AT8901/2/3 CLI Reference Manual AdvancedTCA M5301_TECH_2 1.
AT8901/2/3 Preface Revision History Publication Title: ID Number: AT8901/2/3 CLI Reference Manual M5301_TECH_2 Rev. Index Brief Description of Changes Date of Issue 1.0 Preliminary Initial Issue 2005-07-15 1.1 Change Chapter 9 2005-08-16 1.2 Change structure, include LVL7 4.3.7 doc upgrade, add commands chapter 16 2006-01-12 1.3 Change structure, add LVL7 4.4 commands, review 2006-04-10 Imprint Kontron may be contacted via the following: Kontron Canada, Inc.
AT8901/2/3 Preface About This Book This document describes configuration commands for FASTPATH® software. The commands can be accessed from the CLI. Why the Document was Created This document was created primarily for system administrators configuring and operating a system using FASTPATH software. It is intended to provide an understanding of the configuration options of FASTPATH software.
Preface AT8901/2/3 names, company logos and trademarks, which are registered trademarks and, therefore, proprietary to their respective owners. Environmental Protection Statement This product has been manufactured to satisfy environmental protection requirements where possible. Many of the components used (structural parts, printed circuit boards, connectors, batteries, etc.) are capable of being recycled.
AT8901/2/3 Preface Your new Kontron product was developed and tested carefully to provide all features necessary to ensure its compliance with electrical safety requirements. It was also designed for a long fault-free life. However, the life expectancy of your product can be drastically reduced by improper treatment during unpacking and installation.
Preface AT8901/2/3 In order to maintain Kontron’s product warranty, this product must not be altered or modified in any way. Changes or modifications to the device, which are not explicitly approved by Kontron Modular Computers GmbH and described in this manual or received from Kontron’s Technical Support as a special handling instruction, will void your warranty. This device should only be installed in or connected to systems that fulfill all necessary technical and specific environmental requirements.
AT8901/2/3 Preface given time, are excluded. The extent of Kontron Modular Computers GmbH liability to the customer shall not exceed the original purchase price of the item for which the claim exists. Kontron Modular Computers GmbH issues no warranty or representation, either explicit or implicit, with respect to its products’ reliability, fitness, quality, marketability or ability to fulfil any particular application or purpose.
AT8901/2/3 PRELIMINARY Preface AT8901/2/3 CLI Reference Manual Page viii
AT8901/2/3 Chapter 1. 1 Using the Command-Line Interface ............................................................. 1 - 2 1.1 Command Syntax .................................................................................... 1 - 2 1.2 Command Conventions ........................................................................... 1 - 2 1.2.1 Common Parameter Values ........................................................... 1 - 3 1.3 Slot/Port Naming Convention ........................................
AT8901/2/3 2.2.8 spanning-tree hello-time ..................................................................2 - 8 2.2.9 spanning-tree max-age ...................................................................2 - 9 2.2.10 spanning-tree max-hops .................................................................2 - 9 2.2.11 spanning-tree mst ...........................................................................2 - 9 2.2.12 spanning-tree mst instance .......................................................
AT8901/2/3 2.4 Double VLAN Commands ..................................................................... 2 - 27 2.4.1 dvlan-tunnel ethertype .................................................................. 2 - 27 2.4.2 mode dot1q-tunnel ........................................................................ 2 - 28 2.4.3 mode dvlan-tunnel ........................................................................ 2 - 28 2.4.4 show dot1q-tunnel ...............................................................
AT8901/2/3 2.10.16 users login .....................................................................................2 - 42 2.10.17 show authentication ......................................................................2 - 43 2.10.18 show authentication users .............................................................2 - 43 2.10.19 show dot1x ....................................................................................2 - 43 2.10.20 show dot1x users ..............................................
AT8901/2/3 2.15.1 set igmp ........................................................................................ 2 - 59 2.15.2 set igmp interfacemode ................................................................ 2 - 60 2.15.3 set igmp fast-leave ........................................................................ 2 - 60 2.15.4 set igmp groupmembership-interval ............................................. 2 - 61 2.15.5 set igmp maxresponse .........................................................
AT8901/2/3 2.18.6 dos-control icmp ............................................................................2 - 75 2.18.7 show dos-control ...........................................................................2 - 76 2.19 MAC Database Commands ...................................................................2 - 76 2.19.1 bridge aging-time ..........................................................................2 - 76 2.19.2 show forwardingdb agetime ...............................................
AT8901/2/3 3.3.1 ip irdp ............................................................................................ 3 - 14 3.3.2 ip irdp address .............................................................................. 3 - 14 3.3.3 ip irdp holdtime ............................................................................. 3 - 15 3.3.4 ip irdp maxadvertinterval ............................................................... 3 - 15 3.3.5 ip irdp minadvertinterval ...................................
AT8901/2/3 3.7.16 area virtual-link authentication ......................................................3 - 28 3.7.17 area virtual-link dead-interval (OSPF) ...........................................3 - 29 3.7.18 area virtual-link hello-interval (OSPF) ...........................................3 - 29 3.7.19 area virtual-link retransmit-interval (OSPF) ...................................3 - 29 3.7.20 area virtual-link transmit-delay (OSPF) .........................................3 - 30 3.7.
AT8901/2/3 3.8.7 3.8.8 3.8.9 3.8.10 3.8.11 3.8.12 3.8.13 3.8.14 3.8.15 3.8.16 3.8.17 distance rip ................................................................................... 3 - 48 distribute-list out (RIP) .................................................................. 3 - 48 ip rip authentication ....................................................................... 3 - 49 ip rip receive version .....................................................................
AT8901/2/3 4.3.13 match ip tos ...................................................................................4 - 12 4.3.14 match protocol ...............................................................................4 - 12 4.3.15 match source-address mac ...........................................................4 - 13 4.3.16 match srcip ....................................................................................4 - 13 4.3.17 match srcl4port ...................................................
AT8901/2/3 Chapter 5. 5 Utility Commands ........................................................................................ 5 - 2 5.1 Commands for accessing base/extension fabric ..................................... 5 - 2 5.1.1 base ................................................................................................ 5 - 2 5.1.2 extension ........................................................................................ 5 - 2 5.2 Commands for download and startup Configuration ...
AT8901/2/3 5.4.18 show boardinfo ipmidev ................................................................5 - 19 5.4.19 show boardinfo led ........................................................................5 - 19 5.4.20 show boardinfo amc connection ....................................................5 - 19 5.4.21 show boardinfo amc fru .................................................................5 - 19 5.4.22 show boardinfo fcap .....................................................................
AT8901/2/3 5.8.6 sntp unicast client poll-retry .......................................................... 5 - 30 5.8.7 sntp multicast client poll-interval ................................................... 5 - 30 5.8.8 sntp server .................................................................................... 5 - 31 5.8.9 show sntp ...................................................................................... 5 - 31 5.8.10 show sntp client ....................................................
AT8901/2/3 6.1 Network Interface Commands .................................................................6 - 2 6.1.1 enable (Privileged EXEC access) ...................................................6 - 2 6.1.2 serviceport ip ...................................................................................6 - 2 6.1.3 serviceport protocol .........................................................................6 - 3 6.1.4 network parms ...................................................................
AT8901/2/3 6.6.1 snmp-server .................................................................................. 6 - 16 6.6.2 snmp-server bind .......................................................................... 6 - 16 6.6.3 snmp-server community ............................................................... 6 - 17 6.6.4 snmp-server community ipaddr .................................................... 6 - 17 6.6.5 snmp-server community ipmask ...................................................
AT8901/2/3 6.9.8 show tacacs ..................................................................................6 - 32 6.10 Configuration Scripting Commands .......................................................6 - 33 6.10.1 script apply ....................................................................................6 - 33 6.10.2 script apply nointerl.scr .................................................................6 - 33 6.10.3 script delete ........................................................
AT8901/2/3 Chapter 1 Using the Command-Line Interface Page 1 - 1 AT8901/2/3 CLI Reference Manual
Using the Command-Line Interface 1. AT8901/2/3 Using the Command-Line Interface The command-line interface (CLI) is a text-based way to manage and monitor the system. You can access the CLI by using a direct serial connection or by using a remote logical connection with telnet or SSH. This chapter describes the CLI syntax, conventions, and modes. It contains the following sections: • • • • • • • 1.1 1.1 “Command Syntax” on page 1 - 2 1.2 “Command Conventions” on page 1 - 2 1.
AT8901/2/3 Using the Command-Line Interface The parameters for a command might include mandatory values, optional values, or keyword choices. Table 1 describes the conventions this document uses to distinguish between value types. Table 1. Parameter Conventions Symbol 1.2.1 Example Description <> angle brackets Indicates that you must enter a value in place of the brackets and text inside them.
Using the Command-Line Interface AT8901/2/3 Table 2. Parameter Descriptions Parameter 1.3 Description Interface or unit/slot/port Valid slot and port number separated by forward slashes. For example, 0/1 represents slot number 0 and port number 1. Logical Interface Represents a Logical slot and port number.. This is applicable in the case of a port-channel (LAG). You can use the logical unit/slot/port to configure the port-channel.
AT8901/2/3 1.4 Using the Command-Line Interface Using the “No” Form of a Command The no keyword is a specific form of an existing command and does not represent a new or distinct command. Almost every configuration command has a no form. In general, use the no form to reverse the action of a command or reset a value back to the default. For example, the no shutdown configuration command reverses the shutdown of an interface.
Using the Command-Line Interface AT8901/2/3 Table 5. CLI Command Modes Command Mode Prompt Mode Description Line Config Switch (line)# Allows you to configure various telnet settings and the console interface. Policy Map Config Switch (Config-policy-map)# Allows you to access the QoS Policy-Map configuration mode to configure the QoS Policy-Map. Policy Class Config Switch (Config-policy-class-map)# Consists of class creation, deletion, and matching commands.
AT8901/2/3 Using the Command-Line Interface Table 6. CLI Mode Access and Exit Command Mode Global Config Exit or Access Previous Mode Access Method From the Privileged EXEC mode, enter configure. VLAN Config Interface Config From the Privileged EXEC mode, enter vlan database. To exit to the Privileged EXEC mode, enter exit, or press Ctrl-Z. From the Global Config mode, enter To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z.
Using the Command-Line Interface 1.5.1 AT8901/2/3 Command Completion and Abbreviation Command completion finishes spelling the command when you type enough letters of a command to uniquely identify the command keyword. Once you have entered enough letters, press the SPACEBAR or TAB key to complete the word. Command abbreviation allows you to execute a command when you have entered there are enough letters to uniquely identify the command.
AT8901/2/3 Using the Command-Line Interface Table 8. CLI Editing Conventions Key Sequence 1.6 Description Ctrl-Y Prints last deleted character Ctrl-Q Enables serial flow Ctrl-S Disables serial flow Ctrl-Z Return to root command prompt Tab, Command-line completion Exit Go to next lower command prompt ? List available commands, keywords, or parameters Using CLI Help Enter a question mark (?) at the command prompt to display the commands available in the current mode.
Using the Command-Line Interface 1.7 AT8901/2/3 Accessing the CLI You can access the CLI by using a direct console connection or by using a telnet or SSH connection from a remote management host. For the initial connection, you must use a direct connection to the console port. You cannot access the system remotely until the system has an IP address, subnet mask, and default gateway.
AT8901/2/3 Chapter 21 Switching Commands Page 2 - 1 AT8901/2/3 CLI Reference Manual
Switching Commands 2. AT8901/2/3 Switching Commands This chapter describes the switching commands available in the CLI. The Switching Commands chapter includes the following sections: • • • • • • • • • • • • • • • • • • 2.1 “Port Configuration Commands” on page 2 - 2 2.2 “Spanning Tree Protocol (STP) Commands” on page 2 - 6 2.3 “VLAN Commands” on page 2 - 17 2.4 “Double VLAN Commands” on page 2 - 27 2.5 “Provisioning (IEEE 802.1p) Commands” on page 2 - 29 2.6 “Protected Ports Commands” on page 2 - 30 2.
AT8901/2/3 Mode 2.1.2.1 Switching Commands Interface Config no auto-negotiate This command disables automatic negotiation on a port. NOTE: Automatic sensing is disabled when automatic negotiation is disabled. 2.1.3 Format no auto-negotiate Mode Interface Config auto-negotiate all This command enables automatic negotiation on all ports. 2.1.3.1 Default enabled Format auto-negotiate all Mode Global Config no auto-negotiate all This command disables automatic negotiation on all ports. 2.1.
Switching Commands 2.1.6 AT8901/2/3 Format no mtu Mode Interface Config shutdown This command disables a port. NOTE: You can use the shutdown command on physical and port-channel (LAG) interfaces, but not on VLAN routing interfaces. 2.1.6.1 Default enabled Format shutdown Mode Interface Config no shutdown This command enables a port. 2.1.7 Format no shutdown Mode Interface Config shutdown all This command disables all ports.
AT8901/2/3 2.1.9 Switching Commands speed all This command sets the speed and duplex setting for all interfaces. Format speed all {<100 | 10> } Mode Global Config Acceptable values are: 2.1.10 100h 100BASE-T half-duplex 100f 100BASE-T full duplex 10h 10BASE-T half duplex 10f 10BASE-T full duplex show port This command displays port information.
Switching Commands Mode AT8901/2/3 Privileged EXEC Group Name Displays the group name of an entry in the Protocol-based VLAN table. 2.2 Group ID Displays the group identifier of the protocol group. Protocol(s) Indicates the type of protocol(s) for this group. VLAN Indicates the VLAN associated with this Protocol Group. Interface(s) Lists the unit/slot/port interface(s) that are associated with this Protocol Group.
