BLADE OS™ ISCLI Reference HP GbE2c L2/L3 Ethernet Blade Switch Version 5.1 Advanced Functionality Software Part Number: BMD00115, August 2009 2350 Mission College Blvd. Suite 600 Santa Clara, CA 95054 www.bladenetwork.
BLADE OS 5.1 ISCLI Reference Copyright © 2009 BLADE Network Technologies, Inc., 2350 Mission College Blvd., Suite 600, Santa Clara, California, 95054, USA. All rights reserved. Part Number: BMD00115. This document is protected by copyright and distributed under licenses restricting its use, copying, distribution, and decompilation. No part of this document may be reproduced in any form by any means without prior written authorization of BLADE Network Technologies, Inc.
Contents Preface 11 Who Should Use This Book 11 How This Book Is Organized 12 Typographic Conventions 12 Additional references 14 Chapter 1: ISCLI Basics 15 Connecting to the Switch 15 Establishing a console connection 15 Setting an IP address 16 Establishing a Telnet connection 17 Establishing an SSH connection 17 Accessing the ISCLI 19 ISCLI Command Modes 19 Global Commands 22 Command Line Interface Shortcuts 23 CLI List and Range Inputs 23 Command Abbreviation 24 Tab Com
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Routing Information Protocol 86 RIP Routes Information 86 RIP Interface Information 87 IP Information 88 IGMP Multicast Group Information 89 IGMP Group Information 91 IGMP Multicast Router Information 92 VRRP Information 93 ServerMobility Port Information 94 Quality of Service Information 95 802.
BLADE OS 5.
BLADE OS 5.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Area Index Configuration 301 OSPF Summary Range Configuration 303 OSPF Interface Configuration 304 OSPF Virtual Link Configuration 306 OSPF Host Entry Configuration 308 OSPF Route Redistribution Configuration.
BLADE OS 5.
Preface Your HP GbE2c L2/L3 Ethernet Blade Switch (GbE2c) is ready to perform basic switching functions right out of the box. Some of the more advanced features, however, require some administrative configuration before they can be used effectively. The BLADE OS 5.1 ISCLI Reference provides a command reference for Advanced Functionality Software (AFS) release 5.1 for the HP GbE2c L2/L3 Ethernet Blade Switch (software part number 485192-B21).
BLADE OS 5.1 ISCLI Reference How This Book Is Organized Chapter 1, “ISCLI Basics,” describes how to connect to the switch and access the information and configuration commands. This chapter provides an overview of the command syntax, including command modes, global commands, and shortcuts. Chapter 2, “Information Commands,” shows how to view switch configuration parameters. Chapter 3, “Statistics Commands,” shows how to view switch performance statistics.
BLADE OS 5.1 ISCLI Reference Table 1 Typographic Conventions Typeface or Symbol Meaning braces { } Indicates required elements in syntax descriptions where there is more than one option. You must choose only one of the options. Do not type the braces when entering the command.
BLADE OS 5.1 ISCLI Reference Table 1 Typographic Conventions Typeface or Symbol Meaning plain fixed-width text Indicates command syntax and system output, for example, prompts and system messages. Example: configure terminal vertical line | Separates multiple choices for command keywords and arguments. Enter only one of the choices. Do not type the vertical line when entering the command.
CHAPTER 1 ISCLI Basics This guide describes the individual ISCLI commands available for the switch. The ISCLI provides a direct method for collecting switch information and performing switch configuration. Using a basic terminal, the ISCLI allows you to view information and statistics about the switch, and to perform any necessary configuration. This chapter describes the ISCLI Command Modes, and provides a list of commands and shortcuts that typically are from all the command modes within the ISCLI.
BLADE OS 5.1 ISCLI Reference Table 2 Console configuration parameters Parameter Value Baud Rate 9600 Data Bits 8 Parity None Stop Bits 1 Flow Control None To establish a console connection with the switch: 1. Connect the terminal to the console port using the null modem cable. 2. Power on the terminal. 3. Press the Enter key a few times on the terminal to establish the connection. 4. You will be required to enter a password for access to the switch.
BLADE OS 5.1 ISCLI Reference Uplink port access: Using a Bootstrap Protocol (BOOTP) server—By default, the management interface is set up to request its IP address from a BOOTP server. If you have a BOOTP server on the network, add the Media Access Control (MAC) address of the switch to the BOOTP configuration file located on the BOOTP server. The MAC address can be found in the System Information menu. (See the “System information” section in the “Information Menu” chapter.
BLADE OS 5.1 ISCLI Reference The supported SSH encryption and authentication methods are listed below. Server Host Authentication—Client RSA authenticates the switch in the beginning of every connection Key Exchange—RSA Encryption: AES256-CBC AES192-CBC AES128-CBC 3DES-CBC 3DES ARCFOUR User Authentication—Local password authentication; Remote Authentication Dial-in User Service (RADIUS) The following SSH clients are supported: SSH 3.0.
BLADE OS 5.1 ISCLI Reference Accessing the ISCLI The first time you start the switch, it boots into BLADE OS CLI. To access the ISCLI, enter the following command and reset the switch: Main# boot/mode iscli To access the BLADE OS CLI, enter the following command from the ISCLI and reload the switch: Router(config)# boot cli-mode bladeos-cli The switch retains your CLI selection, even when you reset the configuration to factory defaults. The CLI boot mode is not part of the configuration settings.
BLADE OS 5.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Global Commands Some basic commands are recognized throughout the ISCLI command modes. These commands are useful for obtaining online help, navigating through the interface, and for saving configuration changes. For help on a specific command, type the command, followed by help. Table 4 Description of Global Commands Command Action ? Provides more information about a specific command or lists commands available at the current level.
BLADE OS 5.1 ISCLI Reference Table 4 Description of Global Commands Command Action telnet This command is used to form a Telnet session between the switch and another network device. The format is as follows: telnet {|} [] Where IP address or hostname specifies the target station. Use of a hostname requires DNS parameters to be configured on the switch. Port is the logical Telnet port or service number. show history This command displays the ten most recent commands.
BLADE OS 5.1 ISCLI Reference Command Abbreviation Most commands can be abbreviated by entering the first characters which distinguish the command from the others in the same mode.
BLADE OS 5.1 ISCLI Reference admin Administrators are the only ones that may make permanent changes to the switch configuration—changes that are persistent across a reboot/reset of the switch. Administrators can access switch functions to configure and troubleshoot problems on the switch. Because administrators can also make temporary (operator-level) changes as well, they must be aware of the interactions between temporary and permanent changes.
BLADE OS 5.
CHAPTER 2 Information Commands You can view configuration information for the switch in both the user and administrator command modes. This chapter discusses how to use the command line interface to display switch information.
BLADE OS 5.1 ISCLI Reference Table 7 Information Commands (continued) Command Syntax and Usage show interface information Displays port status information, including: Port number Whether the port uses VLAN Tagging or not Port VLAN ID (PVID) Port name VLAN membership Fast Fowarding status FDB Learning status Flood Blocking status Command mode: All For details, see page 106. show geaport Displays GEA port mapping information, used by Technical Support personnel.
BLADE OS 5.1 ISCLI Reference System Information The information provided by each command option is briefly described in Table 8 on page 29, with pointers to where detailed information can be found.
BLADE OS 5.1 ISCLI Reference SNMPv3 System Information SNMP version 3 (SNMPv3) is an extensible SNMP Framework that supplements the SNMPv2 framework by supporting the following: a new SNMP message format security for messages access control remote configuration of SNMP parameters For more details on the SNMPv3 architecture please refer to RFC2271 to RFC2276. Table 9 SNMPv3 commands Command Syntax and Usage show snmp-server v3 user Displays User Security Model (USM) table information.
BLADE OS 5.1 ISCLI Reference Table 9 SNMPv3 commands (continued) Command Syntax and Usage show snmp-server v3 community Displays information about the community table information. Command mode: All To view a sample, see page 36. show snmp-server v3 target-address Displays the Target Address table information. Command mode: All To view a sample, see page 37. show snmp-server v3 target-parameters Displays the Target parameters table information. Command mode: All To view a sample, see page 38.
BLADE OS 5.1 ISCLI Reference SNMPv3 USM User Table Information The User-based Security Model (USM) in SNMPv3 provides security services such as authentication and privacy of messages. This security model makes use of a defined set of user identities displayed in the USM user table.
BLADE OS 5.1 ISCLI Reference SNMPv3 View Table Information The user can control and restrict the access allowed to a group to only a subset of the management information in the management domain that the group can access within each context by specifying the group’s rights in terms of a particular MIB view for security reasons.
BLADE OS 5.1 ISCLI Reference SNMPv3 Access Table Information The access control sub system provides authorization services. The vacmAccessTable maps a group name, security information, a context, and a message type, which could be the read or write type of operation or notification into a MIB view. The View-based Access Control Model defines a set of services that an application can use for checking access rights of a group.
BLADE OS 5.1 ISCLI Reference SNMPv3 Group Table Information A group is a combination of security model and security name that defines the access rights assigned to all the security names belonging to that group. The group is identified by a group name.
BLADE OS 5.1 ISCLI Reference SNMPv3 Community Table Information This command displays the community table information stored in the SNMP engine.
BLADE OS 5.1 ISCLI Reference SNMPv3 Target Address Table Information The following command displays SNMPv3 target address information: show snmp-server v3 target-address Command mode: All This command displays the SNMPv3 target address table information, which is stored in the SNMP engine. Name Transport Addr Port Taglist Params ---------- --------------- ---- ---------- --------------trap1 47.81.25.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference SNMPv3 Notify Table Information The following command displays the SNMPv3 Notify Table: show snmp-server v3 notify Command mode: All Name Tag -------------------- -------------------v1v2trap v1v2trap Table 17 SNMPv3 Notify Table Information Field Description Name The locally arbitrary, but unique identifier associated with this snmpNotifyEntry. Tag This represents a single tag value which is used to select entries in the snmpTargetAddrTable.
BLADE OS 5.
BLADE OS 5.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference User Status The following command displays user status information: show access user Command mode: All except User EXEC Usernames: user - enabled - offline oper - disabled - offline admin - Always Enabled - online 1 session Current User ID table: 1: name paul , dis, cos user , password valid, offline Current strong password settings: strong password status: disabled This command displays the status of the configured usernames.
BLADE OS 5.1 ISCLI Reference Layer 2 Information Table 18 Layer 2 Information Commands Command Syntax and Usage show dot1x information Displays 802.1X Information. Command mode: All For details, see page 58. show spanning-tree Displays Spanning Tree information, including the status (on or off), Spanning Tree mode (STP/PVST+, RSTP, PVRST, or MSTP), and VLAN membership.
BLADE OS 5.1 ISCLI Reference Table 18 Layer 2 Information Commands (continued) Command Syntax and Usage show spanning-tree mstp cist information Displays Common Internal Spanning Tree (CIST) information, including the MSTP digest and VLAN membership.
BLADE OS 5.1 ISCLI Reference Table 18 Layer 2 Information Commands (continued) Command Syntax and Usage show failover trigger <1-8> Displays Layer 2 Failover information. Command mode: All For details, see page 51. show hotlinks information Displays Hot Links information. Command mode: All For details, see page 53. show layer2 information Dumps all Layer 2 switch information available (10K or more, depending on your configuration).
BLADE OS 5.1 ISCLI Reference FDB Information The forwarding database (FDB) contains information that maps the media access control (MAC) address of each known device to the switch port where the device address was learned. The FDB also shows which other ports have seen frames destined for a particular MAC address. Note – The master forwarding database supports up to 8K MAC address entries on the MP per switch.
BLADE OS 5.1 ISCLI Reference Show All FDB Information The following command displays Forwarding Database information: show mac-address-table Command mode: All MAC address ----------------00:04:38:90:54:18 00:09:6b:9b:01:5f 00:09:6b:ca:26:ef 00:0f:06:ec:3b:00 00:11:43:c4:79:83 VLAN ---1 1 4095 4095 1 Port ---21 21 22 22 21 Trnk ---- State ----FWD FWD FWD FWD FWD Permanent --------- P An address that is in the forwarding (FWD) state, means that it has been learned by the switch.
BLADE OS 5.1 ISCLI Reference Link Aggregation Control Protocol Information Use these commands to display LACP status information about each port on the switch. Table 20 LACP Information Commands Command Syntax and Usage show lacp aggregator Displays detailed information about the LACP aggregator used by the selected port. Command mode: All show interface port lacp information Displays LACP information about the selected port.
BLADE OS 5.1 ISCLI Reference Link Aggregation Control Protocol The following command displays LACP information: show lacp information Command mode: All port mode adminkey operkey selected prio aggr trunk status ----------------------------------------------------------------------1 off 1 1 yes 32768 ---2 off 2 2 yes 32768 ---3 off 3 3 no 32768 ---4 off 4 4 no 32768 ---5 off 5 5 no 32768 ---...
BLADE OS 5.1 ISCLI Reference ‘Layer 2 Failover Information Table 21 Layer 2 Failover Information commands Command Syntax and Usage show failover trigger <1-8> Displays detailed information about the selected Layer 2 Failover trigger. Command mode: All show failover trigger Displays a summary of Layer 2 Failover information. Command mode: All For details, see page 50.
BLADE OS 5.1 ISCLI Reference Layer 2 Failover information The following command displays Layer 2 Failover information: show failover trigger Command mode: All Trigger 1 Auto Monitor: Enabled Trigger 1 limit: 0 Monitor State: Up Member Status ------------------trunk 1 21 Operational 22 Operational Control State: Auto Disabled Member Status ------------------1 Operational 2 Operational 3 Operational 4 Operational ...
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference LLDP Information Table 22 LLDP Information commands Command Syntax and Usage show lldp port Displays Link Layer Discovery Protocol (LLDP) port information. Command mode: All show lldp receive Displays information about the LLDP receive state machine. Command mode: All show lldp transmit Displays information about the LLDP transmit state machine. Command mode: All show lldp remote-device Displays information received from LLDP -capable devices.
BLADE OS 5.1 ISCLI Reference LLDP Remote Device Information The following command displays LLDP remote device information: show lldp remote-device Command mode: All LLDP Remote Devices Information LocalPort | Index | Remote Chassis ID | Remote Port | Remote System Name ----------|-------|----------------------|-------------|------------------22 | 1 | 00 18 b1 4c 0d 00 | 24 | 1:10Gb Ethernet ... LLDP remote device information provides a summary of information about remote devices connected to the switch.
BLADE OS 5.1 ISCLI Reference Unidirectional Link Detection Information Table 23 UDLD Information commands Command Syntax and Usage show interface port udld Displays UDLD information about the selected port. Command mode: All show udld Displays all UDLD information.
BLADE OS 5.1 ISCLI Reference OAM Discovery Information Table 24 OAM Discovery Information commands Command Syntax and Usage show interface port oam Displays OAM information about the selected port. Command mode: All show oam Displays all OAM information.
BLADE OS 5.1 ISCLI Reference 802.1X Information The following command displays 802.
BLADE OS 5.1 ISCLI Reference The following table describes the IEEE 802.1X parameters. Table 25 802.1X Parameter Descriptions Parameter Description Port Displays each port’s number. Auth Mode Displays the Access Control authorization mode for the port. The Authorization mode can be one of the following: force-unauth auto force-auth Auth Status Displays the current authorization status of the port, either authorized or unauthorized.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference When STP is used, in addition to seeing if STG is enabled or disabled, you can view the following STG bridge information: Table 26 Spanning Tree Bridge Parameter Descriptions Parameter Description Current Root The Current Root shows information about the root bridge for the Spanning Tree. Information includes the priority (in hexadecimal notation) and the MAC address of the root.
