VDSL Switch-VS4512 VDSL Switch-VS4512DC Management Guide
Management Guide VDSL Switch-V4512 VDSL Switch supporting 12 VDSL lines, with 2 Slots for Optional 1000BASE-SX, 1000BASE-LX, 1000BASE-T or 1000BASE-X GBIC uplink modules VDSL Switch-VS4512DC VDSL Switch supporting 12 VDSL lines, with 2 Slots for Optional 1000BASE-SX, 1000BASE-LX, 1000BASE-T or 1000BASE-X GBIC uplink modules
Copyright © 2003 by Accton Technology Corporation. All rights reserved. No part of this document may be copied or reproduced in any form or by any means without the prior written consent of Accton Technology Corporation. Accton makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability, quality, or fitness for any particular purpose. The information in this document is subject to change without notice.
Contents Chapter 1: Introduction Key Features Description of Software Features System Defaults 1-1 1-1 1-2 1-5 Chapter 2: Initial Configuration Connecting to the Switch Configuration Options Required Connections Remote Connections Basic Configuration Console Connection Setting Passwords Setting an IP Address Manual Configuration Dynamic Configuration Enabling SNMP Management Access Community Strings Trap Receivers Saving Configuration Settings Managing System Files 2-1 2-1 2-1 2-2 2-3 2-3 2-3 2-4 2-4 2-4
Contents Saving or Restoring Configuration Settings Downloading Configuration Settings from a Server Setting the Startup Configuration File Copying the Running Configuration to a File Resetting the System Setting the System Clock Configuring SNTP Setting the Time Zone Simple Network Management Protocol Setting Community Access Strings Specifying Trap Managers and Trap Types Filtering Addresses for SNMP Client Access User Authentication.
Contents Address Table Settings Setting Static Addresses Displaying the Address Table Changing the Aging Time Spanning Tree Algorithm Configuration Displaying Global Settings Configuring Global Settings Displaying Interface Settings Configuring Interface Settings VLAN Configuration Overview Assigning Ports to VLANs Forwarding Tagged/Untagged Frames Displaying Basic VLAN Information Displaying Current VLANs Creating VLANs Adding Static Members to VLANs (VLAN Index) Adding Static Members to VLANs (Port Index)
Contents Chapter 4: Command Line Interface Using the Command Line Interface Accessing the CLI Console Connection Telnet Connection Entering Commands Keywords and Arguments Minimum Abbreviation Command Completion Getting Help on Commands Showing Commands Partial Keyword Lookup Negating the Effect of Commands Using Command History Understanding Command Modes Exec Commands Configuration Commands Command Line Processing Command Groups Line Commands line login password exec-timeout password-thresh silent-time da
Contents User Access Commands username enable password IP Filter Commands management show management Web Server Commands ip http port ip http server ip http secure-server ip http secure-port ip telnet server Secure Shell Commands ip ssh server ip ssh timeout ip ssh authentication-retries disconnect ssh show ip ssh show ssh Event Logging Commands logging on logging history logging host logging facility logging trap clear logging show logging SMTP Alert Commands logging sendmail host logging sendmail level lo
Contents System Status Commands show startup-config show running-config show system show users show version Flash/File Commands copy delete dir whichboot boot system Authentication Commands Authentication Sequence authentication login RADIUS Client radius-server host radius-server port radius-server key radius-server retransmit radius-server timeout show radius-server TACACS+ Client tacacs-server host tacacs-server port tacacs-server key show tacacs-server Port Security Commands port security 802.
Contents SNMP Commands snmp-server community snmp-server contact snmp-server location snmp-server host snmp-server enable traps snmp ip filter show snmp DHCP Commands DHCP Client ip dhcp client-identifier ip dhcp restart client Interface Commands interface description speed-duplex negotiation capabilities flowcontrol shutdown switchport broadcast packet-rate clear counters show interfaces status show interfaces counters show interfaces switchport Mirror Port Commands port monitor show port monitor Rate Limi
Contents show controllers efm admin show controllers efm profile show controllers efm status show controllers efm remote ethernet mode show controllers efm-noise-margin show controllers efm channel-performance Address Table Commands mac-address-table static clear mac-address-table dynamic show mac-address-table mac-address-table aging-time show mac-address-table aging-time Spanning Tree Commands spanning-tree spanning-tree mode spanning-tree forward-time spanning-tree hello-time spanning-tree max-age spanni
Contents Bridge Extension Commands show bridge-ext Priority Commands Priority Commands (Layer 2) switchport priority default queue mode queue bandwidth queue cos-map show queue mode show queue bandwidth show queue cos-map Priority Commands (Layer 3 and 4) map ip precedence (Global Configuration) map ip precedence (Interface Configuration) map ip dscp (Global Configuration) map ip dscp (Interface Configuration) map ip port (Global Configuration) map ip port (Interface Configuration) show map ip precedence sh
Contents Appendix A: Software Specifications Software Features Management Features Standards Management Information Bases A-1 A-1 A-2 A-2 A-3 Appendix B: Troubleshooting C-1 Glossary Index x
Chapter 1: Introduction This switch provides a broad range of features for Layer 2 switching. It includes a management agent that allows you to configure the features listed in this manual. The default configuration can be used for most of the features provided by this switch. However, there are many options that you should configure to maximize the switch’s performance for your particular network environment.
Introduction Description of Software Features The switch provides a wide range of advanced performance enhancing features. Flow control eliminates the loss of packets due to bottlenecks caused by port saturation. Broadcast storm suppression prevents broadcast traffic storms from engulfing the network. Port-based VLANs provide traffic security and efficient use of network bandwidth. CoS priority queueing ensures the minimum delay for moving real-time multimedia data across the network.
Description of Software Features Port Trunking – Ports can be combined into an aggregate connection. Trunks can be manually set up or dynamically configured using IEEE 802.3ad Link Aggregation Control Protocol (LACP). The additional ports dramatically increase the throughput across any connection, and provide redundancy by taking over the load if a port in the trunk should fail. The switch supports one trunk with two Gigabit optional module ports.
Introduction Virtual LANs – The switch supports up to 255 VLANs. A Virtual LAN is a collection of network nodes that share the same collision domain regardless of their physical location or connection point in the network. The switch supports tagged VLANs based on the IEEE 802.1Q standard. Members of VLAN groups can be manually assigned to a specific set of VLANs. This allows the switch to restrict traffic to the VLAN groups to which a user has been assigned.
System Defaults System Defaults The switch’s system defaults are provided in the configuration file “Factory_Default_Config.cfg.” To reset the switch defaults, this file should be set as the startup configuration file (page 3-17). The following table lists some of the basic system defaults. Function Parameter Default IP Settings Management VLAN 1 DHCP Enabled BOOTP Disabled Console Port Connection Authentication User Specified Disabled IP Address 0.0.0.0 Subnet Mask 255.0.0.
Introduction Function Parameter Web Management HTTP Server SNMP Default Enabled HTTP Port Number 80 HTTP Secure Server Enabled HTTP Secure Port Number 443 Community Strings “public” (read only) “private” (read/write) Traps Authentication traps: enabled Link-up-down events: enabled IP Filtering Port Configuration Admin Status Auto-negotiation Disabled Enabled Enabled Flow Control Disabled Port Capability 100BASE-TX – 10 Mbps half duplex 10 Mbps full duplex 100 Mbps half duplex 100 Mbps fu
System Defaults Function Parameter Default Acceptable Frame Type All Ingress Filtering Disabled Switchport Mode (Egress Mode) Hybrid: tagged/untagged frames Traffic Prioritization Ingress Port Priority Weighted Round Robin IP Settings 0 Queue: 0:1 1:4 2:16 3:64 IP Precedence Priority Disabled IP DSCP Priority Disabled IP Address 0.0.0.0 Subnet Mask 255.0.0.0 Default Gateway 0.0.0.
Introduction 1-8
Chapter 2: Initial Configuration Connecting to the Switch Configuration Options The switch includes a built-in network management agent. The agent offers a variety of management options, including SNMP, RMON and a Web-based interface. A PC may also be connected directly to the switch for configuration and monitoring via a command line interface (CLI). Note: The IP address for this switch is assigned by DHCP by default. To change this address, see “Setting an IP Address” on page 2-4.
Initial Configuration • Globally set broadcast storm control • Display system information and statistics Required Connections The switch provides an RS-232 serial port that enables a connection to a PC or terminal for monitoring and configuring the switch. A null-modem console cable is provided with the switch. Attach a VT100-compatible terminal, or a PC running a terminal emulation program to the switch.
Basic Configuration Remote Connections Prior to accessing the switch’s onboard agent via a network connection, you must first configure it with a valid IP address, subnet mask, and default gateway using a console connection, DHCP or BOOTP protocol. The IP address for this switch is assigned by DHCP by default. To manually configure this address or enable dynamic address assignment via DHCP or BOOTP, see “Setting an IP Address” on page 2-4. Note: This switch supports four concurrent Telnet sessions.
Initial Configuration Setting Passwords Note: If this is your first time to log into the CLI program, you should define new passwords for both default user names using the “username” command, record them and put them in a safe place. Passwords can consist of up to 8 alphanumeric characters and are case sensitive. To prevent unauthorized access to the switch, set the passwords as follows: 1. Open the console interface with the default user name and password “admin” to access the Privileged Exec level. 2.
Basic Configuration Before you can assign an IP address to the switch, you must obtain the following information from your network administrator: • IP address for the switch • Default gateway for the network • Network mask for this network To assign an IP address to the switch, complete the following steps: 1. From the Privileged Exec level global configuration mode prompt, type “interface vlan 1” to access the interface-configuration mode. Press . 2.
Initial Configuration 5. Wait a few minutes, and then check the IP configuration settings by typing the “show ip interface” command. Press . 6. Then save your configuration changes by typing “copy running-config startup-config.” Enter the startup file name and press . Console(config)#interface vlan 1 Console(config-if)#ip address dhcp Console(config-if)#end Console#ip dhcp restart client Console#show ip interface IP address and netmask: 192.168.1.54 255.255.255.
Basic Configuration To configure a community string, complete the following steps: 1. From the Privileged Exec level global configuration mode prompt, type “snmp-server community string mode,” where “string” is the community access string and “mode” is rw (read/write) or ro (read only). Press . (Note that the default mode is read only.) 2. To remove an existing string, simply type “no snmp-server community string,” where “string” is the community access string to remove. Press .
Initial Configuration Saving Configuration Settings Configuration commands only modify the running configuration file and are not saved when the switch is rebooted. To save all your configuration changes in nonvolatile storage, you must copy the running configuration file to the start-up configuration file using the “copy” command. To save the current configuration settings, enter the following command: 1. From the Privileged Exec mode prompt, type “copy running-config startup-config” and press .
Managing System Files In the system flash memory, one file of each type must be set as the start-up file. During a system boot, the diagnostic and operation code files set as the start-up file are run, and then the start-up configuration file is loaded. Note that configuration files should be downloaded using a file name that reflects the contents or usage of the file settings.
Initial Configuration 2-10
Chapter 3: Configuring the Switch Using the Web Interface This switch provides an embedded HTTP Web agent. Using a Web browser you can configure the switch and view statistics to monitor network activity. The Web agent can be accessed by any computer on the network using a standard Web browser (Internet Explorer 5.0 or above, or Netscape Navigator 6.2 or above). Note: You can also use the Command Line Interface (CLI) to manage the switch over a serial connection to the console port or via Telnet.
Configuring the Switch Navigating the Web Browser Interface To access the web-browser interface you must first enter a user name and password. The administrator has Read/Write access to all configuration parameters and statistics. The default user name and password for the administrator is “admin.” Home Page When your web browser connects with the switch’s web agent, the home page is displayed as shown below.
Navigating the Web Browser Interface Notes: 1. To ensure proper screen refresh, be sure that Internet Explorer 5.x is configured as follows: Under the menu “Tools / Internet Options / General / Temporary Internet Files / Settings,” the setting for item “Check for newer versions of stored pages” should be “Every visit to the page.” 2. When using Internet Explorer 5.0, you may have to manually refresh the screen after making configuration changes by pressing the browser’s refresh button.
Configuring the Switch Menu Description SNTP Page 3-18 Configuration Configures SNTP client settings, including broadcast mode or a specified list of servers 3-18 Clock Time Zone Sets the local time zone for the system clock 3-19 SNMP 3-20 Configuration Configures community strings and related trap functions 3-21 IP Filtering Sets IP addresses of clients allowed management access 3-23 Passwords Assigns a new password for the current user 3-24 Authentication Settings Configures authenti
Navigating the Web Browser Interface Menu Description Rate Limit Page 3-50 Input Port Configuration Sets the input rate limit for each port Input Trunk Configuration Sets the input rate limit for each trunk 3-50 Output Port Configuration Sets the output rate limit for each port 3-50 Output Trunk Configuration Sets the output rate limit for each trunk Port Statistics 3-50 Lists Ethernet and RMON port statistics 3-51 Batch assigns profiles for speed and distance range to all the VDSL ports on
Configuring the Switch Menu Description VLAN Page 3-83 802.
Basic Configuration Menu Description Page IGMP Snooping 3-106 IGMP Configuration Enables multicast filtering; configures parameters for multicast query 3-107 Multicast Router Port Information Displays the ports that are attached to a neighboring multicast router for each VLAN ID 3-109 Static Multicast Router Port Configuration Assigns ports that are attached to a neighboring multicast router 3-110 IP Multicast Registration Table Displays all multicast groups active on this switch, including m
Configuring the Switch Web – Click System, System Information. Specify the system name, location, and contact information for the system administrator, then click Apply. (This page also includes a Telnet button that allows access to the Command Line Interface via Telnet.) CLI – Specify the hostname, location and contact information.