AT8901/2/3 2.2.3 Switching Commands spanning-tree configuration name This command sets the Configuration Identifier Name for use in identifying the configuration that this switch is currently using. The is a string of up to 32 characters. 2.2.3.1 Default base MAC address in hexadecimal notation Format spanning-tree configuration name Mode Global Config no spanning-tree configuration name This command resets the Configuration Identifier Name to its default. 2.2.
Switching Commands 2.2.6 AT8901/2/3 spanning-tree forceversion This command sets the Force Protocol Version parameter to a new value. Use 802.1d to specify that the switch transmits ST BPDUs rather than MST BPDUs (IEEE 802.1d functionality supported). Use 802.1w to specify that the switch transmits RST BPDUs rather than MST BPDUs (IEEE 802.1w functionality supported). Use 802.1s to specify that the switch transmits MST BPDUs (IEEE 802.1s functionality supported). 2.2.6.1 Default 802.
AT8901/2/3 2.2.9 Switching Commands Format no spanning-tree hello-time Mode Interface Config spanning-tree max-age This command sets the Bridge Max Age parameter to a new value for the common and internal spanning tree. The max-age value is in seconds within a range of 6 to 40, with the value being less than or equal to 2 x (Bridge Forward Delay - 1). 2.2.9.
Switching Commands AT8901/2/3 If you specify the external-cost option, this command sets the external-path cost for MST instance ‘0’ i.e. CIST instance. You can set the external cost as a number in the range of 1 to 200000000 or auto. If you specify auto, the external path cost value is set based on Link Speed.
AT8901/2/3 Mode 2.2.12.1 Switching Commands Global Config no spanning-tree mst instance This command removes a multiple spanning tree instance from the switch and reallocates all VLANs allocated to the deleted instance to the common and internal spanning tree. The parameter is a number that corresponds to the desired existing multiple spanning tree instance to be removed. 2.2.
Switching Commands 2.2.14.1 AT8901/2/3 no spanning-tree mst vlan This command removes an association between a multiple spanning tree instance and a VLAN so that the VLAN is again be associated with the common and internal spanning tree. The parameter is a number that corresponds to the desired existing multiple spanning tree instance. The corresponds to an existing VLAN ID. 2.2.
AT8901/2/3 Switching Commands Bridge Identifier The bridge identifier for the CST. It is made up using the bridge priority and the base MAC address of the bridge. Time Since Topology Change Time in seconds. Topology Change Count Number of times changed. Topology Change Boolean value of the Topology Change parameter for the switch indicating if a topology change is in progress on any port assigned to the common and internal spanning tree. Designated Root The bridge identifier of the root bridge.
Switching Commands 2.2.19 AT8901/2/3 show spanning-tree interface This command displays the settings and parameters for a specific switch port within the common and internal spanning tree. The is the desired switch port. The following details are displayed on execution of the command. Format show spanning-tree interface Modes Privileged EXEC User EXEC Hello Time Admin hello time for this port. Port mode Enabled or disabled.
AT8901/2/3 Switching Commands Auto-Calculate Port Path Cost This indicates whether auto calculation for port path cost is enabled. Port Path Cost Configured value of the Internal Port Path Cost parameter. Auto-Calculate External Port Path Cost This indicates whether auto calculation for external port path cost is enabled. External Port Path Cost Configured value of the external Port Path Cost parameter. Designated Root The Identifier of the designated root for this port.
Switching Commands 2.2.21 AT8901/2/3 show spanning-tree mst port summary This command displays the settings of one or all ports within the specified multiple spanning tree instance. The parameter indicates a particular MST instance. The parameter { | all} indicates the desired switch port or all ports. If you specify 0 (defined as the default CIST ID) as the , the status summary displays for one or all ports within the common and internal spanning tree.
AT8901/2/3 Switching Commands Configuration Name Identifier used to identify the configuration currently being used. Configuration Revision Level Identifier used to identify the configuration currently being used. Configuration Digest Key Identifier used to identify the configuration currently being used. MST Instances List of all multiple spanning tree instances configured on the switch 2.2.
Switching Commands 2.3.3 AT8901/2/3 vlan This command creates a new VLAN and assigns it an ID. The ID is a valid VLAN identification number (ID 1 is reserved for the default VLAN). VLAN range is 2-4094. 2.3.3.1 Format vlan <2-4094> Mode VLAN Config no vlan This command deletes an existing VLAN. The ID is a valid VLAN identification number (ID 1 is reserved for the default VLAN). The VLAN range is 2-4094. 2.3.
AT8901/2/3 2.3.5.1 Switching Commands no vlan ingressfilter This command disables ingress filtering. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN. 2.3.
Switching Commands auto 2.3.9 AT8901/2/3 The interface is dynamically registered in this VLAN by GVRP. The interface will not participate in this VLAN unless a join request is received on this interface. This is equivalent to registration normal. vlan participation all This command configures the degree of participation for all interfaces in a VLAN. The ID is a valid VLAN identification number. You can use the following participation options: • • • 2.3.
AT8901/2/3 Switching Commands receiving interface are admitted and forwarded to ports that are members of that VLAN. 2.3.11.1 Default disabled Format vlan port ingressfilter all Mode Global Config no vlan port ingressfilter all This command disables ingress filtering for all ports. If ingress filtering is disabled, frames received with VLAN IDs that do not match the VLAN membership of the receiving interface are admitted and forwarded to ports that are members of that VLAN. 2.3.
Switching Commands 2.3.14 AT8901/2/3 vlan protocol group This command adds protocol-based VLAN groups to the system. The is a character string of 1 to 16 characters. When it is created, the protocol group will be assigned a unique number that will be used to identify the group in subsequent commands. 2.3.15 Format vlan protocol group Mode Global Config vlan protocol group add protocol This command adds the to the protocol-based VLAN identified by .
AT8901/2/3 2.3.17.1 Switching Commands no protocol group This command removes the from this protocol-based VLAN group that is identified by this . 2.3.18 Format no protocol group Mode VLAN Config protocol vlan group This command adds the physical interface to the protocol-based VLAN identified by . You can associate multiple interfaces with a group, but you can only associate each interface and protocol combination with one group.
Switching Commands 2.3.20 AT8901/2/3 vlan pvid This command changes the VLAN ID per interface. 2.3.20.1 Default 1 Format vlan pvid <1-4094> Mode Interface Config no vlan pvid This command sets the VLAN ID per interface to 1. 2.3.21 Format no vlan pvid Mode Interface Config vlan tagging This command configures the tagging behavior for a specific interface in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames.
AT8901/2/3 Mode 2.3.23.1 Switching Commands VLAN database no vlan association mac This command removes the association of a MAC address to a VLAN. 2.3.24 Format no vlan association mac Mode VLAN database show vlan This command displays detailed information, including interface information, for a specific VLAN. The ID is a valid VLAN identification number. Format show vlan Modes Privileged EXEC User EXEC VLAN ID There is a VLAN Identifier (VID) associated with each VLAN.
Switching Commands AT8901/2/3 unless a join request is received on this port. This is equivalent to registration normal in the IEEE 802.1Q standard. Tagging 2.3.25 Select the tagging behavior for this port in this VLAN. Tagged - specifies to transmit traffic for this VLAN as tagged frames. Untagged - specifies to transmit traffic for this VLAN as untagged frames. show vlan brief This command displays a list of all configured VLANs.
AT8901/2/3 Switching Commands in the tag. In an untagged frame, the VLAN is the Port VLAN ID specified for the port that received this frame. When disabled, all frames are forwarded in accordance with the 802.1Q VLAN bridge specification. The factory default is disabled. GVRP May be enabled or disabled. Default Priority The 802.1p priority assigned to tagged packets arriving on the port. 2.3.
Switching Commands 2.4.1.1 AT8901/2/3 Default vman Format dvlan-tunnel ethertype {802.1Q | vman | custom} [0-65535] Mode Global Config no dvlan-tunnel etherType This command configures the ether-type for all interfaces to the default value. 2.4.2 Format no dvlan-tunnel ethertype Mode Global Config mode dot1q-tunnel This command is used to enable Double VLAN Tunneling on the specified interface. 2.4.2.
AT8901/2/3 2.4.5 Switching Commands Format show dot1q-tunnel [interface { | all}] Modes Privileged EXEC User EXEC Interface Valid slot and port number separated by forward slashes. Mode This field specifies the administrative mode through which Double VLAN Tunneling can be enabled or disabled. The default value for this field is disabled. EtherType This field represents a 2-byte hex EtherType to be used as the first 16 bits of the DVLAN tunnel.
Switching Commands Mode 2.5.2 AT8901/2/3 Global Config vlan priority This command configures the default 802.1p port priority assigned for untagged packets for a specific interface. The range for the priority is 0-7 2.6 Default 0 Format vlan priority Mode Interface Config Protected Ports Commands This section describes commands you use to configure and view protected ports on a switch. Protected ports do not forward traffic to each other, even if they are on the same VLAN.
AT8901/2/3 2.6.2 Switching Commands switchport protected (Interface Config) Use this command to add an interface to a protected port group. The parameter identifies the set of protected ports to which this interface is assigned. You can only configure an interface as protected in one group. NOTE: Port protection occurs within a single switch. Protected port configuration does not affect traffic between ports on two different switches.
Switching Commands Protected 2.7 AT8901/2/3 Indicates whether the interface is protected or not. It shows TRUE or FALSE. If the group is a multiple groups then it shows TRUE in Group GARP Commands This section describes the commands you use to configure Generic Attribute Registration Protocol (GARP) and view GARP status. The commands in this section affect both GARP VLAN Registration Protocol (GVRP) and Garp Multicast Registration Protocol (GMRP).
AT8901/2/3 2.7.2.1 Switching Commands no set garp timer leave This command sets the GVRP leave time on all ports or a single port to the default and only has an effect when GVRP is enabled. 2.7.3 Format no set garp timer leave Modes Interface Config Global Config set garp timer leaveall This command sets how frequently Leave All PDUs are generated. A Leave All PDU indicates that all registrations will be unregistered. Participants would need to rejoin in order to maintain registration.
Switching Commands AT8901/2/3 NOTE: If GVRP is disabled, the system does not forward GVRP messages. 2.8.1 set gvrp adminmode This command enables GVRP on the system. 2.8.1.1 Default disabled Format set gvrp adminmode Mode Privileged EXEC no set gvrp adminmode This command disables GVRP. 2.8.2 Format no set gvrp adminmode Mode Privileged EXEC set gvrp interfacemode This command enables GVRP on a single port (Interface Config mode) or all ports (Global Config mode). 2.8.2.
AT8901/2/3 Switching Commands 20 centiseconds (0.2 seconds). The finest granularity of specification is one centisecond (0.01 seconds). Leave Timer Specifies the period of time to wait after receiving an unregister request for an attribute before deleting the attribute. Current attributes are a VLAN or multicast group. This may be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service.
Switching Commands 2.9.2 AT8901/2/3 set gmrp interfacemode This command enables GARP Multicast Registration Protocol on a single interface (Interface Config mode) or all interfaces (Global Config mode). If an interface which has GARP enabled is enabled for routing or is enlisted as a member of a port-channel (LAG), GARP functionality is disabled on that interface.
AT8901/2/3 Switching Commands 600 centiseconds (0.2 to 6.0 seconds). The factory default is 60 centiseconds (0.6 seconds). LeaveAll Timer This Leave All Time controls how frequently LeaveAll PDUs are generated. A LeaveAll PDU indicates that all registrations will shortly be deregistered. Participants will need to rejoin in order to maintain registration. There is an instance of this timer on a per-Port, per-GARP participant basis.
Switching Commands AT8901/2/3 of authentication login methods is three. The possible method values are local, and reject. radius The value of local indicates that the user’s locally stored ID and password are used for authentication. The value of radius indicates that the user’s ID and password will be authenticated using the RADIUS server. The value of reject indicates the user is never authenticated.
AT8901/2/3 Switching Commands assigned to a specific user if the user is configured locally. If this value is not configured, users will be authenticated using local authentication only. 2.10.5 Format dot1x defaultlogin Mode Global Config dot1x initialize This command begins the initialization sequence on the specified port. This command is only valid if the control mode for the specified port is 'auto'. If the control mode is not 'auto' an error will be returned. 2.10.
Switching Commands 2.10.8.1 AT8901/2/3 Default auto Format dot1x port-control {force-unauthorized | force-authorized | auto} Mode Interface Config no dot1x port-control This command sets the authentication mode on the specified port to the default value. 2.10.9 Format no dot1x port-control Mode Interface Config dot1x port-control all This command sets the authentication mode to use on all ports.
AT8901/2/3 2.10.11.1 Switching Commands no dot1x re-authentication This command disables re-authentication of the supplicant for the specified port. 2.10.12 Format no dot1x re-authentication Mode Interface Config dot1x system-auth-control Use this command to enable the dot1x authentication support on the switch. While disabled, the dot1x configuration is retained and can be changed, but is not activated. 2.10.12.
Switching Commands 2.10.13.1 AT8901/2/3 Format dot1x timeout {{reauth-period } | {quiet-period } | {tx-period } | {supp-timeout } | {server-timeout }} Mode Interface Config no dot1x timeout This command sets the value, in seconds, of the timer used by the authenticator state machine on this port to the default values. Depending on the token used, the corresponding default values are set. 2.10.
AT8901/2/3 2.10.17 Switching Commands Format users login Mode Global Config show authentication This command displays the ordered authentication methods for all authentication login lists. Format show authentication Mode Privileged EXEC Authentication Login List This displays the authentication login listname. 2.10.18 Method 1 This displays the first method in the specified authentication login list, if any.
