CLI Reference Guide-R05
Table Of Contents
- How to Use This Guide
 - Contents
 - Tables
 - Getting Started
- Initial Switch Configuration
- Connecting to the Switch
 - Configuring the Switch for Remote Management
 - Configuring the Switch for Cloud Management
 - Enabling SNMP Management Access
 - Managing System Files
 - Installing a Port License File
 - Automatic Installation of Operation Code and Configuration Settings
 - Downloading a Configuration File and Other Parameters from a DHCP Server
 - Setting the System Clock
 
 
 - Initial Switch Configuration
 - Command Line Interface
- Using the Command Line Interface
 - General Commands
 - System Management Commands
 - SNMP Commands
 - Remote Monitoring Commands
 - Flow Sampling Commands
 - Authentication Commands
 - General Security Measures
- Port Security
 - Network Access (MAC Address Authentication)
- network-access aging
 - network-access mac-filter
 - mac-authentication reauth-time
 - network-access dynamic-qos
 - network-access dynamic-vlan
 - network-access guest-vlan
 - network-access max- mac-count
 - network-access mode mac-authentication
 - network-access port- mac-filter
 - mac-authentication intrusion-action
 - mac-authentication max-mac-count
 - clear network-access
 - show network-access
 - show network-access mac-address-table
 - show network-access mac-filter
 
 - Web Authentication
 - DHCPv4 Snooping
- ip dhcp snooping
 - ip dhcp snooping information option
 - ip dhcp snooping information option encode no-subtype
 - ip dhcp snooping information option remote-id
 - ip dhcp snooping information option tr101 board-id
 - ip dhcp snooping information policy
 - ip dhcp snooping verify mac-address
 - ip dhcp snooping vlan
 - ip dhcp snooping information option circuit-id
 - ip dhcp snooping max-number
 - ip dhcp snooping trust
 - clear ip dhcp snooping binding
 - clear ip dhcp snooping database flash
 - ip dhcp snooping database flash
 - show ip dhcp snooping
 - show ip dhcp snooping binding
 
 - IPv4 Source Guard
 - ARP Inspection
- ip arp inspection
 - ip arp inspection filter
 - ip arp inspection log-buffer logs
 - ip arp inspection validate
 - ip arp inspection vlan
 - ip arp inspection limit
 - ip arp inspection trust
 - show ip arp inspection configuration
 - show ip arp inspection interface
 - show ip arp inspection log
 - show ip arp inspection statistics
 - show ip arp inspection vlan
 
 - Denial of Service Protection
 - Port-based Traffic Segmentation
 
 - Access Control Lists
 - Interface Commands
 - Link Aggregation Commands
 - Port Mirroring Commands
 - Congestion Control Commands
 - Loopback Detection Commands
 - Address Table Commands
 - Smart Pair Commands
 - Spanning Tree Commands
- spanning-tree
 - spanning-tree cisco-prestandard
 - spanning-tree forward-time
 - spanning-tree hello-time
 - spanning-tree max-age
 - spanning-tree mode
 - spanning-tree mst configuration
 - spanning-tree pathcost method
 - spanning-tree priority
 - spanning-tree system-bpdu-flooding
 - spanning-tree tc-prop
 - spanning-tree transmission-limit
 - max-hops
 - mst priority
 - mst vlan
 - name
 - revision
 - spanning-tree bpdu-filter
 - spanning-tree bpdu-guard
 - spanning-tree cost
 - spanning-tree edge-port
 - spanning-tree link-type
 - spanning-tree loopback-detection
 - spanning-tree loopback-detection action
 - spanning-tree loopback-detection release-mode
 - spanning-tree loopback-detection trap
 - spanning-tree mst cost
 - spanning-tree mst port-priority
 - spanning-tree port-bpdu-flooding
 - spanning-tree port-priority
 - spanning-tree root-guard
 - spanning-tree spanning-disabled
 - spanning-tree tc-prop-stop
 - spanning-tree loopback-detection release
 - spanning-tree protocol-migration
 - show spanning-tree
 - show spanning-tree mst configuration
 - show spanning-tree tc-prop
 
 - VLAN Commands
 - Class of Service Commands
 - Quality of Service Commands
 - Multicast Filtering Commands
- IGMP Snooping
- ip igmp snooping
 - ip igmp snooping priority
 - ip igmp snooping proxy-reporting
 - ip igmp snooping querier
 - ip igmp snooping router-alert-option- check
 - ip igmp snooping router-port- expire-time
 - ip igmp snooping tcn-flood
 - ip igmp snooping tcn-query-solicit
 - ip igmp snooping unregistered-data- flood
 - ip igmp snooping unsolicited-report- interval
 - ip igmp snooping version
 - ip igmp snooping version-exclusive
 - ip igmp snooping vlan general-query- suppression
 - ip igmp snooping vlan immediate-leave
 - ip igmp snooping vlan last-memb-query- count
 - ip igmp snooping vlan last-memb-query- intvl
 - ip igmp snooping vlan mrd
 - ip igmp snooping vlan proxy-address
 - ip igmp snooping vlan query-interval
 - ip igmp snooping vlan query-resp-intvl
 - ip igmp snooping vlan static
 - clear ip igmp snooping groups dynamic
 - clear ip igmp snooping statistics
 - show ip igmp snooping
 - show ip igmp snooping group
 - show ip igmp snooping mrouter
 - show ip igmp snooping statistics
 
