dell power connect cli ref

1132
www.dell.com | support.dell.com Dell™ PowerConnect™ PC8024/8024F CLI Reference Guide Model PC8024/PC8024F

Upload: tom-ed

Post on 29-Nov-2014

218 views

Category:

Documents


1 download

TRANSCRIPT

Dell PowerConnect PC8024/8024F

CLI Reference Guide

Model PC8024/PC8024F

w w w. d e l l . c o m | s u p p o r t . d e l l . c o m

NotesNOTE: A NOTE indicates important information that helps you make better use of your computer.

____________________Information in this document is subject to change without notice. 2009 Dell Inc. All rights reserved Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden. Trademarks used in this text: Dell, the DELL logo, PowerEdge, PowerConnect, and OpenManage are trademarks of Dell Inc.; Microsoft and Windows are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries; sFlow is a registered trademark of InMon Corporation. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own. Model PC8024/8024F November 2009 Rev. A01

Contents1 Command GroupsIntroduction 47 Command Groups 47 Mode Types 51 Layer 2 Commands 52 Layer 3 Commands 77 Utility Commands 97

2

Using the CLIIntroduction 111 Entering and Editing CLI Commands 111 CLI Command Modes 116 Starting the CLI 125 Using CLI Functions and Tools 132

3

Layer 2 CommandsIntroduction 145

4

AAA Commandsaaa authentication dot1x 147 aaa authentication enable 148 aaa authentication login 149 aaa authorization network default radius 151 enable authentication 151

Contents

3

enable password 152 ip http authentication 153 ip https authentication 154 login authentication 155 password (Line Configuration) 155 password (User EXEC) 156 show authentication methods 157 show users accounts 158 show users login-history 158 username 159

5

ACL Commandsaccess-list 161 deny | permit 162 ip access-group 164 no ip access-group 164 mac access-group 165 mac access-list extended 166 mac access-list extended rename 166 show ip access-lists 167 show mac access-list 168

6

Address Table Commandsbridge address 170 bridge aging-time 170 bridge multicast address 171 bridge multicast filtering 172

4

Contents

bridge multicast forbidden address 173 bridge multicast forbidden forward-unregistered 174 bridge multicast forward-all 174 bridge multicast forward-unregistered 175 clear bridge 176 port security 176 port security max 177 show bridge address-table 178 show bridge address-table count 178 show bridge address-table static 179 show bridge multicast address-table 180 show bridge multicast filtering 181 show ports security 182 show ports security addresses 183

7

Auto-VoIP Commandsshow switchport voice 185 switchport voice detect auto 187

8

CDP Interoperability Commandsclear isdp counters 189 clear isdp table 190 isdp advertise-v2 190 isdp enable 191 isdp holdtime 191 isdp timer 192 show isdp 193

Contents

5

show isdp entry 193 show isdp interface 194 show isdp neighbors 196 show isdp traffic 198

9

Data Center Bridging Commandsclear priority-flow-control statistics 201 datacenter-bridging 202 priority-flow-control mode on 202 priority-flow-control priority 203 show interfaces datacenter-bridging 204

10 DHCP Layer 2 Relay Commandsdhcp l2relay (Global Configuration) 207 dhcp l2relay (Interface Configuration) 208 dhcp l2relay circuit-id 208 dhcp l2relay remote-id 209 dhcp l2relay trust 209 dhcp l2relay vlan 210

11 DHCP Snooping Commandsclear ip dhcp snooping statistics 211 ip dhcp snooping 212 ip dhcp snooping binding 212 ip dhcp snooping database 213 ip dhcp snooping database write-delay 214 ip dhcp snooping limit 214

6

Contents

ip dhcp snooping log-invalid 215 ip dhcp snooping trust 216 ip dhcp snooping verify mac-address 216 show ip dhcp snooping 217 show ip dhcp snooping binding 218 show ip dhcp snooping database 219 show ip dhcp snooping interfaces 219 show ip dhcp snooping statistics 220

12 Dynamic ARP Inspection Commandsarp access-list 223 clear counters ip arp inspection 224 ip arp inspection filter 224 ip arp inspection limit 225 ip arp inspection trust 226 ip arp inspection validate 226 ip arp inspection vlan 227 permit ip host mac host 228 show arp access-list 229 show ip arp inspection ethernet 229 show ip arp inspection statistics 230 show ip arp inspection vlan 232

13 Ethernet Configuration Commandsclear counters 235 description 236 duplex 237

Contents

7

flowcontrol 237 interface ethernet 238 interface range ethernet 239 mtu 239 negotiation 240 negotiation 241 show interfaces advertise 242 show interfaces configuration 243 show interfaces counters 244 show interfaces description 249 show interfaces detail 250 show interfaces status 253 show statistics ethernet 256 show storm-control 261 shutdown 262 speed 263 storm-control broadcast 263 storm-control multicast 264 storm-control unicast 265

14 GVRP Commandsclear gvrp statistics 267 garp timer 268 gvrp enable (global) 269 gvrp enable (interface) 269 gvrp registration-forbid 270 gvrp vlan-creation-forbid 271

8

Contents

show gvrp configuration 271 show gvrp error-statistics 273 show gvrp statistics 274

15 IGMP Snooping Commandsip igmp snooping (global) 277 ip igmp snooping (interface) 278 ip igmp snooping host-time-out 278 ip igmp snooping leave-time-out 279 ip igmp snooping mrouter-time-out 280 show ip igmp snooping groups 280 show ip igmp snooping interface 281 show ip igmp snooping mrouter 282 ip igmp snooping (VLAN) 283 ip igmp snooping fast-leave 284 ip igmp snooping groupmembership-interval 284 ip igmp snooping maxresponse 286 ip igmp snooping mcrtrexpiretime 287

16 IGMP Snooping Querier Commandsip igmp snooping querier 289 ip igmp snooping querier election participate 290 ip igmp snooping querier query-interval 291 ip igmp snooping querier timer expiry 291 ip igmp snooping querier version 292 show igmp snooping querier 293

Contents

9

17 IP Addressing Commandsclear host 295 ip address 296 ip address 297 ip address vlan 298 ip default-gateway 298 ip domain-lookup 299 ip domain-name 300 ip host 300 ip name-server 301 ipv6 address 302 ipv6 enable 303 ipv6 gateway 303 show arp switch 304 show hosts 305 show ip helper-address 306 show ip interface management 307

18 IPv6 Access List Commands{deny | permit} 309 ipv6 access-list 311 ipv6 access-list rename 311 ipv6 traffic-filter 312 show ipv6 access-lists 313

19 IPv6 MLD Snooping Querier Commandsipv6 mld snooping querier 317

10

Contents

ipv6 mld snooping querier (VLAN mode) 318 ipv6 mld snooping querier address 318 ipv6 mld snooping querier election participate 319 ipv6 mld snooping querier query-interval 320 ipv6 mld snooping querier timer expiry 320 show ipv6 mld snooping querier 321

20 IP Source Guard Commandsip verify source 325 ip verify source port-security 325 ip verify binding 326 show ip verify interface 326 show ip verify source interface 327 show ip source binding 327

21 iSCSI Flow Acceleration Commandsiscsi aging time 329 iscsi cos 330 iscsi enable 331 iscsi target port 331 show iscsi 332 show iscsi sessions 333

22 LACP Commandslacp port-priority 337 lacp system-priority 338 lacp timeout 338

Contents

11

show lacp ethernet 339 show lacp port-channel 341

23 Link Dependency Commandslink-dependency group 343 no link-dependency group 344 add ethernet 344 add port-channel 345 no add port-channel 345 depends-on ethernet 346 no depends-on ethernet 347 depends-on port-channel 347 no depends-on port-channel 348 show link-dependency 348

24 LLDP Commandsclear lldp remote-data 351 clear lldp statistics 352 lldp med 353 lldp med confignotification 353 lldp med faststartrepeatcount 354 lldp med transmit-tlv 354 lldp notification 355 lldp notification-interval 356 lldp receive 356 lldp timers 357 lldp transmit 358

12

Contents

lldp transmit-mgmt 359 lldp transmit-tlv 359 show lldp 360 show lldp interface 361 show lldp local-device 362 show lldp med 363 show lldp med interface 364 show lldp med local-device 365 show lldp med remote-device 367 show lldp remote-device 370 show lldp statistics 371

25 Port Channel Commandschannel-group 375 interface port-channel 376 interface range port-channel 376 hashing-mode 377 no hashing-mode 378 show interfaces port-channel 378 show statistics port-channel 381

26 Port Monitor Commandsmonitor session 385 show monitor session 386

27 QoS Commandsassign-queue 388

Contents

13

class 389 class-map 390 class-map rename 390 classofservice dot1p-mapping 391 classofservice ip-dscp-mapping 392 classofservice trust 392 conform-color 393 cos-queue min-bandwidth 394 cos-queue strict 395 diffserv 395 drop 396 mark cos 397 mark ip-dscp 397 mark ip-precedence 398 match class-map 398 match cos 400 match destination-address mac 401 match dstip 401 match dstip6 402 match dstl4port 403 match ethertype 403 match ip6flowlbl 404 match ip dscp 405 match ip precedence 405 match ip tos 406 match protocol 407 match source-address mac 408 match srcip 408

14

Contents

match srcip6 409 match srcl4port 410 match vlan 410 mirror 411 police-simple 412 policy-map 413 redirect 414 service-policy 414 show class-map 415 show classofservice dot1p-mapping 417 show classofservice ip-dscp-mapping 418 show classofservice trust 421 show diffserv 422 show diffserv service interface ethernet 423 show diffserv service interface port-channel 423 show diffserv service brief 424 show interfaces cos-queue 425 show policy-map 427 show policy-map interface 428 show service-policy 429 traffic-shape 430

28 RADIUS Commandsaaa accounting network default start-stop group radius 433 acct-port 434 auth-port 435 deadtime 436

Contents

15

key 436 msgauth 437 name 438 primary 438 priority 439 radius-server deadtime 440 radius-server host 440 radius-server key 441 radius-server retransmit 442 radius-server source-ip 443 radius-server timeout 443 retransmit 444 show radius-servers 445 show radius-servers statistics 447 source-ip 450 timeout 450 usage 451

