ProSafe Managed Switch Command Li ne Interface (CLI) User M anual 1 0.0 . 1 M7100-24X M4100-24G-POE+ M4100-26G M4100-26-POE M4100-26G-POE M4100-50G M4100-50-POE M4100-50G-POE+ M4100-12GF M4100-12G-POE+ M4100-D12G M4100-D10-POE M4100-D12G-POE+ 350 East Plumeria Drive San Jose, CA 95134 USA February 2013 202-11166-02 1.
ProSafe M4100 and M7100 Managed Switches Support Thank you for selecting NETGEAR products. After installing your device, locate the serial number on the label of your product and use it to register your product at https://my.netgear.com. You must register your product before you can use NETGEAR telephone support. NETGEAR recommends registering your product through the NETGEAR website. For product updates and web support, visit http://support.netgear.com. Phone (US & Canada only): 1-888-NETGEAR.
Contents Chapter 1 Using the Command-Line Interface Licensing and Command Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Command Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Command Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Common Parameter Values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Slot/Port Naming Convention . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches IGMP Snooping Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . 148 IGMP Snooping Querier Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157 MLD Snooping Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161 MLD Snooping Querier Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168 set mld querier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches Chapter 6 IPv6 Commands Tunnel Interface Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .356 IPv6 Routing Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357 OSPFv3 Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .380 OSPFv3 Graceful Restart Commands . . . . . . . . . . . . . . . . . . . . . . . . . . .411 DHCPv6 Commands . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches Software License Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 609 IP Address Conflict Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 610 Link Local Protocol Filtering Commands . . . . . . . . . . . . . . . . . . . . . . . . . 611 RMON Stats and History Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . 612 UDLD Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1. Using the Command-Line Interface 1 The command-line interface (CLI) is a text-based way to manage and monitor the system. You can access the CLI by using a direct serial connection or by using a remote logical connection with telnet or SSH. This chapter describes the CLI syntax, conventions, and modes.
ProSafe M4100 and M7100 Managed Switches Licensing and Command Support As shown in the following table, some command groups, or commands, require a license and some are supported on particular switch models. For those requiring a license, license keys are available from your VAR or NETGEAR authorized e-commerce portal. License activation is described in the Software Setup Manual.
ProSafe M4100 and M7100 Managed Switches Command Group or Command M4100 M7100 random-detect queue-parms Supported Supported no random-detect queue-parms Supported Supported Command Syntax A command is one or more words that might be followed by one or more parameters. Parameters can be required or optional values. Some commands, such as show network or clear vlan, do not require parameters. Other commands, such as network parms, require that you supply a value after the command.
ProSafe M4100 and M7100 Managed Switches The parameters for a command might include mandatory values, optional values, or keyword choices. Table 1 describes the conventions this document uses to distinguish between value types. Table 1. Parameter Conventions Symbol Example Description <> angle brackets Indicates that you must enter a value in place of the brackets and text inside them.
ProSafe M4100 and M7100 Managed Switches Table 2. Parameter Descriptions (Continued) Parameter Description Logical Interface Represents a logical slot and port number. This is applicable in the case of a port-channel (LAG). You can use the logical slot/port to configure the port-channel. Character strings Use double quotation marks to identify character strings, for example, “System Name with Spaces”. An empty string (“”) is not valid.
ProSafe M4100 and M7100 Managed Switches Note: In the CLI, loopback and tunnel interfaces do not use the slot/port format. To specify a loopback interface, you use the loopback ID. To specify a tunnel interface, you use the tunnel ID. Using a Command’s “No” Form The no keyword is a specific form of an existing command and does not represent a new or distinct command. Almost every configuration command has a no form.
ProSafe M4100 and M7100 Managed Switches commands. You can execute the User EXEC mode commands in the Privileged EXEC mode. The command prompt changes in each command mode to help you identify the current mode. Table 5 describes the command modes and the prompts visible in that mode. Note: The command modes available on your switch depend on the software modules that are installed. For example, a switch that does not support BGPv4 does not have the Router BGPv4 Command Mode. Table 5.
ProSafe M4100 and M7100 Managed Switches Table 5. CLI Command Modes (Continued) Command Mode Prompt Mode Description Router OSPF Config Switch (Config-router)# Contains the OSPF configuration commands. Router OSPFv3 Config Switch (Config rtr)# Contains the OSPFv3 configuration commands. Router RIP Config Switch (Config-router)# Contains the RIP configuration commands.
ProSafe M4100 and M7100 Managed Switches Table 6. CLI Mode Access and Exit (Continued) Command Mode Access Method Exit or Access Previous Mode Policy-Map Config From the Global Config mode, enter policy-map in. To exit to the Global Config mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z. Policy-Class-Map Config From the Policy Map mode enter class. To exit to the Policy Map mode, enter exit. To return to the Privileged EXEC mode, enter Ctrl-Z.
ProSafe M4100 and M7100 Managed Switches Table 6. CLI Mode Access and Exit (Continued) Command Mode Access Method Exit or Access Previous Mode Stack Global Config Mode From the Global Config mode, enter the stack command. To exit to the Global Config mode, enter the exit command. To return to the Privileged EXEC mode, enter Ctrl-Z. ARP Access-List Config Mode From the Global Config mode, enter the arp access-list command. To exit to the Global Config mode, enter the exit command.
ProSafe M4100 and M7100 Managed Switches CLI Line-Editing Conventions Table 8 describes the key combinations you can use to edit commands or increase the speed of command entry. You can access this list from the CLI by entering help from the User or Privileged EXEC modes. Table 8.
ProSafe M4100 and M7100 Managed Switches enable help logout ping quit show telnet Enter into user privilege mode. Display help for various special keys. Exit this session. Any unsaved changes are lost. Send ICMP echo packets to a specified IP address. Exit this session. Any unsaved changes are lost. Display Switch Options and Settings. Telnet to a remote host. Enter a question mark (?) after each word you enter to display available command keywords or parameters.
2. Switching Commands 2 This chapter describes the switching commands available in the managed switch CLI. This chapter contains the following sections: • Port Configuration Commands • Loopback Interface Commands • Spanning Tree Protocol (STP) Commands • VLAN Commands • Double VLAN Commands • Voice VLAN Commands • Provisioning (IEEE 802.
ProSafe M4100 and M7100 Managed Switches • Port Security Commands • LLDP (802.1AB) Commands • LLDP-MED Commands • Denial of Service Commands • MAC Database Commands • ISDP Commands • Priority-Based Flow Control Commands The commands in this chapter are in three functional groups: • Show commands display switch settings, statistics, and other information. • Configuration commands configure features and options of the switch.
ProSafe M4100 and M7100 Managed Switches Port Configuration Commands This section describes the commands you use to view and configure port settings. interface This command gives you access to the Interface Config mode, which allows you to enable or modify the operation of an interface (port).
ProSafe M4100 and M7100 Managed Switches no auto-negotiate This command disables automatic negotiation on a port. Note: Automatic sensing is disabled when automatic negotiation is disabled. auto-negotiate all This command enables automatic negotiation on all ports. Default enabled Format auto-negotiate all Mode Global Config no auto-negotiate all This command disables automatic negotiation on all ports.
ProSafe M4100 and M7100 Managed Switches Default 1518 (untagged) Format mtu <1518-9216> Mode Interface Config no mtu This command sets the default MTU size (in bytes) for the interface. Format no mtu Mode Interface Config shutdown This command disables a port. Note: You can use the shutdown command on physical and port-channel (LAG) interfaces, but not on VLAN routing interfaces. Format shutdown Mode Interface Config no shutdown This command enables a port.
ProSafe M4100 and M7100 Managed Switches no shutdown all This command enables all ports. Format no shutdown all Mode Global Config speed This command sets the speed and duplex setting for the interface.
ProSafe M4100 and M7100 Managed Switches show port advertise Use this command to display the local administrative link advertisement configuration, local operational link advertisement, and the link partner advertisement for an interface. It also displays priority Resolution for speed and duplex as per 802.3 Annex 28B.3. It displays the autonegotiation state, Phy Master/Slave Clock configuration, and Link state of the port.
ProSafe M4100 and M7100 Managed Switches Term Definition Interface Valid slot and port number separated by forward slashes. Type If not blank, this field indicates that this port is a special type of port. The possible values are: • Mirror - this port is a monitoring port. For more information, see Port Mirroring on page 121. • PC Mbr- this port is a member of a port-channel (LAG). • Probe - this port is a probe port. Admin Mode The Port control administration state.
ProSafe M4100 and M7100 Managed Switches show port description This command displays the port description for every port. Format show port description Mode Privileged EXEC Term Definition Interface Valid slot and port number separated by forward slashes Description Shows the port description configured via the “description” command show port status This command displays the Protocol-Based VLAN information for either the entire system, or for the indicated group.
ProSafe M4100 and M7100 Managed Switches interface loopback Use this command to enter the Interface Config mode for a loopback interface. The range of the loopback ID is 0–7. Format interface loopback Mode Global Config no interface loopback This command removes the loopback interface and associated configuration parameters for the specified loopback interface.
ProSafe M4100 and M7100 Managed Switches Term Definition IPv6 Prefix is The IPv6 address of the interface. MTU size The maximum transmission size for packets on this interface, in bytes.
ProSafe M4100 and M7100 Managed Switches Spanning Tree Protocol (STP) Commands This section describes the commands you use to configure Spanning Tree Protocol (STP). STP helps prevent network loops, duplicate messages, and network instability. spanning-tree This command sets the spanning-tree operational mode to enabled. Default enabled Format spanning-tree Mode Global Config no spanning-tree This command sets the spanning-tree operational mode to disabled.
ProSafe M4100 and M7100 Managed Switches no spanning-tree bpdufilter Use this command to disable BPDU Filter on the interface or range of interfaces. Default disabled Format no spanning-tree bpdufilter Mode Interface Config spanning-tree bpdufilter default Use this command to enable BPDU Filter on all the edge port interfaces.
ProSafe M4100 and M7100 Managed Switches spanning-tree bpduguard Use this command to enable BPDU Guard on the switch. Default disabled Format spanning-tree bpduguard Mode Global Config no spanning-tree bpduguard Use this command to disable BPDU Guard on the switch. Format no spanning-tree bpduguard Mode Global Config spanning-tree bpdumigrationcheck Use this command to force a transmission of rapid spanning tree (RSTP) and multiple spanning tree (MSTP) BPDUs.
ProSafe M4100 and M7100 Managed Switches spanning-tree configuration revision This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using. The Configuration Identifier Revision Level is a number in the range of 0–65535.
ProSafe M4100 and M7100 Managed Switches • Use 802.1s to specify that the switch transmits MST BPDUs (IEEE 802.1s functionality supported). • Use 802.1w to specify that the switch transmits RST BPDUs rather than MST BPDUs (IEEE 802.1w functionality supported). no spanning-tree forceversion This command sets the Force Protocol Version parameter to the default value.
ProSafe M4100 and M7100 Managed Switches spanning-tree tcnguard This command enables the propagation of received topology change notifications and topology changes to other ports. Default disable Format spanning-tree tcnguard Mode Interface Config no spanning-tree tcnguard This command disables the propagation of received topology change notifications and topology changes to other ports.
ProSafe M4100 and M7100 Managed Switches no spanning-tree max-hops This command sets the Bridge Max Hops parameter for the Common and Internal Spanning Tree to the default value. Format no spanning-tree max-hops Mode Global Config spanning-tree mst This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in the Common and Internal Spanning Tree.
ProSafe M4100 and M7100 Managed Switches If you specify cost, this command sets the path cost for this port within a multiple spanning tree instance or the Common and Internal Spanning Tree instance, depending on the parameter, to the default value, that is, a path cost value based on the Link Speed. If you specify external-cost, this command sets the external path cost for this port for mst ‘0’ instance, to the default value, that is, a path cost value based on the Link Speed.
ProSafe M4100 and M7100 Managed Switches are masked according to the 802.1s specification. This causes the priority to be rounded down to the next lower valid priority. Default 32768 Format spanning-tree mst priority <0-61440> Mode Global Config no spanning-tree mst priority This command sets the bridge priority for a specific multiple spanning tree instance to the default value. The parameter is a number that corresponds to the desired existing multiple spanning tree instance.
ProSafe M4100 and M7100 Managed Switches spanning-tree port mode This command sets the Administrative Switch Port State for this port to enabled. Default enabled Format spanning-tree port mode Mode Interface Config no spanning-tree port mode This command sets the Administrative Switch Port State for this port to disabled. Format no spanning-tree port mode Mode Interface Config spanning-tree port mode all This command sets the Administrative Switch Port State for all ports to enabled.
ProSafe M4100 and M7100 Managed Switches spanning-tree bpduforwarding Normally a switch will not forward Spanning Tree Protocol (STP) BPDU packets if STP is disabled. However, if in some network setup, the user wishes to forward BDPU packets received from other network devices, this command can be used to enable the forwarding.
ProSafe M4100 and M7100 Managed Switches Term Definition Root Port Identifier Identifier of the port to access the Designated Root for the CST Root Port Max Age Derived value. Root Port Derived value. Bridge Forward Delay Hello Time Configured value of the parameter for the CST. Bridge Hold Time Minimum time between transmission of Configuration Bridge Protocol Data Units (BPDUs). Bridge Max Hops Bridge max-hops count for the device.
ProSafe M4100 and M7100 Managed Switches show spanning-tree interface This command displays the settings and parameters for a specific switch port within the Common and Internal Spanning Tree. The is the desired switch port. The following details are displayed on execution of the command. Format show spanning-tree interface Mode • Privileged EXEC • User EXEC Term Definition Hello Time Admin hello time for this port. Port Mode Enabled or disabled.
ProSafe M4100 and M7100 Managed Switches corresponds to the desired existing multiple spanning tree instance. The is the desired switch port. Format show spanning-tree mst port detailed Mode • Privileged EXEC • User EXEC Term Definition MST Instance ID The ID of the existing MST instance. Port Identifier The port identifier for the specified port within the selected MST instance. It is made up from the port priority and the interface number of the port.
ProSafe M4100 and M7100 Managed Switches If you specify 0 (defined as the default CIST ID) as the , this command displays the settings and parameters for a specific switch port within the Common and Internal Spanning Tree. The is the desired switch port. In this case, the following are displayed. Term Definition Port Identifier The port identifier for this port within the CST. Port Priority The priority of the port within the CST.
ProSafe M4100 and M7100 Managed Switches Term Definition Transitions Into The number of times this interface has transitioned into loop inconsistent state. Loop Inconsistent State Transitions Out The number of times this interface has transitioned out of loop inconsistent state. of Loop Inconsistent State show spanning-tree mst port summary This command displays the settings of one or all ports within the specified multiple spanning tree instance.
ProSafe M4100 and M7100 Managed Switches Term Definition mstid The ID of the existing MST instance. Interface slot/port STP Mode Indicates whether spanning tree is enabled or disabled on the port. Type Currently not used. STP State The forwarding state of the port in the specified spanning tree instance. Port Role The role of the specified port within the spanning tree. Desc Indicates whether the port is in loop inconsistent state or not.
ProSafe M4100 and M7100 Managed Switches Term Definition Spanning Tree Adminmode Enabled or disabled. Spanning Tree Version Version of 802.1 currently supported (IEEE 802.1s, IEEE 802.1w, or IEEE 802.1d) based upon the Force Protocol Version parameter. BPDU Guard Mode Enabled or disabled. BPDU Filter Mode Enabled or disabled. Configuration Name Identifier used to identify the configuration currently being used.
ProSafe M4100 and M7100 Managed Switches vlan database This command gives you access to the VLAN Config mode, which allows you to configure VLAN characteristics. Format vlan database Mode Privileged EXEC network mgmt_vlan This command configures the Management VLAN ID. Default 1 Format network mgmt_vlan <1-4093> Mode Privileged EXEC no network mgmt_vlan This command sets the Management VLAN ID to the default.
ProSafe M4100 and M7100 Managed Switches vlan acceptframe This command sets the frame acceptance mode per interface. For VLAN Only mode, untagged frames or priority frames received on this interface are discarded. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interface VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification.
ProSafe M4100 and M7100 Managed Switches vlan makestatic This command changes a dynamically created VLAN (one that is created by GVRP registration) to a static VLAN (one that is permanently configured and defined). The ID is a valid VLAN identification number. VLAN range is 2-4093. Format vlan makestatic <2-4093> Mode VLAN Config vlan name This command changes the name of a VLAN. The name is an alphanumeric string of up to 32 characters, and the ID is a valid VLAN identification number.
ProSafe M4100 and M7100 Managed Switches vlan participation all This command configures the degree of participation for all interfaces in a VLAN. The ID is a valid VLAN identification number. Format vlan participation all {exclude | include | auto} <1-4093> Mode Global Config You can use the following participation options: Participation Options Definition include The interface is always a member of this VLAN. This is equivalent to registration fixed.
ProSafe M4100 and M7100 Managed Switches assigned the value of the interface VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification. Format no vlan port acceptframe all Mode Global Config vlan port ingressfilter all This command enables ingress filtering for all ports.
ProSafe M4100 and M7100 Managed Switches vlan port tagging all This command configures the tagging behavior for all interfaces in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number. Format vlan port tagging all <1-4093> Mode Global Config no vlan port tagging all This command configures the tagging behavior for all interfaces in a VLAN to disabled.
ProSafe M4100 and M7100 Managed Switches no vlan protocol group name This command removes the name from a protocol-based VLAN group. Format no vlan protocol group name <1-128> Mode Global Config vlan protocol group add protocol This command adds the protocol to the protocol-based VLAN identified by groupid. A group may have more than one protocol associated with it. Each interface and protocol combination can only be associated with one group.
ProSafe M4100 and M7100 Managed Switches no protocol group This command removes the from this protocol-based VLAN group that is identified by this . Format no protocol group Mode VLAN Config protocol vlan group This command adds the physical interface to the protocol-based VLAN identified by . You can associate multiple interfaces with a group, but you can only associate each interface and protocol combination with one group.
ProSafe M4100 and M7100 Managed Switches no protocol vlan group all This command removes all interfaces from this protocol-based VLAN group that is identified by this . Format no protocol vlan group all Mode Global Config vlan pvid This command changes the VLAN ID per interface. Default 1 Format vlan pvid <1-4093> Mode Interface Config no vlan pvid This command sets the VLAN ID per interface to 1.
ProSafe M4100 and M7100 Managed Switches vlan association subnet This command associates a VLAN to a specific IP-subnet. Format vlan association subnet <1-4093> Mode VLAN Config no vlan association subnet This command removes association of a specific IP-subnet to a VLAN. Format no vlan association subnet Mode VLAN Config vlan association mac This command associates a MAC address to a VLAN.
ProSafe M4100 and M7100 Managed Switches show vlan This command displays detailed information, including interface information, for a specific VLAN. The ID is a valid VLAN identification number. Format show vlan Mode • Privileged EXEC • User EXEC Term Definition VLAN ID A VLAN Identifier (VID) is associated with each VLAN. The range of the VLAN ID is 1–4093. VLAN Name A string associated with this VLAN as a convenience.
ProSafe M4100 and M7100 Managed Switches show vlan brief This command displays a list of all configured VLANs. Format show vlan brief Mode • Privileged EXEC • User EXEC Term Definition VLAN ID There is a VLAN Identifier (vlanid) associated with each VLAN. The range of the VLAN ID is 1–3965. VLAN Name A string associated with this VLAN as a convenience. It can be up to 32 alphanumeric characters long, including blanks. The default is blank. VLAN ID 1 always has a name of “Default.
ProSafe M4100 and M7100 Managed Switches show vlan association subnet This command displays the VLAN associated with a specific configured IP-Address and net mask. If no IP address and net mask are specified, the VLAN associations of all the configured IP-subnets are displayed. Format show vlan association subnet [ ] Mode Privileged EXEC Term Definition IP Subnet The IP address assigned to each interface. IP Mask The subnet mask.
ProSafe M4100 and M7100 Managed Switches dvlan-tunnel ethertype This command configures the ether-type for all interfaces. The ether-type may have the values of 802.1Q, vMAN, or custom. If the ether-type has a value of custom, the optional value of the custom ether type must be set to a value from 0 to 65535. Default vman Format dvlan-tunnel ethertype {802.
ProSafe M4100 and M7100 Managed Switches no mode dvlan-tunnel This command is used to disable Double VLAN Tunneling on the specified interface. By default, Double VLAN Tunneling is disabled. Format no mode dvlan-tunnel Mode Interface Config show dot1q-tunnel Use this command without the optional parameters to display all interfaces enabled for Double VLAN Tunneling. Use the optional parameters to display detailed information about Double VLAN Tunneling for the specified interface or all interfaces.
ProSafe M4100 and M7100 Managed Switches Term Definition Mode The administrative mode through which Double VLAN Tunneling can be enabled or disabled. The default value for this field is disabled. EtherType A 2-byte hex EtherType to be used as the first 16 bits of the DVLAN tunnel. There are three different EtherType tags. The first is 802.1Q, which represents the commonly used value of 0x8100. The second is vMAN, which represents the commonly used value of 0x88A8.
ProSafe M4100 and M7100 Managed Switches Format voice vlan { | dot1p | none | untagged} Mode Interface Config You can configure Voice VLAN in any of the following ways: Parameter Description vlan-id Configure the IP phone to forward all voice traffic through the specified VLAN. Valid VLAN IDs are from 1 to 4093 (the maximum supported by the platform). dot1p Configure the IP phone to use 802.
ProSafe M4100 and M7100 Managed Switches When the interface is specified:. Term Definition Voice VLAN Interface Mode The admin mode of the Voice VLAN on the interface. Voice VLAN ID The Voice VLAN ID Voice VLAN Priority The do1p priority for the Voice VLAN on the port. Voice VLAN Untagged The tagging option for the Voice VLAN traffic. Voice VLAN CoS Override The Override option for the voice traffic arriving on the port. Voice VLAN Status The operational status of Voice VLAN on the port.
ProSafe M4100 and M7100 Managed Switches If an interface is configured as a protected port, and you add that interface to a Port Channel or link aggregation group (LAG), the protected port status becomes operationally disabled on the interface, and the interface follows the configuration of the LAG port. However, the protected port configuration for the interface remains unchanged.
ProSafe M4100 and M7100 Managed Switches Default unprotected Format switchport protected Mode Interface Config no switchport protected (Interface Config) Use this command to configure a port as unprotected. The groupid parameter identifies the set of protected ports to which this interface is assigned.
ProSafe M4100 and M7100 Managed Switches Private VLAN The Private VLANs feature separates a regular VLAN domain into two or more subdomains. Each subdomain is defined (represented) by a primary VLAN and a secondary VLAN. The primary VLAN ID is the same for all subdomains that belong to a private VLAN. The secondary VLAN ID differentiates subdomains from each other and provides Layer 2 isolation between ports of the same private VLAN.
ProSafe M4100 and M7100 Managed Switches Term Definition host-association Defines VLAN association for community or host ports. mapping Defines the private VLAN mapping for promiscuous ports. primary-vlan-id Primary VLAN ID of a private VLAN. secondary-vlan-id Secondary (isolated or community) VLAN ID of a private VLAN. add Associates the secondary VLAN with the primary one. remove Deletes the secondary VLANs from the primary VLAN association.
ProSafe M4100 and M7100 Managed Switches private-vlan This command is used to configure the private VLANs and to configure the association between the primary private VLAN and secondary VLANs. Format private-vlan {association [add | remove] | community | isolated | primary} Mode VLAN Config Term Definition association Associates the primary and secondary VLAN. secondary-vlan-list A list of secondary VLANs to be mapped to a primary VLAN.
ProSafe M4100 and M7100 Managed Switches Term Definition Private -vlan Displays information about the configured private VLANs type Displays only private VLAN ID and its type. Primary Displays primary VLAN ID Secondary Displays secondary VLAN ID Type Displays secondary VLAN type Ports Displays ports which are associated with a private VLAN show interface ethernet switchport This command displays the private-VLAN mapping information for the switch interfaces.
ProSafe M4100 and M7100 Managed Switches no set garp timer join This command sets the GVRP join time (for one or all ports and per GARP) to the default and only has an effect when GVRP is enabled. Format no set garp timer join Mode • Interface Config • Global Config set garp timer leave This command sets the GVRP leave time for one port (Interface Config mode) or all ports (Global Config mode) and only has an effect when GVRP is enabled.
ProSafe M4100 and M7100 Managed Switches no set garp timer leaveall This command sets how frequently Leave All PDUs are generated the default and only has an effect when GVRP is enabled. Format no set garp timer leaveall Mode • Interface Config • Global Config show garp This command displays GARP information. Format show garp Mode • Privileged EXEC • User EXEC Term Definition GMRP Admin Mode The administrative mode of GARP Multicast Registration Protocol (GMRP) for the system.
ProSafe M4100 and M7100 Managed Switches no set gvrp adminmode This command disables GVRP. Format no set gvrp adminmode Mode Privileged EXEC set gvrp interfacemode This command enables GVRP on a single port (Interface Config mode) or all ports (Global Config mode). Default disabled Format set gvrp interfacemode Mode • Interface Config • Global Config no set gvrp interfacemode This command disables GVRP on a single port (Interface Config mode) or all ports (Global Config mode).
ProSafe M4100 and M7100 Managed Switches Term Definition Leave Timer The period of time to wait after receiving an unregister request for an attribute before deleting the attribute. Current attributes are a VLAN or multicast group. This may be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service. There is an instance of this timer on a per-Port, per-GARP participant basis. Permissible values are 20–600 centiseconds (0.
ProSafe M4100 and M7100 Managed Switches set gmrp interfacemode This command enables GARP Multicast Registration Protocol on a single interface (Interface Config mode) or all interfaces (Global Config mode). If an interface which has GARP enabled is enabled for routing or is enlisted as a member of a port-channel (LAG), GARP functionality is disabled on that interface.
ProSafe M4100 and M7100 Managed Switches Term Definition Leave Timer The period of time to wait after receiving an unregister request for an attribute before deleting the attribute. Current attributes are a VLAN or multicast group. This may be considered a buffer time for another station to assert registration for the same attribute in order to maintain uninterrupted service. There is an instance of this timer on a per-Port, per-GARP participant basis. Permissible values are 20–600 centiseconds (0.
ProSafe M4100 and M7100 Managed Switches clear dot1x statistics This command resets the 802.1x statistics for the specified port or for all ports. Format clear dot1x statistics { | all} Mode Privileged EXEC clear radius statistics This command is used to clear all RADIUS statistics. Format clear radius statistics Mode Privileged EXEC dot1x eapolflood Use this command to enable EAPOL flood support on the switch.
ProSafe M4100 and M7100 Managed Switches no dot1x guest-vlan This command disables Guest VLAN on the interface. Default disabled Format no dot1x guest-vlan Mode Interface Config dot1x initialize This command begins the initialization sequence on the specified port. This command is only valid if the control mode for the specified port is “auto” or “mac-based”. If the control mode is not 'auto' or “mac-based”, an error will be returned.
ProSafe M4100 and M7100 Managed Switches no dot1x max-req This command sets the maximum number of times the authenticator state machine on this port will transmit an EAPOL EAP Request/Identity frame before timing out the supplicant. Format no dot1x max-req Mode Interface Config dot1x max-users Use this command to set the maximum number of clients supported on the port when MAC-based dot1x authentication is enabled on the port. The maximum users supported per port is dependent on the product.
ProSafe M4100 and M7100 Managed Switches no dot1x port-control This command sets the 802.1x port control mode on the specified port to the default value. Format no dot1x port-control Mode Interface Config dot1x port-control all This command sets the authentication mode to use on all ports. Select force-unauthorized to specify that the authenticator PAE unconditionally sets the controlled port to unauthorized.
ProSafe M4100 and M7100 Managed Switches no dot1x re-authentication This command disables re-authentication of the supplicant for the specified port. Format no dot1x re-authentication Mode Interface Config dot1x system-auth-control Use this command to enable the dot1x authentication support on the switch. While disabled, the dot1x configuration is retained and can be changed, but is not activated.
ProSafe M4100 and M7100 Managed Switches Tokens Definition supp-timeout The value, in seconds, of the timer used by the authenticator state machine on this port to timeout the supplicant. The supp-timeout must be a value in the range 1 - 65535. server-timeout The value, in seconds, of the timer used by the authenticator state machine on this port to timeout the authentication server. The supp-timeout must be a value in the range 1 65535.
ProSafe M4100 and M7100 Managed Switches no dot1x unauthenticated-vlan This command resets the unauthenticated-vlan associated with the port to its default value. Format no dot1x unauthenticated-vlan Mode Interface Config dot1x user This command adds the specified user to the list of users with access to the specified port or all ports. The parameter must be a configured user.
ProSafe M4100 and M7100 Managed Switches no dot1x dynamic-vlan enable Use this command to disable the switch from creating VLANs dynamically when a RADIUS assigned VLAN does not exist in the switch. Format no dot1x dynamic-vlan enable Mode Global Config dot1x system-auth-control monitor Use this command to enable the 802.1X monitor mode on the switch.
ProSafe M4100 and M7100 Managed Switches Term Definition VLAN assigned The type of VLAN ID assigned, which can be Guest VLAN, Unauth, Default, RADIUS Reason Assigned, or Monitor Mode VLAN ID. Auth Status The authentication status. Reason The actual reason behind the successful or failed authentication. show authentication methods This command displays information about the authentication methods.
ProSafe M4100 and M7100 Managed Switches If you do not use the optional parameters or , the command displays the global dot1x mode, the VLAN Assignment mode, and the Dynamic VLAN Creation mode. Term Definition Administrative Mode Indicates whether authentication control on the switch is enabled or disabled. VLAN Assignment Mode Indicates whether assignment of an authorized port to a RADIUS assigned VLAN is allowed (enabled) or not (disabled).
ProSafe M4100 and M7100 Managed Switches Term Definition Backend Authentication State Current state of the backend authentication state machine. Possible values are Request, Response, Success, Fail, Timeout, Idle, and Initialize. When MAC-based authentication is enabled on the port, this parameter is deprecated. Quiet Period The timer used by the authenticator state machine on this port to define periods of time in which it will not attempt to acquire a supplicant.
ProSafe M4100 and M7100 Managed Switches Term Definition Session Timeout Indicates the time for which the given session is valid. The time period in seconds is returned by the RADIUS server on authentication of the port. This value is valid for the port only when the port control mode is not MAC-based. Session Termination Action This value indicates the action to be taken once the session timeout expires. Possible values are Default, Radius-Request.
ProSafe M4100 and M7100 Managed Switches Term Definition Last EAPOL Frame Source The source MAC address carried in the most recently received EAPOL frame. EAP Response/Id Frames Received The number of EAP response/identity frames that have been received by this authenticator. EAP Response Frames Received The number of valid EAP response frames (other than resp/id frames) that have been received by this authenticator.
ProSafe M4100 and M7100 Managed Switches Term Definition Filter ID Identifies the Filter ID returned by the RADIUS server when the client was authenticated. This is a configured DiffServ policy name on the switch. VLAN ID The VLAN assigned to the port. VLAN Assigned The reason the VLAN identified in the VLAN ID field has been assigned to the port. Possible values are RADIUS, Unauthenticated VLAN, or Default.
ProSafe M4100 and M7100 Managed Switches dot1x supplicant port-control Use this command to set the ports authorization state (Authorized or Unauthorized) either manually or by setting the port to auto-authorize upon startup. By default all the ports are authenticators. If the port’s attribute needs to be moved from or , use this command.
ProSafe M4100 and M7100 Managed Switches dot1x supplicant timeout start-period Use this command to configure the start period timer interval to wait for the EAP identity request from the authenticator. Default 30 seconds Format dot1x supplicant timeout start-period <1-65535 seconds> Mode Interface Config no dot1x supplicant timeout start-period Use this command to set the start-period value to the default.
ProSafe M4100 and M7100 Managed Switches no dot1x supplicant timeout auth-period Use this command to set the auth-period value to the default value. Format no dot1x supplicant timeout auth-period Mode Interface Config dot1x supplicant user Use this command to map the given user to the port. Format dot1x supplicant user Mode Interface Config Storm-Control Commands This section describes commands you use to configure storm-control and view storm-control configuration information.
ProSafe M4100 and M7100 Managed Switches rate kbps. For example, if the configured limit is 10%, this is converted to ~25000 pps, and this pps limit is set in forwarding plane (hardware). You get the approximate desired output when 512bytes packets are used. storm-control broadcast Use this command to enable broadcast storm recovery mode for a specific interface.
ProSafe M4100 and M7100 Managed Switches no storm-control broadcast level This command sets the broadcast storm recovery threshold to the default value for an interface and disables broadcast storm recovery. Format no storm-control broadcast level Mode Interface Config storm-control broadcast rate Use this command to configure the broadcast storm recovery threshold for an interface in packets per second.
ProSafe M4100 and M7100 Managed Switches storm-control broadcast level (Global) This command configures the broadcast storm recovery threshold for all interfaces as a percentage of link speed and enables broadcast storm recovery. If the mode is enabled, broadcast storm recovery is active, and if the rate of L2 broadcast traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped.
