Enterasys d2 d2g12412p

Enterasys D-Series
Ethernet Switches
CLI Reference
Firmware Version 1.0.xx
P/N 9034394
Downloaded from www.Manualslib.com manuals search engine
Notice
EnterasysNetworksreservestherighttomakechangesinspecificationsandotherinformationcontainedinthisdocumentand itswebsitewithoutpriornotice.ThereadershouldinallcasesconsultEnterasysNetworkstodeterminewhetheranysuch changeshavebeenmade. Thehardware,firmware,orsoftwaredescribedinthisdocumentissubjecttochangewithoutnotice. INNOEVENTSHALLENTERASYSNETWORKSBELIABLEFORANYINCIDENTAL,INDIRECT,SPECIAL,OR CONSEQUENTIALDAMAGESWHATSOEVER(INCLUDINGBUTNOTLIMITEDTOLOSTPROFITS)ARISINGOUTOF ORRELATEDTOTHISDOCUMENT,WEBSITE,ORTHEINFORMATIONCONTAINEDINTHEM,EVENIFENTERASYS NETWORKSHASBEENADVISEDOF,KNEWOF,ORSHOULDHAVEKNOWNOF,THEPOSSIBILITYOFSUCH DAMAGES. EnterasysNetworks,Inc. 50MinutemanRoad Andover,MA01810 2008EnterasysNetworks,Inc.Allrightsreserved. PartNumber: 9034394 May2008 ENTERASYS,ENTERASYSNETWORKS,ENTERASYSNETSIGHT,WEBVIEW,andanylogosassociatedtherewith,are trademarksorregisteredtrademarksofEnterasysNetworks,Inc.intheUnitedStatesandothercountries. Allotherproductnamesmentionedinthismanualmaybetrademarksorregisteredtrademarksoftheirrespectivecompanies. DocumentationURL:http://www.enterasys.com/support/manuals DocumentacionURL:http://www.enterasys.com/support/manuals DokumentationimInternet:http://www.enterasys.com/support/manuals
Version:
Information in this guide refers to D-Series firmware version 1.0.xx
ENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENT

BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT.
Thisdocumentisanagreement(Agreement)betweentheenduser(You)andEnterasysNetworks,Inc.,onbehalf ofitselfanditsAffiliates(ashereinafterdefined)(Enterasys)thatsetsforthYourrightsandobligationswithrespect totheEnterasyssoftwareprogram/firmware(includinganyaccompanyingdocumentation,hardwareormedia) (Program)inthepackageandprevailsoveranyadditional,conflictingorinconsistenttermsandconditions appearingonanypurchaseorderorotherdocumentsubmittedbyYou.Affiliatemeansanyperson,partnership, corporation,limitedliabilitycompany,otherformofenterprisethatdirectlyorindirectlythroughoneormore intermediaries,controls,oriscontrolledby,orisundercommoncontrolwiththepartyspecified.ThisAgreement constitutestheentireunderstandingbetweentheparties,withrespecttothesubjectmatterofthisAgreement.The Programmaybecontainedinfirmware,chipsorothermedia. BYINSTALLINGOROTHERWISEUSINGTHEPROGRAM,YOUREPRESENTTHATYOUAREAUTHORIZEDTO ACCEPTTHESETERMSONBEHALFOFTHEENDUSER(IFTHEENDUSERISANENTITYONWHOSEBEHALF YOUAREAUTHORIZEDTOACT,YOUANDYOURSHALLBEDEEMEDTOREFERTOSUCHENTITY)AND THATYOUAGREETHATYOUAREBOUNDBYTHETERMSOFTHISAGREEMENT,WHICHINCLUDES, AMONGOTHERPROVISIONS,THELICENSE,THEDISCLAIMEROFWARRANTYANDTHELIMITATIONOF LIABILITY.IFYOUDONOTAGREETOTHETERMSOFTHISAGREEMENTORARENOTAUTHORIZEDTO ENTERINTOTHISAGREEMENT,ENTERASYSISUNWILLINGTOLICENSETHEPROGRAMTOYOUANDYOU AGREETORETURNTHEUNOPENEDPRODUCTTOENTERASYSORYOURDEALER,IFANY,WITHINTEN (10)DAYSFOLLOWINGTHEDATEOFRECEIPTFORAFULLREFUND. IFYOUHAVEANYQUESTIONSABOUTTHISAGREEMENT,CONTACTENTERASYSNETWORKS,LEGAL DEPARTMENTAT(978)6841000. YouandEnterasysagreeasfollows: 1. LICENSE. Youhavethenonexclusiveandnontransferablerighttouseonlytheone(1)copyoftheProgram providedinthispackagesubjecttothetermsandconditionsofthisAgreement. 2. RESTRICTIONS. ExceptasotherwiseauthorizedinwritingbyEnterasys,Youmaynot,normayYoupermitany thirdpartyto: (a) Reverseengineer,decompile,disassembleormodifytheProgram,inwholeorinpart,includingforreasons oferrorcorrectionorinteroperability,excepttotheextentexpresslypermittedbyapplicablelawandtothe extentthepartiesshallnotbepermittedbythatapplicablelaw,suchrightsareexpresslyexcluded. InformationnecessarytoachieveinteroperabilityorcorrecterrorsisavailablefromEnterasysuponrequest anduponpaymentofEnterasysapplicablefee. (b) IncorporatethePrograminwholeorinpart,inanyotherproductorcreatederivativeworksbasedonthe Program,inwholeorinpart. (c) Publish,disclose,copyreproduceortransmittheProgram,inwholeorinpart. (d) Assign,sell,license,sublicense,rent,lease,encumberbywayofsecurityinterest,pledgeorotherwisetransfer theProgram,inwholeorinpart. (e) Removeanycopyright,trademark,proprietaryrights,disclaimerorwarningnoticeincludedonorembedded inanypartoftheProgram. 3. APPLICABLELAW. ThisAgreementshallbeinterpretedandgovernedunderthelawsandinthestateand federalcourtsoftheCommonwealthofMassachusettswithoutregardtoitsconflictsoflawsprovisions.Youacceptthe personaljurisdictionandvenueoftheCommonwealthofMassachusettscourts.Noneofthe1980UnitedNations ConventionontheLimitationPeriodintheInternationalSaleofGoods,andtheUniformComputerInformation TransactionsActshallapplytothisAgreement. 4. EXPORTRESTRICTIONS. YouunderstandthatEnterasysanditsAffiliatesaresubjecttoregulationbyagencies oftheU.S.Government,includingtheU.S.DepartmentofCommerce,whichprohibitexportordiversionofcertain technicalproductstocertaincountries,unlessalicensetoexporttheproductisobtainedfromtheU.S.Governmentor anexceptionfromobtainingsuchlicensemayberelieduponbytheexportingparty. IftheProgramisexportedfromtheUnitedStatespursuanttotheLicenseExceptionCIVundertheU.S.Export AdministrationRegulations,YouagreethatYouareacivilenduseroftheProgramandagreethatYouwillusethe Programforcivilendusesonlyandnotformilitarypurposes.
IftheProgramisexportedfromtheUnitedStatespursuanttotheLicenseExceptionTSRundertheU.S.Export AdministrationRegulations,inadditiontotherestrictionontransfersetforthinSection1or2ofthisAgreement,You agreenotto(i)reexportorreleasetheProgram,thesourcecodefortheProgramortechnologytoanationalofa countryinCountryGroupsD:1orE:2(Albania,Armenia,Azerbaijan,Belarus,Cambodia,Cuba,Georgia,Iraq, Kazakhstan,Laos,Libya,Macau,Moldova,Mongolia,NorthKorea,thePeoplesRepublicofChina,Russia,Tajikistan, Turkmenistan,Ukraine,Uzbekistan,Vietnam,orsuchothercountriesasmaybedesignatedbytheUnitedStates Government),(ii)exporttoCountryGroupsD:1orE:2(asdefinedherein)thedirectproductoftheProgramorthe technology,ifsuchforeignproduceddirectproductissubjecttonationalsecuritycontrolsasidentifiedontheU.S. CommerceControlList,or(iii)ifthedirectproductofthetechnologyisacompleteplantoranymajorcomponentofa plant,exporttoCountryGroupsD:1orE:2thedirectproductoftheplantoramajorcomponentthereof,ifsuch foreignproduceddirectproductissubjecttonationalsecuritycontrolsasidentifiedontheU.S.CommerceControl ListorissubjecttoStateDepartmentcontrolsundertheU.S.MunitionsList. 5. UNITEDSTATESGOVERNMENTRESTRICTEDRIGHTS. TheenclosedProgram(i)wasdevelopedsolelyat privateexpense;(ii)containsrestrictedcomputersoftwaresubmittedwithrestrictedrightsinaccordancewithsection 52.22719(a)through(d)oftheCommercialComputerSoftwareRestrictedRightsClauseanditssuccessors,and(iii)in allrespectsisproprietarydatabelongingtoEnterasysand/oritssuppliers.ForDepartmentofDefenseunits,the ProgramisconsideredcommercialcomputersoftwareinaccordancewithDFARSsection227.72023anditssuccessors, anduse,duplication,ordisclosurebytheU.S.Governmentissubjecttorestrictionssetforthherein. 6. DISCLAIMEROFWARRANTY. EXCEPTFORTHOSEWARRANTIESEXPRESSLYPROVIDEDTOYOUIN WRITINGBYENTERASYS,ENTERASYSDISCLAIMSALLWARRANTIES,EITHEREXPRESSORIMPLIED, INCLUDINGBUTNOTLIMITEDTOIMPLIEDWARRANTIESOFMERCHANTABILITY,SATISFACTORY QUALITY,FITNESSFORAPARTICULARPURPOSE,TITLEANDNONINFRINGEMENTWITHRESPECTTOTHE PROGRAM.IFIMPLIEDWARRANTIESMAYNOTBEDISCLAIMEDBYAPPLICABLELAW,THENANYIMPLIED WARRANTIESARELIMITEDINDURATIONTOTHIRTY(30)DAYSAFTERDELIVERYOFTHEPROGRAMTO YOU. 7. LIMITATIONOFLIABILITY. INNOEVENTSHALLENTERASYSORITSSUPPLIERSBELIABLEFORANY DAMAGESWHATSOEVER(INCLUDING,WITHOUTLIMITATION,DAMAGESFORLOSSOFBUSINESS, PROFITS,BUSINESSINTERRUPTION,LOSSOFBUSINESSINFORMATION,SPECIAL,INCIDENTAL, CONSEQUENTIAL,ORRELIANCEDAMAGES,OROTHERLOSS)ARISINGOUTOFTHEUSEORINABILITYTO USETHEPROGRAM,EVENIFENTERASYSHASBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES. THISFOREGOINGLIMITATIONSHALLAPPLYREGARDLESSOFTHECAUSEOFACTIONUNDERWHICH DAMAGESARESOUGHT. THECUMULATIVELIABILITYOFENTERASYSTOYOUFORALLCLAIMSRELATINGTOTHEPROGRAM, INCONTRACT,TORTOROTHERWISE,SHALLNOTEXCEEDTHETOTALAMOUNTOFFEESPAIDTO ENTERASYSBYYOUFORTHERIGHTSGRANTEDHEREIN. 8. AUDITRIGHTS. YouherebyacknowledgethattheintellectualpropertyrightsassociatedwiththeProgramare ofcriticalvaluetoEnterasys,and,accordingly,Youherebyagreetomaintaincompletebooks,recordsandaccounts showing(i)licensefeesdueandpaid,and(ii)theuse,copyinganddeploymentoftheProgram.Youalsograntto Enterasysanditsauthorizedrepresentatives,uponreasonablenotice,therighttoauditandexamineduringYour normalbusinesshours,Yourbooks,records,accountsandhardwaredevicesuponwhichtheProgrammaybedeployed toverifycompliancewiththisAgreement,includingtheverificationofthelicensefeesdueandpaidEnterasysandthe use,copyinganddeploymentoftheProgram.Enterasysrightofexaminationshallbeexercisedreasonably,ingood faithandinamannercalculatedtonotunreasonablyinterferewithYourbusiness.Intheeventsuchauditdiscovers noncompliancewiththisAgreement,includingcopiesoftheProgrammade,usedordeployedinbreachofthis Agreement,YoushallpromptlypaytoEnterasystheappropriatelicensefees.Enterasysreservestheright,tobe exercisedinitssolediscretionandwithoutpriornotice,toterminatethislicense,effectiveimmediately,forfailureto complywiththisAgreement.Uponanysuchtermination,YoushallimmediatelyceasealluseoftheProgramandshall returntoEnterasystheProgramandallcopiesoftheProgram. 9. OWNERSHIP. Thisisalicenseagreementandnotanagreementforsale.Youacknowledgeandagreethatthe Programconstitutestradesecretsand/orcopyrightedmaterialofEnterasysand/oritssuppliers.Youagreeto implementreasonablesecuritymeasurestoprotectsuchtradesecretsandcopyrightedmaterial.Allright,titleand interestinandtotheProgramshallremainwithEnterasysand/oritssuppliers.Allrightsnotspecificallygrantedto YoushallbereservedtoEnterasys.
10. ENFORCEMENT. YouacknowledgeandagreethatanybreachofSections2,4,or9ofthisAgreementbyYoumay causeEnterasysirreparabledamageforwhichrecoveryofmoneydamageswouldbeinadequate,andthatEnterasys maybeentitledtoseektimelyinjunctiverelieftoprotectEnterasysrightsunderthisAgreementinadditiontoanyand allremediesavailableatlaw. 11. ASSIGNMENT. Youmaynotassign,transferorsublicensethisAgreementoranyofYourrightsorobligations underthisAgreement,exceptthatYoumayassignthisAgreementtoanypersonorentitywhichacquiressubstantially allofYourstockassets.EnterasysmayassignthisAgreementinitssolediscretion.ThisAgreementshallbebinding uponandinuretothebenefitoftheparties,theirlegalrepresentatives,permittedtransferees,successorsandassignsas permittedbythisAgreement.Anyattemptedassignment,transferorsublicenseinviolationofthetermsofthis AgreementshallbevoidandabreachofthisAgreement. 12. WAIVER. AwaiverbyEnterasysofabreachofanyofthetermsandconditionsofthisAgreementmustbein writingandwillnotbeconstruedasawaiverofanysubsequentbreachofsuchtermorcondition.Enterasysfailureto enforceatermuponYourbreachofsuchtermshallnotbeconstruedasawaiverofYourbreachorpreventenforcement onanyotheroccasion. 13. SEVERABILITY. IntheeventanyprovisionofthisAgreementisfoundtobeinvalid,illegalorunenforceable,the validity,legalityandenforceabilityofanyoftheremainingprovisionsshallnotinanywaybeaffectedorimpaired thereby,andthatprovisionshallbereformed,construedandenforcedtothemaximumextentpermissible.Anysuch invalidity,illegality,orunenforceabilityinanyjurisdictionshallnotinvalidateorrenderillegalorunenforceablesuch provisioninanyotherjurisdiction. 14. TERMINATION. EnterasysmayterminatethisAgreementimmediatelyuponYourbreachofanyoftheterms andconditionsofthisAgreement.Uponanysuchtermination,YoushallimmediatelyceasealluseoftheProgramand shallreturntoEnterasystheProgramandallcopiesoftheProgram.
Contents
About This Guide
Using This Guide ............................................................................................................................................. xxi Structure of This Guide .................................................................................................................................... xxi Related Documents ........................................................................................................................................ xxii Conventions Used in This Guide ................................................................................................................... xxiii Getting Help ................................................................................................................................................... xxiii
Chapter 1: Introduction
D-Series CLI Overview ................................................................................................................................... 1-1 Switch Management Methods ........................................................................................................................ 1-1 Factory Default Settings ................................................................................................................................. 1-2 Using the Command Line Interface ................................................................................................................ 1-5 Starting a CLI Session ............................................................................................................................. 1-5 Logging In ................................................................................................................................................ 1-6 Navigating the Command Line Interface .................................................................................................. 1-6
Chapter 2: Basic Configuration

Quick Start Setup Commands ........................................................................................................................ 2-1 Setting User Accounts and Passwords .......................................................................................................... 2-2 Purpose .................................................................................................................................................... 2-2 Commands ............................................................................................................................................... 2-2 show system login .............................................................................................................................. 2-3 set system login .................................................................................................................................. 2-4 clear system login ............................................................................................................................... 2-4 set password ...................................................................................................................................... 2-5 set system password length ............................................................................................................... 2-6 set system password aging ................................................................................................................2-6 set system password history .............................................................................................................. 2-7 show system lockout .......................................................................................................................... 2-7 Setting Basic Switch Properties ...................................................................................................................... 2-8 Purpose .................................................................................................................................................... 2-8 Commands ............................................................................................................................................... 2-8 show ip address.................................................................................................................................. 2-9 set ip address ..................................................................................................................................... 2-9 clear ip address ................................................................................................................................ 2-10 show ip protocol................................................................................................................................ 2-11 set ip protocol ................................................................................................................................... 2-11 show system..................................................................................................................................... 2-12 show system hardware..................................................................................................................... 2-13 show system utilization..................................................................................................................... 2-13 show system enhancedbuffermode .................................................................................................. 2-15 set system enhancedbuffermode ..................................................................................................... 2-15 show time ......................................................................................................................................... 2-16 set time ............................................................................................................................................. 2-16 show summertime ............................................................................................................................ 2-17 set summertime ................................................................................................................................ 2-17 set summertime date ........................................................................................................................ 2-18 set summertime recurring ................................................................................................................. 2-18 clear summertime ............................................................................................................................. 2-19 set prompt......................................................................................................................................... 2-20 show banner motd ............................................................................................................................ 2-20
i
set banner motd................................................................................................................................ 2-21 clear banner motd............................................................................................................................. 2-21 show version..................................................................................................................................... 2-22 set system name .............................................................................................................................. 2-23 set system location ........................................................................................................................... 2-23 set system contact............................................................................................................................ 2-24 set width ........................................................................................................................................... 2-24 set length .......................................................................................................................................... 2-25 show logout ...................................................................................................................................... 2-25 set logout ......................................................................................................................................... 2-26 show console .................................................................................................................................... 2-26 set console baud .............................................................................................................................. 2-27 Activating Licensed Features ....................................................................................................................... 2-27 License Key Field Descriptions .............................................................................................................. 2-28 Clearing, Showing, and Moving Licenses .............................................................................................. 2-28 Commands ............................................................................................................................................. 2-28 set license......................................................................................................................................... 2-28 show license ..................................................................................................................................... 2-29 clear license...................................................................................................................................... 2-30 Configuring System Power and Power over Ethernet (PoE) ........................................................................ 2-30 Purpose .................................................................................................................................................. 2-30 Commands ............................................................................................................................................. 2-31 show inlinepower .............................................................................................................................. 2-31 set inlinepower threshold.................................................................................................................. 2-31 set inlinepower trap .......................................................................................................................... 2-32 show port inlinepower ....................................................................................................................... 2-32 set port inlinepower .......................................................................................................................... 2-33 Downloading a Firmware Image ................................................................................................................... 2-33 Downloading from a TFTP Server .......................................................................................................... 2-34 Downloading via the Serial Port ............................................................................................................. 2-34 Reverting to a Previous Image ............................................................................................................... 2-36 Reviewing and Selecting a Boot Firmware Image ........................................................................................ 2-36 Purpose .................................................................................................................................................. 2-36 Commands ............................................................................................................................................. 2-36 show boot system ............................................................................................................................. 2-36 set boot system ................................................................................................................................ 2-37 Starting and Configuring Telnet .................................................................................................................... 2-37 Purpose .................................................................................................................................................. 2-37 Commands ............................................................................................................................................. 2-37 show telnet ....................................................................................................................................... 2-38 set telnet ........................................................................................................................................... 2-38 telnet................................................................................................................................................. 2-39 Managing Switch Configuration and Files .................................................................................................... 2-39 Configuration Persistence Mode ............................................................................................................ 2-39 Purpose .................................................................................................................................................. 2-40 Commands ............................................................................................................................................. 2-40 show snmp persistmode ................................................................................................................... 2-40 set snmp persistmode ...................................................................................................................... 2-41 save config ....................................................................................................................................... 2-41 dir...................................................................................................................................................... 2-42 show file............................................................................................................................................ 2-43 show config....................................................................................................................................... 2-44 configure ........................................................................................................................................... 2-45 copy .................................................................................................................................................. 2-45 delete................................................................................................................................................ 2-46 show tftp settings.............................................................................................................................. 2-46
ii
set tftp timeout .................................................................................................................................. 2-47 clear tftp timeout ............................................................................................................................... 2-47 set tftp retry....................................................................................................................................... 2-48 clear tftp retry.................................................................................................................................... 2-48 Clearing and Closing the CLI ........................................................................................................................ 2-49 Purpose .................................................................................................................................................. 2-49 Commands ............................................................................................................................................. 2-49 cls (clear screen) .............................................................................................................................. 2-49 exit .................................................................................................................................................... 2-49 Resetting the Switch ..................................................................................................................................... 2-50 Purpose .................................................................................................................................................. 2-50 Commands ............................................................................................................................................. 2-50 reset.................................................................................................................................................. 2-50 clear config ....................................................................................................................................... 2-51 Using and Configuring WebView .................................................................................................................. 2-51 Purpose .................................................................................................................................................. 2-51 Commands ............................................................................................................................................. 2-52 show webview .................................................................................................................................. 2-52 set webview ...................................................................................................................................... 2-52 show ssl............................................................................................................................................ 2-53 set ssl ............................................................................................................................................... 2-53
Chapter 3: Discovery Protocol Configuration

Configuring CDP ............................................................................................................................................. 3-1 Purpose .................................................................................................................................................... 3-1 Commands ............................................................................................................................................... 3-1 show cdp ............................................................................................................................................ 3-1 set cdp state ....................................................................................................................................... 3-3 set cdp auth ........................................................................................................................................ 3-3 set cdp interval ................................................................................................................................... 3-4 set cdp hold-time ................................................................................................................................ 3-5 clear cdp ............................................................................................................................................. 3-5 show neighbors .................................................................................................................................. 3-6 Configuring Cisco Discovery Protocol ............................................................................................................ 3-6 Purpose .................................................................................................................................................... 3-6 Commands ............................................................................................................................................... 3-7 show ciscodp ...................................................................................................................................... 3-7 show ciscodp port info ........................................................................................................................ 3-8 set ciscodp status ............................................................................................................................... 3-9 set ciscodp timer................................................................................................................................. 3-9 set ciscodp holdtime ......................................................................................................................... 3-10 set ciscodp port ................................................................................................................................ 3-10 clear ciscodp..................................................................................................................................... 3-12
Chapter 4: Port Configuration

Port Configuration Summary .......................................................................................................................... 4-1 Port String Syntax Used in the CLI .......................................................................................................... 4-1 Configuring SFP Ports for 100BASE-FX .................................................................................................. 4-2 Reviewing Port Status .................................................................................................................................... 4-3 Purpose .................................................................................................................................................... 4-3 Commands ............................................................................................................................................... 4-3 show port ............................................................................................................................................ 4-4 show port status ................................................................................................................................. 4-4 show port counters ............................................................................................................................. 4-5
iii
Disabling / Enabling and Naming Ports .......................................................................................................... 4-7 Purpose .................................................................................................................................................... 4-7 Commands ............................................................................................................................................... 4-7 set port disable ................................................................................................................................... 4-7 set port enable.................................................................................................................................... 4-8 show port alias.................................................................................................................................... 4-8 set port alias ....................................................................................................................................... 4-9 Setting Speed and Duplex Mode .................................................................................................................... 4-9 Purpose .................................................................................................................................................... 4-9 Commands ............................................................................................................................................... 4-9 show port speed ............................................................................................................................... 4-10 set port speed................................................................................................................................... 4-10 show port duplex .............................................................................................................................. 4-11 set port duplex .................................................................................................................................. 4-11 Enabling / Disabling Jumbo Frame Support ................................................................................................. 4-12 Purpose .................................................................................................................................................. 4-12 Commands ............................................................................................................................................. 4-12 show port jumbo ............................................................................................................................... 4-12 set port jumbo................................................................................................................................... 4-13 clear port jumbo ................................................................................................................................ 4-13 Setting Auto-Negotiation and Advertised Ability ........................................................................................... 4-14 Purpose .................................................................................................................................................. 4-14 Commands ............................................................................................................................................. 4-14 show port negotiation ....................................................................................................................... 4-14 set port negotiation ........................................................................................................................... 4-15 show port advertise .......................................................................................................................... 4-15 set port advertise .............................................................................................................................. 4-16 clear port advertise ........................................................................................................................... 4-17 Setting Flow Control ..................................................................................................................................... 4-18 Purpose .................................................................................................................................................. 4-18 Commands ............................................................................................................................................. 4-18 show flowcontrol ............................................................................................................................... 4-18 set flowcontrol................................................................................................................................... 4-19 Setting Port Link Traps and Link Flap Detection .......................................................................................... 4-19 Purpose .................................................................................................................................................. 4-19 Commands ............................................................................................................................................. 4-19 show port trap................................................................................................................................... 4-20 set port trap ...................................................................................................................................... 4-20 show linkflap ..................................................................................................................................... 4-21 set linkflap globalstate ...................................................................................................................... 4-23 set linkflap portstate.......................................................................................................................... 4-24 set linkflap interval ............................................................................................................................ 4-24 set linkflap action .............................................................................................................................. 4-25 clear linkflap action ........................................................................................................................... 4-25 set linkflap threshold......................................................................................................................... 4-26 set linkflap downtime ........................................................................................................................ 4-27 clear linkflap down ............................................................................................................................ 4-27 clear linkflap...................................................................................................................................... 4-28 Configuring Broadcast Suppression ............................................................................................................. 4-28 Purpose .................................................................................................................................................. 4-28 Commands ............................................................................................................................................. 4-28 show port broadcast ......................................................................................................................... 4-29 set port broadcast............................................................................................................................. 4-29 clear port broadcast.......................................................................................................................... 4-30 Port Mirroring ................................................................................................................................................ 4-31 Mirroring Features .................................................................................................................................. 4-31
iv
Purpose .................................................................................................................................................. 4-31 Commands ............................................................................................................................................. 4-31 show port mirroring........................................................................................................................... 4-31 set port mirroring .............................................................................................................................. 4-32 clear port mirroring ........................................................................................................................... 4-33 Link Aggregation Control Protocol (LACP) ................................................................................................... 4-33 LACP Operation ..................................................................................................................................... 4-34 LACP Terminology ................................................................................................................................. 4-34 D-Series Usage Considerations ............................................................................................................. 4-35 Commands ............................................................................................................................................. 4-36 show lacp.......................................................................................................................................... 4-36 set lacp ............................................................................................................................................. 4-38 set lacp asyspri................................................................................................................................. 4-38 set lacp aadminkey........................................................................................................................... 4-39 clear lacp .......................................................................................................................................... 4-39 set lacp static.................................................................................................................................... 4-40 clear lacp static ................................................................................................................................. 4-41 set lacp singleportlag........................................................................................................................ 4-41 clear lacp singleportlag..................................................................................................................... 4-42 show port lacp .................................................................................................................................. 4-42 set port lacp ...................................................................................................................................... 4-44 clear port lacp ................................................................................................................................... 4-45 Configuring Protected Ports ......................................................................................................................... 4-47 Protected Port Operation ....................................................................................................................... 4-47 Commands ............................................................................................................................................. 4-47 set port protected.............................................................................................................................. 4-47 show port protected .......................................................................................................................... 4-48 clear port protected........................................................................................................................... 4-48 set port protected name.................................................................................................................... 4-49 show port protected name ................................................................................................................ 4-49 clear port protected name................................................................................................................. 4-50
Chapter 5: SNMP Configuration

SNMP Configuration Summary ...................................................................................................................... 5-1 SNMPv1 and SNMPv2c ........................................................................................................................... 5-1 SNMPv3 ................................................................................................................................................... 5-2 About SNMP Security Models and Levels ............................................................................................... 5-2 Using SNMP Contexts to Access Specific MIBs ...................................................................................... 5-3 Configuration Considerations ................................................................................................................... 5-3 Reviewing SNMP Statistics ............................................................................................................................ 5-3 Purpose .................................................................................................................................................... 5-3 Commands ............................................................................................................................................... 5-4 show snmp engineid........................................................................................................................... 5-4 show snmp counters........................................................................................................................... 5-5 Configuring SNMP Users, Groups, and Communities .................................................................................... 5-7 Purpose .................................................................................................................................................... 5-7 Commands ............................................................................................................................................... 5-8 show snmp user ................................................................................................................................. 5-8 set snmp user ..................................................................................................................................... 5-9 clear snmp user ................................................................................................................................ 5-10 show snmp group ............................................................................................................................. 5-11 set snmp group ................................................................................................................................. 5-12 clear snmp group .............................................................................................................................. 5-12 show snmp community ..................................................................................................................... 5-13 set snmp community......................................................................................................................... 5-14
clear snmp community...................................................................................................................... 5-14 Configuring SNMP Access Rights ................................................................................................................ 5-15 Purpose .................................................................................................................................................. 5-15 Commands ............................................................................................................................................. 5-15 show snmp access ........................................................................................................................... 5-15 set snmp access............................................................................................................................... 5-17 clear snmp access............................................................................................................................ 5-18 Configuring SNMP MIB Views ...................................................................................................................... 5-19 Purpose .................................................................................................................................................. 5-19 Commands ............................................................................................................................................. 5-19 show snmp view ............................................................................................................................... 5-19 show snmp context........................................................................................................................... 5-20 set snmp view................................................................................................................................... 5-21 clear snmp view................................................................................................................................ 5-22 Configuring SNMP Target Parameters ......................................................................................................... 5-22 Purpose .................................................................................................................................................. 5-22 Commands ............................................................................................................................................. 5-22 show snmp targetparams ................................................................................................................. 5-22 set snmp targetparams..................................................................................................................... 5-24 clear snmp targetparams.................................................................................................................. 5-24 Configuring SNMP Target Addresses .......................................................................................................... 5-25 Purpose .................................................................................................................................................. 5-25 Commands ............................................................................................................................................. 5-25 show snmp targetaddr ...................................................................................................................... 5-25 set snmp targetaddr.......................................................................................................................... 5-26 clear snmp targetaddr....................................................................................................................... 5-27 Configuring SNMP Notification Parameters ................................................................................................. 5-28 About SNMP Notify Filters ..................................................................................................................... 5-28 Purpose .................................................................................................................................................. 5-28 Commands ............................................................................................................................................. 5-28 show newaddrtrap ............................................................................................................................ 5-29 set newaddrtrap................................................................................................................................ 5-30 show snmp notify .............................................................................................................................. 5-30 set snmp notify ................................................................................................................................. 5-31 clear snmp notify .............................................................................................................................. 5-32 show snmp notifyfilter ....................................................................................................................... 5-33 set snmp notifyfilter........................................................................................................................... 5-33 clear snmp notifyfilter........................................................................................................................ 5-34 show snmp notifyprofile .................................................................................................................... 5-35 set snmp notifyprofile........................................................................................................................ 5-35 clear snmp notifyprofile..................................................................................................................... 5-36 Creating a Basic SNMP Trap Configuration ................................................................................................. 5-37 Example ................................................................................................................................................. 5-38
Chapter 6: Spanning Tree Configuration

Spanning Tree Configuration Summary ......................................................................................................... 6-1 Overview: Single, Rapid, and Multiple Spanning Tree Protocols ............................................................. 6-1 Spanning Tree Features .......................................................................................................................... 6-2 Loop Protect ............................................................................................................................................. 6-2 Configuring Spanning Tree Bridge Parameters .............................................................................................. 6-3 Purpose .................................................................................................................................................... 6-3 Commands ............................................................................................................................................... 6-4 show spantree stats............................................................................................................................ 6-5 set spantree........................................................................................................................................ 6-7 show spantree version........................................................................................................................ 6-7
vi
set spantree version ........................................................................................................................... 6-8 clear spantree version ........................................................................................................................ 6-8 show spantree bpdu-forwarding ......................................................................................................... 6-9 set spantree bpdu-forwarding............................................................................................................. 6-9 show spantree bridgeprioritymode ................................................................................................... 6-10 set spantree bridgeprioritymode ....................................................................................................... 6-10 clear spantree bridgeprioritymode .................................................................................................... 6-11 show spantree mstilist ...................................................................................................................... 6-12 set spantree msti .............................................................................................................................. 6-12 clear spantree msti ........................................................................................................................... 6-13 show spantree mstmap .................................................................................................................... 6-13 set spantree mstmap ........................................................................................................................ 6-14 clear spantree mstmap ..................................................................................................................... 6-14 show spantree vlanlist ...................................................................................................................... 6-15 show spantree mstcfgid .................................................................................................................... 6-15 set spantree mstcfgid ....................................................................................................................... 6-16 clear spantree mstcfgid .................................................................................................................... 6-16 set spantree priority .......................................................................................................................... 6-17 clear spantree priority ....................................................................................................................... 6-17 set spantree hello ............................................................................................................................. 6-18 clear spantree hello .......................................................................................................................... 6-18 set spantree maxage ........................................................................................................................ 6-19 clear spantree maxage ..................................................................................................................... 6-19 set spantree fwddelay....................................................................................................................... 6-20 clear spantree fwddelay.................................................................................................................... 6-20 show spantree backuproot ............................................................................................................... 6-21 set spantree backuproot ................................................................................................................... 6-21 clear spantree backuproot ................................................................................................................ 6-22 show spantree tctrapsuppress.......................................................................................................... 6-22 set spantree tctrapsuppress ............................................................................................................. 6-23 clear spantree tctrapsuppress .......................................................................................................... 6-23 set spantree protomigration .............................................................................................................. 6-24 show spantree spanguard ................................................................................................................ 6-24 set spantree spanguard .................................................................................................................... 6-25 clear spantree spanguard ................................................................................................................. 6-26 show spantree spanguardtimeout .................................................................................................... 6-26 set spantree spanguardtimeout ........................................................................................................ 6-26 clear spantree spanguardtimeout ..................................................................................................... 6-27 show spantree spanguardlock .......................................................................................................... 6-27 clear / set spantree spanguardlock................................................................................................... 6-28 show spantree spanguardtrapenable ............................................................................................... 6-28 set spantree spanguardtrapenable ................................................................................................... 6-29 clear spantree spanguardtrapenable ................................................................................................ 6-29 show spantree legacypathcost ......................................................................................................... 6-30 set spantree legacypathcost............................................................................................................. 6-30 clear spantree legacypathcost .......................................................................................................... 6-31 Configuring Spanning Tree Port Parameters ............................................................................................... 6-31 Purpose .................................................................................................................................................. 6-31 Commands ............................................................................................................................................. 6-31 set spantree portadmin..................................................................................................................... 6-32 clear spantree portadmin.................................................................................................................. 6-32 show spantree portadmin ................................................................................................................. 6-33 show spantree portpri ....................................................................................................................... 6-33 set spantree portpri........................................................................................................................... 6-34 clear spantree portpri........................................................................................................................ 6-35 show spantree adminpathcost .......................................................................................................... 6-35
vii
set spantree adminpathcost ............................................................................................................. 6-36 clear spantree adminpathcost .......................................................................................................... 6-36 show spantree adminedge ............................................................................................................... 6-37 set spantree adminedge ................................................................................................................... 6-37 clear spantree adminedge ................................................................................................................ 6-38 Configuring Spanning Tree Loop Protect Parameters .................................................................................. 6-38 Purpose .................................................................................................................................................. 6-38 Commands ............................................................................................................................................. 6-39 set spantree lp .................................................................................................................................. 6-39 show spantree lp .............................................................................................................................. 6-40 clear spantree lp ............................................................................................................................... 6-41 show spantree lplock ........................................................................................................................ 6-41 clear spantree lplock......................................................................................................................... 6-42 set spantree lpcapablepartner .......................................................................................................... 6-42 show spantree lpcapablepartner ...................................................................................................... 6-43 clear spantree lpcapablepartner ....................................................................................................... 6-44 set spantree lpthreshold ................................................................................................................... 6-44 show spantree lpthreshold................................................................................................................ 6-45 clear spantree lpthreshold ................................................................................................................ 6-45 set spantree lpwindow ...................................................................................................................... 6-46 show spantree lpwindow .................................................................................................................. 6-46 clear spantree lpwindow ................................................................................................................... 6-47 set spantree lptrapenable ................................................................................................................. 6-47 show spantree lptrapenable ............................................................................................................. 6-48 clear spantree lptrapenable .............................................................................................................. 6-48 set spantree disputedbpduthreshold ................................................................................................ 6-48 show spantree disputedbpduthreshold ............................................................................................. 6-49 clear spantree disputedbpduthreshold ............................................................................................. 6-50 show spantree nonforwardingreason ............................................................................................... 6-50
Chapter 7: 802.1Q VLAN Configuration

VLAN Configuration Summary ....................................................................................................................... 7-1 Port String Syntax Used in the CLI .......................................................................................................... 7-1 Creating a Secure Management VLAN .................................................................................................... 7-1 Viewing VLANs ............................................................................................................................................... 7-2 Purpose .................................................................................................................................................... 7-2 Command ................................................................................................................................................. 7-3 show vlan............................................................................................................................................ 7-3 Creating and Naming Static VLANs ............................................................................................................... 7-4 Purpose .................................................................................................................................................... 7-4 Commands ............................................................................................................................................... 7-4 set vlan ............................................................................................................................................... 7-4 set vlan name ..................................................................................................................................... 7-5 clear vlan ............................................................................................................................................ 7-5 clear vlan name .................................................................................................................................. 7-6 Assigning Port VLAN IDs (PVIDs) and Ingress Filtering ................................................................................ 7-6 Purpose .................................................................................................................................................... 7-6 Commands ............................................................................................................................................... 7-7 show port vlan .................................................................................................................................... 7-7 set port vlan ........................................................................................................................................ 7-8 clear port vlan ..................................................................................................................................... 7-8 show port ingress filter........................................................................................................................ 7-9 set port ingress filter ......................................................................................................................... 7-10 show port discard ............................................................................................................................. 7-10 set port discard ................................................................................................................................. 7-11
viii
Configuring the VLAN Egress List ................................................................................................................ 7-12 Purpose .................................................................................................................................................. 7-12 Commands ............................................................................................................................................. 7-12 show port egress .............................................................................................................................. 7-12 set vlan forbidden ............................................................................................................................. 7-13 set vlan egress ................................................................................................................................. 7-14 clear vlan egress .............................................................................................................................. 7-14 show vlan dynamicegress ................................................................................................................ 7-15 set vlan dynamicegress .................................................................................................................... 7-16 Setting the Host VLAN .................................................................................................................................. 7-17 Purpose .................................................................................................................................................. 7-17 Commands ............................................................................................................................................. 7-17 show host vlan.................................................................................................................................. 7-17 set host vlan ..................................................................................................................................... 7-17 clear host vlan .................................................................................................................................. 7-18 Enabling/Disabling GVRP (GARP VLAN Registration Protocol) .................................................................. 7-19 About GARP VLAN Registration Protocol (GVRP) ................................................................................ 7-19 Purpose .................................................................................................................................................. 7-20 Commands ............................................................................................................................................. 7-20 show gvrp ......................................................................................................................................... 7-21 show garp timer ................................................................................................................................ 7-21 set gvrp............................................................................................................................................. 7-22 clear gvrp .......................................................................................................................................... 7-23 set garp timer.................................................................................................................................... 7-23
Chapter 8: Differentiated Services Configuration

Globally Enabling or Disabling Diffserv .......................................................................................................... 8-2 Purpose .................................................................................................................................................... 8-2 Command ................................................................................................................................................. 8-2 set diffserv adminmode ...................................................................................................................... 8-2 Creating Diffserv Classes and Matching Conditions ...................................................................................... 8-3 Purpose .................................................................................................................................................... 8-3 Commands ............................................................................................................................................... 8-3 show diffserv info ................................................................................................................................ 8-3 show diffserv class ............................................................................................................................. 8-4 set class create................................................................................................................................... 8-4 set diffserv class delete ...................................................................................................................... 8-5 set diffserv class match ...................................................................................................................... 8-5 set diffserv class rename .................................................................................................................... 8-8 Configuring Diffserv Policies and Assigning Classes ..................................................................................... 8-9 Purpose .................................................................................................................................................... 8-9 Commands ............................................................................................................................................... 8-9 show diffserv policy ............................................................................................................................ 8-9 set diffserv policy create ................................................................................................................... 8-10 set diffserv policy delete ................................................................................................................... 8-10 set diffserv policy class..................................................................................................................... 8-11 set diffserv policy mark ..................................................................................................................... 8-11 set diffserv policy police style simple ................................................................................................ 8-12 set diffserv policy police action conform ........................................................................................... 8-13 set diffserv policy police action nonconform ..................................................................................... 8-13 set diffserv policy rename ................................................................................................................. 8-14 Assigning Policies to Service Ports .............................................................................................................. 8-14 Purpose .................................................................................................................................................. 8-14 Commands ............................................................................................................................................. 8-15 show diffserv service info ................................................................................................................. 8-15
ix
show diffserv service stats................................................................................................................ 8-15 set diffserv service............................................................................................................................ 8-16 DiffServ Configuration Examples .................................................................................................................. 8-17
Chapter 9: Policy Classification Configuration

Policy Classification Configuration Summary ................................................................................................. 9-1 Configuring Policy Profiles .............................................................................................................................. 9-1 Purpose .................................................................................................................................................... 9-1 Commands ............................................................................................................................................... 9-2 show policy profile .............................................................................................................................. 9-2 set policy profile .................................................................................................................................. 9-4 clear policy profile ............................................................................................................................... 9-5 Configuring Classification Rules ..................................................................................................................... 9-5 Purpose .................................................................................................................................................... 9-5 Commands ............................................................................................................................................... 9-5 show policy rule .................................................................................................................................. 9-6 show policy capability ......................................................................................................................... 9-8 set policy rule.................................................................................................................................... 9-10 clear policy rule................................................................................................................................. 9-12 clear policy all-rules .......................................................................................................................... 9-13 Assigning Ports to Policy Profiles ................................................................................................................. 9-14 Purpose .................................................................................................................................................. 9-14 Commands ............................................................................................................................................. 9-14 set policy port ................................................................................................................................... 9-14 clear policy port ................................................................................................................................ 9-15 Configuring Policy Class of Service (CoS) ................................................................................................... 9-15 About Policy-Based CoS Configurations ................................................................................................ 9-16 Commands ............................................................................................................................................. 9-18 set cos state ..................................................................................................................................... 9-18 show cos state.................................................................................................................................. 9-19 clear cos state .................................................................................................................................. 9-19 set cos settings................................................................................................................................. 9-20 clear cos settings .............................................................................................................................. 9-21 show cos settings ............................................................................................................................. 9-21 set cos port-config ............................................................................................................................ 9-22 show cos port-config......................................................................................................................... 9-23 clear cos port-config ......................................................................................................................... 9-24 set cos port-resource........................................................................................................................ 9-25 show cos port-resource .................................................................................................................... 9-26 clear cos port-resource..................................................................................................................... 9-26 set cos reference .............................................................................................................................. 9-27 show cos reference .......................................................................................................................... 9-28 clear cos reference ........................................................................................................................... 9-29 show cos unit.................................................................................................................................... 9-30 clear cos all-entries........................................................................................................................... 9-30 show cos port-type ........................................................................................................................... 9-31
Chapter 10: Port Priority and Rate Limiting Configuration

Port Priority Configuration Summary ............................................................................................................ 10-1 Configuring Port Priority ............................................................................................................................... 10-2 Purpose .................................................................................................................................................. 10-2 Commands ............................................................................................................................................. 10-2 show port priority .............................................................................................................................. 10-2 set port priority.................................................................................................................................. 10-3 clear port priority............................................................................................................................... 10-3
x
Configuring Priority to Transmit Queue Mapping ......................................................................................... 10-4 Purpose .................................................................................................................................................. 10-4 Commands ............................................................................................................................................. 10-4 show port priority-queue ................................................................................................................... 10-4 set port priority-queue....................................................................................................................... 10-5 clear port priority-queue.................................................................................................................... 10-6 Configuring Quality of Service (QoS) ........................................................................................................... 10-6 Purpose .................................................................................................................................................. 10-6 Commands ............................................................................................................................................. 10-6 show port txq .................................................................................................................................... 10-7 set port txq........................................................................................................................................ 10-7 clear port txq..................................................................................................................................... 10-8
Chapter 11: IGMP Configuration

IGMP Overview ............................................................................................................................................ 11-1 About IP Multicast Group Management ................................................................................................. 11-1 About Multicasting .................................................................................................................................. 11-1 Configuring IGMP at Layer 2 ........................................................................................................................ 11-2 Purpose .................................................................................................................................................. 11-2 Commands ............................................................................................................................................. 11-2 show igmpsnooping .......................................................................................................................... 11-2 set igmpsnooping adminmode.......................................................................................................... 11-3 set igmpsnooping interfacemode...................................................................................................... 11-4 set igmpsnooping groupmembershipinterval .................................................................................... 11-4 set igmpsnooping maxresponse ....................................................................................................... 11-5 set igmpsnooping mcrtrexpiretime.................................................................................................... 11-5 set igmpsnooping add-static ............................................................................................................. 11-6 set igmpsnooping remove-static ....................................................................................................... 11-7 show igmpsnooping static ................................................................................................................ 11-7 show igmpsnooping mfdb ................................................................................................................. 11-8 clear igmpsnooping .......................................................................................................................... 11-8
Chapter 12: Logging and Network Management

Configuring System Logging ........................................................................................................................ 12-1 Purpose .................................................................................................................................................. 12-1 Commands ............................................................................................................................................. 12-1 show logging server.......................................................................................................................... 12-2 set logging server ............................................................................................................................. 12-3 clear logging server .......................................................................................................................... 12-4 show logging default......................................................................................................................... 12-4 set logging default ............................................................................................................................ 12-5 clear logging default ......................................................................................................................... 12-5 show logging application .................................................................................................................. 12-6 set logging application ...................................................................................................................... 12-7 clear logging application ................................................................................................................... 12-8 show logging local ............................................................................................................................ 12-9 set logging local................................................................................................................................ 12-9 clear logging local........................................................................................................................... 12-10 show logging buffer ........................................................................................................................ 12-10 Monitoring Network Events and Status ...................................................................................................... 12-11 Purpose ................................................................................................................................................ 12-11 Commands ........................................................................................................................................... 12-11 history ............................................................................................................................................. 12-11 show history.................................................................................................................................... 12-12 set history ....................................................................................................................................... 12-12
xi
ping................................................................................................................................................. 12-13 show users ..................................................................................................................................... 12-13 disconnect ...................................................................................................................................... 12-14 Managing Switch Network Addresses and Routes ..................................................................................... 12-15 Purpose ................................................................................................................................................ 12-15 Commands ........................................................................................................................................... 12-15 show arp ......................................................................................................................................... 12-15 set arp............................................................................................................................................. 12-16 clear arp.......................................................................................................................................... 12-17 traceroute ....................................................................................................................................... 12-17 show mac ....................................................................................................................................... 12-18 show mac agetime.......................................................................................................................... 12-19 set mac agetime ............................................................................................................................. 12-20 clear mac agetime .......................................................................................................................... 12-20 set mac algorithm ........................................................................................................................... 12-21 show mac algorithm........................................................................................................................ 12-21 clear mac algorithm ........................................................................................................................ 12-22 set mac multicast ............................................................................................................................ 12-22 clear mac address .......................................................................................................................... 12-23 show mac unreserved-flood ........................................................................................................... 12-23 set mac unreserved-flood ............................................................................................................... 12-24 Configuring Simple Network Time Protocol (SNTP) ................................................................................... 12-25 Purpose ................................................................................................................................................ 12-25 Commands ........................................................................................................................................... 12-25 show sntp ....................................................................................................................................... 12-25 set sntp client.................................................................................................................................. 12-27 clear sntp client............................................................................................................................... 12-27 set sntp server ................................................................................................................................ 12-28 clear sntp server ............................................................................................................................. 12-28 set sntp poll-interval........................................................................................................................ 12-29 clear sntp poll-interval..................................................................................................................... 12-29 set sntp poll-retry ............................................................................................................................ 12-29 clear sntp poll-retry ......................................................................................................................... 12-30 set sntp poll-timeout ....................................................................................................................... 12-30 clear sntp poll-timeout .................................................................................................................... 12-31 Configuring Node Aliases ........................................................................................................................... 12-31 Purpose ................................................................................................................................................ 12-31 Commands ........................................................................................................................................... 12-31 show nodealias config .................................................................................................................... 12-32 set nodealias .................................................................................................................................. 12-32 clear nodealias config ..................................................................................................................... 12-33
Chapter 13: RMON Configuration

