FortiSwitch-548B Version 5.2.0.
FortiSwitch-548B Administration Guide Version 5.2.0.2 Revision 6 December 11, 2012 Copyright© 2012 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, and FortiGuard®, are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be trademarks of Fortinet. All other product or company names may be trademarks of their respective owners.
Table of Contents 1. Introduction ................................................................................................................6 1.1 Scope .................................................................................................................6 1.2 Documentation....................................................................................................6 1.3 Customer Service and Technical Support ...........................................................6 1.
7.2 Device Configuration Commands......................................................................41 7.3 Management Commands ................................................................................ 152 7.4 Spanning Tree Commands.............................................................................. 202 7.5 System Log Management Commands ............................................................ 222 7.6 Script Management Commands ................................................
9.4 Multicast Commands ...................................................................................... 513 9.5 Protocol Independent Multicast – Dense Mode (PIM-DM) Commands ............ 519 9.6 Protocol Independent Multicast – Sparse Mode (PIM-SM) Commands ........... 523 9.7 IGMP Proxy Commands ................................................................................. 532 9.8 MLD Proxy Commands ...................................................................................
1. Introduction 1.1 Scope This document describes: how to install the FortiSwitch-548B switch (the Switch) how to use the CLI console to manage the Switch how to use the web-based management interface to configure the Switch 1.2 Documentation The Fortinet Technical Documentation web site, http://docs.fortinet.com, provides the most up-to-date versions of Fortinet publications, as well as additional technical documentation such as technical notes. 1.2.
To learn about the training services that Fortinet provides, visit the Fortinet Training Services web site at http://campus.training.fortinet.com, or email them at training@fortinet.com.
2. Product Overview 2.1 Switch Description FortiSwitch-548B is a layer 2 SFP+ 10-Gigabit Ethernet backbone switch designed for adaptability and scalability. The Switch provides a management platform and uplink to backbone. Alternatively, the Switch can utilize up to 48 10-Gigabit Ethernet ports to function as a central distribution hub for other switches, switch groups, or routers. The built-in 1000/100/10 Ethernet port is for out of service.
VLAN routing support IP Multicast support IGMP v1, v2, and v3 support DVMRP support Protocol Independent Multicast - Dense Mode (PIM-DM) support for IPv4 and IPv6 Protocol Independent Multicast - Sparse Mode (PIM-SM) support for IPv4 and IPv6 Supports DHCPv6 protocol, OSPFv3 protocol, Tunneling, loopback Allows to configure IPv6 routing interface, routing preference DHCP Client and Relay support DNS Client and Relay support Per-port bandwidth control SNMP v.
2.3 Front-Panel Components The front panel of the Switch consists of 48 10-Gigabit interfaces, 2 LED indicators, 1 built-in 1000/100/10 RJ-45 Ethernet service ports, an RS-232 communication port, and 48 port LEDs. The upper LED indicators display power status. The lower LED indicators displays the status of the switch. An RS-232 DCE console port is for setting up and managing the Switch via a connection to a console terminal or PC using a terminal emulation program.
2.6 Management Options The system may be managed by using one Service Ports through a Web Browswer,Telent, SNMP function and using the console port on the front panel through CLI command. 2.7 Web-based Management Interface After you have successfully installed the Switch, you can configure the Switch, monitor the LED panel, and display statistics graphically using a Web browser, such as Mozilla FireFox (version 3.6 or higher) or Microsoft® Internet Explorer (version 5.0 or above). ! 2.
RFC 2787 (VRRP-MIB) RFC 3289 - DIFFSERV-DSCP-TC RFC 3289 - DIFFSERV-MIB QOS-DIFFSERV-EXTENSIONS-MIB QOS-DIFFSERV-PRIVATE-MIB RFC 2674 802.
3. Installation and Quick Startup 3.
3.2 Switch Installation Installing the Switch Without the Rack 1. Install the Switch on a level surface that can safely support the weight of the Switch and its attached cables. The Switch must have adequate space for ventilation and for accessing cable connectors. 2. Set the Switch on a flat surface and check for proper ventilation. Allow at least 5 cm (2 inches) on each side of the Switch and 15 cm (6 inches) at the back for the power cable. 3.
3.3 Installing the Switch in a Rack You can install the Switch in most standard 19-inch (48.3-cm) racks. Refer to the illustrations below. 1. Use the supplied screws to attach a mounting bracket to each side of the Switch. 2. Align the holes in the mounting bracket with the holes in the rack. 3. Insert and tighten two screws through each of the mounting brackets.
3.4 Quick Starting the Switch 1. Read the device Installation Guide for the connectivity procedure. In-band connectivity allows access to the FortiSwitch-548B Series Switch locally. From a remote workstation,the device must be configured with IP information (IP address, subnet mask, and default gateway). 2. Turn the Power ON. 3. Allow the device to load the software until the login prompt appears. The device initial state is called the default mode. 4.
3.5 System Information Setup 3.5.1 Quick Start up Software Version Information Table 2-1. Quick Start up Software Version Information Command show hardware Details Allows the user to see the HW & SW version the device contains System Description - switch's model name show version Allows the user to see Serial Number, Part Number, and Model name See SW loader, bootrom and operation version See HW version 3.5.2 Quick Start up Physical Port Data Table 2-2.
show loginsession (Read/Write) or is only able to view (Read Only). As a factory default, admin has Read/Write access and guest has Read Only access. There can only be one Read/Write user and up to 5 Read Only users. Displays all login session information username {passwd | nopasswd} Allows the user to set passwords or change passwords needed to login A prompt will appear after the command is entered requesting the old password. In the absence of an old password leave the area blank.
ip address 3.5.5 Management VLAN Id - Specifies VLAN id Web Mode - Indicates whether HTTP/Web is enabled. Java Mode - Indicates whether java mode is enabled. (Config)#interface vlan 1 (if-vlan 1)#ip address (if-vlan 1)#exit (Config)#ip default-gateway IP Address range from 0.0.0.0 to 255.255.255.255 Subnet Mask range from 0.0.0.0 to 255.255.255.255 Gateway Address range from 0.0.0.0 to 255.255.255.
copy startup-config Sets the download datatype to be an image or config file. The URL must be specified as: tftp://ipAddr/filepath/fileName. The startup-config option downloads the config file using tftp and image option downloads the code file. 3.5.8 Quick Start up Factory Defaults Table 2-8 Quick Start up Factory Defaults Command clear config Details Enter yes when the prompt pops up to clear all the configurations made to the switch.
4. Console and Telnet Administration Interface This chapter discusses many of the features used to manage the Switch, and explains many concepts and important points regarding these features. Configuring the Switch to implement these concepts is discussed in detail in chapter 6. 4.1 Local Console Management Local console management involves the administration of the Switch via a direct connection to the RS-232 DCE console port.
The console port is set for the following configuration: Baud rate: 11,520 Data width: 8 bits Parity: none Stop bits: 1 Flow Control: none A typical console connection is illustrated below: Figure 3-1: Console Setting Environment - 22 -
4.3 Set Up your Switch Using Telnet Access Once you have set an IP address for your Switch, you can use a Telnet program (in a VT-100 compatible terminal mode) to access and control the Switch. Most of the screens are identical, whether accessed from the console port or from a Telnet interface.
5. Web-Based Management Interface 5.1 Overview The Fortinet FortiSwitch-548B Series Layer III plus QoS Managed Switch provides a built-in browser interface that lets you configure and manage it remotely using a standard Web browser such as Microsoft Internet Explorer 5.0 or later or Netscape Navigator 6.0 or later. This interface also allows for system monitoring and management of the switch. The ‘help’ page covers many of the basic functions and features of the switch and its Web interface.
5.2 How to log in The Fortinet FortiSwitch-548B Series Layer III plus QoS Managed Switch can be configured remotely from Microsoft Internet Explorer (version 5.0 or above), or Mozilla FireFox (version 3.6 or above). 1. Determine the IP address of your managed switch. 2. Open your Web browser. 3. Log in to the managed switch using the IP address the unit is currently configured with. 4. Type the default user name of admin and default of no password, or whatever password you have set up.
5.3 Web-Based Management Menu Menus The Web-based interface enables navigation through several menus. The main navigation menu is on the left of every page and contains the screens that let you access all the commands and statistics the switch provides.
Secondary Menus The Secondary Menus under the Main Menu contain a host of options that you can use to configure your switch. The online help contains a detailed description of the features on each screen. You can click the ‘help’ or the question mark at the top right of each screen to view the help menu topics. The Secondary Menus are detailed below, with cross-references to the sections in this manual that contain the corresponding command descriptions.
MAC-based VLAN — see “MAC-based Commands” MAC-based Vocie VLAN — see “MAC-based Vocie VLAN Commands” Voice VLAN — see “Voice VLAN Commands” Filters — see “MAC Filters Commands” GARP — see “GVRP and Bridge Extension Commands” Dynamic Arp Inspection — see “DAI Commands” IGMP Snooping — see “IGMP Snooping Commands” IGMP Snooping Querier — see “IGMP Snooping Querier Commands” MLD Snooping — see “MLD Snooping Commands” MLD Snooping Querier — see “MLD Snooping Querier Comman
Secure HTTP — see “HTTP Commands” Secure Shell — see “Secure Shell (SSH) Commands” IPv6 OSPFv3 — see “OSPFv3 Configuration Commands” IPv6 Routes — see “IPv6 Routes Configuration Commands” RIPv6 — see “RIPv6 Configuration Commands” QoS ACL — see “ACL Commands” Diffserv — see “Differentiated Services Commands” Class of Service see "Class of Service Commands" IPv4 Multicast DVMRP — see “DVMRP Commands” IGMP — see “IGMP Commands” PIM-DM — see “PIM-DM Commands” PIM-
6. Command Line Interface Structure and Mode-based CLI The Command Line Interface (CLI) syntax, conventions, and terminology are described in this section. Each CLI command is illustrated using the structure outlined below. 6.1 CLI Command Format Commands are followed by values, parameters, or both. Example 1 ip address [] ip address is the command name. are the required values for the command. [] is the optional value for the command.
6.2 CLI Mode-based Topology Parameters Parameters are order dependent. The text in bold italics should be replaced with a name or number. To use spaces as part of a name parameter, enclose it in double quotes like this: "System Name with Spaces". Parameters may be mandatory values, optional values, choices, or a combination. . The <> angle brackets indicate that a mandatory parameter must be entered in place of the brackets and text inside them. [parameter].
Conventions Network addresses are used to define a link to a remote host, workstation, or network. Network addresses are shown using the following syntax: Table 5-1. Network Address Syntax Address Type IPAddr MacAddr Format A.B.C.D Range YY:YY:YY:YY:YY:YY 0.0.0.0 to 255.255.255.255 hexidecimal digit pairs Double quotation marks such as "System Name with Spaces" set off user defined strings.
7. Switching Commands 7.1 System Information and Statistics commands 7.1.1 show arp This command displays connectivity between the switch and other devices. The Address Resolution Protocol (ARP) cache identifies the MAC addresses of the IP stations communicating with the switch. Syntax show arp Default Setting None Command Mode Privileged Exec Display Message MAC Address: A unicast MAC address for which the switch has forwarding and/or filtering information.
7.1.3 show process cpu This command provides the percentage utilization of the CPU by different tasks. Syntax show process cpu i It is not necessarily the traffic to the CPU, but different tasks that keep the CPU busy. Default Setting None Command Mode Privileged Exec Display Message The following shows example CLI display output for the command.
7.1.4 show eventlog This command displays the event log, which contains error messages from the system, in the Primary Management System or in the specified unit. The event log is not cleared on a system reset. Syntax show eventlog [unit] unit - The unit number of the remote system. The range is 1 to 8. Default Setting None Command Mode Privileged Exec Display Message File: The file in which the event originated. Line: The line number of the event. Task Id: The task ID of the event.
Default Setting None Command Mode Privileged Exec 7.1.6 show sysinfo This command displays switch brief information and MIBs supported. Syntax show sysinfo Default Setting None Command Mode Privileged Exec Display Message System Description: The text used to identify this switch. System Name: The name used to identify the switch. System Location: The text used to identify the location of the switch. May be up to 31 alpha-numeric characters. The factory default is blank.
Display Message System Description: Text used to identify this switch. System Object ID: The manufacturing ID System Information System Up Time: The time in days, hours and minutes since the last switch reboot. System Name: Name used to identify the switch. System Location: Text used to identify the location of the switch. May be up to 31 alpha-numeric characters. The factory default is blank. System Contact: Text used to identify a contact person for this switch. May be up to 31 alphanumeric characters.
Default Setting None Command Mode Privileged Exec Display Message System Description: Text used to identify the product name of this switch. Machine Type: Specifies the machine model as defined by the Vital Product Data. Machine Model: Specifies the machine model as defined by the Vital Product Data. Serial Number: The unique box serial number for this switch. Label Revision Number: The label revision serial number of this switch is used for manufacturing purposes. Part Number: Manufacturing part number.
Name: Name provided by Power Supply vendor. Model: Model Number provided by Power Supply vendor. Revision Number: Revision Number provided by Power Supply vendor. Manufacturer Location: Location provided by Power Supply vendor. Date of Manufacturing: Date of Manufacturing provided by Power Supply vendor. Serial Numbe: Serial Number provided by Power Supply vendor. Temperature 1:.
Serial Number: The unique box serial number for this switch. Hardware Version: The hardware version of this switch. It is divided into four parts. The first byte is the major version and the second byte represents the minor version. Number of ports:Total number of port for this swirch system. Label Revision Number: The label revision serial number of this switch is used for manufacturing purposes. Part Number: Manufacturing part number.
7.1.12 show command filter This command displays the information that begin/include/exclude the regular expression. Syntax show command [| begin/include/exclude ] Default Setting None Command Mode Privileged Exec Display Message command: Any show command of the CLI begin: Begin with the line that matches include: Include lines that match exclude: Exclude lines that match : Regular Expression 7.2 Device Configuration Commands 7.2.1 Interface 7.2.1.
Source: This port is a monitoring port. PC Mbr: This port is a member of a port-channel (LAG). Dest: This port is a probe port. Admin Mode: Selects the Port control administration state. The port must be enabled in order for it to be allowed into the network. It may be enabled or disabled. The factory default is enabled. Physical Mode: Selects the desired port speed and duplex mode. If auto-negotiation support is selected, then the duplex mode and speed will be set from the auto-negotiation process.
Broadcast Packets Received: The total number of packets received that were directed to the broadcast address. Note that this does not include multicast packets. Packets Transmitted Without Error: The total number of packets transmitted out of the interface. Transmit Packets Errors: The number of outbound packets that could not be transmitted because of errors. Collisions Frames: The best estimate of the total number of collisions on this Ethernet segment.
Total Packets Received (Octets): The total number of octets of data (including those in bad packets) received on the network (excluding framing bits but including FCS octets). This object can be used as a reasonable estimate of Ethernet utilization. If greater precision is desired, the etherStatsPkts and etherStatsOctets objects should be sampled before and after a common interval.
Packets RX and TX 2048-4095 Octets: The total number of packets (including bad packets) received that were between 2048 and 4095 octets in length inclusive (excluding framing bits but including FCS octets). Packets RX and TX 4096-9216 Octets: The total number of packets (including bad packets) received that were between 4096 and 9216 octets in length inclusive (excluding framing bits but including FCS octets).
Packets Transmitted 512-1023 Octets: The total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets). Packets Transmitted 1024-1518 Octets: The total number of packets (including bad packets) received that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).
STP BPDUs Received: Spanning Tree Protocol Bridge Protocol Data Units received. RSTP BPDUs Transmitted: Rapid Spanning Tree Protocol Bridge Protocol Data Units sent. RSTP BPDUs Received: Rapid Spanning Tree Protocol Bridge Protocol Data Units received. MSTP BPDUs Transmitted: Multiple Spanning Tree Protocol Bridge Protocol Data Units sent. MSTP BPDUs Received: Multiple Spanning Tree Protocol Bridge Protocol Data Units received.
Maximum VLAN Entries: The maximum number of Virtual LANs (VLANs) allowed on this switch. Most VLAN Entries Ever Used: The largest number of VLANs that have been active on this switch since the last reboot. Static VLAN Entries: The number of presently active VLAN entries on this switch that have been created statically. Dynamic VLAN Entries: The number of presently active VLAN entries on this switch that have been created by GVRP registration.
7.2.1.4 interface This command is used to enter Interface configuration mode. Syntax interface - is the desired interface number. Default Setting None Command Mode Global Config 7.2.1.5 speed-duplex This command is used to set the speed and duplex mode for the interface. The 10-Giga interfaces will not provide the following command. Instead, it provides a command to set the speed of 10-Giga port to 1Gbps.
all - This command represents all interfaces. no - This command will be back to 10G speed from 1G speed for all ports. Default Setting None Command Mode Global Config 7.2.1.6 negotiate This command enables automatic negotiation on a port. The default value is enabled. i The 10-Giga interfaces will not provide the following command. Syntax negotiate no negotiate no - This command disables automatic negotiation on a port.
Command Mode Global Config 7.2.1.7 capabilities This command is used to set the capabilities on specific interface. The 10-Giga interfaces will not provide the following command.
Default Setting 10 half-duplex, 10 full-duplex, 100 half-duplex, 100 full-duplex, and 1000 full-duplex Command Mode Global Config 7.2.1.8 storm-control flowcontrol This command enables 802.3x flow control for the switch. i 802.3x flow control only applies to full-duplex mode ports. Syntax storm-control flowcontrol no storm-control flowcontrol no - This command disables 802.3x flow control for the switch. Default Setting Disabled Command Mode Global Config This command enables 802.
7.2.1.9 storm-control flowcontrol pfc The PFC function is disabled by default. Only after enabling it, the PFC process also starts. Once the feature is enabled, the original basic IEEE 802.3x PAUSE control cannot be enabled. It means these two features cannot be enabled at the same time. 802.3x flow control only applies to full-duplex mode ports. i Syntax storm-control flowcontrol pfc no storm-control flowcontrol pfc no - This command disables Priority Flow Control for the specific interface.
all - This command represents all ports. no - This command enables all ports. Default Setting Enabled Command Mode Global Config 7.2.1.11 description This command is used to create an alpha-numeric description of the port. Syntax description no description no - This command removes the description of the port. Default Setting None Command Mode Interface Config 7.2.1.12 mdi The 10-Giga interface will not provide the following command.
Default Setting Auto Command Mode Interface Config 7.2.2 L2 MAC Address and Multicast Forwarding Database Tables 7.2.2.1 show mac-addr-table This command displays the forwarding database entries. If the command is entered with no parameter, the entire table is displayed. This is the same as entering the optional all parameter. Alternatively, the administrator can enter a MAC Address to display the table entry for the requested MAC address and all entries following the requested MAC address.
Self: The value of the corresponding instance is the address of one of the switch’s physical interfaces (the system’s own MAC address). GMRP Learned: The value of the corresponding instance was learned via GMRP and applies to Multicast. Other: The value of the corresponding instance does not fall into one of the other categories. 7.2.2.
example 01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as 8 bytes. In an SVL system, the MAC address will be displayed as 6 bytes. Note: This software version only supports IVL systems. VLAN ID: The vlan id of that mac address. Status: The status of this entry. The meanings of the values are: Static: The value of the corresponding instance was added by the system or a user when a static MAC filter was defined. It cannot be relearned.
Learned: The value of the corresponding instance was learned by observing the source MAC addresses of incoming traffic, and is currently in use. Management: The value of the corresponding instance (system MAC address) is also the value of an existing instance of dot1dStaticAddress. It is identified with interface 3/1 and is currently used when enabling VLANs for routing. Self: The value of the corresponding instance is the address of one of the switch’s physical interfaces (the system’s own MAC address).
Display Message Mac Address: A unicast MAC address for which the switch has forwarding and/or filtering information. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as 8 bytes. In an SVL system, the MAC address will be displayed as 6 bytes. Note: This software version only supports IVL systems. Type: This displays the type of the entry.
7.2.2.8 show mac-address-table stats This command displays the MFDB statistics. Syntax show mac-address-table stats Default Setting None Command Mode Privileged Exec Display Message Max MFDB Table Entries: This displays the total number of entries that can possibly be in the MFDB. Most MFDB Entries Since Last Reset: This displays the largest number of entries that have been present in the Multicast Forwarding Database table. This value is also known as the MFDB high-water mark.
no - This command sets the forwarding database address aging timeout to 300 seconds. Default Setting 300 Command Mode Global Config 7.2.3 VLAN Management 7.2.3.1 show vlan This command displays brief information on a list of all configured VLANs. Syntax show vlan Default Setting None Command Mode Privileged Exec Display Message VLAN ID: There is a VLAN Identifier (vlanid) associated with each VLAN. The range of the VLAN ID is 1 to 3965. VLAN Name: A string associated with this VLAN as a convenience.
Default Setting None Command Mode Privileged Exec Display Message VLAN ID: There is a VLAN Identifier (VID) associated with each VLAN. The range of the VLAN ID is 1 to 3965. VLAN Name: A string associated with this VLAN as a convenience. It can be up to 16 alphanumeric characters, including blanks. The default is blank. VLAN ID 1 is always named `Default`. This field is optional.
- enter a MAC Address to display the table entry for the requested MAC address. Default Setting None Command Mode Privileged Exec Display Message MAC Address: A unicast MAC address for which the switch has forwarding and/or filtering information. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as 8 bytes. In an SVL system, the MAC address will be displayed as 6 bytes.
Syntax show protocol group { | all} - The group name of an entry in the Protocol-based VLAN table. all – Displays the entire table. Default Setting None Command Mode Privileged Exec Display Message Group Name: This field displays the group name of an entry in the Protocol-based VLAN table. Group ID: This field displays the group identifier of the protocol group. Protocol(s): This field indicates the type of protocol(s) for this group.
port. With either option, VLAN tagged frames are forwarded in accordance to the 802.1Q VLAN specification. Ingress Filtering: May be enabled or disabled. When enabled, the frame is discarded if this port is not a member of the VLAN with which this frame is associated. In a tagged frame, the VLAN is identified by the VLAN ID in the tag. In an untagged frame, the VLAN is the Port VLAN ID specified for the port that received this frame. When disabled, all frames are forwarded in accordance with the 802.
Syntax vlan name no vlan name - VLAN ID (Range: 1 –3965). - Configure a new VLAN Name (up to 16 alphanumeric characters). no - This command sets the name of a VLAN to a blank string. The VLAN ID is a valid VLAN identification number. ID range is 1-3965. Default Setting The name for VLAN ID 1 is always Default. The name for other VLANs is defaulted to a blank string. Command Mode VLAN database 7.2.3.
- VLAN identification number. ID range is 1-3965. no - This command removes association of a specific IP-subnet to a VLAN. Default Setting None Command Mode VLAN database 7.2.3.12 vlan makestatic This command changes a dynamically created VLAN (one that is created by GVRP registration) to a static VLAN (one that is permanently configured and defined). The ID is a valid VLAN identification number. VLAN range is 2-3965. Syntax vlan makestatic - VLAN ID (Range: 2 –3965).
Default Setting None Command Mode VLAN database 7.2.3.14 switchport acceptable-frame-type This command sets the frame acceptance mode per interface. For VLAN Only mode, untagged frames or priority frames received on this interface are discarded. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification.
no - This command sets the frame acceptance mode for all interfaces to Admit All. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification. Default Setting Admit all Command Mode Global Config 7.2.3.15 switchport ingress-filtering This command enables ingress filtering.
Default Setting Disabled Command Mode Global Config 7.2.3.16 switchport native vlan This command changes the VLAN ID per interface. Syntax switchport native vlan no switchport native vlan - VLAN ID (Range: 1 –3965). no - This command sets the VLAN ID per interface to 1. Default Setting 1 Command Mode Interface Config This command changes the VLAN ID for all interfaces. Syntax switchport native vlan all - VLAN ID (Range: 1 –3965). all - All interfaces.
7.2.3.17 switchport allowed vlan This command configures the degree of participation for a specific interface in a VLAN. The ID is a valid VLAN identification number, and the interface is a valid interface number. Syntax switchport allowed vlan {add [tagged | untagged] | remove} - VLAN ID (Range: 1 –3965) – separate non-consecutive IDs with ',' and no spaces and no zeros in between the range; Use '-' for range. add - The interface is always a member of this VLAN.
Command Mode Global Config 7.2.3.18 switchport tagging This command configures the tagging behavior for a specific interface in a VLAN to enable. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number.
Command Mode Global Config 7.2.3.19 switchport forbidden vlan This command used to configure forbidden VLANs. Syntax switchport forbidden vlan {add | remove} no switchport forbidden - VLAN ID (Range: 1 –3965) – separate non-consecutive IDs with ',' and no spaces and no zeros in between the range; Use '-' for range. add - VLAND ID to add. remove - VLAND ID to remove. no - Remove the list of forbidden VLANs. Default Setting None Command Mode Interface Config 7.2.3.
This command configures the port priority assigned for untagged packets for all ports presently plugged into the device. Any subsequent per port configuration will override this configuration setting. Syntax switchport priority all <0-7> <0-7> - The range for the priority is 0-7. all – All interfaces Default Setting 0 Command Mode Global Config 7.2.3.21 switchport protocol group This command adds the physical interface to the protocol-based VLAN identified by .
Syntax switchport protocol group no switchport protocol group - a VLAN Group Name (a character string of 1 to 16 characters). no - This command removes the protocol-based VLAN group that is identified by this . Default Setting None Command Mode Global Config This command adds all physical interfaces to the protocol-based VLAN identified by . A group may have more than one interface associated with it.
Syntax switchport protocol group add protocol {ip | arp | ipx} no switchport protocol group add protocol {ip | arp | ipx} - a VLAN Group Name (a character string of 1 to 16 characters). ip - IP protocol. arp - ARP protocol. ipx - IPX protocol. no - This command removes the from this protocol-based VLAN group that is identified by this . The possible values for protocol are ip, arp, and ipx. Default Setting None Command Mode Global Config 7.2.
Mode: This field specifies the administrative mode through which Double VLAN Tunneling can be enabled or disabled. The default value for this field is disabled. EtherType This field represents a 2-byte hex EtherType to be used as the first 16 bits of the DVLAN tunnel. There are three different EtherType tags. The first is 802.1Q, which represents the commonly used value of 0x8100. The second is vMAN, which represents the commonly used value of 0x88A8.
7.2.5 GVRP and Bridge Extension 7.2.5.1 show bridge-ext This command displays Generic Attributes Registration Protocol (GARP) information. Syntax show bridge-ext Default Setting None Command Mode Privileged Exec User Exec Display Message GMRP Admin Mode: This displays the administrative mode of GARP Multicast Registration Protocol (GMRP) for the system. GVRP Admin Mode: This displays the administrative mode of GARP VLAN Registration Protocol (GVRP) for the system. 7.2.5.
Join Timer: Specifies the interval between the transmission of GARP PDUs registering (or re-registering) membership for an attribute. Current attributes are a VLAN or multicast group. There is an instance of this timer on a per-Port, per-GARP participant basis. Permissible values are 10 to 100 centiseconds (0.1 to 1.0 seconds). The factory default is 20 centiseconds (0.2 seconds). The finest granularity of specification is 1 centisecond (0.01 seconds).
Leave Timer: Specifies the period of time to wait after receiving an unregister request for an attribute before deleting the attribute. Current attributes are a VLAN or multicast group. This may be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service. There is an instance of this timer on a per-Port, per-GARP participant basis. Permissible values are 20 to 600 centiseconds (0.2 to 6.0 seconds).
7.2.5.5 bridge-ext gvrp This command enables GVRP. Syntax bridge-ext gvrp no bridge-ext gvrp no - This command disables GVRP. Default Setting Disabled Command Mode Global Config 7.2.5.6 bridge-ext gmrp This command enables GARP Multicast Registration Protocol (GMRP) on the system. The default value is disabled. Syntax bridge-ext gmrp no bridge-ext gmrp no - This command disables GARP Multicast Registration Protocol (GMRP) on the system. Default Setting Disabled Command Mode Global Config 7.2.5.
no - This command disables GVRP (GARP VLAN Registration Protocol) for a specific port. If GVRP is disabled, Join Time, Leave Time, and Leave All Time have no effect. Default Setting Disabled Command Mode Interface Config This command enables GVRP (GARP VLAN Registration Protocol) for all ports. Syntax switchport gvrp all no switchport gvrp all all - All interfaces. no - This command disables GVRP (GARP VLAN Registration Protocol) for all ports.
subsequently be re-enabled if routing is disabled or port-channel (LAG) membership is removed from an interface that has GMRP enabled. Default Setting Disabled Command Mode Interface Config This command enables GMRP Multicast Registration Protocol on all interfaces. If an interface which has GMRP enabled is enabled for routing or is enlisted as a member of a port-channel (LAG), GMRP functionality will be disabled on that interface.
no - This command sets the GVRP join time per port and per GARP to 20 centiseconds (0.2 seconds). This command has an effect only when GVRP and GMRP are enabled. Default Setting 20 centiseconds (0.2 seconds) Command Mode Interface Config This command sets the GVRP join time for all ports and per GARP. Join time is the interval between the transmission of GARP Protocol Data Units (PDUs) registering (or re-registering) membership for a VLAN or multicast group.
This command sets the GVRP leave time per port. Leave time is the time to wait after receiving an unregister request for a VLAN or a multicast group before deleting the VLAN entry. This can be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service. The time is from 20 to 600 (centiseconds). This command has an effect only when GVRP and GMRP are enabled.
Command Mode Global Config This command sets how frequently Leave All PDUs are generated per port. A Leave All PDU indicates that all registrations will be unregistered. Participants would need to rejoin in order to maintain registration. The value applies per port and per GARP participation. The time may range from 200 to 6000 (centiseconds). This command has an effect only when GVRP and GMRP are enabled.
Default Setting 1000 centiseconds (10 seconds) Command Mode Global Config 7.2.6 IGMP Snooping 7.2.6.1 ip igmp snooping The user can go to the CLI Global Configuration Mode to set IGMP Snooping on the system, use the ip igmp snooping global configuration command. Use the no ip igmp snooping to disable IGMP Snooping on the system. Syntax ip igmp snooping no ip igmp snooping Default Setting Disabled Command Mode Global Config 7.2.6.
Command Mode Global Config Interface Config 7.2.6.3 ip igmp snooping fast-leave The user can go to the CLI Global/Interface Configuration Mode to set IGMP Snooping fast-leave admin mode on a selected interface or all interfaces, use the ip igmpsnooping fast-leave global/interface configuration command. Use the no ip igmp snooping fast-leave disable IGMP Snooping fast-leave admin mode.
7.2.6.5 ip igmp snooping max-response-time The user can go to the CLI Interface Global/Interface Configuration Mode to set the IGMP Maximum Response time for the system, on a particular interface, use the ip igmp snooping max-response-time <1-25> global/interface configuration command.
7.2.6.7 ip igmp snooping mrouter interface The user can go to the CLI Interface Configuration Mode to configure the interface as a multicast router-attached interface or configure the VLAN ID for the VLAN that has the multicast router attached mode enabled, use the ip igmp snooping mrouter interface| interface configuration command. Use the no ip igmp snooping mrouter interface| disable multicast router attached mode for the interface or a VLAN.
7.2.6.9 set igmp fast-leave The user can go to the CLI VLAN Configuration Mode to set IGMP Snooping fast-leave admin mode on a particular VLAN, use the set igmp fast-leave vlan configuration command. Use the no set igmp fast-leave disable IGMP Snooping fast-leave admin mode. Syntax set igmp fast-leave no set igmp fast-leave - VLAN ID (Range: 1 – 3965). Default Setting Disabled Command Mode VLAN Mode 7.2.6.
Syntax set igmp maxresponse <1-25> no set igmp maxresponse < vlanid > - VLAN ID (Range: 1 – 3965). <1-25> -- This value must be less than the IGMP Query Interval time value. The range is 1 to 25 seconds. Default Setting 10 Command Mode VLAN Mode 7.2.6.
Syntax ip igmp snooping static vlan interface no ip igmp snooping static vlan interface < vlanid > - VLAN ID (Range: 1 – 3965). - Static MAC address. - Interface number. Default Setting None Command Mode Global Config 7.2.6.14 show ip igmp snooping The user can go to the CLI Privilege Exec to get all of igmp snooping information, use the show ip igmp snooping Privilege command.
Group Membership Interval: Shows the amount of time in seconds that a switch will wait for a report from a particular group on a particular interface, which is participating on the interface, before deleting the interface from the entry. This value may be configured. Max Response Time: Interface on which IGMP Snooping is enabled.
7.2.6.16 show ip igmp snooping mrouter vlan The user can go to the CLI Privilege Exec to display information about statically configured multicast router-attached interfaces, use the show ip igmp snooping mrouter vlan Privilege command. Syntax show ip igmp snooping mrouter vlan - Interface number. Default Setting None Command Mode Privilege Exec Display Message VLAN ID: Displays the list of VLANs of which the interface is a member.
7.2.6.18 show mac-address-table igmpsnooping The user can go to the CLI Privilege Exec to display the IGMP Snooping entries in the Multicast Forwarding Database (MFDB) table, use the show mac-address-table igmpsnooping Privilege command. Syntax show mac-address-table igmpsnooping Default Setting None Command Mode Privilege Exec Display Message MAC Address: A multicast MAC address for which the switch has forwarding or filtering information.
7.2.7.2 ip igmp snooping querier address The user can go to the CLI Global Configuration Mode to set IGMP snooping querier address, use the ip igmp snooping querier address global configuration command. Use the no ip igmp snooping querier address return to default value zero. Syntax ip igmp snooping querier address no ip igmp snooping querier address - ip address Default Setting 0.0.0.0 Command Mode Global Config 7.2.7.
Syntax ip igmp snooping querier querier-expiry-interval <60-300> no ip igmp snooping querier querier-expiry-interval <60-300> - set igmp querier timer expiry Default Setting 60 seconds Command Mode Global Config 7.2.7.5 ip igmp snooping querier version The user can go to the CLI Global Configuration Mode to set IGMP snooping querier version, use the ip igmp snooping querier version <1-2> global configuration command. Use the no ip igmp snooping querier version return to default value zero.
Default Setting Disabled Command Mode Global Config 7.2.7.7 ip igmp snooping querier vlan address The user can go to the CLI Global Configuration Mode to set IGMP snooping querier vlan address, use the ip igmp snooping querier vlan <1-3965> address global configuration command. Use the no ip igmp snooping querier vlan <1-3965> address return to default value zero.
Command Mode Global Config 7.2.7.9 show ip igmp snooping querier This command display IGMP snooping querier global information on the system. Syntax show ip igmp snooping querier Command Mode Privilege Exec Display Information IGMP Snooping Querier Mode: Administrative mode for IGMP Snooping. The default is disable. Querier Address: Specify the Snooping Querier Address to be used as source address in periodic IGMP queries.
Display Information IGMP Snooping Querier Vlan Mode: Display the administrative mode for IGMP Snooping for the switch. Querier Election Participation Mode: Displays the querier election participate mode on the VLAN. When this mode is disabled, up on seeing a query of the same version in the vlan, the snooping querier move to non querier state.
Syntax show ipv6 mld snooping [|] Default Setting None Command Mode Privileged Exec User Exec Display Message When the optional arguments or are not used, the command displays the following information. Admin Mode: Indicates whether or not MLD Snooping is active on the switch. Interfaces Enabled for MLD Snooping: Interfaces on which MLD Snooping is enabled. Multicast Control Frame Count: Displays the number of MLD Control frames that are processed by the CPU.
7.2.8.2 show ipv6 mld snooping mrouter interface The user can go to the CLI Privilege Exec to display information about statically configured multicast router-attached interfaces, use the show ipv6 mld snooping mrouter interface Privilege command. Syntax show ipv6 mld snooping mrouter interface Default Setting None Command Mode Privileged Exec User Exec Display Message Interface: Shows the interface on which multicast router information is being displayed.
VLAN ID: Displays the list of VLANs of which the interface is a member. Interface: Shows the interface on which multicast router information is being displayed. 7.2.8.4 show ipv6 mld snooping static The user can go to the Privilege Exec to display MLD snooping static information, use the show ipv6 mld snooping static Privilege command.
Display Message MAC Address: A multicast MAC address for which the switch has forwarding or filtering information. The format is twodigit hexadecimal numbers that are separated by colons, for example 33:33:45:67:89:AB. Type: The type of entry, which is either static (added by the user) or dynamic (added to the table as a result of a learning process or protocol.) Description: The text description of this multicast table entry.
7.2.8.8 ipv6 mld snooping interfacemode The user can go to the CLI Global/Interface Configuration Mode to set MLD Snooping on one interface or all interfaces, use the ipv6 mld snooping interfacemode global/interface configuration command. Use the no ipv6 mld snooping interfacemode disable MLD Snooping on all interfaces. Syntax Ipv6 mld snooping interfacemode no ipv6 mld snooping interfacemode Default Setting Disabled Command Mode Global Config Interface Config 7.2.8.
Syntax Ipv6 mld snooping groupmembershipinterval <2-3600> no ipv6 mld snooping groupmembershipinterval Default Setting 260 Command Mode Global Config Interface Config 7.2.8.11 ipv6 mld snooping max-response-time The user can go to the CLI Interface Global/Interface Configuration Mode to set the MLD Maximum Response time for the system, on a particular interface, use the ipv6 mld snooping max-response-time <1-65> global/interface configuration command.
Command Mode Global Config Interface Config 7.2.8.13 ipv6 mld snooping mrouter interface The user can go to the CLI Interface Configuration Mode to configure the interface as a multicast router-attached interface or configure the VLAN ID for the VLAN that has the multicast router attached mode enabled, use the ipv6 mld snooping mrouter interface interface| interface configuration command.
Syntax set mld no set mld Default Setting Disabled Command Mode VLAN Mode 7.2.8.16 set mld fast-leave The user can go to the CLI VLAN Configuration Mode to set MLD Snooping fast-leave admin mode on a particular VLAN, use the set mld fast-leave vlan configuration command. Use the no set mld fast-leave disable MLD Snooping fast-leave admin mode. Syntax set mld fast-leave no set mld fast-leave Default Setting Disabled Command Mode VLAN Mode 7.2.8.
Command Mode VLAN Mode 7.2.8.18 set mld maxresponse The user can go to the CLI Interface VLAN Mode to set the MLD Maximum Response time on a particular VLAN, use the set mld max-response-time <1-65> vlan configuration command. Use the no set mld max-response-time return to default value 10. Syntax set mld max-response-time <1-65> no set mld max-response-time Default Setting 10 Command Mode VLAN Mode 7.2.8.
Syntax show ipv6 mld snooping querier Default Setting None Command Mode Privileged Exec User Exec Display Message MLD Snooping Querier Mode: Specify the Snooping Querier Address to be used as source address in periodic MLD queries. This address is used when no address is configured on the VLAN on which query is being sent. Querier Address: Specify the Snooping Querier Address to be used as source address in periodic MLD queries.
participate in querier election where in the least ip address will win the querier election and operates as the querier in that VLAN. The other querier moves to non-querier state. Querier Election Participation Mode: Displays the querier election participate mode on the VLAN. When this mode is disabled, up on seeing a query of the same version in the vlan, the snooping querier move to non querier state.
7.2.9.4 ipv6 mld snooping querier The user can go to the CLI Global Configuration Mode to set MLD snooping querier admin mode, use the ipv6 mld snooping querier global configuration command. Use the no ipv6 mld snooping querier to disable. Syntax ipv6 mld snooping querier no ipv6 mld snooping querier Default Setting Disabled Command Mode Global Config 7.2.9.
Command Mode Global Config 7.2.9.7 ipv6 mld snooping querier querier-expiry-interval The user can go to the CLI Global Configuration Mode to set MLD snooping querier querier expiry interval, use the ipv6 mld snooping querier querier-expiry-interval <60-300> global configuration command. Use the no ipv6 mld snooping querier querier-expiry-interval return to default value zero.
Syntax ipv6 mld snooping querier vlan <1-3965> address no ipv6 mld snooping querier vlan <1-3965> address Default Setting Disabled Command Mode Global Config 7.2.9.10 ipv6 mld snooping querier vlan election participate The user can go to the CLI Global Configuration Mode to set MLD snooping querier vlan election participate mode, use the ipv6 mld snooping querier vlan election-participate <1-3965> global configuration command.
Display Message For each port-channel the following information is displayed: Logical Interface: The field displays logical slot and the logical port. Port-Channel Name: This field displays the name of the port-channel. Link State: This field indicates whether the link is up or down. Trap Flag: This object determines whether or not to send a trap when link status changes. The factory default is enabled.
Port Speed: Speed of the port-channel port. Port Active: This field lists the ports that are actively participating in the port-channel (LAG). This command displays an overview of all port-channels (LAGs) on the switch. Syntax show port-channel all Default Setting None Command Mode Privileged Exec Display Message Log. Intf: The logical slot and the logical port. Channel Name: The name of this port-channel (LAG). You may enter any string of up to 15 alphanumeric characters.
- The port-channel interface number. - The port-channel name (up to 15 alphanumeric characters). - The port-channel index number, the range is from 1 to 64. all - all port-channel interfaces. no - This command removes that port-channel. Default Setting None Command Mode Global Config Command Usage Max number of port-channels could be created by user are 64 and maximum number of members for each port-channel are 8. 7.2.10.
no - This command disables to support static function on specific port-channel on this device. Default Setting Disabled Command Mode Interface Config 7.2.10.5 port-channel linktrap This command enables link trap notifications for the port-channel (LAG). The interface is a logical slot and port for a configured port-channel. The option all sets every configured port-channel with the same administrative mode setting.
dst-src-mac - Sets the mode on the source and destination MAC addresses. src-ip - Sets the mode on the source IP address. dst-ip - Sets the mode on the destination IP address. dst-src-ip - Sets the mode on the source and destination IP addresses. no - Restore the mode to be default value. Default Setting dst-src-ip Command Mode Global Config This command for CLI will configured the mode of load balance on the specific Port Channel.
Syntax port-channel name { | all} - The port-channel interface number. all - all port-channel interfaces. - The port-channel name (up to 15 characters) to be configured. Default Setting None Command Mode Global Config 7.2.10.8 port-channel system priority This command defines a system priority for the port-channel (LAG). Syntax port-channel system priority - valid value 0-65535.
Default Setting Enabled Command Mode Interface Config 7.2.10.10 lacp This command enables Link Aggregation Control Protocol (LACP) on a port. Syntax lacp no lacp no - This command disables Link Aggregation Control Protocol (LACP) on a port. Default Setting Enabled Command Mode Interface Config This command enables Link Aggregation Control Protocol (LACP) on all ports. Syntax lacp all no lacp all all - All interfaces. no - This command disables Link Aggregation Control Protocol (LACP) on all ports.
7.2.10.11 lacp actor or lacp partner This command set admin key value of Link Aggregation Control Protocol (LACP) on a port. Syntax lacp admin key no lacp admin key : 0-65535 no - This command restores admin key value of Link Aggregation Control Protocol (LACP) on a port.
This command set port priority value of Link Aggregation Control Protocol (LACP) on a port. Syntax lacp port priority no lacp port priority – range 0-255. no - This command restores port priority value of Link Aggregation Control Protocol (LACP) on a port.
no - This command restores collector max-delay time of Link Aggregation Control Protocol (LACP) on a port-channel Default Setting 0 Command Mode Interface Config 7.2.10.12 channel-group This command adds one port to the port-channel (LAG). The first interface is a logical slot and port number of a configured port-channel. Before adding a port to a port-channel, set the physical mode of the port. See ‘speed’ command.
Default Setting None Command Mode Interface Config This command deletes all configured ports from the port-channel (LAG). The interface is a logical slot and port number of a configured port-channel. Syntax delete-channel-group all - Port-Channel Interface number. all - All members for specific Port-Channel. Default Setting None Command Mode Global Config 7.2.11 Storm Control 7.2.11.
Level: Displays level for storm control broadcast. Rate: Displays rate for storm control broadcast. This command is used to display multicast storm control information. Syntax show storm-control multicast Default Setting None Command Mode Privileged Exec Display Message Intf: Displays interface number. Mode: Displays status of storm control multicast. Level: Displays level for storm control multicast Rate: Displays rate for storm control multicast.
7.2.11.2 storm-control broadcast This command enables broadcast storm recovery mode on the selected interface. If the mode is enabled, broadcast storm recovery with high threshold is implemented. The threshold implementation follows a percentage pattern.