ProSafe M4100 and M7100 Managed Switches storm-control multicast This command enables multicast storm recovery mode for an interface. If the mode is enabled, multicast storm recovery is active, and if the rate of L2 multicast traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped. Therefore, the rate of multicast traffic will be limited to the configured threshold.
ProSafe M4100 and M7100 Managed Switches the traffic is dropped. Therefore, the rate of multicast traffic is limited to the configured threshold. Default 0 Format storm-control multicast rate <0-14880000> Mode Interface Config no storm-control multicast rate This command sets the multicast storm recovery threshold to the default value for an interface and disables multicast storm recovery.
ProSafe M4100 and M7100 Managed Switches no storm-control multicast level This command sets the multicast storm recovery threshold to the default value for all interfaces and disables multicast storm recovery. Format no storm-control multicast level Mode Global Config storm-control multicast rate (Global) Use this command to configure the multicast storm recovery threshold for all interfaces in packets per second.
ProSafe M4100 and M7100 Managed Switches no storm-control unicast This command disables unicast storm recovery mode for an interface. Format no storm-control unicast Mode Interface Config storm-control unicast level This command configures the unicast storm recovery threshold for an interface as a percentage of link speed, and enables unicast storm recovery.
ProSafe M4100 and M7100 Managed Switches no storm-control unicast rate This command sets the unicast storm recovery threshold to the default value for an interface and disables unicast storm recovery. Format no storm-control unicast rate Mode Interface Config storm-control unicast (Global) This command enables unicast storm recovery mode for all interfaces.
ProSafe M4100 and M7100 Managed Switches no storm-control unicast level This command sets the unicast storm recovery threshold to the default value and disables unicast storm recovery for all interfaces. Format no storm-control unicast level Mode Global Config storm-control unicast rate (Global) Use this command to configure the unicast storm recovery threshold for all interfaces in packets per second.
ProSafe M4100 and M7100 Managed Switches Use the all keyword to display the per-port configuration parameters for all interfaces, or specify the slot/port to display information about a specific interface. Format show storm-control [all | ] Mode Privileged EXEC Term Definition Bcast Mode Shows whether the broadcast storm control mode is enabled or disabled. The factory default is disabled. Bcast Level The broadcast storm control level.
ProSafe M4100 and M7100 Managed Switches no flowcontrol Format no flowcontrol Mode • Global Config • Interface Config show flowcontrol Use this command to display the IEEE 802.3 Annex 31B flow control settings and status for a specific interface or all interfaces. It also displays 802.3 Tx and Rx pause counts. Priority Flow Control frames counts are not displayed. If the port is enabled for priority flow control, operational flow control status is displayed as “Inactive”.
ProSafe M4100 and M7100 Managed Switches A port-channel (LAG) interface can be either static or dynamic, but not both. All members of a port channel must participate in the same protocols.) A static port-channel interface does not require a partner system to be able to aggregate its member ports. Note: If you configure the maximum number of dynamic port-channels (LAGs) that your platform supports, additional port-channels that you configure are automatically static.
ProSafe M4100 and M7100 Managed Switches lacp admin key Use this command to configure the administrative value of the key for the port-channel. The value range of is 0–65535. Default 0x8000 Format lacp admin key Mode Interface Config Note: This command is only applicable to port-channel interfaces. no lacp admin key Use this command to configure the default administrative value of the key for the port-channel.
ProSafe M4100 and M7100 Managed Switches lacp actor admin key Use this command to configure the administrative value of the LACP actor admin key. The valid range for is 0-65535. Default Internal Interface Number of this Physical Port Format lacp actor admin key Mode Interface Config Note: This command is only applicable to physical interfaces. no lacp actor admin key Use this command to configure the default administrative value of the key.
ProSafe M4100 and M7100 Managed Switches Note: This command is only applicable to physical interfaces. no lacp actor admin state longtimeout Use this command to set the LACP actor admin state to short timeout. Format no lacp actor admin state longtimeout Mode Interface Config Note: This command is only applicable to physical interfaces. lacp actor admin state passive Use this command to set the LACP actor admin state to passive.
ProSafe M4100 and M7100 Managed Switches no lacp actor port priority Use this command to configure the default priority value assigned to the Aggregation Port. Format no lacp actor port priority Mode Interface Config lacp actor system priority Use this command to configure the priority value associated with the LACP Actor’s SystemID. The range for is 0–65535.
ProSafe M4100 and M7100 Managed Switches no lacp partner admin key Use this command to configure the administrative value of the Key for the protocol partner. Format no lacp partner admin key Mode Interface Config lacp partner admin state individual Use this command to set LACP partner admin state to individual. Format lacp partner admin state individual Mode Interface Config Note: This command is only applicable to physical interfaces.
ProSafe M4100 and M7100 Managed Switches lacp partner admin state passive Use this command to set the LACP partner admin state to passive. Format lacp partner admin state passive Mode Interface Config Note: This command is only applicable to physical interfaces. no lacp partner admin state passive Use this command to set the LACP partner admin state to active.
ProSafe M4100 and M7100 Managed Switches Format lacp partner port priority Mode Interface Config Note: This command is only applicable to physical interfaces. no lacp partner port priority Use this command to configure the default LACP partner port priority.
ProSafe M4100 and M7100 Managed Switches Note: This command is applicable only to physical interfaces. no lacp partner system priority Use this command to configure the default administrative value of priority associated with the Partner’s System ID. Format no lacp partner system priority Mode Interface Config port-channel local-preference This command enables the local-preference mode on a port-channel (LAG) interface or range of interfaces.
ProSafe M4100 and M7100 Managed Switches no port-channel static This command sets the static mode on a particular port-channel (LAG) interface to the default value. This command will be executed only for interfaces of type port-channel (LAG). Format no port-channel static Mode Interface Config port lacpmode This command enables Link Aggregation Control Protocol (LACP) on a port.
ProSafe M4100 and M7100 Managed Switches no port lacptimeout This command sets the timeout back to its default value on a physical interface of a particular device type (actor or partner). Format no port lacptimeout {actor | partner} Mode Interface Config port lacptimeout (Global Config) This command sets the timeout for all interfaces of a particular device type (actor or partner) to either long or short timeout.
ProSafe M4100 and M7100 Managed Switches port-channel linktrap This command enables link trap notifications for the port-channel (LAG). The interface is a logical slot/port for a configured port-channel. The option all enables link trap notifications for all the configured port-channels. Default enabled Format port-channel linktrap { | lag | all} Mode Global Config no port-channel linktrap This command disables link trap notifications for the port-channel (LAG).
ProSafe M4100 and M7100 Managed Switches Term Definition 1 Source MAC, VLAN, EtherType, and incoming port associated with the packet 2 Destination MAC, VLAN, EtherType, and incoming port associated with the packet 3 Source/Destination MAC, VLAN, EtherType, and incoming port associated with the packet 4 Source IP and Source TCP/UDP fields of the packet 5 Destination IP and Destination TCP/UDP Port fields of the packet 6 Source/Destination IP and source/destination TCP/UDP Port fields of the pac
ProSafe M4100 and M7100 Managed Switches Format port-channel system priority Mode Global Config no port-channel system priority Use this command to configure the default port-channel system priority value. Format no port-channel system priority Mode Global Config show lacp actor Use this command to display LACP actor attributes. Format show lacp actor {|all} Mode Global Config The following output parameters are displayed.
ProSafe M4100 and M7100 Managed Switches Parameter Description Port-ID The administrative value of the port number for the protocol Partner. Admin State The administrative values of the actor state for the protocol Partner. show port-channel brief This command displays the static capability of all port-channel (LAG) interfaces on the device as well as a summary of individual port-channel interfaces.
ProSafe M4100 and M7100 Managed Switches Term Definition Type The status designating whether a particular port-channel (LAG) is statically or dynamically maintained. • Static - The port-channel is statically maintained. • Dynamic - The port-channel is dynamically maintained. Mbr Ports A listing of the ports that are members of this port-channel (LAG), in slot/port notation. There can be a maximum of eight ports assigned to a given port-channel (LAG).
ProSafe M4100 and M7100 Managed Switches no monitor session Use this command without optional parameters to remove the monitor session (port monitoring) designation from the source probe port, the destination monitored port and all VLANs. Once the port is removed from the VLAN, you must manually add the port to any desired VLANs. Use the source interface parameter or destination interface to remove the specified interface from the port monitoring session.
ProSafe M4100 and M7100 Managed Switches Format show monitor session Mode Privileged EXEC Term Definition Session ID An integer value used to identify the session. Its value can be anything between 1 and the maximum number of mirroring sessions allowed on the platform. Admin Mode Indicates whether the Port Mirroring feature is enabled or disabled for the session identified with . The possible values are Enabled and Disabled.
ProSafe M4100 and M7100 Managed Switches Format macfilter Mode Global Config no macfilter This command removes all filtering restrictions and the static MAC filter entry for the MAC address on the VLAN . The parameter must be specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The parameter must identify a valid VLAN.
ProSafe M4100 and M7100 Managed Switches 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The parameter must identify a valid VLAN. Note: Configuring a destination port list is only valid for multicast MAC addresses. Format macfilter adddest all Mode Global Config no macfilter adddest all This command removes all ports from the destination filter set for the MAC filter with the given and VLAN of .
ProSafe M4100 and M7100 Managed Switches 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The parameter must identify a valid VLAN. Format macfilter addsrc all Mode Global Config no macfilter addsrc all This command removes all interfaces to the source filter set for the MAC filter with the MAC address of and VLAN of . You must specify the parameter as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
ProSafe M4100 and M7100 Managed Switches Term Definition Mac Address A unicast MAC address for which the switch has forwarding and or filtering information. As the data is gleaned from the MFDB, the address will be a multicast address. The format is 6 or 8 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB. In an IVL system the MAC address will be displayed as 8 bytes. Type The type of the entry. Static entries are those that are configured by the end user.
ProSafe M4100 and M7100 Managed Switches Separate non-consecutive IDs with a comma (,), and do not insert spaces or zeros in between the range. Use a dash (–) for the range. Format dhcp l2relay circuit-id vlan Mode Global Config no dhcp l2relay circuit-id vlan Use this parameter to clear the DHCP Option-82 Circuit ID for a VLAN.
ProSafe M4100 and M7100 Managed Switches no dhcp l2relay vlan Use this command to disable the DHCP L2 Relay agent for a set of VLANs. Format no dhcp l2relay vlan Mode Global Config dhcp l2relay trust Use this command to configure an interface or range of interfaces as trusted for Option-82 reception. Default untrusted Format dhcp l2relay trust Mode Interface Config no dhcp l2relay trust Use this command to configure an interface to the default untrusted for Option-82 reception.
ProSafe M4100 and M7100 Managed Switches show dhcp l2relay interface Use this command to display DHCP L2 relay configuration specific to interfaces. Format show dhcp l2relay interface {all | interface-num} Mode Privileged EXEC Example: The following shows example CLI display output for the command. (switch) #show dhcp l2relay interface all DHCP L2 Relay is Enabled.
ProSafe M4100 and M7100 Managed Switches 5 6 7 8 9 10 Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Disabled Disabled Disabled Disabled --NULL— netgear --NULL— --NULL— --NULL— --NULL-- DHCP Client Commands DHCP Client can include vendor and configuration information in DHCP client requests relayed to a DHCP server. This information is included in DHCP Option 60, Vendor Class Identifier. The information is a string of 128 octets.
ProSafe M4100 and M7100 Managed Switches show dhcp client vendor-id-option Use this command to display the configured administration mode of the vendor-id-option and the vendor-id string to be included in Option-43 in DHCP requests. Format show dhcp client vendor-id-option Mode Privileged EXEC Example: The following shows example CLI display output for the command. (switch) #show dhcp client vendor-id-option DHCP Client Vendor Identifier Option ...........
ProSafe M4100 and M7100 Managed Switches no ip dhcp snooping vlan Use this command to disable DHCP Snooping on VLANs. Format no ip dhcp snooping vlan Mode Global Config ip dhcp snooping verify mac-address Use this command to enable verification of the source MAC address with the client hardware address in the received DCHP message.
ProSafe M4100 and M7100 Managed Switches no ip dhcp snooping database write-delay Use this command to set the write delay value to the default value. Format no ip dhcp snooping database write-delay Mode Global Config ip dhcp snooping binding Use this command to configure static DHCP Snooping binding.
ProSafe M4100 and M7100 Managed Switches Format ip dhcp snooping limit {rate pps [burst interval seconds]} Mode Interface Config no ip dhcp snooping limit Use this command to set the rate at which the DHCP Snooping messages come, and the burst level, to the defaults. Format no ip dhcp snooping limit Mode Interface Config ip dhcp snooping log-invalid Use this command to control the logging DHCP messages filtration by the DHCP Snooping application.
ProSafe M4100 and M7100 Managed Switches ip verify source Use this command to configure the IPSG source ID attribute to filter the data traffic in the hardware. Source ID is the combination of IP address and MAC address. Normal command allows data traffic filtration based on the IP address. With the “port-security” option, the data traffic will be filtered based on the IP and MAC addresses.
ProSafe M4100 and M7100 Managed Switches 0/1 0/2 0/3 0/4 0/6 Yes No No No No No Yes Yes No No show ip dhcp snooping binding Use this command to display the DHCP Snooping binding entries. To restrict the output, use the following options: • Dynamic: Restrict the output based on DCHP snooping. • Interface: Restrict the output based on a specific interface. • Static: Restrict the output based on static entries. • VLAN: Restrict the output based on VLAN.
ProSafe M4100 and M7100 Managed Switches show ip dhcp snooping database Use this command to display the DHCP Snooping configuration related to the database persistency. Format show ip dhcp snooping database Mode • Privileged EXEC • User EXEC Term Definition Agent URL Bindings database agent URL. Write Delay The maximum write time to write the database into local or remote. Example: The following shows example CLI display output for the command.
ProSafe M4100 and M7100 Managed Switches Term Definition Client Ifc Mismatch Represents the number of DHCP release and Deny messages received on the different ports than learned previously. DHCP Server Msgs Rec’d Represents the number of DHCP server messages received on Untrusted ports. Example: The following shows example CLI display output for the command.
ProSafe M4100 and M7100 Managed Switches show ip verify source Use this command to display the IPSG configurations on all ports. Format show ip verify source Mode • Privileged EXEC • User EXEC Term Definition Interface Interface address in slot/port format. Filter Type Is one of two values: • ip-mac: User has configured MAC address filtering on this interface. • ip: Only IP address filtering on this interface.
ProSafe M4100 and M7100 Managed Switches Term Definition VLAN VLAN for the entry. Interface IP address of the interface in slot/port format. The following shows sample CLI display output for the command. (switch) #show ip source binding MAC Address ----------------00:00:00:00:00:08 IP Address --------------1.2.3.4 Type ------------dhcp-snooping Vlan ----2 Interface ------------0/1 00:00:00:00:00:09 1.2.3.4 dhcp-snooping 3 0/1 00:00:00:00:00:0A 1.2.3.
ProSafe M4100 and M7100 Managed Switches ip arp inspection validate Use this command to enable additional validation checks like source-mac validation, destination-mac validation, and ip address validation on the received ARP packets. Each command overrides the configuration of the previous command. For example, if a command enables src-mac and dst-mac validations, and a second command enables IP validation only, the src-mac and dst-mac validations are disabled as a result of the second command.
ProSafe M4100 and M7100 Managed Switches no ip arp inspection trust Use this command to configure an interface as untrusted for Dynamic ARP Inspection. Format no ip arp inspection trust Mode Interface Config ip arp inspection limit Use this command to configure the rate limit and burst interval values for an interface. Configuring none for the limit means that the interface is not rate limited for Dynamic ARP Inspections.
ProSafe M4100 and M7100 Managed Switches no ip arp inspection filter Use this command to unconfigure the ARP ACL used to filter invalid ARP packets on a list of comma-separated VLAN ranges. Format no ip arp inspection filter acl-name vlan vlan-list [static] Mode Global Config arp access-list Use this command to create an ARP ACL. Format arp access-list acl-name Mode Global Config no arp access-list Use this command to delete a configured ARP ACL.
ProSafe M4100 and M7100 Managed Switches the given VLAN list. The global configuration includes the source mac validation, destination mac validation, and invalid IP validation information. Format show ip arp inspection [vlan ] Mode • Privileged EXEC • User EXEC Term Definition Source MAC Validation Displays whether Source MAC Validation of ARP frame is enabled or disabled. Destination Displays whether Destination MAC Validation is enabled or disabled.
ProSafe M4100 and M7100 Managed Switches Term Definition VLAN The VLAN ID for each displayed row. Forwarded The total number of valid ARP packets forwarded in this VLAN. Dropped The total number of not valid ARP packets dropped in this VLAN. DHCP Drops The number of packets dropped due to DHCP snooping binding database match failure. ACL Drops The number of packets dropped due to ARP ACL rule match failure.
ProSafe M4100 and M7100 Managed Switches command displays the values for that interface whether the interface is enabled for DAI or not. Format show ip arp inspection interfaces [slot/port] Mode • Privileged EXEC • User EXEC Term Definition Interface The interface ID for each displayed row. Trust State Whether the interface is trusted or untrusted for DAI. Rate Limit The configured rate limit value in packets per second. Burst Interval The configured burst interval value in seconds.
ProSafe M4100 and M7100 Managed Switches IGMP Snooping Configuration Commands This section describes the commands you use to configure IGMP snooping. The software supports IGMP Versions 1, 2, and 3. The IGMP snooping feature can help conserve bandwidth because it allows the switch to forward IP multicast traffic only to connected hosts that request multicast traffic. IGMPv3 adds source filtering capabilities to IGMP versions 1 and 2.
ProSafe M4100 and M7100 Managed Switches Format no set igmp Mode VLAN Config set igmp interfacemode This command enables IGMP Snooping on all interfaces. If an interface has IGMP Snooping enabled and you enable this interface for routing or enlist it as a member of a port-channel (LAG), IGMP Snooping functionality is disabled on that interface.
ProSafe M4100 and M7100 Managed Switches no set igmp fast-leave This command disables IGMP Snooping fast-leave admin mode on a selected interface. Format no set igmp fast-leave Mode Interface Config Format no set igmp fast-leave Mode VLAN Config set igmp groupmembership-interval This command sets the IGMP Group Membership Interval time on a VLAN, one interface, or all interfaces.
ProSafe M4100 and M7100 Managed Switches particular group in that interface. This value must be less than the IGMP Query Interval time value. The range is 1–25 seconds. Default 10 seconds Format set igmp maxresponse <1-25> Mode • Global Config • Interface Config Format set igmp maxresponse <1-25> Mode VLAN Config no set igmp maxresponse This command sets the max response time (on the interface or VLAN) to the default value.
ProSafe M4100 and M7100 Managed Switches no set igmp mcrtrexpiretime This command sets the Multicast Router Present Expiration time to 0. The time is set for the system, on a particular interface or a VLAN. Format no set igmp mcrtrexpiretime Mode • Global Config • Interface Config Format no set igmp mcrtrexpiretime Mode VLAN Config set igmp mrouter This command configures the VLAN ID () that has the multicast router mode enabled.
ProSafe M4100 and M7100 Managed Switches set igmp report-suppression Use this command to suppress the IGMP reports on a given VLAN ID. In order to optimize the number of reports traversing the network with no added benefits, a Report Suppression mechanism is implemented. When more than one client responds to an MGMD query for the same Multicast Group address within the max-response-time, only the first response is forwarded to the query and others are suppressed at the switch.
ProSafe M4100 and M7100 Managed Switches mac address-table multicast forbidden-unregistered vlan Use this command to forbid forwarding unregistered multicast addresses (in other words, unknown multicast traffic) on a given VLAN ID. Default Disabled Format mac address-table multicast forbidden-unregistered vlan <1-4093> Mode Global Config no mac address-table multicast forbidden-unregistered vlan Use this command to restore the default.
ProSafe M4100 and M7100 Managed Switches show igmpsnooping This command displays IGMP Snooping information. Configured information is displayed whether or not IGMP Snooping is enabled. Format show igmpsnooping [ | ] Mode Privileged EXEC When the optional arguments or are not used, the command displays the following information: Term Definition Admin Mode Indicates whether or not IGMP Snooping is active on the switch.
ProSafe M4100 and M7100 Managed Switches Term Definition Fast Leave Mode Indicates whether IGMP Snooping Fast-leave is active on the VLAN. Group Membership Interval The amount of time in seconds that a switch will wait for a report from a particular group on a particular interface, which is participating in the VLAN, before deleting the interface from the entry. This value may be configured.
ProSafe M4100 and M7100 Managed Switches show mac-address-table igmpsnooping This command displays the IGMP Snooping entries in the MFDB table. Format show mac-address-table igmpsnooping Mode Privileged EXEC show mac address-table multicast filtering Term Definition MAC Address A multicast MAC address for which the switch has forwarding or filtering information. The format is two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB.
ProSafe M4100 and M7100 Managed Switches set igmp querier Use this command to enable IGMP Snooping Querier on the system, using Global Config mode, or on a VLAN. Using this command, you can specify the IP Address that the Snooping Querier switch should use as the source address while generating periodic queries. If a VLAN has IGMP Snooping Querier enabled and IGMP Snooping is operationally disabled on it, IGMP Snooping Querier functionality is disabled on that VLAN.
ProSafe M4100 and M7100 Managed Switches no set igmp querier query-interval Use this command to set the IGMP Querier Query Interval time to its default value. Format no set igmp querier query-interval Mode Global Config set igmp querier timer expiry Use this command to set the IGMP Querier timer expiration period. It is the time period that the switch remains in Non-Querier mode once it has discovered that there is a Multicast Querier in the network.
ProSafe M4100 and M7100 Managed Switches than the Snooping Querier’s address, it stops sending periodic queries. If the Snooping Querier wins the election, then it will continue sending periodic queries.
ProSafe M4100 and M7100 Managed Switches When you specify a value for , the following additional information appears. Field Description VLAN Admin Mode Indicates whether iGMP Snooping Querier is active on the VLAN. VLAN Operational State Indicates whether IGMP Snooping Querier is in “Querier” or “Non-Querier” state. When the switch is in Querier state, it will send out periodic general queries.
ProSafe M4100 and M7100 Managed Switches interface. MLD Snooping functionality is re-enabled if you disable routing or remove port channel (LAG) membership from an interface that has MLD Snooping enabled. MLD Snooping supports the following activities: • Validation of address version, payload length consistencies and discarding of the frame upon error. • Maintenance of the forwarding table entries based on the MAC address versus the IPv6 address.
ProSafe M4100 and M7100 Managed Switches set mld fast-leave Use this command to enable MLD Snooping fast-leave admin mode on a selected interface or VLAN. Enabling fast-leave allows the switch to immediately remove the Layer 2 LAN interface from its forwarding table entry upon receiving and MLD done message for that multicast group without first sending out MAC-based general queries to the interface.
ProSafe M4100 and M7100 Managed Switches Format set mld groupmembership-interval vlanid 2-3600 Mode • Interface Config • Global Config • VLAN Mode no set groupmembership-interval Use this command to set the MLDv2 Group Membership Interval time to the default value. Format no set mld groupmembership-interval Mode • Interface Config • Global Config • VLAN Mode set mld maxresponse Use this command to set the MLD Maximum Response time for the system, on a particular interface or VLAN.
ProSafe M4100 and M7100 Managed Switches interfaces with multicast routers attached. The range is 0–3600 seconds. A value of 0 indicates an infinite timeout, that is, no expiration. Default 0 Format set mld mcrtexpiretime vlanid 0-3600 Mode • Global Config • Interface Config no set mld mcrtexpiretime Use this command to set the Multicast Router Present Expiration time to 0. The time is set for the system, on a particular interface or a VLAN.
ProSafe M4100 and M7100 Managed Switches no set mld mrouter interface Use this command to disable the status of the interface as a statically configured multicast router-attached interface. Format no set mld mrouter interface Mode Interface Config show mldsnooping Use this command to display MLD Snooping information. Configured information is displayed whether or not MLD Snooping is enabled.
ProSafe M4100 and M7100 Managed Switches When you specify a value for vlanid, the following information appears. Term Definition VLAN Admin Mode Indicates whether MLD Snooping is active on the VLAN. show mldsnooping mrouter interface Use this command to display information about statically configured multicast router attached interfaces.
ProSafe M4100 and M7100 Managed Switches Term Definition VLAN ID The VLAN in which the MAC address is learned. MAC Address A multicast MAC address for which the switch has forwarding or filtering information. The format is 6 two-digit hexadecimal numbers that are separated by colons, for example 01:23:45:67:89:AB. Type The type of entry, which is either static (added by the user) or dynamic (added to the table as a result of a learning process or protocol.
ProSafe M4100 and M7100 Managed Switches no set mld querier Use this command to disable MLD Snooping Querier on the system. Use the optional parameter address to reset the querier address. Format no set mld querier [vlan-id][address] Mode • Global Config • VLAN Mode set mld querier query_interval Use this command to set the MLD Querier Query Interval time. This is the amount of time in seconds that the switch waits before sending another general query.
ProSafe M4100 and M7100 Managed Switches set mld querier election participate Use this command to enable the Snooping Querier to participate in the Querier Election process when it discovers the presence of another Querier in the VLAN. When this mode is enabled, if the Snooping Querier finds that the other Querier’s source address is better (less) than the Snooping Querier’s address, it stops sending periodic queries.
ProSafe M4100 and M7100 Managed Switches When you specify a value for vlanid, the following information appears. Field Description VLAN Admin Mode Indicates whether MLD Snooping Querier is active on the VLAN. VLAN Operational Indicates whether MLD Snooping Querier is in “Querier” or “Non-Querier” state. When State the switch is in Querier state, it will send out periodic general queries. When in Non-Querier state, it will wait for moving to Querier state and does not send out any queries.
ProSafe M4100 and M7100 Managed Switches port-security This command enables port locking at the system level (Global Config) or port level (Interface Config). Default disabled Format port-security Mode • Global Config • Interface Config no port-security This command disables port locking for one (Interface Config) or all (Global Config) ports.
ProSafe M4100 and M7100 Managed Switches no port-security max-static This command sets maximum number of statically locked MAC addresses to the default value. Format no port-security max-static Mode Interface Config port-security mac-address This command adds a MAC address to the list of statically locked MAC addresses. The is the VLAN ID.
ProSafe M4100 and M7100 Managed Switches no port-security mac-address sticky The no form removes the sticky mode. The sticky MAC address can be deleted by using the command no port-security mac-address . Format no port-security mac-address sticky [ ] Modes • Global Config • Interface Config show port-security This command displays the port-security settings. If you do not use a parameter, the command displays the settings for the entire system.
ProSafe M4100 and M7100 Managed Switches show port-security static This command displays the statically locked MAC addresses for port. Format show port-security static [lag | ] Mode Privileged EXEC Term Definition MAC Address MAC Address of statically locked MAC. show port-security violation This command displays the source MAC address of the last packet discarded on a locked port.
ProSafe M4100 and M7100 Managed Switches lldp receive Use this command to enable the LLDP receive capability. Default enabled Format lldp receive Mode Interface Config no lldp receive Use this command to return the reception of LLDPDUs to the default value. Format no lldp receive Mode Interface Config lldp timers Use this command to set the timing parameters for local data transmission on ports enabled for LLDP.
ProSafe M4100 and M7100 Managed Switches Use port-desc to transmit the port description TLV. To configure the port description, see description on page 22 Default all optional TLVs are included Format lldp transmit-tlv [sys-desc] [sys-name] [sys-cap] [port-desc] Mode Interface Config no lldp transmit-tlv Use this command to remove an optional TLV from the LLDPDUs. Use the command without parameters to remove all optional TLVs from the LLDPDU.
ProSafe M4100 and M7100 Managed Switches no lldp notification Use this command to disable notifications. Default disabled Format no lldp notification Mode Interface Config lldp notification-interval Use this command to configure how frequently the system sends remote data change notifications. The parameter is the number of seconds to wait between sending notifications. The valid interval range is 5-3600 seconds.
ProSafe M4100 and M7100 Managed Switches show lldp Use this command to display a summary of the current LLDP configuration. Format show lldp Mode Privileged Exec Term Definition Transmit Interval How frequently the system transmits local data LLDPDUs, in seconds. Transmit Hold Multiplier The multiplier on the transmit interval that sets the TTL in local data LLDPDUs. Re-initialization The delay before re-initialization, in seconds.
ProSafe M4100 and M7100 Managed Switches show lldp statistics Use this command to display the current LLDP traffic and remote table statistics for a specific interface or for all interfaces. Format show lldp statistics { | all} Mode Privileged Exec Term Definition Last Update The amount of time since the last update to the remote table in days, hours, minutes, and seconds. Total Inserts Total number of inserts to the remote data table.
ProSafe M4100 and M7100 Managed Switches show lldp remote-device Use this command to display summary information about remote devices that transmit current LLDP data to the system. You can show information about LLDP remote data received on all ports or on a specific port. Format show lldp remote-device { | all} Mode Privileged EXEC Term Definition Local Interface The interface that received the LLDPDU from the remote device.
ProSafe M4100 and M7100 Managed Switches show lldp remote-device detail Use this command to display detailed information about remote devices that transmit current LLDP data to an interface on the system. Format show lldp remote-device detail Mode Privileged EXEC Term Definition Local Interface The interface that received the LLDPDU from the remote device. Remote Identifier An internal identifier to the switch to mark each remote device to the system.
ProSafe M4100 and M7100 Managed Switches Port ID: 00:FC:E3:90:01:11 System Name: System Description: Port Description: System Capabilities Supported: System Capabilities Enabled: Time to Live: 24 seconds show lldp local-device Use this command to display summary information about the advertised LLDP local data. This command can display summary information or detail for each interface.
ProSafe M4100 and M7100 Managed Switches Term Definition System Capabilities Supported Indicates the primary function(s) of the device. System Capabilities Enabled Shows which of the supported system capabilities are enabled. Management Address The type of address and the specific address the local LLDP agent uses to send and receive information. LLDP-MED Commands Link Layer Discovery Protocol - Media Endpoint Discovery (LLDP-MED) (ANSI-TIA-1057) provides an extension to the LLDP standard.
ProSafe M4100 and M7100 Managed Switches no ldp med confignotification Use this command to disable notifications. Format no lldp med confignotification Mode Interface Config lldp med transmit-tlv Use this command to specify which optional Type Length Values (TLVs) in the LLDP MED set will be transmitted in the Link Layer Discovery Protocol Data Units (LLDPDUs). Default By default, the capabilities and network policy TLVs are included.
ProSafe M4100 and M7100 Managed Switches lldp med all Use this command to configure LLDP-MED on all the ports Format lldp med all Mode Global Config no lldp med all Use this command to remove LLDP-MD on all ports. Format no lldp med all Mode Global Config lldp med confignotification all Use this command to configure all the ports to send the topology change notification.
ProSafe M4100 and M7100 Managed Switches lldp med transmit-tlv all Use this command to specify which optional Type Length Values (TLVs) in the LLDP MED set will be transmitted in the Link Layer Discovery Protocol Data Units (LLDPDUs). Default By default, the capabilities and network policy TLVs are included. Format lldp med transmit-tlv all [capabilities] [ex-pd] [ex-pse] [inventory] [location] [network-policy] Mode Global Config Term Definition capabilities Transmit the LLDP capabilities TLV.
ProSafe M4100 and M7100 Managed Switches Example: The following shows example CLI display output for the command. (switch) #show lldp med LLDP MED Global Configuration Fast Start Repeat Count: 3 Device Class: Network Connectivity (switch) # show lldp med interface Use this command to display a summary of the current LLDP MED configuration for a specific interface. indicates a specific physical interface. all indicates all valid LLDP interfaces.
ProSafe M4100 and M7100 Managed Switches 0/13 0/14 Down Down Disabled Disabled Disabled Disabled TLV Codes: 0- Capabilities, 2- Location, 4- Extended Pd, --More-- or (q)uit (Switch) #show lldp med interface Interface --------0/2 Link -----Up 0,1 0,1 1- Network Policy 3- Extended PSE 5- Inventory 0/2 configMED operMED --------- -------Disabled Disabled TLV Codes: 0- Capabilities, 2- Location, 4- Extended Pd, Disabled Disabled ConfigNotify TLVsTx ------------ ----------Disabled 0,1 1- Network Pol
ProSafe M4100 and M7100 Managed Switches (Switch) #show lldp med local-device detail 0/8 LLDP MED Local Device Detail Interface: 0/8 Network Policies Media Policy Application Type : voice Vlan ID: 10 Priority: 5 DSCP: 1 Unknown: False Tagged: True Media Policy Application Type : streamingvideo Vlan ID: 20 Priority: 1 DSCP: 2 Unknown: False Tagged: True Inventory Hardware Rev: xxx xxx xxx Firmware Rev: xxx xxx xxx Software Rev: xxx xxx xxx Serial Num: xxx xxx xxx Mfg Name: xxx xxx xxx Model Name: xxx xxx x
ProSafe M4100 and M7100 Managed Switches show lldp med remote-device This command displays summary information about remote devices that transmit current LLDP MED data to the system. You can show information about LLDP remote data received on all ports or on a specific port. Format show lldp med remote-device { | all} Mode Privileged EXEC Term Definition Interface The interface in a slot/port format. Device Class The Remote device’s MED Classification.
