Administrator Guide

ManualsBrandsDell ManualsComputer equipmentForce10 Z9000

561

562

563

564

565

566

567

568

569

570

Table Of Contents

Dell Command Line Reference Guide for the Z9000 System 9.6(0.0)
About this Guide
- Objectives
- Audience
- Conventions
- Information Icons
CLI Basics
- Accessing the Command Line
- Multiple Configuration Users
- Obtaining Help
- Navigating the CLI
- Using the Keyword no Command
- Filtering show Commands
- Enabling Software Features on Devices Using a Command Option
  - feature vrf
  - show feature
- Command Modes
File Management
- HTTP Copy via CLI
- boot system
- format flash
- restore factory-defaults
- show boot system
- show bootvar
- show file
- show os-version
- show running-config
- show startup-config
- show version
- upgrade
- upgrade fpga-image
- verify
Control and Monitoring
- asf-mode
- banner exec
- banner login
- banner motd
- cam-acl
- clear alarms
- clear command history
- clear line
- configure
- debug cpu-traffic-stats
- debug ftpserver
- disable
- do
- enable
- enable optic-info-update interval
- enable xfp-power-updates
- end
- exec-timeout
- exit
- ftp-server enable
- ftp-server topdir
- ftp-server username
- hostname
- ip ftp password
- ip ftp source-interface
- ip ftp username
- ip ftp vrf
- ip telnet server enable
- ip telnet server vrf
- ip telnet source-interface
- ip telnet vrf
- ip tftp source-interface
- ip tftp vrf
- line
- motd-banner
- ping
- reload
- send
- service timestamps
- show alarms
- show cam-acl-vlan
- show command-history
- show command-tree
- show cpu-traffic-stats
- show debugging
- show inventory
- show processes ipc flow-control
- show software ifm
- show system
- show tech-support
- ssh-peer-stack-unit
- telnet
- telnet-peer-stack-unit
- terminal length
- traceroute
- undebug all
- virtual-ip
- write
802.1X
- debug dot1x
- dot1x auth-fail-vlan
- dot1x auth-server
- dot1x auth-type mab-only
- dot1x authentication (Configuration)
- dot1x authentication (Interface)
- dot1x guest-vlan
- dot1x host-mode
- dot1x mac-auth-bypass
- dot1x max-eap-req
- dot1x max-supplicants
- dot1x port-control
- dot1x quiet-period
- dot1x reauthentication
- dot1x reauth-max
- dot1x server-timeout
- dot1x supplicant-timeout
- dot1x tx-period
- show dot1x cos-mapping interface
- show dot1x interface
Access Control Lists (ACL)
- Commands Common to all ACL Types
  - remark
  - show config
- Common IP ACL Commands
  - access-class
  - clear counters ip access-group
  - ip access-group
  - ip control-plane egress-filter
  - show ip accounting access-list
- Standard IP ACL Commands
  - deny
  - ip access-list standard
  - permit
  - resequence access-list
  - resequence prefix-list ipv4
  - seq
- Extended IP ACL Commands
  - deny
  - deny icmp
  - deny tcp
  - deny udp
  - ip access-list extended
  - permit
  - permit tcp
  - permit udp
  - resequence access-list
  - resequence prefix-list ipv4
  - seq
- Common MAC Access List Commands
  - clear counters mac access-group
  - mac access-group
  - show mac access-lists
  - show mac accounting access-list
- Standard MAC ACL Commands
  - deny
  - mac access-list standard
  - permit
  - seq
- Extended MAC ACL Commands
  - deny
  - mac access-list extended
  - permit
  - seq
- IP Prefix List Commands
  - clear ip prefix-list
  - deny
  - ip prefix-list
  - permit
  - seq
  - show config
  - show ip prefix-list detail
  - show ip prefix-list summary
- Route Map Commands
  - continue
  - description
  - match as-path
  - match community
  - match interface
  - match ip address
  - match ip next-hop
  - match ip route-source
  - match metric
  - match origin
  - match route-type
  - match tag
  - route-map
  - set as-path
  - set automatic-tag
  - set comm-list delete
  - set community
  - set level
  - set local-preference
  - set metric
  - set metric-type
  - set next-hop
