Manual

ManualsBrandsAsus ManualsCommunicationGigaX3124

GigaX3124

CLI Command Reference

Layer 3 Switch

Summary of content (326 pages)

PAGE 1
GigaX3124 Layer 3 Switch CLI Command Reference
PAGE 2
E3332 July 2007 V1 No part of this manual, including the products and software described in it, may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means, except documentation kept by the purchaser for backup purposes, without the express written permission of ASUSTeK COMPUTER INC. (ASUS).
PAGE 3
Table of content 1 Getting Started with the CLI.................................................... 1 1.1 Command Usage Basics.................................................................. 1 1.2 Command-Line Error Messages....................................................... 7 1.3 Accessing the CLI............................................................................. 7 1.4 Saving Configuration Changes.........................................................
PAGE 4
ii 2.20 quit.................................................................................................. 16 2.21 reboot.............................................................................................. 16 2.22 reload default-config file.................................................................. 17 2.23 show arp......................................................................................... 17 2.24 show arp host ADDRSS...............................................
PAGE 5
2.49 tracelog add (dhcp-relay | dhcp-snooping | dot1x | gvrp | igmpsnooping | lacp | stp | switch).......................................................... 26 2.50 tracelog level (critical | high | low ).................................................. 27 2.51 traceroute IPADDR......................................................................... 27 2.52 user add ACCOUNT PASSWORD.................................................. 27 2.53 user delete USERNAME.....................................
PAGE 6
4.1 name VLANAME............................................................................. 38 4.2 show vlan [VLANID]........................................................................ 38 4.3 show vlan name VLANAME............................................................ 38 4.4 switchport access vlan <1-3000>.................................................... 39 4.5 switchport mode (access|trunk)...................................................... 39 4.
PAGE 7
.8 clear mac-address-table vlan <1-3000>......................................... 50 7.9 mac-address-table aging-time <10-1000000>................................ 50 7.10 mac-address-table multicast MACADDR <1-3000> interface IFLIST.............................................................. 51 7.11 mac-address-table static MACADDR <1-3000> IFNAME............... 52 7.12 show mac-address-table................................................................. 52 7.
PAGE 8
.12 show ip igmp snooping session...................................................... 62 8.13 show ip igmp snooping vlan [<1-3000>]......................................... 63 9 Port Mirroring Configuration:................................................ 64 9.1 mirror session <1-2> destination IFNAME...................................... 64 9.2 mirror session <1-2> source IFLIST (both| rx| tx)........................... 64 9.3 show mirror session.................................................
PAGE 9
[IFNAME]........................................................................................ 76 12.12 (permit|deny) host MACADDR host MACADDR [IFNAME]............ 77 12.13 (permit|deny) host MACADDR host MACADDR (cos <0-7> | vlan <1-4094>) [IFNAME]....................................................................... 78 12.14 (permit|deny) host MACADDR host MACADDR . .vlan <1-4094> cos <0-7> [IFNAME].............................................................................. 79 12.
PAGE 10
13 ACL: Layer 3 Packet Filtering Configuration..................... 92 viii 13.1 access-list (<1-99>|<1300-1999>) (deny|permit) IPADDR MASK [IFNAME]........................................................................................ 92 13.2 access-list (<1-99>|<1300-1999>) (deny|permit) host IPADDR [IFNAME]........................................................................................ 92 13.3 access-list (<1-99>|<1300-1999>) (deny|permit) any [IFNAME]..... 93 13.
PAGE 11
13.18 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK host PADDR <0-255> code <0-255> [IFNAME]................ 108 13.19 access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) host IPADDR IPADDR MASK [IFNAME]........... 109 13.20 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host IPADDR [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME].......................................................................................110 13.
PAGE 12
13.35 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any [IFNAME]........................... 124 13.36 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK [eq] [<0-65535>] host IPADDR [IFNAME]........... 125 13.37 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK host IPADDR [eq] [<0-65535>] [IFNAME]........... 126 13.
PAGE 13
.53 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK host IPADDR <0-255> [IFNAME]....................................... 141 13.54 access-list (<100-199>|<2000-2699>) (deny|permit) icmp host IPADDR IPADDR MASK <0-255> [IFNAME]................................ 142 13.55 access-list (<100-199>|<2000-2699>) (deny|permit) icmp host IPADDR host IPADDR <0-255> [IFNAME].................................... 143 13.
PAGE 14
[IFNAME]...................................................................................... 156 13.75 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME]........................................................... 157 13.76 (permit|deny) icmp host IPADDR host IPADDR [<0-255>] code [<0-255>] [IFNAME]...................................................................... 158 13.77 (permit|deny) (ip|tcp|udp|icmp) IPADDR MASK IPADDR MASK [IFNAME].....................
PAGE 15
13.92 (permit|deny) (tcp|udp) IPADDR MASK IPADDR MASK [eq] [<0-65535>] [IFNAME].................................................................. 171 13.93 (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] IPADDR MASK [IFNAME]........................................................................... 172 13.94 (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any [IFNAME]...................................................................................... 173 13.
PAGE 16
[IFNAME]...................................................................................... 185 13.111 (permit|deny) icmp host IPADDR IPADDR MASK <0-255> [IFNAME]...................................................................................... 186 13.112 (permit|deny) icmp IPADDR MASK host IPADDR <0-255> [IFNAME]...................................................................................... 187 13.113 (permit|deny) icmp any host IPADDR <0-255> [IFNAME]............ 188 13.
PAGE 17
15.9 qos egress bandwidth <64-1048576>........................................... 199 15.10 qos ingress bandwidth <64-1048576>.......................................... 199 16 Policy Map Configuration.................................................. 200 16.1 policy-map POLICYMAP............................................................... 200 16.2 class CLASSMAP......................................................................... 200 16.3 match access-group ACLNAME...........................
PAGE 18
17.11 spanning-tree forward-time <4-30>............................................... 210 17.12 spanning-tree hello-time <1-10>................................................... 210 17.13 spanning-tree link-type (auto| point-to-point| shared)....................211 17.14 spanning-tree max-age <6-40>......................................................211 17.15 spanning-tree mode (mst| pvst| rapid-pvst)....................................211 17.16 spanning-tree mst <1-15> cost <1-200000000>....
PAGE 19
GigaX3124 Layer3 Switch CLI Command Reference 18.12 show dot1x.................................................................................... 222 18.13 show dot1x interface IFNAME...................................................... 222 18.14 show dot1x radius......................................................................... 223 18.15 show dot1x user............................................................................ 223 19 Port Security Configuration:..........................
PAGE 20
GigaX3124 Layer3 Switch CLI Command Reference 20.7 rmon event <1-65536> description NAME trap COMMUNITY [OWNER]...................................................................................... 233 20.8 rmon event <1-65536> description NAME log trap COMMUNITY [OWNER]...................................................................................... 234 20.9 rmon history <1-65536> IFNAME [OWNER]................................ 234 20.10 rmon history <1-65536> IFNAME buckets <1-100> [OWNER]....
PAGE 21
GigaX3124 Layer3 Switch CLI Command Reference 20.33 snmp-server group WORD v3 auth read WORD write WORD notify WORD........................................................................................... 245 20.34 snmp-server group WORD v3 noauth........................................... 246 20.35 snmp-server group WORD v3 noauth read WORD...................... 246 20.36 snmp-server group WORD v3 noauth read WORD write WORD......................................................................
PAGE 22
GigaX3124 Layer3 Switch CLI Command Reference 22.3 ip route A.B.C.D A.B.C.D (A.B.C.D|INTERFACE) <1-255>.......... 260 22.4 ip route A.B.C.D/M (A.B.C.D|INTERFACE)................................... 260 22.5 ip route A.B.C.D/M (A.B.C.D|INTERFACE) <1-255>.................... 261 22.6 show ip route ............................................................................... 261 22.7 show ip route A.B.C.D/M............................................................... 262 22.
PAGE 23
GigaX3124 Layer3 Switch CLI Command Reference 24.20 show ip rip status.......................................................................... 272 25 OSPF related Configuration.............................................. 273 25.1 area (A.B.C.D| <0-4294967295>) authentication.......................... 273 25.2 area (A.B.C.D| <0-4294967295>) authentication message-digest............................................................................. 273 25.3 area (A.B.C.
PAGE 24
GigaX3124 Layer3 Switch CLI Command Reference xxii 25.20 default-information originate (metric <0-16777214> | metric-type (1|2))............................................................................................. 284 25.21 default-information originate always............................................. 285 25.22 default-information originate always (metric <0-16777214> | metrictype (1|2))...................................................................................... 285 25.
PAGE 25
GigaX3124 Layer3 Switch CLI Command Reference summary) (self-originate| A.B.C.D| adv-router A.B.C.D)............... 295 25.46 show ip ospf database (asbr-summary| external| network| router| summary) A.B.C.D adv-router A.B.C.D......................................... 296 25.47 show ip ospf interface [IFNAME]................................................. 296 25.48 show ip ospf neighbor................................................................... 297 25.49 show ip ospf route...................
PAGE 26
GigaX3124 Layer3 Switch CLI Command Reference 1 Getting Started with the CLI This chapter provides information that you should know before using the ASUS GigaX Switch command-line interface (CLI). If you have never used GigaX Switch, take a few minutes to read this chapter before reading the rest of this guide.
PAGE 27
GigaX3124 Layer3 Switch CLI Command Reference • Config-vlan • Mac access-list extended • IP standard access-list • IP extended access-list • Policy-map configuration • Policy-map-class configuration • Config-router When you start a session on the switch, you begin in user mode, often called user EXEC mode, which has only a limited subset of the commands. To access all commands and modes, you must first enter privileged EXEC mode.
PAGE 28
GigaX3124 Layer3 Switch CLI Command Reference Command mode Access method Global configuration From privileged EXEC ASUS mode, enter the (config)# configure command. Interface configuration From global ASUS (configconfiguration mode, if)# specify an interface by entering the interface command followed by an interface identification. Config-vlan Mac accesslist extended IP standard access-list IP extended access-list Prompt Exit or Access Next Mode.
PAGE 29
GigaX3124 Layer3 Switch CLI Command Reference C o m m a n d Access method mode P o l i c y - m a p In global configuraconfiguration tion mode, enter the Plocy-map NAME command. Prompt Exit or Access Next Mode. ASUS(config- To exit to global pmap)# configuration mode, enter the exit command. To return to privileged EXEC mode, enter the end command, or press Ctrl-Z. To enter the Policy-map-class configuration mode, enter the class-map NAME command.
PAGE 30
GigaX3124 Layer3 Switch CLI Command Reference 1.1.3 Abbreviating Commands You can abbreviate commands and keywords to the number of characters that allow a unique abbreviation. For example, you can abbreviate the show command to sh or the show running-config command to sh ru. 1.1.4 Using the No and Default Forms of Commands Almost every configuration command has a no form. In general, use the no form to • Disable a feature or function. • Reset a command to its default values.
PAGE 31
GigaX3124 Layer3 Switch CLI Command Reference Note: No space before tabbing. ASUS# sh ru ASUS# show running-config • ? — List all commands available for a particular command mode. ASUS> ? • command ?—List of command keywords. ASUS> show ? • command keyword ?— List of command keyword arguments.
PAGE 32
GigaX3124 Layer3 Switch CLI Command Reference 1.2 Command-Line Error Messages Table 1-2 lists some error messages that you might encounter while using the CLI. Table 1-2: Common CLI Error Messages Error Message Ambiguous Command. Command incomplete. Unknown command. Meaning You did not enter enough characters for your switch to recognize the command. You did not enter all of the keywords or values required by this command. You entered the command incorrectly.
PAGE 33
GigaX3124 Layer3 Switch CLI Command Reference Step 3 Establish a connection with the switch by either • Connecting the switch console port to a management station. For information about connecting to the console port, refer to the switch user manual. • Using any Telnet TCP/IP package from a remote management station. The switch must have network connectivity with the Telnet client, and the switch must have an enable secret password configured.
PAGE 34
GigaX3124 Layer3 Switch CLI Command Reference 2 System Management Configuration 2.1 archive download-sw /overwrite tftp: URL Syntax archive download-sw /overwrite tftp: URL Parameters URL IP address[:Port]/File name Command Mode Privileged EXEC mode No/clear Show Default Description Use the archive download-sw /overwrite configuration command on the switch stack or standalone switch to download a new copy of software from a server and overwrite an existing image.
PAGE 35
GigaX3124 Layer3 Switch CLI Command Reference 2.3 arp timeout SECONDS Syntax arp timeout SECONDS Parameters SECONDS <1-86400>, age time in seconds Command Mode Global configuration mode No/clear no arp timeout Show show arp Default 14400 Description To show arp table. Examples ASUS(config)# arp timeout 3600 2.