RMON Monitoring Group Functions ............................................................................................................. 13-1 Statistics Group Commands ......................................................................................................................... 13-3 Purpose .................................................................................................................................................. 13-3 Commands ............................................................................................................................................. 13-3 show rmon stats ............................................................................................................................... 13-3 set rmon stats ................................................................................................................................... 13-4 clear rmon stats ................................................................................................................................ 13-5 History Group Commands ............................................................................................................................ 13-5 Purpose .................................................................................................................................................. 13-5 Commands ............................................................................................................................................. 13-5 show rmon history ............................................................................................................................ 13-5 set rmon history ................................................................................................................................ 13-6
xii
clear rmon history ............................................................................................................................. 13-7 Alarm Group Commands .............................................................................................................................. 13-7 Purpose .................................................................................................................................................. 13-7 Commands ............................................................................................................................................. 13-8 show rmon alarm .............................................................................................................................. 13-8 set rmon alarm properties................................................................................................................. 13-9 set rmon alarm status ..................................................................................................................... 13-10 clear rmon alarm............................................................................................................................. 13-11 Event Group Commands ............................................................................................................................ 13-12 Purpose ................................................................................................................................................ 13-12 Commands ........................................................................................................................................... 13-12 show rmon event ............................................................................................................................ 13-12 set rmon event properties ............................................................................................................... 13-13 set rmon event status ..................................................................................................................... 13-14 clear rmon event............................................................................................................................. 13-14 Filter Group Commands ............................................................................................................................. 13-15 Commands ........................................................................................................................................... 13-15 show rmon channel ........................................................................................................................ 13-16 set rmon channel ............................................................................................................................ 13-16 clear rmon channel ......................................................................................................................... 13-17 show rmon filter .............................................................................................................................. 13-17 set rmon filter .................................................................................................................................. 13-18 clear rmon filter ............................................................................................................................... 13-19 Packet Capture Commands ....................................................................................................................... 13-20 Purpose ................................................................................................................................................ 13-20 Commands ........................................................................................................................................... 13-20 show rmon capture ......................................................................................................................... 13-20 set rmon capture............................................................................................................................. 13-21 clear rmon capture.......................................................................................................................... 13-22
Chapter 14: DHCP Server Configuration

DHCP Overview ........................................................................................................................................... 14-1 DHCP Server ......................................................................................................................................... 14-1 Configuring a DHCP Server ................................................................................................................... 14-2 Configuring General DHCP Server Parameters ........................................................................................... 14-3 Purpose .................................................................................................................................................. 14-3 Commands ............................................................................................................................................. 14-3 set dhcp ............................................................................................................................................ 14-3 set dhcp bootp .................................................................................................................................. 14-4 set dhcp conflict logging ................................................................................................................... 14-4 show dhcp conflict ............................................................................................................................ 14-5 clear dhcp conflict............................................................................................................................. 14-5 set dhcp exclude............................................................................................................................... 14-6 clear dhcp exclude............................................................................................................................ 14-6 set dhcp ping .................................................................................................................................... 14-7 clear dhcp ping ................................................................................................................................. 14-7 show dhcp binding............................................................................................................................ 14-8 clear dhcp binding ............................................................................................................................ 14-8 show dhcp server statistics............................................................................................................... 14-9 clear dhcp server statistics ............................................................................................................. 14-10 Configuring IP Address Pools ..................................................................................................................... 14-10 Manual Pool Configuration Considerations .......................................................................................... 14-10 Purpose ................................................................................................................................................ 14-10 Commands ........................................................................................................................................... 14-11 set dhcp pool .................................................................................................................................. 14-12 clear dhcp pool ............................................................................................................................... 14-12
xiii
set dhcp pool network..................................................................................................................... 14-13 clear dhcp pool network.................................................................................................................. 14-13 set dhcp pool hardware-address .................................................................................................... 14-14 clear dhcp pool hardware-address ................................................................................................. 14-14 set dhcp pool host .......................................................................................................................... 14-15 clear dhcp pool host ....................................................................................................................... 14-16 set dhcp pool client-identifier .......................................................................................................... 14-16 clear dhcp pool client-identifier ....................................................................................................... 14-17 set dhcp pool client-name............................................................................................................... 14-17 clear dhcp pool client-name............................................................................................................14-18 set dhcp pool bootfile...................................................................................................................... 14-18 clear dhcp pool bootfile................................................................................................................... 14-19 set dhcp pool next-server ............................................................................................................... 14-19 clear dhcp pool next-server ............................................................................................................14-20 set dhcp pool lease......................................................................................................................... 14-20 clear dhcp pool lease...................................................................................................................... 14-21 set dhcp pool default-router ............................................................................................................14-21 clear dhcp pool default-router......................................................................................................... 14-22 set dhcp pool dns-server ................................................................................................................ 14-22 clear dhcp pool dns-server ............................................................................................................. 14-23 set dhcp pool domain-name ........................................................................................................... 14-23 clear dhcp pool domain-name ........................................................................................................ 14-24 set dhcp pool netbios-name-server ................................................................................................ 14-24 clear dhcp pool netbios-name-server ............................................................................................. 14-25 set dhcp pool netbios-node-type .................................................................................................... 14-26 clear dhcp pool netbios-node-type ................................................................................................. 14-26 set dhcp pool option ....................................................................................................................... 14-27 clear dhcp pool option .................................................................................................................... 14-27 show dhcp pool configuration ......................................................................................................... 14-28
Chapter 15: Security Configuration

Overview of Security Methods ...................................................................................................................... 15-1 RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment ...................................................... 15-2 Configuring RADIUS ..................................................................................................................................... 15-3 Purpose .................................................................................................................................................. 15-3 Commands ............................................................................................................................................. 15-3 show radius ...................................................................................................................................... 15-3 set radius .......................................................................................................................................... 15-5 clear radius ....................................................................................................................................... 15-6 show radius accounting .................................................................................................................... 15-7 set radius accounting........................................................................................................................ 15-8 clear radius accounting..................................................................................................................... 15-9 Configuring 802.1X Authentication ............................................................................................................... 15-9 Purpose .................................................................................................................................................. 15-9 Commands ............................................................................................................................................. 15-9 show dot1x ..................................................................................................................................... 15-10 show dot1x auth-config................................................................................................................... 15-11 set dot1x ......................................................................................................................................... 15-13 set dot1x auth-config ...................................................................................................................... 15-14 clear dot1x auth-config ................................................................................................................... 15-15 show eapol ..................................................................................................................................... 15-16 set eapol ......................................................................................................................................... 15-17 clear eapol ...................................................................................................................................... 15-18 Configuring MAC Authentication ................................................................................................................ 15-19 Purpose ................................................................................................................................................ 15-19 Commands ........................................................................................................................................... 15-19
xiv
show macauthentication ................................................................................................................. 15-20 show macauthentication session .................................................................................................... 15-21 set macauthentication..................................................................................................................... 15-22 set macauthentication password .................................................................................................... 15-23 clear macauthentication password ................................................................................................. 15-23 set macauthentication port ............................................................................................................. 15-23 set macauthentication portinitialize................................................................................................. 15-24 set macauthentication portquietperiod............................................................................................ 15-25 clear macauthentication portquietperiod......................................................................................... 15-25 set macauthentication macinitialize ................................................................................................ 15-26 set macauthentication reauthentication .......................................................................................... 15-26 set macauthentication portreauthenticate.......................................................................................15-27 set macauthentication macreauthenticate ...................................................................................... 15-27 set macauthentication reauthperiod ...............................................................................................15-28 clear macauthentication reauthperiod ............................................................................................ 15-28 set macauthentication significant-bits ............................................................................................. 15-29 clear macauthentication significant-bits .......................................................................................... 15-29 Configuring Multiple Authentication Methods ............................................................................................. 15-30 About Multiple Authentication Types .................................................................................................... 15-30 Commands ........................................................................................................................................... 15-30 show multiauth................................................................................................................................ 15-31 set multiauth mode ......................................................................................................................... 15-31 clear multiauth mode ...................................................................................................................... 15-32 set multiauth precedence ............................................................................................................... 15-33 clear multiauth precedence ............................................................................................................15-33 show multiauth port ........................................................................................................................ 15-34 set multiauth port ............................................................................................................................ 15-34 clear multiauth port ......................................................................................................................... 15-35 show multiauth station .................................................................................................................... 15-36 show multiauth session .................................................................................................................. 15-36 show multiauth idle-timeout ............................................................................................................15-37 set multiauth idle-timeout................................................................................................................ 15-38 clear multiauth idle-timeout............................................................................................................. 15-38 show multiauth session-timeout ..................................................................................................... 15-39 set multiauth session-timeout ......................................................................................................... 15-40 clear multiauth session-timeout ...................................................................................................... 15-40 Configuring VLAN Authorization (RFC 3580) ............................................................................................. 15-41 Purpose ................................................................................................................................................ 15-41 Commands ........................................................................................................................................... 15-42 show policy maptable response ..................................................................................................... 15-42 set policy maptable response ......................................................................................................... 15-42 set vlanauthorization....................................................................................................................... 15-43 set vlanauthorization egress ........................................................................................................... 15-44 clear vlanauthorization.................................................................................................................... 15-44 show vlanauthorization ................................................................................................................... 15-45 Configuring MAC Locking ........................................................................................................................... 15-46 Purpose ................................................................................................................................................ 15-46 Commands ........................................................................................................................................... 15-46 show maclock ................................................................................................................................. 15-47 show maclock stations.................................................................................................................... 15-48 set maclock enable......................................................................................................................... 15-49 set maclock disable ........................................................................................................................ 15-50 set maclock..................................................................................................................................... 15-50 clear maclock.................................................................................................................................. 15-51 set maclock static ........................................................................................................................... 15-52 clear maclock static ........................................................................................................................ 15-52
xv
set maclock firstarrival .................................................................................................................... 15-53 clear maclock firstarrival ................................................................................................................. 15-54 set maclock agefirstarrival .............................................................................................................. 15-54 clear maclock agefirstarrival ........................................................................................................... 15-55 set maclock move ........................................................................................................................... 15-55 set maclock trap ............................................................................................................................. 15-56 Configuring Port Web Authentication (PWA) .............................................................................................. 15-57 About PWA ........................................................................................................................................... 15-57 Purpose ................................................................................................................................................ 15-57 Commands ........................................................................................................................................... 15-57 show pwa........................................................................................................................................ 15-58 set pwa ........................................................................................................................................... 15-59 show pwa banner ........................................................................................................................... 15-60 set pwa banner ............................................................................................................................... 15-60 clear pwa banner ............................................................................................................................ 15-61 set pwa displaylogo ........................................................................................................................ 15-61 set pwa ipaddress........................................................................................................................... 15-62 set pwa protocol ............................................................................................................................. 15-62 set pwa guestname ........................................................................................................................ 15-63 clear pwa guestname ..................................................................................................................... 15-63 set pwa guestpassword .................................................................................................................. 15-64 set pwa gueststatus........................................................................................................................ 15-64 set pwa initialize ............................................................................................................................. 15-65 set pwa quietperiod ........................................................................................................................ 15-65 set pwa maxrequest ....................................................................................................................... 15-66 set pwa portcontrol ......................................................................................................................... 15-66 show pwa session .......................................................................................................................... 15-67 set pwa enhancedmode ................................................................................................................. 15-68 Configuring Secure Shell (SSH) ................................................................................................................. 15-68 Purpose ................................................................................................................................................ 15-68 Commands ........................................................................................................................................... 15-68 show ssh status .............................................................................................................................. 15-68 set ssh ............................................................................................................................................ 15-69 set ssh hostkey............................................................................................................................... 15-69
Index Figures
1-1 1-2 1-3 1-4 1-5 1-6 7-7 D-Series Startup Screen..................................................................................................................... 1-5 Sample CLI Defaults Description........................................................................................................ 1-7 Performing a Keyword Lookup ........................................................................................................... 1-7 Performing a Partial Keyword Lookup ................................................................................................ 1-7 Scrolling Screen Output...................................................................................................................... 1-8 Abbreviating a Command ................................................................................................................... 1-8 Example of VLAN Propagation via GVRP ........................................................................................ 7-20
Tables
1-1 1-2 2-3 2-4 2-5 Default Settings for Basic Switch Operation ....................................................................................... 1-2 Basic Line Editing Commands............................................................................................................ 1-9 Required CLI Setup Commands......................................................................................................... 2-1 Optional CLI Setup Commands.......................................................................................................... 2-2 show system lockout Output Details................................................................................................... 2-8
xvi
2-6 2-7 3-8 3-9 3-10 4-11 4-12 4-13 4-14 4-15 4-16 5-17 5-18 5-19 5-20 5-21 5-22 5-23 5-24 5-25 5-26 5-27 6-28 7-29 7-30 7-31 8-32 9-33 9-34 9-35 12-36 12-37 12-38 12-39 12-40 12-41 12-42 13-43 13-44 13-45 15-46 15-47 15-48 15-49 15-50 15-51 15-52 15-53
show system Output Details ............................................................................................................. 2-12 show version Output Details ............................................................................................................. 2-22 show cdp Output Details..................................................................................................................... 3-2 show ciscodp Output Details .............................................................................................................. 3-7 show ciscodp port info Output Details ................................................................................................ 3-8 show port status Output Details.......................................................................................................... 4-5 show port counters Output Details ..................................................................................................... 4-6 show linkflap parameters Output Details .......................................................................................... 4-23 show linkflap metrics Output Details................................................................................................. 4-23 LACP Terms and Definitions ............................................................................................................ 4-35 show lacp Output Details.................................................................................................................. 4-37 SNMP Security Levels........................................................................................................................ 5-2 show snmp engineid Output Details ................................................................................................... 5-4 show snmp counters Output Details ................................................................................................... 5-6 show snmp user Output Details.......................................................................................................... 5-9 show snmp group Output Details ..................................................................................................... 5-12 show snmp access Output Details ................................................................................................... 5-16 show snmp view Output Details ....................................................................................................... 5-20 show snmp targetparams Output Details ......................................................................................... 5-23 show snmp targetaddr Output Details .............................................................................................. 5-26 show snmp notify Output Details ...................................................................................................... 5-31 Basic SNMP Trap Configuration....................................................................................................... 5-37 show spantree Output Details ............................................................................................................ 6-6 Command Set for Creating a Secure Management VLAN ................................................................. 7-2 show vlan Output Details.................................................................................................................... 7-4 show gvrp configuration Output Details ............................................................................................ 7-22 Valid IP DSCP Numeric and Keyword Values .................................................................................... 8-6 show policy profile Output Details ...................................................................................................... 9-3 show policy rule Output Details .......................................................................................................... 9-7 Valid Values for Policy Classification Rules ..................................................................................... 9-11 show logging server Output Details.................................................................................................. 12-2 show logging application Output Details........................................................................................... 12-7 Mnemonic Values for Logging Applications...................................................................................... 12-8 show arp Output Details ................................................................................................................. 12-16 show mac Output Details................................................................................................................ 12-19 show sntp Output Details................................................................................................................ 12-26 show nodealias config Output Details ............................................................................................ 12-32 RMON Monitoring Group Functions and Commands ....................................................................... 13-1 show rmon alarm Output Details ...................................................................................................... 13-8 show rmon event Output Details .................................................................................................... 13-13 show radius Output Details............................................................................................................... 15-4 show eapol Output Details.............................................................................................................. 15-16 show macauthentication Output Details ......................................................................................... 15-20 show macauthentication session Output Details ............................................................................ 15-22 show vlanauthorization Output Details ........................................................................................... 15-45 show maclock Output Details ......................................................................................................... 15-47 show maclock stations Output Details............................................................................................ 15-49 show pwa Output Details................................................................................................................ 15-58
xvii
xviii
About This Guide

WelcometotheEnterasysNetworksDSeriesCLIReference.Thismanualexplainshowtoaccess thedevicesCommandLineInterface(CLI)andhowtouseittoconfigureDSeriesswitchdevices.
Important Notice
Depending on the firmware version used in your device, some features described in this document may not be supported. Refer to the Release Notes shipped with your device to determine which features are supported.
Using This Guide

AgeneralworkingknowledgeofbasicnetworkoperationsandanunderstandingofCLI managementapplicationsishelpfulbeforeconfiguringthisdevice. Thismanualdescribeshowtodothefollowing: AccesstheCLI. UseCLIcommandstoperformnetworkmanagementanddeviceconfigurationoperations EstablishandmanageVirtualLocalAreaNetworks(VLANs). Establishandmanagestaticanddynamicallyassignedpolicyclassifications. Establishandmanagepriorityclassification. Configuresecurityprotocols,including802.1XandRADIUS,SSHv2,MAClocking,andMAC authentication.
Structure of This Guide

Theguideisorganizedasfollows: Chapter 1,Introduction,providesanoverviewofthetasksthatcanbeaccomplishedusingthe CLIinterface,anoverviewoflocalmanagementrequirements,anoverviewofthedevicesfactory defaultsettings,andinformationaboutusingtheCommandLineInterface(CLI). Chapter 2,BasicConfiguration,provideshowtosetbasicsystemproperties,howtodownloada firmwareimage,howtoconfigureWebViewandTelnet,howtomanageconfigurationfiles,how tosettheloginpassword,andhowtoexittheCLI. Chapter 3,DiscoveryProtocolConfigurationprovideshowtoconfigurediscoveryprotocols supportedbythedevice. Chapter 4,PortConfiguration,describeshowtoreviewandconfigureconsoleportsettings,and howtoenableordisableswitchportsandconfigureswitchportsettings,includingportspeed, duplexmode,autonegotiation,flowcontrol,portmirroring,linkaggegationandbroadcast suppression. Chapter 5,SNMPConfiguration,describeshowtoconfigureSNMPusersandusergroups,access rights,targetaddresses,andnotificationparameters.
D-Series CLI Reference xxi
Related Documents
Chapter 6,SpanningTreeConfiguration,describeshowtoreviewandsetSpanningTreebridge parametersforthedevice,includingbridgepriority,hellotime,maximumagingtimeandforward delay;andhowtoreviewandsetSpanningTreeportparameters,includingportpriorityandpath costs.ConfiguringtheSpanGuardandLoopProtectfunctionsisalsodescribed. Chapter 7,802.1QVLANConfiguration,describeshowtocreatestaticVLANs,selectthemodeof operationforeachport,establishVLANforwarding(egress)lists,routeframesaccordingto VLANID,displaythecurrentportsandporttypesassociatedwithaVLANandprotocol,createa securemanagementVLAN,andconfigureportsonthedeviceasGVRPawareports. Chapter 8,DifferentiatedServicesConfiguration,describeshowtodisplayandconfigure Diffservparameters. Chapter 9,PolicyClassificationConfiguration,describeshowtocreate,changeorremoveuser rolesorprofilesbasedonbusinessspecificuseofnetworkservices;howtopermitordenyaccess tospecificservicesbycreatingandassigningclassificationruleswhichmapuserprofilestoframe filteringpolicies;howtoclassifyframestoaVLANorClassofService(CoS);andhowtoassignor unassignportstopolicyprofilessothatonlyportsactivatedforaprofilewillbeallowedto transmitframesaccordingly. Chapter 10,PortPriorityandRateLimitingConfiguration,describeshowtosetthetransmit priorityofeachportandconfigurearatelimitforagivenportandlistofpriorities. Chapter 11,IGMPConfiguration,describeshowtoconfigureInternetGroupManagement Protocol(IGMP)settingsformulticastfiltering. Chapter 12,LoggingandNetworkManagement,describeshowtoconfigureSyslog,howto managegeneralswitchsettings,howtomonitornetworkeventsandstatus,andhowtoconfigure SNTPandnodealiases. Chapter 13,RMONConfiguration,describeshowtouseRMON(RemoteNetworkMonitoring), whichprovidescomprehensivenetworkfaultdiagnosis,planning,andperformancetuning informationandallowsforinteroperabilitybetweenSNMPmanagementstationsandmonitoring agents. Chapter 14,DHCPServerConfiguration,describeshowtoreviewandconfigureDHCPserver parameters,howtoreviewandconfigureDHCPaddresspools,andhowtodisplayDHCPserver information. Chapter 15,SecurityConfiguration,describeshowtoconfigure802.1Xauthenticationusing EAPOL,howtoconfigureRADIUSserver,SecureShellserver,MACauthentication,MAC locking,andPortWebAuthentication.
Related Documents
ThefollowingEnterasysNetworksdocumentsmayhelpyoutosetup,control,andmanagethis device: EthernetTechnologyGuide DSeriesInstallationGuide(s)
Documentslistedabove,canbeobtainedfromtheWorldWideWebinAdobeAcrobatPortable DocumentFormat(PDF)atthefollowingwebsite: http://www.enterasys.com/support/manuals/
xxii About This Guide
Conventions Used in This Guide
Conventions Used in This Guide

Thefollowingconventionsareusedinthetextofthisdocument:
Convention Bold font italic font Courier font Courier font in italics [] {} | [x | y | z] {x | y | z} [x {y | z} ] Description Indicates mandatory keywords, parameters or keyboard keys. Indicates complete document titles. Used for examples of information displayed on the screen. Indicates a user-supplied value, either required or optional. Square brackets indicate an optional value. Braces indicate required values. One or more values may be required. A vertical bar indicates a choice in values. Square brackets with a vertical bar indicate a choice of a value. Braces with a vertical bar indicate a choice of a required value. A combination of square brackets with braces and vertical bars indicates a required choice of an optional value.
Thefollowingiconsareusedinthisguide:
Note: Calls the readers attention to any item of information that may be of special importance.
Caution: Contains information essential to avoid damage to the equipment.
Getting Help
Foradditionalsupportrelatedtothisswitchordocument,contactEnterasysNetworksusingone ofthefollowingmethods:
World Wide Web Phone http://www.enterasys.com/support 1-800-872-8440 (toll-free in U.S. and Canada) or 1-978-684-1000 For the Enterasys Networks Support toll-free number in your country: http://www.enterasys.com/support Internet mail support@enterasys.com To expedite your message, type [SWITCHING] in the subject line. To send comments or suggestions concerning this document to the Technical Publications Department: techpubs@enterasys.com Make sure to include the document Part Number in the email message.
D-Series CLI Reference xxiii
Getting Help
BeforecallingEnterasysNetworks,havethefollowinginformationready: YourEnterasysNetworksservicecontractnumber Adescriptionofthefailure Adescriptionofanyaction(s)alreadytakentoresolvetheproblem(forexample,changing modeswitchesorrebootingtheunit) TheserialandrevisionnumbersofallinvolvedEnterasysNetworksproductsinthenetwork Adescriptionofyournetworkenvironment(forexample,layout,cabletype) Networkloadandframesizeatthetimeoftrouble(ifknown) Theswitchhistory(forexample,haveyoureturnedtheswitchbefore,isthisarecurring problem?) AnypreviousReturnMaterialAuthorization(RMA)numbers
xxiv
About This Guide
1
Introduction
ThischapterprovidesanoverviewoftheDSeriesuniquefeaturesandfunctionality,anoverview ofthetasksthatmaybeaccomplishedusingtheCLIinterface,anoverviewofwaystomanagethe switch,factorydefaultsettings,andinformationabouthowtousetheCommandLineInterfaceto configuretheswitch.
For information about... D-Series CLI Overview Switch Management Methods Factory Default Settings Using the Command Line Interface Refer to page... 1-1 1-1 1-2 1-5
D-Series CLI Overview

EnterasysNetworksDSeriesCLIinterfaceallowsyoutoperformavarietyofnetwork managementtasks,includingthefollowing: UseCLIcommandstoperformnetworkmanagementandswitchconfigurationoperations. Downloadanewfirmwareimage. AssignIPaddressandsubnetmask. Selectadefaultgateway. EstablishandmanageVirtualLocalAreaNetworks(VLANs). Establishandmanagepolicyprofilesandclassifications. Establishandmanagepriorityclassification. Configuresecurityprotocols,including802.1XandRADIUS,SSHv2,PWA,MAClocking,and MACauthentication.
Switch Management Methods

TheDSeriesswitchcanbemanagedusingthefollowingmethods: LocallyusingaVTtypeterminalconnectedtotheconsoleport. RemotelyusingaVTtypeterminalconnectedthroughamodem. RemotelyusinganSNMPmanagementstation. InbandthroughaTelnetconnection. InbandusingtheEnterasysNetSightmanagementapplication.
D-Series CLI Reference 1-1
Factory Default Settings
RemotelyusingWebView,EnterasysNetworksembeddedwebserverapplication.
TheInstallationGuideforyourDSeriesdeviceprovidessetupinstructionsforconnectinga terminalormodemtotheswitch.

ThefollowingtableslistfactorydefaultsettingsavailableontheDSeriesswitch. Table 1-1
Feature Switch Mode Defaults CDP discovery protocol CDP authentication code CDP hold time CDP interval Cisco discovery protocol Cisco DP hold time Cisco DP interval timer Community name Console (serial) port required settings Auto enabled on all ports. Set to 00-00-00-00-00-00-00-00 Set to 180 seconds. Transmit frequency of CDP messages set to 60 seconds. Auto enabled on all ports. Set to 180 seconds. Set to 60 seconds. Public. Baud rate: 9600 Data bits: 8 Flow control: disabled Stop bits: 1 Parity: none DHCP server EAPOL EAPOL authentication mode GARP timer GVRP History buffer size IEEE 802.1 authentication IGMP snooping IP mask and gateway IP routes Jumbo frame support Link aggregation control protocol (LACP) Link aggregation admin key Disabled. Disabled. When enabled, set to auto for all ports. Join timer set to 20 centiseconds; leave timer set to 60 centiseconds; leaveall timer set to 1000 centiseconds. Globally enabled. 20 lines. Disabled. Disabled. When enabled, query interval is set to 260 seconds and response time is set to 10 seconds. Subnet mask set to 0.0.0.0; default gateway set to 0.0.0.0. No static routes configured. Enabled on all ports. Enabled. Set to 32768 for all ports.
Default Settings for Basic Switch Operation

Default Setting
1-2
Introduction
Table 1-1
Feature
Default Settings for Basic Switch Operation (Continued)

Default Setting Disabled. Set to 32768 for all ports. Set to DIP-SIP. Set to disable Read-Write and Read-Only users, and to lockout the default admin (Super User) account for 15 minutes, after 3 failed login attempts. Syslog port set to UDP port number 514. Logging severity level set to 6 (significant conditions) for all applications. Set to 300 seconds. Disabled (globally and on all ports). Set to an empty string for all default user accounts. User must press ENTER at the password prompt to access CLI. Disabled. No passwords are checked for duplication. Classification rules are automatically enabled when created. Enabled on all ports. Maximum ability advertised on all ports.
Link aggregation flow regeneration Link aggregation system priority Link aggregation outport algorithm Lockout Logging MAC aging time MAC locking Passwords Password aging Password history Policy classification Port auto-negotiation Port advertised ability
Port broadcast suppression Enabled and set to limit broadcast packets to 14,881 per second on all switch ports. Port duplex mode Port enable/disable Port priority Port speed Port trap Power over Ethernet port admin state Priority classification RADIUS client RADIUS last resort action RADIUS retries RADIUS timeout Rate limiting SNMP SNTP Spanning Tree Set to half duplex, except for 100BASE-FX and 1000BASE-X, which is set to full duplex. Enabled. Set to 0. Set to 10 Mbps, except for 1000BASE-X, which is set to 1000 Mbps, and 100BASE-FX, which is set to 100 Mbps. All ports are enabled to send link traps. Administrative state is on (auto). Classification rules are automatically enabled when created. Disabled. When the client is enabled, set to Challenge. When the client is enabled, set to 3. When the client is enabled, set to 20 seconds. Disabled (globally and on all ports). Enabled. Disabled. Globally enabled and enabled on all ports.
D-Series CLI Reference
1-3
Table 1-1
Feature
Default Settings for Basic Switch Operation (Continued)

Default Setting Edge port administrative status begins with the value set to false initially after the device is powered up. If a Spanning Tree BDPU is not received on the port within a few seconds, the status setting changes to true. Enabled. Set to 15 seconds. Set to 2 seconds. Set to 0. Set to 20 seconds. All ports with bridge priority are set to 128 (medium priority). Bridge priority is set to 32768. Enabled. Set to mstp (Multiple Spanning Tree Protocol). Disabled. Set to 9600 baud. Set to empty string. Set to empty string. Set to empty string. CLI display set to 80 columns and 24 rows. Set to 5 minutes. Login accounts set to ro for Read-Only access; rw for Read-Write access; and admin for Super User access. Disabled on all VLANs. All ports use a VLAN identifier of 1. Default host VLAN is 1.
Spanning Tree edge port administrative status Spanning Tree edge port delay Spanning Tree forward delay Spanning Tree hello interval Spanning Tree ID (SID) Spanning Tree maximum aging time Spanning Tree port priority Spanning Tree priority Spanning Tree topology change trap suppression Spanning Tree version SSH System baud rate System contact System location System name Terminal Timeout User names VLAN dynamic egress VLAN ID Host VLAN
1-4
Introduction
Using the Command Line Interface

Starting a CLI Session
Connecting Using the Console Port
ConnectaterminaltothelocalconsoleportasdescribedinyourDSeriesInstallationGuide.The startupscreen,Figure 11,willdisplayontheterminal.YoucannowstarttheCommandLine Interface(CLI)by usingadefaultuseraccount,asdescribedinUsingaDefaultUserAccountonpage 16,or usinganadministrativelyassigneduseraccountasdescribedinUsinganAdministratively ConfiguredUserAccountonpage 16. D-Series Startup Screen
Figure 1-1
Username:admin Password: Enterasys D-Series Command Line Interface Enterasys Networks, Inc. 50 Minuteman Rd. Andover, MA 01810-1008 U.S.A. Phone: +1 978 684 1000 E-mail: support@enterasys.com WWW: http://www.enterasys.com (c) Copyright Enterasys Networks, Inc. 2006 Chassis Serial Number: Chassis Firmware Revision: 041800249041 1.0.xx
D2(su)->
Connecting Using Telnet

OncetheDSeriesdevicehasavalidIPaddress,youcanestablishaTelnetsessionfromanyTCP/ IPbasednodeonthenetwork.ForinformationaboutsettingtheswitchsIPaddress,refertoset ipaddressonpage 29. ToestablishaTelnetsession: 1. 2. TelnettotheswitchsIPaddress. Enterlogin(username)andpasswordinformationinoneofthefollowingways: Iftheswitchsdefaultloginandpasswordsettingshavenotbeenchanged,followthe stepslistedinUsingaDefaultUserAccountonpage 16,or Enteranadministrativelyconfiguredusernameandpassword.
ThenoticeofauthorizationandthepromptdisplaysasshowninFigure 11. ForinformationaboutconfiguringTelnetsettings,refertoStartingandConfiguringTelneton page 237.

RefertotheinstructionsincludedwiththeTelnetapplicationforinformationaboutestablishinga Telnetsession.
Logging In
Bydefault,theDSeriesswitchisconfiguredwiththreeuserloginaccountsroforReadOnly access,rwforReadWriteaccess,andadminforsuperuseraccesstoallmodifiableparameters. Thedefaultpasswordissettoablankstring.Forinformationonchangingthesedefaultsettings, refertoSettingUserAccountsandPasswordsonpage 22.
Using a Default User Account

IfthisisthefirsttimeyouareloggingintotheDSeriesswitch,orifthedefaultuseraccountshave notbeenadministrativelychanged,proceedasfollows: 1. Attheloginprompt,enteroneofthefollowingdefaultusernames: 2. 3. roforReadOnlyaccess. rwforReadWriteaccess. adminforSuperUseraccess.
PressENTER.ThePasswordpromptdisplays. LeavethisstringblankandpressENTER.Theswitchinformationandpromptdisplaysas showninFigure 11.
Using an Administratively Configured User Account

Iftheswitchsdefaultuseraccountsettingshavebeenchanged,proceedasfollows: 1. 2. Attheloginprompt,enteryouradministrativelyassignedusernameandpressENTER. AtthePasswordprompt,enteryourpasswordandpressENTER.
ThenoticeofauthorizationandthepromptdisplaysasshowninFigure 11.
Note: Users with Read-Write (rw) and Read-Only access can use the set password command (page 2-5) to change their own passwords. Administrators with Super User (su) access can use the set system login command (page 2-4) to create and change user accounts, and the set password command to change any local account password.
Navigating the Command Line Interface

Getting Help with CLI Syntax
TheDSeriesswitchallowsyoutodisplayusageandsyntaxinformationforindividualcommands bytypinghelpor?afterthecommand.
CLI Command Defaults Descriptions

EachcommanddescriptioninthisguideincludesasectionentitledDefaultswhichcontains differentinformationfromthefactorydefaultsettingsontheswitchdescribedinTable 11.The sectiondefinesCLIbehavioriftheuserentersacommandwithouttypingoptionalparameters (indicatedbysquarebrackets[]).Forcommandswithoutoptionalparameters,thedefaults sectionlistsNone.Forcommandswithoptionalparameters,thissectiondescribeshowtheCLI respondsiftheuseroptstoenteronlythekeywordsofthecommandsyntax.Figure 12provides anexample.
1-6
Introduction
Figure 1-2
Sample CLI Defaults Description
Syntax
show port status [port-string]
Defaults
Ifportstringisnotspecified,statusinformationforallportswillbedisplayed.
CLI Command Modes

EachcommanddescriptioninthisguideincludesasectionentitledModewhichstateswhether thecommandisexecutableinAdmin(SuperUser),ReadWrite,orReadOnlymode.Userswith ReadOnlyaccesswillonlybepermittedtoviewReadOnly(show)commands.UserswithRead Writeaccesswillbeabletomodifyallmodifiableparametersinsetandshowcommands,aswell asviewReadOnlycommands.AdministratorsorSuperUserswillbeallowedallReadWriteand ReadOnlyprivileges,andwillbeabletomodifylocaluseraccounts.TheDSeriesswitch indicateswhichmodeauserisloggedinasbydisplayingoneofthefollowingprompts: Admin:D2(su)> ReadWrite:D2(rw)> ReadOnly:D2(ro)>
Performing Keyword Lookups

Enteringaspaceandaquestionmark(?)afterakeywordwilldisplayallcommandsbeginning withthekeyword.Figure 13showshowtoperformakeywordlookupfortheshowsnmp command.Inthiscase,fouradditionalkeywordsareusedbytheshowsnmpcommand.Entering aspaceandaquestionmark(?)afteranyoftheseparameters(suchasshowsnmpcommunity) willdisplayadditionalparametersnestedwithinthesyntax. Figure 1-3 Performing a Keyword Lookup
D2(su)->show snmp ? community notify targetaddr targetparams SNMP SNMP SNMP SNMP v1/v2c notify target target community name configuration configuration address configuration parameters configuration
Enteringaquestionmark(?)withoutaspaceafterapartialkeywordwilldisplayalistof commandsthatbeginwiththepartialkeyword.Figure 14showshowtousethisfunctionforall commandsbeginningwithco: Figure 1-4 Performing a Partial Keyword Lookup
copy
D2(rw)->co? configure D2(su)->co
Note: At the end of the lookup display, the system will repeat the command you entered without the ?.
1-7
Displaying Scrolling Screens

IftheCLIscreenlengthhasbeensetusingthesetlengthcommandasdescribedonpage225,CLI outputrequiringmorethanonescreenwilldisplay--More-- toindicatecontinuingscreens.To displayadditionalscreenoutput: PressanykeyotherthanENTERtoadvancetheoutputonescreenatatime. PressENTERtoadvancetheoutputonelineatatime.
TheexampleinFigure 15showshowtheshowmaccommandindicatesthatoutputcontinueson morethanonescreen. Figure 1-5 Scrolling Screen Output
D2(su)->show mac MAC Address FID Port Type ---------------------------------------------------------00-00-1d-67-68-69 1 host Management 00-00-02-00-00-00 1 ge.1.2 Learned 00-00-02-00-00-01 1 ge.1.3 Learned 00-00-02-00-00-02 1 ge.1.4 Learned 00-00-02-00-00-03 1 ge.1.5 Learned 00-00-02-00-00-04 1 ge.1.6 Learned 00-00-02-00-00-05 1 ge.1.7 Learned 00-00-02-00-00-06 1 ge.1.8 Learned 00-00-02-00-00-07 1 ge.1.9 Learned 00-00-02-00-00-08 1 ge.1.10 Learned --More--
Abbreviating and Completing Commands

TheDSeriesswitchallowsyoutoabbreviateCLIcommandsandkeywordsdowntothenumber ofcharactersthatwillallowforauniqueabbreviation.Figure 16showshowtoabbreviatethe shownetstatcommandtoshnet. Figure 1-6 Abbreviating a Command
D2(su)->sh net Active Internet connections (including servers) Proto Recv-Q Send-Q Local Address Foreign Address ----- ------ ------ --------------------- --------------------TCP 0 0 10.21.73.13.23 134.141.190.94.51246 TCP 0 275 10.21.73.13.23 134.141.192.119.4724 TCP 0 0 *.80 *.* TCP 0 0 *.23 *.* UDP 0 0 10.21.73.13.1030 134.141.89.113.514 UDP 0 0 *.161 *.* UDP 0 0 *.1025 *.* UDP 0 0 *.123 *.*
State ------ESTABLISHED ESTABLISHED LISTEN LISTEN
1-8
Introduction
Basic Line Editing Commands

TheCLIsupportsEMACslikelineeditingcommands.Table 12listssomecommonlyused commands. Table 1-2 Basic Line Editing Commands
Command Move cursor to beginning of line. Move cursor back one character. Delete a character. Move cursor to end of line. Move cursor forward one character. Delete character to left of cursor. Complete word. Delete all characters after cursor. Scroll to next command in command history (use the CLI history command to display the history). Scroll to previous command in command history. Resume the CLI process. Pause the CLI process (for scrolling). Transpose characters. Delete all characters before cursor. Delete word to the left of cursor. Restore the most recently deleted item.
Key Sequence Ctrl+A Ctrl+B Ctrl+D Ctrl+E Ctrl+F Ctrl+H Ctrl+I or TAB Ctrl+K Ctrl+N Ctrl+P Ctr1+Q Ctr1+S Ctrl+T Ctrl+U or Ctrl+X Ctrl+W Ctrl+Y
1-9
1-10
Introduction
2
Basic Configuration
Atstartup,theDSeriesswitchisconfiguredwithmanydefaultsandstandardfeatures.This chapterdescribeshowtocustomizebasicsystemsettingstoadapttoyourworkenvironment.
For information about... Quick Start Setup Commands Setting User Accounts and Passwords Setting Basic Switch Properties Activating Licensed Features Configuring System Power and Power over Ethernet (PoE) Downloading a Firmware Image Reviewing and Selecting a Boot Firmware Image Starting and Configuring Telnet Managing Switch Configuration and Files Clearing and Closing the CLI Resetting the Switch Using and Configuring WebView Refer to page... 2-1 2-2 2-8 2-27 2-30 2-33 2-36 2-37 2-39 2-49 2-50 2-51
Quick Start Setup Commands

ThetablesinthissectionprovideaquickreferencefortheCLIcommandsneededtobeginbasic D2switchoperation.Table 23liststasksandtheirassociatedCLIcommandsrequiredforsetting uptheswitchwiththelatestfirmware.Table 24listsoptionalCLIcommandsthatwillhelpyou performadditionalbasicconfigurationontheswitch.Refertothepageslistedformore informationabouteachcommand. Table 2-3
Step Task 1 2 3 Set a new password. Set the switch IP address. Download, activate, and verify new firmware on the switch using TFTP copy.
Required CLI Setup Commands

CLI commands set password [username] set ip address ip-address [mask ip-mask] [gateway ip-gateway] copy tftp://tftp_server_ip_address/ filename system:image set boot system filename show version Refer to page... 2-5 2-9 2-45 2-37 2-22
2-1
Setting User Accounts and Passwords
Table 2-4
Task
Optional CLI Setup Commands

CLI commands save config set ssh enable | disable set telnet {enable | disable} [inbound | outbound | all] set webview {enable | disable} set port trap port-string {enable | disable} set port broadcast port-string threshold-value set vlan create vlan-id set port vlan port-string vlan-id modify-egress set logging server index ip-addr ip-addr severity severity state enable set radius server index ip-addr port [secret-value]{realm {management-access | any | network-access} set radius enable set maclock firstarrival port-string value set maclock enable port-string Refer to page... 2-41 15-69 2-38 2-52 4-20 4-29 7-4 7-8 7-8 15-5
Save the active configuration. Enable or disable SSH. Enable or disable Telnet. Enable or disable HTTP management (WebView). Enable or disable SNMP port link traps. Set the per port broadcast limit Configure a VLAN. Set a Syslog server IP and severity Configure and enable a RADIUS server.
15-5 15-54 15-49
Configure and enable first arrival MAC locking on user ports.
Setting User Accounts and Passwords

Purpose
Tochangetheswitchsdefaultuserloginandpasswordsettings,andtoaddnewuseraccounts andpasswords.
Commands
Thecommandsusedtoconfigureuseraccountsandpasswordsarelistedbelow.
For information about... show system login set system login clear system login set password set system password length set system password aging set system password history show system lockout Refer to page... 2-3 2-4 2-4 2-5 2-6 2-6 2-7 2-7
2-2
Basic Configuration
show system login
show system login

Usethiscommandtodisplayuserloginaccountinformation.
Syntax
show system login
Parameters
None.
Defaults
None.
Mode
Switchcommand,superuser.
Example
Thisexampleshowshowtodisplayloginaccountinformation.Inthiscase,switchdefaultshave notbeenchanged:
D2(su)->show system login Password history size: 0 Password aging : disabled Username admin ro rw Access super-user read-only read-write State enabled enabled enabled
Table 21providesanexplanationofthecommandoutput. Table 2-1 show system login Output Details

What It Displays... Number of previously used user login passwords that will be checked for duplication when the set password command is executed. Configured with set system password history (page 2-7). Number of days user passwords will remain valid before aging out. Configured with set system password aging (page 2-6). Login user names. Access assigned to this user account: super-user, read-write or read-only. Whether this user account is enabled or disabled.
Output Field Password history size
Password aging Username Access State
2-3
set system login
set system login

Usethiscommandtocreateanewuserloginaccount,ortodisableorenableanexistingaccount. TheDSeriesswitchsupportsupto16useraccounts,includingtheadminaccount,whichcannot bedeleted.
Syntax
set system login username {super-user | read-write | read-only} {enable | disable}
Parameters
username Specifiesaloginnameforaneworexistinguser.Thisstringcanbea maximumof80characters,althoughamaximumof16charactersis recommendedforproperviewingintheshowsystemlogindisplay. Specifiestheaccessprivilegesforthisuser.
superuser| readwrite| readonly enable|disable
Enablesordisablestheuseraccount.
Defaults
None.
Mode
Example
Thisexampleshowshowtoenableanewuseraccountwiththeloginnamenetopswithsuper useraccessprivileges:
D2(su)->set system login netops super-user enable
clear system login

Usethiscommandtoremovealocalloginuseraccount.
Syntax
clear system login username
Parameters
username Specifiestheloginnameoftheaccounttobecleared.
Note: The default admin (su) account cannot be deleted.
Defaults
None.
Mode
2-4 Basic Configuration
set password
Example
Thisexampleshowshowtoremovethenetopsuseraccount:
D2(su)->clear system login netops
set password
UsethiscommandtochangesystemdefaultpasswordsortosetanewloginpasswordontheCLI.
Syntax
set password [username]
Parameters
username (Onlyavailabletouserswithsuperuseraccess.)Specifiesasystem defaultorauserconfiguredloginaccountname.Bydefault,theDSeries switchprovidesthefollowingaccountnames: roforReadOnlyaccess. rwforReadWriteaccess. adminforSuperUseraccess.(ThisaccesslevelallowsReadWriteaccess toallmodifiableparameters,includinguseraccounts.)
Defaults
None.
Mode
Switchcommand,readwrite. Switchcommand,superuser.
Usage
ReadWriteuserscanchangetheirownpasswords. SuperUsers(Admin)canchangeanypasswordonthesystem.
Examples
ThisexampleshowshowasuperuserwouldchangetheReadWritepasswordfromthesystem default(blankstring):
D2(su)->set password rw Please enter new password: ******** Please re-enter new password: ******** Password changed. D2(su)->
ThisexampleshowshowauserwithReadWriteaccesswouldchangehispassword:
D2(su)->set password Please enter old password: ******** Please enter new password: ******** Please re-enter new password: ******** Password changed. D2(su)->
2-5
set system password length
set system password length

Usethiscommandtosettheminimumuserloginpasswordlength.
Syntax
set system password length characters
Parameters
characters Specifiestheminimumnumberofcharactersforauseraccountpassword. Validvaluesare0to40.
Defaults
None.
Mode
Example
Thisexampleshowshowtosettheminimumsystempasswordlengthto8characters:
D2(su)->set system password length 8
set system password aging

Usethiscommandtosetthenumberofdaysuserpasswordswillremainvalidbeforeagingout,or todisableuseraccountpasswordaging.
Syntax
set system password aging {days | disable}
Parameters
days disable Specifiesthenumberofdaysuserpasswordswillremainvalidbefore agingout.Validvaluesare1to365. Disablespasswordaging.
Defaults
None.
Mode
Example
Thisexampleshowshowtosetthesystempasswordagetimeto45days:
D2(su)->set system password aging 45
2-6
Basic Configuration
set system password history
set system password history

Usethiscommandtosetthenumberofpreviouslyuseduserloginpasswordsthatwillbechecked forpasswordduplication.Thispreventsduplicatepasswordsfrombeingenteredintothesystem withthesetpasswordcommand.
Syntax
set system password history size
Parameters
size Specifiesthenumberofpasswordscheckedforduplication.Validvalues are0to10.
Defaults
None.
Mode
Example
Thisexampleshowshowtoconfigurethesystemtocheckthelast10passwordsforduplication
D2(su)->set system password history 10
show system lockout

Usethiscommandtodisplaysettingsforlockingoutusersafterfailedattemptstologintothe system.
Syntax
show system lockout
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplayuserlockoutsettings.Inthiscase,switchdefaultshavenot beenchanged:
D2(su)->show system lockout Lockout attempts: 3 Lockout time: 15 minutes.
Table 25providesanexplanationofthecommandoutput..
Setting Basic Switch Properties
Table 2-5
show system lockout Output Details

What It Displays... Number of failed login attempts allowed before a read-write or read-only users account will be disabled. Number of minutes the default admin user account will be locked out after the maximum login attempts.
Output Field Lockout attempts Lockout time
Setting Basic Switch Properties