BLADE OS 5.1 ISCLI Reference Table 27 Spanning Tree Port Parameter Descriptions (continued) Parameter Description FastFwd The Fast Forward field shows whether the port is in Fast Forwarding mode or not, which permits the port that participates in Spanning Tree to bypass the Listening and Learning states and enter directly into the Forwarding state. State The State field shows the current state of the port. The state field can be either BLOCKING, LISTENING, LEARNING, FORWARDING, or DISABLED.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Table 28 RSTP/MSTP/PVRST Bridge Parameter Descriptions (continued) Parameter Description Hello The Hello Time parameter specifies, in seconds, how often the root bridge transmits a configuration bridge protocol data unit (BPDU). Any bridge that is not the root bridge uses the root bridge hello value.
BLADE OS 5.1 ISCLI Reference Table 29 RSTP/MSTP/PVRST Port Parameter Descriptions (continued) Parameter Description Designated Port The port ID of the port on the Designated Bridge to which this port is connected. Type Type of link connected to the port, and whether the port is an edge port. Link type values are AUTO, P2P, or SHARED.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference In addition to seeing if Common Internal Spanning Tree (CIST) is enabled or disabled, you can view the following CIST bridge information: Table 30 CIST Parameter Descriptions Parameter Description CIST Root The CIST Root shows information about the root bridge for the Common Internal Spanning Tree (CIST). Values on this row of information refer to the CIST root. CIST Regional Root The CIST Regional Root shows information about the root bridge for this MSTP region.
BLADE OS 5.1 ISCLI Reference Table 31 CIST Parameter Descriptions (continued) Parameter Description Role The Role field shows the current role of this port in the Spanning Tree. The port role can be one of the following: Designated (DESG), Root (ROOT), Alternate (ALTN), Backup (BKUP), Disabled (DSB), Master (MAST), or Unknown (UNK). Designated Bridge The Designated Bridge shows information about the bridge connected to each port, if applicable.
BLADE OS 5.1 ISCLI Reference Trunk Group Information The following command displays Trunk Group information: show portchannel information Command mode: All Trunk group 1: Enabled Protocol - Static Port state: 17: STG 1 forwarding 18: STG 1 forwarding When trunk groups are configured, you can view the state of each port in the various trunk groups. Note – If Spanning Tree Protocol on any port in the trunk group is set to forwarding, the remaining ports in the trunk group will also be set to forwarding.
BLADE OS 5.1 ISCLI Reference VLAN Information Table 32 VLAN Information commands Command Syntax and Usage show vlan Displays general VLAN information.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Layer 3 Information Table 33 Layer 3 Information Commands Command Syntax and Usage show ip route Displays all routes configured on the switch. Command mode: All For details, see page 75. show ip arp Displays Address Resolution Protocol (ARP) information. Command mode: All For details, see page 77. show ip ospf information Displays the OSPF information. Command mode: All For details, see page 79. show interface ip rip Displays RIP user’s configuration.
BLADE OS 5.1 ISCLI Reference Table 33 Layer 3 Information Commands (continued) Command Syntax and Usage show ip igmp groups Displays IGMP Information. Command mode: All show ip vrrp information Displays VRRP information. Command mode: All For details, see page 93. show ip server-mobility Displays Server Mobility Information. For details, see page 94. show layer3 Dumps all Layer 3 switch information available (10K or more, depending on your configuration).
BLADE OS 5.1 ISCLI Reference IP Routing Information Using the commands listed below, you can display all or a portion of the IP routes currently held in the switch. Table 34 Route Information Commands Command Syntax and Usage show ip route address Displays a single route by destination IP address. Command mode: All show ip route gateway Displays routes to a single gateway.
BLADE OS 5.1 ISCLI Reference Table 34 Route Information Commands (continued) Command Syntax and Usage show ip route static Displays static routes configured on the switch. Command mode: All show ip route Displays all routes configured in the switch. Command mode: All For more information, see page 75.
BLADE OS 5.1 ISCLI Reference Table 35 IP Routing Type Parameters (continued) Parameter Description broadcast Indicates a broadcast route. martian The destination belongs to a host or subnet which is filtered out. Packets to this destination are discarded. multicast Indicates a multicast route. The following table describes the Tag parameters. Table 36 IP Routing Tag Parameters Parameter Description fixed The address belongs to a host or subnet attached to the switch.
BLADE OS 5.1 ISCLI Reference ARP Information The ARP information includes IP address and MAC address of each entry, address status flags (see Table 38 on page 78), VLAN and port for the address, and port referencing information. Table 37 ARP Information Commands Command Syntax and Usage show ip arp find Displays a single ARP entry by IP address. Command mode: All show ip arp interface port Displays the ARP entries on a single port.
BLADE OS 5.1 ISCLI Reference Show All ARP Entry Information The following command displays ARP information: show ip arp Command mode: All IP address Flags MAC address VLAN Port --------------- ----- ----------------- ---- ---12.20.1.1 00:15:40:07:20:42 4095 19 12.20.23.111 00:1f:29:95:f7:e5 4095 19 12.20.60.1 00:1a:4b:cd:77:36 4095 19 12.20.60.38 P 00:22:00:b8:c0:01 4095 Referenced ports are the ports that request the ARP entry.
BLADE OS 5.1 ISCLI Reference OSPF Information Table 39 OSPF Information Commands Command Syntax and Usage show ip ospf general-information Displays general OSPF information. Command mode: All See page 81 for a sample output. show ip ospf area information Displays area information for all areas. Command mode: All show ip ospf area <0-2> Displays area information for a particular area index.
BLADE OS 5.1 ISCLI Reference Table 39 OSPF Information Commands (continued) Command Syntax and Usage show ip ospf summary-range-nssa <0-2> Displays the list of summary ranges belonging to NSSA areas. Command mode: All show ip ospf routes Displays OSPF routing table. Command mode: All See page 85 for a sample output. show ip ospf information Displays the OSPF information.
BLADE OS 5.1 ISCLI Reference OSPF General Information The following command displays general OSPF information: show ip ospf general-information Command mode: All OSPF Version 2 Router ID: 10.10.10.
BLADE OS 5.1 ISCLI Reference OSPF Interface Information The following command displays OSPF interface information: show ip ospf interface Command mode: All Ip Address 10.10.12.1, Area 0.0.0.1, Admin Status UP Router ID 10.10.10.1, State DR, Priority 1 Designated Router (ID) 10.10.10.1, Ip Address 10.10.12.1 Backup Designated Router (ID) 10.10.14.1, Ip Address 10.10.12.
BLADE OS 5.1 ISCLI Reference OSPF Database Information Table 40 OSPF Database Information Commands Command Syntax and Usage show ip ospf database advertising-router Takes advertising router as a parameter. Displays all the Link State Advertisements (LSAs) in the LS database that have the advertising router with the specified router ID, for example: 20.1.1.1. Command mode: All show ip ospf database asbr-summary [advertising-router | link-state-id
BLADE OS 5.1 ISCLI Reference Table 40 OSPF Database Information Commands (continued) Command Syntax and Usage show ip ospf database network [advertising-router | link-state-id |self] Displays the network (type 2) LSAs with detailed information of each field of the LSA.network LS database. Command mode: All show ip ospf database nssa Displays the NSSA (type 7) LSAs with detailed information of each field of the LSAs.
BLADE OS 5.1 ISCLI Reference OSPF Information Route Codes The following command displays OSPF route information: show ip ospf routes Command mode: All Codes: IA N1 E1 * IA *IA *IA E2 E2 - OSPF inter area, OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 OSPF external type 1, E2 - OSPF external type 2 best 1.0.0.0/30 directly connected 0.0.0.0/0 via 1.0.0.1 2.0.0.0/30 via 1.0.0.1 13.0.0.0/30 via 1.0.0.1 172.18.1.1/32 via 30.1.1.2 172.18.1.2/32 via 30.1.1.
BLADE OS 5.1 ISCLI Reference Routing Information Protocol Table 41 Routing Information Protocol Commands Command Syntax and Usage show ip rip routes Displays RIP routes. Command mode: All For more information, see page 86. show interface ip rip Displays RIP user’s configuration. Command mode: All For more information, see page 87. RIP Routes Information The following command displays RIP route information: show ip rip routes Command mode: All >> IP Routing# 30.1.1.
BLADE OS 5.1 ISCLI Reference RIP Interface Information The following command displays RIP user information: show interface ip rip Command mode: All RIP USER CONFIGURATION : RIP on update 30 RIP Interface 1 : 10.4.4.
BLADE OS 5.1 ISCLI Reference IP Information The following command displays Layer 3 information: show layer3 information Command mode: All IP information: Interface information: 1: 20.200.27.2 255.255.255.0 200.200.27.255, vlan 1, DOWN Reminder: Please make sure that ports are in VLAN 1 and have link. 256: 10.100.144.11 255.255.255.0 10.100.144.255, vlan 4095, up Loopback interface information: Default gateway information: metric strict 1: 20.200.27.1, vlan any, FAILED 4: 10.100.144.
BLADE OS 5.1 ISCLI Reference IGMP Multicast Group Information Table 42 IGMP Multicast Group Information Commands Command Syntax and Usage show ip igmp snoop Displays IGMP Snooping information. Command mode: All show ip igmp relay Displays IGMP Relay information. Command mode: All show ip igmp mrouter information Displays IGMP Multicast Router information. Command mode: All show ip igmp mrouter vlan Displays IGMP Multicast Router information for the specified VLAN.
BLADE OS 5.1 ISCLI Reference Table 42 IGMP Multicast Group Information Commands (continued) Command Syntax and Usage show ip igmp groups interface port Displays all IGMP multicast groups on a single port. Command mode: All show ip igmp groups portchannel Displays all IGMP multicast groups on a single trunk group. Command mode: All show ip igmp groups detail Displays details about an IGMP multicast group, including source and timer information.
BLADE OS 5.1 ISCLI Reference IGMP Group Information The following command displays IGMP Group information: show ip igmp groups Command mode: All Note: Local groups (224.0.0.x) are not snooped/relayed and will not appear. Source Group VLAN Port Version Mode Expires Fwd -------------- --------------- ------- ------ -------- ----- ------- --10.1.1.1 232.1.1.1 2 24 V3 INC 4:16 Yes 10.1.1.5 232.1.1.1 2 24 V3 INC 4:16 Yes * 232.1.1.1 2 24 V3 INC No 10.10.10.43 235.0.0.1 9 21 V3 INC 2:26 Yes * 236.0.0.
BLADE OS 5.1 ISCLI Reference IGMP Multicast Router Information The following command displays Mrouter information: show ip igmp mrouter information Command mode: All SrcIP VLAN Port -------------------- ------- ------10.1.1.1 2 21 10.1.1.5 2 23 10.10.10.
BLADE OS 5.1 ISCLI Reference VRRP Information Virtual Router Redundancy Protocol (VRRP) support on GbE2c provides redundancy between routers in a LAN. This is accomplished by configuring the same virtual router IP address and ID number on each participating VRRP-capable routing device. One of the virtual routers is then elected as the master, based on a number of priority criteria, and assumes control of the shared virtual router IP address.
BLADE OS 5.1 ISCLI Reference ServerMobility Port Information The following command displays information about each port that has the ServerMobility feature configured: show ip server-mobility port Command mode: All -----------------------------------------------------Server Mobility Port 2 Information: client-id = 01:00:22:00:7b:82:42 agent.circuit-id = 00:22:00:7b:82:42 agent.
BLADE OS 5.1 ISCLI Reference Quality of Service Information Table 43 QoS information commands Command Syntax and Usage show qos transmit-queue information Displays 802.1p Information. Command mode: All For details, see page 96. show qos transmit-queue information Displays 802.1p Information. Command mode: All For details, see page 96.
BLADE OS 5.1 ISCLI Reference 802.1p Information The following command displays 802.1p information: show qos transmit-queue information Command mode: All Current priority to COS queue information: Priority COSq Weight -------- ---- -----0 0 1 1 0 1 2 0 1 3 0 1 4 1 2 5 1 2 6 1 2 7 1 2 Current port priority information: Port Priority COSq Weight ----- -------- ---- -----1 0 0 1 2 0 0 1 3 0 0 1 4 0 0 1 5 0 0 1 6 0 0 1 ... The following table describes the IEEE 802.1p priority-to-COS queue information.
BLADE OS 5.1 ISCLI Reference The following table describes the IEEE 802.1p port priority information. Table 45 802.1p Port Priority Parameter Descriptions Parameter Description Port Displays the port number. Priority Displays the 802.1p Priority level. COSq Displays the Class of Service queue. Weight Displays the scheduling weight.
BLADE OS 5.1 ISCLI Reference Access Control List Information Commands Table 46 ACL information commands Command Syntax and Usage show access-control list Displays ACL list information. For details, see page 99. Command mode: All show access-control group Displays ACL group information.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference RMON Information Commands The following table describes the Remote Monitoring (RMON) Information commands. Table 48 RMON Information commands Command Syntax and Usage show rmon history Displays RMON History information. For details, see page 101. Command mode: All show rmon alarm Displays RMON Alarm information. For details, see page 102. Command mode: All show rmon event Displays RMON Event information. For details, see page 104.
BLADE OS 5.1 ISCLI Reference RMON History Information The following command displays RMON History information: show rmon history Command mode: All RMON History group configuration: Index ----1 2 3 4 5 IFOID Interval Rbnum Gbnum ------------------------------ -------- ----- ----1.3.6.1.2.1.2.2.1.1.24 30 5 5 1.3.6.1.2.1.2.2.1.1.22 30 5 5 1.3.6.1.2.1.2.2.1.1.20 30 5 5 1.3.6.1.2.1.2.2.1.1.19 30 5 5 1.3.6.1.2.1.2.2.1.1.24 1800 5 5 The following table describes the RMON History Information parameters.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Table 50 RMON Alarm Parameter Descriptions (continued) Parameter Description Type Displays the method of sampling the selected variable and calculating the value to be compared against the thresholds, as follows: abs—absolute value, the value of the selected variable is compared directly with the thresholds at the end of the sampling interval.
BLADE OS 5.
BLADE OS 5.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Port Transceiver Status The following command displays the status of the transceiver module on each uplink port: show transceiver Command mode: All Port ----------21 - SFP21 22 - SFP22 23 - SFP23 24 - SFP24 Device TX-Ena RX-Sig TX-Flt Vendor Serial ------- -------- ------ ------ ---------------- ---------------NO Device NO Device SR SFP DISABLED Link none AVAGO AVAGCNA00002D NO Device This command displays the status of the transceiver module on each uplink port.
BLADE OS 5.1 ISCLI Reference Server Link Failure Detection Information The following command displays Server Link Failure Detection (SFD) information: show sfd Command mode: All LtM status: Down Member STG STG State Link Status --------- ---- ------------ ----------port 2 disabled 1 DISABLED * port 4 disabled 1 DISABLED * * = STP turned off for this port.
CHAPTER 3 Statistics Commands You can use the Statistics Commands to view switch performance statistics in both the user and administrator command modes. This chapter discusses how to use the command line interface to display switch statistics. Table 52 Statistics Commands Command Syntax and Usage show layer3 counters Command mode: All Displays Layer 3 statistics. show snmp-server counters Command mode: All Displays SNMP statistics. See page 163 for sample output.