PAGE 36
GigaX3124 Layer3 Switch CLI Command Reference No/clear no clock timezone Show show clock Default UTC Description To set time zone Examples ASUS# clock timezone CCT 8 0 2.6 configure terminal Syntax configure terminal Parameters terminal Configuration terminal Command Mode Privileged EXEC mode No/clear Show Default Description Use the write configuration command on the switch stack or standalone switch to configuration from vty interface. Examples ASUS# configure terminal 2.
PAGE 37
GigaX3124 Layer3 Switch CLI Command Reference 2.8 copy startup-config tftp: URL Syntax copy startup-config tftp: URL Parameters startup-config Copy from startup configuration ftp: Copy to tftp: file system URL IP address[:Port]/File name Command Mode Privileged EXEC mode No/clear Show Default Description Copy the file in Flash memory to the root directory of the TFTP server. Examples ASUS# copy startup-config tftp: 192.192.1.131/config.txt 2.
PAGE 38
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Privileged EXEC mode No/clear Show Default Description Copy the file in Flash memory to the root directory of the FTP server. Examples ASUS# copy startup-config ftp: asus:1234@192.192.1.131/ config.txt 2.
PAGE 39
GigaX3124 Layer3 Switch CLI Command Reference 2.13 disable Syntax Disable Parameters Command Mode Privileged EXEC mode No/clear Show Default Description This command turn off privileged mode and back to user mode Examples ASUS# disable 2.14 enable Syntax enable Parameters Command Mode User mode No/clear Show Default Description This command let user enter enable mode and turn on privileged mode command. Examples ASUS> enable 2.
PAGE 40
GigaX3124 Layer3 Switch CLI Command Reference Examples ASUS(config)# end 2.16 exit Syntax exit Parameters Command Mode User mode, Privileged EXEC mode, Global configuration mode, Interface mode No/clear Show Default Description This command let user exit current mode and down to previous mode. Examples ASUS(config)# exit 2.
PAGE 41
GigaX3124 Layer3 Switch CLI Command Reference Show Default Description This command lists all of the command of the operation mode. Examples ASUS# list 2.19 ping IPADDR Syntax ping IPADDR Parameters IPADDR Ping destination address Command Mode Privileged EXEC mode No/clear Show Default Description This command used to send echo messages to ping destination address Examples ASUS# ping 192.192.1.1 2.
PAGE 42
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Privileged EXEC mode No/clear Show Default Description Use this command to reboot the system. Examples ASUS# reboot 2.
PAGE 43
GigaX3124 Layer3 Switch CLI Command Reference 2.24 show arp host ADDRSS Syntax show arp host [ADDRESS] Parameters Command Mode ADDRESS host Privileged EXEC mode No/clear Show Default Description To show arp table for specified host. Examples ASUS# show arp host 192.192.1.254 ASUS# show arp host 00:05:5D:0C:5E:41 ASUS# show arp host vlan1 2.25 show cable-diagnostic interface [IFNAME] Syntax show cable-diagnostic interface [IFNAME] Parameters IFNAME interface name (e.q.
PAGE 44
GigaX3124 Layer3 Switch CLI Command Reference Description To show clock Examples ASUS# show clock 2.27 show cpu statistics Syntax show cpu statistics Parameters Command Mode Privileged EXEC mode No/clear clear cpu statistics Show Default Description To show cpu received and transmitted packet statistics Examples ASUS# show cpu statistics 2.
PAGE 45
GigaX3124 Layer3 Switch CLI Command Reference Description To show system monitor information Examples ASUS# show private health 2.30 show private led Syntax show private led Parameters Command Mode Privileged EXEC mode No/clear Show Default Description To show system led information Examples ASUS# show private led 2.
PAGE 46
GigaX3124 Layer3 Switch CLI Command Reference Description To show cpu loading history Examples ASUS# show processes cpu history 2.33 show running-config Syntax show running-config Parameters running-config current operating configuration Command Mode Privileged EXEC mode No/clear Show Default Description To show running-config fule. Examples ASUS# show running-config 2.
PAGE 47
GigaX3124 Layer3 Switch CLI Command Reference Default Description To show system log messages Examples ASUS# show syslog 2.36 show syslog configuration Syntax show syslog configuration Parameters Command Mode Privileged EXEC mode No/clear Show Default Description To show system log configuration Examples ASUS# show syslog configuration 2.37 show telnet who Syntax show telnet who Parameters Command Mode Privileged EXEC mode No/clear Show Default Description To show who is logged in.
PAGE 48
GigaX3124 Layer3 Switch CLI Command Reference Show Default Description To display system uptime Examples ASUS# show uptime 2.39 show version Syntax show version Parameters version display version information Command Mode Privileged EXEC mode No/clear Show Default Description To show firmware version. Examples ASUS# show version 2.
PAGE 49
GigaX3124 Layer3 Switch CLI Command Reference No/clear Show show syslog configuration Default disable Description To enable/disable system log protocol Examples ASUS(config)# syslog enable 2.
PAGE 50
GigaX3124 Layer3 Switch CLI Command Reference 2.44 syslog server-ip IPADDR Syntax syslog server-ip IPADDR Parameters IPADDR IP address Command Mode No/clear Global configuration mode no syslog server-ip IPADDR Show show syslog configuration Default Description To configure Syslog server IP address Examples ASUS(config)# syslog server-ip 192.168.1.1 2.
PAGE 51
GigaX3124 Layer3 Switch CLI Command Reference 2.47 telnet IPADDR Syntax telnet IPADDR Parameters IPADDR IP address of a remote system Command Mode User mode, Privileged EXEC mode No/clear Show Default Description To telnet a ip address Examples ASUS# telnet 192.192.1.11 2.
PAGE 52
GigaX3124 Layer3 Switch CLI Command Reference Show Default disable tracelog Description This command starts the system logging the function. Examples ASUS(config)# tracelog add dot1x 2.50 tracelog level (critical | high | low ) Syntax tracelog level (critical | high | low ) Parameters Command Mode Global configuration mode No/clear Show Default critical Description This command is to decide how much message will be printed. Examples ASUS(config)# tracelog level low 2.
PAGE 53
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Global configuration mode No/clear user delete USERNAME Show show user Default Description To add a new user account Examples ASUS# user add test test1234 2.53 user delete USERNAME Syntax user delete USERNAME Parameters ACCOUNT user name Command Mode Privileged EXEC mode No/clear Show show user Default Description To delete a user account Examples ASUS# user delete test 2.
PAGE 54
GigaX3124 Layer3 Switch CLI Command Reference 3 Port interface configuration: Type “interface IFNAME” in global configuration mode, then start to configure interface. 3.
PAGE 55
GigaX3124 Layer3 Switch CLI Command Reference 3.3 Syntax default-priority <0-7> Parameters <0-7> Cos priority Command Mode Interface configuration mode No/clear no default-priority Show show running-config Default Description The default is 0 Use the default priority configuration command on the switch stack or standalone switch to set default cos priority of the port. Examples ASUS(config-if)# default-priority 3 3.
PAGE 56
GigaX3124 Layer3 Switch CLI Command Reference Description Use the duplex interface configuration command on the switch stack or on a standalone switch to specify the duplex mode of operation for Fast Ethernet and Gigabit Ethernet ports. Use the no form of this command to return the port to its default value. Examples ASUS(config-if)# duplex full 3.
PAGE 57
GigaX3124 Layer3 Switch CLI Command Reference 3.8 interface IFNAME Syntax interface IFNAME Parameters IFNAME interface’s name Command Mode Global configuration mode No/clear Show show interface IFNAME Default Description This command changes the operation to interface command mode. Examples ASUS(config)# interface gi1/0/1 3.
PAGE 58
GigaX3124 Layer3 Switch CLI Command Reference Show show running-config Default Description This command sets the ip address for indicated L3 interface. Examples ASUS(config)# interface vlan2 ASUS(config-if)# ip address 192.192.1.11/24 3.
PAGE 59
GigaX3124 Layer3 Switch CLI Command Reference 3.13 max-frame-size <1518-9216> Syntax max-frame-size <1518-9216> Parameters <1518-9216> Maximum frame size in byte Command Mode Interface configuration mode No/clear no max-frame-size Show show interface IFNAME Default The default is 1518 bytes Description Use the max-frame-size command on the switch stack or standalone switch to set the received frame max size of the port. Examples ASUS(config-if)# max-frame-size 9216 3.
PAGE 60
GigaX3124 Layer3 Switch CLI Command Reference Description Use the command to set the port to be a routed port. A routed port is a L3 interface can configure IP and routing. Examples ASUS(config)# interface gi1/0/1 ASUS(config-if)# no switchport 3.16 shutdown Syntax shutdown Parameters Command Mode Interface configuration mode No/clear no shutdown Show show running-config Default Description The shutdown command for a port causes it to stop forwarding.
PAGE 61
GigaX3124 Layer3 Switch CLI Command Reference 3.18 show interface IFNAME Syntax Show interface IFNAME Parameters IFNAME interface’s name, ex: gi1/0/1 or vlan1 Command Mode Privileged EXEC mode No/clear Show Default Description This command shows the interface detail status. Examples ASUS# show interface gi1/0/1 ASUS# show interface vlan2 3.
PAGE 62
GigaX3124 Layer3 Switch CLI Command Reference Description Use the command to reset the port to L2 interface from routed port. Examples ASUS(config)# interface gi1/0/1 ASUS(config-if)# switchport 3.21 switchport multicast filter Syntax switchport multicast filter Parameters Command Mode Interface configuration mode No/clear no switchport multicast filter Show show interface IFNAME Default Description Use the command to filter unknown multicast traffic.
PAGE 63
GigaX3124 Layer3 Switch CLI Command Reference 4 IEEE 802.1Q VLAN Configuration 4.1 name VLANAME Syntax name VLANAME Parameters VLANNAME Characters name No/clear no name Command Mode Config-vlan mode Show show vlan [VLANID] Default “VLAN” + “VLANID”, ex: VLAN20 Description Use the name command to set the vlan name on the switch. Example ASUS(config)# vlan 20 ASUS(config-vlan)# name outvlan 4.
PAGE 64
GigaX3124 Layer3 Switch CLI Command Reference No/clear Show Default Description Use the show vlan user EXEC command to display the parameters for all configured VLANs or one VLAN (if the name is specified) on the switch. Example ASUS# show vlan name VLAN2 4.4 switchport access vlan <1-3000> Syntax switchport access vlan <1-3000> Parameters access Set 802.1Q access mode for the port vlan IEEE 802.
PAGE 65
GigaX3124 Layer3 Switch CLI Command Reference 4.6 switchport trunk native vlan <1-3000> Syntax switchport trunk native vlan <1-3000> Parameters trunk Set 802.1Q trunk mode for the port native Specify the native VLAN for the port vlan IEEE 802.
PAGE 66
GigaX3124 Layer3 Switch CLI Command Reference Description Use the switchport trunk allowed vlan configuration command on the switch stack or standalone switch to add or remove the allowed VLANs that can receive and send traffic on this interface in tagged format when in trunking mode Example ASUS(config-if)# switchport trunk allowed vlan add 2-20 4.
PAGE 67
GigaX3124 Layer3 Switch CLI Command Reference 5 GARP Configuration: 5.1 garp join-timer <1-100000000> Syntax garp join-timer <1-100000000> Parameters join-timer Join timer <1-100000000> the timer values Command Mode Interface configuration mode No/clear no garp join-timer Show show garp timer IFNAME Default The default is 20 (centi-seconds) Description This command sets the garp join-timer value in the indicated interface port. Example ASUS(config-if)# garp join-timer 30 5.
PAGE 68
GigaX3124 Layer3 Switch CLI Command Reference 5.3 garp leaveall-timer <1-100000000> Syntax garp leaveall-timer <1-100000000> Parameters leaveall-timer Leaveall timer <1-100000000> the timer values Command Mode Interface configuration mode No/clear no garp leaveall-timer Show show garp timer IFNAME Default The default is 1000 (centi-seconds) Description This command sets the garp leaveall-timer value in the indicated interface port.
PAGE 69
GigaX3124 Layer3 Switch CLI Command Reference 6 GVRP Configuration: 6.1 clear gvrp statistics [IFNAME] Syntax clear gvrp statistics [IFNAME] Parameters [IFNAME] Interface name Command Mode Global configuration mode No/clear Show Default Description Use the clear gvrp statistics configuration command on the switch stack or standalone switch to clear all the GVRP statistics information on one or all interfaces. Example ASUS(config)# clear gvrp statistics gi1/0/1 6.