  - set origin
  - set tag
  - set weight
  - show config
  - show route-map
- AS-Path Commands
  - ip as-path access-list
  - show ip as-path-access-lists
- IP Community List Commands
  - ip community-list
  - show ip community-lists
- deny (for Standard IP ACLs)
- deny (for Extended IP ACLs)
- seq (for Standard IPv4 ACLs)
- deny tcp (for Extended IP ACLs)
- deny udp (for Extended IP ACLs)
- deny arp (for Extended MAC ACLs)
- deny icmp (for Extended IP ACLs)
- deny ether-type (for Extended MAC ACLs)
- deny (for Standard MAC ACLs)
- deny (for Extended MAC ACLs)
- permit (for Standard IP ACLs)
- permit arp (for Extended MAC ACLs)
- permit ether-type (for Extended MAC ACLs)
- permit icmp (for Extended IP ACLs)
- permit udp (for Extended IP ACLs)
- permit (for Extended IP ACLs)
- permit (for Standard MAC ACLs)
- seq (for Standard MAC ACLs)
- permit tcp (for Extended IP ACLs)
- seq arp (for Extended MAC ACLs)
- seq ether-type (for Extended MAC ACLs)
- seq (for IP ACLs)
- seq (for IPv6 ACLs)
- permit udp (for IPv6 ACLs)
- permit tcp (for IPv6 ACLs)
- permit icmp (for IPv6 ACLs)
- permit (for IPv6 ACLs)
- deny udp (for IPv6 ACLs)
- deny tcp (for IPv6 ACLs)
- deny icmp (for Extended IPv6 ACLs)
- deny (for IPv6 ACLs)
Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM)
- member vlan
- ip access-group
- show acl-vlan-group
- show cam-acl-vlan
- cam-acl-vlan
- show cam-usage
- show running config acl-vlan-group
- acl-vlan-group
- show acl-vlan-group detail
- description (ACL VLAN Group)
Bidirectional Forwarding Detection (BFD)
- bfd all-neighbors
- bfd disable
- bfd enable (Configuration)
- bfd enable (Interface)
- bfd interval
- bfd neighbor
- bfd protocol-liveness
- ip route bfd
- ipv6 ospf bfd all-neighbors
- isis bfd all-neighbors
- neighbor bfd
- neighbor bfd disable
- show bfd neighbors
- vrrp bfd neighbor
Border Gateway Protocol
- BGP IPv4 Commands
- MBGP Commands
- BGP Extended Communities (RFC 4360)
- IPv6 BGP Commands
- IPv6 MBGP Commands
  - show ipv6 mbgproutes
Content Addressable Memory (CAM)
- CAM Profile Commands
Control Plane Policing (CoPP)
- control-plane-cpuqos
- ip unknown-unicast
- ipv6 unknown-unicast
- service-policy rate-limit-cpu-queues
- service-policy rate-limit-protocols
- show cpu-queue rate cp
- show ip protocol-queue-mapping
- show ipv6 protocol-queue-mapping
- show mac protocol-queue-mapping
Debugging and Diagnostics
- Diagnostics and Monitoring Commands
  - logging coredump stack-unit
- Offline Diagnostic Commands
- Buffer Tuning Commands
  - buffer-profile (Configuration)
- Hardware Commands
Dynamic Host Configuration Protocol (DHCP)
- Commands to Configure the System to be a DHCP Server
- clear host
- ip domain-list
- ip domain-name
- ip host
- ip name-server
- Commands to Configure Secure DHCP
Equal Cost Multi-Path (ECMP)
- ecmp-group
- hash-algorithm
- hash-algorithm ecmp
- hash-algorithm hg
- hash-algorithm hg-seed
- hash-algorithm seed
- ip ecmp-group
- link-bundle-distribution trigger-threshold
- link-bundle-monitor enable
- show config
- show link-bundle distribution
FIPS Cryptography
- fips mode enable
- show fips status
- show ip ssh
- ssh
Force10 Resilient Ring Protocol (FRRP)
- clear frrp
- debug frrp
- description
- disable
- interface
- member-vlan
- mode
- protocol frrp
- show frrp
- timer
GARP VLAN Registration (GVRP)
- clear gvrp statistics
- debug gvrp
- disable
- garp timers
- gvrp enable
- gvrp registration
- protocol gvrp
- show config
- show garp timers
- show gvrp
- show gvrp statistics
GRUB
- clear
- list_env
- reboot
- save_env
- set
ICMP Message Types
Internet Group Management Protocol (IGMP)
- IGMP Commands
- IGMP Snooping Commands
Interfaces
- Basic Interface Commands
- Egress Interface Selection (EIS) Commands
- Port Channel Commands
- Time Domain Reflectometer (TDR)
  - tdr-cable-test
  - show tdr
- UDP Broadcast