ProSafe M4100 and M7100 Managed Switches Term Definition Device Class Shows the device class as advertized by the device remotely connected to the port. Network Policy Information Shows if network policy TLV is received in the LLDP frames on this port. Media Application Type Shows the application type. Types of applications are unknown, voice, voicesignaling, guestvoice, guestvoicesignaling, sfotphonevoice, videoconferencing, streamingvideo, videosignaling.
ProSafe M4100 and M7100 Managed Switches LLDP MED Remote Device Detail Local Interface: 0/8 Remote Identifier: 18 Capabilities MED Capabilities Supported: capabilities, networkpolicy, location, extendedpse MED Capabilities Enabled: capabilities, networkpolicy Device Class: Endpoint Class I Network Policies Media Policy Application Type : voice Vlan ID: 10 Priority: 5 DSCP: 1 Unknown: False Tagged: True Media Policy Application Type : streamingvideo Vlan ID: 20 Priority: 1 DSCP: 2 Unknown: False Tagged: Tru
ProSafe M4100 and M7100 Managed Switches This section describes the commands you use to configure Denial of Service (DoS) Control. The software provides support for classifying and blocking specific types of Denial of Service attacks. You can configure your system to monitor and block these types of attacks: • SIP=DIP: Source IP address = Destination IP address. • First Fragment: TCP Header size smaller then configured value. • TCP Fragment: IP Fragment Offset = 1.
ProSafe M4100 and M7100 Managed Switches dos-control sipdip This command enables Source IP address = Destination IP address (SIP=DIP) Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress with SIP=DIP, the packets will be dropped if the mode is enabled.
ProSafe M4100 and M7100 Managed Switches dos-control tcpfrag This command enables TCP Fragment Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having IP Fragment Offset equal to one (1), the packets will be dropped if the mode is enabled. Default disabled Format dos-control tcpfrag Mode Global Config no dos-control tcpfrag This command disabled TCP Fragment Denial of Service protection.
ProSafe M4100 and M7100 Managed Switches Note: Some applications mirror source and destination L4 ports - RIP for example uses 520 for both. If you enable dos-control l4port, applications such as RIP may experience packet loss which would render the application inoperable. Default disabled Format dos-control l4port Mode Global Config no dos-control l4port This command disables L4 Port Denial of Service protections.
ProSafe M4100 and M7100 Managed Switches this type of attack. If packets ingress with SMAC=DMAC, the packets will be dropped if the mode is enabled. Default disabled Format dos-control smacdmac Mode Global Config no dos-control smacdmac This command disables Source MAC address = Destination MAC address (SMAC=DMAC) Denial of Service protection.
ProSafe M4100 and M7100 Managed Switches no dos-control udpport This command disables UDP L4 source = destination port number (Source UDP Port = Destination UDP Port) Denial of Service protection. Format no dos-control udppport Mode Global Config dos-control tcpflagseq This command enables TCP Flag and Sequence Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack.
ProSafe M4100 and M7100 Managed Switches dos-control tcpsyn This command enables TCP SYN and L4 source = 0-1023 Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP flag SYN set and an L4 source port from 0 to 1023, the packets will be dropped if the mode is enabled.
ProSafe M4100 and M7100 Managed Switches Format dos-control tcpfinurgpsh Mode Global Config no dos-control tcpfinurgpsh This command sets disables TCP FIN and URG and PSH and SEQ=0 checking Denial of Service protections. Format no dos-control tcpfinurgpsh Mode Global Config dos-control icmpv4 This command enables Maximum ICMPv4 Packet Size Denial of Service protections. If the mode is enabled, Denial of Service prevention is active for this type of attack.
ProSafe M4100 and M7100 Managed Switches no dos-control icmpv6 This command disables Maximum ICMP Packet Size Denial of Service protections. Format no dos-control icmpv6 Mode Global Config dos-control icmpfrag This command enables ICMP Fragment Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having fragmented ICMP packets, the packets will be dropped if the mode is enabled.
ProSafe M4100 and M7100 Managed Switches Term Definition Max ICMPv4 Pkt The range is 0-1023. The factory default is 512. Size Max ICMPv6 Pkt The range is 0-16384. The factory default is 512. Size ICMP Fragment May be enabled or disabled. The factory default is disabled. Mode L4 Port Mode May be enabled or disabled. The factory default is disabled. TCP Port Mode May be enabled or disabled. The factory default is disabled. UDP Port Mode May be enabled or disabled. The factory default is disabled.
ProSafe M4100 and M7100 Managed Switches no bridge aging-time This command sets the forwarding database address aging timeout to the default value. Format no bridge aging-time Mode Global Config show forwardingdb agetime This command displays the timeout for address aging. Default 300s Format show forwardingdb agetime Mode Privileged EXEC Term Definition Address Aging Timeout This parameter displays the address aging timeout for the associated forwarding database.
ProSafe M4100 and M7100 Managed Switches show mac-address-table stats This command displays the Multicast Forwarding Database (MFDB) statistics. Format show mac-address-table stats Mode Privileged EXEC Term Definition Max MFDB Table Entries The total number of entries that can possibly be in the Multicast Forwarding Database table. Most MFDB Entries Since Last Reset The largest number of entries that have been present in the Multicast Forwarding Database table.
ProSafe M4100 and M7100 Managed Switches Format isdp holdtime <10-255> Mode Global Config isdp timer This command sets the period of time between sending new ISDP packets. The range is given in seconds. Default 30 seconds Format isdp timer <5-254> Mode Global Config isdp advertise-v2 This command enables the sending of ISDP version 2 packets from the device.
ProSafe M4100 and M7100 Managed Switches clear isdp counters This command clears ISDP counters. Format clear isdp counters Mode Privileged EXEC clear isdp table This command clears entries in the ISDP table. Format clear isdp table Mode Privileged EXEC show isdp This command displays global ISDP settings. Format show isdp Mode Privileged EXEC Term Definition Timer The frequency with which this device sends ISDP packets. This value is given in seconds.
ProSafe M4100 and M7100 Managed Switches show isdp interface This command displays ISDP settings for the specified interface. Format show isdp interface {all | } Mode Privileged EXEC Term Definition Mode ISDP mode enabled/disabled status for the interface(s). show isdp entry This command displays ISDP entries. If the device id is specified, then only entries for that device are shown.
ProSafe M4100 and M7100 Managed Switches Term Definition Device ID The device ID associated with the neighbor which advertised the information. IP Addresses The IP addresses associated with the neighbor. Capability ISDP functional capabilities advertised by the neighbor. Platform The hardware platform advertised by the neighbor. Interface The interface (slot/port) on which the neighbor's advertisement was received.
ProSafe M4100 and M7100 Managed Switches Term Definition ISDPv1 Packets Transmitted Total number of ISDPv1 packets transmitted ISDPv2 Packets Received Total number of ISDPv2 packets received ISDPv2 Packets Transmitted Total number of ISDPv2 packets transmitted ISDP Bad Header Number of packets received with a bad header ISDP Checksum Error Number of packets received with a checksum error ISDP Transmission Failure Number of packets which failed to transmit ISDP Invalid Format Number of invali
ProSafe M4100 and M7100 Managed Switches dropped frames, while allowing traffic that has greater loss tolerance to continue to flow on the interface. Priorities are differentiated by the priority field of the IEEE 802.1Q VLAN header, which identifies an IEEE 802.1p priority value. In NETGEAR Managed Switch, these priority values must be mapped to internal class-of-service (CoS) values.
ProSafe M4100 and M7100 Managed Switches VLAN tagging must be enabled to carry the 802.1p value through the network. The number of lossless priorities supported is 2. Additionally, the mapping of class-of-service levels to 802.1p priority values to must be set to one-to-one.
3.
ProSafe M4100 and M7100 Managed Switches About MVR Internet Group Management Protocol (IGMP) Layer 3 is widely used for IPv4 network multicasting. In Layer 2 networks, IGMP uses resources inefficiently. For example, a Layer 2 switch multicasts traffic to all ports, even if there are receivers connected to only a few ports. To address this problem, the IGMP Snooping protocol was developed. The problem still appears, though, when receivers are in different VLANs.
ProSafe M4100 and M7100 Managed Switches no mvr group This command removes the MVR membership group. Format no mvr group [count] Mode Global Config mvr mode This command changes the MVR mode type. If the mode is set to compatible, the switch does not learn multicast groups; they need to be configured by the operator as the protocol does not forward joins from the hosts to the router.
ProSafe M4100 and M7100 Managed Switches mvr vlan This command sets the MVR multicast VLAN. Format mvr vlan <1-4094> Mode Global Config Default 1 no mvr vlan This command sets the MVR multicast VLAN to the default value. Format no mvr vlan Mode Global Config mvr immediate This command enables MVR immediate leave mode.
ProSafe M4100 and M7100 Managed Switches mvr type This command sets the MVR port type. When a port is set as source, it is the port to which the multicast traffic flows using the multicast VLAN. When a port is set to receiver, it is the port where a listening host is connected to the switch. Format mvr type { receiver|source } Mode Interface Config Default none no mvr type Use this command to set the MVR port type to none.
ProSafe M4100 and M7100 Managed Switches The following table explains the output parameters. Term Definition MVR Running MVR running state. It can be enabled or disabled. MVR multicast VLAN Current MVR multicast VLAN. It can be in the range from 1 to 4094. MVR Max Multicast Groups The maximum number of multicast groups supported by MVR. MVR Current multicast groups The current number of MVR groups allocated. MVR Query response time The current MVR query response time.
ProSafe M4100 and M7100 Managed Switches (switch)#show mvr members 224.1.1.1 MVR Group IP Status -------------------------------224.1.1.1 INACTIVE Members --------------------0/1, 0/2, 0/3 show mvr interface This command displays the MVR-enabled interfaces configuration. Format show mvr interface [ [members [vlan ]] ] Mode Privileged EXEC The following table explains the output parameters. Parameter Description Port Interface number Type The MVR port type.
ProSafe M4100 and M7100 Managed Switches show mvr traffic This command displays global MVR statistics. Format show mvr traffic Mode Privileged EXEC The following table explains the output parameters.
4. Routing Commands 4 This chapter describes the routing commands available in the 7000 series CLI. Note: Some commands described in this chapter require a license. For more information, see Licensing and Command Support on page 8.
ProSafe M4100 and M7100 Managed Switches Address Resolution Protocol (ARP) Commands This section describes the commands you use to configure ARP and to view ARP information about the switch. ARP associates IP addresses with MAC addresses and stores the information as ARP entries in the ARP cache. arp This command creates an ARP entry. The value for is the IP address of a device on a subnet attached to an existing routing interface. is a unicast MAC address for that device.
ProSafe M4100 and M7100 Managed Switches ip proxy-arp This command enables proxy ARP on a router interface. Without proxy ARP, a device only responds to an ARP request if the target IP address is an address configured on the interface where the ARP request arrived. With proxy ARP, the device might also respond if the target IP address is reachable. The device responds only if all next hops in its route to the destination are through interfaces other than the interface that received the ARP request.
ProSafe M4100 and M7100 Managed Switches no arp dynamicrenew This command prevents dynamic ARP entries from renewing when they age out. Format no arp dynamicrenew Mode Privileged EXEC arp purge This command causes the specified IP address to be removed from the ARP cache. Only entries of type dynamic or gateway are affected by this command. Format arp purge Mode Privileged EXEC arp resptime This command configures the ARP request response time-out.
ProSafe M4100 and M7100 Managed Switches no arp retries This command configures the default ARP count of maximum request for retries. Format no arp retries Mode Global Config arp timeout This command configures the ARP entry ageout time. The value for is a valid positive integer, which represents the IP ARP entry ageout time in seconds. The range for is between 15-21600 seconds.
ProSafe M4100 and M7100 Managed Switches show arp This command displays the Address Resolution Protocol (ARP) cache. The displayed results are not the total ARP entries. To view the total ARP entries, the operator should view the show arp results with the show arp switch results. Format show arp Mode Privileged EXEC Term Definition Age Time (seconds) The time it takes for an ARP entry to age out. This is configurable. Age time is measured in seconds.
ProSafe M4100 and M7100 Managed Switches Term Definition Age Time (seconds) The time it takes for an ARP entry to age out. This value is configurable. Age time is measured in seconds. Response Time The time it takes for an ARP request timeout. This value is configurable. Response time (seconds) is measured in seconds. Retries The maximum number of times an ARP request is retried. This value is configurable. Cache Size The maximum number of entries in the ARP table. This value is configurable.
ProSafe M4100 and M7100 Managed Switches Format routing Mode Interface Config no routing This command disables routing for an interface. You can view the current value for this function with the show ip brief command. The value is labeled as “Routing Mode.” Format no routing Mode Interface Config ip routing This command enables the IP Router Admin Mode for the master switch. Format ip routing Mode Global Config no ip routing This command disables the IP Router Admin Mode for the master switch.
ProSafe M4100 and M7100 Managed Switches Parameter Description ipaddr The IP address of the interface. subnetmask A four-digit dotted-decimal number that represents the subnet mask of the interface prefix-length Implements RFC 3021. Using the / notation of the subnet mask, this is an integer that indicates the length of the subnet mask. Range is 5–32 bits. no ip address This command deletes an IP address from an interface. The value for is the IP address of the interface in a.b.c.
ProSafe M4100 and M7100 Managed Switches no ip default-gateway Use this command to remove the default gateway address from the configuration. Format no ip default-gateway Mode Interface Config release dhcp Use this command to force the DHCPv4 client to release the leased address from the specified interface. Format release dhcp Mode Privileged EXEC renew dhcp Use this command to force the DHCPv4 client to immediately renew an IPv4 address lease on the specified interface.
ProSafe M4100 and M7100 Managed Switches Term Definition Lease The time (in seconds) that the IP address was leased by the server. Renewal The time (in seconds) when the next DHCP renew Request is sent by DHCPv4 Client to renew the leased IP address. Rebind The time (in seconds) when the DHCP Rebind process starts. Retry count Number of times the DHCPv4 client sends a DHCP REQUEST message before the server responds. ip route This command configures a static route.
ProSafe M4100 and M7100 Managed Switches ip route default This command configures the default route. The value for is a valid IP address of the next hop router. The is an integer value from 1 to 255. A route with a preference of 255 cannot be used to forward traffic. Default preference—1 Format ip route default [] Mode Global Config no ip route default This command deletes all configured default routes.
ProSafe M4100 and M7100 Managed Switches ip netdirbcast This command enables the forwarding of network-directed broadcasts. When enabled, network directed broadcasts are forwarded. When disabled they are dropped. Default disabled Format ip netdirbcast Mode Interface Config no ip netdirbcast This command disables the forwarding of network-directed broadcasts. When disabled, network directed broadcasts are dropped.
ProSafe M4100 and M7100 Managed Switches Format ip mtu <68-9198> Mode Interface Config no ip mtu This command resets the ip mtu to the default value. Format no ip mtu Mode Interface Config encapsulation This command configures the link layer encapsulation type for the packet. The encapsulation type can be ethernet or snap. Default ethernet Format encapsulation {ethernet | snap} Mode Interface Config Note: Routed frames are always Ethernet encapsulated when a frame is routed to a VLAN.
ProSafe M4100 and M7100 Managed Switches show ip brief This command displays all the summary information of the IP, including the ICMP rate limit configuration and the global ICMP Redirect configuration. Format show ip brief Modes • Privileged EXEC • User EXEC Term Definition Default Time to Live The computed TTL (Time to Live) of forwarding a packet from the local router to the final destination. Routing Mode Shows whether the routing mode is enabled or disabled.
ProSafe M4100 and M7100 Managed Switches Term Definition Routing Determine the operational status of IPv4 routing Interface. The possible values are Up or Interface Status Down. Primary IP Address The primary IP address and subnet masks for the interface. This value appears only if you configure it. Secondary IP Address One or more secondary IP addresses and subnet masks for the interface. This value appears only if you configure it.
ProSafe M4100 and M7100 Managed Switches Link Speed Data Rate........................... MAC address.................................... Encapsulation Type............................. IP MTU......................................... Bandwidth...................................... Destination Unreachables....................... ICMP Redirects.................................
ProSafe M4100 and M7100 Managed Switches Parameter Description Maximum Paths The maximum number of next hops in an OSPF route Routing for Networks The address ranges configured with an OSPF network command Distance The administrative distance (or route preference) for intra-area, inter-area, and external routes Default Route Advertise Whether OSPF is configured to originate a default route Always Whether default advertisement depends on having a default route in the common routing table Metric
ProSafe M4100 and M7100 Managed Switches show ip route This command displays the routing table. The specifies the network for which the route is to be displayed and displays the best matching best-route for the address. The specifies the subnet mask for the given . When you use the longer-prefixes keyword, the and pair becomes the prefix, and the command displays the routes to the addresses that match that prefix.
ProSafe M4100 and M7100 Managed Switches Term Definition via Next-Hop The outgoing router IP address to use when forwarding traffic to the next router (if any) in the path toward the destination. Route-Timestamp The last updated time for dynamic routes. The format of Route-Timestamp will be • Days:Hours:Minutes if days > = 1 • Hours:Minutes:Seconds if days < 1 Interface The outgoing router interface to use when forwarding traffic to the next destination.
ProSafe M4100 and M7100 Managed Switches ECMP Group 1 with 2 next hops (used by 1 route) 172.20.33.100 on interface 2/33 172.20.34.100 on interface 2/34 ECMP Group 2 with 3 next hops (used by 1 route) 172.20.32.100 on interface 2/32 172.20.33.100 on interface 2/33 172.20.34.100 on interface 2/34 ECMP Group 3 with 4 next hops (used by 1 route) 172.20.31.100 on interface 2/31 172.20.32.100 on interface 2/32 172.20.33.100 on interface 2/33 172.20.34.
ProSafe M4100 and M7100 Managed Switches Term Definition Route Deletes The number of routes that deleted from the routing table. Unresolved Route Adds The number of route adds that failed because none of the route’s next hops were on a local subnet. Note that static routes can fail to be added to the routing table at startup because the routing interfaces are not up yet. This counter gets incremented in this case. The static routes are added to the routing table when the routing interfaces come up.
ProSafe M4100 and M7100 Managed Switches Total routes................................... Best Routes (High)............................. Alternate Routes............................... Route Adds..................................... Route Modifies................................. Route Deletes.................................. Unresolved Route Adds.......................... Invalid Route Adds............................. Failed Route Adds.............................. Reserved Locals.......................
ProSafe M4100 and M7100 Managed Switches show ip stats This command displays IP statistical information. Refer to RFC 1213 for more information about the fields that are displayed. Format show ip stats Modes • Privileged EXEC • User EXEC show routing heap summary This command displays a summary of the memory allocation from the routing heap. The routing heap is a chunk of memory set aside when the system boots for use by the routing applications.
ProSafe M4100 and M7100 Managed Switches ip irdp This command enables Router Discovery on an interface. Default disabled Format ip irdp Mode Interface Config no ip irdp This command disables Router Discovery on an interface. Format no ip irdp Mode Interface Config ip irdp multicast This command configures the address that the interface uses to send the router discovery advertisements. The address is 224.0.0.1, which is the all-hosts IP multicast address. Default 224.0.0.
ProSafe M4100 and M7100 Managed Switches no ip irdp holdtime This command configures the default value, in seconds, of the holdtime field of the router advertisement sent from this interface. Format no ip irdp holdtime Mode Interface Config ip irdp maxadvertinterval This command configures the maximum time, in seconds, allowed between sending router advertisements from the interface. The range for maxadvertinterval is 4–1800 seconds.
ProSafe M4100 and M7100 Managed Switches ip irdp preference This command configures the preferability of the address as a default router address, relative to other router addresses on the same subnet. Default 0 Format ip irdp preference <-2147483648 to 2147483647> Mode Interface Config no ip irdp preference This command configures the default preferability of the address as a default router address, relative to other router addresses on the same subnet.
ProSafe M4100 and M7100 Managed Switches Virtual LAN Routing Commands This section describes the commands you use to view and configure VLAN routing and to view VLAN routing status information. vlan routing This command enables routing on a VLAN. The vlanid value has a range from 1 to 4093. The [interface ID] value has a range from 1 to 128. Typically, you will not supply the interface ID argument, and the system automatically selects the interface ID.
ProSafe M4100 and M7100 Managed Switches Virtual Router Redundancy Protocol Commands This section describes the commands you use to view and configure Virtual Router Redundancy Protocol (VRRP) and to view VRRP status information. VRRP helps provide failover and load balancing when you configure two devices as a VRRP pair. ip vrrp (Global Config) Use this command in Global Config mode to enable the administrative mode of VRRP on the router.
ProSafe M4100 and M7100 Managed Switches ip vrrp mode This command enables the virtual router configured on the specified interface. Enabling the status field starts a virtual router. The parameter is the virtual router ID which has an integer value ranging from 1 to 255. Default disabled Format ip vrrp mode Mode Interface Config no ip vrrp mode This command disables the virtual router configured on the specified interface. Disabling the status field stops a virtual router.
ProSafe M4100 and M7100 Managed Switches required when authorization type is simple text apssword. The parameter is the virtual router IFD which has an integer value range from 1 to 255. Default no authorization Format ip vrrp authentication {none | simple } Mode Interface Config no ip vrrp authentication This command sets the default authorization details value for the virtual router configured on a specified interface.
ProSafe M4100 and M7100 Managed Switches another router in the group higher than the master’s priority, the router will take over as master only if preempt mode is enabled. Default 100 unless the router is the address owner, in which case its priority is automatically set to 255. Format ip vrrp priority <1-254> Mode Interface Config no ip vrrp priority This command sets the default priority value for the virtual router configured on a specified interface.
ProSafe M4100 and M7100 Managed Switches decrement) for each downed interface. The default priority decrement is changed using the argument. The default priority of the virtual router is 100, and the default decrement priority is 10. By default, no interface are tracked. If you specify just the interface to be tracked, without giving the optional priority, the default priority will be set. The default priority decrement is 10.
ProSafe M4100 and M7100 Managed Switches ip vrrp accept-mode This command is used to allow a router to respond to ICMP Echo Requests sent to an address on a VRRP virtual router. VRRP supports responding to pings, but does not allow the VRRP Master to accept other types of packets. A new configuration option controls whether the router responds to Echo Requests sent to a VRRP IP address. The VRRP Master responds to both fragmented and unfragmented ICMP Echo Request packets.
ProSafe M4100 and M7100 Managed Switches Term Definition Uptime The time that the virtual router has been up, in days, hours, minutes, and seconds. Protocol The protocol configured on the interface. State Transitioned to Master The total number of times virtual router states has changed to MASTER. Advertisement Received The total number of VRRP advertisements received by this virtual router.
ProSafe M4100 and M7100 Managed Switches Term Definition Admin Mode The administrative mode for VRRP functionality on the switch. Router Checksum Errors The total number of VRRP packets received with an invalid VRRP checksum value. Router Version Errors The total number of VRRP packets received with Unknown or unsupported version number. Router VRID Errors The total number of VRRP packets received with invalid VRID for this virtual router.
ProSafe M4100 and M7100 Managed Switches Advertisement Interval (secs).................. 1 Pre-empt Mode.................................. Enable Administrative Mode............................ Disable Accept Mode.................................... Enable State.......................................... Initialized Track Interface State DecrementPriority --------------- ------ -----------------<0/1> down 10 TrackRoute (pfx/len) StateDecrementPriority ------------------------ ------ -----------------10.10.
ProSafe M4100 and M7100 Managed Switches no bootpdhcprelay cidoptmode This command disables the circuit ID option mode for BootP/DHCP Relay on the system. Format no bootpdhcprelay cidoptmode Mode Global Config bootpdhcprelay maxhopcount This command configures the maximum allowable relay agent hops for BootP/DHCP Relay on the system. The parameter has a range of 1–16.
ProSafe M4100 and M7100 Managed Switches show bootpdhcprelay This command displays the BootP/DHCP Relay information. Format show bootpdhcprelay Modes • Privileged EXEC • User EXEC Term Definition Maximum Hop Count The maximum allowable relay agent hops. Minimum Wait The minimum wait time. Time (Seconds) Admin Mode Indicates whether relaying of requests is enabled or disabled. Server IP Address The IP address for the BootP/DHCP Relay server.
ProSafe M4100 and M7100 Managed Switches The ip helper-address command forwards specific UDP broadcast from one interface to another. You can define many helper addresses but the total number of address-port pairs is limited to 128 for the whole device. The setting of a helper address for a specific interface has precedence over a setting of a helper address for all interfaces. Ip-address: Destination broadcast or host address to be used when forwarding UDP broadcasts. You can specify 0.0.0.
ProSafe M4100 and M7100 Managed Switches ip helper-address Use this command to add a unicast helper address to the list of helper addresses on an interface. This is the address of a DHCP server. This command can be applied multiple times on the routing interface to form the helper addresses list until the list reaches the maximum supported helper addresses.
ProSafe M4100 and M7100 Managed Switches The following shows example CLI display output for the command. (switch) #show ip helper-address 0/1 Helper IP Address.............................. 1.2.3.4 ............................................... 1.2.3.5 show ip helper statistics Use this command to display the number of DHCP and other UDP packets processed and relayed by the UDP relay agent.
ProSafe M4100 and M7100 Managed Switches Term Definition Packets with expired The number of packets received with TTL of 0 or 1 that might otherwise have been TTL relayed. Packets that matched a discard entry The number of packets ignored by the relay agent because they match a discard relay entry. Open Shortest Path First (OSPF) Commands This section describes the commands you use to view and configure OSPF, which is a link-state routing protocol that you use to route traffic within a network.
ProSafe M4100 and M7100 Managed Switches no network area (OSPF) Use this command to disable the OSPFv2 on an interface if the IP address of an interface was earlier covered by this network command. Format no network area Mode Router OSPF Config ip ospf area Use this command to enable OSPFv2 and set the area ID of an interface. The is an IP address formatted as a 4-digit dotted-decimal number or a decimal value in the range of <0-4294967295>.
ProSafe M4100 and M7100 Managed Switches no 1583compatibility This command disables OSPF 1583 compatibility. Format no 1583compatibility Mode Router OSPF Config area default-cost (OSPF) This command configures the default cost for the stub area. You must specify the area ID and an integer value between 1-16,777,215. Format area default-cost <1-16777215> Mode Router OSPF Config area nssa (OSPF) This command configures the specified area id to function as an NSSA.
ProSafe M4100 and M7100 Managed Switches no area nssa default-info-originate (OSPF) This command disables the default route advertised into the NSSA. Format no area nssa default-info-originate [] [{comparable | non-comparable}] Mode Router OSPF Config area nssa no-redistribute (OSPF) This command configures the NSSA Area Border router (ABR) so that learned external routes will not be redistributed to the NSSA.
ProSafe M4100 and M7100 Managed Switches of candidate causes the router to participate in the translator election process when it attains a border router status. Format area nssa translator-role {always | candidate} Mode Router OSPF Config no area nssa translator (OSPF) This command disables the nssa translator role from the specified area id.
ProSafe M4100 and M7100 Managed Switches Parameter Description area-id The area identifier for the area whose networks are to be summarized. prefix netmask The summary prefix to be advertised when the ABR computes a route to one or more networks within this prefix in this area. summarylink When this keyword is given, the area range is used when summarizing prefixes advertised in type 3 summary LSAs.
ProSafe M4100 and M7100 Managed Switches no area stub This command deletes a stub area for the specified area ID. Format no area stub Mode Router OSPF Config area stub no-summary (OSPF) This command configures the Summary LSA mode for the stub area identified by . Use this command to prevent LSA Summaries from being sent.
ProSafe M4100 and M7100 Managed Switches composed of standard displayable, non-control keystrokes from a Standard 101/102-key keyboard. The authentication key must be 8 bytes or less if the authentication type is simple. If the type is encrypt, the key might be up to 16 bytes. Unauthenticated interfaces do not need an authentication key. If the type is encrypt, a key id in the range of 0 and 255 must be specified. The default value for authentication type is none.
ProSafe M4100 and M7100 Managed Switches area virtual-link hello-interval (OSPF) This command configures the hello interval for the OSPF virtual interface on the virtual interface identified by and . The parameter is the Router ID of the neighbor. The range for is 1–65535.
ProSafe M4100 and M7100 Managed Switches area virtual-link transmit-delay (OSPF) This command configures the transmit delay for the OSPF virtual interface on the virtual interface identified by and . The parameter is the Router ID of the neighbor. The range for seconds is 0–3,600 (1 hour).
ProSafe M4100 and M7100 Managed Switches bandwidth By default, OSPF computes the link cost of an interface as the ratio of the reference bandwidth to the interface bandwidth. Reference bandwidth is specified with the auto-cost command. For the OSPF link cost calculation, use the bandwidth command to specify the interface bandwidth. The bandwidth is specified in kilobits per second.
ProSafe M4100 and M7100 Managed Switches clear ip ospf configuration Use this command to reset the OSPF configuration to factory defaults. Format clear ip ospf configuration Mode Privileged EXEC clear ip ospf counters Use this command to reset global and interface statistics. Format clear ip ospf counters Mode Privileged EXEC clear ip ospf neighbor Use this command to drop the adjacency with all OSPF neighbors. On each neighbor’s interface, send a one way hello.
ProSafe M4100 and M7100 Managed Switches Format clear ip ospf stub-router Mode Privileged EXEC default-information originate (OSPF) This command is used to control the advertisement of default routes. Default • metric—unspecified • type—2 Format default-information originate [always] [metric <0-16777214>] [metric-type {1 | 2}] Mode Router OSPF Config no default-information originate (OSPF) This command is used to control the advertisement of default routes.
ProSafe M4100 and M7100 Managed Switches Format distance ospf {intra-area <1-255> | inter-area <1-255> | external <1-255>} Mode Router OSPF Config no distance ospf This command sets the default route preference value of OSPF routes in the router. The type of OSPF can be intra, inter, or external. All the external type routes are given the same preference value.
ProSafe M4100 and M7100 Managed Switches external-lsdb-limit (OSPF) This command configures the external LSDB limit for OSPF. If the value is -1, there is no limit. When the number of non-default AS-external-LSAs in a router's link-state database reaches the external LSDB limit, the router enters overflow state. The router never holds more than the external LSDB limit non-default AS-external-LSAs in it database.
ProSafe M4100 and M7100 Managed Switches authentication key must be 8 bytes or less if the authentication type is simple. If the type is encrypt, the key might be up to 16 bytes. If the type is encrypt a in the range of 0 and 255 must be specified. Unauthenticated interfaces do not need an authentication key or authentication key ID. There is no default value for this command.
ProSafe M4100 and M7100 Managed Switches no ip ospf database-filter all out Use this command in Interface Configuration mode to enable OSPFv2 LSA flooding on an interface. Default Disabled Format no ip ospf database-filter all out Mode Interface Configuration ip ospf dead-interval This command sets the OSPF dead interval for the specified interface.
ProSafe M4100 and M7100 Managed Switches no ip ospf hello-interval This command sets the default OSPF hello interval for the specified interface. Format no ip ospf hello-interval Mode Interface Config ip ospf network Use this command to configure OSPF to treat an interface as a point-to-point rather than broadcast interface. The broadcast option sets the OSPF network type to broadcast. The point-to-point option sets the OSPF network type to point-to-point.
ProSafe M4100 and M7100 Managed Switches no ip ospf priority This command sets the default OSPF priority for the specified router interface. Format no ip ospf priority Mode Interface Config ip ospf retransmit-interval This command sets the OSPF retransmit Interval for the specified interface. The retransmit interval is specified in seconds. The value for is the number of seconds between link-state advertisement retransmissions for adjacencies belonging to this router interface.
ProSafe M4100 and M7100 Managed Switches ip ospf mtu-ignore This command disables OSPF maximum transmission unit (MTU) mismatch detection. OSPF Database Description packets specify the size of the largest IP packet that can be sent without fragmentation on the interface. When a router receives a Database Description packet, it examines the MTU advertised by the neighbor.
ProSafe M4100 and M7100 Managed Switches no redistribute This command configures OSPF protocol to prohibit redistribution of routes from the specified source protocol/routers. Format no redistribute {rip | static | connected} [metric] [metric-type] [tag] [subnets] Mode Router OSPF Config maximum-paths (OSPF) This command sets the number of paths that OSPF can report for a given destination where maxpaths is platform-dependent.
ProSafe M4100 and M7100 Managed Switches passive-interface (OSPF) Use this command to set the interface or tunnel as passive. It overrides the global passive mode that is effective on the interface or tunnel. Default disabled Format passive-interface {} Mode Router OSPF Config no passive-interface Use this command to set the interface or tunnel as non-passive. It overrides the global passive mode that is effective on the interface or tunnel.