PAGE 70
GigaX3124 Layer3 Switch CLI Command Reference Parameters disable Disable GVRP feature globally on the interface Command Mode enable Enable GVRP feature globally on the interface Interface configuration mode No/clear gvrp disable Show show gvrp Default The default is disabled on the interface. Description This command sets the GVRP feature enable or disable with the interface. Example ASUS(config-if)# gvrp enable 6.
PAGE 71
GigaX3124 Layer3 Switch CLI Command Reference No/clear Show Default Description To show gvrp global configuration. Example ASUS# show gvrp 6.6 show gvrp statistics [IFNAME] Syntax show gvrp statistics [IFNAME] Parameters statistics the GVRP statistics [IFNAME] Interface name Command Mode Privileged EXEC mode No/clear Show Default Description To show gvrp statistics IFNAME status. Example ASUS# show gvrp statistics [gi1/0/1] 6.
PAGE 72
GigaX3124 Layer3 Switch CLI Command Reference 7 MAC address management Configuration: 7.1 clear mac-address-table dynamic Syntax clear mac-address-table dynamic Parameters Command Mode Global configuration mode No/clear Show Default Description Use the write configuration command on the switch stack or standalone switch to clear dynamic L2 MAC addresses in the database. Example ASUS(config)# clear mac-address-table dynamic 7.
PAGE 73
GigaX3124 Layer3 Switch CLI Command Reference 7.3 clear mac-address-table dynamic mac MACADDR Syntax clear mac-address-table dynamic mac MACADDR Parameters MACADDR MAC address xxxx.xxxx.xxxx Command Mode Global configuration mode No/clear Show Default Description Use the write configuration command on the switch stack or standalone switch to clear dynamic L2 MAC addresses in the database for specified MAC address. Example ASUS(config)# clear mac0000.0000.0001 7.
PAGE 74
GigaX3124 Layer3 Switch CLI Command Reference 7.5 clear mac-address-table interface IFNAME Syntax clear mac-address-table interface IFNAME Parameters IFNAME Interface name Command Mode Global configuration mode No/clear Show Default Description Use the write configuration command on the switch stack or standalone switch to clear static and dynamic L2 MAC addresses in the database for specified interface name. Example ASUS(config)# clear mac-address-table interface gi1/0/1 7.
PAGE 75
GigaX3124 Layer3 Switch CLI Command Reference No/clear Show Default Description Use the write configuration command on the switch stack or standalone switch to clear multicast L2 MAC addresses in the database for specified MAC address and VLAN ID. Example ASUS(config)# clear mac-address-table multicast 0100.5e0a.0a0a 1 7.
PAGE 76
GigaX3124 Layer3 Switch CLI Command Reference Description Use the mac-address-table aging-time configuration command on the switch stack or on a standalone switch to set the length of time that a dynamic entry remains in the MAC address table after the entry is used or updated. The real aging-time is the triple of the command input radix number. Example ASUS(config)# mac-address-table aging-time 600 7.
PAGE 77
GigaX3124 Layer3 Switch CLI Command Reference 7.
PAGE 78
GigaX3124 Layer3 Switch CLI Command Reference 7.13 show mac-address-table aging-time Syntax show mac-address-table aging-time Parameters aging-time the length of time that a dynamic entry remains in the MAC address table Command Mode Privileged EXEC mode No/clear Show Default Description Use the show mac-address-table aging-time configuration command on the switch stack or on a standalone switch to show dynamic entry remains in the MAC address table after the entry is used or updated.
PAGE 79
GigaX3124 Layer3 Switch CLI Command Reference 7.15 show mac-address-table dynamic interface [IFNAME] Syntax show mac-address-table dynamic interface [IFNAME] Parameters [IFNAME] Interface name Command Mode Privileged EXEC mode No/clear Show Default Description Use the show mac-address-table dynamic user EXEC command to display dynamic unicast MAC address table entries only for specified interface name. Example ASUS# show mac-address-table dynamic interface gi1/0/1 7.
PAGE 80
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Privileged EXEC mode No/clear Show Default Description Use the show mac-address-table dynamic user EXEC command to display dynamic unicast MAC address table entries for specified VLAN ID. Example ASUS# show mac-address-table dynamic vlan 1 7.
PAGE 81
GigaX3124 Layer3 Switch CLI Command Reference command to display the Layer 2 multicast entries for specified group address and VLAN ID. Example ASUS# show mac-address-table multicast 0100.5e0a.0a0a 1 7.20 show mac-address-table static Syntax show mac-address-table static Parameters Command Mode Privileged EXEC mode No/clear Show Default Description Use the show mac-address-table static user EXEC command to display static unicast MAC address table entries.
PAGE 82
GigaX3124 Layer3 Switch CLI Command Reference 7.22 show mac-address-table static mac MACADDR Syntax show mac-address-table static mac MACADDR Parameters MACADDR MAC address Command Mode Privileged EXEC mode No/clear Show Default Description Use the show mac-address-table static user EXEC command to display static unicast MAC address table entries for specified MAC address. Example ASUS# show mac-address-table static mac 0000.0000.0001 7.
PAGE 83
GigaX3124 Layer3 Switch CLI Command Reference 8 IGMP Snooping Configuration: 8.1 ip igmp querier Syntax ip igmp querier Parameters Command Mode Global configuration mode No/clear no ip igmp querier Show show ip igmp querier Default The default is disable Description This command sets the IGMP querier function enabled globally. Example ASUS(config)# ip igmp querier 8.
PAGE 84
GigaX3124 Layer3 Switch CLI Command Reference No/clear no ip igmp querier query-interval Show show ip igmp querier Default The default is 125 seconds. Description This command sets the query-interval of IGMP querier function. Example ASUS(config)# ip igmp querier query-interval 250 8.
PAGE 85
GigaX3124 Layer3 Switch CLI Command Reference 8.
PAGE 86
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Global configuration mode No/clear no ip igmp snooping vlan <1-3000> Show show ip igmp snooping show ip igmp snooping vlan <1-3000> Default The default setting of IGMP snooping on each vlan is enabled after IGMP snooping function is globally enabled. Description This command sets the IGMP snooping function enabled on indicated vlan. Example ASUS(config)# ip igmp snooping vlan 2 8.
PAGE 87
GigaX3124 Layer3 Switch CLI Command Reference mrouter IGMP multicast router configurations interface Specify the multicast router interface IFNAME Interface name Command Mode Global configuration mode No/clear no ip igmp snooping vlan <1-3000> mrouter interface IFNAME Show show ip igmp snooping vlan <1-3000> Default None Description This command sets the IGMP snooping mrouted port interface on indicated vlan.
PAGE 88
GigaX3124 Layer3 Switch CLI Command Reference session information. Example ASUS# show ip igmp snooping session 8.
PAGE 89
GigaX3124 Layer3 Switch CLI Command Reference 9 Port Mirroring Configuration: 9.1 mirror session <1-2> destination IFNAME Syntax mirror session <1-2> destination IFNAME Parameters IFNAME Interface name Command Mode Global configuration mode No/clear no mirror session <1-2> Show show mirror session Default Not enable this function Description To set monitor port in mirror mode Example ASUS(config)# mirror session 1 destination gi1/0/1 9.
PAGE 90
GigaX3124 Layer3 Switch CLI Command Reference 9.3 show mirror session Syntax show mirror session Parameters Command Mode Privileged EXEC mode No/clear Show Default Description To display current mirror session configuration.
PAGE 91
GigaX3124 Layer3 Switch CLI Command Reference 10 Static Link Aggregation: 10.1 aggregation-link group <1-8> IFLIST Syntax Aggregation-link trunk <1-8> IFLIST Parameters <1-8> Trunk Group ID Command Mode Global configuration mode No/clear no aggregation-link group <1-8> show show aggregation-link group [GROUPID] Default Description Use the aggregation-link group configuration command on the switch stack or standalone switch to configure static link aggregation group.
PAGE 92
GigaX3124 Layer3 Switch CLI Command Reference Default Description Use the aggregation-link group configuration command on the switch stack or standalone switch to configure static link aggregation load balancing by using source-based or destination-based forwarding methods. Example ASUS(config)# aggregation-link group 1 load-balance src-mac 10.
PAGE 93
GigaX3124 Layer3 Switch CLI Command Reference 11 LACP Configuration: 11.
PAGE 94
GigaX3124 Layer3 Switch CLI Command Reference Description This command sets the Link Aggregation Control Protocol (LACP) operation delete for the aggregation-link group ports on the switch stack or on a standalone switch. Example ASUS(config)# lacp aggregation-link group 2 delete gi1/0/4 11.
PAGE 95
GigaX3124 Layer3 Switch CLI Command Reference 12 ACL: Layer 2 Packet Filtering Configuration 12.
PAGE 96
GigaX3124 Layer3 Switch CLI Command Reference 12.3 (permit|deny) any any [IFNAME] Syntax (permit|deny) any any [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 97
GigaX3124 Layer3 Switch CLI Command Reference No/clear no (permit|deny) any any (cos <0-7> | vlan <1-4094>) [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-mac-acl)# permit any any cos 2 [gi1/0/1] ASUS(config-mac-acl)# permit any any vlan 10 [gi1/0/1] 12.
PAGE 98
GigaX3124 Layer3 Switch CLI Command Reference 12.6 (permit|deny) MACADDR MASK any [IFNAME] Syntax (permit|deny) MACADDR MASK any [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject. MACADDR Source MAC address xxxx.xxxx.xxxx MASK Source MAC address mask xxxx.xxxx.
PAGE 99
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Egress interface name Command Mode Mac access-list extended mode No/clear no (permit|deny) MACADDR MASK any (cos <0-7> | vlan <1-4094>) [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-mac-acl)# permit 0000.0000.0001 0000.0000.
PAGE 100
GigaX3124 Layer3 Switch CLI Command Reference Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-mac-acl)# permit 0000.0000.0001 0000.0000.00ff any vlan 10 cost 2 [gi1/0/1] 12.9 (permit|deny) host MACADDR any [IFNAME] Syntax (permit|deny) host MACADDR any [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 101
GigaX3124 Layer3 Switch CLI Command Reference any any destination Mac address cos Class of Service <0-7> the priority value vlan <1-4094> VLAN ID [IFNAME] Egress interface name Command Mode Mac access-list extended mode No/clear (permit|deny) host MACADDR any (cos <0-7> | vlan <1-4094>) [IFNAME] Show show access-lists [ACLNAME] IEEE 802.
PAGE 102
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Egress interface name Command Mode Mac access-list extended mode No/clear (permit|deny) host MACADDR any vlan <1-4094> cos <0-7> [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-mac-acl)# permit host 0000.0000.0001 vlan 10 cos 2 any [gi1/0/2] 12.
PAGE 103
GigaX3124 Layer3 Switch CLI Command Reference 12.13 (permit|deny) host MACADDR host MACADDR (cos <0-7> | vlan <1-4094>) [IFNAME] Syntax (permit|deny) host MACADDR host MACADDR (cos <0-7> | vlan <1-4094>) [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject. host A single source host MACADDR Source MAC address xxxx.xxxx.xxxx host A single destination host MACADDR Destination MAC address xxxx.xxxx.
PAGE 104
GigaX3124 Layer3 Switch CLI Command Reference 12.14 (permit|deny) host MACADDR host MACADDR vlan <1-4094> cos <0-7> [IFNAME] Syntax (permit|deny) host MACADDR host MACADDR vlan <1-4094> cos <0-7> [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject. host A single source host MACADDR Source MAC address xxxx.xxxx.xxxx host A single destination host MACADDR Destination MAC address xxxx.xxxx.
PAGE 105
GigaX3124 Layer3 Switch CLI Command Reference deny Specify packets to reject. MACADDR Source MAC address xxxx.xxxx.xxxx MASK Source MAC address mask xxxx.xxxx.xxxx MACADDR Destination MAC address xxxx.xxxx.xxxx MASK Destination MAC address mask xxxx.xxxx.
PAGE 106
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Mac access-list extended mode No/clear no (permit|deny) MACADDR MASK MACADDR MASK (cos <0-7> | vlan <1-4094>) [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-mac-acl)# permit 0000.0000.0001 0000.0000.00ff 0000.0000.0002 0000.0000.00ff cos 2[gi1/0/2] ASUS(config-mac-acl)# permit 0000.