Basic Configuration Displaying Switch Hardware/Software Versions Use the Switch Information page to display hardware/firmware version numbers for the main board and management software, as well as the power status of the system. Field Attributes Main Board • Serial Number – The serial number of the switch. • Number of Ports – Number of built-in RJ-45 ports and expansion ports. • Hardware Version – Hardware version of the main board.
Configuring the Switch CLI – Use the following command to display version information. Console#show version Unit1 Serial number Service tag Hardware version Module A type Module B type Number of ports Main power status Redundant power status Agent(master) Unit id Loader version Boot rom version Operation code version Console# 4-56 : : : :not present :not present :12 : : :1 :2.0.0.2 :2.0.1.9 :1.0.3.
Basic Configuration Web – Click System, Bridge Extension. CLI – Enter the following command. Console#show bridge-ext Max support vlan numbers: 255 Max support vlan ID: 4093 Extended multicast filtering services: No Static entry individual port: Yes VLAN learning: IVL Configurable PVID tagging: Yes Local VLAN capable: Yes Traffic classes: Enabled GMRP: Disabled Console# 4-144 Setting the Switch’s IP Address An IP address may be used for management access to the switch over your network.
Configuring the Switch Command Attributes • Management VLAN – ID of the configured VLAN (1-4093, no leading zeroes). By default, all ports on the switch are members of VLAN 1. However, the management station can be attached to a port belonging to any VLAN, as long as that VLAN has been assigned an IP address. • IP Address Mode – Specifies whether IP functionality is enabled via manual configuration (Static), Dynamic Host Configuration Protocol (DHCP), or Boot Protocol (BOOTP).
Basic Configuration CLI – Specify the management interface, IP address and default gateway. Console#config Console(config)#interface vlan 1 Console(config-if)#ip address 192.168.1.254 255.255.255.0 Console(config-if)#exit Console(config)#ip default-gateway 192.168.1.253 Console(config)# 4-86 4-165 4-166 Using DHCP/BOOTP If your network provides DHCP/BOOTP services, you can configure the switch to be dynamically configured by these services. Web – Click System, IP Configuration.
Configuring the Switch Renewing DCHP – DHCP may lease addresses to clients indefinitely or for a specific period of time. If the address expires or the switch is moved to another network segment, you will lose management access to the switch. In this case, you can reboot the switch or submit a client request to restart DHCP service via the CLI. Web – If the address assigned by DHCP is no longer functioning, you will not be able to renew the IP settings via the web interface.
Basic Configuration Note: Up to two copies of the system software (i.e., the runtime firmware) can be stored in the file directory on the switch. The currently designated startup version of this file cannot be deleted. Downloading System Software from a Server When downloading runtime code, you can specify the destination file name to replace the current image, or first download the file using a different name from the current runtime code file, and then set the new file as the startup file.
Configuring the Switch CLI – Enter the IP address of the TFTP server, select “config” or “opcode” file type, then enter the source and destination file names, set the new file to start up the system, and then restart the switch. Console#copy tftp file TFTP server ip address: 10.1.0.19 Choose file type: 1. config: 2. opcode: <1-2>: 2 Source file name: M100000.bix Destination file name: V1.0 \Write to FLASH Programming. -Write to FLASH finish. Success. Console#config Console(config)#boot system opcode:V1.
Basic Configuration Setting the Startup Configuration File If you download to a new file name, select the new file from the drop-down list for Startup Configuration File, and press Apply Changes. To use the new settings, reboot the system via the System/Reset menu. CLI – Enter the IP address of the TFTP server, specify the source file on the server, set the startup file name on the switch, and then restart the switch. Console#copy tftp startup-config TFTP server ip address: 192.168.1.
Configuring the Switch Resetting the System Web – Click System, Reset. Click the Reset button to restart the switch. CLI – Use the reload command to restart the switch. Console#reload System will be restarted, continue ? 4-21 Note: When restarting the system, it will always run the Power-On Self-Test. Setting the System Clock Simple Network Time Protocol (SNTP) allows the switch to set its internal clock based on periodic updates from a time server (SNTP or NTP).
Basic Configuration • SNTP Poll Interval – Sets the interval between sending requests for a time update from a time server when set to SNTP Client mode. (Range: 16-16284 seconds; Default: 16 seconds) • SNTP Server – In unicast mode, sets the IP address for up to three time servers. The switch attempts to update the time from the first server, if this fails it attempts an update from the next server in the sequence. Web – Select SNTP, Configuration. Modify any of the required parameters, and click Apply.
Configuring the Switch Web – Select SNTP, Clock Time Zone. Set the offset for your time zone relative to the UTC, and click Apply. CLI - This example shows how to set the time zone for the system clock. Console(config)#clock timezone Dhaka hours 6 minute 0 after-UTC Console# 4-49 Simple Network Management Protocol Simple Network Management Protocol (SNMP) is a communication protocol designed specifically for managing devices on a network.
Simple Network Management Protocol Setting Community Access Strings You may configure up to five community strings authorized for management access. All community strings used for IP Trap Managers should be listed in this table. For security reasons, you should consider removing the default strings. Command Attributes • SNMP Community Capability – Indicates that the switch supports up to five community strings.
Configuring the Switch Specifying Trap Managers and Trap Types Traps indicating status changes are issued by the switch to specified trap managers. You must specify trap managers so that key events are reported by this switch to your management station (using network management platforms such as HP OpenView. You can specify up to five management stations that will receive authentication failure messages and other trap messages from the switch.
Simple Network Management Protocol Filtering Addresses for SNMP Client Access The switch allows you to create a list of up to 16 IP addresses or IP address groups that are allowed access to the switch via SNMP management software. Command Usage • To specify the clients allowed SNMP access, enter an IP address along with a subnet mask to identify a specific host or a range of valid addresses. For example: - IP address 192.168.1.1 and mask 255.255.255.255 – Specifies a valid IP address of 192.168.1.
Configuring the Switch Web – Click SNMP, IP Filtering. To add a client, enter the new address, the subnet mask for a node or an address range, and then click “Add IP Filtering Entry.” CLI – This example allows SNMP access for a specific client. Console(config)#snmp ip filter 10.1.2.3 255.255.255.255 Console(config)# 4-82 User Authentication. Use the Passwords or RADIUS/TACACS+ menu to restrict management access based on specified user names and passwords.
User Authentication. • Access Level* – Specifies the user level. (Options: Normal and Privileged) • Password – Specifies the user password. (Range: 0-8 characters plain text, case sensitive) * CLI only. Web – Click System, Passwords. Enter the old password, enter the new password, confirm it by entering it again, then click Apply. CLI – Assign a user name to access-level 15 (i.e., administrator), then specify the password.
Configuring the Switch Command Usage • By default, management access is always checked against the authentication database stored on the local switch. If a remote authentication server is used, you must specify the authentication sequence and the corresponding parameters for the remote authentication protocol. Local and remote logon authentication control management access via the console port, web browser, or Telnet.
User Authentication. Web – Click Security, Authentication Settings. To configure local or remote authentication preferences, specify the authentication sequence (i.e., one to three methods), fill in the parameters for RADIUS or TACACS+ authentication if selected, and click Apply. CLI – Specify all the required parameters to enable logon authentication. Console(config)#authentication login radius Console(config)#radius-server host 192.168.1.
Configuring the Switch Telnet Settings Telnet access to the switch can be enabled via the Web or CLI. Web – Click Security, Telnet Settings, then check the checkbox to enable access via Telnet (i.e., a virtual terminal). CLI – This example enables Telnet access to the switch.
User Authentication. Command Attributes • HTTPS Status – Allows you to enable/disable the HTTPS server feature on the switch. (Default: Enabled) • Change HTTPS Port Number – Specifies the UDP port number used for HTTPS/ SSL connection to the switch’s web interface. (Default: Port 443) Web – Click Security, HTTPS Settings. Enable HTTPS and specify the port number, then click Apply. CLI – This example enables the HTTP secure server and modifies the port number.
Configuring the Switch Configuring the Secure Shell The Berkley-standard includes remote access tools originally designed for Unix systems. Some of these tools have also been implemented for Microsoft Windows and other environments. These tools, including commands such as, rsh (remote shell), and rexec (remote execute), are not secure from hostile attacks. The Secure Shell (SSH) includes server/client applications intended as a secure replacement for the older Berkley remote access tools.
User Authentication. CLI – This example enables SSH, sets the authentication parameters, and displays the current configuration. It shows that the administrator has made a connection via SHH, and then disabled this connection.
Configuring the Switch Command Attributes • Port – Port number. • Action* – The action to be taken when a port security violation is detected: - None: No action should be taken. (This is the default.) Trap: Send an SNMP trap message. Shutdown: Disable the port. Trap and Shutdown: Send an SNMP trap message and disable the port. * These actions can only be taken through CLI commands. • Status – Enables or disables port security on the port.
User Authentication. Configuring 802.1x Port Authentication Network switches can provide open and easy access to network resources by simply attaching a client PC. Although this automatic configuration and access is a desirable feature, it also allows unauthorized personnel to easily intrude and possibly gain access to sensitive network data. The IEEE 802.
Configuring the Switch Displaying 802.1x Global Settings The dot1x protocol includes global parameters that control the client authentication process that runs between the client and the switch (i.e., authenticator), as well as the client identity lookup process that runs between the switch and authentication server. These parameters are described in this section. Command Attributes • 802.
User Authentication. CLI – This example shows the default protocol settings for 802.1x. For a description of the additional entries displayed in the CLI, See “show dot1x” on page 76. Console#show dot1x Global 802.1X Parameters reauth-enabled: yes reauth-period: 300 quiet-period: 350 tx-period: 300 supp-timeout: 30 server-timeout: 30 reauth-max: 2 max-req: 2 802.1X Port Port Name 1/1 1/2 . . .
Configuring the Switch Configuring 802.1x Global Settings The dot1x protocol includes global parameters that control the client authentication process that runs between the client and the switch (i.e., authenticator), as well as the client identity lookup process that runs between the switch and authentication server. The configuration options for parameters are described in this section. Command Attributes • 802.
User Authentication. CLI – This enables re-authentication and sets all of the global parameters for 802.1x.
Configuring the Switch Web – Click Security, 802.1x, Port Configuration. Select the authentication mode from the drop-down box and click Apply. CLI – This example sets the authentication mode to enable 802.1x on port 2, and allows up to ten clients to connect to this port. Console(config)#interface ethernet 1/2 Console(config-if)#dot1x port-control auto Console(config-if)#dot1x operation-mode multi-host max-count 10 Console(config-if)# 4-86 4-72 4-73 Displaying 802.
User Authentication. Parameter Description Tx EAPOL Total The number of EAPOL frames of any type that have been transmitted by this Authenticator. Tx EAP Req/Id The number of EAP Req/Id frames that have been transmitted by this Authenticator. Tx EAP Req/Oth The number of EAP Request frames (other than Rq/Id frames) that have been transmitted by this Authenticator. Web – Select Security, 802.1x, Statistics. Select the required port and then click Query. Click Refresh to update the statistics.
Configuring the Switch Port Configuration Displaying Connection Status You can use the Port Information or Trunk Information pages to display the current connection status, including link state, speed/duplex mode, flow control, and auto-negotiation. Field Attributes (Web) • Name – Interface label. • Type – Indicates the port type. (1000BASE-T, 1000BASE-SX, 1000BASE-LX, or 100BASE-TX) • Admin Status – Shows if the interface is enabled or disabled. • Oper Status – Indicates if the link is Up or Down.
Port Configuration Command Attributes (CLI) Basic information: • Port type – Indicates the port type. (1000BASE-T, 1000BASE-SX, 1000BASE-LX, or 100BASE-TX) • MAC address – The physical layer address for this port. (To access this item on the web, see “Setting the Switch’s IP Address” on page 3-11.) Configuration: • Name – Interface label. • Port admin – Shows if the interface is enabled or disabled (i.e., up or down). • Speed-duplex – Shows the current speed and duplex mode.
Configuring the Switch CLI – This example shows the connection status for Port 5.
Port Configuration • Autonegotiation (Port Capabilities) – Allows auto-negotiation to be enabled/ disabled. When auto-negotiation is enabled, you need to specify the capabilities to be advertised. When auto-negotiation is disabled, you can force the settings for speed, mode, and flow control.The following capabilities are supported.
Configuring the Switch CLI – Select the interface, and then enter the required settings. Console(config)#interface ethernet 1/12 Console(config-if)#description RD SW#12 Console(config-if)#shutdown . Console(config-if)#no shutdown Console(config-if)#no negotiation Console(config-if)#speed-duplex 100half Console(config-if)#flowcontrol .
Port Configuration • All the ports in a trunk have to be treated as a whole when moved from/to, added or deleted from a VLAN. • STP, VLAN, and IGMP settings can only be made for the entire trunk. Statically Configuring a Trunk Command Usage • To avoid creating a loop in the network, be sure you add a static trunk via the configuration interface before connecting the ports, and also disconnect the ports before removing a static trunk via the configuration interface.
Configuring the Switch CLI – This example creates trunk 2 with ports 13 and 14. Just connect these ports to two static trunk ports on another switch to form a trunk.
Port Configuration Web – Click Port, LACP, Configuration. Select switch ports from the scroll-down port list and click Add. After you have completed adding ports to the member list, click Apply. CLI – The following example enables LACP for ports 13 and 14. Just connect these ports to LACP-enabled trunk ports on another switch to form a trunk.