BLADE OS 5.1 ISCLI Reference Port Statistics These commands display traffic statistics on a port-by-port basis. Traffic statistics include SNMP Management Information Base (MIB) objects. Table 53 Port Statistics Commands Command Syntax and Usage show interface port dot1x counters Displays IEEE 802.1X statistics for the port. Command mode: All See page 112 for sample output. show interface port bridging-counters Displays bridging (“dot1”) statistics for the port.
BLADE OS 5.1 ISCLI Reference Table 53 Port Statistics Commands Command Syntax and Usage show interface port link-counters Displays link statistics for the port. Command mode: All See page 122 for sample output. show interface port counters Displays statistics for the port. Command mode: All clear interface port counters Clears all statistics for the port. Command mode: All except User EXEC clear interfaces Clears statistics for all ports.
BLADE OS 5.1 ISCLI Reference 802.1X Authenticator Statistics Use the following command to display the 802.
BLADE OS 5.1 ISCLI Reference 802.1X Authenticator Diagnostics Use the following command to display the 802.
BLADE OS 5.1 ISCLI Reference Table 55 802.1X Authenticator Diagnostics of a Port Statistics Description authTimeoutsWhile Authenticating Total number of times that the state machine transitions from AUTHENTICATING to ABORTING, as a result of the Backend Authentication state machine indicating authentication timeout.
BLADE OS 5.1 ISCLI Reference Table 55 802.1X Authenticator Diagnostics of a Port Statistics Description backendOtherRequests ToSupplicant Total number of times that the state machine sends an EAP-Request packet (other than an Identity, Notification, Failure, or Success message) to the Supplicant. Indicates that the Authenticator chose an EAP-method.
BLADE OS 5.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Table 57 Ethernet Statistics for Port Statistics Description dot3StatsSingleCollision Frames A count of successfully transmitted frames on a particular interface for which transmission is inhibited by exactly one collision.
BLADE OS 5.1 ISCLI Reference Table 57 Ethernet Statistics for Port Statistics Description dot3StatsFrameTooLongs A count of frames received on a particular interface that exceed the maximum permitted frame size. The count represented by an instance of this object is incremented when the frameTooLong status is returned by the MAC service to the LLC (or other MAC user). Received frames for which multiple error conditions obtained are, according to the conventions of IEEE 802.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Table 58 Interface Statistics for Port Statistics Description ifInErrors For packet-oriented interfaces, the number of inbound packets that contained errors preventing them from being delivered to a higher-layer protocol. For character-oriented or fixed-length interfaces, the number of inbound transmission units that contained errors preventing them from being deliverable to a higher-layer protocol.
BLADE OS 5.1 ISCLI Reference Interface Protocol Statistics Use the following command to display the interface protocol statistics of the selected port: show interface port ip-counters Command mode: All GEA IP statistics for port 1: ipInReceives : 0 ipInHeaderError: 0 ipInDiscards : 0 Table 59 Interface Protocol Statistics Statistics Description ipInReceives The total number of input datagrams received from interfaces, including those received in error.
BLADE OS 5.1 ISCLI Reference RMON Statistics Use the following command to display the Remote Monitoring (RMON) statistics of the selected port: show interface port rmon-counters Command mode: All.
BLADE OS 5.1 ISCLI Reference Table 61 RMON Statistics (/stats/port/rmon) Statistics Description etherStatsCRCAlignErrors The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error).
BLADE OS 5.1 ISCLI Reference Table 61 RMON Statistics (/stats/port/rmon) Statistics Description etherStatsPkts512to1023 Octets The total number of packets (including bad packets) received that were greater than 511 octets in length (excluding framing bits but including FCS octets). etherStatsPkts1024to1518 Octets The total number of packets (including bad packets) received that were greater than 1023 octets in length (excluding framing bits but including FCS octets).
BLADE OS 5.1 ISCLI Reference Layer 2 Statistics Table 62 Layer 2 Statistics Commands Command Syntax and Usage show mac-address-table counters Displays FDB statistics. Command mode: All See page 128 for sample output. clear mac-address-table counters Clears FDB statistics. Command mode: All except User EXEC show interface port lacp counters Displays Link Aggregation Control Protocol (LACP) statistics. Command mode: All See page 129 for sample output.
BLADE OS 5.1 ISCLI Reference Table 62 Layer 2 Statistics Commands Command Syntax and Usage show interface port lldp counters Displays LLDP statistics. Command mode: All except User EXEC See page 131 for sample output. show oam counters Displays OAM statistics. Command mode: All except User EXEC See page 132 for sample output.
BLADE OS 5.1 ISCLI Reference FDB Statistics Use the following command to display statistics regarding the use of the forwarding database, including the number of new entries, finds, and unsuccessful searches: show mac-address-table counters Command mode: All FDB statistics: current: 83 hiwat: 855 FDB statistics are described in the following table: Table 63 Forwarding Database Statistics Statistic Description current Current number of entries in the Forwarding Database.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Hotlinks Statistics Use the following command to display Hot Links statistics: show hotlinks counters Command mode: All Hot Links Trigger Stats: Trigger 1 statistics: Trigger Name: Trigger 1 Master active: Backup active: FDB update: 0 0 0 failed: 0 The following table describes the Hotlinks statistics: Table 65 Hotlinks Statistics Statistic Description Master active Total number of times the Master interface transitioned to the Active state.
BLADE OS 5.1 ISCLI Reference LLDP Port Statistics Use the following command to display LLDP statistics: show interface port lldp counters Command mode: All LLDP Port 1 Statistics - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Frames Transmitted : 0 Frames Received : 0 Frames Received in Errors : 0 Frames Discarded : 0 TLVs Unrecognized : 0 Neighbors Aged Out : 0 ...
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Layer 3 Statistics Table 67 Layer 3 Statistics Commands Command Syntax and Usage show ip gea show ip gea bucket Displays Gigabit Ethernet Aggregators (GEA) statistics. GEA statistics are used by Technical Support personnel. Command mode: All show ip counters Displays IP statistics. Command mode: All See page 137 for sample output. clear ip counters Clears IPv4 statistics. Use this command with caution as it deletes all the IPv4 statistics.
BLADE OS 5.1 ISCLI Reference Table 67 Layer 3 Statistics Commands Command Syntax and Usage show ip icmp counters Displays ICMP statistics. Command mode: All See page 142 for sample output. show ip tcp counters Displays TCP statistics. Command mode: All See page 144 for sample output. show ip udp counters Displays UDP statistics. Command mode: All See page 146 for sample output. show ip ospf counters Displays OSPF statistics. Command mode: All See page 149 for sample output.
BLADE OS 5.1 ISCLI Reference Table 67 Layer 3 Statistics Commands Command Syntax and Usage show ip vrrp counters When virtual routers are configured, you can display the protocol statistics for VRRP: Command mode: All See page 154 for sample output. show ip rip counters Displays Routing Information Protocol (RIP) statistics. Command mode: All See page 155 for sample output. clear ip arp counters Clears Address Resolution Protocol (ARP) statistics.
BLADE OS 5.1 ISCLI Reference Table 67 Layer 3 Statistics Commands Command Syntax and Usage clear ip vrrp counters Clears VRRP statistics. Command mode: All clear ip counters Clears IP statistics. Use this command with caution as it will delete all the IP statistics. Command mode: All clear ip rip counters Clears Routing Information Protocol (RIP) statistics. Command mode: All except User EXEC clear ip ospf counters Clears Open Shortest Path First (OSPF) statistics.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Table 68 IP Statistics Statistic Description ipForwDatagrams The number of input datagrams for which this entity (the switch) was not their final IP destination, as a result of which an attempt was made to find a route to forward them to that final destination. In entities which do not act as IP Gateways, this counter will include only those packets, which were Source-Routed via this entity (the switch), and the Source- Route option processing was successful.
BLADE OS 5.1 ISCLI Reference Table 68 IP Statistics Statistic Description ipReasmFails The number of failures detected by the IP re- assembly algorithm (for whatever reason: timed out, errors, and so forth). Note that this is not necessarily a count of discarded IP fragments since some algorithms (notably the algorithm in RFC 815) can lose track of the number of fragments by combining them as they are received.
BLADE OS 5.1 ISCLI Reference Route Statistics The following command displays route statistics: show ip route counters Command mode: All Route statistics: ipRoutesCur: ipRoutesMax: 11 512 ipRoutesHighWater: 11 Table 69 Route Statistics Statistic Description ipRoutesCur The total number of outstanding routes in the route table. ipRoutesHighWater The highest number of routes ever recorded in the route table. ipRoutesMax The maximum number of routes that are supported.
BLADE OS 5.1 ISCLI Reference DNS Statistics The following command displays Domain Name System statistics. show ip dns counters Command mode: All DNS statistics: dnsInRequests: dnsBadRequests: 0 0 dnsOutRequests: 0 Table 71 DNS Statistics (/stats/dns) Statistics Description dnsInRequests The total number of DNS request packets that have been received. dnsOutRequests The total number of DNS response packets that have been transmitted.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Table 72 ICMP Statistics Statistic Description icmpInTimestampReps The number of ICMP Timestamp Reply messages received. icmpInAddrMasks The number of ICMP Address Mask Request messages received. icmpInAddrMaskReps The number of ICMP Address Mask Reply messages received. icmpOutMsgs The total number of ICMP messages which this entity (the switch) attempted to send. Note that this counter includes all those counted by icmpOutErrors.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Table 73 TCP Statistics Statistic Description tcpAttemptFails The number of times TCP connections have made a direct transition to the CLOSED state from either the SYN-SENT state or the SYN-RCVD state, plus the number of times TCP connections have made a direct transition to the LISTEN state from the SYN-RCVD state. tcpEstabResets The number of times TCP connections have made a direct transition to the CLOSED state from either the ESTABLISHED state or the CLOSE-WAIT state.
BLADE OS 5.1 ISCLI Reference UDP Statistics The following command displays UDP statistics: show ip udp counters Command mode: All UDP statistics: udpInDatagrams: udpInErrors: 54 0 udpOutDatagrams: udpNoPorts: 43 1578077 Table 74 UDP Statistics Statistic Description udpInDatagrams The total number of UDP datagrams delivered to the switch. udpOutDatagrams The total number of UDP datagrams sent from this entity (the switch).
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference OSPF Statistics Table 76 OSPF Statistics Commands Command Syntax and Usage show ip ospf counters Displays OSPF statistics. Command mode: All See page 149 for sample output. show ip ospf area counters Displays OSPF area statistics. Command mode: All except User EXEC show ip ospf interface [] counters Displays OSPF interface statistics.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Table 77 OSPF General Statistics Statistic Description Rx/Tx Stats: Rx Pkts The sum total of all OSPF packets received on all OSPF areas and interfaces. Tx Pkts The sum total of all OSPF packets transmitted on all OSPF areas and interfaces. Rx Hello The sum total of all Hello packets received on all OSPF areas and interfaces. Tx Hello The sum total of all Hello packets transmitted on all OSPF areas and interfaces.
BLADE OS 5.1 ISCLI Reference Table 77 OSPF General Statistics Statistic Description Nbr Change Stats: hello The sum total of all Hello packets received from neighbors on all OSPF areas and interfaces. Start The sum total number of neighbors in this state (that is, an indication that Hello packets should now be sent to the neighbor at intervals of HelloInterval seconds.) across all OSPF areas and interfaces.
BLADE OS 5.1 ISCLI Reference Table 77 OSPF General Statistics Statistic Description rst_ad The sum total number of times the Neighbor adjacency has been reset across all OPSF areas and interfaces. down The total number of Neighboring routers down (that is, in the initial state of a neighbor conversation.) across all OSPF areas and interfaces. Intf Change Stats: hello The sum total number of Hello packets sent on all interfaces and areas.
BLADE OS 5.1 ISCLI Reference Table 77 OSPF General Statistics Statistic Description Timers Kickoff: hello The sum total number of times the Hello timer has been fired (which triggers the send of a Hello packet) across all OPSF areas and interfaces. retransmit The sum total number of times the Retransmit timer has been fired across all OPSF areas and interfaces. lsa lock The sum total number of times the Link State Advertisement (LSA) lock timer has been fired across all OSPF areas and interfaces.
BLADE OS 5.1 ISCLI Reference VRRP Statistics Virtual Router Redundancy Protocol (VRRP) support on the GbE2c provides redundancy between routers in a LAN. This is accomplished by configuring the same virtual router IP address and ID number on each participating VRRP-capable routing device. One of the virtual routers is then elected as the master, based on a number of priority criteria, and assumes control of the shared virtual router IP address.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Management Processor Statistics Table 79 Management Processor Statistics Commands Command Syntax and Usage show mp packet Displays packet statistics, to check for leads and load. Command mode: All To view a sample output and a description of the stats, see page 157. show mp tcp-block Displays all TCP control blocks that are in use. Command mode: All To view a sample output and a description of the stats, see page 159.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Table 80 Packet Statistics (/stats/mp/pkt) Statistics Description hi-water time Time stamp that indicates when the hi-watermark was reached. medium packet buffers current Total number of packet allocations with size between 128 to 1536 bytes from the packet buffer pool by the TCP/IP protocol stack. hi-watermark The highest number of packet allocation with size between 128 to 1536 bytes from the packet buffer pool by the TCP/IP protocol stack.
BLADE OS 5.1 ISCLI Reference TCP Statistics The following command displays TCP statistics: show mp tcp-block Command mode: All except User EXEC All TCP allocated control blocks: 10ad41e8: 0.0.0.0 0 <=> 0.0.0.0 10ad5790: 47.81.27.5 1171 <=> 47.80.23.243 80 23 listen established Table 81 MP Specified TCP Statistics Statistics Description 10ad41e8/10ad5790 Memory 0.0.0.0/47.81.27.5 Destination IP address 0/1171 Destination port 0.0.0.0/47.80.23.
BLADE OS 5.1 ISCLI Reference CPU Statistics The following command displays the CPU utilization statistics: show mp cpu Command mode: All except User EXEC. CPU utilization: cpuUtil1Second: cpuUtil4Seconds: cpuUtil64Seconds: 53% 54% 54% Table 82 CPU Statistics Statistics Description cpuUtil1Second The utilization of MP CPU over 1 second. It shows the percentage. cpuUtil4Seconds The utilization of MP CPU over 4 seconds. It shows the percentage.
BLADE OS 5.1 ISCLI Reference Access Control List Statistics Table 83 ACL Statistics Commands Command Syntax and Usage show access-control list <1-762> counters Displays the Access Control List Statistics for a specific ACL. Command mode: All show access-control meter counters Displays statistics for a specific ACL Meter. Command mode: All For details, see page 162. show access-control counters Displays all ACL statistics.
BLADE OS 5.1 ISCLI Reference ACL Meter Statistics This option displays ACL meter statistics.
BLADE OS 5.
BLADE OS 5.1 ISCLI Reference Table 84 SNMP Statistics Statistic Description snmpInASNParseErrs The total number of ASN.1 or BER errors encountered by the SNMP protocol entity when decoding SNMP Messages received. Note: OSI's method of specifying abstract objects is called ASN.1 (Abstract Syntax Notation One, defined in X.208), and one set of rules for representing such objects as strings of ones and zeros is called the BER (Basic Encoding Rules, defined in X.209). ASN.