PAGE 107
GigaX3124 Layer3 Switch CLI Command Reference Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-mac-acl)# permit 0000.0000.0001 0000.0000.00ff 0000.0000.0002 0000.0000.00ff vlan 10 cos 2[gi1/0/2] 12.18 (permit|deny) host MACADDR MACADDR MASK [IFNAME] Syntax (permit|deny) host MACADDR MACADDR MASK [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 108
GigaX3124 Layer3 Switch CLI Command Reference host A single source host MACADDR Source MAC address xxxx.xxxx.xxxx MACADDR Destination MAC address xxxx.xxxx.xxxx MASK Destination MAC address mask xxxx.xxxx.
PAGE 109
GigaX3124 Layer3 Switch CLI Command Reference vlan IEEE 802.1Q VLAN <1-4094> VLAN ID cos Class of Service <0-7> the priority value [IFNAME] Egress interface name Command Mode Mac access-list extended mode No/clear no (permit|deny) host MACADDR MACADDR MASK vlan <1-4094> cos <0-7> [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped.
PAGE 110
GigaX3124 Layer3 Switch CLI Command Reference Examples ASUS(config-mac-acl)# permit 0000.0000.0001 0000.0000.00ff host 0000.0000.0002 [gi1/0/2] 12.22 (permit|deny) MACADDR MASK host MACADDR (cos <0-7> | vlan <1-4094>) [IFNAME] Syntax (permit|deny) MACADDR MASK host MACADDR (cos <0-7> | vlan <1-4094>) [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject. MACADDR Source MAC address xxxx.xxxx.xxxx MASK Source address mask xxxx.xxxx.
PAGE 111
GigaX3124 Layer3 Switch CLI Command Reference 12.23 (permit|deny) MACADDR MASK host MACADDR vlan <1-4094> cos <0-7> [IFNAME] Syntax (permit|deny) MACADDR MASK host MACADDR vlan <1-4094> cos <0-7> [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject. MACADDR Source MAC address xxxx.xxxx.xxxx MASK Source address mask xxxx.xxxx.xxxx host A single destination host MACADDR Destination MAC address xxxx.xxxx.
PAGE 112
GigaX3124 Layer3 Switch CLI Command Reference host A single destination host MACADDR Destination MAC address xxxx.xxxx.xxxx [IFNAME] Egress interface name Command Mode Mac access-list extended mode No/clear no (permit|deny) any host MACADDR [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-mac-acl)# permit any host 0000.0000.
PAGE 113
GigaX3124 Layer3 Switch CLI Command Reference Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-mac-acl)# permit any host 0000.0000.0002 cos 2 [gi1/0/1] ASUS(config-mac-acl)# permit any host 0000.0000.0002 vlan 10 [gi1/0/1] 12.
PAGE 114
GigaX3124 Layer3 Switch CLI Command Reference 12.27 (permit|deny) any MACADDR MASK [IFNAME] Syntax (permit|deny) any MACADDR MASK [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject. any any source MAC address MACADDR Destination MAC address xxxx.xxxx.xxxx MASK Destination MAC address mask xxxx.xxxx.
PAGE 115
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Egress interface name Command Mode Mac access-list extended mode No/clear no (permit|deny) any MACADDR MASK (cos <0-7> | vlan <1-4094>) [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-mac-acl)# permit any 0000.0000.0001 0000.0000.
PAGE 116
GigaX3124 Layer3 Switch CLI Command Reference Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-mac-acl)# permit any 0000.0000.0001 0000.0000.0000 vlan 10 cos 2 [gi1/0/2] 12.
PAGE 117
GigaX3124 Layer3 Switch CLI Command Reference 13 ACL: Layer 3 Packet Filtering Configuration 13.1 access-list (<1-99>|<1300-1999>) (deny|permit) IPADDR MASK [IFNAME] Syntax access-list (<1-99>|<1300-1999>) (deny|permit) IPADDR A.B.C.D [IFNAME] Parameters access-list Add an access list entry <1-99> standard IP access-list number <1300-1999> standard IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 118
GigaX3124 Layer3 Switch CLI Command Reference <1-99> standard IP access-list number <1300-1999> standard IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 119
GigaX3124 Layer3 Switch CLI Command Reference Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 99 permit any 13.
PAGE 120
GigaX3124 Layer3 Switch CLI Command Reference Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit ip 1.1.1.1 0.0.0.0 1.1.1.3 0.0.0.0 13.
PAGE 121
GigaX3124 Layer3 Switch CLI Command Reference (tcp|udp) IPADDR MASK [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit tcp 1.1.1.1 0.0.0.0 eq 21 1.1.1.3 0.0.0.0 eq 22 13.
PAGE 122
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit icmp 1.1.1.1 0.0.0.0 1.1.1.3 0.0.0.0 22 code 3 13.
PAGE 123
GigaX3124 Layer3 Switch CLI Command Reference Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit icmp 1.1.1.1 0.0.0.0 any 13.
PAGE 124
GigaX3124 Layer3 Switch CLI Command Reference 13.9 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK any <0-255> code <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK any <0-255> code <0-255> [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 125
GigaX3124 Layer3 Switch CLI Command Reference 13.10 access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) any IPADDR MASK [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) any IPADDR MASK [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 126
GigaX3124 Layer3 Switch CLI Command Reference 13.
PAGE 127
GigaX3124 Layer3 Switch CLI Command Reference 13.12 access-list (<100-199>|<2000-2699>) (deny|permit) icmp any IPADDR MASK <0-255> code <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp any IPADDR MASK <0-255> code <0-255> [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 128
GigaX3124 Layer3 Switch CLI Command Reference 13.13 access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) any any [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) any any [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 129
GigaX3124 Layer3 Switch CLI Command Reference 13.
PAGE 130
GigaX3124 Layer3 Switch CLI Command Reference 13.15 access-list (<100-199>|<2000-2699>) (deny|permit) icmp any any <0-255> code <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp any any <0-255> code <0-255> [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 131
GigaX3124 Layer3 Switch CLI Command Reference 13.16 access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) IPADDR MASK host IPADDR [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) IPADDR MASK host IPADDR [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 132
GigaX3124 Layer3 Switch CLI Command Reference 13.
PAGE 133
GigaX3124 Layer3 Switch CLI Command Reference Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit udp 1.1.1.1 0.0.0.0 eq 21 host 1.1.1.4 eq 22 13.
PAGE 134
GigaX3124 Layer3 Switch CLI Command Reference Examples ASUS(config)# access-list 100 permit icmp 1.1.1.1 0.0.0.0 host 1.1.1.4 2 code 3 13.
PAGE 135
GigaX3124 Layer3 Switch CLI Command Reference 13.
PAGE 136
GigaX3124 Layer3 Switch CLI Command Reference Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit tcp host 1.1.1.1 eq 21 1.1.1.4 0.0.0.0 eq 22 13.
PAGE 137
GigaX3124 Layer3 Switch CLI Command Reference Examples ASUS(config)# access-list 100 permit icmp host 1.1.1.1 1.1.1.4 0.0.0.0 2 code 3 13.
PAGE 138
GigaX3124 Layer3 Switch CLI Command Reference 13.
PAGE 139
GigaX3124 Layer3 Switch CLI Command Reference Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit icmp host 1.1.1.1 eq 21 host 1.1.1.4 eq 21 13.
PAGE 140
GigaX3124 Layer3 Switch CLI Command Reference Examples ASUS(config)# access-list 100 permit icmp host 1.1.1.1 host 1.1.1.4 3 code 3 13.
PAGE 141
GigaX3124 Layer3 Switch CLI Command Reference 13.
PAGE 142
GigaX3124 Layer3 Switch CLI Command Reference 13.27 access-list (<100-199>|<2000-2699>) (deny|permit) icmp any host IPADDR <0-255> code <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp any host IPADDR <0-255> code <0-255> [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 143
GigaX3124 Layer3 Switch CLI Command Reference 13.28 access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) host IPADDR any [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (ip|tcp|udp|icmp) host IPADDR any [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 144
GigaX3124 Layer3 Switch CLI Command Reference 13.
PAGE 145
GigaX3124 Layer3 Switch CLI Command Reference 13.30 access-list (<100-199>|<2000-2699>) (deny|permit) icmp host IPADDR any <0-255> code <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp host IPADDR any <0-255> code <0-255> [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 146
GigaX3124 Layer3 Switch CLI Command Reference 13.31 access-list (<1-99>|<1300-1999>) (deny|permit) IPADDR [IFNAME] Syntax access-list (<1-99>|<1300-1999>) (deny|permit) IPADDR [IFNAME] Parameters access-list Add an access list entry <1-99> Standard IP access-list number <2000-2699> Standard IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 147
GigaX3124 Layer3 Switch CLI Command Reference deny Specify packets to reject.
PAGE 148
GigaX3124 Layer3 Switch CLI Command Reference tcp Transmission Control Protocol udp User Datagram Protocol IPADDR Source address MASK Source wildcard bits eq <0-65535> Port number IPADDR Destination address MASK Destination wildcard bits [IFNAME] Egress interface name Command Mode Global configuration mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK [eq] [<0-65535>] IPADDR MASK [IFNAME] Show show access-lists [ACL
PAGE 149
GigaX3124 Layer3 Switch CLI Command Reference udp User Datagram Protocol IPADDR Source address MASK Source wildcard bits any eq <0-65535> Port number [IFNAME] Egress interface name Command Mode Global configuration mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK any [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Any destination host Match only packets on a given port numbe Default Description This command sp
PAGE 150
GigaX3124 Layer3 Switch CLI Command Reference MASK Source wildcard bits eq <0-65535> Port number any [IFNAME] Egress interface name Command Mode Global configuration mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any [IFNAME] Show show access-lists [ACLNAME] Match only packets on a given port numbe Any destination host Default Description This command specifies one or more conditions denied or permitted to decid
PAGE 151
GigaX3124 Layer3 Switch CLI Command Reference <0-65535> Port number host IPADDR Destination address [IFNAME] Egress interface name Command Mode Global configuration mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK [eq] [<0-65535>] host IPADDR [IFNAME] Show show access-lists [ACLNAME] A single destination host Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dr
PAGE 152
GigaX3124 Layer3 Switch CLI Command Reference eq Match only packets on a given port numbe <0-65535> Port number [IFNAME] Egress interface name Command Mode Global configuration mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) IPADDR MASK host IPADDR [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped.
PAGE 153
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Egress interface name Command Mode Global configuration mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any IPADDR MASK [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit tcp any 1.1.1.1 0.0.0.0 eq 21 13.
PAGE 154
GigaX3124 Layer3 Switch CLI Command Reference any any [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit tcp any any eq 21 13.
PAGE 155
GigaX3124 Layer3 Switch CLI Command Reference Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit tcp any eq 21 any 13.41 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any [eq] [<0-65535>] IPADDR MASK [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any [eq] [<0-65535>] IPADDR A.B.C.
PAGE 156
GigaX3124 Layer3 Switch CLI Command Reference 13.42 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any [eq] [<0-65535>] host IPADDR [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any [eq] [<0-65535>] host IPADDR [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 157
GigaX3124 Layer3 Switch CLI Command Reference 13.43 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any host IPADDR [eq] [<0-65535>] [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) any host IPADDR [eq] [<0-65535>] [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 158
GigaX3124 Layer3 Switch CLI Command Reference 13.
PAGE 159
GigaX3124 Layer3 Switch CLI Command Reference 13.
PAGE 160
GigaX3124 Layer3 Switch CLI Command Reference 13.46 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host IPADDR any [eq] [<0-65535>] [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host IPADDR any [eq] [<0-65535>] [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 161
GigaX3124 Layer3 Switch CLI Command Reference 13.47 access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host IPADDR [eq] [<0-65535>] any [IFNAME] 136 Syntax access-list (<100-199>|<2000-2699>) (deny|permit) (tcp|udp) host IPADDR [eq] [<0-65535>] any [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 162
GigaX3124 Layer3 Switch CLI Command Reference 13.
PAGE 163
GigaX3124 Layer3 Switch CLI Command Reference 13.
PAGE 164
GigaX3124 Layer3 Switch CLI Command Reference 13.50 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK IPADDR MASK <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK IPADDR MASK <0-255> [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 165
GigaX3124 Layer3 Switch CLI Command Reference 13.51 access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK any <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp IPADDR MASK any <0-255> [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 166
GigaX3124 Layer3 Switch CLI Command Reference any <0-255> [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 167
GigaX3124 Layer3 Switch CLI Command Reference deny Specify packets to reject.