- Enhanced Validation of Interface Ranges
- ip http source-interface
Internet Protocol Security (IPSec)
- crypto ipsec transform-set
- crypto ipsec policy
- management crypto-policy
- match
- session-key
- show crypto ipsec transform-set
- show crypto ipsec policy
- transform-set
IPv4 Routing
- arp
- arp backoff-time
- arp learn-enable
- arp max-entries
- arp retries
- arp timeout
- clear arp-cache
- clear host
- clear ip fib stack-unit
- clear ip route
- clear tcp statistics
- debug arp
- debug ip dhcp
- debug ip icmp
- debug ip packet
- ip address
- ip directed-broadcast
- ip domain-list
- ip domain-lookup
- ip domain-name
- ip helper-address
- ip helper-address hop-count disable
- ip host
- ip icmp source-interface
- ipv6 icmp source-interface
- ip max-frag-count
- ip max-routes
- ip mtu
- ip name-server
- ip proxy-arp
- ip route
- ip source-route
- ip tcp initial-time
- show ip tcp initial-time
- ip unreachables
- load-balance
- load-balance hg
- management route
- show arp
- show arp retries
- show hosts
- show ip cam linecard
- show ip cam stack-unit
- show ip fib linecard
- show ip fib stack-unit
- show ip flow
- show ip interface
- show ip management-route
- show ipv6 management-route
- show ip protocols
- show ip route
- show ip route list
- show ip route summary
- show ip traffic
- show tcp statistics
IPv6 Access Control Lists (IPv6 ACLs)
- show cam-acl-egress
- show cam-acl
- permit icmp
- permit
- ipv6 control-plane egress-filter
- ipv6 access-list
- cam-acl-egress
- cam-acl
IPv6 Basics
- clear ipv6 fib
- clear ipv6 route
- clear ipv6 mld_host
- ipv6 address autoconfig
- ipv6 address
- ipv6 address eui64
- ipv6 control-plane icmp error-rate-limit
- ipv6 flowlabel-zero
- ipv6 host
- ipv6 name-server
- ipv6 nd dad attempts
- ipv6 nd dns-server
- ipv6 nd prefix
- ipv6 route
- ipv6 unicast-routing
- show ipv6 cam stack-unit
- show ipv6 control-plane icmp
- show ipv6 fib stack-unit
- show ipv6 flowlabel-zero
- show ipv6 interface
- show ipv6 mld_host
- show ipv6 route
- trust ipv6-diffserv
Intermediate System to Intermediate System (IS-IS)
- adjacency-check
- advertise
- area-password
- clear config
- clear isis
- clns host
- debug isis
- debug isis adj-packets
- debug isis local-updates
- debug isis snp-packets
- debug isis spf-triggers
- debug isis update-packets
- default-information originate
- description
- distance
- distribute-list in
- distribute-list out
- distribute-list redistributed-override
- domain-password
- graceful-restart ietf
- graceful-restart interval
- graceful-restart restart-wait
- graceful-restart t1
- graceful-restart t2
- graceful-restart t3
- hello padding
- hostname dynamic
- ignore-lsp-errors
- ip router isis
- ipv6 router isis
- isis circuit-type
- isis csnp-interval
- isis hello-interval
- isis hello-multiplier
- isis hello padding
- isis ipv6 metric
- isis metric
- isis network point-to-point
- isis password
- isis priority
- is-type
- log-adjacency-changes
- lsp-gen-interval
- lsp-mtu
- lsp-refresh-interval
- max-area-addresses
- max-lsp-lifetime
- maximum-paths
- metric-style
- multi-topology
- net
- passive-interface
- redistribute
- redistribute bgp
- redistribute ospf
- router isis
- set-overload-bit
- show config
- show isis database
- show isis graceful-restart detail
- show isis hostname
- show isis interface
- show isis neighbors
- show isis protocol
- show isis traffic
- spf-interval
Link Aggregation Control Protocol (LACP)
- clear lacp counters
- debug lacp
- lacp long-timeout
- lacp port-priority
- lacp system-priority
- port-channel mode
- port-channel-protocol lacp
- show lacp
- hg-link-bundle-monitor
- hg-link-bundle-monitor trigger-threshold
- hg-link-bundle-monitor rate-interval
- show hg-link-bundle-distribution
- snmp-server enable traps (for High-Gigabit Port Channel)
- show hardware stack-unit (for high-Gigabit Ethernet ports)