Configuring the Switch Setting Broadcast Storm Thresholds Broadcast storms may occur when a device on your network is malfunctioning, or if application programs are not well designed or properly configured. If there is too much broadcast traffic on your network, performance can be severely degraded or everything can come to complete halt. You can protect your network from broadcast storms by setting a threshold for broadcast traffic for each port.
Port Configuration CLI – Specify any interface, and then enter the threshold. The following disables broadcast storm control for port 1, and then sets broadcast suppression at 600 packets per second for port 2. This threshold will then apply to all ports with broadcast storm control enabled.
Configuring the Switch Web – Click Port, Mirror. Specify the source port, the traffic type to be mirrored, and the target port, then click Add. CLI – Use the interface command to select the monitor port, then use the port monitor command to specify the source port. Note that default mirroring under the CLI is for both received and transmitted packets.
Port Configuration Web - Click Rate Limit, Input/Output Port/Trunk Configuration. Set the Input Rate Limit Status or Output Rate Limit Status, then set the rate limit for the individual interfaces, and click Apply. CLI - This example sets the rate limit for input and output traffic passing through port 1 to 50 Mbps.
Configuring the Switch Statistical Values Parameter Description Interface Statistics Received Octets The total number of octets received on the interface, including framing characters. Received Unicast Packets The number of subnetwork-unicast packets delivered to a higher-layer protocol. Received Multicast Packets The number of packets, delivered by this sub-layer to a higher (sub-)layer, which were addressed to a multicast address at this sub-layer.
Port Configuration Parameter Description Single Collision Frames The number of successfully transmitted frames for which transmission is inhibited by exactly one collision. Internal MAC Transmit Errors A count of frames for which transmission on a particular interface fails due to an internal MAC sublayer transmit error. Multiple Collision Frames A count of successfully transmitted frames for which transmission is inhibited by more than one collision.
Configuring the Switch Parameter Description 64 Bytes Frames The total number of frames (including bad packets) received and transmitted that were 64 octets in length (excluding framing bits but including FCS octets). 65-127 Byte Frames The total number of frames (including bad packets) received and transmitted where the number of octets fall within the specified range (excluding framing bits but including FCS octets).
Port Configuration CLI – This example shows statistics for port 12.
Configuring the Switch VDSL Configuration You can configure and display communication parameters for VDSL and Ethernet ports on the switch and connected CPEs. VDSL Global Configuration Assigns the same profile to each VDSL switch port. Details of these profiles are given in the table below. Profile Name ProfileType Downstream Rate (Mbps) Upstream Rate (Mbps) Default Public 1.20 1.40 A1-02OAG-R1 Public 7.56 2.43 A2-02OAG-R1 Public 10.80 2.43 A3-01OAG-R1 Public 17.28 3.
VDSL Configuration 4. The maximum distances for VDSL links using the recommended profiles are: Upstream Downstream Mode Max. Range 16 Mbps 16 Mbps Symetric 600m (1970 ft) 11 Mbps 34 Mbps Asymetric 610m (2000 ft) 5. Type-1 26 AWG (100 ohm)/0.4 mm, or Type-2 24 AWG (100 ohm)/0.5 mm cable may be installed to achieve the maximum distance, however, typically, 24 AWG (100 ohm)/0.5 mm wire is better than 26 AWG (100 ohm)/0.4 mm wire.
Configuring the Switch VDSL Port Configuration You can enable/disable a selected port, enable disable Remote Digital Loopback (RDL), set the optimal transmission rate, and configure a profile for the selected port. Command Attributes • Active Status – Check this box to enable the selected port. • RDL – Check this box to enable Remote Digital Loopback (RDL).
VDSL Configuration Web Interface Click VDSL, Port Configuration,select a port from the drop-down list, and click Select.. Command Line Interface The following examples show how these features are configured in the CLI. Example The following example disables VDSL port 1. Console (config)#interface ethernet 1/1 Console(config-if)#efm shutdown Console(config-if)# 4-86 4-106 Example The following example shows how to enable/disable RDL on VDSL port 1.
Configuring the Switch VDSL Port Link Status Command Attributes • General Status - Link – Shows the status of the VDSL link. - Noise Margin – The noise margin indicates how much the noise on the selected VDSL port can increase before the signal is affected. As the noise on the line increases, the margin will approach zero. If the noise exceeds the current noise margin, the signal will be lost. You will then need to increase the margin until the signal is restored. Range: 0-9 dBm.
VDSL Configuration Web Interface Click VDSL, Port Link Status. Command Line Interface The following example displays VDSL link current values on VDSL switch port 2. Example Console#show controller efm Ethernet 1/2 Downstream Reed-Solomon errors: 0 Console#show controller efm Ethernet 1/2 Link status: Down Console#show controller efm Ethernet 1/2 Local receive power: 26.00 dBm/Hz Console#show controller lre Ethernet 1/2 SNR: 27.00 dB Console#show controller efm Ethernet 1/2 Remote transmit power: -89.
Configuring the Switch Displaying VDSL Port Ethernet Statistics VDSL Port Ethernet Statistics displays key statistics for an interface. Web – Click VDSL, VDSL Port Ethernet Statistics.
VDSL Configuration CLI – Use the show interfaces counters command.
Configuring the Switch VDSL Line Configuration Command Attributes • Line – Select the VDSL line for configuration from the drop-down list. • Local/Remote – In this version this may only be set to Local, indicating that the line configuration applies to the line connection from the switch to the CPE. • Coding – Specifies the VDSL coding type used on this line. The types of code are: 1. Others (none of the following) 2. Multiple Carrier Modulation 3.
VDSL Configuration Displaying VDSL Interface Information Command Attributes • Line – Select the VDSL line from the drop-down list. • Channel – Select Slow or Fast from the drop-down menu. The switch uses the slow channel for data that requires a very low error rate in transmission. The switch uses the fast channel for data such as voice/video signals that require fast delivery, but for which a small error rate is acceptable. • Side – This only displays Local.
Configuring the Switch Web – Click VDSL, Interface Information select Line, Channel, and Side from the drop-down lists, and click Query. VDSL Performance Monitor Information This screen displays line and channel performance data information since the switch was last reset, during the current 15 minute interval, and during the current day. Command Attributes • Line – Select the VDSL line from the drop-down list. • Chanel – Select Slow or Fast from the drop-down menu.
VDSL Configuration • Line Performance Date Information - Loss of Frame (LOF) – Number of seconds that there was loss of framing, since the switch was last reset, or in the indicated time interval, . - Loss of Signal (LOS) – Number of seconds that there was loss of signal, since the switch was last reset, or in the indicated time interval. - Loss of Power – Number of seconds that there was loss of power, since the switch was last reset, or in the indicated time interval.
Configuring the Switch Web – Click VDSL, Performance Monitor Information. Monitoring VDSL Performance History This screen displays line and channel performance data information during selected 15 minute intervals over the last 24 hours of switch operation, and during selected 1-day intervals from the current day to 30 days ago. Command Attributes • Line – Select the VDSL line from the drop-down list. • Chanel – Select Slow or Fast from the drop-down list. • Side – This only displays Local.
VDSL Configuration - Loss of Link – Number of seconds that there was loss of link, in the indicated time interval. - Errored Second – Number of errored seconds in the indicated time interval. An errored second is a one-second interval containing one or more CRC anomalies, or one or more LOS or LOF defects. - Severely Errored Second – Number of severely errored seconds in the indicated time interval.
Configuring the Switch Address Table Settings Switches store the addresses for all known devices. This information is used to pass traffic directly between the inbound and outbound ports. All the addresses learned by monitoring traffic are stored in the dynamic address table. You can also manually configure static addresses that are bound to a specific port. Setting Static Addresses A static address can be assigned to a specific interface on this switch.
Address Table Settings CLI – This example adds an address to the static address table, but sets it to be deleted when the switch is reset. Console(config)#mac-address-table static 00-e0-29-94-34-de interface ethernet 1/1 vlan 1 delete-on-reset 4-120 Console(config)# Displaying the Address Table The Dynamic Address Table contains the MAC addresses learned by monitoring the source address for traffic entering the switch.
Configuring the Switch CLI – This example also displays the address table entries for port 1. Console#show mac-address-table interface ethernet 1/1 Interface Mac Address Vlan Type --------- ----------------- ---- ----------------Eth 1/ 1 00-E0-29-94-34-DE 1 Permanent Eth 1/ 1 00-20-9C-23-CD-60 2 Learned Console# 4-121 Changing the Aging Time You can set the aging time for entries in the dynamic address table. Command Attributes • Aging Status – Enables/disables the function.
Spanning Tree Algorithm Configuration Spanning Tree Algorithm Configuration The Spanning Tree Algorithm (STA) can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers.
Configuring the Switch Displaying Global Settings You can display a summary of the current bridge STA information that applies to the entire switch using the STA Information screen. Field Attributes • Spanning Tree State – Shows if the switch is enabled to participate in an STA-compliant network. • Bridge ID – A unique identifier for this bridge, consisting of the bridge priority and MAC address (where the address is taken from the switch system).
Spanning Tree Algorithm Configuration • Root Hello Time – Interval (in seconds) at which this device transmits a configuration message. • Root Maximum Age – The maximum time (in seconds) this device can wait without receiving a configuration message before attempting to reconfigure. All device ports (except for designated ports) should receive configuration messages at regular intervals.
Configuring the Switch CLI – This command displays global STA settings, followed by settings for each port. Console#show spanning-tree Spanning-tree information --------------------------------------------------------------Spanning tree mode :RSTP Spanning tree enable/disable :enable Priority :32768 Bridge Hello Time (sec.) :2 Bridge Max Age (sec.) :20 Bridge Forward Delay (sec.) :15 Root Hello Time (sec.) :2 Root Max Age (sec.) :20 Root Forward Delay (sec.) :15 Designated Root :32768.
Spanning Tree Algorithm Configuration • Priority – Bridge priority is used in selecting the root device, root port, and designated port. The device with the highest priority becomes the STA root device. However, if all devices have the same priority, the device with the lowest MAC address will then become the root device. (Note that lower numeric values indicate higher priority.
Configuring the Switch Web – Click Spanning Tree, STA, Configuration. Modify the required attributes, and click Apply. CLI – This example enables Spanning Tree Protocol, and then configures the STA parameters.
Spanning Tree Algorithm Configuration The rules defining port status are: - A port on a network segment with no other STA compliant bridging device is always forwarding. - If two ports of a switch are connected to the same segment and there is no other STA device attached to this segment, the port with the smaller ID forwards packets and the other is discarding. - All ports are discarding when the switch is booted, then some of them change state to learning, and then to forwarding.
Configuring the Switch R A x Backup port receives more useful BPDUs from the same bridge and is therefore not selected as the designated port. R D B These additional parameters are only displayed for the CLI: • Admin status – Shows if this interface is enabled. • Path Cost – This parameter is used by the STA to determine the best path between devices. Therefore, lower values should be assigned to ports attached to faster media, and higher values assigned to ports with slower media.
Spanning Tree Algorithm Configuration Web – Click Spanning Tree, STA, Port Information or STA Trunk Information. CLI – This example shows the STA attributes for port 5. Console#show spanning-tree ethernet 1/5 Eth 1/ 5 information ------------------------------------------------------------Admin status : enable Role : disable State : discarding Path cost : 100000 Priority : 128 Designated cost : 200000 Designated port : 128.5 Designated root : 61440.0.0000E9313131 Designated bridge : 61440.0.
Configuring the Switch • Trunk – Indicates if a port is a member of a trunk. (STA Port Configuration only) The following interface attributes can be configured: • Priority – Defines the priority used for this port in the Spanning Tree Protocol. If the path cost for all ports on a switch are the same, the port with the highest priority (i.e., lowest value) will be configured as an active link in the Spanning Tree.
VLAN Configuration • Migration – If at any time the switch detects STP BPDUs, including Configuration or Topology Change Notification BPDUs, it will automatically set the selected interface to forced STP-compatible mode. However, you can also use the Protocol Migration button to manually re-check the appropriate BPDU format (RSTP or STP-compatible) to send on the selected interfaces. (Default: Disabled) Web – Click Spanning Tree, STA, Port Configuration or Trunk Configuration.
Configuring the Switch VLANs provide greater network efficiency by reducing broadcast traffic, and allow you to make network changes without having to update IP addresses or IP subnets. VLANs inherently provide a high level of network security since traffic must pass through a configured Layer 3 link to reach a different VLAN. This switch supports the following VLAN features: • Up to 255 VLANs based on the IEEE 802.
VLAN Configuration shared network resources among different VLAN groups, such as file servers or printers. Note that if you implement VLANs which do not overlap, but still need to communicate, you can connect them by enabled routing on this switch. Untagged VLANs – Untagged (or static) VLANs are typically used to reduce broadcast traffic and to increase security. A group of network users assigned to a VLAN form a broadcast domain that is separate from other VLANs configured on the switch.
Configuring the Switch CLI – Enter the following command. Console#show bridge-ext Max support vlan numbers: 255 Max support vlan ID: 4093 Extended multicast filtering services: No Static entry individual port: Yes VLAN learning: IVL Configurable PVID tagging: Yes Local VLAN capable: No Traffic classes: Enabled GMRP: Disabled Console# 4-144 Displaying Current VLANs The VLAN Current Table shows the current port members of each VLAN and whether or not the port supports VLAN tagging.
VLAN Configuration Web – Click VLAN, 802.1Q VLAN, Current Table. Select any ID from the scroll-down list.