Purpose
TodisplayandsetthesystemIPaddressandotherbasicsystem(switch)properties.
Commands
Thecommandsusedtosetbasicsysteminformationarelistedbelow.
For information about... show ip address set ip address clear ip address show ip protocol set ip protocol show system show system hardware show system utilization show system enhancedbuffermode set system enhancedbuffermode show time set time show summertime set summertime set summertime date set summertime recurring clear summertime set prompt show banner motd set banner motd clear banner motd show version Refer to page... 2-9 2-9 2-10 2-11 2-11 2-12 2-13 2-13 2-15 2-15 2-16 2-16 2-17 2-17 2-18 2-18 2-19 2-20 2-20 2-21 2-21 2-22
2-8
Basic Configuration
show ip address
For information about... set system name set system location set system contact set width set length show logout set logout show console set console baud
Refer to page... 2-23 2-23 2-24 2-24 2-25 2-25 2-26 2-26 2-27
show ip address
UsethiscommandtodisplaythesystemIPaddressandsubnetmask.
Syntax
show ip address
Parameters
None.
Defaults
None.
Mode
Switchcommand,readonly.
Example
ThisexampleshowshowtodisplaythesystemIPaddressandsubnetmask:
D2(su)->show ip address Name ---------------host Address ---------------10.42.13.20 Mask ---------------255.255.0.0
set ip address
UsethiscommandtosetthesystemIPaddress,subnetmaskanddefaultgateway.
Note: The D2 does not support the ability for a user to configure the host's gateway to be a local routed interface IP. The host's gateway must exist on a different device in the network if one is configured.
Syntax
set ip address ip-address [mask ip-mask] [gateway ip-gateway]
2-9
clear ip address
Parameters
ipaddress maskipmask gatewayipgateway SetstheIPaddressforthesystem.. (Optional)Setsthesystemssubnetmask. (Optional)Setsthesystemsdefaultgateway(nexthopdevice).
Defaults
Ifnotspecified,ipmaskwillbesettothenaturalmaskoftheipaddressandipgatewaywillbesetto theipaddress.
Mode
Switchcommand,readwrite.
Usage
Paramtersmustbeenteredintheordershown(hostIP,thenmask,thengateway)forthe commandtobeaccepted.
Example
ThisexampleshowshowtosetthesystemIPaddressto10.1.10.1withamaskof255.255.128.0:
D2(su)->set ip address 10.1.10.1 mask 255.255.128.0
clear ip address
UsethiscommandtoclearthesystemIPaddress.
Syntax
clear ip address
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearthesystemIPaddress:
D2(rw)->clear ip address
2-10
Basic Configuration
show ip protocol
show ip protocol
UsethiscommandtodisplaythemethodusedtoacquireanetworkIPaddressforswitch management.
Syntax
show ip protocol
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaythemethodusedtoacquireanetworkIPaddress:
D2(su)->show ip protocol System IP address acquisition method: dhcp
set ip protocol
UsethiscommandtospecifytheprotocolusedtoacquireanetworkIPaddressforswitch management.
Syntax
set ip protocol {bootp | dhcp | none}
Parameters
bootp dhcp none SelectsBOOTPastheprotocoltousetoacquirethesystemIPaddress. SelectsDHCPastheprotocoltousetoacquirethesystemIPaddress. NoprotocolwillbeusedtoacquirethesystemIPaddress.
Defaults
None.
Mode
Example
ThisexampleshowshowtosetthemethodusedtoacquireanetworkIPaddresstoDHCP.
D2(su)->set ip protocol dhcp
2-11
show system
show system
Usethiscommandtodisplaysysteminformation,includingcontactinformation,powerandfan traystatusanduptime.
Syntax
show system
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaysysteminformation:
D2(su)->show system System contact: System location: System name: PWR1-A Status PWR1-B Status ------------------Ok Not Installed and/or Not Operating PWR2-A Status PWR2-B Status ------------------Not Installed and/or Not Operating Not Installed and/or Not Operating Fan1-Status Fan2-Status --------------------Not Installed and/or Not Operating Not Installed and/or Not Operating Uptime d,h:m:s -------------2,20:23:11 Logout ------30 min
Table 26providesanexplanationofthecommandoutput. Table 2-6

Output System contact System location System name PWR1-A Status PWR1-B Status PWR2-A Status
show system Output Details

What It Displays... Contact person for the system. Default of a blank string can be changed with the set system contact command (set system contact on page 2-24). Where the system is located. Default of a blank string can be changed with the set system location command (set system location on page 2-23). Name identifying the system. Default of a blank string can be changed with the set system name command (set system name on page 2-23). Operational status for the power supply connected to PWR1-A on the switch. Operational status for the power supply connected to PWR1-B on the switch. Operational status for the power supply connected to PWR2-A on the switch.
show system hardware
Table 2-6
Output
show system Output Details (Continued)

What It Displays... Operational status for the power supply connected to PWR1-B on the switch. Operational status of the fan(s). (This output not in use for the D2.) System uptime. Time an idle console or Telnet CLI session will remain connected before timing out. Default of 5 minutes can be changed with the set logout command (set logout on page 2-26).
PWR2-B Status Fanx-Status Uptime d,h:m:s Logout

Usethiscommandtodisplaythesystemshardwareconfiguration.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaythesystemshardwareconfiguration.Pleasenotethatthe informationyouseedisplayedmaydifferfromthisexample.
D2(su)->show system hardware SLOT 1 HARDWARE INFORMATION --------------------------Model: Serial Number: Vendor ID: Base MAC Address: Hardware Version: FirmWare Version: Boot Code Version:
D2G124-12 777777777777 0xbc00 00:11:88:B1:76:C0 BCM56514 REV 1 01.00.00.0052 01.00.42
show system utilization

Usethiscommandtodisplaydetailedinformationabouttheprocessorrunningontheswitch,or theoverallmemoryusageoftheFlashandSDRAMstoragedevicesontheunit,ortheprocesses runningontheswitch.
Syntax
show system utilization {cpu | storage | process}
2-13
show system utilization
Parameters
cpu storage process Displayinformationabouttheprocessorrunningontheswitch. Displayinformationabouttheoverallmemoryusageontheswitch. Displayinformationabouttheprocessesrunningontheswitch.
Defaults
None.
Mode
Examples
ThisexampleshowshowtodisplaythesystemsCPUutilization:
D2(ro)->show system utilization cpu Total CPU Utilization: Switch CPU 5 sec 1 min 5 min ----------------------------------------------1 1 50% 49% 49%
Thisexampleshowshowtodisplaythesystemsoverallmemoryusage:
D2(ro)->show system utilization storage Storage Utilization: Type Description Size(Kb) Available (Kb) --------------------------------------------------------------RAM RAM device 262144 97173 Flash Images, Config, Other 31095 8094
Thisexampleshowshowtodisplayinformationabouttheprocessesrunningonthesystem.Only partialoutputisshown.
D2(ro)->show system utilization process Switch:1 CPU:1 TID Name 5Sec 1Min 5Min ---------------------------------------------------------c157930 ipMapForwardingTask 3.60% 3.02% 3.48% cc70000 RMONTask 0.00% 0.00% 0.00% ccb0b60 SNMPTask 34.80% 34.06% 31.78% d4847a0 tEmWeb 0.00% 0.03% 0.01% d4ca360 hapiRxTask 3.20% 4.80% 5.00% dec8600 lvl7TaskUtilMonitorTas 0.40% 0.40% 0.40% eb74120 bcmRX 2.00% 2.91% 4.48% eb7fbc8 bcmLINK.0 0.40% 0.22% 0.32% f00c9a0 bcmTX 0.00% 0.33% 0.53% f027648 bcmCNTR.0 0.00% 0.00% 0.03% f034858 bcmL2X.0 0.00% 0.02% 0.04%
2-14
Basic Configuration
show system enhancedbuffermode

Usethiscommandtodisplaythestatusofenhancedbuffermode,whichoptimizesbuffer distributionforsingleCoSqueueoperation.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplayenhancedbuffermodestatus:
D2(su)->show system enhancedbuffermode enable Optimized system buffer distribution Disable
set system enhancedbuffermode

Usethiscommandtoenableordisableenhancedbuffermode,whichoptimizesbuffer distributionforsingleCoSqueueoperation.Executingthiscommandwillresettheswitch,sothe systempromptsyoutoconfirmwhetheryouwanttoproceed.
Syntax
set system enhancedbuffermode {enable | disable}
Parameters
enable|disable Enablesordisablesenhancedbuffermode.
Defaults
None.
Mode
Example
Thisexampleshowshowtoenableenhancedbuffermode:
D2(su)->set system enhancedbuffermode enable Changes in the enhanced buffer mode will require resetting this unit. Are you sure you want to continue? (y/n)
2-15
show time
show time
Usethiscommandtodisplaythecurrenttimeofdayinthesystemclock.
Syntax
show time
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaythecurrenttime.Theoutputshowsthedayoftheweek, month,day,andthetimeofdayinhours,minutes,andsecondsandtheyear:
D2(su)->show time THU SEP 05 09:21:57 2002
set time
Usethiscommandtochangethetimeofdayonthesystemclock.
Syntax
set time [mm/dd/yyyy] [hh:mm:ss]
Parameters
[mm/dd/yyyy] [hh:mm:ss] Setsthetimein: month,day,yearand/or 24hourformat Atleastonesetoftimeparametersmustbeentered.
Defaults
None.
Mode
Example
Thisexampleshowshowtosetthesystemclockto7:50a.m:
D2(su)->set time 7:50:00
2-16
Basic Configuration
show summertime
show summertime
Usethiscommandtodisplaydaylightsavingstimesettings.
Syntax
show summertime
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaydaylightsavingstimesettings:
D2(su)->show summertime Summertime is disabled and set to '' Start : SUN APR 04 02:00:00 2004 End : SUN OCT 31 02:00:00 2004 Offset: 60 minutes (1 hours 0 minutes) Recurring: yes, starting at 2:00 of the first Sunday of April and ending at 2:00 of the last Sunday of October
set summertime
Usethiscommandtoenableordisablethedaylightsavingstimefunction.
Syntax
set summertime {enable | disable} [zone]
Parameters
enable|disable zone Enablesordisablesthedaylightsavingstimefunction. (Optional)Appliesanametothedaylightsavingstimesettings.
Defaults
Ifazonenameisnotspecified,nonewillbeapplied.
Mode
Example
Thisexampleshowshowtoenabledaylightsavingstimefunction:
D2(su)->set summertime enable
2-17
set summertime date
set summertime date

Usethiscommandtoconfigurespecificdatestostartandstopdaylightsavingstime.These settingswillbenonrecurringandwillhavetoberesetannually.
Syntax
set summertime date start_month start_date start_year start_hr_min end_month end_date end_year end_hr_min [offset_minutes]
Parameters
start_month start_date start_year start_hr_min end_month end_date end_year end_hr_min offset_minutes Specifiesthemonthoftheyeartostartdaylightsavingstime. Specifiesthedayofthemonthtostartdaylightsavingstime. Specifiestheyeartostartdaylightsavingstime. Specifiesthetimeofdaytostartdaylightsavingstime.Formatishh:mm. Specifiesthemonthoftheyeartoenddaylightsavingstime. Specifiesthedayofthemonthtoenddaylightsavingstime. Specifiestheyeartoenddaylightsavingstime. Specifiesthetimeofdaytoenddaylightsavingstime.Formatishh:mm. (Optional)Specifiestheamountoftimeinminutestooffsetdaylight savingstimefromthenondaylightsavingstimesystemsetting.Valid valuesare11440.
Defaults
Ifanoffsetisnotspecified,nonewillbeapplied.
Mode
Example
ThisexampleshowshowtosetadaylightsavingstimestartdateofApril4,2004at2a.m.andan endingdateofOctober31,2004at2a.m.withanoffsettimeofonehour:
D2(su)->set summertime date April 4 2004 02:00 October 31 2004 02:00 60
set summertime recurring

Usethiscommandtoconfigurerecurringdaylightsavingstimesettings.Thesesettingswillstart andstopdaylightsavingstimeatthespecifieddayofthemonthandhoureachyearandwillnot havetoberesetannually.
Syntax
set summertime recurring start_week start_day start_month start_hr_min end_week end_day end_month end_hr_min [offset_minutes]
Parameters
start_week Specifiestheweekofthemonthtorestartdaylightsavingstime.Valid valuesare:first,second,third,fourth,andlast.
2-18
Basic Configuration
clear summertime
start_day start_hr_min end_week end_day end_hr_min offset_minutes
Specifiesthedayoftheweektorestartdaylightsavingstime. Specifiesthetimeofdaytorestartdaylightsavingstime.Formatis hh:mm. Specifiestheweekofthemonthtoenddaylightsavingstime. Specifiesthedayoftheweektoenddaylightsavingstime. Specifiesthetimeofdaytoenddaylightsavingstime.Formatishh:mm. (Optional)Specifiestheamountoftimeinminutestooffsetdaylight savingstimefromthenondaylightsavingstimesystemsetting.Valid valuesare11440.
Defaults
Ifanoffsetisnotspecified,nonewillbeapplied.
Mode
Example
ThisexampleshowshowsetdaylightsavingstimetorecurstartingonthefirstSundayofAprilat 2a.m.andendingthelastSundayofOctoberat2a.m.withanoffsettimeofonehour:
D2(su)->set summertime recurring first Sunday April 02:00 last Sunday October 02:00 60
clear summertime
Usethiscommandtoclearthedaylightsavingstimeconfiguration.
Syntax
clear summertime
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtoclearthedaylightsavingstimeconfiguration:
D2(su)->clear summertime
2-19
set prompt
set prompt
Usethiscommandtomodifythecommandprompt.
Syntax
set prompt prompt_string
Parameters
prompt_string Specifiesatextstringforthecommandprompt.
Note: A prompt string containing a space in the text must be enclosed in quotes as shown in the example below.
Defaults
None.
Mode
Example
ThisexampleshowshowtosetthecommandprompttoSwitch1:
D2(su)->set prompt Switch 1 Switch 1(su)->
show banner motd

Usethiscommandtoshowthebannermessageofthedaythatwilldisplayatsessionlogin.
Syntax
show banner motd
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaythebannermessageoftheday:
D2(rw)->show banner motd O Knights of Ni, you are just and fair, and we will return with a shrubbery -King Arthur
2-20
Basic Configuration
set banner motd
set banner motd

Usethiscommandtosetthebannermessageofthedaydisplayedatsessionlogin.
Note: Banner message text must be enclosed in beginning and ending double quotation marks. The message itself cannot contain any additional double quotation marks.
Syntax
set banner motd message
Parameters
message Specifiesamessageoftheday.Thisisatextstringthatneedstobein doublequotesifanyspacesareused.Usea\nforanewlineand\tfora tab(eightspaces).
Defaults
None.
Mode
Example
Thisexampleshowshowtosetthemessageofthedaybannertoread:O Knights of Ni, you are just and fair, and we will return with a shrubbery - King Arthur:
D2(rw)->set banner motd "O Knights of Ni, you are just and \n fair, and we will return with a shrubbery \n \t -King Arthur"
clear banner motd

Usethiscommandtoclearthebannermessageofthedaydisplayedatsessionlogintoablank string.
Syntax
clear banner motd
Parameters
None.
Defaults
None.
Mode
2-21
show version
Example
Thisexampleshowshowtoclearthemessageofthedaybannertoablankstring:
D2(rw)->clear banner motd
show version
Usethiscommandtodisplayhardwareandfirmwareinformation.RefertoDownloadinga FirmwareImageonpage233forinstructionsonhowtodownloadafirmwareimage.
Syntax
show version
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplayversioninformation.Pleasenotethatyoumayseedifferent informationdisplayed,dependingonthetypeofhardware.
D2(su)->show version Copyright (c) 2008 by Enterasys Networks, Inc. Model -------------D2G124-12P Serial # ----------------001188021035 Versions ------------------Hw:BCM5665 REV 17 Bp:01.00.29 Fw:1.0.xx BuFw:03.01.13
Table 27providesanexplanationofthecommandoutput. Table 2-7 show version Output Details

What It Displays... Module slot number (if applicable) Number of ports supported. Switchs model number. Serial number of the switch. Hw: Hardware version number. Bp: BootPROM version. Fw: Current firmware version number. BuFw: Backup firmware version number.
Output Field Slot Port Model Serial # Versions
2-22
Basic Configuration
set system name
set system name

Usethiscommandtoconfigureanameforthesystem.
Syntax
set system name [string]
Parameters
string (Optional)Specifiesatextstringthatidentifiesthesystem.
Note: A name string containing a space in the text must be enclosed in quotes as shown in the example below.
Defaults
Ifstringisnotspecified,thesystemnamewillbecleared.
Mode
Example
ThisexampleshowshowtosetthesystemnametoInformationSystems:
D2(su)->set system name Information Systems
set system location

Usethiscommandtoidentifythelocationofthesystem.
Syntax
set system location [string]
Parameters
string (Optional)Specifiesatextstringthatindicateswherethesystemis located.
Note: A location string containing a space in the text must be enclosed in quotes as shown in the example below.
Defaults
Ifstringisnotspecified,thelocationnamewillbecleared.
Mode
Example
Thisexampleshowshowtosetthesystemlocationstring:
D2(su)->set system location Bldg N32-04 Closet 9
set system contact
set system contact

Usethiscommandtoidentifyacontactpersonforthesystem.
Syntax
set system contact [string]
Parameters
string (Optional)Specifiesatextstringthatcontainsthenameofthepersonto contactforsystemadministration.
Note: A contact string containing a space in the text must be enclosed in quotes as shown in the example below.
Defaults
Ifstringisnotspecified,thecontactnamewillbecleared.
Mode
Example
Thisexampleshowshowtosetthesystemcontactstring:
D2(su)->set system contact Joe Smith
set width
Usethiscommandtosetthenumberofcolumnsfortheterminalconnectedtotheswitchsconsole port.
Syntax
set width screenwidth [default]
Parameters
screenwidth default Setsthenumberofterminalcolumns.Validvaluesare50to150. (Optional)Makesthissettingpersistentforallfuturesessions(writtento NVRAM).
Defaults
None.
Mode
Usage
ThenumberofrowsofCLIoutputdisplayedissetusingthesetlengthcommandasdescribedin setlengthonpage225.
2-24
Basic Configuration
set length
Example
Thisexampleshowshowtosettheterminalcolumnsto50:
D2(su)->set width 50
set length
UsethiscommandtosetthenumberoflinestheCLIwilldisplay.Thiscommandispersistent (writtentoNVRAM).
Syntax
set length screenlength
Parameters
screenlength SetsthenumberoflinesintheCLIdisplay.Validvaluesare0,which disablesthescrollingscreenfeaturedescribedinDisplayingScrolling Screensonpage18,andfrom5to512.
Defaults
None.
Mode
Example
Thisexampleshowshowtosettheterminallengthto50:
D2(su)->set length 50
show logout
Usethiscommandtodisplaythetime(inseconds)anidleconsoleorTelnetCLIsessionwill remainconnectedbeforetimingout.
Syntax
show logout
Parameters
None.
Defaults
None.
Mode
2-25
set logout
Example
ThisexampleshowshowtodisplaytheCLIlogoutsetting:
D2(su)->show logout Logout currently set to: 10 minutes.
set logout
Usethiscommandtosetthetime(inminutes)anidleconsoleorTelnetCLIsessionwillremain connectedbeforetimingout.
Syntax
set logout timeout
Parameters
timeout Setsthenumberofminutesthesystemwillremainidlebeforetimingout.
Defaults
None.
Mode
Example
Thisexampleshowshowtosetthesystemtimeoutto10minutes:
D2(su)->set logout 10
show console
Usethiscommandtodisplayconsolesettings.
Syntax
show console [baud] [bits] [flowcontrol] [parity] [stopbits]
Parameters
baud bits flowcontrol parity stopbits (Optional)Displaystheinput/outputbaudrate. (Optional)Displaysthenumberofbitspercharacter. (Optional)Displaysthetypeofflowcontrol. (Optional)Displaysthetypeofparity. (Optional)Displaysthenumberofstopbits.
Defaults
Ifnoparametersarespecified,allsettingswillbedisplayed.
2-26
Basic Configuration
set console baud
Mode
Example
Thisexampleshowshowtodisplayallconsolesettings:
D2(su)->show console Baud Flow Bits ------ ------- ---9600 Disable 8 StopBits ---------1 Parity -----none
set console baud

Usethiscommandtosettheconsoleportbaudrate.
Syntax
set console baud rate
Parameters
rate Setstheconsolebaudrate.Validvaluesare:300,600,1200,2400,4800,5760, 9600,14400,19200,38400,and115200.
Defaults
None.
Mode
Example
Thisexampleshowshowtosettheconsoleportbaudrateto19200:
D2(su)->set console baud 19200
Activating Licensed Features

InordertoenabletheD2advancedfeatures,suchasPolicy,youmustpurchaseandactivatea licensekey.Ifyouhavepurchasedalicense,youcanproceedtoactivateyourlicenseasdescribed inthissection.Ifyouwishtoobtainapermanentorevaluationlicense,usetheEnterasys CustomerPortalorcontacttheEnterasysNetworksSalesDepartment.
2-27
set license
License Key Field Descriptions

WhenEnterasyssuppliesalicense,itwillbesenttoyouasacharacterstringsimilartothe following:
INCREMENT D2Policy 2006.0127 27-jan-2011 0123456789AB 0123456789AB
Thecontentsofthesixfields,fromtheleft,indicate: Typethetypeoflicense.FortheDSeries,thevalueinthisfieldisalwaysINCREMENT. Featuredescriptionofthefeaturebeinglicensed.Forexample,D2Policyasshowninthe characterstringabove. Datebasedversion(DBV)adaterelatedstring.FortheDSeries,thevalueinthisfieldisnot significant. Expirationtypeindicateswhetherthelicenseisapermanentoranevaluationlicense.Ifthe licenseisanevaluationlicense,thisfieldwillcontaintheexpirationdateofthelicense.Ifthe licenseisapermanentlicense,thisfieldwillcontainthewordpermanent. Keythelicensekey. HostIDtheserialnumberoftheswitchtowhichthislicenseapplies.
WhenactivatinglicensesonEnterasysdevices,werecommendthatyoucopyandpastethelicense characterstring,ratherthanenteringthetextmanually.
Clearing, Showing, and Moving Licenses

Licensescanbedisplayed,applied,andclearedonlywiththelicensecommandsdescribedinthis chapter.Generalconfigurationcommandssuchasshowconfigorclearconfigdonotapplyto licenses. Everylicenseisassociatedwithaspecifichardwareplatform,basedontheserialnumberofthe hardwareplatform.Ifyouneedtomovealicensefromonehardwareplatformtoanother,you mustcontactEnterasysCustomerSupporttoarrangeforrehostingofthelicense.
Commands
Thecommandsusedtoactivateandverifylicensedfeaturesarelistedbelow.
For information about... set license show license clear license Refer to page... 2-28 2-29 2-30
set license
UsethiscommandtoactivatetheDSerieslicensedfeatures.
Syntax
set license type feature DBV expiration key hostid
2-28
Basic Configuration
show license
Parameters
type feature DBV expiration Specifiesthetypeoflicense.FortheDSeries,thevalueinthisfieldis alwaysINCREMENT. Thenameofthefeaturebeinglicensed. Adaterelatedstringgeneratedaspartofthelicense. Indicateswhetherthelicenseisapermanentoranevaluationlicense.If thelicenseisanevaluationlicense,thisfieldwillcontaintheexpiration dateofthelicense.Ifthelicenseisapermanentlicense,thisfieldwill containthewordpermanent. Thelicensekey. Theserialnumberoftheswitchtowhichthislicenseapplies.
key hostid
Defaults
None.
Mode
Example
Thisexampleshowshowtoactivateapermanentlicensekeyontheswitchwithserialnumber 075103099041.Inthisexample,theswitchisastandaloneunitsoitsunitnumberis1.
D2(rw)->set license INCREMENT D2Policy 2008.0212 permanent DF6A8558E5AB 075103099041 Validating license on unit 1 License successfully validated and set on unit 1 D2(rw)->
show license
Usethiscommandtodisplaylicensekeyinformationforswitcheswithactivatedlicenses.
Syntax
show license
Parameters
None.
Defaults
None.
Mode
2-29
clear license
Usage
Licensescanbedisplayed,applied,andclearedonlywiththelicensecommandsdescribedinthis chapter.Generalconfigurationcommandssuchasshowconfigorclearconfigdonotaffect licenses.
Example
Thisexampleshowshowtodisplaylicensekeyinformation.
D2(ro)->show license key: INCREMENT D2Policy 2006.0728 permanent 31173CAC6495 045100039001 status: Active
clear license
Usethiscommandtoclearthelicensekeysettings..
Syntax
clear license featureId feature
Parameters
featureIDfeature Thenameofthefeaturebeingcleared.
Defaults
None.
Mode
Example
ThisexampleshowshowtocleartheD2Policylicensedfeature:
D2(rw)->clear license featureId D2Policy
Configuring System Power and Power over Ethernet (PoE)

Important Notice
Some commands in this section apply only to PoE-equipped D-Series devices. Consult the Installation Guide shipped with your product to determine if it is PoE-equipped.
Purpose
ToreviewandsetsystempowerandPoEparameters,includingthepoweravailabletothesystem, theusagethresholdforeachmodule,whetherornotSNMPtrapmessageswillbesentwhen powerstatuschanges,andperportPoEsettings.
2-30
Basic Configuration
show inlinepower
Commands
Thecommandsusedtoreviewandsetsystempowerparametersarelistedbelow.
For information about... show inlinepower set inlinepower threshold set inlinepower trap show port inlinepower set port inlinepower Refer to page... 2-31 2-31 2-32 2-32 2-33
show inlinepower
Usethiscommandtodisplaysystempowerproperties.
Syntax
show inlinepower
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaysystempowerproperties:
D2(su)->show inlinepower Detection Mode : auto Unit ---1 Status -----auto Power(W) -------480 Consumption(W) -------------0.00 Usage(%) -------0.00 Threshold(%) -----------80 Trap ---enable
set inlinepower threshold

Usethiscommandtosetthepowerusagethreshold.
Syntax
set inlinepower threshold usage-threshold
Parameters
thresholdvalue Specifiesapowerthresholdasapercentageoftotalsystempowerusage. Validvaluesare11to100.
2-31
set inlinepower trap
Defaults
None.
Mode
Example
Thisexampleshowshowtosetthepowerthresholdto50:
D2(su)->set inlinepower threshold 50
set inlinepower trap

UsethiscommandtoenableordisablethesendingofanSNMPtrapmessageforaunitwhenever thestatusofitsportschanges,orwhenevertheunitspowerusagethresholdiscrossed.Theunits powerusagethresholdmustbesetusingthesetinlinepowerthresholdcommandasdescribedon page231.
Syntax
set inlinepower trap {disable | enable}
Parameters
disable|enable Disablesorenablesinlinepowertrapmessaging.
Mode
Example
Thisexampleshowshowtoenableinlinepowertrapmessaging:
D2(su)->set inlinepower trap enable
show port inlinepower

UsethiscommandtodisplayallportssupportingPoE.
Syntax
show port inlinepower [port-string]
Parameters
portstring (Optional)DisplaysinformationforspecificPoEport(s).
Defaults
Ifnotspecified,informationforallPoEportswillbedisplayed.
Mode
2-32
Basic Configuration
set port inlinepower
Example
ThisexampleshowshowtodisplayPoEinformationforportge.2.1.Inthiscase,theports administrativestate,PoEpriorityandclasshavenotbeenchangedfromdefaultvalues:
D2(su)->show port inlinepower ge.2.1 Port Type Admin Oper -------------ge.2.1 wireless auto searching Priority -------low Class ----0 Power(W) -------15.4
set port inlinepower

UsethiscommandtoconfigurePoEparametersononeormoreports.
Syntax
set port inlinepower port-string {[admin {off | auto}] [priority {critical | high | low}] [type type]}
Parameters
portstring adminoff|auto prioritycritical| high|low typetype Specifiestheport(s)onwhichtoconfigurePoE. SetsthePoEadministrativestatetooff(disabled)orauto(on). Setstheport(s)priorityforthePoEallocationalgorithmtocritical (highest),highorlow. Specifiesastringdescribingthetypeofdeviceconnectedtoaport.
Defaults
None.
Mode
Example
ThisexampleshowshowtoenablePoEonportge.3.1withcriticalpriority:
D2(su)->set port inlinepower ge.3.1 admin auto priority critical
Downloading a Firmware Image

YoucanupgradetheoperationalfirmwareintheDSeriesswitchwithoutphysicallyopeningthe switchorbeinginthesamelocation.Therearetwowaystodownloadfirmwaretotheswitch: ViaTFTPdownload.ThisprocedureusesaTFTPserverconnectedtothenetworkand downloadsthefirmwareusingtheTFTPprotocol.FordetailsonhowtoperformaTFTP downloadusingthecopycommand,refertocopyonpage245.Forinformationonsetting TFTPtimeoutandretryparameters,refertosettftptimeoutonpage247andsettftp retryonpage248. Viatheserial(console)port.Thisprocedureisanoutofbandoperationthatcopiesthe firmwarethroughtheserialporttotheswitch.Itshouldbeusedincaseswhenyoucannot connecttheswitchtoperformtheinbandcopydownloadprocedureviaTFTP.Serialconsole downloadhasbeensuccessfullytestedwiththefollowingapplications:
2-33
HyperTerminalCopyright1999 TeraTermProVersion2.3
Anyotherterminalapplicationsmayworkbutarenotexplicitlysupported. TheD2switchallowsyoutodownloadandstoredualimages.Thebackupimagecanbe downloadedandselectedasthestartupimagebyusingthecommandsdescribedinthissection.
Downloading from a TFTP Server

ToperformaTFTPdownload,proceedasfollows: 1. 2. Ifyouhavenotalreadydoneso,settheswitchsIPaddressusingthesetipaddresscommand asdetailedinsetipaddressonpage29. Downloadanewimagefileusingthecopycommandasdetailedincopyonpage245.
Downloading via the Serial Port

Todownloadswitchfirmwareviatheserial(console)port,proceedasfollows: 1. Withtheconsoleportconnected,poweruptheswitch.Thefollowingmessagedisplays:
Version 01.00.29 05-09-2005 Computing MD5 Checksum of operational code... Select an option. If no selection in 2 seconds then operational code will start. 1 - Start operational code. 2 - Start Boot Menu. Select (1, 2):2 Password: *************
2.
Beforethebootupcompletes,type2toselectStartBootMenu.Useadministratorfor thePassword.
Note: The Boot Menu password administrator can be changed using boot menu option 11.
Boot Menu Version 01.00.29 05-09-2005
Options available 1 - Start operational code 2 - Change baud rate 3 - Retrieve event log using XMODEM (64KB). 4 - Load new operational code using XMODEM 5 - Display operational code vital product data 6 - Run Flash Diagnostics 7 - Update Boot Code 8 - Delete operational code 9 - Reset the system 10 - Restore Configuration to factory defaults (delete config files) 11 - Set new Boot Code password [Boot Menu] 2
2-34
Basic Configuration
3.
Type2.Thefollowingbaudrateselectionscreendisplays:
1 2 3 4 5 6 7 8 0 1200 2400 4800 9600 19200 38400 57600 115200 no change
4.
Type8tosettheswitchbaudrateto115200.Thefollowingmessagedisplays:
Setting baud rate to 115200, you must change your terminal baud rate.
5. 6.
Settheterminalbaudrateto115200andpressENTER. Fromthebootmenuoptionsscreen,type4toloadnewoperationalcodeusingXMODEM. WhentheXMODEMtransferiscomplete,thefollowingmessageandheaderinformationwill display:

[Boot Menu] 4 Ready to receive the file with XMODEM/CRC.... Ready to RECEIVE File xcode.bin in binary mode Send several Control-X characters to cCKCKCKCKCKCKCK XMODEM transfer complete, checking CRC.... Verified operational code CRC. The following Enterasys Header is in the image: MD5 Checksum....................fe967970996c4c8c43a10cd1cd7be99a Boot File Identifier............0x0517 Header Version..................0x0100 Image Type......................0x82 Image Offset....................0x004d Image length....................0x006053b3 Ident Strings Length............0x0028 Ident Strings................... D2G124-12 Image Version Length............0x7 Image Version Bytes.............0x30 0x2e 0x35 0x2e 0x30 0x2e 0x34 (0.5.0.4)
7. 8.
Fromthebootmenuoptionsscreen,type2todisplaythebaudrateselectionscreenagain. Type4settheswitchbaudrateto9600.Thefollowingmessagedisplays:
Setting baud rate to 9600, you must change your terminal baud rate.
9.
Settheterminalbaudrateto9600andpressENTER.
10. Fromthebootmenuoptionsscreen,type1tostartthenewoperationalcode.Thefollowing messagedisplays:

Operational Code Date: Tue Jun 29 08:34:05 2004 Uncompressing.....
2-35
Reviewing and Selecting a Boot Firmware Image
Reverting to a Previous Image

Intheeventthatyouneedtodowngradetoapreviousversionofcode,youcandosoby completingthefollowingstepsdescribedinthischapter.
Note: You will not be able to peform these steps remotely unless you have remote console support.
1. 2. 3. 4.
Saveyourconfiguration,asdescribedinsaveconfig(page 241). Loadyourpreviousversionofcodeonthedevice,asdescribedinDownloadingaFirmware Image(page 233). Setthisolderversionofcodetobethebootcode,asdescribedinReviewingandSelectinga BootFirmwareImage(page 236). Reloadthesavedconfigurationontothedeviceasdescribedinconfigure(page 245).
Reviewing and Selecting a Boot Firmware Image

Purpose
Todisplayandsettheimagefiletheswitchloadsatstartup.TheD2switchallowsyouto downloadandstoreabackupimage,whichcanbeselectedasthestartupimagebyusingthe commandsdescribedinthissection.
Commands
Thecommandsusedtoreviewandselecttheswitchsbootimagefilearelistedbelow.
For information about... show boot system set boot system Refer to page... 2-36 2-37
show boot system

Usethiscommandtodisplaythefirmwareimagetheswitchloadsatstartup.
Syntax
show boot system
Parameters
None.
Defaults
None.
Mode
2-36
Basic Configuration
set boot system
Example
Thisexampleshowshowtodisplaytheswitchsbootfirmwareimage:
D2(su)->show boot system Current system image to boot: bootfile
set boot system

Usethiscommandtosetthefirmwareimagetheswitchloadsatstartup.
Syntax
set boot system filename
Parameters
filename Specifiesthenameofthefirmwareimagefile.
Defaults
None.
Mode
Example
Thisexampleshowshowtosetthebootfirmwareimagefiletonewimage:
D2(su)->set boot system newimage
Starting and Configuring Telnet

Purpose
ToenableordisableTelnet,andtostartaTelnetsessiontoaremotehost.TheDSeriesswitch allowsatotaloffourinboundand/oroutboundTelnetsessiontorunsimultaneously.
Commands
Thecommandsusedtoenable,startandconfigureTelnetarelistedbelow.
For information about... show telnet set telnet telnet Refer to page... 2-38 2-38 2-39
2-37
show telnet
show telnet
UsethiscommandtodisplaythestatusofTelnetontheswitch.
Syntax
show telnet
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplayTelnetstatus:
D2(su)->show telnet Telnet inbound is currently: ENABLED Telnet outbound is currently: ENABLED
set telnet
UsethiscommandtoenableordisableTelnetontheswitch.
Syntax
set telnet {enable | disable} [inbound | outbound | all]
Parameters
enable|disable inbound| outbound|all EnablesordisablesTelnetservices. (Optional)Specifiesinboundservice(theabilitytoTelnettothisswitch), outboundservice(theabilitytoTelnettootherdevices),orall(both inboundandoutbound).
Defaults
Ifnotspecified,bothinboundandoutboundTelnetservicewillbeenabled.
Mode
Example
ThisexampleshowshowtodisableinboundandoutboundTelnetservices:
D2(su)->set telnet disable all Disconnect all telnet sessions and disable now (y/n)? [n]: y All telnet sessions have been terminated, telnet is now disabled.
2-38
Basic Configuration
telnet
telnet
UsethiscommandtostartaTelnetconnectiontoaremotehost.TheDSeriesswitchallowsatotal offourinboundand/oroutboundTelnetsessiontorunsimultaneously.
Syntax
telnet host [port]
Parameters
host port SpecifiesthenameorIPaddressoftheremotehost. (Optional)Specifiestheserverportnumber.
Defaults
Ifnotspecified,thedefaultportnumber23willbeused.
Mode
Example
ThisexampleshowshowtostartaTelnetsessiontoahostat10.21.42.13:
D2(su)->telnet 10.21.42.13
Managing Switch Configuration and Files

Configuration Persistence Mode
Thedefaultstateofconfigurationpersistencemodeisauto,whichmeansthatwhenCLI configurationcommandsareentered,orwhenaconfigurationfilestoredontheswitchis executed,theconfigurationissavedtoNVRAMautomaticallyatthefollowingintervals: Onastandaloneunit,theconfigurationischeckedeverytwominutesandsavediftherehas beenachange. Onastack,theconfigurationissavedacrossthestackevery30minutesiftherehasbeena change.
IfyouwanttosavearunningconfigurationtoNVRAMmoreoftenthantheautomaticintervals, executethesaveconfigcommandandwaitforthesystemprompttoreturn.Aftertheprompt returns,theconfigurationwillbepersistent. Youcanchangethepersistencemodefromautotomanualwiththesetsnmppersistmode command.Ifthepersistencemodeissettomanual,configurationcommandswillnotbe automaticallywrittentoNVRAM.Althoughtheconfigurationcommandswillactivelymodifythe runningconfiguration,theywillnotpersistacrossaresetunlessthesaveconfigcommandhas beenexecuted.

Note: When your device is configured for manual SNMP persistence mode, and you attempt to change the boot system image, the device will not prompt you to save changes or warn you that changes will be lost.
2-39
show snmp persistmode
Purpose
TosetandviewthepersistencemodeforCLIconfigurationcommands,manuallysavethe runningconfiguration,view,manage,andexecuteconfigurationfilesandimagefiles,andsetand viewTFTPparameters.
Commands
For information about... show snmp persistmode set snmp persistmode save config dir show file show config configure copy delete show tftp settings set tftp timeout clear tftp timeout set tftp retry clear tftp retry Refer to page... 2-40 2-41 2-41 2-42 2-43 2-44 2-45 2-45 2-46 2-46 2-47 2-47 2-48 2-48

Usethiscommandtodisplaytheconfigurationpersistencemodesetting.
Syntax
Parameters
None.
Defaults
None.
Mode
Usage
Bydefault,themodeissettoautosave,whichautomaticallysavesconfigurationchangesat specificintervals.Ifthemodeissettomanual,configurationcommandsareneverautomatically
set snmp persistmode
saved.Inordertomakeconfigurationchangespersistentwhenthemodeismanual,thesave configcommandmustbeissuedasdescribedinConfigurationPersistenceModeonpage239.
Example
Thisexampleshowshowtodisplaytheconfigurationpersistencemodesetting.Inthiscase, persistencemodeissettomanual,whichmeansconfigurationchangesarenotbeing automaticallysaved.
D2(su)->show snmp persistmode persistmode is manual
set snmp persistmode

Usethiscommandtosettheconfigurationpersistencemode,whichdetermineswhetheruser definedconfigurationchangesaresavedautomatically,orrequireissuingthesaveconfig command.SeeConfigurationPersistenceModeonpage239formoreinformation.
Syntax
set snmp persistmode {auto | manual}
Parameters
auto manual Setstheconfigurationpersistencemodetoautomatic.Thisisthedefault state. Setstheconfigurationpersistencemodetomanual.Inordertomake configurationchangespersistent,thesaveconfigcommandmustbe issuedasdescribedinsaveconfigonpage241.Thismodeisusefulfor revertingbacktooldconfigurations.
Defaults
None.
Mode
Example
Thisexampleshowshowtosettheconfigurationpersistencemodetomanual:
D2(su)->set snmp persistmode manual
save config
Usethiscommandtosavetherunningconfiguration.Ifapplicable,thiscommandwillsavethe configurationtoallswitchmembersinastack. Syntax
save config
Parameters
None.
2-41
dir
Defaults
None.
Mode
Example
Thisexampleshowshowtosavetherunningconfiguration:
D2(su)->save config
dir
Usethiscommandtolistconfigurationandimagefilesstoredinthefilesystem.
Syntax
dir [filename]
Parameters
filename (Optional)Specifiesthefilenameordirectorytolist.
Defaults
Iffilenameisnotspecified,allfilesinthesystemwillbedisplayed.
Mode
Example
Thisexampleshowshowtolistalltheconfigurationandimagefilesinthesystem:
D2(su)->dir Images: ================================================================== Filename: d2-series_01.00.00.0027 Version: 01.00.00.0027 Size: 6435840 (bytes) Date: Tue Apr 29 11:19:37 2008 CheckSum: 8f93540d9af0cd5605c2d30d9174065a Compatibility: D2G124-12, D2G124-12P Filename: Version: Size: Date: CheckSum: Compatibility: d2-series_01.00.00.0028 (Active) (Boot) 01.00.00.0028 7586816 (bytes) Fri May 2 10:10:26 2008 d26450b99afc0f2b90dc758608642b61 D2G124-12, D2G124-12P
2-42
Basic Configuration
show file
Files: ================================ configs: SSH baserouter_dec baserouter_jan baserouter_mar baserouter_apr logs: current.log
Size ======== 8293 4197 8293 8293 8293 90129
show file
Usethiscommandtodisplaythecontentsofafile.
Syntax
show file filename
Parameters
filename Specifiesthenameofthefiletodisplay.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplayatextfilenamedmypolicyintheconfigs/directory.Note thatonlyaportionofthefileisshowninthisexample.
D2(rw)->show file configs/mypolicy 1 : 2 : 3 : #policy 4 : 5 : set policy profile 1 name "Check GUEST" pvid-status enable pvid 4095 untaggedvlans 1 6 : 7 : set policy profile 2 name "User LABORATORIES" pvid-status enable pvid 680 cosstatus enable cos 4 untagged-vlans 680 8 : 9 : set policy profile 3 name "Administrator" pvid-status enable pvid 4095 10 : 11 : set policy profile 4 name "Guest" pvid-status enable pvid 999 cos-status enable cos 3 untagged-vlans 999 12 : 13 : set policy port ge.1.1 4 14 : 15 : set policy port ge.1.2 4
2-43
show config
show config
Usethiscommandtodisplaythesystemconfigurationorwritetheconfigurationtoafile.
Syntax
show config [all | facility] [outfile {configs/filename}]
Parameters
all facility (Optional)Displaysdefaultandnondefaultconfigurationsettings. (Optional)Specifiestheexactnameofonefacilityforwhichtoshow configuration.Forexample,enterroutertoshowonlyrouter configuration. (Optional)Specifiesthatthecurrentconfigurationwillbewrittentoatext fileintheconfigs/directory. Specifiesafilenameintheconfigs/directorytodisplay.
outfile configs/filename
Defaults
Bydefault,showconfigwilldisplayallnondefaultconfigurationinformationforallfacilities.
Mode
Usage
Theseparatefacilitiesthatcanbedisplayedbythiscommandareidentifiedinthedisplayofthe currentconfigurationbya#precedingthefacilityname.Forexample,#portindicatesthefacility nameport.
Examples
Thisexampleshowshowtowritethecurrentconfigurationtoafilenamedsave_config2:
D2(rw)->show config all outfile configs/save_config2
Thisexampleshowshowtodisplayconfigurationforthefacilityport.
D2(rw)->show config port This command shows non-default configurations only. Use 'show config all' to show both default and non-default configurations. begin ! #***** NON-DEFAULT CONFIGURATION ***** ! ! #port set port jumbo disable ge.1.1 ! end
2-44
Basic Configuration
configure
configure
Usethiscommandtoexecuteapreviouslydownloadedconfigurationfilestoredontheswitch.
Syntax
configure filename [append]
Parameters
filename append Specifiesthepathandfilenameoftheconfigurationfiletoexecute. (Optional)Appendstheconfigurationfilecontentstothecurrent configuration.Thisisequivalenttotypingthecontentsoftheconfigfile directlyintotheCLIandcanbeused,forexample,tomakeincremental adjustmentstothecurrentconfiguration.
Defaults
Ifappendisnotspecified,thecurrentrunningconfigurationwillbereplacedwiththecontentsof theconfigurationfile,whichwillrequireanautomatedresetofthechassis.
Mode
Example
ThisexampleshowshowtoexecutetheJan1_2004.cfgconfigurationfile:
D2(su)->configure configs/Jan1_2004.cfg
copy
UsethiscommandtouploadordownloadanimageoraCLIconfigurationfile.
Syntax
copy source destination
Parameters
source destination Specifieslocationandnameofthesourcefiletocopy.Optionsarealocalfile pathintheconfigsdirectory,ortheURLofaTFTPserver. Specifieslocationandnameofthedestinationwherethefilewillbecopied. Optionsareaslotlocationandfilename,ortheURLofaTFTPserver.
Defaults
None.
Mode
2-45
delete
Examples
ThisexampleshowshowtodownloadanimageviaTFTP:
D2(su)->copy tftp://10.1.192.34/version01000 system:image
Thisexampleshowshowtodownloadaconfigurationfiletotheconfigsdirectory:
D2(su)->copy tftp://10.1.192.1/Jan1_2004.cfg configs/Jan1_2004.cfg
delete
UsethiscommandtoremoveanimageoraCLIconfigurationfilefromtheswitch.
Syntax
delete filename
Parameters
filename Specifiesthelocalpathnametothefile.Validdirectoriesare/imagesand /configs.44.
Defaults
None.
Mode
Usage
Usethedircommand(page242)todisplaycurrentimageandconfigurationfilenames.
Example
ThisexampleshowshowtodeletetheJan1_2004.cfgconfigurationfile:
D2(su)->delete configs/Jan1_2004.cfg
show tftp settings

UsethiscommandtodisplayTFTPsettingsusedbytheswitchduringdatatransfersusingTFTP.
Syntax
show tftp settings
Parameters
None.
Defaults
None.
Mode
set tftp timeout
Usage
TheTFTPtimeoutvaluecanbesetwiththesettftptimeoutcommand.TheTFTPretryvaluecan besetwiththesettftpretrycommand.
Example
Thisexampleshowstheoutputofthiscommand.
D2(ro)->show tftp settings TFTP packet timeout (seconds): 2 TFTP max retry: 5
set tftp timeout

UsethiscommandtoconfigurehowlongTFTPwillwaitforareplyofeitheranacknowledgement packetoradatapacketduringadatatransfer.
Syntax
set tftp timeout seconds
Parameters
seconds Specifiesthenumberofsecondstowaitforareply.Thevalidrangeis from1to30seconds.Defaultvalueis2seconds.
Defaults
None.
Mode
Example
Thisexamplesetsthetimeoutperiodto4seconds.
D2(rw)->set tftp timeout 4
clear tftp timeout

UsethiscommandtoresettheTFTPtimeoutvaluetothedefaultvalueof2seconds.
Syntax
clear tftp timeout
Parameters
None.
Defaults
None.
2-47
set tftp retry
Mode
Example
Thisexampleshowshowtoclearthetimeoutvaluetothedefaultof2seconds.
D2(rw)-> clear tftp timeout
set tftp retry

UsethiscommandtoconfigurehowmanytimesTFTPwillresendapacket,eitheran acknowledgementpacketoradatapacket.
Syntax
set tftp retry retry
Parameters
retry Specifiesthenumberoftimesapacketwillberesent.Thevalidrangeis from1to1000.Defaultvalueis5retries.
Defaults
None.
Mode
Example
Thisexamplesetstheretrycountto3.
D2(rw)->set tftp retry 3
clear tftp retry

UsethiscommandtoresettheTFTPretryvaluetothedefaultvalueof5retries.
Syntax
clear tftp retry
Parameters
None.
Defaults
None.
Mode
2-48
Basic Configuration
Clearing and Closing the CLI
Example
Thisexampleshowshowtocleartheretryvaluetothedefaultof5retries.
D2(rw)-> clear tftp retry
Clearing and Closing the CLI

Purpose
TocleartheCLIscreenortocloseyourCLIsession.
Commands
ThecommandsusedtoclearandclosetheCLIsessionarelistedbelow.
For information about... cls exit Refer to page... 2-49 2-49
cls (clear screen)

UsethiscommandtoclearthescreenforthecurrentCLIsession.
Syntax
cls
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtocleartheCLIscreen:
D2(su)->cls
exit
UseeitherofthesecommandstoleaveaCLIsession.
Syntax
exit
2-49
Resetting the Switch
Parameters
None.
Defaults
None.
Mode
Usage
Bydefault,switchtimeoutoccursafter15minutesofuserinactivity,automaticallyclosingyour CLIsession.Usethesetlogoutcommand(page226)tochangethisdefault.
Example
ThisexampleshowshowtoexitaCLIsession:
D2(su)->exit
Resetting the Switch