Syntax storm-control multicast no storm-control multicast no - This command disables multicast storm recovery mode on the selected interface. Default Setting None Command Mode Interface Config This command enables multicast storm recovery mode on all interfaces. Syntax storm-control multicast no storm-control multicast no - This command disables multicast storm recovery mode on all interfaces. Default Setting None Command Mode Global Config 7.2.11.
Command Mode Interface Config This command enables unicast storm recovery mode on all interfaces. Syntax storm-control unicast no storm-control unicast no - This command disables unicast storm recovery mode on all interfaces. Default Setting None Command Mode Global Config 7.2.11.5 switchport broadcast packet-rate This command will protect your network from broadcast storms by setting a threshold level for broadcast traffic on each port.
This command will protect your network from broadcast storms by setting a threshold level for broadcast traffic on all ports. Syntax switchport broadcast all packet-rate {1 | 2 | 3 | 4} 1 - Threshold level represents 64 pps for 1G Port or 1042 pps for 10G port. 2 - Threshold level represents 128 pps for 1G Port or 2084 pps for 10G port. 3 - Threshold level represents 256 pps for 1G Port or 3124 pps for 10G port. 4 - Threshold level represents 512 pps for 1G Port or 4167 pps for 10G port.
This command will protect your network from multicast storms by setting a threshold level for multicast traffic on all ports. Syntax switchport multicast all packet-rate {1 | 2 | 3 | 4} 1 - Threshold level represents 64 pps for 1G Port or 1042 pps for 10G port. 2 - Threshold level represents 128 pps for 1G Port or 2084 pps for 10G port. 3 - Threshold level represents 256 pps for 1G Port or 3124 pps for 10G port. 4 - Threshold level represents 512 pps for 1G Port or 4167 pps for 10G port.
Command Mode Interface Config This command will protect your network from unicast storms by setting a threshold level for unicast traffic on all ports. Syntax switchport unicast all packet-rate {1 | 2 | 3 | 4} 1 - Threshold level represents 64 pps for 1G Port or 1042 pps for 10G port. 2 - Threshold level represents 128 pps for 1G Port or 2084 pps for 10G port. 3 - Threshold level represents 256 pps for 1G Port or 3124 pps for 10G port.
Display Message User Priority: Displays the 802.1p priority to be mapped. Traffic Class: Displays internal traffic class to map the corresponding 802.1p priority. 7.2.12.2 queue cos-map This command is used to assign class of service (CoS) value to the CoS priority queue. Syntax queue cos-map no queue cos-map - The queue id of the CoS priority queue (Range: 0 - 7 ). - The CoS value that is mapped to the queue id (Range: 0 - 7 ).
- session number. Default Setting None Command Mode Privileged Exec Display Message Session ID: indicates the session ID. Admin Mode: indicates whether the Port Monitoring feature is enabled or disabled. The possible values are enabled and disabled. Dest.Port: is the slot/port that is configured as the probe port. If this value has not been configured, 'Not Configured' will be displayed. Sour.Port: is the slot/port that is configured as the monitored port.
This command removes all configured probe ports and mirrored port. Syntax no port-monitor Default Setting None Command Mode Global Config 7.2.13.3 port-monitor session mode This command configures the mode parameter to enabled the administrative mode of the session. If enabled, the probe port monitors all the traffic received and transmitted on the physical monitored port. Syntax port-monitor session mode no port-monitor session mode - Session ID.
Command Mode Global Config Display Message Admin Mode: the link state admin mode. Group ID: The group ID for each displayed row. Mode: This group was set which mode. UpStream: Display such port was included to UpStream set. DownStream: Display such port was included to DownStream set. 7.2.14.2 link state Enable/Disable the link state admin mode. Use ‘link state’ to enable the admin mode of redundant function, and use no command to disable the function. Create/Destroy the link state group.
Command Mode Interface Config 7.2.15 Port Backup 7.2.15.1 show port backup Show port-backup information. Syntax show port-backup Command Mode Privileged EXEC Display Message Admin Mode: Indicates whether or not port-backup is active on the switch. Group ID: The Group ID for each displayed row. Mode: Indicates whether or not the group is active. MAC Update: Indicates whether or not mac-move-update is enable on the group. Active Port: Display the active port number.
no - This command disables port-backup function. Command Mode Global Config 7.2.15.3 port-backup group Set active port or backup port for a port-backup group. Use ‘port-backup group ’ to set the port to be configured active or configured backup port. Syntax port-backup group <1-6> {active | backup} no port-backup group <1-6> {active | backup} no - This command disables port-backup group function. Command Mode Interface Config 7.2.16 FIP Snooping 7.2.16.
7.2.16.2 show fip-snooping enode This command displays the ENode connections for the entire system. Syntax show fip-snooping enode Default Setting None Command Mode Privileged Exec Display Message Interface: Name of the interface to which the ENode is connected. VLAN ID: ID number of the VLAN to which the ENode belongs. ENode Name ID: Name ID. ENode MAC: MAC address of the ENode. 7.2.16.3 show fip-snooping session This command displays all FIP snooping sessions for the entire system.
7.2.16.4 show fip-snooping fcf This command displays to what interfaces the FCFs are connected for the entire system. Syntax show fip-snooping fcf Default Setting None Command Mode Privileged Exec Display Message Interface: Name of the interface to which the FCoE Forwarder (FCF) is connected. VLAN ID: ID number of the VLAN to which the FCF belongs. FC MAP: May FC-Map value used by the FCF. FCF MAC: MAC address of the FCF. Switch Name: Name ID. Fabric Name: Name of the FCF. 7.2.16.
7.2.16.6 fip-snooping The FIP snooping function is disabled by default. Only after enabling it, are the FIP related CLIs under VLAN and interface mode visible. The FIP-snoop process also starts after the “fip-snooping” command is enabled. Once the feature is enabled, the FIP-snoop packets and FCoE packets are dropped, unless explicitly enabled on a per-VLAN basis. If FIP snooping is enabled, all the FIP frames are snooped and security ACLs are added.
7.2.17 Enhanced Transmission Selection (ETS) 7.2.17.1 show queue ets This command displays ETS mode on specific interface. Syntax show queue ets - Interface number. Default Setting None Command Mode Privileged Exec Display Message Interface: Name of the interface. Mode: ETS mode. 7.2.17.2 show queue ets scheduler-type This command displays ETS function on specific interface for the entire system. Syntax show queue ets scheduler-type - Interface number.
Syntax show queue ets weight Default Setting None Command Mode Privileged Exec Display Message Interface: Name of the interface to which the ETS is enabled. Weight : ETS weight in percentage. 7.2.17.4 show queue ets pg-mapping This command displays ETS function on specific interface for the entire system. Syntax show queue ets pg-mapping Default Setting None Command Mode Privileged Exec Display Message Interface: Name of the interface to which the ETS is enabled.
Default Setting Disabled Command Mode Interface Config 7.2.17.6 queue ets scheduler-type This command configures the scheduler type for an interface. The scheduler type is WRR or WERR. When the ETS is enabled, the default scheduler type is WERR. Syntax queue ets scheduler-type [wrr|werr] no queue ets scheduler-type WRR - Set ETS scheduler type to WRR WERR - Set ETS scheduler type to WERR no - This command restores the scheduler type to WERR. Default Setting werr Command Mode Interface Config 7.2.17.
Default Setting 50(LAN), 50(SAN) Command Mode Interface Config 7.2.17.8 queue ets pg-mapping This command configures the mapping list of priority to priority groups. The range of priority id is from 0 to 7. The priority groups are LAN, SAN and IPC. This command let you assign priority id to specific priority group. When the ETS is enabled, priority id 0 to 2 are assigned to LAN, priority 3 to 6 are assigned to SAN, and priority 7 is assigned to IPC.
Default Setting None Command Mode Privileged Exec Display Message Congestion Notify: Displays Congestion Notification function status. Tag ethertype recognize: When set to 1 , CN-Tag ether type is recognized by parsing stages Tag ethertype: A new tag that is being added by 802.1Qau as a part of the congestion management requirements. Msg ethertype: A message generated by the CP which informs the reaction point(RP) about the level of congestion at the CP.
Priority Queue: Priority queue is enabled for CN function. Mode: CN mode (Enable/Disable) CNM Count: Counts the number of CN message generated by the congestion messaged queue. 7.2.18.3 congestion-notify priority The CN function is disabled by default on all priorities for each port. User can use this command to enable/disable the priority queue on specific interface.
The user can go to the CLI Global Configuration Mode to configure the Ether Type of CN-TAG. Use the ‘congestion-notify tag ethertype ’ global configuration command. Use the ‘no congestion-notify tag ethertype’ to configure CN-TAG Ether Type to default value.. Syntax congestion-notify tag ethertype <0-65535> Default Setting 0x22e9 Command Mode Global Config 7.2.18.5 congestion-notify enable The user can go to the CLI Global Configuration Mode to enable handling congestion notification message.
Syntax congestion-notify msg ethertype <0-65535> no congestion-notify msg ethertype <0-65535> - This command sets the Ether Type value of CNM. no - This command disables Ether Type for Congestion Notification Message (CNM). Default Setting 0x22e7 Command Mode Global Config 7.2.18.7 congestion-notify CPID The user can go to the CLI Global Configuration Mode to configure the device identifier of CPID. Use the ‘congestion-notify CPID devid ’ global configuration command.
CPIndex - This command configures queue number of sampled packet. Q_No - This command sets congestion point index. Default Setting 0 Command Mode Global Config 7.2.18.8 congestion-notify outer This command set value of CNM's outer VLAN tag's CFI bits, value of CNM's outer VLAN tag's 802.1p bits, value of CNM's outer VLAN tag's TPID, and set the CNM's outer VLAN ID.
<-1-1> - This command sets value of CNM's inner VLAN tag's CFI bits. <-1-7> - This command sets value of CNM's inner VLAN tag's 802.1p bits. no - This command restored default value.. Default Setting Command Mode Global Config 7.2.18.10 congestion-notify no-generate The user can go to the CLI Global Configuration Mode to choose the CNM generation behavior when congestion notification threshold is reached but the incoming sampled packet does not have CN-TAG.
switch's front panel ports. The configuration parameters associated with the switch's network interface do not affect the configuration of the front panel ports through which traffic is switched or routed. Syntax show ip interface Default Setting None Command Mode Privileged Exec User Exec Display Message IP Address: The IP address of the interface. The factory default value is 0.0.0.0 Subnet Mask: The IP subnet mask for this interface. The factory default value is 0.0.0.
Command Mode Privileged Exec Display Message Manegement IP Filter Address Table: The admin mode status for IP filter. Index: The index of stations. IP Address: The IP address of stations that are allowed to make configuration changes to the Switch. 7.3.1.3 mtu This command sets the maximum transmission unit (MTU) size (in bytes) for physical and port-channel (LAG) interfaces. For the standard implementation, the range of <1518-9216> is a valid integer between 1518-9216.
Command Mode Global Config 7.3.1.5 ip address This command sets the IP Address, and subnet mask. The IP Address and the gateway must be on the same subnet. Syntax ip address no ip address - IP address - Subnet Mask no - Restore the default IP address and Subnet Mask Default Setting IP address: 0.0.0.0 Subnet Mask: 0.0.0.0 Command Mode Interface-Vlan Config Command Usage Once the IP address is set, the VLAN ID’s value will be assigned to management VLAN. 7.3.1.
Command Mode Global Config 7.3.1.7 ip address protocol This command specifies the network configuration protocol to be used. If you modify this value, the change is effective immediately. Syntax ip address protocol {bootp | dhcp | none} - Obtains IP address from BOOTP. - Obtains IP address from DHCP. - Obtains IP address by setting configuration. Default Setting None Command Mode Interface-Vlan Config 7.3.1.8 ip filter This command is used to enable the IP filter function.
This command is used to set an IP address to be a filter. Syntax ip filter no ip filter - Configure a IP address to the filter. no - Remove this IP address from filter. Default Setting None Command Mode Global Config 7.3.2 Serial Interface Commands 7.3.2.1 show line console This command displays serial communication settings for the switch.
Password Threshold: When the logon attempt threshold is reached on the console port, the system interface becomes silent for a specified amount of time before allowing the next logon attempt. (Use the silent time command to set this interval.) When this threshold is reached for Telnet, the Telnet logon interface closes.
7.3.2.4 exec-timeout This command specifies the maximum connect time (in minutes) without console activity. A value of 0 indicates that a console can be connected indefinitely. The time range is 0 to 160. Syntax exec-timeout <0-160> <0-160> - max connect time (Range: 0 -160), 0: forever. no - This command sets the maximum connect time (in minutes) without console activity to 5. Default Setting 5 Command Mode Line Config 7.3.2.
<0-65535> - silent time (Range: 0 - 65535) in seconds. no - This command sets the maximum value to the default. Default Setting 0 Command Mode Line Config 7.3.2.7 terminal length This command uses to configure the columns per page for the management console. Syntax terminal-length <10-100> <10-100> - Columns per page (Range: 10 - 100). no - This command sets the value to the default. Default Setting 24 Command Mode Line Config 7.3.3 Telnet Session Commands 7.3.3.
[line] - Set the outbound telnet operational mode as ‘linemode’, where by default, the operational mode is ‘character mode’. [echo] - Enable local echo. Default Setting None Command Mode Privileged Exec User Exec 7.3.3.2 show line vty This command displays telnet settings.
7.3.3.3 line vty This command is used to enter vty (Telnet) configuration mode. Syntax line vty Default Setting None Command Mode Global Config 7.3.3.4 exec-timeout This command sets the remote connection session timeout value, in minutes. A session is active as long as the session has been idle for the value set. A value of 0 indicates that a session remains active indefinitely. The time is a decimal value from 0 to 160.
Syntax password-threshold <0-120> no password-threshold - max threshold (Range: 0 - 120). no - This command sets the maximum value to the default. Default Setting 3 Command Mode Line Vty 7.3.3.6 terminal length This command uses to configure the columns per page for the vty session. Syntax terminal-length <10-100> <10-100> - Columns per page (Range: 10 - 100). no - This command sets the value to the default. Default Setting 24 Command Mode Line Vty 7.3.3.
Default Setting 5 Command Mode Line Vty 7.3.3.8 server enable This command enables/disables telnet server. If telnet server is enabled, all telnet sessions can be established until there are no more sessions available. If telnet server is disabled, all telnet sessions are closed. Syntax server enable no server enable no - This command disables telnet server. If telnet server is disabled, all telnet sessions are droped. Default Setting Enabled Command Mode Line Vty 7.3.3.
7.3.3.10 telnet sessions This command regulates new outbound telnet connections. If enabled, new outbound telnet sessions can be established until it reaches the maximum number of simultaneous outbound telnet sessions allowed. If disabled, no new outbound telnet session can be established. An established session remains active until the session is ended or an abnormal network error ends it. Syntax telnet sessions no telnet sessions no - This command disables new outbound telnet connections.
7.3.3.12 telnet exec-timeout This command sets the outbound telnet session timeout value in minute. Changing the timeout value for active sessions does not become effective until the session is reaccessed. Any keystroke will also activate the new timeout duration. i Syntax telnet exec-timeout <1-160> no telnet exec-timeout <1-160> - max connect time (Range: 1 -160). no - This command sets the remote connection session timeout value, in minutes, to the default.
7.3.4 SSH Client Session Commands 7.3.4.1 ssh This command establishes a new outbound ssh connection to a remote host. Syntax ssh { [port <1-65535>] [protocol ] | [protocol ] [port <1-65535>]} - A hostname or a valid IP address. - user account. [port] - A valid decimal integer in the range of 1 to 65535, where the default value is 22. [protocol] - SSH Protocol Level (Version) 1 or 2.
7.3.4.3 sshc maxsessions This command specifies the maximum number of simultaneous outbound ssh sessions. A value of 0 indicates that no outbound ssh session can be established. Syntax sshc maxsessions <0-5> no maxsessions <0-5> - max sessions (Range: 0 - 5). no - This command sets the maximum value to be 5. Default Setting 5 Command Mode Global Config 7.3.4.4 sshc exec-timeout This command sets the outbound ssh session timeout value in minute.
Syntax show sshc Default Setting None Command Mode Privileged Exec User Exec Display Message Outbound SSH Login Timeout (in minutes) Indicates the number of minutes an outbound ssh session is allowed to remain inactive before being logged off. A value of 0, which is the default, results in no timeout. Maximum Number of Outbound SSH Sessions Indicates the number of simultaneous outbound ssh connections allowed. Allow New Outbound SSH Sessions Indicates whether outbound ssh sessions will be allowed. 7.3.
SNMP Community Name: The community string to which this entry grants access. A valid entry is a case-sensitive alphanumeric string of up to 16 characters. Each row of this table must contain a unique community name. Client IP Address: An IP address (or portion thereof) from which this device will accept SNMP packets with the associated community. The requesting entity's IP address is ANDed with the Subnet Mask before being compared to the IP Address. Note: that if the Subnet Mask is set to 0.0.0.
OSPFv3 Traps May be enabled or disabled. The factory default is disabled. Indicates whether OSPF traps will be sent. PIM Traps May be enabled or disabled. The factory default is disabled. Indicates whether PIM traps will be sent. 7.3.5.3 snmp-server sysname This command sets the name of the switch. The range for name is from 1 to 31 alphanumeric characters. Syntax snmp-server sysname - Range is from 1 to 31 alphanumeric characters. Default Setting None Command Mode Global Config 7.3.5.
7.3.5.5 snmp-server contact This command sets the organization responsible for the network. The range for contact is from 1 to 31 alphanumeric characters. Syntax snmp-server contact - Range is from 1 to 31 alphanumeric characters. Default Setting None Command Mode Global Config 7.3.5.6 snmp-server community This command adds (and names) a new SNMP community.
This command activates an SNMP community. If a community is enabled, an SNMP manager associated with this community manages the switch according to its access right. If the community is disabled, no SNMP requests using this community are accepted. In this case the SNMP manager associated with this community cannot manage the switch until the Status is changed back to Enable. Syntax snmp-server community mode no snmp-server community mode - community name.
This command restricts access to switch information. The access mode is read-only (also called public) or read/write (also called private). Syntax snmp-server community {ro | rw} - community name. - access mode is read-only. - access mode is read/write. Default Setting None Command Mode Global Config 7.3.5.7 snmp-server community ipaddr This command sets a client IP address for an SNMP community.
Syntax snmp-server enable traps acl-trapflags no snmp-server enable traps acl-trapflags no - This command disables the acl trap. Default Setting Enabled Command Mode Global Config This command enables the Authentication trap. Syntax snmp-server enable traps authentication no snmp-server enable traps authentication no - This command disables the Authentication trap. Default Setting Enabled Command Mode Global Config This command enables the DVMRP trap.
This command enables Link Up/Down traps for the entire switch. When enabled, link traps are sent only if the Link Trap flag setting associated with the port is enabled (see ‘snmp trap link-status’ command). Syntax snmp-server enable traps linkmode no snmp-server enable traps linkmode no - This command disables Link Up/Down traps for the entire switch. Default Setting Enabled Command Mode Global Config This command enables Multiple User traps.
no snmp-server enable traps ospf {all | errors {all | authentication-failure | bad-packet | config-error | virtauthentication-failure | virt-bad-packet | virt-config-error} | if-rx {all | if-rx-packet} | lsa {all | lsa-maxage | lsa-originate} | overflow {all | lsdb-overflow | lsdb-approaching-overflow} | retransmit {all | packets | virt-packets} | rtb {all, rtb-entry-info} | state-change {all | if-state-change | neighbor-state-change | virtif-statechange | virtneighbor-state-change}} no - This command disa
Default Setting Enabled Command Mode Global Config This command enables the sending of new root traps and topology change notification traps. Syntax snmp-server enable traps stpmode no snmp-server enable traps stpmode no - This command disables the sending of new root traps and topology change notification traps. Default Setting Enabled Command Mode Global Config 7.3.6 SNMP Trap Commands 7.3.6.1 show snmptrap This command displays SNMP trap receivers.
SNMP Trap Name: The community string of the SNMP trap packet sent to the trap manager. This may be up to 16 alphanumeric characters. This string is case sensitive. IP Address: The IP address to receive SNMP traps from this device. Enter 4 numbers between 0 and 255 separated by periods. SNMP Version: The trap version to be used by the receiver. SNMP v1 – Uses SNMP v1 to send traps to the receiver. SNMP v2 – Uses SNMP v2 to send traps to the receiver.
Default Setting Disabled Command Mode Interface Config This command enables link status traps for all interfaces. This command is valid only when the Link Up/Down Flag is enabled. See ‘snmpserver i enable traps linkmode’ command. Syntax snmp trap link-status all no snmp trap link-status all all - All interfaces. no - This command disables link status traps for all interfaces. Default Setting Disabled Command Mode Global Config 7.3.6.
Command Mode Global Config 7.3.6.5 snmptrap ipaddr This command changes the IP address of the trap receiver for the specified community name. The maximum length of name is 16 case-sensitive alphanumeric characters. IP addresses in the SNMP trap receiver table must be unique for the same community name. If you make multiple entries using the same IP address and community name, the first entry is retained and processed. All duplicate entries are ignored.
Default Setting None Command Mode Global Config 7.3.7 HTTP commands 7.3.7.1 show ip http This command displays the http settings for the switch. Syntax show ip http Default Setting None Command Mode Privileged Exec Display Message HTTP Mode (Unsecure): This field indicates whether the HTTP mode is enabled or disabled. HTTP Port: This field specifies the port configured for HTTP. HTTP Mode (Secure): This field indicates whether the administrative mode of secure HTTP is enabled or disabled.
Syntax ip javamode no ip javamode no - This command disallows access to the Java applet in the header frame of the Web interface. When access is disabled, the user cannot view the Java applet. Default Setting Enabled Command Mode Global Config 7.3.7.3 ip http port This command is used to set the http port where port can be 1-65535 and the default is port 80. Syntax ip http port <1-65535> no ip http port <1-65535> - HTTP Port value.
Syntax ip http server no ip http server no - This command disables access to the switch through the Web interface. When access is disabled, the user cannot login to the switch's Web server. Default Setting Enabled Command Mode Global Config 7.3.7.5 ip http secure-port This command is used to set the SSLT port where port can be 1-65535 and the default is port 443. Syntax ip http secure-port no ip http secure-port - SSLT Port value.
Default Setting Disabled Command Mode Global Config 7.3.7.7 ip http secure-protocol This command is used to set protocol levels (versions). The protocol level can be set to TLS1, SSL3 or to both TLS1 and SSL3. Syntax ip http secure-protocol [protocollevel2] no ip http secure-protocol [protocollevel2] - The protocol level can be set to TLS1, SSL3 or to both TLS1 and SSL3.
Display Message Administrative Mode: This field indicates whether the administrative mode of SSH is enabled or disabled. Protocol Levels: The protocol level may have the values of version 1, version 2, or both versions. SSH Sessions Currently Active: This field specifies the current number of SSH connections. Max SSH Sessions Allowed: The maximum number of inbound SSH sessions allowed on the switch. SSH Timeout: This field is the inactive timeout value for incoming SSH sessions to the switch.
Command Mode Global Config 7.3.8.4 ip ssh maxsessions This command specifies the maximum number of SSH connection sessions that can be established. A value of 0 indicates that no ssh connection can be established. The range is 0 to 5. Syntax ip ssh maxsessions <0-5> no ip ssh maxsessions <0-5> - maximum number of sessions. no - This command sets the maximum number of SSH connection sessions that can be established to the default value. Default Setting SSH1 and SSH2 Command Mode Global Config 7.3.8.
Default Setting 5 Command Mode Global Config 7.3.9 Management Security Commands 7.3.9.1 crypto certificate generate This commands is used to generation self-signed certificate for HTTPS. Syntax crypto certificate generate no crypto certificate generate no- This command is used to delete the HTTPS certificate file from the device, regardless of whether they are self-signed or download from an outside source. Default Setting None Command Mode Global Config 7.3.9.
7.3.10 DHCP Client Commands 7.3.10.1 ip dhcp restart This command is used to initiate a BOOTP or DCHP client request. Syntax ip dhcp restart Default Setting None Command Mode Global Config 7.3.10.2 ip dhcp client-identifier This command is used to specify the DCHP client identifier for this switch. Use the no form to restore to default value. Syntax ip dhcp client-identifier {text | hex } no ip dhcp client-identifier - A text string. (Range: 1-32 characters).
7.3.11 DHCPv6 Client Commands 7.3.11.1 ipv6 address protocol This command specifies the network of IPv6 configuration protocol to be used . If you modify this value, the change is effective immediately. Syntax ipv6 address protocol {dhcp6 | none} - Obtains IPv6 address from DHCPv6. - Obtains IPv6 address by setting configuration. Default Setting None Command Mode Interface-Vlan Config 7.3.11.
- Obtains IP address from BOOTP. - Obtains IP address from DHCP. - Obtains IPv6 address from DHCPv6. - Obtains IP address by setting configuration. - Obtains IPv6 address by setting configuration. Default Setting None Command Mode Global Config 7.3.11.4 serviceport protocol dhcp6 restart This command is used to initiate a DHCPv6 client request by oob interface. Syntax serviceport protocol dhcp6 restart Default Setting None Command Mode Global Config 7.3.
Display Message Maximum Hop Count - The maximum number of Hops a client request can go without being discarded. Minimum Wait Time (Seconds) - The Minimum time in seconds. This value will be compared to the time stamp in the client's request packets, which should represent the time since the client was powered up. Packets will only be forwarded when the time stamp exceeds the minimum wait time. Admin Mode - Administrative mode of the relay.
Syntax show sflow agent Default Setting None Command Mode Privilege Exec Display Message sFlow Version: Uniquely identifies the version and implementation of this MIB. IP Address: The IP address associated with this agent. 7.3.13.2 show sflow pollers The user can go to the CLI Privilege Exec to get the sFlow polling instances created on the switch, use the show sflow pollers Privilege command.
show sflow receivers Default Setting None Command Mode Privilege Exec Display Message Receiver Index: The sFlow Receiver associated with the sampler/poller. Owner String: The identity string for receiver, the entity making use of this sFlowRcvrTable entry. Time Out: The time (in seconds) remaining before the receiver is released and stops sending samples to sFlow receiver. Max Datagram Size: The maximum number of bytes that can be sent in a single sFlow datagram.
7.3.13.5 set sflow rate The user can go to the CLI Interface Configuration Mode to set sampling rate, use the sflow rate <0-3600> interface configuration command. Use the no sflow rate return to default value zero. Syntax sflow rate <0-3600> no sflow rate Default Setting 0 Command Mode Global Config 7.3.13.6 set sflow maximum header size The user can go to the CLI Interface Configuration Mode to set maximum header size, use the sflow maximum-header <20-256> interface configuration command.
Default Setting 1400 Command Mode Global Config 7.3.13.8 set sflow receiver address The user can go to the CLI Global Configuration Mode to set receiver ip address, use the sflow receiver ip global configuration command. Use the no sflow receiver ip to clear collector ip address. Syntax sflow receiver ip no sflow receiver ip Default Setting None Command Mode Global Config 7.3.13.
7.3.13.10 set sflow interval The user can go to the CLI Interface Configuration Mode to set polling interval, use the sflow poller interval <0-86400> interface configuration command. Use the no sflow poller interval return to default value zero. Syntax sflow poller interval <0-86400> no sflow poller interval Default Setting 0 Command Mode Interface Config 7.3.13.
Default Setting None Command Mode Interface Config 7.3.14 Service Port Commands 7.3.14.1 show serviceport This command displays service port configuration information. Syntax show serviceport Default Setting None Command Mode Privileged Exec Display Message Interface Status: Indicates whether the interface is up or down. IP Address: The IP address of the interface. The factory default value is 0.0.0.0. Subnet Mask: The IP subnet mask for this interface. The factory default value is 0.0.0.0.
Default Setting None Command Mode Privileged Exec Display Message IPv6 Address: Specifies the IPv6 address of neighbor or interface. MAC Address: Specifies MAC address associated with an interface. isRr:. Specifies router flag. Neighbor State: Incmp - Address resolution is being performed on the entry. A neighbor solicitation message has been sent to the solicited-node multicast address of the target, but the corresponding neighbor advertisement message has not yet been received.
Command Mode Global Config 7.3.14.4 serviceport protocol This command specifies the network management port configuration protocol. If you modify this value, the change is effective immediately. If you use the bootp parameter, the switch periodically sends requests to a BootP server until a response is received. If you use the dhcp parameter, the switch periodically sends requests to a DHCP server until a response is received.
7.3.14.6 serviceport ipv6 address Use this command to configure IPv6 global addressing (i.e. Default routers) information for the service port. Syntax serviceport ipv6 address
/ [eui64] no serviceport ipv6 address [/] no - This command remove all IPv6 prefixes on the service port interface. : IPv6 prefix in IPv6 global address format. : IPv6 prefix length value. [eui64]: Formulate IPv6 address in eui64 address format.Default Setting None Command Mode Global Config 7.4 Spanning Tree Commands This section provides detailed explanation of the spanning tree commands. The commands are divided into two functional groups: Show commands display spanning tree settings, statistics, and other information. Configuration Commands configure features and options of the switch. For every configuration command there is a show command that displays the configuration setting. 7.4.1 Show Commands 7.4.1.
Root Path Cost: Value of the Root Path Cost parameter for the common and internal spanning tree. Root Port Identifier: The Root Port for the spanning tree instance identified by the MSTID. Bridge Max Age: Maximum message age. Bridge Max Hops: The maximum number of hops for the spanning tree. Max Tx Hold Count: The max value of bridge tx hold count for the spanning tree. Bridge Forwarding Delay: A timeout value to be used by all Bridges in the Bridged LAN. The value of Forward Delay is set by the Root.
Auto Edge: True or false. Port Up Time Since Counters Last Cleared: Time since the port was reset, displayed in days, hours, minutes, and seconds. STP BPDUs Transmitted: Spanning Tree Protocol Bridge Protocol Data Units sent. STP BPDUs Received: Spanning Tree Protocol Bridge Protocol Data Units received. RSTP BPDUs Transmitted: Rapid Spanning Tree Protocol Bridge Protocol Data Units sent. RSTP BPDUs Received: Rapid Spanning Tree Protocol Bridge Protocol Data Units received.
<0-4094> - multiple spanning tree instance ID. Default Setting None Command Mode Privileged Exec Display Message MST Instance ID: The multiple spanning tree instance ID. MST Bridge Priority: The bridge priority of current MST. MST Bridge Identifier: The bridge ID of current MST. Time Since Topology Change: In seconds. Topology Change Count: Number of times the topology has changed for this multiple spanning tree instance.
This command displays the detailed settings and parameters for a specific switch port within a particular multiple spanning tree instance. The instance is a number that corresponds to the desired existing multiple spanning tree instance. The is the desired switch port. Syntax show spanning-tree mst port detailed <0-4094> <0-4094> - multiple spanning tree instance ID. - is the desired interface number.
External Port Path Cost - The External Path Cost of the specified port in the spanning tree. Designated Root: Identifier of the designated root for this port within the CST. Designated Port Cost: Path Cost offered to the LAN by the Designated Port. Designated Bridge: The bridge containing the designated port. Designated Port Identifier: Port on the Designated Bridge that offers the lowest cost to the LAN.
STP Mode: Indicate STP mode. Type: Currently not used. STP State: The forwarding state of the port in the specified spanning tree instance. Port Role: The role of the specified port within the spanning tree. Desc: The port in loop inconsistence state will display “*LOOP_Inc”. 7.4.1.5 show spanning-tree summary This command displays spanning tree settings and parameters for the switch. The following details are displayed on execution of the command.
Syntax show spanning-tree brief Default Setting None Command Mode Privileged Exec Display Message Bridge Priority: Configured value. Bridge Identifier: The bridge ID of current Spanning Tree. Bridge Max Age: Configured value. Bridge Max Hops: Configured value. Bridge Hello Time: Configured value. Bridge Forward Delay: Configured value. Bridge Hold Time: Minimum time between transmission of Configuration Bridge Protocol Data Units (BPDUs). 7.4.2 Configuration Commands 7.4.2.
7.4.2.2 spanning-tree protocol-migration This command enables BPDU migration check on a given interface. The all option enables BPDU migration check on all interfaces. Syntax spanning-tree protocol-migration { | all} no spanning-tree protocol-migration { | all} - is the desired interface number. all - All interfaces. no - This command disables BPDU migration check on a given interface. The all option disables BPDU migration check on all interfaces.
Syntax spanning-tree configuration revision <0-65535> no spanning-tree configuration revision - Revision Level is a number in the range of 0 to 65535. no - This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using to the default value, that is, 0. Default Setting 0 Command Mode Global Config 7.4.2.4 spanning-tree mode This command sets the Force Protocol Version parameter to a new value.
Syntax spanning-tree forward-time <4-30> no spanning-tree forward-time <4-30> - forward time value (Range: 4 – 30). no - This command sets the Bridge Forward Delay parameter for the common and internal spanning tree to the default value, that is, 15. Default Setting 15 Command Mode Global Config 7.4.2.6 spanning-tree hello-time This command sets the Hello Time parameter to a new value for the common and internal spanning tree.
Syntax spanning-tree max-age <6-40> no spanning-tree max-age <6-40> - the Bridge Max Age value (Range: 6 – 40). no - This command sets the Bridge Max Age parameter for the common and internal spanning tree to the default value, that is, 20. Default Setting 20 Command Mode Global Config 7.4.2.8 spanning-tree max-hops This command sets the MSTP Max Hops parameter to a new value for the common and internal spanning tree. The max-hops value is in a range of 1 to 127.
<1-10> - the Maximum hold-count value (Range: 1-110). no - This command sets the Bridge Tx Hold Count parameter for the common and internal spanning tree to the default value. Default Setting 6 Command Mode Global Config 7.4.2.10 spanning-tree mst This command adds a multiple spanning tree instance to the switch. The instance <1-3965> is a number within a range of 1 to 3965 that corresponds to the new instance ID to be added. The maximum number of multiple instances supported is 4.
Syntax spanning-tree mst priority <0-4094> <0-61440> no spanning-tree mst priority <0-4094> <0-4094> - multiple spanning tree instance ID. <0-61440> - priority value (Range: 0 – 61440). no - This command sets the bridge priority for a specific multiple spanning tree instance to the default value, that is, 32768. The instance <0-4094> is a number that corresponds to the desired existing multiple spanning tree instance.
This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in the common and internal spanning tree. If the <1-4094> parameter corresponds to an existing multiple spanning tree instance, then the configurations are done for that multiple spanning tree instance. If however 0 (defined as the default CIST ID) is passed as the <1-4094>, then the configurations are performed for the common and internal spanning tree instance.
<1-4094> - multiple spanning tree instance ID. no - This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in the common and internal spanning tree to the respective default values. If the <1-4094> parameter corresponds to an existing multiple spanning tree instance, then the configurations are done for that multiple spanning tree instance.
no - This command sets the Administrative Switch Port State for all ports to disabled. Default Setting Disabled Command Mode Global Config 7.4.2.12 spanning-tree auto-edge This command sets the auto-edge for this port to enabled. Syntax spanning-tree auto-edge no spanning-tree auto-edge no - This command sets the auto-edge for this port to disabled. Default Setting Disabled Command Mode Interface Config 7.4.2.
This command specifies that this port is an Edge Port within the common and internal spanning tree. This will allow this port to transition to Forwarding State without delay. Syntax spanning-tree edgeport no spanning-tree edgeport no - This command specifies that this port is not an Edge Port within the common and internal spanning tree. Default Setting None Command Mode Interface Config This command sets the Edgeport BPDU Filter enable/disable parameter for sending/receiving BPDUs on this switch.
no - This command sets the Edgeport BPDU Guard to the default value, that is, Disabled. Default Setting Disabled Command Mode Global Config This command sets the Edgeport BPDU Filter enable/disable parameter for sending/receiving BPDUs on this interface. This command only works on dot1d mode. Syntax spanning-tree bpdufilter no spanning-tree bpdufilter no - This command sets the Edgeport BPDU Filter to the default value, that is Disabled.
7.4.2.14 spanning-tree uplinkfast This command sets the Uplink Fast parameter to a new value on this switch. This command only works on dot1d mode. Syntax spanning-tree uplinkfast no spanning-tree uplinkfast no - This command sets the Uplink Fast parameter to the default value, that is Disabled. Default Setting Disabled Command Mode Global Config 7.4.2.15 spanning-tree guard {loop|none|root} This command sets the Guard Mode parameter to a new value on this interface.
Syntax spanning-tree tcnguard no spanning-tree tcnguard no - This command sets the tcnguard parameter to the default value, that is Disabled. Default Setting Disabled Command Mode Interface Config 7.5 System Log Management Commands 7.5.1 Show Commands 7.5.1.1 show logging This command displays logging.
Terminal Logging Severity Filter The minimum severity to log to the terminal log. Messages with an equal or lower numerical severity are logged. Log Messages Received The number of messages received by the log process. This includes messages that are dropped or ignored Log Messages Dropped The number of messages that could not be processed. Log Messages Relayed The number of messages that are relayed. 7.5.1.2 show logging buffered This command displays the message log maintained by the switch.
Display Message Number of Traps since last reset: The number of traps that have occurred since the last reset of this device. Trap Log Capacity: The maximum number of traps that could be stored in the switch. Log: The sequence number of this trap. System Up Time: The relative time since the last reboot of the switch at which this trap occurred. Trap: The relevant information of this trap. Trap log information is not retained across a switch reset. i 7.5.1.
Syntax logging buffered no logging buffered no - This command disables logging to in-memory log. Default Setting None Command Mode Global Config This command enables wrapping of in-memory logging when full capacity reached. Otherwise when full capacity is reached, logging stops. Syntax logging buffered wrap no logging buffered wrap no - This command disables wrapping of in-memory logging when full capacity reached. Default Setting None Command Mode Global Config 7.5.2.
Default Setting None Command Mode Global Config 7.5.2.3 logging monitor This command enables logging to the terminal monitor. Syntax logging console [ | <0-7>] no logging console [ | <0-7>] - The value is specified as either an integer from 0 to 7 or symbolically through one of the following keywords: emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), informational (6), debug (7). no - This command disables logging to the terminal monitor.
7.5.2.5 logging host This command enables logging to a host where up to eight hosts can be configured. Syntax logging host [ ] [[ | <0-7>]] - IP address of the log server. - Port number. [ | <0-7>] - The value is specified as either an integer from 0 to 7 or symbolically through one of the following keywords: emergency (0), alert (1), critical (2), error (3), warning (4), notice (5), informational (6), debug (7).
- Index of the log server. - New IP address of the log server. Default Setting None Command Mode Globla Config 7.5.2.6 logging syslog This command enables syslog logging. Syntax logging syslog no logging syslog no - Disables syslog logging. Default Setting None Command Mode Globla Config This command sets the local port number of the LOG client for logging messages.
7.5.2.7 clear logging buffered This command clears all in-memory log. Syntax clear logging buffered Default Setting None Command Mode Privileged Exec 7.6 Script Management Commands 7.6.1 script apply This command applies the commands in the configuration script to the switch. The apply command backs up the running configuration and then starts applying the commands in the script file. Application of the commands stops at the first failure of a command.
Syntax script delete { | all} - The name of the script to be deleted. all - Delete all scripts presented in the switch. Default Setting None Command Mode Privileged Exec 7.6.2.1 script list This command lists all scripts present on the switch as well as the total number of files present. Syntax script list Default Setting None Command Mode Privileged Exec Display Message Configuration Script Name: The filename of the script file. Size(Bytes): The size of the script file. 7.
Default Setting None Command Mode Privileged Exec 7.6.4 script validate This command displays the content of a script file. Syntax script validate - Name of the script file. Default Setting None Command Mode Privileged Exec 7.7 User Account Management Commands 7.7.1 Show Commands 7.7.1.1 show users This command displays the configured user names and their settings. This command is only available for users with readwrite privileges.
Command Mode Privileged Exec Display Message User Name: The name the user will use to login using the serial port, Telnet or Web. A new user may be added to the switch by entering a name in a blank entry. The user name may be up to eight characters, and is not case sensitive. Two users are included as the factory default, admin, and guest. User Access Mode: Shows whether the operator is able to change parameters on the switch (Read/Write) or is only able to view them (Read Only).
7.7.1.3 show passwords configuration Use this command to display the configured password management settings. Syntax show passwords configuration Default Setting None Command Mode Privileged Exec Display Message Minimum Password Length: Minimum number of characters required when changing passwords. Password History: Number of passwords to store for reuse prevention. Password Aging: Length in days that a password is valid. Lockout Attempts: Number of failed password login attempts before lockout. 7.7.
i The admin user account cannot be deleted. Default Setting No password Command Mode Global Config 7.7.2.2 Unlock a locked user account The user can go to the CLI Global Configuration Mode to unlock a locked user account, use the username unlock global configuration command. Syntax username unlock - is a user name (Range: up to 8 characters). Default Setting None Command Mode Global Config 7.7.2.
none - no use authentication method. no - This command sets the authentication protocol to be used for the specified login user to none. The is the login user name for which the specified authentication protocol will be used. Default Setting No authentication Command Mode Global Config 7.7.2.4 username snmpv3 encryption This command specifies the encryption protocol and key to be used for the specified login user. The valid encryption protocols are none or des.
Syntax passwords aging <1-365> no passwords aging <1-365> - Number of days until password expires. Default Setting 0 Command Mode Global Config 7.7.2.6 Set the password history The user can go to the CLI Global Configuration Mode to set the password history, use the passwords history <0-10> Global configuration command. Use the no passwords history return to default value 0.
<1-5> - the number of password failures before account lock. Default Setting 0 Command Mode Global Config 7.7.2.8 Set the minimum password length The user can go to the CLI Global Configuration Mode to set the minimum password length, use the passwords min-length <8-64> Global configuration command. Use the no passwords min-length return to default value 8. Syntax passwords min-length <8-64> no passwords min-length Default Setting 8 Command Mode Global Config 7.8 Security Commands 7.8.
Command Mode Privileged Exec Display Message User: This field lists every user that has an authentication login list assigned. System Login: This field displays the authentication login list assigned to the user for system login. 802.1x: This field displays the authentication login list assigned to the user for 802.1x port security. 7.8.1.2 show authentication This command displays the ordered authentication methods for all authentication login lists.
Command Mode Privileged Exec Display Message User Name: This field displays the user assigned to the specified authentication login list. Component: This field displays the component (User or 802.1x) for which the authentication login list is assigned. 7.8.1.4 show dot1x This command is used to show the status of the dot1x Administrative mode.
Display Message Port: The interface whose configuration is displayed Protocol Version: The protocol version associated with this port. The only possible value is 1, corresponding to the first version of the dot1x specification. PAE Capabilities: The port access entity (PAE) functionality of this port. Possible values are Authenticator or Supplicant. Control Mode - The configured control mode for this port. Possible values are force-unauthorized, force-authorized, auto and mac-based.
Session Termination Action - This value indicates the action to be taken once the session timeout expires. Possible values are Default, Radius-Request. If the value is Default, the session is terminated the port goes into unauthorized state. If the value is Radius-Request, then a reauthentication of the client authenticated on the port is performed. 7.8.1.6 show dot1x statistics This command is used to show a summary of the global dot1x configuration and the dot1x statistics for a specified port.
Invalid EAPOL Frames Received: The number of EAPOL frames that have been received by this authenticator in which the frame type is not recognized. EAP Length Error Frames Received: The number of EAPOL frames that have been received by this authenticator in which the frame type is not recognized. 7.8.1.7 show dot1x summary This command is used to show a summary of the global dot1x configuration and summary information of the dot1x configuration for a specified port or all ports.
Command Mode Privileged Exec Display Message User: Users configured locally to have access to the specified port. 7.8.1.9 show dot1x client This command displays 802.1x client information. Syntax show dot1x clients { | all} - is the desired interface number. all - All interfaces. Default Setting None Command Mode Privileged Exec Display Message Logical Interface: The logical port number associated with a client. Interface: The physical port to which the supplicant is associated.
7.8.1.10 show radius servers This command is used to display items of the configured RADIUS servers. Syntax show radius servers [] Default Setting None Command Mode Privileged Exec Display Message : The IP address or host name of the authenticating server. Current: The ‘*’ symbol preceeding the server host address specifies that the server is currently active. Host Address: The IP address of the host.
Number of Named Accounting Server Groups: The number of configured named RADIUS server groups. Number of Retransmits: The configured value of the maximum number of times a request packet is retransmitted. Time Duration: The configured timeout value, in seconds, for request re-transmissions. RADIUS Accounting Mode: A global parameter to indicate whether the accounting mode for all the servers is enabled or not.