Switching Commands Port AT8901/2/3 The interface whose configuration is displayed. Control Mode The configured control mode for this port. Possible values are forceunauthorized | force-authorized | auto. Operating Control Mode The control mode under which this port is operating. Possible values are authorized | unauthorized. Reauthentication Enabled Indicates whether re-authentication is enabled on this port.
AT8901/2/3 Switching Commands The value is expressed in seconds and will be in the range of 1 and 65535. Reauthentication Enabled Indicates if reauthentication is enabled on this port. Possible values are ‘True” or “False”. Key Transmission Enabled Indicates if the key is transmitted to the supplicant for the specified port. Possible values are True or False. Control Direction Indicates the control direction for the specified port or ports. Possible values are both or in.
Switching Commands 2.10.21 AT8901/2/3 Format show dot1x users Mode Privileged EXEC User Users configured locally to have access to the specified port. show users authentication This command displays all user and all authentication login information. It also displays the authentication login list assigned to the default user. Format show users authentication Mode Privileged EXEC User Lists every user that has an authentication login list assigned.
AT8901/2/3 Switching Commands ingressing on an interface increases beyond the configured threshold, the traffic is dropped. Therefore, the rate of broadcast traffic is limited to the configured threshold. 2.11.2.1 Default 5 Format storm-control broadcast level <0-100> Mode Interface Config no storm-control broadcast level This command sets the broadcast storm recovery threshold to the default value for an interface and disables broadcast storm recovery. 2.11.
Switching Commands 2.11.5 AT8901/2/3 Format no storm-control broadcast all level Mode Global Config storm-control multicast This command enables multicast storm recovery mode for an interface. If the mode is enabled, multicast storm recovery is active, and if the rate of L2 multicast traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped. Therefore, the rate of multicast traffic will be limited to the configured threshold. 2.11.5.
AT8901/2/3 2.11.7.1 Switching Commands Format storm-control multicast all Mode Global Config no storm-control multicast all This command disables multicast storm recovery mode for all interfaces. 2.11.8 Format no storm-control multicast all Mode Global Config storm-control multicast all level This command configures the multicast storm recovery threshold for all interfaces and enables multicast storm recovery mode.
Switching Commands 2.11.10 AT8901/2/3 storm-control unicast level This command configures the unicast storm recovery threshold for an interface and enables unicast storm recovery. If the mode is enabled, unicast storm recovery is active, and if the rate of unknown L2 unicast (destination lookup failure) traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped. Therefore, the rate of unknown unicast traffic will be limited to the configured threshold.
AT8901/2/3 Mode 2.11.12.1 Switching Commands Global Config no storm-control unicast all level This command returns the unicast storm recovery threshold to the default value and disables unicast storm recovery for all interfaces. 2.11.13 Format no storm-control unicast all level Mode Global Config storm-control flowcontrol This command enables 802.3x flow control for the switch and only applies to fullduplex mode ports. NOTE: 802.
Switching Commands Ucast Level 2.12 AT8901/2/3 Shows the Unknown Unicast or DLF (Destination Lookup Failure) storm control level Port-Channel/LAG (802.3ad) Commands This section describes the commands you use to configure port-channels, which are also known as link aggregation groups (LAGs). Link aggregation allows you to combine multiple full-duplex Ethernet links into a single logical link.
AT8901/2/3 Mode 2.12.3 Switching Commands Interface Config deleteport (Interface Config) This command deletes the port from the port-channel (LAG). The interface is a Logical slot and port number. of a configured port-channel. 2.12.4 Format deleteport Mode Interface Config deleteport (Global Config) This command deletes all configured ports from the port-channel (LAG). The interface is a Logical slot and port number. of a configured port-channel.
Switching Commands 2.12.7 AT8901/2/3 Format no port lacpmode Mode Interface Config port lacpmode all This command enables Link Aggregation Control Protocol (LACP) on all ports. 2.12.7.1 Format port lacpmode all Mode Global Config no port lacpmode all This command disables Link Aggregation Control Protocol (LACP) on all ports. 2.12.8 Format no port lacpmode all Mode Global Config port-channel adminmode This command enables a port-channel (LAG).
AT8901/2/3 2.12.10 Switching Commands port-channel name This command defines a name for the port-channel (LAG). The interface is a logical unit/slot/port for a configured port-channel, and is an alphanumeric string up to 15 characters. 2.12.11 Format port-channel name { | all | } Mode Global Config show port-channel brief This command displays a summary of individual port-channel (LAG) interfaces.
Switching Commands 2.13 AT8901/2/3 Mbr Ports A listing of the ports that are members of this port-channel (LAG), in unit/slot/port notation. There can be a maximum of eight ports assigned to a given port-channel (LAG). Port Speed Speed of the port-channel port. Type This field displays the status designating whether a particular portchannel (LAG) is statically or dynamically maintained. Static - The port-channel is statically maintained. Dynamic - The port-channel is dynamically maintained.
AT8901/2/3 Mode 2.13.2 Switching Commands Global Config no monitor This command removes all the source ports and a destination port for the and restores the default value for mirroring session mode for all the configured sessions. NOTE: This is a stand-alone “no” command. This command does not have a “normal” form. 2.13.3 Default enabled Format no monitor Mode Global Config show monitor session This command displays the Port monitoring information for a particular mirroring session.
Switching Commands AT8901/2/3 01:80:C2:00:00:21, and FF:FF:FF:FF:FF:FF. The parameter must identify a valid VLAN. You can create up to 100 static MAC filters. 2.14.1.1 Format macfilter Mode Global Config no macfilter This command removes all filtering restrictions and the static MAC filter entry for the MAC address on the VLAN . The parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
AT8901/2/3 2.14.4 Switching Commands Format no macfilter addsrc all Mode Global Config show mac-address-table static This command displays the Static MAC Filtering information for all Static MAC Filters. If you select , all the Static MAC Filters in the system are displayed. If you supply a value for , you must also enter a value for , and the system displays Static MAC Filter information only for that MAC address and VLAN.
Switching Commands AT8901/2/3 If an interface has IGMP Snooping enabled and you enable this interface for routing or enlist it as a member of a port-channel (LAG), IGMP Snooping functionality is disabled on that interface. IGMP Snooping functionality is re-enabled if you disable routing or remove port-channel (LAG) membership from an interface that has IGMP Snooping enabled. The IGMP application supports the following activities: • • • 2.15.1.
AT8901/2/3 Switching Commands remove the layer 2 LAN interface from its forwarding table entry upon receiving an IGMP leave message for that multicast group without first sending out MAC-based general queries to the interface. You should enable fast-leave admin mode only on VLANs where only one host is connected to each layer 2 LAN port.
Switching Commands AT8901/2/3 report for a particular group in that interface. This value must be less than the IGMP Query Interval time value. The range is 1 to 3599 seconds. 2.15.5.1 Default 10 seconds Format set igmp maxresponse <1-3599> Modes Global Config Interface Config VLAN Mode no set igmp maxresponse This command sets the max response time (on the interface or VLAN) to the default value. 2.15.
AT8901/2/3 2.15.8 Switching Commands Format no set igmp mrouter Mode Interface Config set igmp mrouter interface This command configures the interface as a multicast router interface. When configured as a multicast router interface, the interface is treated as a multicast router interface in all VLANs. 2.15.8.
Switching Commands AT8901/2/3 Max Response Time Displays the amount of time the switch waits after it sends a query on an interface, participating in the VLAN, because it did not receive a report for a particular group on that interface. This value may be configured. Multicast Router Present Expiration Time Displays the amount of time to wait before removing an interface that is participating in the VLAN from the list of interfaces with multicast routers attached.
AT8901/2/3 2.16 Switching Commands Description The text description of this multicast table entry. Interfaces The list of interfaces that are designated for forwarding (Fwd:) and filtering (Flt:). Port Security Commands This section describes the command you use to configure Port Security on the switch. Port security, which is also known as port MAC locking, allows you to secure the network by locking allowable MAC addresses on a given port.
Switching Commands 2.16.3 AT8901/2/3 port-security max-static This command sets the maximum number of statically locked MAC addresses allowed on a specific port. 2.16.3.1 Default 20 Format port-security max-static Mode Interface Config no port-security max-static This command resets the maximum of statically locked MAC addresses allowed on a specific port to its default value. 2.16.
AT8901/2/3 Switching Commands Admin Mode Port Locking mode for the Interface. Dynamic Limit Maximum dynamically allocated MAC Addresses. Static Limit Maximum statically allocated MAC Addresses. Violation Trap Mode Whether violation traps are enabled. 2.16.7 show port-security dynamic This command displays the dynamically locked MAC addresses for the port. Format show port-security dynamic Mode Privileged EXEC MAC Address MAC Address of dynamically locked MAC. 2.16.
Switching Commands 2.17.2 AT8901/2/3 Format no lldp transmit Mode Interface Config lldp receive Use this command to enable the LLDP receive capability. 2.17.2.1 Default disabled Format lldp receive Mode Interface Configuration no lldp receive Use this command to return the reception of LLDPDUs to the default value. 2.17.3 Format lldp receive Mode Interface Configuration lldp timers Use this command to set the timing parameters for local data transmission on ports enabled for LLDP.
AT8901/2/3 2.17.4.1 Switching Commands Format lldp transmit-tlv [sys-desc] [sys-name] [sys-cap] [portdesc] Mode Interface Config no lldp transmit-tlv Use this command to remove an optional TLV from the LLDPDUs. Use the command without parameters to remove all optional TLVs from the LLDPDU. 2.17.5 Format.
Switching Commands 2.17.7.1 AT8901/2/3 Format lldp notification-interval Mode Global Config no lldp notification-interval Use this command to return the notification interval to the default value. 2.17.8 Format no lldp notification-interval Mode Global Config clear lldp statistics Use this command to reset all LLDP statistics. 2.17.9 Format clear lldp statistics Mode Global Config clear lldp remote-data Use this command to delete all information from the LLDP remote data table.
AT8901/2/3 2.17.12 Switching Commands Notify Shows whether the interface sends remote data change notifications. TLVs Shows whether the interface sends optional TLVs in the LLDPDUs. The TLV codes can be 0 (Port Description), 1 (System Name), 2 (System Description), or 3 (System Capability). Mgmt Shows whether the interface transmits system management address information in the LLDPDUs.
Switching Commands AT8901/2/3 Chassis ID Shows the ID of the remote device. Port ID Shows the port number that transmitted the LLDPDU. System Name Shows the system name of the remote device. 2.17.14 show lldp remote-device detail Use this command to display detailed information about remote devices that transmit current LLDP data to an interface on the system.
AT8901/2/3 2.17.16 Switching Commands show lldp local-device detail Use this command to display detailed information about the LLDP data a specific interface transmits. Format show lldp local-device detail Mode Privileged EXEC Interface Identifies the interface that sends the LLDPDU. Chassis ID Subtype Shows the type of identification used in the Chassis ID field. Chassis ID Identifies the chassis of the local device.
Switching Commands 2.18.1.1 AT8901/2/3 Format dos-control sipdip Mode Global Config no dos-control sipdip This command disables Source IP Address = Destination IP Address (SIP=DIP) Denial of Service prevention. 2.18.2 Format no dos-control sipdip Mode Global Config dos-control firstfrag This command enables Minimum TCP Header Size Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack.
AT8901/2/3 2.18.4 Switching Commands dos-control tcpflag This command enables TCP Flag Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attacks.
Switching Commands Mode 2.18.6.1 AT8901/2/3 Global Config no dos-control icmp This command disables Maximum ICMP Packet Size Denial of Service protections. 2.18.7 Format no dos-control icmp Mode Global Config show dos-control This command displays Denial of Service configuration information. Format show dos-control Mod Privileged EXEC SIPDIP Mode May be enabled or disabled. The factory default is disabled. First Fragment Mode May be enabled or disabled. The factory default is disabled.
AT8901/2/3 Switching Commands Default all Format show forwardingdb agetime [fdbid | all] Mode Privileged EXEC Forwarding DB ID Fdbid (Forwarding database ID) indicates the forwarding database whose aging timeout is to be shown. The all option is used to display the aging timeouts associated with all forwarding databases. This field displays the forwarding database ID in an IVL system. Agetime 2.19.
Switching Commands AT8901/2/3 Most MFDB Entries Ever Used Displays the largest number of entries that have been present in the Multicast Forwarding Database table. This value is also known as the MFDB high-water mark. Current Entries Displays the current number of entries in the MFDB.
AT8901/2/3 Chapter 31 Routing Commands Page 3 - 1 AT8901/2/3 CLI Reference Manual
Routing Commands 3. AT8901/2/3 Routing Commands This chapter describes the routing commands available in the CLI. The Routing Commands chapter contains the following sections: • • • • • • • • 3.1 “Address Resolution Protocol (ARP) Commands” on page 3 - 2 3.2 “IP Routing Commands” on page 3 - 6 3.3 “Router Discovery Protocol Commands” on page 3 - 14 3.4 “Virtual LAN Routing Commands” on page 3 - 17 3.5 “Virtual Router Redundancy Protocol Commands” on page 3 - 17 3.
AT8901/2/3 3.1.2 Routing Commands ip proxy-arp This command enables proxy ARP on a router interface. Without proxy ARP, a device only responds to an ARP request if the target IP address is an address configured on the interface where the ARP request arrived. With proxy ARP, the device may also respond if the target IP address is reachable. The device only responds if all next hops in its route to the destination are through interfaces other than the interface that received the ARP request. 3.1.2.
Routing Commands 3.1.5 AT8901/2/3 arp purge This command causes the specified IP address to be removed from the ARP cache. Only entries of type dynamic or gateway are affected by this command. 3.1.6 Format arp purge Mode Privileged EXEC arp resptime This command configures the ARP request response timeout. The value for is a valid positive integer, which represents the IP ARP entry response timeout time in seconds. The range for is between 1-10 seconds. 3.1.6.