Configuring the Switch Creating VLANs Use the VLAN Static List to create or remove VLAN groups. To propagate information about VLAN groups used on this switch to external network devices, you must specify a VLAN ID for each of these groups. Command Attributes • Current – Lists all the current VLAN groups created for this system. Up to 255 VLAN groups can be defined. VLAN 1 is the default untagged VLAN. • New – Allows you to specify the name and numeric identifier for a new VLAN group.
VLAN Configuration Adding Static Members to VLANs (VLAN Index) Notes: 1. Use the VLAN Static Table to configure port members for the selected VLAN index. Assign ports as tagged if they are connected to 802.1Q VLAN compliant devices, or untagged they are not connected to any VLAN-aware devices.You can also use the VLAN Static Membership by Port page to configure VLAN groups based on the port index (page 3-90). However, note that this configuration page can only add ports to a VLAN as tagged members. 2.
Configuring the Switch Web – Click VLAN, 802.1Q VLAN, Static Table. Select a VLAN ID from the scroll-down list. Modify the VLAN name and status if required. Select the membership type by marking the appropriate radio button in the list of ports or trunks. Click Apply. CLI – The following example adds tagged and untagged ports to VLAN 2.
VLAN Configuration Web – Open VLAN, 802.1Q VLAN, Static Membership. Select an interface from the scroll-down box (Port or Trunk). Click Query to display membership information for the interface. Select a VLAN ID, and then click Add to add the interface as a tagged member, or click Remove to remove the interface. After configuring VLAN membership for each interface, click Apply. CLI – This example adds Port 3 to VLAN 1 as a tagged port, and removes Port 3 from VLAN 2.
Configuring the Switch • Ingress Filtering – Determines how to process frames tagged for VLANs for which the ingress port is not a member. (Default: Disabled) - Ingress filtering only affects tagged frames. - If ingress filtering is disabled and a port receives frames tagged for VLANs for which it is not a member, these frames will be flooded to all other ports (except for those VLANs explicitly forbidden on this port).
VLAN Configuration Web – Click VLAN, 802.1Q VLAN, Port Configuration or VLAN Trunk Configuration. Fill in the required settings for each interface, click Apply. CLI – This example sets port 3 to accept only tagged frames, assigns PVID 3 as the native VLAN ID, sets the GARP timers, and then sets the switchport mode to hybrid.
Configuring the Switch Configuring Private VLANs Private VLANs provide port-based security and isolation between ports within the assigned VLAN. Data traffic on downlink ports can only be forwarded to, and from, uplink ports. (Note that private VLANs and normal VLANs can exist simultaneously within the same switch.
VLAN Configuration Configuring Uplink and Downlink Ports Use the Private VLAN Link Status page to set ports as downlink or uplink ports. Ports designated as downlink ports can not communicate with any other ports on the switch except for the uplink ports. Uplink ports can communicate with any other ports on the switch and with any designated downlink ports. Web – Click VLAN, Private VLAN, Link Status. Check the ports that will serve as uplinks and downlinks for the private VLAN, then click Apply.
Configuring the Switch Class of Service Configuration Class of Service (CoS) allows you to specify which data packets have greater precedence when traffic is buffered in the switch due to congestion. This switch supports CoS with four priority queues for each port. Data packets in a port’s high-priority queue will be transmitted before those in the lower-priority queues. You can set the default priority for each interface, and configure the mapping of frame priority tags to the switch’s priority queues.
Class of Service Configuration Web – Click Priority, Default Port Priority or Default Trunk Priority. Modify the default priority for any interface, then click Apply. CLI – This example assigns a default priority of 5 to port 3.
Configuring the Switch The priority levels recommended in the IEEE 802.1p standard for various network applications are shown in the following table. However, you can map the priority levels to the switch’s output queues in any way that benefits application traffic for your own network.
Class of Service Configuration CLI – The following example shows how to change the CoS assignments to a one-to-one mapping.
Configuring the Switch Setting the Service Weight for Traffic Classes This switch uses the Weighted Round Robin (WRR) algorithm to determine the frequency at which it services each priority queue. As described in “Mapping CoS Values to Egress Queues” on page 3-97, the traffic classes are mapped to one of the four egress queues provided for each port. You can assign a weight to each of these queues (and thereby to the corresponding traffic priorities).
Class of Service Configuration Because different priority information may be contained in the traffic, this switch maps priority values to the output queues in the following manner: • The precedence for priority mapping is IP Precedence or DSCP Priority, and then Default Port Priority. • IP Precedence and DSCP Priority cannot both be enabled. Enabling one of these priority types will automatically disable the other.
Configuring the Switch Command Attributes • IP Precedence Priority Table – Shows the IP Precedence to CoS map. • Class of Service Value – Maps a CoS value to the selected IP Precedence value. Note that “0” represents low priority and “7” represent high priority. Web – Click Priority, IP Precedence Priority. Select an entry from the IP Precedence Priority Table, enter a value in the Class of Service Value field, and then click Apply.
Class of Service Configuration Mapping DSCP Priority The DSCP is six bits wide, allowing coding for up to 64 different forwarding behaviors. The DSCP replaces the ToS bits, but it retains backward compatibility with the three precedence bits so that non-DSCP compliant, ToS-enabled devices, will not conflict with the DSCP mapping. Based on network policies, different kinds of traffic can be marked for different kinds of forwarding. The DSCP default values are defined in the following table.
Configuring the Switch CLI – The following example globally enables DSCP Priority service on the switch, maps DSCP value 0 to CoS value 1 (on port 1), and then displays the DSCP Priority settings. Console(config)#map ip dscp Console(config)#interface ethernet 1/1 Console(config-if)#map ip dscp 1 cos 0 Console(config-if)#end Console#show map ip dscp ethernet 1/1 DSCP mapping status: enabled 4-151 4-86 4-152 4-154 Port DSCP COS --------- ---- --Eth 1/ 1 0 0 Eth 1/ 1 1 0 Eth 1/ 1 2 0 Eth 1/ 1 3 0 . . .
Class of Service Configuration Click Priority, IP Port Priority. Select the port or trunk. To add an IP port, type the port number in the IP Port box and the new CoS value in the Class of Service box, then click Apply To delete an IP port setting, select the entry in the Current IP Port Table, then click Remove IP Port. CLI – The following example shows IP Port 80 mapped to CoS value 0 for ethernet port 1.
Configuring the Switch Copy Priority Settings In the Copy Settings page you can copy the priority settings from a selected port or trunk to another selected port or trunk. Command Attributes • Source Interface – The port or trunk from which the priority settings are copied. • Destination Interface – The port or trunk to which the priority settings are copied. Web – Click Priority, Copy Settings.
Multicast Filtering The purpose of IP multicast filtering is to optimize a switched network’s performance, so multicast packets will only be forwarded to those ports containing multicast group hosts or multicast routers/switches, instead of flooding traffic to all ports in the subnet (VLAN).
Configuring the Switch Command Attributes • IGMP Status – When enabled, the switch will monitor network traffic to determine which hosts want to receive multicast traffic. This is also referred to as IGMP Snooping. (Default: Enabled) • Act as IGMP Querier – When enabled, the switch can serve as the Querier, which is responsible for asking hosts if they want to receive multicast traffic.
Multicast Filtering CLI – This example modifies the settings for multicast filtering, and then displays the current status.
Configuring the Switch CLI – This example shows that Port 11 has been statically configured as a port attached to a multicast router. Console#show ip igmp snooping mrouter vlan 1 VLAN M'cast Router Port Type ---- ------------------ ------1 Eth 1/1 Static 4-163 Specifying Static Interfaces for a Multicast Router Depending on your network connections, IGMP snooping may not always be able to locate the IGMP querier.
Multicast Filtering Displaying Port Members of Multicast Services You can display the port members associated with a specified VLAN and multicast service. Command Attribute • VLAN ID – Selects the VLAN for which to display port members. • Multicast IP Address – The IP address for a specific multicast service. • Multicast Group Port List – Shows the interfaces that have already been assigned to the selected VLAN to propagate a specific multicast service.
Configuring the Switch Assigning Ports to Multicast Services Multicast filtering can be dynamically configured using IGMP Snooping and IGMP Query messages as described in “Configuring IGMP Snooping and Query Parameters” on page 3-107. For certain applications that require tighter control, you may need to statically configure a multicast service on the switch. First add all the ports attached to participating hosts to a common VLAN, and then assign the multicast service to that VLAN group.
Multicast Filtering 3-113
Configuring the Switch 3-114
Chapter 4: Command Line Interface This chapter describes how to use the Command Line Interface (CLI). Using the Command Line Interface Accessing the CLI When accessing the management interface for the switch over a direct connection to the server’s console port, or via a Telnet connection, the switch can be managed by entering command keywords and parameters at the prompt. Using the switch's command-line interface (CLI) is very similar to entering commands on a UNIX system.
Command Line Interface To access the switch through a Telnet session, you must first set the IP address for the switch, and set the default gateway if you are managing the switch from a different IP subnet. For example, Console(config)#interface vlan 1 4-86 Console(config-if)#ip address 10.1.0.254 255.255.255.0 Console(config-if)#exit Console(config)#ip default-gateway 10.1.0.
Entering Commands Entering Commands This section describes how to enter CLI commands. Keywords and Arguments A CLI command is a series of keywords and arguments. Keywords identify a command, and arguments specify configuration parameters. For example, in the command “show interfaces status ethernet 1/5,” show interfaces and status are keywords, ethernet is an argument that specifies the interface type, and 1/5 specifies the unit/port.
Command Line Interface Showing Commands If you enter a “?” at the command prompt, the system will display the first level of keywords for the current command class (Normal Exec or Privileged Exec) or configuration class (Global, ACL, Interface, Line, VLAN Database, or MSTP). You can also display a list of valid keywords for a specific command.
Entering Commands Negating the Effect of Commands For many configuration commands you can enter the prefix keyword “no” to cancel the effect of a command or reset the configuration to the default value. For example, the logging command will log system messages to a host server. To disable logging, specify the no logging command. This guide describes the negation effect for all applicable commands. Using Command History The CLI maintains a history of commands that have been entered.
Command Line Interface The system will now display the “Console#” command prompt. You can also enter Privileged Exec mode from within Normal Exec mode, by entering the enable command, followed by the privileged level password “super” (page 4-25). To enter Privileged Exec mode, enter the following user names and passwords: Username: admin Password: [admin login password] CLI session with the switch is opened. To end the CLI session, enter [Exit].
Entering Commands To enter the other modes, at the configuration prompt type one of the following commands. Use the exit or end command to return to the Privileged Exec mode.
Command Line Interface Command Groups The system commands can be broken down into the functional groups shown below.
Line Commands Line Commands You can access the onboard configuration program by attaching a VT100 compatible device to the server’s serial port. These commands are used to set communication parameters for the serial port or Telnet (i.e., a virtual terminal).
Command Line Interface Command Usage Telnet is considered a virtual terminal connection and will be shown as “Vty” in screen displays such as show users. However, the serial communication parameters (e.g., databits) do not affect Telnet connections. Example To enter console line mode, enter the following command: Console(config)#line console Console(config-line)# Related Commands show line (4-17) show users (4-55) login This command enables password checking at login.
Line Commands • • no login selects no authentication. When using this method, the management interface starts in Normal Exec (NE) mode. This command controls login authentication via the switch itself. To configure user names and passwords for remote authentication servers, you must use the RADIUS or TACACS software installed on those servers.
Command Line Interface Related Commands login (4-10) password-thresh (4-12) exec-timeout This command sets the interval that the system waits until user input is detected. Use the no form to restore the default. Syntax exec-timeout [seconds] no exec-timeout seconds - Integer that specifies the number of seconds.
Line Commands Command Mode Line Configuration Command Usage • • When the logon attempt threshold is reached, the system interface becomes silent for a specified amount of time before allowing the next logon attempt. (Use the silent-time command to set this interval.) When this threshold is reached for Telnet, the Telnet logon interface shuts down. This command applies to both the local console and Telnet connections.
Command Line Interface databits This command sets the number of data bits per character that are interpreted and generated by the console port. Use the no form to restore the default value. Syntax databits {7 | 8} no databits • • 7 - Seven data bits per character. 8 - Eight data bits per character. Default Setting 8 data bits per character Command Mode Line Configuration Command Usage The databits command can be used to mask the high bit on input from devices that generate 7 data bits with parity.
Line Commands Command Mode Line Configuration Command Usage Communication protocols provided by devices such as terminals and modems often require a specific parity bit setting. Example To specify no parity, enter this command: Console(config-line)#parity none Console(config-line)# speed This command sets the terminal line’s baud rate. This command sets both the transmit (to terminal) and receive (from terminal) speeds. Use the no form to restore the default setting.
Command Line Interface stopbits This command sets the number of the stop bits transmitted per byte. Use the no form to restore the default setting. Syntax stopbits {1 | 2} • • 1 - One stop bit 2 - Two stop bits Default Setting 1 stop bit Command Mode Line Configuration Example To specify 2 stop bits, enter this command: Console(config-line)#stopbits 2 Console(config-line)# disconnect Use this command to terminate an SSH, Telnet, or console connection.
Line Commands show line This command displays the terminal line’s parameters. Syntax show line [console | vty] • • console - Console terminal line. vty - Virtual terminal for remote console access (i.e., Telnet).
Command Line Interface General Commands Command Function Mode enable Activates privileged mode NE Page 4-18 disable Returns to normal mode from privileged mode PE 4-19 configure Activates global configuration mode PE 4-19 show history Shows the command history buffer NE, PE 4-20 reload Restarts the system PE 4-21 end Returns to Privileged Exec mode any config.
General Commands Related Commands disable (4-19) enable password (4-25) disable This command returns to Normal Exec mode from privileged mode. In normal access mode, you can only display basic information on the switch's configuration or Ethernet statistics. To gain access to all commands, you must use the privileged mode. See “Understanding Command Modes” on page 4-5.