Round Trip Time: The time interval in centiseconds, between the most recent AccountingResponse and the Accounting-Request that matched it from the RADIUS accounting server. Requests: The number of RADIUS Accounting-Request packets sent to this accounting server. This number does not include retransmissions. Retransmission: The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Responses: The number of RADIUS packets received on the accounting port from this server.
Round Trip Time - The time interval, in hundredths of a second, between the most recent Access-Reply, Access - Challenge and the Access-Request that matched it from the RADIUS authentication server. Access Requests - The number of RADIUS Access-Request packets sent to this server. This number does not include retransmissions. Access Retransmission - The number of RADIUS Access-Request packets retransmitted to this RADIUS authentication server.
Port: Shows the configured TACACS+ server port number. TimeOut: Shows the timeout in seconds for establishing a TCP connection. Priority: Shows the preference order in which TACACS+ servers are contacted. If a server connection fails, the next highest priority server is contacted. 7.8.1.15 show port-security This command shows the port-security settings for the entire system.
This command shows the dynamically locked MAC addresses for port. Syntax show port-security dynamic Default Setting None Command Mode Privileged Exec Display Message MAC address Dynamically locked MAC address. This command shows the statically locked MAC addresses for port. Syntax show port-security static Default Setting None Command Mode Privileged Exec Display Message MAC address Statically locked MAC address.
Display Message MAC address MAC address of discarded packet on locked ports. 7.8.2 Configuration Commands 7.8.2.1 authentication login This command creates an authentication login list. The is up to 15 alphanumeric characters and is not case sensitive. Up to 10 authentication login lists can be configured on the switch. When a list is created, the authentication method “local” is set as the first method.
Default Setting None Command Mode Global Config 7.8.2.2 username defaultlogin This command assigns the authentication login list to use for non-configured users when attempting to log in to the system. This setting is overridden by the authentication login list assigned to a specific user if the user is configured locally. If this value is not configured, users will be authenticated using local authentication only. Syntax username defaultlogin - an authentication login list.
Default Setting None Command Mode Global Config 7.8.3 Dot1x Configuration Commands 7.8.3.1 dot1x initialize This command begins the initialization sequence on the specified port. This command is only valid if the control mode for the specified port is 'auto'. If the control mode is not 'auto' an error will be returned. Syntax dot1x initialize - is the desired interface number. Default Setting None Command Mode Privileged Exec 7.8.3.
Command Mode Global Config 7.8.3.3 dot1x login This command assigns the specified authentication login list to the specified user for 802.1x port security. The parameter must be a configured user and the parameter must be a configured authentication login list. Syntax dot1x login - is the login user name. - an authentication login list. Default Setting None Command Mode Global Config 7.8.3.
7.8.3.5 dot1x user This command adds the specified user to the list of users with access to the specified port or all ports. The parameter must be a configured user. Syntax dot1x user { | all} no dot1x user { | all} - Is the login user name. - Is the desired interface number. all - All interfaces. no - This command removes the user from the list of users with access to the specified port or all ports.
Command Mode Global Config This command sets the authentication mode to be used on the specified port. The control mode may be one of the following. force-unauthorized: The authenticator PAE unconditionally sets the controlled port to unauthorized. force-authorized: The authenticator PAE unconditionally sets the controlled port to authorized.
Default Setting 2 Command Mode Interface Config 7.8.3.8 dot1x max-user This command configures the maximum users to a specified port, The system’s default maximum users of an interface has no limitation. If ‘no dot1x max-users’ command is executed, the system will reset the maximum users to infinity. If the maximum users is specified or modified, the system should use the new one. Syntax dot1x max-user no dot1x max-user - maximum users (Range: 1 – 16).
7.8.3.10 dot1x re-reauthenticate This command begins the re-authentication sequence on the specified port. This command is only valid if the control mode for the specified port is 'auto'. If the control mode is not 'auto' an error will be returned. Syntax dot1x re-authenticate - is the desired interface number. Default Setting None Command Mode Privileged Exec 7.8.3.
server-timeout: Sets the value, in seconds, of the timer used by the authenticator state machine on this port to timeout the authentication server. The supp-timeout must be a value in the range 1 - 65535. Syntax dot1x timeout {guest-vlan-period | quiet-period | reauth-period | server-timeout | supp-timeout | tx-period} no dot1x timeout { guest-vlan-period | quiet-period | reauth-period | server-timeout | supp-timeout | tx-period} - Value in the range 0 – 65535.
7.8.4 Radius Configuration Commands 7.8.4.1 radius accounting mode This command is used to enable the RADIUS accounting function. Syntax radius accounting mode no radius accounting mode no - This command is used to set the RADIUS accounting function to the default value - that is, the RADIUS accounting function is disabled. Default Setting Disabled Command Mode Global Config 7.8.4.2 authorization network radius Use this command to enable the switch to accept VLAN assignment by the radius server.
7.8.4.3 radius server attribute 4 This command to set the NAS-IP address for the radius server. Syntax radius-server attribute 4 [ipaddr] no radius-server attribute 4 no – use this command to reset the NAS-IP address for the radius server. Default Setting None Command Mode Global Config 7.8.4.4 radius-server dead-time This command cnfiguresradius server dead time. Syntax radius-server dead-time no radius-server dead-time Value - Set radius server dead time (sec). Range 1 – 255.
number, the IP address must match that of a previously configured RADIUS authentication server. The port number must lie between 1 - 65535, with 1812 being the default value. If the 'acct' token is used, the command configures the IP address to use for the RADIUS accounting server. Only a single accounting server can be configured. If an accounting server is currently configured, it must be removed from the configuration using the no form of the command before this command succeeds.
Default Setting None Command Mode Global Config 7.8.4.7 radius-server retransmit This command sets the maximum number of times a request packet is re-transmitted when no response is received from the RADIUS server. The retries value is an integer in the range of 1 to 15. Syntax radius-server retransmit no radius-server retransmit - the maximum number of times (Range: 1 - 15).
Command Mode Global Config 7.8.4.9 radius-server msgauth This command enables the message authenticator attribute for a specified server. Syntax radius-server msgauth - is a IP address or hostname. Default Setting None Command Mode Global Config 7.8.4.10 radius-server primary This command is used to configure the primary RADIUS authentication server for this RADIUS client. The primary server is the one that is used by default for handling RADIUS requests.
7.8.5 TACACS+ Configuration Commands 7.8.5.1 tacacs host This command is used to enable /disable TACACS+ function and to configure the TACACS+ server IP address. The system has not any TACACS+ server configured for its initialization and support 5 TACACS+ servers. Syntax tacacs host no tacacs host - The IP address or hostname of the TACACS+ server. no - This command is used to remove all of configuration.
This command is used to configure the TACACS+ authentication and encryption key. Syntax key [ | encrypted ] Note that the length of the secret key is up to 128 characters. < key-string > - The valid value of the key. encrypted - the key string is encrypted. Default Setting None Command Mode TACACS Host Config This command is used to configure the TACACS+ authentication host port. Syntax port [] - The valid port number.
Default Setting 0 Command Mode TACACS Host Config 7.8.5.3 tacacs timeout This command is used to configure the TACACS+ connection timeout value. Syntax tacacs timeout [] no tacacs timeout - The connection timeout value. Max timeout (Range: 1 to 30). no - This command is used to reset the timeout value to the default value. Default Setting 5 Command Mode Global Config This command is used to configure the TACACS+ connection timeout value.
7.8.6 Port Security Configuration Commands 7.8.6.1 port-security This command enables port locking at the system level (Global Config) or port level (Interface Config). Syntax port-security no port-security Default Setting None Command Mode Global Config Interface Config 7.8.6.2 port-security max-dynamic This command sets the maximum of dynamically locked MAC addresses allowed on a specific port.
no - This command resets the maximum number of statically locked MAC addresses allowed on a specific port to its default value. Default Setting 20 Command Mode Interface Config 7.8.6.4 port-security mac-address This command adds a MAC address to the list of statically locked MAC addresses. Syntax port-security mac-address <1-3965> no port-security mac-address <1-3965> <1-3965> - VLAN ID - The statically locked MAC address.
7.8.6.6 port-security violation shutdown This command configures the port violation shutdown mode. Once the violation happens, the interface will be shutdown. Syntax port-security violation shutdown no port-security violation no - This command restore violation mode to be default. Default Setting None Command Mode Interface Config 7.9 CDP (Cisco Discovery Protocol) Commands 7.9.1 Show Commands 7.9.1.1 show cdp This command displays the CDP configuration information.
CDP Holdtime (sec): The length of time a receiving device should hold the L2 Network Switch CDP information before discarding it CDP Transmit Interval (sec): A period of the L2 Network Switch to send CDP packet Ports: Port number vs CDP status CDP: CDP enable or disable 7.9.1.2 show cdp neighbors This command displays the CDP neighbor information.
Command Mode Privileged Exec Display Message Device Id: Identifies the device name in the form of a character string. Entry Address(es): The addresses of the interface that has sent the update. Platform: Describes the hardware platform name of the device, for example, Fortinet the L2 Network Switch. Capability: Describes the device's functional capability in the form of a device type, for example, a switch. Local Interface: The CDP neighbor information receiving port.
Syntax cdp no cdp no - This command is used to disable CDP Admin Mode. Default Setting Enabled Command Mode Global Config 7.9.2.2 cdp run This command is used to enable CDP on a specified interface. Syntax cdp run no cdp run no - This command is used to disable CDP on a specified interface. Default Setting Enabled Command Mode Interface Config This command is used to enable CDP for all interfaces. Syntax cdp run all no cdp run all all - All interfaces.
Command Mode Global Config 7.9.2.3 cdp timer This command is used to configure an interval time (seconds) of the sending CDP packet. Syntax cdp timer <5-254> no cdp timer <5-254> - interval time (Range: 5 – 254). no - This command is used to reset the interval time to the default value. Default Setting 60 Command Mode Global Config 7.9.2.4 cdp holdtime This command is used to configure the hold time (seconds) of CDP. Syntax cdp holdtime <10-255> <10-255> - interval time (Range: 10 – 255).
7.10 SNTP (Simple Network Time Protocol) Commands 7.10.1 Show Commands 7.10.1.1 show sntp This command displays the current time and configuration settings for the SNTP client, and indicates whether the local time has been properly updated. Syntax show sntp Default Setting None Command Mode Privileged Exec Display Message Last Update Time Time of last clock update. Last Unicast Attempt Time Time of last transmit query (in unicast mode).
Client Mode: Configured SNTP Client Mode. Unicast Poll Interval Poll interval value for SNTP clients in seconds as a power of two. Poll Timeout (Seconds) Poll timeout value in seconds for SNTP clients. Poll Retry Poll retry value for SNTP clients. This command displays configured SNTP servers and SNTP server settings. Syntax show sntp server Default Setting None Command Mode Privileged Exec Display Message Server IP Address IP Address of configured SNTP Server Server Type Address Type of Server.
7.10.2 Configuration Commands 7.10.2.1 sntp broadcast client poll-interval This command will set the poll interval for SNTP broadcast clients in seconds as a power of two where can be a value from 6 to 10. Syntax sntp broadcast client poll-interval <6-10> no sntp broadcast client poll-interval <6-10> - The range is 6 to 10. no - This command will reset the poll interval for SNTP broadcast client back to its default value. Default Setting 6 Command Mode Global Config 7.10.2.
7.10.2.3 sntp client port This command will set the SNTP client port id and polling interval in seconds. Syntax sntp client port no sntp client port - SNTP client port id. no - Resets the SNTP client port id. Default Setting The default portid is 123. Command Mode Global Config 7.10.2.4 sntp unicast client poll-interval This command will set the poll interval for SNTP unicast clients in seconds.
Syntax sntp unicast client poll-timeout no sntp unicast client poll-timeout < poll-timeout > - Polling timeout in seconds. The range is 1 to 30. no - This command will reset the poll timeout for SNTP unicast clients to its default value. Default Setting The default value is 5. Command Mode Global Config 7.10.2.6 sntp unicast client poll-retry This command will set the poll retry for SNTP unicast clients in seconds.
- IPv4 or IPv6 address or domain name of the SNTP server. - The address type is ipv4 or ipv6 or dns or dnsv6. <1-3> - The range is 1 to 3. - The range is 1 to 4. - The range is 1 to 65535. no - This command deletes an server from the configured SNTP servers. Default Setting None Command Mode Global Config 7.10.2.8 sntp clock timezone This command sets the time zone for the switch’s internal clock.
Syntax sntp multicast client poll-interval no sntp multicast client poll-interval - Polling interval. It’s 2^(value) seconds where the range of value is 6 to 10. no – This command will reset the poll interval for SNTP multicast client to its default value. Default Setting The default value is 6. Command Mode Global Config 7.11 MAC-Based Voice VLAN Commands 7.11.1 Show Commands 7.11.1.
MAC-Address: A MAC address for which the switch has forwarding and or filtering information. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as 8 bytes. Mask: The mac-mask is the last eight digit of the mask code of the MAC address, the valid values are: 0xff, 0xfe, 0xfc, 0xf8, 0xf0, 0xe0, 0xc0, 0x80 and 0x0.
no - This command is used to disable Voice VLAN Admin Mode. Default Setting Disabled Command Mode Global Config 7.11.2.2 voice-vlan vlan This command configures the specified VLAN to Voice VLAN. Syntax voice-vlan vlan Default Setting None Command Mode Global Config 7.11.2.3 voice-vlan mac This command is used to add a voice device to a Voice VLAN.
7.11.2.4 voice vlan This command is used to enable/disable Voice VLAN Admin Mode. Syntax voice vlan no voice vlan no - This command disables the Voice VLAN capability on this switch. Default Setting Disabled Command Mode Global Config This command configures the Voice VLAN capability on the interface. Syntax voice vlan { | dot1p | none | untagged } no voice vlan - Configure the IP phone to forward all voice traffic through the specified VLAN.
7.11.2.5 voice vlan data priority Use this command to either trust or entrust the data traffic arriving one the Voice VLAN port. Syntax voice vlan data priority untrust | trust Default Setting trust Command Mode Interface Config 7.12 LLDP (Link Layer Discovery Protocol) Commands 7.12.1 Show Commands 7.12.1.1 show lldp This command uses to display a summary of the current LLDP configuration.
7.12.1.2 show lldp interface This command uses to display a summary of the current LLDP configuration for a specific interface or for all interfaces. Syntax show lldp interface { | all} - Configs a specific interface. Default Setting None Command Mode Privileged Exec Display Message Interface: Shows the interface in a slot/port format. Link: Shows whether the link is up or down. Transmit: Shows whether the interface transmits LLDPDUs.
Display Message Last Update: Shows the amount of time since the last update to the remote table in days, hours, minutes, and seconds. Total Inserts: Total number of inserts to the remote data table. Total Deletes: Total number of deletes from the remote data table. Total Drops: Total number of times the complete remote data received was not inserted due to insufficient resources. Total Ageouts: Total number of times a complete remote data entry was deleted because the Time to Live interval expired.
Chassis ID: The ID that is sent by a remote device as part of the LLDP message, it is usually a MAC address of the device. Port ID: Shows the port number that transmitted the LLDPDU. System Name: Shows the system name of the remote device. 7.12.1.5 show lldp remote-device detail This command uses to display detailed information about remote devices that transmit current LLDP data to an interface on the system. Syntax show lldp remote-device detail - Displays a specific interface.
7.12.1.6 show lldp local-device This command uses to display summary information about the advertised LLDP local data. This command can display summary information or detail for each interface. Syntax show lldp local-device { | all} - Displays a specific interface. Default Setting None Command Mode Privileged Exec Display Message Interface: Identifies the interface in a slot/port format. Port ID: Shows the port ID associated with this interface.
System Name: Shows the system name of the local device. System Description: Describes the local system by identifying the system name and versions of hardware, operating system, and networking software supported in the device. Port Description: Describes the port in an alpha-numeric format. System Capabilities Supported: Indicates the primary function(s) of the device. System Capabilities Enabled: Shows which of the supported system capabilities are enabled.
- Displays a specific interface. Default Setting None Command Mode Privileged Exec Display Message Interface: Specifies all the ports on which LLDP-MED can be configured. Link: Specifies the link status of the ports whether it is Up/Down. ConfigMED: Specifies the LLDP-MED mode is enabled or disabled on this interface. OperMED: Specifies the LLDP-MED TLVs are transmitted or not on this interface ConfigNotify: Specifies the LLDP-MED topology notification mode of the interface.
Unknown: Specifies the unknown bit associated with a particular policy type. Tagged: Specifies the tagged bit associated with a particular policy type. Inventory Specifies if inventory TLV is present in LLDP frames. Hardware Rev: Specifies hardware version. Firmware Rev: Specifies Firmware version. Software Rev: Specifies Software version. Serial Num: Specifies serial number. Mfg Name: Specifies manufacturers name. Model Name: Specifies model name. Asset ID: Specifies asset id.
Default Setting None Command Mode Privileged Exec Display Message Interface: Specifies the list of all the ports on which LLDP-MED is enabled. Remote ID: An internal identifier to the switch to mark each remote device to the system. Device Class: Specifies local device's MED Classification. There are four different kinds of devices, three of them represent the actual end points (classified as Class I Generic [IP Communication Controller etc.], Class II Media [Conference Bridge etc.
Media Policy Application Type: Specifies the application type. Types of application types are unknown, voicesignaling, guestvoice, guestvoicesignalling, softphonevoice, videoconferencing, streammingvideo, vidoesignalling. Each application type that is received has the VLAN id, priority, DSCP, tagged bit status and unknown bit status. A port may receive one or many such application types. If a network policy TLV has been receive on this port only then would this information be displayed.
7.12.2 Configuration Commands 7.12.2.1 lldp notification This command uses to enable remote data change notifications. Syntax lldp notification no lldp notification no - This command is used to disable notifications. Default Setting Disbaled Command Mode Interface Config 7.12.2.2 lldp notification-interval This command is used to configure how frequently the system sends remote data change notifications. The parameter is the number of seconds to wait between sending notifications.
7.12.2.3 lldp receive This command uses to enable the LLDP receive capability. Syntax lldp receive no lldp receive no - This command is used to return the reception of LLDPDUs to the default value. Default Setting Disabled Command Mode Interface Config 7.12.2.4 lldp transmit This command uses to enable the LLDP advertise capability. Syntax lldp transmit no lldp transmit no - This command is used to return the local data transmission capability to the default.
no lldp transmit-mgmt no - This command is used to cancel inclusion of the management information in LLDPDUs. Default Setting None Command Mode Interface Config 7.12.2.6 lldp transmit-tlv This command is used to specify which optional type length values (TLVs) in the 802.1AB basic management set are transmitted in the LLDPDUs. Use sys-name to transmit the system name TLV. To configure the system name, please refer to “snmp-server” command. Use sys-descto transmit the system description TLV.
Syntax lldp timers [interval ] [hold ] [reinit ] no lldp timers [interval] [hold] [reinit] - Configures the number of seconds to wait between transmitting local data LLDPDUs - Configures the multiplier on the transmit interval that sets the TTL in local data LLDPDUs - Configures the delay before re-initialization no - This command is used to return any or all timing parameters for local data transmission on ports
7.12.2.9 lldp med The user can go to the CLI Interface Configuration Mode to set MED to enable, use the lldp med Interface configuration command. Use the no lldp med to disable med function. Syntax lldp med no lldp med Default Setting Disabled Command Mode Interface Config 7.12.2.10 lldp med confignotification The user can go to the CLI Interface Configuration Mode to set all the ports to send the topology change notification, use the lldp med confignotification Interface configuration command.
no lldp med transmit-tlv [capabilities] [ex-pd] [ex-pse] [inventory] [location] [network-policy] capabilities -Transmit the LLDP capabilities TLV. ex-pd - Transmit the LLDP extended PD TLV. ex-pse - Transmit the LLDP extended PSE TLV. inventory - Transmit the LLDP inventory TLV. location - Transmit the LLDP location TLV. network-policy - Transmit the LLDP network policy TLV. Default Setting None Command Mode Interface Config 7.12.2.
no lldp med confignotification all Default Setting None Command Mode Global Config 7.12.2.14 lldp med faststartrepeatcount The user can go to the CLI Global Configuration Mode to set the fast start repeat count, use the lldp med faststartrepeatcount Global configuration command. Use the no lldp med faststartrepeatcount to return the default value 3. Syntax lldp med faststartrepeatcount <1-10> no lldp med faststartrepeatcount Default Setting 3 Command Mode Global Config 7.12.2.
location - Transmit the LLDP location TLV. network-policy - Transmit the LLDP network policy TLV. Default Setting None Command Mode Global Config 7.13 Denial Of Service Commands 7.13.1 Show Commands 7.13.1.1 show dos-control This command displays the Denial of Service configurations for the entire system. Syntax show dos-control Default Setting None Command Mode Privileged Exec Display Message TCP Fragment Mode: May be enabled or disabled. The factory default is disabled.
TCP SYN Mode: May be enabled or disabled. The factory default is disabled. TCP SYN&FIN Mode: May be enabled or disabled. The factory default is disabled. First Fragment Mode: May be enabled or disabled. The factory default is disabled. TCP Fragment Offset Mode: May be enabled or disabled. The factory default is disabled. 7.13.2 Configuration Commands 7.13.2.1 dos-control sipdip This command enables Source IP Address = Destination IP Address (SIP=DIP) Denial of Service protection.
no - This command sets Minimum TCP Header Size Denial of Service protection to the default value of disabled. Default Setting Disabled, 20 Command Mode Global Config 7.13.2.3 dos-control firstfrag This command enables IP First Fragment Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having IP First Fragment Offset equal to one (1), the packets will be dropped if the mode is enabled.
Default Setting Disabled Command Mode Global Config 7.13.2.5 dos-control l4port This command enables L4 Port Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having Source TCP/UDP Port Number equal to Destination TCP/UDP Port Number, the packets will be dropped if the mode is enabled. ! Some applications mirror source and destination L4 ports - RIP for example uses 520 for both.
no - This command disables the TCP L4 source = destination port number (Source TCP Port =Destination TCP Port) Denial of Service protection. Default Setting Disabled Command Mode Global Config 7.13.2.7 dos-control udpport This command enables the UDP L4 source = destination port number (Source UDP Port = Destination UDP Port) Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack.
Default Setting Disabled Command Mode Global Config 7.13.2.9 dos-control icmpv4 This command enables Maximum ICMPv4 Packet Size Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If ICMPv4 Echo Request (PING) packets ingress having a size greater than the configured value, the packets will be dropped if the mode is enabled.
no - This command resets the Maximum ICMPV6 Packet Size Denial of Service protections to its default value. Default Setting 512 Command Mode Global Config 7.13.2.11 dos-control icmpfrag This command enables the ICMP Fragment Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress has fragmented ICMP packets, the packets will be dropped if the mode is enabled.
Default Setting Disabled Command Mode Global Config 7.13.2.13 dos-control tcpfinurgpsh This command enables the TCP FIN and URG and PSH and SEQ=0 checking Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP FIN, URG, and PSH all set and TCP Sequence Number set to 0, the packets will be dropped if the mode is enabled.
Command Mode Global Config 7.13.2.15 dos-control tcpsynfin This command enables the TCP SYN and FIN Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP flags SYN and FIN set, the packets will be dropped if the mode is enabled. Syntax dos-control tcpsynfin no dos-control tcpsynfin no - This command disables the TCP SYN & FIN Denial of Service protection. Default Setting Disabled Command Mode Global Config 7.
7.13.2.17 dos-control all This command enables the Denial of Service protection checks globally. Syntax dos-control all no dos-control all no - This command disables the Denial of Service protection checks globally. Default Setting Disabled Command Mode Global Config 7.14 VTP (VLAN Trunking Protocol) Commands 7.14.1 Show Commands 7.14.1.1 show vtp counters This command displays the VTP packet statistics.
Summary advertisements transmitted: Number of summary advertisements sent by this switch on its trunk ports. Subset advertisements transmitted: Number of subset advertisements sent by this switch on its trunk ports. Request advertisements transmitted: Number of advertisement requests sent by this switch on its trunk ports. Number of config revision errors: Number of revision errors. Number of config digest errors: Number of MD5 digest errors. 7.14.1.
VTP Version: Displays the VTP version operating on the switch. Configuration Revision: Displays the current configuration revision number on this switch. Maximum VTP supported VLANs: Maximum number of VLANs supported locally. VTP support VLAN number: Number of existing VLANs. VTP Operating Mode: Displays the VTP operating mode, which can be server, client, or transparent. VTP Domain Name: Displays the name that identifies the administrative domain for the switch.
Syntax vtp no vtp no - This command disables global VTP administrative mode. Default Setting Disabled Command Mode Global Config 7.14.2.2 vtp domain This command uses to set VTP administrative domain name. Syntax vtp domain no vtp domain - Configures the string for domain name. (maximum length 32 bytes) no - This command resets the domain name to NULL. The system disables the VTP for its initialization. The maximum length of administrative domain name is 32 bytes.
Syntax vtp mode { client | server | transparent } no vtp mode - This command set client mode for VTP. - This command set server mode for VTP. - This command set transparent mode for VTP. no - This command resets the VTP mode to default value. Default Setting Server Command Mode Global Config 7.14.2.4 vtp version Use the no vtp version to reset the VTP version number to default value..
- Configures VTP administrative domain password.(Max. length 64 bytes) no - This command resets the VTP domain password to default value. Default Setting None Command Mode Global Config 7.14.2.6 vtp pruning This command uses to configure the adminstrative domain to permit pruning Syntax vtp pruning no vtp pruning no - This command resets the pruning mode to default value. Default Setting Disabled Command Mode Global Config 7.14.2.
Command Mode Global Config This command uses to configure the adminstrative domain trunk port on specific interfaces. Syntax vtp trunkport no vtp trunkport no - This command resets the adminstrative domain trunk port to default value. Default Setting Disabled Command Mode Interface Config 7.15 Protected Ports Commands 7.15.1 Show Commands 7.15.1.1 show switchport protected This command displays the status of all the interfaces, including protected and unprotected interfaces.
7.15.1.2 show interface switchport protected This command displays the status of the interface (protected/unprotected) under the groupid. Syntax show interface switchport protected Default Setting None Command Mode Privileged Exec Display Message Name: An name of the protected port group. Protected: Indicates whether the interface is protected or not. It shows TRUE or FALSE. If the group is a multiple groups then it shows TRUE in Group . 7.15.2 Configuration Commands 7.
Default Setting None Command Mode Global Config This command uses to add an interface to a protected port group. The parameter identifies the set of protected ports to which this interface is assigned. You can only configure an interface as protected in one group. Syntax switchport protected <0-2> no switchport protected <0-2> no - This command uses to configure a port as unprotected. Default Setting None Command Mode Interface Config 7.16 Static MAC Filtering Commands 7.16.
Default Setting None Command Mode Privileged Exec Display Message MAC Address: Is the MAC Address of the static MAC filter entry. VLAN ID: Is the VLAN ID of the static MAC filter entry. Source Port(s): Indicates the source port filter set's slot and port(s). 7.16.2 Configuration Commands 7.16.2.1 macfilter This command adds a static MAC filter entry for the MAC address on the VLAN . The value of the parameter is a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
Syntax macfilter addsrc <1-3965> no macfilter addsrc <1-3965> - Specified a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. no - This command removes a port from the source filter set for the MAC filter with the MAC address of and VLAN of . Default Setting None Command Mode Interface Config 7.16.2.3 macfilter addsrc all This command adds all interfaces to the source filter set for the MAC filter with the MAC address of and .
7.17 System Utilities 7.17.1 clear 7.17.1.1 clear arp This command causes all ARP entries of type dynamic to be removed from the ARP cache. Syntax clear arp Default Setting None Command Mode Privileged Exec 7.17.1.2 clear traplog This command clears the trap log. Syntax clear traplog Default Setting None Command Mode Privileged Exec 7.17.1.3 clear eventlog This command is used to clear the event log, which contains error messages from the system.
Default Setting None Command Mode Privileged Exec 7.17.1.4 clear logging buffered This command is used to clear the message log maintained by the switch. The message log contains system trace information. Syntax clear logging buffered Default Setting None Command Mode Privileged Exec 7.17.1.5 clear config This command resets the configuration to the factory defaults without powering off the switch. The switch is automatically reset when this command is processed.
7.17.1.6 clear pass This command resets all user passwords to the factory defaults without powering off the switch. You are prompted to confirm that the password reset should proceed. Syntax clear pass Default Setting None Command Mode Privileged Exec 7.17.1.7 clear counters This command clears the stats for a specified or for all the ports or for the entire switch based upon the argument. Syntax clear counters [ | all] - is the desired interface number.
Syntax clear dns [counter | cache] counter - this command clear the DNS statistics. cache - this command clear all entries from the DNS cache. Default Setting None Command Mode Privileged Exec 7.17.1.9 clear cdp This command is used to clear the CDP neighbors information and the CDP packet counters. Syntax clear cdp [traffic] traffic - this command is used to clear the CDP packet counters. Default Setting None Command Mode Privileged Exec 7.17.1.
Command Mode Privileged Exec 7.17.1.11 clear igmpsnooping This command clears the tables managed by the IGMP Snooping function and will attempt to delete these entries from the Multicast Forwarding Database. Syntax clear igmpsnooping Default Setting None Command Mode Privileged Exec 7.17.1.12 clear port-channel This command clears all port-channels (LAGs). Syntax clear port-channel Default Setting None Command Mode Privileged Exec 7.17.1.
Default Setting None Command Mode Privileged Exec 7.17.1.14 clear dot1x statistics This command resets the 802.1x statistics for the specified port or for all ports. Syntax clear dot1x statistics {all | } - is the desired interface number. all - All interfaces. Default Setting None Command Mode Privileged Exec 7.17.1.15 clear radius statistics This command is used to clear all RADIUS statistics.
7.17.1.16 clear domain-list This command is used to clear all entries domain names for incomplete host names. Syntax clear domain-list Default Setting None Command Mode Privileged Exec 7.17.1.17 clear hosts This command is used to clear all static host name-to-address mapping. Syntax clear hosts Default Setting None Command Mode Privileged Exec 7.17.1.
Default Setting None Command Mode Privileged Exec 7.17.1.19 clear ip arp-cache This command causes all ARP entries of type dynamic to be removed from the ARP cache. If the gateway keyword is specified, the dynamic entries of type gateway are purged as well. If interface keyword is specified, he dymanic entries of that interface on the ARP cache Table are purged. Syntax clear ip arp-cache [gateway | interface ] - Interface number.
7.17.1.21 clear lldp remote-data This command will use to delete all information from the LLDP remote data table. Syntax clear lldp remote-data Default Setting None Command Mode Privileged Exec 7.17.1.22 enable passwd This command changes Privileged EXEC password. Syntax enable passwd Default Setting None Command Mode Global Config. 7.17.1.23 enable passwd encrypted This command allows the administrator to transfer the enable password between devices without having to know the password.
Command Mode Global Config. 7.17.1.24 clear ipv6 neighbors This command will use to clear all entries IPv6 neighbor table or an entry on a specific interface. Use the parameter to specify the interface. Syntax clear ipv6 neighbors [] - Specify the interface. Default Setting None Command Mode Privileged Exec 7.17.1.
7.17.1.26 clear ipv6 dhcp This command will use to clear DHCPv6 statistics for all interfaces or for a specific interface. Use the parameter to specify the interface. Syntax clear ipv6 dhcp {statistics | interface statistics} - Specify the interface. Default Setting None Command Mode Privileged Exec 7.17.2 copy This command uploads and downloads to/from the switch. Local URLs can be specified using tftp or xmodem.
- The filename of a configuration file or a script file. - xmodem, tftp://ipaddr/path/file or ftp://user:pass@ipaddr/path/file. errorlog - event Log file. log - message Log file. traplog - trap Log file. - Operation code file name.
Write running configuration file into flash Syntax copy running-config startup-config [filename] - name of the configuration file. Default Setting None Command Mode Privileged Exec This command upload or download the pre-login banner file Syntax copy clibanner copy clibanner no clibanner - xmodem, tftp://ipaddr/path/file or ftp://user:pass/ipaddr/path/file. no - Delete CLI banner. Default Setting None Command Mode Privileged Exec 7.17.
- name of the configuration or image file. Default Setting None Command Mode Privileged Exec 7.17.4 dir This command is used to display a list of files in Flash memory. Syntax dir [boot-rom | config | opcode [] ] - name of the configuration or image file. boot-rom - bootrom. config - configuration file. opcode - run time operation code. Default Setting None Command Mode Privileged Exec Display Message Column Heading date file name file type startup size 7.17.
Syntax whichboot Default Setting None Command Mode Privileged Exec 7.17.6 boot-system This command is used to specify the file or image used to start up the system. Syntax boot-system {boot-rom | config | opcode} - name of the configuration or image file. boot-rom - bootrom. config - configuration file. opcode - run time operation code. Default Setting None Command Mode Privileged Exec 7.17.7 ping 7.17.7.
Syntax ping count <0-20000000> [size <32-512>] ping size <32-512> [count <0-20000000>] < ipaddress|hostname> - a host name or an IP address. <0-20000000> - number of pings (Range: 0 - 20000000). Note that 0 means infinite. - packet size (Range: 32 - 512). Default Setting Count = 5 Size = 32 Command Mode Privileged Exec 7.17.7.2 ping ipv6 This command use to determine whether another computer is on the network.
7.17.7.3 ping ipv6 interface This command use to determine whether another computer is on the network. To use the command, configure the switch for network (in-band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP. The switch can be pinged from any IP workstation with which the switch is connected through the default VLAN (VLAN 1), as long as there is a physical path between the switch and the workstation.
- The Use initTtl to specify the initial time-to-live (TTL), the maximum number of router hops between the local and remote system. Range is 1 to 255. - Use maxTtle to specify the maximum TTL. Range is 1 to 255. - Use interval to specify the time between probes, in seconds. Range is 1 to 60 seconds. - Use the optional count parameter to specify the number of probes to send for each TTL value. Range is 1 to 10 probes.
7.17.9 logging cli-command This command enables the CLI command Logging feature. The Command Logging component enables the switch to log all Command Line Interface (CLI) commands issued on the system. Syntax logging cli-command Default Setting None Command Mode Global Config 7.17.10 calendar set This command is used to set the system clock.
Syntax reload Default Setting None Command Mode Privileged Exec 7.17.12 configure This command is used to activate global configuration mode. Syntax configure Default Setting None Command Mode Privileged Exec 7.17.13 disconnect This command is used to close a telnet session. Syntax disconnect {<0-58> | all} <0-11> - telnet session ID. all - all telnet sessions.
7.17.14 hostname This command is used to set the prompt string. Syntax hostname - Prompt string. Default Setting Fortinet Command Mode Global Config 7.17.15 quit This command is used to exit a CLI session. Syntax quit Default Setting None Command Mode Privileged Exec 7.17.16 cablestatus This command returns the status of the specified port.
- Interface Number. Default Setting None Command Mode Privileged Exec Display Message Cable Status: One of the following statuses is returned: Normal: The cable is working correctly. Open: The cable is disconnected or there is a faulty connector. Short: There is an electrical short in the cable. Cable Test Failed: The cable status could not be determined. The cable may in fact be working.
DHCPRELEASE and DHCPDECLINE messages are dropped if for a MAC address in the snooping database, but the binding's interface is other than the interface where the message was received. On untrusted interfaces, the switch drops DHCP packets whose source MAC address does not match the client hardware address. This feature is a configurable option. The hardware identifies all incoming DHCP packets on ports where DHCP snooping is enabled.
Syntax show ip dhcp snooping binding [{static/dynamic}] [interface slot/port] [vlan id] Default Setting None Command Mode Privileged Exec Display Message MAC Address: Displays the MAC address for the binding that was added. The MAC address is the key to the binding database. IP Address: Displays the valid IP address for the binding rule. VLAN: The VLAN for the binding rule. Interface: The interface to add a binding into the DHCP snooping interface.
Syntax show ip dhcp snooping statistics Default Setting None Command Mode Privileged Exec Display Message Interface: The IP address of the interface in slot/port format. MAC Verify Failures: Represents the number of DHCP messages that were filtered on an untrusted interface because of source MAC address and client HW address mismatch. Client Ifc Mismatch: Represents the number of DHCP release and Deny messages received on the different ports than learned previously.
Syntax ip dhcp snooping vlan no ip dhcp snooping vlan no - This command disables the DHCP Snooping on VLANs. Default Setting Disabled Command Mode Global Config 7.18.2.3 ip dhcp snooping verify mac-address This command enables the verification of the source MAC address with the client hardware address in the received DCHP message.
Command Mode Global Config 7.18.2.5 ip dhcp snooping database write-delay This command configures the interval in seconds at which the DHCP Snooping database will be persisted. The interval value ranges from 15 to 86400 seconds. Syntax ip dhcp snooping database write-delay no ip dhcp snooping database write-delay no - This command sets the write delay value to the default value. Default Setting 300 seconds Command Mode Global Config 7.18.2.
Syntax ip dhcp snooping binding vlan interface no ip dhcp snooping binding no - This command removes the DHCP static entry from the DHCP Snooping database. Default Setting None Command Mode Global Config 7.18.2.8 ip dhcp snooping limit This command controls the rate at which the DHCP Snooping messages come. The default rate is 15 pps with a range from 0 to 300 pps. The default burst level is 1 second with a range of 1 to 15 seconds.
Default Setting Disabled Command Mode Interface Config 7.18.2.10 ip dhcp snooping trust This command configures the port as trusted. Syntax ip dhcp snooping trust no ip dhcp snooping trust no - This command configures the port as untrusted. Default Setting Disabled Command Mode Interface Config 7.18.2.11 ip dhcp snooping information option This command ip dhcp snooping information option enables the DHCP L2 option mode on the system.
7.18.2.12 ip dhcp snooping information option allow-untrusted This command ip dhcp snooping information option allow-untrusted is used to allow DHCP packet received form untrusted port with option 82 data. Syntax ip dhcp snooping information option allow-untrusted no ip dhcp snooping information option allow-untrusted no - This command disallows DHCP packet received form untrusted port with option 82 data. Default Setting Disabled Command Mode Global Config 7.
7.19.1 Show Commands 7.19.1.1 show ip verify This command displays the IPSG interface configurations on all ports. Syntax show ip verify [interface ] Default Setting None Command Mode Privileged Exec Display Message Interface: Interface address in slot/port format. Filter Type: Is one of two values: ip-mac: User has configured MAC address filtering on this interface. ip: Only IP address filtering on this interface. 7.19.1.
VLAN: The VLAN for the binding rule. 7.19.1.3 show ip source binding This command displays the IPSG bindings. Syntax show ip source binding [{static/dhcp-snooping}] [interface ] [vlan id] Default Setting None Command Mode Privileged Exec Display Message MAC Address: The MAC address for the entry that is added. IP Address: The IP address of the entry that is added. Type: Entry type; statically configured from CLI or dynamically learned from DHCP Snooping. VLAN: VLAN for the entry.
7.19.2.2 ip verify binding This command configures static IP source guard (IPSG) entries. Syntax ip verify binding vlan interface no ip verify binding vlan interface no - This command removes the IPSG static entry from the IPSG database. Default Setting None Command Mode Global Config 7.
7.20.1 Show Commands 7.20.1.1 show ip arp inspection statistics This command displays the statistics of the ARP packets processed by Dynamic ARP Inspection. Give the vlan-list argument and the command displays the statistics on all DAI-enabled VLANs in that list. Give the single vlan argument and the command displays the statistics on that VLAN. If no argument is included, the command lists a summary of the forwarded and dropped ARP packets.
Command Mode Privileged Exec Display Message Source MAC Validation: Displays whether Source MAC Validation of ARP frame is enabled or disabled. Destination MAC Validation: Displays whether Destination MAC Validation is enabled or disabled. IP Address Validation: Displays whether IP Address Validation is enabled or disabled. VLAN: The VLAN ID for each displayed row. Configuration: Displays whether DAI is enabled or disabled on the VLAN.
7.20.1.4 show arp access-list This command displays the configured ARP ACLs with the rules. Giving an ARP ACL name as the argument will display only the rules in that ARP ACL. Syntax show arp access-list [acl-name] Default Setting None Command Mode Privileged Exec 7.20.2 Configuration Commands 7.20.2.1 ip arp inspection validate This command enables additional validation checks like source-mac validation, destination-mac validation, and ip address validation on the received ARP packets.
no - This command disables Dynamic ARP Inspection on a list of comma-separated VLAN ranges. Default Setting Disabled Command Mode Global Config 7.20.2.3 ip arp inspection vlan logging This command enables logging of invalid ARP packets on a list of comma-separated VLAN ranges. Syntax ip arp inspection vlan logging no ip arp inspection vlan logging no - This command disables logging of invalid ARP packets on a list of comma-separated VLAN ranges.
Command Mode Global Config 7.20.2.5 ip arp inspection trust This command configures an interface as trusted for Dynamic ARP Inspection. Syntax ip arp inspection trust no ip arp inspection trust no - This command configures an interface as untrusted for Dynamic ARP Inspection. Default Setting Disabled Command Mode Interface Config 7.20.2.6 ip arp inspection limit This command configures the rate limit and burst interval values for an interface.
Syntax arp access-list no arp access-list no - This command deletes a configured ARP ACL. Default Setting None Command Mode Global Config 7.20.2.8 permit ip host mac host This command configures a rule for a valid IP address and MAC address combination used in ARP packet validation. Syntax permit ip host mac host no permit ip host mac host no - This command deletes a rule for a valid IP and MAC combination.
Command Mode Privileged Exec 7.21 Differentiated Service Command This Switching Command function can only be used on the QoS software version. ! This chapter contains the CLI commands used for the QOS Differentiated Services (DiffServ) package. The user configures DiffServ in several stages by specifying: 1.
allowed within a class definition. If a field is already specified for a class, all subsequent attempts to specify the same field fail, including the cases where a field can be specified multiple ways through alternative formats. The exception to this is when the 'exclude' option is specified, in which case this restriction does not apply to the excluded fields.
7.21.1.2 no diffserv This command sets the DiffServ operational mode to inactive. While disabled, the DiffServ configuration is retained and can be changed, but it is not activated. When enabled, Diffserv services are activated. Syntax no diffserv Command Mode Global Config 7.21.
! The class name 'default' is reserved and is not allowed here. The class type of match-all indicates all of the individual match conditions must be true for a packet to be considered a member of the class. The optional keywords [{ipv4 | ipv6}] specify the Layer 3 protocol for this class. If not specified, this parameter defaults to ‘ipv4’. This maintains backward compatibility for configurations defined on systems before IPv6 match items were supported.
is the name of an existing DiffServ class. identifying the class. ! is a case-sensitive alphanumeric string from 1 to 31 characters uniquely The class name ‘default’ is reserved and must not be used here. Default Setting None Command Mode Global Config 7.21.2.4 match any This command adds to the specified class definition a match condition whereby all packets are considered to belong to the class.
Default Setting None Command Mode Class-Map Config / Ipv6-Class-Map Config Restrictions The class types of both and must be identical (that is, any vs. any, or all vs. all). A class type of acl is not supported by this command. Cannot specify the same as (that is, self-referencing of class name not allowed). At most one other class may be referenced by a class.
7.21.2.7 match cos This command adds to the specified class definition a match condition for the Class of Service value (the only tag in a single tagged packet or the first or outer 802.1Q tag of a double VLAN tagged packet). The value may be from 0 to 7. This command is not available on the Broadcom 5630x platform. i Syntax match cos <0-7> Default Setting None Command Mode Class-Map Config 7.21.2.
7.21.2.9 match dstip This command adds to the specified class definition a match condition based on the destination IP address of a packet. Syntax match dstip specifies an IP address. specifies an IP address bit mask; note that although similar to a standard subnet mask, this bit mask need not be contiguous. Default Setting None Command Mode Class-Map Config 7.21.2.
Command Mode Class-Map Config / Ipv6-Class-Map Config 7.21.2.11 match ethertype This command adds to the specified class definition a match condition based on the value of the ethertype. The value is specified as one of the following keywords: appletalk, arp, ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios, novell, pppoe, rarp or as a custom ethertype value in the range of 0x0600-0xFFFF. This command is not available on the Broadcom 5630x platform.
user notation. To specify a match on all DSCP values, use the match [not] ip tos command with set to 0 and set to 03 (hex). Default Setting None Command Mode Class-Map Config / Ipv6-Class-Map Config 7.21.2.
is a two-digit hexadecimal number from 00 to ff. The denotes the bit positions in that are used for comparison against the IP TOS field in a packet. For example, to check for an IP TOS value having bits 7 and 5 set and bit 1 clear, where bit 7 is most significant, use a value of a0 (hex) and a of a2 (hex).