AT8901/2/3 Mode 3.1.8.1 Routing Commands Global Config no arp timeout This command configures the default ARP entry ageout time. 3.1.9 Format no arp timeout Mode Global Config clear arp-cache This command causes all ARP entries of type dynamic to be removed from the ARP cache. If the gateway keyword is specified, the dynamic entries of type gateway are purged as well. 3.1.
Routing Commands 3.1.11 AT8901/2/3 Type Is the type that was configured into the unit. The possible values are Local, Gateway, Dynamic and Static. Age This field displays the current age of the ARP entry since last refresh (in hh:mm:ss format show arp brief This command displays the brief Address Resolution Protocol (ARP) table information. Format show arp brief Mode Privileged EXEC Age Time (seconds) Is the time it takes for an ARP entry to age out. This value was configured into the unit.
AT8901/2/3 3.2.1 Routing Commands routing This command enables IPv4 and IPv6 routing for an interface. You can view the current value for this function with the show ip brief command. The value is labeled as “Routing Mode.” 3.2.1.1 Default disabled Format routing Mode Interface Config no routing This command disables routing for an interface. You can view the current value for this function with the show ip brief command. The value is labeled as “Routing Mode.” 3.2.
Routing Commands Mode 3.2.4 AT8901/2/3 Interface Config ip route This command configures a static route. The parameter is a valid IP address, and is a valid subnet mask. The parameter is a valid IP address of the next hop router. The optional parameter is an integer (value from 1 to 255) that allows you to specify the preference value (sometimes called “administrative distance”) of an individual static route.
AT8901/2/3 3.2.6 Routing Commands Format no ip route default [{ | }] Mode Global Config ip route distance This command sets the default distance (preference) for static routes. Lower route distance values are preferred when determining the best route. The ip route and ip route default commands allow you to optionally set the distance (preference) of an individual static route. The default distance is used when no distance is specified in these commands.
Routing Commands 3.2.8.1 AT8901/2/3 no ip netdirbcast This command disables the forwarding of network-directed broadcasts. When disabled, network directed broadcasts are dropped. 3.2.9 Format no ip netdirbcast Mode Interface Config ip mtu This command sets the IP Maximum Transmission Unit (MTU) on a routing interface. The IP MTU is the size of the largest IP packet that can be transmitted on the interface without fragmentation. FASTPATH software currently does not fragment IP packets.
AT8901/2/3 Routing Commands NOTE: Routed frames are always ethernet encapsulated when a frame is routed to a VLAN. 3.2.11 show ip brief This command displays all the summary information of the IP. Format show ip brief Modes Privileged EXEC User EXEC Default Time to Live The computed TTL (Time to Live) of forwarding a packet from the local router to the final destination. Routing Mode Shows whether the routing mode is enabled or disabled.
Routing Commands AT8901/2/3 Encapsulation Type Is the encapsulation type for the specified interface. The types are: Ethernet or SNAP. IP MTU 3.2.13 Displays the maximum transmission unit (MTU) size of a frame, in bytes. show ip interface brief This command displays summary information about IP configuration settings for all ports in the router. Format show ip interface brief Modes Privileged EXEC User EXEC Interface Valid slot and port number separated by forward slashes.
AT8901/2/3 Routing Commands IP-Address/Mask The IP-Address and mask of the destination network corresponding to this route. Preference The administrative distance associated with this route. Routes with low values are preferred over routes with higher values. Metric The cost associated with this route. via Next-Hop The outgoing router IP address to use when forwarding traffic to the next router (if any) in the path toward the destination Interface 3.2.
Routing Commands AT8901/2/3 RIP This field displays the RIP route preference value. BGP4 This field displays the BGP-4 route preference value. NOTE: The configuration of NSSA preferences is not supported in this release. 3.2.17 show ip stats This command displays IP statistical information. Refer to RFC 1213 for more information about the fields that are displayed. 3.
AT8901/2/3 3.3.3 Routing Commands Format no ip irdp address Mode Interface Config ip irdp holdtime This command configures the value, in seconds, of the holdtime field of the router advertisement sent from this interface. The holdtime range is the value of to 9000 seconds. 3.3.3.
Routing Commands 3.3.6 AT8901/2/3 Format no ip irdp minadvertinterval Mode Interface Config ip irdp preference This command configures the preferability of the address as a default router address, relative to other router addresses on the same subnet. 3.3.6.
AT8901/2/3 3.4 Routing Commands Virtual LAN Routing Commands This section describes the commands you use to view and configure VLAN routing and to view VLAN routing status information. 3.4.1 vlan routing This command creates routing on a VLAN. The value has a range from 1 to 4094. 3.4.1.1 Format vlan routing Mode VLAN Config no vlan routing This command deletes routing on a VLAN. The value has a range from 1 to 4094. 3.4.
Routing Commands AT8901/2/3 interface. The parameter is the virtual router ID which has an integer value range from 1 to 255. 3.5.1.1 Default none Format ip vrrp Mode Global Config Interface Config no ip vrrp In Global Config mode, this command disables the default administrative mode of VRRP in the router. In Interface Config mode, this command disables the VRRP protocol on an interface. This command also removes a virtual router IP address as a secondary IP address on an interface.
AT8901/2/3 3.5.4 Routing Commands ip vrrp authentication This command sets the authorization details value for the virtual router configured on a specified interface. The parameter {none | simple} specifies the authorization type for virtual router configured on the specified interface. The parameter [key] is optional, it is only required when authorization type is simple text password. The parameter is the virtual router ID which has an integer value ranges from 1 to 255. 3.5.4.
Routing Commands 3.5.6.1 AT8901/2/3 no ip vrrp priority This command sets the default priority value for the virtual router configured on a specified interface. 3.5.7 Format no ip vrrp priority Mode Interface Config ip vrrp timers advertise This command sets the frequency, in seconds, that an interface on the specified virtual router sends a virtual router advertisement. 3.5.7.
AT8901/2/3 Routing Commands Zero Priority Packets Sent Represents the total number of VRRP packets sent by the virtual router with a priority of '0'. Invalid Type Packets Received Represents the total number of VRRP packets received by the virtual router with invalid 'type' field. Address List Errors Represents the total number of VRRP packets received for which address list does not match the locally configured list for the virtual router.
Routing Commands AT8901/2/3 Advertisement interval Represents the advertisement interval for the specific virtual router. Pre-Empt Mode Is the preemption mode configured on the specified virtual router. Administrative Mode Represents the status (Enable or Disable) of the specific router. State 3.5.11 Represents the state (Master/backup) of the virtual router. show ip vrrp interface brief This command displays information about each virtual router configured on the FASTPATH switch.
AT8901/2/3 3.6.2.1 Routing Commands Default disabled Format bootpdhcprelay enable Mode Global Config no bootpdhcprelay enable This command disables the forwarding of relay requests for BootP/DHCP Relay on the system. 3.6.3 Format no bootpdhcprelay enable Mode Global Config bootpdhcprelay maxhopcount This command configures the maximum allowable relay agent hops for BootP/DHCP Relay on the system. The parameter has a range of 1 to 16. 3.6.3.
Routing Commands 3.6.5 AT8901/2/3 bootpdhcprelay serverip This command configures the server IP Address for BootP/DHCP Relay on the system. The parameter is an IP address in a 4-digit dotted decimal format. 3.6.5.1 Default 0.0.0.0 Format bootpdhcprelay serverip Mode Global Config no bootpdhcprelay serverip This command configures the default server IP Address for BootP/DHCP Relay on the system. 3.6.
AT8901/2/3 3.7.2.1 Routing Commands Default enabled Format enable Mode Router OSPF Config no enable (OSPF) This command sets the administrative mode of OSPF in the router to inactive. 3.7.3 Format no enable Mode Router OSPF Config ip ospf This command enables OSPF on a router interface. 3.7.3.1 Default disabled Format ip ospf Mode Interface Config no ip ospf This command disables OSPF on a router interface. 3.7.
Routing Commands 3.7.6 AT8901/2/3 area nssa (OSPF) This command configures the specified areaid to function as an NSSA. 3.7.6.1 Format area nssa Mode Router OSPF Config no area nssa This command disables nssa from the specified area id. 3.7.7 Format no area nssa Mode Router OSPF Config area nssa default-info-originate (OSPF) This command configures the metric value and type for the default route advertised into the NSSA.
AT8901/2/3 3.7.11 Routing Commands area nssa translator-stab-intv (OSPF) This command configures the translator of the NSSA. The is the period of time that an elected translator continues to perform its duties after it determines that its translator status has been deposed by another router. 3.7.
Routing Commands 3.7.14.1 AT8901/2/3 Format area stub no-summary Mode Router OSPF Config no area stub no-summary This command configures the default Summary LSA mode for the stub area identified by . 3.7.15 Format no area stub no-summary Mode Router OSPF Config area virtual-link (OSPF) This command creates the OSPF virtual interface for the specified and . The parameter is the Router ID of the neighbor. 3.7.15.
AT8901/2/3 Mode 3.7.17 Routing Commands Router OSPF Config area virtual-link dead-interval (OSPF) This command configures the dead interval for the OSPF virtual interface on the virtual interface identified by and . The parameter is the Router ID of the neighbor. The range for seconds is 1 to 65535. 3.7.17.
Routing Commands 3.7.19.1 AT8901/2/3 no area virtual-link retransmit-interval This command configures the default retransmit interval for the OSPF virtual interface on the virtual interface identified by and . The parameter is the Router ID of the neighbor. 3.7.
AT8901/2/3 3.7.22.1 Routing Commands no default-metric (OSPF) This command is used to set a default for the metric of distributed routes. 3.7.23 Format no default-metric Mode Router OSPF Config distance ospf (OSPF) This command sets the route preference value of OSPF in the router. Lower route preference values are preferred when determining the best route. The type of OSPF can be intra, inter, type-1, or type-2.
Routing Commands AT8901/2/3 leave the Overflow State. This allows the router to again originate non-default ASexternal-LSAs. When set to 0, the router will not leave Overflow State until restarted. The range for seconds is 0 to 2147483647 seconds. 3.7.25.1 Default 0 Format exit-overflow-interval Mode Router OSPF Config no exit-overflow-interval This command configures the default exit overflow interval for OSPF. 3.7.
AT8901/2/3 Routing Commands The authentication key must be 8 bytes or less if the authentication type is simple. If the type is encrypt, the key may be up to 256 bytes. If the type is encrypt a in the range of 0 and 255 must be specified. Unauthenticated interfaces do not need an authentication key or authentication key ID. 3.7.28.
Routing Commands 3.7.31 AT8901/2/3 ip ospf hello-interval This command sets the OSPF hello interval for the specified interface. The value for seconds is a valid positive integer, which represents the length of time in seconds. The value for the length of time must be the same for all routers attached to a network. Valid values range from 1 to 65535. 3.7.31.
AT8901/2/3 Mode 3.7.34 Routing Commands Interface Config ip ospf transmit-delay This command sets the OSPF Transit Delay for the specified interface. The transmit delay is specified in seconds. In addition, it sets the estimated number of seconds it takes to transmit a link state update packet over this interface. Valid values for range from 1 to 3600 (1 hour). 3.7.34.
Routing Commands 3.7.37.1 AT8901/2/3 Default metric—unspecified type—2 tag—0 Format redistribute {rip | bgp | static | connected} [metric <016777214>] [metric-type {1 | 2}] [tag <0-4294967295>] [subnets] Mode Router OSPF Config no redistribute This command configures OSPF protocol to prohibit redistribution of routes from the specified source protocol/routers. 3.7.
AT8901/2/3 3.7.40.1 Routing Commands no trapflags This command disables OSPF traps. 3.7.41 Format no trapflags Mode Router OSPF Config show ip ospf This command displays information relevant to the OSPF router. Format show ip ospf Mode Privileged EXEC NOTE: Some of the information below displays only if you enable OSPF and configure certain features. Router ID A 32-bit integer in dotted decimal format identifying the router, about which information is displayed. This is a configured value.
Routing Commands AT8901/2/3 Metric Shows the metric for the advertised default routes. If the metric is not configured, this field is blank. Metric Type Shows whether the routes are External Type 1 or External Type 2. Maximum Paths Shows the maximum number of paths that OSPF can report for a given destination. Redistributing This field is a heading and appears only if you configure the system to take routes learned from a non-OSPF source and advertise them to its peers.
AT8901/2/3 Routing Commands Redistribute into NSSA Shows whether to redistribute information into the NSSA. Default Information Originate Shows whether to advertise a default route into the NSSA Default Metric Shows the metric value for the default route advertised into the NSSA. Default Metric Type Shows the metric type for the default route advertised into the NSSA. Translator Role Shows the NSSA translator role of the ABR, which is always or candidate.
Routing Commands AT8901/2/3 Use network to display the network LSAs. Use nssa-external to display NSSA external LSAs. Use router to display router LSAs. Use summary to show the LSA database summary information. Use to specify the link state ID (LSID). The value of can be an IP address or an integer in the range of 0-4294967295. Use adv-router to show the LSAs that are restricted by the advertising router. Use selforiginate to display the LSAs in that are self originated.
AT8901/2/3 3.7.46 Routing Commands Subtotal Number of entries for the identified area. Total Number of entries for all areas. show ip ospf interface This command displays the information for the IFO object or virtual interface tables. Format show ip ospf interface { | loopback } Modes Privileged EXEC User EXEC IP Address Represents the IP address for the specified interface. Subnet Mask A mask of the network and host portion of the IP address for the OSPF interface.