29 Spanning Tree Commandsclear spanning-tree detected-protocols 454 exit (mst) 454 instance (mst) 455 name (mst) 456 revision (mst) 456 show spanning-tree 457 show spanning-tree summary 466 spanning-tree 467

16

Contents

spanning-tree auto-portfast 467 spanning-tree bpdu flooding 468 spanning-tree bpdu-protection 469 spanning-tree cost 470 spanning-tree disable 470 spanning-tree forward-time 471 spanning-tree guard 472 spanning-tree loopguard 472 spanning-tree max-age 473 spanning-tree max-hops 474 spanning-tree mode 474 spanning-tree mst 0 external-cost 475 spanning-tree mst configuration 476 spanning-tree mst cost 477 spanning-tree mst port-priority 477 spanning-tree mst priority 478 spanning-tree portfast 479 spanning-tree portfast bpdufilter default 480 spanning-tree portfast default 480 spanning-tree port-priority 481 spanning-tree priority 481 spanning-tree tcnguard 482 spanning-tree transmit hold-count 484

30 TACACS+ Commandskey 485 port 486

Contents

17

priority 486 show tacacs 487 tacacs-server host 488 tacacs-server key 488 tacacs-server timeout 489 timeout 490

31 VLAN Commandsdvlan-tunnel ethertype 492 interface vlan 493 interface range vlan 493 mode dvlan-tunnel 494 name 495 protocol group 495 protocol vlan group 496 protocol vlan group all 497 show dvlan-tunnel 498 show dvlan-tunnel interface 499 show interfaces switchport 500 show port protocol 503 show switchport protected 504 show vlan 504 show vlan association mac 505 show vlan association subnet 506 switchport access vlan 507 switchport forbidden vlan 508 switchport general acceptable-frame-type tagged-only 508

18

Contents

switchport general allowed vlan 509 switchport general ingress-filtering disable 510 switchport general pvid 511 switchport mode 511 switchport protected 512 switchport protected name 513 switchport trunk allowed vlan 514 vlan 514 vlan association mac 515 vlan association subnet 516 vlan database 516 vlan makestatic 517 vlan protocol group 518 vlan protocol group add protocol ethertype 518 vlan protocol group name 519 vlan protocol group remove 520

32 Voice VLAN Commandsvoice vlan 523 voice vlan (Interface) 523 show voice vlan 524

33 802.1X Commandsdot1x mac-auth-bypass 527 dot1x max-req 528 dot1x max-users 529 dot1x port-control 530

Contents

19

dot1x re-authenticate 531 dot1x re-authentication 531 dot1x system-auth-control 532 dot1x timeout quiet-period 532 dot1x timeout re-authperiod 533 dot1x timeout server-timeout 534 dot1x timeout supp-timeout 535 dot1x timeout tx-period 535 show dot1x 536 show dot1x clients 539 show dot1x ethernet 541 show dot1x statistics 542 show dot1x users 544 dot1x guest-vlan 545 dot1x unauth-vlan 546 show dot1x advanced 547 radius-server attribute 4 548

34 Layer 3 CommandsIntroduction 549

35 ARP Commandsarp 551 arp cachesize 552 arp dynamicrenew 552 arp purge 553 arp resptime 554

20

Contents

arp retries 555 arp timeout 555 clear arp-cache 556 clear arp-cache management 556 ip proxy-arp 557 show arp 558

36 DHCP and BOOTP Relay Commandsbootpdhcprelay cidridoptmode 561 bootpdhcprelay maxhopcount 562 bootpdhcprelay minwaittime 562

37 DHCPv6 Commandsclear ipv6 dhcp 565 dns-server 566 domain-name 567 ipv6 dhcp pool 567 ipv6 dhcp relay 568 ipv6 dhcp relay-agent-info-opt 569 ipv6 dhcp relay-agent-info-remote-id-subopt 570 ipv6 dhcp server 570 prefix-delegation 571 service dhcpv6 572 show ipv6 dhcp 572 show ipv6 dhcp binding 573 show ipv6 dhcp interface 574 show ipv6 dhcp pool 575

Contents

21

show ipv6 dhcp statistics 576

38 DVMRP Commandsip dvmrp 579 ip dvmrp metric 580 ip dvmrp trapflags 580 show ip dvmrp 581 show ip dvmrp interface 582 show ip dvmrp neighbor 582 show ip dvmrp nexthop 583 show ip dvmrp prune 584 show ip dvmrp route 584

39 IGMP Commandsip igmp 587 ip igmp last-member-query-count 588 ip igmp last-member-query-interval 589 ip igmp query-interval 589 ip igmp query-max-response-time 590 ip igmp robustness 591 ip igmp startup-query-count 591 ip igmp startup-query-interval 592 ip igmp version 593 show ip igmp 593 show ip igmp groups 594 show ip igmp interface 595 show ip igmp interface membership 596

22

Contents

show ip igmp interface stats 597

40 IGMP Proxy Commandsip igmp-proxy 599 ip igmp-proxy reset-status 600 ip igmp-proxy unsolicited-report-interval 600 show ip igmp-proxy 601 show ip igmp-proxy interface 602 show ip igmp-proxy groups 603 show ip igmp-proxy groups detail 603

41 IP Helper Commandsclear ip helper statistics 605 ip helper-address (global configuration) 606 ip helper-address (interface configuration) 607 ip helper enable 609 show ip helper-address 609 show ip helper statistics 611

42 IP Routing Commandsencapsulation 615 ip address 616 ip mtu 617 ip netdirbcast 618 ip route 618 ip route default 619 ip route distance 620

Contents

23

ip routing 621 routing 621 show ip brief 622 show ip interface 623 show ip protocols 624 show ip route 626 show ip route preferences 627 show ip route summary 627 show ip stats 628 show ip vlan 630

43 IPv6 MLD Snooping Commandsipv6 mld snooping immediate-leave 633 ipv6 mld snooping groupmembership-interval 634 ipv6 mld snooping maxresponse 635 ipv6 mld snooping mcrtexpiretime 635 ipv6 mld snooping (Global) 636 ipv6 mld snooping (Interface) 637 ipv6 mld snooping (VLAN) 637 show ipv6 mld snooping 638 show ipv6 mld snooping groups 639

44 IPv6 Multicast Commandsipv6 pimsm (Global config) 641 ipv6 pimsm (VLAN Interface config) 642 ipv6 pimsm bsr-border 642 ipv6 pimsm bsr-candidate 643

24

Contents

ipv6 pimsm dr-priority 644 ipv6 pimsm hello-interval 644 ipv6 pimsm join-prune-interval 645 ipv6 pimsm register-threshold 646 ipv6 pimsm rp-address 646 ipv6 pimsm rp-candidate 647 ipv6 pimsm spt-threshold 648 ipv6 pimsm ssm 648 show ipv6 pimsm 649 show ipv6 pimsm bsr 650 show ipv6 pimsm interface 651 show ipv6 pimsm neighbor 651 show ipv6 pimsm rphash 652 show ipv6 pimsm rp mapping 653

45 IPv6 Routing Commandsclear ipv6 neighbors 656 clear ipv6 statistics 657 ipv6 address 658 ipv6 enable 659 ipv6 forwarding 659 ipv6 host 660 ipv6 mld last-member-query-count 661 ipv6 mld last-member-query-interval 661 ipv6 mld-proxy 662 ipv6 mld-proxy reset-status 662 ipv6 mld-proxy unsolicit-rprt-interval 663

Contents

25

ipv6 mld query-interval 664 ipv6 mld query-max-response-time 664 ipv6 mld router 665 ipv6 mtu 665 ipv6 nd dad attempts 666 ipv6 nd managed-config-flag 667 ipv6 nd ns-interval 667 ipv6 nd other-config-flag 668 ipv6 nd prefix 669 ipv6 nd ra-interval 670 ipv6 nd ra-lifetime 671 ipv6 nd reachable-time 671 ipv6 nd suppress-ra 672 ipv6 pimdm 673 ipv6 pimdm hello-interval 673 ipv6 route 674 ipv6 route distance 675 ipv6 unicast-routing 675 ping ipv6 676 ping ipv6 interface 677 show ipv6 brief 678 show ipv6 interface 678 show ipv6 mld groups 680 show ipv6 mld interface 684 show ipv6 mld-proxy 686 show ipv6 mld-proxy groups 687 show ipv6 mld-proxy groups detail 688 show ipv6 mld-proxy interface 690

26

Contents

show ipv6 mld traffic 691 show ipv6 neighbors 692 show ipv6 pimdm 693 show ipv6 pimdm interface 694 show ipv6 pimdm neighbor 695 show ipv6 route 695 show ipv6 route preferences 696 show ipv6 route summary 697 show ipv6 traffic 698 show ipv6 vlan 701 traceroute ipv6 701

46 Loopback Interface Commandsinterface loopback 703 show interfaces loopback 703

47 Multicast Commandsip mcast boundary 706 ip mroute 706 ip multicast 707 ip multicast ttl-threshold 708 ip pimsm 709 ip pimsm bsr-border 709 ip pimsm bsr-candidate 710 ip pimsm dr-priority 711 ip pimsm hello-interval 711 ip pimsm join-prune-interval 712

Contents

27

ip pimsm register-threshold 713 ip pimsm rp-address 713 ip pimsm rp-candidate 714 ip pimsm spt-threshold 715 ip pimsm ssm 715 show bridge multicast address-table count 716 show ip mcast 717 show ip mcast boundary 718 show ip mcast interface 718 show ip mcast mroute 719 show ip mcast mroute group 720 show ip mcast mroute source 721 show ip mcast mroute static 722 show ip pimsm bsr 723 show ip pimsm interface 724 show ip pimsm rphash 725 show ip pimsm rp mapping 726

48 OSPF Commandsarea default-cost 729 area nssa 729 area nssa default-info-originate 730 area nssa no-redistribute 731 area nssa no-summary 732 area nssa translator-role 732 area nssa translator-stab-intv 733 area range 734