PAGE 168
GigaX3124 Layer3 Switch CLI Command Reference IPADDR Source address IPADDR destination address MASK destination wildcard bits <0-255> ICMP message type [IFNAME] Egress interface name Command Mode Global configuration mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) icmp host IPADDR IPADDR MASK <0-255> [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is
PAGE 169
GigaX3124 Layer3 Switch CLI Command Reference <0-255> ICMP message type [IFNAME] Egress interface name Command Mode Global configuration mode No/clear no access-list (<100-199>|<2000-2699>) (deny|permit) icmp host IPADDR host IPADDR <0-255> [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit icmp host 10.0.0.
PAGE 170
GigaX3124 Layer3 Switch CLI Command Reference host IPADDR <0-255> [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config)# access-list 100 permit icmp any host 10.0.0.1 1 13.
PAGE 171
GigaX3124 Layer3 Switch CLI Command Reference 13.58 access-list (<100-199>|<2000-2699>) (deny|permit) icmp any IPADDR MASK <0-255> [IFNAME] Syntax access-list (<100-199>|<2000-2699>) (deny|permit) icmp any IPADDR MASK <0-255> [IFNAME] Parameters access-list Add an access list entry <100-199> Extended IP access-list number <2000-2699> Extended IP access-list number (expanded range) permit Specify packets to forward deny Specify packets to reject.
PAGE 172
GigaX3124 Layer3 Switch CLI Command Reference Parameters Standard ID, extended ID or ACLNAME Command Mode Interface configuration mode No/clear no ip access-group Show show ip access-group [IFNAME] Default Description This command attaches an IP access-list to an interface. Examples ASUS(config-if)# ip access-group 100 in 13.
PAGE 173
GigaX3124 Layer3 Switch CLI Command Reference ACLNAME an access-list name Command Mode Global configuration mode No/clear no ip access-list standard (<1-99>|<1300-1999>|ACLNAME) Show show access-lists [ACLNAME] Default Description This command defines an standard IP access list using a name or number, and enter access-list configuration mode. Examples ASUS(config)# ip access-list standard 99 13.
PAGE 174
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Egress interface name Command Mode IP standard access-list mode No/clear no (permit|deny) host IPADDR [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-std-acl)# permit host 10.0.0.1 [gi1/0/1] 13.
PAGE 175
GigaX3124 Layer3 Switch CLI Command Reference ip Any Internet Protocol tcp Transmission Control Protocol udp User Datagram Protocol icmp Internet Control Message Protocol any any source address any any destination address [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (ip|tcp|udp|icmp) any any [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or
PAGE 176
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) any [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp any eq 100 any eq 100 [gi1/0/1] 13.
PAGE 177
GigaX3124 Layer3 Switch CLI Command Reference 13.68 (permit|deny) (ip|tcp|udp|icmp) IPADDR MASK any [IFNAME] Syntax (permit|deny) (ip|tcp|udp|icmp) IPADDR MASK any [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 178
GigaX3124 Layer3 Switch CLI Command Reference IPADDR Source address MASK Source wildcard bits eq <0-65535> Port number any any destination address eq <0-65535> Port number [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Match only packets on a given port numbe Match only packets on a given port numbe Defa
PAGE 179
GigaX3124 Layer3 Switch CLI Command Reference Command Mode IP extended access-list mode No/clear no (permit|deny) icmp IPADDR MASK any [<0-255>] code [<0-255>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit icmp 10.0.1.0 0.0.0.255 any 12 code 12 [gi1/0/1] 13.
PAGE 180
GigaX3124 Layer3 Switch CLI Command Reference 13.72 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] any [eq] [<0-65535>] [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject. tcp Transmission Control Protocol udp User Datagram Protocol host A single source host IPADDR Source address.
PAGE 181
GigaX3124 Layer3 Switch CLI Command Reference Parameters permit Specify packets to forward deny Specify packets to reject. icmp Internet Control Message Protocol host A single source host IPADDR Source address.
PAGE 182
GigaX3124 Layer3 Switch CLI Command Reference host A single destination host IPADDR Destination address [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (ip|tcp|udp|icmp) host IPADDR host IPADDR [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit icmp host 10.0.0.
PAGE 183
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp host 10.0.0.1 eq 655 host 10.0.0.2 eq 65 [gi1/0/2] 13.
PAGE 184
GigaX3124 Layer3 Switch CLI Command Reference permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit icmp host 10.0.0.1 host 10.0.0.2 2 code 2 [gi1/0/1] 13.77 (permit|deny) (ip|tcp|udp|icmp) IPADDR MASK IPADDR MASK [IFNAME] Syntax (permit|deny) (ip|tcp|udp|icmp) IPADDR MASK IPADDR MASK [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 185
GigaX3124 Layer3 Switch CLI Command Reference 13.78 (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 186
GigaX3124 Layer3 Switch CLI Command Reference 13.79 (permit|deny) icmp IPADDR MASK IPADDR MASK <0-255> code <0-255> [IFNAME] Syntax (permit|deny) icmp IPADDR MASK IPADDR MASK <0-255> code <0-255> [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 187
GigaX3124 Layer3 Switch CLI Command Reference host A single source host ip Any Internet Protocol tcp Transmission Control Protocol udp User Datagram Protocol icmp Internet Control Message Protocol IPADDR Source address IPADDR Destination address MASK Destination wildcard bits [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (ip|tcp|udp|icmp) host IPADDR IPADDR MASK [IFNAME] Show show access-lists [ACLNAM
PAGE 188
GigaX3124 Layer3 Switch CLI Command Reference eq Match only packets on a given port numbe <0-65535> Port number IPADDR Destination address MASK Destination wildcard bits eq <0-65535> Port number [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Match only packets on a given port numbe Default Description
PAGE 189
GigaX3124 Layer3 Switch CLI Command Reference Command Mode IP extended access-list mode No/clear no (permit|deny) icmp host IPADDR IPADDR MASK <0-255> code <0-255> [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit icmp host 10.0.0.1 10.0.0.2 0.0.0.0 2 code 2 [gi1/0/2] 13.
PAGE 190
GigaX3124 Layer3 Switch CLI Command Reference permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp 10.0.0.1 0.0.0.0 host 10.0.0.2 [gi1/0/2] 13.84 (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 191
GigaX3124 Layer3 Switch CLI Command Reference 13.85 (permit|deny) icmp IPADDR MASK host IPADDR <0-255> code <0-255> [IFNAME] Syntax (permit|deny) icmp IPADDR MASK host IPADDR <0-255> code <0-255> [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 192
GigaX3124 Layer3 Switch CLI Command Reference tcp Transmission Control Protocol udp User Datagram Protocol icmp Internet Control Message Protocol any any source address host A single destination host IPADDR Destination address [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (ip|tcp|udp|icmp) any host IPADDR [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditio
PAGE 193
GigaX3124 Layer3 Switch CLI Command Reference eq Match only packets on a given port numbe <0-65535> Port number [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) any [eq] [<0-65535>] host IPADDR [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped.
PAGE 194
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit icmp any host 10.0.0.1 2 code 2 [gi1/0/2] 13.
PAGE 195
GigaX3124 Layer3 Switch CLI Command Reference 13.90 (permit|deny) (tcp|udp) any [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) any [eq] [<0-65535>] IPADDR MASK [eq] [<0-65535>] [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 196
GigaX3124 Layer3 Switch CLI Command Reference Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 197
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp|) IPADDR MASK IPADDR MASK [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp 10.0.0.1 0.0.0.0 10.0.0.2 0.0.0.0 eq 23 [gi1/0/1] 13.
PAGE 198
GigaX3124 Layer3 Switch CLI Command Reference Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp 10.0.0.1 0.0.0.0 eq 23 10.0.0.2 0.0.0.0 [gi1/0/1] 13.94 (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any [IFNAME] Syntax (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] any [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 199
GigaX3124 Layer3 Switch CLI Command Reference 13.95 (permit|deny) (tcp|udp) IPADDR MASK any [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) IPADDR MASK any [eq] [<0-65535>] [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 200
GigaX3124 Layer3 Switch CLI Command Reference tcp Transmission Control Protocol udp User Datagram Protocol IPADDR Source address MASK Source wildcard bits eq <0-65535> Port number host A single destination host IPADDR Destination address [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) IPADDR MASK [eq] [<0-65535>] host IPADDR [IFNAME] Show show access-lists [ACLNAME] Match only packets on a gi
PAGE 201
GigaX3124 Layer3 Switch CLI Command Reference eq Match only packets on a given port numbe <0-65535> Port number [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) IPADDR MASK host IPADDR [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped.
PAGE 202
GigaX3124 Layer3 Switch CLI Command Reference Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp any eq 2 10.0.0.1 0.0.0.0 [gi1/0/1] 13.99 (permit|deny) (tcp|udp) any IPADDR MASK [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) any IPADDR MASK [eq] [<0-65535>] [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 203
GigaX3124 Layer3 Switch CLI Command Reference 13.100 (permit|deny) (tcp|udp) any any [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) any any [eq] [<0-65535>] [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 204
GigaX3124 Layer3 Switch CLI Command Reference <0-65535> Port number any any destination address [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) any [eq] [<0-65535>] any [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp any eq 2 any [gi1/0/1] 13.
PAGE 205
GigaX3124 Layer3 Switch CLI Command Reference Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp any eq 2 host 10.0.0.2 [gi1/0/1] 13.
PAGE 206
GigaX3124 Layer3 Switch CLI Command Reference 13.104 (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] host IPADDR [IFNAME] Syntax (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] host IPADDR [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 207
GigaX3124 Layer3 Switch CLI Command Reference deny Specify packets to reject.
PAGE 208
GigaX3124 Layer3 Switch CLI Command Reference IPADDR Source address eq <0-65535> Port number IPADDR Destination address MASK Destination wildcard bits [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) host IPADDR [eq] [<0-65535>] IPADDR MASK [IFNAME] Show show access-lists [ACLNAME] Match only packets on a given port numbe Default Description This command specifies one or more conditions denied or permitted
PAGE 209
GigaX3124 Layer3 Switch CLI Command Reference <0-65535> Port number [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) (tcp|udp) host IPADDR IPADDR MASK [eq] [<0-65535>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp host 10.0.0.1 10.0.0.2 0.0.0.0 eq 2 [gi1/0/1] 13.
PAGE 210
GigaX3124 Layer3 Switch CLI Command Reference Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit tcp host 10.0.0.1 eq 2 any [gi1/0/1] 13.109 (permit|deny) (tcp|udp) host IPADDR any [eq] [<0-65535>] [IFNAME] Syntax (permit|deny) (tcp|udp) host IPADDR any [eq] [<0-65535>] [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 211
GigaX3124 Layer3 Switch CLI Command Reference Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 212
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) icmp host IPADDR IPADDR MASK <0-255> [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit icmp host 10.0.0.1 10.0.0.2 0.0.0.0 2 [gi1/0/1] 13.
PAGE 213
GigaX3124 Layer3 Switch CLI Command Reference Examples ASUS(config-ext-acl)# permit icmp 10.0.0.1 0.0.0.0 host 10.0.0.2 2 [gi1/0/1] 13.113 (permit|deny) icmp any host IPADDR <0-255> [IFNAME] Syntax (permit|deny) icmp any host IPADDR <0-255> [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 214
GigaX3124 Layer3 Switch CLI Command Reference MASK Destination wildcard bits <0-255> ICMP message type [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear no (permit|deny) icmp any IPADDR MASK <0-255> [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit icmp any 10.0.0.1 0.0.0.
PAGE 215
GigaX3124 Layer3 Switch CLI Command Reference 13.116 (permit|deny) icmp IPADDR MASK any [<0-255>] [IFNAME] Syntax (permit|deny) icmp IPADDR MASK any [<0-255>] [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 216
GigaX3124 Layer3 Switch CLI Command Reference <0-255> ICMP message type [IFNAME] Egress interface name Command Mode IP extended access-list mode No/clear No (permit|deny) icmp host IPADDR any [<0-255>] [IFNAME] Show show access-lists [ACLNAME] Default Description This command specifies one or more conditions denied or permitted to decide if the packet is forwarded or dropped. Examples ASUS(config-ext-acl)# permit icmp host 10.0.0.1 any 2 [gi1/0/1] 13.
PAGE 217
GigaX3124 Layer3 Switch CLI Command Reference 13.119 (permit|deny) IPADDR [IFNAME] Syntax (permit|deny) A.B.C.D [IFNAME] Parameters permit Specify packets to forward deny Specify packets to reject.
PAGE 218
GigaX3124 Layer3 Switch CLI Command Reference Show Default Description Use the show ip access list EXEC command to display the parameters for all ip access on the switch. Examples ASUS# show ip access list 13.
PAGE 219
GigaX3124 Layer3 Switch CLI Command Reference 14 Storm control: 14.