Routing Commands 3.7.47 AT8901/2/3 show ip ospf interface brief This command displays brief information for the IFO object or virtual interface tables. Format show ip ospf interface brief Modes Privileged EXEC User EXEC Interface Valid slot and port number separated by forward slashes. OSPF Admin Mode States whether OSPF is enabled or disabled on a router interface. OSPF Area ID Represents the OSPF Area Id for the specified interface.
AT8901/2/3 Routing Commands Neighbor Events The number of times this neighbor relationship has changed state, or an error has occurred. External LSA Count The number of external (LS type 5) link-state advertisements in the link-state database. 3.7.49 show ip ospf neighbor This command displays information about OSPF neighbors. If you do not specify a neighbor IP address, the output displays summary information in a table.
Routing Commands AT8901/2/3 Full - the neighboring routers are fully adjacent and they will now appear in router-LSAs and network-LSAs. Dead Time Shows the amount of time, in seconds, to wait before the router assumes the neighbor is unreachable. If you specify an IP address for the neighbor router, the following fields display: Interface Valid slot and port number separated by forward slashes. Neighbor IP Address Shows the IP address of the neighbor router.
AT8901/2/3 3.7.51 Routing Commands show ip ospf statistics This command displays information about recent Shortest Path First (SPF) calculations. The SPF is the OSPF routing table calculation. The output lists the number of times the SPF has run for each OSPF area. A table follows this information. For each of the 15 most recent SPF runs, the table lists how long ago the SPF ran, how long the SPF took, and the reasons why the SPF was scheduled.
Routing Commands AT8901/2/3 Hello Interval The configured hello interval for the OSPF virtual interface. Dead Interval The configured dead interval for the OSPF virtual interface. Iftransit Delay Interval The configured transit delay for the OSPF virtual interface. Retransmit Interval The configured retransmit interval for the OSPF virtual interface. Authentication Type The configured authentication type of the OSPF virtual interface.
AT8901/2/3 Mode 3.8.2.1 Routing Commands Router RIP Config no enable (RIP) This command sets the administrative mode of RIP in the router to inactive. 3.8.3 Format no enable Mode Router RIP Config ip rip This command enables RIP on a router interface. 3.8.3.1 Default disabled Format ip rip Mode Interface Config no ip rip This command disables RIP on a router interface. 3.8.4 Format. no ip rip Mode Interface Config auto-summary This command enables the RIP auto-summarization mode.
Routing Commands 3.8.6 AT8901/2/3 default-metric (RIP) This command is used to set a default for the metric of distributed routes. 3.8.6.1 Format default-metric <0-15> Mode Router RIP Config no default-metric (RIP) This command is used to reset the default metric of distributed routes to its default value. 3.8.7 Format no default-metric Mode Router RIP Config distance rip This command sets the route preference value of RIP in the router.
AT8901/2/3 3.8.9 Routing Commands ip rip authentication This command sets the RIP Version 2 Authentication Type and Key for the specified interface. The value of is either none, simple, or encrypt. The value for authentication key [key] must be 16 bytes or less. The [key] is composed of standard displayable, non-control keystrokes from a Standard 101/102-key keyboard. If the value of is encrypt, a keyid in the range of 0 and 255 must be specified.
Routing Commands 3.8.11.1 AT8901/2/3 Format ip rip send version {rip1 | rip1c | rip2 | none} Mode Interface Config no ip rip send version This command configures the interface to allow RIP control packets of the default version to be sent. 3.8.12 Format no ip rip send version Mode Interface Config hostroutesaccept This command enables the RIP hostroutesaccept mode. 3.8.12.
AT8901/2/3 Routing Commands added to any match types presently being redistributed. Internal routes are redistributed by default. Default metric—not-configured match—internal Format for OSPF as source protocol redistribute ospf [metric <0-15>] [match [internal] [external 1] [external 2] [nssa-external 1] [nssa-external-2]] Format for other source protocol redistribute {bgp | static | connected} [metric <0-15>] Mode 3.8.14.
Routing Commands 3.8.16 AT8901/2/3 show ip rip interface brief This command displays general information for each RIP interface. For this command to display successful results routing must be enabled per interface (i.e. ip rip). Format show ip rip interface brief Modes Privileged EXEC User EXEC Interface Valid slot and port number separated by forward slashes. IP Address The IP source address used by the specified RIP interface.
AT8901/2/3 Routing Commands Bad Packets Received The number of RIP response packets received by the RIP process which were subsequently discarded for any reason. Bad Routes Received The number of routes contained in valid RIP packets that were ignored for any reason. Updates Sent The number of triggered RIP updates actually sent on this interface.
Routing Commands AT8901/2/3 CLI Reference Manual AT8901/2/3 Page 3 - 54
AT8901/2/3 Chapter 41 Quality of Service Commands Page 4 - 1 AT8901/2/3 CLI Reference Manual
Quality of Service (QoS) Commands 4. AT8901/2/3 Quality of Service (QoS) Commands This chapter describes the Quality of Service (QoS) commands available in the CLI. The QoS Commands chapter contains the following sections: • • • • • • • • 4.1 “Class of Service (CoS) Commands” on page 4 - 2 4.2 “Differentiated Services (DiffServ) Commands” on page 4 - 7 4.3 “DiffServ Class Commands” on page 4 - 8 4.4 “DiffServ Policy Commands” on page 4 - 14 4.5 “DiffServ Service Commands” on page 4 - 18 4.
AT8901/2/3 4.1.2 Quality of Service (QoS) Commands classofservice ip-precedence-mapping This command maps an IP precedence value to an internal traffic class. The values can range from 0-7. The values can range from 0-6, although the actual number of available traffic classes depends on the platform. 4.1.2.
Quality of Service (QoS) Commands 4.1.4.1 AT8901/2/3 Default dot1p Format classofservice trust {dot1p | ip-dscp | ip-precedence | untrusted} Mode Global Config Interface Config no classofservice trust This command sets the interface mode to the default value. 4.1.5 Format no classofservice trust Modes Global Config Interface Config cos-queue min-bandwidth This command specifies the minimum transmission bandwidth guarantee for each interface queue.
AT8901/2/3 4.1.7 Quality of Service (QoS) Commands traffic-shape This command specifies the maximum transmission bandwidth limit for the interface as a whole. Also known as rate shaping, traffic shaping has the effect of smoothing temporary traffic bursts over time so that the transmitted traffic rate is bounded. 4.1.7.1 Format traffic-shape Modes Global Config Interface Config no traffic-shape This command restores the interface shaping rate to the default value. 4.1.
Quality of Service (QoS) Commands 4.1.10 AT8901/2/3 show classofservice ip-dscp-mapping This command displays the current IP DSCP mapping to internal traffic classes for the global configuration settings. Format show classofservice ip-dscp-mapping Mode Privileged EXEC The following information is repeated for each user priority. 4.1.11 IP DSCP The IP DSCP value. Traffic Class The traffic class internal queue identifier to which the IP DSCP value is mapped.
AT8901/2/3 Quality of Service (QoS) Commands If you specify the interface, the command also displays the following information. Interface This displays the unit/slot/port of the interface. If displaying the global configuration, this output line is replaced with a Global Config indication. Interface Shaping Rate The maximum transmission bandwidth limit for the interface as a whole. It is independent of any per-queue maximum bandwidth value(s) in effect for the interface. This is a configured value. 4.
Quality of Service (QoS) Commands AT8901/2/3 updates the 802.1p user priority field contained in the VLAN tag of the layer 2 packet header. NOTE: Traffic to be processed by the DiffServ feature requires an IP header. 4.2.1 diffserv This command sets the DiffServ operational mode to active. While disabled, the DiffServ configuration is retained and can be changed, but it is not activated. When enabled, Diffserv services are activated. 4.2.1.
AT8901/2/3 4.3.1.1 Quality of Service (QoS) Commands Format class-map match-all Mode Global Config no class-map This command eliminates an existing DiffServ class. The is the name of an existing DiffServ class ( The class name 'default' is reserved and is not allowed here). This command may be issued at any time; if the class is currently referenced by one or more policies or by any other class, the delete action fails. 4.3.
Quality of Service (QoS) Commands Format match class-map Mode Class-Map Config AT8901/2/3 NOTE: • • • • • • 4.3.5.1 The parameters and can not be the same. Only one other class may be referenced by a class. Any attempts to delete the class while the class is still referenced by any fails. The combined match criteria of and must be an allowed combination based on the class type.
AT8901/2/3 4.3.8 Quality of Service (QoS) Commands match destination-address mac This command adds to the specified class definition a match condition based on the destination MAC address of a packet. The parameter is any layer 2 MAC address formatted as six, two-digit hexadecimal numbers separated by colons (e.g., 00:11:22:dd:ee:ff).
Quality of Service (QoS) Commands 4.3.12 Default none Format match ip dscp Mode Class-Map Config AT8901/2/3 match ip precedence This command adds to the specified class definition a match condition based on the value of the IP Precedence field in a packet, which is defined as the high-order three bits of the Service Type octet in the IP header (the low-order five bits are not checked). The precedence value is an integer from 0 to 7.
AT8901/2/3 Quality of Service (QoS) Commands To specify the match condition using a numeric value notation, the protocol number is a standard value assigned by IANA and is interpreted as an integer from 0 to 255. NOTE: This command does not validate the protocol number value against the current list defined by IANA. 4.3.
Quality of Service (QoS) Commands 4.3.18 AT8901/2/3 match vlan This command adds to the specified class definition a match condition based on the value of the layer 2 VLAN Identifier field (the only tag in a single tagged packet or the first or outer tag of a double VLAN tagged packet). The VLAN ID is an integer from 1 to 4095. NOTE: This command is not available on the Broadcom 5630x platform. 4.3.
AT8901/2/3 4.4.1 Quality of Service (QoS) Commands assign-queue This command modifies the queue id to which the associated traffic stream is assigned. The queueid is an integer from 0 to n-1, where n is the number of egress queues supported by the device. Format assign-queue Mode Policy-Class-Map Config Incompatibilities Drop 4.4.2 drop This command specifies that all packets for the associated traffic stream are to be dropped at ingress.
Quality of Service (QoS) Commands Mode 4.4.6 AT8901/2/3 Policy-Class-Map Config class This command creates an instance of a class definition within the specified policy for the purpose of defining treatment of the traffic class through subsequent policy attribute statements. The is the name of an existing DiffServ class. NOTE: This command causes the specified policy to create a reference to the class definition.
AT8901/2/3 4.4.9 Quality of Service (QoS) Commands mark ip-precedence This command marks all packets for the associated traffic stream with the specified IP Precedence value. The IP Precedence value is an integer from 0 to 7. Format mark ip-precedence <0-7> Mode Policy-Class-Map Config Policy Type In Incompatibilities Drop, Mark CoS, Mark IP DSCP, Police 4.4.10 police-simple This command is used to establish the traffic policing style for the specified class.
Quality of Service (QoS) Commands 4.4.11.1 AT8901/2/3 no policy-map This command eliminates an existing DiffServ policy. The parameter is the name of an existing DiffServ policy. This command may be issued at any time. If the policy is currently referenced by one or more interface service attachments, this delete attempt fails. 4.4.12 Format no policy-map Mode Global Config policy-map rename This command changes the name of a DiffServ policy.
AT8901/2/3 Quality of Service (QoS) Commands NOTE: Each interface can have one policy attached. 4.5.1.1 no service-policy This command detaches a policy from an interface in the inbound direction. The parameter is the name of an existing DiffServ policy. NOTE: This command causes a service to remove its reference to the policy. This command effectively disables DiffServ on an interface in the inbound direction. There is no separate interface administrative 'mode' command for DiffServ. 4.
Quality of Service (QoS) Commands AT8901/2/3 Class Name The name of this class. (Note that the order in which classes are displayed is not necessarily the same order in which they were created.) Class Type A class type of ‘all’ means every match criterion defined for the class is evaluated simultaneously and must all be true to indicate a class match. Ref Class Name The name of an existing DiffServ class whose match conditions are being referenced by the specified class definition. 4.6.
AT8901/2/3 Quality of Service (QoS) Commands Policy Name The name of this policy. Type The policy type (Only inbound policy definitions are supported for this platform.) The following information is repeated for each class associated with this policy (only those policy attributes actually configured are displayed): Assign Queue Directs traffic stream to the specified QoS queue.
Quality of Service (QoS) Commands AT8901/2/3 Non-Conform DSCP Value This field displays the DSCP mark value if the non-conform action is set-dscp-transmit. Non-Conform IP Precedence Value This field displays the IP Precedence mark value if the non-conform action is set-prec-transmit. Policing Style This field denotes the style of policing, if any, used (simple). Redirect Forces a classified traffic stream to a specified egress port (physical port or LAG).
AT8901/2/3 Quality of Service (QoS) Commands DiffServ Mode The current setting of the DiffServ administrative mode. An attached policy is only active on an interface while DiffServ is in an enabled mode. The following information is repeated for interface and direction (only those interfaces configured with an attached policy are shown): 4.6.6 Interface Valid slot and port number separated by forward slashes. Direction The traffic direction of this interface service.
Quality of Service (QoS) Commands 4.7 AT8901/2/3 MAC Access Control List (ACL) Commands This section describes the commands you use to configure MAC ACL settings. MAC ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources. The following rules apply+-to MAC ACLs: • • • • 4.7.1 The maximum number of ACLs you create is 100, regardless of type. The system supports only Ethernet II frame types.
AT8901/2/3 4.7.3 Quality of Service (QoS) Commands {deny | permit} This command creates a new rule for the current MAC access list. Each rule is appended to the list of configured rules for the list. NOTE: The 'no' form of this command is not supported, since the rules within a MAC ACL cannot be deleted individually. Rather, the entire MAC ACL must be deleted and re-specified. NOTE: An implicit 'deny all' MAC rule always terminates the access list.