Command Line Interface Example Console#configure Console(config)# Related Commands end (4-21) show history This command shows the contents of the command history buffer. Default Setting None Command Mode Normal Exec, Privileged Exec Command Usage The history buffer size is fixed at 10 Execution commands and 10 Configuration commands.
General Commands reload This command restarts the system. Note: When the system is restarted, it will always run the Power-On Self-Test. It will also retain all configuration information stored in non-volatile memory by the copy running-config startup-config command. Default Setting None Command Mode Privileged Exec Command Usage This command resets the entire system.
Command Line Interface Command Mode Any Example This example shows how to return to the Privileged Exec mode from the Global Configuration mode, and then quit the CLI session: Console(config)#exit Console#exit Press ENTER to start session User Access Verification Username: quit This command exits the configuration program. Default Setting None Command Mode Normal Exec, Privileged Exec Command Usage The quit and exit commands can both exit the configuration program.
System Management Commands System Management Commands These commands are used to control system logs, passwords, user names, browser configuration options, and display or configure a variety of other system information.
Command Line Interface hostname This command specifies or modifies the host name for this device. Use the no form to restore the default host name. Syntax hostname name no hostname name - The name of this host. (Maximum length: 255 characters) Default Setting None Command Mode Global Configuration Example Console(config)#hostname RD#1 Console(config)# User Access Commands The basic commands required for management access are listed in this section.
System Management Commands • • {0 | 7} - 0 means plain password, 7 means encrypted password. password password - The authentication password for the user. (Maximum length: 8 characters plain text, 32 encrypted, case sensitive) Default Setting • • The default access level is Normal Exec.
Command Line Interface Command Mode Global Configuration Command Usage • • You cannot set a null password. You will have to enter a password to change the command mode from Normal Exec to Privileged Exec with the enable command (page 4-18). The encrypted password is required for compatibility with legacy password settings (i.e., plain text or encrypted) when reading the configuration file during system bootup or when downloading the configuration file from a TFTP server.
System Management Commands Command Mode Global Configuration Command Usage • • • • • If anyone tries to access a management interface on the switch from an invalid address, the switch will reject the connection, enter an event message in the system log, and send a trap message to the trap manager. IP address can be configured for SNMP, Web and Telnet access respectively. Each of these groups can include up to five different sets of addresses, either individual addresses or address ranges.
Command Line Interface Example Console#show management all-client Management Ip Filter Http-Client: Start ip address End ip address ----------------------------------------------1. 192.168.1.19 192.168.1.19 2. 192.168.1.25 192.168.1.30 Snmp-Client: Start ip address End ip address ----------------------------------------------1. 192.168.1.19 192.168.1.19 2. 192.168.1.25 192.168.1.30 Telnet-Client: Start ip address End ip address ----------------------------------------------1. 192.168.1.19 192.168.1.19 2.
System Management Commands Example Console(config)#ip http port 769 Console(config)# Related Commands ip http server (4-29) ip http server This command allows this device to be monitored or configured from a browser. Use the no form to disable this function.
Command Line Interface • If you enable HTTPS, you must indicate this in the URL that you specify in your browser: https://device[:port_number] When you start HTTPS, the connection is established in this way: The client authenticates the server using the server’s digital certificate. The client and server negotiate a set of security protocols to use for the connection. The client and server generate session keys for encrypting and decrypting data.
System Management Commands Command Usage • • You cannot configure the HTTP and HTTPS servers to use the same port.
Command Line Interface Command Function Mode ip ssh server Enables the SSH server on the switch GC Page 4-32 ip ssh timeout Specifies the authentication timeout for the SSH server GC 4-35 ip ssh authentication-retries Specifies the number of retries allowed by a client GC 4-33 disconnect ssh Terminates an SSH connection PE 4-34 show ip ssh Displays the status of the SSH server and the configured values PE for authentication timeout and retries 4-34 show ssh Displays the status of curr
System Management Commands ip ssh timeout Use this command to configure the timeout for the SSH server. Use the no form to restore the default setting. Syntax ip ssh timeout seconds no ip ssh timeout seconds – The timeout for client response during SSH negotiation. (Range: 1-120) Default Setting 10 seconds Command Mode Global Configuration Command Usage The timeout specifies the interval the switch will wait for a response from the client during the SSH negotiation phase.
Command Line Interface Example Console(config)#ip ssh authentication-retires 2 Console(config)# Related Commands show ip ssh (4-34) disconnect ssh Use this command to terminate a Secure Shell (SSH) client connection. Syntax disconnect ssh connection-id connection-id – The session identifier as displayed in the show ssh command.
System Management Commands show ssh Use this command to display the current SSH server connections. Command Mode Privileged Exec Example Console#show ssh Information of secure shell Session Username Version Encrypt method Negotiation state ------- -------- ------- -------------- ----------------0 admin 1.5 cipher-3des session-started Console# Field Description Session The session number. (Range: 0-3) Username The user name of the client. Version The Secure Shell version number.
Command Line Interface logging on This command controls logging of error messages, sending debug or error messages to switch memory. The no form disables the logging process. Syntax [no] logging on Default Setting None Command Mode Global Configuration Command Usage The logging process controls error messages saved to switch memory. You can use the logging history command to control the type of error messages that are stored.
System Management Commands logging history This command limits syslog messages saved to switch memory based on severity. The no form returns the logging of syslog messages to the default level. Syntax logging history {flash | ram} level no logging history {flash | ram} • • • flash - Event history stored in flash memory (i.e., permanent memory). ram - Event history stored in temporary RAM (i.e., memory flushed on power reset). level - One of the level arguments listed below.
Command Line Interface logging host This command adds a syslog server host IP address that will receive logging messages. Use the no form to remove a syslog server host. Syntax [no] logging host host_ip_address host_ip_address - The IP address of a syslog server. Default Setting None Command Mode Global Configuration Command Usage • • By using this command more than once you can build up a list of host IP addresses. The maximum number of host IP addresses allowed is five.
System Management Commands Example Console(config)#logging facility 19 Console(config)# logging trap This command limits syslog messages saved to a remote server based on severity. Use the no form to return the remote logging of syslog messages to the default level. Syntax [no] logging trap level level - One of the level arguments listed below. Messages sent include the selected level up through level 0. (Refer to the table on page 4-37.
Command Line Interface show logging This command displays the logging configuration, along with any system and event messages stored in memory. Syntax show logging {flash | ram | sendmail | trap} • • • • flash - Event history stored in flash memory (i.e., permanent memory). ram - Event history stored in temporary RAM (i.e., memory flushed on power reset). sendmail - Displays settings for the SMTP event handler (page 4-44). trap - Displays settings for the trap function.
System Management Commands The following example displays settings for the trap function. Console#show logging trap Syslog logging: Enable REMOTELOG status: disable REMOTELOG facility type: local use 7 REMOTELOG level type: Debugging messages REMOTELOG server IP address: 1.2.3.4 REMOTELOG server IP address: 0.0.0.0 REMOTELOG server IP address: 0.0.0.0 REMOTELOG server IP address: 0.0.0.0 REMOTELOG server IP address: 0.0.0.
Command Line Interface logging sendmail host This command specifies SMTP servers that will be sent alert messages. Use the no form to remove an SMTP server. Syntax [no] logging sendmail host ip_address ip_address - IP address of an SMTP server that will be sent alert messages for event handling. Default Setting None Command Mode Global Configuration Command Usage • You can specify up to three SMTP servers for event handing. However, you must enter a separate command to specify each server.
System Management Commands Command Usage The specified level indicates an event threshold. All events at this level or higher will be sent to the configured email recipients. (For example, using Level 7 will report all events from level 7 to level 0.) Example This example will send email alerts for system errors from level 3 through 0. Console(config)#logging sendmail level 3 Console(config)# logging sendmail source-email This command sets the email address used for the “From” field in alert messages.
Command Line Interface Command Mode Global Configuration Command Usage You can specify up to five recipients for alert messages. However, you must enter a separate command to specify each recipient. Example Console(config)#logging sendmail destination-email ted@this-company.com Console(config)# logging sendmail This command enables SMTP event handling. Use the no form to disable this function.
System Management Commands Example Console#show logging sendmail SMTP servers ----------------------------------------------192.168.1.19 SMTP minimum severity level: 7 SMTP destination email addresses ----------------------------------------------ted@this-company.com SMTP source email address: bill@this-company.
Command Line Interface Command Usage • • • The time acquired from time servers is used to record accurate dates and times for log events. Without SNTP, the switch only records the time starting from the factory default set at the last bootup (i.e., 00:00:00, Jan. 1, 2001). This command enables client time requests to time servers specified via the sntp servers command. It issues time synchronization requests based on the interval set via the sntp poll command.
System Management Commands Command Usage This command specifies time servers from which the switch will poll for time updates when set to SNTP client mode. The client will poll the time servers in the order specified until a response is received. It issues time synchronization requests based on the interval set via the sntp poll command. Example Console(config)#sntp server 10.1.0.
Command Line Interface sntp broadcast client This command synchronizes the switch’s clock based on time broadcast from time servers (using the multicast address 224.0.1.1). Use the no form to disable SNTP broadcast client mode.
System Management Commands clock timezone This command sets the time zone for the switch’s internal clock. Syntax clock timezone name hour hours minute minutes {before-utc | after-utc} • • • • • name - Name of time zone, usually an acronym. (Range: 1-29 characters) hours - Number of hours before/after UTC. (Range: 1-12 hours) minutes - Number of minutes before/after UTC. (Range: 0-59 minutes) before-utc - Sets the local time zone before (east) of UTC.
Command Line Interface Default Setting None Command Mode Privileged Exec Example This example shows how to set the system clock to 15:12:34, February 1st, 2002. Console#calendar set 15:12:34 1 February 2002 Console# show calendar This command displays the system clock.
System Management Commands Command Usage • • • • • • • • • • • Use this command in conjunction with the show running-config command to compare the information in running memory to the information stored in non-volatile memory. This command displays settings for key command modes. Each mode group is separated by “!” symbols, and includes the configuration mode command, and corresponding commands.
Command Line Interface Example Console#show startup-config building startup-config, please wait.....
System Management Commands show running-config This command displays the configuration information currently in use. Default Setting None Command Mode Privileged Exec Command Usage • • • • • • • • • • Use this command in conjunction with the show startup-config command to compare the information in running memory to the information stored in non-volatile memory. This command displays settings for key command modes.
Command Line Interface Example Console#show running-config building running-config, please wait.....
System Management Commands show system This command displays system information. Default Setting None Command Mode Normal Exec, Privileged Exec Command Usage • • For a description of the items shown by this command, refer to “Displaying System Information” on page 3-7. The POST results should all display “PASS.” If any POST test indicates “FAIL,” contact your distributor for assistance.
Command Line Interface Command Usage The session used to execute this command is indicated by a “*” symbol next to the Line (i.e., session) index number. Example Console#show users Username accounts: Username Privilege Public-Key -------- --------- ---------admin 15 None guest 0 None Online users: Line Username Idle time (h:m:s) Remote IP addr. ----------- -------- ----------------- --------------* 0 console admin 0:00:00 1 vty 0 admin 0:04:37 10.1.0.
Flash/File Commands Flash/File Commands These commands are used to manage the system code or configuration files.
Command Line Interface Command Usage • • • • • • • The system prompts for data required to complete the copy command. The destination file name should not contain slashes (\ or /), the leading letter of the file name should not be a period (.), and the maximum length for file names on the TFTP server is 127 characters or 31 characters for files on the switch. (Valid characters: A-Z, a-z, 0-9, “.”, “-”, “_”) Due to the size limit of the flash memory, the switch supports only two operation code files.
Flash/File Commands The following example shows how to download a configuration file: Console#copy tftp startup-config TFTP server ip address: 10.1.0.99 Source configuration file name: startup.01 Startup configuration file name [startup]: Write to FLASH Programming. \Write to FLASH finish. Success. Console# This example shows how to copy a secure-site certificate from an TFTP server. It then reboots the switch to activate the certificate: Console#copy tftp https-certificate TFTP server ip address: 10.1.0.
Command Line Interface dir This command displays a list of files in flash memory. Syntax dir [boot-rom | config | opcode [:filename]] The type of file or image to display includes: boot-rom - Boot ROM (or diagnostic) image file. config - Switch configuration file. opcode - Run-time operation code image file. filename - Name of the file or image. If this file exists but contains errors, information on this file cannot be shown.
Flash/File Commands whichboot This command displays which files were booted when the system powered up. Default Setting None Command Mode Privileged Exec Example This example shows the information displayed by the whichboot command. See the table under the dir command for a description of the file information displayed by this command.
Command Line Interface Example Console(config)#boot system config: startup Console(config)# Related Commands dir (4-60) whichboot (4-61) Authentication Commands You can configure this switch to authenticate users logging into the system for management access using local or RADIUS authentication methods. You can also enable port-based authentication for network client access using IEEE 802.1x.
Authentication Commands Command Usage • • • RADIUS uses UDP while TACACS+ uses TCP. UDP only offers best effort delivery, while TCP offers a connection-oriented transport. Also, note that RADIUS encrypts only the password in the access-request packet from the client to the server, while TACACS+ encrypts the entire body of the packet. RADIUS and TACACS+ logon authentication assigns a specific privilege level for each user name and password pair.
Command Line Interface radius-server host This command specifies the RADIUS server. Use the no form to restore the default. Syntax radius-server host host_ip_address no radius-server host host_ip_address - IP address of server. Default Setting 10.1.0.1 Command Mode Global Configuration Example Console(config)#radius-server host 192.168.1.25 Console(config)# radius-server port This command sets the RADIUS server network port. Use the no form to restore the default.
