip dhcp snooping binding
- clear ip dhcp snooping database flash
- ip dhcp snooping database flash
- show ip dhcp snooping
- show ip dhcp snooping binding
- IP Source Guard
- ARP Inspection
- ip arp inspection
- ip arp inspection filter
- ip arp inspection log-buffer logs
- ip arp inspection validate
- ip arp inspection vlan
- ip arp inspection limit
- ip arp inspection trust
- show ip arp inspection configuration
- show ip arp inspection interface
- show ip arp inspection log
- show ip arp inspection statistics
- show ip arp inspection vlan
- Denial of Service Protection
- Global Protection
- Protection for ICMP
- Protection for IPv4
- Protection for IPv6
- Protection for TCP
- dos-protection tcp blat-block
- dos-protection tcp invalid-header-length
- dos-protection tcp null-scan
- dos-protection tcp syn-ack-psh-block
- dos-protection tcp syn-fin-scan
- dos-protection tcp syn-flood
- dos-protection tcp syn-psh-block
- dos-protection tcp syn-rst-scan
- dos-protection tcp syn-urg-block
- dos-protection tcp xmas-scan
- Protection for UDP
- Other Protection Commands
- DoS Configuration Information
- Port Isolation
- Port-based Traffic Segmentation
- Access Control Lists
- Interface Commands
- Link Aggregation Commands
- Power over Ethernet Commands
- Port Mirroring Commands
- Congestion Control Commands
- Rate Limit Commands
- Storm Control Commands
- Automatic Traffic Control Commands
- Threshold Commands
- SNMP Trap Commands
- snmp-server enable port-traps atc broadcast-alarm-clear
- snmp-server enable port-traps atc broadcast-alarm-fire
- snmp-server enable port-traps atc broadcast-control- apply
- snmp-server enable port-traps atc broadcast-control- release
- snmp-server enable port-traps atc multicast-alarm-clear
- snmp-server enable port-traps atc multicast-alarm-fire
- snmp-server enable port-traps atc multicast-control- apply
- snmp-server enable port-traps atc multicast-control- release
- ATC Display Commands
- UniDirectional Link Detection Commands
- Loopback Detection Commands
- Address Table Commands
- mac-address-table action
- mac-address-table aging-time
- mac-address-table mac-isolation
- mac-address-table max-mac-count
- mac-address-table movable-static
- mac-address-table static
- mac-address-table sticky-dynamic
- mac-address-table static isolation
- clear mac-address- table dynamic
- show mac-address- table
- show mac-address- table aging-time
- show mac-address- table count
- show mac-address- table max-mac-count
- show mac-address- table movable-static
- show mac-address- table sticky-dynamic
- Spanning Tree Commands
- spanning-tree
- spanning-tree cisco-prestandard
- spanning-tree forward-time
- spanning-tree hello-time
- spanning-tree max-age
- spanning-tree mode
- spanning-tree pathcost method
- spanning-tree priority
- spanning-tree mst configuration
- spanning-tree system- bpdu-flooding
- spanning-tree transmission-limit
- max-hops
- mst priority
- mst vlan
- name
- revision
- spanning-tree bpdu-filter
- spanning-tree bpdu-guard
- spanning-tree cost
- spanning-tree edge-port
- spanning-tree link-type
- spanning-tree loopback-detection
- spanning-tree loopback-detection action
- spanning-tree loopback-detection release-mode
- spanning-tree loopback-detection trap
- spanning-tree mst cost
- spanning-tree mst port-priority
- spanning-tree port-bpdu-flooding
- spanning-tree port-priority
- spanning-tree root-guard
- spanning-tree spanning-disabled
- spanning-tree loopback-detection release
- spanning-tree protocol-migration
- show spanning-tree
- show spanning-tree mst configuration
- VLAN Commands
- Class of Service Commands
- Quality of Service Commands
- Multicast Filtering Commands
- IGMP Snooping
- ip igmp snooping
- ip igmp snooping proxy-reporting
- ip igmp snooping querier
- ip igmp snooping router-alert-option- check
- ip igmp snooping router-port-expire- time
- ip igmp snooping tcn-flood
- ip igmp snooping tcn-query-solicit
- ip igmp snooping unregistered-data- flood
- ip igmp snooping unsolicited-report- interval
- ip igmp snooping version
- ip igmp snooping version-exclusive
- ip igmp snooping vlan general-query- suppression
- ip igmp snooping vlan immediate-leave
- ip igmp snooping vlan last-memb- query-count
- ip igmp snooping vlan last-memb- query-intvl
- ip igmp snooping vlan mrd
- ip igmp snooping vlan proxy-address
- ip igmp snooping vlan query-interval
- ip igmp snooping vlan query-resp-intvl