28

Contents

area stub 735 area stub no-summary 735 area virtual-link 736 area virtual-link authentication 737 area virtual-link dead-interval 737 area virtual-link hello-interval 738 area virtual-link retransmit-interval 739 area virtual-link transmit-delay 740 auto-cost 741 bandwidth 741 capability opaque 742 clear ip ospf 742 default-information originate 743 default-metric 744 distance ospf 745 distribute-list out 746 enable 746 exit-overflow-interval 747 external-lsdb-limit 748 ip ospf area 748 ip ospf authentication 749 ip ospf cost 750 ip ospf dead-interval 750 ip ospf hello-interval 751 ip ospf mtu-ignore 752 ip ospf network 752 ip ospf priority 753 ip ospf retransmit-interval 754 Contents

29

ip ospf transmit-delay 755 maximum-paths 755 network area 756 passive-interface default 757 passive-interface 757 redistribute 758 router-id 759 router ospf 759 show ip ospf 760 show ip ospf abr 763 show ip ospf area 763 show ip ospf asbr 765 show ip ospf database 766 show ip ospf database database-summary 769 show ip ospf interface 771 show ip ospf interface brief 773 show ip ospf interface stats 774 show ip ospf neighbor 775 show ip ospf range 776 show ip ospf statistics 776 show ip ospf stub table 777 show ip ospf virtual-link 778 show ip ospf virtual-link brief 779 timers spf 780 1583compatibility 781

30

Contents

49 OSPFv3 Commandsarea default-cost 784 area nssa 785 area nssa default-info-originate 786 area nssa no-redistribute 787 area nssa no-summary 787 area nssa translator-role 788 area nssa translator-stab-intv 789 area range 789 area stub 790 area stub no-summary 791 area virtual-link 792 area virtual-link dead-interval 792 area virtual-link hello-interval 793 area virtual-link retransmit-interval 794 area virtual-link transmit-delay 795 default-information originate 795 default-metric 796 distance ospf 797 enable 798 exit-overflow-interval 798 external-lsdb-limit 799 ipv6 ospf 800 ipv6 ospf areaid 800 ipv6 ospf cost 801 ipv6 ospf dead-interval 802 ipv6 ospf hello-interval 802

Contents

31

ipv6 ospf mtu-ignore 803 ipv6 ospf network 804 ipv6 ospf priority 805 ipv6 ospf retransmit-interval 805 ipv6 ospf transmit-delay 806 ipv6 router ospf 807 maximum-paths 807 passive-interface 808 passive-interface default 809 redistribute 809 router-id 810 show ipv6 ospf 810 show ipv6 ospf abr 812 show ipv6 ospf area 812 show ipv6 ospf asbr 813 show ipv6 ospf database 814 show ipv6 ospf database database-summary 817 show ipv6 ospf interface 818 show ipv6 ospf interface brief 819 show ipv6 ospf interface stats 820 show ipv6 ospf interface vlan 821 show ipv6 ospf neighbor 823 show ipv6 ospf range 824 show ipv6 ospf stub table 825 show ipv6 ospf virtual-link 825 show ipv6 ospf virtual-link brief 826

32

Contents

50 PIM-DM Commandsip pimdm 829 show ip pimdm 829 show ip pimdm interface 830 show ip pimdm neighbor 831

51 PIM-SM Commandsip pimsm 833 ip pimsm spt-threshold 834 ip pim-trapflags 834 show ip pimsm 835 show ip pimsm interface 836 show ip pimsm neighbor 836 show ip pimsm rphash 837

52 Router Discovery Protocol Commandsip irdp 839 ip irdp address 840 ip irdp holdtime 840 ip irdp maxadvertinterval 841 ip irdp minadvertinterval 842 ip irdp preference 842 show ip irdp 843

53 Routing Information Protocol Commandsauto-summary 845 default-information originate 846

Contents

33

default-metric 846 distance rip 847 distribute-list out 848 enable 848 hostroutesaccept 849 ip rip 850 ip rip authentication 850 ip rip receive version 851 ip rip send version 852 redistribute 852 router rip 853 show ip rip 854 show ip rip interface 855 show ip rip interface brief 856 split-horizon 857

54 Tunnel Interface Commandsinterface tunnel 859 show interfaces tunnel 860 tunnel destination 860 tunnel mode ipv6ip 861 tunnel source 862

55 Virtual Router Redundancy Protocol Commandsip vrrp 863 ip vrrp authentication 864 ip vrrp ip 865

34

Contents

ip vrrp mode 866 ip vrrp preempt 866 ip vrrp priority 867 ip vrrp timers advertise 868 ip vrrp track interface 868 ip vrrp track ip route 869 show ip vrrp 870 show ip vrrp interface 871 show ip vrrp interface brief 872 show ip vrrp interface stats 873

56 Utility CommandsIntroduction 875

57 Autoconfig Commandsboot host auto-save 877 boot host dhcp 877 boot host retry-count 878 show boot 879

58 Captive Portal Commandsauthentication timeout 883 captive-portal 883 enable 884 http port 884 https port 885 show captive-portal 886

Contents

35

show captive-portal status 886 block 887 configuration 888 enable 888 group 889 interface 890 locale 890 name 891 protocol 891 redirect 892 redirect-url 892 session-timeout 893 verification 893 captive-portal client deauthenticate 894 show captive-portal client status 895 show captive-portal configuration client status 896 show captive-portal interface client status 897 show captive-portal interface configuration status 898 clear captive-portal users 899 no user 899 show captive-portal user 900 user group 901 user name 902 user password 902 user session-timeout 903 show captive-portal configuration 904 show captive-portal configuration interface 904 show captive-portal configuration locales 906

36

Contents

show captive-portal configuration status 906 show trapflags captive-portal 907 user group 908 user group moveusers 909 user group name 909

59 Clock Commandsclock set 911 show clock 912 show sntp configuration 913 show sntp status 914 sntp authenticate 915 sntp authentication-key 916 sntp broadcast client enable 916 sntp client poll timer 917 sntp server 918 sntp trusted-key 919 sntp unicast client enable 919 clock timezone hours-offset 920 no clock timezone 921 clock summer-time recurring 921 clock summer-time date 922 no clock summer-time 923

60 Configuration and Image File Commandsboot system 925 clear config 926

Contents

37

copy 926 delete backup-config 929 delete backup-image 930 delete startup-config 930 filedescr 931 script apply 932 script delete 932 script list 933 script validate 934 show backup-config 935 show bootvar 936 show dir 937 show running-config 937 show startup-config 940 update bootcode 941

61 Denial of Service Commandsdos-control firstfrag 943 dos-control icmp 944 dos-control l4port 945 dos-control sipdip 945 dos-control tcpflag 946 dos-control tcpfrag 947 ip icmp echo-reply 947 ip icmp error-interval 948 ip unreachables 949 ip redirects 949

38

Contents

ipv6 icmp error-interval 950 ipv6 unreachables 951 show dos-control 951

62 Line Commandsexec-timeout 953 history 954 history size 954 line 955 show line 956 speed 957

63 Management ACL Commandsdeny (management) 959 management access-class 960 management access-list 961 permit (management) 962 show management access-class 963 show management access-list 964

64 Password Management Commandspasswords aging 967 passwords history 968 passwords lock-out 968 passwords min-length 969 show passwords configuration 970

Contents

39

65 PHY Diagnostics Commandsshow copper-ports cable-length 971 show copper-ports tdr 972 show fiber-ports optical-transceiver 973 test copper-port tdr 974

66 RMON Commandsrmon alarm 975 rmon collection history 977 rmon event 978 show rmon alarm 978 show rmon alarm-table 980 show rmon collection history 981 show rmon events 983 show rmon history 984 show rmon log 987 show rmon statistics 988

67 Serviceability Tracing Packet Commandsdebug arp 992 debug auto-voip 992 debug clear 993 debug console 993 debug dot1x 994 debug igmpsnooping 994 debug ip acl 995 debug ip dvmrp 995

40

Contents

debug ip igmp 996 debug ip mcache 997 debug ip pimdm 997 debug ip pimsm 998 debug ip vrrp 999 debug ipv6 mcache 999 debug ipv6 mld 1000 debug ipv6 pimdm 1000 debug ipv6 pimsm 1001 debug isdp 1002 debug lacp 1002 debug mldsnooping 1003 debug ospf 1004 debug ospfv3 1004 debug ping 1005 debug rip 1005 debug sflow 1006 debug spanning-tree 1006 show debugging 1007

68 Sflow Commandssflow destination 1009 sflow polling 1010 sflow polling (Interface Mode) 1011 sflow sampling 1012 sflow sampling (Interface Mode) 1013 show sflow agent 1013

Contents

41

show sflow destination 1015 show sflow polling 1016 show sflow sampling 1017

69 SNMP Commandsshow snmp 1019 show snmp engineID 1021 show snmp filters 1021 show snmp groups 1022 show snmp users 1024 show snmp views 1025 show trapflags 1026 snmp-server community 1028 snmp-server community-group 1029 snmp-server contact 1030 snmp-server enable traps 1030 snmp-server enable traps authentication 1032 snmp-server engineID local 1032 snmp-server filter 1033 snmp-server group 1034 snmp-server host 1036 snmp-server location 1037 snmp-server user 1037 snmp-server view 1039 snmp-server v3-host 1040

42

Contents

70 SSH Commandscrypto key generate dsa 1043 crypto key generate rsa 1044 crypto key pubkey-chain ssh 1044 ip ssh port 1045 ip ssh pubkey-auth 1046 ip ssh server 1047 key-string 1047 show crypto key mypubkey 1049 show crypto key pubkey-chain ssh 1050 show ip ssh 1051 user-key 1052

71 Syslog Commandsclear logging 1053 clear logging file 1054 description 1054 level 1055 logging cli-command 1056 logging 1057 logging buffered 1057 logging console 1058 logging facility 1059 logging file 1059 logging on 1060 logging snmp 1061 logging web-session 1061