BLADE OS 5.1 ISCLI Reference Table 84 SNMP Statistics Statistic Description snmpInTotalReqVars The total number of MIB objects which have been retrieved successfully by the SNMP protocol entity as a result of receiving valid SNMP Get-Request and Get-Next Protocol Data Units (PDUs). snmpInTotalSetVars The total number of MIB objects, which have been altered successfully by the SNMP protocol entity as a result of receiving valid SNMP Set-Request Protocol Data Units (PDUs).
BLADE OS 5.1 ISCLI Reference Table 84 SNMP Statistics Statistic Description snmpOutGetNexts The total number of SNMP Get-Next Protocol Data Units (PDUs), which have been generated by the SNMP protocol entity. snmpOutSetRequests The total number of SNMP Set-Request Protocol Data Units (PDUs), which have been generated by the SNMP protocol entity. snmpOutGetResponses The total number of SNMP Get-Response Protocol Data Units (PDUs), which have been generated by the SNMP protocol entity.
BLADE OS 5.1 ISCLI Reference NTP Statistics BLADE OS uses NTP (Network Timing Protocol) version 3 to synchronize the switch’s internal clock with an atomic time calibrated NTP server. With NTP enabled, the switch can accurately update its internal clock to be consistent with other devices on the network and generates accurate syslogs.
BLADE OS 5.1 ISCLI Reference Table 85 NTP Statistics Field Description Primary Server Requests Sent: The total number of NTP requests the switch sent to the primary NTP server to synchronize time. Responses Received: The total number of NTP responses received from the primary NTP server. Updates: The total number of times the switch updated its time based on the NTP responses received from the primary NTP server.
BLADE OS 5.1 ISCLI Reference Server Link Failure Detection Statistics The following command allows you to display Server Link Failure Detection (SFD) statistics.
BLADE OS 5.
CHAPTER 4 Configuration Commands This chapter discusses how to use the Command Line Interface (CLI) for making, viewing, and saving switch configuration changes. Changes to configuration are not active until explicitly applied. Changes can be saved to non-volatile memory (NVRAM). Table 87 General Configuration Commands Command Syntax and Usage show running-config Dumps current configuration to a script file. Command mode: All For details, see page 342.
BLADE OS 5.1 ISCLI Reference Table 87 General Configuration Commands Command Syntax and Usage copy running-config {ftp|tftp} Backs up current configuration to a file on the selected FTP/TFTP server. Command mode: All copy {ftp|tftp} running-config Restores current configuration from a FTP/TFTP server. Command mode: All For details, see page 343. Viewing and Saving Changes As you use the configuration commands to set switch parameters, the changes you make take effect immediately.
BLADE OS 5.1 ISCLI Reference System Configuration These commands provide configuration of switch management parameters such as user and administrator privilege mode passwords, Web-based management settings, and management access lists. Table 88 System Configuration Commands Command Syntax and Usage system date - Prompts the user for the system date. The date retains its value when the switch is reset.
BLADE OS 5.1 ISCLI Reference Table 88 System Configuration Commands Command Syntax and Usage system notice <1-1024 characters multi-line with ‘-’ to end)> Displays login notice immediately before the “Enter password:” prompt. This notice can contain up to 1024 characters and new lines. Command mode: Global configuration [no] banner <1-80 characters> Configures a login banner of up to 80 characters. When a user or administrator logs into the switch, the login banner is displayed.
BLADE OS 5.1 ISCLI Reference System Host Log Configuration Table 89 Host Log Configuration Commands Command Syntax and Usage [no] logging host <1-2> address Sets the IP address of the first or second syslog host. Command mode: Global configuration logging host <1-2> severity <0-7> This option sets the severity level of the first or second syslog host displayed. The default is 7, which means log all severity levels.
BLADE OS 5.1 ISCLI Reference Secure Shell Server Configuration Telnet traffic on the network is not secure. The SSH program securely logs into another computer over a network and executes commands in a secure environment. All data using SSH is encrypted. These commands enable Secure Shell access from any SSH client. Table 90 SSH Server Configuration Commands Command Syntax and Usage ssh interval <0-24> Set the interval, in hours, for auto-generation of the RSA server key.
BLADE OS 5.1 ISCLI Reference Table 90 SSH Server Configuration Commands Command Syntax and Usage ssh enable Enables the SSH server. Command mode: Global configuration no ssh enable Disables the SSH server. Command mode: Global configuration show ssh Displays the current SSH server configuration.
BLADE OS 5.1 ISCLI Reference RADIUS Server Configuration Table 91 RADIUS Configuration Commands Command Syntax and Usage [no] radius-server primary-host Sets the primary RADIUS server address. Command mode: Global configuration [no] radius-server secondary-host Sets the secondary RADIUS server address. Command mode: Global configuration radius-server host key <1-32 characters> This is the primary shared secret between the switch and the RADIUS server(s).
BLADE OS 5.1 ISCLI Reference Table 91 RADIUS Configuration Commands Command Syntax and Usage [no] radius-server backdoor Enables or disables the RADIUS backdoor for Telnet/SSH/HTTP/HTTPS. The default value is disabled. To obtain the RADIUS backdoor password for your GbESM, contact your IBM Service and Support line. Command mode: Global configuration [no] radius-server secure-backdoor Enables or disables the RADIUS back door using secure password for Telnet/SSH/ HTTP/HTTPS.
BLADE OS 5.1 ISCLI Reference TACACS+ Server Configuration TACACS (Terminal Access Controller Access Control system) is an authentication protocol that allows a remote access server to forward a user's logon password to an authentication server to determine whether access can be allowed to a given system. TACACS is an encryption protocol, and therefore less secure than TACACS+ and Remote Authentication Dial-In User Service (RADIUS) protocols. (Both TACACS and TACACS+ are described in RFC 1492.
BLADE OS 5.1 ISCLI Reference Table 92 TACACS+ Server Commands Command Syntax and Usage [default] tacacs-server port Enter the number of the TCP port to be configured, between 1 and 65000. The default is 49. Command mode: Global configuration tacacs-server retransmit <1-3> Sets the number of failed authentication requests before switching to a different TACACS+ server. The default is 3 requests.
BLADE OS 5.1 ISCLI Reference Table 92 TACACS+ Server Commands Command Syntax and Usage [no] tacacs-server secure-backdoor Enables or disables TACACS+ secure back door access through Telnet, SSH/SCP, or HTTP/HTTPS only when the TACACS+ servers are not responding. This feature is recommended to permit access to the switch when the TACACS+ servers become unresponsive. If no back door is enabled, the only way to gain access when TACACS+ servers are unresponsive is to use the back door via the console port.
BLADE OS 5.1 ISCLI Reference Table 92 TACACS+ Server Commands Command Syntax and Usage [no] tacacs-server command-logging Enables or disables TACACS+ command logging. Command mode: Global configuration [no] tacacs-server directed-request [restricted|no-truncate] Enables or disables TACACS+ directed request, which uses a specified TACACS+ server for authentication, authorization, accounting.
BLADE OS 5.1 ISCLI Reference LDAP Server Configuration LDAP (Lightweight Directory Access Protocol) is an authentication protocol that allows a remote access server to forward a user's logon password to an authentication server to determine whether access can be allowed to a given system. Table 93 LDAP Configuration commands Command Syntax and Usage [no] ldap-server primary-host Sets the primary LDAP server address.
BLADE OS 5.1 ISCLI Reference Table 93 LDAP Configuration commands Command Syntax and Usage [no] ldap-server backdoor Enables or disables the LDAP backdoor for telnet. The telnet command also applies to SSH/SCP connections and the Browser-Based Interface (BBI). The default is disabled. To obtain the LDAP backdoor password for your switch, contact your IBM Service and Support line. Command mode: Global configuration ldap-server enable Enables the LDAP server.
BLADE OS 5.1 ISCLI Reference NTP Server Configuration These commands enable you to synchronize the switch clock to a Network Time Protocol (NTP) server. By default, this option is disabled. Table 94 NTP Configuration Commands Command Syntax and Usage [no] ntp primary-server Prompts for the IP addresses of the primary NTP server to which you want to synchronize the switch clock.
BLADE OS 5.1 ISCLI Reference Table 94 NTP Configuration Commands Command Syntax and Usage ntp enable Enables the NTP synchronization service. Command mode: Global configuration no ntp enable Disables the NTP synchronization service. Command mode: Global configuration show ntp Displays the current NTP service settings.
BLADE OS 5.1 ISCLI Reference System SNMP Configuration BLADE OS supports SNMP-based network management. In SNMP model of network management, a management station (client/manager) accesses a set of variables known as MIBs (Management Information Base) provided by the managed device (agent).
BLADE OS 5.1 ISCLI Reference Table 95 System SNMP Commands Command Syntax and Usage snmp-server read-community <1-32 characters> Configures the SNMP read community string. The read community string controls SNMP “get” access to the switch. It can have a maximum of 32 characters. The default read community string is public. Command mode: Global configuration snmp-server write-community <1-32 characters> Configures the SNMP write community string.
BLADE OS 5.1 ISCLI Reference Table 95 System SNMP Commands Command Syntax and Usage [no] snmp-server sfd-trap Enables or disables the sending of Server Link Failure Detection traps. The default setting is disabled. Command mode: Global configuration show snmp-server Displays the current SNMP configuration.
BLADE OS 5.1 ISCLI Reference SNMPv3 Configuration SNMP version 3 (SNMPv3) is an extensible SNMP Framework that supplements the SNMPv2 Framework by supporting the following: a new SNMP message format security for messages access control remote configuration of SNMP parameters For more details on the SNMPv3 architecture please refer to RFC2271 to RFC2276.
BLADE OS 5.1 ISCLI Reference Table 96 SNMPv3 Configuration Commands snmp-server group <1-16> A group maps the user name to the access group names and their access rights needed to access SNMP management objects. A group defines the access rights assigned to all names that belong to a particular group. Command mode: Global configuration To view command options, see page 198.
BLADE OS 5.1 ISCLI Reference Table 96 SNMPv3 Configuration Commands snmp-server version {v1v2v3|v3only} This command allows you to enable or disable the access to SNMP versions 1, 2 or 3. This command is enabled by default. Command mode: Global configuration show snmp-server v3 Displays the current SNMPv3 configuration. Command mode: All User Security Model Configuration You can make use of a defined set of user identities using this Security Model.
BLADE OS 5.1 ISCLI Reference Table 97 User Security Model Configuration Commands Command Syntax and Usage snmp-server user <1-16> privacy-protocol {des|none} privacy-password This command allows you to configure the type of privacy protocol and the privacy password. The privacy protocol protects messages from disclosure. The options are des (CBC-DES Symmetric Encryption Protocol) or none.
BLADE OS 5.1 ISCLI Reference SNMPv3 View Configuration Table 98 SNMPv3 View Configuration Commands Command Syntax and Usage snmp-server view <1-128> name <1-32 characters> This command defines the name for a family of view subtrees. Command mode: Global configuration snmp-server view <1-128> tree <1-32 characters> This command defines MIB tree, which when combined with the corresponding mask defines a family of view subtrees.
BLADE OS 5.1 ISCLI Reference View-based Access Control Model Configuration The view-based Access Control Model defines a set of services that an application can use for checking access rights of the user. Access control is needed when the user has to process SNMP retrieval or modification request from an SNMP entity. Table 99 View-based Access Control Model Commands Command Syntax and Usage snmp-server access <1-32> name <1-32 characters> Defines the name of the group.
BLADE OS 5.1 ISCLI Reference Table 99 View-based Access Control Model Commands Command Syntax and Usage no snmp-server access <1-32> Deletes the View-based Access Control entry. Command mode: Global configuration show snmp-server v3 access <1-32> Displays the View-based Access Control configuration.
BLADE OS 5.1 ISCLI Reference SNMPv3 Group Configuration Table 100 SNMPv3 Group Configuration Commands Command Syntax and Usage snmp-server group <1-16> security {usm|snmpv1|snmpv2} Defines the security model.
BLADE OS 5.1 ISCLI Reference SNMPv3 Community Table Configuration These commands are used for configuring the community table entry. The configured entry is stored in the community table list in the SNMP engine. This table is used to configure community strings in the Local Configuration Datastore (LCD) of SNMP engine.
BLADE OS 5.1 ISCLI Reference SNMPv3 Target Address Table Configuration These commands are used to configure the target transport entry. The configured entry is stored in the target address table list in the SNMP engine. This table of transport addresses is used in the generation of SNMP messages.
BLADE OS 5.1 ISCLI Reference Table 102 Target Address Table Configuration Commands Command Syntax and Usage no snmp-server target-address <1-16> Deletes the Target Address Table entry. Command mode: Global configuration show snmp-server v3 target-address <1-16> Displays the current Target Address Table configuration. Command mode: All SNMPv3 Target Parameters Table Configuration You can configure the target parameters entry and store it in the target parameters table in the SNMP engine.
BLADE OS 5.1 ISCLI Reference Table 103 Target Parameters Table Configuration Commands Command Syntax and Usage snmp-server target-parameters <1-16> user-name <1-32 characters> Defines the name that identifies the user in the USM table (page 193) on whose behalf the SNMP messages are generated using this entry.
BLADE OS 5.1 ISCLI Reference SNMPv3 Notify Table Configuration SNMPv3 uses Notification Originator to send out traps. A notification typically monitors a system for particular events or conditions, and generates Notification-Class messages based on these events or conditions. Table 104 Notify Table Commands Command Syntax and Usage snmp-server notify <1-16> name <1-32 characters> Defines a locally arbitrary, but unique, identifier associated with this SNMP notify entry.
BLADE OS 5.1 ISCLI Reference System Access Configuration Table 105 System Access Configuration Commands Command Syntax and Usage access user administrator-password access user operator-password access user user-password Allows you to change the password. You must enter the current password in use for validation. Command Mode: Global configuration [no] access http enable Enables or disables HTTP (Web) access to the Browser-Based Interface. It is enabled by default.
BLADE OS 5.1 ISCLI Reference Table 105 System Access Configuration Commands Command Syntax and Usage [no] access userbbi Enables or disables user configuration access through the Browser-Based Interface (BBI). Command mode: Global configuration show access Displays the current system access parameters.
BLADE OS 5.1 ISCLI Reference Management Network Configuration These commands are used to define IP address ranges which are allowed to access the switch for management purposes. Table 106 Management Network Configuration Commands Command Syntax and Usage access management-network Adds a defined network through which switch access is allowed through Telnet, SNMP, RIP, or the BLADE OS browser-based interface. A range of IP addresses is produced when used with a network mask address.
BLADE OS 5.1 ISCLI Reference User Access Control Configuration The following table describes user-access control commands. Passwords can be a maximum of 128 characters. Table 107 User Access Control Configuration Commands Command Syntax and Usage access user <1-10> Configures the User ID. Command mode: Global configuration access user eject Ejects the specified user from the switch. Command mode: Global configuration access user user-password <1-128 characters> Sets the user (user) password.
BLADE OS 5.1 ISCLI Reference System User ID Configuration Table 108 User ID Configuration Commands Command Syntax and Usage access user <1-10> level {user|operator|administrator} Sets the Class-of-Service to define the user’s authority level. BLADE OS defines these levels as: User, Operator, and Administrator, with User being the most restricted level. Command mode: Global configuration access user <1-10> name <1-8 characters> Defines the user name of maximum eight characters.