Quality of Service (QoS) Commands AT8901/2/3 For the Broadcom 5650x platform, the mirror parameter allows the traffic matching this rule to be copied to the specified , while the redirect parameter allows the traffic matching this rule to be forwarded to the specified . The assign-queue and redirect parameters are only valid for a permit rule. NOTE: The mirror and redirect parameters are not available on the Broadcom 5630x platform.
AT8901/2/3 Quality of Service (QoS) Commands Format show mac access-lists [name] Mode Privileged EXEC Rule Number The ordered rule number identifier defined within the MAC ACL. Action Displays the action associated with each rule. The possible values are Permit or Deny. Source MAC Address Displays the source MAC address for this rule. Destination MAC Address Displays the destination MAC address for this rule. Ethertype Displays the Ethertype keyword or custom value for this rule.
Quality of Service (QoS) Commands AT8901/2/3 Format access-list <1-99> {deny | permit} {every | } [log] [assign-queue ] [{mirror | redirect} ] Mode Global Config IP Extended ACL: Format access-list <100-199> {deny | permit} {every | {{icmp | igmp | ip | tcp | udp | } [{eq { | <0-65535>} [{eq {| <0-65535>}] [precedence | tos | dscp ] [log] [assign-queue ]
AT8901/2/3 Quality of Service (QoS) Commands Table 2. ACL Command Parameters Parameter 4.8.1.1 Description [assign-queue ] Specifies the assign-queue, which is the queue identifier to which packets matching this rule are assigned. [{mirror | redirect} ] For Broadcom 5650x platforms, specifies the mirror or redirect interface which is the unit/slot/port to which packets matching this rule are copied or forwarded, respectively.
Quality of Service (QoS) Commands Mode 4.8.3.1 AT8901/2/3 Global Config no acl-trapflags This command disables the ACL trap mode. 4.8.4 Format no acl-trapflags Mode Global Config show ip access-lists This command displays an IP ACL is the number used to identify the IP ACL. Format show ip access-lists Mode Privileged EXEC NOTE: Only the access list fields that you configure are displayed.
AT8901/2/3 4.8.5 Quality of Service (QoS) Commands show access-lists This command displays IP ACLs and MAC access control lists information for a designated interface and direction. Format show access-lists interface in Mode Privileged EXEC ACL Type Type of access list (IP or MAC). ACL ID Access List name for a MAC access list or the numeric identifier for an IP access list.
Quality of Service (QoS) Commands AT8901/2/3 CLI Reference Manual Page 4 - 32 AT8901/2/3
AT8901/2/3 Chapter 51 Utility Commands Page 5 - 1 AT8901/2/3 CLI Reference Manual
Utility Commands 5. AT8901/2/3 Utility Commands This chapter describes the utility commands available in the CLI. The Utility Commands chapter includes the following sections: • • • • • • • • • • 5.1 “Commands for accessing base/extension fabric” on page 5 - 2 5.2 “Commands for download and startup Configuration” on page 5 - 2 5.3 “ATCA commands” on page 5 - 4 5.4 “System Information and Statistics Commands” on page 5 - 6 5.5 “Logging Commands” on page 5 - 20 5.
AT8901/2/3 5.2.1 Utility Commands download application This command copies an application tgz from into the flash. The command checks that the is unique and between 1 and 9 5.2.2 Format download application Mode Privileged EXEC download ipmifw This command copies an IPMI firmware image from URL and flashes the IPMC with the new image. If the flash process is interrupted or fails, the IPMC will automatically recover and use the previously installed image 5.2.
Utility Commands 5.2.7 AT8901/2/3 Format download bootloader Mode Privileged EXECEXEC show startupconfig This command shows the slots for kernel/initrd/application/config or all possible configured combinations of the above 5.2.8 Format show startupconfig {application | kernel | initrd | startup | config | all} Mode Privileged EXEC startupslot config This command configures the startup slot with the supplied values from the other slots.
AT8901/2/3 5.3.2 Utility Commands set board ipmi-controller debug This command enables temporary IPMI controller serial debug output on the management serial console. . Format set board ipmi-controller debug {on | off} Mode Privileged EXEC NOTE: Use this command with care as it may render the console useless until a full board reset is executed 5.3.3 set board fcap This command enables or disables some firmware capabilities. If the handle capability is enabled, the hardware handle is ignored. 5.3.
Utility Commands AT8901/2/3 Table 7.1. Interface mapping I/F extension Description extension fabric interface PCIE/ASI Channel 1-15 Port 0 NOTE: Only one extension interface can exist on a AT8901 5.3.5.
AT8901/2/3 Interface 5.4.2 Utility Commands For a service port the output is Management. For a network port, the output is the unit/slot/port of the physical interface. show eventlog This command displays the event log, which contains error messages from the system. The event log is not cleared on a system reset. Format show eventlog Mode Privileged EXEC File The file in which the event originated. Line The line number of the event Task Id The task ID of the event. Code The event code.
Utility Commands AT8901/2/3 Burned in MAC Address Universally assigned network address. Software Version The release.version.revision number of the code currently running on the switch. Operating System The operating system currently running on the switch. Network Processing Device The type of the processor microcode. Additional Packages This displays the additional packages incorporated into this system. 5.4.
AT8901/2/3 Utility Commands Transmit Packet Errors The number of outbound packets that could not be transmitted because of errors. Address Entries Currently In Use The total number of Forwarding Database Address Table entries now active on the switch, including learned and static entries. VLAN Entries Currently In Use The number of VLAN entries presently occupying the VLAN table.
Utility Commands AT8901/2/3 octets in length inclusive (excluding framing bits but including FCS octets). Packets Received > 1522 Octets - The total number of packets received that were longer than 1522 octets (excluding framing bits, but including FCS octets) and were otherwise well formed. Packets RX and TX 64 Octets - The total number of packets (including bad packets) received and transmitted that were 64 octets in length (excluding framing bits but including FCS octets).
AT8901/2/3 Utility Commands Total Packets Received Without Error - The total number of packets received that were without errors. Unicast Packets Received - The number of subnetwork-unicast packets delivered to a higher-layer protocol. Multicast Packets Received - The total number of good packets received that were directed to a multicast address. Note that this number does not include packets directed to the broadcast address.
Utility Commands AT8901/2/3 Unacceptable Frame Type - The number of frames discarded from this port due to being an unacceptable frame type. Multicast Tree Viable Discards - The number of frames discarded when a lookup in the multicast tree for a VLAN occurs while that tree is being modified. Reserved Address Discards - The number of frames discarded that are destined to an IEEE 802.1 reserved address and are not supported by the system.
AT8901/2/3 Utility Commands Total - The number of frames that have been transmitted by this port to its segment. Unicast Packets Transmitted - The total number of packets that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those that were discarded or not sent. Multicast Packets Transmitted - The total number of packets that higher-level protocols requested be transmitted to a Multicast address, including those that were discarded or not sent.
Utility Commands AT8901/2/3 GVRP Failed Registrations - The number of times attempted GVRP registrations could not be completed. GMRP PDUs Received - The count of GMRP PDU's received in the GARP layer. GMRP PDUs Transmitted - The count of GMRP PDU's transmitted from the GARP layer. GMRP Failed Registrations - The number of times attempted GMRP registrations could not be completed.
AT8901/2/3 Utility Commands being deliverable to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space. Octets Transmitted The total number of octets transmitted out of the interface, including framing characters. Packets Transmitted without Errors The total number of packets transmitted out of the interface.
Utility Commands AT8901/2/3 Format show mac-addr-table [ | all] Mode Privileged EXEC Mac Address A unicast MAC address for which the switch has forwarding and or filtering information. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as 8 bytes. Interface The port which this address was learned.
AT8901/2/3 5.4.9 Utility Commands show sysinfo This command displays switch information. Format show sysinfo Mode Privileged EXEC Switch Description Text used to identify this switch. System Name Name used to identify the switch.The factory default is blank. To configure the system name, see 6.6.1 “snmp-server” on page 6 - 16. System Location Text used to identify the location of the switch. The factory default is blank. To configure the system location, see 6.6.1 “snmp-server” on page 6 - 16.
Utility Commands Mode AT8901/2/3 Privileged EXEC NOTE: It might take a while to get an output of the “show boardinfo sensors brief” command 5.4.13 show boardinfo event-log This command displays the event log of the board management controller. It can either display a summary (“info”) or a list of all existing event-log records, a list with most recent records or a single record. The (of SEL) is displayed in the list of records.
AT8901/2/3 5.4.16 Utility Commands show boardinfo address This command displays the global address info of the board. 5.4.17 Format show boardinfo address Mode Privileged EXEC show boardinfo fru This command displays various FRU (field replaceable unit) related information. 5.4.18 Format show boardinfo fru {product-info | board-info | multirecord | custom-area | all} Mode Privileged EXEC show boardinfo ipmidev This command displays the IPMI device information.
Utility Commands Mode 5.4.23 AT8901/2/3 Privileged EXEC show boardinfo routing This commands shows which interface is configured with Layer 3 functionality. It shows the currently active setting and the setting which becomes effective after the next reboot. 5.5 Format show boardinfo routing Mode Privileged EXEC Logging Commands This section describes the commands you use to configure system logging, and to view logs and the logging settings. 5.5.
AT8901/2/3 Utility Commands keywords: emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), info (6), or debug (7). 5.5.3.1 Default disabled; critical when enabled Format logging console [severitylevel] Mode Global Config no logging console This command disables logging to the console. 5.5.4 Format no logging console Mode Global Config logging host This command enables logging to a host. You can configure up to eight hosts.
Utility Commands 5.5.7 AT8901/2/3 logging syslog This command enables syslog logging. The parameter is an integer with a range of 1-65535. 5.5.7.1 Default disabled Format logging syslog [port ] Mode Global Config no logging syslog This command disables syslog logging. 5.5.8 Format no logging syslog Mode Global Config show logging This command displays logging configuration information.
AT8901/2/3 5.5.10 Utility Commands show logging hosts This command displays all configured logging hosts. Format show logging hosts Mode Privileged EXEC Host Index (Used for deleting hosts) IP Address IP address of the logging host. Severity Level The minimum severity to log to the specified address. The possible values are emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), info (6), or debug (7). 5.5.
Utility Commands 5.6.1 AT8901/2/3 traceroute Use the traceroute command to discover the routes that packets actually take when traveling to their destination through the network on a hop-by-hop basis. The value should be a valid IP address. The [] value should be a valid decimal integer in the range of 0 (zero) to 65535. The optional port parameter is the UDP port used as the destination of packets sent as part of the traceroute.
AT8901/2/3 5.6.7 Utility Commands clear traplog This command clears the trap log. 5.6.8 Format clear traplog Mode Privileged EXEC clear vlan This command resets VLAN configuration parameters to the factory defaults. 5.6.9 Format clear vlan Mode Privileged EXEC clear board event-log This command deletes all event-log records 5.6.10 Format clear board event-log Mode Privileged EXEC enable passwd This command prompts you to change the Privileged EXEC password.
Utility Commands 5.6.13 AT8901/2/3 ping This command checks if another computer is on the network and listens for connections. To use this command, configure the switch for network (in-band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP. You can ping the switch from any IP workstation the switch is connected to through the default VLAN (VLAN 1), as long as there is a physical path between the switch and the workstation.
AT8901/2/3 Utility Commands Table 8. Copy Parameters Source Destination Description nvram:clibanner Copies the CLI banner to a server. nvram:errorlog Copies the error log file to a server. nvram:log Copies the log file to a server. nvram:script Copies a specified configuration script file to a server. nvram:startup-config Copies the startup configuration to a server. nvram:traplog Copies the trap log file to a server.
Utility Commands AT8901/2/3 Table 8. Copy Parameters Source 5.7 Destination Description image1 image2 Copy image1 to image2. image2 image1 Copy image2 to image1. Keying for Advanced Features This section describes the commands you use to enter the licence key to access advanced features. You cannot access the advanced features without a valid license key. 5.7.1 license advanced This command enables a particular feature. This command also enables the corresponding show commands for a feature.
AT8901/2/3 5.8.1 Utility Commands sntp broadcast client poll-interval This command sets the poll interval for SNTP broadcast clients in seconds as a power of two where can be a value from 6 to 16. 5.8.1.1 Default 6 Format sntp broadcast client poll-interval Mode Global Config no sntp broadcast client poll-interval This command resets the poll interval for SNTP broadcast client back to the default value. 5.8.
Utility Commands 5.8.4.1 AT8901/2/3 Default 6 Format sntp unicast client poll-interval Mode Global Config no sntp unicast client poll-interval This command resets the poll interval for SNTP unicast clients to its default value. 5.8.5 Format no sntp unicast client poll-interval Mode Global Config sntp unicast client poll-timeout This command will set the poll timeout for SNTP unicast clients in seconds to a value from 1-30. 5.8.5.
AT8901/2/3 5.8.7.1 Utility Commands no sntp multicast client poll-interval This command resets the poll interval for SNTP multicast clients to its default value. 5.8.8 Format no sntp multicast client poll-interval Mode Global Config sntp server This command configures an SNTP server (a maximum of three). The optional priority can be a value of 1-3, the version a value of 1-4, and the port id a value of 1-65535. 5.8.8.
Utility Commands 5.8.11 AT8901/2/3 Poll Timeout Poll timeout value in seconds for SNTP clients. Poll Retry Poll retry value for SNTP clients. show sntp server This command is used to display SNTP server settings and configured servers. Format show sntp server Mode Privileged EXEC Server IP Address IP Address of configured SNTP Server Server Type Address Type of Server. Server Stratum Claimed stratum of the server for the last received valid packet.