- clear hardware stack-unit (for high-Gigabit Ethernet ports)
Layer 2
- MAC Addressing Commands
- Virtual LAN (VLAN) Commands
- Far-End Failure Detection (FEFD)
Link Layer Discovery Protocol (LLDP)
- LLPD Commands
- LLDP-MED Commands
Microsoft Network Load Balancing
- arp (for Multicast MAC Address)
- mac-address-table static (for Multicast MAC Address)
- ip vlan-flooding
Multicast Source Discovery Protocol (MSDP)
- clear ip msdp peer
- clear ip msdp sa-cache
- clear ip msdp statistic
- debug ip msdp
- ip msdp cache-rejected-sa
- ip msdp default-peer
- ip msdp log-adjacency-changes
- ip msdp mesh-group
- ip msdp originator-id
- ip msdp peer
- ip msdp redistribute
- ip msdp sa-filter
- ip msdp sa-limit
- ip msdp shutdown
- ip multicast-msdp
- show ip msdp
- show ip msdp sa-cache rejected-sa
Multiple Spanning Tree Protocol (MSTP)
- debug spanning-tree mstp
- disable
- forward-delay
- hello-time
- max-age
- max-hops
- msti
- name
- protocol spanning-tree mstp
- revision
- show config
- show spanning-tree mst configuration
- show spanning-tree msti
- spanning-tree
- spanning-tree msti
- spanning-tree mstp edge-port
- tc-flush-standard
Multicast
- IPv4 Multicast Commands
- IPv6 Multicast Commands
  - debug ipv6 mld_host
  - ip multicast-limit
Open Shortest Path First (OSPFv2 and OSPFv3)
- OSPFv2 Commands
- OSPFv3 Commands
Policy-based Routing (PBR)
- description
- ip redirect-group
- ip redirect-list
- permit
- redirect
- seq
- show cam pbr
- show ip redirect-list
PIM-Sparse Mode (PIM-SM)
- IPv4 PIM-Sparse Mode Commands
- IPv6 PIM-Sparse Mode Commands
Port Monitoring
- description
- monitor session
- show config
- show monitor session
- show running-config monitor session
- source (port monitoring)
Private VLAN (PVLAN)
- ip local-proxy-arp
- private-vlan mode
- private-vlan mapping secondary-vlan
- switchport mode private-vlan
Per-VLAN Spanning Tree Plus (PVST+)
- description
- disable
- extend system-id
- protocol spanning-tree pvst
- show spanning-tree pvst
- spanning-tree pvst
- spanning-tree pvst err-disable
- tc-flush-standard
- vlan bridge-priority
- vlan forward-delay
- vlan hello-time
- vlan max-age
Quality of Service (QoS)
- Global Configuration Commands
  - qos-rate-adjust
- Per-Port QoS Commands
- Policy-Based QoS Commands
- DSCP Color Map Commands
Routing Information Protocol (RIP)
- auto-summary
- clear ip rip
- debug ip rip
- default-information originate
- default-metric
- description
- distance
- distribute-list in
- distribute-list out
- ip poison-reverse
- ip rip receive version
- ip rip send version
- ip split-horizon
- maximum-paths
- neighbor
- network
- offset-list
- output-delay
- passive-interface
- redistribute
- redistribute isis
- redistribute ospf
- router rip
- show config
- show ip rip database
- show running-config rip
- timers basic
- version
Remote Monitoring (RMON)
- rmon alarm
- rmon collection history
- rmon collection statistics
- rmon event
- rmon hc-alarm
- show rmon
- show rmon alarms
- show rmon events
- show rmon hc-alarm
- show rmon history
- show rmon log
- show rmon statistics
Rapid Spanning Tree Protocol (RSTP)
- bridge-priority
- debug spanning-tree rstp
- description
- disable
- forward-delay
- hello-time
- max-age
- protocol spanning-tree rstp
- show config
- show spanning-tree rstp
- spanning-tree rstp
- tc-flush-standard
Software-Defined Networking (SDN)
Security
- AAA Accounting Commands
- Authorization and Privilege Commands
- Obscure Password Commands
  - service obscure-passwords
- Authentication and Password Commands
- RADIUS Commands
- TACACS+ Commands
- Port Authentication (802.1X) Commands
- SSH Server and SCP Commands
- Secure DHCP Commands
- Role-Based Access Control Commands
Service Provider Bridging
- debug protocol-tunnel
- protocol-tunnel
- protocol-tunnel destination-mac
- protocol-tunnel enable