Purpose
Toresetoneormoreswitches,andtocleartheuserdefinedconfigurationparameters.
Commands
For information about... reset clear config Refer to page... 2-50 2-51
reset
Usethiscommandtoresettheswitchwithoutlosinganyuserdefinedconfigurationsettings.
Syntax
reset
Parameters
None.
Defaults
None.
Mode
clear config
Examples
Thisexampleshowshowtoresetthesystem:
D2(su)->reset This command will reset all modules and may disconnect your telnet session. Do you want to continue (y/n) [n]?
clear config
Usethiscommandtocleartheuserdefinedconfigurationparameters.
Syntax
clear config
Parameters
None.
Defaults
None.
Mode
Usage
ExecutingthiscommandwillcleartheconfigurationinbothNVRAMandonthememorycard,if oneisinstalledontheswitch. ThiscommandwillnotcleartheIPaddressoftheswitch.Usetheclearipaddresscommandto cleartheIPaddress.
Example
Thisexampleshowshowtoclearconfigurationparameters:
D2(su)->clear config
Using and Configuring WebView

Purpose
Bydefault,WebView(TheEnterasysNetworksembeddedwebserverforswitchconfiguration andmanagementtasks)isenabledonTCPportnumber80ontheDSeriesswitch.Youcanverify WebViewstatus,andenableordisableWebViewusingthecommandsdescribedinthissection. WebViewcanalsobesecurelyusedoverSSLport443,ifSSLisenabledontheswitch.Bydefault, SSLisdisabled. TouseWebView,typetheIPaddressoftheswitchinyourbrowser.TouseWebViewoverSSL, typeinhttps://thentheIPaddressoftheswitch.Forexample,https://172.16.2.10.
2-51
show webview
Commands
For information about... show webview set webview show ssl set ssl Refer to page... 2-52 2-52 2-53 2-53
show webview
UsethiscommandtodisplayWebViewstatus.
Syntax
show webview
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplayWebViewstatus:
D2(rw)->show webview WebView is Enabled.
set webview
UsethiscommandtoenableordisableWebViewontheswitch.
Syntax
set webview {enable | disable}
Parameters
enable|disable EnableordisableWebViewontheswitch.
Defaults
None.
Mode
2-52
Basic Configuration
show ssl
Usage
ItisgoodpracticeforsecurityreasonstodisableHTTPaccessontheswitchwhenfinished configuringwithWebView,andthentoonlyenableWebViewontheswitchwhenchangesneed tobemade.
Example
ThisexampleshowshowtodisableWebViewontheswitch:
D2(rw)->set webview disable
show ssl
UsethiscommandtodisplaySSLstatus.
Syntax
show ssl
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaySSLstatus:
D2(rw)->show ssl SSL status: Enabled
set ssl
UsethiscommandtoenableordisabletheuseofWebViewoverSSLport443.Bydefault,SSLis disabledontheswitch.Thiscommandcanalsobeusedtoreinitializethehostkeythatisusedfor encryption.
Syntax
set ssl {enabled | disabled | reinitialize | hostkey reinitialize}
Parameters
enabled|disabled reinitialize hostkeyreinitialize EnableordisabletheabilitytouseWebViewoverSSL. StopsandthenrestartstheSSLprocess. StopsSSL,regeneratesnewkeys,andthenrestartsSSL.
Defaults
None.
set ssl
Mode
Example
ThisexampleshowshowtoenableSSL:
D2(rw)->set ssl enabled
2-54
Basic Configuration
3
Discovery Protocol Configuration
Thischapterdescribeshowtoconfigurediscoveryprotocols.
For information about... Configuring CDP Configuring Cisco Discovery Protocol Refer to page... 3-1 3-6
Configuring CDP
Purpose
ToreviewandconfiguretheEnterasysCDPdiscoveryprotocol.Thisprotocolisusedtodiscover networktopology.Whenenabled,thisprotocolallowsEnterasysdevicestosendperiodicPDUs aboutthemselvestoneighboringdevices.
Commands
ThecommandsusedtoreviewandconfiguretheCDPdiscoveryprotocolarelistedbelow.
For information about... show cdp set cdp state set cdp auth set cdp interval set cdp hold-time clear cdp show neighbors Refer to page... 3-1 3-3 3-3 3-4 3-5 3-5 3-6
show cdp
UsethiscommandtodisplaythestatusoftheCDPdiscoveryprotocolandmessageintervalon oneormoreports.
Syntax
show cdp [port-string]
show cdp
Parameters
portstring (Optional)DisplaysCDPstatusforaspecificport.Foradetaileddescription ofpossibleportstringvalues,refertoPort String Syntax Used in the CLIon page41.
Defaults
Ifportstringisnotspecified,allCDPinformationwillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayCDPinformationforportsge.1.1throughge.1.9:
D2(su)->show cdp ge.1.1-9 CDP Global Status CDP Version Supported CDP Hold Time CDP Authentication Code CDP Transmit Frequency Port Status ----------------ge.1.1 auto-enable ge.1.2 auto-enable ge.1.3 auto-enable ge.1.4 auto-enable ge.1.5 auto-enable ge.1.6 auto-enable ge.1.7 auto-enable ge.1.8 auto-enable ge.1.9 auto-enable :auto-enable :30 hex :180 :00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 hex :60
Table 38providesanexplanationofthecommandoutput. Table 3-8 show cdp Output Details

What It Displays... Whether CDP is globally auto-enabled, enabled or disabled. The default state of auto-enabled can be reset with the set cdp state command. For details, refer to set cdp state on page 3-3. CDP version number(s) supported by the switch. Minimum time interval (in seconds) at which CDP configuration messages can be set. The default of 180 seconds can be reset with the set cdp hold-time command. For details, refer to set cdp hold-time on page 3-5. Authentication code for CDP discovery protocol. The default of 00-00-00-00-00-0000-00 can be reset using the set cdp auth command. For details, refer to set cdp auth on page 3-3. Frequency (in seconds) at which CDP messages can be transmitted. The default of 60 seconds can be reset with the set cdp interval command. For details, refer to set cdp interval on page 3-4. Port designation. For a detailed description of possible port-string values, refer to Port String Syntax Used in the CLI on page 4-1.
Output Field CDP Global Status
CDP Versions Supported CDP Hold Time
CDP Authentication Code CDP Transmit Frequency Port
3-2
set cdp state
Table 3-8
show cdp Output Details (Continued)

What It Displays... Whether CDP is enabled, disabled or auto-enabled on the port.
Output Field Status
set cdp state

UsethiscommandtoenableordisabletheCDPdiscoveryprotocolononeormoreports.
Syntax
set cdp state {auto | disable | enable} [port-string]
Parameters
auto|disable| enable portstring Autoenables,disablesorenablestheCDPprotocolonthespecifiedport(s). Inautoenablemode,whichisthedefaultmodeforallports,aport automaticallybecomesCDPenableduponreceivingitsfirstCDPmessage. (Optional)EnablesordisablesCDPonspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPort String Syntax Used in the CLIonpage41.
Defaults
Ifportstringisnotspecified,theCDPstatewillbegloballyset.
Mode
Examples
ThisexampleshowshowtogloballyenableCDP:
D2(su)->set cdp state enable
ThisexampleshowshowtoenabletheCDPforportge.1.2:
D2(su)->set cdp state enable ge.1.2
ThisexampleshowshowtodisabletheCDPforportge.1.2:
D2(su)->set cdp state disable ge.1.2
set cdp auth

UsethiscommandtosetaglobalCDPauthenticationcode.
Syntax
set cdp auth auth-code
3-3
set cdp interval
Parameters
authcode SpecifiesanauthenticationcodefortheCDPprotocol.Thiscanbeupto16 hexadecimalvaluesseparatedbycommas.
Defaults
None.
Mode
Usage
TheauthenticationcodevaluedeterminesaswitchsCDPdomain.Iftwoormoreswitcheshave thesameCDPauthenticationcode,theywillbeenteredintoeachothersCDPneighbortables.If theyhavedifferentauthenticationcodes,theyareindifferentdomainsandwillnotbeentered intoeachothersCDPneighbortables. Aswitchwiththedefaultauthenticationcode(16nullcharacters)willrecognizeallswitches,no matterwhattheirauthenticationcode,andenterthemintoitsCDPneighbortable.
Example
ThisexampleshowshowtosettheCDPauthenticationcodeto1,2,3,4,5,6,7,8:
D2(su)->set cdp auth 1,2,3,4,5,6,7,8:
set cdp interval

Usethiscommandtosetthemessageintervalfrequency(inseconds)oftheCDPdiscovery protocol.
Syntax
set cdp interval frequency
Parameters
frequency SpecifiesthetransmitfrequencyofCDPmessagesinseconds.Validvalues arefrom5to900seconds.
Defaults
None.
Mode
Example
ThisexampleshowshowtosettheCDPintervalfrequencyto15seconds:
D2(su)->set cdp interval 15
3-4
set cdp hold-time
set cdp hold-time

UsethiscommandtosettheholdtimevalueforCDPdiscoveryprotocolconfigurationmessages.
Syntax
set cdp hold-time hold-time
Parameters
holdtime SpecifiestheholdtimevalueforCDPmessagesinseconds.Validvaluesare from15to600.
Defaults
None.
Mode
Example
ThisexampleshowshowtosetCDPholdtimeto60seconds:
D2(su)->set cdp hold-time 60
clear cdp
UsethiscommandtoresetCDPdiscoveryprotocolsettingstodefaults.
Syntax
clear cdp {[state] [port-state port-string] [interval] [hold-time] [auth-code]}
Parameters
state portstateportstring interval holdtime authcode (Optional)ResetstheglobalCDPstatetoautoenabled. (Optional)Resetstheportstateonspecificport(s)toautoenabled. (Optional)Resetsthemessagefrequencyintervalto60seconds. (Optional)Resetstheholdtimevalueto180seconds. (Optional)Resetstheauthenticationcodeto16bytesof00(000000 0000000000).
Defaults
Atleastoneoptionalparametermustbeentered.
Mode
Example
ThisexampleshowshowtoresettheCDPstatetoautoenabled:
D2(su)->clear cdp state
show neighbors
show neighbors
ThiscommanddisplaysNeighborDiscoveryinformationforeithertheCDPorCiscoDP protocols.
Syntax
show neighbors [port-string]
Parameters
portstring (Optional)SpecifiestheportorportsforwhichtodisplayNeighbor Discoveryinformation.
Defaults
Ifnoportisspecified,allNeighborDiscoveryinformationisdisplayed.
Mode
Usage
ThiscommanddisplaysinformationdiscoveredbyboththeCDPandtheCiscoDPprotocols.
Example
ThisexampledisplaysNeighborDiscoveryinformationforallports.
D2(su)->show neighbors Port Device ID Port ID Type Network Address -----------------------------------------------------------------------------ge.1.1 00036b8b1587 12.227.1.176 ciscodp 12.227.1.176 ge.1.6 0001f496126f 140.2.3.1 ciscodp 140.2.3.1 ge.1.6 00-01-f4-00-72-fe 140.2.4.102 cdp 140.2.4.102 ge.1.6 00-01-f4-00-70-8a 140.2.4.104 cdp 140.2.4.104 ge.1.6 00-01-f4-c5-f7-20 140.2.4.101 cdp 140.2.4.101 ge.1.6 00-01-f4-89-4f-ae 140.2.4.105 cdp 140.2.4.105 ge.1.6 00-01-f4-5f-1f-c0 140.2.1.11 cdp 140.2.1.11 ge.1.19 0001f400732e 165.32.100.10 ciscodp 165.32.100.10
Configuring Cisco Discovery Protocol

Purpose
ToreviewandconfiguretheCiscodiscoveryprotocol.Discoveryprotocolsareusedtodiscover networktopology.Whenenabled,theyallowCiscodevicestosendperiodicPDUsabout themselvestoneighboringdevices.Specifically,thisfeatureenablesrecognizingPDUsfromCisco phones.Atableofinformationaboutdetectedphonesiskeptbytheswitchandcanbequeriedby thenetworkadministrator.
3-6
show ciscodp
Commands
ThecommandsusedtoreviewandconfiguretheCiscodiscoveryprotocolarelistedbelow.Refer alsotoshowneighborsonpage36.
For information about... show ciscodp show ciscodp port info set ciscodp status set ciscodp timer set ciscodp holdtime set ciscodp port clear ciscodp Refer to page... 3-7 3-8 3-9 3-9 3-10 3-10 3-12
show ciscodp
UsethiscommandtodisplayglobalCiscodiscoveryprotocolinformation.
Syntax
show ciscodp
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplayglobalCiscoDPinformation.
D2(su)->show ciscodp CiscoDP :Enabled Timer :5 Holdtime (TTl): 180 Device ID : 001188554A60 Last Change : WED NOV 08 13:19:56 2006
Table 39providesanexplanationofthecommandoutput. Table 3-9 show ciscodp Output Details

What It Displays... Whether Cisco DP is globally enabled or disabled. Auto indicates that Cisco DP will be globally enabled only if Cisco DP PDUs are received. Default setting of auto-enabled can be reset with the set ciscodp status command.
Output Field CiscoDP
3-7
show ciscodp port info
Table 3-9
show ciscodp Output Details (Continued)

What It Displays... The number of seconds between Cisco discovery protocol PDU transmissions. The default of 60 seconds can be reset with the set ciscodp timer command. Number of seconds neighboring devices will hold PDU transmissions from the sending device. Default value of 180 can be changed with the set ciscodp holdtime command. The MAC address of the switch. The time that the last Cisco DP neighbor was discovered.
Output Field Timer Holdtime
Device ID Last Change
show ciscodp port info

UsethiscommandtodisplaysummaryinformationabouttheCiscodiscoveryprotocolononeor moreports.
Syntax
show ciscodp port info [port-string]
Parameters
portstring (Optional)DisplaysCiscoDPinformationforaspecificport.Foradetailed descriptionofpossibleportstringvalues,refertoPort String Syntax Used in the CLIonpage41.
Defaults
Ifportstringisnotspecified,CiscoDPinformationforallportswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayCiscoDPinformationforGigabitEthernetport1inslot1.
D2(su)->show ciscodp port info ge.1.1 port state vvid trusted cos ---------------------------------------------ge.1.1 enable none yes 0

Output Field Port State vvid
show ciscodp port info Output Details

What It Displays... Port designation. For a detailed description of possible port-string values, refer to Port String Syntax Used in the CLI on page 4-1. Whether Cisco DP is enabled, disabled or auto-enabled on the port. Default state of enabled can be changed using the set ciscodp port command. Whether a voice VLAN ID has been set on this port. Default of none can be changed using the set ciscodp port command.
3-8
set ciscodp status
Table 3-10
Output Field trusted cos
show ciscodp port info Output Details (Continued)

What It Displays... The trust mode of the port. Default of trusted can be changed using the set ciscodp port command. The Class of Service priority value for untrusted traffic. The default of 0 can be changed using the set ciscodp port command.
set ciscodp status

UsethiscommandtoenableordisabletheCiscodiscoveryprotocolgloballyontheswitch.
Syntax
set ciscodp state {auto | disable | enable}
Parameters
auto disable enable GloballyenableonlyifCiscoDPPDUsarereceived. GloballydisableCiscodiscoveryprotocol. GloballyenableCiscodiscoveryprotocol.
Defaults
None.
Mode
Example
ThisexampleshowshowtogloballyenableCiscoDP:
D2(su)->set ciscodp state enable
set ciscodp timer

UsethiscommandtosetthenumberofsecondsbetweenCiscodiscoveryprotocolPDU transmissions.
Syntax
set ciscodp timer seconds
Parameters
seconds SpecifiesthenumberofsecondsbetweenCiscoDPPDUtransmissions. Validvaluesarefrom5to254seconds.
Defaults
None.
3-9
set ciscodp holdtime
Mode
Example
ThisexampleshowshowtosettheCiscoDPtimerto120seconds.
D2(su)->set ciscodp timer 120
set ciscodp holdtime

Usethiscommandtosetthetimetolive(TTL)forCiscodiscoveryprotocolPDUs.Thisisthe amountoftime,inseconds,neighboringdeviceswillholdPDUtransmissionsfromthesending device.
Syntax
set ciscodp holdtime hold-time
Parameters
holdtime SpecifiesthetimetoliveforCiscoDPPDUs.Validvaluesarefrom10to255 seconds.
Defaults
None.
Mode
Example
ThisexampleshowshowtosetCiscoDPholdtimeto180seconds:
D2(su)->set ciscodp hold-time 180
set ciscodp port

Usethiscommandtosetthestatus,voiceVLAN,extendedtrustmode,andCoSpriorityfor untrustedtrafficfortheCiscoDiscoveryProtocolononeormoreports.
Syntax
set ciscodp port {[status {disable | enable}] [vvid {vlan-id | none | dot1p | untagged}] [trusted {yes | no}] [cos value]} port-string
Parameters
status disable enable vvid vlanid SetstheCiscoDPportoperationalstatus. DoesnottransmitorprocessCiscoDPPDUs. TransmitsandprocessesCiscoDPPDUs. SetstheportvoiceVLANforCiscoDPPDUtransmission. SpecifiestheVLANID,range14094.
3-10
set ciscodp port
none dot1p untagged trusted yes
NovoiceVLANwillbeusedinCiscoDPPDUs.Thisisthedefault. Instructsattachedphonetosend802.1ptaggedframes. Instructsattachedphonetosenduntaggedframes. Setstheextendedtrustmodeontheport. Instructsattachedphonetoallowthedeviceconnectedtoittotransmit trafficcontaininganyCoSorLayer2802.1pmarking.Thisisthedefault value. Instructsattachedphonetooverwritethe802.1ptagoftraffic transmittedbythedeviceconnectedtoitto0,bydefault,ortothevalue configuredwiththecosparameter. Instructsattachedphonetooverwritethe802.1ptagoftraffic transmittedbythedeviceconnectedtoitwiththespecifiedvalue,when thetrustmodeoftheportissettountrusted.Valuecanrangefrom0to 7,with0indicatingthelowestpriority. Specifiestheport(s)onwhichstatuswillbeset.
no
cosvalue
portstring
Defaults
Status:enabled VoiceVLAN:none Trustmode:trusted CoSvalue:0
Mode
Switchmode,readwrite.
Usage
ThefollowingpointsdescribehowtheCiscoDPextendedtrustsettingsworkontheswitch. ACiscoDPporttruststatusoftrustedoruntrustedisonlymeaningfulwhenaCiscoIPphone isconnectedtoaswitchportandaPCorotherdeviceisconnectedtothebackoftheCiscoIP phone. ACiscoDPportstateoftrustedoruntrustedonlyaffectstaggedtraffictransmittedbythe deviceconnectedtotheCiscoIPphone.Untaggedtraffictransmittedbythedeviceconnected totheCiscoIPphoneisunaffectedbythissetting. IftheswitchportisconfiguredtoaCiscoDPtruststateoftrusted(withthetrustedyes parameterofthiscommand),thissettingiscommunicatedtotheCiscoIPphoneinstructingit toallowthedeviceconnectedtoittotransmittrafficcontaininganyCoSorLayer2802.1p marking. IftheswitchportisconfiguredtoaCiscoDPtruststateofuntrusted(trustedno),thissetting iscommunicatedtotheCiscoIPphoneinstructingittooverwritethe802.1ptagoftraffic transmittedbythedeviceconnectedtoitto0,bydefault,ortothevaluespecifiedbythecos parameterofthiscommand. Thereisaonetoonecorrelationbetweenthevaluesetwiththecosparameterandthe802.1p valueassignedtoingressedtrafficbytheCiscoIPphone.Avalueof0equatestoan802.1p priorityof0.Therefore,avalueof7isgiventhehighestpriority.
3-11
clear ciscodp
Note: The Cisco Discovery Protocol must be globally enabled using the set ciscodp status command before operational status can be set on individual ports.
Examples
ThisexampleshowshowtosettheCiscoDPportvoiceVLANIDto3onportge.1.6andenable theportoperationalstate.
D2(rw)->set ciscodp port status enable vvid 3 ge.1.6
ThisexampleshowshowtosettheCiscoDPextendedtrustmodetountrustedonportge.1.5and settheCoSpriorityto1.
D2(rw)->set ciscodp port trusted no cos 1 ge.1.5
clear ciscodp
UsethiscommandtocleartheCiscodiscoveryprotocolbacktothedefaultvalues.
Syntax
clear ciscodp [status | timer | holdtime | {port {status | vvid | trust | cos} [port-string]}]
Parameters
status timer holdtime port status vvid trust cos portstring ClearsglobalCiscoDPenablestatustodefaultofauto. ClearsthetimebetweenCiscoDPPDUtransmissionstodefaultof60 seconds. ClearsthetimetoliveforCiscoDPPDUdatatodefaultof180seconds. ClearstheCiscoDPportconfiguration. Clearstheindividualportoperationalstatustothedefaultofenabled. ClearstheindividualportvoiceVLANforCiscoDPPDUtransmission to0. Clearsthetrustmodeconfigurationoftheporttotrusted. ClearstheCoSpriorityforuntrustedtrafficoftheportto0. (Optional)Specifiestheport(s)onwhichstatuswillbeset.
Defaults
Ifnoparametersareentered,allCiscoDPparametersareresettothedefaultsgloballyandforall ports.
Mode
Examples
ThisexampleshowshowtoclearalltheCiscoDPparametersbacktothedefaultsettings.
D2(rw)->clear ciscodp
ThisexampleshowshowtocleartheCiscoDPstatusonportge.1.5.
D2(rw)->clear ciscodp port status ge.1.5
3-12 Discovery Protocol Configuration
Port Configuration
ThischapterdescribesthePortConfigurationsetofcommandsandhowtousethem.
For information about... Port Configuration Summary Reviewing Port Status Disabling / Enabling and Naming Ports Setting Speed and Duplex Mode Enabling / Disabling Jumbo Frame Support Setting Auto-Negotiation and Advertised Ability Setting Flow Control Setting Port Link Traps and Link Flap Detection Configuring Broadcast Suppression Port Mirroring Link Aggregation Control Protocol (LACP) Configuring Protected Ports Refer to page... 4-1 4-3 4-7 4-9 4-12 4-14 4-18 4-19 4-28 4-31 4-33 4-47
Port Configuration Summary

Port String Syntax Used in the CLI
Commandsrequiringaportstringparameterusethefollowingsyntaxtodesignateporttype,slot location,andportnumber: porttype.unitnumber.portnumber Whereporttypecanbe: gefor1GbpsEthernet hostforthehostport vlanforvlaninterfaces lagforIEEE802.3linkaggregationports Whereunitnumberis1fortheD2standaloneunit,and Portnumbercanbe: 112fortheD2G12412andtheD2G12412P Thehighestvalidportnumberisdependentonthenumberofportsinthedeviceandtheport type.
Port Configuration Summary
Port Slot/Unit Parameters Used in the CLI

TheunitparameterisoftenusedinterchangeablywithmoduleinthestandaloneswitchCLI toindicateamoduleslotlocation.
Examples
Note: You can use a wildcard (*) to indicate all of an item. For example, ge.3.* would represent all 1-Gigabit Ethernet (ge) ports in slot 3.
Thisexampleshowstheportstringsyntaxforspecifyingthe1GigabitEthernetport14inslot3.
ge.3.14
Thisexampleshowstheportstringsyntaxforspecifyingall1GigabitEthernetportsinslot3inthe system.
ge.3.*
Thisexampleshowstheportstringsyntaxforspecifyingallports(ofanyinterfacetype)inthe system.
*.*.*
Configuring SFP Ports for 100BASE-FX

Bydefault,SFPportsintheD2G12412andD2G12412Psupport1Gigabittranceivers(Mini GBICs)for1000BASELX/SXfiberopticconnectionsand1000BASETcopperconnections. Optionally,theseportscansupportaFastEthernettranceiverfor100BASEFXconnectionswhen thattranceiverisinstalledandProcedure 41iscompletedoneachapplicableport: Procedure 4-1
Step 1. Disable the ports auto-negotiation. 2. 3. 4. 5. Set the ports advertised ability to 100BASE-TX full duplex mode. Set the port speed to 100 Mbps. Set the port duplex mode to full. (Optional) Verify the new settings. Task
Configuring SFP Ports for 100BASE-FX

Command(s) set port negotiation port-string disable set port advertise port-string 100txfd set port speed port-string 100 set port duplex port-string full show port status port-string
4-2
Port Configuration
Reviewing Port Status
Example
Thisexampleshowshowtoconfigureportge.2.1intheD2G12412tooperatewitha100BASEFX transceiverinstalled.First,theportstatusisshownasoperatingasa1000BASESXport.Afterthe 1Gigabittransceiverisreplacedwiththea100Mbpstransceiver,theportisconfigured appropriatelyandthenewsettingsareverified.
D2(su)->show port advertise ge.2.1 ge.2.1 capability advertised remote ------------------------------------------------10BASE-T no no no 10BASE-TFD no no no 100BASE-TX no no no 100BASE-TXFD yes no no 1000BASE-T no no no 1000BASE-TFD yes yes no pause yes yes no D2(su)->show port status ge.2.1 Alias Oper Admin Port (truncated) Status Status --------- ------------ ------- ------ge.2.1 Down Up D2(su)->set D2(su)->set D2(su)->set D2(su)->set port port port port
Speed (bps) Duplex Type --------- ------- -----------N/A N/A 1000BASE-SX
negotiation ge.2.1 disable advertise ge.2.1 100txfd speed ge.2.1 100 duplex ge.2.1 full
D2(su)->show port status ge.2.1 Alias Oper Admin Port (truncated) Status Status --------- ------------ ------- ------ge.2.1 Down Up
Speed (bps) Duplex Type --------- ------- -----------100.0M full 100BASE-FX
Formoreinformation,refertothecommandsinthischapterandtoyourDSerieshardware installationdocumentation.
Reviewing Port Status

Purpose
Todisplayoperatingstatus,duplexmode,speed,porttype,andstatisticalinformationabout trafficreceivedandtransmittedthroughoneorallswitchportsonthedevice.
Commands
Thecommandsusedtoreviewportstatusarelistedbelow.
For information about... show port show port status show port counters Refer to page... 4-4 4-4 4-5
4-3
show port
show port
Usethiscommandtodisplaywhetherornotoneormoreportsareenabledforswitching.
Syntax
show port [port-string]
Parameters
portstring (Optional)Displaysoperationalstatusforspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage41.
Defaults
Ifportstringisnotspecified,operationalstatusinformationforallportswillbedisplayed.
Mode
Example
Thisexampleshowshowtodisplayoperationalstatusinformationforge.3.14:
D2(su)->show port ge.3.14 Port ge.3.14 enabled
show port status

Usethiscommandtodisplayoperatingandadminstatus,speed,duplexmodeandporttypefor oneormoreportsonthedevice.
Syntax
show port status [port-string]
Parameters
portstring (Optional)Displaysstatusforspecificport(s).Foradetaileddescriptionof possibleportstringvalues,refertoPortStringSyntaxUsedintheCLIon page41.
Defaults
Ifportstringisnotspecified,statusinformationforallportswillbedisplayed.
Mode
4-4
Port Configuration
show port counters
Example
Thisexampleshowshowtodisplaystatusinformationforge.3.14:
D2(su)->show port status ge.3.14 Port Alias (truncated) ------------ -------------ge.3.14 Oper Status ------up Admin Status ------up Speed -------N/A Duplex Type
------- ------------N/A BaseT RJ45

Output Field Port Alias (truncated) Oper Status Admin Status
show port status Output Details

What It Displays... Port designation. For a detailed description of possible port-string values, refer to Port String Syntax Used in the CLI on page 4-1. Alias configured for the port. For details on using the set port alias command, refer to set port alias on page 4-9. Operating status (up or down). Whether the specified port is enabled (up) or disabled (down). For details on using the set port disable command to change the default port status of enabled, refer to set port disable on page 4-7. For details on using the set port enable command to re-enable ports, refer to set port enable on page 4-8. Operational speed in Mbps or Kbps of the specified port. For details on using the set port speed command to change defaults, refer to set port speed on page 4-10. Duplex mode (half or full) of the specified port. For details on using the set port duplex command to change defaults, refer to Setting Auto-Negotiation and Advertised Ability on page 4-14. Physical port and interface type.
Speed Duplex
Type
show port counters

Usethiscommandtodisplayportcounterstatisticsdetailingtrafficthroughthedeviceand throughallMIB2networkdevices.
Syntax
show port counters [port-string] [switch | mib2]
Parameters
portstring (Optional)Displayscounterstatisticsforspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage41. (Optional)DisplaysswitchorMIB2statistics.Switchstatisticsdetail performanceoftheDSeriesdevice.MIB2interfacestatisticsdetail performanceofallnetworkdevices.
switch|mib2
Defaults
Ifportstringisnotspecified,counterstatisticswillbedisplayedforallports. Ifmib2orswitcharenotspecified,allcounterstatisticswillbedisplayedforthespecifiedport(s).
4-5
show port counters
Mode
Examples
Thisexampleshowshowtodisplayallcounterstatistics,includingMIB2networktrafficand trafficthroughthedeviceforge.3.1:
D2(su)->show port counters ge.3.1 Port: ge.3.1 MIB2 Interface: 1 No counter discontinuity time ----------------------------------------------------------------MIB2 Interface Counters ----------------------In Octets In Unicast Pkts In Multicast Pkts In Broadcast Pkts In Discards In Errors Out Octets Out Unicasts Pkts Out Multicast Pkts Out Broadcast Pkts Out Errors 802.1Q Switch Counters ---------------------Frames Received Frames Transmitted
0 0 0 0 0 0 0 0 0 0 0
0 0
Thisexampleshowshowtodisplayallge.3.1portcounterstatisticsrelatedtotrafficthroughthe device.
D2(su)->show port counters ge.3.1 switch Port: ge.3.1 Bridge Port: 2
802.1Q Switch Counters ----------------------Frames Received Frames Transmitted
0 0

Output Field Port MIB2 Interface Bridge Port
show port counters Output Details

What It Displays... Port designation. For a detailed description of possible port-string values, refer to Port String Syntax Used in the CLI on page 4-1. MIB2 interface designation. IEEE 802.1D bridge port designation.
4-6
Port Configuration
Disabling / Enabling and Naming Ports
Table 4-12
Output Field
show port counters Output Details (Continued)

What It Displays... MIB2 network traffic counts Counts of frames received, transmitted, and filtered.
MIB2 Interface Counters 802.1Q Switch Counters
Disabling / Enabling and Naming Ports

Purpose
Todisableandreenableoneormoreports,andtoassignanaliastoaport.Bydefault,allportsare enabledatdevicestartup.Youmaywanttodisableportsforsecurityortotroubleshootnetwork issues.Portsmayalsobeassignedanaliasforconvenience.
Commands
For information about... set port disable set port enable show port alias set port alias Refer to page... 4-7 4-8 4-8 4-9
set port disable

Usethiscommandtoadministrativelydisableoneormoreports.Whenthiscommandis executed,inadditiontodisablingthephysicalEthernetlink,theportwillnolongerlearnentries intheforwardingdatabase.
Syntax
set port disable port-string
Parameters
portstring Specifiestheport(s)todisable.Foradetaileddescriptionofpossibleport stringvalues,refertoPortStringSyntaxUsedintheCLIonpage41.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisablege.1.1:
D2(su)->set port disable ge.1.1
set port enable
set port enable

Usethiscommandtoadministrativelyenableoneormoreports.
Syntax
set port enable port-string
Parameters
portstring Specifiestheport(s)toenable.Foradetaileddescriptionofpossibleport stringvalues,refertoPortStringSyntaxUsedintheCLIonpage41.
Defaults
None.
Mode
Example
Thisexampleshowshowtoenablege.1.3:
D2(su)->set port enable ge.1.3
show port alias

Usethiscommandtodisplaythealiasnameforoneormoreports.
Syntax
show port alias [port-string]
Parameters
portstring (Optional)Displaysaliasname(s)forspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntax UsedintheCLIonpage41.
Defaults
Ifportstringisnotspecified,aliasesforallportswillbedisplayed.
Mode
Example
Thisexampleshowshowtodisplayaliasinformationforports13onslot3:
D2(rw)->show Port ge.3.1 Port ge.3.2 Port ge.3.3 port alias ge.3.1-3 user user Admin
4-8
Port Configuration
set port alias
set port alias

Usethiscommandtoassignanaliasnametoaport.
Syntax
set port alias port-string [name]
Parameters
portstring Specifiestheporttowhichanaliaswillbeassigned.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntax UsedintheCLIonpage41. (Optional)Assignsanaliasnametotheport.Ifthealiasnamecontains spaces,thetextstringmustbesurroundedbydoublequotes.Maximum lengthis60characters.
name
Defaults
Ifnameisnotspecified,thealiasassignedtotheportwillbecleared.
Mode
Examples
ThisexampleshowshowtoassignthealiasAdmintoge.3.3:
D2(rw)->set port alias ge.3.3 Admin
Thisexampleshowshowtoclearthealiasforge.3.3:
D2(rw)->set port alias ge.3.3
Setting Speed and Duplex Mode

Purpose
ToreviewandsettheoperationalspeedinMbpsandthedefaultduplexmode:Half,forhalf duplex,orFull,forfullduplexforoneormoreports.
Note: These settings only take effect on ports that have auto-negotiation disabled.
Commands
For information about... show port speed set port speed show port duplex set port duplex Refer to page... 4-10 4-10 4-11 4-14
show port speed
show port speed

Usethiscommandtodisplaythedefaultspeedsettingononeormoreports.
Syntax
show port speed [port-string]
Parameters
portstring (Optional)Displaysdefaultspeedsetting(s)forspecificport(s).Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage41.
Defaults
Ifportstringisnotspecified,defaultspeedsettingsforallportswilldisplay.
Mode
Example
Thisexampleshowshowtodisplaythedefaultspeedsettingfor1GigabitEthernetport14in slot 3:
D2(su)->show port speed ge.3.14 default speed is 10 on port ge.3.14.
set port speed

Usethiscommandtosetthedefaultspeedofoneormoreports.Thissettingonlytakeseffecton portsthathaveautonegotiationdisabled.
Syntax
set port speed port-string {10 | 100 | 1000}
Parameters
portstring Specifiestheport(s)forwhichtoaspeedvaluewillbeset.Fora detaileddescriptionofpossibleportstringvalues,refertoPort StringSyntaxUsedintheCLIonpage41. Specifiestheportspeed.Validvaluesare:10 Mbps,100 Mbps,or 1000 Mbps.
10|100|1000
Defaults
None.
Mode
4-10
Port Configuration
show port duplex
Example
Thisexampleshowshowtosetge.3.3toaportspeedof10 Mbps:
D2(su)->set port speed ge.3.3 10
show port duplex

Usethiscommandtodisplaythedefaultduplexsetting(halforfull)foroneormoreports.
Syntax
show port duplex [port-string]
Parameters
portstring (Optional)Displaysdefaultduplexsetting(s)forspecificport(s). Foradetaileddescriptionofpossibleportstringvalues,referto PortStringSyntaxUsedintheCLIonpage41.
Defaults
Ifportstringisnotspecified,defaultduplexsettingsforallportswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplaythedefaultduplexsettingforGigabitEthernetport14in slot 3:
D2(su)->show port duplex ge.3.14 default duplex mode is full on port ge.3.14.
set port duplex

Usethiscommandtosetthedefaultduplextypeforoneormoreports.Thiscommandwillonly takeeffectonportsthathaveautonegotiationdisabled.
Syntax
set port duplex port-string {full | half}
Parameters
portstring Specifiestheport(s)forwhichduplextypewillbeset.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntax UsedintheCLIonpage41. Setstheport(s)tofullduplexorhalfduplexoperation.
full|half
Defaults
None.
4-11
Enabling / Disabling Jumbo Frame Support
Mode
Example
Thisexampleshowshowtosetge.1.17tofullduplex:
D2(su)->set port duplex ge.1.17 full
Enabling / Disabling Jumbo Frame Support

Purpose
Toreview,enable,anddisablejumboframesupportononeormoreports.ThisallowsGigabit Ethernetportstotransmitframesupto10KBinsize.
Commands
For information about... show port jumbo set port jumbo clear port jumbo Refer to page... 4-12 4-13 4-13
show port jumbo

Usethiscommandtodisplaythestatusofjumboframesupportandmaximumtransmissionunits (MTU)ononeormoreports.
Syntax
show port jumbo [port-string]
Parameters
portstring (Optional)Displaysthestatusofjumboframesupportforspecific port(s).Foradetaileddescriptionofpossibleportstringvalues,referto PortStringSyntaxUsedintheCLIonpage41.
Defaults
Ifportstringisnotspecified,jumboframesupportstatusforallportswilldisplay.
Mode
4-12
Port Configuration
set port jumbo
Example
Thisexampleshowshowtodisplaythestatusofjumboframesupportforge.1.1:
D2(su)->show port jumbo ge.1.1 Port Number Jumbo Status Max Frame Size ------------- --------------- -----------------ge.1.1 Enable 9216
set port jumbo

Usethiscommandtoenableordisablejumboframesupportononeormoreports.
Syntax
set port jumbo {enable | disable}[port-string]
Parameters
enable|disable portstring Enablesordisablesjumboframesupport. (Optional)Specifiestheport(s)onwhichtodisableorenablejumbo framesupport.Foradetaileddescriptionofpossibleportstringvalues, refertoPortStringSyntaxUsedintheCLIonpage41.
Defaults
Ifportstringisnotspecified,jumboframesupportwillbeenabledordisabledonallports.
Mode
Example
ThisexampleshowshowtoenablejumboframesupportforGigabitEthernetport14inslot3:
D2(su)->set port jumbo enable ge.3.14
clear port jumbo

Usethiscommandtoresetjumboframesupportstatustoenabledononeormoreports.
Syntax
clear port jumbo [port-string]
Parameters
portstring (Optional)Specifiestheport(s)onwhichtoresetjumboframe supportstatustoenabled.Foradetaileddescriptionofpossible portstringvalues,refertoPortStringSyntaxUsedintheCLIon page41.
Defaults
Ifportstringisnotspecified,jumboframesupportstatuswillberesetonallports.
4-13
Setting Auto-Negotiation and Advertised Ability
Mode
Example
ThisexampleshowshowtoresetjumboframesupportstatusforGigabitEthernetport14inslot 3:
D2(su)->clear port jumbo ge.3.14
Setting Auto-Negotiation and Advertised Ability

Purpose
Toreview,disableorenableautonegotiation,andtoconfigureportadvertisementforspeedand duplex. Duringautonegotiation,theporttellsthedeviceattheotherendofthesegmentwhatits capabilitiesandmodeofoperationare.Ifautonegotiationisdisabled,theportrevertstothe valuesspecifiedbydefaultspeed,defaultduplex,andtheportflowcontrolcommands. Innormaloperation,withallcapabilitiesenabled,advertisedabilityenablesaporttoadvertise thatithastheabilitytooperateinanymode.Theusermaychoosetoconfigureaportsothatonly aportionofitscapabilitiesareadvertisedandtheothersaredisabled. RefertoConfiguringSFPPortsfor100BASEFXonpage 42forinformationonconfiguring settingsfor100MbSFPports.
Note: Advertised ability can be activated only on ports that have auto-negotiation enabled.
Commands
For information about... show port negotiation set port negotiation show port advertise set port advertise clear port advertise Refer to page... 4-14 4-15 4-15 4-16 4-17
show port negotiation

Usethiscommandtodisplaythestatusofautonegotiationforoneormoreports.
Syntax
show port negotiation [port-string]
4-14
Port Configuration
set port negotiation
Parameters
portstring (Optional)Displaysautonegotiationstatusforspecificport(s).Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage41.
Defaults
Ifportstringisnotspecified,autonegotiationstatusforallportswillbedisplayed.
Mode
Example
Thisexampleshowshowtodisplayautonegotiationstatusfor1GigabitEthernetport14inslot 3:
D2(su)->show port negotiation ge.3.14 auto-negotiation is enabled on port ge.3.14.
set port negotiation

Usethiscommandtoenableordisableautonegotiationononeormoreports.
Syntax
set port negotiation port-string {enable | disable}
Parameters
portstring Specifiestheport(s)forwhichtoenableordisableautonegotiation.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage41. Enablesordisablesautonegotiation.
enable|disable
Defaults
None.
Mode
Example
Thisexampleshowshowtodisableautonegotiationon1GigabitEthernetport3inslot14:
D2(su)->set port negotiation ge.3.14 disable
show port advertise

Usethiscommandtodisplayportcapabilityandadvertisementasfarasspeedandduplexfor autonegotiation.
Syntax
show port advertise [port-string]
set port advertise
Parameters
portstring (Optional)Displaysadvertisedabilityforspecificport(s).Fora detaileddescriptionofpossibleportstringvalues,refertoPort StringSyntaxUsedintheCLIonpage41.
Defaults
Ifportstringisnotspecified,advertisementforallportswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayadvertisementstatusforGigabitports13and14:
D2(su)->show port advertise ge.1.13-14 ge.1.13 capability advertised remote ------------------------------------------------10BASE-T yes yes yes 10BASE-TFD yes yes yes 100BASE-TX yes yes yes 100BASE-TXFD yes yes yes 1000BASE-T no no no 1000BASE-TFD yes yes yes pause yes yes no ge.1.14 capability advertised remote ------------------------------------------------10BASE-T yes yes yes 10BASE-TFD yes yes yes 100BASE-TX yes yes yes 100BASE-TXFD yes yes yes 1000BASE-T no no no 1000BASE-TFD yes yes yes pause yes yes no
set port advertise

Usethiscommandtoconfigurewhataportwilladvertiseforspeed/duplexcapabilitiesinauto negotiation.
Syntax
set port advertise {port-string}{10t | 10tfd | 100tx | 100txfd | 1000t | 1000tfd | pause}
Parameters
portstring Selecttheportsforwhichtoconfigureadvertisements.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage41. Advertise10BASEThalfduplexmode. Advertise10BASETfullduplexmode. Advertise100BASETXhalfduplexmode.
10t 10tfd 100tx
4-16
Port Configuration
clear port advertise
100txfd
Advertise100BASETXfullduplexmode.RefertoConfiguringSFPPorts for100BASEFXonpage 42formoreinformationonsettingadvertised abilityfor100MbSFPtranceivers. Advertise1000BASEThalfduplexmode. Advertise1000BASETfullduplexmode. AdvertisePAUSEforfullduplexlinks.
1000t 1000tfd pause
Defaults
None.
Mode
Example
Thisexampleshowshowtoconfigureport1toadvertise1000BASETfullduplex:
D2(su)->set port advertise ge.1.1 1000tfd
clear port advertise

Usethiscommandtoconfigureaporttonotadvertiseaspecificspeed/duplexcapabilitywhen autonegotiatingwithanotherport.
Syntax
clear port advertise {port-string}{10t | 10tfd | 100tx | 100txfd | 1000t | 1000tfd | pause}
Parameters
portstring Clearadvertisementsforspecificport(s).Foradetaileddescriptionof possibleportstringvalues,refertoPortStringSyntaxUsedinthe CLIonpage41. Donotadvertise10BASEThalfduplexmode. Donotadvertise10BASETfullduplexmode. Donotadvertise100BASETXhalfduplexmode. Donotadvertise100BASETXfullduplexmode. Donotadvertise1000BASEThalfduplexmode. Donotadvertise1000BASETfullduplexmode. DonotadvertisePAUSEforfullduplexlinks.
10t 10tfd 100tx 100txfd 1000t 1000tfd pause
Defaults
None.
Mode
4-17
Setting Flow Control
Example
Thisexampleshowshowtoconfigureport1tonotadvertise10MBcapabilityforauto negotiation:
D2(su)->clear port advertise ge.1.1 10t 10tfd
Setting Flow Control

Purpose
Toreview,enableordisableportflowcontrol.Flowcontrolisusedtomanagethetransmission betweentwodevicesasspecifiedbyIEEE 802.3xtopreventreceivingportsfrombeing overwhelmedbyframesfromtransmittingdevices.
Commands
For information about... show flowcontrol set flowcontrol Refer to page... 4-18 4-19
show flowcontrol
Usethiscommandtodisplaytheflowcontrolstate.
Syntax
show flowcontrol
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaytheportflowcontrolstate:
D2(su)->show flowcontrol Flow control status: enabled
4-18
Port Configuration
set flowcontrol
set flowcontrol
Usethiscommandtoenableordisableflowcontrol.
Syntax
set flowcontrol {enable | disable}
Parameters
enable|disable Enablesordisablesflowcontrolsettings.
Defaults
None.
Mode
Example
Thisexampleshowshowtoenableflowcontrol:
D2(su)->set flowcontrol enable
Setting Port Link Traps and Link Flap Detection

Purpose
Todisableorreenablelinktraps,displaylinktrapstatus,andtoconfigurethelinkflapping detectionfunction.Bydefault,allportsareenabledtosendSNMPtrapmessagesindicating changestotheirlinkstatus(upordown). Thelinkflapfunctiondetectswhenalinkisgoingupanddownrapidly(alsocalledlink flapping)onaphysicalport,andtakestherequiredactions(disableport,andeventuallysend notificationtrap)tostopsuchacondition.Ifleftunresolved,thelinkflappingconditioncanbe detrimentaltonetworkstabilitybecauseitcantriggerSpanningTreeandroutingtable recalculation.
Commands
For information about... show port trap set port trap show linkflap set linkflap globalstate set linkflap portstate set linkflap interval set linkflap action Refer to page... 4-20 4-20 4-21 4-23 4-24 4-24 4-25
4-19
show port trap
For information about... clear linkflap action set linkflap threshold set linkflap downtime clear linkflap down clear linkflap
Refer to page... 4-25 4-26 4-27 4-27 4-28
show port trap

UsethiscommandtodisplaywhethertheportisenabledforgeneratinganSNMPtrapmessageif itslinkstatechanges.
Syntax
show port trap [port-string]
Parameters
portstring (Optional)Displayslinktrapstatusforspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage41.
Defaults
Ifportstringisnotspecified,thetrapstatusforallportswillbedisplayed.
Mode
Example
Thisexampleshowshowtodisplaylinktrapstatusforge.3.1through4:
D2(su)->show port trap ge.3.1-4 Link traps enabled on port ge.3.1. Link traps enabled on port ge.3.2. Link traps enabled on port ge.3.3. Link traps enabled on port ge.3.4.
set port trap

UsethiscommandtoenableofdisableportsforsendingSNMPtrapmessageswhentheirlink statuschanges.
Syntax
set port trap port-string {enable | disable}
4-20
Port Configuration
show linkflap
Parameters
portstring Specifiestheport(s)forwhichtoenableordisableporttraps.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage41. Enablesordisablessendingtrapmessageswhenlinkstatuschanges.
enable|disable
Defaults
Sendingtrapswhenlinkstatuschangesisenabledbydefault.
Mode
Example
Thefollowingexampledisablessendingtraponge.3.1.
D2(su)->set port trap ge.3.1 disable
show linkflap
Usethiscommandtodisplaylinkflapdetectionstateandconfigurationinformation.
Syntax
show linkflap {globalstate | portstate | parameters | metrics | portsupported | actsupported | maximum | downports | action | operstatus | threshold | interval] | downtime | currentcount | totalcount | timelapsed | violations [port-string]}
Parameters
globalstate portstate parameters metrics portsupported actsupported maximum downports action operstatus threshold interval downtime currentcount Displaystheglobalenablestateoflinkflapdetection. Displaystheportenablestateoflinkflapdetection. Displaysthecurrentvalueofsettablelinkflapdetectionparameters. Displayslinkflapdetectionmetrics. Displaysportswhichcansupportthelinkflapdetectionfunction. Displayslinkflapdetectionactionssupportedbysystemhardware. Displaysthemaximumallowedlinkdownsper10secondssupported bysystemhardware. Displaysportsdisabledbylinkflapdetectionduetoaviolation. Displayslinkflapactionstakenonviolatingport(s). Displayswhetherlinkflaphasdeactivatedport(s). Displaysthenumberofallowedlinkdowntransitionsbeforeactionis taken. Displaysthetimeperiodforcountinglinkdowntransitions. Displayshowlongviolatingport(s)aredeactivated. Displayshowmanylinkdowntransitionsareinthecurrentinterval.
4-21
show linkflap
totalcount timelapsed violations portstring
Displayshowmanylinkdowntransitionshaveoccurredsincethelast reset. Displaysthetimeperiodsincethelastlinkdowneventorreset. Displaysthenumberoflinkflapviolationssincethelastreset. (Optional)Displaysinformationforspecificport(s).
Defaults
Ifnotspecified,informationaboutalllinkflapdetectionsettingswillbedisplayed. Ifportstringisnotspecified,informationforallportswillbedisplayed.
Mode
Switchmode,readonly.
Usage
Thelinkflapdefaultconditionsareshowninthefollowingtable.
Linkflap Parameter Linkflap global state Linkflap port state Linkflap action Linkflap interval Linkflap maximum allowed link downs per 10 seconds Linkflap threshold (number of allowed link down transitions before action is taken) Default Condition Disabled Disabled None 5 20 10
Examples
Thisexampleshowshowtodisplaytheglobalstatusofthelinktrapdetectionfunction:
D2(rw)->show linkflap globalstate Linkflap feature globally disabled
Thisexampleshowshowtodisplayportsdisabledbylinkflapdetectionduetoaviolation:
D2(rw)->show linkflap downports Ports currently held DOWN for Linkflap violations: None.
Thisexampleshowshowtodisplaythelinkflapparameterstable:
D2(rw)->show linkflap parameters Linkflap Port Settable Parameter Table (X Port LF Status Actions Threshold -------- --------- ------- ---------ge.1.1 disabled ....... 10 ge.1.2 enabled D..S..T 3 ge.1.3 disabled ...S..T 10 means error Interval ---------5 5 5 occurred) Downtime ---------300 300 300
Table 413providesanexplanationoftheshowlinkflapparameterscommandoutput.
4-22
Port Configuration
set linkflap globalstate
Table 4-13
Output Field Port LF Status Actions
show linkflap parameters Output Details