Authentication Commands radius-server key This command sets the RADIUS encryption key. Use the no form to restore the default. Syntax radius-server key key_string no radius-server key key_string - Encryption key used to authenticate logon access for client. Do not use blank spaces in the string.
Command Line Interface radius-server timeout This command sets the interval between transmitting authentication requests to the RADIUS server. Use the no form to restore the default. Syntax radius-server timeout number_of_seconds no radius-server timeout number_of_seconds - Number of seconds the switch waits for a reply before resending a request.
Authentication Commands TACACS+ Client Terminal Access Controller Access Control System (TACACS+) is a logon authentication protocol that uses software running on a central server to control access to TACACS-aware devices on the network. An authentication server contains a database of multiple user name/password pairs with associated privilege levels for each user or group that require management access to a switch.
Command Line Interface Command Mode Global Configuration Example Console(config)#tacacs-server port 181 Console(config)# tacacs-server key This command sets the TACACS+ encryption key. Use the no form to restore the default. Syntax tacacs-server key key_string no tacacs-server key key_string - Encryption key used to authenticate logon access for the client. Do not use blank spaces in the string.
Authentication Commands Port Security Commands These commands can be used to disable the learning function or manually specify secure addresses for a port. You may want to leave port security off for an initial training period (i.e., enable the learning function) to register all the current VLAN members on the selected port, and then enable port security to ensure that the port will drop any incoming frames with a source MAC address that is unknown or has been previously learned from another port.
Command Line Interface • • • • To use port security, first allow the switch to dynamically learn the pair for frames received on a port for an initial training period, and then enable port security to stop address learning. Be sure you enable the learning function long enough to ensure that all valid VLAN members have been registered on the selected port.
Authentication Commands Command Function Mode dot1x timeout quiet-period Sets the time that a switch port waits after the Max Request Count has been exceeded before attempting to acquire a new client GC 4-74 dot1x timeout re-authperiod Sets the time period after which a connected client must be re-authenticated GC 4-75 dot1x timeout tx-period Sets the time period during an authentication session that GC the switch waits before re-transmitting an EAP packet 4-75 show dot1x Shows all dot1x rela
Command Line Interface Example Console(config)#dot1x default Console(config)# dot1x max-req This command sets the maximum number of times the switch port will retransmit an EAP request/identity packet to the client before it times out the authentication session. Use the no form to restore the default.
Authentication Commands Example Console(config)#interface eth 1/2 Console(config-if)#dot1x port-control auto Console(config-if)# dot1x operation-mode This command allows single or multiple hosts (clients) to connect to an 802.1X-authorized port. Use the no form with no keywords to restore the default to single host. Use the no form with the multi-host max-count keywords to restore the default maximum count.
Command Line Interface Example Console#dot1x re-authenticate Console# dot1x re-authentication This command enables periodic re-authentication globally for all ports. Use the no form to disable re-authentication.
Authentication Commands dot1x timeout re-authperiod This command sets the time period after which a connected client must be re-authenticated. Syntax dot1x timeout re-authperiod seconds no dot1x timeout re-authperiod seconds - The number of seconds.
Command Line Interface show dot1x This command shows general port authentication related settings on the switch or a specific interface. Syntax show dot1x [statistics] [interface interface] interface • ethernet unit/port - unit - This is device 1. - port - Port number. Command Mode Privileged Exec Command Usage This command displays the following information: • Global 802.
Authentication Commands • • Backend State Machine - State – Current state (including request, response, success, fail, timeout, idle, initialize). - Request Count – Number of EAP Request packets sent to the Supplicant without receiving a response. - Identifier(Server) – Identifier carried in the most recent EAP Success, Failure or Request packet received from the Authentication Server. Reauthentication State Machine State – Current state (including initialize, reauthenticate).
Command Line Interface SNMP Commands SNMP Commands control access to this switch from management stations using the Simple Network Management Protocol (SNMP), as well as the error types sent to trap managers.
SNMP Commands Example Console(config)#snmp-server community alpha rw Console(config)# snmp-server contact This command sets the system contact string. Use the no form to remove the system contact information. Syntax snmp-server contact string no snmp-server contact string - String that describes the system contact information.
Command Line Interface Example Console(config)#snmp-server location WC-19 Console(config)# Related Commands snmp-server contact (4-79) snmp-server host This command specifies the recipient of a Simple Network Management Protocol notification operation. Use the no form to remove the specified host. Syntax snmp-server host host-addr community-string [version {1 | 2c}] no snmp-server host host-addr • • • host-addr - Internet address of the host (the targeted recipient).
SNMP Commands Example Console(config)#snmp-server host 10.1.19.23 batman Console(config)# Related Commands snmp-server enable traps (4-81) snmp-server enable traps This command enables this device to send Simple Network Management Protocol traps (SNMP notifications). Use the no form to disable SNMP notifications. Syntax [no] snmp-server enable traps [authentication | link-up-down] • • authentication - Keyword to issue authentication failure traps.
Command Line Interface snmp ip filter This command sets the IP addresses of clients that are allowed management access to the switch via SNMP. Use the no form the remove an IP address. Syntax [no] snmp ip filter ip_address subnet_mask • • ip_address - An IP address indicating a client or group of clients that are allowed SNMP access to the switch. subnet_mask - An address bitmask of decimal numbers that represent the address bits to match.
SNMP Commands show snmp This command checks the status of SNMP communications. Default Setting None Command Mode Normal Exec, Privileged Exec Command Usage This command provides information on the community access strings, counter information for SNMP input and output protocol data units, and whether or not SNMP logging has been enabled with the snmp-server enable traps command. Example Console#show snmp SNMP traps: Authentication: enable Link-up-down: enable SNMP communities: 1.
Command Line Interface DHCP Commands These commands are used to configure Dynamic Host Configuration Protocol (DHCP) client. You can configure any VLAN interface to be automatically assigned an IP address via DHCP.
DHCP Commands ip dhcp restart client This command submits a BOOTP or DHCP client request. Default Setting None Command Mode Privileged Exec Command Usage • • • This command issues a BOOTP or DHCP client request for any IP interface that has been set to BOOTP or DHCP mode via the ip address command. DHCP requires the server to reassign the client’s last address if available.
Command Line Interface Interface Commands These commands are used to display or set communication parameters for an Ethernet port, aggregated link, or VLAN.
Interface Commands Command Mode Global Configuration Example To specify port 24, enter the following command: Console(config)#interface ethernet 1/24 Console(config-if)# description This command adds a description to an interface. Use the no form to remove the description. Syntax description string no description string - Comment or a description to help you remember what is attached to this interface.
Command Line Interface Default Setting • Auto-negotiation is enabled by default. • When auto-negotiation is disabled, the default speed-duplex setting is 100half for 100BASE-TX ports and 1000full for Gigabit Ethernet ports. Command Mode Interface Configuration (Ethernet, Port Channel) Command Usage • To force operation to the speed and duplex mode specified in a speed-duplex command, use the no negotiation command to disable auto-negotiation on the selected interface.
Interface Commands Command Usage • When auto-negotiation is enabled the switch will negotiate the best settings for a link based on the capabilities command. When auto-negotiation is disabled, you must manually specify the link attributes with the speed-duplex and flowcontrol commands. • If autonegotiation is disabled, auto-MDI/MDI-X pin signal configuration will also be disabled for the RJ-45 ports. Example The following example configures port 11 to use autonegotiation.
Command Line Interface Command Usage When auto-negotiation is enabled with the negotiation command, the switch will negotiate the best settings for a link based on the capabilites command. When auto-negotiation is disabled, you must manually specify the link attributes with the speed-duplex and flowcontrol commands. Example The following example configures Ethernet port 5 capabilities to 100half, 100full and flow control.
Interface Commands Example The following example enables flow control on port 5. Console(config)#interface ethernet 1/5 Console(config-if)#flowcontrol Console(config-if)#no negotiation Console(config-if)# Related Commands negotiation (4-88) capabilities (4-89) shutdown This command disables an interface. To restart a disabled interface, use the no form. Syntax [no] shutdown Default Setting All interfaces are enabled.
Command Line Interface Default Setting Enabled for all ports Packet-rate limit: 500 packets per second Command Mode Interface Configuration (Ethernet) Command Usage • When broadcast traffic exceeds the specified threshold, packets above that threshold are dropped. • This command can enable or disable broadcast storm control for the selected interface. However, the specified threshold value applies to all ports on the switch.
Interface Commands Example The following example clears statistics on port 5. Console#clear counters ethernet 1/5 Console# show interfaces status This command displays the status for an interface. Syntax show interfaces status [interface] interface • ethernet unit/port - unit - This is device 1. - port - Port number. • port-channel channel-id (Value: 1) • vlan vlan-id (Range: 1-4093) Default Setting Shows the status for all interfaces.
Command Line Interface Example Console#show interfaces status ethernet 1/1 Information of Eth 1/1 Basic information: Port type: 100TX-EFM Mac address: 00-01-00-02-00-04 Configuration: Name: Port admin: Up Speed-duplex: Auto Capabilities: 10half, 10full, 100half, 100full, Broadcast storm: Enabled Broadcast storm limit: 650 packets/second Flow control: Disabled Lacp: Disabled Port security: Disabled Max MAC count: 0 Port security action: None Current status: Link status: Up Port operation status: Up Operation
Interface Commands Example Ethernet 1/ 1 Iftable stats: Octets input: 113404, Octets output: 742007 Unicast input: 739, Unicast output: 836 Discard input: 0, Discard output: 0 Error input: 0, Error output: 0 Unknown protos input: 0, QLen output: 0 Extended iftable stats: Multi-cast input: 482, Multi-cast output: 9 Broadcast input: 38, Broadcast output: 0 Ether-like stats: Alignment errors: 0, FCS errors: 0 Single Collision frames: 0, Multiple collision frames: 0 SQE Test errors: 0, Deferred transmissions: 0
Command Line Interface Command Usage If no interface is specified, information on all interfaces is displayed. Example This example shows the configuration setting for port 2.
Mirror Port Commands Mirror Port Commands This section describes how to mirror traffic from a source port to a target port. Command Function Mode Page port monitor Configures a mirror session IC 4-97 show port monitor Shows the configuration for a mirror port PE 4-98 port monitor This command configures a mirror session. Use the no form to clear a mirror session.
Command Line Interface Example The following example configures the switch to mirror all packets from port 6 to 11: Console(config)#interface ethernet 1/11 Console(config-if)#port monitor ethernet 1/6 both Console(config-if)# show port monitor This command displays mirror information. Syntax show port monitor [interface] interface - ethernet unit/port (source port) • unit - Switch (unit 1) • port - Port number Default Setting Shows all sessions.
Rate Limit Commands Rate Limit Commands This function allows the network manager to control the maximum rate for traffic transmitted or received on an interface. Rate limiting is configured on interfaces at the edge of a network to limit traffic into or out of the network. Traffic that falls within the rate limit is transmitted, while packets that exceed the acceptable amount of traffic are dropped. Rate limiting can be applied to individual ports or trunks.
Command Line Interface Link Aggregation Commands Ports can be statically grouped into an aggregate link (i.e., trunk) to increase the bandwidth of a network connection or to ensure fault recovery. Or you can use the Link Aggregation Control Protocol (LACP) to automatically negotiate a trunk link between this switch and another network device. For static trunks, the switches have to comply with the Cisco EtherChannel standard. For dynamic trunks, the switches have to comply with LACP.
Link Aggregation Commands • However, if the port channel admin key is set, then the port admin key must be set to the same value for a port to be allowed to join a channel group. • If a link goes down, LACP port priority is used to select the backup link. channel-group This command adds a port to a trunk. Use the no form to remove a port from a trunk. Syntax channel-group channel-id no channel-group channel-id - Trunk index (Value: 1) Default Setting The current port will be added to this trunk.
Command Line Interface Command Usage • The ports on both ends of an LACP trunk must be configured for full duplex, either by forced mode or auto-negotiation. • A trunk formed with another switch using LACP will automatically be assigned the next available port-channel ID. • If the target switch has also enabled LACP on the connected ports, the trunk will be activated automatically.
VDSL Commands VDSL Commands These commands are used to to configure and display communication parameters for VDSL and ethernet ports on the switch and connected CPEs.
Command Line Interface Default Setting Default Profile Command Mode Global Configuration Command Usage Assigns the same profile to each VDSL switch port. Details of these profiles are given in the table below. Profile Name ProfileType Downstream Rate (Mbps) Upstream Rate (Mbps) Default Public 1.20 1.40 A1-02OAG-R1 Public 7.56 2.43 A2-02OAG-R1 Public 10.80 2.43 A3-01OAG-R1 Public 17.28 3.78 A4-01OAG-R1 Public 25.92 4.72 S1-03OAG-R1 Public 7.56 7.56 S2-03OAG-R1 Public 10.80 10.
VDSL Commands 4. The maximum distances for VDSL links using the recommended profiles are: Upstream Downstream Mode Max. Range 16 Mbps 16 Mbps Symetric 600m (1970 ft) 11 Mbps 34 Mbps Asymetric 610m (2000 ft) 5. Type-1 26 AWG (100 ohm)/0.4 mm, or Type-2 24 AWG (100 ohm)/0.5 mm cable may be installed to achieve the maximum distance, however, typically, 24 AWG (100 ohm)/0.5 mm wire is better than 26 AWG (100 ohm )/0.4 mm wire.