Contents

43

port 1062 show logging 1063 show logging file 1065 show syslog-servers 1065

72 System Management Commandsasset-tag 1068 banner motd 1069 banner motd acknowledge 1069 clear power average 1070 cut-through mode 1071 hostname 1071 low-power 1072 member 1073 movemanagement 1074 ping 1074 reload 1076 set description 1077 show boot-version 1077 show cut-through mode 1078 show memory cpu 1078 show process cpu 1079 show sessions 1081 show stack-port 1082 show stack-port counters 1083 show stack-port diag 1084 show stack-standby 1086

44

Contents

show supported switchtype 1087 show switch 1089 show switch chassis-mgmt 1092 show system 1093 show system id 1094 show system power 1095 show system temperature 1096 show tech-support 1097 show users 1102 show version 1103 stack 1104 standby 1105 switch priority 1105 switch renumber 1106 telnet 1107 traceroute 1109

73 Telnet Server Commandsip telnet server disable 1111 ip telnet port 1112 show ip telnet 1112

74 User Interface Commandsenable 1113 end 1113 exit 1114 quit 1115

Contents

45

75 Web Server Commandscommon-name 1117 country 1118 crypto certificate generate 1119 crypto certificate import 1119 crypto certificate request 1121 duration 1122 ip http port 1122 ip http server 1123 ip https certificate 1124 ip https port 1124 ip https server 1125 key-generate 1126 location 1126 organization-unit 1127 show crypto certificate mycertificate 1128 show ip http 1129 show ip https 1129 state 1131

46

Contents

1Command GroupsIntroductionThe Command Line Interface (CLI) is a network management application operated through an ASCII terminal without the use of a Graphic User Interface (GUI) driven software application. By directly entering commands, the user has greater configuration flexibility. The CLI is a basic command-line interpreter similar to the UNIX C shell. A switch can be configured and maintained by entering commands from the CLI, which is based solely on textual input and output with commands being entered by a terminal keyboard and the output displayed as text via a terminal monitor. The CLI can be accessed from a console terminal connected to an EIA/TIA-232 port or through a Telnet session. This guide describes how the CLI is structured, describes the command syntax, and describes the command functionality. This guide also provides information for configuring the PowerConnect switch, details the procedures, and provides configuration examples. Basic installation configuration is described in the Users Guide and must be completed before using this document.

Command GroupsThe system commands can be broken down into three sets of functional groups, Layers 2, Layer 3, and Utility.Table 1-1. System Command Groups Command Group Layer 2 Commands AAA ACL Address Table Auto-VoIP CDP Interoperability Data Center Bridging Configures connection security including authorization and passwords. Configures and displays ACL information. Configures bridging address tables. Configures the Auto-VoIP feature. Configures Cisco Discovery Protocol (CDP). Provides priority-based flow control that can pause (inhibit transmission) of individual priorities within a single physical link. Description

Command Groups

47

Table 1-1. System Command Groups (continued) Command Group DHCP l2 Relay DHCP Snooping Dynamic ARP Inspection Ethernet Configuration GVRP IGMP Snooping IGMP Snooping Querier IP Addressing IPv6 ACL IPv6 MLD Snooping IPv6 MLD Snooping Querier iSCSI Flow Acceleration LACP Link Dependency LLDP Port Monitor QoS RADIUS Spanning Tree TACACS+ VLAN Voice VLAN 802.1X Description Enables the Layer 2 DHCP Relay agent for an interface. Configures DHCP snooping and whether an interface is trusted for filtering. Configures for rejection of invalid and malicious ARP packets. Configures all port configuration options for example ports, storm control, port speed and auto-negotiation. Configures and displays GVRP configuration and information. Configures IGMP snooping and displays IGMP configuration and IGMP information. Configures IGMP Snooping Querier and displays IGMP Snooping Querier information. Configures and manages IP addresses on the switch. Configures and displays ACL information for IPv6. Configures IPv6 MLD Snooping. Configures IPv6 Snooping Querier and displays IPv6 Snooping Querier information. Configures special QoS treatment for traffic between iSCSI initiators and target systems. Configures and displays LACP information. Configures and displays link dependency information. Configures and displays LLDP information. Monitors activity on specific target ports. Configures and displays QoS information. Configures and displays RADIUS information. Configures and reports on Spanning Tree protocol. Configures and displays TACACS+ information. Configures VLANs and displays VLAN information. Configures voice VLANs and displays voice VLAN information Configures and displays commands related to 802.1X security protocol.

48

Command Groups

Table 1-1. System Command Groups (continued) Command Group Layer 3 Commands ARP (IPv4) DHCP and BOOTP Relay (IPv4) DHCPv6 DVMRP (Mcast) IGMP (Mcast) IGMP Proxy (Mcast) IP Helper IP Routing (IPv4) IPv6 Multicast IPv6 Routing Loopback Interface (IPv6) Multicast (Mcast) OSPF (IPv4)_ OSPFv3 (IPv6) PIM-DM (Mcast) PIM-SM (Mcast) Router Discovery Protocol (IPv4) Routing Information Protocol (IPv4) Tunnel Interface (IPv6) Virtual Router Redundancy (IPv4) Utility Commands Auto Config Captive Portal Clock Configuration and Image Files Denial of Service Automatically configures switch when a configuration file is not found. Blocks clients from accessing network until user verification is established. Configures the system clock. Manages the switch configuration files. Provides several Denial of Service options. Manages Address Resolution Protocol functions. Manages DHCP/BOOTP operations on the system. Configures IPv6 DHCP functions. Configures DVMRP operations. Configures IGMP operations. Manages IGMP Proxy on the system. Configures relay of UDP packets. Configures IP routing and addressing. Manages IPv6 Multicasting on the system. Configures IPv6 routing and addressing. Manages Loopback configurations. Manages Multicasting on the system. Manages shortest path operations. Manages IPv6 shortest path operations. Configures PIM-DM operations. Configures PIM-SM operations. Manages router discovery operations. Configures RIP activities. Managing tunneling operations. Manages router redundancy on the system. Description

Command Groups

49

Table 1-1. System Command Groups (continued) Command Group Line Management ACL Password Management PHY Diagnostics RMON Serviceability Tracing sFlow SNMP SSH Syslog System Management Telnet Server User Interface Web Server Description Configures the console, SSH, and remote Telnet connection. Configures and displays management access-list information. Provides password management. Diagnoses and displays the interface status. Can be configured through the CLI and displays RMON information. Controls display of debug output to serial port or telnet console. Configures sFlow monitoring. Configures SNMP communities, traps and displays SNMP information. Configures SSH authentication. Manages and displays syslog messages. Configures the switch clock, name and authorized users. Configures Telnet service on the switch and displays Telnet information. Describes user commands used for entering CLI commands. Configures Web based access to the switch.

50

Command Groups

Mode TypesThe tables on the following pages use these abbreviations for Command Mode names. ARPA ARP ACL Configuration CC Crypto Configuration CP Captive Portal Configuration CPI Captive Portal Instance CMC Class-Map Configuration DCB Datacenter-Bridging GC Global Configuration IC Interface Configuration IP IP Access List Configuration KC Key Chain KE Key L Logging LC Line Configuration MA Management Access-level MC MST Configuration ML MAC Access List Configuration PE Privileged EXEC PM Policy Map Configuration PCGC Policy Map Global Configuration PCMC Policy Class Map Configuration R RADIUS RIP Router RIP Configuration RC Router Configuration ROSPF Router Open Shortest Path First ROSV3 Router Open Shortest Path First Version 3 SG Stack Global Configuration SP SSH Public Key SK SSH Public Key-chain TC TACACS Configuration UE User EXEC

Command Groups

51

VLAN VLAN Configuration v6ACL IPv6 Access List Configuration v6CMC v6DP IPv6 DHCP Pool Configuration

Layer 2 CommandsAAACommand aaa authentication dot1x Description Specifies one or more authentication, authorization and accounting (AAA) methods for use on interfaces running IEEE 802.1X. Defines authentication method lists for accessing higher privilege levels. Defines login authentication. Mode* GC

aaa authentication enable aaa authentication login

GC GC GC LC GC GC GC

aaa authorization network default Enables the switch to accept VLAN assignment by the radius RADIUS server. enable authentication enable password ip http authentication ip https authentication login authentication password password show authentication methods show user accounts show users login-history username Specifies the authentication method list when accessing a higher privilege level from a remote telnet or console. Sets a local password to control access to the normal level. Specifies authentication methods for http. Specifies authentication methods for https.

Specifies the login authentication method list for a remote LC telnet or console. Specifies a password on a line. Specifies a user password Shows information about authentication methods Displays information about the local user database Displays information about login histories of users Establishes a username-based authentication system. LC UE PE PE PE GC

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

52

Command Groups

ACLCommand access-list deny|permit Description Creates an Access Control List (ACL) that is identified by the parameter accesslistnumber. Mode* GC

The deny command denies traffic if the conditions defined ML in the deny statement are matched. The permit command allows traffic if the conditions defined in the permit statement are matched. Attaches a specified accesscontrol list to an interface. Attaches a specific MAC Access Control List (ACL) to an interface in a given direction. Creates the MAC Access Control List (ACL) identified by the name parameter. Renames the existing MAC Access Control List (ACL) name. Displays an Access Control List (ACL) and all of the rules that are defined for the ACL. Displays a MAC access list and all of the rules that are defined for the ACL. GC or IC GC or IC GC GC PE PE

ip access-group mac access-group mac access-list extended mac access-list extended rename show ip access-lists show mac access-list

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Command Groups

53

Address TableCommand bridge address bridge aging-time bridge multicast address bridge multicast filtering bridge multicast forbidden forward-unregistered bridge multicast forward-all bridge multicast forwardunregistered clear bridge port security port security max show bridge address-table show bridge address-table count show bridge address-table static show bridge multicast addresstable show bridge multicast filtering show ports security show ports security addresses Description Adds a static MAC-layer station source address to the bridge table. Sets the address table aging time. Registers MAC-layer Multicast addresses to the bridge table, and adds static ports to the group. Enables filtering of Multicast addresses. Forbids a port to be a forwarding-unregistered-multicastaddresses port. Enables forwarding of all Multicast packets on a port. Mode* IC GC IC GC IC IC

bridge multicast forbidden address Forbids adding a specific Multicast address to specific ports. IC