7.21.2.16 match source-address mac This command adds to the specified class definition a match condition based on the source MAC address of a packet. The
parameter is any layer 2 MAC address formatted as six, two-digit hexadecimal numbers separated by colons (e.g., 00:11:22:dd:ee:ff). The parameter is a layer 2 MAC address bit mask, which may not be contiguous, and is formatted as six, two-digit hexadecimal numbers separated by colons (e.g., ff:07:23:ff:fe:dc).7.21.2.18 match srcl4port This command adds to the specified class definition a match condition based on the source layer 4 port of a packet using a single keyword or numeric notation or a numeric range notation. Syntax match srcl4port { | <0-65535>} is one of the supported port name keywords (listed below). The currently supported values are: domain, echo, ftp, ftpdata, http, smtp, snmp, telnet, tftp, www.
Command Mode Class-Map Config 7.21.2.20 match dstip6 This command adds to the specified class definition a match condition based on the destination IPv6 address of a packet. Syntax match dstip6 Default Setting None Command Mode IPv6-Class-Map Config 7.21.2.21 match srcip6 This command adds to the specified class definition a match condition based on the source IP address of a packet.
Default Setting None Command Mode IPv6-Class-Map Config 7.21.3 Policy Commands The 'policy' command set is used in DiffServ to define: Traffic Conditioning Specify traffic conditioning actions (policing, marking, shaping) to apply to traffic classes Service Provisioning Specify bandwidth and queue depth management requirements of service levels (EF, AF, etc.) The policy commands are used to associate a traffic class, which was defined by the class command set, with one or more QoS policy attributes.
7.21.3.1 assign-queue This command modifies the queue id to which the associated traffic stream is assigned. The queueid is an integer from 0 to n-1, where n is the number of egress queues supported by the device. Syntax assign-queue <0-7> <0-7> - Queue ID. Command Mode Policy-Class-Map Config Incompatibilities Drop 7.21.3.2 drop This command specifies that all packets for the associated traffic stream are to be dropped at ingress.
- Interface Number. Default Setting None Command Mode Policy-Class-Map Config Incompatibilities Drop, Redirect 7.21.3.4 redirect This command specifies that all incoming packets for the associated traffic stream are redirected to a specific egress interface (physical port or port-channel). Syntax redirect Command Mode Policy-Class-Map Config Incompatibilities Drop, Mirror 7.21.3.
Incompatibilities Drop, Mirror 7.21.3.6 mark cos This command marks all packets for the associated traffic stream with the specified class of service value in the priority field of the 802.1p header. If the packet does not already contain this header, one is inserted. The CoS value is an integer from 0 to 7. Syntax mark cos <0-7> <0-7> - The range of COS value is 0 to 7. Command Mode Policy-Class-Map Config Policy Type In Incompatibilities Drop, Mark IP DSCP, IP Precedence, Police 7.21.3.
7.21.3.8 no class This command deletes the instance of a particular class and its defined treatment from the specified policy. Syntax no class is the name of an existing DiffServ class. Note that this command removes the reference to the class definition for the specified policy. Command Mode Policy-Class-Map Config 7.21.3.9 mark ip-dscp This command marks all packets for the associated traffic stream with the specified IP DSCP value.
Command Mode Policy-Class-Map Config Policy Type In Incompatibilities Drop, Mark (all forms) 7.21.3.11 police-simple This command is used to establish the traffic policing style for the specified class. The simple form of the police command uses a single data rate and burst size, resulting in two outcomes: conform and violate. The conforming data rate is specified in kilobits-per-second (Kbps) and is an integer from 1 to 4294967295.
- an IP Precedence value is required and is specified as an integer from 0-7. Command Mode Policy-Class-Map Config Incompatibilities Drop, Mark(all forms) 7.21.3.12 policy-map This command establishes a new DiffServ policy. The parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the policy. The type of policy is specific to the inbound traffic direction as indicated by the in parameter.
7.21.4 Service Commands The 'service' command set is used in DiffServ to define: Traffic Conditioning Assign a DiffServ traffic conditioning policy (as specified by the policy commands) to an interface in the incoming direction. Service Provisioning Assign a DiffServ service provisioning policy (as specified by the policy commands) to an interface in the outgoing direction The service commands attach a defined policy to a directional interface.
Interface Config (for a specific interface) Restrictions Only a single policy may be attached to a particular interface in a particular direction at any one time. 7.21.4.2 no service-policy This command detaches a policy from an interface in a particular direction. Syntax no service-policy in The command can be used in the Interface Config mode to detach a policy from a specific interface.
7.21.5.1 show class-map This command displays all configuration information for the specified class. Syntax show class-map [] is the name of an existing DiffServ class. Default Setting None Command Mode Privileged Exec User Exec Display Message Class Name: The name of this class. Class Type: The class type (all, any, or acl) indicating how the match criteria are evaluated for this class.
Syntax show diffserv Default Setting None Command Mode Privileged Exec User Exec Display Message DiffServ Admin mode: The current value of the DiffServ administrative mode. Class Table Size Current/Max: The current or maximum number of entries (rows) in the Class Table. Class Rule Table Size Current/Max: The current or maximum number of entries (rows) in the Class Rule Table. Policy Table Size Current/Max: The current or maximum number of entries (rows) in the Policy Table.
Display Message DiffServ Admin Mode: The current setting of the DiffServ administrative mode. An attached policy is only in effect on an interface while DiffServ is in an enabled mode. Interface: The slot number and port number of the interface (slot/port). Direction: The traffic direction of this interface service. Operational Status: The current operational status of this DiffServ service interface. Policy Name: The name of the policy attached to the interface in the indicated direction.
Syntax show policy-map [] - is the name of an existing DiffServ policy. Default Setting None Command Mode Privileged Exec Display Message Policy Name: The name of this policy. Policy Type: The policy type, namely whether it is an inbound or outbound policy definition. The following information is repeated for each class associated with this policy (only those policy attributes actually configured are displayed): Class Name: The name of this class.
Assign Queue: Directs traffic stream to the specified QoS queue. This allows a traffic classifier to specify which one of the supported hardware queues are used for handling packets belonging to the class. Drop: Drop a packet upon arrival. This is useful for emulating access control list operation using DiffServ, especially when DiffServ and ACL cannot co-exist on the same interface. Mirror: Copies a classified traffic stream to a specified egress port (physical port or LAG).
In Discarded Packets: A count of the packets discarded for this class instance for any reason due to DiffServ treatment of the traffic class. Only displayed for the 'in' direction. i None of the counters listed here are guaranteed to be supported on all platforms. Only supported counters are shown in the display output. 7.21.5.7 show service-policy This command displays a summary of policy-oriented statistics information for all interfaces in the specified direction.
7.22 ACL Command 7.22.1 Show Commands 7.22.1.1 show mac access-lists name This command displays a MAC access list and all of the rules that are defined for the ACL. The parameter is used to identify a specific MAC ACL to display. Syntax show mac access-lists - ACL name which uniquely identifies the MAC ACL to display. Default Setting None Command Mode Privileged Exec Display Message MAC ACL Name: The name of the MAC ACL rule.
Syntax show mac access-lists Default Setting None Command Mode Privileged Exec Display Message Current number of all ACLs: The number of user-configured rules defined for this ACL. Maximum number of all ACLs: The maximum number of ACL rules. MAC ACL Name: The name of the MAC ACL rule. Rules: The number of rule in this ACL. Direction: Denotes the direction in which this MAC ACL is attached to the set of interfaces listed. The value is Inbound.
ACL ID: The identifier of this ACL. Rule: This displays the number identifier for each rule that is defined for the ACL. Action: This displays the action associated with each rule. The possible values are Permit or Deny. Match ALL: Match all packets or not. Protocol: This displays the protocol to filter for this rule. Source IP Address: This displays the source IP address for this rule. Source IP Mask: This field displays the source IP Mask for this rule.
ACL ID: Access List name for a MAC or IPv6 access list or the numeric identifier for an IP access list. Sequence Number: An optional sequence number may be specified to indicate the order of this access list relative to other access lists already assigned to this interface and direction. A lower number indicates higher precedence order. If a sequence number is already in use for this interface and direction, the specified access list replaces the currently attached access list using that sequence number.
- New name which uniquely identifies the MAC access list. Default Setting None Command Mode Global Config 7.22.2.3 mac access-group in This command attaches a specific MAC Access Control List (ACL) identified by to an interface, or associates it with a VLAN ID, in a given direction. The parameter must be the name of an exsiting MAC ACL.
A rule may either deny or permit traffic according to the specified classification fields. At a minimum, the source and destination MAC value and mask pairs must be specified, each of which may be substituted using the keyword any to indicate a match on any value in that field. The bpdu keyword may be specified for the destination MAC value/mask pair indicating a well-known BPDU MAC value of 01-80-c2-xx-xx-xx (hex), where 'xx' indicates a don't care. The remaining command parameters are all optional.
- The ACL number is an integer from 1 to 199. The range 1 to 99 is for the normal ACL List and 100 to 199 is for the extended ACL List. permit or deny - The ACL rule is created with two options. The protocol to filter for an ACL rule is specified by giving the protocol to be used like icmp ,igmp ,ip ,tcp, udp. The command specifies a source ip address and source mask for match condition of the ACL rule specified by the srcip and srcmask parameters.
access list replaces the currently attached IP access list using that sequence number. If the sequence number is not specified for this command, a sequence number that is one greater than the highest sequence number currently in use for this interface and direction is used. This command specified in 'Interface Config' mode only affects a single interface, whereas the 'Global Config' mode setting is applied to all interfaces. The VLAN keyword is only valid in the 'Global Config' mode.
no - This command removes the IP ACL identified by from the system. Default Setting None Command Mode Global Config 7.22.2.9 ip access-list rename Use this command to change the name of an IP Access Control List (ACL). The parameter is the names of an existing IP ACL. The parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IP access list.
Command Mode Privileged EXEC User EXEC Display Message Rule Number: The ordered rule number identifier defined within the IPv6 ACL. Action: The action associated with each rule. The possible values are Permit or Deny. Match All: Indicates whether this access list applies to every packet. Possible values are True or False. Protocol: The protocol to filter for this rule. Source IP Address: The source IP address for this rule. Source L4 Port Keyword: The source port for this rule.
The CLI mode changes to IPv6-Access-List Config mode when you successfully execute this command. i Default Setting None Command Mode Global Config 7.23.2.2 ipv6 access-list rename This command changes the name of an IPv6 ACL. The parameter is the name of an existing IPv6 ACL. The parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IPv6 access list. This command fails is an IPv6 ACL by the name already exists.
specified. The source and destination IPv6 address fields may be specified using the keyword ‘any’ to indicate a match on any value in that field. The remaining command parameters are all optional, but the most frequently used parameters appear in the same relative order as shown in the command format. The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches this rule.
Default Setting None Command Mode Global Config Interface Config 7.24 CoS (Class of Service) Command 7.24.1 Show Commands 7.24.1.1 show queue cos-map This command displays the current Dot1p (802.1p) priority mapping to internal traffic classes for a specific interface. The slot/port parameter is optional and is only valid on platforms that support independent per-port class of service mappings. If specified, the 802.1p mapping table of the interface is displayed.
7.24.1.2 show queue ip-dscp-mapping This command maps an IP DSCP value to an internal traffic class. The value is specified as either an integer from 0 to 63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef. The values can range from 0-6, although the actual number of available traffic classes depends on the platform.
Non-IP Traffic Class: The traffic class used for non-IP traffic. This is only displayed when the COS trust mode is set to either 'trust ip-dscp' or 'trust ip-precedence'. Untrusted Traffic Class: The traffic class used for all untrusted traffic. This is only displayed when the COS trust mode is set to 'untrusted'. 7.24.1.4 show queue cos-queue This command displays the class-of-service queue configuration for the specified interface.
7.24.2 Configuration Commands 7.24.2.1 queue cos-map This command maps an 802.1p priority to an internal traffic class on a "per-port" basis. Syntax queue cos-map <0-7> <0-7> no queue cos-map < 0-7 > - The range of queue priority is 0 to 7. < 0-7 > - The range of mapped traffic class is 0 to 7. no - Reset to the default mapping of the queue priority and the mapped traffic class. Default Setting None Command Mode Interface Config. This command maps an 802.
Syntax queue trust {dot1p | ip-dscp | untrusted } all no queue trust all no - This command sets the class of service trust mode to untrusted for all interfaces. Default Setting None Command Mode Global Config. 7.24.2.3 queue cos-queue min-bandwidth This command specifies the minimum transmission bandwidth guarantee for each interface queue.
… - Each Valid range is (0 to 100) in increments of 5 and the total sum is less than or equal to 100. no - This command restores the default for each queue's minimum bandwidth value in the device. Default Setting None Command Mode Global Config. 7.24.2.4 queue cos-queue strict This command activates the strict priority scheduler mode for each specified queue on a "per-port" basis.
7.24.2.5 queue cos-queue traffic-shape This command specifies the maximum transmission bandwidth limit for the interface as a whole. Also known as rate shaping, this has the effect of smoothing temporary traffic bursts over time so that the transmitted traffic rate is bounded. Syntax queue cos-queue traffic-shape no queue cos-queue traffic-shape - Valid range is (0 to 100) in increments 5. no - This command restores the default shaping rate value.
7.25 Domain Name Server Relay Commands 7.25.1 Show Commands 7.25.1.1 show hosts This command displays the static host name-to-address mapping table. Syntax show hosts Default Setting None Command Mode Privileged Exec Display Message Domain Name List: Domain Name. IP Address: IPv4 or IPv6 address of the Host. 7.25.1.2 show dns This command displays the configuration of the DNS server.
Response: Number of the DNS response packets been received. 7.25.1.3 show dns cache This command displays all entries in the DNS cache table. Syntax show dns cache Default Setting None Command Mode Privileged Exec Display Message Domain Name List: Domain Name IP Address: IP address of the corresponding domain name, including IPv4 and IPv6. TTL: Time in seconds that this entry will remain in the DNS cache table Flag: Indicates if this entry is reliable. A value of 8 is not as reliable as a value of 10.
Command Mode Global Config 7.25.2.2 clear hosts This command clears the entire static host name-to-address mapping table. Syntax clear hosts Default Setting None Command Mode Privileged Exec 7.25.2.3 ip domain-name This command defines the default domain name to be appended to incomplete host names (i.e., host names passed from a client are not formatted with dotted notation). Syntax ip domain-name no ip domain-name - Default domain name used to complete unqualified host names.
7.25.2.4 ip domain-list This command defines the domain name that can be appended to incomplete host names (i.e., host names passed from a client are not formatted with dotted notation). The domain name table can contain maximum 6 entries. Syntax ip domain-list no ip domain-list - Default domain name used to complete unqualified host names. Do not include the initial period that separates an unqualified name from the domain name.
7.25.2.6 ip domain-lookup This command enables the IP Domain Naming System (DNS)-based host name-to-address translation. Syntax ip domain-lookup no ip domain-lookup - This command disables the IP Domain Naming System (DNS)-based host name-to-address translation. Default Setting None Command Mode Global Config 7.25.2.7 clear domain-list This command clears all entries in the domain name list table. Syntax clear domain-list Default Setting None Command Mode Privileged Exec 7.25.2.
Default Setting None Command Mode Privileged Exec 7.25.2.9 clear dns cache This command clears all entries in the DNS cache table. Syntax clear dns cache Default Setting None Command Mode Privileged Exec 7.25.2.10 clear dns counter This command clears the statistics of all entries in the DNS cache table.
8. Routing Commands 8.1 Address Resolution Protocol (ARP) Commands 8.1.1 Show Commands 8.1.1.1 show ip arp This command displays the Address Resolution Protocol (ARP) cache. Syntax show ip arp Default Setting None Command Mode Privileged Exec Display Message Age Time: Is the time it takes for an ARP entry to age out. This value was configured into the unit. Age time is measured in seconds. Response Time: Is the time it takes for an ARP request timeout. This value was configured into the unit.
Type: Is the type that was configured into the unit. The possible values are Local, Gateway, Dynamic and Static. Age: This field displays the current age of the ARP entry since last refresh (in hh:mm:ss format). 8.1.1.2 show ip arp brief This command displays the brief Address Resolution Protocol (ARP) table information. Syntax show ip arp brief Default Setting None Command Mode Privileged Exec Display Message Age Time: Is the time it takes for an ARP entry to age out.
Command Mode Privileged Exec Display Message IP address: Is the IP address of a device on a subnet attached to an existing routing interface. MAC address: Is the MAC address for that device. 8.1.2 Configuration Commands 8.1.2.1 arp This command creates an ARP entry. The value for is the IP address of a device on a subnet attached to an existing routing interface. The value for is a unicast MAC address for that device.
no - This command disables proxy ARP on a router interface. Default Setting Enabled Command Mode Interface Config 8.1.2.3 ip local-proxy-arp This command enables or disables Local Proxy ARP on an interface. Syntax ip local-proxy-arp no ip local-proxy-arp no - This command disables Local Proxy ARP on a router interface. Default Setting Disabled Command Mode Interface Config 8.1.2.4 arp cachesize This command configures the maximum number of entries in the ARP cache.
8.1.2.5 arp dynamicrenew This command enables ARP component to automatically renew ARP entries of type dynamic when they age out. Syntax arp dynamicrenew no arp dynamicrenew no - This command disables ARP component from automatically renewing ARP entries of type dynamic when they age out. Default Setting Disabled Command Mode Global Config 8.1.2.6 arp purge This command causes the specified IP address to be removed from the ARP table.
<1-10> - The range of default response time is 1 to 10 seconds. no - This command configures the default response timeout time. Default Setting The default response time is 1. Command Mode Global Config 8.1.2.8 arp retries This command configures the ARP count of maximum request for retries. Syntax arp retries <0-10> no arp retries <0-10> - The range of maximum request for retries is 0 to 10. no - This command configures the default count of maximum request for retries.
Command Mode Global Config 8.1.2.10 clear ip arp-cache This command causes all ARP entries of type dynamic to be removed form the ARP cache. If the [gateway] parameter is specified, the dynamic entries of type gateway are purged as well. Syntax clear ip arp-cache [gateway | interface ] Default Setting None Command Mode Privileged Exec 8.2 IP Routing Commands 8.2.1 Show Commands 8.2.1.1 show ip brief This command displays all the summary information of the IP.
IP Forwarding Mode: Disable or enable the forwarding of IP frames. Maximum Next Hops: The maximum number of hops supported by this switch. 8.2.1.2 show ip interface port This command displays all pertinent information about the IP interfaces. Syntax show ip interface port Default Setting None Command Mode Privileged Exec User Exec Display Message IP Address: Is an IP address representing the subnet configuration of the router interface.
8.2.1.3 show ip interface brief This command displays summary information about IP configuration settings for all ports in the router. Syntax show ip interface brief Default Setting None Command Mode Privileged Exec User Exec Display Message Interface: Valid slot, and port number separated by forward slashes. IP Address: The IP address of the routing interface. IP Mask: The IP mask of the routing interface. Netdir Bcast: Indicates if IP forwards net-directed broadcasts on this interface.
Display Message Route Codes: Displays the key for the routing protocol codes that might appear in the routing table output. The command displays the routing tables in the following format: Code IP-Address/Mask [Preference/Metric] via Next-Hop, Interface Code: The codes for the routing protocols that created the routes. IP-Address/Mask: The IP-Address and mask of the destination network corresponding to this route. Preference: The administrative distance associated with this route.
8.2.1.6 show ip route entry This command displays the router route entry information. Syntax show ip route entry - Is a valid network address identifying the network on the specified interface. Default Setting None Command Mode Privileged Exec Display Message Network Address: Is a valid network address identifying the network on the specified interface. Subnet Mask: Is a mask of the network and host portion of the IP address for the attached network.
Route Codes: Displays the key for the routing protocol codes that might appear in the routing table output. The command displays the routing tables in the following format: Code IP-Address/Mask [Preference/Metric] via Next-Hop, Interface Code: The codes for the routing protocols that created the routes. IP-Address/Mask: The IP-Address and mask of the destination network corresponding to this route. Preference: The administrative distance associated with this route.
via Next-Hop: The outgoing router IP address to use when forwarding traffic to the next router (if any) in the path toward the destination. Interface: The outgoing router interface to use when forwarding traffic to the next destination. 8.2.1.9 show ip route rip This command displays Routing Information Protocol (RIP) routes. The option all command displays all (best and non-best) routes.
Default Setting None Command Mode Privileged Exec Display Message Route Codes: Displays the key for the routing protocol codes that might appear in the routing table output. The command displays the routing tables in the following format: Code IP-Address/Mask [Preference/Metric] via Next-Hop, Interface Code: The codes for the routing protocols that created the routes. IP-Address/Mask: The IP-Address and mask of the destination network corresponding to this route.
Total Routes: Total number of routes in the routing table. 8.2.1.12 show ip route precedence This command displays detailed information about the route preferences. Route preferences are used in determining the best route. Lower router preference values are preferred over higher router preference values. Syntax show ip route preferences Default Setting None Command Mode Privileged Exec User Exec Display Message Local: This field displays the local route preference value.
Default Setting Disabled Command Mode Interface Config 8.2.2.2 ip routing This command enables the IP Router Admin Mode for the master switch. Syntax ip routing no ip routing no - Disable the IP Router Admin Mode for the master switch. Default Setting Disabled Command Mode Global Config 8.2.2.3 ip address This command configures an IP address on an interface. The IP address may be a secondary IP address.
8.2.2.4 ip route This command configures a static route. Syntax ip route [ [<1-255 >] ] no ip route [ { | <1-255 > } ] - A valid IP address . - A valid subnet mask. - IP address of the next hop router. <1-255> - The precedence value of this route. The range is 1 to 255. no - delete all next hops to a destination static route.
8.2.2.6 ip route precedence This command sets the default precedence for static routes. Lower route preference values are preferred when determining the best route. The "ip route" and "ip default-next-hop" commands allow you to optionally set the precedence of an individual static route. The default precedence is used when no precedence is specified in these commands.
8.2.2.8 encapsulation This command configures the link layer encapsulation type for the packet. Syntax encapsulation {ethernet | snap} ethernet - The link layer encapsulation type is ethernet. snap - The link layer encapsulation type is SNAP. Default Setting The default value is ethernet. Command Mode Interface Config Restrictions Routed frames are always Ethernet encapsulated when a frame is routed to a VLAN. 8.3 Open Shortest Path First (OSPF) Commands 8.3.1 Show Commands 8.3.1.
Router ID : A 32-bit integer in dotted decimal format identifying the router, about which information is displayed. This is a configured value. OSPF Admin Mode : Shows whether the administrative mode of OSPF in the router is enabled or disabled. This is a configured value. ASBR Mode : Indicates whether the ASBR mode is enabled or disabled. Enable implies that the router is an autonomous system border router.
LSA Count: The total number of link state advertisements currently in the link state database. Maximum Number of LSAs: The maximum number of LSAs that OSPF can store. LSA High Water Mark: The maximum size of the link state database since the system started. Retransmit List Entries: The total number of LSAs waiting to be acknowledged by all neighbors. An LSA may be pending acknowledgment from more than one neighbor.
Command Mode Privileged Eexc User Exec Display Messages Type: The type of the route to the destination. It can be either: intra — Intra-area route inter — Inter-area route Router ID: Router ID of the destination. Cost: Cost of using this route. Area ID: The area ID of the area from which this route is learned. Next Hop: Next hop toward the destination. Next Hop Intf: The outgoing router interface to use when forwarding traffic to the next hop. 8.3.1.
OSPF Stub Metric Value: The metric value of the stub area. This field displays only if the area is a configured as a stub area. The following OSPF NSSA specific information displays only if the area is configured as an NSSA: Import Summary LSAs: Shows whether to import summary LSAs into the NSSA. Redistribute into NSSA: Shows whether to redistribute information into the NSSA. Default Information Originate: Shows whether to advertise a default route into the NSSA.
8.3.1.4 show ip ospf asbr This command displays the internal OSPF routing table entries to Autonomous System Boundary Routers (ASBR). This command takes no options. Syntax show ip ospf asbr Default Setting None Command Mode Privileged Exec User Exec Display Messages Type: The type of the route to the destination. It can be one of the following values: intra — Intra-area route inter — Inter-area route Router ID: Router ID of the destination. Cost: Cost of using this route.
nssa-external - Use nssa-external to display NSSA external LSAs. opaque-area - Use opaque-area to display area opaque LSAs. opaque-as - Use opaque-as to display AS opaque LSAs. opaque-link - Use opaque-link to display link opaque LSAs. router - Use router to display router LSAs. summary - Use summary to show the LSA database summary information. Lsid - Use to specify the link state ID (LSID). The value of can be an IP address or an integer in the range of 0-4294967295.
Command Mode Privileged Exec User Exec Display Messages Router: Total number of router LSAs in the OSPF link state database. Network: Total number of network LSAs in the OSPF link state database. Summary Net: Total number of summary network LSAs in the database. Summary ASBR: Number of summary ASBR LSAs in the database. Type-7 Ext: Total number of Type-7 external LSAs in the database. Self-Originated Type-7: Total number of self originated AS external LSAs in the OSPFv3 link state database.
Retransmit Interval: A number representing the OSPF Retransmit Interval for the specified interface. Hello Interval: A number representing the OSPF Hello Interval for the specified interface. Dead Interval: A number representing the OSPF Dead Interval for the specified interface. LSA Ack Interval: A number representing the OSPF LSA Acknowledgment Interval for the specified interface. Transit Delay Interval: A number representing the OSPF Transit Delay for the specified interface.
OSPF Admin Mode: States whether OSPF is enabled or disabled on a router interface. OSPF Area ID: The OSPF Area Id for the specified interface. Router Priority: A number representing the OSPF Priority for the specified interface. Hello Interval: A number representing the OSPF Hello Interval for the specified interface. Dead Interval: A number representing the OSPF Dead Interval for the specified interface. Retransmit Interval: A number representing the OSPF Retransmit Interval for the specified interface.
External LSA Count: The number of external (LS type 5) link-state advertisements in the link-state database. Sent Packets: The number of OSPF packets transmitted on the interface. Received Packets: The number of valid OSPF packets received on the interface. Discards: Discards The number of received OSPF packets discarded because of an error in the packet or an error in processing the packet.
Default Setting None Command Mode Privileged Exec User Exec Display Messages If you do not specify an IP address, a table with the following columns displays for all neighbors or the neighbor associated with the interface that you specify: Router ID: The 4-digit dotted-decimal number of the neighbor router. Priority: The OSPF priority for the specified interface. The priority of an interface is a priority integer from 0 to 255.
Router Priority: The OSPF priority for the specified interface. The priority of an interface is a priority integer from 0 to 255. A value of '0' indicates that the router is not eligible to become the designated router on this network. Dead Timer Due: The amount of time, in seconds, to wait before the router assumes the neighbor is unreachable. Up Time: Neighbor uptime; how long since the adjacency last reached the Full state. State: The state of the neighboring routers.
Syntax show ip ospf statistics Default Setting None Command Mode Privileged Exec User Exec Display Messages Delta T: How long ago the SPF ran. The time is in the format hh:mm:ss, giving the hours, minutes, and seconds since the SPF run. SPF Duration: How long the SPF took in milliseconds. Reason: The reason the SPF was scheduled.
Metric Val: The metric value is applied based on the TOS. It defaults to the least metric of the type of service among the interfaces to other areas. The OSPF cost for a route is a function of the metric value. Import Summary LSA: Controls the import of summary LSAs into stub areas. 8.3.1.14 show ip ospf virtual-link This command displays the OSPF Virtual Interface information for a specific area and neighbor.
Default Setting None Command Mode Privileged Exec User Exec Display Messages Area ID: The area id of the requested OSPF area. Neighbor: The neighbor interface of the OSPF virtual interface. Hello Interval: The configured hello interval for the OSPF virtual interface. Dead Interval: The configured dead interval for the OSPF virtual interface. Retransmit Interval: The configured retransmit interval for the OSPF virtual interface. Transit Delay: The configured transit delay for the OSPF virtual interface. 8.
Default Setting Enabled Command Mode Router OSPF Config Mode 8.3.2.3 network area Use network area command to enable OSPFv2 on an interface and set its area ID if the IP address of an interface is covered by this network command.
8.3.2.5 1583compatibility 1583 compatibility mode is enabled by default. If all OSPF routers in the routing domain are capable of operating according to RFC 2328, OSPF 1583 compatibility mode should be disabled. 1583compatibility command enables OSPF 1583 compatibility. no 1583compatibility command disables OSPF 1583 compatibility Syntax 1583compatibility no 1583compatibility Default Setting Enabled Command Mode Router OSPF Config Mode 8.3.2.
Command Mode Router OSPF Config Mode 8.3.2.8 area nssa default-info-originate area nssa default-info-originate command configures the metric value and type for the default route advertised into the NSSA. The optional metric parameter specifies the metric of the default route and is to be in a range of 1-16777214. If no metric is specified, the default value is ****. The metric type can be comparable (nssa-external 1) or non-comparable (nssa-external 2).
Syntax area nssa no-summary no area nssa no-summary Default Setting None Command Mode Router OSPF Config Mode 8.3.2.11 area nssa translator-role area nssa translator-role command configures the translator role of the NSSA. A value of always causes the router to assume the role of the translator the instant it becomes a border router and a value of candidate causes the router to participate in the translator election process when it attains border router status.
Command Mode Router OSPF Config Mode 8.3.2.13 area range area range command creates a specified area range for a specified NSSA. The is a valid IP address. The is a valid subnet mask. The LSDB type must be specified by either summarylink or nssaexternallink, and the advertising of the area range can be allowed or suppressed. no area range command deletes a specified area range. The is a valid IP address. The is a valid subnet mask.
8.3.2.15 area stub no-summary area stub no-summary command configures the Summary LSA mode for the stub area identified by . Use this command to prevent LSA Summaries from being sent. no area stub no-summary command configures the default Summary LSA mode for the stub area identified by . Syntax area stub no-summary no area stub no-summary Default Setting Disabled Command Mode Router OSPF Config Mode 8.3.2.
no area virtual-link authentication command configures the default authentication type for the OSPF virtual interface identified by and . The parameter is the Router ID of the neighbor. Syntax area virtual-link authentication {none | {simple } | {encrypt }} no area virtual-link authentication Default Setting None Command Mode Router OSPF Config Mode 8.3.2.
Default Setting 10 Command Mode Router OSPF Config Mode 8.3.2.20 area virtual-link retransmit-interval area virtual-link retransmit-interval command configures the retransmit interval for the OSPF virtual interface on the virtual interface identified by and . The parameter is the Router ID of the neighbor. The range for seconds is 0 to 3600..
8.3.2.22 auto-cost By default, OSPF computes the link cost of each interface from the interface bandwidth. Faster links have lower metrics,making them more attractive in route selection. The configuration parameters in the auto-cost reference bandwidth and bandwidth commands give you control over the default link cost. You can configure for OSPF an interface bandwidth that is independent of the actual link speed.
8.3.2.24 capability opaque Use capability opaque command to enable Opaque Capability on the Router. The information contained in Opaque LSAs may be used directly by OSPF or indirectly by an application wishing to distribute information throughout the OSPF domain. Supports the storing and flooding of Opaque LSAs of different scopes.
8.3.2.27 clear ip ospf counters Use this command to reset global and interface statistics Syntax clear ip ospf counters Default Setting None Command Mode Privileged Exec 8.3.2.28 clear ip ospf neighbor Use this command to drop the adjacency with all OSPF neighbors. On each neighbor’s interface, send a one-way hello.Adjacencies may then be re-established. To drop all adjacencies with a specific router ID, specify the neighbor’s Router ID using the optional parameter [neighbor-id].
Command Mode Privileged Exec 8.3.2.30 clear ip ospf redistribution Use this command to flush all self-originated external LSAs. Reapply the redistribution configuration and re-originate prefixes as necessary. Syntax clear ip ospf redistribution Default Setting None Command Mode Privileged Exec 8.3.2.31 default-information originate default-information originate command is used to control the advertisement of default routes.
Default Setting None Command Mode Router OSPF Config Mode 8.3.2.33 distance ospf distance ospf command sets the route preference value of OSPF in the router. Lower route preference values are preferred when determining the best route. The type of OSPF route can be intra, inter, or external. All the external type routes are given the same preference value. The range of value is 1 to 255. no distance ospf command sets the default route preference value of OSPF routes in the router.
8.3.2.35 exit-overflow-interval exit-overflow-interval command configures the exit overflow interval for OSPF. It describes the number of seconds after entering overflow state that a router will wait before attempting to leave the overflow state. This allows the router to again originate non-default AS-external-LSAs. When set to 0, the router will not leave overflow state until restarted. The range for seconds is 0 to 2147483647 seconds.
8.3.2.37 ip ospf authentication ip ospf authentication command sets the OSPF Authentication Type and Key for the specified interface. The value of is either none, simple or encrypt. The is composed of standard displayable, non-control keystrokes from a Standard 101/102-key keyboard. The authentication key must be 8 bytes or less if the authentication type is simple. If the type is encrypt, the key may be up to 16 bytes.
Syntax ip ospf dead-interval no ip ospf dead-interval Default Setting 40 Command Mode Interface Config 8.3.2.40 ip ospf hello-interval ip ospf hello-interval command sets the OSPF hello interval for the specified interface. The value for seconds is a valid positive integer, which represents the length of time in seconds. The value for the length of time must be the same for all routers attached to a network. Valid values range from 1 to 65535.
no ip ospf network Default Setting Broadcast Command Mode Interface Config 8.3.2.42 ip ospf priority ip ospf priority command sets the OSPF priority for the specified router interface. The priority of the interface is a priority integer from 0 to 255. A value of 0 indicates that the router is not eligible to become the designated router on this network. no ip ospf priority command sets the default OSPF priority for the specified router interface.
8.3.2.44 ip ospf transmit-delay ip ospf transmit-delay command sets the OSPF Transit Delay for the specified interface. The transmit delay is specified in seconds. In addition, it sets the estimated number of seconds it takes to transmit a link state update packet over this interface. Valid values for range from 1 to 3600 (1 hour).
Syntax router-id Default Setting None Command Mode Router OSPF Config Mode 8.3.2.47 redistribute redistribute command configures OSPF protocol to allow redistribution of routes from the specified source protocol/routers. no redistribute command configures OSPF protocol to prohibit redistribution of routes from the specified source protocol/routers.
Command Mode Router OSPF Config Mode 8.3.2.49 passive-interface default passive-interface default command to enable global passive mode by default for all interfaces. It overrides any interface level passive mode. OSPF will not form adjacencies over a passive interface. no passive-interface default command to disable the global passive mode by default for all interfaces. Any interface previously configured to be passive reverts to non-passive mode.
Syntax timers spf Default Setting delay-time—5 hold-time—10 Command Mode Router OSPF Config Mode 8.4 BOOTP/DHCP Relay Commands 8.4.1 Show Commands 8.4.1.1 show bootpdhcprelay This command displays the BootP/DHCP Relay information. Syntax show bootpdhcprelay Default Setting None Command Mode Privileged Exec User Exec Display Message Maximum Hop Count: Is the maximum allowable relay agent hops. Minimum Wait Time (Seconds) Is the minimum wait time.
8.4.2 Configuration Commands 8.4.2.1 bootpdhcprelay cidoptmode This command enables the circuit ID option mode for BootP/DHCP Relay on the system. Syntax bootpdhcprelay cidoptmode no bootpdhcprelay cidoptmode Default Setting Disabled Command Mode Global Config 8.4.2.2 bootpdhcprelay enable This command enables the forwarding of relay requests for BootP/DHCP Relay on the system.
- The range of maximum hop count is 1 to 16. no - Set the maximum hop count to 4. Default Setting The default value is 4. Command Mode Global Config 8.4.2.4 bootpdhcprelay minwaittime This command configures the minimum wait time in seconds for BootP/DHCP Relay on the system. When the BOOTP relay agent receives a BOOTREQUEST message, it may use the seconds-since-client-began-booting field of the request as a factor in deciding whether to relay the request or not.
Command Mode Global Config 8.5 Routing Information Protocol (RIP) Commands 8.5.1 Show Commands 8.5.1.1 show ip rip This command displays information relevant to the RIP router. Syntax show ip rip Default Setting None Command Mode Privileged Exec Display Message RIP Admin Mode: Select enable or disable from the pulldown menu. If you select enable RIP will be enabled for the switch. The default is disabled. Split Horizon Mode: Select none, simple or poison reverse from the pulldown menu.
Distance: Configured distance value for rip routes. 8.5.1.2 show ip rip interface This command displays information related to a particular RIP interface. Syntax show ip rip interface < slot/port > - Interface number Default Setting None Command Mode Privileged Exec Display Message Interface: Valid slot and port number separated by forward slashes. This is a configured value. IP Address: The IP source address used by the specified RIP interface. This is a configured value.
8.5.1.3 show ip rip interface brief This command displays general information for each RIP interface. For this command to display successful results routing must be enabled per interface (i.e. ip rip). Syntax show ip rip interface brief Default Setting None Command Mode Privileged Exec Display Message Interfacet: Valid slot and port number separated by forward slashes. IP Address: The IP source address used by the specified RIP interface.
8.5.2.2 ip rip This command enables RIP on a router interface. Syntax ip rip no ip rip no - This command disables RIP on a router interface. Default Setting Disabled Command Mode Interface Config 8.5.2.3 auto-summary This command enables the RIP auto-summarization mode. Syntax auto-summary no auto-summary no - This command disables the RIP auto-summarization mode. Default Setting Disabled Command Mode Router RIP Config 8.5.2.
no - This command is used to cancel the advertisement of default routes. Default Setting Not configured Command Mode Router RIP Config 8.5.2.5 default-metric This command is used to set a default for the metric of distributed routes. Syntax default-metric <1-15> no default-metric <1 - 15> - a value for default-metric. no - This command is used to reset the default metric of distributed routes to its default value. Default Setting Not configured Command Mode Router RIP Config 8.5.2.
Command Mode Router RIP Config 8.5.2.7 hostrouteaccept This command enables the RIP hostroutesaccept mode. Syntax hostrouteaccept no hostrouteaccept no - This command disables the RIP hostroutesaccept mode. Default Setting Enabled Command Mode Router RIP Config 8.5.2.8 split-horizon This command sets the RIP split horizon mode. None mode will not use RIP split horizon mode. Simple mode will be that a route is not advertised on the interface over which it is learned.
8.5.2.9 distribute-list This command is used to specify the access list to filter routes received from the source protocol. Source protocols have OSPF, Static, and Connected. Syntax distribute-list <1-199> out {ospf | static | connected} no distribute-list <1-199> out {ospf | static | connected} <1 - 199> - Access List ID value. The Access List filters the routes to be redistributed by the source protocol.
Command Mode Router RIP Config 8.5.2.11 ip rip authentication This command sets the RIP Version 2 Authentication Type and Key for the specified interface. The value of is either none, simple, or encrypt. The value for authentication key [key] must be 16 bytes or less. The [key] is composed of standard displayable, non-control keystrokes from a Standard 101/102-key keyboard. If the value of is encrypt, a keyid in the range of 0 and 255 must be specified.
no - This command configures the interface to allow RIP control packets of the default version(s) to be received. Default Setting Both Command Mode Interface Config 8.5.2.13 ip rip send version This command configures the interface to allow RIP control packets of the specified version to be sent.
Syntax show ip irdp { | all} - Show router discovery information for the specified interface. - Show router discovery information for all interfaces. Default Setting None Command Mode Privileged Exec User Exec Display Message Ad Mode: Displays the advertise mode which indicates whether router discovery is enabled or disabled on this interface. Advertise Address: Addresses to be used to advertise the router for the interface.
Command Mode Interface Config 8.6.2.2 ip irdp broadcast This command configures the address to be used to advertise the router for the interface. Syntax ip irdp broadcast no ip irdp broadcast broadcast - The address used is 255.255.255.255. no - The address used is 224.0.0.1. Default Setting The default address is 224.0.0.1 Command Mode Interface Config 8.6.2.
8.6.2.4 ip irdp maxadvertinterval This commands configures the maximum time, in seconds, allowed between sending router advertisements from the interface. Syntax ip irdp maxadvertinterval < minadvertinterval-1800 > no ip irdp maxadvertinterval < minadvertinterval-1800 > - The range is 4 to 1800 seconds. no - This command configures the default maximum time, in seconds. Default Setting The default value is 600. Command Mode Global Config 8.6.2.
Syntax ip irdp preference < -2147483648-2147483647> no ip irdp preference < -2147483648-2147483647> - The range is -2147483648 to 2147483647. no - This command sets the preference to 0. Default Setting The default value is 0. Command Mode Global Config 8.7 VLAN Routing Commands 8.7.1 show ip vlan This command displays the VLAN routing information for all VLANs with routing enabled in the system.
8.7.2 vlan routing This command creates routing on a VLAN. Syntax vlan routing [] no vlan routing - The range is 1 to 3965. - VLAN routing index, the range is 1 to 128. no - Delete routing on a VLAN. Default Setting None Command Mode VLAN Database 8.8 Virtual Router Redundancy Protocol (VRRP) Commands 8.8.1 Show Commands 8.8.1.1 show ip vrrp This command displays whether VRRP functionality is enabled or disabled.
Router Version Errors: Represents the total number of VRRP packets received with Unknown or unsupported version number. Router VRID Errors: Represents the total number of VRRP packets received with invalid VRID for this virtual router. 8.8.1.2 show ip vrrp brief This command displays information about each virtual router configured on the switch.
Command Mode Privileged Exec User Exec Display Message VRID: Represents the router ID of the virtual router. Primary IP Address: This field represents the configured IP Address for the Virtual router. VMAC address: Represents the VMAC address of the specified router. Authentication type: Represents the authentication type for the specific virtual router. Priority: Represents the priority value for the specific virtual router.
Advertisement Interval Errors: Represents the total number of VRRP advertisements received for which advertisement interval is different than the configured value for this virtual router. Authentication Failure: Represents the total number of VRRP packets received that don't pass the authentication check. IP TTL errors: Represents the total number of VRRP packets received by the virtual router with IP TTL (time to live) not equal to 255.
This command sets the virtual router ID on an interface for Virtual Router configuration in the router. Syntax ip vrrp <1-255> no ip vrrp <1-255> <1-255> - The range of virtual router ID is 1 to 255. - This command removes all VRRP configuration details of the virtual router configured on a specific interface. Default Setting None Command Mode Interface Config 8.8.2.2 ip vrrp ip This commands also designates the configured virtual router IP address as a secondary IP address on an interface.
Syntax ip vrrp <1-255> mode no ip vrrp <1-255> mode <1-255> - The range of virtual router ID is 1 to 255. - Disable the virtual router configured on the specified interface. Disabling the status field stops a virtual router. Default Setting Disabled Command Mode Interface Config 8.8.2.4 ip vrrp authentication This command sets the authorization details value for the virtual router configured on a specified interface.
no ip vrrp <1-255> preempt <1-255> - The range of virtual router ID is 1 to 255. - This command sets the default preemption mode value for the virtual router configured on a specified interface. Default Setting Enabled Command Mode Interface Config 8.8.2.6 ip vrrp priority This command sets the priority value for the virtual router configured on a specified interface. The router with the highest priority is elected master.
Syntax ip vrrp <1-255> timers advertise <1-255> ip vrrp <1-255> timers advertise <1-255> - The range of virtual router ID is 1 to 255. < 1-255 > - The range of advertisement interval is 1 to 255. - This command sets the default advertisement value for a virtual router. Default Setting The default value of advertisement interval is 1. Command Mode Interface Config 8.8.2.8 ip vrrp track interface This command alters the priority of the VRRP router based on the availability of its interfaces.
8.8.2.9 ip vrrp track ip route This command tracks the route reachability. When the tracked route is deleted, the priority of the VRRP router will be decremented by the value specified in the decrement argument. When the tracked route is added, the priority will be incremented by the same. A VRRP configured interface can track more than one route. When a tracked route goes down, then the priority of the router will be decreased by 10 (the default priority decrement) for each downed route.