What it displays... Port designation. Link flap enabled state. Actions to be taken if the port violates allowed link flap behavior. D = disabled, S = Syslog entry will be generated, T= SNMP trap will be generated.
Threshold Interval Downtime
Number of link down transitions necessary to trigger the link flap action. Time interval (in seconds) for accumulating link down transitions. Interval (in seconds) port(s) will be held down after a link flap violation.
Thisexampleshowshowtodisplaythelinkflapmetricstable:
D2(rw)->show linkflap metrics Port LinkStatus CurrentCount -------- ----------- -----------ge.1.1 operational 0 ge.1.2 disabled 4 ge.1.3 operational 3 TotalCount ---------0 15 3 TimeElapsed Violations ----------- ------------241437 0 147 5 241402 0
Table 414providesanexplanationoftheshowlinkflapmetricscommandoutput. Table 4-14

Output Field Port LinkStatus CurrentCount TotalCount TimeElapsed Violations
show linkflap metrics Output Details

What it displays... Port designation. Link status according to the link flap function. Link down count accruing toward the link flap threshold. Number of link downs since system start, Time (in seconds) since the last link down event. Number of link flap violations on listed ports since system start.
set linkflap globalstate

Usethiscommandtogloballyenableordisablethelinkflapdetectionfunction.
Syntax
set linkflap globalstate {disable | enable}
Parameters
disable|enable Globallydisablesorenablesthelinkflapdetectionfunction.
Defaults
Bydefault,thefunctionisdisabledgloballyandonallports.
4-23
set linkflap portstate
Mode
Usage
Bydefault,thefunctionisdisabledgloballyandonallports.Ifdisabledgloballyafterperport settingshavebeenconfiguredusingthelinkflapcommands,perportsettingswillberetained.
Example
Thisexampleshowshowtogloballyenablethelinktrapdetectionfunction.
D2(rw)->set linkflap globalstate enable
set linkflap portstate

Usethiscommandtoenableordisablelinkflapmonitoringononeormoreports.
Syntax
set linkflap portstate {disable | enable} [port-string]
Parameters
disable|enable portstring Disablesorenablesthelinkflapdetectionfunction. (Optional)Specifiestheportorportsonwhichtodisableorenable monitoring.
Defaults
Ifportstringisnotspecified,allportsareenabledordisabled.
Mode
Example
Thisexampleshowshowtoenablethelinktrapmonitoringonallports.
D2(rw)->set linkflap portstate enable
set linkflap interval

Usethiscommandtosetthetimeinterval(inseconds)foraccumulatinglinkdowntransitions.
Syntax
set linkflap interval port-string interval-value
Parameters
portstring intervalvalue Specifiestheport(s)onwhichtosetthelinkflapinterval. Specifiesanintervalinseconds.Avalueof0willsettheintervalto forever.
4-24
Port Configuration
set linkflap action
Defaults
None.
Mode
Example
Thisexampleshowshowtosetthelinkflapintervalonportge.1.4to1000seconds.
D2(rw)->set linkflap interval ge.1.4 1000
set linkflap action

Usethiscommandtosetreactionstoalinkflapviolation.
Syntax
set linkflap action port-string {disableInterface | gensyslogentry | gentrap | all}
Parameters
portstring disableInterface gensyslogentry gentrap all Specifiestheport(s)onwhichtosetthelinkflapaction. Setsthereactionasdisablingtheinterface. Setsthereactionasgeneratingasyslogentry. SetsthereactionasgeneratinganSNMPtrap. Setsthereactionasalloftheabove.
Defaults
None.
Mode
Example
Thisexampleshowshowtosetthelinkflapviolationactiononportge.1.4togeneratingaSyslog entry.
D2(rw)->set linkflap action ge.1.4 gensyslogentry
clear linkflap action

Usethiscommandtoclearreactionstoalinkflapviolation.
Syntax
clear linkflap action [port-string] {disableInterface | gensyslogentry | gentrap | all}
4-25
set linkflap threshold
Parameters
portstring disableInterface gensyslogentry gentrap all (Optional)Specifiestheport(s)onwhichtoclearthelinkflapaction. Clearsthereactionasdisablingtheinterface. Clearsthereactionasgeneratingasyslogentry. ClearsthereactionasgeneratinganSNMPtrap. Clearsthereactionasalloftheabove.
Defaults
Ifportstringisnotspecified,actionswillbeclearedonallports.
Mode
Example
Thisexampleshowshowtoclearthelinkflapviolationactiononportge.1.4togeneratinga Syslogentry.
D2(rw)->clear linkflap action ge.1.4 gensyslogentry
set linkflap threshold

Usethiscommandtosetthelinkflapactiontriggercount.
Syntax
set linkflap threshold port-string threshold-value
Parameters
portstring thresholdvalue Specifiestheport(s)onwhichtosetthelinkflapactiontriggercount. Specifiesthenumberoflinkdowntransitionsnecessarytotriggerthe linkflapaction.Aminimumof1mustbeconfigured.
Defaults
None.
Mode
Example
Thisexampleshowshowtosetthelinkflapthresholdonportge.1.4to5.
D2(rw)->set linkflap threshold ge.1.4 5
4-26
Port Configuration
set linkflap downtime
set linkflap downtime

Usethiscommandtosetthetimeinterval(inseconds)oneormoreportswillbehelddownaftera linkflapviolation.
Syntax
set linkflap downtime port-string downtime-value
Parameters
portstring downtimevalue Specifiestheport(s)onwhichtosetthelinkflapdowntime. Specifiesadowntimeinseconds.Avalueof0willsetthedowntimeto forever.
Defaults
None.
Mode
Example
Thisexampleshowshowtosetthelinkflapdowntimeonportge.1.4to5000seconds.
D2(rw)->set linkflap downtime ge.1.4 5000
clear linkflap down

Usethiscommandtotogglelinkflapdisabledportstooperational.
Syntax
clear linkflap down [port-string]
Parameters
portstring (Optional)Specifiestheportstomakeoperational.
Defaults
Ifportstringisnotspecified,allportsdisabledbyalinkflapviolationwillbemadeoperational.
Mode
Example
Thisexampleshowshowtomakedisabledportge.1.4operational.
D2(rw)->clear linkflap down ge.1.4
4-27
clear linkflap
clear linkflap
Usethiscommandtoclearalllinkflapoptionsand/orstatisticsononeormoreports.
Syntax
clear linkflap {all | stats [port-string] | parameter port-string {threshold | interval | downtime | all}
Parameters
all|stats parameter Clearsalloptionsandstatistics,orclearsonlystatistics. Clearslinkflapparameters.
threshold|interval| Clearslinkflapthreshold,interval,downtimeorallparameters. downtime|all portstring (Optionalunlessparameterisspecified)Specifiestheport(s)onwhich toclearsettings.
Defaults
Ifportstringisnotspecified,settingsand/orstatisticswillbeclearedonallports.
Mode
Example
Thisexampleshowshowtoclearalllinkflapoptionsonportge.1.4.
D2(rw)->clear linkflap all ge.1.4
Configuring Broadcast Suppression

Purpose
Toreviewandsetthebroadcastsuppressionthresholdforoneormoreports.Thisfeaturelimits thenumberofreceivedbroadcastframestheswitchwillacceptperport.Broadcastsuppression thresholdsapplyonlytobroadcasttrafficmulticasttrafficisnotaffected.Bydefault,abroadcast suppressionthresholdof14881packetspersecond(pps)willbeused,regardlessofactualport speed.BroadcastsuppressionprotectsagainstbroadcaststormsandARPsweeps.
Commands
For information about... show port broadcast set port broadcast clear port broadcast Refer to page... 4-29 4-29 4-30
4-28
Port Configuration
show port broadcast
show port broadcast

Usethiscommandtodisplayportbroadcastsuppressionthresholds.
Syntax
show port broadcast [port-string]
Parameters
portstring (Optional)Selecttheportsforwhichtoshowbroadcastsuppression thresholds.Foradetaileddescriptionofpossibleportstringvalues,refer toPortStringSyntaxUsedintheCLIonpage41.
Defaults
Ifportstringisnotspecified,broadcaststatusofallportswillbedisplayed.
Mode
Example
Thisexampleshowshowtodisplaythebroadcastsuppressionthresholdsforports1through4:
D2(su)->show port broadcast ge.1.1-4 Port Total BC Threshold Packets (pkts/s) ---------------------------------------ge.1.1 0 50 ge.1.2 0 50 ge.1.3 0 40 ge.1.4 0 14881
set port broadcast

Usethiscommandtosetthebroadcastsuppressionthreshold,inpacketspersecond,ononeor moreports.Thissetsathresholdonthebroadcasttrafficthatisreceivedandswitchedouttoother ports.
Syntax
set port broadcast port-string threshold-val
Parameters
portstring Selecttheportsforwhichtoconfigurebroadcastsuppressionthresholds. Foradetaileddescriptionofpossibleportstringvalues,refertoPort StringSyntaxUsedintheCLIonpage41. Setsthepacketspersecondthresholdonbroadcasttraffic.Maximum valueis 148810forFastEthernetports 1488100for1Gigabitports. 14881000for10Gigabitports
thresholdval
4-29
clear port broadcast
Defaults
None.
Mode
Usage
PerportbroadcastsuppressionishardsettobegloballyenabledontheD2.Ifyouwouldliketo disablebroadcastsuppression,youcangetthesameresultbysettingthethresholdlimitforeach porttothemaximumnumberofpacketswhichcanbereceivedpersecondaslistedinthe parameterssection,above.Thedefaultbroadcastsuppressionthresholdforallportsissetto 14881.
Example
Thisexampleconfiguresports1through5withabroadcastlimitof50pps:
D2(su)->set port broadcast ge.1.1-5 50
clear port broadcast

Usethiscommandtoclearthebroadcastthresholdlimittothedefaultvalueof14881forthe selectedport.
Syntax
clear port broadcast port-string threshold
Parameters
portstring Selecttheportsforwhichtoclearbroadcastsuppressionthresholds.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage41.
Defaults
None.
Mode
Example
Thisexampleclearsthebroadcastthresholdlimitto14881ppsforports1through5:
D2(su)->clear port broadcast ge.1.1-5 threshold
4-30
Port Configuration
Port Mirroring
Port Mirroring
Caution: Port mirroring configuration should be performed only by personnel who are knowledgeable about the effects of port mirroring and its impact on network operation.
TheDSeriesdeviceallowsyoutomirror(orredirect)thetrafficbeingswitchedonaportforthe purposesofnetworktrafficanalysisandconnectionassurance.Whenportmirroringisenabled, oneportbecomesamonitorportforanotherportwithinthedevice.
Mirroring Features
TheDSeriesdevicesupportsthefollowingmirroringfeatures: Mirroringcanbeconfiguredinamanytooneconfigurationsothatonetarget(destination) portcanmonitortrafficonupto8sourceports. Bothtransmitandreceivetrafficwillbemirrored. Adestinationportwillonlyactasamirroringportwhenthesessionisoperationallyactive. Whenaportmirroriscreated,themirrordestinationportisremovedfromtheegresslistof VLAN1afterareboot. MACaddresseswillbelearnedforpacketstaggedwiththemirrorVLANID.Thiswill preventtheabilitytosnooptrafficacrossmultiplehops.
Caution: Traffic mirrored to a VLAN may contain control traffic. This may be interpreted by the downstream neighbor as legal control frames. It is recommended that you disable any protocols (such as Spanning Tree) on inter-switch connections that might be affected .
Purpose
Toreviewandconfigureportmirroringonthedevice.
Commands
For information about... show port mirroring set port mirroring clear port mirroring Refer to page... 4-31 4-32 4-33
show port mirroring

Usethiscommandtodisplaythesourceandtargetportsformirroring,andwhethermirroringis currentlyenabledordisabledforthoseports.
Syntax
show port mirroring
Parameters
None.
4-31
set port mirroring
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplayportmirroringinformation.Inthiscase,ge.1.4isconfigured asasourceportandge.1.11isatargetandmirroringhasbeenenabledbetweentheseports:
D2(su)->show port mirroring Port Mirroring ============== Source Port = ge.1.4 Target Port = ge.1.11 Frames Mirrored = Rx and Tx Port Mirroring status enabled.
set port mirroring

Usethiscommandtocreateanewmirroringrelationshiportoenableordisableanexisting mirroringrelationshipbetweentwoports.
Notes: When a port mirror is created, the mirror destination port is removed from VLAN 1s egress list after a reboot. "MAC addresses will be learned for packets tagged with the mirror VLAN ID. This will prevent the ability to snoop traffic across multiple hops.
Syntax
set port mirroring {create | disable | enable} source destination}
Parameters
create|disable| enable source Creates,disablesorenablesmirroringsettingsonthespecifiedports. Specifiesthesourceportdesignation.Thisistheportonwhichthetraffic willbemonitored.Foradetaileddescriptionofpossibleportstringvalues, refertoPortStringSyntaxUsedintheCLIonpage41. Specifiesthetargetportdesignation.Thisistheportthatwillduplicateor mirrorallthetrafficonthemonitoredport. Foradetaileddescriptionofpossibleportstringvalues,refertoPort StringSyntaxUsedintheCLIonpage41.
destination
Defaults
None.
Mode
4-32
Port Configuration
clear port mirroring
Usage
NotethatLAGportsandtheirunderlyingphysicalports,asdescribedinLinkAggregation ControlProtocol(LACP)onpage433,cannotbemirrored.
Example
Thisexampleshowshowtocreateandenableportmirroringwithge.1.4asthesourceport,and ge.1.11asthetargetport:
D2(su)->set port mirroring create ge.1.4 ge.1.11 D2(su)->set port mirroring enable ge.1.4 ge.1.11
clear port mirroring

Usethiscommandtoclearaportmirroringrelationship.
Syntax
clear port mirroring source destination
Parameters
source Specifiesthesourceportofthemirroringconfigurationtobecleared.For adetaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage41. Specifiesthetargetportofthemirroringconfigurationtobecleared.
destination
Defaults
None.
Mode
Example
Thisexampleshowshowtoclearportmirroringbetweensourceportge.1.4andtargetport ge.1.11:
D2(su)->clear port mirroring ge.1.4 ge.1.11
Link Aggregation Control Protocol (LACP)

Caution: Link aggregation configuration should only be performed by personnel who are knowledgeable about Spanning Tree and Link Aggregation, and fully understand the ramifications of modifications beyond device defaults. Otherwise, the proper operation of the network could be at risk.
Usingmultiplelinkssimultaneouslytoincreasebandwidthisadesirableswitchfeature,which canbeaccomplishedifbothsidesagreeonasetofportsthatarebeingusedasaLinkAggregation Group(LAG).OnceaLAGisformedfromselectedports,problemswithloopingcanbeavoided sincetheSpanningTreecantreatthisLAGasasingleport. Enabledbydefault,theLinkAggregationControlProtocol(LACP)logicallygroupsinterfaces togethertocreateagreaterbandwidthuplink,orlinkaggregation,accordingtotheIEEE802.3ad
4-33
standard.ThisstandardallowstheswitchtodeterminewhichportsareinLAGsandconfigure themdynamically.SincetheprotocolisbasedontheIEEE802.3adspecification,anyswitchfrom anyvendorthatsupportsthisstandardcanaggregatelinksautomatically. 802.3adLACPaggregationscanalsoberuntoendusers(thatis,aserver)ortoarouter.

Note: Earlier (proprietary) implementations of port aggregation referred to groups of aggregated ports as trunks.
LACP Operation
Foreachaggregatableportinthedevice,LACP: Maintainsconfigurationinformation(reflectingtheinherentpropertiesoftheindividuallinks aswellasthoseestablishedbymanagement)tocontrolaggregation. ExchangesconfigurationinformationwithotherdevicestoallocatethelinktoaLink AggregationGroup(LAG).
Note: A given link is allocated to, at most, one Link Aggregation Group (LAG) at a time. The allocation mechanism attempts to maximize aggregation, subject to management controls.
AttachestheporttotheaggregatorusedbytheLAG,anddetachestheportfromthe aggregatorwhenitisnolongerusedbytheLAG. Usesinformationfromthepartnerdeviceslinkaggregationcontrolentitytodecidewhether toaggregateports.
TheoperationofLACPinvolvesthefollowingactivities: Checkingthatcandidatelinkscanactuallybeaggregated. ControllingtheadditionofalinktoaLAG,andthecreationofthegroupifnecessary. Monitoringthestatusofaggregatedlinkstoensurethattheaggregationisstillvalid. RemovingalinkfromaLAGifitsmembershipisnolongervalid,andremovingthegroupifit nolongerhasanymemberlinks.
InordertoallowLACPtodeterminewhetherasetoflinksconnecttothesamedevice,andto determinewhetherthoselinksarecompatiblefromthepointofviewofaggregation,itis necessarytobeabletoestablish Agloballyuniqueidentifierforeachdevicethatparticipatesinlinkaggregation. Ameansofidentifyingthesetofcapabilitiesassociatedwitheachportandwitheach aggregator,asunderstoodbyagivendevice. AmeansofidentifyingaLAGanditsassociatedaggregator.

Note: The path cost of a LAG port will be displayed as zero when it is not an active link.
LACP Terminology
Table 415defineskeyterminologyusedinLACPconfiguration.
4-34
Port Configuration
Table 4-15
Term Aggregator
LACP Terms and Definitions

Definition Virtual port that controls link aggregation for underlying physical ports. Each D-Series module provides 6 aggregator ports, which are designated in the CLI as lag.0.1 through lag.0.6. Link Aggregation Group. Once underlying physical ports (for example, ge.x.x) are associated with an aggregator port, the resulting aggregation will be represented as one LAG with a lag.x.x port designation. D-Series LAGs can have up to associated physical ports.
LAG
LACPDU
Link Aggregation Control Protocol Data Unit. The protocol exchanges aggregation state/mode information by way of a ports actor and partner operational states. LACPDUs sent by the first party (the actor) convey to the second party (the actors protocol partner) what the actor knows, both about its own state and that of its partner. An actor is the local device sending LACPDUs. Its protocol partner is the device on the other end of the link aggregation. Each maintains current status of the other via LACPDUs containing information about their ports LACP status and operational state. Value assigned to aggregator ports and physical ports that are candidates for joining a LAG. The LACP implementation on D-Series devices will use this value to form an oper key and will determine which underlying physical ports are capable of aggregating by comparing oper keys. Aggregator ports allow only underlying ports with oper keys matching theirs to join their LAG. On DSeries devices, the default admin key value is 32768. Value used to build a LAG ID, which determines aggregation precedence. If there are two partner devices competing for the same aggregator, LACP compares the LAG IDs for each grouping of ports. The LAG with the lower LAG ID is given precedence and will be allowed to use the aggregator. Note: Only one LACP system priority can be set on a D-Series device, using either the set lacp asyspri command (page 4-38), or the set port lacp command (page 4-44).
Actor and Partner
Admin Key
System Priority
D-Series Usage Considerations

Innormalusage(andtypicalimplementations)thereisnoneedtomodifyanyofthedefault LACPparametersontheswitch.Thedefaultvalueswillresultinthemaximumnumberof aggregationspossible.Iftheswitchisplacedinaconfigurationwithitspeersnotrunningthe protocol,nodynamiclinkaggregationswillbeformedandtheswitchwillfunctionnormally(that is,willblockredundantpaths).Forinformationaboutbuildingstaticaggregations,refertoset lacpstatic(page 440). EachDSeriesmoduleprovidessixvirtuallinkaggregatorports,whicharedesignatedintheCLI aslag.0.1throughlag.0.6.EachLAGcanhaveuptoassociatedphysicalports.Onceunderlying physicalports(forexample,ge.x.x,orge.x.x)areassociatedwithanaggregatorport,theresulting aggregationwillberepresentedasoneLAGwithalag.x.xportdesignation.LACPdetermines whichunderlyingphysicalportsarecapableofaggregatingbycomparingoperationalkeys. AggregatorportsallowonlyunderlyingportswithkeysmatchingtheirstojointheirLAG. LACPusesasystempriorityvaluetobuildaLAGID,whichdeterminesaggregationprecedence. Iftherearetwopartnerdevicescompetingforthesameaggregator,LACPcomparestheLAGIDs foreachgroupingofports.TheLAGwiththelowerLAGIDisgivenprecedenceandwillbe allowedtousetheaggregator.
4-35
show lacp
Thereareafewcasesinwhichportswillnotaggregate: Anunderlyingphysicalportisattachedtoanotherportonthissameswitch(loopback). ThereisnoavailableaggregatorfortwoormoreportswiththesameLAGID.Thiscan happeniftherearesimplynoavailableaggregators,orifnoneoftheaggregatorshavea matchingadminkeyandsystempriority. 802.1xauthenticationisenabledusingtheseteapolcommand(page 1517)andportsthat wouldotherwiseaggregatearenot802.1Xauthorized.
TheLACPimplementationontheDSeriesdevicewillallowuptophysicalportsintoaLAG.The devicewiththelowestLAGIDdetermineswhichunderlyingphysicalportsareallowedintoa LAGbasedontheportsLAGportpriority.PortswiththelowestLAGportpriorityvaluesare allowedintotheLAGandallotherspeedgroupingsgointoastandbystate. WhenanexistingdynamicallycreatedLAGisreducedtooneport,theDSeriesremovestheLAG fromitsVLANandaddstheremainingunderlyingporttotheVLAN.Forthisreason,youshould ensurethattheLAGandalltheportsintheLAGareassignedtotheegresslistofthedesired VLAN.Otherwise,whentheLAGisremoved,theremainingportmaybeassignedtothewrong VLAN.Theotheroptionistoenablethesingleportlagfeatureasdescribedinsetlacp singleportlagonpage441.
Note: To aggregate, underlying physical ports must be running in full duplex mode and must be of the same operating speed.
Commands
For information about... show lacp set lacp set lacp asyspri set lacp aadminkey clear lacp set lacp static clear lacp static set lacp singleportlag clear lacp singleportlag show port lacp set port lacp clear port lacp Refer to page... 4-36 4-38 4-38 4-39 4-39 4-40 4-41 4-41 4-41 4-42 4-44 4-45
show lacp
Usethiscommandtodisplayinformationaboutoneormoreaggregatorports.
Syntax
show lacp [port-string]
4-36
Port Configuration
show lacp
Parameters
portstring (Optional)DisplaysLACPinformationforspecificLAGport(s).Valid portdesignationsarelag.0.16.
Defaults
Ifportstringisnotspecified,linkaggregationinformationforallLAGswillbedisplayed.
Mode
Usage
EachDSeriesmoduleprovides6virtuallinkaggregatorports,whicharedesignatedintheCLIas lag.0.1throughlag.0.6.Onceunderlyingphysicalports(thatis,ge.x.x)areassociatedwithan aggregatorport,theresultingaggregationwillberepresentedasoneLinkAggregationGroup (LAG)withalag.x.xportdesignation.
Example
Thisexampleshowshowtodisplaylacpinformationforlag.0.1.Thefollowingtabledescribesthe outputfields.
D2(su)->show lacp lag.0.1 Global Link Aggregation state: enabled Single Port LAGs: disabled Aggregator: lag.0.1 System Identifier: System Priority: Admin Key: Oper Key: Attached Ports: Actor 00:01:F4:5F:1E:20 32768 32768 32768 ge.1.1 ge.1.3 Partner 00:11:88:11:74:F9 32768 0

Output Field Global Link Aggregation state Single Port LAGs Aggregator
show lacp Output Details

What It Displays... Shows if LACP is enabled or disabled on the switch. Displays if the single port LAG feature has been enabled on the switch. See set lacp singleportlag on page 4-41 for more about single port LAG. LAG port designation. Each D-Series module provides 6 virtual link aggregator ports, which are designated in the CLI as lag.0.1 through lag.0.6. Once underlying physical ports (for example, ge.x.x) are associated with an aggregator port, the resulting Link Aggregation Group (LAG) is represented with a lag.x.x port designation. Local device participating in LACP negotiation. Remote device participating in LACP negotiation. MAC addresses for actor and partner. System priority value which determines aggregation precedence. Only one LACP system priority can be set on a D-Series device, using either the set lacp asyspri command (page 4-38), or the set port lacp command (page 4-44).
Actor Partner System Identifier System Priority
4-37
set lacp
Table 4-16
Output Field Admin Key Oper Key
show lacp Output Details (Continued)

What It Displays... Ports assigned key. D-Series devices provide a default admin key value of 32768 for all LAG ports (lag.0.1 though lag.0.6). Ports operational key, derived from the admin key. Only underlying physical ports with oper keys matching the aggregators will be allowed to aggregate. Underlying physical ports associated with this aggregator.
Attached Ports
set lacp
UsethiscommandtodisableorenabletheLinkAggregationControlProtocol(LACP)onthe device.
Syntax
set lacp {disable | enable}
Parameters
disable|enable DisablesorenablesLACP.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisableLACP:
D2(su)->set lacp disable
set lacp asyspri

UsethiscommandtosettheLACPsystempriority.
Syntax
set lacp asyspri value
Parameters
asyspri value SetsthesystemprioritytobeusedincreatingaLAG(LinkAggregation Group)ID.Validvaluesare0to65535. Specifiesasystempriorityvalue.Validvaluesare0to65535,with precedencegiventolowervalues.
Defaults
None.
4-38
Port Configuration
set lacp aadminkey
Mode
Usage
LACPusesthisvaluetodetermineaggregationprecedence.Iftherearetwopartnerdevices competingforthesameaggregator,LACPcomparestheLAGIDsforeachgroupingofports.The LAGwiththelowerLAGIDisgivenprecedenceandwillbeallowedtousetheaggregator.
Example
ThisexampleshowshowtosettheLACPsystempriorityto1000:
D2(su)->set lacp asyspri 1000
set lacp aadminkey

Usethiscommandtosettheadministrativelyassignedkeyforoneormoreaggregatorports.
Syntax
set lacp aadminkey port-string value
Parameters
portstring value SpecifiestheLAGport(s)onwhichtoassignanadminkey. Specifiesanadminkeyvaluetoset.Validvaluesare0to65535.The defaultadminkeyvalueis32768.
Defaults
None.
Mode
Usage
LACPwillusethisvaluetoformanoperkey.Onlyunderlyingphysicalportswithoperkeys matchingthoseoftheiraggregatorswillbeallowedtoaggregate.Thedefaultadminkeyvaluefor allLAGportsis32768.
Example
ThisexampleshowshowtosettheLACPadminkeyto2000forLAGport6:
D2(su)->set lacp aadminkey lag.0.6 2000
clear lacp
UsethiscommandtoclearLACPsystempriorityoradminkeysettings.
Syntax
clear lacp {[asyspri] [aadminkey port-string]}
4-39
set lacp static
Parameters
asyspri aadminkeyportstring Clearssystempriority. Resetsadminkeysforoneormoreportstothedefaultvalueof32768.
Defaults
None.
Mode
Example
ThisexampleshowshowtocleartheactoradminkeyforLAGport6:
D2(su)->clear lacp aadminkey lag.0.6
set lacp static

Usethiscommandtodisableorenablestaticlinkaggregation,ortoassignoneormoreunderlying physicalportstoaLinkAggregationGroup(LAG).
Syntax
set lacp static {disable | enable} | lagportstring [key] port-string
Parameters
disable|enable lagportstring key Disablesorenablesstaticlinkaggregation. SpecifiestheLAGaggregatorporttowhichnewportswillbeassigned. (Optional)SpecifiesthenewmemberportandLAGportaggregator adminkeyvalue.Onlyportswithmatchingkeysareallowedto aggregate.Validvaluesare065535.
Note: This key value must be unique. If ports other than the desired underlying physical ports share the same admin key value, aggregation will fail or undesired aggregations will form.
portstring
Specifiesthememberport(s)toaddtotheLAG.Foradetaileddescription ofpossibleportstringvalues,refertoPortStringSyntaxUsedintheCLI onpage41.
Defaults
Ifnotspecified,akeywillbeassignedaccordingtothespecifiedaggregator.Forexampleakeyof 4wouldbeassignedtolag.0.4.
Mode
Example
Thisexampleshowshowtoaddportge.1.6totheLAGofaggregatorport6:
D2(su)->set lacp static lag.0.6 ge.1.6
4-40
Port Configuration
clear lacp static
clear lacp static

UsethiscommandtoremovespecificportsfromaLinkAggregationGroup.
Syntax
clear lacp static lagportstring port-string
Parameters
lagportstring portstring SpecifiestheLAGaggregatorportfromwhichportswillberemoved. Specifiestheport(s)toremovefromtheLAG.Foradetaileddescriptionof possibleportstringvalues,refertoPortStringSyntaxUsedintheCLI onpage41.
Defaults
None.
Mode
Example
Thisexampleshowshowtoremovege.1.6fromtheLAGofaggregatorport6:
D2(su)->clear lacp static lag.0.6 ge.1.6
set lacp singleportlag

UsethiscommandtoenableordisabletheformationofsingleportLAGs.
Syntax
set lacp singleportlag {enable | disable}
Parameters
disable|enable EnablesordisablestheformationofsingleportLAGs.
Defaults
None.
Mode
Usage
WhensingleportLAGsareenabled,LinkAggregrationGroupscanbeformedwhenonlyone portisreceivingprotocoltransmissionsfromapartner.Whenthissettingisdisabled,twoormore portsarerequiredtoformaLAG. ThissettinghasnoeffectonexistingLAGscreatedwithmultiplememberports.Italsodoesnot preventpreviouslyformedLAGsfromcomingupaftertheyhavegonedown,aslongasany
4-41
clear lacp singleportlag
previousLAGmemberportscomesupconnectedtothesameswitchasbeforetheLAGwent down.
Example
ThisexampleenablestheformationofsingleportLAGs:
D2(su)->set lacp singleportlag enable

UsethiscommandtoresetthesingleportLAGfunctionbacktothedefaultstateofdisabled.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresetthesingleportLAGfunctionbacktodisabled:
D2(su)->clear lacp singleportlag
show port lacp

Usethiscommandtodisplaylinkaggregationinformationforoneormoreunderlyingphysical ports.
Syntax
show port lacp port port-string {[status {detail | summary}] | [counters]}
Parameters
portportstring DisplaysLACPinformationforspecificport(s).Foradetaileddescription ofpossibleportstringvalues,refertoPortStringSyntaxUsedintheCLI onpage41. DisplaysLACPstatusindetailedorsummaryinformation. DisplaysLACPcounterinformation.
statusdetail| summary counters
Defaults
None.
4-42
Port Configuration
show port lacp
Mode
Usage
Statedefinitions,suchasActorAdminStateandPartnerAdminState,areindicatedwithletter abbreviations.Iftheshowportlacpcommanddisplaysoneormoreofthefollowingletters,it meansthestateistruefortheassociatedactororpartnerports: E=Expired F=Defaulted D=Distributing(txenabled) C=Collecting(rxenabled) S=Synchronized(actorandpartneragree) G=Aggregationallowed S/l=Short/LongLACPtimeout A/p=Active/PassiveLACP
Formoreinformationaboutthesestates,refertosetportlacp(page 444)andtheIEEE802.32002 specification.
Examples
ThisexampleshowshowtodisplaydetailedLACPstatusinformationforportge.1.12:
D2(su)-> show port lacp port ge.1.12 status detail Port Instance: ge.1.12 ActorPort: 1411 PartnerAdminPort: 1411 ActorSystemPriority: 32768 PartnerOperPort: 1411 ActorPortPriority: 32768 PartnerAdminSystemPriority: 32768 ActorAdminKey: 32768 PartnerOperSystemPriority: 32768 ActorOperKey: 32768 PartnerAdminPortPriority: 32768 ActorAdminState: -----GlA PartnerOperPortPriority: 32768 ActorOperState: -F----lA PartnerAdminKey: 1411 ActorSystemID: 00-e0-63-9d-b5-87 PartnerOperKey: 1411 SelectedAggID: none PartnerAdminState: --DCSGlp AttachedAggID: none PartnerOperState: --DC-Glp MuxState: Detached PartnerAdminSystemID: 00-00-00-00-00-00 DebugRxState: port Disabled PartnerOperSystemID: 00-00-00-00-00-00
ThisexampleshowshowtodisplaysummarizedLACPstatusinformationforportge.1.12:
D2(su)->show port lacp port ge.1.12 status summary Port Aggr Actor System Partner System Pri: System ID: Key: Pri: System ID: Key: ge.1.12 none [(32768,00e0639db587,32768),(32768,000000000000, 1411)]
ThisexampleshowshowtodisplayLACPcountersforportge.1.12:
D2(su)->show port lacp port ge.1.12 counters Port Instance: ge.1.12 LACPDUsRx: 11067 LACPDUsTx: 0 IllegalRx: 0 UnknownRx: 0 MarkerPDUsRx: 0 MarkerPDUsTx: 0 MarkerResponsePDUsRx: 0 MarkerResponsePDUsTx: 374
set port lacp
set port lacp

Usethiscommandtosetlinkaggregationparametersforoneormoreports.Thesesettingswill determinethespecifiedunderlyingphysicalportsabilitytojoinaLAG,andtheiradministrative stateonceaggregated.
Syntax
set port lacp port port-string {[aadminkey aadminkey] [aadminstate {lacpactive | lacptimeout | lacpagg | lacpsync | lacpcollect | lacpdist | lacpdef | lacpexpire}] [aportpri aportpri] [asyspri asyspri] [enable | [disable] [padminkey padminkey] [padminport padminport] [padminportpri padminportpri] [padminstate {lacpactive | lacptimeout | lacpagg | lacpsync | lacpcollect | lacpdist | lacpdef | lacpexpire}] [padminsysid padminsysid] [padminsyspri padminsyspri]
Parameters
portportstring Specifiesthephysicalport(s)onwhichtoconfigureLACP.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage41. Setstheportsactoradminkey.LACPwillusethisvaluetoformanoper keyandwilldeterminewhichunderlyingphysicalportsarecapableof aggregatingbycomparingoperkeys.Aggregatorportsallowonly underlyingportswithoperkeysmatchingtheirstojointheirLAG.Valid valuesare165535.Thedefaultkeyvalueis32768. SetstheportsactorLACPadministrativestatetoallowfor: lacpactiveTransmittingLACPPDUs. lacptimeoutTransmittingLACPPDUsevery1sec.vs30sec.(default). lacpaggAggregationonthisport. lacpsyncTransitiontosynchronizationstate. lacpcollectTransitiontocollectionstate. lacpdistTransitiontodistributionstate. lacpdefTransitiontodefaultedstate. lacpexpireTransitiontoexpiredstate. aportpriaportpri asyspriasyspri Setstheportsactorportpriority.Validvaluesare065535,withlower valuesdesignatinghigherpriority. Setstheportsactorsystempriority.TheLACPimplementationontheD Seriesdeviceusesthisvaluetodetermineaggregationprecedencewhen therearetwodevicescompetingforthesameaggregator.Validvaluesare 065535,withhigherprecedencegiventolowervalues.
Note: Only one LACP system priority can be set on a D-Series device, using either this command, or the set lacp asyspri command (set lacp asyspri on page 4-38).
aadminkey aadminkey
aadminstate lacpactive| lacptimeout| lacpagg|lacpsync |lacpcollect| lacpdist|lacpdef| lacpexpire
enable disable padminkey padminkey
(Optional)EnablesLACPDUprocessingonthisport. (Optional)DisablesLACPDUprocessingonthisport. Setsadefaultvaluetouseastheportspartneradminkey.Onlyports withmatchingadminkeysareallowedtoaggregate.Validvaluesare1 65535.
4-44
Port Configuration
clear port lacp
padminport padminport padminportpri padminportpri
Setsadefaultvaluetouseastheportspartneradminvalue.Validvalues are165535. Setsadefaultvaluetouseastheportspartnerportpriority.Validvalues are065535,withlowervaluesgivenhigherpriority.
SetsaportspartnerLACPadministrativestate.Seeaadminstateforvalid padminstate options. lacpactive| lacptimeout| lacpagg|lacpsync |lacpcollect| lacpdist|lacpdef| lacpexpire padminsysid padminsysid padminsyspri padminsyspri SetsadefaultvaluetouseastheportspartnersystemID.ThisisaMAC address. Setsadefaultvaluetouseastheportspartnerpriority.Validvaluesare0 65535,withlowervaluesgivenhigherpriority.
Defaults
Atleastoneparametermustbeenteredperportstring. Ifenableordisablearenotspecified,port(s)willbeenabledwiththeLACPparametersentered.
Mode
Usage
LACPcommandsandparametersbeginningwithana(suchasaadminkey)setactorvalues. Correspondingcommandsandparametersbeginningwithap(suchaspadminkey)set correspondingpartnervalues.ActorreferstothelocaldeviceparticipatinginLACPnegotiation, whilepartnerreferstoitsremotedevicepartnerattheotherendofthenegotiation.Actorsand partnersmaintaincurrentstatusoftheotherviaLACPDUscontaininginformationabouttheir portsLACPstatusandoperationalstate.
Example
Thisexampleshowshowtosettheactoradminkeyto3555forportge.3.16:
D2(su)->set port lacp ge.3.16 aadminkey 3555
clear port lacp

Usethiscommandtoclearlinkaggregationsettingsforoneormoreports.
Syntax
clear port lacp port port-string {[aadminkey] [aportpri] [asyspri] [aadminstate {lacpactive | lacptimeout | lacpagg | lacpsync | lacpcollect | lacpdist | lacpdef | lacpexpire | all}] [padminsyspri] [padminsysid] [padminkey] [padminportpri] [padminport] [padminstate {lacpactive | lacptimeout | lacpagg | lacpsync | lacpcollect | lacpdist | lacpdef | lacpexpire | all}]}
4-45
clear port lacp
Parameters
portportstring Specifiesthephysicalport(s)onwhichLACPsettingswillbecleared.For adetaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage41. Clearsaportsactoradminkey. Clearsaportsactorportpriority. Clearstheportsactorsystempriority.
aadminkey aportpri asyspri
aadminstate Clearsaportsspecificactoradminstate,orallactoradminstate(s).For lacpactive| descriptionsofspecificstates,refertothesetportlacpcommand(set lacptimeout| portlacponpage444). lacpagg|lacpsync |lacpcollect| lacpdist|lacpdef| lacpexpire|all padminsyspri padminsysid padminkey padminportpri padminport Clearstheportsdefaultpartnerpriorityvalue. ClearstheportsdefaultpartnersystemID. Clearstheportsdefaultpartneradminkey. Clearstheportsdefaultpartnerportpriority. DeletesapartnerportfromtheLACPconfiguration.
Clearstheportsspecificpartneradminstate,orallpartneradminstate(s). padminstate lacpactive| lacptimeout| lacpagg|lacpsync |lacpcollect| lacpdist|lacpdef| lacpexpire|all
Defaults
None.
Mode
Usage
IfyousetaporttoLACPpassiveusingthecommandclearportlacpport<portstring> aadminstatelacpactive,thecommandclearportlacpport<portstring>aadminstatelacptimeout willalsobeaddedtotheconfiguration.Ifyouunsetthefirstcommand,itwillremovethesecond commandautomaticallyfromtheconfigurationfile.
Example
Thisexampleshowshowtoclearalllinkaggregationparametersforportge.3.16:
D2(su)->clear port lacp port ge.3.16
4-46
Port Configuration
Configuring Protected Ports
Configuring Protected Ports

TheProtectedPortfeatureisusedtopreventportsfromforwardingtraffictoeachother,even whentheyareonthesameVLAN.Portsmaybedesignatedaseitherprotectedorunprotected. Portsareunprotectedbydefault.Multiplegroupsofprotectedportsaresupported.
Protected Port Operation

Portsthatareconfiguredtobeprotectedcannotforwardtraffictootherprotectedportsinthe samegroup,regardlessofhavingthesameVLANmembership.However,protectedportscan forwardtraffictoportswhichareunprotected(notlistedinanygroup).Protectedportscanalso forwardtraffictoprotectedportsinadifferentgroup,iftheyareinthesameVLAN.Unprotected portscanforwardtraffictobothprotectedandunprotectedports.Aportmaybelongtoonlyone groupofprotectedports. Thisfeatureonlyappliestoportswithinaswitch.Itdoesnotapplyacrossmultipleswitchesina network.
Commands
For information about... set port protected show port protected clear port protected set port protected name show port protected name clear port protected name Refer to page... 4-47 4-48 4-48 4-49 4-49 4-50
set port protected

Usethiscommandtospecifyaporttobeprotectedandassigntheporttoagroupofprotected ports.Aportcanbeassignedtoonlyonegroup.
Syntax
set port protected port-string group-id
Parameters
portstring groupid Specifiestheportorportstobeprotected. Specifiestheidofthegrouptowhichtheportsshouldbeassigned.Idcan rangefrom0to2.
Defaults
None.
Mode
4-47
show port protected
Example
Thisexampleshowshowtoassignportsge.1.1throughge.1.3toprotectedportgroup1:
D2(rw)->set port protected ge.1.1-3 1
show port protected

Usethiscommandtodisplayinformationabouttheportsconfiguredforprotectedmode.
Syntax
show port protected [port-string] | [group-id]
Parameters
portstring groupid (Optional)Specifiestheportorportsforwhichtodisplayinformation. (Optional)Specifiestheidofthegroupforwhichtodisplayinformation. Idcanrangefrom0to2.
Defaults
Ifnoparametersareentered,informationaboutallprotectedportsisdisplayed.
Mode
Readonly.
Example
Thisexampleshowshowtodisplayinformationaboutallprotectedports:
D2(ro)->show port protected Group id Port ---------------------1 ge.1.1 1 ge.1.2 1 ge.1.3
clear port protected

Usethiscommandtoremoveaportorgroupfromprotectedmode.
Syntax
clear port protected [port-string] | [group-id]
Parameters
portstring groupid (Optional)Specifiestheportorportstoremovefromprotectedmode. (Optional)Specifiestheidofthegrouptoremovefromprotectedmode. Idcanrangefrom0to2.
Defaults
Ifnoparametersareentered,allprotectedportsandgroupsarecleared.
4-48
Port Configuration
set port protected name
Mode
Example
Thisexampleshowshowtoclearprotectedportsge.1.1throughge.1.3:
D2(rw)->clear port protected ge.1.1-3
set port protected name

Usethiscommandtoassignanametoaprotectedportgroupid.
Syntax
set port protected name group-id name
Parameters
groupid name Specifiestheidofthisgroup.Idcanrangefrom0to2. Specifiesanameforthegroup.Thenamecanbeupto32charactersin length.
Defaults
None.
Mode
Example
Thisexampleshowshowtoassignthenamegroup1toprotectedportgroup1:
D2(rw)->set port protected name 1 group1
show port protected name

Usethiscommandtodisplaythenameforthegroupidsspecified.
Syntax
show port protected name group-id
Parameters
groupid Specifiestheidofthegrouptodisplay.Idcanrangefrom0to2.
Defaults
None.
Mode
Readonly.
clear port protected name
Example
Thisexampleshowshowtoshowthenameofprotectedportgroup1:
D2(ro)->show port protected name 1 Group ID Group Name ----------------------------1 group1
clear port protected name

Usethiscommandtoclearthenameofaprotectedgroup.
Syntax
clear port protected name group-id
Parameters
groupid Specifiestheidofthegroupforwhichtoclearthename.Idcanrange from0to2.
Defaults
None.
Mode
Example
Thisexampleshowshowtoclearthenameofprotectedportgroup1:
D2(rw)->clear port protected name 1
4-50
Port Configuration
5
SNMP Configuration
ThischapterdescribestheSimpleNetworkManagementProtocol(SNMP)setofcommandsand howtousethem.
For information about... SNMP Configuration Summary Reviewing SNMP Statistics Configuring SNMP Users, Groups, and Communities Configuring SNMP Access Rights Configuring SNMP MIB Views Configuring SNMP Target Parameters Configuring SNMP Target Addresses Configuring SNMP Notification Parameters Creating a Basic SNMP Trap Configuration Refer to page... 5-1 5-3 5-7 5-15 5-19 5-22 5-25 5-28 5-37
SNMP Configuration Summary

SNMPisanapplicationlayerprotocolthatfacilitatestheexchangeofmanagementinformation betweennetworkdevices.SNMPenablesnetworkadministratorstomanagenetwork performance,findandsolvenetworkproblems,andplanfornetworkgrowth. DSeriesdevicessupportthreeversionsofSNMP: Version1(SNMPv1)ThisistheinitialimplementationofSNMP.RefertoRFC1157fora fulldescriptionoffunctionality. Version2(SNMPv2c)ThesecondreleaseofSNMP,describedinRFC1907,hasadditions andenhancementstodatatypes,countersize,andprotocoloperations. Version3(SNMPv3)ThisisthemostrecentversionofSNMP,andincludessignificant enhancementstoadministrationandsecurity.SNMPv3isfullydescribedinRFC2571, RFC 2572,RFC2573,RFC2574,andRFC2575.
SNMPv1 and SNMPv2c

ThecomponentsofSNMPv1andSNMPv2cnetworkmanagementfallintothreecategories: Manageddevices(suchasaswitch). SNMPagentsandMIBs,includingSNMPtraps,communitystrings,andRemoteMonitoring (RMON)MIBs,whichrunonmanageddevices.
SNMP Configuration Summary
SNMPnetworkmanagementapplications,suchastheEnterasysNetSightapplication,which communicatewithagentstogetstatisticsandalertsfromthemanageddevices.
SNMPv3
SNMPv3isaninteroperablestandardsbasedprotocolthatprovidessecureaccesstodevicesby authenticatingandencryptingframesoverthenetwork.Theadvancedsecurityfeaturesprovided inSNMPv3areasfollows: MessageintegrityCollectsdatasecurelywithoutbeingtamperedwithorcorrupted. AuthenticationDeterminesthemessageisfromavalidsource. EncryptionScramblesthecontentsofaframetopreventitfrombeingseenbyan unauthorizedsource.
UnlikeSNMPv1andSNMPv2c,inSNMPv3,theconceptofSNMPagentsandSNMPmanagersno longerapply.TheseconceptshavebeencombinedintoanSNMPentity.AnSNMPentityconsists ofanSNMPengineandSNMPapplications.AnSNMPengineconsistsofthefollowingfour components: DispatcherThiscomponentsendsandreceivesmessages. MessageprocessingsubsystemThiscomponentacceptsoutgoingPDUsfromthe dispatcherandpreparesthemfortransmissionbywrappingtheminamessageheaderand returningthemtothedispatcher.Themessageprocessingsubsystemalsoacceptsincoming messagesfromthedispatcher,processeseachmessageheader,andreturnstheenclosedPDU tothedispatcher. SecuritysubsystemThiscomponentauthenticatesandencryptsmessages. AccesscontrolsubsystemThiscomponentdetermineswhichusersandwhichoperations areallowedaccesstomanagedobjects.
About SNMP Security Models and Levels