Enables the forwarding of unregistered multicast addresses IC Removes any learned entries from the forwarding database. PE Disables new address learning on an interface. IC Configures the maximum addresses that can be learned on IC the port while the port is in port security mode. Displays dynamically created entries in the bridgeforwarding database. PE

Displays the number of addresses present in the Forwarding PE Database. Displays statically created entries in the bridge-forwarding database. Displays Multicast MAC address table information. Displays the Multicast filtering configuration. Displays the port-lock status. Displays current dynamic addresses in locked ports. PE PE PE PE PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

54

Command Groups

Auto-VoIPCommand show switchport voice switchport voice detect auto Description Displays the status of auto-voip on an interface or all interfaces. Mode* PE

Enables the VoIP Profile on all the interfaces of the switch. GC/IC

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

CDP InteroperabilityCommand clear isdp counters clear isdp table isdp advertise-v2 isdp enable isdp holdtime isdp timer show isdp show isdp interface show isdp entry show isdp neighbors show isdp traffic Description Clears the ISDP counters. Clears entries in the ISDP table. Enables the sending of ISDP version 2 packets from the device. Enables ISDP on the switch. Configures the hold time for ISDP packets that the switch transmits. Sets period of time between sending new ISDP packets. Displays global ISDP settings. Displays ISDP settings for the specified interface. Displays ISDP entries. Displays the list of neighboring devices. Displays ISDP statistics. Mode* PE PE GC GC/IC GC GC PE PE PE PE PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Command Groups

55

Data Center BridgingCommand datacenter-bridging priority-flow-control mode on priority-flow-control priority show interfaces datacenterbridging Description Enters the Data Center Bridging mode. Enables Priority-Flow-Control (PFC) on an interface. Enables the priority group for lossless behavior (PFC enabled). Displays the datacenter-bridging configuration, status and counters for a given interface. Mode* PE IC DCB DCB PE

clear priority-flow-control statistics Clears all or interface Priority-Flow-Control statistics.

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

DHCP l2 RelayCommand dhcp l2relay dhcp l2relay circuit-id dhcp l2relay remote-id dhcp l2relay vlan dhcp l2relay trust Description Enables the Layer 2 DHCP Relay agent for an interface. Enables user to set the DHCP Option 82 Circuit ID for a VLAN. Enables user to set the DHCP Option 82 Remote ID for a VLAN. Enables the L2 DHCP Relay agent for a set of VLANs. Configures an interface to trust a received DHCP Option 82. Mode* GC/IC GC GC GC IC

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

56

Command Groups

DHCP SnoopingCommand clear ip dhcp snooping binding clear ip dhcp snooping statistics ip dhcp snooping ip dhcp snooping binding ip dhcp snooping database ip dhcp snooping database writedelay ip dhcp snooping limit ip dhcp snooping log-invalid ip dhcp snooping trust ip dhcp snooping verify macaddress show ip dhcp snooping show ip dhcp snooping binding show ip dhcp snooping database show ip dhcp snooping interfaces show ip dhcp snooping statistics Description Clears all DHCP Snooping entries. clears all DHCP Snooping statistics. Enables DHCP snooping globally or on a specific VLAN. Configures a static DHCP Snooping binding. Configures the persistent location of the DHCP snooping database. Configures the interval in seconds at which the DHCP Snooping database will be stored in persistent storage. Controls the maximum rate of DHCP messages. Enables logging of DHCP messages filtered by the DHCP Snooping application. Configure a port as trusted for DHCP snooping. Enables the verification of the source MAC address with the client MAC address in the received DHCP message. Displays the DHCP snooping global and per port configuration. Displays the DHCP snooping binding entries. Displays the DHCP snooping configuration related to the database persistence. Displays the DHCP Snooping status of the interfaces. Displays the DHCP snooping filtration statistics. Mode* PE PE GC/IC GC GC GC IC IC IC GC PE PE PE PE PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Command Groups

57

Dynamic ARP InspectionCommand arp access-list clear counters ip arp inspection ip arp inspection filter ip arp inspection limit ip arp inspection trust ip arp inspection validate Description Creates an ARP ACL. Resets the statistics for Dynamic ARP Inspection on all VLANs. Mode* GC PE

Configures the ARP ACL to be used for a single VLAN or a GC range of VLANs to filter invalid ARP packets. Configures the rate limit and burst interval values for an interface. Configures an interface as trusted for Dynamic ARP Inspection. Enables additional validation checks like source MAC address validation, destination MAC address validation or IP address validation on the received ARP packets. Enables Dynamic ARP Inspection on a single VLAN or a range of VLANs. Configures a rule for a valid IP address and MAC address combination used in ARP packet validation. Displays the configured ARP ACLs with the rules. IC IC GC

ip arp inspection vlan permit ip host mac host show arp access-list show ip arp inspection ethernet show ip arp inspection statistics show ip arp inspection vlan

GC ARPA PE

Displays the Dynamic ARP Inspection configuration on all PE the DAI enabled interfaces. Displays the statistics of the ARP packets processed by Dynamic ARP Inspection. PE

Displays the Dynamic ARP Inspection configuration on all PE the VLANs in the given VLAN range.

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

58

Command Groups

Ethernet ConfigurationCommand clear counters description duplex flowcontrol interface ethernet interface range ethernet mtu Description Clears statistics on an interface. Adds a description to an interface. Configures the full/half duplex operation of a given Ethernet interface when not using auto-negotiation. Configures the flow control on a given interface. Enters the interface configuration mode to configure an Ethernet type interface. Enters the interface configuration mode to configure multiple Ethernet type interfaces. Mode* PE IC IC GC GC GC

Enables jumbo frames on an interface by adjusting the IC maximum size of a packet or maximum transmission unit (MTU).Enables auto-negotiation operation for the speed and duplex parameters of a given interface. Displays the configuration for all configured interfaces. Displays traffic seen by the physical interface. IC

negotiation show interfaces advertise show interfaces configuration show interfaces counters show interfaces counters

Displays information about auto negotiation advertisement. PE UE UE

Displays traffic seen by the interface, including Received PE Priority Flow Control Frames and Transmitted PFC Frames for a given ethernet or port-channel interface. Displays the description for all configured interfaces. Displays the status for all configured interfaces. Displays statistics for one port or for the entire switch. Displays the storm control configuration. Disables interfaces. Configures the speed of a given Ethernet interface when not using auto-negotiation. Enables Broadcast storm control. UE UE PE PE IC IC IC

show interfaces description show interfaces status show statistics ethernet show storm-control shutdown speed storm-control broadcast storm-control multicast storm-control unicast

Enables the switch to count Multicast packets together with IC Broadcast packets. Enables Unicast storm control. IC

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Command Groups

59

GVRPCommand clear gvrp statistics garp timer gvrp enable (global) gvrp enable (interface) gvrp registration-forbid gvrp vlan-creation-forbid show gvrp configuration Description Clears all the GVRP statistics information. Adjusts the GARP application join, leave, and leaveall GARP timer values. Enables GVRP globally. Enables GVRP on an interface. De-registers all VLANs, and prevents dynamic VLAN registration on the port. Enables or disables dynamic VLAN creation. Mode* PE IC GC IC IC IC

Displays GVRP configuration information, including PE timer values, whether GVRP and dynamic VLAN creation is enabled, and which ports are running GVRP Displays GVRP error statistics. Displays GVRP statistics. UE UE

show gvrp error-statistics show gvrp statistics

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

IGMP SnoopingCommand ip igmp snooping (Global) ip igmp snooping (Interface) ip igmp snooping host-time-out ip igmp snooping leave-time-out ip igmp snooping mrouter-timeout show ip igmp snooping groups show ip igmp snooping interface show ip igmp snooping mrouter ip igmp snooping (VLAN) Description In Global Config mode, Enables Internet Group Management Protocol (IGMP) snooping. Enables Internet Group Management Protocol (IGMP) snooping on a specific VLAN. Configures the host-time-out. Configures the leave-time-out. Configures the mrouter-time-out. Displays Multicast groups learned by IGMP snooping. Displays IGMP snooping configuration. Displays information on dynamically learned Multicast router interfaces. In VLAN Config mode, enables IGMP snooping on a particular VLAN or on all interfaces participating in a VLAN. Mode* GC IC IC IC IC UE PE PE VLAN

60

Command Groups

Command ip igmp snooping fast-leave ip igmp snooping groupmembership-interval ip igmp snooping maxresponse

Description Enables or disables IGMP Snooping fast-leave mode on a selected VLAN. Sets the IGMP Group Membership Interval time on a VLAN. Sets the IGMP Maximum Response time on a particular VLAN.

Mode* VLAN VLAN VLAN VLAN

ip igmp snooping mcrtrexpiretime Sets the Multicast Router Present Expiration time. *NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

IGMP Snooping QuerierCommand ip igmp snooping querier Description Enables/disables IGMP Snooping Querier on the system (Global Configuration mode) or on a VLAN. Mode* GC, VLAN

ip igmp snooping querier election Enables the Snooping Querier to participate in the Querier VLAN participate Election process when it discovers the presence of another Querier in the VLAN. ip igmp snooping querier queryinterval ip igmp snooping querier timer expiry ip igmp snooping querier version show igmp snooping querier Sets the IGMP Querier Query Interval time. Sets the IGMP Querier timer expiration period. Sets the IGMP version of the query that the snooping switch is going to send periodically. Displays IGMP Snooping Querier information. GC GC GC PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

IP AddressingCommand clear host helper address ip address ip address ip address vlan Description Deletes entries from the host name-to-address cache Enable forwarding User Datagram Protocol (UDP) Broadcast packets received on an interface. Sets a management IP address on the switch. Sets a static OOB port IP address. Sets the management VLAN. Mode* PE IC GC IC (outof-band) GC

Command Groups

61

Command ip default-gateway ip domain-lookup ip domain-name ip helper-address ip host ip name-server ipv6 address ipv6 enable ipv6 gateway show arp switch show hosts show ip helper-address show ip interface management

Description Defines a default gateway (router). Enables IP DNS-based host name-to-address translation. Defines a default domain name to complete unqualified host names. Allows the device to forward User Datagram Protocol (UDP) broadcasts received on an interface.