9. IP Multicast Commands 9.1 Distance Vector Multicast Routing Protocol (DVMRP) Commands This section provides a detailed explanation of the DVMRP commands. The commands are divided into the following different groups: Show commands are used to display device settings, statistics and other information. Configuration commands are used to configure features and options of the switch. For every configuration command there is a show command that will display the configuration setting. 9.1.
9.1.1.2 show ip dvmrp interface This command displays the interface information for DVMRP on the specified interface. Syntax show ip dvmrp interface - Valid slot and port number separated by forward slashes. Default Setting None Command Mode Privileged Exec User EXEC Display Message Interface Mode: This field indicates whether DVMRP is enabled or disabled on the specified interface. This is a configured value. Interface Metric: This field indicates the metric of this interface.
User EXEC Display Message IfIndex: This field displays the value of the interface used to reach the neighbor. Nbr IP Addr: This field indicates the IP Address of the DVMRP neighbor for which this entry contains information. State: This field displays the state of the neighboring router. The possible value for this field are ACTIVE or DOWN. Up Time: This field indicates the time since this neighboring router was learned. Expiry Time: This field indicates the time remaining for the neighbor to age out.
9.1.1.5 show ip dvmrp prune This command displays the table listing the router’s upstream prune information . Syntax show ip dvmrp prune Default Setting None Command Mode Privileged Exec User Exec Display Message Group IP: This field identifies the multicast Address that is pruned. Source IP: This field displays the IP Address of the source that has pruned. Source Mask: This field displays the network Mask for the prune source. It should be all 1s or both the prune source and prune mask must match.
Upstream Neighbor: This field indicates the IP Address of the neighbor which is the source for the packets for a specified multicast address. Interface: This field displays the interface used to receive the packets sent by the sources. Metric: This field displays the distance in hops to the source subnet. This field has a different meaning than the Interface Metric field. Expiry Time(secs): This field indicates the expiry time in seconds. This is the time remaining for this route to age out.
Command Mode Interface Config 9.1.2.2 ip dvmrp metric This command configures the metric for an interface. This value is used in the DVMRP messages as the cost to reach this network. Syntax ip dvmrp metric no ip dvmrp metric - This field has a range of 1 to 31. no - This command resets the metric for an interface to the default value. This value is used in the DVMRP messages as the cost to reach this network. Default Setting 1 Command Mode Interface Config 9.
Default Setting None Command Mode Privileged Exec User EXEC Display Message IGMP Admin Mode: This field displays the administrative status of IGMP. This is a configured value. Interface: Valid slot and port number separated by forward slashes. Interface Mode: This field indicates whether IGMP is enabled or disabled on the interface. This is a configured value. Protocol State: This field indicates the current state of IGMP on this interface. Possible values are Operational or Non-Operational. 9.2.1.
If detail is specified, the following fields are displayed: Multicast IP Address: This displays the IP Address of the registered multicast group on this interface. Last Reporter: This displays the IP Address of the source of the last membership report received for the specified multicast group address on this interface. Up Time: This displays the time elapsed since the entry was created for the specified multicast group address on this interface.
Robustness: This field displays the tuning for the expected packet loss on a subnet. If a subnet is expected to be have a lot of loss, the Robustness variable may be increased for that interface. This is a configured value. Startup Query Interval (secs): This value indicates the interval between General Queries sent by a Querier on startup. This is a configured value. Startup Query Count: This value is the number of Queries sent out on startup, separated by the Startup Query Interval.
Source Filter Mode: The source filter mode (Include/Exclude) for the specified group on this interface. This is “-----” for IGMPv1 and IGMPv2 Membership Reports. Source Hosts: This displays the list of unicast source IP Addresses in the group record of the IGMPv3 Membership Report with the specified multicast group IP Address. This is “-----” for IGMPv1 and IGMPv2 Membership Reports. Expiry Time: This displays the amount of time remaining to remove this entry before it is aged out.
9.2.2 Configuration Commands 9.2.2.1 ip igmp This command sets the administrative mode of IGMP in the router to active. Syntax ip igmp no ip igmp no - This command sets the administrative mode of IGMP in the router to inactive. Default Setting Disabled Command Mode Global Config This command sets the administrative mode of IGMP on an interface to active. Syntax ip igmp no ip igmp no - This command sets the administrative mode of IGMP on an interface to inactive.
no - This command resets the version of IGMP for this interface. The version is reset to the default value. Default Setting 3 Command Mode Interface Config 9.2.2.3 ip igmp last-member-query-count This command sets the number of Group-Specific Queries sent before the router assumes that there are no local members on the interface. Syntax ip igmp last-member-query-count <1-20> no ip igmp last-member-query-count <1-20> - The range for <1-20> is 1 to 20.
Command Mode Interface Config 9.2.2.5 ip igmp query-interval This command configures the query interval for the specified interface. This is the frequency at which IGMP Host-Query packets are transmitted on this interface. Syntax ip igmp query-interval <1-3600> no ip igmp query-interval <1-3600> - The range for <1-3600> is 1 to 3600 seconds. no - This command resets the query interval for the specified interface to the default value.
9.2.2.7 ip igmp robustness This command configures the robustness that allows tuning of the interface. The robustness is the tuning for the expected packet loss on a subnet. If a subnet is expected to have a lot of loss, the Robustness variable may be increased for the interface. Syntax ip igmp robustness <1-255> no ip igmp robustness <1-255> - The range for <1-255> is 1 to 255. no - This command sets the robustness value to default. Default Setting 2 Command Mode Interface Config 9.2.2.
9.2.2.9 ip igmp startup-query-interval This command sets the interval between General Queries sent by a Querier on startup on the interface. The time interval value is in seconds. Syntax ip igmp startup-query-interval <1-300> no ip igmp startup-query-interval <1-300> - The range for <1-300> is 1 to 300 seconds. no - This command resets the interval between General Queries sent by a Querier on startup on the interface to the default value. Default Setting 31 Command Mode Interface Config 9.
Command Mode Privileged Exec Display Message The following fields are displayed as a table when is specified. Group Address: The address of the multicast group. Interface: Interface through which the multicast group is reachable. Up Time: Time elapsed in hours, minutes, and seconds since the multicast group has been known. Expiry Time: Time left in hours, minutes, and seconds before the entry is removed from the MLD membership table.
MLD Version: Indicates the version of MLD configured on the interface. Query Interval: Indicates the configured query interval for the interface. Query Max Response Time: Indicates the configured maximum query response time (in seconds) advertised in MLD queries on this interface. Robustness: Displays the configured value for the tuning for the expected packet loss on a subnet attached to the interface.
Queries Received: The number of valid MLD queries received by the router. Queries Sent: The number of valid MLD queries sent by the router. Reports Received: The number of valid MLD reports received by the router. Reports Sent: The number of valid MLD reports sent by the router. Leaves Received: The number of valid MLD leaves received by the router. Leaves Sent: The number of valid MLD leaves sent by the router. Bad Checksum MLD Packets: The number of bad checksum MLD packets received by the router.
Default Setting 1000 milliseconds Command Mode Interface Config 9.3.2.3 ipv6 mld last-member-query-interval Use this command to set the last member query interval for the MLD interface, which is the value of the maximum response time parameter in the group specific queries sent out of this interface. The range for is 0 to 65535 milliseconds.
9.3.2.5 ipv6 mld router Use this command, in the administrative mode of the router, to enable MLD in the router. Syntax ipv6 mld router no ipv6 mld router Default Setting Disabled Command Mode Global Config Interface Config 9.3.2.6 clear ipv6 mld counters The user can go to the CLI Privilege Configuration Mode to clear MLD counters on the system, use the clear ipv6 mld counters [] priviledge configuration command.
Default Setting None Command Mode Privilege Exec 9.3.2.8 ipv6 mld version This command configures the version of MLD for an interface. Syntax ipv6 mld version {1 | 2} no ipv6 mld version <1- 2> - The mld version number. no - This command resets the version of MLD for this interface. The version is reset to the default value. Default Setting 2 Command Mode Interface Config 9.4 Multicast Commands 9.4.1 Show Commands 9.4.1.
User Exec Display Message Admin Mode: This field displays the administrative status of multicast. This is a configured value. Protocol State: This field indicates the current state of the multicast protocol. Possible values are Operational or Non-Operational. Table Max Size: This field displays the maximum number of entries allowed in the multicast table. Protocol: This field displays the multicast protocol running on the router. Possible values are PIMDM, PIMSM, or DVMRP.
- Interface number. Default Setting None Command Mode Privileged Exec User Exec Display Message Interface: Valid slot and port number separated by forward slashes. TTL: This field displays the time-to-live value for this interface. 9.4.1.4 show ip mcast mroute This command displays a summary or all the details of the multicast table. Syntax show ip mcast mroute {detail | summary} detail - displays the multicast routing table details. summary - displays the multicast routing table summary.
Source IP: This field displays the IP address of the multicast data source. Group IP: This field displays the IP address of the destination of the multicast packet. Protocol: This field displays the multicast routing protocol by which this entry was created. Incoming Interface: This field displays the interface on which the packet for this source/group arrives. Outgoing Interface List: This field displays the list of outgoing interfaces on which this packet is forwarded.
Outgoing Interface List: This field displays the list of outgoing interfaces on which this packet is forwarded. This command displays the multicast configuration settings such as flags, timer settings, incoming and outgoing interfaces, RPF neighboring routers, and expiration times of all the entries in the multicast mroute table containing the given or [] pair.
9.4.2 Configuration Commands 9.4.2.1 ip multicast This command sets the administrative mode of the IP multicast forwarder in the router to active. For multicast routing to become operational, IGMP must be currently enabled. An error message will be displayed on the CLI if multicast routing is enabled while IGMP is disabled. However, the IP multicast mode configuration is stored in the multicast configuration file and is automatically enabled once IGMP is enabled.
Command Mode Interface Config 9.4.2.3 ip multicast ttl-threshold This command applies the given to a routing interface. The is the TTL threshold which is to be applied to the multicast Data packets which are to be forwarded from the interface. The value for has range from 0 to 255. Syntax ip multicast ttl-threshold <0 - 255> no ip multicast ttl-threshold <0 - 255> - the TTL threshold.
Command Mode Privileged Exec User Exec Display Message Admin Mode: This field indicates whether PIM-DM is enabled or disabled. This is a configured value. Interface: Valid slot and port number separated by forward slashes. Interface Mode: This field indicates whether PIM-DM is enabled or disabled on this interface. This is a configured value. Operational State: This field indicates the current state of PIM-DM on this interface. Possible values are Operational or Non-Operational. 9.5.1.
- Interface number. all - this command represents all interfaces. Default Setting None Command Mode Privileged Exec User Exec Display Message Interface: Valid slot and port number separated by forward slashes. IP Address: This field indicates the IP Address that represents the PIM-DM interface. Nbr Count: This field displays the neighbor count for the PIM-DM interface. Hello Interval: This field indicates the time interval between two hello messages sent from the router on the given interface.
9.5.2 Configuration Commands 9.5.2.1 ip pimdm This command enables the administrative mode of PIM-DM in the router. Syntax ip pimdm no ip pimdm no - This command disables the administrative mode of PIM-DM in the router. IGMP must be enabled before PIM-DM can be enabled. Default Setting Disabled Command Mode Global Config 9.5.2.2 ip pimdm This command sets administrative mode of PIM-DM on an interface to enabled.
9.5.2.3 ip pimdm hello-interval This command configures the transmission frequency of hello messages between PIM enabled neighbors. This field has a range of 10 to 3600 seconds. Syntax ip pimdm hello-interval <10 - 3600> no ip pimdm hello-interval <10 - 3600> - This is time interval in seconds. no - This command resets the transmission frequency of hello messages between PIM enabled neighbors to the default value. Default Setting 30 Command Mode Interface Config 9.
Register Threshold Rate (Kbps): This field indicates the threshold rate for the RP router to switch to the shortest path. This is a configured value. Interface: Valid slot and port number separated by forward slashes. Interface Mode: This field indicates whether PIM-SM is enabled or disabled on the interface. This is a configured value. Operational State: This field indicates the current state of the PIM-SM protocol on the interface. Possible values are Operational or Non-Operational. 9.6.1.
- Interface number. Default Setting None Command Mode Privileged Exec User Exec Display Message Slot/Port: Valid slot and port number separated by forward slashes. IP Address: This field indicates the IP address of the specified interface. Subnet Mask: This field indicates the Subnet Mask for the IP address of the PIM interface. Hello Interval: This field indicates the frequency at which PIM hello messages are transmitted on this interface. This is a configured value.
IP Address: This field displays the IP Address of the neighbor on an interface. Up Time: This field indicates the time since this neighbor has become active on this interface. Expiry Time: This field indicates the expiry time of the neighbor on this interface. 9.6.1.5 show ip pimsm rphash This command displays which rendezvous point (RP) is being used for a specified group. Syntax show ip pimsm rphash - the IP multicast group address.
9.6.2 Configuration Commands 9.6.2.1 ip pimsm This command sets administrative mode of PIM-SM multicast routing across the router to enabled. IGMP must be enabled before PIM-SM can be enabled. Syntax ip pimsm no ip pimsm no - This command sets administrative mode of PIM-SM multicast routing across the router to disabled. IGMP must be enabled before PIM-SM can be enabled. Default Setting Disbaled Command Mode Global Config 9.6.2.
9.6.2.3 ip pimsm register-threshold This command is used to configure the Threshold rate for the RP router to switch to the shortest path. The rate is specified in Kilobits per second. The possible values are 0 to 2000. Syntax ip pimsm register-threshold <0 - 2000> no ip pimsm register-threshold <0 - 2000> - This is kilobits per seconds. no - This command is used to reset the Threshold rate for the RP router to switch to the shortest path to the default value.
The parameter is the group mask for the group address. The optional keyword override indicates that if there is a conflict, the RP configured with this command prevails over the RP learned by BSR. Syntax ip pimsm rp-address [override] no ip pimsm rp-address - the IP Address of the RP. - the group address supported by the RP. - the group mask for the group address.
Syntax ip pimsm query-interval <0 - 18000> no ip pimsm query-interval <0 - 18000> - This is time interval in seconds. no - This command resets the transmission frequency of hello messages between PIM enabled neighbors to the default value. Default Setting 30 Command Mode Interface Config 9.6.2.8 ip pimsm bsr-border This command is used to prevent bootstrap router (BSR) messages from being sent or received through an interface.
no - This command is used to reset the priority to default value. Default Setting 1 Command Mode Interface Config 9.6.2.10 ip pimsm bsr-candidate This command is used to configure the router to announce its candidacy as a bootstrap router (BSR).
no - This command is used to disable the router to advertise itself as a PIM candidate rendezvous point (RP) to the bootstrap router (BSR). Default Setting None Command Mode Global Config 9.6.2.12 ip pimsm ssm default Use this command to define the Source Specific Multicast (SSM) range of IP multicast addresses. Syntax ip pimsm ssm {default | } no ip pimsm ssm no - This command is used to disable the Source Specific Multicast (SSM) range.
Default Setting None Command Mode Privileged Exec User Exec Display Message Interface index: The interface number of the IGMP Proxy. Admin Mode: States whether the IGMP Proxy is enabled or not. This is a configured value. Operational Mode: States whether the IGMP Proxy is operationally enabled or not. This is a status parameter. Version: The present IGMP host version that is operational on the proxy interface.
Member State: The status of the entry. Possible values are IDLE_MEMBER or DELAY_MEMBER. IDLE_MEMBER - interface has responded to the latest group membership query for this group. DELAY_MEMBER - interface is going to send a group membership report to respond to a group membership query for this group. Filter Mode: Possible values are Include or Exclude. Sources: The number of sources attached to the multicast group. 9.7.1.
9.7.1.4 show ip igmp-proxy interface This command displays a detailed list of the host interface status parameters. It displays the following parameters only when you enable IGMP Proxy. Syntax show ip igmp-proxy interface Default Setting None Command Mode Privileged Exec User Exec Display Message Interface Index: Shows the slot/port of the IGMP proxy. The column headings of the table associated with the interface are as follows: Ver: Shows the IGMP version. Query Rcvd: Number of IGMP queries received.
Command Mode Interface Config 9.7.2.2 ip igmp-proxy reset-status This command resets the host interface status parameters of the IGMP Proxy router. This command is valid only when you enable IGMP Proxy on the interface. Syntax ip igmp-proxy reset-status Default Setting None Command Mode Interface Config 9.7.2.3 ip igmp-proxy unsolicit-rprt-interval This command sets the unsolicited report interval for the IGMP Proxy router. This command is valid only when you enable IGMP Proxy on the interface.
9.8 MLD Proxy Commands MLD-Proxy is the IPv6 equivalent of IGMP-Proxy. MLD-Proxy commands allow you to configure the network device as well as to view device settings and statistics using either serial interface or telnet session. The operation of MLD-Proxy commands is the same as for IGMP-Proxy: MLD is for IPv6 and IGMP is for IPv4.MGMD is a term used to refer to both IGMP and MLD. 9.8.1 Show Commands 9.8.1.
Syntax show ipv6 mld-proxy groups Default Setting None Command Mode Privileged Exec User Exec Display Message Interface: The interface number of the MLD-Proxy. Group Address: The IP address of the multicast group. Last Reporter: The IP address of the host that last sent a membership report for the current group, on the network attached to the MLD-Proxy interface (upstream interface). Up Time (in secs): The time elapsed since last created.
group, on the network attached to the MLD-Proxy interface (upstream interface). Up Time (in secs): The time elapsed since last created. Member State: Possible values are: Idle_Member - interface has responded to the latest group membership query for this group. Delay_Member - interface is going to send a group membership report to respond to a group membership query for this group. Filter Mode: Possible values are include or exclude. Sources: The number of sources attached to the multicast group.
9.8.2 Configuration Commands 9.8.2.1 ipv6 mld-proxy This command enables MLD-Proxy on the router. To enable MLD-Proxy on the router, you must enable multicast forwarding. Also, make sure that there are no other multicast routing protocols enabled n the router. Syntax ipv6 mld-proxy no ipv6 mld-proxy no - This command disables the MLD-Proxy on the router. Default Setting Disabled Command Mode Interface Config 9.8.2.
no ipv6 mld-proxy unsolicit-rprt-interval no - This command resets the unsolicited report interval of the MLD-Proxy router to the default value.
10. IPv6 Commands 10.1 Tunnel Interface Commands The commands in this section describe how to create, delete, and manage tunnel interfaces.Several different types of tunnels provide functionality to facilitate the transition of IPv4 networks to IPv6 networks. These tunnels are divided into two classes: configured and automatic. The distinction is that configured tunnels are explicitly configured with a destination or endpoint of the tunnel.
address and prefix display. 10.1.2 Configuration Commands 10.1.2.1 interface tunnel This command uses to enter the Interface Config mode for a tunnel interface. The range is 0 to 7. Syntax interface tunnel <0-7> no interface tunnel <0-7> no - This command removes the tunnel interface and associated configuration parameters for the specified tunnel interface. Default Setting None Command Mode Global Config 10.1.2.
10.1.2.3 tunnel destination This command specifies the destination transport address of the tunnel. Syntax tunnel destination {} - A valid IP Address. Default Setting None Command Mode Interfacel Tunnel Mode 10.1.2.4 tunnel mode ipv6ip This command specifies the mode of the tunnel. With the optional 6to4 argument, the tunnel mode is set to 6to4 automatic. Without the optional 6to4 argument, the tunnel mode is configured.
10.2.1 Show Commands 10.2.1.1 show interface loopback This command displays information about configured loopback interfaces. Syntax show interface loopback [<0-7>] Default Setting None Command Mode Privileged Exec Display Message If you do not specify a loopback ID, the following information appears for each loopback interface on the system: Loopback ID: Shows the loopback ID associated with the rest of the information in the row. Interface: Shows the interface name.
interface loopback <0-7> no interface loopback <0-7> no - This command removes the loopback interface and associated configuration parameters for the specified loopback interface. Default Setting Disabled Command Mode Global Config 10.3 IPv6 Routing Commands This section describes the IPv6 commands you use to configure IPv6 on the system and on the interfaces. This section also describes IPv6 management commands and show commands. 10.3.1 Show Commands 10.3.1.
ICMPv6 Rate Limit Burst Size：Shows the number of ICMPv6 error messages that can be sent during one burst-interval. For more information, see “ipv6 icmp error-interval” Maximum Routes：Shows the maximum IPv6 route table size. 10.3.1.2 show ipv6 interface port This command displays the usability status of IPv6 interfaces. Syntax show ipv6 interface [{ brief | port [prefix]}] - Valid slot and port number separated by forward slashes.
Router Advertisement Reachable Time: Shows the amount of time, in milliseconds, to consider a neighbor reachable after neighbor discovery confirmation. Router Advertisement Interval: Shows the frequency, in seconds, that router advertisements are sent. Router Advertisement Managed Config Flag: Shows whether the managed configuration flag is set (enabled) for router advertisements on this interface.
Neighbor State: State of neighbor cache entry. Possible values are Incomplete, Reachable, Stale, Delay, Probe, and Unknown. Age(Seconds): Shows the system uptime when the information for the neighbor was last updated. 10.3.1.4 show ipv6 interface neighbors static This command display static neighbor cache table on the system each interface port.
MAC Address: The MAC Address used. isRtr: Specifies the router flag. Neighbor State: The state of the neighbor cache entry. Possible values are: Reachable, Delay. Age Updated: The time in seconds that has elapsed since an entry was added to the cache. 10.3.1.6 show ipv6 route This command displays the IPv6 routing table The specifies a specific IPv6 address for which the best-matching route would be displayed.
Next-Hop: The outgoing router IPv6 address to use when forwarding traffic to the next router (if any) in the path toward the destination Route-Timestamp: The last updated time for dynamic routes. The format of Route-Timestamp will be Days:Hours:Minutes if days > = 1 Hours:Minutes:Seconds if days < 1 Interface: The outgoing router interface to use when forwarding traffic to the next destnation.
Syntax show ipv6 route summary [all] Default Setting None Command Mode Privileged Exec Display Message Connected Routes: Total number of connected routes in the routing table. Static Routes: Shows whether the IPv6 unicast routing mode is enabled. OSPF Routes: Total number of routes installed by OSPFv3 protocol. Reject Routes : Total number of reject routes installed by all protocols. Number of Prefixes: Summarizes the number of routes with prefixes of different lengths.
10.3.1.10 show ipv6 traffic This command displays traffic and statistics for IPv6 and ICMPv6. Specify a logical, loopback, or tunnel interface to view information about traffic on a specific interface. If you do not specify an interface, the command displays information about traffic on all interfaces.
Datagrams Successfully Reassembled: Number of IPv6 datagrams successfully reassembled. Note that this counter increments at the interface to which these datagrams were addressed, which might not be necessarily the input interface for some of the fragments. Datagrams Failed To Reassemble: Number of failures detected by the IPv6 reassembly algorithm (for whatever reason: timed out, errors, etc.).
ICMPv6 Router Solicit Messages Received: Number of ICMP Router Solicit messages received by the interface. ICMPv6 Router Advertisement Messages Received: Number of ICMP Router Advertisement messages received by the interface. ICMPv6 Neighbor Solicit Messages Received: Number of ICMP Neighbor Solicit messages received by the interface. ICMPv6 Neighbor Advertisement Messages Received: Number of ICMP Neighbor Advertisement messages received by the interface.
ICMPv6 Duplicate Address Detects: Number of duplicate addresses detected by interface. 10.3.2 Configuration Commands 10.3.2.1 ipv6 forwarding This command enables IPv6 forwarding on the switch. Syntax Ipv6 forwarding no ipv6 forwarding no - This command disables IPv6 forwarding on the switch. Default Setting Enabled Command Mode Global Config 10.3.2.2 ipv6 hop-limit This command defines the unicast hop count used in ipv6 packets originated by the node.
10.3.2.3 ipv6 unicast-routing Use this command to enable the forwarding of IPv6 unicast packets. Syntax ipv6 unicast-routing no ipv6 unicast-routing no – Use this command to disable the forwarding of IPv6 unicast packets. Default Setting Disabled Command Mode Global Config 10.3.2.4 ipv6 enable Use this command to enable IPv6 routing on an interface, including a tunnel and loopback interface that has not been configured with an explicit IPv6 address.
using this command since one is automatically created. The field consists of the bits of the address to be configured. The designates how many of the high-order contiguous bits of the address make up the prefix. You can express IPv6 addresses in eight blocks. Also of note is that instead of a period, a colon now separates each block. For simplification, leading zeros of each 16 bit block can be omitted.
- Gateway address in IPv6 global or link-local address format. no – Use this command remove IPv6 gateways on the network port interface. Command Mode Interface vlan 10.3.2.7 ipv6 route Use this command to configure an IPv6 static route. The is the IPv6 network that is the destination of the static route.
Changing the default distance does not update the distance of existing static routes, even if they were assigned the original default distance. The new default distance will only be applied to static routes created after invoking the ipv6 route distance command. Syntax ipv6 route distance <1-255> no ipv6 route distance no – This command resets the default static route preference value in the router to the original default preference.
no ipv6 nd dad attempts no – This command resets to number of duplicate address detection value to default value. Default Setting 1 Command Mode Interface Config 10.3.2.11 ipv6 nd managed-config-flag This command sets the “managed address configuration” flag in router advertisements. When the value is true, end nodes use DHCPv6. When the value is false, end nodes automatically configure addresses.
Default Setting 0 Command Mode Interface Config 10.3.2.13 ipv6 nd other-config-flag This command sets the “other stateful configuration” flag in router advertisements sent from the interface. Syntax ipv6 nd other-config-flag no ipv6 nd other-config-flag no – This command resets the “other stateful configuration” flag back to its default value in router advertisements sent from the interface. Default Setting False Command Mode Interface Config 10.3.2.
10.3.2.15 ipv6 nd ra-lifetime This command sets the value, in seconds, that is placed in the Router Lifetime field of the router advertisements sent from the interface. The value must be zero, or it must be an integer between the value of the router advertisement transmission interval and 9000. A value of zero means this router is not to be used as the default router. Syntax ipv6 nd ra-lifetime no ipv6 nd ra-lifetime no – This command resets router lifetime to the default value.
no –This command enables router transmission on an interface. Default Setting Disabled Command Mode Interface Config 10.3.2.18 ipv6 nd prefix This command sets the IPv6 prefixes to include in the router advertisement. The first optional parameter is the valid lifetime of the router, in seconds. You can specify a value or indicate that the lifetime value is infinite. The second optional parameter is the preferred lifetime of the router.
10.3.2.19 ipv6 unreachables Use this command to enable the generation of ICMPv6 Destination Unreachable messages. By default, the generation of ICMPv6 Destination Unreachable messages is enabled. Syntax ipv6 unreachables no ipv6 unreachables no – This command prevent the generation of ICMPv6 Destination Unreachable messages. Default Setting Enabled Command Mode Interface Config 10.3.2.20 ipv6 icmp error-interval Use this command to limit the rate at which ICMPv6 error messages are sent.
10.3.2.21 ipv6 neighbors static The user can add/delete a static neighbor into neighbor cache table. Syntax ipv6 neighbors static no ipv6 neighbors static - Enter the IPv6 Address. - Enter the MAC Address. no – This command sets IPv6 neighbor configuration to default values. Default Setting None Command Mode Global Config 10.
Router ID: Is a 32 bit integer in dotted decimal format identifying the router, about which information is displayed. This is a configured value. OSPF Admin Mode: Shows whether the administrative mode of OSPF in the router is enabled or disabled. This is a configured value. ASBR Mode: Reflects whether the ASBR mode is enabled or disabled. Enable implies that the router is an autonomous system border router.
10.4.1.2 show ip ospf abr This command displays the internal OSPFv3 routes to reach Area Border Routers (ABR).This command takes no options. Syntax show ipv6 ospf abr Default Setting None Command Mode Privileged Exec User Exec Display Messages Type: The type of the route to the destination. It can be either: intra — Intra-area route inter — Inter-area route Router ID: Router ID of the destination Cost: Cost of using this route Area ID: The area ID of the area from which this route is learned.
External Routing: Is a number representing the external routing capabilities for this area. Spf Runs: Is the number of times that the intra-area route table has been calculated using this area's link-state database. Area Border Router Count: The total number of area border routers reachable within this area. Area LSA Count: Total number of link-state advertisements in this area's link-state database, excluding AS External LSAs.
Display Messages Type: The type of the route to the destination. It can be either: intra — Intra-area route inter — Inter-area route Router ID: Router ID of the destination Cost: Cost of using this route Area ID: The area ID of the area from which this route is learned. Next Hop: Next hop toward the destination Next Hop Intf: The outgoing router interface to use when forwarding traffic to the next hop. 10.4.1.
LSDB interface. Age: Is a number representing the age of the link state advertisement in seconds. Sequence: Is a number that represents which LSA is more recent. Checksum: Is the total number LSA checksum. Options: This is an integer. It indicates that the LSA receives special handling during routing calculations. Rtr Opt: Router Options are valid for router links only. 10.4.1.
10.4.1.7 show ipv6 ospf interface This command displays the information for the IFO object or virtual interface tables. Syntax show ipv6 ospf interface { | loopback <0-7> | tunnel <0-7>} - Interface number. <0-7> - Loopback/Tunnel Interface ID. Default Setting None Command Mode Privileged Exec User Exec Display Messages IP Address: Shows the IPv6 address of the interface. ifIndex: Shows the interface index number associated with the interface.
broadcast. The OSPF Interface Type will be 'broadcast'. State: The OSPF Interface States are: down, loopback, waiting, point-to-point, designated router, and backup designated router. Designated Router: The router ID representing the designated router. Backup Designated Router: The router ID representing the backup designated router. Number of Link Events: The number of link events. Metric Cost: The cost of the OSPF interface. 10.4.1.
10.4.1.9 show ipv6 ospf interface stats This command displays the statistics for a specific interface. The command only displays information if OSPF is enabled Syntax show ipv6 ospf interface stats - Interface number. Default Setting None Command Mode Privileged Exec User Exec Display Messages OSPFv3 Area ID: The area id of this OSPF interface. IP Address: The IP address associated with this OSPF interface.
No Neighbor at Source Address: The number of OSPF packets dropped because the sender is not an existing neighbor or the sender’s IP address does not match the previously recorded IP address for that neighbor. NOTE: Does not apply to Hellos. Invalid OSPF Packet Type The number of OSPF packets discarded because the packet type field in the OSPF header is not a known type. 10.4.1.10 show ipv6 ospf neighbor This command displays information about OSPF neighbors.
Exchange start - the first step in creating an adjacency between the two neighboring routers, the goal is to decide which router is the master and to decide upon the initial DD sequence number. Exchange - the router is describing its entire link state database by sending Database Description packets to the neighbor. Loading - Link State Request packets are sent to the neighbor asking for the more recent LSAs that have been discovered (but not yet received) in the Exchange state.
User Exec Display Messages Area ID: The area id of the requested OSPF area. IP Address: An IP Address which represents this area range. Subnet Mask: A valid subnet mask for this area range. Lsdb Type: The type of link advertisement associated with this area range. Advertisement: The status of the advertisement. Advertisement has two possible settings: enabled or disabled. 10.4.1.12 show ipv6 ospf stub table This command displays the OSPF stub table.
- Area ID. - Neighbor's router ID. Default Setting None Command Mode Privileged Exec User Exec Display Messages Area ID: The area id of the requested OSPF area. Neighbor Router ID: The input neighbor Router ID. Hello Interval: The configured hello interval for the OSPF virtual interface. Dead Interval: The configured dead interval for the OSPF virtual interface. Iftransit Delay Interval: The configured transit delay for the OSPF virtual interface.
Retransmit Interval: Is the configured retransmit interval for the OSPFv3 virtual interface. Transit Delay: Is the configured transit delay for the OSPFv3 virtual interface. 10.4.2 Configuration Commands 10.4.2.1 ipv6 ospf This command enables OSPF on a router interface or loopback interface. Syntax ipv6 ospf no ipv6 ospf - This command disables OSPF on a router interface or loopback interface. Default Setting Disabled Command Mode Interface Config 10.4.2.
10.4.2.3 ipv6 ospf cost This command configures the cost on an OSPF interface. The parameter has a range of 1 to 65535. Syntax ipv6 ospf cost <1-65535> no ipv6 ospf cost - This command configures the default cost on an OSPF interface. Default Setting None Command Mode Interface Config 10.4.2.4 ipv6 ospf dead-interval This command sets the OSPF dead interval for the specified interface.
must be the same for all routers attached to a network. Valid values for range from 1 to 65535. Syntax ipv6 ospf hello-interval no ipv6 ospf hello-interval - This command sets the default OSPF hello interval for the specified interface. Default Setting 10 Command Mode Interface Config 10.4.2.6 ipv6 ospf mtu-ignore This command disables OSPF maximum transmission unit (MTU) mismatch detection.
Syntax ipv6 ospf network {broadcast | point-to-point} no ipv6 ospf network {broadcast | point-to-point} - This command sets the interface type to the default value. Default Setting Broadcast Command Mode Interface Config 10.4.2.8 ipv6 ospf priority This command sets the OSPF priority for the specified router interface. The priority of the interface is a priority integer from 0 to 255. A value of 0 indicates that the router is not eligible to become the designated router on this network.
- This command sets the default OSPF retransmit Interval for the specified interface. Default Setting 5 Command Mode Interface Config 10.4.2.10 ipv6 ospf transmit-delay This command sets the OSPF Transit Delay for the specified interface. The transmit delay is specified in seconds. In addition, it sets the estimated number of seconds it takes to transmit a link state update packet over this interface. Valid values for range from 1 to 3600 (1 hour).
10.4.2.12 area default-cost This command configures the monetary default cost for the stub area. The operator must specify the area id and an integer value between 1-16777215. Syntax area default-cost <1-16777215> - Area ID. Default Setting None Command Mode Router OSPFv3 Config 10.4.2.13 area nssa This command configures the specified areaid to function as an NSSA. Syntax area nssa no area nssa - Area ID.
Syntax area nssa default-info-originate [<1-16777215>] [{comparable | non-comparable}] no area nssa default-info-originate [<1-16777215>] [{comparable | non-comparable}] - Area ID. <1-16777215> - The metric of the default route. The range is 1 to 16777215. comparable - It's NSSA-External 1. non-comparable - It's NSSA-External 2. no - This command disables the default route advertised into the NSSA. Default Setting None Command Mode Router OSPFv3 Config 10.4.2.
Syntax area nssa no-summary no area nssa no-summary - Area ID. no - This command disables nssa from the summary LSAs. Default Setting None Command Mode Router OSPFv3 Config 10.4.2.17 area nssa translator-role This command configures the translator role of the NSSA.
Syntax area nssa translator-stab-intv <0-3600> no area nssa translator-stab-intv - Area ID. <0-3600> - The range is 0 to 3600. no - Disables the nssa translator’s from the specified area id. Default Setting None Command Mode Router OSPFv3 Config 10.4.2.19 area range This command creates a specified area range for a specified NSSA. The is a valid IPv6 address. The is a valid subnet mask.
10.4.2.20 area stub This command creates a stub area for the specified area ID. A stub area is characterized by the fact that AS External LSAs are not propagated into the area. Removing AS External LSAs and Summary LSAs can significantly reduce the link state database of routers within the stub area. Syntax area stub no area stub - Area ID. - This command deletes a stub area for the specified area ID. Default Setting None Command Mode Router OSPFv3 Config 10.4.2.
10.4.2.22 area virtual-link This command creates the OSPF virtual interface for the specified and . The parameter is the Router ID of the neighbor. Syntax area virtual-link no area virtual-link - Area ID. - Router ID of the neighbor. no - This command deletes the OSPF virtual interface from the given interface, identified by and .
10.4.2.24 area virtual-link hello-interval This command configures the hello interval for the OSPF virtual interface on the interface identified by and . Syntax area virtual-link hello-interval <1-65535> no area virtual-link hello-interval - Area ID. - Router ID of the neighbor. <1-65535> - The range of the hello interval is 1 to 65535.
10.4.2.26 area virtual-link transmit-delay This command configures the transmit delay for the OSPF virtual interface on the virtual interface identified by and . Syntax area virtual-link transmit-delay <0-3600> no area virtual-link transmit-delay - Area ID. - Router ID of the neighbor. <0-3600> - The range of the transmit delay is 0 to 3600.
10.4.2.28 default-information originate This command is used to control the advertisement of default routes. Syntax default-information originate [always] [metric <1-16777215>] [metric-type {1 | 2}] no default-information originate [metric] [metric-type] [always] - Sets the router advertise 0.0.0.0/0.0.0.0. metric - The range of the metric is 1 to 16777215. metric type - The value of metric type is type 1 or type 2. no - This command configures the default advertisement of default routes.
10.4.2.30 distance ospf This command sets the route preference value of OSPF in the router. Lower route preference values are preferred when determining the best route. The type of OSPF can be intra, inter, type-1, or type-2. The OSPF specification (RFC 2328) requires that preferences must be given to the routes learned via OSPF in the following order: intra < inter < type-1 < type-2. The range is 1 to 255. A route with a preference of 255 cannot be used to forward traffic.
10.4.2.32 exit-overflow-interval This command configures the exit overflow interval for OSPF. It describes the number of seconds after entering Overflow state that a router will wait before attempting to leave the Overflow State. This allows the router to again originate non-default AS-external-LSAs. When set to 0, the router will not leave Overflow State until restarted.
10.4.2.34 maximum-paths This command sets the number of paths that OSPF can report for a given destination where is platform dependent. Syntax maximum-paths <1-2> no maximum-paths <1-2> - The maximum number of paths that OSPF can report for a given destination. The range of the value is 1 to 2. no - This command resets the number of paths that OSPF can report for a given destination back to its default value. Default Setting 1 Command Mode Router OSPFv3 Config. 10.4.2.
Default Setting Disabled Command Mode Router OSPFv3 Config. 10.4.2.37 redistribute This command configures the OSPFv3 protocol to allow redistribution of routes from the specified source protocol/routers. Syntax redistribute {static | connected} [metric <0-16777214>] [metric-type {1 | 2}] [tag <0-4294967295>] no redistribute { static | connected} [metric] [metric-type] [tag] <0-16777215> - The range of metric is 0 to 16777214. <0-4294967295> - The range of tag is 0 to 4294967295.
10.5 RIPng Commands RIPng is intended to allow routers to exchange information for computing routes through an IPv6-based network. RIPng is a distance vector protocol. RIPng should be implemented only in routers. Any router that uses RIPng is assumed to have interfaces to one or more networks, otherwise it isn’t really a router. These are referred to as its directly-connected networks.
Info Time: Configured value. Enable Ripng of interfaces: List all interfaces enabled RIPng. Enable passive mode of interfaces: List all interfaces enabled RIPng passive. 10.5.2 Configuration Commands 10.5.2.1 enable This command resets the default administrative mode of RIPng in the router (active). Syntax enable no enable no - This command sets the administrative mode of RIPng in the router to inactive. Default Setting Enabled Command Mode IPv6 Router RIP Config 10.5.2.
10.5.2.3 ipv6 router rip Use this command to enter Router RIPng mode. Syntax ipv6 router rip Default Setting Disabled Command Mode Global Config 10.5.2.4 default-information originate This command is used to set the advertisement of default routes. Syntax default-information originate no default-information originate no - This command is used to cancel the advertisement of default routes. Default Setting Disabled Command Mode IPv6 Router RIP Config 10.5.2.
Default Setting Not configured Command Mode IPv6 Router RIP Config 10.5.2.6 distance rip This command sets the route preference value of RIPng in the router. Lower route preference values are preferred when determining the best route. Syntax distance rip <1-255> no distance rip <1-255> - the value for distance. no - This command sets the default route preference value of RIPng in the router. Default Setting 15 Command Mode IPv6 Router RIP Config 10.5.2.
Command Mode IPv6 Router RIP Config 10.5.2.8 redistribute This command configures RIPng protocol to redistribute routes from the specified source protocol/routers. Source protocols have OSPF, Static, and Connetced. Syntax Format for OSPF as source protocol: redistribute ospf [metric <1-15>] Format for other source protocols: redistribute {static | connected} [metric <1-15>] no redistribute {ospf | static | connected} [metric] <1 - 15> - a value for metric.
Default Setting update - the default value is 30 (seconds) garbage - the default value is 120 (seconds) info - the default value is 180 (seconds) Command Mode Global Config 10.5.2.10 ipv6 rip passive-interface The user can go to the CLI Interface Configuration Mode to set ipv6 rip passive, use the ipv6 rip passive-interface interface configuration command. Use the no ipv6 rip passive-interface return to the default value.
Command Mode Privileged Exec User Exec Display Message PIM-DM Admin Mode: Indicates whether PIM-DM is enabled or disabled. Interface: Valid unit, slot, and port number separated by forward slashes. Interface Mode: Indicates whether PIM-DM is enabled or disabled on this interface. Operational State: The current state of PIM-DM on this interface. Possible values are Operational or Non-Operational. 10.6.1.
Command Mode Privileged Exec User Exec Display Message Interface: Valid unit, slot, and port number separated by forward slashes. Neighbor Address: The IP address of the neighbor on an interface. Up Time: The time since this neighbor has become active on this interface. Expiry Time: The expiry time of the neighbor on this interface. 10.6.2 Configuration Commands 10.6.2.
no - Use this command to set the PIM-DM hello interval to the default value. Default Setting Disabled Command Mode Interface Config 10.7 Protocol Independent Multicast – Sparse Mode (PIM-SM) Commands 10.7.1 Show Commands 10.7.1.1 show ipv6 pimsm This command displays the system-wide information for PIM-SM. Syntax show ipv6 pimsm Default Setting None Command Mode Privileged Exec User Exec Display Message Admin Mode: Indicates whether PIM-SM is enabled or disabled.
10.7.1.2 show ipv6 pimsm bsr This command displays the bootstrap router (BSR) information. The output includes elected BSR information and information about the locally configured candidate rendezvous point (RP) advertisement. Syntax show ipv6 pimsm bsr Default Setting None Command Mode Privileged Exec User Exec Display Message BSR Address: IP address of the BSR. Uptime: Length of time that this router has been up (in hours, minutes, and seconds).
IP Address: The IP address of the specified interface. Subnet Mask: The Subnet Mask for the IP address of the PIM interface. Hello Interval (secs): The frequency at which PIM hello messages are transmitted on this interface. By default, the value is 30 seconds. Join Prune Interval (secs): The join/prune interval for the PIM-SM router. The interval is in seconds. Neighbor Count: The neighbor count for the PIM-SM interface. Designated Router: The IP address of the Designated Router for this interface.
Default Setting None Command Mode Privileged Exec User Exec Display Message RP: The IP address of the RP for the group specified. Origin: Indicates the mechanism (BSR or static) by which the RP was selected. 10.7.1.6 show ipv6 pimsm rp mapping Use this command to display all group-to-RP mappings of which the router is a aware (either configured or learned from the bootstrap router (BSR)). If no RP is specified, all active RPs are displayed.
no - This command sets administrative mode of PIM-SM multicast routing across the router to disabled. MLD must be enabled before PIM-SM can be enabled. Default Setting Disbaled Command Mode Global Config Interface Config 10.7.2.2 ipv6 pimsm bsr-candidate This command is used to configure the router to announce its candidacy as a bootstrap router (BSR).
no - This command resets the register threshold rate for the Rendezvous Pointer router to the default value. Default Setting 0 Command Mode Global Config 10.7.2.4 ipv6 pimsm rp-address This command is used to statically configure the RP address for one or more multicast groups. The parameter is the IP address of the RP. The parameter is the group address supported by the RP. The parameter is the group mask for the group address.
Default Setting 0 Command Mode Global Config 10.7.2.6 ipv6 pimsm spt-threshold This command is used to configure the Data Threshold rate for the last-hop router to switch to the shortest path. The rate is specified in Kilobits per second. The possible values are 0 to 2000. Syntax iipv6 pimsm spt-threshold <1-2000> no ipv6 pimsm spt-threshold no - This command is used to set the Data Threshold rate for the RP router to the default value. Default Setting 0 Command Mode Global Config 10.7.2.
10.7.2.8 ipv6 pimsm bsr-border Use this command to prevent bootstrap router (BSR) messages from being sent or received through an interface. Syntax ipv6 pimsm bsr-border no ipv6 pimsm bsr-border no - Use this command to disable the interface from being the BSR border. Default Setting Disbaled Command Mode Interface Config 10.7.2.9 ipv6 pimsm dr-priority Use this command to set the priority value for which a router is elected as the designated router (DR).
no - Use this command to set the join/prune interval to the default value. Default Setting 60 Command Mode Interface Config 10.7.2.11 ipv6 pimsm hello-interval This command is used to configure the PIM-SM hello interval for the specified interface. The hello interval range is 0-18000 is specified in seconds. Syntax ipv6 pimsm hello-interval <0-18000> no ipv6 pimsm hello-interval no - This command is used to set the hello interval to the default value.