BLADE OS 5.1 ISCLI Reference Table 108 User ID Configuration Commands Command Syntax and Usage no access user <1-10> enable Disables the user ID. Command mode: Global configuration no access user <1-10> Deletes the user ID. Command mode: Global configuration show access user Displays the current user ID configuration.
BLADE OS 5.1 ISCLI Reference HTTPS Access Configuration Table 109 HTTPS Access Configuration Commands Command Syntax and Usage [no] access https enable Enables or disables BBI access (Web access) using HTTPS. Command mode: Global configuration [default] access https port [] Defines the HTTPS Web server port number. Command mode: Global configuration access https generate-certificate Allows you to generate a certificate to connect to the SSL to be used during the key exchange.
BLADE OS 5.1 ISCLI Reference sFlow Configuration sFlow is a sampling method used for monitoring high speed switched networks. Use this menu to configure the sFlow agent on the switch. Table 110 sFlow Configuration commands Command Syntax and Usage sflow enable Enables the sFlow agent. Command mode: Global configuration no sflow enable Disables the sFlow agent. Command mode: Global configuration sflow server Defines the sFlow server address.
BLADE OS 5.1 ISCLI Reference sFlow Port Configuration Use the following commands to configure the sFlow port on the switch. Table 111 sFlow Port Configuration commands Command Syntax and Usage [no] sflow polling <5-60> Configures the sFlow polling interval, in seconds. The default setting is disabled. Command mode: Interface port [no] sflow sampling <256-65536> Configures the sFlow sampling rate, in packets per sample. The default setting is disabled.
BLADE OS 5.1 ISCLI Reference Port Configuration Use the Port Configuration commands to configure settings for switch ports. Note – Port 19 is reserved for switch management. Table 112 Port Configuration Commands Command Syntax and Usage interface port Enter Interface port mode. Command mode: Global configuration dot1p <0-7> Configures the port’s 802.1p priority level.
BLADE OS 5.1 ISCLI Reference Table 112 Port Configuration Commands Command Syntax and Usage [no] tagging Disables or enables VLAN tagging for this port. The default setting is disabled for uplink ports and enabled for downlink ports. Command mode: Interface port [no] tag-pvid Disables or enables VLAN tag persistence. When disabled, the VLAN tag is removed from packets whose VLAN tag matches the port PVID.
BLADE OS 5.1 ISCLI Reference Table 112 Port Configuration Commands Command Syntax and Usage shutdown Disables the port. (To temporarily disable a port without changing its configuration attributes, refer to “Temporarily Disabling a Port” on page 217.) Command mode: Interface port show interface port Displays current port parameters.
BLADE OS 5.1 ISCLI Reference Port Link Configuration Use these commands to set flow control for the port link. Table 113 Port Link Configuration Commands Command Syntax and Usage speed {10|100|1000|10000|auto} Sets the link speed. Some options are not valid on all ports. The choices include: 10 Mbps 100 Mbps 1000 Mbps 10000 Mps any (auto negotiate port speed) Command mode: Interface port duplex {full|half|any} Sets the operating mode.
BLADE OS 5.1 ISCLI Reference Temporarily Disabling a Port To temporarily disable a port without changing its stored configuration attributes, enter the following command at any prompt: Router# interface port shutdown Because this configuration sets a temporary state for the port, you do not need to use a save operation. The port state will revert to its original configuration when the GbE2c is reset. See the “Operations Commands” on page 345 for other operations-level commands.
BLADE OS 5.1 ISCLI Reference Port OAM Configuration Operation, Administration, and Maintenance (OAM) protocol allows the switch to detect faults on the physical port links. OAM is described in the IEEE 802.3ah standard. OAM commands are described in the following table. Table 115 Port OAM Configuration commands Command Syntax and Usage oam {active|passive} Configures the OAM discovery mode, as follows: Active: This port link initiates OAM discovery.
BLADE OS 5.1 ISCLI Reference ACL Port Configuration Table 116 ACL/QoS Configuration Commands Command Syntax and Usage access-control list <1-762> Adds the specified ACL list to the port. You can add multiple ACL lists to a port. Command mode: Interface port no access-control list <1-762> Deletes the specified ACL list from the port. Command mode: Interface port access-control group <1-762> Adds the specified ACL Group to the port. You can add multiple ACL Groups to a port.
BLADE OS 5.1 ISCLI Reference Port Spanning Tree Configuration Table 117 Port STP menu options (/cfg/port/stp) Command Syntax and Usage [no] spanning-tree edge Enables or disables this port as an edge port. An edge port is not connected to a bridge, and can begin forwarding traffic as soon as the link is up. Configure server ports as edge ports (enabled).
BLADE OS 5.1 ISCLI Reference Quality of Service Configuration Quality of Service (QoS) commands configure the 802.1p priority value and DiffServ Code Point value of incoming packets. This allows you to differentiate between various types of traffic, and provide different priority levels. 802.1p Configuration This feature provides the switch the capability to filter IP packets based on the 802.1p bits in the packet's VLAN header. The 802.
BLADE OS 5.1 ISCLI Reference Access Control Configuration Use these commands to create Access Control Lists and ACL Groups. ACLs define matching criteria used for IP filtering and Quality of Service functions. Table 119 General ACL Configuration Commands Command Syntax and Usage [no] access-control list <1-762> Configures an Access Control List. Command mode: Global configuration To view command options, see page 223. [no] access-control group <1-762> Configures an ACL Group.
BLADE OS 5.1 ISCLI Reference Access Control List Configuration These commands allow you to define filtering criteria for each Access Control List (ACL). Table 120 ACL Configuration Commands Command Syntax and Usage [no] access-control list <1-762> egress-port Configures the ACL to function on egress packets. Command mode: Global configuration access-control list <1-762> action {permit|deny|set-priority <0-7>} Configures a filter action for packets that match the ACL definitions.
BLADE OS 5.1 ISCLI Reference Ethernet Filtering Configuration These commands allow you to define Ethernet matching criteria for an ACL. Table 121 Ethernet Filtering Configuration Commands Command Syntax and Usage [no] access-control list <1-762> ethernet source-mac-address Defines the source MAC address for this ACL.
BLADE OS 5.1 ISCLI Reference Table 121 Ethernet Filtering Configuration Commands Command Syntax and Usage no access-control list <1-762> ethernet Removes Ethernet parameters for the ACL. Command mode: Global configuration show access-control list <1-762> ethernet Displays the current Ethernet parameters for the ACL.
BLADE OS 5.1 ISCLI Reference IPv4 Filtering Configuration These commands allow you to define IPv4 matching criteria for an ACL. Table 122 IP version 4 Filtering Configuration Commands Command Syntax and Usage [no] access-control list <1-762> ipv4 source-ip-address Defines a source IP address for the ACL. If defined, traffic with this source IP address will match this ACL. Specify an IP address in dotted decimal notation.
BLADE OS 5.1 ISCLI Reference Table 122 IP version 4 Filtering Configuration Commands Command Syntax and Usage default access-control list <1-762> ipv4 Resets the IPv4 parameters for the ACL to their default values. Command mode: Global configuration show access-control list <1-762> ipv4 Displays the current IPV4 parameters.
BLADE OS 5.1 ISCLI Reference TCP/UDP Filtering Configuration These commands allow you to define TCP/UDP matching criteria for an ACL. Table 123 TCP/UDP Filtering Configuration Commands Command Syntax and Usage [no] access-control list <1-762> tcp-udp source-port <1-65535> Defines a source port for the ACL. If defined, traffic with the specified TCP or UDP source port will match this ACL. Specify the port number.
BLADE OS 5.1 ISCLI Reference Table 123 TCP/UDP Filtering Configuration Commands Command Syntax and Usage default access-control list <1-762> tcp-udp Resets the TCP/UDP parameters for the ACL to their default values. Command mode: Global configuration show access-control list <1-762> tcp-udp Displays the current TCP/UDP Filtering parameters. Command mode: All except User EXEC ACL Metering Commands These commands define the Access Control profile for the selected ACL.
BLADE OS 5.1 ISCLI Reference Table 124 Metering Command Options Command Syntax and Usage default access-control list <1-762> meter Reset ACL Metering parameters to their default values. Command mode: Interface port show access-control list <1-762> Displays the current ACL parameters.
BLADE OS 5.1 ISCLI Reference ACL Re-Mark Commands You can choose to re-mark IP header data for the selected ACL. You can configure different re-mark values, based on whether packets fall within the ACL Metering profile, or out of the ACL Metering profile. Re-Mark In-Profile Commands Table 125 Re-Mark In-Profile Commands Command Syntax and Usage access-control list <1-762> re-mark in-profile dscp <0-63> Sets the DiffServ Code Point (DSCP) of In-Profile packets to the selected value.
BLADE OS 5.1 ISCLI Reference Table 126 Re-mark User Priority Command Options Command Syntax and Usage default access-control list <1-762> re-mark Resets UP1P settings to their default values. Command mode: Interface port show access-control list <1-762> Displays the current ACL parameters.
BLADE OS 5.1 ISCLI Reference Packet Format Filtering Configuration These commands allow you to define Packet Format matching criteria for an ACL. Table 128 Packet Format Filtering Configuration Commands Command Syntax and Usage access-control list <1-762> packet-format ethernet {ethertype2| snap|llc} Defines the Ethernet format for the ACL. Command mode: Global configuration [no] access-control list <1-762> packet-format tagged Defines the tagging format for the ACL.
BLADE OS 5.1 ISCLI Reference ACL Group Configuration These commands allow you to compile one or more ACLs into an ACL Group. Once you create an ACL Group, you can assign the ACL Group to one or more ports. Table 129 ACL Group Configuration Commands Command Syntax and Usage access-control group <1-762> list <1-762> Adds the selected ACL to the ACL Group. Command mode: Global configuration no access-control group <1-762> list <1-762> Removes the selected ACL from the ACL Group.
BLADE OS 5.1 ISCLI Reference Port Mirroring Port mirroring is disabled by default. For more information about port mirroring on the switch, see “Appendix A: Troubleshooting” in the BLADE OS 5.1 Application Guide. Note – Traffic on VLAN 4095 is not mirrored to the uplink ports. Port Mirroring commands are used to configure, enable, and disable the monitored port. When enabled, network packets being sent and/or received on a target port are duplicated and sent to a monitor port.
BLADE OS 5.1 ISCLI Reference Port-Mirroring Configuration Table 131 Port-Based Port-Mirroring Configuration Commands Command Syntax and Usage port-mirroring monitor-port mirroring-port {in|out|both} Adds the port to be mirrored. This command also allows you to enter the direction of the traffic.
BLADE OS 5.1 ISCLI Reference Layer 2 Configuration The following table describes basic Layer 2 Configuration commands. The following sections provide more detailed information and commands. Table 132 Layer 2 Configuration Commands Command Syntax and Usage vlan Enter VLAN configuration mode. Command mode: Global configuration To view command options, see page 276. [no] spanning-tree pvst-compatibility Enables or disables VLAN tagging of spanning tree BPDUs. The default setting is enabled.
BLADE OS 5.1 ISCLI Reference 802.1X Configuration These commands allow you to configure the switch as an IEEE 802.1X Authenticator, to provide port-based network access control. Table 133 802.1x Configuration Commands Command Syntax and Usage dot1x enable Globally enables 802.1X. Command mode: Global configuration no dot1x enable Globally disables 802.1X. Command mode: Global configuration show dot1x Displays current 802.1X parameters.
BLADE OS 5.1 ISCLI Reference 802.1X Global Configuration The global 802.1X menu allows you to configure parameters that affect all switch ports (except the management port). Table 134 802.1X Global Configuration Commands Command Syntax and Usage dot1x mode [force-unauthorized|auto|force-authorized] Sets the type of access control for all ports: force-unauthorized - the port is unauthorized unconditionally. auto - the port is unauthorized until it is successfully authorized by the RADIUS server.
BLADE OS 5.1 ISCLI Reference Table 134 802.1X Global Configuration Commands Command Syntax and Usage dot1x server-timeout <1-65535> Sets the time, in seconds, the authenticator waits for a response from the RADIUS server before declaring an authentication timeout. The default value is 30 seconds.
BLADE OS 5.1 ISCLI Reference 802.1X Guest VLAN Configuration The 802.1X Guest VLAN menu allows you to configure a Guest VLAN for unauthenticated ports. The Guest VLAN provides limited access to switch functions. Table 135 802.1X Guest VLAN Configuration Commands Command Syntax and Usage [no] dot1x guest-vlan vlan Configures the Guest VLAN number. Command mode: Global configuration dot1x guest-vlan enable Enables the 802.1X Guest VLAN.
BLADE OS 5.1 ISCLI Reference 802.1X Port Configuration The 802.1X port commands allows you to configure parameters that affect the selected port in the switch. These settings override the global 802.1X parameters. Table 136 802.1X Port Commands Command Syntax and Usage dot1x mode force-unauthorized|auto|force-authorized Sets the type of access control for the port: force-unauthorized - the port is unauthorized unconditionally.
BLADE OS 5.1 ISCLI Reference Table 136 802.1X Port Commands Command Syntax and Usage dot1x server-timeout <1-65535> Sets the time, in seconds, the authenticator waits for a response from the RADIUS server before declaring an authentication timeout. The default value is 30 seconds. The time interval between transmissions of the RADIUS Access-Request packet containing the supplicant’s (client’s) EAP-Response packet is determined by the current setting of the radius-server timeout command.
BLADE OS 5.1 ISCLI Reference Table 136 802.1X Port Commands Command Syntax and Usage dot1x apply-global Applies current global 802.1X configuration parameters to the port. Command mode: Interface port show interface port dot1x Displays current 802.1X port parameters.
BLADE OS 5.1 ISCLI Reference RSTP/MSTP/PVRST Configuration BLADE OS supports the IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) and IEEE 802.1s Multiple Spanning Tree Protocol (MSTP), and Per VLAN Rapid Spanning Tree Protocol (PVRST). MSTP allows you to map many VLANs to a small number of Spanning Tree Groups (STGs), each with its own topology. Up to 32 Spanning Tree Groups can be configured in MSTP mode. MSTP is turned off by default.
BLADE OS 5.1 ISCLI Reference Table 137 Multiple Spanning Tree Configuration Commands Command Syntax and Usage spanning-tree mode [mst|pvrst|pvst|rstp] Selects and enables Multiple Spanning Tree mode (mst), Per VLAN Rapid Spanning Tree mode (pvrst), Per VLAN Spanning Tree mode (pvst), or Rapid Spanning Tree mode (rstp). The default mode is RSTP. Command mode: Global configuration show spanning-tree mstp mrst Displays the current RSTP/MSTP/PVRST configuration. Command mode: All IEEE 802.
BLADE OS 5.1 ISCLI Reference Common Internal Spanning Tree Configuration Table 138 describes the commands used to configure Common Internal Spanning Tree (CIST) parameters. The CIST provides compatibility with different MSTP regions and with devices running different Spanning Tree instances. It is equivalent to Spanning Tree Group 0. Table 138 CIST Configuration Commands Command Syntax and Usage default spanning-tree mstp cist Resets all CIST parameters to their default values.
BLADE OS 5.1 ISCLI Reference Table 139 CIST Bridge Configuration Commands Command Syntax and Usage spanning-tree mstp cist-bridge forward-delay <4-30> Configures the CIST bridge forward delay parameter. The forward delay parameter specifies the amount of time that a bridge port has to wait before it changes from the listening state to the learning state and from the learning state to the forwarding state. The range is 4 to 30 seconds, and the default is 15 seconds.