Mode* GC GC GC GC

Configures static host name-to-address mapping in the host GC cache. Configures available name servers. Set the IPv6 address of the management interface. Enable IPv6 on the management interface. Displays the entries in the ARP table. Displays the default domain name, a list of name server hosts, static and cached list of host names and addresses. Displays the ip helper addresses configuration. Displays the management IP interface information. GC GC GC PE UE PE PE

Configures an IPv6 gateway for the management interface. GC

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

IPv6 ACLCommand {deny | permit} ipv6 access-list Description Creates a new rule for the current IPv6 access list. Creates an IPv6 Access Control List (ACL) consisting of classification fields defined for the IP header of an IPv6 frame. Changes the name of an IPv6 ACL. Mode* v6ACL GC

ipv6 access-list rename ipv6 traffic-filter show ipv6 access-lists

GC

Attaches a specific IPv6 ACL to an interface or associates it GC with a VLAN ID in a given direction. IC Displays an IPv6 access list (and the rules defined for it). PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

62

Command Groups

IPv6 MLD SnoopingCommand ipv6 mld snooping immediateleave ipv6 mld snooping groupmembership-interval ipv6 mld snooping maxresponse Description Mode*

Enables or disables MLD Snooping immediate-leave admin IC mode on a selected interface or VLAN. VLAN Sets the MLD Group Membership Interval time on a VLAN IC or interface. VLAN Sets the MLD Maximum Response time for an interface or IC VLAN. VLAN IC GC IC VLAN PE PE Enables MLD Snooping on the system (Global Config Mode). Enables MLD Snooping on an interface. Enables MLD Snooping on a particular VLAN and all interfaces participating in that VLAN. Displays MLD Snooping information. Displays the MLD Snooping entries in the MFDB table.

ipv6 mld snooping mcrtexpiretime Sets the Multicast Router Present Expiration time. ipv6 mld snooping (Global) ipv6 mld snooping (Interface) ipv6 mld snooping (VLAN) show ipv6 mld snooping show ipv6 mld snooping groups

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

IPv6 MLD Snooping QuerierCommand ipv6 mld snooping querier Description Enables MLD Snooping Querier on the system or on a VLAN. Mode* GC VLAN GC VLAN

ipv6 mld snooping querier address Sets the global MLD Snooping Querier address on the system or on a VLAN.

ipv6 mld snooping querier election Enables the Snooping Querier to participate in the Querier VLAN participate Election process when it discovers the presence of another Querier in the VLAN. ipv6 mld snooping querier queryinterval ipv6 mld snooping querier timer expiry show ipv6 mld snooping querier show ipv6 mld snooping groups Sets the MLD Querier Query Interval time. Sets the MLD Querier timer expiration period. Displays MLD Snooping Querier information. Displays the MLD Snooping entries in the MFDB table. GC GC PE PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Command Groups

63

iSCSI Flow AccelerationCommand iscsi aging time iscsi cos iscsi enable iscsi target port show iscsi show iscsi sessions Description Sets aging time for iSCSI sessions. Sets the quality of service profile that will be applied to iSCSI flows. Enables Global Configuration mode command globally enables iSCSI awareness. Configures an iSCSI target port (optionally configures target port address and name). Displays the iSCSI settings. Displays the iSCSI sessions. Mode* GC GC GC GC PE PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

LACPCommand lacp port-priority lacp system-priority lacp timeout show lacp ethernet show lacp port-channel Description Configures the priority value for physical ports. Configures the system LACP priority. Assigns an administrative LACP timeout. Displays LACP information for Ethernet ports. Displays LACP information for a port-channel. Mode* IC GC IC PE PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

64

Command Groups

Link DependencyCommand link-dependency group no link-dependency group add ethernet no add ethernet add port-channel no add port-channel depends-on ethernet no depends-on ethernet depends-on port-channel no depends-on port-channel show link-dependency Description Enters the link-dependency mode to configure a link-dependency group. Mode* GC

Removes the configuration for a link-dependency GC group. Adds member Ethernet port(s) to the dependency list. Removes member Ethernet port(s) from the dependency list. Adds member port-channels to the dependency list. Removes member port-channels from the dependency list. Adds the dependent Ethernet ports list. Removes the dependent Ethernet ports list. Adds the dependent port-channels list. Removes the dependent port-channels list. Shows the link dependencies configured on a particular group. Link Dependency Link Dependency Link Dependency Link Dependency Link Dependency Link Dependency Link Dependency Link Dependency PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Command Groups

65

LLDPCommand clear lldp remote data clear lldp statistics lldp notification lldp notification-interval lldp receive lldp timers lldp transmit lldp transmit-mgmt lldp transmit-tlv show lldp show lldp connections show lldp interface show lldp local-device show lldp remote-device show lldp statistics lldp med lldp med transmit-tlv lldp med faststartrepeatcount lldp med confignotification show lldp med show lldp med interface show lldp med remote-device show lldp med local-device Description Deletes all data from the remote data table. Resets all LLDP statistics. Enables remote data change notifications. Mode* PE PE IC

Limits how frequently remote data change notifications are GC sent. Enables the LLDP receive capability. Sets the timing parameters for local data transmission on ports enabled for LLDP. Enables the LLDP advertise capability. IC GC IC

Specifies that transmission of the local system management IC address information in the LLDPDUs is included. Specifies which optional TLVs in the 802.1AB basic management set will be transmitted in the LLDPDUs. Displays the current LLDP configuration summary. Displays the current LLDP remote data. Displays the current LLDP interface state. Displays the LLDP local data Displays the LLDP remote data Displays the current LLDP traffic statistics. Enables/disables LLDP-MED on an interface. Spwcifies which optional TLVs in the LLDP MED set are transmitted in the LLDPDUs. Sets the value of the fast start repeat count. Enables sending the topology change notifications. Displays a summary of the current LLDP MED configuration. Displays a summary of the current LLDP MED configuration for a specific interface. Displays the current LLDP MED remote data. Displays the advertised LLDP local data. IC PE PE PE PE PE PE IC IC GC IC PE PE PE PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

66

Command Groups

Port ChannelCommand channel-group interface port-channel interface range port-channel hashing-mode no hashing-mode show interfaces port-channel show statistics port-channel Description Associates a port with a port-channel. Enters the interface configuration mode of a specific port-channel. Enters the interface configuration mode to configure multiple port-channels. Sets the hashing algorithm on trunk ports. Mode* IC GC GC IC (portchannel)

Sets the hashing algorithm on trunk ports to default (3). IC (portchannel) Displays port-channel information. Displays port-channel statistics. PE PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Port MonitorCommand monitor session show monitor session Description Configures a port monitoring session. Displays the port monitoring status. Mode* GC PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

QoSCommand assign-queue class Description Modifies the queue ID to which the associated traffic stream is assigned. Mode* PCMC

Creates an instance of a class definition within the specified PMC policy for the purpose of defining treatment of the traffic class through subsequent policy attribute statements. Defines a new DiffServ class of type match-all, match-any, GC or match-access-group. For now, only match-all is available in the CLI. Changes the name of a DiffServ class. Maps an 802.1p priority to an internal traffic class for a switch. Maps an IP DSCP value to an internal traffic class. GC GC and IC GC

class-map

class-map rename classofservice dotlp-mapping classofservice ip-dscp-mapping

Command Groups

67

Command classofservice trust conform-color

Description Sets the class of service trust mode of an interface. Specifies for each outcome, the only possible actions are drop, set-cos-transmit, set-sec-cos-transmit, setdscptransmit, set-prec-transmit, or transmit Specifies the minimum transmission bandwidth for each interface queue. Activates the strict priority scheduler mode for each specified queue. Sets the DiffServ operational mode to active. Use the drop policy-class-map configuration command to specify that all packets for the associated traffic stream are to be dropped at ingress. Marks all packets for the associated traffic stream with the specified class of service value in the priority field of the 802.1p header. Marks all packets for the associated traffic stream with the specified IP DSCP value. Marks all packets for the associated traffic stream with the specified IP precedence value. Adds add to the specified class definition the set of match conditions defined for another class.

Mode* GC and IC PCMC

cos-queue min-bandwidth cos-queue strict diffserv drop

GC and IC GC and IC GC PCMC

mark cos

PCMC

mark ip-dscp mark ip-precedence match class-map match cos match destination-address mac match dstip match dstip6 match dstl4port

PCMC PCMC CMC

Adds to the specified class definition a match condition for CMC the Class of Service value. Adds to the specified class definition a match condition based on the destination MAC address of a packet. Adds to the specified class definition a match condition based on the destination IP address of a packet. adds to the specified class definition a match condition based on the destination IPv6 address of a packet. Adds to the specified class definition a match condition based on the destination layer 4 port of a packet using a single keyword, or a numeric notation. Adds to the specified class definition a match condition based on the value of the ethertype. Adds to the specified class definition a match condition based on the IPv6 flow label of a packet. CMC CMC v6CMC CMC

match ethertype match ip6flowlbl

CMC v6CMC

68

Command Groups

Command match ip dscp

Description Adds to the specified class definition a match condition based on the value of the IP DiffServ Code Point (DSCP) field in a packet. Adds to the specified class definition a match condition based on the value of the IP. Adds to the specified class definition a match condition based on the value of the IP TOS field in a packet.