AnSNMPsecuritymodelisanauthenticationstrategythatissetupforauserandthegroupin whichtheuserresides.Asecuritylevelisthepermittedlevelofsecuritywithinasecuritymodel. ThethreelevelsofSNMPsecurityare:Noauthenticationrequired(NoAuthNoPriv); authenticationrequired(AuthNoPriv);andprivacy(authPriv).Acombinationofasecuritymodel andasecurityleveldetermineswhichsecuritymechanismisemployedwhenhandlinganSNMP frame.Table 517identifiesthelevelsofSNMPsecurityavailableonDSeriesdevicesand authenticationrequiredwithineachmodel. Table 5-17
Model v1 v2c
SNMP Security Levels

Security Level NoAuthNoPriv NoAuthNoPriv Authentication Community string Community string Encryption None None How It Works Uses a community string match for authentication. Uses a community string match for authentication.
5-2
SNMP Configuration
Reviewing SNMP Statistics
Table 5-17
Model v3
SNMP Security Levels (Continued)

Security Level NoAuthNoPriv AuthNoPriv Authentication User name MD5 or SHA Encryption None None How It Works Uses a user name match for authentication. Provides authentication based on the HMAC-MD5 or HMAC-SHA algorithms. Provides authentication based on the HMAC-MD5 or HMAC-SHA algorithms. Provides DES 56-bit encryption in addition to authentication based on the CBCDES (DES-56) standard.
authPriv
MD5 or SHA
DES
Using SNMP Contexts to Access Specific MIBs

Bydefault,whenoperatingfromtheswitchCLI,DSeriesdevicesallowaccesstoallSNMPMIBs orcontexts.AcontextisacollectionofMIBobjects,oftenassociatedwithaparticularphysicalor logicaldevice. Ifnooptionalcontextparametersareconfiguredforv1andv2communitynamesandv3user groups,thesegroupsareabletoaccessallSNMPMIBobjectswheninswitchmode. SpecifyingacontextparameterwhensettingupSNMPusergroupwouldpermitorrestrictthe groupsswitchmanagementaccesstotheMIB(s)specifiedbythecontext(MIBobjectID)value. AllSNMPcontextsknowntothedevicecanbedisplayedusingtheshowsnmpcontextcommand asdescribedinshowsnmpcontextonpage 520.
Example
ThisexamplepermitsthepowergrouptomanageallMIBsviaSNMPv3:
D2(su)->set snmp access powergroup security-model usm
Configuration Considerations
CommandsforconfiguringSNMPontheDSeriesdeviceareindependentduringtheSNMP setupprocess.Forinstance,targetparameterscanbespecifiedwhensettingupoptional notificationfilterseventhoughtheseparametershavenotyetbeencreatedwiththesetsnmp targetparamscommand.
Reviewing SNMP Statistics

Purpose
ToreviewSNMPstatistics.
5-3
show snmp engineid
Commands
For information about... show snmp engineid show snmp counters Refer to page... 5-4 5-5
show snmp engineid

UsethiscommandtodisplaytheSNMPlocalengineID.ThisistheSNMPv3engines administrativelyuniqueidentifier.
Syntax
show snmp engineid
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaySNMPengineproperties:
D2(su)->show snmp engineid EngineId: 80:00:15:f8:03:00:e0:63:9d:b5:87 Engine Boots = 12 Engine Time = 162181 Max Msg Size = 2048

Output Field EngineId Engine Boots Engine Time Max Msg Size
show snmp engineid Output Details

What It Displays... String identifying the SNMP agent on the device. Number of times the SNMP engine has been started or reinitialized. Time in seconds since last reboot. Maximum accepted length, in bytes, of SNMP frame.
5-4
SNMP Configuration
show snmp counters
show snmp counters

UsethiscommandtodisplaySNMPtrafficcountervalues.
Syntax
show snmp counters
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaySNMPcountervalues
D2(su)->show snmp counters --- mib2 SNMP group counters: snmpInPkts = 396601 snmpOutPkts = 396601 snmpInBadVersions = 0 snmpInBadCommunityNames = 0 snmpInBadCommunityUses = 0 snmpInASNParseErrs = 0 snmpInTooBigs = 0 snmpInNoSuchNames = 0 snmpInBadValues = 0 snmpInReadOnlys = 0 snmpInGenErrs = 0 snmpInTotalReqVars = 403661 snmpInTotalSetVars = 534 snmpInGetRequests = 290 snmpInGetNexts = 396279 snmpInSetRequests = 32 snmpInGetResponses = 0 snmpInTraps = 0 snmpOutTooBigs = 0 snmpOutNoSuchNames = 11 snmpOutBadValues = 0 snmpOutGenErrs = 0 snmpOutGetRequests = 0 snmpOutGetNexts = 0 snmpOutSetRequests = 0 snmpOutGetResponses = 396601 snmpOutTraps = 0 snmpSilentDrops = 0 snmpProxyDrops = 0 --- USM Stats counters: usmStatsUnsupportedSecLevels = 0 usmStatsNotInTimeWindows = 0 usmStatsUnknownUserNames = 0
5-5
show snmp counters
usmStatsUnknownEngineIDs usmStatsWrongDigests usmStatsDecryptionErrors
= 0 = 0 = 0

Output Field snmpInPkts snmpOutPkts snmpInBadVersions snmpInBadCommunityNames snmpInBadCommunityUses
show snmp counters Output Details

What It Displays... Number of messages delivered to the SNMP entity from the transport service. Number of SNMP messages passed from the SNMP protocol entity to the transport service. Number of SNMP messages delivered to the SNMP entity for an unsupported SNMP version. Number of SNMP messages delivered to the SNMP entity that used an SNMP community name not known to the entity. Number of SNMP messages delivered to the SNMP entity that represented an SNMP operation not allowed by the SNMP community named in the message. Number of ASN.1 (Abstract Syntax Notation) or BER (Basic Encoding Rules) errors encountered by the SNMP entity when decoding received SNMP messages. Number of SNMP PDUs delivered to the SNMP protocol entity with the value of the error-status field as tooBig. Number of SNMP PDUs delivered to the SNMP protocol entity with the value of the error-status field as noSuchName. Number of SNMP PDUs delivered to the SNMP protocol entity with the value of the error-status field as badValue. Number of valid SNMP PDUs delivered to the SNMP protocol entity with the value of the error-status field as "readOnly." Number of SNMP PDUs delivered to the SNMP protocol entity with the value of the error-status field as "genErr." Number of MIB objects retrieved successfully by the SNMP protocol entity as the result of receiving valid SNMP Get-Request and Get-Next PDUs. Number of MIB objects altered successfully by the SNMP protocol entity as the result of receiving valid SNMP Set-Request PDUs. Number of SNMP Get-Request PDUs accepted and processed by the SNMP protocol entity. Number of SNMP Get-Next PDUs accepted and processed by the SNMP protocol entity. Number of SNMP Set-Request PDUs accepted and processed by the SNMP protocol entity. Number of SNMP Get-Response PDUs accepted and processed by the SNMP protocol entity. Number of SNMP Trap PDUs accepted and processed by the SNMP protocol entity. Number of SNMP PDUs generated by the SNMP protocol entity with the value of the error-status field as "tooBig." Number of SNMP PDUs generated by the SNMP protocol entity with the value of the error-status as "noSuchName."
snmpInASNParseErrs
snmpInTooBigs snmpInNoSuchNames snmpInBadValues snmpInReadOnlys snmpInGenErrs snmpInTotalReqVars
snmpInTotalSetVars snmpInGetRequests snmpInGetNexts snmpInSetRequests snmpInGetResponses snmpInTraps snmpOutTooBigs snmpOutNoSuchNames
5-6
SNMP Configuration
Configuring SNMP Users, Groups, and Communities
Table 5-19
Output Field
show snmp counters Output Details (Continued)

What It Displays... Number of SNMP PDUs generated by the SNMP protocol entity with the value of the error-status field as "badValue." Number of SNMP PDUs generated by the SNMP protocol entity with the value of the error-status field as "genErr." Number of SNMP Get-Request PDUs generated by the SNMP protocol entity. Number of SNMP Get-Next PDUs generated by the SNMP protocol entity. Number of SNMP Set-Request PDUs generated by the SNMP protocol entity. Number of SNMP Get-Response PDUs generated by the SNMP protocol entity. Number of SNMP Trap PDUs generated by the SNMP protocol entity. Number of SNMP Get, Set, or Inform request error messages that were dropped because the reply was larger than the requestors maximum message size. Number of SNMP Get, Set, or Inform request error messages that were dropped because the reply was larger than the proxy targets maximum message size. Number of packets received by the SNMP engine that were dropped because they requested a security level that was unknown to the SNMP engine or otherwise unavailable. Number of packets received by the SNMP engine that were dropped because they appeared outside of the authoritative SNMP engine's window. Number of packets received by the SNMP engine that were dropped because they referenced a user that was not known to the SNMP engine. Number of packets received by the SNMP engine that were dropped because they referenced an snmpEngineID that was not known to the SNMP engine. Number of packets received by the SNMP engine that were dropped because they did not contain the expected digest value. Number of packets received by the SNMP engine that were dropped because they could not be decrypted.
snmpOutBadValues snmpOutGenErrs snmpOutGetRequests snmpOutGetNexts snmpOutSetRequests snmpOutGetResponses snmpOutTraps snmpSilentDrops
snmpProxyDrops
usmStatsUnsupportedSec Levels usmStatsNotInTimeWindows
usmStatsUnknownUserNames
usmStatsUnknownEngineIDs
usmStatsWrongDigests usmStatsDecriptionErrors
Configuring SNMP Users, Groups, and Communities

Purpose
ToreviewandconfigureSNMPusers,groups,andv1andv2communities.Thesearedefinedas follows: UserApersonregisteredinSNMPv3toaccessSNMPmanagement. GroupAcollectionofuserswhosharethesameSNMPaccessprivileges. CommunityAnameusedtoauthenticateSNMPv1andv2users.
5-7
show snmp user
Commands
For information about... show snmp user set snmp user clear snmp user show snmp group set snmp group clear snmp group show snmp community set snmp community clear snmp community Refer to page... 5-8 5-9 5-10 5-11 5-12 5-12 5-13 5-14 5-14
show snmp user

UsethiscommandtodisplayinformationaboutSNMPusers.Thesearepeopleregisteredto accessSNMPmanagement.
Syntax
show snmp user [list] | [user] | [remote remote] [volatile | nonvolatile | readonly]
Parameters
list user remoteremote (Optional)DisplaysalistofregisteredSNMPusernames. (Optional)Displaysinformationaboutaspecificuser. (Optional)DisplaysinformationaboutusersonaspecificremoteSNMP engine.
volatile|nonvolatile (Optional)Displaysuserinformationforaspecifiedstoragetype. |readonly
Defaults
Iflistisnotspecified,detailedSNMPinformationwillbedisplayed. Ifuserisnotspecified,informationaboutallSNMPuserswillbedisplayed. Ifremoteisnotspecified,userinformationaboutthelocalSNMPenginewillbedisplayed. Ifnotspecified,userinformationforallstoragetypeswillbedisplayed.
Mode
5-8
SNMP Configuration
set snmp user
Examples
ThisexampleshowshowtodisplayanSNMPuserlist:
D2(su)->show snmp user list --- SNMP user information ----- List of registered users: Guest admin1 admin2 netops
ThisexampleshowshowtodisplayinformationfortheSNMPguestuser:
(su)->show snmp user guest --- SNMP user information --EngineId: 00:00:00:63:00:00:00:a1:00:00:00:00 Username = Guest Auth protocol = usmNoAuthProtocol Privacy protocol = usmNoPrivProtocol Storage type = nonVolatile Row status = active
Table 520providesanexplanationofthecommandoutput. Table 5-20 show snmp user Output Details

Output Field EngineId Username Auth protocol Privacy protocol Storage type Row status What It Displays... SNMP local engine identifier. SNMPv1 or v2 community name or SNMPv3 user name. Type of authentication protocol applied to this user. Whether a privacy protocol is applied when authentication protocol is in use. Whether entry is stored in volatile, nonvolatile or read-only memory. Status of this entry: active, notInService, or notReady.
set snmp user

UsethiscommandtocreateanewSNMPv3user.
Syntax
set snmp user user [remote remoteid] [authentication {md5 | sha}] [authpassword] [privacy privpassword] [volatile | nonvolatile]
Parameters
user remoteremoteid SpecifiesanamefortheSNMPv3user. (Optional)RegisterstheuseronaspecificremoteSNMPengine.
authenticationmd5 (Optional)SpecifiestheauthenticationtyperequiredforthisuserasMD5 |sha orSHA. authpassword (Optional)Specifiesapasswordforthisuserwhenauthenticationis required.Minimumof8characters.
privacyprivpassword (Optional)Appliesencryptionandspecifiesanencryptionpassword. Minimumof8characters.

clear snmp user
volatile| nonvolatile
(Optional)Specifiesastoragetypeforthisuserentry.
Defaults
Ifremoteisnotspecified,theuserwillberegisteredforthelocalSNMPengine. Ifauthenticationisnotspecified,noauthenticationwillbeapplied. Ifprivacyisnotspecified,noencryptionwillbeapplied. Ifstoragetypeisnotspecified,nonvolatilewillbeapplied.
Mode
Example
ThisexampleshowshowtocreateanewSNMPusernamednetops.Bydefault,thisuserwillbe registeredonthelocalSNMPenginewithoutauthenticationandencryption.Entriesrelatedtothis userwillbestoredinpermanent(nonvolatile)memory:
D2(su)->set snmp user netops
clear snmp user

UsethiscommandtoremoveauserfromtheSNMPv3securitymodellist.
Syntax
clear snmp user user [remote remote]
Parameters
user remoteremote SpecifiesanSNMPv3usertoremove. (Optional)RemovestheuserfromaspecificremoteSNMPengine.
Defaults
Ifremoteisnotspecified,theuserwillberemovedfromthelocalSNMPengine.
Mode
Example
ThisexampleshowshowtoremovetheSNMPusernamedbill:
D2(su)->clear snmp user bill
5-10
SNMP Configuration
show snmp group
show snmp group

UsethiscommandtodisplayanSNMPgroupconfiguration.AnSNMPgroupisacollectionof SNMPv3userswhosharethesameaccessprivileges.
Syntax
show snmp group [groupname groupname] [user user] [security-model {v1 | v2c | usm}] [volatile | nonvolatile | read-only]
Parameters
groupname groupname useruser (Optional)DisplaysinformationforaspecificSNMPgroup. (Optional)Displaysinformationaboutuserswithinthespecifiedgroup.
securitymodelv1| (Optional)Displaysinformationaboutgroupsassignedtoaspecific v2c|usm securitySNMPmodel. volatile| nonvolatile|read only (Optional)DisplaysSNMPgroupinformationforaspecifiedstoragetype.
Defaults
Ifgroupnameisnotspecified,informationaboutallSNMPgroupswillbedisplayed. Ifuserisnotspecified,informationaboutallSNMPuserswillbedisplayed. Ifsecuritymodelisnotspecified,userinformationaboutallSNMPversionswillbedisplayed. Ifnotspecified,informationforallstoragetypeswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplaySNMPgroupinformation:
D2(su)->show snmp group --- SNMP group information --Security model = SNMPv1 Security/user name = public Group name = Anyone Storage type = nonVolatile Row status = active Security model Security/user name Group name Storage type Row status = = = = = SNMPv1 public.router1 Anyone nonVolatile active
Table 521providesanexplanationofthecommandoutput.
5-11
set snmp group
Table 5-21
show snmp group Output Details

Output Field Security model Security/user name Group name Storage type Row status What It Displays... SNMP version associated with this group. User belonging to the SNMP group. Name of SNMP group. Whether entry is stored in volatile, nonvolatile or read-only memory. Status of this entry: active, notInService, or notReady.
set snmp group

UsethiscommandtocreateanSNMPgroup.ThisassociatesSNMPv3userstoagroupthatshares commonaccessprivileges.
Syntax
set snmp group groupname user user security-model {v1 | v2c | usm} [volatile | nonvolatile]
Parameters
groupname useruser SpecifiesanSNMPgroupnametocreate. SpecifiesanSNMPv3usernametoassigntothegroup.
securitymodelv1| SpecifiesanSNMPsecuritymodeltoassigntothegroup. v2c|usm volatile| nonvolatile (Optional)SpecifiesastoragetypeforSNMPentriesassociatedwiththe group.
Defaults
Ifstoragetypeisnotspecified,nonvolatilestoragewillbeapplied.
Mode
Example
ThisexampleshowshowtocreateanSNMPgroupcalledanyone,assignausernamedpublic andassignSNMPv3securitytothegroup:
D2(su)->set snmp group anyone user public security-model usm
clear snmp group

UsethiscommandtoclearSNMPgroupsettingsgloballyorforaspecificSNMPgroupanduser.
Syntax
clear snmp group groupname user [security-model {v1 | v2c | usm}]
5-12
SNMP Configuration
show snmp community
Parameters
groupname user SpecifiestheSNMPgrouptobecleared. SpecifiestheSNMPusertobecleared.
securitymodelv1| (Optional)Clearsthesettingsassociatedwithaspecificsecuritymodel. v2c|usm
Defaults
If not specified, settings related to all security models will be cleared.
Mode
Example
ThisexampleshowshowtoclearallsettingsassignedtothepublicuserwithintheSNMPgroup anyone:
D2(su)->clear snmp group anyone public
show snmp community

UsethiscommandtodisplaySNMPcommunitynamesandstatus.InSNMPv1andv2, communitynamesactaspasswordstoremotemanagement.
Syntax
show snmp community [name]
Parameters
name (Optional)DisplaysSNMPinformationforaspecificcommunityname.
Defaults
Ifnameisnotspecified,informationwillbedisplayedforallSNMPcommunities.
Mode
Example
ThisexampleshowshowtodisplayinformationabouttheSNMPpubliccommunityname.For adescriptionofthisoutput,refertosetsnmpcommunity(page514).
D2(su)->show snmp community public --- Configured community strings --Name Security name Context Transport tag Storage type Status = = = = = = ********* public
nonVolatile active
5-13
set snmp community
set snmp community

UsethiscommandtoconfigureanSNMPcommunitygroup.
Syntax
set snmp community community [securityname securityname] [context context] [transport transport] [volatile | nonvolatile]
Parameters
community securityname securityname contextcontext Specifiesacommunitygroupname. (Optional)SpecifiesanSNMPsecuritynametoassociatewiththis community. (Optional)Specifiesasubsetofmanagementinformationthiscommunity willbeallowedtoaccess.Validvaluesarefullorpartialcontextnames.To reviewallcontextsconfiguredforthedevice,usetheshowsnmpcontext commandasdescribedinshowsnmpcontextonpage 520. (Optional)SpecifiesthesetoftransportendpointsfromwhichSNMP requestwiththiscommunitynamewillbeaccepted.Makesalinktoa targetaddresstable. (Optional)Specifiesthestoragetypefortheseentries.
transporttransport
Defaults
Ifsecuritynameisnotspecified,thecommunitynamewillbeused. Ifcontextisnotspecified,accesswillbegrantedforthedefaultcontext. Iftransporttagisnotspecified,nonewillbeapplied. Ifstoragetypeisnotspecified,nonvolatilewillbeapplied.
Mode
Example
ThisexampleshowshowtosetanSNMPcommunitynamecalledvip
D2(su)->set snmp community vip
clear snmp community

UsethiscommandtodeleteanSNMPcommunityname.
Syntax
clear snmp community name
Parameters
name SpecifiestheSNMPcommunitynametoclear.
5-14
SNMP Configuration
Configuring SNMP Access Rights
Defaults
None.
Mode
Example
Thisexampleshowshowtodeletethecommunitynamevip.
D2(su)->clear snmp community vip
Configuring SNMP Access Rights

Purpose
ToreviewandconfigureSNMPaccessrights,assigningviewingprivilegesandsecuritylevelsto SNMPusergroups.
Commands
For information about... show snmp access set snmp access clear snmp access Refer to page... 5-15 5-17 5-18
show snmp access

UsethiscommandtodisplayaccessrightsandsecuritylevelsconfiguredforSNMPoneormore groups.
Syntax
show snmp access [groupname] [security-model {v1 | v2c | usm}] [noauthentication | authentication | privacy] [context context] [volatile | nonvolatile | read-only]
Parameters
groupname (Optional)DisplaysaccessinformationforaspecificSNMPv3group. securitymodelv1| (Optional)DisplaysaccessinformationforSNMPsecuritymodelversion v2c|usm 1,2cor3(usm). noauthentication| authentication| privacy contextcontext (Optional)Displaysaccessinformationforaspecificsecuritylevel.
(Optional)Displaysaccessinformationforaspecificcontext.Fora descriptionofhowtospecifySNMPcontexts,refertoUsingSNMP ContextstoAccessSpecificMIBsonpage 53.
5-15
show snmp access
volatile| nonvolatile|read only
(Optional)Displaysaccessentriesforaspecificstoragetype.
Defaults
Ifgroupnameisnotspecified,accessinformationforallSNMPgroupswillbedisplayed. Ifsecuritymodelisnotspecified,accessinformationforallSNMPversionswillbedisplayed. Ifnoauthentication,authenticationorprivacyarenotspecified,accessinformationforall securitylevelswillbedisplayed. Ifcontextisnotspecified,allcontextswillbedisplayed. Ifvolatile,nonvolatileorreadonlyarenotspecified,allentriesofallstoragetypeswillbe displayed.
Mode
Example
ThisexampleshowshowtodisplaySNMPaccessinformation:
D2(su)->show snmp Group = Security model = Security level = Read View = Write View = Notify View = Context match = Storage type = Row status = Group Security model Security level Read View Write View Notify View Context match Storage type Row status = = = = = = = = = access SystemAdmin USM noAuthNoPriv All All exact match nonVolatile active NightOperator USM noAuthNoPriv All All exact match nonVolatile active

Output Field Group Security model Security level
show snmp access Output Details

What It Displays... SNMP group name. Security model applied to this group. Valid types are: SNMPv1, SNMPv2c, and SNMPv3 (User based - USM). Security level applied to this group. Valid levels are: noAuthNoPrivacy (no authentication required) AuthNoPrivacy (authentication required) authPriv (privacy -- most secure level)
5-16
SNMP Configuration
set snmp access
Table 5-22
Output Field Read View Write View Notify View
show snmp access Output Details (Continued)

What It Displays... Name of the view that allows this group to view SNMP MIB objects. Name of the view that allows this group to configure the contents of the SNMP agent. Name of the view that allows this group to send an SNMP trap message. Whether or not SNMP context match must be exact (full context name match) or a partial match with a given prefix. Whether access entries for this group are stored in volatile, nonvolatile or read-only memory. Status of this entry: active, notInService, or notReady.
Context match Storage type Row status
set snmp access

UsethiscommandtosetanSNMPaccessconfiguration.
Syntax
set snmp access groupname security-model {v1 | v2c | usm} [noauthentication | authentication | privacy] [context context] [exact | prefix] [read read] [write write] [notify notify] [volatile | nonvolatile]
Parameters
groupname SpecifiesanameforanSNMPv3group. securitymodelv1| SpecifiesSNMPversion1,2cor3(usm). v2c|usm noauthentication| authentication| privacy (Optional)AppliesSNMPsecuritylevelasnoauthentication, authentication(withoutprivacy)orprivacy.Privacyspecifiesthat messagessentonbehalfoftheuserareprotectedfromdisclosure.
contextcontextexact (Optional)Setsthecontextforthisaccessconfigurationandspecifiesthat |prefix thematchmustbeexact(matchingthewholecontextstring)oraprefix matchonly.ContextisasubsetofmanagementinformationthisSNMP groupwillbeallowedtoaccess.Validvaluesarefullorpartialcontext names.Toreviewallcontextsconfiguredforthedevice,usetheshow snmpcontextcommandasdescribedinshowsnmpcontexton page 520. readread writewrite notifynotify volatile| nonvolatile|read only (Optional)Specifiesareadaccessview. (Optional)Specifiesawriteaccessview. (Optional)Specifiesanotifyaccessview. (Optional)StoresassociatedSNMPentriesastemporaryorpermanent,or readonly.
Defaults
Ifsecuritylevelisnotspecified,noauthenticationwillbeapplied. Ifcontextisnotspecified,accesswillbeenabledforthedefaultcontext.Ifcontextisspecified withoutacontextmatch,exactmatchwillbeapplied.
5-17
clear snmp access
Ifreadviewisnotspecifiednonewillbeapplied. Ifwriteviewisnotspecified,nonewillbeapplied. Ifnotifyviewisnotspecified,nonewillbeapplied. Ifstoragetypeisnotspecified,entrieswillbestoredaspermanentandwillbeheldthroughdevice reboot.
Mode
Example
ThisexamplepermitsthepowergrouptomanageallMIBsviaSNMPv3:
D2(su)->set snmp access powergroup security-model usm
clear snmp access

UsethiscommandtocleartheSNMPaccessentryofaspecificgroup,includingitssetSNMP securitymodel,andlevelofsecurity.
Syntax
clear snmp access groupname security-model {v1 | v2c | usm} [noauthentication | authentication | privacy] [context context]
Parameters
groupname SpecifiesthenameoftheSNMPgroupforwhichtoclearaccess. securitymodelv1| SpecifiesthesecuritymodeltobeclearedfortheSNMPaccessgroup. v2c|usm noauthentication| authentication| privacy contextcontext (Optional)ClearsaspecificsecuritylevelfortheSNMPaccessgroup.
(Optional)ClearsaspecificcontextfortheSNMPaccessgroup.Enter// toclearthedefaultcontext.
Defaults
Ifsecuritylevelisnotspecified,alllevelswillbecleared. Ifcontextisnotspecified,nonewillbeapplied.
Mode
Example
ThisexampleshowshowtoclearSNMPversion3accessforthemisgroupviathe authenticationprotocol:
D2(su)->clear snmp access mis-group security-model usm authentication
5-18
SNMP Configuration
Configuring SNMP MIB Views
Configuring SNMP MIB Views

Purpose
ToreviewandconfigureSNMPMIBviews.SNMPviewsmapSNMPobjectstoaccessrights.
Commands
For information about... show snmp view show snmp context set snmp view clear snmp view Refer to page... 5-19 5-20 5-21 5-22
show snmp view

UsethiscommandtodisplaytheMIBconfigurationforSNMPv3viewbasedaccess(VACM).
Syntax
show snmp view [viewname] [subtree oid-or-mibobject] [volatile | nonvolatile | read-only]
Parameters
viewname subtreeoidormibobject volatile|nonvolatile| readonly (Optional)DisplaysinformationforaspecificMIBview. (Optional)DisplaysinformationforaspecificMIBsubtreewhen viewnameisspecified. (Optional)Displaysentriesforaspecificstoragetype.
Defaults
Ifnoparametersarespecified,allSNMPMIBviewconfigurationinformationwillbedisplayed.
Mode
5-19
show snmp context
Example
ThisexampleshowshowtodisplaySNMPMIBviewconfigurationinformation:
D2(su)->show snmp view --- SNMP MIB View information --View Name = All Subtree OID = 1 Subtree mask = View Type = included Storage type = nonVolatile Row status = active View Name Subtree OID Subtree mask View Type Storage type Row status View Name Subtree OID Subtree mask View Type Storage type Row status = = = = = = = = = = = = All 0.0 included nonVolatile active Network 1.3.6.1.2.1 included nonVolatile active
Table 523providesanexplanationofthecommandoutput.Fordetailsonusingthesetsnmp viewcommandtoassignvariables,refertosetsnmpviewonpage 521. Table 5-23 show snmp view Output Details
Output Field View Name Subtree OID Subtree mask View Type Storage type Row status What It Displays... Name assigned to a MIB view. Name identifying a MIB subtree. Bitmask applied to a MIB subtree. Whether or not subtree use must be included or excluded for this view. Whether storage is in nonVolatile or Volatile memory Status of this entry: active, notInService, or notReady.
show snmp context

UsethiscommandtodisplaythecontextlistconfigurationforSNMPsviewbasedaccesscontrol.
Syntax
show snmp context
Parameters
None.
Defaults
None.
5-20
SNMP Configuration
set snmp view
Mode
Usage
AnSNMPcontextisacollectionofmanagementinformationthatcanbeaccessedbyanSNMP agentorentity.ThedefaultcontextallowsallSNMPagentstoaccessallmanagementinformation (MIBs).Whencreatedusingthesetsnmpaccesscommand(setsnmpaccessonpage 517),other contextscanbeappliedtolimitaccesstoasubsetofmanagementinformation.
Example
ThisexampleshowshowtodisplayalistofallSNMPcontextsknowntothedevice:
D2(su)->show snmp context --- Configured contexts: default context (all mibs)
set snmp view

UsethiscommandtosetaMIBconfigurationforSNMPv3viewbasedaccess(VACM).
Syntax
set snmp view viewname viewname subtree subtree [mask mask] [included | excluded] [volatile | nonvolatile]
Parameters
viewnameviewname SpecifiesanameforaMIBview. subtreesubtree maskmask included| excluded volatile| nonvolatile SpecifiesaMIBsubtreename. (Optional)Specifiesabitmaskforasubtree. (Optional)Specifiessubtreeuse(default)ornosubtreeuse. (Optional)Specifiestheuseoftemporaryorpermanent(default)storage.
Defaults
Ifnotspecified,maskwillbesetto255.255.255.255 Ifnotspecified,subtreeusewillbeincluded. Ifstoragetypeisnotspecified,nonvolatile(permanent)willbeapplied.
Mode
Example
ThisexampleshowshowtosetanSNMPMIBviewtopublicwithasubtreenameof1.3.6.1 included:
D2(su)->set snmp view viewname public subtree 1.3.6.1 included
5-21
clear snmp view
clear snmp view

UsethiscommandtodeleteanSNMPv3MIBview.
Syntax
clear snmp view viewname subtree
Parameters
viewname subtree SpecifiestheMIBviewnametobedeleted. SpecifiesthesubtreenameoftheMIBviewtobedeleted.
Defaults
None.
Mode
Example
ThisexampleshowshowtodeleteSNMPMIBviewpublic:
D2(su)->clear snmp view public 1.3.6.1
Configuring SNMP Target Parameters

Purpose
ToreviewandconfigureSNMPtargetparameters.Thiscontrolswhereandunderwhat circumstancesSNMPnotificationswillbesent.Atargetparameterentrycanbeboundtoatarget IPaddressallowedtoreceiveSNMPnotificationmessageswiththesetsnmptargetaddr command(setsnmptargetaddronpage 526).
Commands
For information about... show snmp targetparams set snmp targetparams clear snmp targetparams Refer to page... 5-22 5-24 5-24
show snmp targetparams

UsethiscommandtodisplaySNMPparametersusedtogenerateamessagetoatarget.
Syntax
show snmp targetparams [targetParams] [volatile | nonvolatile | read-only]
5-22
SNMP Configuration
show snmp targetparams
Parameters
targetParams volatile|nonvolatile| readonly (Optional)Displaysentriesforaspecifictargetparameter. (Optional)Displaystargetparameterentriesforaspecificstorage type.
Defaults
IftargetParamsisnotspecified,entriesassociatedwithalltargetparameterswillbedisplayed. Ifnotspecified,entriesofallstoragetypeswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplaySNMPtargetparametersinformation:
D2(su)->show snmp targetparams --- SNMP TargetParams information --Target Parameter Name = v1ExampleParams Security Name = public Message Proc. Model = SNMPv1 Security Level = noAuthNoPriv Storage type = nonVolatile Row status = active Target Parameter Name = v2cExampleParams Security Name = public Message Proc. Model = SNMPv2c Security Level = noAuthNoPriv Storage type = nonVolatile Row status = active Target Parameter Name Security Name Message Proc. Model Security Level Storage type Row status = = = = = = v3ExampleParams CharlieDChief USM authNoPriv nonVolatile active
Table 524providesanexplanationofthecommandoutput. Table 5-24 show snmp targetparams Output Details

Output Field Target Parameter Name Security Name Message Proc. Model Security Level What It Displays... Unique identifier for the parameter in the SNMP target parameters table. Maximum length is 32 bytes. Security string definition. SNMP version. Type of security level (auth: security level is set to use authentication protocol, noauth: security level is not set to use authentication protocol, or privacy). Whether entry is stored in volatile, nonvolatile or read-only memory. Status of this entry: active, notInService, or notReady.
Storage type Row status
5-23
set snmp targetparams
set snmp targetparams

UsethiscommandtosetSNMPtargetparameters,anamedsetofsecurity/authorizationcriteria usedtogenerateamessagetoatarget.
Syntax
set snmp targetparams paramsname user user security-model {v1 | v2c | usm} messageprocessing {v1 | v2c | v3} [noauthentication | authentication | privacy] [volatile | nonvolatile]
Parameters
paramsname useruser SpecifiesanameidentifyingparametersusedtogenerateSNMPmessages toaparticulartarget. SpecifiesanSNMPv1orv2communitynameoranSNMPv3username. Maximumlengthis32bytes.
securitymodelv1| SpecifiestheSNMPsecuritymodelappliedtothistargetparameteras v2c|usm version1,2cor3(usm). message SpecifiestheSNMPmessageprocessingmodelappliedtothistarget processingv1|v2c parameterasversion1,2cor3. |v3 noauthentication| authentication| privacy volatile| nonvolatile (Optional)SpecifiestheSNMPsecuritylevelappliedtothistarget parameterasnoauthentication,authentication(withoutprivacy)or privacy.Privacyspecifiesthatmessagessentonbehalfoftheuserare protectedfromdisclosure. (Optional)Specifiesthestoragetypeappliedtothistargetparameter.
Defaults
None. Ifnotspecified,securitylevelwillbesettonoauthentication. Ifnotspecified,storagetypewillbesettononvolatile.
Mode
Example
ThisexampleshowshowtosetSNMPtargetparametersnamedv1ExampleParamsforauser namedfredusingversion3securitymodelandmessageprocessing,andauthentication:
D2(su)->set snmp targetparams v1ExampleParams user fred security-model usm message-processing v3 authentication
clear snmp targetparams

UsethiscommandtocleartheSNMPtargetparameterconfiguration.
Syntax
clear snmp targetparams targetParams
5-24
SNMP Configuration
Configuring SNMP Target Addresses
Parameters
targetParams SpecifiesthenameoftheparameterintheSNMPtargetparameterstable tobecleared.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearSNMPtargetparametersnamedv1ExampleParams:
D2(su)->clear snmp targetparams v1ExampleParams
Configuring SNMP Target Addresses

Purpose
ToreviewandconfigureSNMPtargetaddresseswhichwillreceiveSNMPnotificationmessages. AnaddressconfigurationcanbelinkedtooptionalSNMPtransmit,ortarget,parameters(suchas timeout,retrycount,andUDPport)setwiththesetsnmptargetparamscommand((page524)).
Commands
For information about... show snmp targetaddr set snmp targetaddr clear snmp targetaddr Refer to page... 5-25 5-26 5-27
show snmp targetaddr

UsethiscommandtodisplaySNMPtargetaddressinformation.
Syntax
show snmp targetaddr [targetAddr] [volatile | nonvolatile | read-only]
Parameters
targetAddr (Optional)Displaysinformationforaspecifictargetaddressname. volatile|nonvolatile (Optional)Whentargetaddressisspecified,displaystargetaddress |readonly informationforaspecificstoragetype.
Defaults
IftargetAddrisnotspecified,entriesforalltargetaddressnameswillbedisplayed.
5-25
set snmp targetaddr
Ifnotspecified,entriesofallstoragetypeswillbedisplayedforatargetaddress.
Mode
Example
ThisexampleshowshowtodisplaySNMPtargetaddressinformation:
D2(su)->show snmp targetaddr Target Address Name = labmachine Tag List = v2cTrap IP Address = 10.2.3.116 UDP Port# = 162 Target Mask = 255.255.255.255 Timeout = 1500 Retry count = 4 Parameters = v2cParams Storage type = nonVolatile Row status = active
Table 525providesanexplanationofthecommandoutput. Table 5-25 show snmp targetaddr Output Details

Output Field Target Address Name Tag List IP Address UDP Port# Target Mask Timeout Retry count Parameters Storage type Row status What It Displays... Unique identifier in the snmpTargetAddressTable. Tags a location to the target address as a place to send notifications. Target IP address. Number of the UDP port of the target host to use. Target IP address mask. Timeout setting for the target address. Retry setting for the target address. Entry in the snmpTargetParamsTable. Whether entry is stored in volatile, nonvolatile or read-only memory. Status of this entry: active, notInService, or notReady.
set snmp targetaddr

UsethiscommandtoconfigureanSNMPtargetaddress.Thetargetaddressisauniqueidentifier andaspecificIPaddressthatwillreceiveSNMPnotificationmessagesanddeterminewhich communitystringswillbeaccepted.ThisaddressconfigurationcanbelinkedtooptionalSNMP transmitparameters(suchastimeout,retrycount,andUDPport).
Syntax
set snmp targetaddr targetaddr ipaddr param param [udpport udpport] [mask mask] [timeout timeout] [retries retries] [taglist taglist] [volatile | nonvolatile]
Parameters
targetaddr SpecifiesauniqueidentifiertoindexthesnmpTargetAddrTable. Maximumlengthis32bytes.
5-26
SNMP Configuration
clear snmp targetaddr
ipaddr paramparam udpportudpport maskmask timeouttimeout
SpecifiestheIPaddressofthetarget. SpecifiesanentryintheSNMPtargetparameterstable,whichisused whengeneratingamessagetothetarget.Maximumlengthis32bytes. (Optional)SpecifieswhichUDPportofthetargethosttouse. (Optional)SpecifiestheIPmaskofthetarget. (Optional)Specifiesthemaximumroundtriptimeallowedto communicatetothistargetaddress.Thisvalueisin.01secondsandthe defaultis1500(15seconds.) (Optional)Specifiesthenumberofmessageretriesallowedifaresponseis notreceived.Defaultis3. (Optional)SpecifiesalistofSNMPnotifytagvalues.Thistagsalocation tothetargetaddressasaplacetosendnotifications.Listmustbeenclosed inquotesandtagvaluesmustbeseparatedbyaspace(forexample, tag1tag2). (Optional)Specifiestemporary(default),orpermanentstorageforSNMP entries.
retriesretries taglisttaglist
Defaults
Ifnotspecified,udpportwillbesetto162. Ifnotspecified,maskwillbesetto255.255.255.255 Ifnotspecified,timeoutwillbesetto1500. Ifnotspecified,numberofretrieswillbesetto3. Iftaglistisnotspecified,nonewillbeset. Ifnotspecified,storagetypewillbenonvolatile.
Mode
Example
ThisexampleshowshowtoconfigureatrapnotificationcalledTrapSink.Thistrapnotification willbesenttotheworkstation192.168.190.80(whichistargetaddresstr).Itwillusesecurityand authorizationcriteriacontainedinatargetparametersentrycalledv2cExampleParams.For moreinformationonconfiguringabasicSNMPtrap,refertoCreatingaBasicSNMPTrap Configurationonpage 537:
D2(su)->set snmp targetaddr tr 192.168.190.80 param v2cExampleParams taglist TrapSink
clear snmp targetaddr

UsethiscommandtodeleteanSNMPtargetaddressentry.
Syntax
clear snmp targetaddr targetAddr
5-27
Configuring SNMP Notification Parameters
Parameters
targetAddr Specifiesthetargetaddressentrytodelete.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearSNMPtargetaddressentrytr:
D2(su)->clear snmp targetaddr tr
Configuring SNMP Notification Parameters

About SNMP Notify Filters
ProfilesindicatingwhichtargetsshouldnotreceiveSNMPnotificationmessagesarekeptinthe NotifyFiltertable.Ifthistableisempty,meaningthatnofilteringisassociatedwithanySNMP target,thennofilteringwilltakeplace.Trapsorinformsnotificationswillbesenttoall destinationsintheSNMPtargetAddrTablethathavetagsmatchingthosefoundinthe NotifyTable. WhentheNotifyFiltertablecontainsprofileentries,theSNMPagentwillfindanyfilterprofile namethatcorrespondstothetargetparameternamecontainedinanoutgoingnotification message.Itwillthenapplytheappropriatesubtreespecificfilterwhengeneratingnotification messages.
Purpose
ToconfigureSNMPnotificationparametersandoptionalfilters.Notificationsareentitieswhich handlethegenerationofSNMPv1andv2trapsorSNMPv3informsmessagestoselect managementtargets.Optionalnotificationfiltersidentifywhichtargetsshouldnotreceive notifications.ForasampleSNMPtrapconfigurationshowinghowSNMPnotificationparameters areassociatedwithsecurityandauthorizationcriteria(targetparameters)andmappedtoa managementtargetaddress,refertoCreatingaBasicSNMPTrapConfigurationonpage 537.
Commands
For information about... show newaddrtrap set newaddrtrap show snmp notify set snmp notify clear snmp notify Refer to page... 5-29 5-30 5-30 5-31 5-32
5-28
SNMP Configuration
show newaddrtrap
For information about... show snmp notifyfilter set snmp notifyfilter clear snmp notifyfilter show snmp notifyprofile set snmp notifyprofile clear snmp notifyprofile
Refer to page... 5-33 5-33 5-34 5-35 5-35 5-36
show newaddrtrap
UsethiscommandtodisplaytheglobalandportspecificstatusoftheSNMPnewMACaddresses trapfunction.
Syntax
show newaddrtrap [port-string]
Parameters
portstring (Optional)DisplaysthestatusofthenewMACaddressestrapfunction onspecificports.
Defaults
Ifportstringisnotspecified,thestatusofthenewMACaddressestrapfunctionwillbedisplayed forallports.
Mode
Usage
Bydefault,thisfunctionisdisabledgloballyandperport.
Example
ThisexampledisplaysthestatusforGigabitEthernetports1through5inslot1.
D2(ro)->show newaddrtrap ge.1.1-5 New Address Traps Globally disabled Port --------ge.1.1 ge.1.2 ge.1.3 ge.1.4 ge.1.5 Enable State -----------disabled disabled disabled disabled disabled
5-29
set newaddrtrap
set newaddrtrap
UsethiscommandtoenableordisableSNMPtrapmessaging,globallyorononeormoreports, whennewsourceMACaddressesaredetected.
Syntax
set newaddrtrap [port-string] {enable | disable}
Parameters
portstring enable|disable (Optional)EnableordisablethenewMACaddressestrapfunctionon specificports. EnableordisablethenewMACaddressestrapfunction.Ifentered withouttheportstringparameter,enablesordisablesthefunction globally.Whenenteredwiththeportstringparameter,enablesor disablesthefunctiononspecificports.
Defaults
Ifportstringisnotspecified,thetrapfunctionissetglobally.
Mode
Usage
ThiscommandenablesanddisablessendingSNMPtrapmessageswhenanewsourceMAC addressisdetectedbyaport.IftheportisaCDPport,however,trapsfornewsourceMAC addresseswillnotbesent. Thedefaultmodeisdisabledgloballyandperport.
Example=
ThisexampleenablesthetrapfunctiongloballyandthenonGigabitEthernetports1through5in slot1.
D2(rw)->set newaddrtrap enable D2(rw)->set newaddrtrap ge.1.1-5 enable
show snmp notify

UsethiscommandtodisplaytheSNMPnotifyconfiguration,whichdeterminesthemanagement targetsthatwillreceiveSNMPnotifications.
Syntax
show snmp notify [notify] [volatile | nonvolatile | read-only]
Parameters
notify volatile| nonvolatile|read only (Optional)Displaysnotifyentriesforaspecificnotifyname. (Optional)Displaysnotifyentriesforaspecificstoragetype.
5-30
SNMP Configuration
set snmp notify
Defaults
Ifanotifynameisnotspecified,allentrieswillbedisplayed. Ifvolatile,nonvolatile,orreadonlyarenotspecified,allstoragetypeentrieswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplaytheSNMPnotifyinformation:
D2(su)->show snmp notify --- SNMP notifyTable information --Notify name = 1 Notify Tag = Console Notify Type = trap Storage type = nonVolatile Row status = active Notify name Notify Tag Notify Type Storage type Row status = = = = = 2 TrapSink trap nonVolatile active

Output Field Notify name Notify Tag Notify Type Storage type Row status
show snmp notify Output Details

What It Displays... A unique identifier used to index the SNMP notify table. Name of the entry in the SNMP notify table. Type of notification: SNMPv1 or v2 trap or SNMPv3 InformRequest message. Whether access entry is stored in volatile, nonvolatile, or read-only memory. Status of this entry: active, notInService, or notReady.
set snmp notify

UsethiscommandtosettheSNMPnotifyconfiguration.ThiscreatesanentryintheSNMPnotify table,whichisusedtoselectmanagementtargetswhoshouldreceivenotificationmessages.This commandstagparametercanbeusedtobindeachentrytoatargetaddressusingthesetsnmp targetaddrcommand(setsnmptargetaddronpage 526).
Syntax
set snmp notify notify tag tag [trap | inform] [volatile | nonvolatile]
Parameters
notify SpecifiesanSNMPnotifyname.
5-31
clear snmp notify
tagtag trap|inform volatile| nonvolatile
SpecifiesanSNMPnotifytag.ThisbindsthenotifynametotheSNMP targetaddresstable. (Optional)SpecifiesSNMPv1orv2Trapmessages(default)orSNMPv3 InformRequestmessages. (Optional)Specifiestemporary(default),orpermanentstorageforSNMP entries.
Defaults
Ifnotspecified,messagetypewillbesettotrap. Ifnotspecified,storagetypewillbesettononvolatile.
Mode
Example
ThisexampleshowshowtosetanSNMPnotifyconfigurationwithanotifynameofhelloanda notifytagofworld.Notificationswillbesentastrapmessagesandstoragetypewill automaticallydefaulttopermanent:
D2(su)->set snmp notify hello tag world trap
clear snmp notify

UsethiscommandtoclearanSNMPnotifyconfiguration.
Syntax
clear snmp notify notify
Parameters
notify SpecifiesanSNMPnotifynametoclear.
Defaults
None.
Mode
Example
ThisexampleshowshowtocleartheSNMPnotifyconfigurationforhello:
D2(su)->clear snmp notify hello
5-32
SNMP Configuration
show snmp notifyfilter
show snmp notifyfilter

UsethiscommandtodisplaySNMPnotifyfilterinformation,identifyingwhichprofileswillnot receiveSNMPnotifications.
Syntax
show snmp notifyfilter [profile] [subtree oid-or-mibobject] [volatile | nonvolatile | read-only]
Parameters
profile subtreeoidor mibobject volatile| nonvolatile|read only (Optional)Displaysaspecificnotifyfilter. (Optional)Displaysanotifyfilterwithinaspecificsubtree. (Optional)Displaysnotifyfilterentriesofaspecificstoragetype.
Defaults
Ifnoparametersarespecified,allnotifyfilterinformationwillbedisplayed.
Mode
Usage
SeeAboutSNMPNotifyFiltersonpage 528formoreinformationaboutnotifyfilters.
Example
ThisexampleshowshowtodisplaySNMPnotifyfilterinformation.Inthiscase,thenotifyprofile pilot1insubtree1.3.6willnotreceiveSNMPnotificationmessages:
D2(su)->show snmp notifyfilter --- SNMP notifyFilter information --Profile = pilot1 Subtree = 1.3.6 Filter type = included Storage type = nonVolatile Row status = active
set snmp notifyfilter

UsethiscommandtocreateanSNMPnotifyfilterconfiguration.Thisidentifieswhich managementtargetsshouldNOTreceivenotificationmessages,whichisusefulforfinetuningthe amountofSNMPtrafficgenerated.
Syntax
set snmp notifyfilter profile subtree oid-or-mibobject [mask mask] [included | excluded] [volatile | nonvolatile]
5-33
clear snmp notifyfilter
Parameters
profile subtreeoidor mibobject maskmask included| excluded volatile| nonvolatile SpecifiesanSNMPfilternotifyname. SpecifiesaMIBsubtreeIDtargetforthefilter. (Optional)Appliesasubtreemask. (Optional)Specifiesthatsubtreeisincludedorexcluded. (Optional)Specifiesastoragetype.
Defaults
Ifnotspecified,maskisnotset. Ifnotspecified,subtreewillbeincluded. Ifstoragetypeisnotspecified,nonvolatile(permanent)willbeapplied.
Mode
Usage
SeeAboutSNMPNotifyFiltersonpage 528formoreinformationaboutnotifyfilters.
Example
ThisexampleshowshowtocreateanSNMPnotifyfiltercalledpilot1withaMIBsubtreeIDof 1.3.6:
D2(su)->set snmp notifyfilter pilot1 subtree 1.3.6
clear snmp notifyfilter

UsethiscommandtodeleteanSNMPnotifyfilterconfiguration.
Syntax
clear snmp notifyfilter profile subtree oid-or-mibobject
Parameters
profile subtreeoidor mibobject SpecifiesanSNMPfilternotifynametodelete. SpecifiesaMIBsubtreeIDcontainingthefiltertobedeleted.
Defaults
None.
Mode
5-34
SNMP Configuration
show snmp notifyprofile
Example
ThisexampleshowshowtodeletetheSNMPnotifyfilterpilot1:
D2(su)->clear snmp notifyfilter pilot1 subtree 1.3.6
show snmp notifyprofile

UsethiscommandtodisplaySNMPnotifyprofileinformation.Thisassociatestargetparameters toanSNMPnotifyfiltertodeterminewhoshouldnotreceiveSNMPnotifications.
Syntax
show snmp notifyprofile [profile] [targetparam targetparam] [volatile | nonvolatile | read-only]
Parameters
profile targetparam targetparam volatile| nonvolatile|read only (Optional)Displaysaspecificnotifyprofile. (Optional)Displaysentriesforaspecifictargetparameter. (Optional)Displaysnotifyfilterentriesofaspecificstoragetype.
Defaults
Ifnoparametersarespecified,allnotifyprofileinformationwillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplaySNMPnotifyinformationfortheprofilenamedarea51:
D2(su)->show snmp notifyprofile area51 --- SNMP notifyProfile information --Notify Profile = area51 TargetParam = v3ExampleParams Storage type = nonVolatile Row status = active
set snmp notifyprofile

UsethiscommandtocreateanSNMPnotifyfilterprofileconfiguration.Thisassociatesa notificationfilter,createdwiththesetsnmpnotifyfiltercommand(setsnmpnotifyfilteron page 533),toasetofSNMPtargetparameterstodeterminewhichmanagementtargetsshould notreceiveSNMPnotifications.
Syntax
set snmp notifyprofile profile targetparam targetparam [volatile | nonvolatile]
5-35
clear snmp notifyprofile
Parameters
profile targetparam targetparam volatile| nonvolatile SpecifiesanSNMPfilternotifyname. SpecifiesanassociatedentryintheSNMPTargetParamsTable. (Optional)Specifiesastoragetype.
Defaults
Ifstoragetypeisnotspecified,nonvolatile(permanent)willbeapplied.
Mode
Example
ThisexampleshowshowtocreateanSNMPnotifyprofilenamedarea51andassociateatarget parametersentry.
D2(su)->set snmp notifyprofile area51 targetparam v3ExampleParams
clear snmp notifyprofile

UsethiscommandtodeleteanSNMPnotifyprofileconfiguration.
Syntax
clear snmp notifyprofile profile targetparam targetparam
Parameters
profile targetparam targetparam SpecifiesanSNMPfilternotifynametodelete. SpecifiesanassociatedentryinthesnmpTargetParamsTable.
Defaults
None.
Mode
Example
ThisexampleshowshowtodeleteSNMPnotifyprofilearea51:
D2(su)->clear snmp notifyprofile area51 targetparam v3ExampleParams
5-36
SNMP Configuration
Creating a Basic SNMP Trap Configuration

TrapsarenotificationmessagessentbyanSNMPv1orv2agenttoanetworkmanagementstation, aconsole,oraterminaltoindicatetheoccurrenceofasignificantevent,suchaswhenaportor devicegoesupordown,whenthereareauthenticationfailures,andwhenpowersupplyerrors occur.ThefollowingconfigurationexampleshowshowtouseCLIcommandstoassociateSNMP notificationparameterswithsecurityandauthorizationcriteria(targetparameters),andmapthe parameterstoamanagementtargetaddress.
Note: This example illustrates how to configure an SNMPv2 trap notification. Creating an SNMPv1 or v3 Trap, or an SNMPv3 Inform notification would require using the same commands with different parameters, where appropriate. Always ensure that v1/v2 communities or v3 users used for generating traps or informs are pre-configured with enough privileges to access corresponding MIBs.
CompleteanSNMPv2trapconfigurationonaDSeriesdeviceasfollows: 1. 2. 3. CreateacommunitynamethatwillactasanSNMPuserpassword. CreateanSNMPtargetparametersentrytoassociatesecurityandauthorizationcriteriatothe usersinthecommunitycreatedinStep1. VerifyifanyapplicableSNMPnotificationentriesexist,orcreateanewone.Youwillusethis entrytosendSNMPnotificationmessagestotheappropriatemanagementtargetscreatedin Step 2. CreateatargetaddressentrytobindamanagementIPaddressto: ThenotificationentryandtagnamecreatedinStep3and ThetargetparametersentrycreatedinStep2.
4.
Table 527showsthecommandsusedtocompleteanSNMPv2trapconfigurationonaDSeries device. Table 5-27

To do this... Create a community name. Create an SNMP target parameters entry. Verify if any applicable SNMP notification entries exist. Create a new notification entry. Create a target address entry.
Basic SNMP Trap Configuration

Use these commands... set snmp community set snmp targetparams show snmp notify set snmp notify set snmp targetaddr
5-37
Example
Thisexampleshowshowto: CreateanSNMPcommunitycalledmgmt. ConfigureatrapnotificationcalledTrapSink.
Thistrapnotificationwillbesentwiththecommunitynamemgmttotheworkstation 192.168.190.80(whichistargetaddresstr).Itwillusesecurityandauthorizationcriteriacontained inatargetparametersentrycalledv2cExampleParams.