PAGE 220
GigaX3124 Layer3 Switch CLI Command Reference 15 QoS/CoS: 15.1 cos cos-map <0-7> <1-8> Syntax cos cos-map <0-7> <1-8> Parameters <0-7> IEEE 802.1p priority <1-8> Class of Service (CoS) Priority Queue ID Command Mode Global configuration mode No/clear no cos cos-map Show show cos cos-map Default Description Use the queue cos-map configuration command on the switch stack or standalone switch to set which Cos queue a given priority should map into.
PAGE 221
GigaX3124 Layer3 Switch CLI Command Reference 15.
PAGE 222
GigaX3124 Layer3 Switch CLI Command Reference <1-10> weight for cos queue 3 <1-10> weight for cos queue 4 <1-10> weight for cos queue 5 <1-10> weight for cos queue 6 <1-10> weight for cos queue 7 <1-10> weight for cos queue 8 Command Mode Global configuration mode No/clear no cos policy reset to strict mode Show show cos policy Default Description This command sets CoS scheduling policy to Weighted Round Robin mode Example ASUS(config)# cos policy wrr-queue weight
PAGE 223
GigaX3124 Layer3 Switch CLI Command Reference Default Description Show which CoS queue given priority current maps to Example ASUS# show cos cos-map 15.7 show cos policy Syntax show cos policy Parameters Command Mode Privileged EXEC mode No/clear Show Default Description This command shows the cos policy. Example ASUS# show cos policy 15.
PAGE 224
GigaX3124 Layer3 Switch CLI Command Reference 15.9 qos egress bandwidth <64-1048576> Syntax qos egress bandwidth <64-1048576> Parameters <64-1048576> Rate limit in Kbps, <64-102400> for FE ports, <64-1048576> for GE ports Command Mode Interface configuration mode No/clear no qos egress bandwidth Show show qos egress bandwidth [IFNAME] Default Not limited. Description This command used to set the Qos bandwidth informational parameter for the outgoing packets.
PAGE 225
GigaX3124 Layer3 Switch CLI Command Reference 16 Policy Map Configuration 16.1 policy-map POLICYMAP Syntax policy-map POLICYMAP Parameters POLICYMAP Policy map specific name Command Mode Global configuration mode No/clear no policy-map POLICYMAP Show show policy-map [POLICYMAP] Default Description This command is used to create a policy-map. Examples ASUS(config)# policy-map pm1 16.
PAGE 226
GigaX3124 Layer3 Switch CLI Command Reference Default Description This command is used to configure a traffic classifier match criterion using ACL rule. Examples ASUS(config-pmap-class)# match access-group acl 16.
PAGE 227
GigaX3124 Layer3 Switch CLI Command Reference Parameters <64-1048576> Traffic ingress rate in Kbps, <64-102400> for FE ports, <64-1048576> for GE ports <4-512> Traffic burst size in KB, (4|8|16|32|64) for FE ports, (4|8|16|32|64|128|256|512) for GE ports Command Mode Policy-map-class configuration mode No/clear no police Show show policy-map [POLICYMAP] Default Description This command is used to configure ingress rate and ingress burst size.
PAGE 228
GigaX3124 Layer3 Switch CLI Command Reference ports, <64-1048576> for GE ports <4-512> Traffic burst size in KB, (4|8|16|32|64) for FE ports, (4|8|16|32|64|128|256|512) for GE ports <0-63> IP DSCP value Command Mode Policy-map-class configuration mode No/clear no police exceed-action Show show policy-map [POLICYMAP] Default Description This command is used to configure ingress rate and ingress burst size with mark down the DSCP value and send the packet when exceed ingress rate.
PAGE 229
GigaX3124 Layer3 Switch CLI Command Reference Description This command is used to mark classification matched packets with high-drop-precedence. Examples ASUS(config-pmap-class)# police high-drop 16.
PAGE 230
GigaX3124 Layer3 Switch CLI Command Reference No/clear no set ip precedence Show show policy-map [POLICYMAP] Default Description This command is used to set classified ingress packets with packet IP Precedence values. Examples ASUS(config-pmap-class)# set ip precedence 3 16.
PAGE 231
GigaX3124 Layer3 Switch CLI Command Reference 17 Spanning Tree Protocol Configuration: 17.1 show spanning-tree interface [IFNAME] Syntax show spanning-tree interface [IFNAME] Parameters [IFNAME] Interface name Command Mode Privileged EXEC mode No/clear Show Default Description To show spanning-tree interface configuration and running status. Example ASUS# show spanning-tree interface gi1/0/1 17.
PAGE 232
GigaX3124 Layer3 Switch CLI Command Reference No/clear Show Default Description To show MSTP instance and VLAN mapping configuration. Examples ASUS# show spanning-tree mst configuration 17.
PAGE 233
GigaX3124 Layer3 Switch CLI Command Reference 17.6 spanning-tree algorithm-timer <4-30> <6-40> <1-10> Syntax spanning-tree algorithm-timer <4-30> <6-40> <1-10> Parameters <4-30> Forward time value, in seconds <6-40> Max age value, in seconds <1-10> Hello time value, in seconds Command Mode Global configuration mode No/clear no spanning-tree algorithm-timer Show show spanning-tree summary Default Forward time is 15, Max age is 20, Hello time is 2.
PAGE 234
GigaX3124 Layer3 Switch CLI Command Reference No/clear Show show spanning-tree interface [IFNAME] Default Not enable bpdu-guard Description If bpdu-guard is enabled and the system receives any STP bpdu from the interface, the inerface will be blocked. Example ASUS(config-if)# spanning-tree bpdu-guard enable 17.
PAGE 235
GigaX3124 Layer3 Switch CLI Command Reference Default The default is auto. Description Use the spanning-tree edge-port configuration command on the switch stack or standalone switch to set the spanning-tree interface attached to a LAN segment that is at the end or not. Example ASUS(config-if)# spanning-tree edge-port enable 17.
PAGE 236
GigaX3124 Layer3 Switch CLI Command Reference 17.13 spanning-tree link-type (auto| point-to-point| shared) Syntax spanning-tree link-type (auto| point-to-point| shared) Parameters auto point-to-point Link connected with exactly only one bridge shared Command Mode Interface configuration mode No/clear no spanning-tree link-type Show show spanning-tree interface [IFNAME] Default The default is auto.
PAGE 237
GigaX3124 Layer3 Switch CLI Command Reference pvst Per-VLAN Spanning-Tree (IEEE 802.1d) rapid-pvst Rapid Spanning-Tree (IEEE 802.1w) Command Mode Global configuration mode No/clear Show show spanning-tree summary Default The default is rapid-pvst. Description the spanning tree mode Example ASUS(config)# spanning-tree mode pvst 17.
PAGE 238
GigaX3124 Layer3 Switch CLI Command Reference MSTP instance. Examples ASUS(config-if)# spanning-tree mst 1 port-priority 16 17.
PAGE 239
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Global configuration mode No/clear no spanning-tree mst max-hops Show show running-config Default The default is 20. Description To set the max passed hop count of MSTP BPDU Examples ASUS(config)# spanning-tree mst max-hops 30 17.
PAGE 240
GigaX3124 Layer3 Switch CLI Command Reference Parameters port-priority the port priority <0-240> Priority value, in steps of 16 Command Mode Interface configuration mode No/clear no spanning-tree port-priority Show show spanning-tree interface [IFNAME] Default The default is 128 Description Use the spanning-tree port-priority configuration command on the switch stack or standalone switch to set the spanning-tree the port priority between 0 and 240.
PAGE 241
GigaX3124 Layer3 Switch CLI Command Reference Show show spanning-tree summary Default The default is 3 seconds. Description Use the spanning-tree transmission-limit configuration command on the switch stack or standalone switch to set the spanning-tree transmission of consecutive spanning-tree BPDUs Example ASUS(config)# spanning-tree transmission-limit 10 17.
PAGE 242
GigaX3124 Layer3 Switch CLI Command Reference 18 Port based Network Access Control Configuration: 18.
PAGE 243
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Interface configuration mode No/clear no dot1x port-control Show show dot1x / show dot1x interface IFNAME Default The default is ForceAuthorized Description Use the dot1x port-control interface configuration command on the switch stack or on a standalone switch to enable manual control of the authorization state of the port. Use the no form of this command to return to the default setting.
PAGE 244
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Global configuration mode No/clear Show show dot1x radius / show running-config Default Description This command sets the secondary radius server IP, radius key, and radius port for 802.1X configuration. Example ASUS(config)# dot1x radius secondary-server 192.192.1.2 testing 1812 18.
PAGE 245
GigaX3124 Layer3 Switch CLI Command Reference to return to the default setting. Example ASUS(config-if)# dot1x reauthentication 18.7 dot1x system-auth-control Syntax dot1x system-auth-control Parameters system-auth-control enabled 802.
PAGE 246
GigaX3124 Layer3 Switch CLI Command Reference quiet-period: 60 seconds server-timeout: 20 seconds Description This command sets the dot1x reauthentication timer. Example ASUS(config-if)# dot1x timeout reauth-period 3600 18.
PAGE 247
GigaX3124 Layer3 Switch CLI Command Reference 18.11 dot1x user USERNAME PASSWORD <1-3000> Syntax dot1x user USERNAME PASSWORD <1-3000> Parameters USERNAME User Name PASSWORD User Password <1-3000> VLAN ID Command Mode Global configuration mode No/clear no dot1x user USERNAME Show show dot1x user Default Description Add user into local database. Example ASUS(config)# dot1x user test testing123 10 18.12 show dot1x Syntax show dot1x Parameters dot1x Get IEEE 802.
PAGE 248
GigaX3124 Layer3 Switch CLI Command Reference Default Description Display the 802.1X status for the specified interface. Example ASUS# show dot1x interface gi1/0/1 18.14 show dot1x radius Syntax show dot1x radius Parameters radius Command Mode Privileged EXEC mode Remote Access Dial-In User Service No/clear Show Default Description Use the show dot1x radius privileged EXEC command to display 802.1X Remote Access Dial-In User Service configurations. Example ASUS# show dot1x radius 18.
PAGE 249
GigaX3124 Layer3 Switch CLI Command Reference 19 Port Security Configuration: 19.1 show port-security Syntax show port-security Parameters Command Mode Privileged EXEC mode No/clear Show Default Description To show port-security status of all interfaces. Examples ASUS# show port-security 19.
PAGE 250
GigaX3124 Layer3 Switch CLI Command Reference Default Description To show port-security status for the specified interface. Examples ASUS# show port-security interface gi1/0/1 19.4 switchport port-security Syntax switchport port-security Parameters Command Mode Interface configuration mode No/clear no switchport port-security Show show port-security [IFNAME] Default Not enable port security Description To enable port-security of the interface.
PAGE 251
GigaX3124 Layer3 Switch CLI Command Reference Inactivity Aging based on inactivity time period Command Mode Interface configuration mode No/clear no switchport port-security aging-type Show show port-security [IFNAME] Default absolute Description To select port-security aging type of the interface. Examples ASUS(config-if)# switchport port-security aging-type inactivity 19.
PAGE 252
GigaX3124 Layer3 Switch CLI Command Reference 19.9 switchport port-security reup Syntax switchport port-security reup Parameters Command Mode Interface configuration mode No/clear Show show port-security [IFNAME] Default Description To reup the interface when it was shutdown by port security Examples ASUS(config-if)# switchport port-security reup 19.
PAGE 253
GigaX3124 Layer3 Switch CLI Command Reference 228 Command Mode Interface configuration mode No/clear no switchport port-security violation Show show port-security [IFNAME] Default Shutdown mode Description To configure port security violation mode when violation occurs.
PAGE 254
GigaX3124 Layer3 Switch CLI Command Reference 20 SNMP Configuration: 20.1 rmon alarm <1-65536> OID <1-4294967295> (absolute|delta) rising-threshold VALUE falling-threshold VALUE [OWNER] Syntax rmon alarm <1-65536> OID <1-4294967295> (absolute|delta) rising-threshold VALUE falling-threshold VALUE [OWNER] Parameters <1-65536> Specify the alarm number OID The MIB object, 1.3.6.1.2.1.16.1.1.1.5.
PAGE 255
GigaX3124 Layer3 Switch CLI Command Reference rising-threshold VALUE falling-threshold VALUE <1-65535> [OWNER] Parameters <1-65536> Specify the alarm number OID The MIB object, 1.3.6.1.2.1.16.1.1.1.5.