 - Static Multicast Routing
 - IGMP Filtering and Throttling
- ip igmp filter (Global Configuration)
 - ip igmp profile
 - permit, deny
 - range
 - ip igmp filter (Interface Configuration)
 - ip igmp max-groups
 - ip igmp max-groups action
 - ip igmp query-drop
 - ip multicast-data-drop
 - show ip igmp filter
 - show ip igmp profile
 - show ip igmp query-drop
 - show ip igmp throttle interface
 - show ip multicast-data-drop
 
 - MLD Snooping
- ipv6 mld snooping
 - ipv6 mld snooping proxy-reporting
 - ipv6 mld snooping querier
 - ipv6 mld snooping query-interval
 - ipv6 mld snooping query-max-response- time
 - ipv6 mld snooping robustness
 - ipv6 mld snooping router-port- expire-time
 - ipv6 mld snooping unknown-multicast mode
 - ipv6 mld snooping unsolicited-report- interval
 - ipv6 mld snooping version
 - ipv6 mld snooping vlan immediate-leave
 - ipv6 mld snooping vlan mrouter
 - ipv6 mld snooping vlan static
 - clear ipv6 mld snooping groups dynamic
 - clear ipv6 mld snooping statistics
 - show ipv6 mld snooping
 - show ipv6 mld snooping group
 - show ipv6 mld snooping group source-list
 - show ipv6 mld snooping mrouter
 - show ipv6 mld snooping statistics
 
 - MLD Filtering and Throttling
 
 - IGMP Snooping
 - LLDP Commands
- lldp
 - lldp holdtime-multiplier
 - lldp med-fast-start-count
 - lldp notification-interval
 - lldp refresh-interval
 - lldp reinit-delay
 - lldp tx-delay
 - lldp admin-status
 - lldp basic-tlv management-ip- address
 - lldp basic-tlv port-description
 - lldp basic-tlv system-capabilities
 - lldp basic-tlv system-description
 - lldp basic-tlv system-name
 - lldp dot1-tlv proto-ident
 - lldp dot1-tlv proto-vid
 - lldp dot1-tlv pvid
 - lldp dot1-tlv vlan-name
 - lldp dot3-tlv link-agg
 - lldp dot3-tlv mac-phy
 - lldp dot3-tlv max-frame
 - lldp med-location civic-addr
 - lldp med-notification
 - lldp med-tlv inventory
 - lldp med-tlv location
 - lldp med-tlv med-cap
 - lldp med-tlv network-policy
 - lldp notification
 - show lldp config
 - show lldp info local-device
 - show lldp info remote-device
 - show lldp info statistics
 
 - Domain Name Service Commands
 - DHCP Commands
 - IP Interface Commands
 - IP Routing Commands
- Global Routing Configuration
 - Routing Information Protocol (RIP)
- router rip
 - default-information originate
 - default-metric
 - distance
 - maximum-prefix
 - neighbor
 - network
 - passive-interface
 - redistribute
 - timers basic
 - version
 - ip rip authentication mode
 - ip rip authentication string
 - ip rip receive version
 - ip rip receive-packet
 - ip rip send version
 - ip rip send-packet
 - ip rip split-horizon
 - clear ip rip route
 - show ip protocols rip
 - show ip rip
 
 
 
 - Appendices
 - Glossary
 - Commands
 - Index
 
Index
– 710 –
global unicast 636
link-local
 638
manual configuration (global unicast)
 44, 636
manual configuration (link-local)
 44, 641
setting
 42, 636
J
jumbo frame 107
K
key
private
 243
public
 243
user public, importing
 110, 114
key pair
host
 243
host, generating
 248
L
LACP
configuration
 387
group attributes, configuring
 395
group members, configuring
 391
local parameters
 397
partner parameters
 397
protocol message statistics
 397
protocol parameters
 387
timeout, for LACPDU
 396
last member query count, IGMP snooping
 529
last member query interval, IGMP snooping
 530
license information, GNU
 687
Link Layer Discovery Protocol  See LLDP
link type, STA
 450
LLDP
 577
device statistics details, displaying
 599
device statistics, displaying
 599
display device information
 597
displaying remote information
 597
interface attributes, configuring
 583–594
local device information, displaying
 596
message attributes
 577
message statistics
 599
remote information, displaying
 597
remote port information, displaying
 597
timing attributes, configuring
 579–582
TLV, 802.1
 586–587
TLV, 802.3
 588–589
TLV, basic
 583–585
TLV, management address
 583
TLV, port description
 584
TLV, system capabilities
 584
TLV, system description
 585
TLV, system name
 585
LLDP-MED
 577
notification, status
 591
TLV
 577
TLV, inventory
 592
TLV, location
 590, 593
TLV, MED capabilities
 593
TLV, network policy
 594
local engine ID
 179
logging
messages, displaying
 137
syslog traps
 136
to syslog servers
 134
logon authentication
 209
encryption keys
 218, 221
RADIUS client
 216
RADIUS server
 216
sequence
 214, 215
settings
 215
TACACS+ client
 220
TACACS+ server
 220
loopback detection
non-STA
 415
STA
 450
M
MAC address authentication 273
ports, configuring
 273, 279
reauthentication
 275
MAC address, mirroring
 401
management access, filtering per address
 263
management access, IP filter
 263
matching class settings, classifying QoS traffic
 508
mDNS
domain name list
 609
enabling lookup
 609
multicast name service
 609
name server list
 609
media-type
 362
memory
status
 96
utilization, showing
 96
memory utilization, setting trap
 190
mirror port
configuring
 401
configuring local traffic
 401
configuring remote traffic
 403
MLD
filter profiles, configuration
 569
filtering & throttling
 568
filtering & throttling, configuring profile
 570
filtering & throttling, creating profile
 569
filtering & throttling, enabling
 568
filtering & throttling, interface configuration
 571–572