Command Line Interface Related Commands efm profile global (4-103) efm reset Use the efm reset interface configuration command to reset the switch VDSL chipset or, if a CPE is connected, the CPE VDSL chipset. Syntax efm reset {local | remote} • local - Resets the CO side VDSL chipset for a VDSL port. • remote - Resets the CPE side VDSL chipset of a VDSL port. Default Setting None Command Mode Interface Configuration Command Usage Use this command to troubleshoot VDSL port performance.
VDSL Commands Command Usage Use this command to disable the VDSL chipset transmitter of a VDSL port that is not connected to a working CPE. In some unusual circumstances, the power emitted by VDSL ports can affect other VDSL ports. It is recommended that ports that are not wired to CPEs be shutdown in this way. Also use this command to disable access to the switch from this port. Example The following example disables VDSL port 1.
Command Line Interface efm interleave This command sets the interleave parameters for the selected VDSL port. Syntax efm interleave [downstream M value] [upstream M value] [downstream I value] [upstream I value] no efm interleave • M value – M is the interleaving depth index; Range: 0-64 • I value – I is the interleaving block length; Range: 4 or 8 Default Setting • M – The interleaving depth index. Upstream default value: 8, Downstream default value: 16 • I – The interleaving block length.
VDSL Commands efm noise-margin This command sets the noise margin of the selected VDSL port. Syntax efm noise-margin [downstream noise margin] [upstream noise margin] no efm noise-margin • downstream noise margin - Range 0-9 • upstream noise margin - Range 0-9 Default Setting 0 Command Mode Interface Configuration Command Usage The noise margin indicates how much the noise on the selected VDSL can increase before the signal is affected. As the noise on the line increases, the margin will approach zero.
Command Line Interface Command Usage The data rate on a VDSL line can be affected by factors such as temperature, humidity, and electro-magnetic radiation. When rate adaption is enabled, the switch will determine the optimal transmission rate for the current conditions. Example The following example shows rate adaption enabled for port 1.
VDSL Commands Default Setting None Command Mode Privileged EXEC Command Usage Using the show controllers ethernet-controller command without specifying a VDSL port displays the Ethernet link statistics of all ports on the switch and on the connected CPE devices. The output shows the statistics collected by the VDSL chipset on the switch, and the statistics collected by the VDSL chipset on the CPE.
Command Line Interface Example Console#show controllers ethernet-controller ethernet 1/2 Ethernet 1/2 : EFM PHY on Switch: Transmit 9671624 Bytes Transmitted 8487 Frames Transmitted 0 Pause frames 0 Single Collision Frames 0 Multiple collisions 0 Late collisions 0 Excessive collisions 0 Deferred frames 0 Carrier sense errors Receive 1406434 17551 0 0 0 0 0 0 EFM MAC on Transmit 0 0 0 0 0 0 0 0 0 Bytes Received Frames Received Broadcast frames Pause frames Alignment errors Collisions and Runts Oversize fram
VDSL Commands show controllers efm actual Use this command to display the current values of the VDSL link on a specific VDSL port. Syntax show controllers efm interface-id actual {dsrserrs | usrserrs | txpower | rxpower | snr | link} • • • • interface-id - ID of the VDSL port. dsrserrs - Displays the downstream Reed-Solomon errors on the VDSL port. link - Displays the VDSL link status of the VDSL port.
Command Line Interface Related Commands show controllers efm admin (4-114) show controllers efm profile (4-114) show controllers efm admin Use this command to display the actual values of the VDSL link on a specific VDSL port. Syntax show controllers efm interface-id admin {dsrate | usrate} • interface-id - ID of the VDSL port. • dsrate - Displays the downstream rate (Mbps) of the VDSL link. • usrate - Displays the upstream rate (Mbps) of the VDSL link.
VDSL Commands Default Setting None Command Mode Privileged EXEC Command Usage See efm profile global (4-103) for the VDSL profiles shipped with the switch, and for the their upstream and downstream data rates. Examples This example shows sample output from the show controllers efm profile mapping command.
Command Line Interface Related Commands show controllers efm actual (4-113) show controllers efm admin (4-114) show controllers efm status Use this command to display the VDSL link statistics and profile information on a specific VDSL port including link state, link duration, data rates, power levels, signal-to-noise ratio, and Reed-Solomon errors. Syntax show controllers efm status {link | profile} interface-id • interface - id - ID of the VDSL port • link - Displays VDSL link parameters and status.
VDSL Commands Examples This example shows sample output from the show controllers efm status link command Console#show controllers efm status link Ethernet 1/1 Interface Link SNR (dB) RS Errs Interleaver DS1 DS2 US1 US2 DS.M DS.I US.M US.I PBO ------------- ---- -------------------- -------- ------------------- --Ethernet 1/1 Up 45.0 35.0 46.0 44.
Command Line Interface Related Commands show controllers efm show controllers efm show controllers efm show controllers efm actual (4-113) admin (4-114) status (4-116) channel-performance (4-119) show controllers efm-noise-margin This command displays the noise margin for the selected port.
VDSL Commands show controllers efm channel-performance This command display the channel performance for the channels in a VDSL line. For details see “VDSL Performance Monitor Information” on page 3-66.
Command Line Interface Address Table Commands These commands are used to configure the address table for filtering specified addresses, displaying current entries, clearing the table, or setting the aging time.
Address Table Commands • • Static addresses are bound to the assigned interface and will not be moved. When a static address is seen on another interface, the address will be ignored and will not be written to the address table. A static address cannot be learned on another port until the address is removed with the no form of this command.
Command Line Interface Command Usage • • • The MAC Address Table contains the MAC addresses associated with each interface. Note that the Type field may include the following types: - Learned - Dynamic address entries - Permanent - Static entry - Delete-on-reset - Static entry to be deleted when system is reset The mask should be hexadecimal numbers (representing an equivalent bit mask) in the form xx-xx-xx-xx-xx-xx that is applied to the specified MAC address.
Spanning Tree Commands show mac-address-table aging-time This command shows the aging time for entries in the address table. Default Setting None Command Mode Privileged Exec Example Console#show mac-address-table aging-time Aging time: 300 sec. Console# Spanning Tree Commands This section includes commands that configure the Spanning Tree Algorithm (STA) globally for the switch, and commands that configure STA for the selected interface.
Command Line Interface spanning-tree This command enables the Spanning Tree Algorithm globally for the switch. Use the no form to disable it. Syntax [no] spanning-tree Default Setting Spanning tree is enabled. Command Mode Global Configuration Command Usage The Spanning Tree Algorithm (STA) can be used to detect and disable network loops, and to provide backup links between switches, bridges or routers.
Spanning Tree Commands • Rapid Spanning Tree Protocol RSTP supports connections to either STP or RSTP nodes by monitoring the incoming protocol messages and dynamically adjusting the type of protocol messages the RSTP node transmits, as described below: - STP Mode – If the switch receives an 802.1D BPDU after a port’s migration delay timer expires, the switch assumes it is connected to an 802.1D bridge and starts using only 802.1D BPDUs. - RSTP Mode – If RSTP is using 802.
Command Line Interface Example Console(config)#spanning-tree forward-time 20 Console(config)# spanning-tree hello-time This command configures the spanning tree bridge hello time globally for this switch. Use the no form to restore the default. Syntax spanning-tree hello-time time no spanning-tree hello-time time - Time in seconds. (Range: 1-10 seconds). The maximum value is the lower of 10 or [(max-age / 2) -1].
Spanning Tree Commands Command Usage This command sets the maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure. All device ports (except for designated ports) should receive configuration messages at regular intervals. Any port that ages out STA information (provided in the last configuration message) becomes the designated port for the attached LAN.
Command Line Interface spanning-tree pathcost method This command configures the path cost method used for Rapid Spanning Tree. Use the no form to restore the default. Syntax spanning-tree pathcost method {long | short} no spanning-tree pathcost method • • long - Specifies 32-bit based values that range from 1-200,000,000. short - Specifies 16-bit based values that range from 1-65535.
Spanning Tree Commands Example Console(config)#spanning-tree transmission-limit 4 Console(config)# spanning-tree cost This command configures the spanning tree path cost for the specified interface. Use the no form to restore the default. Syntax spanning-tree cost cost no spanning-tree cost cost - The path cost for the port.
Command Line Interface spanning-tree port-priority This command configures the priority for the specified interface. Use the no form to restore the default. Syntax spanning-tree port-priority priority no spanning-tree port-priority priority - The priority for a port. (Range: 0-240, in steps of 16) Default Setting 128 Command Mode Interface Configuration (Ethernet, Port Channel) Command Usage • This command defines the priority for the use of a port in the Spanning Tree Algorithm.
Spanning Tree Commands Command Usage • You can enable this option if an interface is attached to a LAN segment that is at the end of a bridged LAN or to an end node. Since end nodes cannot cause forwarding loops, they can pass directly through to the spanning tree forwarding state.
Command Line Interface Example Console(config)#interface ethernet 1/5 Console(config-if)#bridge-group 1 portfast Console(config-if)# Related Commands spanning-tree edge-port (4-130) spanning-tree link-type This command configures the link type for Rapid Spanning Tree. Use the no form to restore the default. Syntax spanning-tree link-type {auto | point-to-point | shared} no spanning-tree link-type • • • auto - Automatically derived from the duplex mode setting. point-to-point - Point-to-point link.
Spanning Tree Commands spanning-tree protocol-migration This command re-checks the appropriate BPDU format to send on the selected interface. Syntax spanning-tree protocol-migration interface interface • ethernet unit/port - unit - This is device 1. - port - Port number.
Command Line Interface Command Usage • Use the show spanning-tree command with no parameters to display the spanning tree configuration for the switch and for every interface in the tree. • Use the show spanning-tree interface command to display the spanning tree configuration for an interface. • For a description of the items displayed under “Spanning-tree information,” see “Configuring Global Settings” on page 3-76.
VLAN Commands VLAN Commands A VLAN is a group of ports that can be located anywhere in the network, but communicate as though they belong to the same physical segment. This section describes commands used to create VLAN groups, add port members, specify how VLAN tagging is used, and enable automatic VLAN registration for the selected interface.
Command Line Interface Example Console(config)#vlan database Console(config-vlan)# Related Commands show vlan (4-141) vlan This command configures a VLAN. Use the no form to restore the default settings or delete a VLAN. Syntax vlan vlan-id [name vlan-name] media ethernet [state {active | suspend}] no vlan vlan-id [name | state] • • • • vlan-id - ID of configured VLAN. (Range: 1-4093, no leading zeroes) name - Keyword to be followed by the VLAN name. vlan-name - ASCII string from 1 to 32 characters.
VLAN Commands Configuring VLAN Interfaces Command Function Mode interface vlan Enters interface configuration mode for a specified VLAN IC Page switchport mode Configures VLAN membership mode for an interface IC 4-138 switchport acceptable-frame-types Configures frame types to be accepted by an interface IC 4-138 switchport ingress-filtering Enables ingress filtering on an interface IC 4-139 switchport native vlan Configures the PVID (native VLAN) of an interface IC 4-140 switchport
Command Line Interface switchport mode This command configures the VLAN membership mode for a port. Use the no form to restore the default. Syntax switchport mode {trunk | hybrid} no switchport mode • • trunk - Specifies a port as an end-point for a VLAN trunk. A trunk is a direct link between two switches, so the port transmits tagged frames that identify the source VLAN. However, note that frames belonging to the port’s default VLAN (i.e., associated with the PVID) are sent untagged.
VLAN Commands Command Usage When set to receive all frame types, any received frames that are untagged are assigned to the default VLAN. Example The following example shows how to restrict the traffic received on port 1 to tagged frames: Console(config)#interface ethernet 1/1 Console(config-if)#switchport acceptable-frame-types tagged Console(config-if)# Related Commands switchport mode (4-138) switchport ingress-filtering This command enables ingress filtering for an interface.
Command Line Interface switchport native vlan This command configures the PVID (i.e., default VLAN ID) for a port. Use the no form to restore the default. Syntax switchport native vlan vlan-id no switchport native vlan vlan-id - Default VLAN ID for a port.
VLAN Commands Command Mode Interface Configuration (Ethernet, Port Channel) Command Usage • • • • • A port, or a trunk with switchport mode set to hybrid, must be assigned to at least one VLAN as untagged. If a trunk has switchport mode set to trunk (i.e., 1Q Trunk), then you can only assign an interface to VLAN groups as a tagged member. Frames are always tagged within the switch.
Command Line Interface Default Setting Shows all VLANs.
Configuring Private VLANs Command Usage A Private VLAN allows modification of the default VLAN to provide port-based security and isolation between ports within the VLAN. Data traffic on the downlink ports can only be forwarded to, and from, the uplink port. Private VLANs and normal VLANs can exist simultaneously within the same switch. Example This example globally enables private vlan, and then configures ports 13 and 14 as uplink ports, and ports 1-8 as downlink ports.
Command Line Interface Bridge Extension Commands This section describes how to display default configuration settings for the Bridge Extension MIB. Command Function Mode Page show bridge-ext Shows the global bridge extension configuration PE 4-144 show bridge-ext This command shows the configuration for bridge extension commands.
Priority Commands Priority Commands The commands described in this section allow you to specify which data packets have greater precedence when traffic is buffered in the switch due to congestion. This switch supports CoS with four priority queues for each port. Data packets in a port’s high-priority queue will be transmitted before those in the lower-priority queues.
Command Line Interface Command Usage • The precedence for priority mapping is IP Port, IP Precedence or IP DSCP, and default switchport priority. • The default priority applies for an untagged frame received on a port set to accept all frame types (i.e, receives both untagged and tagged frames). This priority does not apply to IEEE 802.1Q VLAN tagged frames. If the incoming frame is an IEEE 802.1Q VLAN tagged frame, the IEEE 802.1p User Priority bits will be used.