BLADE OS 5.1 ISCLI Reference CIST Port Configuration CIST port parameters are used to modify MSTP operation on an individual port basis. CIST parameters do not affect operation of STP/PVST+. For each port, RSTP/MSTP is turned on by default. Table 140 CIST Port Configuration Commands Command Syntax and Usage spanning-tree mstp cist interface-priority <0-240> Configures the CIST port priority. The port priority helps determine which bridge port becomes the designated port.
BLADE OS 5.1 ISCLI Reference Table 140 CIST Port Configuration Commands Command Syntax and Usage spanning-tree mstp cist link-type {auto|p2p|shared} Defines the type of link connected to the port, as follows: auto: Configures the port to detect the link type, and automatically match its settings. p2p: Configures the port for Point-To-Point protocol. shared: Configures the port to connect to a shared medium (usually a hub). The default link type is auto.
BLADE OS 5.1 ISCLI Reference Spanning Tree Configuration BLADE OS supports the IEEE 802.1D Spanning Tree Protocol (STP). STP is used to prevent loops in the network topology. Up to 128 Spanning Tree Groups can be configured on the switch (STG 128 is reserved for management). Note – When RSTP is turned on, only STG 1 can be configured.
BLADE OS 5.1 ISCLI Reference Bridge Spanning Tree Configuration Spanning Tree bridge parameters affect the global STG operation of the switch. STG bridge parameters include: Bridge priority Bridge hello time Bridge maximum age Forwarding delay Table 142 Bridge Spanning Tree Configuration Commands Command Syntax and Usage spanning-tree stp bridge priority <0-65535> Configures the bridge priority.
BLADE OS 5.1 ISCLI Reference Table 142 Bridge Spanning Tree Configuration Commands Command Syntax and Usage spanning-tree stp bridge forward-delay <4-30> Configures the bridge forward delay parameter. The forward delay parameter specifies the amount of time that a bridge port has to wait before it changes from the listening state to the learning state and from the learning state to the forwarding state. The range is 4 to 30 seconds, and the default is 15 seconds.
BLADE OS 5.1 ISCLI Reference Spanning Tree Port Configuration By default for STP/PVST+, Spanning Tree is turned off for downlink ports and management ports, and turned on for cross-connect ports and uplink ports. By default for RSTP/MSTP, Spanning Tree is turned off for downlink ports and management ports, and turned on for uplink ports, with downlink ports configured as edge ports. STG port parameters include: Port priority Port path cost The port option of STG is turned on by default.
BLADE OS 5.1 ISCLI Reference Table 143 Spanning Tree Port Commands Command Syntax and Usage [no] spanning-tree stp edge Enables or disables this port as an edge port. An edge port is not connected to a bridge, and can begin forwarding traffic as soon as the link is up. Configure server ports as edge ports (enabled). Command mode: Interface port spanning-tree stp enable Enables STG on the port.
BLADE OS 5.1 ISCLI Reference Static FDB Configuration Use the following commands to configure static entries in the Forwarding Database (FDB). Table 145 FDB configuration commands Command Syntax and Usage mac-address-table static Adds a permanent FDB entry.
BLADE OS 5.1 ISCLI Reference Static Multicast MAC Configuration The following options are available to control the forwarding of known and unknown multicast packets: All multicast packets are flooded to the entire VLAN. This is the default switch behavior. Known multicast packets are forwarded only to those ports specified. Unknown multicast packets are flooded to the entire VLAN.
BLADE OS 5.1 ISCLI Reference LLDP Configuration Use the following commands to configure Link Layer Detection Protocol (LLDP). Table 147 LLDP commands Command Syntax and Usage lldp refresh-interval <5-32768> Configures the message transmission interval, in seconds. The default value is 30. Command mode: Global configuration lldp holdtime-multiplier <2-10> Configures the message hold time multiplier. The hold time is configured as a multiple of the message transmission interval. The default value is 4.
BLADE OS 5.1 ISCLI Reference Table 147 LLDP commands Command Syntax and Usage no lldp enable Globally turns LLDP off. Command mode: Global configuration show lldp Display current LLDP configuration. Command mode: All LLDP Port Configuration Use the following commands to configure LLDP port options.
BLADE OS 5.1 ISCLI Reference LLDP Optional TLV configuration Use the following commands to configure LLDP port TLV (Type, Length, Value) options for the selected port. Table 149 Optional TLV commands Command Syntax and Usage [no] lldp tlv portdesc Enables or disables the Port Description information type. Command mode: Interface port [no] lldp tlv sysname Enables or disables the System Name information type.
BLADE OS 5.1 ISCLI Reference Table 149 Optional TLV commands Command Syntax and Usage [no] lldp tlv protid Enables or disables the Protocol ID information type. Command mode: Interface port [no] lldp tlv macphy Enables or disables the MAC/Phy Configuration information type. Command mode: Interface port [no] lldp tlv powermdi Enables or disables the Power via MDI information type. Command mode: Interface port [no] lldp tlv linkaggr Enables or disables the Link Aggregation information type.
BLADE OS 5.1 ISCLI Reference Trunk Configuration Trunk groups can provide super-bandwidth connections between switches or other trunk capable devices. A trunk is a group of ports that act together, combining their bandwidth to create a single, larger port. Up to 12 trunk groups can be configured on the switch, with the following restrictions: Any physical switch port can belong to no more than one trunk group. Up to 8 ports can belong to the same trunk group.
BLADE OS 5.1 ISCLI Reference IP Trunk Hash Configuration Use the following commands to configure IP trunk hash settings for the switch. The trunk hash settings affect both static trunks and LACP trunks. Table 151 IP Trunk Hash commands Command Syntax and Usage show portchannel hash Display current trunk hash configuration. Command mode: All Layer 2 IP Trunk Hash Configuration Trunk hash parameters are set globally for the switch.
BLADE OS 5.1 ISCLI Reference Table 152 Layer 2 IP Trunk Hash commands Command Syntax and Usage portchannel hash source-ip-address Enable trunk hashing on the source IP. Command mode: Global configuration portchannel hash destination-ip-address Enable trunk hashing on the destination IP. Command mode: Global configuration portchannel hash source-destination-ip Enable trunk hashing on the source and destination IP.
BLADE OS 5.1 ISCLI Reference Link Aggregation Control Protocol Configuration Use the following commands to configure Link Aggregation Control Protocol (LACP) for the switch. Table 153 Link Aggregation Control Protocol Commands Command Syntax and Usage [default] lacp system-priority <1-65535> Defines the priority value for the switch. Lower numbers provide higher priority. The default value is 32768.
BLADE OS 5.1 ISCLI Reference LACP Port Configuration Use the following commands to configure Link Aggregation Control Protocol (LACP) for the selected port. Table 154 Link Aggregation Control Protocol Commands Command Syntax and Usage [default] lacp mode {off|active|passive} Set the LACP mode for this port, as follows: off Turn LACP off for this port. You can use this port to manually configure a static trunk. The default value is off. active Turn LACP on and set this port to active.
BLADE OS 5.1 ISCLI Reference Failover Configuration Use these commands to configure Layer 2 Failover. For more information about Layer 2 Failover, see “High Availability” in the BLADE OS Application Guide. Table 155 Layer 2 Failover Configuration Commands Command Syntax and Usage failover vlan Globally turns VLAN monitor on. When the VLAN Monitor is on, the switch automatically disables only downlink ports that belong to the same VLAN as ports in the failover trigger. The default value is off.
BLADE OS 5.1 ISCLI Reference Failover Trigger Configuration Table 156 Failover Trigger Configuration Commands Command Syntax and Usage [no] failover trigger <1-8> enable Enables or disables the Failover trigger. Command mode: Global configuration no failover trigger <1-8> Deletes the Failover trigger. Command mode: Global configuration failover trigger <1-8> limit <0-1024> Configures the minimum number of operational links allowed within each trigger before the trigger initiates a failover event.
BLADE OS 5.1 ISCLI Reference Auto Monitor Configuration Table 157 Auto Monitor Configuration Commands Command Syntax and Usage failover trigger <1-8> amon trunk Adds a trunk group to the Auto Monitor. Command mode: Global configuration no failover trigger <1-8> amon trunk Removes a trunk group from the Auto Monitor. Command mode: Global configuration failover trigger <1-8> amon admin-key <1-65535> Adds a LACP admin key to the Auto Monitor.
BLADE OS 5.1 ISCLI Reference Failover Manual Monitor - Monitor Configuration Use this menu to define the port link(s) to monitor. The Manual Monitor - Monitor configuration accepts only external uplink ports. Table 158 Failover Manual Monitor - Monitor commands Command Syntax and Usage failover trigger <1-8> mmon monitor member Adds the selected port to the Manual Monitor - Monitor.
BLADE OS 5.1 ISCLI Reference Failover Manual Monitor - Control Configuration Use this menu to define the port link(s) to control. The Manual Monitor - Control configuration accepts downlink and uplink ports, but not management ports. Table 159 Failover Manual Monitor - Control commands Command Syntax and Usage failover trigger <1-8> mmon control member Adds the selected port to the Manual Monitor - Control.
BLADE OS 5.1 ISCLI Reference Hot Links Configuration Use these commands to configure Hot Links. For more information about Hot Links, see “Hot Links” in the BLADE OS 5.1 Application Guide. Table 160 Hot Links Configuration Commands Command Syntax and Usage [no] hotlinks bpdu Enables or disables the ability to flood BPDUs on the active Hot Links interface when the interface belongs to a Spanning Tree group that is globally turned off. The default value is disabled.
BLADE OS 5.1 ISCLI Reference Hot Links Trigger Configuration Table 161 Hot Links Trigger Configuration Commands Command Syntax and Usage hotlinks trigger <1-5> forward-delay <0-3600> Configures the Forward Delay interval, in seconds. The default value is 1. Command mode: Global configuration hotlinks trigger <1-5> name <1-32 characters> Defines a name for the Hot Links trigger.
BLADE OS 5.1 ISCLI Reference Hot Links Master Configuration Use the following commands to configure the Hot Links Master interface. Table 162 Hot Links Master Configuration Commands Command Syntax and Usage [no] hotlinks trigger <1-5> master port Adds the selected port to the Hot Links Master interface. Enter zero (0) to clear the port. Command mode: Global configuration [no] hotlinks trigger <1-5> master portchannel Adds the selected trunk group to the Master interface.
BLADE OS 5.1 ISCLI Reference Hot Links Backup Configuration Use the following commands to configure the Hot Links Backup interface. Table 163 Hot Links Backup Configuration Commands Command Syntax and Usage [no] hotlinks trigger <1-5> backup port Adds the selected port to the Hot Links Backup interface. Enter zero (0) to clear the port. Command mode: Global configuration [no] hotlinks trigger <1-5> backup portchannel Adds the selected trunk group to the Backup interface.
BLADE OS 5.1 ISCLI Reference VLAN Configuration These commands configure VLAN attributes, change the status of each VLAN, change the port membership of each VLAN, and delete VLANs. By default, VLAN 1 is the only VLAN configured on the switch. Downlink ports and uplink ports are in VLAN 1 by default. Up to 1000 VLANs can be configured on the switch. VLAN 4095 is reserved for switch management. Table 164 VLAN Configuration Commands Command Syntax and Usage vlan Enter VLAN configuration mode.
BLADE OS 5.1 ISCLI Reference Table 164 VLAN Configuration Commands Command Syntax and Usage enable Enables this VLAN. Command mode: VLAN no enable Disables this VLAN without removing it from the configuration. Command mode: VLAN no vlan Deletes this VLAN. Command mode: VLAN show vlan information Displays the current VLAN configuration. Command mode: All Note – All ports must belong to at least one VLAN.
BLADE OS 5.1 ISCLI Reference Protocol-Based VLAN Configuration Use the following commands to configure Protocol-based VLAN for the selected VLAN. Table 165 Protocol VLAN commands Command Syntax and Usage protocol-vlan <1-8> frame-type {ether2|llc|snap} Configures the frame type and the Ethernet type for the selected protocol. Ethernet type consists of a 4-digit (16 bit) hex code, such as 0080 (IPv4).
BLADE OS 5.1 ISCLI Reference Table 165 Protocol VLAN commands Command Syntax and Usage no protocol-vlan <1-8> member Removes a port from the selected PVLAN. Command mode: VLAN no protocol-vlan <1-8> Deletes the selected protocol configuration from the VLAN. Command mode: VLAN protocol-vlan <1-8> enable Enables the selected protocol on the VLAN. Command mode: VLAN no protocol-vlan <1-8> enable Disables the selected protocol on the VLAN.
BLADE OS 5.1 ISCLI Reference Private VLAN Configuration Use the following commands to configure Private VLAN. Table 166 Private VLAN commands Command Syntax and Usage private-vlan type primary Configures the VLAN type as a Primary VLAN. A Private VLAN must have only one primary VLAN. The primary VLAN carries unidirectional traffic to ports on the isolated VLAN or to community VLAN. Command mode: VLAN private-vlan type community Configures the VLAN type as a community VLAN.
BLADE OS 5.1 ISCLI Reference Table 166 Private VLAN commands Command Syntax and Usage private-vlan enable Enables the private VLAN. Command mode: VLAN no private-vlan enable Disables the Private VLAN. Command mode: VLAN show private-vlan [<2-4094>] Displays current parameters for the selected Private VLAN(s).
BLADE OS 5.1 ISCLI Reference Layer 3 Configuration The following table describes basic Layer 3 Configuration commands. The following sections provide more detailed information and commands. Table 167 Layer 3 Configuration Commands Command Syntax and Usage interface ip Configures the IP Interface. Command mode: Global configuration To view command options, see page 284. route-map {<1-32>} Enter IP Route Map mode.
BLADE OS 5.1 ISCLI Reference Table 167 Layer 3 Configuration Commands Command Syntax and Usage ip router-id Sets the router ID. Command mode: Global configuration show layer3 Displays the current IP configuration.
BLADE OS 5.1 ISCLI Reference IP Interface Configuration The switch supports up to 256 IP interfaces. Each IP interface represents the switch on an IP subnet on your network. The Interface option is disabled by default. Table 168 IP Interface Configuration Commands Command Syntax and Usage interface ip Enter IP interface mode. Command mode: Global configuration ip address [] Configures the IP address of the switch interface, using dotted decimal notation.
BLADE OS 5.1 ISCLI Reference Table 168 IP Interface Configuration Commands Command Syntax and Usage no interface ip Removes this IP interface. Command mode: Interface IP show interface ip Displays the current interface settings. Command mode: All Note – If you enter an IP address for interface 1, you are prompted to change the BOOTP setting. Default Gateway Configuration The switch can be configured with up to 4 IPv4 gateways.
BLADE OS 5.1 ISCLI Reference Table 169 Default Gateway Commands Command Syntax and Usage [no] ip gateway <1-4> arp-health-check Enables or disables Address Resolution Protocol (ARP) health checks. The default setting is disabled. The arp option does not apply to management gateways. Command mode: Global configuration ip gateway <1-4> enable Enables the gateway for use. Command mode: Global configuration no ip gateway <1-4> enable Disables the gateway.