11. Web-Based Management Interface 11.1 Overview The Layer 3 Network Switch provides a built-in browser software interface that lets you configure and manage it remotely using a standard Web browser such as Microsoft Internet Explorer or Netscape Navigator. This software interface also allows for system monitoring and management of the Network Switch. When you configure this Network Switch for the first time from the console, you have to assign an IP address and subnet mask to the Network Switch.
7. IPv4 Multicast Menu: This section provides users to configure IGMP, DVMRP, Multicast, PIM-DM, PIM-SM. It also provides information for a multicast distribution tree. 8. IPv6 Multicast Menu: This section provides users to configure MLD, PIM-DM, PIM-SM. It also provides information for a multicast distribution tree. 11.2 System Menu 11.2.1 View ARP Cache The Address Resolution Protocol (ARP) dynamically maps physical (MAC) addresses to Internet (IP) addresses.
Non-Configurable Data System Description - The product name of this switch. Machine Type - The machine type of this switch. Machine Model - The model within the machine type. Serial Number - The unique box serial number for this switch. Part Number - The manufacturing part number. Base MAC Address - The burned-in universally administered MAC address of this switch. Hardware Version - The hardware version of this switch. It is divided into four parts.
Boot Rom Version - The release-version number of the boot rom code currently running on the switch. For example, if the release was 1, and the version was 2, the format would be '1.2'. Label Revision Number - The label revision serial number of this switch is used for manufacturing purpose. Runtime Version - The release-version number of the code currently running on the switch. For example, if the release was 1, and the version was 2, the format would be '1.2..
Interface = y...................... SFP+(The yth 10-Giga information of switch 1). 10 Gigabit Ethernet Compliance Codes: Transceiver’s compliance codes. Vendor Name: The SFP transceiver vendor name shall be the full name of the corporation, a commonly accepted abbreviation of the name of the corporation, the SCSI company code for the corporation, or the stock exchange code for the corporation. Vendor Part Number: Part number provided by SFP transceiver vendor.
Configurable Data System Name - Enter the name you want to use to identify this switch. You may use up to 31 alpha-numeric characters. The factory default is blank. System Location - Enter the location of this switch. You may use up to 31 alpha-numeric characters. The factory default is blank. System Contact - Enter the contact person for this switch. You may use up to 31 alpha-numeric characters. The factory default is blank.
System Up time - The time in days, hours and minutes since the last switch reboot. Current SNTP Syncronized Time - Displays currently synchronized SNTP time in UTC. If time is not syncronised, it displays "Not Syncronized." MIBs Supported - The list of MIBs supported by the management agent running on this switch. Command Buttons Submit - Update the switch with the values on the screen. If you want the switch to retain the new values across a power cycle you must perform a save. 11.2.3.
Non-Configurable Data Burned-in MAC Address - The burned-in MAC address used for in-band connectivity. Default Routers - The IPv6 default routers. Command Buttons Submit - Update the switch with the values on the screen. If you want the switch to retain the new values across a power cycle you must perform a save. Delete - Delete a IPv6 prefix. 11.2.3.3 Configuring ServicePort NDP Summary This screen displays IPv6 Service Port Neighbor entries.
11.2.3.4 Configuring Network Connectivity Page The network interface is the logical interface used for in-band connectivity with the switch via any of the switch's front panel ports. The configuration parameters associated with the switch's network interface do not affect the configuration of the front panel ports through which traffic is switched or routed. To access the switch over a network you must first configure it with IP information (IP address, subnet mask, and default gateway).
Configurable Data IP Address - The IP address of the interface. The factory default value is 0.0.0.0 Subnet Mask - The IP subnet mask for the interface. The factory default value is 0.0.0.0 Default Gateway - The default gateway for the IP interface. The factory default value is 0.0.0.0 Management VLAN ID - Specifies the management VLAN ID of the switch. It may be configured to any value in the range of 1 - 3965. The management VLAN is used for management of the switch.
unknown(6) - Unknown status. Last Updated - The last sysUpTime that this neighbor has been updated. Command Buttons Refresh - Refresh the data on the screen with the present state of the data in the router. 11.2.3.6 HTTP Configuration Configurable Data HTTP Session Soft Timeout - This field is used to set the inactivity timeout for HTTP sessions. The value must be in the range of (0 to 60) minutes. A value of zero corresponds to an infinite timeout. The default value is 5 minutes.
11.2.3.7 Configuring Telnet Session Page Selection Criteria Maximum Number of Telnet Sessions - Use the pulldown menu to select how many simultaneous telnet sessions will be allowed. The maximum is 5, which is also the factory default. Allow New Telnet Sessions - If you set this to no, new telnet sessions will not be allowed. The factory default is yes. Telnet Server Admin Mode - Administrative mode for inbound telnet sessions. Setting this value to disable shuts down the telnet port.
11.2.3.8 Configuring Outbound Telnet Client Configuration Page Selection Criteria Admin Mode - Specifies if the Outbound Telnet service is Enabled or Disabled. Default value is Enabled. Maximum Sessions - Specifies the maximum number of Outbound Telnet Sessions allowed. Default value is 5. Valid Range is (0 to 5). Configurable Data Session Timeout - Specifies the Outbound Telnet login inactivity timeout. Default value is 5. Valid Range is (1 to 160).
Session Timeout - Specifies the Outbound Telnet login inactivity timeout. Default value is 5. Valid Range is (1 to 160). Command Buttons Submit - Sends the updated configuration to the switch. Configuration changes take effect immediately. 11.2.3.10 Configuring Serial Port Page Selection Criteria Baud Rate (bps) - Select the default baud rate for the serial port connection from the pull-down menu. You may choose from 1200, 2400, 4800, 9600, 19200, 38400, 57600, and 115200 baud.
Command Buttons Submit - Update the switch with the values on the screen. If you want the switch to retain the new values across a power cycle you must perform a save. 11.2.3.11 Defining User Accounts Page By default, two user accounts exist: admin, with 'Read/Write' privileges guest, with 'Read Only' privileges By default, both of these accounts have blank passwords. The names are not case sensitive.
Encryption Protocol - Specify the SNMPv3 Encryption Protocol setting for the selected user account. The valid Encryption Protocols are None or DES. If you select the DES Protocol you must enter a key in the Encryption Key field. If None is specified for the Protocol, the Encryption Key is ignored. Configurable Data User Name - Enter the name you want to give to the new account. (You can only enter data in this field when you are creating a new account.
Selection Criteria Authentication List - Select the authentication login list you want to configure. Select 'create' to define a new login list. When you create a new login list, 'local' is set as the initial authentication method. Method 1 - Use the dropdown menu to select the method that should appear first in the selected authentication login list.
11.2.3.13 Viewing Login Session Page Non-Configurable Data ID - Identifies the ID of this row. User Name - Shows the user name of user who made the session. Connection From - Shows the IP from which machine the user is connected. Idle Time - Shows the idle session time. Session Time - Shows the total session time. Session Type – Shows the type of session: telnet, serial or SSH. Command Buttons Refresh - Update the information on the page. 11.2.3.
802.1x Port Security Users The users you assigned to this login list on the Port Access Control User Login Configuration screen - This list is used to authenticate the users for port access, using the IEEE 802.1x protocol. Command Buttons Refresh - Update the information on the page. 11.2.3.15 Defining User Login Page Each configured user is assigned to a login list that specifies how the user should be authenticated when attempting to access the switch or a port on the switch.
Command Buttons Submit - Sends the updated screen to the switch and causes the changes to take effect on the switch. These changes will not be retained across a power cycle unless you perform a save. Refresh - Updates the information on the page. 11.2.3.16 Defining Password Management Configurable Data Password Minimum Length - All new local user passwords must be at least this many characters in length.
11.2.3.17 Defining Denial Of Service Page Selection Criteria TCP Fragment - Enable or disable this option by selecting the corresponding line on the pulldown entry field. Enabling TCP Fragment DoS prevention causes the switch to drop packets that have a TCP header smaller then the configured Min TCP Hdr Size. The factory default is disabled. ICMP - Enable or disable this option by selecting the corresponding line on the pulldown entry field.
SMAC=DMAC - Enable or disable this option by selecting the corresponding line on the pulldown entry field. Enabling SMAC=DMAC DoS prevention causes the switch to drop packets that have a source MAC address equal to the destination MAC address. The factory default is disabled. TCP FIN&URG&PSH - Enable or disable this option by selecting the corresponding line on the pulldown entry field.
Configurable Data Aging Interval(secs) - The forwarding database contains static entries, which are never aged out, and dynamically learned entries, which are removed if they are not updated within a given time. You specify that time by entering a value for the Address Ageing Timeout. You may enter any number of seconds between 10 and 1000000. IEEE 802.1D recommends a default of 300 seconds, which is the factory default. Command Buttons Submit - Update the switch with the values on the screen.
Non-Configurable Data MAC Address - A unicast MAC address for which the switch has forwarding and/or filtering information. The format is a two byte hexadecimal VLAN ID number followed by a six byte MAC address with each byte separated by colons. For example: 01:23:45:67:89:AB:CD:EF, where 01:23 is the VLAN ID and 45:67:89:AB:CD:EF is the MAC address. Source Slot/Port - the port where this address was learned -- that is, the port through which the MAC address can be reached.
11.2.5.2 Viewing Buffered Log Page This help message applies to the format of all logged messages which are displayed for the buffered log, persistent log, or console log. Format of the messages <15>Aug 24 05:34:05 STK0 MSTP[2110]: mspt_api.
11.2.5.3 Configuring Command Logger Page Selection Criteria Admin Mode - Enable/Disable the operation of the CLI Command logging by selecting the corresponding pulldown field and clicking Submit. Command Buttons Submit - Update the switch with the values you entered. 11.2.5.4 Configuring Console Log Page This allows logging to any serial device attached to the host. Selection Criteria Admin Status -A log that is "Disabled" shall not log messages. A log that is "Enabled" shall log messages.
Critical (2): critical conditions Error (3): error conditions Warning (4): warning conditions Notice(5): normal but significant conditions Info (6): informational messages Debug(7): debug-level messages Command Buttons Submit - Update the switch with the values you entered. 11.2.5.5 Viewing Event Log Page Use this panel to display the event log, which is used to hold error messages for catastrophic events.
Code - The event code passed to the event log handler by the code reporting the event. Time - The time the event occurred, measured from the previous reset. Command Buttons Refresh - Update the information on the page. Clear Log - Remove all log information. 11.2.5.6 Configuring Hosts configuration Page Selection Criteria Host - This is a list of the hosts that have been configured for syslog. Select a host for changing the configuration or choose to add a new hosts from the drop down list.
Refresh - Refetch the database and display it again starting with the first entry in the table. Delete - Delete a configured host. 11.2.5.7 Configuring Terminal Log Configuration Page This allows logging to any terminal client connected to the switch via telnet or SSH. To receive the log messages, terminals have to enable "terminal monitor" via CLI command. Selection Criteria Admin Status -A log that is "Disabled" shall not log messages to connected terminals.
Error (3): error conditions Warning (4): warning conditions Notice(5): normal but significant conditions Informational(6): informational messages Debug(7): debug-level messages Command Buttons Submit - Update the switch with the values you entered. 11.2.5.8 Configuring syslog configuration Page Selection Criteria Admin Status -For Enabling and Disabling logging to configured syslog hosts. Setting this to disable stops logging to all syslog hosts.
Refresh - Refetch the database and display it again starting with the first entry in the table. 11.2.6 Managing Switch Interface 11.2.6.1 Configuring Switch Interface Page Selection Criteria Slot/Port - Selects the interface for which data is to be displayed or configured. Admin Mode - Use the pulldown menu to select the Port control administration state. You must select enable if you want the port to participate in the network. The factory default is enabled.
Broadcast Storm Control - Used to enable or disable the broadcast storm feature on the selected interface. The broadcast storm control value can be set to Level 1, Level 2, Level 3, and Level 4. The following description is for the broadcast storm, multicast storm, and unicast storm control. The actual packet rate for switch will convert from the input level and the speed of that interface. (see table 1 and table 2) Table 1. For 10/100Mbps/1Gbps Table 2.
Selection Criteria MST ID - Select the Multiple Spanning Tree instance ID from the list of all currently configured MST ID's to determine the values displayed for the Spanning Tree parameters. Changing the selected MST ID will generate a screen refresh. If Spanning Tree is disabled this will be a static value, CST, instead of a selector. Non-Configurable Port Status Data Slot/Port - Identifies the port Port Type - For normal ports this field will be blank.
Port Role - Each MST Bridge Port that is enabled is assigned a Port Role for each spanning tree. The port role will be one of the following values: Root Port, Designated Port, Alternate Port, Backup Port, Master Port, or Disabled Port. Admin Mode - The Port control administration state. The port must be enabled in order for it to be allowed into the network. The factory default is enabled. LACP Mode - Indicates the Link Aggregation Control Protocol administration state.
Selection Criteria Slot/Port - Selects the interface for which data is to be displayed or configured. Configurable Data Port Description Enter the Description string to be attached to a port. It can be up to 64 characters in length. Non-Configurable Data Slot/Port - Identifies the port Physical Address - Displays the physical address of the specified interface. PortList Bit Offset - Displays the bit offset value which corresponds to the port when the MIB object type PortList is used to manage in SNMP.
Selection Criteria Slot/Port - This field indicates the interface to which the cable to be tested is connected. Non-Configurable Data Interface - Displays the interface tested in the Slot/Port notation. This field is displayed after the "Test Cable" button has been clicked and results are available. This field is not visible when the page is initially displayed. Cable Status - This displays the cable status as Normal, Open or Short. Normal: the cable is working correctly.
11.2.6.5 Configuring Multiple Port Mirroring Function Page Selection Criteria Session - Select a port mirroring session from the list. The number of sessions allowed is platform specific. By default the First Session is selected. Up to 1 sessions are supported. Mode - Specifies the Session Mode for a selected session ID. The default Session Mode is disabled. Destination Port - Acts as a probe port and will receive all the traffic from configured mirrored port(s). Default value is blank.
11.2.6.6 Configuring Double VLAN Tunneling Function Page Selection Criteria Slot/Port - Select the physical interface for which you want to display or configure data. Configurable Data Interface Mode - This specifies the administrative mode via which Double VLAN Tagging can be enabled or disabled. The default value for this is Disabled. Interface EtherType - The two-byte hex EtherType to be used as the first 16 bits of the DVlan tag. 802.
11.2.6.7 Configuring Double VLAN Tnuueling Summary Function Page Non-Configurable Data Slot/Port - The physical interface for which data is being displayed. Interface Mode - This specifies the administrative mode via which Double VLAN Tagging can be enabled or disabled. The default value for this is Disabled. Interface EtherType - The two-byte hex EtherType to be used as the first 16 bits of the DVlan tag. 802.
11.2.7 Defining sFlow 11.2.7.1 Configuring sFlow Agent Summary Configuration Page Configurable Data Version - Uniquely identifies the version and implementation of this MIB. The version string must have the following structure: MIB Version;Organization;Software Revision where: MIB Version: '1.3', the version of this MIB. Organization: Broadcom Corp. Revision: 1.0. Agent Address - The IP address associated with this agent.
11.2.7.2 Configuring sFlow Receiver Configuration Page Selection Criteria Receiver Index - Selects the receiver for which data is to be displayed or configured. Allowed range is (1 to 8 ) Configurable Data Receiver Owner - The entity making use of this sFlowRcvrTable entry. The empty string indicates that the entry is currently unclaimed and the receiver configuration is reset to default values.
sFlow Receiver Address - The IP address of the sFlow collector. sFlow Receiver Port - The destination port for sFlow datagrams. sFlow Receiver Datagram Version - The version of sFlow datagrams that should be sent. Command Buttons Submit - Send the updated data to the switch and cause the changes to take effect on the switch. Refresh - Refresh the data on the screen with present state of data in the switch. 11.2.7.
11.2.7.4 Configuring sFlow Sampler Configuration Page sFlow agent collects statistical packet-based sampling of switched flows and sends them to the configured receivers. A data source configured to collect flow samples is called a sampler. Selection Criteria sFlow Sampler Datasource(Slot/Port) - sFlowDataSource for this flow sampler. This Agent will support Physical ports only. Configurable Data Receiver Index - The sFlow Receiver for this flow sampler.
11.2.7.5 Viewing sFlow Port Summary Page Selection Criteria Slot/Port - Selects the interface for which data is to be displayed or configured. Non-Configurable Data Slot/Port - The interface for which data is being displayed. ifIndex - This object indicates the ifIndex of the interface table entry associated with this port on an adapter. Octets Received Rate - The total number of octets of data received rates by the processor (excluding framing bits but including FCS octets).
Unicast Packets Transmitted Rate - The total number of packets rates that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those that were discarded or not sent. Multicast Packets Transmitted Rate - The total number of packets rates that higher-level protocols requested be transmitted to a Multicast address, including those that were discarded or not sent.
Selection Criteria Community - You can use this screen to reconfigure an existing community, or to create a new one. Use this pulldown menu to select one of the existing community names, or select 'Create' to add a new one. Access Mode - Specify the access level for this community by selecting Read/Write or Read Only from the pull down menu. Status - Specify the status of this community by selecting Enable or Disable from the pull down menu.
Selection Criteria Community - You can use this screen to reconfigure an existing community, or to create a new one. Use this pulldown menu to select one of the existing community names, or select 'Create' to add a new one. SNMP Version - Select the trap version to be used by the receiver from the pull down menu: SNMP v1 - Uses SNMP v1 to send traps to the receiver. SNMP v2 - Uses SNMP v2 to send traps to the receiver.
Non-configurable Data Name - The RFC number if applicable and the name of the MIB. Description - The RFC title or MIB description. Command Buttons Refresh - Update the data.
11.2.9 Viewing Statistics 11.2.9.1 Viewing the whole Switch Detailed Statistics Page Non-Configurable Data ifIndex - This object indicates the ifIndex of the interface table entry associated with the Processor of this switch. Octets Received - The total number of octets of data received by the processor (excluding framing bits but including FCS octets). Unicast Packets Received - The number of subnetwork-unicast packets delivered to a higher-layer protocol.
Broadcast Packets Transmitted - The total number of packets that higher-level protocols requested be transmitted to the Broadcast address, including those that were discarded or not sent. Transmit Packets Discarded - The number of outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space.
Broadcast Packets Received - The total number of packets received that were directed to the broadcast address. Note that this does not include multicast packets. Packets Received with Errors - The number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. Packets Transmitted Without Errors - The total number of packets transmitted out of the interface.
Selection Criteria Slot/Port - Selects the interface for which data is to be displayed or configured. Non-Configurable Data ifIndex - This object indicates the ifIndex of the interface table entry associated with this port on an adapter. Packets RX and TX 64 Octets - The total number of packets (including bad packets) received or transmitted that were 64 octets in length (excluding framing bits but including FCS octets).
Packets Received 512-1023 Octets - The total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets). Packets Received 1024-1518 Octets - The total number of packets (including bad packets) received that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).
Packets Transmitted 256-511 Octets - The total number of packets (including bad packets) received that were between 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets). Packets Transmitted 512-1023 Octets - The total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets).
RSTP BPDUs Received - Number of RSTP BPDUs received at the selected port. RSTP BPDUs Transmitted - Number of RSTP BPDUs transmitted from the selected port. MSTP BPDUs Received - Number of MSTP BPDUs received at the selected port. MSTP BPDUs Transmitted - Number of MSTP BPDUs transmitted from the selected port. Time Since Counters Last Cleared - The elapsed time, in days, hours, minutes, and seconds since the statistics for this port were last cleared.
11.2.9.4 Viewing Each Port Summary Statistics Page Selection Criteria Slot/Port - Selects the interface for which data is to be displayed or configured. Non-Configurable Data ifIndex - This object indicates the ifIndex of the interface table entry associated with this port on an adapter. Total Packets Received without Errors - The total number of packets received that were without errors.
Time Since Counters Last Cleared - The elapsed time, in days, hours, minutes, and seconds since the statistics for this port were last cleared. Command Buttons Clear Counters - Clears all the counters, resetting all statistics for this port to default values. Clear All Counters - Clears all the counters for all ports, resetting all statistics for all ports to default values. Refresh – Refreshes the data on the screen with the present state of the data in the switch. 11.2.10 Managing System Utilities 11.2.
11.2.10.3 Restoring All Configuration to Default Values Page Command Buttons Reset - Clicking the Reset button will reset all of the system login passwords to their default values. If you want the switch to retain the new values across a power cycle, you must perform a save. 11.2.10.4 Resetting the Passwords to Default Values Page Command Buttons Reset - Select this button to have all passwords reset to their factory default values. 11.2.10.
Selection Criteria File Type - Specify what type of file you want to download: Script - specify configuration script when you want to update the switch's script file. CLI Banner - Specify the banner that you want to display before user login to the switch. Code – Specify code when you want to upgrade the operational flash. Configuration - Specify configuration when you want to update the switch's configuration. If the file has errors the update will be stopped.
FTP/TFTP File Name (Target) - Enter the name on the switch of the file you want to save. You may enter up to 30 characters. The factory default is blank. Start File Transfer - To initiate the download you need to check this box and then select the submit button. Non-Configurable Data The last row of the table is used to display information about the progress of the file transfer. The screen will refresh automatically until the file transfer completes.
Start File Transfer - To initiate the upload you need to check this box and then select the submit button. Non-Configurable Data The last row of the table is used to display information about the progress of the file transfer. The screen will refresh automatically until the file transfer completes. Command Buttons Submit - Send the updated screen to the switch and perform the file upload. 11.2.10.7 Defining Configuration and Runtime Startup File Page Specify the file used to start up the system.
Configurable Data Configuration File - Configuration files. Runtime File - Run-time operation codes. Script File - Configuration script files. Command Buttons Remove File - Send the updated screen to the switch and perform the file remove. 11.2.10.9 Copying Running Configuration to Flash Page Use this menu to copy a start-up configuration file from the running configuration file on switch. Configurable Data File Name - Enter the name you want to give the file being copied.
11.2.10.10 Defining Ping Function Page Use this screen to tell the switch to send a Ping request to a specified IP address. You can use this to check whether the switch can communicate with a particular IP station. Once you click the Submit button, the switch will send three pings and the results will be displayed below the configurable data. If a reply to the ping is not received, you will see No Reply Received from IP xxx.xxx.xxx.xxx, otherwise you will see Reply received from IP xxx.xxx.xxx.
Selection Criteria Ping - Select either global IPv6 Address or Link Local Address to ping. Interface - Select a IPv6 interface. Configurable Data IPv6 Address - Enter the IPv6 address of the station you want the switch to ping. The initial value is blank. The IPv6 Address you enter is not retained across a power cycle. Host name - Enter the host name of the station you want the switch to ping. Link Local Address - Enter the link local address of the station you want the switch to ping.
Selection Criteria IPv4 Address - Select the way "IPv4 Address" to trace. Host Name - Select the way "host name" to trace. Host Name V6 - Select the way "Host Name V6" to trace. IPv6 Address - Select the way "IPv6 Address" to trace. Configurable Data IP Address - Enter the IP address of the station you want the switch to discover path. The initial value is blank. The IP Address you enter is not retained across a power cycle. Probes Per Hop - Enter the number of probes per hop. The initial value is default.
11.2.11 Managing CDP Function 11.2.11.1 Defining CDP Configuration Page Use this menu to configure the parameters for CDP, which is used to discover a CISCO device on the LAN. Selection Criteria Admin Mode - CDP administration mode which are Enable and Disable. Slot/Port - Specifies the list of ports. Configurable Data Hold Time - the legal time period of a received CDP packet. Transmit Interval - the CDP packet sending interval. Command Buttons Submit - Send the updated screen to the switch.
11.2.11.2 Viewing Neighbors Information Page Non-Configurable Data Device ID - Identifies the device name in the form of a character string. Intf - The CDP neighbor information receiving port. Time - The length of time a receiving device should hold CDP information before discarding it. Capability - Describes the device's functional capability in the form of a device type, for example, a switch. Platform - Describes the hardware platform name of the device, for example, FSC the L2 Network Switch.
Non-Configurable Data Incoming Packet Number - Received legal CDP packets number from neighbors. Outgoing Packet Number - Transmitted CDP packets number from this device. Error Packet Number - Received illegal CDP packets number from neighbors. Command Buttons Clear Counters - Clear all the counters, resetting all switch summary and detailed statistics to default values. The discarded packets count cannot be cleared. Refresh - Refresh the data on the screen with the present state of the data in the switch.
ACL Traps - Enable or disable activation of ACL traps by selecting the corresponding line on the pulldown entry field. The factory default is disabled. DVMRP Traps - Enabled or disable activation of DVMRP traps by selecting the corresponding line on the pulldown entry field. The factory default is disabled. OSPF Traps - Enabled or disable activation of OSPF traps by selecting the corresponding line on the pulldown entry field. The factory default is disabled.
System Up Time - The time at which this trap occurred, expressed in days, hours, minutes and seconds since the last reboot of the switch. Trap - Information identifying the trap. Command Buttons Clear Log - Clear all entries in the log. Subsequent displays of the log will only show new log entries. 11.2.13 Configuring SNTP 11.2.13.1 Configuring SNTP Global Configuration Page Selection Criteria Client Mode - Specifies the mode of operation of SNTP Client.
Broadcast Poll Interval - Specifies the number of seconds between broadcast poll requests expressed as a power of two when configured in broadcast mode. Broadcasts received prior to the expiry of this interval are discarded. Allowed range is (6 to 10). Default value is 6. Multicast Poll Interval - Specifies the number of seconds between multicast poll requests expressed as a power of two when configured in multicast mode. Multicasts received prior to the expiry of this interval are discarded.
Last Attempt Status - Specifies the status of the last SNTP request or unsolicited message for both unicast and broadcast modes. If no message has been received from a server, a status of Other is displayed. These values are appropriate for all operational modes. Other - None of the following enumeration values. Success - The SNTP operation was successful and the system time was updated. Request Timed Out - A directed SNTP request timed out without receiving a response from the SNTP server.
11.2.13.3 Configuring SNTP Server Page Selection Criteria Server - Specifies all the existing Server Addresses along with an additional option "Create". When the user selects "Create" another text box "Address" appears where the user may enter Address for Server to be configured. Address Type - Specifies the address type of the configured SNTP Server address.
11.2.13.4 Viewing SNTP Server Status Page Non-Configurable Data Address - Specifies all the existing Server Addresses. If no Server configuration exists, a message saying "No SNTP server exists" flashes on the screen. Last Update Time - Specifies the local date and time (UTC) that the response from this server was used to update the system clock. Last Attempt Time - Specifies the local date and time (UTC) that this SNTP server was last queried.
11.2.13.5 Configuring Current Time Settings Page Configurable Data Year - Year (4-digit). (Range: 2000 - 2099). Month - Month. (Range: 1 - 12). Day - Day of month. (Range: 1 - 31). Hour - Hour in 24-hour format. (Range: 0 - 23). Minute - Minute. (Range: 0 - 59). Second - Second. (Range: 0 - 59). Command Buttons Submit - Send the updated screen to the switch. Changes take effect on the switch but these changes will not be retained across a power cycle unless a save is performed. 11.2.13.
Selection Criteria Direction before-utc - Sets the local time zone before (east) of UTC after-utc - Sets the local time zone after (west) of UTC Configurable Data Time Zone Name - The name of time zone, usually an acronym. (Range: 1-15 characters). Time Zone Hours - The number of hours before/after UTC. (Range: 0-12 hours). Time Zone Minutes - The number of minutes before/after UTC. (Range: 0-59 minutes).
Command Buttons Reset - Send the updated screen to the switch to restart the DHCP client. 11.2.14.1.1 Configurating DHCPv6 Restart Page This command issues a DHCP6 client request for any IP interface that has been set to DHCP mode via the ip address command. DHCP requires the server to reassign the client's last address if available. If the DHCP server has been moved to a different domain, the network portion of the address provided to the client will be based on this new domain.
Non-Configurable Data Current DHCP Identifier (Hex/Text) - Shows the current setting of DHCP identifier. Configurable Data Text String - A text string. Hex Value - The hexadecimal value. Command Buttons Submit - Send the updated screen to the switch perform the setting DHCP client identifier. 11.2.15 Defining DNS Relay Function 11.2.15.1 Configuring DNS Relay Configuration Page The DNS protocol controls the Domain Name System (DNS), a distributed database with which you can map host names to IP addresses.
11.2.15.2 Configuring Domain Name Configuration Page You can use this screen to change the configuration parameters for the domain names that can be appended to incomplete host names (i.e., host names passed from a client that are not formatted with dotted notation). You can also use this screen to display the contents of the table. Selection Criteria Domain - Specifies all the existing domain names along with an additional option "Create".
Selection Criteria Protocol - Select IPv4 or IPv6 to configure the corresponding attributes. Name Server - Specifies all the existing domain name servers along with an additional option "Create". When the user selects "Create" another text box "IP Address" appears where the user may enter domain name server to be configured. Configurable Data IP Address - Specifies the address of the domain name server. Non-Configurable Data Request - Specifies the number of DNS requests since last agent reboots.
Non-Configurable Data Domain Name List - The domain name associated with this record. IP address - The IP address associated with this record. TTL - The time to live reported by the name server. Flag - The flag of the record. Command Buttons Refresh - Refresh the page with the latest DNS cache entries. Clear All - Clear all entries in the DNS cache. 11.2.15.5 Configuring Hosts Configuration Page You can use this screen to change the configuration parameters for the static entry in the DNS table.
11.3 Switching Menu 11.3.1 Managing DHCP Snooping 11.3.1.1 Configuring DHCP Snooping Configuration Page Configurable Data DHCP Snooping Mode - Enables or disables the DHCP Snooping feature. The factory default is disabled. MAC Address Validation - Enables or disables the validation of sender MAC Address for DHCP Snooping. The factory default is enabled. Command Buttons Submit - Applies the new configuration and causes the changes to take effect.
Selection Criteria VLAN ID - Select the VLAN for which information to be displayed or configured for DHCP Snooping Application. Configurable Data DHCP Snooping Mode - Enables or disables the DHCP Snooping feature on selected VLAN. The factory default is disabled. Command Buttons Submit - Applies the new configuration and causes the changes to take effect. These changes will not be retained across a power cycle unless a save configuration is performed. 11.3.1.
11.3.1.4 Configuring DHCP Snooping Static Binding Configuration Page Configurable Data Slot/Port - Selects the interface to add a binding into the DHCP snooping database. MAC Address - Specify the MAC address for the binding to be added. This is the Key to the binding database. VLAN ID - Selects the VLAN from the list for the binding rule. The range of the VLAN ID is (1 to 3965). IP Address - Specify valid IP Address for the binding rule.
Dynamic Binding List - Lists all the DHCP snooping dynamic binding entries page by page. Ex: Page 1 displays first available up to 15 dynamic entries. Page 2 displays Next available up to 15 dynamic entries. Slot/Port - Interface MAC Address - MAC address VLAN ID - VLAN ID IP Address - IP address Lease Time - This is the remaining Lease time for the Dynamic entries Page - Lists the Number of Pages the dynamic binding entries occupied.
Time Out - Configure DHCP snooping bindings store timeout. The range of Time Out is (15 to 86400) . 0 is defined as an infinite duration. Write Delay - Configures the maximum write time to write the database into local or remote. The range of Write Delay is (15 to 86400). Command Buttons Submit - Applies the new configuration and causes the changes to take effect. These changes will not be retained across a power cycle unless a save configuration is performed. 11.3.1.
11.3.2 Managing IP Source Guard (IPSG) 11.3.2.1 Configuring IPSG Configuration Page Configurable Data IPSG - Enables or disables validation of Sender IP Address on this interface. If IPSG is Enabled Packets will not be forwarded if Sender IP Address is not in DHCP Snooping Binding database. The factory default is disabled. IPSG Port Security - Enables or disables the IPSG Port Security on the selected interface.
11.3.2.2 Configuring IPSG Static Binding Configuration Page Configurable Data Slot/Port - Selects the interface to add a binding into the IPSG database. MAC Address - Specify the MAC address for the binding. VLAN ID - Selects the VLAN from the list for the binding rule. IP Address - Specify valid IP Address for the binding rule. Non-configurable Data IPSG Static Binding List - Lists all the IPSG static binding entries page by page. Ex: Page 1 displays first 15 static entries.
IP Address -IP address Filter Type - This tells you the IPSG filtering Type. Page - Lists the Number of Pages the IPSG dynamic binding entries occupied. Select the Page Number from this list to display the particular Page entries. Command Buttons Add - Adds DHCP snooping binding entry into the database. Submit - Deletes selected static entries from the database. Refresh - Refresh the data on the screen with the present state of the data in the switch. 11.3.
11.3.3.2 Configuring DAI VLAN Configuration Page Selection Criteria VLAN List - Select the DAI Capable VLANs for which information has to be displayed or configured. Configurable Data Dynamic ARP Inspection - Indicates whether the Dynamic ARP Inspection is enabled on this VLAN. If this object is set to 'Enable' Dynamic ARP Inspection is enabled. If this object is set to 'Disable', Dynamic ARP Inspection is disabled.
11.3.3.3 Configuring DAI Interface Configuration Page Selection Criteria Slot/Port - Select the physical interface for which data is to be displayed or configured. Configurable Data Trusted State - Indicates whether the interface is trusted for Dynamic ARP Inspection purpose. If this object is set to 'Enable', the interface is trusted. ARP packets coming to this interface will be forwarded without checking. If this object is set to 'Disable', the interface is not trusted.
11.3.3.4 Configuring DAI ARP ACL Configuration Page Configurable Data ARP ACL Name - This is used to create New ARP ACL for DAI. Remove - This is used to select the particular ACLs which you want to delete. Non-Configurable Data ARP ACL Name - This will list all the configured ARP ACL List. Command Buttons Add - This is used to create New ARP ACL. Delete - This is used to delete the entries selected using checkbox under Remove field.
Selection Criteria ARP ACL Name - Select the ARP ACL for which information want to be displayed or configured. Configurable Data Sender IP Address - This is used to create new Rule for the Selected ARP ACL. This indicates Sender IP address match value for the ARP ACL. Sender MAC Address - This is used to create new Rule for the Selected ARP ACL. This indicates Sender MAC address match value for the ARP ACL. Remove - This is used to select the particular ACL Rules which you want to delete.
DHCP Permits - Number of ARP packets that were forwarded by DAI as there is a matching DHCP Snooping binding entry found. ACL Permits - Number of ARP packets that were permitted by DAI as there is a matching ARP ACL rule found for this VLAN. Bad Source MAC - Number of ARP packets that were dropped by DAI as the sender MAC address in ARP packet didn't match the source MAC in ethernet header.
01:80:C2:00:00:00 to 01:80:C2:00:00:0F 01:80:C2:00:00:20 to 01:80:C2:00:00:21 FF:FF:FF:FF:FF:FF Source Port Members - List the ports you want included in the inbound filter. If a packet with the MAC address and VLAN ID you selected is received on a port that is not in the list, it will be dropped. Command Buttons Submit - Update the switch with the values on the screen. If you want the switch to retain the new values across a power cycle you must perform a save.
Selection Criteria VLAN ID and Name - You can use this screen to reconfigure an existing VLAN, or to create a new one. Use this pull down menu to select one of the existing VLANs, or select 'Create' to add a new one. Participation - Use this field to specify whether a port will participate in this VLAN. The factory default is 'Autodetect'. The possible values are: Include - This port is always a member of this VLAN. This is equivalent to registration fixed in the IEEE 802.1Q standard.
this screen, its type will always be 'Static'. A VLAN that is created by GVRP registration initially has a type of 'Dynamic'. You may use this pull down menu to change its type to 'Static'. Non-Configurable Data Slot/Port - Indicates which port is associated with the fields on this line. Status - Indicates the current value of the participation parameter for the port. Command Buttons Submit - Update the switch with the values on this screen.
11.3.5.3 Configuring VLAN Port Configuration Page Selection Criteria Slot/Port - Select the physical interface for which you want to display or configure data. Select 'All' to set the parameters for all ports to same values. Acceptable Frame Types - Specify how you want the port to handle untagged and priority tagged frames. If you select 'VLAN only', the port will discard any untagged or priority tagged frames it receives.
11.3.5.4 Viewing VLAN Port Summary Page Non-Configurable Data Slot/Port - The interface. Port VLAN ID - The VLAN ID that this port will assign to untagged frames or priority tagged frames received on this port. Acceptable Frame Types - Specifies the types of frames that may be received on this port. The options are 'VLAN only' and 'Admit All'. When set to 'VLAN only', untagged frames or priority tagged frames received on this port are discarded.
11.3.5.5 Resetting VLAN Configuration Page Command Buttons Reset - If you select this button and confirm your selection on the next screen, all VLAN configuration parameters will be reset to their factory default values. Also, all VLANs, except for the default VLAN, will be deleted. The factory default values are: 11.3.6 All ports are assigned to the default VLAN of 1. All ports are configured with a PVID of 1. All ports are configured to an Acceptable Frame Types value of Admit All Frames.
Selection Criteria Group ID - The protected ports can be combined into a logical group. Traffic can flow between protected ports belonging to different groups, but not within the same group. The selection box lists all the possible protected port Group IDs supported for the current platform. The valid range of the Group ID is (0 to 2) . Configurable Data Group Name - It is a name associated with the protected ports group used for identification purposes.
Non-Configurable Data Group ID - The protected ports can be combined into a logical group. Traffic can flow between protected ports belonging to different groups, but not within the same group. The valid range of the Group ID is (0 to 2) . Group Name - Displays the alphanumeric string associated with a Group ID. Protected Ports - The display list consists of all the protected ports.
Selection Criteria Group ID - You can use this screen to reconfigure or delete an existing protocol-based VLAN, or create a new one. Use this pull down menu to select one of the existing PBVLANs, or select 'Create' to add a new one. A Group ID number will be assigned automatically when you create a new group. You can create up to 128 groups. Configurable Data Group Name - Use this field to assign a name to a new group. You may enter up to 16 characters.
Group ID - The number used to identify the group. It was automatically assigned when you created the group. Protocol(s) - The protocol(s) that belongs to the group. There are three configurable protocols: IP, IPX, and ARP. IP - IP is a network layer protocol that provides a connectionless service for the delivery of data. ARP - Address Resolution Protocol (ARP) is a low-level protocol that dynamically maps network layer addresses to physical medium access control (MAC) addresses.
Command Buttons Submit - Update the switch with the values on this screen. If you want the switch to retain the new values across a power cycle, you must perform a save. Delete - Delete an entry of IP Subnet to VLAN mapping. 11.3.8.2 Viewing IP Subnet-based VLAN Information Page Non-Configurable Data IP Address - The IP Address of the subnet that is being bound to a VLAN ID. Subnet Mask - Subnet mask of the IP Address bound to VLAN ID.
user is allowed to configure a MAC address mapping to a VLAN that has not been created on the system. Configurable Data MAC Address - Valid MAC Address which is to be bound to a VLAN ID. This field is configurable only when a MAC-based VLAN is created. VLAN ID - VLAN ID can be any number in the range of (1 to 3965). Command Buttons Submit - Update the switch with the values on this screen. If you want the switch to retain the new values across a power cycle, you must perform a save. 11.3.9.
11.3.10 Managing MAC-based Voice VLAN 11.3.10.1 Voice VLAN Administration Page Configurable Data VLAN ID - Sets the VLAN as a Voice VLAN. Admin Mode - Enables or disables the Voice VLAN function. Command Buttons Submit - Applies the new configuration and causes the changes to take effect. These changes will not be retained across a power cycle unless a save configuration is performed. 11.3.10.2 Voice VLAN Configuration Page Selection Criteria MAC Address - You can use this screen to create a new one.
01:80:C2:00:00:20 to 01:80:C2:00:00:21 01:00:5E:00:00:00 to 01:00:5E:FF:FF:FF 33:33:00:00:00:00 to 33:33:FF:FF:FF:FF FF:FF:FF:FF:FF:FF Configurable Data MAC Address - Specify the MAC Address for the new Voice VLAN. (You can only enter data in this field when you are creating a new Voice VLAN.). MAC Address Mask - Use this optional field to specify a mask for the Voice VLAN.
11.3.11 Managing Voice VLAN 11.3.11.1 Voice VLAN Configuration Page Use this menu to configure the parameters for Voice VLAN Configuration. Note that only a user with Read/Write access privileges may change the data on this screen. Selection Criteria Voice VLAN Admin Mode - Select the administrative mode for Voice VLAN for the switch from the pulldown menu. The default is disable. Unit/Slot/Port - Select the physical interface for which you want to configure data.
11.3.12 Defining GARP 11.3.12.1 Viewing GARP Information Page This screen shows the GARP Status for the switch and for the individual ports. Note that the timers are only relevant when the status for a port shows as enabled. Non-Configurable Data Switch GVRP - Indicates whether the GARP VLAN Registration Protocol administrative mode for this switch is enabled or disabled. The factory default is disabled.
will need to rejoin in order to maintain registration. An instance of this timer exists for each GARP participant for each port. The Leave All Period Timer is set to a random value in the range of LeaveAllTime to 1.5*LeaveAllTime. Permissible values are 200 to 6000 centiseconds (2 to 60 seconds). The factory default is 1000 centiseconds (10 seconds). 11.3.12.2 Configuring the whole Switch GARP Configuration Page ! It can take up to 10 seconds for GARP configuration changes to take effect.
11.3.12.3 Configuring each Port GARP Configuration Page ! It can take up to 10 seconds for GARP configuration changes to take effect. Selection Criteria Slot/Port - Select the physical interface for which data is to be displayed or configured. It is possible to set the parameters for all ports by selecting 'All'. Port GVRP Mode - Choose the GARP VLAN Registration Protocol administrative mode for the port by selecting enable or disable from the pull down menu.
Command Buttons Submit - Update the switch with the values you entered. If you want the switch to retain the new values across a power cycle you must perform a save. 11.3.13 Managing IGMP Snooping 11.3.13.1 Configuring IGMP Snooping Global Configuration Page Use this menu to configure the parameters for IGMP Snooping, which is used to build forwarding lists for multicast traffic. Note that only a user with Read/Write access privileges may change the data on this screen.
Command Buttons Submit - Update the switch with the values you entered. If you want the switch to retain the new values across a power cycle you must perform a save. You will only see this button if you have Read/Write access privileges. 11.3.13.2 Defining IGMP Snooping Interface Configuration Page Selection Criteria Slot/Port - The single select box lists all physical ,VLAN and LAG interfaces. Select the interface you want to configure.
11.3.13.3 Configuring IGMP Snooping VLAN Page Selection Criteria VLAN ID - Specifies list of VLAN IDs for which IGMP Snooping is enabled. Fast Leave Admin Mode - Enable or disable the Igmp Snooping Fast Leave Mode for the specified VLAN ID. Configurable Data VLAN ID - Appears when "New Entry" is selected in VLAN ID combo box. Specifies VLAN ID for which pre-configurable Snooping parameters are to be set. Admin Mode - Enable or disable the Igmp Snooping for the specified VLAN ID.
11.3.13.4 Viewing IGMP Snooping VLAN Status Page Non-Configurable Data VLAN ID - All Vlan Ids for which the IGMP Snooping mode is Enabled. Admin Mode - Igmp Snooping Mode for Vlan ID. Fast Leave Admin Mode - Fast Leave Mode for Vlan ID. Group Membership Interval - Group Membership Interval of IGMP Snooping for the specified VLAN ID. Valid range is 2 to 3600. Maximum Response Time - Maximum Response Time of IGMP Snooping for the specified VLAN ID. Valid range is 1 to 3599.
11.3.13.6 Viewing Multicast Router Statistics Page Selection Criteria Slot/Port - The single select box lists all physical and LAG interfaces. Select the interface for which you want to display the statistics. Non-Configurable Data Multicast Router - Specifies for the selected interface whether multicast router is enable or disabled. Command Buttons Refresh - Refetch the database and display it again starting with the first entry in the table. 11.3.13.