Priority Commands Command Usage You can set the switch to service the queues based on a strict rule that requires all traffic in a higher priority queue to be processed before lower priority queues are serviced, or use Weighted Round-Robin (WRR) queuing that specifies a relative weight of each queue. WRR uses a predefined relative weight for each queue that determines the percentage of service time the switch services each queue before moving on to the next queue.
Command Line Interface queue cos-map This command assigns class of service (CoS) values to the priority queues (i.e., hardware output queues 0 - 3). Use the no form set the CoS map to the default values. Syntax queue cos-map queue_id [cos1 ... cosn] no queue cos-map • • • queue_id - The ID of the priority queue. Ranges are 0 to 4, where 4 is the highest priority queue. cos1 .. cosn - The CoS values that are mapped to the queue ID. It is a space-separated list of numbers.
Priority Commands show queue mode This command shows the current queue mode. Default Setting None Command Mode Privileged Exec Example Console#sh queue mode Wrr status: Enabled Console# show queue bandwidth This command displays the weighted round-robin (WRR) bandwidth allocation for the eight priority queues.
Command Line Interface Command Mode Privileged Exec Example onsole#show queue cos-map ethernet 1/1 Information of Eth 1/1 Traffic Class : 0 1 2 3 4 5 6 7 Priority Queue: 0 0 0 1 1 2 3 2 Console# Priority Commands (Layer 3 and 4) Command Function Mode map ip precedence Enables IP precedence class of service mapping GC Page 4-150 map ip precedence Maps IP precedence value to a class of service IC 4-151 map ip dscp Enables IP DSCP class of service mapping GC 4-151 map ip dscp Maps IP DSCP valu
Priority Commands map ip precedence (Interface Configuration) This command sets IP precedence priority (i.e., IP Type of Service priority). Use the no form to restore the default table. Syntax map ip precedence ip-precedence-value cos cos-value no map ip precedence • • precedence-value - 3-bit precedence value. (Range: 0-7) cos-value - Class-of-Service value (Range: 0-7) Default Setting The list below shows the default priority mapping.
Command Line Interface Command Mode Global Configuration Command Usage • • The precedence for priority mapping is IP Port, IP Precedence or IP DSCP, and default switchport priority. IP Precedence and IP DSCP cannot both be enabled. Enabling one of these priority types will automatically disable the other type. Example The following example shows how to enable IP DSCP mapping globally: Console(config)#map ip dscp Console(config)# map ip dscp (Interface Configuration) This command sets IP DSCP priority (i.
Priority Commands • • DSCP priority values are mapped to default Class of Service values according to recommendations in the IEEE 802.1p standard, and then subsequently mapped to the eight hardware priority queues. This command sets the IP DSCP priority for all interfaces.
Command Line Interface show map ip precedence This command shows the IP precedence priority map. Syntax show map ip precedence interface interface • ethernet unit/port - unit - This is device 1. - port - Port number.
Priority Commands Default Setting None Command Mode Privileged Exec Example Console#show map ip dscp ethernet 1/1 DSCP mapping status: disabled Port DSCP COS --------- ---- --Eth 1/ 1 0 0 Eth 1/ 1 1 0 Eth 1/ 1 2 0 Eth 1/ 1 3 0 . . . Eth 1/ 1 61 0 Eth 1/ 1 62 0 Eth 1/ 1 63 0 Console# Related Commands map ip dscp (Global Configuration) (4-151) map ip dscp (Interface Configuration) (4-152) show map ip port Use this command to show the IP port priority map.
Command Line Interface Example The following shows that HTTP traffic has been mapped to CoS value 0: Console#show map ip port TCP port mapping status: disabled Port Port no. COS --------- -------- --Eth 1/ 5 80 0 Console# Related Commands map ip port (Interface Configuration) (4-153) Multicast Filtering Commands This switch uses IGMP (Internet Group Management Protocol) to query for any attached hosts that want to receive a specific multicast service.
Multicast Filtering Commands Default Setting Enabled Command Mode Global Configuration Example The following example enables IGMP snooping. Console(config)#ip igmp snooping Console(config)# ip igmp snooping vlan static This command adds a port to a multicast group. Use the no form to remove the port.
Command Line Interface Default Setting IGMP Version 2 Command Mode Global Configuration Command Usage All systems on the subnet must support the same version. If there are legacy devices in your network that only support Version 1, you will also have to configure this switch to use Version 1. Some commands are only enabled for IGMPv2, including ip igmp query-max-response-time and ip igmp query-timeout.
Multicast Filtering Commands show mac-address-table multicast This command shows known multicast addresses. Syntax show mac-address-table multicast [vlan vlan-id] [user | igmp-snooping] • • • vlan-id - VLAN ID (1 to 4094) user - Display only the user-configured multicast entries. igmp-snooping - Display only entries learned through IGMP snooping. Default Setting None Command Mode Privileged Exec Command Usage Member types displayed include IGMP or USER, depending on selected options.
Command Line Interface ip igmp snooping querier This command enables the switch as an IGMP querier. Use the no form to disable it. Syntax [no] ip igmp snooping querier Default Setting Enabled Command Mode Global Configuration Command Usage If enabled, the switch will serve as querier if elected. The querier is responsible for asking hosts if they want to receive multicast traffic.
Multicast Filtering Commands Example The following shows how to configure the query count to 10: Console(config)#ip igmp snooping query-count 10 Console(config)# Related Commands ip igmp snooping query-max-response-time (4-161) ip igmp snooping query-interval This command configures the query interval. Use the no form to restore the default. Syntax ip igmp snooping query-interval seconds no ip igmp snooping query-interval seconds - The frequency at which the switch sends IGMP host-query messages.
Command Line Interface Command Usage • • The switch must be using IGMPv2 for this command to take effect. This command defines the time after a query, during which a response is expected from a multicast client. If a querier has sent a number of queries defined by the ip igmp snooping query-count, but a client has not responded, a countdown timer is started using an initial value set by this command.
Multicast Filtering Commands Related Commands ip igmp snooping version (4-157) Static Multicast Routing Commands Command Function Mode Page ip igmp snooping vlan mrouter Adds a multicast router port GC 4-163 show ip igmp snooping mrouter Shows multicast router ports PE 4-164 ip igmp snooping vlan mrouter This command statically configures a multicast router port. Use the no form to remove the configuration.
Command Line Interface show ip igmp snooping mrouter This command displays information on statically configured and dynamically learned multicast router ports. Syntax show ip igmp snooping mrouter [vlan vlan-id] vlan-id - VLAN ID (Range: 1-4093) Default Setting Displays multicast router ports for all configured VLANs. Command Mode Privileged Exec Command Usage Multicast router port types displayed include Static or Dynamic.
IP Interface Commands ip address This command sets the IP address for the currently selected VLAN interface. Use the no form to restore the default IP address. Syntax ip address {ip-address netmask | bootp | dhcp} no ip address • • • • ip-address - IP address netmask - Network mask for the associated IP subnet. This mask identifies the host address bits used for routing to specific subnets. bootp - Obtains IP address from BOOTP. dhcp - Obtains IP address from DHCP. Default Setting IP address: 0.0.0.
Command Line Interface ip default-gateway This command establishes a static route between this switch and devices that exist on another network segment. Use the no form to remove the static route. Syntax ip default-gateway gateway no ip default-gateway gateway - IP address of the default gateway Default Setting No static route is established. Command Mode Global Configuration Command Usage A gateway must be defined if the management station is located in a different IP segment.
IP Interface Commands show ip redirects This command shows the default gateway configured for this device. Default Setting None Command Mode Privileged Exec Example Console#show ip redirects ip default gateway 10.1.0.254 Console# Related Commands ip default-gateway (4-166) ping This command sends ICMP echo request packets to another node on the network. Syntax ping host [count count][size size] • • • host - IP address or IP alias of the host. count - Number of packets to send.
Command Line Interface Example Console#ping 10.1.0.9 Type ESC to abort. PING to 10.1.0.9, by 5 32-byte payload ICMP packets, timeout is 5 seconds response time: 10 ms response time: 10 ms response time: 10 ms response time: 10 ms response time: 0 ms Ping statistics for 10.1.0.
Appendix A: Software Specifications Software Features Authentication Local, RADIUS, TACACS, Port (802.1x), HTTPS, SSH, Port Security DHCP Client Port Configuration 1000BASE-T: 10/100/1000 Mbps, half/full duplex 1000BASE-SX/LX: 1000 Mbps, full duplex Flow Control Full Duplex: IEEE 802.
Software Specifications Management Features In-Band Management Telnet, Web-based HTTP or HTTPS, SNMP manager, or Secure Shell Out-of-Band Management RS-232 DB-9 console port Software Loading TFTP in-band or XModem out-of-band SNMP Management access via MIB database Trap management to specified hosts RMON Groups 1, 2, 3, 9 (Statistics, History, Alarm, Event) Standards IEEE 802.3 Ethernet, IEEE 802.3u Fast Ethernet IEEE 802.3x Full-duplex flow control (ISO/IEC 8802-3) IEEE 802.3z Gigabit Ethernet, IEEE 802.
Management Information Bases Management Information Bases Bridge MIB (RFC 1493) Entity MIB (RFC 2737) Ethernet MIB (RFC 2665) Ether-like MIB (RFC 1643) Extended Bridge MIB (RFC 2674) Extensible SNMP Agents MIB (RFC 2742) Forwarding Table MIB (RFC 2096) IGMP MIB (RFC 2933) Interface Group MIB (RFC 2233) Interfaces Evolution MIB (RFC 2863) IP Multicasting related MIBs MAU MIB (RFC 2668) MIB II (RFC 1213) Port Access Entity MIB (IEEE 802.
Software Specifications A-4
Appendix B: Troubleshooting Troubleshooting Chart Symptom Action Cannot connect using Telnet, • Be sure you have configured the agent with a valid IP address, subnet Web browser, or SNMP mask and default gateway. software • If you are trying to connect to the agent via the IP address for a tagged VLAN group, your management station must include the appropriate tag in its transmitted frames.
Troubleshooting B-2
Glossary Boot Protocol (BOOTP) BOOTP is used to provide bootup information for network devices, including IP address information, the address of the TFTP server that contains the devices system files, and the name of the boot file. Class of Service (CoS) CoS is supported by prioritizing packets based on the required level of service, and then placing them in the appropriate output queue.
Glossary GARP VLAN Registration Protocol (GVRP) Defines a way for switches to exchange VLAN information in order to register necessary VLAN members on ports along the Spanning Tree so that VLANs defined in each switch can work automatically over a Spanning Tree network.
Glossary IEEE 802.3x Defines Ethernet frame start/stop requests and timers used for flow control on full-duplex links. IGMP Snooping Listening to IGMP Query and IGMP Report packets transferred between IP Multicast Routers and IP Multicast host groups to identify IP Multicast group members. IGMP Query On each subnetwork, one IGMP-capable device will act as the querier — that is, the device that asks all hosts to report on the IP multicast groups they wish to join or to which they already belong.
Glossary Management Information Base (MIB) An acronym for Management Information Base. It is a set of database objects that contains information about a specific device. Multicast Switching A process whereby the switch filters incoming multicast frames for services for which no attached host has registered, or forwards them to all ports contained within the designated multicast VLAN group. Network Time Protocol (NTP) NTP provides the mechanisms to synchronize time across the network.
Glossary Remote Authentication Dial-in User Service (RADIUS) RADIUS is a logon authentication protocol that uses software running on a central server to control access to RADIUS-compliant devices on the network. Remote Monitoring (RMON) RMON provides comprehensive network monitoring capabilities. It eliminates the polling required in standard SNMP, and can set alarms on a variety of traffic conditions, including specific error types.
Glossary Transmission Control Protocol/Internet Protocol (TCP/IP) Protocol suite that includes TCP as the primary transport protocol, and IP as the network layer protocol. Trivial File Transfer Protocol (TFTP) A TCP/IP protocol commonly used for software downloads. User Datagram Protocol (UDP) UDP provides a datagram mode for packet-switched communications. It uses IP as the underlying transport mechanism to provide access to IP-like services.
Index Symbols 3-25 Numerics 802.
Index RADIUS server 3-25, 4-63 TACACS+ client 3-25, 4-67 TACACS+ server 3-25, 4-67 logon authentication, sequence 3-26, 4-62 M main menu 3-3 Management Information Bases (MIBs) A-3 mirror port, configuring 3-49, 4-97 multicast filtering 3-106, 4-156 multicast groups 3-111, 4-159 displaying 4-159 static 3-111, 4-157, 4-159 multicast services configuring 3-112, 4-157 displaying 3-111, 4-159 multicast, static router port 3-110, 4-163 P password, line 4-11 passwords 2-4 administrator setting 3-24, 4-24 path c
Index startup files creating 3-16, 4-57 displaying 3-15, 4-50 setting 3-15, 4-61 static addresses, setting 3-70, 4-120 statistics port 3-51, 4-94 STP 3-76, 4-124 STP Also see STA system clock, setting 3-18, 4-45 system software, downloading from server 3-15, 4-57 T TACACS+, logon authentication 3-25, 4-67 time, setting 3-18, 4-45 traffic class weights 3-100, 4-147 trap manager 2-7, 3-22, 4-80 troubleshooting C-1 trunk configuration 3-44, 4-100 LACP 3-46, 4-101 static 3-45, 4-101 U upgrading software 3-15,
Index Index-4
VS4512 VS4512DC E112003-R01 150000041800A