ProSafe M4100 and M7100 Managed Switches timers pacing lsa-group To adjust how OSPF groups LSAs for periodic refresh, use this command in OSPFv2 Router Configuration mode. OSPF refreshes self-originated LSAs once every 30 minutes. When OSPF refreshes LSAs, it considers all self-originated LSAs whose age is from 1800 to 1800 plus the pacing group size. Grouping LSAs for refresh allows OSPF to combine refreshed LSAs into a minimal number of LS Update packets.
ProSafe M4100 and M7100 Managed Switches trapflags (OSPF) Use this command to enable individual OSPF traps, enable a group of trap flags at a time, or enable all the trap flags at a time. The different groups of trapflags, and each group’s specific trapflags to enable or disable, are listed in Table 1. Table 1.
ProSafe M4100 and M7100 Managed Switches Default disabled Format trapflags { all | errors {all | authentication-failure | bad-packet | config-error | virtauthentication-failure | virt-bad-packet | virt-config-error} | if-rx {all | if-rx-packet} | lsa {all | lsa-maxage | lsa-originate} | overflow {all | lsdb-overflow | lsdb-approaching-overflow} | retransmit {all | packets | virt-packets} | rtb {all, rtb-entry-info} | state-change {all | if-state-change | neighbor-state-change | virtif-statechange | virt
ProSafe M4100 and M7100 Managed Switches show ip ospf This command displays information relevant to the OSPF router. Format show ip ospf Mode Privileged EXEC Note: Some of the information below displays only if you enable OSPF and configure certain features. Term Definition Router ID A 32-bit integer in dotted decimal format identifying the router, about which information is displayed. This is a configured value.
ProSafe M4100 and M7100 Managed Switches Term Definition ASBR Status Reflects whether the ASBR mode is enabled or disabled. Enable implies that the router is an autonomous system border router. The router automatically becomes an ASBR when it is configured to redistribute routes learnt from other protocols. The possible values for the ASBR status is enabled (if the router is configured to redistribute routes learned by other protocols) or disabled (if the router is not configured for the same).
ProSafe M4100 and M7100 Managed Switches Term Definition Default Passive Shows whether the interfaces are passive by default. Setting Default Route Advertise Indicates whether the default routes received from other source protocols are advertised or not. Always Shows whether default routes are always advertised. Metric The metric of the routes being redistributed. If the metric is not configured, this field is blank. Metric Type Shows whether the routes are External Type 1 or External Type 2.
ProSafe M4100 and M7100 Managed Switches Number of Active Areas......................... 3 (3 normal, 0 stub, 0 nssa) ABR Status....................................Disable ASBR Status...................................Disable Stub Router...................................FALSE External LSDB Overflow........................FALSE External LSA Count............................0 External LSA Checksum.........................0 AS_OPAQUE LSA Count...........................0 AS_OPAQUE LSA Checksum...............
ProSafe M4100 and M7100 Managed Switches Term Definition AreaID The area id of the requested OSPF area. External Routing A number representing the external routing capabilities for this area. Spf Runs The number of times that the intra-area route table has been calculated using this area's link-state database. Area Border Router Count The total number of area border routers reachable within this area.
ProSafe M4100 and M7100 Managed Switches show ip ospf asbr This command displays the internal OSPF routing table entries to Autonomous System Boundary Routers (ASBR). This command takes no options. Format show ip ospf asbr Mode • Privileged EXEC • User EXEC Term Definition Type The type of the route to the destination. It can be one of the following values: intra — Intra-area route inter — Inter-area route Router ID Router ID of the destination. Cost Cost of using this route.
ProSafe M4100 and M7100 Managed Switches Parameter Description adv-router Use adv-router to show the LSAs that are restricted by the advertising router. self-originate Use self-originate to display the LSAs in that are self originated. The information below is only displayed if OSPF is enabled The information below is only displayed if OSPF is enabled.
ProSafe M4100 and M7100 Managed Switches Term Definition Type-7 Ext Total number of Type-7 external LSAs in the database. Self-Originated Type-7 Total number of self originated AS external LSAs in the OSPFv3 link state database. Opaque Link Number of opaque link LSAs in the database. Opaque Area Number of opaque area LSAs in the database. Subtotal Number of entries for the identified area. Opaque AS Number of opaque AS LSAs in the database. Total Number of entries for all areas.
ProSafe M4100 and M7100 Managed Switches Term Definition Metric Cost The cost of the OSPF interface. Passive Status Shows whether the interface is passive or not. OSPF MTU-ignore Indicates whether to ignore MTU mismatches in database descriptor packets sent from neighboring routers. The information below will only be displayed if OSPF is enabled. Term Definition OSPF Interface Type Broadcast LANs, such as Ethernet and IEEE 802.5, take the value broadcast.
ProSafe M4100 and M7100 Managed Switches Term Definition Retransmit Interval A number representing the OSPF Retransmit Interval for the specified interface. Retransmit Delay Interval A number representing the OSPF Transit Delay for the specified interface. LSA Ack Interval A number representing the OSPF LSA Acknowledgment Interval for the specified interface. show ip ospf interface stats This command displays the statistics for a specific interface.
ProSafe M4100 and M7100 Managed Switches Term Definition Source Not On Local Subnet The number of received packets discarded because the source IP address is not within a subnet configured on a local interface. Note: This field only applies to OSPFv2.
ProSafe M4100 and M7100 Managed Switches show ip ospf neighbor This command displays information about OSPF neighbors. If you do not specify a neighbor IP address, the output displays summary information in a table. If you specify an interface or tunnel, only the information for that interface or tunnel displays. The is the IP address of the neighbor, and when you specify this, detailed information about the neighbor displays.
ProSafe M4100 and M7100 Managed Switches If you specify an IP address for the neighbor router, the following fields display: Term Definition Interface Valid slot and port number separated by forward slashes. Neighbor IP Address The IP address of the neighbor router. Interface Index The interface ID of the neighbor router. Area ID The area ID of the OSPF area associated with the interface. Options An integer value that indicates the optional OSPF capabilities supported by the neighbor.
ProSafe M4100 and M7100 Managed Switches show ip ospf range This command displays information about the area ranges for the specified . The identifies the OSPF area whose ranges are being displayed. Format show ip ospf range Modes • Privileged EXEC • User EXEC Term Definition Area ID The area id of the requested OSPF area. IP Address An IP address which represents this area range. Subnet Mask A valid subnet mask for this area range.
ProSafe M4100 and M7100 Managed Switches show ip ospf stub table This command displays the OSPF stub table. The information below will only be displayed if OSPF is initialized on the switch. Format show ip ospf stub table Modes • Privileged EXEC • User EXEC Term Definition Area ID A 32-bit identifier for the created stub area. Type of Service The Type of Service associated with the stub metric. Switch CLI only supports Normal TOS. Metric Val The metric value is applied based on the TOS.
ProSafe M4100 and M7100 Managed Switches Parameter Description Number of LSAs Received The number of LSAs of each type received since OSPF counters were last cleared. OSPFv2 Queue Statistics For each OSPFv2 message queue, the current count, the high water mark, the number of packets that failed to be enqueued, and the queue limit. The high water marks are not cleared when OSPF counters are cleared. The following shows example CLI display output for the command.
ProSafe M4100 and M7100 Managed Switches Term Definition Hello Interval The configured hello interval for the OSPF virtual interface. Dead Interval The configured dead interval for the OSPF virtual interface. Iftransit Delay Interval The configured transit delay for the OSPF virtual interface. Retransmit Interval The configured retransmit interval for the OSPF virtual interface. Authentication Type The configured authentication type of the OSPF virtual interface.
ProSafe M4100 and M7100 Managed Switches avoiding announcement of a topology change and the potential for flooding of LSAs and shortest-path-first (SPF) runs, which determine OSPF routes. Helpful neighbors continue to forward packets through the restarting router. The restarting router relearns the network topology from its helpful neighbors. Graceful restart can be enabled for planned or unplanned restarts, or both.
ProSafe M4100 and M7100 Managed Switches set long enough to allow the restarting router to reestablish all of its adjacencies and complete a full database exchange with each of those neighbors. Default 120 seconds Format nsf [ietf] restart-interval <1-1800> Modes OSPF Router Configuration Parameter Description ietf This keyword is accepted but not required. seconds The number of seconds that the restarting router asks its neighbors to wait before exiting helper mode.
ProSafe M4100 and M7100 Managed Switches nsf helper disable Use this command to disable helpful neighbor functionality for OSPF. Note: The commands no nsf helper and nsf ietf helper disable are functionally equivalent. The command nsf ietf helper disable is supported solely for compatibility with other network software CLI. Format nsf [ietf] helper disable Modes OSPF Router Configuration Parameter Description ietf This keyword is accepted but not required.
ProSafe M4100 and M7100 Managed Switches Format nsf [ietf] helper strict-lsa-checking Modes OSPF Router Configuration max-metric router-lsa To configure OSPF to enter stub router mode, use this command in Router OSPF Global Configuration mode. When OSPF is in stub router mode, as defined by RFC 3137, OSPF sets the metric in the nonstub links in its router LSA to LsInfinity. Other routers therefore compute long paths through the stub router, and prefer any alternate path.
ProSafe M4100 and M7100 Managed Switches the command no max-metric router-lsa on-startup. The command no max-metric router-lsa summary-lsa causes OSPF to send summary LSAs with metrics computed using normal procedures defined in RFC 2328. Format no max-metric router-lsa [on-startup] [summary-lsa] Mode OSPFv2 Router Configuration OSPF Interface Flap Dampening Commands Dampening Use this command to enable IP event dampening on a routing interface.
ProSafe M4100 and M7100 Managed Switches show dampening interface This command summarizes the number of interfaces configured with dampening and the number of interfaces being suppressed. Format show dampening interface Mode Privileged EXEC The following shows example CLI display output for the command. (netgear switch)# show dampening interface 2 interfaces are configured with dampening. 1 interface is being suppressed.
ProSafe M4100 and M7100 Managed Switches Any change in the dampening configuration resets the current penalty, reuse time, and suppressed state to their default values, meaning 0, 0, and FALSE respectively. The following shows example CLI display output for the command.
ProSafe M4100 and M7100 Managed Switches ip rip This command enables RIP on a router interface. Default disabled Format ip rip Mode Interface Config no ip rip This command disables RIP on a router interface. Format no ip rip Mode Interface Config auto-summary This command enables the RIP auto-summarization mode. Default disabled Format auto-summary Mode Router RIP Config no auto-summary This command disables the RIP auto-summarization mode.
ProSafe M4100 and M7100 Managed Switches default-metric (RIP) This command is used to set a default for the metric of distributed routes. Format default-metric <0-15> Mode Router RIP Config no default-metric (RIP) This command is used to reset the default metric of distributed routes to its default value. Format no default-metric Mode Router RIP Config distance rip This command sets the route preference value of RIP in the router.
ProSafe M4100 and M7100 Managed Switches no distribute-list out This command is used to specify the access list to filter routes received from the source protocol. Format no distribute-list <1-199> out {ospf | static | connected} Mode Router RIP Config ip rip authentication This command sets the RIP Version 2 Authentication Type and Key for the specified interface. The value of is either none, simple, or encrypt. The value for authentication key [key] must be 16 bytes or less.
ProSafe M4100 and M7100 Managed Switches no ip rip receive version This command configures the interface to allow RIP control packets of the default version(s) to be received. Format no ip rip receive version Mode Interface Config ip rip send version This command configures the interface to allow RIP control packets of the specified version to be sent.
ProSafe M4100 and M7100 Managed Switches split-horizon This command sets the RIP split horizon mode. Split horizon is a technique for avoiding problems caused by including routes in updates sent to the router from which the route was originally learned. The options are: None - no special processing for this case. Simple - a route will not be included in updates sent to the router from which it was learned.
ProSafe M4100 and M7100 Managed Switches show ip rip This command displays information relevant to the RIP router. Format show ip rip Modes • Privileged EXEC • User EXEC Term Definition RIP Admin Mode Enable or disable. Split Horizon Mode None, simple or poison reverse. Auto Summary Mode Enable or disable. If enabled, groups of adjacent routes are summarized into single entries, in order to reduce the total number of entries The default is enable. Host Routes Accept Mode Enable or disable.
ProSafe M4100 and M7100 Managed Switches Term Definition RIP Mode The administrative mode of router RIP operation (enabled or disabled). Link State The mode of the interface (up or down). show ip rip interface This command displays information related to a particular RIP interface. Format show ip rip interface { | vlan <1-4093>} Modes • Privileged EXEC • User EXEC Term Definition Interface Valid slot and port number separated by forward slashes. This is a configured value.
ProSafe M4100 and M7100 Managed Switches ip unreachables Use this command to enable the generation of ICMP Destination Unreachable messages. By default, the generation of ICMP Destination Unreachable messages is enabled. Default enable Format ip unreachables Mode Interface Config no ip unreachables Use this command to prevent the generation of ICMP Destination Unreachable messages.
ProSafe M4100 and M7100 Managed Switches no ip icmp echo-reply Use this command to prevent the generation of ICMP Echo Reply messages by the router. Format no ip icmp echo-reply Mode Global Config ip icmp error-interval Use this command to limit the rate at which IPv4 ICMP error messages are sent. The rate limit is configured as a token bucket, with two configurable parameters, burst-size and burst-interval. The burst-interval specifies how often the token bucket is initialized with burst-size tokens.
5. IP Multicast Commands 5 This chapter describes the IP Multicast commands available in the managed switch CLI. Note: Some commands described in this chapter require a license. For more information, see Licensing and Command Support on page 8.
ProSafe M4100 and M7100 Managed Switches no ip mcast boundary This command deletes an administrative scope multicast boundary specified by and for which this multicast administrative boundary is applicable. is a group IP address and is a group IP mask. Format no ip mcast boundary Mode Interface Config ip multicast This command sets the administrative mode of the IP multicast forwarder in the router to active.
ProSafe M4100 and M7100 Managed Switches no ip multicast ttl-threshold This command applies the default to a routing interface. The is the TTL threshold which is to be applied to the multicast Data packets which are to be forwarded from the interface. Format no ip multicast ttl-threshold Mode Interface Config ip mroute This command configures an IPv4 Multicast Static Route for a Source. src-addr is Source IP address of a multicast source or source IP route prefix.
ProSafe M4100 and M7100 Managed Switches Term Definition Table Max Size The maximum number of entries allowed in the multicast table. Protocol The multicast protocol running on the router. Possible values are PIM-DM, PIM-SM, or DVMRP. Multicast Forwarding Cache Entry Count The number of entries in the multicast forwarding cache. show ip mcast boundary This command displays all the configured administrative scoped multicast boundaries.
ProSafe M4100 and M7100 Managed Switches If you use the detail parameter, the command displays the following fields: Term Definition Source IP The IP address of the multicast data source. Group IP The IP address of the destination of the multicast packet. Expiry Time The time of expiry of this entry in seconds. Up Time The time elapsed since the entry was created in seconds. RPF Neighbor The IP address of the RPF neighbor. Flags The flags associated with this entry.
ProSafe M4100 and M7100 Managed Switches show ip mcast mroute source This command displays the multicast configuration settings such as flags, timer settings, incoming and outgoing interfaces, RPF neighboring routers, and expiration times of all the entries in the multicast mroute table containing the given source IP address or source IP address and group IP address pair.
ProSafe M4100 and M7100 Managed Switches ip dvmrp(Global Config) This command sets administrative mode of DVMRP in the router to active. Default disabled Format ip dvmrp Mode Global Config no ip dvmrp(Global Config) This command sets administrative mode of DVMRP in the router to inactive. Format no ip dvmrp Mode Global Config ip dvmrp metric This command configures the metric for an interface. This value is used in the DVMRP messages as the cost to reach this network.
ProSafe M4100 and M7100 Managed Switches no ip dvmrp trapflags This command disables the DVMRP trap mode. Format no ip dvmrp trapflags Mode Global Config ip dvmrp This command sets the administrative mode of DVMRP on an interface to active. Default disabled Format ip dvmrp Mode Interface Config no ip dvmrp This command sets the administrative mode of DVMRP on an interface to inactive.
ProSafe M4100 and M7100 Managed Switches Term Definition Interface-Mode The mode of this interface. Possible values are Enabled and Disabled. Operational-stat The current state of DVMRP on this interface. Possible values are Operational or us Non-Operational. show ip dvmrp interface This command displays the interface information for DVMRP on the specified interface.
ProSafe M4100 and M7100 Managed Switches Term Definition IfIndex The value of the interface used to reach the neighbor. Nbr IP Addr The IP address of the DVMRP neighbor for which this entry contains information. State The state of the neighboring router. The possible values for this field are ACTIVE or DOWN. Up Time The time since this neighboring router was learned. Expiry Time The time remaining for the neighbor to age out. This field is not applicable if the State is DOWN.
ProSafe M4100 and M7100 Managed Switches show ip dvmrp prune This command displays the table listing the router’s upstream prune information. Format show ip dvmrp prune Modes • Privileged EXEC • User EXEC Term Definition Group IP The multicast Address that is pruned. Source IP The IP address of the source that has pruned. Source Mask The network Mask for the prune source. It should be all 1s or both the prune source and prune mask must match. Expiry Time (secs) The expiry time in seconds.
ProSafe M4100 and M7100 Managed Switches routing across the Internet, independent of the mechanisms provided by any particular unicast routing protocol. ip pim dense (Global Config) This command enables the administrative mode of PIM-DM in the router. Default Disabled Format ip pim dense Mode Global Config no ip pim dense (Global Config) This command disables the administrative mode of PIM-DM in the router.
ProSafe M4100 and M7100 Managed Switches no ip pim hello-interval This command resets the transmission frequency of hello messages between PIM enabled neighbors to its default value. Format no ip pim hello-interval Mode Interface Config show ip pim interface This command displays the PIM Interface status parameters. If the interface number is not specified, this command displays the status parameters of all the PIM enabled interfaces.
ProSafe M4100 and M7100 Managed Switches Join Prune Interval (secs) 60 DR Priority NA BSR Border Disabled Neighbor Count 1 Designated Router NA show ip pim neighbor This command displays the neighbor information for PIM on the specified interface. Format show ip pim neighbor Modes Privileged EXEC Term Definition Neighbor Address The IP address of the PIM neighbor. Interface Interface number. Valid slot and port number separated by forward slashes.
ProSafe M4100 and M7100 Managed Switches no ip pim sparse(Global Config) This command is used to administratively disable PIM-SM multicast routing mode on the router. Format no ip pim sparse Mode Global Config ip pim bsr-border Use this command to prevent bootstrap router (BSR) messages from being sent or received through an interface. Default disabled Format ip pim bsr-border Mode Interface Config no ip pim bsr-border Use this command to disable the interface from being the BSR border.
ProSafe M4100 and M7100 Managed Switches no ip pim bsr-candidate This command is used to disable the router to announce its candidacy as a bootstrap router (BSR). Format no ip pim bsr-candidate interface [vlan | ] Mode Global Config ip pim dr-priority Use this command to set the priority value for which a router is elected as the designated router (DR).
ProSafe M4100 and M7100 Managed Switches is the group address supported by the RP. The parameter is the group mask for the group address. The optional keyword override indicates that if there is a conflict, the RP configured with this command prevails over the RP learned by BSR.
ProSafe M4100 and M7100 Managed Switches ip pim ssm Use this command to define the Source Specific Multicast (SSM) range of IP multicast addresses. Default disabled Format ip pim ssm {default | } Mode Global Config Parameter Description default-range Defines the SSM range access list to 232/8. no ip pim ssm This command is used to disable the Source Specific Multicast (SSM) range.
ProSafe M4100 and M7100 Managed Switches Term Definition PIM Mode Configured mode of PIM protocol (enabled or disabled). Interface Interface number. Interface-Mode Enable status of the interface. Operational-Sta Operational Status of the Interface.
ProSafe M4100 and M7100 Managed Switches show ip pim bsr-router This command displays the bootstrap router (BSR) information. The output includes elected BSR information and information about the locally configured candidate rendezvous point (RP) advertisement. Format show ip pim bsr-router [candidate | elected] Mode • Privileged EXEC • User EXEC Term Definition BSR Address IP address of the BSR.
ProSafe M4100 and M7100 Managed Switches show ip pim rp mapping This command displays the mappings for the PIM group to the active rendezvous points.. Format show ip pim rp mapping [
ProSafe M4100 and M7100 Managed Switches Group Mask 255.255.0.0 Origin Static Expiry Time (hh:mm:ss) NA Internet Group Message Protocol (IGMP) Commands This section describes the commands you use to view and configure IGMP settings. ip igmp This command sets the administrative mode of IGMP in the system to active. Default disabled Format ip igmp Modes • Global Config • Interface Config no ip igmp This command sets the administrative mode of IGMP in the system to inactive.
ProSafe M4100 and M7100 Managed Switches ip igmp last-member-query-count This command sets the number of Group-Specific Queries sent before the router assumes that there are no local members on the interface. The range for is 1–20. Format ip igmp last-member-query-count Modes Interface Config no ip igmp last-member-query-count This command resets the number of Group-Specific Queries to the default value.
ProSafe M4100 and M7100 Managed Switches no ip igmp query-interval This command resets the query interval for the specified interface to the default value. This is the frequency at which IGMP Host-Query packets are transmitted on this interface.
ProSafe M4100 and M7100 Managed Switches ip igmp startup-query-count This command sets the number of Queries sent out on startup, separated by the Startup Query Interval on the interface. The range for is 1–20. Default 2 Format ip igmp startup-query-count Mode Interface Config no ip igmp startup-query-count This command resets the number of Queries sent out on startup, separated by the Startup Query Interval on the interface to the default value.
ProSafe M4100 and M7100 Managed Switches Term Definition IGMP Admin Mode The administrative status of IGMP. This is a configured value. Interface Valid slot and port number separated by forward slashes. Interface-Mode Indicates whether IGMP is enabled or disabled on the interface. This is a configured value. Operational-Sta The current state of IGMP on this interface. Possible values are Operational or tus Non-Operational.
ProSafe M4100 and M7100 Managed Switches Term Definition Version1 Host Timer The time remaining until the local router assumes that there are no longer any IGMP version 1 multicast members on the IP subnet attached to this interface. This could be an integer value or “-----” if there is no Version 1 host present. Version2 Host Timer The time remaining until the local router assumes that there are no longer any IGMP version 2 multicast members on the IP subnet attached to this interface.
ProSafe M4100 and M7100 Managed Switches show ip igmp interface membership This command displays the list of interfaces that have registered in the multicast group. Format show ip igmp interface membership [detail] Mode Privileged EXEC Term Definition Interface Valid slot and port number separated by forward slashes. Interface IP The IP address of the interface participating in the multicast group. State The interface that has IGMP in Querier mode or Non-Querier mode.
ProSafe M4100 and M7100 Managed Switches Term Definition Querier Status The status of the IGMP router, whether it is running in Querier mode or Non-Querier mode. Querier IP Address The IP address of the IGMP Querier on the IP subnet to which this interface is attached. Querier Up Time The time since the interface Querier was last changed. Querier Expiry Time The amount of time remaining before the Other Querier Present Timer expires.
ProSafe M4100 and M7100 Managed Switches ip igmp-proxy unsolicit-rprt-interval This command sets the unsolicited report interval for the IGMP Proxy router. This command is valid only when you enable IGMP Proxy on the interface. The value of can be 1-260 seconds. Default 1 Format ip igmp-proxy unsolicit-rprt-interval Mode Interface Config no ip igmp-proxy unsolicit-rprt-interval This command resets the unsolicited report interval of the IGMP Proxy router to the default value.
ProSafe M4100 and M7100 Managed Switches Term Definition Number of Multicast Groups The number of multicast groups that are associated with the IGMP Proxy interface. Unsolicited Report Interval The time interval at which the IGMP Proxy interface sends unsolicited group membership report. Querier IP Address on Proxy Interface The IP address of the Querier, if any, in the network attached to the upstream interface (IGMP-Proxy interface).
ProSafe M4100 and M7100 Managed Switches Term Definition Ver The IGMP version. Query Rcvd Number of IGMP queries received. Report Rcvd Number of IGMP reports received. Report Sent Number of IGMP reports sent. Leaves Rcvd Number of IGMP leaves received. Valid for version 2 only. Leaves Sent Number of IGMP leaves sent on the Proxy interface. Valid for version 2 only. Example: The following shows example CLI display output for the command. (Switch) #show ip igmp-proxy interface Interface Index..
ProSafe M4100 and M7100 Managed Switches Term Definition Filter Mode Possible values are Include or Exclude. Sources The number of sources attached to the multicast group. Example: The following shows example CLI display output for the command. (Switch) #show ip igmp-proxy groups Interface Index................................ 0/1 Group Address ------------225.4.4.4 Last Reporter Up Time Member State Filter Mode Sources -------------- ---------- ------------- ------------- ------5.5.5.
ProSafe M4100 and M7100 Managed Switches Term Definition Group Source List The list of IP addresses of the sources attached to the multicast group. Expiry Time Time left before a source is deleted. Example: The following shows example CLI display output for the command. (Switch) #show ip igmp-proxy groups Interface Index................................ 0/1 Group Address ------------225.4.4.
6. IPv6 Commands 6 This chapter describes the IPv6 commands available in the managed switch CLI. Note: Some commands described in this chapter require a license. For more information, see Licensing and Command Support on page 8.
ProSafe M4100 and M7100 Managed Switches Tunnel Interface Commands The commands in this section describe how to create, delete, and manage tunnel interfaces. Several different types of tunnels provide functionality to facilitate the transition of IPv4 networks to IPv6 networks. These tunnels are divided into two classes: configured and automatic. The distinction is that configured tunnels are explicitly configured with a destination or endpoint of the tunnel.
ProSafe M4100 and M7100 Managed Switches tunnel mode ipv6ip This command specifies the mode of the tunnel. With the optional 6to4 argument, the tunnel mode is set to 6to4 automatic. Without the optional 6to4 argument, the tunnel mode is configured. Format tunnel mode ipv6ip [6to4] Mode Interface Config show interface tunnel This command displays the parameters related to tunnel such as tunnel mode, tunnel source address, and tunnel destination address.
ProSafe M4100 and M7100 Managed Switches ipv6 hop-limit This command defines the unicast hop count used in ipv6 packets originated by the node. The value is also included in router advertisements. Valid values for are 1-255 inclusive. The default “not configured” means that a value of zero is sent in router advertisements and a value of 64 is sent in packets originated by the node. Note that this is not the same as configuring a value of 64.
ProSafe M4100 and M7100 Managed Switches no ipv6 enable Use this command to disable IPv6 routing on an interface. Format no ipv6 enable Mode Interface Config ipv6 address Use this command to configure an IPv6 address on an interface, including tunnel and loopback interfaces, and to enable IPv6 processing on this interface. You can assign multiple globally reachable addresses to an interface by using this command.
ProSafe M4100 and M7100 Managed Switches ipv6 address autoconfig This command is used to enable stateless address autoconfiguration capability. Note: When unicast-routing is enabled, autoconfig mode does not work. Format ipv6 address autoconfig Mode Interface Config ipv6 address autoconfig This command disables the stateless autoconfiguration. Format no ipv6 address autoconfig Mode Interface Config ipv6 address dhcp This command is used to enable DHCPv6 client capability.
ProSafe M4100 and M7100 Managed Switches using a link-local address as the next hop. A route with a preference of 255 cannot be used to forward traffic. Default disabled Format ipv6 route / { | Null0 | interface { | tunnel } } [] Mode Global Config no ipv6 route Use this command to delete an IPv6 static route.
ProSafe M4100 and M7100 Managed Switches ipv6 mtu This command sets the maximum transmission unit (MTU) size, in bytes, of IPv6 packets on an interface. This command replaces the default or link MTU with a new MTU value. Note: The default MTU value for a tunnel interface is 1480. You cannot change this value. Default 0 or link speed (MTU value (1500)) Format ipv6 mtu <1280-1500> Mode Interface Config no ipv6 mtu This command resets maximum transmission unit value to default value.
ProSafe M4100 and M7100 Managed Switches ipv6 nd managed-config-flag This command sets the “managed address configuration” flag in router advertisements. When the value is true, end nodes use DHCPv6. When the value is false, end nodes automatically configure addresses. Default false Format ipv6 nd managed-config-flag Mode Interface Config no ipv6 nd managed-config-flag This command resets the “managed address configuration” flag in router advertisements to the default value.
ProSafe M4100 and M7100 Managed Switches no ipv6 nd other-config-flag This command resets the “other stateful configuration” flag back to its default value in router advertisements sent from the interface. Format no ipv6 nd other-config-flag Mode Interface Config ipv6 nd ra-interval This command sets the transmission interval between router advertisements.
ProSafe M4100 and M7100 Managed Switches ipv6 nd reachable-time This command sets the router advertisement time to consider a neighbor reachable after neighbor discovery confirmation. Reachable time is specified in milliseconds. A value of zero means the time is unspecified by the router. Default 0 Format ipv6 nd reachable-time <0–3600000> Mode Interface Config no ipv6 nd reachable-time This command means that the reachable time is unspecified for the router.
ProSafe M4100 and M7100 Managed Switches ipv6 nd router-preference This command will set the router preference to default. Format no ipv6 router-preference Mode Interface Config ipv6 unreachables Use this command to enable the generation of ICMPv6 Destination Unreachable messages. By default, the generation of ICMPv6 Destination Unreachable messages is enabled.
ProSafe M4100 and M7100 Managed Switches no ipv6 icmp error-interval Use the no form of the command to return burst-interval and burst-size to their default values. Format no ipv6 icmp error-interval Mode Global Config show ipv6 brief Use this command to display the IPv6 status of forwarding mode and IPv6 unicast routing mode. Format show ipv6 brief Mode Privileged EXEC Term Definition IPv6 Forwarding Mode Shows whether the IPv6 forwarding mode is enabled.
ProSafe M4100 and M7100 Managed Switches show ipv6 interface Use this command to show the usability status of IPv6 interfaces and whether ICMPv6 Destination Unreachable messages might be sent. Format show ipv6 interface {brief | |tunnel <0-7> | loopback <0-7>} Mode Privileged EXEC If you use the brief parameter, the following information displays for all configured IPv6 interfaces: Term Definition Interface The interface in slot/port format.
ProSafe M4100 and M7100 Managed Switches Term Definition Router Advertisement Interval The frequency, in seconds, that router advertisements are sent. Router Advertisement Managed Config Flag Shows whether the managed configuration flag is set (enabled) for router advertisements on this interface. Router Advertisement Other Config Flag Shows whether the other configuration flag is set (enabled) for router advertisements on this interface.
ProSafe M4100 and M7100 Managed Switches show ipv6 neighbor Use this command to display information about the IPv6 neighbors. Format show ipv6 neighbor Mode Privileged EXEC Term Definition Interface The interface in slot/port format. IPv6 Address IPV6 address of neighbor or interface. MAC Address Link-layer Address. IsRtr Shows whether the neighbor is a router. If the value is TRUE, the neighbor is known to be a router, and FALSE otherwise.
ProSafe M4100 and M7100 Managed Switches Note: If you use the connected keyword for , the all option is not available because there are no best or non-best connected routes. Format show ipv6 route [{ [] | {{ | } [] | | summary} [all] | all}] Modes • Privileged EXEC • User EXEC Term Definition Route Codes The key for the routing protocol codes that might appear in the routing table output.
ProSafe M4100 and M7100 Managed Switches Example: The following shows example CLI display output for the command.
ProSafe M4100 and M7100 Managed Switches show ipv6 route preferences Use this command to show the preference value associated with the type of route. Lower numbers have a greater preference. A route with a preference of 255 cannot be used to forward traffic. Format show ipv6 route preferences Mode Privileged EXEC Term Definition Local Preference of directly-connected routes. Static Preference of static routes. OSPF Intra Preference of routes within the OSPF area.
ProSafe M4100 and M7100 Managed Switches Term Definition Alternate Routes The number of alternate routes currently in the routing table. An alternate route is a route that was not selected as the best route to its destination. Route Adds The number of routes added to the routing table. Route Modifies The number of routes that changed after they were initially added to the routing table. Route Deletes The number of routes deleted from the routing table.
ProSafe M4100 and M7100 Managed Switches OSPF Routes.................................... Intra Area Routes............................ Inter Area Routes............................ External Type-1 Routes....................... External Type-2 Routes....................... Reject Routes.................................. Total routes................................... Best Routes (High)............................. Alternate Routes............................... Route Adds....................................
ProSafe M4100 and M7100 Managed Switches Column Headings Definition Logical Interface The interface in slot/port format that is associated with the VLAN ID. IPv6 Address/Prefix Length The IPv6 prefix and prefix length associated with the VLAN ID. show ipv6 traffic Use this command to show traffic and statistics for IPv6 and ICMPv6. Specify a logical, loopback, or tunnel interface to view information about traffic on a specific interface.
ProSafe M4100 and M7100 Managed Switches Term Definition Received Datagrams Discarded Other Number of input IPv6 datagrams for which no problems were encountered to prevent their continue processing, but which were discarded (for example, for lack of buffer space). Note that this counter does not include datagrams discarded while awaiting reassembly. Received Datagrams Reassembly Required Number of IPv6 fragments received which needed to be reassembled at this interface.