AT8901/2/3 5.9.1.1 Utility Commands no ip dhcp pool This command removes the DHCP address pool. The name should be previously configured pool name. 5.9.2 Format no ip dhcp pool Mode Global Config client-identifier This command specifies the unique identifier for a DHCP client. Unique-identifier is a valid notation in hexadecimal format. In some systems, such as Microsoft DHCP clients, the client identifier is required instead of hardware addresses.
Utility Commands 5.9.4.1 AT8901/2/3 Format default-router [....] Mode DHCP Pool Config no default-router This command removes the default router list. 5.9.5 Format no default-router Mode DHCP Pool Config dns-server This command specifies the IP servers available to a DHCP client. Address parameters are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid. 5.9.5.
AT8901/2/3 5.9.7.1 Utility Commands Format host
[{ | }] Mode DHCP Pool Config no host This command removes the IP address of the DHCP client. 5.9.8 Format no host Mode DHCP Pool Config lease This command configures the duration of the lease for an IP address that is assigned from a DHCP server to a DHCP client. The overall lease time should be between 186400 minutes. If you specify infinite, the lease is set for 60 days. You can also specify a lease duration.Utility Commands 5.9.10.1 AT8901/2/3 Format bootfile Mode DHCP Pool Config no bootfile This command deletes the boot image name. 5.9.11 Format no bootfile Mode DHCP Pool Config domain-name This command specifies the domain name for a DHCP client. The specifies the domain name string of the client. 5.9.11.1 Default none Format domain-name Mode DHCP Pool Config no domain-name This command removes the domain name. 5.9.
AT8901/2/3 • • • 5.9.13.1 Utility Commands p-node—Peer-to-peer m-node—Mixed h-node—Hybrid (recommended) Default none Format netbios-node-type Mode DHCP Pool Config no netbios-node-type This command removes the NetBIOS node Type. 5.9.14 Format no netbios-node-type Mode DHCP Pool Config next-server This command configures the next server in the boot process of a DHCP client.
Utility Commands 5.9.16 AT8901/2/3 Format no option Mode DHCP Pool Config ip dhcp excluded-address This command specifies the IP addresses that a DHCP server should not assign to DHCP clients. Low-address and high-address are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid. 5.9.16.
AT8901/2/3 5.9.18.1 Utility Commands no service dhcp This command disables the DHCP server. 5.9.19 Format no service dhcp Mode Global Config ip dhcp bootp automatic This command enables the allocation of the addresses to the bootp client. The addresses are from the automatic address pool. 5.9.19.1 Default disabled Format ip dhcp bootp automatic Mode Global Config no ip dhcp bootp automatic This command disables the allocation of the addresses to the bootp client.
Utility Commands 5.9.22 AT8901/2/3 clear ip dhcp server statistics This command clears DHCP server statistics counters. 5.9.23 Format clear ip dhcp server statistics Mode Privileged EXEC clear ip dhcp conflict The command is used to clear an address conflict from the DHCP Server database. The server detects conflicts using a ping. DHCP server clears all conflicts If the asterisk (*) character is used as the address parameter. 5.9.
AT8901/2/3 5.9.26 Utility Commands show ip dhcp pool configuration This command displays pool configuration. If all is specified, configuration for all the pools is displayed. Format show ip dhcp pool configuration { | all} Modes Privileged EXEC User EXEC Pool Name The name of the configured pool. Pool Type The pool type. Lease Time The lease expiration time of the IP Address assigned to the client.
Utility Commands AT8901/2/3 DHCP RELEASE The number of DHCPRELEASE messages the server has received. DHCP INFORM The number of DHCPINFORM messages the server has received. Message Sent: DHCP OFFER The number of DHCPOFFER messages the server sent. DHCP ACK The number of DHCPACK messages the server sent. DHCP NACK The number of DHCPNACK messages the server sent. 5.9.28 show ip dhcp conflict This command displays address conflicts logged by the DHCP Server.
AT8901/2/3 5.10.2 Utility Commands ip dhcp filtering trust This command configures an interface as trusted. 5.10.2.1 Default untrusted Format Mode ip dhcp filtering trust Interface Config no ip dhcp filtering trust This command returns an interface to the default value for DHCP filtering. 5.10.3 Format no ip dhcp filtering trust Mode Interface Config show ip dhcp filtering This command displays the DHCP filtering configuration.
Utility Commands AT8901/2/3 CLI Reference Manual AT8901/2/3 Page 5 - 44
AT8901/2/3 Chapter 61 Management Commands Page 6 - 1 AT8901/2/3 CLI Reference Manual
Management Commands 6. AT8901/2/3 Management Commands This chapter describes the management commands available in the CLI. The Management Commands chapter contains the following sections: • • • • • • • • • • • • • 6.1 “Network Interface Commands” on page 6 - 2 6.2 “Console Port Access Commands” on page 6 - 5 6.3 “Telnet Commands” on page 6 - 7 6.4 “Secure Shell (SSH) Command” on page 6 - 11 6.5 “User Account Commands” on page 6 - 13 6.6 “SNMP Commands” on page 6 - 16 6.
AT8901/2/3 6.1.3 Management Commands serviceport protocol This command specifies the network management port configuration protocol. If you modify this value, the change is effective immediately. If you use the bootp parameter, the switch periodically sends requests to a BootP server until a response is received. If you use the dhcp parameter, the switch periodically sends requests to a DHCP server until a response is received.
Management Commands 6.1.7.1 AT8901/2/3 Default burnedin Format network mac-type {local | burnedin} Mode Privileged EXEC no network mac-type This command resets the value of MAC address to its default. 6.1.8 Format no network mac-type Mode Privileged EXE network javamode This command specifies whether or not the switch should allow access to the Java applet in the header frame of the Web interface. When access is enabled, the Java applet can be viewed from the Web interface.
AT8901/2/3 Management Commands Locally Administered MAC Address If desired, a locally administered MAC address can be configured for in-band connectivity. To take effect, 'MAC Address Type' must be set to 'Locally Administered'. Enter the address as twelve hexadecimal digits (6 bytes) with a colon between each byte. Bit 1 of byte 0 must be set to a 1 and bit 0 to a 0, i.e. byte 0 should have the following mask 'xxxx xx10'.
Management Commands AT8901/2/3 the Global Config mode, you can enter other command modes, including Line Config mode. 6.2.2 Format configuration Mode Privileged EXEC lineconfig This command gives you access to the Line Config mode, which allows you to configure various Telnet settings and the console port. 6.2.3 Format lineconfig Mode Global Config serial baudrate This command specifies the communication rate of the terminal interface.
AT8901/2/3 Modes Management Commands Privileged EXEC User EXEC Serial Port Login Timeout (minutes) Specifies the time, in minutes, of inactivity on a Serial port connection, after which the Switch will close the connection. Any numeric value between 0 and 160 is allowed, the factory default is 5. A value of 0 disables the timeout. Baud Rate (bps) The default baud rate at which the serial port will try to connect. The available values are 1200, 2400, 4800, 9600, 19200, 38400,57600, and 115200 baud.
Management Commands AT8901/2/3 outbound Telnet operational mode as ‘linemode’, where by default, the operational mode is ‘character mode’. The noecho option disables local echo. 6.3.3 Format telnet [debug] [line] [noecho] Modes Privileged EXEC User EXEC transport input telnet This command regulates new Telnet sessions. If enabled, new Telnet sessions can be established until there are no more sessions available.
AT8901/2/3 Mode 6.3.5.1 Management Commands Line Config no session-limit This command sets the maximum number of simultaneous outbound Telnet sessions to the default value. 6.3.6 Format no session-limit Mode Line Config session-timeout This command sets the Telnet session timeout value.The timeout value unit of time is minutes. A value of 0 indicates that a session remains active indefinitely. 6.3.6.
Management Commands AT8901/2/3 NOTE: When you change the timeout value, the new value is applied to all active and inactive sessions immediately. Any sessions that have been idle longer than the new timeout value are disconnected immediately. 6.3.8.1 Default 5 Format telnetcon timeout <1-160> Mode Privileged EXEC no telnetcon timeout This command sets the Telnet connection session timeout value to the default.
AT8901/2/3 Management Commands Remote Connection Login Timeout (minutes) This object indicates the number of minutes a remote connection session is allowed to remain inactive before being logged off. May be specified as a number from 1 to 160. The factory default is 5. Maximum Number of Remote Connection Sessions This object indicates the number of simultaneous remote connection sessions allowed. The factory default is 5.
Management Commands 6.4.3.1 AT8901/2/3 no ip ssh server enable This command disables the IP secure shell server. 6.4.4 Format no ip ssh server enable Mode Privileged EXEC sshcon maxsessions This command specifies the maximum number of SSH connection sessions that can be established. A value of 0 indicates that no ssh connection can be established. The range is 0 to 5. 6.4.4.
AT8901/2/3 Mode Management Commands Privileged EXEC Administrative Mode This field indicates whether the administrative mode of SSH is enabled or disabled. Protocol Level The protocol level may have the values of version 1, version 2 or both versions 1 and version 2. Connections This field specifies the current SSH connections. 6.5 User Account Commands This section describes the commands you use to add, manage, and delete system users. FASTPATH has two default users: admin and guest.
Management Commands 6.5.2.1 AT8901/2/3 Format users passwd Mode Global Config no users passwd This command sets the password of an existing user to blank. When you change a password, a prompt asks for the old password. If there is no password, press enter. 6.5.3 Format no users passwd Mode Global Config users snmpv3 accessmode This command specifies the snmpv3 access privileges for the specified login user. The valid accessmode values are readonly or readwrite.
AT8901/2/3 6.5.4.1 Management Commands no users snmpv3 authentication This command sets the authentication protocol to be used for the specified user to none. The is the user name for which the specified authentication protocol is used. 6.5.5 Format no users snmpv3 authentication Mode Global Config users snmpv3 encryption This command specifies the encryption protocol used for the specified user. The valid encryption protocols are des or none.
Management Commands 6.5.7 AT8901/2/3 show users This command displays the configured user names and their settings. This command is only available for users with Read/Write privileges. The SNMPv3 fields will only be displayed if SNMP is available on the system. Format show users Mode Privileged EXEC User Name The name the user enters to login using the serial port, Telnet or Web.
AT8901/2/3 Management Commands snmp-server bind network no snmp-server bind serviceport no snmp-server bind network Mode 6.6.3 Global Config snmp-server community This command adds (and names) a new SNMP community. A community is a name associated with the switch and with a set of SNMP managers that manage it with a specified privileged level. The length of can be up to 16 case-sensitive characters. NOTE: Community names in the SNMP Community Table must be unique.
Management Commands 6.6.5 AT8901/2/3 snmp-server community ipmask This command sets a client IP mask for an SNMP community. The address is the associated community SNMP packet sending address and is used along with the client IP address value to denote a range of IP addresses from which SNMP clients may use that community to access the device. A value of 255.255.255.255 will allow access from only one station, and will use that machine's IP address for the client IP Address. A value of 0.0.0.
AT8901/2/3 Mode 6.6.8 Management Commands Global Config snmp-server community rw This command restricts access to switch information. The access mode is read/write (also called private). 6.6.9 Format snmp-server community rw Mode Global Config snmp-server enable traps violation This command enables the sending of new violation traps designating when a packet with a disallowed MAC address is received on a locked port. NOTE: For other port security commands, see 2.
Management Commands 6.6.11.1 AT8901/2/3 no snmp-server enable traps bcaststorm This command disables the broadcast storm trap. When enabled, broadcast storm traps are sent only if the broadcast storm recovery mode setting associated with the port is enabled. 6.6.12 Format no snmp-server enable traps bcaststorm Mode Global Config snmp-server enable traps linkmode This command enables Link Up/Down traps for the entire switch.
AT8901/2/3 6.6.14.1 Management Commands no snmp-server enable traps stpmode This command disables the sending of new root traps and topology change notification traps. 6.6.15 Format no snmp-server enable traps stpmode Mode Global Config snmptrap This command adds an SNMP trap receiver. The maximum length of is 16 case-sensitive alphanumeric characters. The is the version of SNMP. The version parameter options are snmpv1 or snmpv2.
Management Commands 6.6.18 AT8901/2/3 Format snmptrap ipaddr Mode Global Config snmptrap mode This command activates or deactivates an SNMP trap. Enabled trap receivers are active (able to receive traps). Disabled trap receivers are inactive (not able to receive traps). 6.6.18.1 Format snmptrap mode Mode Global Config no snmptrap mode This command deactivates an SNMP trap. Disabled trap receivers are inactive (not able to receive traps). 6.6.
AT8901/2/3 Management Commands NOTE: This command is valid only when the Link Up/Down Flag is enabled. See 6.6.12 “snmp-server enable traps linkmode” on page 6 - 20 6.6.21 Format no snmp trap link-status all Mode Global Config show snmpbind This command displays the port the SNMP server is binded to. 6.6.22 Format show snmpbind Mode Priviliged EXEC show snmpcommunity This command displays SNMP community information. Six communities are supported. You can add, change, or delete communities.
Management Commands AT8901/2/3 Format show snmptrap Mode Privileged EXEC SNMP Trap Name The community string of the SNMP trap packet sent to the trap manager. The string is case sensitive and can be up to 16 alphanumeric characters. 6.6.24 IP Address The IP address to receive SNMP traps from this device. Status Indicates the receiver's status (enabled or disabled). show trapflags This command displays trap conditions.
AT8901/2/3 6.7.1 Management Commands logging cli-command This command enables the CLI command logging feature, which enables the FASTPATH software to log all CLI commands issued on the system. 6.7.1.1 Default enabled Format logging cli-command Mode Global Config no logging cli-command This command disables the CLI command Logging feature. 6.
Management Commands AT8901/2/3 If you use the token, the command configures the IP address to use for the RADIUS accounting server. You can only configure one accounting server. If an accounting server is currently configured, use the “no” form of the command to remove it from the configuration. The IP address you specify must match that of a previously configured accounting server.