Mode* CMC

match ip precedence match ip tos match protocol

CMC CMC

Adds to the specified class definition a match condition CMC based on the value of the IP Protocol field in a packet using a single keyword notation or a numeric value notation. Adds to the specified class definition a match condition based on the source MAC address of the packet. Adds to the specified class definition a match condition based on the source IP address of a packet. Adds to the specified class definition a match condition based on the source IPv6 address of a packet. Adds to the specified class definition a match condition based on the source layer 4 port of a packet using a single keyword, a numeric notation, or a numeric range notation. Adds to the specified class definition a match condition based on the value of the layer 2 VLAN Identifier field. Mirrors all the data that matches the class defined to the destination port specified Establishes the traffic policing style for the specified class. Establishes a new DiffServ policy CMC CMC v6CMC CMC

match source-address mac match srcip match srcip6 match srcl4port

match vlan mirror police-simple policy-map redirect

CMC PCMC PCMC GC

Specifies that all incoming packets for the associated traffic PCMC stream are redirected to a specific egress interface (physical port or port-channel). Attaches a policy to an interface in a particular direction. Displays all configuration information for the specified class. GC and IC PE PE PE

service-policy show class-map

show classofservice dotlp-mapping Displays the current Dot1p (802.1p) priority mapping to internal traffic classes for a specific interface. show classofservice ip-dscpmapping Displays the current IP DSCP mapping to internal traffic classes for a specific interface.

Command Groups

69

Command show classofservice trust show diffserv show diffserv service interface ethernet in show diffserv service interface port-channel in show diffserv service brief show interfaces cos-queue show policy-map show policy-map interface show service-policy traffic-shape

Description Displays the current trust mode setting for a specific interface. Displays the DiffServ General Status information. Displays policy service information for the specified interface and direction. Displays policy service information for the specified interface and direction. Displays all interfaces in the system to which a DiffServ policy has been attached. Displays the class-of-service queue configuration for the specified interface. Displays all configuration information for the specified policy. Displays policy-oriented statistics information for the specified interface and direction Displays a summary of policy-oriented statistics information for all interfaces in the specified direction. Specifies the maximum transmission bandwidth limit for the interface as a whole.

Mode* PE PE PE PE PE PE PE PE PE GC and IC

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

RADIUSCommand aaa accounting network default start-stop group radius auth-port deadtime key Description Enables RADIUS accounting on the switch. Mode* GC R

Sets the port number for authentication requests of the designated radius server.

Improves RADIUS response times when a server is R unavailable by causing the unavailable server to be skipped. R Sets the authentication and encryption key for all RADIUS communications between the switch and the RADIUS daemon. Enables the message authenticator attribute to be used for R the RADIUS Authenticating server being configured. Assigns a name to a RADIUS server. R

msgauth name

70

Command Groups

Command primary

Description

Mode*

Specifies that a configured server should be the primary R server in the group of authentication servers which have the same server name. Specifies the order in which the servers are to be used, with R 0 being the highest priority. Improves RADIUS response times when servers are unavailable. Causes the unavailable servers to be skipped. Specifies a RADIUS server host. GC GC

priority radius-server deadtime radius-server host radius-server key

Sets the authentication and encryption key for all RADIUS GC communications between the switch and the RADIUS daemon. Specifies the number of times the software searches the list GC of RADIUS server hosts. Specifies the source IP address used for communication with RADIUS servers. GC

radius-server retransmit radius-server source-ip radius-server timeout retransmit show radius-servers show radius-servers statistics source-ip timeout usage

Sets the interval for which a switch waits for a server host to GC reply Specifies the number of times the software searches the list R of RADIUS server hosts before stopping the search. Displays the RADIUS server settings. Shows the statistics for an authentication or accounting server. Specifies the source IP address to be used for communication with RADIUS servers. PE PE R

Sets the timeout value in seconds for the designated radius R server. Specifies the usage type of the server. R

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Command Groups

71

Spanning TreeCommand clear spanning-tree detectedprotocols exit (mst) instance (mst) name (mst) revision (mst) show spanning-tree show spanning-tree summary spanning tree spanning-tree auto-portfast spanning-tree bpdu spanning-tree bpdu flooding spanning-tree bpdu-protection spanning-tree cost spanning-tree disable spanning-tree forward-time spanning-tree guard spanning-tree link-type spanning-tree loopguard spanning-tree max-age spanning-tree max-hops spanning-tree mode spanning-tree mst configuration spanning-tree mst 0 external-cost Description Restarts the protocol migration process on all interfaces or on the specified interface. Exits the MST configuration mode and applies configuration changes. Maps VLANs to an MST instance. Defines the MST configuration name. Defines the configuration revision number. Displays spanning tree configuration. Displays spanning tree settings and parameters for the switch. Enables spanning-tree functionality. Sets the port to auto portfast mode. Defines the bridge protocol data unit (BPDU) handling when spanning tree is disabled on an interface. Allows flooding of BPDUs received on nonspanning-tree ports to all other non-spanning-tree ports. Enables BPDU protection on a switch. Configures the spanning tree path cost for a port. Disables spanning tree on a specific port. Configures the spanning tree bridge forward time. Selects whether loop guard or root guard is enabled on an interface. Overrides the default link-type setting. Enables loop guard on all ports. Configures the spanning tree bridge maximum age. Sets the MSTP Max Hops parameter to a new value for the common and internal spanning tree. Configures the spanning tree protocol. Enables configuring an MST region by entering the multiple spanning-tree (MST) mode. Sets the external cost for the common spanning tree. GC GC IC Mode* PE MC MC MC MC PE PE GC IC GC GC GC IC IC GC IC IC GC GC GC

72

Command Groups

Command spanning-tree mst cost spanning-tree mst port-priority spanning-tree mst priority spanning-tree pathcost method spanning-tree portfast spanning-tree portfast bpdufilter default spanning-tree portfast default spanning-tree port-priority spanning-tree priority spanning-tree tcnguard

Description

Mode*

Configures the path cost for multiple spanning tree (MST) IC calculations. Configures port priority. Configures the switch priority for the specified spanning tree instance. Configures the spanning tree default pathcost method Enables PortFast mode. IC GC GC IC

Discards BPDUs received on spanningtree ports in portfast GC mode. Enables Portfast mode on all ports. Configures port priority. Configures the spanning tree priority. Prevents a port from propagating topology change notifications. GC IC GC IC GC

spanning-tree transmit hold-count Set the maximum number of BPDUs that a bridge is allowed to send within a hello time window (2 seconds). *NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

TACACS+Command key Description Specifies the authentication and encryption key for all TACACS communications between the device and the TACACS server. Specifies a server port number. Specifies the order in which servers are used. Displays TACACS+ server settings and statistics. Specifies a TACACS+ server host. Sets the authentication and encryption key for all TACACS+ communications between the switch and the TACACS+ daemon. Mode* TC

port priority show tacacs tacacs-server host tacacs-server key

TC TC PE GC GC

tacacs-server timeout timeout

Sets the interval for which the switch waits for a server host GC to reply. Specifies the timeout value in seconds. TC

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Command Groups

73

VLANCommand dvlan-tunnel ethertype interface vlan interface range vlan mode dvlan-tunnel name protocol group protocol vlan group protocol vlan group all show dvlan-tunnel show dvlan-tunnel interface show interfaces switchport show port protocol show switchport protected show vlan show vlan association mac show vlan association subnet switchport access vlan switchport forbidden vlan switchport general acceptableframe-type tagged-only switchport general allowed vlan Description Configures the EtherType for the interface. Enters the interface configuration (VLAN) mode. Enters the interface configuration mode to configure multiple VLANs. Configures a name to a VLAN. Mode* GC GC GC

Enables Double VLAN tunneling on the specified interface IC IC Attaches a vlanid to the protocol-based VLAN identified by VLAN

groupid.

Adds the physical unit/port interface to the protocol-based IC VLAN identified by groupid. Adds all physical unit/port interfaces to the protocol-based GC VLAN identified by groupid. Displays all interfaces enabled for Double VLAN Tunneling. PE Displays detailed information about Double VLAN Tunneling for the specified interface. Displays switchport configuration. Displays the Protocol-Based VLAN information for either the entire system or for the indicated group Displays protected group/port information. Displays VLAN information. Displays the VLAN associated with a specific configured MAC address. PE PE PE PE PE PE

Displays the VLAN associated with a specific configured IP PE subnet. Configures the VLAN ID when the interface is in access mode. Forbids adding specific VLANs to a port. Discards untagged frames at ingress. Adds or removes VLANs from a port in General mode. IC IC IC IC IC

switchport general ingress-filtering Disables port ingress filtering. disable switchport general pvid

Configures the PVID when the interface is in general mode. IC

74

Command Groups

Command switchport mode switchport protected switchport protected name switchport trunk allowed vlan vlan vlan association mac vlan association subnet vlan database vlan makestatic vlan protocol group vlan protocol group add protocol vlan protocol group remove

Description Configures the VLAN membership mode of a port. Sets the port to Protected mode. Configures a name for a protected group Adds or removes VLANs from a port in general mode. Creates a VLAN. Associates a MAC address to a VLAN. Associates an IP subnet to a VLAN Enters the VLAN database configuration mode. Changes a dynamically created VLAN to a static VLAN. Adds protocol-based VLAN groups to the system. Adds a protocol to the protocol-based VLAN identified by

Mode* IC IC GC IC VLAN VLAN VLAN GC VLAN GC GC GC

groupid.

Removes the protocol-base VLAN group identified by groupid.

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Voice VLANCommand voice vlan voice vlan voice vlan data priority show voice vlan Description Enables the voice VLAN capability on the switch. Enables the voice VLAN capability on the interface Trusts or not trusts the data traffic arriving on the voice VLAN port. Displays various properties of the voice VLAN. Mode* GG IC IC PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Command Groups

75

802.1XCommand dot1x mac-auth-bypass dot1x max-req Description Enables MAB on an interface. Sets the maximum number of times the switch sends an EAP-request frame to the client before restarting the authentication process. Mode* IC IC

dot1x max-users

Sets the maximum number of clients supported on the port IC when MAC-based 802.1X authentication is enabled on the port. Enables manual control of the authorization state of the port. IC

dot1x port-control dot1x re-authenticate dot1x re-authentication dot1x system-auth-control dot1x timeout quiet-period dot1x timeout re-authperiod dot1x timeout server-timeout dot1x timeout supp-timeout

Manually initiates a re-authentication of all 802.1X-enabled PE ports or a specified 802.1X enabled port. Enables periodic re-authentication of the client. Enables 802.1X globally. IC GC

Sets the number of seconds the switch remains in the quiet IC state following a failed authentication attempt Sets the number of seconds between re-authentication attempts. IC

Sets the number of seconds the switch waits for a response IC from the authentication server before resending the request. Sets the number of seconds the switch waits for a response IC to an EAP-request frame from the client before retransmitting the request. Sets the number of seconds the switch waits for a response IC to an EAP-request/identify frame from the client before resending the request. Displays 802.1X status for the switch or the specified interface. Displays detailed information about the users who have successfully authenticated on the system or on a specified port. Shows the status of MAC Authentication Bypass. Displays 802.1X statistics for the specified interface. Displays active 802.1X authenticated users for the switch. Sets the guest VLAN on a port. Specifies the unauthenticated VLAN on a port. PE PE

dot1x timeout tx-period

show dot1x show dot1x clients

show dot1x ethernet show dot1x statistics show dot1x users dot1x guest-vlan dot1x unauth-vlan

PE PE PE IC IC

76

Command Groups

Command dot1x guest-vlan show dot1x advanced radius-server attribute 4

Description Defines a guest VLAN. Displays 802.1X advanced features for the switch or specified interface. Sets the network access server (NAS) IP address for the RADIUS server.