D2(su)->set snmp community mgmt D2(su)->set snmp targetparams v2cExampleParams user mgmt security-model v2c message-processing v2c D2(su)->set snmp notify entry1 tag TrapSink D2(su)->set snmp targetaddr tr 192.168.190.80 param v2cExampleParams taglist TrapSink
How SNMP Will Use This Configuration

Inordertosendatrap/notificationrequestedbyaMIBcode,theSNMPagentrequiresthe equivalentofatrapdoor,akeytounlockthedoor,andaprocedureforcrossingthe doorstep.Todetermineifalltheseelementsareinplace,theSNMPagentproceedsasfollows: 1. Determinesifthekeysfortrapdoorsdoexist.Intheexampleconfigurationabove,the keythatSNMPislookingforisthenotificationentrycreatedwiththesetsnmpnotify commandwhich,inthiscase,isakeylabeledentry1. Searchesforthedoorsmatchingsuchakey.Forexample,theparameterssetfortheentry1key showsthatitopensonlythedoorTrapSink. VerifiesthatthespecifieddoorTrapSinkis,infact,available.Inthiscaseitwasbuiltusingthe setsnmptargetaddrcommand.Thiscommandalsospecifiesthatthisdoorleadstothe managementstation192.168.190.80,andtheprocedure(targetparams)tocrossthedoorstep iscalledv2ExampleParams. Verifiesthatthev2ExampleParamsdescriptionofhowtostepthroughthedooris,infact, there.Theagentcheckstargetparamsentriesanddeterminesthisdescriptionwasmadewith thesetsnmptargetparamscommand,whichtellsexactlywhichSNMPprotocoltouseand whatcommunitynametoprovide.Inthiscase,thecommunitynameismgmt. Verifiesthatthemgmtcommunitynameisavailable.Inthiscase,ithasbeenconfiguredusing thesetsnmpcommunitycommand. Sendsthetrapnotificationmessage.
2. 3.
4.
5. 6.
5-38
SNMP Configuration
6
Spanning Tree Configuration
ThischapterdescribestheSpanningTreeConfigurationsetofcommandsandhowtousethem.
For information about... Spanning Tree Configuration Summary Configuring Spanning Tree Bridge Parameters Configuring Spanning Tree Port Parameters Configuring Spanning Tree Loop Protect Parameters Refer to page... 6-1 6-3 6-31 6-38
Caution: Spanning Tree configuration should be performed only by personnel who are very knowledgeable about Spanning Trees and the configuration of the Spanning Tree Algorithm. Otherwise, the proper operation of the network could be at risk.
Spanning Tree Configuration Summary

Overview: Single, Rapid, and Multiple Spanning Tree Protocols
TheIEEE802.1DSpanningTreeProtocol(STP)resolvestheproblemsofphysicalloopsina networkbyestablishingoneprimarypathbetweenanytwodevicesinanetwork.Anyduplicate pathsarebarredfromuseandbecomestandbyorblockedpathsuntiltheoriginalpathfails,at whichpointtheycanbebroughtintoservice.
RSTP
TheIEEE802.1wRapidSpanningProtocol(RSTP),anevolutionof802.1D,canachievemuch fasterconvergencethanlegacySTPinaproperlyconfigurednetwork.RSTPsignificantlyreduces thetimetoreconfigurethenetworksactivetopologywhenphysicaltopologyorconfiguration parameterchangesoccur.ItselectsoneswitchastherootofaSpanningTreeconnectedactive topologyandassignsportrolestoindividualportsontheswitch,dependingonwhetherthatport ispartoftheactivetopology. RSTPprovidesrapidconnectivityfollowingthefailureofaswitch,switchport,oraLAN.Anew rootportandthedesignatedportontheothersideofthebridgetransitiontoforwardingthrough anexplicithandshakebetweenthem.Bydefault,userportsareconfiguredtorapidlytransitionto forwardinginRSTP.
MSTP
TheIEEE802.1sMultipleSpanningTreeProtocol(MSTP)buildsupon802.1DandRSTPby optimizingutilizationofredundantlinksbetweenswitchesinanetwork.Whenredundantlinks existbetweenapairofswitchesrunningsingleSTP,onelinkisforwardingwhiletheothersare
6-1
Spanning Tree Configuration Summary
blockingforalltrafficflowingbetweenthetwoswitches.Theblockinglinksareeffectivelyused onlyiftheforwardinglinkgoesdown.MSTPassignseachVLANpresentonthenetworktoa particularSpanningTreeinstance,allowingeachswitchporttobeinadistinctstateforeachsuch instance:blockingforoneSpanningTreewhileforwardingforanother.Thus,trafficassociated withonesetofVLANscantraverseaparticularinterswitchlink,whiletrafficassociatedwith anothersetofVLANscanbeblockedonthatlink.IfVLANsareassignedtoSpanningTrees wisely,nointerswitchlinkwillbecompletelyidle,maximizingnetworkutilization. FordetailsoncreatingSpanningTreeinstances,refertosetspantreemstionpage 612. FordetailsonmappingSpanningTreeinstancestoVLANs,refertosetspantreemstmapon page 614.
Note: MSTP and RSTP are fully compatible and interoperable with each other and with legacy STP 802.1D.
Spanning Tree Features

TheDSeriesdevicemeetstherequirementsoftheSpanningTreeProtocolsbyperformingthe followingfunctions: CreatingasingleSpanningTreefromanyarrangementofswitchingorbridgingelements. Compensatingautomaticallyforthefailure,removal,oradditionofanydeviceinanactive datapath. Achievingportchangesinshorttimeintervals,whichestablishesastableactivetopology quicklywithminimalnetworkdisturbance. Usingaminimumamountofcommunicationsbandwidthtoaccomplishtheoperationofthe SpanningTreeProtocol. Reconfiguringtheactivetopologyinamannerthatistransparenttostationstransmittingand receivingdatapackets. ManagingthetopologyinaconsistentandreproduciblemannerthroughtheuseofSpanning TreeProtocolparameters.
Note: The term bridge is used as an equivalent to the term switch or device in this document.
Loop Protect
TheLoopProtectfeaturepreventsorshortcircuitsloopformationinanetworkwithredundant pathsbyrequiringportstoreceivetype2BPDUs(RSTP/MSTP)onpointtopointinterswitch links(ISLs)beforetheirstatesareallowedtobecomeforwarding.Further,ifaBPDUtimeout occursonaport,itsstatebecomeslisteninguntilaBPDUisreceived. Bothupstreamanddownstreamfacingportsareprotected.Whenarootoralternateportlosesits pathtotherootbridgeduetoamessageageexpirationittakesontheroleofdesignatedport.It willnotforwardtrafficuntilaBPDUisreceived.Whenaportisintendedtobethedesignatedport inanISLitconstantlyproposesandwillnotforwarduntilaBPDUisreceived,andwillrevertto listeningifitfailstogetaresponse.Thisprotectsagainstmisconfigurationandprotocolfailureby theconnectedbridge. TheDisputedBPDUmechanismprotectsagainstloopinginsituationswherethereisoneway communication.AdisputedBPDUisoneinwhichtheflagsfieldindicatesadesignatedroleand
6-2
Configuring Spanning Tree Bridge Parameters
learningandthepriorityvectorisworsethanthatalreadyheldbytheport.IfadisputedBPDUis received,theportisforcedtothelisteningstate.WhenaninferiordesignatedBPDUwiththe learningbitsetisreceivedonadesignatedport,itsstateissettodiscardingtopreventloop formation.NotethattheDisputemechanismisalwaysactiveregardlessoftheconfiguration settingofLoopProtection. LoopProtectoperatesasaperport,perMSTinstancefeature.Itshouldbesetoninterswitch links.Itiscomprisedofseveralrelatedfunctions: ControlofportforwardingstatebasedonreceptionofagreementBPDUs ControlofportforwardingstatebasedonreceptionofdisputedBPDUs Communicatingportnonforwardingstatusthroughtrapsandsyslogmessages Disablingaportbasedonfrequencyoffailureevents
PortforwardingstateinthedesignatedportisgatedbyatimerthatissetuponBPDUreception.It isanalogoustothercvdInfoWhiletimertheportuseswhenreceivingrootinformationintheroot/ alternate/backuprole. TherearetwooperationalmodesforLoopProtectonaport.Iftheportisconnectedtoadevice knowntoimplementLoopProtect,itusesfullfunctionalmode.Otherwisetheportoperatesin limitedfunctionalmode. ConnectiontoaLoopProtectswitchguaranteesthatthealternateagreementmechanismis implemented.Thismeansthedesignatedportcanrelyonreceivingaresponsetoitsproposal regardlessoftheroleoftheconnectedport,whichhastwoimportantimplications.First,the designatedportconnectedtoanonrootportmaytransitiontoforwarding.Second,thereisno ambiguitywhenatimeouthappens;aLoopProtecteventhasoccurred. Infullfunctionalmode,whenatype2BPDUisreceivedandtheportisdesignatedandpointto point,thetimerissetto3timeshelloTime.Inlimitedfunctionalmodethereistheadditional requirementthattheflagsfieldindicatearootrole.IftheportisaboundaryporttheMSTIsfor thatportfollowtheCIST,thatis,theMSTIporttimersaresetaccordingtotheCISTporttimer.If theportisinternaltotheregionthentheMSTIporttimersaresetindependentlyusingthe particularMSTImessage. MessageageexpirationandtheexpirationoftheLoopProtecttimerarebothLoopProtectevents. Anoticelevelsyslogmessageisproducedforeachsuchevent.Trapsmaybeconfiguredtoreport theseeventsaswell.AsyslogmessageandtrapmaybeconfiguredfordisputedBPDUs. ItisalsoconfigurabletoforcethelockingofaSID/portfortheoccurrenceofoneormoreevents. Whentheconfigurednumberofeventshappenwithinagivenwindowoftime,theportisforced intoblockingandheldthereuntilitismanuallyunlockedviamanagement.

Purpose
TodisplayandsetSpanningTreebridgeparameters,includingdevicepriorities,hellotime, maximumwaittime,forwarddelay,pathcost,andtopologychangetrapsuppression.
6-3
Commands
For information about... show spantree stats set spantree show spantree version set spantree version clear spantree version show spantree bpdu-forwarding set spantree bpdu-forwarding show spantree bridgeprioritymode set spantree bridgeprioritymode clear spantree bridgeprioritymode show spantree mstilist set spantree msti clear spantree msti show spantree mstmap set spantree mstmap clear spantree mstmap show spantree vlanlist show spantree mstcfgid set spantree mstcfgid clear spantree mstcfgid set spantree priority clear spantree priority set spantree hello clear spantree hello set spantree maxage clear spantree maxage set spantree fwddelay clear spantree fwddelay show spantree backuproot set spantree backuproot clear spantree backuproot show spantree tctrapsuppress set spantree tctrapsuppress clear spantree tctrapsuppress Refer to page... 6-5 6-7 6-7 6-8 6-8 6-9 6-9 6-10 6-10 6-11 6-12 6-12 6-13 6-13 6-14 6-14 6-15 6-15 6-16 6-16 6-17 6-17 6-18 6-18 6-19 6-19 6-20 6-20 6-21 6-21 6-22 6-22 6-23 6-23
6-4
show spantree stats
For information about... set spantree protomigration show spantree spanguard set spantree spanguard clear spantree spanguard show spantree spanguardtimeout set spantree spanguardtimeout clear spantree spanguardtimeout show spantree spanguardlock clear/set spantree spanguardlock show spantree spanguardtrapenable set spanstree spanguardtrapenable clear spanstree spanguardtrapenable show spantree legacypathcost set spantree legacypathcost clear spantree legacypathcost
Refer to page... 6-24 6-24 6-25 6-26 6-26 6-26 6-27 6-27 6-28 6-28 6-29 6-29 6-30 6-30 6-31
show spantree stats

UsethiscommandtodisplaySpanningTreeinformationforoneormoreports.
Syntax
show spantree stats [port port-string] [sid sid] [active]
Parameters
portportstring (Optional)Displaysinformationforthespecifiedport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41. (Optional)DisplaysinformationforaspecificSpanningTreeidentifier.If notspecified,SID0isassumed. (Optional)DisplaysinformationforportsthathavereceivedSTPBPDUs sinceboot.
sidsid active
Defaults
Ifportstringisnotspecified,SpanningTreeinformationforallportswillbedisplayed. Ifsidisnotspecified,informationforSpanningTree0willbedisplayed. Ifactiveisnotspecifiedinformationforallportswillbedisplayedregardlessofwhetherornot theyhavereceivedBPDUs.
Mode
6-5
show spantree stats
Example
ThisexampleshowshowtodisplaythedevicesSpanningTreeconfiguration:
D2(su)->show spantree stats Spanning tree status Spanning tree instance Designated Root MacAddr Designated Root Priority Designated Root Cost Designated Root Port Root Max Age Root Hello Time Root Forward Delay Bridge ID MAC Address Bridge ID Priority Bridge Max Age Bridge Hello Time Bridge Forward Delay Topology Change Count Time Since Top Change Max Hops enabled 0 00-e0-63-9d-c1-c8 0 10000 lag.0.1 20 sec 2 sec 15 sec 00-01-f4-da-5e-3d 32768 20 sec 2 sec 15 sec 7 00 days 03:19:15 20
Table 628showsadetailedexplanationofcommandoutput. Table 6-28

Output Spanning tree instance Spanning tree status Designated Root MacAddr Designated Root Port Designated Root Priority Designated Root Cost Root Max Age Root Hello Time Root Forward Delay Bridge ID MAC Address Bridge ID Priority
show spantree Output Details

What It Displays... Spanning Tree ID. Whether Spanning Tree is enabled or disabled. MAC address of the designated Spanning Tree root bridge. Port through which the root bridge can be reached. Priority of the designated root bridge. Total path cost to reach the root. Amount of time (in seconds) a BPDU packet should be considered valid. Interval (in seconds) at which the root device sends BPDU (Bridge Protocol Data Unit) packets. Amount of time (in seconds) the root device spends in listening or learning mode. Unique bridge MAC address, recognized by all bridges in the network. Bridge priority, which is a default value, or is assigned using the set spantree priority command. For details, refer to set spantree priority on page 6-17. Maximum time (in seconds) the bridge can wait without receiving a configuration message (bridge hello) before attempting to reconfigure. This is a default value, or is assigned using the set spantree maxage command. For details, refer to set spantree maxage on page 6-19. Amount of time (in seconds) the bridge sends BPDUs. This is a default value, or is assigned using the set spantree hello command. For details, refer to set spantree hello on page 6-18.
Bridge Max Age
Bridge Hello Time
6-6
set spantree
Table 6-28
Output
show spantree Output Details (Continued)

What It Displays... Amount of time (in seconds) the bridge spends in listening or learning mode. This is a default value, or is assigned using the set spantree fwddelay command. For details, refer to set spantree fwddelay on page 6-20. Number of times topology has changed on the bridge. Amount of time (in days, hours, minutes and seconds) since the last topology change. Maximum number of hops information for a particular Spanning Tree instance may traverse (via relay of BPDUs within the applicable MST region) before being discarded.
Bridge Forward Delay
Topology Change Count Time Since Top Change Max Hops
set spantree
UsethiscommandtogloballyenableordisabletheSpanningTreeprotocolontheswitch.
Syntax
set spantree {disable | enable}
Parameters
disable|enable GloballydisablesorenablesSpanningTree.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisableSpanningTreeonthedevice:
D2(su)->set spantree disable
show spantree version

UsethiscommandtodisplaythecurrentversionoftheSpanningTreeprotocolrunningonthe device.
Syntax
show spantree version
Parameters
None.
Defaults
None.
set spantree version
Mode
Example
ThisexampleshowshowtodisplaySpanningTreeversioninformationforthedevice:
D2(su)->show spantree version Force Version is mstp
set spantree version

UsethiscommandtosettheversionoftheSpanningTreeprotocoltoMSTP(MultipleSpanning TreeProtocol),RSTP(RapidSpanningTreeProtocol)ortoSTP802.1Dcompatible.
Syntax
set spantree version {mstp | stpcompatible | rstp}
Parameters
mstp stpcompatible rstp SetstheversiontoSTP802.1scompatible. SetstheversiontoSTP802.1Dcompatible. Setstheversionto802.1wcompatible.
Defaults
None.
Mode
Usage
Inmostnetworks,SpanningTreeversionshouldnotbechangedfromitsdefaultsettingofmstp (MultipleSpanningTreeProtocol)mode.MSTPmodeisfullycompatibleandinteroperablewith legacySTP802.1DandRapidSpanningTree(RSTP)bridges.Settingtheversiontostpcompatible modewillcausethebridgetotransmitonly802.1DBPDUs,andwillpreventnonedgeportsfrom rapidlytransitioningtoforwardingstate.
Example
ThisexampleshowshowtogloballychangetheSpanningTreeversionfromthedefaultofMSTP toRSTP:
D2(su)->set spantree version rstp
clear spantree version

UsethiscommandtoresettheSpanningTreeversiontoMSTPmode.
Syntax
clear spantree version
6-8
show spantree bpdu-forwarding
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresettheSpanningTreeversion:
D2(su)->clear spantree version

Use this command to display the Spanning Tree BPDU forwarding mode.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaytheSpanningTreeBPDUforwardingmode:
D2(su)->show spantree bpdu-forwarding BPDU forwarding is disabled.
set spantree bpdu-forwarding

UsethiscommandtoenableordisableSpanningTreeBPDUforwarding.BydefaultBPDU forwardingisdisabled.
Syntax
set spantree bpdu-forwarding {disable | enable}
Parameters
disable|enable DisablesorenablesBPDUforwarding;.
6-9
show spantree bridgeprioritymode
Defaults
BydefaultBPDUforwardingisdisabled.
Mode
Usage
TheSpanningTreeprotocolmustbedisabled(setspantreedisable)forthisfeaturetotakeeffect.
Example
ThisexampleshowshowtoenableBPDUforwarding:
D2(rw)-> set spantree bpdu-forwarding enable

UsethiscommandtodisplaytheSpanningTreebridgeprioritymodesetting.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaytheSpanningTreebridgeprioritymodesetting:
D2(rw)->show spantree bridgeprioritymode Bridge Priority Mode is set to IEEE802.1t mode.
set spantree bridgeprioritymode

UsethiscommandtosettheSpanningTreebridgeprioritymodeto802.1D(legacy)or802.1t.
Syntax
set spantree bridgeprioritymode {8021d | 8021t}
Parameters
8021d Setsthebridgeprioritymodetouse802.1D(legacy)values,whichare0 65535.
6-10
clear spantree bridgeprioritymode
8021t
Setsthebridgeprioritymodetouse802.1tvalues,whichare0to61440,in incrementsof4096.Valueswillautomaticallyberoundedupordown, dependingonthe802.1tvaluetowhichtheenteredvalueisclosest. Thisisthedefaultbridgeprioritymode.
Defaults
None
Mode
Usage
Themodeaffectstherangeofpriorityvaluesusedtodeterminewhichdeviceisselectedasthe SpanningTreerootasdescribedinsetspantreepriority(setspantreepriorityonpage 617).The defaultfortheswitchistouse802.1tbridgeprioritymode.
Example
Thisexampleshowshowtosetthebridgeprioritymodeto802.1D:
D2(rw)->set spantree bridgeprioritymode 8021d

UsethiscommandtoresettheSpanningTreebridgeprioritymodetothedefaultsettingof802.1t.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtoresetthebridgeprioritymodeto802.1t:
D2(rw)->clear spantree bridgeprioritymode
6-11
show spantree mstilist

UsethiscommandtodisplayalistofMultipleSpanningTree(MST)instancesconfiguredonthe device.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplayalistofMSTinstances.Inthiscase,SID2hasbeenconfigured:
D2(su)->show spantree mstilist Configured Multiple Spanning Tree instances: 2
set spantree msti

UsethiscommandtocreateordeleteaMultipleSpanningTreeinstance.
Syntax
set spantree msti sid sid {create | delete}
Parameters
sidsid create|delete SetstheMultipleSpanningTreeID.Validvaluesare14094. DSeriesdeviceswillsupportupto4MSTinstances. CreatesordeletesanMSTinstance.
Defaults
None.
Mode
Example
ThisexampleshowshowtocreateanMSTinstance2:
D2(su)->set spantree msti sid 2 create
6-12
clear spantree msti
clear spantree msti

UsethiscommandtodeleteoneormoreMultipleSpanningTreeinstances.
Syntax
clear spantree msti [sid sid]
Parameters
sidsid (Optional)DeletesaspecificmultipleSpanningTreeID.
Defaults
Ifsidisnotspecified,allMSTinstanceswillbecleared.
Mode
Example
ThisexampleshowshowtodeleteallMSTinstances:
D2(su)->clear spantree msti
show spantree mstmap

UsethiscommandtodisplaythemappingofafilteringdatabaseID(FID)toaSpanningTrees. SinceVLANsaremappedtoFIDs,thisshowstowhichSIDaVLANismapped.
Syntax
show spantree mstmap [fid fid]
Parameters
fidfid (Optional)DisplaysinformationforspecificFIDs.
Defaults
Iffidisnotspecified,informationforallassignedFIDswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplaySIDtoFIDmappinginformationforFID1.Inthiscase,no newmappingshavebeenconfigured:
D2(su)->show spantree mstmap fid 1 FID: SID: 1 0
6-13
set spantree mstmap
set spantree mstmap

UsethiscommandtomaponeormorefilteringdatabaseIDs(FIDs)toaSID.SinceVLANsare mappedtoFIDs,thisessentiallymapsoneormoreVLANIDstoaSpanningTree(SID).
Note: Since any MST maps that are associated with GVRP-generated VLANs will be removed from the configuration if GVRP communication is lost, it is recommended that you only create MST maps on statically-created VLANs.
Syntax
set spantree mstmap fid [sid sid]
Parameters
fid sidsid SpecifiesoneormoreFIDstoassigntotheMST.Validvaluesare14093, andmustcorrespondtoaVLANIDcreatedusingthesetvlancommand. (Optional)SpecifiesaMultipleSpanningTreeID.Validvaluesare14094, andmustcorrespondtoaSIDcreatedusingthesetmsticommand.
Defaults
Ifsidisnotspecified,FID(s)willbemappedtoSpanningTree0.
Mode
Example
ThisexampleshowshowtomapFID3toSID2:
D2(su)->set spantree mstmap 3 sid 2
clear spantree mstmap

UsethiscommandtomapaFIDbacktoSID0.
Syntax
clear spantree mstmap fid
Parameters
fid SpecifiesoneormoreFIDstoresetto0.
Defaults
Iffidisnotspecified,allSIDtoFIDmappingswillbereset.
Mode
Example
ThisexampleshowshowtomapFID2backtoSID0:
D2(su)->clear spantree mstmap 2
6-14 Spanning Tree Configuration
show spantree vlanlist
show spantree vlanlist

UsethiscommandtodisplaytheSpanningTreeID(s)assignedtooneormoreVLANs.
Syntax
show spantree vlanlist [vlan-list]
Parameters
vlanlist (Optional)DisplaysSIDsassignedtospecificVLAN(s).
Defaults
Ifnotspecified,SIDassignmentwillbedisplayedforallVLANs.
Mode
Example
ThisexampleshowshowtodisplaytheSIDsmappedtoVLAN1.Inthiscase,SIDs2,16and42 aremappedtoVLAN1.Forthisinformationtodisplay,theSIDinstancemustbecreatedusingthe setspantreemsticommandasdescribedinsetspantreemstionpage 612,andtheFIDsmust bemappedtoSID 1usingthesetspantreemstmapcommandasdescribedinsetspantree mstmaponpage 614:
D2(su)->show spantree vlanlist 1 The following SIDS are assigned to VLAN 1: 2 16 42
show spantree mstcfgid

UsethiscommandtodisplaytheMSTconfigurationidentifierelements,includingformatselector, configurationname,revisionlevel,andconfigurationdigest.
Syntax
show spantree mstcfgid
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaytheMSTconfigurationidentifierelements.Inthiscase,the defaultrevisionlevelof0,andthedefaultconfigurationname(astringrepresentingthebridge MACaddress)havenotbeenchanged.Forinformationonusingthesetspantreemstcfgid commandtochangethesesettings,refertosetspantreemstcfgidonpage 616:
6-15
set spantree mstcfgid
D2(su)->show spantree mstcfgid MST Configuration Identifier: Format Selector: 0 Configuration Name: 00:01:f4:89:51:94 Revision Level: 0 Configuration Digest: ac:36:17:7f:50:28:3c:d4:b8:38:21:d8:ab:26:de:62
set spantree mstcfgid

UsethiscommandtosettheMSTconfigurationnameand/orrevisionlevel.
Syntax
set spantree mstcfgid {cfgname name | rev level}
Parameters
cfgnamename revlevel SpecifiesanMSTconfigurationname. SpecifiesanMSTrevisionlevel.Validvaluesare065535.
Defaults
None.
Mode
Example
ThisexampleshowshowtosettheMSTconfigurationnametomstconfig:
D2(su)->set spantree mstconfigid cfgname mstconfig
clear spantree mstcfgid

UsethiscommandtoresettheMSTrevisionleveltoadefaultvalueof0,andtheconfiguration nametoadefaultstringrepresentingthebridgeMACaddress.
Syntax
clear spantree mstcfgid
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresettheMSTconfigurationidentifierelementstodefaultvalues:
D2(su)->clear spantree mstcfgid
set spantree priority
set spantree priority

UsethiscommandtosetthedevicesSpanningTreepriority.
Syntax
set spantree priority priority [sid]
Parameters
priority Specifiesthepriorityofthebridge.Validvaluesarefrom0to61440(in incrementsof4096),with0indicatinghighestpriorityand61440 lowestpriority. (Optional)SetsthepriorityonaspecificSpanningTree.Validvalues are04094.Ifnotspecified,SID 0isassumed.
sid
Defaults
Ifsidisnotspecified,prioritywillbesetonSpanningTree0.
Mode
Usage
Thedevicewiththehighestpriority(lowestnumericalvalue)becomestheSpanningTreeroot device.Ifalldeviceshavethesamepriority,thedevicewiththelowestMACaddresswillthen becometherootdevice.Dependingonthebridgeprioritymode(setwiththesetspantree bridgeprioritymodecommanddescribedinsetspantreebridgeprioritymodeonpage 610, somepriorityvaluesmayberoundedupordown.
Example
Thisexampleshowshowtosetthebridgepriorityto4096onSID1:
D2(su)->set spantree priority 4096 1
clear spantree priority

UsethiscommandtoresettheSpanningTreeprioritytothedefaultvalueof32768.
Syntax
clear spantree priority [sid]
Parameters
sid (Optional)ResetsthepriorityonaspecificSpanningTree.Validvalues are04094.Ifnotspecified,SID 0isassumed.
Defaults
Ifsidisnotspecified,prioritywillberesetonSpanningTree0.
Mode
set spantree hello
Example
ThisexampleshowshowtoresetthebridgepriorityonSID1:
D2(su)->clear spantree priority 1
set spantree hello

UsethiscommandtosetthedevicesSpanningTreehellotime,Thisisthetimeinterval(in seconds)thedevicewilltransmitBPDUsindicatingitisactive.
Syntax
set spantree hello interval
Parameters
interval Specifiesthenumberofsecondsthesystemwaitsbeforebroadcastinga bridgehellomessage(amulticastmessageindicatingthatthesystemis active).Validvaluesare110.
Defaults
None.
Mode
Example
ThisexampleshowshowtogloballysettheSpanningTreehellotimeto10seconds:
D2(su)->set spantree hello 10
clear spantree hello

UsethiscommandtoresettheSpanningTreehellotimetothedefaultvalueof2seconds.
Syntax
clear spantree hello
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtogloballyresettheSpanningTreehellotime:
D2(su)->clear spantree hello
set spantree maxage
set spantree maxage

Usethiscommandtosetthebridgemaximumagingtime.
Syntax
set spantree maxage agingtime
Parameters
agingtime Specifiesthemaximumnumberofsecondsthatthesystemretainsthe informationreceivedfromotherbridgesthroughSTP.Validvaluesare6 40.
Defaults
None.
Mode
Usage
Thebridgemaximumagingtimeisthemaximumtime(inseconds)adevicecanwaitwithout receivingaconfigurationmessage(bridgehello)beforeattemptingtoreconfigure.Alldevice ports(exceptfordesignatedports)shouldreceiveconfigurationmessagesatregularintervals. AnyportthatagesoutSTPinformationprovidedinthelastconfigurationmessagebecomesthe designatedportfortheattachedLAN.Ifitisarootport,anewrootportisselectedfromamong thedeviceportsattachedtothenetwork.
Example
Thisexampleshowshowtosetthemaximumagingtimeto25seconds:
D2(su)->set spantree maxage 25
clear spantree maxage

UsethiscommandtoresetthemaximumagingtimeforaSpanningTreetothedefaultvalueof20 seconds.
Syntax
clear spantree maxage
Parameters
None.
Defaults
None.
Mode
6-19
set spantree fwddelay
Example
Thisexampleshowshowtogloballyresetthemaximumagingtime:
D2(su)->clear spantree maxage
set spantree fwddelay

UsethiscommandtosettheSpanningTreeforwarddelay.
Syntax
set spantree fwddelay delay
Parameters
delay Specifiesthenumberofsecondsforthebridgeforwarddelay.Validvalues are430.
Defaults
None.
Mode
Usage
Theforwarddelayisthemaximumtime(inseconds)therootdevicewillwaitbeforechanging states(i.e.,listeningtolearningtoforwarding).Thisdelayisrequiredbecauseeverydevicemust receiveinformationabouttopologychangesbeforeitstartstoforwardframes.Inaddition,each portneedstimetolistenforconflictinginformationthatwouldmakeitreturntoablockingstate; otherwise,temporarydataloopsmightresult.
Example
Thisexampleshowshowtogloballysetthebridgeforwarddelayto16seconds:
D2(su)->set spantree fwddelay 16
clear spantree fwddelay

UsethiscommandtoresettheSpanningTreeforwarddelaytothedefaultsettingof15seconds.
Syntax
clear spantree fwddelay
Parameters
None.
Defaults
None.
6-20
show spantree backuproot
Mode
Example
Thisexampleshowshowtogloballyresetthebridgeforwarddelay:
D2(su)->clear spantree fwddelay
show spantree backuproot

UsethiscommandtodisplaythebackuprootstatusforanMSTinstance.
Syntax
show spantree backuproot [sid]
Parameters
sid (Optional)DisplaybackuprootstatusforaspecificSpanningTree identifier.Validvaluesare04094.Ifnotspecified,SID0isassumed.
Defaults
IfaSIDisnotspecified,thenstatuswillbeshownforSpanningTreeinstance0.
Mode
Example
ThisexampleshowshowtodisplaythestatusofthebackuprootfunctiononSID0:
D2(rw)->show spantree backuproot Backup root is set to disable on sid 0
set spantree backuproot

UsethiscommandtoenableordisabletheSpanningTreebackuprootfunctionontheswitch.
Syntax
set spantree backuproot sid {disable | enable}
Parameters
sid disable|enable SpecifiestheSpanningTreeinstanceonwhichtoenableordisablethe backuprootfunction.Validvaluesare04094. Enablesordisablesthebackuprootfunction.
Defaults
None.
Mode
clear spantree backuproot
Usage
TheSpanningTreebackuprootfunctionisdisabledbydefaultontheDSeries.Whenthisfeature isenabledandtheswitchisdirectlyconnectedtotherootbridge,staleSpanningTreeinformation ispreventedfromcirculatingiftherootbridgeislost.Iftherootbridgeislost,thebackuprootwill dynamicallyloweritsbridgeprioritysothatitwillbeselectedasthenewrootoverthelostroot bridge.
Example
ThisexampleshowshowtoenablethebackuprootfunctiononSID2:
D2(rw)->set spantree backuproot 2 enable
clear spantree backuproot

UsethiscommandtoresettheSpanningTreebackuprootfunctiontothedefaultstateofdisabled.
Syntax
clear spantree backuproot sid
Parameters
sid SpecifiestheSpanningTreeonwhichtoclearthebackuproot function.Validvaluesare04094.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresetthebackuprootfunctiontodisabledonSID2:
D2(rw)->clear spantree backuproot 2
show spantree tctrapsuppress

UsethiscommandtodisplaythestatusoftopologychangetrapsuppressiononRapidSpanning Treeedgeports.
Syntax
show spantree tctrapsuppress
Parameters
None.
Defaults
None.
6-22
set spantree tctrapsuppress
Mode
Example
Thisexampleshowshowtodisplaythestatusoftopologychangetrapsuppression:
D2(rw)->show spantree tctrapsuppress Topology change Trap Suppression is set to enabled
set spantree tctrapsuppress

UsethiscommandtodisableorenabletopologychangetrapsuppressiononRapidSpanningTree edgeports.
Syntax
set spantree tctrapsuppress {disable | enable}
Parameters
disable|enable Disablesorenablestopologychangetrapsuppression.
Defaults
None.
Mode
Usage
Bydefault,RSTPnonedge(bridge)portsthattransitiontoforwardingorblockingcausethe switchtoissueatopologychangetrap.Whentopologychangetrapsuppressionisenabled,which isthedevicedefault,edgeports(suchasendstationPCs)arepreventedfromsendingtopology changetraps.Thisisbecausethereisusuallynoneedfornetworkmanagementtomonitoredge portSTPtransitionstates,suchaswhenPCsarepoweredon.Whentopologychangetrap suppressionisdisabled,allports,includingedgeandbridgeports,willtransmittopologychange traps.
Example
ThisexampleshowshowtoallowRapidSpanningTreeedgeportstotransmittopologychange traps:
D2(rw)->set spantree tctrapsuppress disable
clear spantree tctrapsuppress

UsethiscommandtoclearthestatusoftopologychangetrapsuppressiononRapidSpanningTree edgeportstothedefaultstateofenabled(edgeporttopologychangesdonotgeneratetraps).
Syntax
clear spantree tctrapsuppress
6-23
set spantree protomigration
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtocleartopologychangetrapsuppressionsetting:
D2(rw)->clear spantree tctrapsuppress
set spantree protomigration

UsethiscommandtoresettheprotocolstatemigrationmachineforoneormoreSpanningTree ports.WhenoperatinginRSTPmode,thisforcesaporttotransmitMSTPBPDUs.
Syntax
set spantree protomigration <port-string>
Parameters
portstring Resettheprotocolstatemigrationmachineforspecificport(s).Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
None.
Mode
Example
Thisexampleshowshowtoresettheprotocolstatemigrationmachineonport20:
D2(su)->set spantree protomigration ge.1.20
show spantree spanguard

UsethiscommandtodisplaythestatusoftheSpanningTreeSpanGuardfunction.
Syntax
show spantree spanguard
Parameters
None.
6-24
set spantree spanguard
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaytheSpanGuardfunctionstatus:
D2(su)->show spantree spanguard Spanguard is disabled
set spantree spanguard

UsethiscommandtoenableordisabletheSpanningTreeSpanGuardfunction.
Syntax
set spantree spanguard {enable | disable}
Parameters
enable|disable EnablesordisablestheSpanGuardfunction.
Defaults
None.
Mode
Usage
SpanGuardisdesignedtodisable,orlockoutanedgeportwhenanunexpectedBPDUis received.Theportcanbeconfiguredtobereenabledafterasettimeperiod,oronlyaftermanual intervention. Aportcanbedefinedasanedge(user)portusingthesetspantreeadminedgecommand, describedinsetspantreeadminedgeonpage 637.Aportdesignatedasanedgeportis expectedtobeconnectedtoaworkstationorotherendusertypeofdevice,andnottoanother switchinthenetwork.WhenSpanguardisenabled,ifanonloopbackBPDUisreceivedonan edgeport,theSpanningTreestateofthatportwillbechangedtoblockingandwillnolonger forwardtraffic.Theportwillremaindisableduntiltheamountoftimedefinedbysetspantree spanguardtimeout(setspantreespanguardtimeoutonpage 626)haspassedsincethelastseen BPDU,theportismanuallyunlocked(setorclearspantreespanguardlock,clear/setspantree spanguardlockonpage 628),theconfigurationoftheportischangedsoitisnotlongeranedge port,ortheSpanGuardfunctionisdisabled. SpanGuardisenabledanddisabledonlyonaglobalbasis.Bydefault,SpanGuardisdisabledand SpanGuardtrapsareenabled.
Example
ThisexampleshowshowtoenabletheSpanGuardfunction:
D2(rw)->set spantree spanguard enable
clear spantree spanguard

UsethiscommandtoresetthestatusoftheSpanningTreeSpanGuardfunctiontodisabled.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresetthestatusoftheSpanGuardfunctiontodisabled:
D2(rw)->clear spantree spanguard
show spantree spanguardtimeout

UsethiscommandtodisplaytheSpanningTreeSpanGuardtimeoutsetting.
Syntax
show spantree spanguardtimeout
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaytheSpanGuardtimeoutsetting:
D2(su)->show spantree spanguardtimeout Spanguard timeout: 300
set spantree spanguardtimeout

Usethiscommandtosettheamountoftime(inseconds)anedgeportwillremainlockedbythe SpanGuardfunction.
6-26
clear spantree spanguardtimeout
Syntax
set spantree spanguardtimeout timeout
Parameters
timeout Specifiesatimeoutvalueinseconds.Validvaluesare0to65535. Avalueof0willkeeptheportlockeduntilmanuallyunlocked.Thedefault valueis300seconds.
Defaults
None.
Mode
Example
ThisexampleshowshowtosettheSpanGuardtimeoutto600seconds:
D2(su)->set spantree spanguardtimeout 600

UsethiscommandtoresettheSpanningTreeSpanGuardtimeouttothedefaultvalueof300 seconds.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresettheSpanGuardtimeoutto300seconds:
D2(rw)->clear spantree spanguardtimeout
show spantree spanguardlock

UsethiscommandtodisplaytheSpanGuardlockstatusofoneormoreports.
Syntax
show spantree spanguardlock [port-string]
6-27
clear / set spantree spanguardlock
Parameters
portstring (Optional)Specifiestheport(s)forwhichtoshowSpanGuardlockstatus. Foradetaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
Ifnoportstringisspecified,theSpanGuardlockstatusforallportsisdisplayed.
Mode
Example
ThisexampleshowshowtodisplaytheSpanGuardlockstatusforge.1.1:
D2(su)->show spantree spanguardlock ge.1.1 Port ge.1.1 is Unlocked
clear / set spantree spanguardlock

UseeitherofthesecommandstounlockoneormoreportslockedbytheSpanningTree SpanGuardfunction.WhenSpanGuardisenabled,itlocksportsthatreceiveBPDUswhenthose portshavebeendefinedasedge(user)ports(asdescribedinsetspantreeadminedgeon page 637).
Syntax
clear spantree spanguardlock port-string set spantree spanguardlock port-string
Parameters
portstring Specifiesport(s)tounlock.Foradetaileddescriptionofpossibleportstring values,refertoPortStringSyntaxUsedintheCLIonpage 41.
Defaults
None.
Mode
Example
Thisexampleshowshowtounlockportge.1.16:
D2(rw)->clear spantree spanguardlock ge.1.16
show spantree spanguardtrapenable

UsethiscommandtodisplaythestateoftheSpanningTreeSpanGuardtrapfunction.
6-28
set spantree spanguardtrapenable
Syntax
show spantree spanguardtrapenable
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaythestateoftheSpanGuardtrapfunction:
D2(ro)->show spantree spanguardtrapenable Spanguard SNMP traps are enabled
set spantree spanguardtrapenable

UsethiscommandtoenableordisablethesendingofanSNMPtrapmessagewhenSpanGuard haslockedaport.
Syntax
set spantree spanguardtrapenable {disable | enable}
Parameters
disable|enable DisablesorenablessendingSpanGuardtraps.Bydefault,sendingtraps isenabled.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisabletheSpanGuardtrapfunction:
D2(su)->set spantree spanguardtrapenable disable
clear spantree spanguardtrapenable

UsethiscommandtoresettheSpanningTreeSpanGuardtrapfunctionbacktothedefaultstateof enabled.
Syntax
clear spantree spanguardtrapenable
6-29
show spantree legacypathcost
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresettheSpanGuardtrapfunctiontoenabled:
D2(rw)->clear spantree spanguardtrapenable

UsethiscommandtodisplaythedefaultSpanningTreepathcostsetting.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaythedefaultSpanningTreepathcostsetting.
D2(su)->show spantree legacypathcost Legacy Path Cost is disabled.
set spantree legacypathcost

Usethiscommandtoenableordisablelegacy(802.1D)pathcostvalues.
Syntax
set spantree legacypathcost {disable | enable}
Parameters
disable enable Use802.1t2001valuestocalculatepathcost. Use802.1d1998valuestocalculatepathcost.
6-30
clear spantree legacypathcost
Defaults
None.
Mode
Usage
Bydefault,legacypathcostisdisabled.Enablingthedevicetocalculatelegacypathcostsaffects therangeofvalidvaluesthatcanbeenteredinthesetspantreeadminpathcostcommand.
Example
Thisexampleshowshowtosetthedefaultpathcostvaluesto802.1D.
D2(rw)->set spantree legacypathcost enable

UsethiscommandtosettheSpanningTreedefaultvalueforlegacypathcostto802.1tvalues.
Syntax
Defaults
None.
Mode
Example
Thisexampleclearsthelegacypathcostto802.1tvalues.
D2(rw)->clear spantree legacypathcost
Configuring Spanning Tree Port Parameters

Purpose
TodisplayandsetSpanningTreeportparameters.
Commands
For information about... set spantree portadmin clear spantree portadmin show spantree portadmin Refer to page... 6-32 6-32 6-33
6-31
set spantree portadmin
For information about... show spantree portpri set spantree portpri clear spantree portpri show spantree adminpathcost set spantree adminpathcost clear spantree adminpathcost show spantree adminedge set spantree adminedge clear spantree adminedge
Refer to page... 6-33 6-34 6-35 6-35 6-36 6-36 6-37 6-37 6-38
set spantree portadmin

UsethiscommandtodisableorenabletheSpanningTreealgorithmononeormoreports.
Syntax
set spantree portadmin port-string {disable | enable}
Parameters
portstring Specifiestheport(s)forwhichtoenableordisableSpanningTree.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41. DisablesorenablesSpanningTree.
disable|enable
Defaults
None.
Mode
Example
ThisexampleshowshowtodisableSpanningTreeonge.1.5:
D2(rw)->set spantree portadmin ge.1.5 disable
clear spantree portadmin