ProSafe M4100 and M7100 Managed Switches Term Definition ICMPv6 Messages with errors Number of ICMP messages which the interface received but determined as having ICMP-specific errors (bad ICMP checksums, bad length, and so on). ICMPv6 Destination Unreachable Messages Number of ICMP Destination Unreachable messages received by the interface. ICMPv6 Messages Prohibited Administratively Number of ICMP destination unreachable/communication administratively prohibited messages received by the interface.
ProSafe M4100 and M7100 Managed Switches Term Definition ICMPv6 Time Exceeded Messages Transmitted Number of ICMP Time Exceeded messages sent by the interface. ICMPv6 Parameter Problem Messages Transmitted Number of ICMP Parameter Problem messages sent by the interface. ICMPv6 Packet Too Big Messages Transmitted Number of ICMP Packet Too Big messages sent by the interface. ICMPv6 Echo Request Messages Transmitted Number of ICMP Echo (request) messages sent by the interface.ICMP echo messages sent.
ProSafe M4100 and M7100 Managed Switches clear ipv6 statistics Use this command to clear IPv6 statistics for all interfaces or for a specific interface, including loopback and tunnel interfaces. IPv6 statistics display in the output of the show ipv6 traffic command. If you do not specify an interface, the counters for all IPv6 traffic statistics reset to zero.
ProSafe M4100 and M7100 Managed Switches ipv6 ospf cost This command configures the cost on an OSPF interface. The parameter has a range of 1–65,535. Default 10 Format ipv6 ospf cost <1-65535> Mode Interface Config no ipv6 ospf cost This command configures the default cost on an OSPF interface. Format no ipv6 ospf cost Mode Interface Config ipv6 ospf dead-interval This command sets the OSPF dead interval for the specified interface.
ProSafe M4100 and M7100 Managed Switches Format ipv6 ospf hello-interval Mode Interface Config no ipv6 ospf hello-interval This command sets the default OSPF hello interval for the specified interface. Format no ipv6 ospf hello-interval Mode Interface Config ipv6 ospf mtu-ignore This command disables OSPF maximum transmission unit (MTU) mismatch detection. OSPF Database Description packets specify the size of the largest IP packet that can be sent without fragmentation on the interface.
ProSafe M4100 and M7100 Managed Switches no ipv6 ospf network This command sets the interface type to the default value. Format no ipv6 ospf network {broadcast | point-to-point} Mode Interface Config ipv6 ospf priority This command sets the OSPF priority for the specified router interface. The priority of the interface is a priority integer from 0 to 255. A value of 0 indicates that the router is not eligible to become the designated router on this network.
ProSafe M4100 and M7100 Managed Switches ipv6 ospf transmit-delay This command sets the OSPF Transit Delay for the specified interface. The transmit delay is specified in seconds. In addition, it sets the estimated number of seconds it takes to transmit a link state update packet over this interface. Valid values for range from 1 to 3600 (1 hour).
ProSafe M4100 and M7100 Managed Switches no area nssa(OSPFv3) This command disables nssa from the specified area id. Format no area nssa Mode Router OSPFv3 Config area nssa default-info-originate (OSPFv3) This command configures the metric value and type for the default route advertised into the NSSA. The optional metric parameter specifies the metric of the default route and is to be in a range of 1-16777214. If no metric is specified, the default value is 10.
ProSafe M4100 and M7100 Managed Switches area nssa no-summary (OSPFv3) This command configures the NSSA so that summary LSAs are not advertised into the NSSA. Format area nssa no-summary Mode Router OSPFv3 Config no area nssa no-summary (OSPFv3) This command disables nssa from the summary LSAs. Format no area nssa no-summary Mode Router OSPF Config area nssa translator-role (OSPFv3) This command configures the translator role of the NSSA.
ProSafe M4100 and M7100 Managed Switches no area nssa translator-stab-intv (OSPFv3) This command disables the nssa translator’s from the specified area id. Format no area nssa translator-stab-intv Mode Router OSPF Config area range (OSPFv3) This command creates a specified area range for a specified NSSA. The is a valid IP address. The is a valid subnet mask.
ProSafe M4100 and M7100 Managed Switches area stub no-summary (OSPFv3) This command disables the import of Summary LSAs for the stub area identified by . Default enabled Format area stub no-summary Mode Router OSPFv3 Config no area stub no-summary(OSPFv3) This command sets the Summary LSA import mode to the default for the stub area identified by .
ProSafe M4100 and M7100 Managed Switches no area virtual-link dead-interval(OSPFv3) This command configures the default dead interval for the OSPF virtual interface on the virtual interface identified by and . The parameter is the Router ID of the neighbor.
ProSafe M4100 and M7100 Managed Switches no area virtual-link retransmit-interval(OSPFv3) This command configures the default retransmit interval for the OSPF virtual interface on the virtual interface identified by and . The parameter is the Router ID of the neighbor.
ProSafe M4100 and M7100 Managed Switches Format auto-cost reference-bandwidth <1 to 4294967> Mode Router OSPFv3 Config no auto-cost reference-bandwidth (OSPFv3) Use this command to set the reference bandwidth to the default value. Format no auto-cost reference-bandwidth Mode Router OSPFv3 Config clear ipv6 ospf Use this command to disable and re-enable OSPF.
ProSafe M4100 and M7100 Managed Switches clear ipv6 ospf neighbor interface To drop adjacency with all neighbors on a specific interface, use the optional parameter [slot/port]. To drop adjacency with a specific router ID on a specific interface, use the optional parameter [neighbor-id]. Format clear ipv6 ospf neighbor interface [slot/port] [neighbor-id] Mode Privileged EXEC clear ipv6 ospf redistribution Use this command to flush all self-originated external LSAs.
ProSafe M4100 and M7100 Managed Switches no default-metric (OSPFv3) This command is used to set a default for the metric of distributed routes. Format no default-metric Mode Router OSPFv3 Config distance ospf (OSPFv3) This command sets the route preference value of OSPF route types in the router. Lower route preference values are preferred when determining the best route. The type of OSPF route can be intra, inter, or external. All the external type routes are given the same preference value.
ProSafe M4100 and M7100 Managed Switches exit-overflow-interval (OSPFv3) This command configures the exit overflow interval for OSPF. It describes the number of seconds after entering Overflow state that a router will wait before attempting to leave the overflow state. This allows the router to again originate non-default AS-external-LSAs. When set to 0, the router will not leave overflow state until restarted. The range for is 0–2,147,483,647 seconds.
ProSafe M4100 and M7100 Managed Switches maximum-paths (OSPFv3) This command sets the number of paths that OSPF can report for a given destination where maxpaths is platform-dependent. Default 4 Format maximum-paths Mode Router OSPFv3 Config no maximum-paths This command resets the number of paths that OSPF can report for a given destination back to its default value.
ProSafe M4100 and M7100 Managed Switches no passive-interface(OSPFv3) Use this command to set the interface or tunnel as non-passive. It overrides the global passive mode that is effective on the interface or tunnel. Format no passive-interface { | tunnel } Mode Router OSPFv3 Config redistribute (OSPFv3) This command configures the OSPFv3 protocol to allow redistribution of routes from the specified source protocol/routers.
ProSafe M4100 and M7100 Managed Switches trapflags (OSPFv3) Use this command to enable individual OSPF traps, enable a group of trap flags at a time, or enable all the trap flags at a time. The different groups of trapflags, and each group’s specific trapflags to enable or disable, are listed in Table 2, Trapflag Groups (OSPFv3). Table 2.
ProSafe M4100 and M7100 Managed Switches • To enable all the flags, give the command as trapflags all.
ProSafe M4100 and M7100 Managed Switches Note: Some of the information below displays only if you enable OSPF and configure certain features. Term Definition Router ID A 32-bit integer in dotted decimal format identifying the router, about which information is displayed. This is a configured value. OSPF Admin Mode Shows whether the administrative mode of OSPF in the router is enabled or disabled. This is a configured value. ABR Status Shows whether the router is an OSPF Area Border Router.
ProSafe M4100 and M7100 Managed Switches Term Definition Maximum Number of Retransmit Entries The maximum number of LSAs that can be waiting for acknowledgment at any given time. Retransmit Entries High Water Mark The highest number of LSAs that have been waiting for acknowledgment. External LSDB Limit The maximum number of non-default AS-external-LSAs entries that can be stored in the link-state database. Default Metric Default value for redistributed routes.
ProSafe M4100 and M7100 Managed Switches show ipv6 ospf abr This command displays the internal OSPFv3 routes to reach Area Border Routers (ABR). This command takes no options. Format show ipv6 ospf abr Modes • Privileged EXEC • User EXEC Term Definition Type The type of the route to the destination. It can be either: • intra — Intra-area route • inter — Inter-area route Router ID Router ID of the destination. Cost Cost of using this route.
ProSafe M4100 and M7100 Managed Switches Term Definition Stub Mode Represents whether the specified Area is a stub area or not. The possible values are enabled and disabled. This is a configured value. Import Shows whether to import summary LSAs (enabled). Summary LSAs OSPF Stub Metric Value The metric value of the stub area. This field displays only if the area is a configured as a stub area. The following OSPF NSSA-specific information displays only if the area is configured as an NSSA.
ProSafe M4100 and M7100 Managed Switches Term Definition Cost Cost of using this route. Area ID The area ID of the area from which this route is learned. Next Hop Next hop toward the destination. Next Hop Intf The outgoing router interface to use when forwarding traffic to the next hop. show ipv6 ospf database This command displays information about the link state database when OSPFv3 is enabled. If you do not enter any parameters, the command displays the LSA headers for all areas.
ProSafe M4100 and M7100 Managed Switches show ipv6 ospf database database-summary Use this command to display the number of each type of LSA in the database and the total number of LSAs in the database. Format show ipv6 ospf database database-summary Modes • Privileged EXEC • User EXEC Term Definition Router Total number of router LSAs in the OSPFv3 link state database. Network Total number of network LSAs in the OSPFv3 link state database.
ProSafe M4100 and M7100 Managed Switches Term Definition OSPF Area ID The area ID associated with this interface. Router Priority The router priority. The router priority determines which router is the designated router. Retransmit Interval The frequency, in seconds, at which the interface sends LSA. Hello Interval The frequency, in seconds, at which the interface sends Hello packets. Dead Interval The amount of time, in seconds, the interface waits before assuming a neighbor is down.
ProSafe M4100 and M7100 Managed Switches Term Definition Interface Valid slot and port number separated by forward slashes. Admin Mode States whether OSPF is enabled or disabled on a router interface. Area ID The OSPF Area ID for the specified interface. Router Priority The router priority. The router priority determines which router is the designated router. Hello Interval The frequency, in seconds, at which the interface sends Hello packets.
ProSafe M4100 and M7100 Managed Switches Term Definition LSA Acks Received The total number of LSA acknowledged from this interface. LSA Acks Sent The total number of LSAs acknowledged to this interface. Sent Packets The number of OSPF packets transmitted on the interface. Received Packets The number of valid OSPF packets received on the interface. Discards The number of received OSPF packets discarded because of an error in the packet or an error in processing the packet.
ProSafe M4100 and M7100 Managed Switches If you do not specify an IP address, a table with the following columns displays for all neighbors or the neighbor associated with the interface that you specify: Term Definition Router ID The 4-digit dotted-decimal number of the neighbor router. Priority The OSPF priority for the specified interface. The priority of an interface is a priority integer from 0 to 255.
ProSafe M4100 and M7100 Managed Switches Term Definition Events Number of times this neighbor relationship has changed state, or an error has occurred. Retransmission An integer representing the current length of the retransmission queue of the specified Queue Length neighbor router Id of the specified interface. show ipv6 ospf range This command displays information about the area ranges for the specified . The identifies the OSPF area whose ranges are being displayed.
ProSafe M4100 and M7100 Managed Switches show ipv6 ospf virtual-link This command displays the OSPF Virtual Interface information for a specific area and neighbor. The parameter identifies the area and the parameter identifies the neighbor’s Router ID. Format show ipv6 ospf virtual-link Modes • Privileged EXEC • User EXEC Term Definition Area ID The area id of the requested OSPF area. Neighbor Router ID The input neighbor Router ID.
ProSafe M4100 and M7100 Managed Switches Term Definition Retransmit Interval The configured retransmit interval for the OSPFV3 virtual interface. Transit Delay The configured transit delay for the OSPFV3 virtual interface. OSPFv3 Graceful Restart Commands The managed switch implementation of OSPFv3 supports graceful restart as specified in RFC 5187 and RFC 3623.
ProSafe M4100 and M7100 Managed Switches The grace LSA announcing the graceful restart includes the reason for the restart. Reasons 1 (software restart) and 2 (software reload/upgrade) are considered planned restarts. Reasons 0 (unknown) and 3 (switch to redundant control processor) are considered unplanned restarts.
ProSafe M4100 and M7100 Managed Switches no nsf [ietf] helper strict-lsa-checking (OSPFv3) This command allows OSPF to continue as a helpful neighbor in spite of topology changes. nsf restart-interval (OSPFv3) This command configures the length of the grace period on the restarting router. The grace period must be set long enough to allow the restarting router to reestablish all of its adjacencies and complete a full database exchange with each of its neighbors.
ProSafe M4100 and M7100 Managed Switches ipv6 dhcp server Use this command to configure DHCPv6 server functionality on an interface. The is the DHCPv6 pool containing stateless and/or prefix delegation parameters, rapid-commit is an option that allows for an abbreviated exchange between the client and server, and is a value used by clients to determine preference between multiple DHCPv6 servers.
ProSafe M4100 and M7100 Managed Switches These pools are shared between multiple interfaces over which DHCPv6 server capabilities are configured. Format ipv6 dhcp pool Mode Global Config no ipv6 dhcp pool This command removes the specified DHCPv6 pool. Format no ipv6 dhcp pool Mode Global Config domain-name (IPv6) This command sets the DNS domain name provided to the DHCPv6 client by the DHCPv6 server.
ProSafe M4100 and M7100 Managed Switches prefix-delegation (IPv6) Multiple IPv6 prefixes can be defined within a pool for distributing to specific DHCPv6 Prefix delegation clients. Prefix is the delegated IPv6 prefix. DUID is the client’s unique DUID value (Example: 00:01:00:09:f8:79:4e:00:04:76:73:43:76'). Name is 31 characters textual client’s name, which is useful for logging or tracing only.
ProSafe M4100 and M7100 Managed Switches Term Definition DHCPv6 Solicit Packets Received Number of solicit received statistics. DHCPv6 Request Packets Received Number of request received statistics. DHCPv6 Confirm Packets Received Number of confirm received statistics. DHCPv6 Renew Packets Received Number of renew received statistics. DHCPv6 Rebind Packets Received Number of rebind received statistics. DHCPv6 Release Packets Received Number of release received statistics.
ProSafe M4100 and M7100 Managed Switches show ipv6 dhcp interface This command displays DHCPv6 information for all relevant interfaces or the specified interface. If you specify an interface, you can use the optional statistics parameter to view statistics for the specified interface. Format show ipv6 dhcp interface [statistics] Mode Privileged EXEC Term Definition IPv6 Interface The interface name in format. Mode Shows whether the interface is a IPv6 DHCP relay or server.
ProSafe M4100 and M7100 Managed Switches show ipv6 dhcp pool This command displays configured DHCP pool. Format show ipv6 dhcp pool Mode Privileged EXEC Term Definition DHCP Pool Name Unique pool name configuration. Client DUID Client’s DHCP unique identifier. DUID is generated using the combination of the local system burned-in MAC address and a timestamp value. Host Name of the client. Prefix/Prefix Length IPv6 address and mask length for delegated prefix.
ProSafe M4100 and M7100 Managed Switches Term Definition Valid Lifetime Valid lifetime in seconds for delegated prefix. Preferred Lifetime Preferred lifetime in seconds for delegated prefix.
7. IPv6 Multicast Commands 7 This chapter describes the IPv6 multicast commands available in the managed switch CLI. Note: Some commands described in this chapter require a license. For more information, see Licensing and Command Support on page 8.
ProSafe M4100 and M7100 Managed Switches IPv6 Multicast Forwarder Commands Note: There is no specific IP multicast enable for IPv6. Enabling of multicast at global config is common for both IPv4 and IPv6. show ipv6 mroute Use this command to show the mroute entries specific for IPv6. (This command is the IPv6 equivalent of the IPv4 show ip mcaste mroute command.
ProSafe M4100 and M7100 Managed Switches show ipv6 mroute group This command displays the multicast configuration settings specific to IPv6 such as flags, timer settings, incoming and outgoing interfaces, RPF neighboring routers, and expiration times of all the entries in the multicast mroute table containing the given group IPv6 address .
ProSafe M4100 and M7100 Managed Switches If you use the summary parameter, the command displays the following column headings in the output table: Term Definition Source IP The IP address of the multicast data source. Group IP The IP address of the destination of the multicast packet. Protocol The multicast routing protocol by which this entry was created. Incoming Interface The interface on which the packet for this source arrives.
ProSafe M4100 and M7100 Managed Switches no ipv6 pim (Interface Config) Use this command to set the administrative mode of PIM on an interface to disabled. Format no ipv6 pim Mode Interface Config ipv6 pim hello-interval Use this command to configure the PIM hello interval for the specified router interface. The hello-interval is specified in seconds and is in the range 10–18000.
ProSafe M4100 and M7100 Managed Switches PIM Mode..................................... Dense Data Threshold Rate (Kbps)................... 0 Register Rate-limit (Kbps)................... 0 Interface --------0/1 Interface Mode -------------Enabled Operational-Status ---------------Non-Operational show ipv6 pim neighbor Use this command to display the PIM neighbor information for all interfaces or for the specified interface.
ProSafe M4100 and M7100 Managed Switches Term Definition Hello Interval Hello interval value. The frequency at which PIM hello messages are transmitted on this interface. By default, the value is 30 seconds. Join-prune Interval Join-prune interval value. DR Priority DR priority configured on this interface. This is not applicable if the interface mode is Dense. BSR Border Indicates whether the interface is configured as a BSR border.
ProSafe M4100 and M7100 Managed Switches Format ipv6 pim bsr-candidate interface [ | vlan <1-4093>] [hash-mask-length] [priority] [interval interval] Mode Global Config Parameters Description hash-mask-length Length of a mask (32 bits maximum) that is to be ANDed with the group address before the hash function is called. All groups with the same seed hash correspond to the same RP. For example, if this value was 24, only the first 24 bits of the group addresses matter.
ProSafe M4100 and M7100 Managed Switches ipv6 pim join-prune-interval Use this command to configure the interface join/prune interval for the PIM-SM router. The join/prune interval is specified in seconds. This parameter can be configured to a value from 0 to 18000. Default 60 Format ipv6 pim join-prune-interval <0-18000> Mode Interface Config no ipv6 pim join-prune-interval Use this command to set the join/prune interval to the default value.
ProSafe M4100 and M7100 Managed Switches Format ipv6 pim rp-candidate interface Mode Global Config no ipv6 pim rp-candidate Use this command to disable the router to advertise itself as a PIM candidate rendezvous point (RP) to the bootstrap router (BSR).
ProSafe M4100 and M7100 Managed Switches Term Definition BSR Address IP address of the BSR. Uptime Length of time that this router has been up (in hours, minutes, and seconds). BSR Priority Priority as configured in the ip pim bsr-candidate command. Hash Mask Length Length of a mask (maximum 32 bits) that is to be ANDed with the group address before the hash function is called. This value is configured in the ip pim bsr-candidate command.
ProSafe M4100 and M7100 Managed Switches network. In this situation, the 7000 series has an IGMP/MLD Snooping Querier running on one of the switches and Snooping enabled on all the switches. For more information, see IGMP Snooping Configuration Commands on page 146 and MLD Snooping Commands on page 158. ipv6 mld router Use this command, in the administrative mode of the router, to enable MLD in the router.
ProSafe M4100 and M7100 Managed Switches sent on that interface. The range for is 0–65,535 milliseconds. Default 10000 milliseconds Format ipv6 mld query-max-response-time Mode Interface Config no ipv6 mld query-max-response-time This command resets the MLD query max response time for the interface to the default value.
ProSafe M4100 and M7100 Managed Switches no ipv6 mld last-member-query-count Use this command to reset the parameter of the interface to the default value. Format no ipv6 mld last-member-query-count Mode Interface Config show ipv6 mld groups Use this command to display information about multicast groups that MLD reported. The information is displayed only when MLD is enabled on at least one interface.
ProSafe M4100 and M7100 Managed Switches The following table is displayed to indicate all the sources associated with this group. Field Description Source Address The IP address of the source. Uptime Time elapsed in hours, minutes, and seconds since the source has been known. Expiry Time Time left in hours, minutes, and seconds before the entry is removed. Example: The following shows examples of CLI display output for the commands.
ProSafe M4100 and M7100 Managed Switches The following information is displayed for each of the interfaces or for only the specified interface. Field Description Interface The interface number in slot/port format. MLD Global Mode Displays the configured administrative status of MLD. MLD Operational Mode The operational status of MLD on the interface. MLD Version Indicates the version of MLD configured on the interface. Query Interval Indicates the configured query interval for the interface.
ProSafe M4100 and M7100 Managed Switches Field Description Number of Leaves The number of times a group membership has been removed on this interface. Number of Groups The current number of membership entries for this interface. show ipv6 mld traffic Use this command to display MLD statistical information for the router. Format show ipv6 mld traffic Mode • Privileged EXEC • User EXEC Field Description Valid MLD Packets Received The number of valid MLD packets received by the router.
ProSafe M4100 and M7100 Managed Switches ipv6 mld-proxy Use this command to enable MLD-Proxy on the router. To enable MLD-Proxy on the router, you must enable multicast forwarding. Also, make sure that there are no other multicast routing protocols enabled n the router. Format ipv6 mld-proxy Mode Interface Config no ipv6 mld-proxy Use this command to disable MLD-Proxy on the router.
ProSafe M4100 and M7100 Managed Switches show ipv6 mld-proxy Use this command to display a summary of the host interface status parameters. Format show ipv6 mld-proxy Mode • Privileged EXEC • User EXEC The command displays the following parameters only when you enable MLD-Proxy. Field Description Interface Index The interface number of the MLD-Proxy. Admin Mode Indicates whether MLD-Proxy is enabled or disabled. This is a configured value.
ProSafe M4100 and M7100 Managed Switches show ipv6 mld-proxy interface This command displays a detailed list of the host interface status parameters. It displays the following parameters only when you enable MLD-Proxy. Format show ipv6 mld-proxy interface Modes • Privileged EXEC • User EXEC Term Definition Interface Index The slot/port of the MLD-proxy. The column headings of the table associated with the interface are as follows: Term Definition Ver The MLD version.
ProSafe M4100 and M7100 Managed Switches Field Description Interface The interface number of the MLD-Proxy. Group Address The IP address of the multicast group. Last Reporter The IP address of the host that last sent a membership report for the current group, on the network attached to the MLD-Proxy interface (upstream interface). Up Time (in secs) The time elapsed in seconds since last created. Member State The possible values are: • Idle_Member.
ProSafe M4100 and M7100 Managed Switches Field Description Up Time (in secs) The time elapsed in seconds since last created. Member State The possible values are: • Idle_Member. The interface has responded to the latest group membership query for this group. • Delay_Member. The interface is going to send a group membership report to respond to a group membership query for this group. Filter Mode Possible values are Include or Exclude. Sources The number of sources attached to the multicast group.
8. Quality of Service (QoS) Commands 8 This chapter describes the Quality of Service (QoS) commands available in the managed switch CLI.
ProSafe M4100 and M7100 Managed Switches Class of Service (CoS) Commands This section describes the commands you use to configure and view Class of Service (CoS) settings for the switch. The commands in this section allow you to control the priority and transmission rate of traffic. Note: Commands you issue in the Interface Config mode only affect a single interface. Commands you issue in the Global Config mode affect all interfaces. classofservice dot1p-mapping This command maps an 802.
ProSafe M4100 and M7100 Managed Switches no classofservice ip-dscp-mapping This command maps each IP DSCP value to its default internal traffic class value. Format no classofservice ip-dscp-mapping Modes Global Config classofservice trust This command sets the Class of Service trust mode of an interface. You can set the mode to trust one of the Dot1p (802.1p), IP DSCP, or IP Precedence packet markings. You can also set the interface mode to untrusted.
ProSafe M4100 and M7100 Managed Switches cos-queue strict This command activates the strict priority scheduler mode for each specified queue. Format cos-queue strict [ … ] Modes • Global Config • Interface Config no cos-queue strict This command restores the default weighted scheduler mode for each specified queue.
ProSafe M4100 and M7100 Managed Switches random-detect exponential weighting-constant Use this command to configure the WRED decay exponent for a CoS queue interface. Format random-detect exponential-weighting-constant 0-15 Modes • Global Config • Interface Config Default 9 no random-detect exponential weighting-constant Use this command to reset the WRED decay exponent to the default value on all interfaces or one interface.
ProSafe M4100 and M7100 Managed Switches no random-detect queue-parms Use this command to set the WRED configuration back to the default. Format Modes no random-detect queue-parms queue-id-1 [queue-id-2 … queue-id-n] • Global Config • Interface Config traffic-shape This command specifies the maximum transmission bandwidth limit for the interface as a whole.
ProSafe M4100 and M7100 Managed Switches show classofservice ip-precedence-mapping This command displays the current IP Precedence mapping to internal traffic classes for a specific interface. The slot/port parameter is optional and is only valid on platforms that support independent per-port Class of Service mappings. If specified, the IP Precedence mapping table of the interface is displayed. If omitted, the most recent global configuration settings are displayed.
ProSafe M4100 and M7100 Managed Switches Term Definition Non-IP Traffic Class The traffic class used for non-IP traffic. This is only displayed when the COS trust mode is set to trust IP Precedence or IP DSCP (on platforms that support IP DSCP). Untrusted Traffic Class The traffic class used for all untrusted traffic. This is only displayed when the COS trust mode is set to 'untrusted'.
ProSafe M4100 and M7100 Managed Switches show interfaces random-detect This command displays the global WRED settings for each CoS queue. If you specify the slot/port, the command displays the WRED settings for each CoS queue on the specified interface. Format show interfaces random-detect [slot/port] Mode Privileged EXEC Term Definition Queue ID An interface supports n queues numbered 0 to (n-1). The specific n value is platform-dependent.
ProSafe M4100 and M7100 Managed Switches The following rules apply when you create a DiffServ class: • Each class can contain a maximum of one referenced (nested) class • Class definitions do not support hierarchical service policies A given class definition can contain a maximum of one reference to another class. You can combine the reference with other match criteria.
ProSafe M4100 and M7100 Managed Switches This set of commands consists of class creation/deletion and matching, with the class match commands specifying Layer 3, Layer 2, and general match criteria. The class match criteria are also known as class rules, with a class definition consisting of one or more rules to identify the traffic that belongs to the class. Note: Once you create a class match criterion for a class, you cannot change or delete the criterion.
ProSafe M4100 and M7100 Managed Switches no class-map This command eliminates an existing DiffServ class. The is the name of an existing DiffServ class. (The class name ‘default’ is reserved and is not allowed here.) This command might be issued at any time; if the class is currently referenced by one or more policies or by any other class, the delete action fails.
ProSafe M4100 and M7100 Managed Switches match class-map This command adds to the specified class definition the set of match conditions defined for another class. The is the name of an existing DiffServ class whose match conditions are being referenced by the specified class definition. Default none Format match class-map Mode Class-Map Config Ipv6-Class-Map Config Note the following: • The parameters and cannot be the same.
ProSafe M4100 and M7100 Managed Switches match secondary cos This command adds to the specified class definition a match condition for the secondary Class of Service value (the only tag in a single tagged packet or the first or outer 802.1Q tag of a double VLAN tagged packet). The value might be from 0 to 7. Default none Format match secondary-cos <0-7> Mode Class-Map Config match ip6flowlbl This command adds to the specified class definition a match condition based on the IP6flowlbl of a packet.
ProSafe M4100 and M7100 Managed Switches match dstip6 This command adds to the specified class definition a match condition based on the destination IPv6 address of a packet. Default none Format match dstip6 Mode Ipv6-Class-Map Config match dstl4port This command adds to the specified class definition a match condition based on the destination layer 4 port of a packet using a single keyword or numeric notation.
ProSafe M4100 and M7100 Managed Switches match ip precedence This command adds to the specified class definition a match condition based on the value of the IP Precedence field in a packet, which is defined as the high-order three bits of the Service Type octet in the IP header (the low-order five bits are not checked). The precedence value is an integer from 0 to 7.
ProSafe M4100 and M7100 Managed Switches Format match ip tos Mode Class-Map Config match protocol This command adds to the specified class definition a match condition based on the value of the IP Protocol field in a packet using a single keyword notation or a numeric value notation. To specify the match condition using a single keyword notation, the value for is one of the supported protocol name keywords.
ProSafe M4100 and M7100 Managed Switches parameter specifies an IP address bit mask and must consist of a contiguous set of leading 1 bits. Default none Format match srcip Mode Class-Map Config match srcip6 This command adds to the specified class definition a match condition based on the source IP address of a packet.
ProSafe M4100 and M7100 Managed Switches match secondary-vlan This command adds to the specified class definition a match condition based on the value of the layer 2 secondary VLAN Identifier field (the 802.1Q tag of a double VLAN tagged packet). The VLAN is an integer from 0 to 4095.
ProSafe M4100 and M7100 Managed Switches drop This command specifies that all packets for the associated traffic stream are to be dropped at ingress. Format drop Mode Policy-Class-Map Config Incompatibilities Assign Queue, Mark (all forms), Mirror, Police, Redirect mirror This command specifies that all incoming packets for the associated traffic stream are copied to a specific egress interface (physical port or LAG).
ProSafe M4100 and M7100 Managed Switches class This command creates an instance of a class definition within the specified policy for defining treatment of the traffic class through subsequent policy attribute statements. The is the name of an existing DiffServ class. Note: This command causes the specified policy to create a reference to the class definition. Note: The CLI mode is changed to Policy-Class-Map Config when this command is successfully executed.
ProSafe M4100 and M7100 Managed Switches Mode Policy-Class-Map Config Incompatibilities Drop, Mark IP DSCP, IP Precedence, Police mark cos-as-sec-cos This command marks outer VLAN tag priority bits of all packets as the inner VLAN tag priority, marking CoS as Secondary CoS. This essentially means that the inner VLAN tag CoS is copied to the outer VLAN tag CoS.
ProSafe M4100 and M7100 Managed Switches police-simple This command is used to establish the traffic policing style for the specified class. The simple form of the police command uses a single data rate and burst size, resulting in two outcomes: conform and violate. The conforming data rate is specified in kilobits-per-second (Kbps) and is an integer from 1 to 4294967295. The conforming burst size is specified in kilobytes (KB) and is an integer from 1 to 128.
ProSafe M4100 and M7100 Managed Switches policy-map This command establishes a new DiffServ policy. The parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the policy. The type of policy is specific to the inbound traffic direction as indicated by the parameter Note: The CLI mode is changed to Policy-Map Config when this command is successfully executed.
ProSafe M4100 and M7100 Managed Switches service-policy This command attaches a policy to an interface in the inbound direction. The parameter is the name of an existing DiffServ policy. This command causes a service to create a reference to the policy. Note: This command effectively enables DiffServ on an interface in the inbound direction. There is no separate interface administrative 'mode' command for DiffServ.
ProSafe M4100 and M7100 Managed Switches DiffServ Show Commands Use the DiffServ show commands to display configuration and status information for classes, policies, and services. You can display DiffServ information in summary or detailed formats. The status information is only shown when the DiffServ administrative mode is enabled. show class-map This command displays all configuration information for the specified class. The is the name of an existing DiffServ class.
ProSafe M4100 and M7100 Managed Switches show diffserv This command displays the DiffServ General Status Group information, which includes the current administrative mode setting as well as the current and maximum number of rows in each of the main DiffServ private MIB tables. This command takes no options. Format show diffserv Mode Privileged EXEC Term Definition DiffServ Admin mode The current value of the DiffServ administrative mode.
ProSafe M4100 and M7100 Managed Switches The following information is repeated for each class associated with this policy (only the policy attributes that are configured are displayed): Term Definition Assign Queue Directs traffic stream to the specified QoS queue. This allows a traffic classifier to specify which one of the supported hardware queues are used for handling packets belonging to the class. Class Name The name of this class.
ProSafe M4100 and M7100 Managed Switches Term Definition Policing Style The style of policing, if any, used (simple). Redirect Forces a classified traffic stream to a specified egress port (physical or LAG). This can occur in addition to any marking or policing action. It might also be specified along with a QoS queue assignment. If the Policy Name is not specified this command displays a list of all defined DiffServ policies.
ProSafe M4100 and M7100 Managed Switches Term Definition DiffServ Admin Mode The current setting of the DiffServ administrative mode. An attached policy is only active on an interface while DiffServ is in an enabled mode. The following information is repeated for interface and direction (only those interfaces configured with an attached policy are shown): Term Definition Interface Valid slot and port number separated by forward slashes. Direction The traffic direction of this interface service.