- protocol-tunnel rate-limit
- show protocol-tunnel
sFlow
- sflow collector
- sflow enable (Global)
- sflow enable (Interface)
- sflow extended-switch enable
- sflow polling-interval (Global)
- sflow polling-interval (Interface)
- sflow sample-rate (Global)
- sflow sample-rate (Interface)
- show sflow
- show sflow linecard
Simple Network Management Protocol (SNMP) and Syslog
- SNMP Commands
- Syslog Commands
SNMP Traps
Stacking
- redundancy disable-auto-reboot
- redundancy force-failover stack-unit
- redundancy protocol
- reset stack-unit
- show redundancy
- show system stack-ports
- stack-unit priority
- stack-unit provision
- stack-unit stack-group
- upgrade system stack-unit
Storm Control
- show storm-control broadcast
- show storm-control multicast
- show storm-control unknown-unicast
- storm-control broadcast (Configuration)
- storm-control broadcast (Interface)
- storm-control multicast (Configuration)
- storm-control multicast (Interface)
- storm-control unknown-unicast (Configuration)
- storm-control unknown-unicast (Interface)
Spanning Tree Protocol (STP)
- bridge-priority
- bpdu-destination-mac-address
- debug spanning-tree
- description
- disable
- forward-delay
- hello-time
- max-age
- protocol spanning-tree
- show config
- show spanning-tree 0
- spanning-tree
System Time and Date
- clock summer-time date
- clock summer-time recurring
- clock timezone
- debug ntp
- ntp authenticate
- ntp authentication-key
- ntp broadcast client
- ntp disable
- ntp multicast client
- ntp master
- ntp server
- ntp source
- ntp trusted-key
- show clock
- show ntp associations
- show ntp vrf associations
- show ntp status
Tunneling
- tunnel-mode
- tunnel source
- tunnel keepalive
- tunnel allow-remote
- tunnel dscp
- tunnel flow-label
- tunnel hop-limit
- tunnel destination
- ip unnumbered
- ipv6 unnumbered
VLAN Stacking
- dei enable
- dei honor
- dei mark
- member
- stack-unit stack-group
- vlan-stack access
- vlan-stack compatible
- vlan-stack dot1p-mapping
- vlan-stack protocol-type
- vlan-stack trunk
Virtual Link Trunking (VLT)
- back-up destination
- clear vlt statistics
- delay-restore
- lacp ungroup member-independent
- multicast peer-routing timeout
- peer-link port-channel
- peer-routing
- peer-routing-timeout
- primary-priority
- show vlt brief
- show vlt backup-link
- show vlt counters
- show vlt detail
- show vlt inconsistency
- show vlt mismatch
- show vlt role
- show vlt statistics
- show vlt statistics igmp-snoop
- system-mac
- unit-id
- vlt domain
- vlt-peer-lag port-channel
- Specifying VLT Nodes in a PVLAN
- show vlt private-vlan
VLT Proxy Gateway
- proxy-gateway lldp
- proxy-gateway static
- remote-mac-address exclude-vlan
- peer-domain-link port-channel exclude-vlan
- proxy-gateway peer-timeout
- vlt-peer-mac transmit
- show vlt-proxy-gateway
Virtual Routing and Forwarding (VRF)
- ip vrf
- description
- ip vrf forwarding
- interface management
- show ip vrf
- show run vrf
Virtual Router Redundancy Protocol (VRRP)
- IPv4 VRRP Commands
- IPv6 VRRP Commands
- advertise-interval
- description
- disable
- hold-time
- preempt
- priority
- show config
- virtual-address

<cr>

Dell#ssh 10.10.10.10 -c ?

3des-cbc Force ssh to use 3des-cbc encryption cipher

aes128-cbc Force ssh to use aes128-cbc encryption cipher

aes192-cbc Force ssh to use aes192-cbc encryption cipher

aes256-cbc Force ssh to use aes256-cbc encryption cipher

aes128-ctr Force ssh to use aes128-ctr encryption cipher

aes192-ctr Force ssh to use aes192-ctr encryption cipher

aes256-ctr Force ssh to use aes256-ctr encryption cipher

Dell#ssh 10.10.10.10 -m ?

hmac-sha1 Force ssh to use hmac-sha1 HMAC algorithm

hmac-sha1-96 Force ssh to use hmac-sha1-96 HMAC algorithm

hmac-sha2-256 Force ssh to use hmac-sha2-256 HMAC algorithm

hmac-sha2-256-96 Force ssh to use hmac-sha2-256-96 HMAC

algorithm

564

FIPS Cryptography