PAGE 256
GigaX3124 Layer3 Switch CLI Command Reference <1-4294967295> The time interval of alarm monitor, in seconds absolute To test each MIB variable directly delta VALUE The rising threshold value, the range is -2147483648 to 2147483647 <1-65535> Specify the RMON event to trigger when rising threshold exceeds VALUE The falling threshold value, the range is -2147483648 to 2147483647 [OWNER] Specify the owner of this RMON alarm Command Mode Global configuration mode No/clear
PAGE 257
GigaX3124 Layer3 Switch CLI Command Reference VALUE The rising threshold value, the range is -2147483648 to 2147483647 <1-65535> Specify the RMON event to trigger when rising threshold exceeds VALUE The falling threshold value, the range is -2147483648 to 2147483647 <1-65535> Specify the RMON event to trigger when falling threshold exceeds [OWNER] Specify the owner of this RMON alarm Command Mode Global configuration mode No/clear no rmon alarm <1-65536> Show show rmon ala
PAGE 258
GigaX3124 Layer3 Switch CLI Command Reference 20.
PAGE 259
GigaX3124 Layer3 Switch CLI Command Reference Examples ASUS(config)# rmon event 20 description falling-threshold trap public tester 20.
PAGE 260
GigaX3124 Layer3 Switch CLI Command Reference Description To add RMON history entry Examples ASUS(config)# rmon history 20 gi1/0/1 tester 20.
PAGE 261
GigaX3124 Layer3 Switch CLI Command Reference Show show rmon history Default Description To add RMON history entry Examples ASUS(config)# rmon history 20 gi1/0/1 interval 30 tester 20.
PAGE 262
GigaX3124 Layer3 Switch CLI Command Reference Show Default Description Displays the RMON alarm table Examples ASUS# show rmon alarms 20.14 show rmon events Syntax show rmon alarms Parameters Command Mode Privileged EXEC mode No/clear Show Default Description Displays the RMON event table Examples ASUS# show rmon events 20.
PAGE 263
GigaX3124 Layer3 Switch CLI Command Reference [IFNAME] Interface name Command Mode Privileged EXEC mode No/clear Show Default Description To show rmon statistics IFNAME status. Examples ASUS# show rmon statistics gi1/0/1 20.17 show snmp-server community Syntax show snmp-server community Parameters community SNMP server community Command Mode Privileged EXEC mode No/clear Show Default Description To display snmp-server community. Examples ASUS# show snmp-server community 20.
PAGE 264
GigaX3124 Layer3 Switch CLI Command Reference 20.19 show snmp-server contact Syntax show snmp-server contact Parameters contact show the system contact string Command Mode Privileged EXEC mode No/clear Show Default Description To display snmp-server contact information. Examples ASUS# show snmp-server contact 20.
PAGE 265
GigaX3124 Layer3 Switch CLI Command Reference 20.22 show snmp-server location Syntax show snmp-server location Parameters location show the system location string Command Mode Privileged EXEC mode No/clear Show Default Description To display snmp-server location information. Examples ASUS# show snmp-server location 20.
PAGE 266
GigaX3124 Layer3 Switch CLI Command Reference 20.25 show snmp-server view Syntax show snmp-server view Parameters view Show the view name which is used to reference the record Command Mode Privileged EXEC mode No/clear Show Default Description To display the view name used to reference the record. Examples ASUS# show snmp-server view 20.26 snmp-server community WORD (ro|rw) network A.B.C.D/MASK Syntax snmp-server community WORD (ro|rw) network A.B.C.
PAGE 267
GigaX3124 Layer3 Switch CLI Command Reference Examples ASUS(config)# snmp-server community public rw network 192.192.1.1/24 20.
PAGE 268
GigaX3124 Layer3 Switch CLI Command Reference 20.
PAGE 269
GigaX3124 Layer3 Switch CLI Command Reference 20.
PAGE 270
GigaX3124 Layer3 Switch CLI Command Reference write The option that allows you to specify a write view (default none) WORD A string that is the name of the view that enables you to enter and configure the contents of the agent Command Mode Global configuration mode No/clear no snmp-server group WORD v3 (noauth|auth|priv) Show show snmp-server group Default None Description Create a new SNMP group and enable authentication.
PAGE 271
GigaX3124 Layer3 Switch CLI Command Reference No/clear no snmp-server group WORD v3 (noauth|auth|priv) Show show snmp-server group Default None Description Create a new SNMP group and enable authentication. Examples ASUS(config)# snmp-server group g1 v3 auth read r1 write w1 notify n1 20.
PAGE 272
GigaX3124 Layer3 Switch CLI Command Reference sysView) WORD A string that he name of the view that enables you only to view the contents of the agent Command Mode Global configuration mode No/clear no snmp-server group WORD v3 (noauth|auth|priv) Show show snmp-server group Default None Description Create a new SNMP group without authentication. Examples ASUS(config)# snmp-server group g1 v3 noauth read r1 20.
PAGE 273
GigaX3124 Layer3 Switch CLI Command Reference Examples ASUS(config)# snmp-server group g1 v3 noauth read r1 write w1 20.
PAGE 274
GigaX3124 Layer3 Switch CLI Command Reference 20.
PAGE 275
GigaX3124 Layer3 Switch CLI Command Reference Default None Description Create a new SNMP group and specifies authentication of a packet with encryption Examples ASUS(config)# snmp-server group g1 v3 priv read r1 20.
PAGE 276
GigaX3124 Layer3 Switch CLI Command Reference 20.
PAGE 277
GigaX3124 Layer3 Switch CLI Command Reference Parameters host the recipient (host) of a SNMP notification operation A.B.C.D IP address Command Mode Global configuration mode No/clear no snmp-server host A.B.C.D Show show snmp-server host Default Description This command sets the host of a SNMP notification operation Examples ASUS(config)# snmp-server host 192.192.1.1 20.43 snmp-server host A.B.C.D version (1|2) [COMMUNITY] Syntax snmp-server host A.B.C.
PAGE 278
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Global configuration mode No/clear no snmp-server location Show show snmp-server location Default Description This command sets the SNMP location string. Examples ASUS(config)# snmp-server location office 20.
PAGE 279
GigaX3124 Layer3 Switch CLI Command Reference v3 User using the v3 security model noauth Specifies no authentication of a packet Command Mode Global configuration mode No/clear no snmp-server user WORD WORD v3 Show show snmp-server user Default None Description Define a user who can access the SNMP engine without authentication. Examples ASUS(config)# snmp-server user test g1 v3 noauth 20.
PAGE 280
GigaX3124 Layer3 Switch CLI Command Reference 20.48 snmp-server view WORD WORD (included|excluded) Syntax snmp-server view WORD WORD (included|excluded) Parameters view Create a view entry WORD The view name is used to reference the record WORD To identify the subtree, specify a text string consisting of numbers, such as .1.3.6.2.4, or a word (default, .
PAGE 281
GigaX3124 Layer3 Switch CLI Command Reference 21 NTP (Network Time Protocol) Configuration: 21.1 ntp sync IPADDR Syntax ntp sync IPADDR Parameters IPADDR NTP server IP address Command Mode Privileged EXEC mode No/clear show show clock Default Description Use the command to sync system time with specified NTP server. Example ASUS# ntp sync 220.130.158.52 21.
PAGE 282
GigaX3124 Layer3 Switch CLI Command Reference prefer To make this server preferred synchronization Command Mode Global configuration mode No/clear no ntp server IPADDR show show ntp server Default Description Use the command to set a prefer ntp server for system to sync time. Example ASUS(config)# ntp server 220.130.158.52 prefer 21.
PAGE 283
GigaX3124 Layer3 Switch CLI Command Reference show show ntp server Default Description Use the command to set a prefer ntp server and protocol version for system to sync time. Example ASUS(config)# ntp server 220.130.158.52 version 4 prefer 21.6 show ntp server Syntax show ntp server Parameters Command Mode Privileged EXEC mode No/clear Show Default 258 Description To show the configuration and status of NTP servers.
PAGE 284
GigaX3124 Layer3 Switch CLI Command Reference 22 IP Route Configuration: 22.1 ip forwarding Syntax ip forwarding Parameters forwarding Enable IP forwarding Command Mode Global configuration mode No/clear no ip forwarding Show show ip forwarding Default IP forwarding is default on Description This command will turn on IP forwarding function Examples ASUS(config)# ip forwarding 22.2 ip route A.B.C.D A.B.C.D (A.B.C.D|INTERFACE) Syntax ip route A.B.C.D A.B.C.D (A.B.C.
PAGE 285
GigaX3124 Layer3 Switch CLI Command Reference 22.3 ip route A.B.C.D A.B.C.D (A.B.C.D|INTERFACE) <1-255> Syntax ip route A.B.C.D A.B.C.D (A.B.C.D|INTERFACE) <1-255> Parameters route A.B.C.D IP destination prefix .B.C.D IP destination prefix mask A.B.C.D IP gateway address INTERFACE IP gateway interface name <1-255> Distance value for this route Command Mode Global configuration mode No/clear no ip route A.B.C.D A.B.C.D (A.B.C.
PAGE 286
GigaX3124 Layer3 Switch CLI Command Reference show running-config Default Description This command sets the ip route in this system Examples ASUS(config)# ip route 192.192.5.0/24 192.192.1.254 22.5 ip route A.B.C.D/M (A.B.C.D|INTERFACE) <1-255> Syntax ip route A.B.C.D/M (A.B.C.D|INTERFACE) <1-255> Parameters route A.B.C.D/M IP destination prefix (e.g. 10.0.0.0/8) A.B.C.
PAGE 287
GigaX3124 Layer3 Switch CLI Command Reference Default Description To display routing information in system Examples ASUS# show ip route 22.7 show ip route A.B.C.D/M Syntax show ip route A.B.C.D/M Parameters A.B.C.D/M IP destination prefix (e.g.; 10.0.0.0/8) Command Mode Privileged EXEC mode No/clear Show Default Description To display the dedicated network routing information. Examples ASUS# show ip route 22.
PAGE 288
GigaX3124 Layer3 Switch CLI Command Reference 23 DHCP RELAY Configuration 23.1 ip helper-address A.B.C.D Syntax ip helper-address A.B.C.D Parameters A.B.C.D IP address of DHCP server Command Mode Interface configuration mode No/clear no ip helper-address A.B.C.D Show show running-config Default Description Start the function of DHCP relay. This function makes one DHCP server can be shared by several networks or VLANs. It allows user configure four different servers.
PAGE 289
GigaX3124 Layer3 Switch CLI Command Reference 24 RIP related Configuration 24.1 default-information originate Syntax default-information originate Parameters originate Distribute a default route Command Mode Config-router mode No/clear no default-information originate Show show running-config Default Not enable Description Set RIP to distribute the default route of the system. Examples ASUS(config-router)# default-information originate 24.
PAGE 290
GigaX3124 Layer3 Switch CLI Command Reference No/clear no distance <1-255> Show show ip rip status Default Default RIP distance is 120. Description Set default RIP distance to specified value. Examples ASUS(config-router)# distance 100 24.4 distance <1-255> A.B.C.D/M Syntax distance <1-255> A.B.C.D/M Parameters <1-255> Distance value A.B.C.D/M IP source prefix Command Mode Config-router mode No/clear no distance <1-255> A.B.C.
PAGE 291
GigaX3124 Layer3 Switch CLI Command Reference 24.6 ip rip authentication string LINE Syntax ip rip authentication string [STRING] Parameters LINE Authentication string Command Mode Interface configuration mode No/clear no ip rip authentication string Show show running-config Default None Description RIP version 2 has simple text authentication. This command sets authentication string. The string must be shorter than 16 characters.
PAGE 292
GigaX3124 Layer3 Switch CLI Command Reference Default The default is to send only version 2. Description Version can be `1’, `2’, `1 2’. This configuration command overrides the router’s rip version setting. The command will enable the selected interface to send packets with RIP Version 1, RIP Version 2, or both. In the case of ‘1 2’, packets will be both broadcast and multicast. Examples ASUS(config-if)# ip rip send version 1 24.
PAGE 293
GigaX3124 Layer3 Switch CLI Command Reference it is necessary to establish a direct link between routers. The neighbor command allows the network administrator to specify a router as a RIP neighbor. The no neighbor A.B.C.D command will disable the RIP neighbor. Examples ASUS(config-router)# neighbor 10.1.1.1 24.11 network (A.B.C.D/M| IFNAME) Syntax network (A.B.C.D/M| IFNAME) Parameters A.B.C.
PAGE 294
GigaX3124 Layer3 Switch CLI Command Reference neighbor command. Examples ASUS(config-router)# passive-interface vlan3 ASUS(config-router)# passive-interface default 24.