ProSafe M4100 and M7100 Managed Switches show service-policy This command displays a summary of policy-oriented statistics information for all interfaces in the specified direction. Format show service-policy {in|out} Mode Privileged EXEC The following information is repeated for each interface and direction (only those interfaces configured with an attached policy are shown): Term Definition Interface Valid slot and port number separated by forward slashes.
ProSafe M4100 and M7100 Managed Switches Format mac access-list extended Mode Global Config no mac access-list extended This command deletes a MAC ACL identified by from the system. Format no mac access-list extended Mode Global Config mac access-list extended rename This command changes the name of a MAC access control list (ACL). The parameter is the name of an existing MAC ACL.
ProSafe M4100 and M7100 Managed Switches ibmsna, ipv4, ipv6, ipx, mplsmcast, mplsucast, netbios, novell, pppoe, rarp. Each of these translates into its equivalent Ethertype value(s). The time-range parameter allows imposing time limitation on the MAC ACL rule as defined by the parameter . If a time range with the specified namedoes not exist and the MAC ACL containing this ACL rule is applied to an interface orbound to a VLAN, then the ACL rule is applied immediately.
ProSafe M4100 and M7100 Managed Switches Format {deny|permit} { | any} { | any} [ | <0x0600-0xFFFF>] [vlan {eq <0-4095>}] [cos <0-7>] [[log] [time-range ][assign-queue ]] [{mirror | redirect} ] Mode Mac-Access-List Config mac access-group This command either attaches a specific MAC access control list (ACL) identified by to an interface, or associates it with a VLAN ID, in a given direction.
ProSafe M4100 and M7100 Managed Switches no mac access-group This command removes a MAC ACL identified by from the interface in a given direction. Format no mac access-group {{control-plane|in|out} vlan vlan-id {in|out}} Modes • Global Config • Interface Config show mac access-lists This command displays a MAC access list and all of the rules that are defined for the MAC ACL. Use the [name] parameter to identify a specific MAC ACL to display.
ProSafe M4100 and M7100 Managed Switches IP Access Control List (ACL) Commands This section describes the commands you use to configure IP ACL settings. IP ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources. The following rules apply to IP ACLs: • Managed switch software does not support IP ACL configuration for IP packet fragments. • The maximum number of ACLs you can create is hardware-dependent.
ProSafe M4100 and M7100 Managed Switches Parameter Description {icmp | igmp | ip | tcp | udp | } Specifies the protocol to filter for an extended IP ACL rule. Specifies a source IP address and source netmask for match condition of the IP ACL rule. [{eq { | <0-65535>}] Specifies the source layer 4-port match condition for the IP ACL rule.
ProSafe M4100 and M7100 Managed Switches If an IP ACL by this name exists, this command enters IPv4-Access_List config mode to allow updating the existing IP ACL. Note: The CLI mode changes to IPv4-Access-List Config mode when you successfully execute this command. Format ip access-list Mode Global Config no ip access-list This command deletes the IP ACL identified by from the system.
ProSafe M4100 and M7100 Managed Switches Note: The mirror parameter allows traffic matching this rule to be copied to the specified , while the redirect parameter allows traffic matching this rule to be forwarded to the specified . The assign-queue and redirect parameters are valid only for a permit rule. A rule might either deny or permit traffic according to the specified classification fields.
ProSafe M4100 and M7100 Managed Switches number indicates higher precedence order. If a sequence number is already in use for this interface and direction, the specified access list replaces the currently attached IP access list using that sequence number. If the sequence number is not specified for this command, a sequence number that is one greater than the highest sequence number currently in use for this interface and direction is used.
ProSafe M4100 and M7100 Managed Switches show ip access-lists This command displays an IP ACL is the number used to identify the IP ACL. Format show ip access-lists Mode Privileged EXEC Note: Only the access list fields that you configure are displayed. Term Definition Rule Number The number identifier for each rule that is defined for the IP ACL. Action The action associated with each rule. The possible values are Permit or Deny.
ProSafe M4100 and M7100 Managed Switches show access-lists This command displays IP ACLs, IPv6 ACLs, and MAC access control lists information for a designated interface and direction. Format show access-lists interface [in|out] Mode Privileged EXEC Term Definition ACL Type Type of access list (IP, IPv6, or MAC). ACL ID Access List name for a MAC or IPv6 access list or the numeric identifier for an IP access list.
ProSafe M4100 and M7100 Managed Switches Format ipv6 access-list Mode Global Config no ipv6 access-list This command deletes the IPv6 ACL identified by from the system. Format no ipv6 access-list Mode Global Config ipv6 access-list rename This command changes the name of an IPv6 ACL. The parameter is the name of an existing IPv6 ACL. The parameter is a case-sensitive alphanumeric string from 1 to 31 characters uniquely identifying the IPv6 access list.
ProSafe M4100 and M7100 Managed Switches number of user configurable queues available for the hardware platform. The assign-queue parameter is valid only for a permit rule. The mirror parameter allows the traffic matching this rule to be copied to the specified , while the redirect parameter allows the traffic matching this rule to be forwarded to the specified . The assign-queue and redirect parameters are only valid for a permit rule.
ProSafe M4100 and M7100 Managed Switches Format ipv6 traffic-filter {{control-plane|in|out}|vlan {in|out}} [sequence <1-4294967295>] Modes • Global Config • Interface Config no ipv6 traffic-filter This command removes an IPv6 ACL identified by from the interface(s) in a given direction.
ProSafe M4100 and M7100 Managed Switches Term Definition Mirror Interface The slot/port to which packets matching this rule are copied. Redirect Interface The slot/port to which packets matching this rule are forwarded. Time Range Name Displays the name of the time-range if the IPv6 ACL rule has referenced a time range. Rule Status Status(Active/Inactive) of the IPv6 ACL rule. Time Range Commands for Time-Based ACLs Time-based ACLs allow one or more rules within an ACL to be based on time.
ProSafe M4100 and M7100 Managed Switches time zone. The [start time date] parameters indicate the time and date at which the configuration that referenced the time range starts going into effect. The time is expressed in a 24-hour clock, in the form of hours:minutes. For example, 8:00 is 8:00 am and 20:00 is 8:00 pm. The date is expressed in the format day month year. If no start time and date are specified, the configuration statement is in effect immediately.
ProSafe M4100 and M7100 Managed Switches no periodic Use this command to delete a periodic time entry from a time range. Format no periodic {days-of-the-week time} to {[days-of-the-week] time} Mode Time-Range Config periodic {start|end} time Use this command to configure the start/end time for the time-range.
ProSafe M4100 and M7100 Managed Switches In a VoIP system, various signaling protocols are used to establish the connection between two VoIP devices. The supported signaling protocols are SIP, H.323, and SCCP. OUI-based Auto VoIP The OUI-based Auto VoIP feature prioritizes VoIP packets based on the OUI bytes in the source MAC address. A default list of OUIs is maintained. User is also allowed to configure OUIs that need prioritization apart from the default OUI list.
ProSafe M4100 and M7100 Managed Switches no auto-voip oui This command is to delete already configured OUI. Format no auto-voip oui Mode Global Config auto-voip vlan This command is used to configure the global Auto VoIP VLAN id. The VLAN behavior is depend on the configured auto VoIP mode. Format auto-voip vlan Mode Global Config Default None no auto-voip vlan This command is used to set the auto-voip VLAN to the default 2.
ProSafe M4100 and M7100 Managed Switches Note: The administrator has to enable tagging on auto-VoIP-enabled ports to remark the voice data when it is egressed. Format auto-voip protocol-based {remark | traffic-class } Mode • Global Config • Interface Config Default Traffic-class 7 no auto-voip protocol-based {remark | traffic-class} This command is used to set the traffic-class to the default value.
ProSafe M4100 and M7100 Managed Switches Interface Auto VoIP Operational Status Mode --------- ------------------------------0/1 Disabled Down 0/2 Disabled Down 0/3 Disabled Down 0/4 Disabled Down Example: The following shows an example of a CLI display output for the command. (Netgear Switch)# show auto-voip oui-based interface all VoIP VLAN Id................................... 2 Priority.......................................
ProSafe M4100 and M7100 Managed Switches • Detecting the establishment and termination of iSCSI sessions and connections by snooping packets used in the iSCSI protocol. • Maintaining a database of currently active iSCSI sessions and connections to store data about the participants. This allows the formulation of classifier rules giving the data packets for the session the desired QoS treatment. • Installing and removing classifier rule sets as needed for the iSCSI session traffic.
ProSafe M4100 and M7100 Managed Switches also choose to use these {unreserved} ports). When a port is already defined and not bound to an IP, and the User wants to bind it to an IP, the User should first remove it by using the no form of the command and then add it again, this time together with the relevant IP. Target names are only for display when using show iscsi command. These names are not use to match (or for doing any sanity check) with the iSCSI session information acquired by snooping.
ProSafe M4100 and M7100 Managed Switches Note: SCSI flows are assigned by default to the highest VPT/DSCP mapped to the highest queue not used for stack management or voice VLAN. The user should also take care of configuring the relevant Class of Service parameters for the queue in order to complete the setting. Setting the VPT/DSCP sets the QoS profile which determines the egress queue to which the frame is mapped. The switch default setting for egress queues scheduling is Weighted Round Robin (WRR).
ProSafe M4100 and M7100 Managed Switches • When aging time is increased - Current sessions will be timed out according to the new value. • When aging time is decreased - Any sessions that have been dormant for a time exceeding the new setting will be immediately deleted from the table. All other sessions will continue to be monitored against the new time-out value.
ProSafe M4100 and M7100 Managed Switches show iscsi sessions The show iscsi sessions Privileged EXEC mode command displays the iSCSI sessions. Format show iscsi sessions [detailed] Mode • Privileged EXEC • User EXEC Default If not specified, sessions are displayed in short mode (not detailed) Term Definition detailed Displayed list is detailed when this option is used. Example: The following example displays the iSCSI sessions. Console # show iscsi sessions Target: iqn.1993-11.com.
ProSafe M4100 and M7100 Managed Switches Time for aging out: 2 min ISID: 22 Initiator IP address 172.16.1.30 172.16.1.30 Initiator TCP port 49200 49201 Target IP address 172.16.1.20 172.16.1.
9. Power over Ethernet (PoE) Commands 9 This chapter contains the following sections: • About PoE • PoE Commands About PoE Power over Ethernet describes a technology to pass electrical power safely along with data on existing Ethernet cabling. The PSE or power supply equipment is the device or switch that delivers electrical power, and the PD or powered device is the end device that powers up through the power delivered along the Ethernet cable.
ProSafe M4100 and M7100 Managed Switches PoE Commands poe Use this command to enable the Power over Ethernet (PoE) functionality on a global basis or per interface. Format poe Mode Global Config Interface Config Default enabled no poe Use this command to disable the Power over Ethernet (PoE) functionality on a global basis or per interface. Format no poe Mode Global Config Interface Config poe detection Use this command to configure the detection type on a global basis or per interface.
ProSafe M4100 and M7100 Managed Switches no poe detection Use this command to set the detection mode to the default on a global basis or per interface. Format no poe detection Mode Global Config Interface Config poe high-power Use this command to switch a port from 802.3af mode to high-power mode. This mode is used to power up devices that require more power than the current IEEE 802.3af power (more than 12.95 watts at the PD).
ProSafe M4100 and M7100 Managed Switches • user-defined—Allows you to define the maximum power to the port. This can be a value from 3 through 32 watts. Format poe power limit { class-based | none | user-defined [<3000 - 32000>] } Mode Global Config Interface Config Default User-defined, with a maximum of 30 watts no poe power limit Use this command to set the power limit type to the default. It also sets the maximum power limit to the default if the power limit type is user-defined.
ProSafe M4100 and M7100 Managed Switches Dynamic Power Management Available power = 300 watts - 3 watts = 297 watts Format poe power management {|all} {dynamic | static} Mode Global Config Default dynamic no poe power management Use this command to set the power management mode to the default. Format no poe power management {|all} Mode Global Config poe priority Use this command to configure the priority on a specific port. This is used for power management purposes.
ProSafe M4100 and M7100 Managed Switches this command takes effect only once after it is executed and cannot be saved across power cycles. Format poe reset Mode Global Config Interface Config poe timer schedule name Use this command to allow you to attach a timer schedule to a PoE port. You can define a time schedule using the existing time range commands. This schedule has start and stop times.
ProSafe M4100 and M7100 Managed Switches no poe timer schedule name Use this command to detach the schedule from the port. Format no poe timer schedule Mode Interface Config poe usagethreshold Use this command to set a threshold (as a percentage) for the total amount of power that can be delivered by the switch. For example, if the switch can deliver up to a maximum of 300 watts, a usage threshold of 90% ensures that only 270 watts are used for delivering power to devices.
ProSafe M4100 and M7100 Managed Switches no poe traps Use this command to disable logging the PoE traps. Format no poe traps Mode Global Config show poe Use this command to get global information regarding the PoE status. Format show poe Mode Privileged EXEC User EXEC Term Definition Firmware Version The firmware version of the PoE controller on the switch.
ProSafe M4100 and M7100 Managed Switches Example: (switch) #show poe Firmware Version............................... PSE Main Operational Status.................... Total Power (Main AC).......................... Total Power (RPS).............................. Total Power (PD) .............................. Power Source................................... Threshold Power................................ Total Power Consumed........................... Usage Threshold................................
ProSafe M4100 and M7100 Managed Switches show poe port info Use this command to get information about the status of the PoE ports. You can display information based on each individual port or all the ports collectively. The command displays only PSE-capable ports. Format show poe port info [ |all] Mode Privileged EXEC User EXEC Term Definition Intf Interface on which PoE is configured. Class Class of the powered device according to the IEEE802.3af and IEEE802.3at definition.
ProSafe M4100 and M7100 Managed Switches High Power Intf ------ ------0/33 No Max Power (W) ----18.0 Class ------2 Output Power Current (W) (mA) ------ ------04.400 84 Output Voltage (volt) ------53.3 Status -----------------Delivering Power Fault Status --------------No Error show poe pd Use this command to get information about the PD ports. You can display information based on each individual port or all the PD ports collectively. Note: Only the GSM5212P supports this command.
10. Utility Commands 10 This chapter describes the utility commands available in the CLI.
ProSafe M4100 and M7100 Managed Switches Auto Install Commands This section describes the Auto Install Commands. Auto Install is a software feature which provides for the configuration of a switch automatically when the device is initialized and no configuration file is found on the switch. The Auto Install process requires DHCP to be enabled by default in order for it to be completed. The downloaded config file is not automatically saved to startup-config.
ProSafe M4100 and M7100 Managed Switches boot host auto-save This command is used to enable automatically saving the downloaded configuration on the switch. Default Disabled Format boot host auto-save Mode Privileged EXEC no boot host auto-save This command is used to disable automatically saving the downloaded configuration on the switch. Format no boot host auto-save Mode Privileged EXEC boot autoinstall start The command is used to start Auto Install on the switch.
ProSafe M4100 and M7100 Managed Switches no boot host retry-count This command is used to reset the number to the default. The default number is 3. Format no boot host retry-count Mode Privileged EXEC boot host dhcp This command is used to enable AutoInstall on the switch for the next reboot cycle. The command does not change the current behavior of AutroInstall and saves the command to NVRAM.
ProSafe M4100 and M7100 Managed Switches delete This command deletes the supplied image file from the permanent storage. The image to be deleted must be a backup image. If this image is the active image, or if this image is activated, an error message displays. The optional parameter is valid only on Stacks. Error will be returned, if this parameter is provided, on Standalone systems. In a stack, the parameter identifies the node on which this command must be executed.
ProSafe M4100 and M7100 Managed Switches update bootcode This command updates the bootcode (boot loader) on the switch. The bootcode is read from the active-image for subsequent reboots. The optional parameter is valid only on Stacks. Error will be returned, if this parameter is provided, on Standalone systems. For Stacking, the parameter identifies the node on which this command must be executed. When this parameter is not supplied, the command is executed on all nodes in a Stack.
ProSafe M4100 and M7100 Managed Switches Term Definition Task Id The task ID of the event. Code The event code. Time The time this event occurred. Unit The unit for the event. Note: Event log information is retained across a switch reset. show hardware This command displays inventory information for the switch. Note: The show version command and the show hardware command display the same information. In future releases of the software, the show hardware command will not be available.
ProSafe M4100 and M7100 Managed Switches Term Definition Switch Description Text used to identify the product name of this switch. Machine Type The machine model as defined by the Vital Product Data. Machine Model The machine model as defined by the Vital Product Data Serial Number The unique box serial number for this switch. FRU Number The field replaceable unit number. Manufacturer Manufacturer descriptor field. Burned in MAC Address Universally assigned network address.
ProSafe M4100 and M7100 Managed Switches The display parameters, when the argument is “switchport” are as follows: Term Definition Packets Received Without Error The total number of packets (including broadcast packets and multicast packets) received by the processor. Broadcast Packets Received The total number of packets received that were directed to the broadcast address. Note that this does not include multicast packets.
ProSafe M4100 and M7100 Managed Switches show interface ethernet This command displays detailed statistics for a specific interface or for all CPU traffic based upon the argument. Format show interface ethernet {slot/port | switchport} Mode Privileged EXEC When you specify a value for slot/port, the command displays the following information.
ProSafe M4100 and M7100 Managed Switches Term Definition (cont) • • • • • • • • • Packets Received • Successfully • • • Receive Packets Discarded Packets RX and TX 65–127 Octets - The total number of packets (including bad packets) received and transmitted that were from 65 through 127 octets in length inclusive (excluding framing bits but including FCS octets).
ProSafe M4100 and M7100 Managed Switches Term Definition Packets Received • with MAC Errors • • • • • Received Packets • Not Forwarded • • • • • • • • Total Packets Received with MAC Errors - The total number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol.
ProSafe M4100 and M7100 Managed Switches Term Definition Packets Transmitted Octets • • • • • • • • • Packets Transmitted Successfully • • • • Total Packets Transmitted (Octets) - The total number of octets of data (including those in bad packets) received on the network (excluding framing bits but including FCS octets). This object can be used as a reasonable estimate of Ethernet utilization.
ProSafe M4100 and M7100 Managed Switches Term Definition Transmit Discards • • • • • Protocol Statistics • • • • • • • • • • • • • Dot1x Statistics • • Time Since Counters Last Cleared Total Transmit Packets Discards - The sum of single collision frames discarded, multiple collision frames discarded, and excessive frames discarded.
ProSafe M4100 and M7100 Managed Switches If you use the switchport keyword, the following information appears. Term Definition Octets Received The total number of octets of data received by the processor (excluding framing bits but including FCS octets). Total Packets The total number of packets (including broadcast packets and multicast packets) received by Received Without the processor. Error Unicast Packets Received The number of subnetwork-unicast packets delivered to a higher-layer protocol.
ProSafe M4100 and M7100 Managed Switches Term Definition VLAN Deletes The number of VLANs on this switch that have been created and then deleted since the last reboot. Time Since Counters Last Cleared The elapsed time, in days, hours, minutes, and seconds since the statistics for this switch were last cleared. show mac-addr-table This command displays the forwarding database entries. These entries are used by the transparent bridging function to determine how to forward a received frame.
ProSafe M4100 and M7100 Managed Switches Term Definition Interface Index This object indicates the ifIndex of the interface table entry associated with this port. Status The status of this entry. The meanings of the values are: • Static. The value of the corresponding instance was added by the system or a user when a static MAC filter was defined. It cannot be relearned. • Learned.
ProSafe M4100 and M7100 Managed Switches falling utilization threshold is optional. If the falling CPU utilization parameters are not configured, they take the same value as the rising CPU utilization parameters. Format process cpu threshold type total rising <1-100> interval <5-86400> {falling <1-100> interval <5-86400>} Mode Global Config Parameter Description rising threshold The percentage of CPU resources that, when exceeded for the configured rising interval, triggers a notification.
ProSafe M4100 and M7100 Managed Switches bcmCNTR.0 bcmLINK.0 DHCP snoop Dynamic ARP Inspection dot1s_timer_task dhcpsPingTask 0.20% 0.35% 0.10% 0.10% 0.10% 0.20% show mbuf total This command shows the total system buffer pools status. Format show mbuf total Mode Privileged EXEC The following shows an example of CLI display output for the command.
ProSafe M4100 and M7100 Managed Switches Note: If you issue the show running-config command from a serial connection, access to the switch through remote connections (such as Telnet) is suspended while the output is being generated and displayed.
ProSafe M4100 and M7100 Managed Switches Term Definition Switch Description Text used to identify this switch. System Name Name used to identify the switch. The factory default is blank. To configure the system name, see snmp-server on page 670. System Location Text used to identify the location of the switch. The factory default is blank. To configure the system location, see snmp-server on page 670. System Contact Text used to identify a contact person for this switch.
ProSafe M4100 and M7100 Managed Switches length Use this command to set the pagination length to value number of lines for the sessions specified by configuring on different Line Config modes (telnet, ssh, and console) and is persistent. Default 24 Format length <0|5-48> Mode Line Config no length value Use this command to set the pagination length to the default value number of lines.
ProSafe M4100 and M7100 Managed Switches memory free low-watermark processor Use this command to get notifications when the CPU free memory falls below the configured threshold. A notification is generated when the free memory falls below the threshold. Another notification is generated once the available free memory rises to 10 percent above the specified threshold.
ProSafe M4100 and M7100 Managed Switches logging buffered wrap This command enables wrapping of in-memory logging when the log file reaches full capacity. Otherwise when the log file reaches full capacity, logging stops. Default enabled Format logging buffered wrap Mode Privileged EXEC no logging buffered wrap This command disables wrapping of in-memory logging and configures logging to stop when the log file capacity is full.
ProSafe M4100 and M7100 Managed Switches no logging console This command disables logging to the console. Format no logging console Mode Global Config logging host This command enables logging to a host. You can configure up to eight hosts. The is the IP address of the logging host. The indicates the type of address ipv4 or ipv6 or dns being passed. The value is a port number from 1 to 65535.
ProSafe M4100 and M7100 Managed Switches no logging syslog This command disables syslog logging. Format no logging syslog Mode Global Config logging syslog source-interface This command configures the syslog source-interface. Format logging syslog source-interface { | {loopback } | {tunnel }} Mode Global Config show logging This command displays logging configuration information.
ProSafe M4100 and M7100 Managed Switches show logging buffered This command displays buffered logging (system startup and system operation logs). Format show logging buffered Mode Privileged EXEC Term Definition Buffered (In-Memory) Logging Shows whether the In-Memory log is enabled or disabled. Buffered Logging Wrapping Behavior The behavior of the In Memory log when faced with a log full situation. Buffered Log Count The count of valid entries in the buffered log.
ProSafe M4100 and M7100 Managed Switches Term Definition Number of Traps Since Last Reset The number of traps since the last boot. Trap Log Capacity The number of traps the system can retain. Number of The number of new traps since the command was last executed. Traps Since Log Last Viewed Log The log number. System Time Up How long the system had been running at the time the trap was sent. Trap The text of the trap message.
ProSafe M4100 and M7100 Managed Switches Format logging email [] Mode Global Config no logging email This command disables email alerting. Format no logging email Mode Global Config logging email urgent This command sets the lowest severity level at which log messages are emailed immediately in a single email message.
ProSafe M4100 and M7100 Managed Switches no logging email message-type to-addr This command removes the configured to-addr field of email. Format no logging email message-type {urgent |non-urgent |both} to-addr Mode Global Config logging email from-addr This command configures the email address of the sender (the switch). Default switch@netgear.
ProSafe M4100 and M7100 Managed Switches logging email logtime This command configures how frequently non-urgent email messages are sent. Non-urgent messages are collected and sent in a batch email at the specified interval. The valid range is every 30- 1440 minutes. Default 30 minutes Format logging email logtime Mode Global Config no logging email logtime This command resets the non-urgent log time to the default value.
ProSafe M4100 and M7100 Managed Switches show logging email config This command displays information about the email alert configuration. Format show logging email config Mode Privileged EXEC Term Definition Email Alert Logging The administrative status of the feature: enabled or disabled Email Alert From Address The email address of the sender (the switch). Email Alert Urgent Severity Level The lowest severity level that is considered urgent. Messages of this type are sent immediately.
ProSafe M4100 and M7100 Managed Switches Term Definition No of Email Sent The number of email messages that were sent from the switch since the counter was cleared. Time Since Last Email Sent The amount of time that has passed since the last email was sent from the switch. clear logging email statistics This command resets the email alerting statistics.
ProSafe M4100 and M7100 Managed Switches port Use this command to configure the TCP port to use for communication with the SMTP server. The recommended port for TLSv1 is 465, and for no security (i.e. none) it is 25. However, any nonstandard port in the range 1–65,535 is also allowed. Default 25 Format port {465 | 25 | 1–65535} Mode Mail Server Config username Use this command to configure the login ID that the switch uses to authenticate with the SMTP server.
ProSafe M4100 and M7100 Managed Switches Term Definition Email Alert Username The username the switch uses to authenticate with the SMTP server. Email Alert Password The password the switch uses to authenticate with the SMTP server. System Utility and Clear Commands This section describes the commands you use to help troubleshoot connectivity issues and to restore various configurations to their factory defaults.
ProSafe M4100 and M7100 Managed Switches Parameter Description interval Use interval to specify the time between probes, in seconds. Range is 1–60 seconds. count Use the optional count parameter to specify the number of probes to send for each TTL value. Range is 1–10 probes. port Use the optional port parameter to specify destination UDP port of the probe. This should be an unused port on the remote destination system. Range is 1–65,535.
ProSafe M4100 and M7100 Managed Switches of the traceroute. This port should be an unused port on the destination system. The range for is zero (0) to 65535. The default value is 33434. Default port: 33434 Format traceroute ipv6 [port ] Mode Privileged EXEC clear config This command resets the configuration to the factory defaults without powering off the switch. When you issue this command, a prompt appears to confirm that the reset should proceed.
ProSafe M4100 and M7100 Managed Switches clear counters This command clears the statistics for a specified , for all the ports, or for the entire switch based upon the argument. Format clear counters { | all} Mode Privileged EXEC clear igmpsnooping This command clears the tables managed by the IGMP Snooping function and attempts to delete these entries from the Multicast Forwarding Database.
ProSafe M4100 and M7100 Managed Switches enable password This command prompts you to change the Privileged EXEC password. Passwords are a maximum of 64 alphanumeric characters. The password is case-sensitive. The option [encrypted] allows the administrator to transfer the enable password between devices without having to know the password. In this case, the parameter must be exactly 128 hexadecimal characters.
ProSafe M4100 and M7100 Managed Switches Using the options described below, you can specify the number and size of Echo Requests and the interval between Echo Requests. Parameter Description count Use the count parameter to specify the number of ping packets (ICMP Echo requests) that are sent to the destination address specified by the field. The range for is 1–15 requests. interval Use the interval parameter to specify the time between Echo Requests, in seconds.
ProSafe M4100 and M7100 Managed Switches command, configure the switch for network (in-band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP. The switch can be pinged from any IP workstation with which the switch is connected through the default VLAN (VLAN 1), as long as there is a physical path between the switch and the workstation. The terminal interface sends three pings to the target station.
ProSafe M4100 and M7100 Managed Switches quit This command closes the current telnet connection or resets the current serial connection. The system asks you whether to save configuration changes before quitting. Format quit Modes • Privileged EXEC • User EXEC reload This command resets the switch without powering it off. Reset means that all network connections are terminated and the boot code executes. The switch uses the stored configuration to initialize the switch.
ProSafe M4100 and M7100 Managed Switches In the copy url ias-users command, for url, use one of the following for the IAS user's file: { { tftp:// | // } sftp | scp://@//} } | { The maximum length for the file path is 160 characters, and the maximum length for the file name is 31 characters.
ProSafe M4100 and M7100 Managed Switches Source Destination Description nvram:traplog Copies the trap log file to a server. system:running-config nvram:startup-config Saves the running configuration to nvram. nvram:clibanner Downloads the CLI banner to the system. nvram:script Downloads a configuration script file to the system. During the download of a configuration script, the copy command validates the script.
ProSafe M4100 and M7100 Managed Switches Source Destination Description {image1 | image2} unit:///{image1 | image2} Copy an image from the management node to a given node in a Stack. Use the unit parameter to specify the node to which the image should be copied. {image1 | image2} unit://*/{image1 | image2} Copy an image from the management node to all of the nodes in a Stack.
ProSafe M4100 and M7100 Managed Switches sntp client mode This command enables Simple Network Time Protocol (SNTP) client mode and might set the mode to either broadcast or unicast. Default disabled Format sntp client mode [broadcast | unicast] Mode Global Config no sntp client mode This command disables Simple Network Time Protocol (SNTP) client mode. Format no sntp client mode Mode Global Config sntp client port This command sets the SNTP client port id to a value from 1-65,535.
ProSafe M4100 and M7100 Managed Switches no sntp unicast client poll-interval This command resets the poll interval for SNTP unicast clients to its default value. Format no sntp unicast client poll-interval Mode Global Config sntp unicast client poll-timeout This command will set the poll timeout for SNTP unicast clients in seconds to a value from 1-30.
ProSafe M4100 and M7100 Managed Switches sntp server This command configures an SNTP server (a maximum of three). The optional priority can be a value of 1-3, the version a value of 1-4, and the port id a value of 1-65535. Format sntp server [ [ []]] Mode Global Config no sntp server This command deletes an server from the configured SNTP servers.
ProSafe M4100 and M7100 Managed Switches clock set This command sets the system time and date. Format clock set clock set Mode Global Config clock summer-time recurring Use the clock summer-time recurring command to set the summertime offset to UTC recursively every year. If the optional parameters are not specified, they are read as either '0' or '\0', as appropriate. Use the following parameters to configure the summer-time.
ProSafe M4100 and M7100 Managed Switches • offset—Number of minutes to add during the summertime. (Range:1-1440) • acronym—The acronym for the time zone to be displayed when summertime is in effect.
ProSafe M4100 and M7100 Managed Switches Term Definition Broadcast Count Current number of unsolicited broadcast messages that have been received and processed by the SNTP client since last reboot. Multicast Count Current number of unsolicited multicast messages that have been received and processed by the SNTP client since last reboot. show sntp client This command is used to display SNTP client settings.
ProSafe M4100 and M7100 Managed Switches For each configured server: Term Definition Host Address IP address or hostname of configured SNTP Server. Address Type Address Type of configured SNTP server. Priority IP priority type of the configured server. Version SNTP Version number of the server. The protocol version used to query the server in unicast mode. Port Server Port Number. Last Attempt Time Last server attempt time for the specified server.
ProSafe M4100 and M7100 Managed Switches DHCP Server Commands This section describes the commands you to configure the DHCP server settings for the switch. DHCP uses UDP as its transport protocol and supports a number of features that facilitate in administration address allocations. ip dhcp pool This command configures a DHCP address pool name on a DHCP server and enters DHCP pool configuration mode.
ProSafe M4100 and M7100 Managed Switches client-name This command specifies the name for a DHCP client. Name is a string consisting of standard ASCII characters. Default none Format client-name Mode DHCP Pool Config no client-name This command removes the client name. Format no client-name Mode DHCP Pool Config default-router This command specifies the default router list for a DHCP client.
ProSafe M4100 and M7100 Managed Switches no dns-server This command removes the DNS Server list. Format no dns-server Mode DHCP Pool Config hardware-address This command specifies the hardware address of a DHCP client. Hardware-address is the MAC address of the hardware platform of the client consisting of 6 bytes in dotted hexadecimal format. Type indicates the protocol of the hardware platform. It is 1 for 10 MB Ethernet and 6 for IEEE 802.
ProSafe M4100 and M7100 Managed Switches lease This command configures the duration of the lease for an IP address that is assigned from a DHCP server to a DHCP client. The overall lease time should be between 1-86400 minutes. If you specify infinite, the lease is set for 60 days. You can also specify a lease duration. Days is an integer from 0 to 59. Hours is an integer from 0 to 23. Minutes is an integer from 0 to 59.
ProSafe M4100 and M7100 Managed Switches no bootfile This command deletes the boot image name. Format no bootfile Mode DHCP Pool Config domain-name This command specifies the domain name for a DHCP client. The specifies the domain name string of the client. Default none Format domain-name Mode DHCP Pool Config no domain-name This command removes the domain name.
ProSafe M4100 and M7100 Managed Switches netbios-node-type The command configures the NetBIOS node type for Microsoft Dynamic Host Configuration Protocol (DHCP) clients. type specifies the NetBIOS node type. Valid types are: • b-node—Broadcast • p-node—Peer-to-peer • m-node—Mixed • h-node—Hybrid (recommended) Default none Format netbios-node-type Mode DHCP Pool Config no netbios-node-type This command removes the NetBIOS node Type.
ProSafe M4100 and M7100 Managed Switches period (for example, a3.4f.22.0c), colon (for example, a3:4f:22:0c), or white space (for example, a3 4f 22 0c). Default none Format option {ascii string | hex [...] | ip [...]} Mode DHCP Pool Config no option This command removes the DHCP Server options. The parameter specifies the DHCP option code.