Mode* IC PE GC

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Layer 3 CommandsARP (IPv4)Command arp arp cachesize arp dynamicrenew arp purge arp resptime arp retries arp timeout clear arp-cache clear arp-cache management ip proxy-arp show arp show arp brief Description Creates an Address Resolution Protocol (ARP) entry. Configures the maximum number of entries in the ARP cache. Enables the ARP component to automatically renew dynamic ARP entries when they age out. Causes the specified IP address to be removed from the ARP cache. Configures the ARP request response timeout. Configures the ARP entry age-out time. Removes all ARP entries of type dynamic from the ARP cache. Removes all entries from the ARP cache learned from the management port. Enables proxy ARP on a router interface. Displays the Address Resolution Protocol (ARP) cache. Mode* GC GC GC PE GC GC PE PE IC PE

Configures the ARP count of maximum request for retries. GC

Displays the brief Address Resolution Protocol (ARP) table PE information.

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

Command Groups

77

DHCP and BOOTP Relay (IPv4)Command bootpdhcprelay cidridoptmode bootpdhcprelay maxhopcount bootpdhcprelay minwaittime Description Enables the circuit ID option and remote agent ID mode for BootP/DHCP Relay on the system. Configures the maximum allowable relay agent hops for BootP/DHCP Relay on the system. Configures the minimum wait time in seconds for BootP/DHCP Relay on the system. Mode* GC GC GC

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

DHCPv6Command clear ipv6 dhcp dns-server domain-name ipv6 dhcp pool ipv6 dhcp relay ipv6 dhcp relay-agent-info-opt Description Clears DHCPv6 statistics for all interfaces or for a specific interface. Sets the ipv6 DNS server address which is provided to a DHCPv6 client by the DHCPv6 server. Sets the DNS domain name which is provided to a DHCPv6 client by the DHCPv6 server. Enters IPv6 DHCP Pool Configuration mode. Configures an interface for DHCPv6 relay functionality. Mode* PE v6DP v6DP GC IC

Configures a number to represent the DHCPv6 Relay Agent GC Information Option. GC IC

ipv6 dhcp relay-agent-info-remote- Configures a number to represent the DHCPv6 the id-subopt remote-id sub-option. ipv6 dhcp server prefix-delegation service dhcpv6 show ipv6 dhcp show ipv6 dhcp binding show ipv6 dhcp interface show ipv6 dhcp pool show ipv6 dhcp statistics Configures DHCPv6 server functionality on an interface.

Defines Multiple IPv6 prefixes within a pool for distributing v6DP to specific DHCPv6 Prefix delegation clients. Enables DHCPv6 configuration on the router. Displays the DHCPv6 server name and status. Displays the configured DHCP pool. GC PE PE

Displays DHCPv6 information for all relevant interfaces or UE a specified interface. Displays the configured DHCP pool. Displays the DHCPv6 server name and status. PE UE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

78

Command Groups

DVMRPCommand ip dvmrp ip dvmrp metric ip dvmrp trapflags show ip dvmrp show ip dvmrp interface show ip dvmrp neighbor show ip dvmrp nexthop show ip dvmrp prune show ip dvmrp route Description Sets the administrative mode of DVMRP in the router to active. Configures the metric for an interface. Enables the DVMRP trap mode. Displays the system-wide information for DVMRP. Displays the interface information for DVMRP on the specified interface. Displays the neighbor information for DVMRP. Displays the next hop information on outgoing Mode* GC IC IC GC PE PE PE PE PE PE

interfaces for routing multicast datagrams.

Displays the table that lists the routers upstream prune information. Displays the multicast routing information for DVMRP.

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

IGMPCommand ip igmp ip igmp last-member-query-count Description Sets the administrative mode of IGMP in the system to active. Mode* GC

Sets the number of Group-Specific Queries sent before IC the router assumes that there are no local members on the interface. IC

ip igmp last-member-query-interval Configures the Maximum Response Time inserted in Group-Specific Queries which are sent in response to Leave Group messages. ip igmp query-interval

Configures the query interval for the specified interface. IC The query interval determines how fast IGMP Host-Query packets are transmitted on this interface. Configures the maximum response time interval for the specified interface. Configures the robustness that allows tuning of the interface. IC IC

ip igmp query-max-response-time ip igmp robustness

Command Groups

79

Command ip igmp startup-query-count

Description Sets the number of queries sent out on startupat intervals equal to the startup query interval for the interface. Sets the interval between general queries sent at startup on the interface. Configures the version of IGMP for an interface. Displays system-wide IGMP information.

Mode* IC

ip igmp startup-query-interval ip igmp version show ip igmp show ip igmp groups show ip igmp interface

IC IC PE

Displays the registered multicast groups on the interface. PE Displays the IGMP information for the specified interface. PE PE PE

show ip igmp interface membership Displays the list of interfaces that have registered in the multicast group. show ip igmp interface stats Displays the IGMP statistical information for the interface.

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

IGMP ProxyCommand ip igmp-proxy ip igmp-proxy reset-status ip igmp-proxy unsolicited-reportinterval show ip igmp-proxy show ip igmp-proxy interface show ip igmp-proxy groups show ip igmp-proxy groups detail Description Enables the IGMP Proxy on the router. Resets the host interface status parameters of the IGMP Proxy router. Sets the unsolicited report interval for the IGMP Proxy router. Displays a detailed list of the host interface status parameters. Mode* IC IC IC

Displays a summary of the host interface status parameters. PE PE

Displays a table of information about multicast groups that PE IGMP Proxy reported. Displays complete information about multicast groups that PE IGMP Proxy has reported.

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

80

Command Groups

IP HelperCommand clear ip helper statistics ip helper-address (global configuration) ip helper-address (interface configuration) ip helper enable show ip helper-address show ip helper statistics Description Resets (to 0) the statistics displayed in show ip helper statistics. Configures the relay of certain UDP broadcast packets received on any interface. Configures the relay of certain UDP broadcast packets received on a specific interface. Enables relay of UDP packets. Displays the IP helper address configuration. Displays the number of DHCP and other UDP packets processed and relayed by the UDP relay agent. Mode* PE GC IC GC PE PE

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

IP RoutingCommand encapsulation ip address ip mtu ip netdirbcast ip route ip route default ip route distance ip routing routing show ip brief show ip interface show ip protocols show ip route show ip route preferences Description Configures an IP address on an interface. Sets the IP Maximum Transmission Unit (MTU) on a routing interface. Mode* IC IC

Configures the link layer encapsulation type for the packet. IC

Enables the forwarding of network-directed broadcasts. IC Configures a static route. Use the no form of the command GC to delete the static route. Configures the default route. Use the no form of the command to delete the default route. Sets the default distance (preference) for static routes. Globally enables IPv4 routing on the router. Enables IPv4 and IPv6 routing for an interface. Displays all the summary information of the IP . Displays all pertinent information about the IP interface. Displays the parameters and current state of the active routing protocols. Displays the routing table. GC GC GC IC PE PE PE PE

Displays detailed information about the route preferences. PE

Command Groups

81

Command show ip route summary show ip stats show ip vlan

Description Shows the number of all routes, including best and nonbest routes. Displays IP statistical information

Mode* PE UE

Displays the VLAN routing information for all VLANs with PE routing enabled.

*NOTE: For the meaning of each Mode abbreviation, see "Mode Types" on page 51.

IPv6 MulticastCommand ipv6 pimsm (Global config) ipv6 pimsm (VLAN Interface config) ipv6 pimsm bsr-border ipv6 pimsm bsr-candidate ipv6 pimsm dr-priority ipv6 pimsm hello-interval ipv6 pimsm join-prune-interval ipv6 pimsm register-threshold ipv6 pimsm rp-address ipv6 pimsm rp-candidate ipv6 pimsm spt-threshold ipv6 pimsm ssm show ipv6 pimsm show ipv6 pimsm bsr Description Administratively enables PIMSM for IPv6 multicast routing. Administratively enables PIM-SM multicast routing mode on a particular IPv6 router interface. Prevents bootstrap router (BSR) messages from being sent or received through an interface. Configures the router to announce its candidacy as a bootstrap router (BSR). Sets the priority value for which a router is elected as the designated router (DR). Configures the PIM-SM Hello Interval for the specified interface. Mode* GC IC IC GC IC IC

Configures the interface join/prune interval for the PIM-SM IC router Configure the Register Threshold rate for the RP router to switch to the shortest path. Statically configures the RP address for one or more multicast groups. GC GC

Configures the router to advertise itself as a PIM candidate GC rendezvous point (RP) to the bootstrap router (BSR). Configures the Data Threshold rate for the lasthop router to switch to the shortest path. Defines the Source Specific Multicast (SSM) range of multicast addresses. Displays global status of IPv6 PIMSM and its IPv6 routing interfaces. Displays the bootstrap router (BSR) information. GC GC PE PE

82

Command Groups

Command show ipv6 pimsm interface show ipv6 pimsm neighbor show ipv6 pimsm rphash show ipv6 pimsm rp mapping

Description Displays interface config parameters. Displays IPv6 PIMSM neighbors learned on the routing interfaces.