Selection Criteria Slot/Port - The select box lists all Slot/Ports.Select the interface for which you want Multicast Router to be enabled. Multicast Router - For the Vlan ID, multicast router may be enabled or disabled using this. Configurable Data VLAN ID - VLAN ID for which the Multicast Router Mode is to be Enabled or Disabled. Command Buttons Submit - Update the switch with the values you entered. 11.3.13.
Selection Criteria MAC Filter - This is the list of MAC address and VLAN ID pairings for all configured L2Mcast Groups. To change the port mask(s) for an existing L2Mcast Group, select the entry you want to change. To add a new L2Mcast Group, select "Create Filter" from the top of the list. VLAN ID - The VLAN ID used with the MAC address to fully identify packets you want L2Mcast Group. You can only change this field when you have selected the "Create Filter" option.
11.3.14 Managing IGMP Snooping Querier 11.3.14.1 Configuring IGMP Snooping Querier Configuration Page Use this menu to configure the parameters for IGMP Snooping Querier, Note that only a user with Read/Write access privileges may change the data on this screen. Selection Criteria Snooping Querier Admin Mode - Select the administrative mode for IGMP Snooping for the switch from the pulldown menu. The default is disable.
11.3.14.2 Configuring IGMP Snooping Querier VLAN Configuration Page Selection Criteria VLAN ID - Selects the VLAN ID on which IGMP Snooping Querier is enabled. Querier Election Participate Mode - Enable or disable the Igmp Snooping Querier participate in election mode. When this mode is disabled, up on seeing other querier of same version in the vlan, the snooping querier move to non querier state.
Configurable Data VLAN ID Search- Enter VLAN ID, then click on the search button. If the record exists, that entry will be displayed. An exact match is required. Non-Configurable Data Admin Mode - Display the administrative mode for IGMP Snooping for the switch. VLAN ID Search- Enter VLAN ID, then click on the search button. If the record exists, that entry will be displayed. An exact match is required. Querier Election Participate Mode - Displays the querier election participate mode on the VLAN.
Last Querier Version - Displays the IGMP protocol version of the last querier from which a query was snooped on the VLAN. Operational Max Response Time - Displays maximum response time to be used in the queries that are sent by the Snooping Querier. Command Buttons Refresh - Reload the information on the page. 11.3.15 Managing MLD Snooping 11.3.15.
Selection Criteria Admin Mode - Select the administrative mode for MLD Snooping for the switch from the pulldown menu. The default is disable. Non-Configurable Data Multicast Control Frame Count - The number of multicast control frames that are processed by the CPU. Interfaces Enabled for MLD Snooping - A list of all the interfaces currently enabled for MLD Snooping. Data Frames Forwarded by the CPU - The number of data frames forwarded by the CPU.
Multicast Router Present Expiration Time - Specify the amount of time you want the switch to wait to receive a query on an interface before removing it from the list of interfaces with multicast routers attached. Enter a value between 0 and 3600 seconds. The default is 0 seconds. A value of zero indicates an infinite timeout, i.e. no expiration. Command Buttons Submit - Update the switch with the values you entered.
11.3.15.4 Configuring MLD Snooping VLAN Status Page Non-Configurable Data VLAN ID - All Vlan Ids for which the MLD Snooping mode is Enabled. Admin Mode - MLD Snooping Mode for Vlan ID. Fast Leave Admin Mode - Fast Leave Mode for Vlan ID. Group Membership Interval - Group Membership Interval of MLD Snooping for the specified VLAN ID. Valid range is 2 to 3600. Maximum Response Time - Maximum Response Time of MLD Snooping for the specified VLAN ID. Valid range is 1 to 65.
11.3.15.6 Configuring Multicast Router Status Page Selection Criteria Slot/Port - The single select box lists all physical and LAG interfaces. Select the interface for which you want to display the status. Non-Configurable Data Multicast Router - Specifies for the selected interface whether multicast router is enable or disabled. Command Buttons Refresh - Re-fetch the database and display it again starting with the first entry in the table. 11.3.15.
11.3.15.8 Configuring Multicast Router VLAN Status Page Selection Criteria Slot/Port - The select box lists all Slot/Ports.Select the interface for which you want to display the status. Non-Configurable Data VLAN ID - All Vlan Ids for which the Multicast Router Mode is Enabled. Multicast Router - Multicast Router Mode for Vlan ID. Command Buttons Refresh - Re-fetch the database and display it again starting with the first entry in the table. 11.3.15.
You cannot define L2Mcast Group for these MAC addresses: 00:00:00:00:00:00 33:33:00:00:00:01 to 33:33:00:00:00:FF FF:FF:FF:FF:FF:FF Solt/Port(s) - List the ports you want included into L2Mcast Group. Command Buttons Submit - Update the switch with the values on the screen. If you want the switch to retain the new values across a power cycle you must perform a save. Delete - Remove the currently selected L2Mcast Group. 11.3.15.
11.3.16 Managing MLD Snooping Querier 11.3.16.1 Configuring MLD Snooping Querier Configuration Page Use this menu to configure the parameters for MLD Snooping Querier, Note that only a user with Read/Write access privileges may change the data on this screen. Selection Criteria Snooping Querier Admin Mode - Select the administrative mode for MLD Snooping for the switch from the pulldown menu. The default is disable.
11.3.16.2 Configuring MLD Snooping VLAN Configuration Page Selection Criteria VLAN ID - Selects the VLAN ID on which MLD Snooping Querier is enabled. Querier Election Participate Mode - Enable or disable the Igmp Snooping Querier participate in election mode. When this mode is disabled, up on seeing other querier of same version in the vlan, the snooping querier move to non querier state.
Non-Configurable Data VLAN ID - Specifies the VLAN ID on which MLD Snooping Querier is administratively enabled. Admin Mode - Display the administrative mode for MLD Snooping for the switch. Querier Election Participate Mode - Displays the querier election participate mode on the VLAN. When this mode is disabled, up on seeing a query of the same version in the vlan, the snooping querier move to non querier state.
Operational Max Response Time - Displays maximum response time to be used in the queries that are sent by the Snooping Querier. 11.3.17 Managing Port-Channel 11.3.17.1 Configuring Port-Channel Configuration Page Selection Criteria Port Channel Name – You can use this screen to reconfigure an existing Port Channel, or to create a new one. Use this pull down menu to select one of the existing Port Channels, or select 'Create' to add a new one. There can be a maximum of 6 Port Channels.
Source and destination MAC address - Sets the mode on the source and destination MAC addresses. Source IP address - Sets the mode on the source IP address. Destination IP address - Sets the mode on the destination IP address. Source and destination IP address - Sets the mode on the source and destination IP addresses. Participation - For each port specify whether it is to be included as a member of this Port Channel or not. The default is excluded.
Port Channel Type - The type of this Port Channel. Admin Mode - The Administrative Mode of the Port Channel, enable or disable. Link Status - Indicates whether the Link is up or down. STP Mode - The Spanning Tree Protocol Administrative Mode associated with the Port Channel. The possible values are: Disable - spanning tree is disabled for this Port Channel. Enable - spanning tree is enabled for this Port Channel. Static Mode – Indicates whether port channel is static or dynamic.
Configurable Data MAC Address - Enter the VLAN ID - MAC Address pair whose MFDB table entry you want displayed. Enter eight two-digit hexadecimal numbers separated by colons, for example 00:01:23:43:45:67:89:AB. The first two two-digit hexadecimal numbers are the VLAN ID and the remaining numbers are the MAC address. Then click on the "Search" button. If the address exists, that entry will be displayed. An exact match is required.
Command Buttons Refresh - Refresh the data on the screen with the present state of the data in the switch. 11.3.18.3 Viewing IGMP Snooping MFDB Table Page Non-Configurable Data MAC Address - A VLAN ID - multicast MAC address pair for which the switch has forwarding and/or filtering information. The format is 8 two-digit hexadecimal numbers that are separated by colons, for example 00:01:23:45:67:89:AB:CD. Type - This displays the type of the entry. Static entries are those that are configured by the user.
Description - The text description of this multicast table entry. Possible values are Management Configured, Network Configured and Network Assisted. Slot/Port(s) - The list of interfaces that are designated for forwarding (Fwd:) and filtering (Flt:). Command Buttons Clear Entries - Clicking this button tells the MLD Snooping component to delete all of its entries from the multicast forwarding database. Refresh - Refresh the data on the screen with the present state of the data in the switch. 11.3.18.
Selection Criteria Spanning Tree Mode - Specifies whether spanning tree operation is enabled on the switch. Value is enabled or disabled Spanning Tree Forward BPDU - Specifies whether spanning tree for BPDU is enabled on the switch. Value is enabled or disabled. Force Protocol Version - Specifies the Force Protocol Version parameter for the switch. The options are IEEE 802.1d, IEEE 802.1w, and IEEE 802.1s The default value is IEEE 802.1w.
Selection Criteria BPDU Guard - Specifies whether BPDU Guard is enabled for the Common and Internal Spanning tree (CST). Value is enabled or disabled BPDU Filter - Specifies whether BPDU Filter is enabled for the Common and Internal Spanning tree (CST). Value is enabled or disabled Configurable Data Bridge Priority - Specifies the bridge priority for the Common and Internal Spanning tree (CST). The value lies between 0 and 61440. It is set in multiples of 4096.
11.3.19.3 Configuring Spanning Tree MST Configuration Page Selection Criteria MST ID - Create a new MST which you wish to configure or configure already existing MSTs. Configurable Data MST ID - This is only visible when the select option of the MST ID select box is selected. The ID of the MST being created. Valid values for this are between 1 and 4054. Priority - The bridge priority for the MST instance selected. The bridge priority is set in multiples of 4096.
Command Buttons Submit - Applies the new configuration and causes the changes to take effect. These changes will not be retained across a power cycle unless a save configuration is performed. Delete - Deletes the selected MST instance. All VLANs associated with the instance are associated with the CST Refresh - Refreshes the screen with most recent data. 11.3.19.
Selection Criteria Slot/Port - Selects one of the physical or LAG interfaces associated with VLANs associated with the CST. Admin Edge Port - Specifies if the specified port is an Edge Port within the CIST. It takes a value of Enable or Disable, where the default value is Disable. BPDU Guard - Specifies whether BPDU Guard is enabled for the Common and Internal Spanning tree (CST).
Designated Root - Root Bridge for the CST. It is made up using the bridge priority and the base MAC address of the bridge. Designated Cost - Path Cost offered to the LAN by the Designated Port. Designated Bridge - Bridge Identifier of the bridge with the Designated Port. It is made up using the bridge priority and the base MAC address of the bridge. Designated Port - Port Identifier on the Designated Bridge that offers the lowest cost to the LAN.
Selection Criteria MST ID - Selects one MST instance from existing MST instances. Slot/Port - Selects one of the physical or LAG interfaces associated with VLANs associated with the selected MST instance. Configurable Data Port Priority - The priority for a particular port within the selected MST instance. The port priority is set in multiples of 16. For example, if you set the priority to any value between 0 and 15, it will be set to 0.
11.3.19.6 Viewing Spanning Tree Statistics Page Selection Criteria Slot/Port - Selects one of the physical or LAG interfaces of the switch. Non-Configurable Data STP BPDUs Received - Number of STP BPDUs received at the selected port. STP BPDUs Transmitted - Number of STP BPDUs transmitted from the selected port. RSTP BPDUs Received - Number of RSTP BPDUs received at the selected port. RSTP BPDUs Transmitted - Number of RSTP BPDUs transmitted from the selected port.
Selection Criteria Slot/Port - Select the physical interface for which you want to display or configure data. Select 'All' to set the parameters for all ports to the same values. Configurable Data Traffic Class - Specify which internal traffic class to map the corresponding 802.1p priority. Non-Configurable Data 802.1p Priority - Displays the 802.1p priority to be mapped. Command Buttons Submit - Update the switch with the values on this screen.
11.3.21.2 Configuring Port Security Interface Page Selection Criteria Slot/Port - Selects the interface to be configured. Port Security - Enables or disables the Port Security feature for the selected interface. Enable violation traps- Enables or disables the sending of new violation traps designating when a packet with a disallowed MAC address is received on a locked port. Enable violation Shutdown- Enables or disables the Port Security Violation Shutdown mode for the selected interface.
11.3.21.3 Deleting Port Security Statically Configured MAC Address Page Selection Criteria Slot/Port - Select the physical interface for which you want to display data. Configurable data Delete a Static MAC Address - Accepts user input for the MAC address to be deleted. VLAN ID - Accepts user input for the VLAN ID corresponding to the MAC address being deleted. Non-configurable data MAC Address - Displays the user specified statically locked MAC address.
11.3.21.5 Viewing Port Security Violation Status Page Selection Criteria Slot/Port - Select the physical interface for which you want to display data. Non-configurable data Last Violation MAC Address - Displays the source MAC address of the last packet that was discarded at a locked port. VLAN ID - Displays the VLAN ID corresponding to the Last Violation MAC address. 11.3.21.
11.3.22 Managing LLDP 11.3.22.1 Configuring LLDP Global Configuration Page Configurable Data Transmit Interval - Specifies the interval in seconds to transmit LLDP frames. The range is from (1 to 32768) . Default value is 30 seconds. Transmit Delay - Specifies the transmit delay in seconds. The range is from (1 to 8192) . Default value is 2 seconds. Hold Multiplier - Specifies the multiplier on Transmit Interval to assign TTL. The range is from (2 to 10). Default value is 4.
11.3.22.2 Configuring LLDP Interface Configuration Page Selection Criteria Interface - Specifies the list of ports on which LLDP - 802.1AB can be configured. Transmit - Specifies the LLDP - 802.1AB transmit mode for the selected interface. Receive - Specifies the LLDP - 802.1AB receive mode for the selected interface. Notify - Specifies the LLDP - 802.1AB notification mode for the selected interface.
11.3.22.3 Viewing LLDP Interface Summary Page Non-Configurable Data Interface - Specifies all the ports on which LLDP - 802.1AB can be configured. Link Status - Specifies the Link Status of the ports whether it is Up/Down. Transmit - Specifies the LLDP - 802.1AB transmit mode of the interface. Receive - Specifies the LLDP - 802.1AB receive mode of the interface. Notify - Specifies the LLDP - 802.1AB notification mode of the interface. Optional TLV(s) - Specifies the LLDP - 802.
11.3.22.4 Viewing LLDP Statistics Page Non-Configurable Data Last Update - Specifies the time when an entry was created, modified or deleted in the tables associated with the remote system. Total Inserts - Specifies the number of times the complete set of information advertised by a particular MAC Service Access Point (MSAP) has been inserted into tables associated with the remote systems.
TLV MED - Specifies the total number of LLDP-MED TLVs received on the local ports. TLV 802.1 - Specifies the total 802.1. number of LLDP TLVs received on the local ports which are of type TLV 802.3 - Specifies the total number of LLDP TLVs received on the local ports which are of type 802.3. Command Buttons Refresh - Updates the information on the page. Clear - Clears LLDP Statistics of all the interfaces. 11.3.22.
Port Description - Specifies the description of the selected port associated with the local system. System Capabilities Supported - Specifies the system capabilities of the local system. System Capabilities Enabled - Specifies the system capabilities of the local system which are supported and enabled. Management Address - Specifies the advertised management address of the local system. Management Address Type - Specifies the type of the management address.
Command Buttons Refresh - Updates the information on the page. 11.3.22.7 Viewing LLDP Remote Device Information Page Selection Criteria Local Interface - Specifies all the local ports which can receive LLDP frames. Non-Configurable Data Remote ID - Specifies the remote client identifier assigned to the remote system. Chassis ID Subtype - Specifies the source of the chassis identifier. Chassis ID - Specifies the chassis component associated with the remote system.
Port Description - Specifies the description of the given port associated with the remote system. System Capabilities Supported - Specifies the system capabilities of the remote system. System Capabilities Enabled - Specifies the system capabilities of the remote system which are supported and enabled. Time to Live - Specifies the Time To Live value in seconds of the received remote entry. Management Address Management Address - Specifies the advertised management address of the remote system.
Non-Configurable Data Local Interface - Specifies the local port which can receive LLDP frames advertised by a remote system. Chassis ID - Specifies the chassis component associated with the remote system. Port ID - Specifies the port component associated with the remote system. System Name - Specifies the system name of the remote system. Remote Comparison - Display the result of comparison between LLDP local and remote devices information. Command Buttons Refresh - Updates the information on the page.
11.3.23.2 Configuring LLDP-MED Interface Configuration Page Selection Criteria Interface - Specifies the list of ports on which LLDP-MED - 802.1AB can be configured. 'All' option is provided to configure all interfaces on the DUT and to be consistent with CLI. To view the summary of all interfaces refer to 'Interface Summary' webpage. Interface configuration page will not be able to display summary of 'All' interfaces, summary of individual interfaces is visible from 'Interface Configuration' webpage.
11.3.23.3 Configuring LLDP-MED Interface Summary Page Non-Configurable Data Interface - Specifies all the ports on which LLDP-MED can be configured. Link Status - Specifies the link status of the ports whether it is Up/Down. MED Status - Specifies the LLDP-MED mode is enabled or disabled on this interface. Operational Status - Specifies the LLDP-MED TLVs are transmitted or not on this interface. Notification Status - Specifies the LLDP-MED topology notification mode of the interface.
Selection Criteria Interface - Specifies the list of all the ports on which LLDP-MED frames can be transmitted. Non-Configurable Data Network Policy Information - Specifies if network policy TLV is present in the LLDP frames. Media Application Type - Specifies the application type. Types of application types are unknown, voicesignaling, guestvoice, guestvoicesignalling, softphonevoice, videoconferencing, streammingvideo, vidoesignalling.
11.3.23.5 Configuring LLDP-MED Remote Device Information Page Selection Criteria Local Interface - Specifies the list of all the ports on which LLDP-MED is enabled. Non-Configurable Data Capability Information - Specifies the supported and enabled capabilities that was received in MED TLV on this port. Supported Capabilities - Specifies supported capabilities that was received in MED TLV on this port. Enabled Capabilities - Specifies enabled capabilities that was received in MED TLV on this port.
Media Application Type - Specifies the application type. Types of application types are unknown, voicesignaling, guestvoice, guestvoicesignalling, softphonevoice, videoconferencing, streammingvideo, vidoesignalling. Each application type that is received has the VLAN id, priority, DSCP, tagged bit status and unknown bit status. A port may receive one or many such application types. If a network policy TLV has been receive on this port only then would this information be displayed.
11.3.24 Managing VTP 11.3.24.1 Configuring VTP Configuration Page Selection Criteria Admin Mode - Enable or disable the VTP feature. Device Mode - Use the pulldown menu to select the VTP device mode(client, server and transparent). The default operational mode of VTP device is "server". Pruning Mode - Enable or disable the VTP pruning mode. V2 Mode - Enable or disable the VTP version 2 mode. Trunkport - Enable or disable the VTP trunkport for specified interface.
11.3.24.2 Viewing VTP Status Page Non-configurable data VTP Status - Displays the VTP Status. VTP Version - Displays the VTP version operating on the switch. Configuration Revision - Displays the current configuration revision number on this switch. Maximum VTP supported VLANs - Maximum number of VLANs supported locally. Support VLAN number - Number of existing VLANs. Operating mode - Displays VTP operating mode. Domain Name - Displays the name that identifies the administrative domain for the switch.
11.3.25 Managing Link State 11.3.25.1 Configuring Link State Configuration Page Selection Criteria Admin Mode - Choose the link state administrative mode for the switch by selecting enable or disable from the pull-down menu. The factory default is disabled. Group ID – You can use this screen to reconfigure an existing group or to create a new one. Use this pull-down menu to select one of the existing groups or select 'Create' to add a new one.
Selection Criteria Admin Mode - The administrative mode of the link state function. Group ID - The group identify of the link state. The range of the group ID is 1 ~ 6. Mode - The administrative mode of the group. Upstream port - The monitored uplink port, and the link state of this uplink port. Downstream ports - The downlink ports for link state. Command Buttons Refresh - Refresh the data on the screen with the present state of the data in the switch. 11.3.26 Managing Port-Backup 11.3.26.
Group Mode - Choose the group administrative mode for the switch by selecting enable or disable from the pull-down menu. The factory default is disabled. You could enable this group as active port and backup port are configured. Active port - Configure the active port for a group. 6 port pair for six 1Gbps are configurable for active port. Backup port - Choose the backup port for a group. 6 port pair for six 1Gbps are configurable for backup port.
11.3.27 Managing FIP-Snooping 11.3.27.1 Configuring FIP-Snooping Configuration Selection Criteria Admin Mode - Enable/Disable FIP Snooping function. Enable - Enable FIP Snooping and start the FIP Snooping process. Disable - Disable ETS and stop the ETS process. The system's default FIP Snooping admin mode is disabled. Vlan ID - Configure Vlans the FIP packets will be snooped. Command Buttons Submit - Send the updated configuration to the switch. Configuration changes take effect immediately.
FC ID - ID number of the virtual port that was created by the FCF when the ENode logged into the network. FIP Snooping FCFs Interface - Name of the interface to which the FCoE Forwarder (FCF) is connected. VLAN - ID number of the VLAN to which the FCF belongs. FCMAP - May FC-Map value used by the FCF. The default value is 0xEFC00. FCF MAC - MAC address of the FCF. Name ID - Name ID. Fabric Name - Name of the FCF.
Command Buttons Submit - Update the switch with the values on this screen. If you want the switch to retain the new values across a power cycle, you must perform a save. Delete - Allows the user to remove specified static entry from the ARP Table. Delete All - Allows the user to remove all static entries from the ARP Table. 11.4.1.2 Configuring ARP Table You can use this panel to change the configuration parameters for the Address Resolution Protocol Table.
Dynamic Renew - This controls whether the ARP component automatically attempts to renew ARP Entries of type Dynamic when they age out. The default setting is Enable. Remove from Table - Allows the user to remove certain entries from the ARP Table. The choices listed specify the type of ARP Entry to be deleted: All Dynamic Entries All Dynamic and Gateway Entries Specific Dynamic/Gateway Entry - Selecting this allows the user to specify the required IP Address.
11.4.2 Managing IP Interfaces 11.4.2.1 Configuring IP Use this menu to configure routing parameters for the switch as opposed to an interface. Selection Criteria Routing Mode - Select enable or disable from the pulldown menu. You must enable routing for the switch before you can route through any of the interfaces. The default value is disable. IP Forwarding Mode - Select enable or disable from the pulldown menu. This enables or disables the forwarding of IP frames. The default value is enable.
Non-Configurable Data IpInReceives - The total number of input datagrams received from interfaces, including those received in error. IpInHdrErrors - The number of input datagrams discarded due to errors in their IP headers, including bad checksums, version number mismatch, other format errors, time-to-live exceeded, errors discovered in processing their IP options, etc.
IpForwDatagrams - The number of input datagrams for which this entity was not their final IP destination, as a result of which an attempt was made to find a route to forward them to that final destination. In entities which do not act as IP Gateways, this counter will include only those packets which were Source-Routed via this entity, and the Source-Route option processing was successful.
IcmpInRedirects - The number of ICMP Redirect messages received. IcmpInEchos - The number of ICMP Echo (request) messages received. IcmpInEchoReps - The number of ICMP Echo Reply messages received. IcmpInTimestamps - The number of ICMP Timestamp (request) messages received. IcmpInTimestampReps - The number of ICMP Timestamp Reply messages received. IcmpInAddrMasks - The number of ICMP Address Mask Request messages received. IcmpInAddrMaskReps - The number of ICMP Address Mask Reply messages received.
11.4.2.3 Configuring IP Interfaces Selection Criteria Slot/Port - Select the interface for which data is to be displayed or configured. Routing Mode - Setting this enables or disables routing for an interface. The default value is enable. Administrative Mode - The Administrative Mode of the interface. The default value is enable. Forward Net Directed Broadcasts - Select how network directed broadcast packets should be handled.
Non-Configurable Data Active State - The state of the specified interface is either Active or Inactive. An interface is considered active if it the link is up and it is in forwarding state. MAC Address - The burned-in physical address of the specified interface. The format is six two-digit hexadecimal numbers separated by colons, for example 00:06:29:32:81:40. Link Speed Data Rate - An integer representing the physical link data rate of the specified interface.
Configurable Data Router ID - The 32 bit integer in dotted decimal format that uniquely identifies the router within the autonomous system (AS). If you want to change the Router ID you must first disable OSPF. After you set the new Router ID, you must re-enable OSPF to have the change take effect. The default value is 0.0.0.0, although this is not a valid Router ID. OSPF Admin Mode* - Select enable or disable from the pulldown menu. If you select enable OSPF will be activated for the switch.
ABR Status - The values of this are enabled or disabled. Enabled implies that the router is an area border router. Disabled implies that it is not an area border router. External LSA Count - The number of external (LS type 5) LSAs (link state advertisements) in the link state database. External LSA Checksum - The sum of the LS checksums of the external LSAs (link state advertisements) contained in the link-state database.
same destination. If you select Enable, the preference rules will be those defined by RFC 1583. If you select Disable, the preference rules will be those defined in Section 16.4.1 of RFC 2328. The newer preference rules prevent routing loops when AS-external-LSAs for the same destination have been originated from different areas. The default value is Enable. All routers in the OSPF domain must be configured the same.
router LSAs, setting the cost of all non-stub interfaces to infinity. To restore OSPF to normal operation, disable and re-enable OSPF. External LSDB Overflow - When the number of non-default external LSAs exceeds the configured limit, External LSDB Limit, OSPF goes into LSDB overflow state. In this state, OSPF withdraws all of its self-originated non-default external LSAs. After the Exit Overflow Interval, OSPF leaves the overflow state, if the number of external LSAs has been reduced.
Metric Value - Set the metric value you want applied for the default route advertised into the area. Valid values range from 1 to 16,777,215. Import Summary LSAs - Whether the import of Summary LSAs is enabled or disabled. Command Buttons Refresh - Refresh the data on the screen to the current values from the switch. 11.4.3.4 Configuring Area Range Selection Criteria Area ID - Selects the area for which data is to be configured.
11.4.3.5 View Interface Statistics This panel displays statistics for the selected interface. The information will be displayed only if OSPF is enabled. Selection Criteria Slot/Port - Select the interface for which data is to be displayed.
OSPF Area ID - The OSPF area to which the selected router interface belongs. An OSPF Area ID is a 32 bit integer in dotted decimal format that uniquely identifies the area to which the interface connects. Area Border Router Count - The total number of area border routers reachable within this area. This is initially zero, and is calculated in each SPF Pass. AS Border Router Count - The total number of Autonomous System border routers reachable within this area.
Hellos Sent - The number of Hello packets sent on this interface by this router. Hellos Received - The number of Hello packets received on this interface by this router. DD Packets Sent - The number of Database Description packets sent on this interface by this router. DD Packets Received - The number of Database Description packets received on this interface by this router. LS Requests Sent - The number of LS Requests sent on this interface by this router.
Selection Criteria Slot/Port - Select the interface for which data is to be displayed or configured. Configurable Data OSPF Area ID - Enter the 32 bit integer in dotted decimal format that uniquely identifies the OSPF area to which the selected router interface connects. If you assign an Area ID which does not exist, the area will be created with default values. Leave blank to disable. Router Priority - Enter the OSPF priority for the selected interface.
authentication you cannot use a key of more than 8 octets. If you choose 'encrypt' the key may be up to 16 octets long. The key value will only be displayed if you are logged on with Read/Write privileges, otherwise it will be displayed as asterisks. Authentication Key ID - Enter the ID to be used for authentication. You will only be prompted to enter an ID when you select 'Encrypt' as the authentication type. The ID is a number between 0 ad 255, inclusive.
The State is only displayed if the OSPF admin mode is enabled. Designated Router - The identity of the Designated Router for this network, in the view of the advertising router. The Designated Router is identified here by its router ID. The value 0.0.0.0 means that there is no Designated Router. This field is only displayed if the OSPF admin mode is enabled. Backup Designated Router - The identity of the Backup Designated Router for this network, in the view of the advertising router.
Command Buttons Refresh - Refresh the data on the screen with the present state of the data in the switch. 11.4.3.8 Configuring OSPF Neighbor This panel displays the OSPF neighbor configuration for a selected neighbor ID. When a particular neighbor ID is specified, detailed information about a neighbor is given. The information below will only be displayed if OSPF is enabled and the interface has a neighbor. The IP address is the IP address of the neighbor.
Attempt - This state is only valid for neighbors attached to NBMA networks. It indicates that no recent information has been received from the neighbor, but that a more concerted effort should be made to contact the neighbor. This is done by sending the neighbor Hello packets at intervals of Hello Interval. Init - In this state, a Hello packet has recently been seen from the neighbor. However, bidirectional communication has not yet been established with the neighbor (i.e.
Non-Configurable Data Router ID - The 32 bit integer in dotted decimal format that uniquely identifies the router within the autonomous system (AS). The Router ID is set on the IP Configuration page. If you want to change the Router ID you must first disable OSPF. After you set the new Router ID, you must re-enable OSPF to have the change take effect. The default value is 0.0.0.0, although this is not a valid Router ID. Area ID - The ID of an OSPF area to which one of the router interfaces is connected.
11.4.3.10 Configuring OSPF Virtual Link Selection Criteria Create New Virtual Link - Select this option from the dropdown menu to define a new virtual link. The area portion of the virtual link identification is fixed: you will be prompted to enter the Neighbor Router ID on a new screen. Area ID and Neighbor Router ID - Select the virtual link for which you want to display or configure data. It consists of the Area ID and Neighbor Router ID.
Encrypt - If you select 'Encrypt' you will be prompted to enter both an authentication key and an authentication ID. Encryption uses the MD5 Message-Digest algorithm. All routers on the network must be configured with the same key and ID. Authentication Key - Enter the OSPF Authentication Key for the specified interface. If you do not choose to use authentication you will not be prompted to enter a key. If you choose 'simple' authentication you cannot use a key of more than 8 octets.
11.4.3.11 Viewing OSPF Virtual Link Summary Table Non-Configurable Data Area ID - The Area ID portion of the virtual link identification for which data is to be displayed. The Area ID and Neighbor Router ID together define a virtual link. Neighbor Router ID - The neighbor portion of the virtual link identification. Virtual links may be configured between any pair of area border routers having interfaces to a common (non-backbone) area.
Configurable Data Configured Source - This select box is a dynamic selector and would be populated by only those Source Routes that have already been configured for redistribute by OSPF. However, the topmost option in the select box would be "Create", and this allows the user to configure another, among the Available Source Routes. The valid values are 'Static', 'Connected', 'RIP' and 'Create'.
Delete - Delete the entry of the Source Route selected as Configured Source from the list of Sources configured for OSPF Route Redistribution. 11.4.3.13 Viewing OSPF Route Redistribution Summary Information This screen displays the OSPF Route Redistribution Configurations. Non-Configurable Data Source - The Source Route to be Redistributed by OSPF. Metric- The Metric of redistributed routes for the given Source Route. Display "Unconfigured" when not configured.
11.4.4 Managing BOOTP/DHCP Relay Agent 11.4.4.1 Configuring BOOTP/DHCP Relay Agent Configurable Data Maximum Hop Count - Enter the maximum number of hops a client request can take before being discarded. Admin Mode - Select enable or disable from the pulldown menu. When you select 'enable' BOOTP/DHCP requests will be forwarded to the IP address you entered in the 'Server IP address' field. Minimum Wait Time (secs)- Enter a time in seconds.
Admin Mode - Administrative mode of the relay. When you select 'enable' BOOTP/DHCP requests will be forwarded to the IP address you entered in the 'Server IP address' field. Minimum Wait Time (secs) - The Minimum time in seconds. This value will be compared to the time stamp in the client's request packets, which should represent the time since the client was powered up. Packets will only be forwarded when the time stamp exceeds the minimum wait time.
Simple - a route will not be included in updates sent to the router from which it was learned. Poisoned reverse - a route will be included in updates sent to the router from which it was learned, but the metric will be set to infinity. The default is simple. Auto Summary Mode - Select enable or disable from the pulldown menu. If you select enable groups of adjacent routes will be summarized into single entries, in order to reduce the total number of entries. The default is disabled.
The default is RIP-2. Receive Version - Which RIP version control packets will be accepted by the interface. The value is one of the following: RIP-1 - only RIP version 1 formatted packets will be received. RIP-2 - only RIP version 2 formatted packets will be received. Both - packets will be received in either format. None - no RIP control packets will be received. The default is Both. RIP Admin Mode - Whether RIP is enabled or disabled on the interface. Link State - Whether the RIP interface is up or down.
None - no RIP control packets will be sent. The default is RIP-2. Receive Version - Select what RIP control packets the interface will accept from the pulldown menu. The value is one of the following: RIP-1 - accept only RIP version 1 formatted packets. RIP-2 - accept only RIP version 2 formatted packets. Both - accept packets in either format. None - no RIP control packets will be accepted. The default is Both. RIP Admin Mode - Select enable or disable from the pulldown menu.
11.4.5.4 Configuring Route Redistribution Configuration This screen can be used to configure the RIP Route Redistribution parameters. The allowable values for each field are displayed next to the field. If any invalid values are entered, an alert message will be displayed with the list of all the valid values. Configurable Data Configured Source - This select box is a dynamic selector and would be populated by only those Source Routes that have already been configured for redistribute by RIP.
External 2 - Sets External Type 2 OSPF Routes to be redistributed NSSA-External 1 - Sets NSSA External Type 1 OSPF Routes to be redistributed NSSA-External 2 - Sets NSSA External Type 2 OSPF Routes to be redistributed The default is Internal. Distribute List - Distribute List - Sets the Access List that filters the routes to be redistributed by the destination protocol. Only permitted routes are redistributed. If this command refers to a non-existent access list, all routes are permitted.
Metric- The Metric of redistributed routes for the given Source Route. Displays "Unconfigured" when not configured. Match - List of Routes redistributed when "OSPF" is selected as Source. The list may include one or more of: Internal External 1 External 2 NSSA-External 1 NSSA-External 2 Distribute List - The Access List that filters the routes to be redistributed by the Destination Protocol. Displays 0 when not configured.
Minimum Advertise Interval (secs) - Enter the minimum time (in seconds) allowed between router advertisements sent from the interface. Advertise Lifetime (secs) - Enter the value (in seconds) to be used as the lifetime field in router advertisements sent from the interface. This is the maximum length of time that the advertised addresses are to be considered as valid router addresses by hosts.
Minimum Advertise Interval (secs) - The minimum time (in seconds) allowed between router advertisements sent from the interface. Advertise Lifetime (secs) - The value (in seconds) used as the lifetime field in router advertisements sent from the interface. This is the maximum length of time that the advertised addresses are to be considered as valid router addresses by hosts. Preference Level - The preference level of the router as a default router relative to other routers on the same subnet.
Command Buttons Refresh - Refresh the data on the screen with the present state of the data in the switch. 11.4.7.2 Viewing Router Best Route Table Non-Configurable Data Network Address - The IP route prefix for the destination. Subnet Mask - Also referred to as the subnet/network mask, this indicates the portion of the IP interface address that identifies the attached network. Protocol - This field tells which protocol created the specified route.
11.4.7.3 Configuring Router Static Route Entry Selection Criteria Network Address - Specifies the IP route prefix for the destination. In order to create a route a valid routing interface must exist and the next hop IP Address must be on the same network as the routing interface. Routing interfaces are created on the IP Interface Configuration page. Valid next hop IP Addresses can be viewed on the 'Route Table' screen.
11.4.7.4 Configuring (Static) Routes Entry Selection Criteria Route Type - This field can be either default or static or static reject. If creating a default route, all that needs to be specified is the next hop IP address, otherwise each field needs to be specified. Configurable Data Network Address - The IP route prefix for the destination. Subnet Mask - Also referred to as the subnet/network mask, this indicates the portion of the IP interface address that identifies the attached network.
11.4.7.5 Configuring Router Route Preference Use the Route Preferences Configuration page to configure the default preference for each protocol. These values arearbitrary values that range from 1 to 255, and are independent of route metrics. Most routing protocols use a route metric todetermine the shortest path known to the protocol, independent of any other protocol. Routes with a preference of 255 arenot used for forwarding.
Non-Configurable Data Local - This field displays the local route preference value. Command Buttons Submit - Send the updated configuration to the switch. Configuration changes take effect immediately. These changes will not be retained across a power cycle unless a save is performed. 11.4.8 Managing VLAN Routing 11.4.8.1 Configuring VLAN Routing Selection Criteria VLAN ID - Enter the ID of a VLAN you want to configure for VLAN Routing. Initially, the field will display the ID of the first VLAN.
Select the Submit button. Change back to the VLAN Routing Summary page. The new VLAN should appear in the table with the correct IP address and subnet mask assigned. 11.4.8.
11.4.9.2 Configuring Virtual Router Selection Criteria VRID and Slot/Port - Select 'Create' from the pulldown menu to configure a new Virtual Router, or select one of the existing Virtual Routers, listed by interface number and VRID. Configurable Data VRID - This field is only configurable if you are creating new Virtual Router, in which case enter the VRID in the range 1 to 255 .
Authentication Type - Select the type of Authentication for the Virtual Router from the pulldown menu. The default is None. The choices are: 0-None - No authentication will be performed. 1-Key - Authentication will be performed using a text password. Authentication Data - If you selected simple authentication, enter the password. Status - Select active or inactive from the pulldown menu to start or stop the operation of the Virtual Router. The default is inactive.
Non-Configurable Data Slot/Port - The interface for which data is to be displayed or configured. Virtual Router ID - The Virtual Router ID for which data is to be displayed or configured. Primary IP Address - The Primary IP Address of the Virtual Router. Command Buttons Submit - Update the switch with the values on this screen. If you want the switch to retain the new values across a power cycle, you must perform a save.
Cancel - Return to the Virtual Router Configuration screen. 11.4.9.5 Configuring VRRP Track Interface Selection Criteria Track Slot/Port - Displays all routing interface which are not yet tracked for this vrid and interface configuration. Exception to this loopback and tunnels could not be tracked. Configurable Data Priority Decrement - The priority decrement for the tracked interface. The valid range is 1 -254. default value is 10.
Configurable Data Priority Decrement - Enter the priority decrement for the tracked Route. The valid range is 1 -254. default value is 10. Remove - Removes the selected Tracking Routes from the VRRP tracked list. Non-Configurable Data Slot/Port - The VRRP interface for which Tracking data is to be displayed. Virtual Router ID - he Virtual Router ID for which Tracking data is to be displayed. S.No - The serial number for this row. Tracking Route Pfx - The Prefix of the tracked route.
Virtual Router ID - The Virtual Router ID for which data is to be displayed. Command Buttons Submit - Send the updated configuration to the router. Configuration changes take effect immediately. These changes will not be retained across a power cycle unless a save is performed. Cancel - Return to the VRRP Route Tracking Configuration screen. 11.4.9.8 Viewing Virtual Router Status Non-Configurable Data VRID - Virtual Router Identifier. Slot/Port - Indicates the interface associate with the VRID.
Simple State - The current state of the Virtual Router: Initialize Master Backup Status - The current status of the Virtual Router: Inactive Active Secondary IP Address - The secondary IP address. Command Buttons Refresh - Refresh the data on the screen with the present state of the data in the switch. 11.4.9.
Router Version Errors - The total number of VRRP packets received with an unknown or unsupported version number. Router VRID Errors - The total number of VRRP packets received with an invalid VRID for this virtual router. VRID - the VRID for the selected Virtual Router. Slot/Port - The Slot/Port for the selected Virtual Router. Up Time - The time, in days, hours, minutes and seconds, that has elapsed since the virtual router transitioned to the initialized state.
Configurable Data Tunnel - Select list of currently configured tunnel interfaces. Create is also a valid choice if the maximum number of tunnel interfaces has not been created. Tunnel ID - When 'Create' is chosen from the tunnel selector this list of available tunnel ID's becomes visible. Mode - Selector for the Tunnel mode. The supported modes are 6-in-4-configured and 6-to-4. IPv6 Implicit Mode - Enable IPv6 on this interface using the IPv6 address.
Non-Configurable Data Tunnel ID - The Tunnel ID. Mode - The corresponding mode of the Tunnel. Address - The IPv6 Address(es) of the Tunnel. Source - The corresponding Tunnel Source Address. In the case where an interface has been configured both the interface and the address are displayed. If the source interface has no address configured the text 'unconfigured' is displayed in place of the address. Destination - The corresponding Tunnel Destination Address.
IPv6 Mode - Enable IPv6 on this interface using the IPv6 address. This option is only configurable prior to specifying an explicit IPv6 address. IPv6 Address - Select list of configured IPv6 addresses for the selected Loopback interface. Add is also a valid choice if the maximum number of addresses has not been configured. IPv6 Address - When 'Add' is chosen from the IPv6 Address selector this IPv6 address input field becomes visible. Address must be entered in the format prefix/length.
11.5 Security Menu 11.5.1 Managing Access Control (802.1x) 11.5.1.1 Defining Access Control Page Configurable Data Administrative Mode - This selector lists the two options for administrative mode: enable and disable. The default value is disabled. Guest Vlan Supplicant Mode - This selector lists the two options for Guest VLAN Supplicant mode: enable and disable. The default value is disabled.
Selection Criteria Port - Selects the port to be configured. When the selection is changed, a screen refresh will occur causing all fields to be updated for the newly selected port. All physical interfaces are valid. Control Mode - This selector lists the options for control mode. The control mode is only set if the link status of the port is link up.
timeout the authentication server. The server timeout must be a value in the range of 1 to 65535. The default value is 30. Changing the value will not change the configuration until the Submit button is pressed. Maximum Requests - This input field allows the user to enter the maximum requests for the selected port. The maximum requests value is the maximum number of times the authenticator state machine on this port will retransmit an EAPOL EAP Request/Identity before timing out the supplicant.
11.5.1.3 Viewing each Port Access Control Configuration Information Page Selection Criteria Port - Selects the port to be displayed. When the selection is changed, a screen refresh will occur causing all fields to be updated for the newly selected port. All physical interfaces are valid. Non-Configurable Data Control Mode - Displays the configured control mode for the specified port.
define periods of time in which it will not attempt to acquire a supplicant. The quiet period is the period for which the authenticator does not attempt to acquire a supplicant after a failed authentication exchange with the supplicant. The quiet period is a number in the range of 0 and 65535. Transmit Period(secs) - This field displays the configured transmit period for the selected port.
"Held" "ForceAuthorized" "ForceUnauthorized". Backend State - This field displays the current state of the backend authentication state machine. Possible values are: "Request" "Response" "Success" "Fail" "Timeout" "Initialize" "Idle" VLAN Assigned - Displays the VLAN ID assigned to the selected interface by the Authenticator. Note: This field is displayed only when the port control mode of the selected interface is not MAC-based.
11.5.1.4 Viewing Access Control Summary Page Non-Configurable Data Port - Specifies the port whose settings are displayed in the current table row. Control Mode - This field indicates the configured control mode for the port. Possible values are: Force Unauthorized: The authenticator port access entity (PAE) unconditionally sets the controlled port to unauthorized. Force Authorized: The authenticator PAE unconditionally sets the controlled port to authorized.
Port Status - This field shows the authorization status of the specified port. The possible values are 'Authorized' and 'Unauthorized'. Command Buttons Refresh - Update the information on the page. 11.5.1.5 Viewing each Port Access Control Statistics Page Selection Criteria Port - Selects the port to be displayed. When the selection is changed, a screen refresh will occur causing all fields to be updated for the newly selected port. All physical interfaces are valid.
EAP Response/Id Frames Received - This displays the number of EAP response/identity frames that have been received by this authenticator. EAP Response Frames Received - This displays the number of valid EAP response frames (other than resp/id frames) that have been received by this authenticator. EAP Request/Id Frames Transmitted - This displays the number of EAP request/identity frames that have been transmitted by this authenticator.
11.5.1.7 Defining Port Access Client Summary Page Selection Criteria Port - Selects the port to be displayed. When the selection is changed, a screen refresh will occur causing all fields to be updated for the newly selected port. All physical interfaces are valid. Non-Configurable Data User Name - Displays the user name representing the supplicant device. Supp Mac Address - Displays the supplicant device’s MAC address. Session Time - Displays the time since the supplicant logged in.
Selection Criteria Users - Selects the user name that will use the selected login list for 802.1x port security. Configurable Data Login - Selects the login to apply to the specified user. All configured logins are displayed. Command Buttons Submit - Sends the updated screen to the switch and causes the changes to take effect on the switch but these changes will not be retained across a power cycle unless a save is performed. Refresh - Update the information on the page. 11.5.1.