ProSafe M4100 and M7100 Managed Switches Format ip dhcp ping packets <0,2-10> Mode Global Config no ip dhcp ping packets This command prevents the server from pinging pool addresses and sets the number of packets to 0. Default 0 Format no ip dhcp ping packets Mode Global Config service dhcp This command enables the DHCP server. Default disabled Format service dhcp Mode Global Config no service dhcp This command disables the DHCP server.
ProSafe M4100 and M7100 Managed Switches ip dhcp conflict logging This command enables conflict logging on DHCP server. Default enabled Format ip dhcp conflict logging Mode Global Config no ip dhcp conflict logging This command disables conflict logging on DHCP server. Format no ip dhcp conflict logging Mode Global Config clear ip dhcp binding This command deletes an automatic address binding from the DHCP server database.
ProSafe M4100 and M7100 Managed Switches show ip dhcp binding This command displays address bindings for the specific IP address on the DHCP server. If no IP address is specified, the bindings corresponding to all the addresses are displayed. Format show ip dhcp binding [
] Modes • Privileged EXEC • User EXEC Term Definition IP address The IP address of the client. Hardware Address The MAC Address or the client identifier.ProSafe M4100 and M7100 Managed Switches Field Definition Pool Name The name of the configured pool. Pool Type The pool type. Lease Time The lease expiration time of the IP address assigned to the client. DNS Servers The list of DNS servers available to the DHCP client .
ProSafe M4100 and M7100 Managed Switches Message Received: Message Definition DHCP DISCOVER The number of DHCPDISCOVER messages the server has received. DHCP REQUEST The number of DHCPREQUEST messages the server has received. DHCP DECLINE The number of DHCPDECLINE messages the server has received. DHCP RELEASE The number of DHCPRELEASE messages the server has received. DHCP INFORM The number of DHCPINFORM messages the server has received.
ProSafe M4100 and M7100 Managed Switches ip domain lookup Use this command to enable the DNS client. Default enabled Format ip domain lookup Mode Global Config no ip domain lookup Use this command to disable the DNS client. Format no ip domain lookup Mode Global Config ip domain name Use this command to define a default domain name that the software uses to complete unqualified host names (names with a domain name). By default, no default domain name is configured in the system.
ProSafe M4100 and M7100 Managed Switches name command, is used only when the default domain name list is empty. A maximum of 32 names can be entered in to this list. Default none Format ip domain list Mode Global Config no ip domain list Use this command to delete a name from a list. Format no ip domain list Mode Global Config ip name server Use this command to configure the available name servers. Up to eight servers can be defined in one command or by using multiple commands.
ProSafe M4100 and M7100 Managed Switches no ip host Use this command to remove the name-to-address mapping. Format no ip host Mode Global Config ipv6 host Use this command to define static host name-to-IPv6 address mapping in the host cache. is host name. is the IPv6 address of the host. Default none Format ipv6 host Mode Global Config no ipv6 host Use this command to remove the static host name-to-IPv6 address mapping in the host cache.
ProSafe M4100 and M7100 Managed Switches ip domain timeout Use this command to specify the amount of time to wait for a response to a DNS query. The parameter specifies the time, in seconds, to wait for a response to a DNS query. ranges from 0 to 3600. Default 3 Format ip domain timeout Mode Global Config no ip domain timeout Use this command to return to the default setting.
ProSafe M4100 and M7100 Managed Switches Field Description Default Domain Default domain list. List Domain Name Lookup DNS client enabled/disabled. Number of Retries Number of time to retry sending Domain Name System (DNS) queries. Retry Timeout Period Amount of time to wait for a response to a DNS query. Name Servers Configured name servers. Example: The following shows example CLI display output for the command. show hosts Host name......................... Default domain..............
ProSafe M4100 and M7100 Managed Switches packets are captured and capturing packets is stopped automatically.The packet capture operates in three modes: • Capture file • Remote capture • Capture line The command is not persistent across a reboot cycle. Format capture {start|stop} {transmit|receive|all} Mode Privileged EXEC capture {file|remote|line} Use this command to configure file capture options. The command is persistent across a reboot cycle.
ProSafe M4100 and M7100 Managed Switches no capture Use this command to reset the capture mode to remote mode. Format no capture Mode Global Config capture remote port Use this command to configure file capture options. The command is persistent across a reboot cycle. Default 2002 Format capture remote port Mode Global Config no capture remote port Use this command to reset the remote port to the default (2002).
ProSafe M4100 and M7100 Managed Switches displayed during the capturing session. When capturing is in progress, unsaved, not-yet-displayed packets will not be lost. Default Disabled Format capture line wrap Mode Global Config no capture line wrap Use this command to disable the capture line wrap mode. Format no capture line wrap Mode Global Config show capture packets Use this command to display packets captured and saved to RAM.
ProSafe M4100 and M7100 Managed Switches Format debug arp Mode Privileged EXEC no debug arp Use this command to disable ARP debug protocol messages. Format no debug arp Mode Privileged EXEC debug auto-voip Use this command to enable Auto VOIP debug messages. Use the optional parameters to trace H323, SCCP, or SIP packets respectively. Default disabled Format debug auto-voip [H323|SCCP|SIP] Mode Privileged EXEC no debug auto-voip Use this command to disable Auto VOIP debug messages.
ProSafe M4100 and M7100 Managed Switches Format debug console Mode Privileged EXEC no debug console This command disables the display of “debug” trace output on the login session in which it is executed. Format no debug console Mode Privileged EXEC debug crashlog Use this command to view information contained in the crash log file that the system maintains when it experiences an unexpected reset.
ProSafe M4100 and M7100 Managed Switches Parameter Definition proc View the application process crashlog. verbose Enable the verbose crashlog deleteall Delete all crash log files on the system. debug dhcp packet Use this command to display “debug” information about DHCPv4 client activities and trace DHCPv4 packets to and from the local DHCPv4 client.
ProSafe M4100 and M7100 Managed Switches Format debug igmpsnooping packet Mode Privileged EXEC no debug igmpsnooping packet This command disables tracing of IGMP Snooping packets. Format no debug igmpsnooping packet Mode Privileged EXEC debug igmpsnooping packet transmit This command enables tracing of IGMP Snooping packets transmitted by the switch. Snooping should be enabled on the device and the interface in order to monitor packets for a particular interface.
ProSafe M4100 and M7100 Managed Switches Parameter Definition Type The type of IGMP packet. Type can be one of the following: • Membership Query – IGMP Membership Query • V1_Membership_Report – IGMP Version 1 Membership Report • V2_Membership_Report – IGMP Version 2 Membership Report • V3_Membership_Report – IGMP Version 3 Membership Report • V2_Leave_Group – IGMP Version 2 Leave Group Group Multicast group address in the IGMP header.
ProSafe M4100 and M7100 Managed Switches Parameter Definition Type The type of IGMP packet. Type can be one of the following: • Membership_Query – IGMP Membership Query • V1_Membership_Report – IGMP Version 1 Membership Report • V2_Membership_Report – IGMP Version 2 Membership Report • V3_Membership_Report – IGMP Version 3 Membership Report • V2_Leave_Group – IGMP Version 2 Leave Group Group Multicast group address in the IGMP header.
ProSafe M4100 and M7100 Managed Switches no debug ip dvmrp packet Use this command to disable debug tracing of DVMRP packet reception and transmission. Format no debug ip dvmrp packet [receive|transmit] Mode Privileged EXEC debug ip igmp packet Use this command to trace IGMP packet reception and transmission. receive traces only received IGMP packets and transmit traces only transmitted IGMP packets. When neither keyword is used in the command, then all IGMP packet traces are dumped.
ProSafe M4100 and M7100 Managed Switches debug ip pimdm packet Use this command to trace PIMDM packet reception and transmission. receive traces only received PIMDM packets and transmit traces only transmitted PIMDM packets. When neither keyword is used in the command, then all PIMDM packet traces are dumped. Vital information such as source address, destination address, control packet type, packet length, and the interface on which the packet is received or transmitted is displayed on the console.
ProSafe M4100 and M7100 Managed Switches no debug ip vrrp Use this command to disable VRRP debug protocol messages. Format no debug ip vrrp Mode Privileged EXEC debug ipv6 dhcp Use this command to display “debug” information about DHCPv6 client activities and trace DHCPv6 packets to and from the local DHCPv6 client. Default disabled Format debug ipv6 dhcp Mode Privileged EXEC no ipv6 debug dhcp Use this command to disable the display of “debug” trace output for DHCPv6 client activity.
ProSafe M4100 and M7100 Managed Switches debug ipv6 mld packet Use this command to trace MLDv6 packet reception and transmission. receive traces only received MLDv6 packets and transmit traces only transmitted MLDv6 packets. When neither keyword is used in the command, then all MLDv6 packet traces are dumped. Vital information such as source address, destination address, control packet type, packet length, and the interface on which the packet is received or transmitted is displayed on the console.
ProSafe M4100 and M7100 Managed Switches Format debug ipv6 pimsm packet [receive|transmit] Mode Privileged EXEC no debug ipv6 pimsm packet Use this command to disable debug tracing of PIMSMv6 packet reception and transmission. Format no debug ipv6 pimsm packet [receive|transmit] Mode Privileged EXEC debug lacp packet This command enables tracing of LACP packets received and transmitted by the switch.
ProSafe M4100 and M7100 Managed Switches no debug mldsnooping packet Use this command to disable debug tracing of MLD snooping packet reception and transmission. debug ospf packet This command enables tracing of OSPF packets received and transmitted by the switch. Default disabled Format debug ospf packet Mode Privileged EXEC Sample outputs of the trace messages are shown below. <15> JAN 02 11:03:31 10.50.50.1-2 OSPF[46300472]: ospf_debug.c(297) 25430 % Pkt RX Intf:2/0/48 Src Ip:192.168.50.
ProSafe M4100 and M7100 Managed Switches Parameter Definition AreaId The area ID in the OSPF header of the packet. Type Could be one of the following: HELLO – Hello packet DB_DSCR – Database descriptor LS_REQ – LS Request LS_UPD – LS Update LS_ACK – LS Acknowledge The remaining fields in the trace are specific to the type of OSPF Packet. HELLO packet field definitions: Parameter Definition Netmask The netmask in the hello packet. DesignRouter Designated Router IP address.
ProSafe M4100 and M7100 Managed Switches LS_ACK packet field definitions. Field Definition Length Length of packet no debug ospf packet This command disables tracing of OSPF packets. Format no debug ospf packet Mode Privileged EXEC debug ipv6 ospfv3 packet Use this command to enable OSPFv3 packet debug trace. Default disabled Format debug ipv6 ospfv3 packet Mode Privileged EXEC no debug ipv6 ospfv3 packet Use this command to disable tracing of OSPFv3 packets.
ProSafe M4100 and M7100 Managed Switches The following parameters are displayed in the trace message: Parameter Definition TX/RX TX refers to a packet transmitted by the device. RX refers to packets received by the device. Intf The interface that the packet came in or went out on. Format used is slot/port (internal interface number). Unit is always shown as 1 for interfaces on a non-stacking device. SRC_IP The source IP address in the IP header in the packet.
ProSafe M4100 and M7100 Managed Switches The following parameters are displayed in the trace message: Parameter Definition TX/RX TX refers to a packet transmitted by the device. RX refers to packets received by the device. Intf The interface that the packet came in or went out on. Format used is slot/port (internal interface number). Unit is always shown as 1 for interfaces on a non-stacking device. Src_IP The source IP address in the IP header of the packet.
ProSafe M4100 and M7100 Managed Switches debug spanning-tree bpdu This command enables tracing of spanning tree BPDUs received and transmitted by the switch. Default disabled Format debug spanning-tree bpdu Mode Privileged EXEC no debug spanning-tree bpdu This command disables tracing of spanning tree BPDUs. Format no debug spanning-tree bpdu Mode Privileged EXEC debug spanning-tree bpdu receive This command enables tracing of spanning tree BPDUs received by the switch.
ProSafe M4100 and M7100 Managed Switches no debug spanning-tree bpdu receive This command disables tracing of received spanning tree BPDUs. Format no debug spanning-tree bpdu receive Mode Privileged EXEC debug spanning-tree bpdu transmit This command enables tracing of spanning tree BPDUs transmitted by the switch. Spanning tree should be enabled on the device and on the interface in order to monitor packets on a particular interface.
ProSafe M4100 and M7100 Managed Switches debug udld packet This command enables debugging on the received and transmitted UDLD PDU’s. Format default udld packet receive Mode Privileged EXEC Default Disabled no debug udld packet This command disables debugging on the received and transmitted UDLD PDU’s. Format debug udld packet receive Mode Privileged EXEC debug udld packet receive This command enables debugging on the received UDLD PDU’s.
ProSafe M4100 and M7100 Managed Switches debug aaa accounting This command is useful for debugging accounting configuration and functionality in User Manager. Format debug aaa accounting Mode Privileged EXEC no debug aaa accounting Use this command to turn off debugging of User Manager accounting functionality. Format no debug aaa accounting Mode Privileged EXEC debug aaa authorization This command is useful for debugging authorization configuration and functionality in User Manager.
ProSafe M4100 and M7100 Managed Switches cablestatus This command returns the status of the specified port. Format cablestatus Mode Privileged EXEC Field Description Cable Status One of the following statuses is returned: • Normal: The cable is working correctly. • Open: The cable is disconnected or there is a faulty connector. • Short: There is an electrical short in the cable. • Cable Test Failed: The cable status could not be determined. The cable may in fact be working.
ProSafe M4100 and M7100 Managed Switches Field Description Receiver Owner The identity string for the receiver, the entity making use of this sFlowRcvrTable entry. The range is 127 characters. The default is a null string. The empty string indicates that the entry is currently unclaimed and the receiver configuration is reset to the default values. An entity wishing to claim an sFlowRcvrTable entry must ensure that the entry is unclaimed before trying to claim it.
ProSafe M4100 and M7100 Managed Switches Field Description Receiver Index The sFlow Receiver for this sFlow sampler to which flow samples are to be sent. A value of zero (0) means that no receiver is configured, no packets will be sampled. Only active receivers can be set. If a receiver expires, then all samplers associated with the receiver will also expire. Possible values are 1-8. The default is 0. Maxheadersize The maximum number of bytes that should be copied from the sampler packet.
ProSafe M4100 and M7100 Managed Switches show sflow agent The sFlow agent collects time-based sampling of network interface statistics and flow-based samples. These are sent to the configured sFlow receivers. Use this command to display the sFlow agent information. Format show sflow agent Mode Privileged EXEC Field Description sFlow Version Uniquely identifies the version and implementation of this MIB.
ProSafe M4100 and M7100 Managed Switches show sflow receivers Use this command to display configuration information related to the sFlow receivers. Format show sflow receivers [] Mode Privileged EXEC Field Description Receiver Index The sFlow Receiver associated with the sampler/poller. Owner String The identity string for receiver, the entity making use of this sFlowRcvrTable entry.
ProSafe M4100 and M7100 Managed Switches Field Description Sampler Data Source The sFlowDataSource (slot/port) for this sFlow sampler. This agent will support Physical ports only. Receiver Index The sFlowReceiver configured for this sFlow sampler. Packet Sampling Rate The statistical sampling rate for packet sampling from this source. Max Header Size The maximum number of bytes that should be copied from a sampled packet to form a flow sample.
ProSafe M4100 and M7100 Managed Switches (Managed Switches) # show license features This command displays the features that are licensed on the switch Format show license features Mode Privileged EXEC Example: The following shows example CLI display output for the command.
ProSafe M4100 and M7100 Managed Switches Term Definition Last Conflicting The MAC Address of the conflicting host that was last detected on any interface. MAC Address Time Since Conflict Detected The time in days, hours, minutes and seconds since the last address conflict was detected. clear ip address-conflict-detect This command clears the detected address conflict status information.
ProSafe M4100 and M7100 Managed Switches show llpf interface all Use this command to display the status of LLPF rules configured on a particular port or on all ports. Format show llpf interface [all | slot/port] Mode Privileged EXEC Term Definition Block ISDP Shows whether the port blocks ISDP PDUs. Block VTP Shows whether the port blocks VTP PDUs. Block DTP Shows whether the port blocks DTP PDUs. Block UDLD Shows whether the port blocks UDLD PDUs.
ProSafe M4100 and M7100 Managed Switches • Group 9 - Event Controls the actions that are taken when an event occurs. RMON events occur when: • A threshold (alarm) is exceeded • There is a match on certain filters. RFC 3273 • Group 1 - Media Independent Group Contains media-independent statistics that provide information for full and/or half-duplex links as well as high capacity links.
ProSafe M4100 and M7100 Managed Switches Parameter Description Sample Interval The interval in seconds over which the data is sampled and compared with the rising and falling thresholds. The range is 0 to 2147483647. The default is 0. Alarm Sample Type The alarm sample type. The method of sampling the selected variable and calculating the value to be compared against thresholds. Possible types are Absolute or Delta. Alarm Rising Threshold Value The alarm rising threshold for the sample statistics.
ProSafe M4100 and M7100 Managed Switches Parameter Description Rising-Threshold Low Value High capacity alarm rising threshold absolute value low. The lower 32 bits of the absolute value for threshold for the sampled statistics. Falling-Threshold High Value High capacity alarm falling threshold absolute value high. The upper 32 bits of the absolute value for threshold for the sampled statistic. Falling-Threshold Low Value High capacity alarm falling threshold absolute value high.
ProSafe M4100 and M7100 Managed Switches rmon collection history This command sets the history control parameters of the RMON historyControl mib group. Format Mode rmon collection history buckets <1-65535> | interval <1-3600> | owner Interface Config no rmon collection history This command deletes the history control group entry with the specified index number.
ProSafe M4100 and M7100 Managed Switches show rmon history This command displays the specified entry in the RMON history table. Format show rmon history {errors|other|throughput} Mode Privileged Exec Example: (Swtich) # show rmon history 1 throughput Sample set: 1 Maximum table size: 270 Time Octets Packets Broadcast Multicast Util -------------------- ---------- --------- --------- ---------- -------- show rmon log This command displays the entries in the RMON log table.
ProSafe M4100 and M7100 Managed Switches show rmon {hcalarms | hcalarm } This command displays the entries in the RMON hcAlarmTable. Format show rmon {hcalarms | hcalarm } Mode Privileged Exec UDLD Commands The UDLD feature detects unidirectional links physical ports. A unidirectional link is a forwarding anomaly in a Layer 2 communication channel in which a bi-directional link stops passing traffic in one direction.
ProSafe M4100 and M7100 Managed Switches udld timeout interval This command configures the time interval after which UDLD link is considered to be unidirectional. The range is from 5 to 60 seconds. Default 5 Format udld timeout interval Mode Global Config udld enable This command enables UDLD on the specified interface. Default disabled Format udld enable Mode Interface Config no udld enable This command disables udld on the specified interface.
ProSafe M4100 and M7100 Managed Switches show udld This command displays the global settings of UDLD. Format show udld Mode Privileged EXEC Term Definition Admin Mode The global administrative mode of UDLD. Message Interval The time period (in seconds) between the transmission of UDLD probe packets. Timeout Interval The time period (in seconds) before making decision that link is unidirectional. show udld This command displays the UDLD settings for the specified .
ProSafe M4100 and M7100 Managed Switches show usb device This command displays USB flash device details. Format show USB device Mode Privileged EXEC Parameter Description Device Status This field specifies the current status of device. Following are possible device status states: • Active. Device is plugged in and the device is recognized if device is not mounted. • Inactive. Device is not mounted. • Invalid. Device is not present or invalid device is plugged in. Manufacturer Manufacturer details.
ProSafe M4100 and M7100 Managed Switches Parameter Description Filename File name Filesize File size Total Size USB flash device storage size Bytes Used Indicates size of memory used on the device. Bytes Free Indicates size of memory free on the device Example: (switch) #dir USB: Filename Filesize Modification Time F1.
11. Management Commands 11 This chapter describes the management commands available in the managed switch CLI.
ProSafe M4100 and M7100 Managed Switches Configuring the Switch Management CPU To manage the switch via the web GUI or telnet, an IP address needs to be assigned to the switch management CPU. Whereas there are CLI commands that can be used to do this, ezconfig simplifies the task. The tool is applicable to all NETGEAR 7000-series managed switches, and allows you to configure the following parameters: 1. The administrator’s user password and administrator-enable password 2.
ProSafe M4100 and M7100 Managed Switches The following is an example of an ezconfig session. NETGEAR EZ Configuration Utility -------------------------------Hello and Welcome! This utility will walk you thru assigning the IP address for the switch management CPU. It will allow you to save the changes at the end. After the session, simply use the newly assigned IP address to access the Web GUI using any public domain Web browser. Admin password not defined.
ProSafe M4100 and M7100 Managed Switches Network Interface Commands This section describes the commands you use to configure a logical interface for management access. To configure the management VLAN, see step on page 47. enable (Privileged EXEC access) Use this command to access the Privileged EXEC mode. From the Privileged EXEC mode, you can configure the network interface. Format enable Mode User EXEC network parms Use this command to set the IP address, subnet mask, and gateway of the device.
ProSafe M4100 and M7100 Managed Switches A locally administered address must have bit 6 On (b'1') and bit 7 Off (b'0'). Format network mac-address Mode Privileged EXEC network mac-type Use this command to specify whether the switch uses the burned in MAC address or the locally administered MAC address. Default burnedin Format network mac-type {local | burnedin} Mode Privileged EXEC no network mac-type Use this command to reset the value of MAC address to its default.
ProSafe M4100 and M7100 Managed Switches the switch's network interface do not affect the configuration of the front panel ports through which traffic is switched or routed. The network interface is always considered to be up, whether any member ports are up; therefore, the show network command will always show “Interface Status” as “Up”. Format show network Modes • Privileged EXEC • User EXEC Term Definition Interface Status The network interface status; it is always considered to be “up”.
ProSafe M4100 and M7100 Managed Switches IPv6 Address/Length is ........................ IPv6 Default Router is ........................ Burned In MAC Address.......................... Locally Administered MAC Address............... MAC Address Type............................... Network Configuration Protocol Current......... Management VLAN ID............................. Web Mode....................................... Java Mode......................................
ProSafe M4100 and M7100 Managed Switches no serial baudrate Use this command to set the communication rate of the terminal interface. Format no serial baudrate Mode Line Config serial timeout Use this command to specify the maximum connect time (in minutes) without console activity. A value of 0 indicates that a console can be connected indefinitely. The time range is 0–160.
ProSafe M4100 and M7100 Managed Switches enable authentication Use this command in line configuration mode to specify an authentication method list when the user accesses a higher privilege level in remote telnet or console. Format enable authentication {default | list-name} Mode Line Config no enable authentication Use this command to return to the default specified by the enable authentication command.
ProSafe M4100 and M7100 Managed Switches ip telnet server enable Use this command to enable Telnet connections to the system and to enable the Telnet Server Admin Mode. This command opens the Telnet listening port. Default enabled Format ip telnet server enable Mode Privileged EXEC no ip telnet server enable Use this command to disable Telnet access to the system and to disable the Telnet Server Admin Mode. This command closes the Telnet listening port and disconnects all open Telnet sessions.
ProSafe M4100 and M7100 Managed Switches Default enabled Format transport input telnet Mode Line Config no transport input telnet Use this command to prevent new Telnet sessions from being established. Format no transport input telnet Mode Line Config transport output telnet Use this command to regulate new outbound Telnet connections. If enabled, new outbound Telnet sessions can be established until the system reaches the maximum number of simultaneous outbound Telnet sessions allowed.
ProSafe M4100 and M7100 Managed Switches no session-limit Use this command to set the maximum number of simultaneous outbound Telnet sessions to the default value. Format no session-limit Mode Line Config session-timeout Use this command to set the Telnet session timeout value. The timeout value unit of time is minutes. Default 5 Format session-timeout <1-160> Mode Line Config no session-timeout Use this command to set the Telnet session timeout value to the default.
ProSafe M4100 and M7100 Managed Switches telnetcon timeout Use this command to set the Telnet connection session timeout value, in minutes. A session is active as long as the session has not been idle for the value set. The time is a decimal value from 1 to 160. Note: When you change the timeout value, the new value is applied to all active and inactive sessions immediately. Any sessions that have been idle longer than the new timeout value are disconnected immediately.
ProSafe M4100 and M7100 Managed Switches Term Definition Outbound Telnet Login Timeout The number of minutes an outbound Telnet session is allowed to remain inactive before being logged off. Maximum The number of simultaneous outbound Telnet connections allowed. Number of Outbound Telnet Sessions Allow New Indicates whether outbound Telnet sessions will be allowed. Outbound Telnet Sessions show telnetcon Use this command to display the current inbound Telnet settings.
ProSafe M4100 and M7100 Managed Switches ip ssh Use this command to enable SSH access to the system. (This command is the short form of the ip ssh server enable command.) Default disabled Format ip ssh Mode Privileged EXEC ip ssh protocol Use this command to set or remove protocol levels (or versions) for SSH. Either SSH1 (1), SSH2 (2), or both SSH 1 and SSH 2 (1 and 2) can be set.
ProSafe M4100 and M7100 Managed Switches no sshcon maxsessions Use this command to set the maximum number of allowed SSH connection sessions to the default value. Format no sshcon maxsessions Mode Privileged EXEC sshcon timeout Use this command to set the SSH connection session timeout value, in minutes. A session is active as long as the session has been idle for the value set. The time is a decimal value from 1 to 160.
ProSafe M4100 and M7100 Managed Switches Term Definition Max SSH Sessions Allowed The maximum number of SSH sessions allowed. SSH Timeout The SSH timeout value in minutes. Keys Present Indicates whether the SSH RSA and DSA key files are present on the device. Key Generation Indicates whether RSA or DSA key files generation is currently in progress.
ProSafe M4100 and M7100 Managed Switches no crypto key generate rsa Use this command to delete the RSA key files from the device. Format no crypto key generate rsa Mode Global Config crypto key generate dsa Use this command to generate a DSA key pair for SSH. The new key files will overwrite any existing generated or downloaded DSA key files. Format crypto key generate dsa Mode Global Config no crypto key generate dsa Use this command to delete the DSA key files from the device.
ProSafe M4100 and M7100 Managed Switches no ip http server Use this command to disable access to the switch through the Web interface. When access is disabled, the user cannot login to the switch's Web server. Format no ip http server Mode Privileged EXEC ip http secure-server Use this command to enable the secure socket layer for secure HTTP.
ProSafe M4100 and M7100 Managed Switches user will be forced to reauthenticate. This timer begins on initiation of the web session and is unaffected by the activity level of the connection. Default 24 Format ip http session hard-timeout <0-168> Mode Privileged EXEC no ip http session hard-timeout Use this command to restore the hard timeout for unsecure HTTP sessions to the default value.
ProSafe M4100 and M7100 Managed Switches ip http session maxsessions Use this command to limit the number of allowable unsecure HTTP sessions. Zero is the configurable minimum. Default 16 Format ip http session maxsessions <0-16> Mode Privileged EXEC no ip http session maxsessions Use this command to restore the number of allowable unsecure HTTP sessions to the default value.
ProSafe M4100 and M7100 Managed Switches no ip http secure-session maxsessions Use this command to restore the number of allowable secure HTTP sessions to the default value. Format no ip http secure-session maxsessions Mode Privileged EXEC ip http secure-session soft-timeout Use this command to configure the soft timeout for secure HTTP sessions in minutes. Configuring this value to zero will give an infinite soft-timeout. When this timeout expires, you are forced to reauthenticate.
ProSafe M4100 and M7100 Managed Switches ip https authentication Use this command to specify the authentication methods for http server users. The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line. If none is specified as an authentication method after radius, no authentication is used if the radius server is down.
ProSafe M4100 and M7100 Managed Switches ip http secure-protocol Use this command to set protocol levels (versions). The protocol level can be set to TLS1, SSL3 or to both TLS1 and SSL3. Default SSL3 and TLS1 Format ip http secure-protocol [SSL3] [TLS1] Mode Privileged EXEC show ip http Use this command to display the http settings for the switch. Format show ip http Mode Privileged EXEC Term Definition HTTP Mode (Unsecure) The unsecure HTTP server administrative mode.
ProSafe M4100 and M7100 Managed Switches Access Commands Use the commands in this section to close remote connections or to view information about connections to the system. disconnect Use the disconnect command to close HTTP, HTTPS, Telnet, or SSH sessions. Use all to close all active sessions, or use to specify the session ID to close. To view the possible values for , use the show loginsession command.
ProSafe M4100 and M7100 Managed Switches username Use this command to add a new user to the local user database. The default privilege level is 1. Using the encrypted keyword allows the administrator to transfer local user passwords between devices without having to know the passwords. When the password parameter is used along with encrypted parameter, the password must be exactly 128 hexadecimal characters in length.
ProSafe M4100 and M7100 Managed Switches username name nopassword Use this command to remove an existing user’s password (NULL password). Format username name nopassword [Level Level] Mode Global Config Parameter Description name The name of the user. Range: 1-32 characters. password The authentication password for the user. Range 8-64 characters. level The user level. Level 0 can be assigned by a level 15 user to another user to suspend that user's access. Range 0-15.
ProSafe M4100 and M7100 Managed Switches username snmpv3 authentication Use this command to specify the authentication protocol to be used for the specified user. The valid authentication protocols are none, md5 or sha. If you specify md5 or sha, the login password is also used as the snmpv3 authentication password and therefore must be at least eight characters in length. The is the user name associated with the authentication protocol.
ProSafe M4100 and M7100 Managed Switches no username snmpv3 encryption Use this command to set the encryption protocol to none. The is the login user name for which the specified encryption protocol will be used. Format no username snmpv3 encryption Mode Global Config show users Use this command to display the configured user names and their settings. This command is only available for users with Read/Write privileges.
ProSafe M4100 and M7100 Managed Switches Term Definition Lockout Status Indicates whether the user account is locked out (true or false). Password The current password expiration date in date format. Expiration Date show users accounts detail This command displays the local user status about user account lockout and password aging. It also includes information about Password strength and complexity.
ProSafe M4100 and M7100 Managed Switches Term Definition Login Time The time at which the user logged in. Username The user name used to login. Protocol The protocol that the user used to login. Location The location of the user. passwords min-length Use this command to enforce a minimum password length for local users. The value also applies to the enable password. The valid range is 0–64.
ProSafe M4100 and M7100 Managed Switches passwords aging Use this command to implement aging on passwords for local users. When a user’s password expires, the user will be prompted to change it before logging in again. The valid range is 1-365. The default is 0, or no aging. Default 0 Format passwords aging <1-365> Mode Global Config no passwords aging Use this command to set the password aging to the default value.
ProSafe M4100 and M7100 Managed Switches Mode Global Config Default Disable no passwords strength-check Use this command to disable the password strength-check. Format no passwords strength-check Mode Global Config passwords strength minimum uppercase-letters Use this command to enforce a minimum number of uppercase letters that a password should contain. The valid range is 0-16. The default is 2. Minimum of 0 means no restriction on that set of characters.
ProSafe M4100 and M7100 Managed Switches passwords strength minimum numeric-characters Use this command to enforce a minimum number of numeric characters that a password should contain. The valid range is 0-16. The default is 2. Minimum of 0 means no restriction on that set of characters.
ProSafe M4100 and M7100 Managed Switches no passwords strength maximum consecutive-characters Use this command to reset the maximum number of consecutive characters to the default value. Format no passwords strength maximum consecutive-characters Mode Global Config passwords strength maximum repeated-characters Use this command to enforce a maximum number of repeated characters that a password should contain. An example of repeated characters is aaaa. The valid range is 0-16.
ProSafe M4100 and M7100 Managed Switches passwords strength exclude-keyword Use this command to exclude the specified keyword while configuring the password. The password does not accept the keyword in any form (in between the string, case insensitive and reverse) as a substring. User can configure up to a maximum of 3 keywords. Format passwords strength exclude-keyword keyword Mode Global Config no passwords strength exclude-keyword Use this command to remove the exclude-keyword.
ProSafe M4100 and M7100 Managed Switches Termd Definition Minimum Password Character Classes Minimum number of character classes (uppercase, lowercase, numeric, and special) required when configuring passwords. Password ExcludeKeywords The set of keywords to be excluded from the configured password when strength checking is enabled. show passwords result Use this command to display the last password set result information.
ProSafe M4100 and M7100 Managed Switches list-name Character string used to name the list of authentication methods activated when a user logs in. Up to 12 characters. method1 [method2…] At least one from the following table: Keyword Description enable Uses the enable password for authentication. line Uses the line password for authentication. local Uses the local username database for authentication. none Uses no authentication. radius Uses the list of all RADIUS servers for authentication.
ProSafe M4100 and M7100 Managed Switches Default Uses the listed authentication methods that follow this argument as the default list of methods when a user accesses a higher privilege level. list-name Character string used to name the list of authentication methods activated when a user accesses a higher privilege level. Up to 12 characters. method1 [method2…] At least one from the following table: Keyword Description deny Use to deny access. enable Uses the enable password for authentication.