- ip igmp snooping vlan static
- clear ip igmp snooping groups dynamic
- clear ip igmp snooping statistics
- show ip igmp snooping
- show ip igmp snooping group
- show ip igmp snooping mrouter
- show ip igmp snooping statistics
- Static Multicast Routing
- IGMP Filtering and Throttling
- MLD Snooping
- ipv6 mld snooping
- ipv6 mld snooping querier
- ipv6 mld snooping query-interval
- ipv6 mld snooping query-max-response- time
- ipv6 mld snooping robustness
- ipv6 mld snooping router-port- expire-time
- ipv6 mld snooping unknown-multicast mode
- ipv6 mld snooping version
- ipv6 mld snooping vlan mrouter
- ipv6 mld snooping vlan static
- ipv6 mld snooping vlan immediate-leave
- show ipv6 mld snooping
- show ipv6 mld snooping group
- show ipv6 mld snooping group source-list
- show ipv6 mld snooping mrouter
- Multicast VLAN Registration
- mvr
- mvr associated-profile
- mvr domain
- mvr profile
- mvr proxy-query- interval
- mvr proxy-switching
- mvr robustness-value
- mvr source-port- mode dynamic
- mvr upstream- source-ip
- mvr vlan
- mvr immediate-leave
- mvr type
- mvr vlan group
- show mvr
- show mvr associated-profile
- show mvr interface
- show mvr members
- show mvr profile
- show mvr statistics
- IGMP Snooping
- LLDP Commands
- lldp
- lldp holdtime-multiplier
- lldp med-fast-start- count
- lldp notification-interval
- lldp refresh-interval
- lldp reinit-delay
- lldp tx-delay
- lldp admin-status
- lldp basic-tlv management-ip- address
- lldp basic-tlv port-description
- lldp basic-tlv system-capabilities
- lldp basic-tlv system-description
- lldp basic-tlv system-name
- lldp dot1-tlv proto-ident
- lldp dot1-tlv proto-vid
- lldp dot1-tlv pvid
- lldp dot1-tlv vlan-name
- lldp dot3-tlv link-agg
- lldp dot3-tlv mac-phy
- lldp dot3-tlv max-frame
- lldp dot3-tlv poe
- lldp med-location civic-addr
- lldp med-notification
- lldp med-tlv ext-poe
- lldp med-tlv inventory
- lldp med-tlv location
- lldp med-tlv med-cap
- lldp med-tlv network-policy
- lldp notification
- show lldp config
- show lldp info local-device
- show lldp info remote-device
- show lldp info statistics
- Domain Name Service Commands
- DHCP Commands
- IP Interface Commands
- Appendices
- Glossary
- Index of CLI Commands
- Index
Index
– 705 –
DNS
default domain name
625
displaying the cache
630
domain name list
626
enabling lookup
624
multicast address mapping
626
name server list
627
static entries, IPv4
626
static entries, IPv6
628
Domain Name Service See DNS
DoS protection
294
downloading software
105
automatically
110
using FTP or TFTP
105
drop precedence
CoS priority mapping
510, 531, 532
DSCP ingress map
512
DSA encryption
215
DSCP
514
enabling
514
mapping to internal values
512
DSCP ingress map, drop precedence
512
DSCP to PHB/drop precedence
512
dynamic addresses
clearing
431
displaying
432
Dynamic Host Configuration Protocol See DHCP
dynamic QoS assignment
253
dynamic VLAN assignment
254
E
edge port, STA 452
encryption
DSA
215
RSA
215
engine ID
159
event logging
124
excess burst size, QoS policy
527, 529
exec command privileges, accounting
197
exec settings
accounting
201
authorization
199, 202
F
firmware
displaying version
100
upgrading
105
upgrading automatically
110
upgrading with FTP or TFP
105
version, displaying
100
G
gateway, IPv4 default 648
gateway, IPv6 default
656
general security measures
245
GVRP
enabling
466
global setting
466
interface configuration
468
H
hardware version, displaying 100
HTTP, web server
204
HTTPS
205
configuring
205
replacing SSL certificate
105
secure-site certificate
105
UDP port, configuring
205
HTTPS, secure server
205
I
IEEE 802.1D 441
IEEE 802.1s
441
IEEE 802.1w
441
IEEE 802.1X
219, 221
IGMP
filter profiles, binding to interface
564
filter profiles, configuration
562
filter, interface configuration
564–565
filter, parameters
561–565
filtering & throttling
561
filtering & throttling, enabling
561
filtering & throttling, interface configuration
564
filtering & throttling, status
561
filtering, configuring profile
563
filtering, creating profile
562
filtering, group range
563
filtering, interface settings
564–565
groups, displaying
556
Layer 2
537
query
540
query, enabling
540
services, displaying
556
snooping
537
snooping & query, parameters
537
snooping, configuring
537
snooping, enabling
539
snooping, general query suppression
547
snooping, immediate leave
547
IGMP snooping
configuring
537
enabling per interface
539
forwarding entries
556