PAGE 295
GigaX3124 Layer3 Switch CLI Command Reference 24.15 route A.B.C.D/M Syntax route A.B.C.D/M Parameters A.B.C.D/M IP address/netmask Command Mode Config-router mode No/clear no route A.B.C.D/M Show show ip rip Default Description To set a RIP static route. Examples ASUS(config-router)# route 192.192.3.0/24 24.
PAGE 296
GigaX3124 Layer3 Switch CLI Command Reference 180 second. <5-2147483647> Garbage collection timer. Default is 120 second. Command Mode Config-router mode No/clear no timers basic Show show ip rip status Default The default settings for the timers are as follows: The update timer is 30 seconds. Every update timer seconds, the RIP process is awakened to send an unsolicited Response message containing the complete routing table to all neighboring RIP routers.
PAGE 297
GigaX3124 Layer3 Switch CLI Command Reference “Version 2” will not be displayed whether or not Version 2 is set explicitly as the version of RIP being used. The version can be specified globally, and also on a per-interface basis (see below). Examples ASUS(config-router)# version 1 24.19 show ip rip Syntax show ip rip Parameters Command Mode Privileged EXEC mode No/clear Show Default Description The command displays all RIP routes.
PAGE 298
GigaX3124 Layer3 Switch CLI Command Reference 25 OSPF related Configuration 25.1 area (A.B.C.D| <0-4294967295>) authentication Syntax area (A.B.C.D| <0-4294967295>) authentication Parameters A.B.C.D OSPF area ID in IP address format <0-4294967295> OSPF area ID as a decimal value (ID 0.0.0.2 equals ID 2) authentication Enable authentication Command Mode Config-router mode No/clear no area (A.B.C.
PAGE 299
GigaX3124 Layer3 Switch CLI Command Reference Examples ASUS(config-router)# area 0.0.0.2 authentication messagedigest 25.3 area (A.B.C.D| <0-4294967295>) default-cost <0-16777215> Syntax area (A.B.C.D| <0-4294967295>) default-cost <0-16777215> Parameters A.B.C.D OSPF area ID in IP address format <0-4294967295> OSPF area ID as a decimal value (ID 0.0.0.
PAGE 300
GigaX3124 Layer3 Switch CLI Command Reference No/clear no area (A.B.C.D| <0-4294967295>) range A.B.C.D/M Show show running-config Default Description To set the summarizing routes range for the specified area. Examples ASUS(config-router)# area 0.0.0.2 range 192.192.0.0/16 25.5 area (A.B.C.D| <0-4294967295>) range A.B.C.D/M (advertise| not-advertise) Syntax area (A.B.C.D| <0-4294967295>) range A.B.C.D/M (advertise|not-advertise) Parameters A.B.C.
PAGE 301
GigaX3124 Layer3 Switch CLI Command Reference <0-16777215> Parameters A.B.C.D OSPF area ID in IP address format <0-4294967295> OSPF area ID as a decimal value (ID 0.0.0.2 equals ID 2) range Summarize routes matching address/mask (border routers only) A.B.C.D/M Area range prefix cost User specified metric for this range <0-16777215> Advertised metric for this range Command Mode Config-router mode No/clear no area (A.B.C.D| <0-4294967295>) range A.B.C.
PAGE 302
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Config-router mode No/clear no area (A.B.C.D| <0-4294967295>) range A.B.C.D/M substitute A.B.C.D/M Show show running-config Default Description To set the summarizing routes range and substitute network prefix for the specified area. Examples ASUS(config-router)# area 0.0.0.2 range 192.192.0.0/16 substitute 192.190.0.0/24 25.8 area (A.B.C.D| <0-4294967295>) shortcut (default| enable| disable) Syntax area (A.B.C.
PAGE 303
GigaX3124 Layer3 Switch CLI Command Reference Parameters A.B.C.D OSPF area ID in IP address format <0-4294967295> OSPF area ID as a decimal value (ID 0.0.0.2 equals ID 2) stub Configure OSPF area as stub Command Mode Config-router mode No/clear no area (A.B.C.D| <0-4294967295>) stub Show show ip ospf Default Description To configure the specified area as stub. Examples ASUS(config-router)# area 0.0.0.2 stub 25.10 area (A.B.C.D| <0-4294967295>) stub nosummary Syntax area (A.
PAGE 304
GigaX3124 Layer3 Switch CLI Command Reference 25.11 area (A.B.C.D| <0-4294967295>) virtual-link A.B.C.D Syntax area (A.B.C.D|<0-4294967295>) virtual-link A.B.C.D Parameters A.B.C.D OSPF area ID in IP address format <0-4294967295> OSPF area ID as a decimal value (ID 0.0.0.2 equals ID 2) virtual-link Configure a virtual link A.B.C.D Router ID of the remote ABR Command Mode Config-router mode No/clear no area (A.B.C.D|<0-4294967295>) virtual-link A.B.C.
PAGE 305
GigaX3124 Layer3 Switch CLI Command Reference transmit-delay Link state transmit delay dead-interval Interval after which a neighbor is declared dead <1-65535> Time value, seconds Command Mode Config-router mode No/clear no area (A.B.C.D|<0-4294967295>) virtual-link A.B.C.
PAGE 306
GigaX3124 Layer3 Switch CLI Command Reference Description To configure a virtual link router for the specified area and enable authentication. Examples ASUS(config-router)# area 0.0.0.2 virtual-link 10.1.1.2 authentication 25.14 area (A.B.C.D| <0-4294967295>) virtual-link A.B.C.D authentication message-digest Syntax area (A.B.C.D|<0-4294967295>) virtual-link A.B.C.D authentication message-digest Parameters A.B.C.
PAGE 307
GigaX3124 Layer3 Switch CLI Command Reference <0-4294967295> OSPF area ID as a decimal value (ID 0.0.0.2 equals ID 2) virtual-link Configure a virtual link A.B.C.D Router ID of the remote ABR authentication-key Authentication password (key) AUTH_KEY The OSPF password (key) Command Mode Config-router mode No/clear no area (A.B.C.D|<0-4294967295>) virtual-link A.B.C.
PAGE 308
GigaX3124 Layer3 Switch CLI Command Reference Command Mode Config-router mode No/clear no area (A.B.C.D|<0-4294967295>) virtual-link A.B.C.D message-digest-key <1-255> Show show running-config Default Description To configure a virtual link router for the specified area and set the message-digest key by key ID. Examples ASUS(config-router)# area 0.0.0.2 virtual-link 10.1.1.2 messagedigest-key 1 md5 abcedfgh 25.
PAGE 309
GigaX3124 Layer3 Switch CLI Command Reference Description To set OSPF protocol to compatible with rfc1583 Examples ASUS(config-router)# compatible rfc1583 25.19 default-information originate Syntax default-information originate Parameters originate Distribute a default route Command Mode Config-router mode No/clear no default-information originate Show show running-config Default Description To set OSPF to distribute a default route.
PAGE 310
GigaX3124 Layer3 Switch CLI Command Reference 25.21 default-information originate always Syntax default-information originate always Parameters originate Distribute a default route always Always advertise default route Command Mode Config-router mode No/clear no default-information originate Show show running-config Default Description To set OSPF always to distribute a default route. Examples ASUS(config-router)# default-information originate always 25.
PAGE 311
GigaX3124 Layer3 Switch CLI Command Reference 25.23 default-metric <0-16777214> Syntax default-metric <0-16777214> Parameters <0-16777214> Default metric Command Mode Config-router mode No/clear no default-metric Show show running-config Default Description To set metric of redistributed routes. Examples ASUS(config-router)# default-metric 10 25.
PAGE 312
GigaX3124 Layer3 Switch CLI Command Reference Show show running-config Default Description To set the OSPF administrative intra-area, inter-area or external distance. Examples ASUS(config-router)# distance ospf external 10 ASUS(config-router)# distance ospf intra-area 10 inter-area 10 external 10 25.
PAGE 313
GigaX3124 Layer3 Switch CLI Command Reference 25.28 ip ospf authentication-key AUTH_KEY Syntax ip ospf authentication-key [AUTH_KEY] Parameters AUTH_KEY Character string, max. 8 characters Command Mode Interface configuration mode No/clear no ip ospf authentication-key Show show running-config Default Description Set OSPF authentication key to a simple password for a specific IP interface. After setting AUTH_KEY, all OSPF packets are authenticated. AUTH_KEY has length up to 8 chars.
PAGE 314
GigaX3124 Layer3 Switch CLI Command Reference dead-interval) Show show ip ospf interface [IFNAME] Default Hello-interval is 10sec, retransmit-interval is 5 sec, transmit-delay is 40 sec, dead-interval is 40 sec. Description Set number of seconds for HelloInterval, RetransmitInterval, Transmitdelay, DeadInterval timer value. Examples ASUS(config-if)# ip ospf hello-interval 15 25.
PAGE 315
GigaX3124 Layer3 Switch CLI Command Reference Description Set Router Priority integer value. Setting higher value, router will be more eligible to become Designated Router. Setting the value to 0, router is no longer eligible to Designated Router. The default value is 1. Examples ASUS(config-if)# ip ospf priority 10 25.33 neighbor A.B.C.D Syntax neighbor A.B.C.D Parameters A.B.C.D Neighbor IP address Command Mode Config-router mode No/clear no neighbor A.B.C.
PAGE 316
GigaX3124 Layer3 Switch CLI Command Reference ASUS(config-router)# neighbor 10.1.1.1 poll-interval 120 priority 10 25.35 network A.B.C.D/M area (A.B.C.D| <0-4294967295>) Syntax network A.B.C.D/M area (A.B.C.D| <0-4294967295>) Parameters A.B.C.D/M OSPF network prefix area OSPF area parameters A.B.C.D OSPF area ID in IP address format <0-4294967295> OSPF area ID as a decimal value (ID 0.0.0.2 equals ID 2) Command Mode Config-router mode No/clear no network A.B.C.
PAGE 317
GigaX3124 Layer3 Switch CLI Command Reference 25.
PAGE 318
GigaX3124 Layer3 Switch CLI Command Reference Show show running-config Default Description This command redistributes routing information from kernel, connected, static or RIP route entries with specified metric value and type into the OSPF tables. Examples ASUS(config-router)# redistribute connected metric 10 metrictype 2 25.
PAGE 319
GigaX3124 Layer3 Switch CLI Command Reference 25.41 router ospf Syntax router ospf Parameters Command Mode Global Configuration mode No/clear no router ospf Show show ip ospf Default Description The router ospf command is necessary to enable OSPF. To disable OSPF, use the no router ospf command. Examples ASUS(config)# router ospf 25.
PAGE 320
GigaX3124 Layer3 Switch CLI Command Reference Examples ASUS# show ip ospf database 25.
PAGE 321
GigaX3124 Layer3 Switch CLI Command Reference A.B.C.D IP address of Advertising Router Command Mode Privileged EXEC mode No/clear Show Default To display ASBR, external, network, router, summary link states by self-originate, the specified link-state-id or the specified advertise router. Description Examples ASUS# show ip ospf database network self-originate 25.46 show ip ospf database (asbr-summary| external| network| router| summary) A.B.C.D adv-router A.B.C.
PAGE 322
GigaX3124 Layer3 Switch CLI Command Reference No/clear Show Default Description To display OSPF configuration and running status for the specified interface or all interfaces. Examples ASUS# show ip ospf interface vlan2 25.48 show ip ospf neighbor Syntax show ip ospf neighbor Parameters Command Mode Privileged EXEC mode No/clear Show Default Description To display OSPF neighbor list. Examples ASUS# show ip ospf neighbor 25.
PAGE 323
GigaX3124 Layer3 Switch CLI Command Reference 25.
PAGE 324
GigaX3124 Layer3 Switch CLI Command Reference 26 VRRP (Virtual Router Redundancy Protocol): 26.1 show standby [IFNAME] Syntax show standby [IFNAME] Parameters [IFNAME] L3 interface name Command Mode Privileged EXEC mode No/clear Show Default Description To show VRRP running status and configuration for all enabled L3 interface or specified L3 interface. Example ASUS(config)# show standby vlan2 26.
PAGE 325
GigaX3124 Layer3 Switch CLI Command Reference 26.3 standby <1-255> (preempt|nonpreempt) Syntax standby <1-255> (preempt|nonpreempt) Parameters preempt nonpreempt Non-preemption mode Command Mode Interface configuration mode No/clear no standby <1-255> nonpreempt Show show standby [IFNAME] Default The default mode is preempt Description Use the command to set the specified virtual router as preempt or nonpreempt mode. It must enable the virtual router first.
PAGE 326
GigaX3124 Layer3 Switch CLI Command Reference Default The default value is 1 second Description Use the command to set the advertisement interval value of the specified virtual router.