BLADE OS 5.1 ISCLI Reference IPv4 Static Route Configuration Up to 128 IPv4 static routes can be configured. Table 170 IP Static Route Configuration Commands Command Syntax and Usage ip route [] Adds a static route. You will be prompted to enter a destination IP address, destination subnet mask, and gateway address. Enter all addresses using dotted decimal notation.
BLADE OS 5.1 ISCLI Reference ARP Configuration Address Resolution Protocol (ARP) is the TCP/IP protocol that resides within the Internet layer. ARP resolves a physical address from an IP address. ARP queries machines on the local network for their physical addresses. ARP also maintains IP to physical address pairs in its cache memory. In any IP communication, the ARP cache is consulted to see if the IP address of the computer or the router is present in the ARP cache.
BLADE OS 5.1 ISCLI Reference ARP Static Configuration Static ARP entries are permanent in the ARP cache and do not age out like the ARP entries that are learned dynamically. Static ARP entries enable the switch to reach the hosts without sending an ARP broadcast request to the network. Static ARPs are also useful to communicate with devices that do not respond to ARP requests.
BLADE OS 5.1 ISCLI Reference IP Forwarding Configuration Table 173 IP Forwarding Configuration Commands Command Syntax and Usage [no] ip routing directed-broadcasts Enables or disables forwarding directed broadcasts. The default setting is disabled. Command mode: Global configuration [no] ip routing no-icmp-redirect Enables or disables ICMP re-directs. The default setting is disabled. Command mode: Global configuration ip routing Enables IP forwarding (routing) on the switch.
BLADE OS 5.1 ISCLI Reference Network Filter Configuration Table 174 IP Network Filter Configuration Commands Command Syntax and Usage ip match-address <1-256> Sets the starting IP address and IP Netmask for this filter to define the range of IP addresses that will be accepted by the peer when the filter is enabled. The default address is 0.0.0.0 0.0.0.0 Command mode: Global configuration. ip match-address <1-256> enable Enables the Network Filter configuration.
BLADE OS 5.1 ISCLI Reference Route Map Configuration Note – The map number (1-32) represents the routing map you wish to configure. Routing maps control and modify routing information. Table 175 Routing Map Configuration Commands Command Syntax and Usage route-map <1-32> Enter route map configuration mode. Command mode: Route map [no] access-list <1-8> Configures the Access List. Command mode: Route map For more information, see page 293. [no] metric <1-16777214> Sets the metric of the matched route.
BLADE OS 5.1 ISCLI Reference Table 175 Routing Map Configuration Commands Command Syntax and Usage no enable Disables the route map. Command mode: Route map no route-map <1-32> Deletes the route map. Command mode: Route map show route-map [<1-32>] Displays the current route configuration. Command mode: All except User EXEC IP Access List Configuration Note – The route map number (1-32) and the access list number (1-8) represent the IP access list you wish to configure.
BLADE OS 5.1 ISCLI Reference Table 176 IP Access List Configuration Commands Command Syntax and Usage access-list <1-8> enable Enables the access list. Command mode: Route map no access-list <1-8> enable Disables the access list. Command mode: Route map no access-list <1-8> Deletes the access list. Command mode: Route map show route-map <1-32> access-list <1-8> Displays the current Access List configuration.
BLADE OS 5.1 ISCLI Reference Table 177 Routing Information Protocol Commands Command Syntax and Usage enable Globally turns RIP on. Command mode: Router RIP no enable Globally turns RIP off. Command mode: Router RIP show ip rip Displays the current RIP configuration. Command mode: All except User EXEC Routing Information Protocol Interface Configuration RIP Commands are used for configuring Routing Information Protocol parameters. This option is turned off by default.
BLADE OS 5.1 ISCLI Reference Table 178 RIP Interface Commands Command Syntax and Usage [no] ip rip poison When enabled, the switch uses split horizon with poisoned reverse. When disabled, the switch uses only split horizon. The default value is disabled. Command mode: Interface IP [no] ip rip split-horizon Enables or disables split horizon. The default value is enabled. Command mode: Interface IP [no] ip rip triggered Enables or disables Triggered Updates. Triggered Updates are used to speed convergence.
BLADE OS 5.1 ISCLI Reference Table 178 RIP Interface Commands Command Syntax and Usage ip rip authentication key Configures the authentication key password. Command mode: Interface IP ip rip enable Enables this RIP interface. Command mode: Interface IP no ip rip enable Disables this RIP interface. Command mode: Interface IP show interface ip rip Displays the current RIP configuration.
BLADE OS 5.1 ISCLI Reference Table 179 RIP Redistribution Commands Command Syntax and Usage redistribute {fixed|static|ospf|eospf} export <1-15> Exports the routes of this protocol in which the metric and metric type are specified. To remove a previous configuration and stop exporting the routes of the protocol, enter none. Command mode: Router RIP show ip rip redistribute Displays the current RIP route redistribute configuration.
BLADE OS 5.1 ISCLI Reference Open Shortest Path First Configuration Table 180 OSPF Configuration Commands Command Syntax and Usage router ospf Enter Router OSPF configuration mode. Command mode: Global configuration area-range <1-16> Configures summary routes for up to 16 IP addresses. Command mode: Router OSPF See page 303 to view command options. ip ospf Configures the OSPF interface. Command mode: Interface IP See page 304 to view command options.
BLADE OS 5.1 ISCLI Reference Table 180 OSPF Configuration Commands Command Syntax and Usage lsdb-limit Sets the link state database limit. Command mode: Router OSPF [no] default-information <1-16777214> {} Sets one default route among multiple choices in an area. Use none for no default. Command mode: Router OSPF enable Enables OSPF on the switch. Command mode: Router OSPF no enable Disables OSPF on the switch.
BLADE OS 5.1 ISCLI Reference Area Index Configuration Table 181 Area Index Configuration Commands Command Syntax and Usage area <0-2> area-id Defines the IP address of the OSPF area number. Command mode: Router OSPF area <0-2> type {transit|stub|nssa} Defines the type of area. For example, when a virtual link has to be established with the backbone, the area type must be defined as transit. Transit area: allows area summary information to be exchanged between routing devices.
BLADE OS 5.1 ISCLI Reference Table 181 Area Index Configuration Commands Command Syntax and Usage area <0-2> spf-interval <1-255> Sets time interval between two successive SPF (shortest path first) calculations of the shortest path tree using the Dijkstra’s algorithm. Command mode: Router OSPF area <0-2> enable Enables the OSPF area. Command mode: Router OSPF no area <0-2> enable Disables the OSPF area. Command mode: Router OSPF no area <0-2> Deletes the OSPF area.
BLADE OS 5.1 ISCLI Reference OSPF Summary Range Configuration Table 182 OSPF Summary Range Configuration Commands Command Syntax and Usage area-range <1-16> address Displays the base IP address or the IP address mask for the range. Command mode: Router OSPF area-range <1-16> area <0-2> Displays the area index used by the switch. Command mode: Router OSPF [no] area-range <1-16> hide Hides the OSPF summary range.
BLADE OS 5.1 ISCLI Reference OSPF Interface Configuration Table 183 OSPF Interface Configuration Commands Command Syntax and Usage ip ospf area <0-2> Configures the OSPF area index. Command mode: Interface IP ip ospf priority <0-255> Configures the priority value for the switch’s OSPF interfaces. A priority value of 255 is the highest and 1 is the lowest. A priority value of 0 specifies that the interface cannot be used as Designated Router (DR) or Backup Designated Router (BDR).
BLADE OS 5.1 ISCLI Reference Table 183 OSPF Interface Configuration Commands Command Syntax and Usage ip ospf retransmit-interval <1-3600> Configures the retransmit interval in seconds. Command mode: Interface IP [no] ip ospf key Sets the authentication key to clear the password. Command mode: Interface IP [no] ip ospf message-digest-key <1-255> Assigns an MD5 key to the interface. Command mode: Interface IP [no] ip ospf passive-interface Sets the interface as passive.
BLADE OS 5.1 ISCLI Reference Table 183 OSPF Interface Configuration Commands Command Syntax and Usage no ip ospf Deletes OSPF interface. Command mode: Interface IP show interface ip ospf Displays the current settings for OSPF interface. Command mode: All OSPF Virtual Link Configuration Table 184 OSPF Virtual Link Configuration Commands Command Syntax and Usage area-virtual-link <1-3> area <0-2> Configures the OSPF area index for the virtual link.
BLADE OS 5.1 ISCLI Reference Table 184 OSPF Virtual Link Configuration Commands Command Syntax and Usage area-virtual-link <1-3> neighbor-router Configures the router ID of the virtual neighbor. Default is 0.0.0.0. Command mode: Router OSPF [no] area-virtual-link <1-3> key Configures the password (up to eight characters) for each virtual link. Default is none. Command mode: Router OSPF area-virtual-link <1-3> message-digest-key <1-255> Sets MD5 key ID for each virtual link.
BLADE OS 5.1 ISCLI Reference OSPF Host Entry Configuration Table 185 OSPF Host Entry Configuration Commands Command Syntax and Usage host <1-128> address Configures the base IP address for the host entry. Command mode: Router OSPF host <1-128> area <0-2> Configures the area index of the host. Command mode: Router OSPF host <1-128> cost <1-65535> Configures the cost value of the host. Command mode: Router OSPF host <1-128> enable Enables OSPF host entry.
BLADE OS 5.1 ISCLI Reference OSPF Route Redistribution Configuration. Table 186 OSPF Route Redistribution Configuration Commands Command Syntax and Usage redistribute {fixed|static|rip} Adds selected routing map to the rmap list. This option adds a route map to the route redistribution list. The routes of the redistribution protocol matched by the route maps in the route redistribution list will be redistributed.
BLADE OS 5.1 ISCLI Reference OSPF MD5 Key Configuration Table 187 OSPF MD5 Key Configuration Command Options Command Syntax and Usage message-digest-key <1-255> md5-key <1-16 characters> Sets the authentication key for this OSPF packet. Command mode: Router OSPF no message-digest-key <1-255> Deletes the authentication key for this OSPF packet. Command mode: Router OSPF show ip ospf message-digest-key <1-255> Displays the current MD5 key configuration.
BLADE OS 5.1 ISCLI Reference IGMP Configuration Table 188 describes the commands used to configure basic IGMP parameters. Table 188 IGMP Configuration Commands Command Syntax and Usage ip igmp enable Globally turns IGMP on. Command mode: Global configuration no ip igmp Globally turns IGMP off. Command mode: Global configuration [no] ip igmp aggregate Enables or disables IGMP Membership Report aggregation. Command mode: Global configuration show ip igmp Displays the current IGMP configuration parameters.
BLADE OS 5.1 ISCLI Reference IGMP Snooping Configuration IGMP Snooping allows the switch to forward multicast traffic only to those ports that request it. IGMP snooping prevents multicast traffic from being flooded to all ports. The switch learns which server hosts are interested in receiving multicast traffic, and forwards it only to ports connected to those servers. Table 189 describes the commands used to configure IGMP Snooping.
BLADE OS 5.1 ISCLI Reference Table 189 IGMP Snooping Configuration Commands Command Syntax and Usage ip igmp robust <2-10> Configures the IGMP Robustness variable, which allows you to tune the switch for expected packet loss on the subnet. If the subnet is expected to be lossy (high rate of packet loss), increase the value. The default value is 2. Command mode: Global configuration [no] ip igmp flood Configures the switch to flood unregistered IP multicast traffic to all ports.
BLADE OS 5.1 ISCLI Reference Table 189 IGMP Snooping Configuration Commands Command Syntax and Usage ip igmp snoop vlan Adds the selected VLAN(s) to IGMP Snooping. Command mode: Global configuration no ip igmp snoop vlan |all Removes the selected VLAN(s) from IGMP Snooping. Command mode: Global configuration [no] ip igmp snoop vlan fast-leave Enables or disables Fastleave processing.
BLADE OS 5.1 ISCLI Reference IGMPv3 Configuration Table 191 describes the commands used to configure IGMP version 3. Table 190 IGMP version 3 Configuration Commands Command Syntax and Usage ip igmp snoop igmpv3 sources <1-64> Configures the maximum number of IGMP multicast sources to snoop from within the group record. Use this command to limit the number of IGMP sources to provide more refined control.
BLADE OS 5.1 ISCLI Reference IGMP Static Multicast Router Configuration Table 191 describes the commands used to configure a static multicast router. Note – When you configure a static multicast router on a VLAN, the switch continues to learn dynamic multicast routers on that VLAN.
BLADE OS 5.1 ISCLI Reference IGMP Filtering Configuration Table 192 describes the commands used to configure an IGMP filter. Table 192 IGMP Filtering Configuration Commands Command Syntax and Usage ip igmp profile <1-16> Configures the IGMP filter. Command mode: Global configuration To view command options, see page 318. ip igmp filtering Enables IGMP filtering globally. Command mode: Global configuration no ip igmp filtering Disables IGMP filtering globally.
BLADE OS 5.1 ISCLI Reference IGMP Filter Definition Table 193 describes the commands used to define an IGMP filter. Table 193 IGMP Filter Definition Commands Command Syntax and Usage ip igmp profile <1-16> range Configures the range of IP multicast addresses for this filter. Command mode: Global configuration ip igmp profile <1-16> action {allow|deny} Allows or denies multicast traffic for the IP multicast addresses specified.
BLADE OS 5.1 ISCLI Reference IGMP Filtering Port Configuration Table 194 describes the commands used to configure a port for IGMP filtering. Table 194 IGMP Filter Port Configuration Commands Command Syntax and Usage [no] ip igmp filtering Enables or disables IGMP filtering on this port. Command mode: Interface port ip igmp profile <1-16> Adds an IGMP filter to this port. Command mode: Interface port no ip igmp profile <1-16> Removes an IGMP filter from this port.
BLADE OS 5.1 ISCLI Reference Domain Name System Configuration The Domain Name System (DNS) commands are used for defining the primary and secondary DNS servers on your local network, and for setting the default domain name served by the switch services. DNS parameters must be configured prior to using hostname parameters with the ping, traceroute, and tftp commands.
BLADE OS 5.1 ISCLI Reference Bootstrap Protocol Relay Configuration The Bootstrap Protocol (BOOTP) Relay commands are used to allow hosts to obtain their configurations from a Dynamic Host Configuration Protocol (DHCP) server. The BOOTP configuration enables the switch to forward a client request for an IP address to two DHCP/BOOTP servers with IP addresses that have been configured on the switch. BOOTP relay is turned off by default.
BLADE OS 5.1 ISCLI Reference VRRP Configuration Virtual Router Redundancy Protocol (VRRP) support on the switch provides redundancy between routers in a LAN. This is accomplished by configuring the same virtual router IP address and ID number on each participating VRRP-capable routing device. One of the virtual routers is then elected as the master, based on a number of priority criteria, and assumes control of the shared virtual router IP address.
BLADE OS 5.1 ISCLI Reference Virtual Router Configuration These commands are used for configuring virtual routers for this switch. A virtual router is defined by its virtual router ID and an IP address. On each VRRP-capable routing device participating in redundancy for this virtual router, a virtual router will be configured to share the same virtual router ID and IP address. Virtual routers are disabled by default.
BLADE OS 5.1 ISCLI Reference Table 198 VRRP Virtual Router Configuration Commands Command Syntax and Usage virtual-router <1-255> priority <1-254> Defines the election priority bias for this virtual server. The priority value can be any integer between 1 and 254. The default value is 100. During the master router election process, the routing device with the highest virtual router priority number wins. If there is a tie, the device with the highest IP interface address wins.