ProSafe M4100 and M7100 Managed Switches specified as an authentication method after radius, no authentication is used if the radius server is down. Format aaa authentication dot1x default method1 Mode Global Config method1: At least one from the following table: Keyword Description local Uses the local username database for authentication. none Uses no authentication. radius Uses the list of all RADIUS servers for authentication.
ProSafe M4100 and M7100 Managed Switches Term Definition exec Provides accounting for user EXEC terminal sessions. commands Provides accounting for all user-executed commands. default The default list of methods for accounting services. list-name Character string used to name the list of accounting methods. start-stop Sends a start accounting notice at the beginning of a process and a stop accounting notice at the end of a process.
ProSafe M4100 and M7100 Managed Switches ip http/https accounting This command applies user exec accounting list to the line methods HTTP and HTTPs methods. Format ip {http| https} accounting exec {default| } Mode Global Config Term Definition HTTP/HTTPS Line method for which the list needs to be applied. default The default list of methods for authorization services. list-name Alphanumeric character string used to name the list of authorization methods.
ProSafe M4100 and M7100 Managed Switches Example: (switch) # (switch) #show accounting methods Acct Type ---------Exec Commands Commands Line --------Console Telnet SSH HTTPS HTTP Method Name -----------dfltExecList dfltCmdsList UserCmdAudit Record Type -----------start-stop stop-only start-stop EXEC Method List -------------------none none none none none Method Type -----------TACACS TACACS TACACS Command Method List -------------------none none none none none aaa authorization This command creates
ProSafe M4100 and M7100 Managed Switches no aaa authorization This command deletes the authorization method list. Format no aaa authorization {commands | exec } {default | } method1[method2] Mode Global Config authorization(console/telnet/ssh) To apply the command authorization method list to an access method (console/telnet/ssh). Apply this command in the line configuration mode.
ProSafe M4100 and M7100 Managed Switches ---------------------------dfltExecAuthList Line --------Console Telnet SSH -----------------------------none undefined undefined undefined Exec Method List --------------------dfltExecAuthList dfltExecAuthList dfltExecAuthList domain-name Managed switch supports authentication based on domain name in addition to the username and password. This command allows the switch to be configured in a domain. Users can enable or disable domain functionality.
ProSafe M4100 and M7100 Managed Switches no domain-name enable This command disables the domain name functionality. Format no domain-name enable Mode Global Config show domain-name This command displays the configured domain-name.
ProSafe M4100 and M7100 Managed Switches aaa session-id This global aaa command specifies whether the same session-id is used for Authentication, Authorization, and Accounting service type within a session. Default common Format aaa session-id [common | unique] Mode Global Config Parameter Definition common Use the same session-id for all AAA Service types. unique Use a unique session-id for AAA Service types. no aaa session-id This command resets the aaa session-id behavior to default.
ProSafe M4100 and M7100 Managed Switches clear aaa ias-users Use this command to remove all users from the IAS database. Format clear aaa ias-users Mode Privileged EXEC show aaa ias-users Use this command to display configured IAS users and their attributes. Passwords configured are not shown in the show command output. Format show aaa ias-users Mode Privileged EXEC SNMP Commands This section describes the commands you use to configure Simple Network Management Protocol (SNMP) on the switch.
ProSafe M4100 and M7100 Managed Switches Default • Public and private, which you can rename. • Default values for the remaining four community names are blank. Format snmp-server community Mode Global Config no snmp-server community Use this command to remove this community name from the table. The is the community name to be deleted.
ProSafe M4100 and M7100 Managed Switches station, and will use that machine's IP address for the client IP address. A value of 0.0.0.0 will allow access from any IP address. The name is the applicable community name. Default 0.0.0.0 Format snmp-server community ipmask Mode Global Config no snmp-server community ipmask Use this command to set a client IP mask for an SNMP community to 0.0.0.0. The name is the applicable community name.
ProSafe M4100 and M7100 Managed Switches snmp-server community ro Use this command to restrict access to switch information. The access mode is read-only (also called public). Format snmp-server community ro Mode Global Config snmp-server community rw Use this command to restrict access to switch information. The access mode is read/write (also called private).
ProSafe M4100 and M7100 Managed Switches Format snmp-server enable traps Mode Global Config no snmp-server enable traps Use this command to disable the Authentication Flag. Format no snmp-server enable traps Mode Global Config Note: This command might not be available on all platforms. snmp-server enable traps linkmode Use this command to enable Link Up/Down traps for the entire switch. When enabled, link traps are sent only if the Link Trap flag setting associated with the port is enabled.
ProSafe M4100 and M7100 Managed Switches no snmp-server enable traps multiusers Use this command to disable Multiple User traps. Format no snmp-server enable traps multiusers Mode Global Config snmp-server enable traps stpmode Use this command to enable sending new root traps and topology change notification traps.
ProSafe M4100 and M7100 Managed Switches Default snmpv2 Format snmptrap {ipaddr | ip6addr } [snmpversion ] Mode Global Config no snmptrap Use this command to delete trap receivers for a community. Format no snmptrap {ipaddr | ip6addr } Mode Global Config snmptrap snmpversion Use this command to modify the SNMP version of a trap.
ProSafe M4100 and M7100 Managed Switches Format snmptrap ipaddr Mode Global Config snmptrap mode Use this command to activate or deactivate an SNMP trap. Enabled trap receivers are active (able to receive traps). Disabled trap receivers are inactive (not able to receive traps). Format snmptrap mode { |} Mode Global Config no snmptrap mode Use this command to deactivate an SNMP trap.
ProSafe M4100 and M7100 Managed Switches Format no snmp trap link-status Mode Interface Config snmp trap link-status all Use this command to enable link status traps for all interfaces. Note: This command is valid only when the Link Up/Down Flag is enabled. For more information, see snmp-server enable traps linkmode on page 674. Format snmp trap link-status all Mode Global Config no snmp trap link-status all Use this command to disable link status traps for all interfaces.
ProSafe M4100 and M7100 Managed Switches TCP/IP to an external SNMP manager based on the SNMP configuration (the trap receiver and other SNMP community parameters). Format show snmpcommunity Mode Privileged EXEC Term Definition SNMP Community Name The community string to which this entry grants access. A valid entry is a case-sensitive alphanumeric string of up to 16 characters. Each row of this table must contain a unique community name.
ProSafe M4100 and M7100 Managed Switches Community Name Mytrap IpAddress 0.0.0.0 IPv6 Address 2001::1 Snmp Version SNMPv2 Mode Enable show trapflags show trapflags Use this command to display trap conditions. The command’s display shows all the enabled OSPFv2 and OSPFv3 trapflags. Configure which traps the switch should generate by enabling or disabling the trap condition.
ProSafe M4100 and M7100 Managed Switches authorization network radius Use this command to enable the switch to accept VLAN assignment by the radius server. Default disable Format authorization network radius Mode Global Config no authorization network radius Use this command to disable the switch to accept VLAN assignment by the radius server. Format no authorization network radius Mode Global Config radius accounting mode Use this command to enable the RADIUS accounting function.
ProSafe M4100 and M7100 Managed Switches no radius server attribute Use the no version of this command to disable the NAS-IP-Address attribute global parameter for RADIUS client. When this parameter is disabled, the RADIUS client does not send the NAS-IP-Address attribute in RADIUS requests. Format no radius server attribute <4> [] Mode Global Config The following shows an example of the command. (Switch) (Config) #radius server attribute 4 (Switch) (Config) #radius server attribute 4 192.168.
ProSafe M4100 and M7100 Managed Switches Note: To reconfigure a RADIUS accounting server to use the default UDP , set the parameter to 1813. Format radius server host {auth | acct} {} [name ] [port <0-65535>][server-type] Mode Global Config Field Description ipaddr The IP address of the server. dnsname The DNS name of the server. 0-65535 The port number to use to connect to the specified RADIUS server. servername The alias name to identify the server.
ProSafe M4100 and M7100 Managed Switches radius server key Use this command to configure the key to be used in RADIUS client communication with the specified server. Depending on whether the 'auth' or 'acct' token is used, the shared secret is configured for the RADIUS authentication or RADIUS accounting server. The IP address or hostname provided must match a previously configured server. When this command is executed, the secret is prompted.
ProSafe M4100 and M7100 Managed Switches Field Description ip addr The IP address of the server. dnsname The DNS name of the server. no radius server msgauth Use the no version of this command to disable the message authenticator attribute to be used for the specified RADIUS Authenticating server.
ProSafe M4100 and M7100 Managed Switches Field Description retries The maximum number of transmission attempts in the range of 1–15. no radius server retransmit Use this command to set the value of this global parameter to the default value.
ProSafe M4100 and M7100 Managed Switches Term Definition Number of Configured Authentication Servers The number of RADIUS Authentication servers that have been configured. Number of Configured Accounting Servers The number of RADIUS Accounting servers that have been configured. Number of Named Authentication Server Groups The number of configured named RADIUS server groups. Number of Named Accounting Server Groups The number of configured named RADIUS server groups.
ProSafe M4100 and M7100 Managed Switches Field Description ipaddr The IP address of the authenticating server. dnsname The DNS name of the authenticating server. servername The alias name to identify the server. Current The ‘*’ symbol preceeding the server host address specifies that the server is currently active. Host Address The IP address of the host. Server Name The name of the authenticating server. Port The port used for communication with the authenticating server.
ProSafe M4100 and M7100 Managed Switches 192.168.37.201 192.168.37.202 192.168.37.203 Network2_RADIUS_Server Network3_RADIUS_Server Network4_RADIUS_Server Primary Secondary Primary (Switch) #show radius servers name Default_RADIUS_Server Server Name............................ Host Address........................... Secret Configured...................... Message Authenticator ................. Number of Retransmits.................. Time Duration.......................... RADIUS Accounting Mode........
ProSafe M4100 and M7100 Managed Switches Term Definition Port The port used for communication with the accounting server. Secret Configured Yes or No Boolean value indicating whether this server is configured with a secret. The following shows example CLI display output for the command. (Switch) #show radius accounting name Host Address Server Name Port Secret Configured ----------------------- --------------------------------- -------- ----------192.168.37.200 Network1_RADIUS_Server 1813 Yes 192.
ProSafe M4100 and M7100 Managed Switches Term Definition Round Trip Time The time interval, in hundredths of a second, between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server. Requests The number of RADIUS Accounting-Request packets sent to this server. This number does not include retransmissions. Retransmission The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server.
ProSafe M4100 and M7100 Managed Switches Malformed Responses........................... Bad Authenticators............................ Pending Requests.............................. Timeouts...................................... Unknown Types................................. Packets Dropped............................... 0 0 0 0 0 0 show radius statistics Use this command to display the summary statistics of configured RADIUS Authenticating servers.
ProSafe M4100 and M7100 Managed Switches Term Definition Unknown Types The number of packets of unknown type that were received from this server on the authentication port. Packets Dropped The number of RADIUS packets received from this server on the authentication port and dropped for some other reason. The following shows example CLI display output for the command. (Switch) #show radius statistics 192.168.37.200 RADIUS Server Name............................ Server Host Address.....................
ProSafe M4100 and M7100 Managed Switches debug tacacs packet Use the debug tacacs packet command to turn on TACACS+ packet debug. Default Disabled Format debug tacacs packet [receive | transmit] Mode Global Config no debug tacacs packet Use this command to turn off TACACS+ packet debug. debug tacacs packet Format no Mode Global Config tacacs-server host Use the tacacs-server host command in Global Configuration mode to configure a TACACS+ server.
ProSafe M4100 and M7100 Managed Switches keyword. In the show running config command’s display, these secret keys are displayed in encrypted format. You cannot show these keys in plain text format. Format tacacs-server key [ | encrypted ] Mode Global Config no tacacs-server key Use the no tacacs-server key command to disable the authentication and encryption key for all TACACS+ communications between the switch and the TACACS+ daemon.
ProSafe M4100 and M7100 Managed Switches no tacacs-server source interface Use this command in Global Configuration mode to remove the global source interface (Source IP selection) for all TACACS+ communications between the TACACS+ client and the server. Format no tacacs-server source-interface Mode Privileged Exec tacacs-server timeout Use the tacacs-server timeout command to set the timeout value for communication with the TACACS+ servers.
ProSafe M4100 and M7100 Managed Switches port Use the port command in TACACS Configuration mode to specify a server port number. The server range is 0 - 65535. Default 49 Format port Mode TACACS Config priority Use the priority command in TACACS Configuration mode to specify the order in which servers are used, where 0 (zero) is the highest priority. The parameter specifies the priority for servers. The highest priority is 0 (zero), and the range is 0 - 65535.
ProSafe M4100 and M7100 Managed Switches Configuration Scripting Commands Configuration Scripting allows you to generate text-formatted script files representing the current configuration of a system. You can upload these configuration script files to a computer or UNIX system and edit them. Then, you can download the edited files to the system and apply the new configuration. You can apply configuration scripts to one or more switches with no or minor modifications.
ProSafe M4100 and M7100 Managed Switches " " hello hello script apply Use this command to apply the commands in the script to the switch. The parameter is the name of the script to apply. Format script apply Mode Privileged EXEC script delete Use this command to delete a specified script, where the parameter is the name of the script to delete. The option deletes all the scripts present on the switch.
ProSafe M4100 and M7100 Managed Switches script validate Use this command to validate a script file by parsing each line in the script file, where is the name of the script to validate. The validate option is intended to be used as a tool for script development. Validation identifies potential problems. It might not identify all problems with a given script on any given device.
ProSafe M4100 and M7100 Managed Switches set clibanner Use this command to add the CLI Banner. The banner message supports up to 2000 characters. Format set clibanner Mode Global Config no set clibanner Use this command to remove the CLI Banner downloaded through TFTP.
ProSafe M4100 and M7100 Managed Switches Parameter Description ipv4-routing Supports IPv4 routing only. -data-center: Support more ECMP next hops in IPv4 routes. -default: The routing template maximizes system resources for unicast routing, typically required for a router in the center of a network. dual-ipv4-and-ipv 6 Supports both IPv4 and IPv6 routing. This option is visible only when the switch supports IPv6 and IPv4 routing. -default: Balance IPv4 and IPv6 Layer 2 and Layer 3 functionality.
ProSafe M4100 and M7100 Managed Switches Term Description IPv4 Multicast Routes The maximum number of IPv4 multicast forwarding table entries. IPv6 Multicast Routes The maximum number of IPv6 multicast forwarding table entries. Example: #show sdm prefer Current template: Dual IPv4 and IPv6 ARP Entries.................................... IPv4 Unicast Routes............................ IPv6 NDP Entries............................... IPv6 Unicast Routes............................ ECMP Next Hops........
ProSafe M4100 and M7100 Managed Switches network ipv6 address Use this command to configure an IPv6 global address, enable or disable stateless global address autoconfiguration, and enable or disable dhcpv6 client protocol information for the network port. You can configure multiple IPv6 addresses on the network port. Format network ipv6 address {address/prefix-length [eui64] | autoconfig | dhcp} Mode Privileged EXEC Term Definition address IPv6 prefix in IPv6 global address format.
ProSafe M4100 and M7100 Managed Switches no network ipv6 gateway Use this command to remove IPv6 gateways on the network port interface. Format no network ipv6 gateway Mode Privileged EXEC show network ndp Use this command to display NDP cache information for the network port. Default enabled Format show network ndp Mode • Privileged EXEC • User EXEC Term Definition IPv6 Address The IPv6 address of the interface. MAC Address The MAC Address used. isRtr Specifies the router flag.
ProSafe M4100 and M7100 Managed Switches Term Description DHCPv6 Advertisement Packets Received The number of DHCPv6 Advertisement packets received on the network interface. DHCPv6 Reply Packets Received The number of DHCPv6 Reply packets received on the network interface. Received DHCPv6 Advertisement Packets Discarded The number of DHCPv6 Advertisement packets discarded on the network interface. Received DHCPv6 Reply The number of DHCPv6 Reply packets discarded on the network interface.
ProSafe M4100 and M7100 Managed Switches clear network ipv6 dhcp statistics Use this command to clear the DHCPv6 statistics on the network management interface.
12. Log Messages 12 This chapter lists common log messages, along with information regarding the cause of each message. There is no specific action that can be taken per message. When there is a problem being diagnosed, a set of these messages in the event log, along with an understanding of the system configuration and details of the problem will assist NETGEAR, Inc. in determining the root cause of such a problem. Note: This chapter does not contain a complete list of all syslog messages.
ProSafe M4100 and M7100 Managed Switches Core Table 3. BSP Log Messages Component Message Cause BSP Event(0xaaaaaaaa) Switch has restarted. BSP Starting code... BSP initialization complete, starting 7000 series application. Table 4.
ProSafe M4100 and M7100 Managed Switches Table 5. System Log Messages Component Message Cause SYSTEM Configuration file Switch CLI.cfg size is 0 (zero) bytes The configuration file could not be read. This message might occur on a system for which no configuration has ever been saved or for which configuration has been erased. SYSTEM could not separate SYSAPI_CONFIG_FILENAME The configuration file could not be read.
ProSafe M4100 and M7100 Managed Switches Utilities Table 6. Trap Mgr Log Message Component Message Cause Trap Mgr Link Up/Down: slot/port An interface changed link state. Table 7. DHCP Filtering Log Messages Component Message Cause DHCP Filtering Unable to create r/w lock for DHCP Filtering Unable to create semaphore used for dhcp filtering configuration structure . DHCP Filtering Failed to register with nv Store.
ProSafe M4100 and M7100 Managed Switches Table 9. RADIUS Log Messages Component Message Cause RADIUS RADIUS: Invalid data length - xxx The RADIUS Client received an invalid message from the server. RADIUS RADIUS: Failed to send the request A problem communicating with the RADIUS server. RADIUS RADIUS: Failed to send all of the request A problem communicating with the RADIUS server during transmit. RADIUS RADIUS: Could not get the Task Sync semaphore! Resource issue with RADIUS Client service.
ProSafe M4100 and M7100 Managed Switches Table 10. TACACS+ Log Messages Component Message Cause TACACS+ TACACS+: authentication error, no server to contact TACACS+ request needed, but no servers are configured. TACACS+ TACACS+: connection failed to server x.x.x.x TACACS+ request sent to server x.x.x.x but no response was received. TACACS+ TACACS+: no key configured to encrypt packet for server x.x.x.x No key configured for the specified server.
ProSafe M4100 and M7100 Managed Switches Table 14. EmWeb Log Messages Component Message Cause EmWeb EMWEB (Telnet): Max number of Telnet login sessions exceeded A user attempted to connect via telnet when the maximum number of telnet sessions were already active. EmWeb EMWEB (SSH): Max number of SSH login sessions exceeded A user attempted to connect via SSH when the maximum number of SSH sessions were already active.
ProSafe M4100 and M7100 Managed Switches Table 16. WEB Log Messages Component Message Cause WEB Max clients exceeded This message is shown when the maximum allowed java client connections to the switch is exceeded. WEB Error on send to sockfd XXXX, closing connection Failed to send data to the java clients through the socket. WEB # (XXXX) Form Submission Failed. No Action Taken. The form submission failed and no action is taken. XXXX indicates the file under consideration.
ProSafe M4100 and M7100 Managed Switches Table 18. SSHD Log Messages Component Message Cause SSHD SSHD: Unknown UI event in message, event=XXXX Failed to dispatch the UI event to the appropriate SSHD function as it’s an invalid event. XXXX indicates the event to be dispatched. SSHD sshdApiCnfgrCommand: Failed calling sshdIssueCmd. Failed to send the message to the SSHD message queue Table 19.
ProSafe M4100 and M7100 Managed Switches Table 20. User_Manager Log Messages Component Message Cause User_Manager User Login Failed for XXXX Failed to authenticate user login. XXXX indicates the user name to be authenticated. User_Manager Access level for user XXXX could not be determined. Setting to READ_ONLY. Invalid access level specified for the user. The access level is set to READ_ONLY. XXXX indicates the user name. User_Manager Could not migrate config file XXXX from version YYYY to ZZZZ.
ProSafe M4100 and M7100 Managed Switches Table 22.
ProSafe M4100 and M7100 Managed Switches Table 23. Mac-based VLANs Log Messages Component Message Cause Mac based VLANS vlanMacVlanChangeCallback: Failed to add an entry Appears when a dtl fails to add an entry for a VLAN add notify event. Mac based VLANS vlanMacVlanChangeCallback: Failed to delete an entry Appears when a dtl fails to delete an entry for an VLAN delete notify event. Table 24. 802.1x Log Messages Component Message Cause 802.1X function: Failed calling dot1xIssueCmd 802.
ProSafe M4100 and M7100 Managed Switches Table 25.
ProSafe M4100 and M7100 Managed Switches Table 27. 802.3ad Log Messages Component Message Cause 802.3ad dot3adReceiveMachine: received default event %x Received a LAG PDU and the RX state machine is ignoring this LAGPDU 802.3ad dot3adNimEventCompletionCallback, dot3adNimEventCreateCompletionCallbac k: DOT3AD: notification failed for event(%d), intf(%d), reason(%d) The event sent to NIM was not completed successfully Table 28.
ProSafe M4100 and M7100 Managed Switches Table 32. 802.1Q Log Messages Component Message Cause 802.1Q dot1qIssueCmd: Unable to send message %d to dot1qMsgQueue for vlan %d - %d msgs in queue dot1qMsgQueue is full. 802.1Q dot1qVlanCreateProcess: Attempt to create a vlan with an invalid vlan id %d ; VLAN %d not in range, Accommodates for reserved vlan ids. that is, 4094 - x 802.1Q dot1qMapIntfIsConfigurable: Error accessing DOT1Q config data for interface %d in dot1qMapIntfIsConfigurable.
ProSafe M4100 and M7100 Managed Switches Table 35. Protocol-based VLANs Log Messages Component Message Cause Protocol Based pbVlanCnfgrInitPhase2Process: Unable to VLANs register NIM callback Appears when nimRegisterIntfChange fails to register pbVlan for link state changes. Protocol Based pbVlanCnfgrInitPhase2Process: Unable to VLANs register pbVlan callback with vlans Appears when vlanRegisterForChange fails to register pbVlan for vlan changes.
ProSafe M4100 and M7100 Managed Switches Table 38. DiffServ Log Messages Component Message Cause DiffServ diffserv.c 165: diffServRestore Failed to reset DiffServ. Recommend resetting device While attempting to clear the running configuration an error was encountered in removing the current settings. This might lead to an inconsistent state in the system and resetting is advised.
ProSafe M4100 and M7100 Managed Switches Table 40. OSPFv2 Log Messages (Continued) Component Message Cause OSPFv2 Warning: OSPF LSDB is 90% full (22648 LSAs). OSPFv2 limits the number of Link State Advertisements (LSAs) that can be stored in the link state database (LSDB). When the database becomes 90 or 95 percent full, OSPFv2 logs this warning. The warning includes the current size of the database. OSPFv2 The number of LSAs, 25165, in the OSPF LSDB has exceeded the LSDB memory allocation.
ProSafe M4100 and M7100 Managed Switches Table 42. Routing Table Manager Log Messages Component Message Cause Routing Table Manager RTO is full. Routing table contains 8000 best routes, 8000 total routes. The routing table manager, also called “RTO,” stores a limited number of best routes, based on hardware capacity. When the routing table becomes full, RTO logs this alert. The count of total routes includes alternate routes, which are not installed in hardware.
ProSafe M4100 and M7100 Managed Switches Table 45. RIP Log Message Component Message Cause RIP RIP : discard response from xxx via unexpected interface When RIP response is received with a source address not matching the incoming interface’s subnet. Table 46. DHCP6 Log Message Component Message Cause DHCP6 relay_to_server: Cannot relay to relay server intf xxx: not IPv6 enabled Relay is enabled but neither the outgoing interface nor the server IP address is specified. Multicast Table 47.
ProSafe M4100 and M7100 Managed Switches Table 49. IGMP-Proxy Log Messages Component Message Cause IGMP-Proxy Error getting memory for igmp host group record When we are unable to allocate memory for the IGMP group record in the Host (Proxy) table IGMP-Proxy Error getting memory for source record When we are unable to allocate memory for the IGMP source record in the Host (Proxy) table Table 50.
ProSafe M4100 and M7100 Managed Switches Table 51. PIM-DM Log Messages Component Message Cause PIM-DM Out of memory when creating xxx This message is logged when there is insufficient memory to accommodate a new neighbor/(S,G) Entry, Prune, Graft, Join etc. PIM-DM Error entry->ll_xxx LL creation error This message is logged when the SLL creation is Failed. PIM-DM pim_interface_set: Could not give taskSema This message is logged when Task synchronization Semaphore release fails.
ProSafe M4100 and M7100 Managed Switches Technologies Table 54. System General Error Messages Component Message Cause OS Invalid USP unit = x, slot = x, port =x A port was not able to be translated correctly during the receive. OS In hapiBroadSystemMacAddress call to 'bcm_l2_addr_add' - FAILED : x Failed to add an L2 address to the MAC table. This should only happen when a hash collision occurs or the table is full.
ProSafe M4100 and M7100 Managed Switches Table 54. System General Error Messages Component Message Cause OS USL: A Trunk being created by bcmx already existed in USL Possible synchronization issue between the application, hardware, and sync layer OS USL: A Trunk being destroyed doesn't exist Possible synchronization issue between in USL the application, hardware, and sync layer.
ProSafe M4100 and M7100 Managed Switches Table 54. System General Error Messages Component Message Cause OS USL: failed to sync L3 Route table on unit= Could not synchronize unit x due to a x transport failure or API issue on remote unit. A synchronization retry will be issued OS USL: failed to sync initiator table on unit=x Could not synchronize unit x due to a transport failure or API issue on remote unit.
ProSafe M4100 and M7100 Managed Switches Table 55. OSAPI Log Messages (Continued) Component Message Cause OSAPI osapiCleanupIf: NetIPGet During the call to remove the interface from the route table, the attempt to get an ipv4 interface address from the stack failed. OSAPI osapiCleanupIf: NetMaskGet During the call to remove the interface from the route table ,the attempt to get the ipv4 interface mask from the stack failed.
13. Green Ethernet Commands 13 NETGEAR Managed Switch Release 10.0.1 supports the following Green Ethernet power saving modes: • Energy Detect Mode • EEE Mode The Green Ethernet commands supported depends on the switch model Table 56.
ProSafe M4100 and M7100 Managed Switches Energy-Detect Mode When Energy-Detect mode is enabled, if communication on a port stops, the port circuitry automatically shuts down for a short period. The port wakes up periodically to check for link activity. If activity is detected, the port circuitry remains active. This allows performing autonegotiation and saving power when there is no active link. Note: Combination ports support both copper and fiber media. Energy Detect mode only applies to copper media.
ProSafe M4100 and M7100 Managed Switches green-mode energy-detect Use this command enables energy-detect mode on an interface or on all the interfaces. Format green-mode energy-detect Mode Interface Config Interface Range Config Default Disabled no green-mode energy-detect This command disables energy-detect mode on an interface or on all the interfaces.
ProSafe M4100 and M7100 Managed Switches clear green-mode statistics This command to clears the following for a specified , or for all ports: • EEE LPI event count, and LPI duration • EEE LPI history table entries • Cumulative Power savings estimates Format clear green-mode statistics { | all} Mode Privileged Exec Example (switch) #clear green-mode statistics 0/1 Are you sure you want to clear the green mode port stats? (y/n)y Green Mode Stats Cleared.
ProSafe M4100 and M7100 Managed Switches Table 57. Green-Mode status terms Term Definition EEE EEE Admin Mode EEE Admin Mode is enabled or disabled. Transmit Idle Time It is the time for which condition to move to LPI state is satisfied, at the end of which MAC TX transitions to LPI state. The Range is (0 to 0xffffffff).The default value is 0. Transmit Wake Time It is the time for which MAC / switch has to wait to go back to ACTIVE state from LPI state when it receives packet for transmission.
ProSafe M4100 and M7100 Managed Switches Table 57. Green-Mode status terms Term Definition Tx_dll_ready Data Link Layer ready: This variable indicates that the tx system initialization is complete and is ready to update/receive LLDPDU containing EEE TLV. This variable is updated by the local system software. Rx_dll_enabled Status of the EEE capability negotiation on the local system.
ProSafe M4100 and M7100 Managed Switches Cumulative Energy Saving (W * H)............. XX Time Since Counters Last Cleared............... 1 day 20 hr 47 min 34 sec show green-mode Use this command to display green-mode configuration for the whole system. The status is shown only for the modes supported on the corresponding hardware platform whether enabled or disabled. Format show green-mode Mode Privileged Exec Table 58.
ProSafe M4100 and M7100 Managed Switches Example: The output of 'show green-mode ' is indicated below. (switch) #show green-mode Current Power Consumption (mW).............. XX Power Saving (%)............................ XX Cumulative Energy Saving /Stack (W * H)...
ProSafe M4100 and M7100 Managed Switches Interface --------0/21 0/22 0/23 0/24 0/25 Energy-Detect Config Opr --------- --------Disabled Inactive Disabled Inactive Disabled Inactive Disabled Inactive Disabled Inactive Short-Reach-Config Auto Forced --------- --------- Short-Reach Opr ----------- EEE Config -------Disabled Disabled Disabled Disabled Disabled green-mode eee-lpi-history {sampling-interval <30sec - 36000sec> | max-samples <1 - 168>} Configure Global EEE LPI history collection interval and
ProSafe M4100 and M7100 Managed Switches show green-mode eee-lpi-history interface This command displays the interface green-mode EEE LPI history. Format show green-mode eee-lpi-history interface Mode Privileged Exec Table 59. Keyword Description Sampling Interval Interval at which EEE LPI statistics is collected. Total No.
14. Command List 14 ip vrrp (Global Config) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249 {deny | permit} (IP ACL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 480 {deny | permit} (IPv6) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 485 {deny | permit} (MAC ACL) . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches area virtual-link authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 269 area virtual-link dead-interval (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 270 area virtual-link dead-interval (OSPFv3) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388 area virtual-link hello-interval (OSPF) . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches classofservice dot1p-mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 444 classofservice ip-dscp-mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 444 classofservice trust . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 445 clear aaa ias-users . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches clear traplog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 549 clear vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 549 client-identifier . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 564 client-name . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches debug spanning-tree bpdu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 600 debug spanning-tree bpdu receive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 600 debug spanning-tree bpdu transmit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 601 debug tacacs packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches dos-control tcpoffset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199 dos-control tcpport . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198 dos-control tcpsyn . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200 dos-control tcpsynfin . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches interface lag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 interface loopback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 interface tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 356 interface vlan . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches ip http secure-session soft-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 644 ip http server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 640 ip http session hard-timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 641 ip http session maxsessions . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches ip pim join-prune-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 336 ip pim rp-address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 336 ip pim rp-candidate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 337 ip pim sparse(Global Config) . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches ipv6 mld-proxy unsolicit-rprt-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 438 ipv6 mtu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362 ipv6 nd dad attempts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 362 ipv6 nd managed-config-flag . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches lacp actor port priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109 lacp actor system priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110 lacp admin key . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107 lacp collector max-delay . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches mac access-list extended rename . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474 mac address-table multicast forbidden-unregistered vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154 mac address-table multicast forward-all vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154 mac address-table multicast forward-unregistered vlan . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches netbios-node-type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 569 network (DHCP Pool Config) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 567 network area (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263 network ipv6 address . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches passwords strength minimum lowercase-letters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 655 passwords strength minimum numeric-characters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 656 passwords strength minimum special-characters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 656 passwords strength minimum uppercase-letters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches protocol vlan group all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 quit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 553 radius accounting mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 681 radius server attribute . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches set gvrp adminmode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 set gvrp interfacemode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 set igmp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148 set igmp fast-leave . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches show dampening interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 310 show dhcp client vendor-id-option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132 show dhcp l2relay agent-option vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130 show dhcp l2relay all . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches show ip dhcp global configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 573 show ip dhcp pool configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 573 show ip dhcp server statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 574 show ip dhcp snooping . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches show ip pim bsr-router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 340 show ip pim interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 333 show ip pim neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 334 show ip pim rp mapping . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches show ipv6 ospf range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 409 show ipv6 ospf stub table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 409 show ipv6 ospf virtual-link . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 410 show ipv6 ospf virtual-link brief . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches show mac-address-table multicast . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204 show mac-address-table static . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126 show mac-address-table staticfiltering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126 show mac-address-table stats . . . . . . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches show running-config . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 530 show running-config interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 531 show sdm prefer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 702 show serial . . . . . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches shutdown all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 snmp trap link-status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 677 snmp trap link-status all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 678 snmp-server . . . . . . . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches split-horizon . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 316 sshcon maxsessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 637 sshcon timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 638 storm-control broadcast . . . . . . . . . . . . .
ProSafe M4100 and M7100 Managed Switches udld port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 619 udld reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 619 udld timeout interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 619 update bootcode . . . . . . . . . . . .