AT8901/2/3 6.8.5 Management Commands Format no radius server msgauth Mode Global Config radius server primary This command is used to configure the primary RADIUS authentication server for this RADIUS client. The primary server handles RADIUS requests. The remaining configured servers are only used if the primary server cannot be reached. You can configure up to three servers on each client. Only one of these servers can be configured as the primary.
Management Commands 6.8.8 AT8901/2/3 show radius This command is used to display the various RADIUS configuration items for the switch as well as the configured RADIUS servers. If the optional token 'servers' is not included, the following RADIUS configuration items are displayed. Format show radius [servers] Mode Privileged EXEC Primary Server IP Address Shows the configured server currently in use for authentication.
AT8901/2/3 Management Commands Accounting Server IP Address IP Address of the configured RADIUS accounting server Round Trip Time The time interval, in hundredths of a second, between the most recent Accounting-Response and the Accounting-Request that matched it from the RADIUS accounting server. Requests The number of RADIUS Accounting-Request packets sent to this accounting server. This number does not include retransmissions.
Management Commands AT8901/2/3 Access Retransmission The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server. Access Accepts The number of RADIUS Access-Accept packets, including both valid and invalid packets, which were received from this server. Access Rejects The number of RADIUS Access-Reject packets, including both valid and invalid packets, which were received from this server.
AT8901/2/3 6.9.1.1 Management Commands no tacacs-server host Use the no tacacs-server host command to delete the specified hostname or IP address. The parameter is the IP address of the TACACS+ server. 6.9.2 Format no tacacs-server host Mode Global Config tacacs-server key Use the tacacs-server key command to set the authentication and encryption key for all TACACS+ communications between the switch and the TACACS+ daemon.
Management Commands AT8901/2/3 parameter specifies the key name. For an empty string use “ ”. (Range: 0 - 128 characters). 6.9.5 Format key Mode TACACS Config port Use the port command in TACACS Configuration mode to specify a server port number. The server range is 0 - 65535. 6.9.
AT8901/2/3 6.10 Management Commands Configuration Scripting Commands Configuration Scripting allows you to generate text-formatted script files representing the current configuration of a system. You can upload these configuration script files to a PC or UNIX system and edit them. Then, you can download the edited files to the system and apply the new configuration. You can apply configuration scripts to one or more switches with no or minor modifications. Use the show running-config command (see 5.4.
Management Commands AT8901/2/3 These connections may create bridging loops when enabled. During normal operation, it is often useful to completely separate the redundant hub boards and thus create up to four independent switching/bridging domains. The boards come with a script installed that disables the interlinks. This script can be applied to disable the respective interfaces, i.e. • • 6.10.
AT8901/2/3 6.11 Management Commands Pre-login Banner and System Prompt Commands This section describes the commands you use to configure the pre-login banner and the system prompt. The pre-login banner is the text that displays before you login at the User: prompt. 6.11.1 copy (pre-login banner) The copy command includes the option to upload or download the CLI Banner to or from the switch. You can specify local URLs by using TFTP, Xmodem, Ymodem, or Zmodem.
Management Commands 6.12.2 AT8901/2/3 set watchdog This command configures the watchdog. It sets the timeout for different watchdog (during BIST, during loading of kernel and INITRD, during startup of switching application and during normal execution of switching application) and the heartbeat (sending interval and number of missed heartbeats before failure occurance). All values (except missed heartbeats) are in seconds, a value “0” means that the related watchdog is disabled.
AT8901/2/3 Getting Help Appendix A Getting Help Page A - 1 AT8901/2/3 CLI Reference Manual
Getting Help A. AT8901/2/3 Getting Help If at any time you encounter difficulties with your application or with any of our products, or if you simply need guidance on system setups and capabilities, contact our Technical Support at: North America EMEA Tel.: (450) 437-5682 Tel.: +49 (0) 8341 803 xxx Fax: (450) 437-8053 Fax: +49 (0) 8341 803 xxx If you have any questions about Kontron, our products, or services, visit our Web site at: www.kontron.
AT8901/2/3 Getting Help RETURNING DEFECTIVE MERCHANDISE Before returning any merchandise please do one of the following if your product malfunctions: • Call 1. Call our Technical Support department in North America at (450) 437-5682 and in EMEA at +49 (0) 8341 803 xxx. Make sure you have the following on hand: our Invoice #, your Purchase Order #, and the Serial Number of the defective unit. 2.
Getting Help AT8901/2/3 WHEN RETURNING A UNIT • In the box, you have to include the name and telephone number of a person whom we can contact for further explanations if necessary when returning goods. Where applicable, always include all duty papers and invoice(s) associated with the item(s) in question. • Ensure that the unit is properly packed. Pack it in a rigid cardboard box. • Clearly write or mark the RMA number on the outside of the package you are returning. • Ship prepaid.
Return to Manufacturer Authorization Request Contact Name: __________________________________________________________ Company Name: __________________________________________________________ Street Address: __________________________________________________________ City: ________________________ Province/State: Country: ________________________ Postal/Zip Code: _______________________ Phone Number: ________________________ Extension: _______________________ Fax Number: ______________________
Getting Help AT8901/2/3 CLI Reference Manual AT8901/2/3 Page A - 6
AT8901/2/3 Appendix B List of Commands AT8901/2/3 CLI Reference Manual
List of Commands B.
AT8901/2/3 List of Commands class-map class-map rename classofservice dot1p-mapping classofservice ip-dscp-mapping classofservice ip-precedence-mapping classofservice trust clear arp-cache clear board event-log clear config clear counters clear dot1x statistics clear igmpsnooping clear ip dhcp binding clear ip dhcp conflict clear ip dhcp server statistics clear lldp remote-data clear lldp statistics clear pass clear port-channel clear radius statistics clear traplog clear vlan CLI Error Messages CLI Line-
List of Commands AT8901/2/3 distribute-list out (OSPF) distribute-list out (RIP) dns-server domain-name dos-control firstfrag dos-control icmp dos-control l4port dos-control sipdip dos-control tcpflag dos-control tcpfrag dot1x defaultlogin dot1x initialize dot1x login dot1x max-req dot1x port-control dot1x port-control all dot1x re-authenticate dot1x re-authentication dot1x system-auth-control dot1x timeout dot1x user download {kernel | initrd} download application download asi srom download bootloader do
AT8901/2/3 List of Commands ip dhcp excluded-address ip dhcp filtering ip dhcp filtering trust ip dhcp ping packets ip dhcp pool ip forwarding ip irdp ip irdp address ip irdp holdtime ip irdp maxadvertinterval ip irdp minadvertinterval ip irdp preference ip mtu ip netdirbcast ip ospf ip ospf areaid ip ospf authentication ip ospf cost ip ospf dead-interval ip ospf hello-interval ip ospf mtu-ignore ip ospf priority ip ospf retransmit-interval ip ospf transmit-delay ip proxy-arp ip rip ip rip authentication
List of Commands AT8901/2/3 license advanced lineconfig lldp notification lldp notification-interval lldp receive lldp timers lldp transmit lldp transmit-mgmt lldp transmit-tlv logging buffered logging buffered wrap logging cli-command logging console logging host logging host remove logging port logging syslog logout mac access-group mac access-list extended mac access-list extended rename macfilter macfilter addsrc macfilter addsrc all mark cos mark ip-dscp mark ip-precedence match any match class-map m
AT8901/2/3 List of Commands mode dot1q-tunnel mode dvlan-tunnel monitor session mtu netbios-name-server netbios-node-type network (DHCP Pool Config) network javamode network mac-address network mac-type network mgmt_vlan network parms network protocol next-server no 1583compatibility no access-list no acl-trapflags no area nssa no area range no area stub no area stub no-summary no area virtual-link no area virtual-link authentication no area virtual-link dead-interval no area virtual-link hello-interval n
List of Commands AT8901/2/3 no class-map no classofservice dot1p-mapping no classofservice ip-dscp-mapping no classofservice ip-precedence-mapping no classofservice trust no client-identifier no client-name no cos-queue min-bandwidth no cos-queue strict no default-information originate (OSPF) no default-information originate (RIP) no default-metric (OSPF) no default-metric (RIP) no default-router no diffserv no distance ospf no distance rip no distribute-list out no distribute-list out no dns-server no do
AT8901/2/3 List of Commands no ip dhcp excluded-address no ip dhcp filtering no ip dhcp filtering trust no ip dhcp ping packets no ip dhcp pool no ip forwarding no ip irdp no ip irdp address no ip irdp holdtime no ip irdp maxadvertinterval no ip irdp minadvertinterval no ip irdp preference no ip mtu no ip netdirbcast no ip ospf no ip ospf authentication no ip ospf cost no ip ospf dead-interval no ip ospf hello-interval no ip ospf mtu-ignore no ip ospf priority no ip ospf retransmit-interval no ip ospf tra
List of Commands AT8901/2/3 no lldp timers no lldp transmit no lldp transmit-mgmt no lldp transmit-tlv no logging buffered no logging buffered wrap no logging cli-command no logging console no logging port no logging syslog no mac access-group no mac access-list extended no macfilter no macfilter addsrc no macfilter addsrc all no match class-map no maximum-paths no mode dot1q-tunnel no mode dvlan-tunnel no monitor no monitor session no mtu no netbios-name-server no netbios-node-type no network no network
AT8901/2/3 List of Commands no radius server msgauth no radius server retransmit no radius server timeout no redistribute no redistribute no routing no serial baudrate no serial timeout no service dhcp no service-policy no session-limit no session-timeout no set bootstopkey no set garp timer join no set garp timer leave no set garp timer leaveall no set gmrp adminmode no set gmrp interfacemode no set gvrp adminmode no set gvrp interfacemode no set igmp no set igmp fast-leave no set igmp groupmembership-in
List of Commands AT8901/2/3 no sntp client port no sntp multicast client poll-interval no sntp server no sntp unicast client poll-interval no sntp unicast client poll-retry no sntp unicast client poll-timeout no spanning-tree no spanning-tree configuration name no spanning-tree configuration revision no spanning-tree edgeport no spanning-tree forceversion no spanning-tree forward-time no spanning-tree hello-time no spanning-tree max-age no spanning-tree max-hops no spanning-tree mst no spanning-tree mst i
AT8901/2/3 List of Commands no transport output telnet no trapflags no users name no users passwd no users snmpv3 accessmode no users snmpv3 authentication no users snmpv3 encryption no vlan no vlan acceptframe no vlan association mac no vlan association subnet no vlan ingressfilter no vlan name no vlan port acceptframe all no vlan port ingressfilter all no vlan port pvid all no vlan port tagging all no vlan protocol group add protocol no vlan pvid no vlan routing no vlan tagging option ping police-simple
List of Commands AT8901/2/3 radius server key radius server msgauth radius server primary radius server retransmit radius server timeout redirect redistribute (OSPF) redistribute (RIP) reload router ospf router rip router-id (OSPF) routing script apply script apply nointerl.
AT8901/2/3 List of Commands set igmp mrouter interface set prompt set watchdog show access-lists show arp show arp brief show arp switch show arp switch show asi register show atca ekeying show authentication show authentication users show boardinfo address show boardinfo amc connection show boardinfo amc fru show boardinfo event-log show boardinfo fcap show boardinfo fru show boardinfo ipmidev show boardinfo led show boardinfo post-status show boardinfo routing show boardinfo sensors show boardinfo updat
List of Commands AT8901/2/3 show igmpsnooping mrouter interface show igmpsnooping mrouter vlan show interface show interface ethernet show interfaces cos-queue show interfaces switchport show ip access-lists show ip brief show ip dhcp binding show ip dhcp conflict show ip dhcp filtering show ip dhcp global configuration show ip dhcp pool configuration show ip dhcp server statistics show ip interface show ip interface brief show ip irdp show ip ospf show ip ospf area show ip ospf border-routers show ip osp
AT8901/2/3 List of Commands show lldp interface show lldp local-device show lldp local-device detail show lldp remote-device show lldp remote-device detail show lldp statistics show logging show logging backtrace show logging buffered show logging hosts show logging traplogs show loginsession show mac access-lists show mac-address-table gmrp show mac-address-table igmpsnooping show mac-address-table multicast show mac-address-table static show mac-address-table staticfiltering show mac-address-table stats
List of Commands AT8901/2/3 show spanning-tree brief show spanning-tree interface show spanning-tree mst port detailed show spanning-tree mst port summary show spanning-tree mst summary show spanning-tree summary show spanning-tree vlan show startupconfig show storm-control show switchport protected show sysinfo show tacacs show tech-support show telnet show telnetcon show trapflags show users show users authentication show version show vlan show vlan association mac show vlan association subnet show vlan
AT8901/2/3 List of Commands snmptrap snmpversion sntp broadcast client poll-interval sntp client mode sntp client port sntp multicast client poll-interval sntp server sntp unicast client poll-interval sntp unicast client poll-retry sntp unicast client poll-timeout spanning-tree spanning-tree bpdumigrationcheck spanning-tree configuration name spanning-tree configuration revision spanning-tree edgeport spanning-tree forceversion spanning-tree forward-time spanning-tree hello-time spanning-tree max-age span
List of Commands AT8901/2/3 switchport protected (Interface Config) tacacs-server host tacacs-server key tacacs-server timeout telnet telnetcon maxsessions telnetcon timeout timeout timers spf traceroute traffic-shape transport input telnet transport output telnet trapflags (OSPF) users defaultlogin users login users name users passwd users snmpv3 accessmode users snmpv3 authentication users snmpv3 encryption vlan vlan acceptframe vlan association mac vlan association subnet vlan database vlan ingressfilt