BLADE OS 5.1 ISCLI Reference Table 198 VRRP Virtual Router Configuration Commands Command Syntax and Usage no virtual-router <1-255> Deletes this virtual router from the switch configuration. Command mode: Router VRRP show ip vrrp virtual-router <1-255> Displays the current configuration information for this virtual router.
BLADE OS 5.1 ISCLI Reference Table 199 VRRP Priority Tracking Configuration Commands Command Syntax and Usage [no] virtual-router <1-255> track virtual-routers When enabled, the priority for this virtual router will be increased for each virtual router in master mode on this switch. This is useful for making sure that traffic for any particular client/server pairing are handled by the same switch, increasing routing and load balancing efficiency. This command is disabled by default.
BLADE OS 5.1 ISCLI Reference Virtual Router Group Configuration Virtual Router Group commands are used for associating all virtual routers into a single logical virtual router, which forces all virtual routers on the switch to either be master or backup as a group. A virtual router is defined by its virtual router ID and an IP address.
BLADE OS 5.1 ISCLI Reference Table 200 VRRP Virtual Router Group Configuration Commands Command Syntax and Usage group advertisement <1-255> Defines the time interval between VRRP master advertisements. This can be any integer between 1 and 255 seconds. The default is 1. Command mode: Router VRRP [no] group preemption Enables or disables master pre-emption.
BLADE OS 5.1 ISCLI Reference Virtual Router Group Priority Tracking Configuration Note – If Virtual Router Group Tracking is enabled, then the tracking option will be available only under group option. The tracking setting for the other individual virtual routers will be ignored.
BLADE OS 5.1 ISCLI Reference VRRP Interface Configuration Note – The interface represents the IP interface on which authentication parameters must be configured. These commands are used for configuring VRRP authentication parameters for the IP interfaces used with the virtual routers.
BLADE OS 5.1 ISCLI Reference VRRP Tracking Configuration These commands are used for setting weights for the various criteria used to modify priority levels during the master router election process. Each time one of the tracking criteria is met (see “VRRP Virtual Router Priority Tracking Commands” on page 325), the priority level for the virtual router is increased by a defined amount.
BLADE OS 5.1 ISCLI Reference ServerMobility™ Configuration The following table describes the Server Mobility Configuration commands. For more information about ServerMobility, see the BLADE OS Application Guide. Table 204 ServerMobility Commands Command Syntax and Usage ip server-mobility enable Globally turns Server Mobility on. Command mode: Global configuration no ip server-mobility enable Globally turns Server Mobility off.
BLADE OS 5.1 ISCLI Reference ServerMobility™ Port Configuration Menu The following table describes the Server Mobility Port menu options.
BLADE OS 5.1 ISCLI Reference IP Loopback Interface Configuration An IP loopback interface is not connected to any physical port. A loopback interface is always accessible over the network. Table 206 IP Loopback Interface commands Command Syntax and Usage interface loopback <1-5> Enter Interface loopback mode. Command mode: Global configuration no interface loopback <1-5> Deletes the selected loopback interface.
BLADE OS 5.1 ISCLI Reference Remote Monitoring Configuration Remote Monitoring (RMON) allows you to monitor traffic flowing through the switch. The RMON MIB is described in RFC 1757. The following sections describe the Remote Monitoring (RMON) configuration options. “RMON History Configuration” on page 335 “RMON Event Configuration” on page 336 “RMON Alarm Configuration” on page 337 RMON History Configuration Table 207 describes the RMON History commands.
BLADE OS 5.1 ISCLI Reference Table 207 RMON History commands Command Syntax and Usage rmon history <1-65535> owner <1-127 characters> Enter a text string that identifies the person or entity that uses this History index. Command mode: Global configuration no rmon history <1-65535> Deletes the selected History index. Command mode: Global configuration show rmon history Displays the current RMON History parameters. Command mode: All RMON Event Configuration Table 208 describes the RMON Event commands.
BLADE OS 5.1 ISCLI Reference Table 208 RMON Event commands Command Syntax and Usage no rmon event <1-65535> Deletes the selected RMON Event index. Command mode: Global configuration show rmon event Displays the current RMON Event parameters. Command mode: All RMON Alarm Configuration The Alarm RMON group can track rising or falling values for a MIB object. The MIB object must be a counter, gauge, integer, or time interval.
BLADE OS 5.1 ISCLI Reference Table 209 RMON Alarm commands Command Syntax and Usage rmon alarm <1-65535> alarm-type rising|falling|either Configures the alarm type as rising, falling, or either (rising or falling). Command mode: Global configuration rmon alarm <1-65535> rising-limit <-2147483647 - 2147483647> Configures the rising threshold for the sampled statistic.
BLADE OS 5.1 ISCLI Reference Server Link Failure Detection Configuration Server Link Failure Detection (SFD) allows the switch to monitor specific downlink ports to detect server link failures. When all of the server links in the Link to Monitor (LtM) fail, the switch enables the interconnect ports. The following table describes the Server Link Failure Detection (SFD) Configuration Menu options.
BLADE OS 5.1 ISCLI Reference Table 211 SFD Link to Monitor commands Command Syntax and Usage sfd ltm adminkey <1-65535> Adds an LACP admin key to the LtM. LACP trunks formed with this admin key will be included in the SFD LtM. no sfd ltm adminkey <1-65535> Removes an LACP admin key from the LtM. show sfd Displays the current SFD configuration parameters. SFD Link to Enable Configuration The following table describes the SFD Link to Enable (LtE) Menu options.
BLADE OS 5.1 ISCLI Reference Table 212 SFD Link to Enable commands Command Syntax and Usage no sfd lte adminkey <1-65535> Removes an LACP admin key from the LtE. cur Displays the current SFD Link to Enable parameters.
BLADE OS 5.1 ISCLI Reference Configuration Dump The dump program writes the current switch configuration to the terminal screen. To start the dump program, at the prompt, enter: Router(config)# show running-config The configuration is displayed with parameters that have been changed from the default values. The screen display can be captured, edited, and placed in a script file, which can be used to configure other switches through a Telnet connection.
BLADE OS 5.1 ISCLI Reference Restoring the Active Switch Configuration When the copy {ftp|tftp} running-config command is used, the active configuration will be replaced with the commands found in the specified configuration file. The file can contain a full switch configuration or a partial switch configuration.
BLADE OS 5.
CHAPTER 5 Operations Commands Operations commands generally affect switch performance immediately, but do not alter permanent switch configurations. For example, you can use Operations commands to immediately disable a port (without the need to apply or save the change), with the understanding that when the switch is reset, the port returns to its normally configured operation. These commands enable you to alter switch operational characteristics without affecting switch configuration.
BLADE OS 5.1 ISCLI Reference Operations-Level Port Commands Operations-level port options are used for temporarily disabling or enabling a port, and for re-setting the port. Table 214 Port Operations Commands Command Syntax and Usage no interface port shutdown Temporarily enables the port. The port will be returned to its configured operation mode when the switch is reset. Command Mode: Privileged EXEC interface port shutdown Temporarily disables the port.
BLADE OS 5.1 ISCLI Reference Operations-Level Port 802.1X Commands Operations-level port 802.1X options are used to temporarily set 802.1X parameters for a port. Table 215 802.1X Operations Commands Command Syntax and Usage interface port dot1x init Re-initializes the 802.1X access-control parameters for the port. The following actions take place, depending on the 802.1X port configuration: force unauth: the port is placed in unauthorized state, and traffic is blocked.
BLADE OS 5.1 ISCLI Reference Operations-Level VRRP Commands Table 216 Virtual Router Redundancy Operations Commands Command Syntax and Usage router vrrp backup <1-255> Forces the specified master virtual router on this switch into backup mode. This is generally used for passing master control back to a preferred switch once the preferred switch has been returned to service after a failure.
CHAPTER 6 Boot Options To use the Boot Options commands, you must be logged in to the switch as the administrator.
BLADE OS 5.1 ISCLI Reference Scheduled Reboot of the Switch This feature allows the switch administrator to schedule a reboot to occur at a particular time in future. This feature is particularly helpful if the user needs to perform switch upgrades during off-peak hours. You can set the reboot time, cancel a previously scheduled reboot, and check the time of the current reboot schedule.
BLADE OS 5.1 ISCLI Reference Updating the Switch Software Image The switch software image is the executable code running on the GbE2c. A version of the image ships with the switch, and comes pre-installed on the device. As new versions of the image are released, you can upgrade the software running on your switch. Click on software updates.
BLADE OS 5.1 ISCLI Reference 2. Enter the hostname or IP address of the FTP or TFTP server. Address or name of remote host: 3. Enter the name of the new software file on the server. Source file name: The exact form of the name will vary by server. However, the file location is normally relative to the FTP or TFTP directory (usually tftpboot). 4. Enter your username and password for the server, if applicable. User name: {|} 5.
BLADE OS 5.1 ISCLI Reference 2. Enter the name or the IP address of the FTP or TFTP server: Address or name of remote host: 3. Enter the name of the file into which the image will be uploaded on the FTP or TFTP server: Destination file name: 4. Enter your username and password for the server, if applicable. User name: {|} 5. The system then requests confirmation of what you have entered. To have the file uploaded, enter Y.
BLADE OS 5.1 ISCLI Reference Resetting the Switch You can reset the switch to make your software image file and configuration block changes occur. Note – Resetting the switch causes the Spanning Tree Group to restart. This process can be lengthy, depending on the topology of your network. Enter the following command to reset (reload) the switch: >> Router# reload You are prompted to confirm your request. Reset will use software "image2" and the active config block.
CHAPTER 7 Maintenance Commands The maintenance commands are used to manage dump information and forward database information. They also include debugging commands to help with troubleshooting. Dump information contains internal switch state data that is written to flash memory on the GbE2c after any one of the following occurs: The watchdog timer forces a switch reset. The purpose of the watchdog timer is to reboot the switch if the switch software freezes.
BLADE OS 5.1 ISCLI Reference Table 218 General Maintenance Commands Command Syntax and Usage clear flash-dump Clears dump information from flash memory. Command mode: All except User EXEC show tech-support Dumps all switch information, statistics, and configuration. You can log the output (tsdmp) into a file. Command mode: All except User EXEC copy tech-support tftp Redirects the technical support dump (tsdmp) to an external TFTP server.
BLADE OS 5.1 ISCLI Reference Table 219 FDB Manipulation Commands Command Syntax and Usage show mac-address-table interface port Displays all FDB entries for a particular port. Command mode: All except User EXEC show mac-address-table vlan Displays all FDB entries on a single VLAN. Command mode: All except User EXEC show mac-address-table state {forward|trunk|unknown} Displays all FDB entries of a particular state.
BLADE OS 5.1 ISCLI Reference Debugging Commands The Miscellaneous Debug Commands display trace buffer information about events that can be helpful in understanding switch operation. You can view the following information using the debug commands: Events traced by the Management Processor (MP) Events traced to a buffer area when a reset occurs If the switch resets for any reason, the MP trace buffer is saved into the snap trace buffer area.
BLADE OS 5.1 ISCLI Reference ARP Cache Maintenance Table 221 Address Resolution Protocol Maintenance Commands Command Syntax and Usage show ip arp find Shows a single ARP entry by IP address. Command mode: All except User EXEC show ip arp interface port Shows ARP entries on selected ports. Command mode: All except User EXEC show ip arp vlan Shows ARP entries on a single VLAN.
BLADE OS 5.1 ISCLI Reference IP Route Manipulation Table 222 IP Route Manipulation Commands Command Syntax and Usage show ip route address Shows a single route by destination IP address. Command mode: All except User EXEC show ip route gateway Shows routes to a default gateway. Command mode: All except User EXEC show ip route type {indirect|direct|local|broadcast|martian|multicast} Shows routes of a single type.
BLADE OS 5.1 ISCLI Reference LLDP Cache Manipulation Table 223 describes the LLDP cache manipulation commands. Table 223 LLDP Cache Manipulation commands Command Syntax and Usage show lldp port Displays Link Layer Discovery Protocol (LLDP) port information. Command mode: All show lldp receive Displays information about the LLDP receive state machine. Command mode: All show lldp transmit Displays information about the LLDP transmit state machine.
BLADE OS 5.1 ISCLI Reference IGMP Groups Maintenance Table 224 describes the IGMP group maintenance commands. Table 224 IGMP Multicast Group Maintenance Commands Command Syntax and Usage show ip igmp groups address Displays a single IGMP multicast group by its IP address. Command mode: All show ip igmp groups vlan Displays all IGMP multicast groups on a single VLAN.
BLADE OS 5.1 ISCLI Reference IGMP Multicast Routers Maintenance The following table describes the maintenance commands for IGMP multicast routers (Mrouters). Table 225 IGMP Multicast Router Maintenance Commands Command Syntax and Usage show ip igmp mrouter vlan Displays IGMP Mrouter information for a single VLAN. Command mode: All show ip igmp mrouter Displays information for all Mrouters. Command mode: All clear ip igmp mrouter Clears the IGMP Mrouter port table.
BLADE OS 5.1 ISCLI Reference The dump information is displayed on your screen and, if you have configured your communication software to do so, captured to a file. If the dump region is empty, the following appears: No FLASH dump available. TFTP or FTP System Dump Put Use these commands to put (save) the system dump to a TFTP or FTP server.
BLADE OS 5.1 ISCLI Reference Unscheduled System Dumps If there is an unscheduled system dump to flash memory, the following message is displayed when you log on to the switch: Note: A system dump exists in FLASH. The dump at 13:43:22 Wednesday January 30, 2009. uuencode to extract the dump for analysis and clear clear the FLASH region. The region must before another dump can be saved.
BLADE OS 5.
Index Symbols ........................................................ 217, 258, 335 [ ]....................................................................... 26 A abbreviating commands (CLI) .............................. 24 access control user ........................................................... 207 ACL Port commands ......................................... 219 ACL statistics ................................................... 161 active configuration block ..........................
BLADE OS 5.1 ISCLI Reference configuration 802.1x ....................................................... 238 CIST ......................................................... 247 default gateway interval, for health checks ..... 285 default gateway IP address ........................... 285 dump command .......................................... 342 failover ...................................................... 267 flow control ............................................... 216 IGMP ........................
BLADE OS 5.1 ISCLI Reference HTTPS ............................................................. 210 I ICMP statistics .................................................. 142 idle timeout overview...................................................... 25 IEEE 802.1s ........................................................ 63 IEEE 802.1w....................................................... 63 IEEE standards 802.1d ................................................. 60, 251 802.1s .............................
BLADE OS 5.1 ISCLI Reference mp ospf packet........................................................ 157 MP. See Management Processor. multicast IP route type................................................. 76 multicast MAC.................................................. 257 Multiple Spanning Tree configuration .............................................. 245 mxage (STP bridge option) ................................. 252 area index ...................................................
BLADE OS 5.1 ISCLI Reference port mirroring configuration .............................................. 235 Port number ...................................................... 105 port speed ................................................... 27, 105 port states UNK (unknown) ........................................... 48 port trunking description ................................................. 262 port trunking configuration ................................. 262 ports disabling (temporarily) ............
BLADE OS 5.1 ISCLI Reference system options hprompt ..................................................... 174 tnport ........................................................ 204 wport ........................................................ 204 T tab completion (CLI) ........................................... 24 TCP statistics ............................................ 144, 159 Telnet configuring switches using ........................... 342 telnet radius server .......................................