11.5.1.10 Viewing each Port Access Privileges Summary Page Non-Configurable Data Port - Displays the port in Slot/Port format. Users - Displays the users that have access to the port. Command Buttons Refresh - Update the information on the page. 11.5.2 Managing RADIUS 11.5.2.
Selection Criteria Accounting Mode - Selects if the RADIUS accounting mode is enabled or disabled. Configurable Data Max Number of Retransmits - The value of the maximum number of times a request packet is retransmitted. The valid range is 1 - 15. Consideration to maximum delay time should be given when configuring RADIUS maxretransmit and RADIUS timeout. If multiple RADIUS servers are configured, the max retransmit value on each will be exhausted before the next server is attempted.
11.5.2.2 Configuring RADIUS Server Configuration Page Selection Criteria RADIUS Server IP Address - Selects the RADIUS server to be configured. Select add to add a server. Primary Server - Sets the selected server to thePrimary or Secondary server. Message Authenticator - Enable or disable the message authenticator attribute for the selected server. Configurable Data IP Address - The IP address of the server being added. You cannot define these IP addresses: 0.0.0.0 255.255.255.255 224.xxx.xxx.xxx 127.0.0.
Refresh - Update the information on the page. 11.5.2.3 Viewing RADIUS Server Statistics Page Selection Criteria RADIUS Server IP Address - Selects the IP address of the RADIUS server for which to display statistics. Non-Configurable Data Round Trip Time (secs) - The time interval, in hundredths of a second, between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server.
Bad Authenticators - The number of RADIUS Access-Response packets containing invalid authenticators or signature attributes received from this server. Pending Requests - The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response. Timeouts - The number of authentication timeouts to this server. Unknown Types - The number of RADIUS packets of unknown type which were received from this server on the authentication port.
Apply - The Secret will only be applied if this box is checked. If the box is not checked, anything entered in the Secret field will have no affect and will not be retained. This field is only displayed if the user has READWRITE access. Encrypted - When the secret string is encrypted, this box need to be checked. This field is only displayed if the user has READWRITE access. Non-Configurable Data Secret Configured - Indicates if the secret has been configured for this accounting server.
Accounting Responses - Displays the number of RADIUS packets received on the accounting port from this server. Malformed Accounting Responses - Displays the number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses.
11.5.3 Defining TACACS+ Configuration 11.5.3.1 Configuring TACACS Configuration Page Configurable Data Key String - Specifies the authentication and encryption key for TACACS+ communications between the device and the TACACS+ server. The valid range is 0-128 characters. The key must match the key configured on the TACACS+ server. Connection Timeout - The maximum number of seconds allowed to establish a TCP connection between the device and the TACACS+ server.
IP Address - Specifies the TACACS+ Server IP address. You cannot define these IP addresses: 0.0.0.0 255.255.255.255 224.xxx.xxx.xxx 127.0.0.1 Host name - The host name of the server being added. Priority - Specifies the order in which the TACACS+ servers are used. It should be within the range 0-65535. Port - Specifies the authentication port. It should be within the range 0-65535.
Selection Criteria Admin Mode - Selects the IP Filter admin mode for enable or disable. Configurable Data Filter Address 1~5 - Stations that are allowed to make configuration changes to the Switch. Command Buttons Submit - Send the updated screen to the switch. Changes take effect on the switch but these changes will not be retained across a power cycle unless a save is performed. 11.5.5 Defining Secure Http Configuration 11.5.5.
Maximum Number of HTTPS Sessions - This field is used to set the maximum allowable number of HTTPS sessions. The value must be in the range of (0 to 16). The default value is 16. The currently configured value is shown when the web page is displayed. Non-Configurable Data Certificate Present? - Displays whether there is a certificate present on the device. Certificate Generation Status - Displays whether SSL certificate generation is in progress.
Configurable Data SSH Session Timeout (Minutes) - This text field is used to configure the inactivity timeout value for incoming SSH sessions to the switch. The acceptable range for this value is (1-160) minutes. Non-Configurable Data SSH Connections in Use - Displays the number of SSH connections currently in use in the system. Keys Present - Displays which keys, RSA, DSA or both, are present (if any). Key Generation Status - Displays which keys, RSA or DSA, are being generated.
ICMPv6 Rate Limit Burst Size -To control the ICMP error packets user can specify the number of ICMP error packets are allowed per burst interval. Default burstsize is 100 packets. When burst interval is 0 then configuring this field is not a valid operation. Valid Burst Size must be in the range (1 to 200) Command Buttons Submit - Send the updated configuration to the switch. Configuration changes take effect immediately. These changes will not be retained across a power cycle unless a save is performed.
OnLink Flag by Prefix - Specifies selected prefix can be used for on-link determination. Default value is enable. This selector lists the two options for on-link flag: enable and disable. Autonomous Flag by Prefix - Specifies selected prefix can be used for autonomous address configuration. Default value is disable. This selector lists the two options for autonomous flag: enable and disable. Routing Mode - Specifies routing mode of an interface.
11.6.3 Viewing IPv6 Interface Summary Page Non-Configurable Data Interface - Specifies the interface whose settings are displayed in the current table row. Routing Mode - Specifies routing mode of an interface. Admin Mode - Specifies administrative mode of an interface. Implicit Mode - When ipv6 implicit mode is enabled, interface is capable of ipv6 operation without a global address. In this case, an eui-64 based link-local address is used.
11.6.
Selection Criteria Interface - Selects the interface to be configured. When the selection is changed, a screen refresh will occur causing all fields to be updated for the newly selected port. Non-Configurable Data IPv6 Statistics Total Datagrams Received - The total number of input datagrams received by the interface, including those received in error. Received Datagrams Locally Delivered - The total number of datagrams successfully delivered to IPv6 user-protocols (including ICMP).
which these fragments were addressed which might not be necessarily the input interface for some of the fragments. Datagrams Successfully Reassembled - The number of IPv6 datagrams successfully reassembled. Note that this counter is incremented at the interface to which these datagrams were addressed which might not be necessarily the input interface for some of the fragments.
ICMPv6 Echo Reply Messages Received - The number of ICMP Echo Reply messages received by the interface. ICMPv6 Router Solicit Messages Received - The number of ICMP Router Solicit messages received by the interface. ICMPv6 Router Advertisement Messages Received - The number of ICMP Router Advertisement messages received by the interface. ICMPv6 Neighbor Solicit Messages Received - The number of ICMP Neighbor Solicit messages received by the interface.
ICMPv6 Redirect Messages Transmitted - The number of Redirect messages sent. ICMPv6 Group Membership Query Messages Transmitted - The number of ICMPv6 Group Membership Query messages sent. ICMPv6 Group Membership Response Messages Transmitted - The number of ICMPv6 Group Membership Response messages sent. ICMPv6 Group Membership Reduction Messages Transmitted - The number of ICMPv6 Group Membership Reduction messages sent.
received within DELAY_FIRST_PROBE_TIME seconds of entering the DELAY state, send a neighbor solicitation message and change the state to PROBE. Probe - A reachability confirmation is actively sought by resending neighbor solicitation messages every RetransTimer milliseconds until a reachability confirmation is received. Last Updated - Time since the address was confirmed to be reachable. Command Buttons Refresh - Refreshes the screen with most recent data.
11.6.7 Managing OSPFv3 Protocol 11.6.7.1 Configuring OSPFv3 Configuration Page Configurable Data Router ID - The 32 bit integer in dotted decimal format that uniquely identifies the router within the autonomous system (AS). If you want to change the Router ID you must first disable OSPFv3. After you set the new Router ID, you must re-enable OSPFv3 to have the change take effect. The default value is 0.0.0.0, although this is not a valid Router ID.
Exit Overflow Interval - Enter the number of seconds that, after entering overflow state, the router should wait before attempting to leave overflow state. This allows the router to again originate non-default AS-external-LSAs. If you enter 0, the router will not leave Overflow State until restarted. The range is 0 to 2147483647 seconds. External LSDB Limit - The maximum number of AS-External-LSAs that can be stored in the database. A value of -1 implies there is no limit on the number that can be saved.
AS_OPAQUE LSA Count - The number of opaque LSAs with domain wide flooding scope. AS_OPAQUE LSA Checksum - The sum of the LS checksums of the opaque LSAs with domain wide flooding scope. This sum can be used to determine if there has been a change in a router's link state database, and to compare the link-state databases of two routers. This value is in hexadecimal. New LSAs Originated - In any given OSPFv3 area, a router will originate several LSAs. Each router originates a router-LSA.
Stub Area Specific Parameters. Metric Value - Enter the metric value you want applied for the default route advertised into the stub area. Valid values range from 1 to 16,777,215. This value is applicable only to Stub areas. NSSA Specific Parameters. Default Information Originate - The default Route Information. This can also be applied by the CLI command 'area (area-id) nssa default-info-originate' in the ipv6 router ospf config mode. Valid values are True or False.
Border router is translating type-7 LSAs into type-5.' Disabled' implies tha a candidate NSSA Border router is NOT translating type-7 LSAs into type-5. Command Buttons Create Stub Area - Configure the area as a stub area. Delete Stub Area - Delete the stub area designation. The area will be returned to normal state. Create NSSA - Configure the area as NSSA. Delete NSSA - Delete the NSSA designation. The area will be returned to normal state. Submit - Send the updated configuration to the switch.
Configurable Data IPv6 Prefix - Enter the IPv6 Prefix/Prefix Length for the address range for the selected area. LSDB Type - Select the type of Link Advertisement associated with the specified area and address range. The default type is 'Network Summary'. Advertisement - Select enable or disable from the pulldown menu. If you selected enable the address range will be advertised outside the area via a Network Summary LSA. The default is enable. Non-Configurable Data Area ID - The OSPFv3 area.
Selection Criteria Slot/Port - Select the interface for which data is to be displayed or configured. Configurable Data OSPFv3 Admin Mode* - You may select enable or disable from the pulldown menu. The default value is 'disable.' You can configure OSPFv3 parameters without enabling OSPFv3 Admin Mode, but they will have no effect until you enable Admin Mode.
LSA Ack Interval - The number of seconds between LSA Acknowledgment packet transmissions, which must be less than the Retransmit Interval. State - The current state of the selected router interface. One of: Down - This is the initial interface state. In this state, the lower-level protocols have indicated that the interface is unusable. In this state, interface parameters will be set to their initial values.
11.6.7.6 Viewing OSPFv3 Interface Statistics Page This screen displays statistics for the selected interface. The information will be displayed only if OSPFv3 is enabled. Selection Criteria Slot/Port - Select the interface for which data is to be displayed. Non-Configurable Data OSPFv3 Area ID - The OSPFv3 area to which the selected router interface belongs. An OSPFv3 Area ID is a 32 bit integer in dotted decimal format that uniquely identifies the area to which the interface connects.
Area LSA Count - The total number of link-state advertisements in this area's link-state database, excluding AS External LSAs. IPv6 Address - The IPv6 address of the interface. Interface Events - The number of times the specified OSPFv3 interface has changed its state or an error has occurred. Virtual Events - The number of state changes or errors that have occurred on this virtual link. Neighbor Events - The number of times this neighbor relationship has changed state or an error has occurred.
LS Acknowledgements Received - The number of LS acknowledgements received on this interface by this router. Command Buttons Refresh - Refresh the data on the screen with the present state of the data in the switch. 11.6.7.7 Viewing OSPFv3 Neighbor Information Page This screen shows the OSPFv3 Neighbor information for a selected neighbor Router ID on the selected interface. When a particular Neighbor Router ID is selected, it shows detailed information about the neighbor.
Command Buttons Refresh - Refreshes the page with the latest OSPFv3 neighbor information for the selected interface and Neighbor Router ID. 11.6.7.8 Viewing OSPFv3 Neighbor Table Information Page This screen shows the OSPFv3 Neighbor Table, either for all interfaces on which valid OSPFv3 Neighbors are present or the neighbors specific to a given interface on which OSPFv3 Neighbors exist.
11.6.7.9 Viewing OSPFv3 Link State Database Information Page Non-Configurable Data Router ID - The 32 bit integer in dotted decimal format that uniquely identifies the router within the autonomous system (AS). The Router ID is set on the OSPFv3 Interface Configuration page. If you want to change the Router ID you must first disable OSPFv3. After you set the new Router ID, you must re-enable OSPFv3 to have the change take effect. The default value is 0.0.0.0, although this is not a valid Router ID.
11.6.7.10 Configuring OSPFv3 Virtual Link Configuration Page Selection Criteria Create New Virtual Link - Select this option from the dropdown menu to define a new virtual link. The area portion of the virtual link identification is fixed: you will be prompted to enter the Neighbor Router ID on a new screen. Area ID and Neighbor Router ID - Select the virtual link for which you want to display or configure data. It consists of the Area ID and Neighbor Router ID.
values. All interface timers will be disabled, and there will be no adjacencies associated with the interface. Waiting - The router is trying to determine the identity of the (Backup) Designated Router by monitoring received Hello Packets. The router is not allowed to elect a Backup Designated Router or a Designated Router until it transitions out of Waiting state. This prevents unnecessary changes of (Backup) Designated Router.
Neighbor Router ID - The neighbor portion of the virtual link identification. Virtual links may be configured between any pair of area border routers having interfaces to a common (non-backbone) area. Hello Interval - The OSPFv3 hello interval for the virtual link in units of seconds. Dead Interval - The OSPFv3 dead interval for the virtual link in units of seconds. This determiness how long a router will wait to see a neighbor router's Hello packets before declaring that the router is down.
Metric- Sets the metric value to be used as the metric of redistributed routes. This field displays the metric if the source was pre-configured and can be modified. The valid values are (0 to 16777214) Metric Type - Sets the OSPFv3 metric type of redistributed routes. Tag - Sets the tag field in routes redistributed. This field displays the tag if the source was pre-configured, else a default tag value of 0 is displayed.
Selection Criteria Global or Link-local Next-hop - Specify if the Next Hop IPv6 Address is a Global IPv6 Address or a Link-local IPv6 Address. Slot/Port - Enter the unit, slot and port number for the Link-local IPv6 Next Hop Address. This field is displayed only if the Global or Link-local Next-hop Selector is selected as Link-local. Configurable Data IPv6 Network Prefix/PrefixLength - Enter an IPv6 Network Address with Prefix Length. Next Hop IPv6 Address - Enter an IPv6 Next Hop Address.
Next Hop IP - Displays the Next Hop IPv6 Address for the Active Route. Command Buttons Refresh - Reloads the data on the page. 11.6.8.3 Configuring IPv6 Router Route Preference Page Use this panel to configure the default preference for each protocol. These values are arbitrary values in the range of 1 to 255 and are independent of route metrics. Most routing protocols use a route metric to determine the shortest path known to the protocol, independent of any other protocol.
11.6.8.4 Configuring IPv6 Routes Configuration Page Selection Criteria Routes Displayed Configured Routes - Shows the routes configured by the user Best Routes - Shows only the best active routes All Routes - Shows all active IPv6 routes Non-Configurable Data IPv6 Prefix/Prefix Length - Displays the Network Prefix and Prefix Length for the Configured Route. Next Hop IP - Displays the Next Hop IPv6 Address for the Configured Route.
Configurable Data RIPv6 Admin Mode - Select enable or disable from the pulldown menu. If you select enable RIPv6 will be enabled for the switch. The default is disable. Split Horizon Mode - Select none, simple or poison reverse from the pulldown menu. Split horizon is a technique for avoiding problems caused by including routes in updates sent to the router from which the route was originally learned. The options are: None - no special processing for this case.
11.6.9.3 Configuring RIPv6 Redistribution Configuration Page This screen can be used to configure the RIPv6 Route Redistribution parameters. The allowable values for each fields are displayed next to the field. If any invalid values are entered, an alert message will be displayed with the list of all the valid values. Configurable Data Configured Source - This select box is a dynamic selector and would be populated by only those Source Routes that have already been configured for redistribute by RIPv6.
11.6.9.4 Configuring RIPv6 Route Redistribution Summary Page This screen displays the RIPv6 Route Redistribution Configurations. Non-Configurable Data Source - The Source Route to be Redistributed by RIPv6. Metric - The Metric of redistributed routes for the given Source Route. Displays "Unconfigured" when not configured. Command Buttons Refresh - Displays the latest RIPv6 Route Redistribution Configuration data. 11.7 QOS Menu 11.7.1 Managing Access Control Lists 11.7.1.1.
Configurable Data IP ACL ID - IP ACL ID must be a whole number in the range of 1 to 99 for IP Standard Access Lists and 100 to 199 for IP Extended Access Lists. IP ACL Name - Specifies IP ACL Name string which includes alphanumeric characters only. The name must start with an alphabetic character. This field displays the name of the currently selected IP ACL if the ACL has already been created. Non-Configurable Data Table - Displays the current and maximum number of IP ACLs.
11.7.1.3 Configuring IP Access Control List Rule Configuration Page Use these screens to configure the rules for the IP Access Control Lists created using the IP Access Control List Configuration screen. What is shown on this screen varies depending on the current step in the rule configuration process. A Standard/Extended IP ACL must first be selected to configure rules for. The rule identification, and the 'Action' and 'Match Every' parameters must be specified next.
minute report interval is used for the entire system. A trap is not issued if the ACL rule hit count is zero for the current interval. This field is visible for a 'Deny' Action. Assign Queue ID - Specifies the hardware egress queue identifier used to handle all packets matching this IP ACL rule. Valid range of Queue Ids is (0 to 6). This field is visible when 'Permit' is chosen as 'Action'.
optional configuration. Enter an integer from 0 to 63. The IP DSCP is selected by possibly selection one of the DSCP keyword from a dropdown box. If a value is to be selected by specifying its numeric value, then select the 'Other' option in the dropdown box and a text box will appear where the numeric value of the DSCP can be entered. IP Precedence Configuration The IP Precedence field in a packet is defined as the high-order three bits of the Service Type octet in the IP header.
Command Buttons Submit - Send the updated configuration to the switch. Configuration changes take effect immediately. These changes will not be retained across a power cycle unless a save is performed. Rename - Rename the currently selected IPv6 ACL. Delete - Removes the currently selected IPv6 ACL from the switch configuration. 11.7.1.5 IPv6 Access Control List Summary Page Non-Configurable Data IPv6 ACL Name - Exiting IPv6 ACL identifier.
Selection Criteria IPv6 ACL Name - Use the pull down menu to select the IPv6 ACL for which to create or update a rule. Rule - Select an existing rule from the pull down menu, or select 'Create New Rule.' New rules cannot be created if the maximum number of rules has been reached. For each rule, a packet must match all the specified criteria in order to be true against that rule and for the specified rule action (Permit/Deny) to take place.
match the rule, the option of configuring other match criteria will not be offered. To configure specific match criteria for the rule, remove the rule and re-create it, or re-configure 'Match Every' to 'False' for the other match criteria to be visible. Protocol - There are two ways to configure IPv6 protocol. Specify an integer ranging from 0 to 255 after selecting protocol keyword "other".
Selection Criteria MAC ACL - A new MAC Access Control List may be created or the configuration of an existing MAC ACL can be updated based on selection. Configurable Data MAC ACL Name - Specifies MAC ACL Name string which may include alphabetic, numeric, dash, underscore or space characters only. The name must start with an alphabetic character. This field displays the name of the currently selected MAC ACL if the ACL has already been created.
Rules - The number of rules currently configured for the MAC ACL. Direction - The direction of packet traffic affected by the MAC ACL. Valid Directions Inbound Slot/Port(s) - The interfaces to which the MAC ACL applies. VLAN(s) - VLAN(s) to which the MAC ACL applies. Command Buttons Refresh - Refresh the data on the screen to the latest state. 11.7.1.
Selection Criteria MAC ACL - Select the MAC ACL for which to create or update a rule. Rule - Select an existing rule or select 'Create New Rule' to add a new Rule. New rules cannot be created if the maximum number of rules has been reached. For each rule, a packet must match all the specified criteria in order to be true against that rule and for the specified rule action (Permit/Deny) to take place.
Ethertype User Value - Specifies the user defined customised Ethertype value to be used when the user has selected "User Value" as Ethertype Key, to compare against an Ethernet frame. Valid range of values is (0x0600 to 0xFFFF). Source MAC - Specifies the Source MAC address to compare against an Ethernet frame. Valid format is (xx:xx:xx:xx:xx:xx). Source MAC Mask - Specifies the Source MAC address mask specifying which bits in the Source MAC to compare against an Ethernet frame.
MAC ACL IP ACL - Specifies list of all IP ACLs. This field is visible only if the user has selected "IP ACL" as "ACL Type". IPv6 ACL - Specifies list of all IPv6 ACLs. This field is visible only if the user has selected "IPv6 ACL" as "ACL Type". MAC ACL - Specifies list of all MAC ACLs. This field is visible only if the user has selected "MAC ACL" as "ACL Type".
Configurable Data VLAN ID - Specifies list of all configured VLAN Id(s) for ACL mapping. Direction - Specifies the packet filtering direction for ACL. Valid Directions: Inbound ACL Type - Specifies the type of ACL. Valid ACL Types: IP ACL IPv6 ACL MAC ACL IP ACL - Specifies list of all IP ACLs. This field is visible only if the user has selected "IP ACL" as "ACL Type". IPv6 ACL - Specifies list of all IPv6 ACLs. This field is visible only if the user has selected "IPv6 ACL" as "ACL Type".
Non-Configurable Data Summary Display Selector - Select interface or VLAN to display summary. By default summary of Interface-based ACL(s) is displayed. Slot/Port(s) - The interfaces to which the IP ACL applies. VLAN(s) - VLAN(s) to which the IP ACL applies. Direction - The direction of packet traffic affected by the IP ACL. Direction can only be one of the following: Inbound ACL Type - Displays the type of ACL assigned to selected VLAN and direction.
Selection Criteria DiffServ Admin Mode - This lists the options for the mode, from which one can be selected. The default value is 'enable'. While disabled, the DiffServ configuration is retained when saved and can be changed, but it is not activated. When enabled, Diffserv services are activated. Non-Configurable Data Class table - Displays the number of configured DiffServ classes out of the total allowed on the switch.
Class Layer 3 Protocol - Indicates how to interpret the any layer 3. This lists types of packets supported by Diffserv. Layer 3 Protocol option is available only when user selects class type as 'All' . Options: IPv4 IPv6 Only when a new class is created, this field is a selector field. After class creation this becomes a non-configurable field displaying the configured class type. Class Match Selector - This lists all match criteria from which one can be selected to be added to a specified class.
11.7.2.3 Viewing DiffServ Class Summary Page Non-Configurable Data Class Name - Displays names of the configured DiffServ classes. Class Type - Displays types of the configured classes as 'all', 'any', or 'acl'. Class types are platform dependent. Reference Class - Displays name of the configured class of type All referenced by the specified class of the same type. Command Buttons Refresh - Refresh the currently selected filter. 11.7.2.
Selection Criteria Policy Selector - Along with an option to create a new policy, this lists all the existing DiffServ policy names, from which one can be selected. The content of this screen varies based on the selection of this field. If an existing policy is selected then the screen will display Member Classes for that DiffServ policy. If 'create' is selected, another screen appears to facilitate creation of a new policy. The default is 'create'.
11.7.2.5 Viewing DiffServ Policy Summary Page Non-Configurable Data Policy Name - Displays name of the DiffServ policy. Policy Type - Displays type of the policy as 'In'. Member Classes - Displays name of each class instance within the policy. Command Buttons Refresh – Refresh the currently selected filter. 11.7.2.6 Configuring DiffServ Policy Class Definition Page Selection Criteria Policy Selector - This lists all the existing DiffServ policy names, from which one can be selected.
11.7.2.7 Viewing DiffServ Policy Attribute Summary Page Non-Configurable Data Policy Name - Displays name of the specified DiffServ policy. Policy Type - Displays type of the specified policy as 'In’. Class Name - Displays name of the DiffServ class to which this policy is attached. Attribute - Displays the attributes attached to the policy class instances. Attribute Details - Displays the configured values of the attached attributes. Command Buttons Refresh - Refresh the displayed data. 11.7.2.
Direction - Shows that the traffic direction of this service interface is In. Operational Status - Shows the operational status of this service interface, either Up or Down. Policy Name - Shows the name of the attached policy. Command Buttons Submit - Send the updated screen to the switch and cause the changes to take effect on the switch but these changes will not be retained across a power cycle unless a save is performed. 11.7.2.
Non-Configurable Data Slot/Port - Shows the Slot/Port that uniquely specifies an interface. Direction - Shows that the traffic direction of this service interface is In. Operational Status - Shows the operational status of this service interface, either Up or Down. Command Buttons Refresh - Refresh the displayed data. 11.7.2.11 Viewing DiffServ Service Detailed Statistics Page This screen displays class-oriented statistical information for the policy, which is specified by the interface and direction.
Non-Configurable Data Policy Name - Name of the policy currently attached to the specified interface and direction. Operational Status - Operational status of the policy currently attached to the specified interface and direction. The value is either Up or Down. Command Buttons Refresh - Refresh the displayed data. 11.7.
Selection Criteria Traffic Type - Traffic type is used to define the DiffServ Class. Traffic type options: VOIP, HTTP, FTP, Telnet, and Any. Policing - Enabling policing will add policing to the DiffServ Policy and the policing rate will be applied. Outbound Priority - When Policing is enabled, Outbound Priority defines the type of policing conform action where: High sets action to markdscp ef, Med sets action to markdscp af31, and Low sets action to send.
11.7.4 Managing Class of Service 11.7.4.1 Configuring Trust Mode Configuration Page Selection Criteria Slot/Port - Specifies all CoS configurable interfaces. The option "Global" represents the most recent global configuration settings. These may be overridden on a per-interface basis. Interface Trust Mode - Specifies whether or not to trust a particular packet marking at ingress.
11.7.4.2 Managing DSCP Mapping Configuration Page Selection Criteria Slot/Port - Specifies all CoS configurable interfaces. The option "Global" represents the most recent global configuration settings. Configurable Data IP DSCP Value Traffic Class - Specify which internal traffic class to map the corresponding IP DSCP value. Valid Range is (0 to 7) . Non-Configurable Data IP DSCP Value - Specify the IP DiffServ Code Point (DSCP) Value. Command Buttons Submit - Send the updated configuration to the switch.
Selection Criteria Slot/Port - Specifies all CoS configurable interfaces. The option "Global" represents the most recent global configuration settings. These may be overridden on a per-interface basis. Configurable Data Interface Shaping Rate - Specifies the maximum bandwidth allowed, typically used to shape the outbound transmission rate. This value is controlled independently of any per-queue maximum bandwidth configuration. It is effectively a second-level shaping mechanism. Default value is 0.
taildrop Default value is taildrop. Configurable Data Minimum Bandwidth Allocated - Specifies the sum of individual Minimum Bandwidth values for all queues in the interface. The sum cannot exceed the defined maximum (100). This value is considered while configuring the Minimum Bandwidth for a queue in the selected interface. Minimum Bandwidth - Specifies the minimum guaranteed bandwidth allotted to this queue.
Queue Management Type - Queue depth management technique used for queues on this interface. This is only used if device supports independent settings per-queue. Queue Management Type can only be one of the following: taildrop 11.7.4.6 Configuring Enhanced Transmission Selection (ETS) interface Selection Criteria Slot/Port - Choose a ETS configurable interfaces for setting. Admin Mode - Enable/Disable Enhanced Transmission Selection function.
ETS PG-Mapping - This command configures the mapping list of priority to priority groups. Choose the CNM generation behavior when congestion notification threshold is reached but the incoming sampled packet does not have CN-TAG. LAN - assign specific priority id to LAN priority group. SAN - assign specific priority id to SAN priority group. IPC - assign specific priority id to IPC priority group.
11.7.4.8 Configuring Congestion Notification (CN)) Global configuration Selection Criteria CNM Admin Mode - Enable/Disable congestion notification message(CNM) handling. Enable - to enable handling congestion notification message. Disable - to disable handling congestion notification message. The system's default CNM handling is Enabled. CN-TAG Processing - Enable/Disable CN-TAG processing. Enable - configure the CNTAG Ether Type is recognized by parsing stages.
Outer TPID for CNM - Set Outer TPID for Congestion Notification Message (CNM). The system's default Outer TPID for CNM is 0. The valid TPID range is 0 to 16777215. Outer VLAN ID for CNM - Set Outer VLAN ID for Congestion Notification Message (CNM). The system's default Outer VLAN ID for CNM is 1. The valid VLAN ID range is 1 to 3965. Outer Packet Priority for CNM - Set Outer Packet Priority for Congestion Notification Message (CNM). The system's default Outer Packet Priority for CNM is 0.
11.7.4.10 Viewing Congestion Notification (CN) interface summary Non-Configurable Data Interface - The list of CN configurable interfaces. Queue ID - Specifies the ID of priority queues. Mode - Specifies the mode of priority queues. CNM Count - Counts the number of CN message generated by the congestion messaged queue. 11.8 IPv4 Multicast Menu 11.8.1 Managing DVMRP Protocol 11.8.1.
Configurable Data Admin Mode - Select enable or disable from the dropdown menu. This sets the administrative status of DVMRP to active or inactive. The default is disable. Non-Configurable Data Version - The current value of the DVMRP version string. Total Number of Routes - The number of routes in the DVMRP routing table. Reachable Routes - The number of routes in the DVMRP routing table that have a non-infinite metric. Command Buttons Submit - Send the updated configuration to the switch.
11.8.1.3 Viewing DVMRP Configuration Summary Selection Criteria Slot/Port - Select the interface for which data is to be displayed. You must configure at least one router interface before you can display data for a DVMRP interface. Otherwise you will see a message telling you that no router interfaces are available, and the configuration summary screen will not be displayed. Non-Configurable Data Interface Mode - The administrative mode of the selected DVMRP routing interface, either enable or disable.
Received Bad Routes - The number of invalid routes received on the selected interface. Sent Routes - The number of routes sent on the selected interface. Neighbor IP - The IP address of the neighbor whose information is displayed. State - The state of the specified neighbor router on the selected interface, either active or down. Neighbor Uptime - The DVMRP uptime for the specified neighbor on the selected interface. This is the time since the neighbor entry was learned.
11.8.1.5 Viewing DVMRP Prune Summary Non-Configurable Data Group IP - The group address which has been pruned. Source IP - The address of the source or source network which has been pruned. Source Mask - The subnet mask to be combined with the source IP address to identify the source or source network which has been pruned. Expiry Time (secs) - The amount of time remaining before this prune should expire at the upstream neighbor.
Upstream Neighbor - The address of the upstream neighbor (e.g., RPF neighbor) from which IP datagrams from these sources are received. Interface - The interface on which IP datagrams sent by these sources are received. A value of 0 typically means the route is an aggregate for which no next-hop interface exists. Metric - The distance in hops to the source subnet. Expiry Time (secs)- The minimum amount of time remaining before this entry will be aged out.
Selection Criteria Slot/Port - Select the slot and port for which data is to be displayed or configured from the pulldown menu. Slot 0 is the base unit. You must have configured at least one router interface before configuring or displaying data for an IGMP interface, otherwise an error message will be displayed. Configurable Data Interface Mode - Select enable or disable from the pulldown menu to set the administrative status of IGMP on the selected interface. The default is disable.
11.8.2.3 Viewing IGMP Configuration Summary Page Selection Criteria Slot/Port - Select the slot and port for which data is to be displayed. Slot 0 is the base unit. Non-Configurable Data Interface Mode - The administrative status of IGMP on the selected interface. IP Address - The IP address of the selected interface. Subnet Mask - The subnet mask for the IP address of the selected interface. Protocol State - The operational state of IGMP on the selected interface.
Startup Query Interval - The interval at which startup queries are sent on the selected interface. Startup Query Count - The number of queries to be sent on startup. Last Member Query Interval - The last member query interval. The last member query interval is the maximum response time inserted into group-specific queries sent in response to leave group messages, and is also the amount of time between group-specific query messages. This value may be tuned to modify the leave latency of the network.
Non-Configurable Data Last Reporter - The IP address of the source of the last membership report received for the IP Multicast group address on the selected interface. Up Time - The time elapsed since this entry was created. Expiry Time - The minimum amount of time remaining before this entry will be aged out. Version 1 Host Timer - The time remaining until the local router will assume that there are no longer any IGMP version 1 members on the IP subnet attached to this interface.
Source Filter Mode - The source filter mode (Include/Exclude/NA) for the specified group on this interface. Source Hosts - This parameter shows source addresses which are members of this multicast address. Expiry Time - This parameter shows expiry time interval against each source address which are members of this multicast group. This is the amount of time after which the specified source entry is aged out.
11.8.2.7 Viewing IGMP Proxy Configration Summary Page Non-Configurable Data Slot/Port - Displays the interface on which IGMP proxy is enabled. IP Address - The IP address of the IGMP Proxy interface. Subnet Mask - The subnet mask for the IP address of the IGMP Proxy interface. Admin Mode - The administrative status of IGMP Proxy on the selected interface. Operational Mode - The operational state of IGMP Proxy interface.
Selection Criteria Multicast Group IP - Select the IP multicast group address for which data is to be displayed. If no group membership reports have been received on the selected interface you will not be able to make this selection, and none of the non-configurable data will be displayed. Non-Configurable Data Slot/Port - Displays the interface on which IGMP proxy is enabled.
Up Time - Displays the up time since the entry was created in cache table. State - The state of the host entry. A Host can be in one of the state. Non-member state - does not belong to the group on the interface. Delaying member state - host belongs to the group on the interface and report timer running. The report timer is used to send out the reports. Idle member state - host belongs to the group on the interface and no report timer running.
11.8.3.2 Configuring Interface’s Multicast Configuration Page Selection Criteria Slot/Port - Select the routing interface you want to configure from the dropdown menu. Configurable Data TTL Threshold - Enter the TTL threshold below which a multicast data packet will not be forwarded from the selected interface. You should enter a number between 0 and 255. If you enter 0 all multicast packets for the selected interface will be forwarded.
Outgoing Interface(s) - The list of outgoing interfaces on which multicast packets for this source/group are forwarded. Up Time (secs)- The time in seconds since the entry was created. Expiry Time (secs)- The time in seconds before this entry will age out and be removed from the table. RPF Neighbor - The IP address of the Reverse Path Forwarding neighbor. Protocol - The multicast routing protocol which created this entry.
Slot/Port - Select the interface number from the dropdown menu. This is the interface that connects to the neighbor router for the given source IP address. Command Buttons Submit - Send the updated configuration to the router. Configuration changes take effect immediately. These changes will not be retained across a power cycle unless a save is performed. Delete - Delete the static entry with the selected Source IP address from the MRoute table. 11.8.3.
Slot/Port - Select the router interface for which the administratively scoped boundary is to be configured. Configurable Data Group IP - Enter the multicast group address for the start of the range of addresses to be excluded. The address must be in the range of 239.0.0.0 through 239.255.255.255. Group Mask - Enter the mask to be applied to the multicast group address. The combination of the mask and the Group IP gives the range of administratively scoped addresses for the selected interface.
Configurable Data Admin Mode - Select enable or disable from the pulldown menu to set the administrative status of PIM-DM in the router. The default is disabled. Command Buttons Submit - Send the updated configuration to the router. Configuration changes take effect immediately. These changes will not be retained across a power cycle unless a save is performed. 11.8.4.
11.8.4.3 Viewing Interface’s PIM-DM Configuration Page Selection Criteria Slot/Port - Select the physical interface for which data is to be displayed. There must be configured at least one router interface before displaying data for a PIM-DM interface, otherwise a message will be displayed. Non-Configurable Data Interface Mode - Displays the administrative status of PIM-DM for the selected interface. The default is disabled. Protocol State - The operational state of the PIM-DM protocol on this interface.
11.8.5 Managing PIM-SM Protocol 11.8.5.1 Configuring PIM-SM Global Configuration Page Configurable Data Admin Mode - Select enable or disable from the pulldown menu to set the administrative status of PIM-SM in the router. The default is disable. Data Threshold Rate - Enter the rate in K bits/second above which the last-hop router will switch to a source-specific shortest path tree. The valid values are from (0 to 2000) The default value is 0.
Register Threshold Rate - The minimum source data rate in K bits/second above which the Rendezvous Point router will switch to a source-specific shortest path tree. Command Buttons Refresh - Refresh the data on the screen with the present state of the data in the router. 11.8.5.3 Configuring PIM-SM SSM Range Configuration Page Configurable Data SSM Group Address - Enter the source-specific multicast group ip-address. SSM Group Mask - Enter the source-specific multicast group ip-address mask.
Selection Criteria Slot/Port - Select the slot and port for which data is to be displayed or configured. Slot 0 is the base unit. Configurable Data Mode - Select enable or disable from the pulldown menu to set the administrative status of PIM-SM in the router. The default is disable. Hello Interval (secs)- Enter the time in seconds between the transmission of which PIM Hello messages on this interface. The valid values are from (0 to 18000 secs) . The default value is 30.
Net Mask - The network mask for the IP address of the selected PIM interface. Hello Interval (secs) - The frequency at which PIM Hello messages are transmitted on the selected interface. Join/Prune Interval - The frequency at which PIM Join/Prune messages are transmitted on this PIM interface. DR Priority - Indicates the DR priority on the PIM interface. BSR Border - Specifies the BSR border mode on the PIM interface.
11.8.5.7 Configuring PIM-SM BSR Candidate Configuration Page Selection Criteria Slot/Port - Select the slot and port for which data is to be displayed. Slot 0 is the base unit. Configurable Data Hash Mask Length - Enter the C-BSR hash mask length to be advertised in bootstrap messages. This hash mask length will be used in the hash algorithm for selecting the RP for a particular group. The valid values are from (0 to 32). Default value is 30. Priority - Enter the priority of C-BSR.
Command Buttons Refresh - Refresh the data on the screen with the present state of the data in the router. 11.8.5.9 Configuring PIM-SM Static RP Configuration Page Configurable Data IP Address - IP Address of the RP to be created or deleted. Group - Group Address of the RP to be created or deleted. Group Mask - Group Mask of the RP to be created or deleted. Command Buttons Submit - Attempts to create the specified static RP IP Address for the PIM-SM router. Configuration changes take effect immediately.
Selection Criteria Admin Mode - Select enable or disable from the pulldown menu to set the administrative status of MLD in the router to active or inactive. The default is disabled. Command Buttons Submit - Send the updated configuration to the switch. Configuration changes take effect immediately. These changes will not be retained across a power cycle unless a save is performed. 11.9.1.
Non-Configurable Data Robustness - Enter the robustness value. This variable allows tuning for the expected packet loss on a subnet. If you expect the subnet to be lossy, you should enter a higher number for this parameter. MLD is robust to (robustness variable-1) packet losses. Valid values are from (1 to 255) . The default value is 2 Startup Query Interval - Enter the number of seconds between the transmission of startup queries on the selected interface. The valid values are from (1 to 300) .
11.9.1.4 Viewing MLD Interface Summary Page Selection Criteria Slot/Port - Select the slot and port for which data is to be displayed. Slot 0 is the base unit. Non-Configurable Data MLD Global Admin Mode - The administrative status of MLD on the selected interface. MLD Operational Mode- The operational status of MLD on the Interface. Routing - The Routing mode for an interface. MLD Version - The version of MLD configured on the selected interface.
Last Member Query Count - This value indicates the configured number of Group-Specific Queries sent before the router assumes that there are no local members. Querier Status - This value indicates whether the interface is a MLD querier or non-querier on the subnet it is associated with. Querier Address - The address of the MLD querier on the IP subnet to which the selected interface is attached. Querier Up Time - The time in seconds since the MLD interface querier was last changed.
Malformed MLD Packets - The number of Malformed MLD Packets received by the router. Common Button Refresh - Refresh the data on the screen with the present state of the data in the router. Clear Traffic - Clears all the parameters for the selected interface. 11.9.1.6 Configuring MLD Proxy Interface Congiuration Page Selection Criteria Slot/Port - Select the port for which data is to be displayed or configured from the pulldown menu.
11.9.1.7 Viewing MLD Proxy Configration Summary Page Non-Configurable Data Slot/Port - Displays the interface on which MLD proxy is enabled. IPv6 Address - The IPv6 address of the MLD Proxy interface. Subnet Mask - The subnet mask for the IPv6 address of the MLD Proxy interface. Admin Mode - The administrative status of MLD Proxy on the selected interface. Operational Mode - The operational state of MLD Proxy interface.
11.9.1.8 Viewing MLD Proxy Interface Membership Information Page Selection Criteria Multicast Group IPv6 - Select the IPv6 multicast group address for which data is to be displayed. If no group membership reports have been received on the selected interface you will not be able to make this selection, and none of the non-configurable data will be displayed. Non-Configurable Data Slot/Port - Displays the interface on which MLD proxy is enabled.
Selection Criteria Multicast Group IPv6 - Select the IPv6 multicast group address for which data is to be displayed. If no group membership reports have been received on the MLD Proxy interface you will not be able to make this selection, and none of the non-configurable data will be displayed. Non-Configurable Data Slot/Port - Displays the interface on which MLD proxy is enabled. Source IPv6 - This parameter shows source addresses which are members of this multicast address.
11.9.2.2 Configuring PIM-DM Interface Configuration Page Selection Criteria Slot/Port - Select the Slot and port for which data is to be displayed or configured. Slot 0 is the base unit. You must have configured at least one router interface before configuring or displaying data for a PIM-DM interface, otherwise an error message will be displayed. Interface Mode - Select enable or disable from the pulldown menu to set the administrative status of PIM-DM for the selected interface. The default is disable.
Selection Criteria Slot/Port - Select the physical interface for which data is to be displayed. There must be configured at least one router interface before displaying data for a PIM-DM interface, otherwise a message will be displayed. Non-Configurable Data Interface Mode - Displays the administrative status of PIM-DM for the selected interface. The default is disable. Protocol State - The operational state of the PIM-DM protocol on this interface.
Command Buttons Submit - Send the updated configuration to the router. Configuration changes take effect immediately. These changes will not be retained across a power cycle unless a save is performed. 11.9.3.2 Viewing PIM-SM Global Status Page Non-Configurable Data PIMSM Admin Mode - The administrative status of PIM-SM in the router: either enable or disable.
Command Buttons Submit - Send the updated configuration to the router. Configuration changes take effect immediately. These changes will not be retained across a power cycle unless a save is performed. Refresh - Refresh the data on the screen with the present state of the data in the router. 11.9.3.4 Configuring Interface’s PIM-SM Configuration Page Selection Criteria Slot/Port - Select the slot and port for which data is to be displayed or configured. Slot 0 is the base unit.
11.9.3.5 Viewing Interface’s PIM-SM Summary Page Selection Criteria Slot/Port - Select the slot and port for which data is to be displayed. Slot 0 is the base unit. Non-Configurable Data Admin Mode - The administrative status of PIM-SM in the router: either enable or disable. Protocol State - The operational state of the PIM-SM protocol on this interface. IP Address - The IP address of the selected PIM interface. Net Mask - The network mask for the IP address of the selected PIM interface.
11.9.3.6 Configuring PIM-SM Candidate RP Configuration Page Selection Criteria Slot/Port - Select the slot and port for which data is to be displayed. Slot 0 is the base unit. Non-Configurable Data Group Address - The group address transmitted in Candidate-RP-Advertisements. Configurable Data Interface - Display the interface. Group Address - Display the group address transmitted in Candidate – RP – Advertisements. Delete - Attempts to remove the specified Candidate RP Address for the PIM-SM router.
Configurable Data Hash Mask Length - Enter the C-BSR hash mask length to be advertised in bootstrap messages. This hash mask length will be used in the hash algorithm for selecting the RP for a particular group. The valid values are from (0 to 128). Default value is 30. Priority - Enter the priority of C-BSR. Command Buttons Submit - Attempts to create the specified static RP IP Address for the PIM-SM router. Configuration changes take effect immediately.
11.9.3.9 Configuring PIM-SM Static RP Configuration Page Configurable Data RP Address - IP Address of the RP. Group Address/Prefix Length - Enter the source-specific multicast group ip-address / Prefix Length. Overide - To override the entry you need to check this box and then select the submit button. Delete - Attempts to remove the specified Static RP Address for the PIM-SM router. Configuration changes take effect immediately.
Selection Criteria Source IP - Enter the IP address of the multicast packet source to be combined with the Group IP to fully identify a single route whose Mroute table entry you want to display or clear. You may leave this field blank. Group IP - Enter the destination group IP address whose multicast route(s) you want to display or clear. Non-Configurable Data Incoming Interface - The incoming interface on which multicast packets for this source/group arrive.
www.fortinet.