UsethiscommandtoresetthedefaultSpanningTreeadminstatustoenableononeormoreports.
Syntax
clear spantree portadmin port-string
6-32
show spantree portadmin
Parameters
portstring Resetsthedefaultadminstatusonspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresetthedefaultSpanningTreeadminstatetoenableonge.1.12:
D2(rw)->clear spantree portadmin ge.1.12
show spantree portadmin

UsethiscommandtodisplaythestatusoftheSpanningTreealgorithmononeormoreports.
Syntax
show spantree portadmin [port port-string]
Parameters
portportstring (Optional)Displaysstatusforspecificport(s).Foradetaileddescriptionof possibleportstringvalues,refertoPortStringSyntaxUsedintheCLI onpage 41.
Defaults
Ifportstringisnotspecified,statuswillbedisplayedforallports.
Mode
Example
Thisexampleshowshowtodisplayportadminstatusforge.1.1:
D2(ro)->show spantree portadmin port ge.1.1 Port ge.1.1 has portadmin set to enabled
show spantree portpri

UsethiscommandtoshowtheSpanningTreepriorityforoneormoreports.Portpriorityisa componentoftheportID,whichisoneelementusedindeterminingSpanningTreeportroles.
Syntax
show spantree portpri [port port-string] [sid sid]
6-33
set spantree portpri
Parameters
portportstring (Optional)Specifiestheport(s)forwhichtodisplaySpanningTreepriority. Foradetaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41. (Optional)DisplaysportpriorityforaspecificSpanningTreeidentifier. Validvaluesare04094.Ifnotspecified,SID0isassumed.
sidsid
Defaults
Ifportstringisnotspecified,portprioritywillbedisplayedforallSpanningTreeports. Ifsidisnotspecified,portprioritywillbedisplayedforSpanningTree0.
Mode
Example
Thisexampleshowshowtodisplaytheportpriorityforge.2.7:
D2(su)->show spantree portpri port ge.2.7 Port ge.2.7 has a Port Priority of 128 on SID 0
set spantree portpri

UsethiscommandtosetaportsSpanningTreepriority.
Syntax
set spantree portpri port-string priority [sid sid]
Parameters
portstring Specifiestheport(s)forwhichtosetSpanningTreeportpriority.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41. SpecifiesanumberthatrepresentsthepriorityofalinkinaSpanningTree bridge.Validvaluesarefrom0to240(inincrementsof16)with0 indicatinghighpriority. (Optional)SetsportpriorityforaspecificSpanningTreeidentifier.Valid valuesare04094.Ifnotspecified,SID0isassumed.
priority
sidsid
Defaults
Ifsidisnotspecified,portprioritywillbesetforSpanningTree0.
Mode
Example
Thisexampleshowshowtosetthepriorityofge.1.3to240onSID1
D2(su)->set spantree portpri ge.1.3 240 sid 1
6-34
clear spantree portpri
clear spantree portpri

UsethiscommandtoresetthebridgepriorityofaSpanningTreeporttoadefaultvalueof128.
Syntax
clear spantree portpri port-string [sid sid]
Parameters
portstring Specifiestheport(s)forwhichtosetSpanningTreeportpriority.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41. (Optional)ResetstheportpriorityforaspecificSpanningTreeidentifier. Validvaluesare04094.Ifnotspecified,SID0willbeassumed.
sidsid
Defaults
Ifsidisnotspecified,portprioritywillbesetforSpanningTree0.
Mode
Example
Thisexampleshowshowtoresetthepriorityofge.1.3to128onSID1
D2(su)->clear spantree portpri ge.1.3 sid 1
show spantree adminpathcost

UsethiscommandtodisplaytheadminpathcostforaportononeormoreSpanningTrees.
Syntax
show spantree adminpathcost [port port-string] [sid sid]
Parameters
portportstring (Optional)Displaystheadminpathcostvalueforspecificport(s).Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41. (Optional)DisplaystheadminpathcostforaspecificSpanningTree identifier.Validvaluesare04094.Ifnotspecified,SID0willbeassumed.
sidsid
Defaults
Ifportstringisnotspecified,adminpathcostforallSpanningTreeportswillbedisplayed. Ifsidisnotspecified,adminpathcostforSpanningTree0willbedisplayed.
Mode
6-35
set spantree adminpathcost
Example
Thisexampleshowshowtodisplaytheadminpathcostforge.3.4onSID1:
D2(su)->show spantree adminpathcost port ge.3.4 sid 1 Port ge.3.4 has a Port Admin Path Cost of 0 on SID 1
set spantree adminpathcost

UsethiscommandtosettheadministrativepathcostonaportandoneormoreSpanningTrees.
Syntax
set spantree adminpathcost port-string cost [sid sid]
Parameters
portstring Specifiestheport(s)onwhichtosetanadminpathcost.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41. Specifiestheportpathcost.Va1idvaluesare0200000000. (Optional)SetstheadminpathcostforaspecificSpanningTreeidentifier. Validvaluesare04094.Ifnotspecified,SID0willbeassumed.
cost sidsid
Defaults
Ifsidisnotspecified,adminpathcostwillbesetforSpanningTree0.
Mode
Example
Thisexampleshowshowtosettheadminpathcostto200forge.3.2onSID1:
D2(su)->set spantree adminpathcost ge.3.2 200 sid 1
clear spantree adminpathcost

UsethiscommandtoresettheSpanningTreedefaultvalueforportadminpathcostto0.
Syntax
clear spantree adminpathcost port-string [sid sid]
Parameters
portstring Specifiestheport(s)forwhichtoresetadminpathcost.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntax UsedintheCLIonpage 41. (Optional)ResetstheadminpathcostforspecificSpanningTree(s). Validvaluesare04094.Ifnotspecified,SID0isassumed.
sidsid
6-36
show spantree adminedge
Defaults
Ifsidisnotspecified,adminpathcostwillberesetforSpanningTree0.
Mode
Example
Thisexampleshowshowtoresettheadminpathcostto0forge.3.2onSID1:
D2(su)->clear spantree adminpathcost ge.3.2 sid 1
show spantree adminedge

Usethiscommandtodisplaytheedgeportadministrativestatusforaport.
Syntax
show spantree adminedge [port port-string]
Parameters
portstring (Optional)Displaysedgeportadministrativestatusforspecific port(s).Foradetaileddescriptionofpossibleportstringvalues, refertoPortStringSyntaxUsedintheCLIonpage 41.
Defaults
IfportstringisnotspecifiededgeportadministrativestatuswillbedisplayedforallSpanningTree ports.
Mode
Example
Thisexampleshowshowtodisplaytheedgeportstatusforge.3.2:
D2(su)->show spantree adminedge port ge.3.2 Port ge.3.2 has a Port Admin Edge of Edge-Port
set spantree adminedge

UsethiscommandtosettheedgeportadministrativestatusonaSpanningTreeport.
Syntax
set spantree adminedge port-string {true | false}
Parameters
portstring true|false Specifiestheedgeport.Foradetaileddescriptionofpossibleportstring values,refertoPortStringSyntaxUsedintheCLIonpage 41. Enables(true)ordisables(false)thespecifiedportasaSpanningTreeedge port.
clear spantree adminedge
Defaults
None.
Mode
Usage
Thedefaultbehavioroftheedgeportadministrativestatusbeginswiththevaluesettofalse initiallyafterthedeviceispoweredup.IfaSpanningTreeBDPUisnotreceivedontheportwithin afewseconds,thestatussettingchangestotrue.
Example
Thisexampleshowshowtosetge.1.11asanedgeport:
D2(su)->set spantree adminedge ge.1.11 true
clear spantree adminedge

UsethiscommandtoresetaSpanningTreeporttononedgestatus.
Syntax
clear spantree adminedge port-string
Parameters
portstring Specifiesport(s)onwhichtoresetedgeportstatus.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
None.
Mode
Example
Thisexampleshowshowtoresetge.1.11asanonedgeport:
D2(su)->clear spantree adminedge ge.1.11
Configuring Spanning Tree Loop Protect Parameters

Purpose
TodisplayandsetSpanningTreeLoopProtectparameters,includingtheglobalparametersof LoopProtectthreshold,window,enablingtraps,anddisputedBPDUthreshold,aswellasperport andport/SIDparameters.SeeLoopProtectonpage 62formoreinformationabouttheLoop Protectfeature.
6-38
set spantree lp
Commands
For information about... set spantree lp show spantree lp clear spantree lp show spantree lplock clear spantree lplock set spantree lpcapablepartner show spantree lpcapablepartner clear spantree lpcapablepartner set spantree lpthreshold show spantree lpthreshold clear spantree lpthreshold set spantree lpwindow show spantree lpwindow clear spantree lpwindow set spantree lptrapenable show spantree lptrapenable clear spantree lptrapenable set spantree disputedbpduthreshold show spantree disputedbpduthreshold clear spantree disputedbpduthreshold show spantree nonforwardingreason Refer to page... 6-39 6-40 6-41 6-41 6-42 6-42 6-43 6-44 6-44 6-45 6-45 6-46 6-46 6-47 6-47 6-48 6-48 6-48 6-49 6-50 6-50
set spantree lp
UsethiscommandtoenableordisabletheLoopProtectfeatureperportandoptionally,perSID. TheLoopProtectfeatureisdisabledbydefault.SeeLoopProtectonpage 2.formore information.
Syntax
set spantree lp port-string {enable | disable} [sid sid]
Parameters
portstring enable|disable sidsid Specifiesport(s)onwhichtoenableordisabletheLoopProtectfeature. Enablesordisablesthefeatureonthespecifiedport. (Optional)EnablesordisablesthefeatureforspecificSpanningTree(s). Validvaluesare04094.Ifnotspecified,SID0isassumed.
6-39
show spantree lp
Defaults
IfnoSIDisspecified,SID0isassumed.
Mode
Usage
LoopProtecttakesprecedenceoverperportSTPenable/disable(portAdmin).Normally portAdmindisabledwouldcauseaporttogoimmediatelytoforwarding.IfLoopProtectis enabled,thatportshouldgotolisteningandremainthere.
Note: The Loop Protect enable/disable settings for an MSTI port should match those for the CIST port.
Example
ThisexampleshowshowtoenableLoopProtectonge.2.3:
D2(su)->set spantree lp ge.1.11 enable
show spantree lp
UsethiscommandtodisplaytheLoopProtectstatusperportand/orperSID.
Syntax
show spantree lp [port port-string] [sid sid]
Parameters
portstring sidsid (Optional)Specifiesport(s)forwhichtodisplaytheLoopProtect featurestatus. (Optional)SpecifiesthespecificSpanningTree(s)forwhichtodisplay theLoopProtectfeaturestatus.Validvaluesare04094.Ifnot specified,SID0isassumed.
Defaults
Ifnoportstringisspecified,statusisdisplayedforallports. IfnoSIDisspecified,SID0isassumed.
Mode
Example
ThisexampleshowshowtodisplayLoopProtectstatusonge.2.3:
D2(su)->show spantree lp port ge.2.3 LoopProtect is disabled on port ge.2.3 , SI
6-40
clear spantree lp
clear spantree lp
UsethiscommandtoreturntheLoopProtectstatusperportandoptionally,perSID,toitsdefault stateofdisabled.
Syntax
clear spantree lp port-string [sid sid]
Parameters
portstring sidsid Specifiesport(s)forwhichtocleartheLoopProtectfeaturestatus. (Optional)SpecifiesthespecificSpanningTree(s)forwhichtoclearthe LoopProtectfeaturestatus.Validvaluesare04094.Ifnotspecified, SID0isassumed.
Defaults
Mode
Example
ThisexampleshowshowtoreturntheLoopProtectstateonge.2.3todisabled:
D2(rw)->clear spantree lp port ge.2.3
show spantree lplock

UsethiscommandtodisplaytheLoopProtectlockstatusperportand/orperSID.Aportcan becomelockedifaconfigurednumberofLoopProtecteventsoccurduringtheconfigured windowoftime.Seethesetspantreelpthresholdandsetspantreelpwindowcommands.Oncea portisforcedintoblocking(locked),itremainslockeduntilmanuallyunlockedwiththeclear spantreelplockcommand.
Syntax
show spantree lplock [port port-string] [sid sid]
Parameters
portstring sidsid (Optional)Specifiesport(s)forwhichtodisplaytheLoopProtectlock status. (Optional)SpecifiesthespecificSpanningTree(s)forwhichtodisplay theLoopProtectlockstatus.Validvaluesare04094.Ifnotspecified, SID0isassumed.
Defaults
Ifnoportstringisspecified,statusisdisplayedforallports. IfnoSIDisspecified,SID0isassumed.
6-41
clear spantree lplock
Mode
Example
ThisexampleshowshowtodisplayLoopProtectlockstatusonge.1.1:
D2(rw)->show spantree lplock port ge.1.1 The LoopProtect lock status for port ge.1.1 , SID 0 is UNLOCKED
clear spantree lplock

Usethiscommandtomanuallyunlockablockedportandoptionally,perSID.Thedefaultstateis unlocked.
Syntax
clear spantree lplock port-string [sid sid]
Parameters
portstring sidsid Specifiesport(s)forwhichtocleartheLoopProtectlock. (Optional)SpecifiesthespecificSpanningTree(s)forwhichtoclearthe LoopProtectlock.Validvaluesare04094.Ifnotspecified,SID0is assumed.
Defaults
Mode
Example
ThisexampleshowshowtoclearLoopProtectlockfromge.1.1:
D2(rw)->show spantree lplock port ge.1.1 The LoopProtect lock status for port ge.1.1 D2(rw)->clear spantree lplock ge.1.1 D2(rw)->show spantree lplock port ge.1.1 The LoopProtect lock status for port ge.1.1 , SID 0 is LOCKED
, SID 0 is UNLOCKED
set spantree lpcapablepartner

UsethiscommandtospecifyperportwhetherthelinkpartnerisLoopProtectcapable.SeeLoop Protectonpage 2.formoreinformation.
Syntax
set spantree lpcapablepartner port-string {true | false}
Parameters
portstring Specifiesport(s)forwhichtoconfigureaLoopProtectcapablelink partner.
6-42
show spantree lpcapablepartner
true|false
Specifieswhetherthelinkpartneriscapable(true)ornot(false).
Defaults
None.
Mode
Usage
ThedefaultvalueforLoopProtectcapablepartnerisfalse.IftheportisconfiguredwithaLoop Protectcapablepartner(true),thenthefullfunctionalityoftheLoopProtectfeatureisused.Ifthe valueisfalse,thenthereissomeambiguityastowhetheranActivePartnertimeoutisduetoa loopprotectioneventorisanormalsituationduetothefactthatthepartnerportdoesnot transmitAlternateAgreementBPDUs.Therefore,aconservativeapproachistakeninthat designatedportswillnotbeallowedtoforwardunlessreceivingagreementsfromaportwithroot role. Thistypeoftimeoutwillnotbeconsideredaloopprotectionevent.Loopprotectionismaintained bykeepingtheportfromforwardingbutsincethisisnotconsideredaloopeventitwillnotbe factoredintolockingtheport.
Example
ThisexampleshowshowtosettheLoopProtectcapablepartnertotrueforge.1.1:
D2(rw)->set spantree lpcapablepartner ge.1.1 true
show spantree lpcapablepartner

UsethiscommandtotheLoopProtectcapabilityofalinkpartnerforoneormoreports.
Syntax
show spantree lpcapablepartner [port port-string]
Parameters
portstring (Optional)Specifiesport(s)forwhichtodisplayLoopProtectcapability foritslinkpartner.
Defaults
Ifnoportstringisspecified,LoopProtectcapabilityforlinkpartnersisdisplayedforallports.
Mode
Example
ThisexampleshowshowtodisplaytheLoopProtectpartnercapabilityforge.1.1:
D2(rw)->show spantree lpcapablepartner port ge.1.1 Link partner of port ge.1.1 is not LoopProtect-capable
6-43
clear spantree lpcapablepartner
clear spantree lpcapablepartner

UsethiscommandtoresettheLoopProtectcapabilityofportlinkpartnerstothedefaultstateof false.
Syntax
clear spantree lpcapablepartner port-string
Parameters
portstring Specifiesport(s)forwhichtocleartheirlinkpartnersLoopProtect capability(resettofalse).
Defaults
None.
Mode
Example
ThisexampleshowshowtoresettheLoopProtectpartnercapabilityforge.1.1:
D2(rw)->clear spantree lpcapablepartner ge.1.1
set spantree lpthreshold

UsethiscommandtosettheLoopProtecteventthreshold.
Syntax
set spantree lpthreshold value
Parameters
value Specifiesthenumberofeventsthatmustoccurduringtheevent windowinordertolockaport/SID.Thedefaultvalueis3events.A thresholdof0specifiesthatportswillneverbelocked.
Defaults
None.Thedefaulteventthresholdis3.
Mode
Usage
TheLoopProtecteventthresholdisaglobalintegervariablethatprovidesprotectioninthecaseof intermittentfailures.Thedefaultvalueis3.Iftheeventcounterreachesthethresholdwithina givenperiod(theeventwindow),thentheport,forthegivenSID,becomeslocked(thatis,held indefinitelyintheblockingstate).Ifthethresholdis0,theportsareneverlocked.
6-44
show spantree lpthreshold
Example
ThisexampleshowshowtosettheLoopProtectthresholdvalueto4:
D2(rw)->set spantree lpthreshold 4

UsethiscommandtodisplaythecurrentvalueoftheLoopProtecteventthreshold.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaythecurrentLoopProtectthresholdvalue:
D2(rw)->show spantree lpthreshold The Loop Protect event threshold value is 4
clear spantree lpthreshold

UsethiscommandtoreturntheLoopProtecteventthresholdtoitsdefaultvalueof3.
Syntax
clear spantree lpthreshold
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresettheLoopProtecteventthresholdtothedefaultof3:
D2(rw)->clear spantree lpthreshold
6-45
set spantree lpwindow
set spantree lpwindow

UsethiscommandtosettheLoopProtecteventwindowvalueinseconds.
Syntax
set spantree lpwindow value
Parameters
value Specifiesthenumberofsecondsthatcomprisetheperiodduringwhich LoopProtecteventsarecounted.Thedefaulteventwindowis180 seconds.
Defaults
None.
Mode
Usage
TheLoopProtectWindowisatimervalue,inseconds,thatdefinesaperiodduringwhichLoop Protecteventsarecounted.Thedefaultvalueis180seconds.Ifthetimerissetto0,theevent counterisnotresetuntiltheLoopProtecteventthresholdisreached.Ifthethresholdisreached, thatconstitutesaloopprotectionevent.
Example
ThisexampleshowshowtosettheLoopProtecteventwindowto120seconds:
D2(rw)->set spantree lpwindow 120
show spantree lpwindow

UsethiscommandtodisplaythecurrentLoopProtecteventwindowvalue.
Syntax
show spantree lpwindow
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaythecurrentLoopProtectwindowvalue:
D2(rw)->show spantree lpwindow The Loop Protect event window is set to 120 seconds
clear spantree lpwindow

UsethiscommandtoresettheLoopProtecteventwindowtothedefaultvalueof180seconds.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresettheLoopProtecteventwindowtothedefaultof180seconds:
D2(rw)->clear spantree lpwindow
set spantree lptrapenable

UsethiscommandtoenableordisableLoopProtecteventnotification.
Syntax
set spantree lptrapenable {enable | disable}
Parameters
enable|disable EnablesordisablesthesendingofLoopProtecttraps.Defaultis disabled.
Defaults
None.
Mode
Usage
LoopProtecttrapsaresentwhenaLoopProtecteventoccurs,thatis,whenaportgoestolistening duetonotreceivingBPDUs.Thetrapindicatesport,SIDandloopprotectionstatus.
Example
ThisexampleshowshowtoenablesendingofLoopProtecttraps:
D2(rw)->set spantree lptrapenable enable
6-47
show spantree lptrapenable

UsethiscommandtodisplaythecurrentstatusofLoopProtecteventnotification.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaythecurrentLoopProtecteventnotificationstatus:
D2(rw)->show spantree lptrapenable The Loop Protect event notification status is enable
clear spantree lptrapenable

UsethiscommandtoreturntheLoopProtecteventnotificationstatetoitsdefaultstateof disabled.
Syntax
clear spantree lptrapenable
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresettheLoopProtecteventnotificationstatetothedefaultof disabled.
D2(rw)->clear spantree lptrapenable
set spantree disputedbpduthreshold

UsethiscommandtosetthedisputedBPDUthreshold,whichisthenumberofdisputedBPDUs thatmustbereceivedonagivenport/SIDuntiladisputedBPDUtrapissent.
show spantree disputedbpduthreshold
Syntax
set spantree disputedbpduthreshold value
Parameters
value SpecifiesthenumberofdisputedBPDUsthatmustbereceivedona givenport/SIDtocauseadisputedBPDUtraptobesent. Athresholdof0indicatesthattrapsshouldnotbesent.Thedefault valueis0.
Defaults
None.
Mode
Usage
AdisputedBPDUisoneinwhichtheflagsfieldindicatesadesignatedroleandlearning,andthe priorityvectorisworsethanthatalreadyheldbytheport.IfadisputedBPDUisreceivedtheport isforcedtothelisteningstate.Refertothe802.1Q2005standard,IEEEStandardforLocaland MetropolitanAreaNetworksVirtualBridgedLocalAreaNetworks,forafulldescriptionofthedispute mechanism,whichpreventsloopingincasesofonewaycommunication. ThedisputedBPDUthresholdisanintegervariablethatrepresentsthenumberofdisputed BPDUsthatmustbereceivedonagivenport/SIDuntiladisputedBPDUtrapissentandasyslog messageisissued.Forexample,ifthethresholdis10,thenatrapisissuedwhen10,20,30,andso on,disputedBPDUshavebeenreceived. Ifthevalueis0,trapsarenotsent.Thetrapindicatesport,SIDandtotalDisputedBPDUcount. Thedefaultis0.
Example
ThisexampleshowshowtosetthedisputedBPDUthresholdvalueto5:
D2(rw)->set spantree disputedbpduthreshold 5

UsethiscommandtodisplaythecurrentvalueofthedisputedBPDUthreshold.
Syntax
Parameters
None.
Defaults
None.
6-49
clear spantree disputedbpduthreshold
Mode
Example
ThisexampleshowshowtodisplaythecurrentdisputedBPDUthreshold:
D2(rw)->show spantree disputedbpduthreshold The disputed BPDU threshold value is 0

UsethiscommandtoreturnthedisputedBPDUthresholdtoitsdefaultvalueof0,meaningthat disputedBPDUtrapsshouldnotbesent.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresetthedisputedBPDUthresholdtothedefaultof0:
D2(rw)->clear spantree disputedbpduthreshold
show spantree nonforwardingreason

Usethiscommandtodisplaythereasonforplacingaportinanonforwardingstateduetoan exceptionalcondition.
Syntax
show spantree nonforwardingreason port-string [sid sid]
Parameters
portstring sidsid Specifiesport(s)forwhichtodisplaythenonforwardingreason. (Optional)SpecifiesthespecificSpanningTree(s)forwhichtodisplay thenonforwardingreason.Validvaluesare04094.Ifnotspecified, SID0isassumed.
Defaults
Ifnoportstringisspecified,nonforwardingreasonisdisplayedforallports. IfnoSIDisspecified,SID0isassumed.
Mode
Usage
ExceptionalconditionscausingaporttobeplacedinlisteningorblockingstateincludeaLoop Protectevent,receiptofdisputedBPDUs,andloopbackdetection.
Example
Thisexampleshowshowtodisplaythenonforwardingreasononge.1.1:
D2(rw)->show spantree nonforwardingreason port ge.1.1 The non-forwarding reason for port ge.1.1 on SID 0 is None
6-51
6-52
7
802.1Q VLAN Configuration
ThischapterdescribestheDSeriessystemscapabilitiestoimplement802.1QvirtualLANs (VLANs).
For information about... VLAN Configuration Summary Viewing VLANs Creating and Naming Static VLANs Assigning Port VLAN IDs (PVIDs) and Ingress Filtering Configuring the VLAN Egress List Setting the Host VLAN Enabling/Disabling GVRP (GARP VLAN Registration Protocol) Refer to page... 7-1 7-2 7-4 7-6 7-12 7-17 7-19
VLAN Configuration Summary

VirtualLANsallowthenetworkadministratortopartitionnetworktrafficintologicalgroupsand controltheflowofthattrafficthroughthenetwork.Oncethetrafficand,ineffect,theusers creatingthetraffic,areassignedtoaVLAN,thenbroadcastandmulticasttrafficiscontained withintheVLANanduserscanbeallowedordeniedaccesstoanyofthenetworksresources. Also,someoralloftheportsonthedevicecanbeconfiguredasGVRPports,whichenableframes receivedwithaparticularVLANIDandprotocoltobetransmittedonalimitednumberofports. ThiskeepsthetrafficassociatedwithaparticularVLANandprotocolisolatedfromtheotherparts ofthenetwork.
Note: The device can support up to 1024 802.1Q VLANs. The allowable range for VLAN IDs is 1 to 4093. As a default, all ports on the device are assigned to VLAN ID 1, untagged.
Port String Syntax Used in the CLI

ForinformationonhowtodesignateVLANsandportnumbersintheCLIsyntax,refertoPort StringSyntaxUsedintheCLIonpage 41.
Creating a Secure Management VLAN

Bydefaultatstartup,thereisoneVLANconfiguredontheDSeriesdevice.ItisVLANID1,the DEFAULTVLAN.Thedefaultcommunityname,whichdeterminesremoteaccessforSNMP management,issettopublicwithreadwriteaccess.
7-1
Viewing VLANs
IftheDSeriesdeviceistobeconfiguredformultipleVLANs,itmaybedesirabletoconfigurea managementonlyVLAN.ThisallowsastationconnectedtothemanagementVLANtomanage thedevice.Italsomakesmanagementsecurebypreventingconfigurationviaportsassignedto otherVLANs. TocreateasecuremanagementVLAN,youmust:

Step 1. 2. 3. 4. 5. Task Create a new VLAN. Set the PVID for the desired switch port to the VLAN created in Step 1. Add the desired switch port to the egress list for the VLAN created in Step 1. Assign host status to the VLAN. Set a private community name and access policy. Refer to page... 7-4 7-8 7-14 7-17 5-14
ThecommandsusedtocreateasecuremanagementVLANarelistedinTable 729.Thisexample assumesthemanagementstationisattachedtoge.1.1andwantsuntaggedframes. Theprocessdescribedherewouldberepeatedoneverydevicethatisconnectedinthenetworkto ensurethateachdevicehasasecuremanagementVLAN. Table 7-29

To do this... Create a new VLAN and confirm settings.
Command Set for Creating a Secure Management VLAN

Use these commands... set vlan create 2 (set vlan on page 7-4) (Optional) show vlan 2 (show vlan on page 7-3)
Set the PVID to the new VLAN. Add the port to the new VLANs egress list. Remove the port from the default VLANs egress list. Assign host status to the VLAN. Set a private community name and access policy and confirm settings.
set port vlan ge.1.1 2 (set port vlan on page 7-8) set vlan egress 2 ge.1.1 untagged (set vlan egress on page 7-14) clear vlan egress 1 ge.1.1 (clear vlan egress on page 7-14) set host vlan 2 (set host vlan on page 7-17) set snmp community private (set snmp community on page 5-14) (Optional) show snmp community (show snmp community on page 5-13)
Viewing VLANs
Purpose
TodisplayalistofVLANscurrentlyconfiguredonthedevice,todeterminehowoneormore VLANswerecreated,theportsallowedanddisallowedtotransmittrafficbelongingtoVLAN(s), andifthoseportswilltransmitthetrafficwithaVLANtagincluded.
7-2
show vlan
Command
For information about... show vlan Refer to page... 7-3
show vlan
UsethiscommandtodisplayallinformationrelatedtooneormoreVLANs.
Syntax
show vlan [static] [vlan-list] [portinfo [vlan vlan-list | vlan-name] [port portstring]]
Parameters
static (Optional)DisplaysinformationrelatedtostaticVLANs.StaticVLANsare manuallycreatedusingthesetvlancommand(setvlanonpage 74), SNMPMIBs,ortheWebViewmanagementapplication.ThedefaultVLAN, VLAN1,isalwaysstaticallyconfiguredandcantbedeleted.Onlyports thatuseaspecifiedVLANastheirdefaultVLAN(PVID)willbedisplayed. (Optional)DisplaysinformationforaspecificVLANorrangeofVLANs. (Optional)DisplaysVLANattributesrelatedtooneormoreports. (Optional)DisplaysportinformationforoneormoreVLANs. (Optional)Displaysportinformationforoneormoreports.
vlanlist portinfo vlanvlanlist| vlanname portportstring
Defaults
Ifnooptionsarespecified,allinformationrelatedtostaticanddynamicVLANswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayinformationforVLAN1.Inthiscase,VLAN1isnamed DEFAULTVLAN.PortsallowedtotransmitframesbelongingtoVLAN1arelistedasegress ports.PortsthatwontincludeaVLANtagintheirtransmittedframesarelistedasuntagged ports.Therearenoforbiddenports(preventedfromtransmittedframes)onVLAN1:
D2(su)->show vlan 1 VLAN: 1 NAME: DEFAULT VLAN VLAN Type: Default Egress Ports ge.1.1-10, ge.2.1-4, ge.3.1-7, Forbidden Egress Ports None. Untagged Ports ge.1.1-10, ge.2.1-4, ge.3.1-7,
7-3
Creating and Naming Static VLANs
Table 7-30
Output Field VLAN NAME Status VLAN Type Egress Ports
show vlan Output Details

What It Displays... VLAN ID. Name assigned to the VLAN. Whether it is enabled or disabled. Whether it is permanent (static) or dynamic. Ports configured to transmit frames for this VLAN. Ports prevented from transmitted frames for this VLAN. Ports configured to transmit untagged frames for this VLAN.
Forbidden Egress Ports Untagged Ports
Creating and Naming Static VLANs

Purpose
TocreateanewstaticVLAN,ortoenableordisableexistingVLAN(s).
Commands
For information about... set vlan set vlan name clear vlan clear vlan name Refer to page... 7-4 7-5 7-5 7-6
set vlan
UsethiscommandtocreateanewstaticIEEE802.1QVLAN,ortoenableordisableanexisting VLAN.
Syntax
set vlan {create | enable | disable} vlan-list
Parameters
create|enable| disable vlanlist Creates,enablesordisablesVLAN(s). SpecifiesoneormoreVLANIDstobecreated,enabledordisabled.
Defaults
None.
7-4
set vlan name
Mode
Usage
OnceaVLANiscreated,youcanassignitanameusingthesetvlannamecommanddescribedin setvlannameonpage 75. EachVLANIDmustbeunique.IfaduplicateVLANIDisentered,thedeviceassumesthatthe AdministratorintendstomodifytheexistingVLAN. EntertheVLANIDusingauniquenumberbetween1and4093.TheVLANIDsof0and4094and highermaynotbeusedforuserdefinedVLANs.
Examples
ThisexampleshowshowtocreateVLAN3:
D2(su)->set vlan create 3
set vlan name

UsethiscommandtosetorchangetheASCIInameforaneworexistingVLAN.
Syntax
set vlan name vlan-list vlan-name
Parameters
vlanlist vlanname SpecifiestheVLANIDoftheVLAN(s)tobenamed. SpecifiesthestringusedasthenameoftheVLAN(1to32characters).
Defaults
None.
Mode
Example
ThisexampleshowshowtosetthenameforVLAN7togreen:
D2(su)->set vlan name 7 green
clear vlan
UsethiscommandtoremoveastaticVLANfromthelistofVLANsrecognizedbythedevice.
Syntax
clear vlan vlan-list
7-5
clear vlan name
Parameters
vlanlist SpecifiestheVLANIDoftheVLAN(s)toberemoved.
Defaults
None.
Mode
Example
ThisexampleshowshowtoremoveastaticVLAN9fromthedevicesVLANlist:
D2(su)->clear vlan 9
clear vlan name

UsethiscommandtoremovethenameofaVLANfromtheVLANlist.
Syntax
clear vlan name vlan-list
Parameters
vlanlist SpecifiestheVLANIDoftheVLAN(s)forwhichthenamewillbecleared.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearthenameforVLAN9:
D2(su)->clear vlan name 9
Assigning Port VLAN IDs (PVIDs) and Ingress Filtering

Purpose
ToassigndefaultVLANIDstountaggedframesononeormoreports,toconfigureVLANingress filteringandconstraints,andtosettheframediscardmode.
7-6
show port vlan
Commands
For information about... show port vlan set port vlan clear port vlan show port ingress filter set port ingress filter show port discard set port discard Refer to page... 7-7 7-8 7-8 7-9 7-10 7-10 7-11
show port vlan

UsethiscommandtodisplayportVLANidentifier(PVID)information.PVIDdeterminesthe VLANtowhichalluntaggedframesreceivedononeormoreportswillbeclassified.
Syntax
show port vlan [port-string]
Parameters
portstring (Optional)DisplaysPVIDinformationforspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
Ifportstringisnotspecified,portVLANinformationforallportswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayPVIDsassignedtoge.2.1through6.Inthiscase,untagged framesreceivedontheseportswillbeclassifiedtoVLAN1:
D2(su)->show port vlan ge.2.1-6 ge.2.1 is set to 1 ge.2.2 is set to 1 ge.2.3 is set to 1 ge.2.4 is set to 1 ge.2.5 is set to 1 ge.2.6 is set to 1
7-7
set port vlan
set port vlan

UsethiscommandtoconfigurethePVID(portVLANidentifier)foroneormoreports.
Syntax
set port vlan port-string pvid [modify-egress | no-modify-egress]
Parameters
portstring Specifiestheport(s)forwhichtoconfigureaVLANidentifier.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41. SpecifiestheVLANIDoftheVLANtowhichport(s)willbeadded. (Optional)Addsport(s)toVLANsuntaggedegresslistandremovesthem fromotheruntaggedegresslists. (Optional)Doesnotpromptforormakeegresslistchanges.
pvid modifyegress nomodifyegress
Defaults
None.
Mode
Usage
ThePVIDisusedtoclassifyuntaggedframesastheyingressintoagivenport.
Example
Thisexampleshowshowtoaddge.1.10totheportVLANlistofVLAN4(PVID4).
D2(su)->set vlan create 4 D2(su)->set port vlan ge.1.10 4 modify-egress
clear port vlan

Usethiscommandtoresetaports802.1QportVLANID(PVID)tothehostVLANID1.
Note: The following command will reset the specified ports egress status to tagged. To set the specified ports back to the default egress status of untagged, you must issue the set port vlan command as described on page 7-8.
Syntax
clear port vlan port-string
Parameters
portstring Specifiestheport(s)toberesettothehostVLANID1.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
7-8
show port ingress filter
Defaults
None.
Mode
Example
Thisexampleshowshowtoresetportsge.1.3through11toaVLAN IDof1(HostVLAN):
D2(su)->clear port vlan ge.1.3-11
show port ingress filter

Usethiscommandtoshowallportsthatareenabledforportingressfiltering,whichlimits incomingVLANIDframesaccordingtoaportVLANegresslist.IftheVLANIDspecifiedinthe receivedframeisnotontheportsVLANegresslist,thenthatframeisdroppedandnot forwarded.
Syntax
show port ingress-filter [port-string]
Parameters
portstring (Optional)Specifiestheport(s)forwhichtodisplayingressfilteringstatus. Foradetaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
Ifportstringisnotspecified,ingressfilteringstatusforallportswillbedisplayed.
Mode
Example
Thisexampleshowshowtodisplaytheportingressfilterstatusforports10through15inslot1. Inthiscase,theportsaredisabledforingressfiltering:
D2(su)->show port ingress-filter ge.1.10-15 Port State -------- --------ge.1.10 disabled ge.1.11 disabled ge.1.12 disabled ge.1.13 disabled ge.1.14 disabled ge.1.15 disabled
7-9
set port ingress filter
set port ingress filter

UsethiscommandtodiscardallframesreceivedwithaVLANIDthatdontmatchtheports VLANegresslist.
Syntax
set port ingress-filter port-string {disable | enable}
Parameters
portstring Specifiestheport(s)onwhichtoenableofdisableingressfiltering.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41. Disablesorenablesingressfiltering.
disable|enable
Defaults
None.
Mode
Usage
Wheningressfilteringisenabledonaport,theVLANIDsofincomingframesarecomparedtothe portsegresslist.IfthereceivedVLANIDdoesnotmatchaVLANIDontheportsegresslist, thentheframeisdropped. IngressfilteringisimplementedaccordingtotheIEEE802.1Qstandard.
Example
Thisexampleshowshowtoenableportingressfilteringonge.1.3:
D2(su)->set port ingress-filter ge.1.3 enable
show port discard

Usethiscommandtodisplaytheframediscardmodeforoneormoreports.Portscanbesetto discardframesbasedonwhetherornottheframecontainsaVLANtag.Theycanalsobesetto discardbothtaggedanduntaggedframes,orneither.
Syntax
show port discard [port-string]
Parameters
portstring (Optional)Displaystheframediscardmodeforspecificport(s).Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
If port-string is not specified, frame discard mode will be displayed for all ports.
7-10
set port discard
Mode
Example
Thisexampleshowshowtodisplaytheframediscardmodeforge.2.7.Inthiscase,theporthas beensettodiscardalltaggedframes:
D2(su)->show port discard ge.2.7 Port Discard Mode ------------ ------------ge.2.7 tagged
set port discard

Usethiscommandtosettheframediscardmodeononeormoreports.
Syntax
set port discard port-string {tagged | untagged | both | none}
Parameters
portstring Specifiestheport(s)forwhichtosetframediscardmode.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41. TaggedDiscardallincoming(received)taggedpacketsonthedefined port(s). UntaggedDiscardallincominguntaggedpackets. BothAlltrafficwillbediscarded(taggedanduntagged). NoneNopacketswillbediscarded.
tagged| untagged|both| none
Defaults
None.
Mode
Usage
Theoptionsaretodiscardallincomingtaggedframes,allincominguntaggedframes,neither (essentiallyallowalltraffic),orboth(essentiallydiscardingalltraffic). Acommonpracticeistodiscardalltaggedpacketonuserports.TypicallyanAdministratordoes notwanttheendusersdefiningwhatVLANtheyuseforcommunication.
Example
Thisexampleshowshowtodiscardalltaggedframesreceivedonportge.3.3:
D2(su)->set port discard ge.3.3 tagged
7-11
Configuring the VLAN Egress List
Configuring the VLAN Egress List

Purpose
ToassignorremoveportsontheegresslistofaparticularVLAN.Thisdetermineswhichportson theswitchwillbeeligibletotransmitframesforaparticularVLAN.Forexample,ports1,5,7,8 couldbeallowedtotransmitframesbelongingtoVLAN20andports7,8,9,10couldbeallowedto transmitframestaggedwithVLAN30(aportcanbelongtomultipleVLANEgresslists).Note thatthePortEgresslistforports7and8wouldcontainbothVLAN20and30. Theportegresstypeforallportscanbesettotagged,forbidden,oruntagged.Ingeneral,VLANs havenoegress(exceptforVLAN1)untiltheyareconfiguredbystaticadministration,orthrough dynamicmechanismssuchasGVRP. SettingaporttoforbiddenpreventsitfromparticipatinginthespecifiedVLANandensuresthat anydynamicrequests(eitherthroughGVRPordynamicegress)fortheporttojointheVLANwill beignored.Settingaporttountaggedallowsittotransmitframeswithoutatagheader.This settingisusuallyusedtoconfigureaportconnectedtoanenduserdevice.Framessentbetween VLANawareswitchesaretypicallytagged. ThedefaultVLANdefaultsitsegresstountaggedforallports.
Commands
For information about... show port egress set vlan forbidden set vlan egress clear vlan egress show vlan dynamicegress set vlan dynamicegress Refer to page... 7-12 7-13 7-14 7-14 7-15 7-16
show port egress

UsethiscommandtodisplaytheVLANmembershipforoneormoreports.
Syntax
show port egress [port-string]
Parameters
portstring (Optional)DisplaysVLANmembershipforspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
Ifportstringisnotspecified,VLANmembershipwillbedisplayedforallports.
7-12
set vlan forbidden
Mode
Example
ThisexampleshowsyouhowtoshowVLANegressinformationforge.1.1through3.Inthiscase, allthreeportsareallowedtotransmitVLAN1framesastaggedandVLAN10framesas untagged.BotharestaticVLANs:
D2(su)->show port egress ge.1.1-3 Port Vlan Egress Registration Number Id Status Status ------------------------------------------------------ge.1.1 1 tagged static ge.1.1 10 untagged static ge.1.2 1 tagged static ge.1.2 10 untagged static ge.1.3 1 tagged static ge.1.3 10 untagged static
set vlan forbidden

UsethiscommandtopreventoneormoreportsfromparticipatinginaVLAN.Thissetting instructsthedevicetoignoredynamicrequests(eitherthroughGVRPordynamicegress)forthe porttojointheVLAN.
Syntax
set vlan forbidden vlan-id port-string
Parameters
vlanid portstring SpecifiestheVLANforwhichtosetforbiddenport(s). Specifiestheport(s)tosetasforbiddenforthespecifiedvlanid.
Defaults
None.
Mode
Example
Thisexampleshowsyouhowtosetge.1.3toforbiddenforVLAN6:
D2(su)->set vlan forbidden 6 ge.1.3
7-13
set vlan egress
set vlan egress

UsethiscommandtoaddportstotheVLANegresslistforthedevice,ortopreventoneormore portsfromparticipatinginaVLAN.Thisdetermineswhichportswilltransmitframesfora particularVLAN.
Syntax
set vlan egress vlan-list port-string [untagged | forbidden | tagged]
Parameters
vlanlist portstring
Specifies the VLAN where a port(s) will be added to the egress list.
SpecifiesoneormoreportstoaddtotheVLANegresslistofthespecified vlanlist.Foradetaileddescriptionofpossibleportstringvalues,referto PortStringSyntaxUsedintheCLIonpage 41. (Optional)Addsthespecifiedportsas: untaggedCausestheport(s)totransmitframeswithoutanIEEE 802.1Qheadertag. forbiddenInstructsthedevicetoignoredynamicrequests(either throughGVRPordynamicegress)fromtheport(s)tojointheVLAN anddisallowsegressonthatport. taggedCausestheport(s)totransmit802.1Qtaggedframes.
untagged| forbidden| tagged
Defaults
Ifuntagged,forbiddenortaggedisnotspecified,theportwillbeaddedtotheVLANegresslist astagged.
Mode
Examples
Thisexampleshowshowtoaddge.1.5through10totheegresslistofVLAN7.Thismeansthat theseportswilltransmitVLAN7framesastagged:
D2(su)->set vlan egress 7 ge.1.5-10 untagged
Thisexampleshowshowtoforbidports13through15inslot1fromjoiningVLAN7anddisallow egressonthoseports:
D2(su)->set vlan egress 7 ge.1.13-15 forbidden
Thisexampleshowshowtoallowport2inslot1totransmitVLAN7framesasuntagged:
D2(su)->set vlan egress 7 ge.1.2 untagged
clear vlan egress

UsethiscommandtoremoveportsfromaVLANsegresslist.
Note: The following command will reset the specified ports egress status to tagged. To set the specified ports back to the default egress status of untagged, you must issue the set vlan egress command as described on page 7-14.
7-14
show vlan dynamicegress
Syntax
clear vlan egress vlan-list port-string [forbidden]
Parameters
vlanlist portstring SpecifiesthenumberoftheVLANfromwhichaport(s)willberemoved fromtheegresslist. SpecifiesoneormoreportstoberemovedfromtheVLANegresslistofthe specifiedvlanlist.Foradetaileddescriptionofpossibleportstringvalues, refertoPortStringSyntaxUsedintheCLIonpage 41. (Optional)Clearstheforbiddensettingfromthespecifiedport(s)andresets theport(s)asabletoegressframesifsoconfiguredbyeitherstaticor dynamicmeans.
forbidden
Defaults
Ifforbiddenisnotspecified,taggedanduntaggedsettingswillbecleared.
Mode
Examples
Thisexampleshowshowtoremovege.3.14fromtheegresslistofVLAN 9:
D2(su)->clear vlan egress 9 ge.3.14
ThisexampleshowshowtoremoveallGigabitEthernetportsinslot2fromtheegresslistof VLAN4:
D2(su)->clear vlan egress 4 ge.2.*
show vlan dynamicegress

Usethiscommandtodisplaythestatusofdynamicegress(enabledordisabled)foroneormore VLANs.
Syntax
show vlan dynamicegress [vlan-list]
Parameters
vlanlist (Optional)DisplaysdynamicegressstatusforspecificVLAN(s).
Defaults
Ifvlanlistisnotspecified,thedynamicegressstatusforallVLANswillbedisplayed.
Mode
7-15
set vlan dynamicegress
Example
ThisexampleshowshowtodisplaythedynamicegressstatusforVLANs5055:
D2(rw)->show vlan dynamicegress 50-55 VLAN 50 is disabled VLAN 51 is disabled VLAN 52 is disabled VLAN 53 is enabled VLAN 54 is enabled VLAN 55 is enabled
set vlan dynamicegress

UsethiscommandtoadministrativelysetthedynamicegressstatusforoneormoreVLANs.
Syntax
set vlan dynamicegress vlan-list {enable | disable}
Parameters
vlanlist enable|disable SpecifiestheVLANsbyIDtoenableordisabledynamicegress. Enablesordisablesdynamicegress.
Defaults
None.
Mode
Usage
IfdynamicegressisenabledforaparticularVLAN,whenaportreceivesaframetaggedwiththat VLANsID,theswitchwilladdthereceivingporttothatVLANsegresslist.Dynamicegressis disabledontheDSeriesbydefault. Forexample,assumeyouhave20AppleTalkusersonyournetworkwhoaremobileusers(thatis, usedifferentportseveryday),butyouwanttokeeptheAppleTalktrafficisolatedinitsown VLAN.YoucancreateanAppleTalkVLANwithaVLANIDof55withaclassificationrulethatall AppleTalktrafficgetstaggedwithVLANID55.Then,youenabledynamicegressforVLAN55. Now,whenanAppleTalkuserplugsintoportge.3.5andsendsanAppleTalkpacket,theswitch willtagthepackettoVLAN55andalsoaddportge.3.5toVLAN55segresslist,whichallowsthe AppleTalkusertoreceiveAppleTalktraffic.
Example
ThisexampleshowshowtoenabledynamicegressonVLAN55:
D2(rw)->set vlan dynamicegress 55 enable
7-16
Setting the Host VLAN
Setting the Host VLAN

Purpose
ToconfigureahostVLANthatonlyselectdevicesareallowedtoaccess.Thissecuresthehostport formanagementonlytasks.
Note: The host port is the management entity of the device. Refer to Creating a Secure Management VLAN on page 7-1 for more information.
Commands
For information about... show host vlan set host vlan clear host vlan Refer to page... 7-17 7-17 7-18
show host vlan

UsethiscommandtodisplaythecurrenthostVLAN.
Syntax
show host vlan
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaythehostVLAN:
D2(su)->show host vlan Host vlan is 7.
set host vlan

UsethiscommandtoassignhoststatustoaVLAN.
Syntax
set host vlan vlan-id
7-17
clear host vlan
Parameters
vlanid SpecifiesthenumberoftheVLANtosetasthehostVLAN.
Defaults
None.
Mode
Usage
ThehostVLANshouldbeasecureVLANwhereonlydesignatedusersareallowedaccess.For example,ahostVLANcouldbespecificallycreatedfordevicemanagement.Thiswouldallowa managementstationconnectedtothemanagementVLANtomanageallportsonthedeviceand makemanagementsecurebypreventingmanagementviaportsassignedtootherVLANs.
Note: Before you can designate a VLAN as the host VLAN, you must create a VLAN using the set of commands described in Creating and Naming Static VLANs on page 7-4.
Example
ThisexampleshowshowtosetVLAN7asthehostVLAN:
D2(su)->set host vlan 7
clear host vlan

UsethiscommandtoresetthehostVLANtothedefaultsettingof1.
Syntax
clear host vlan
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtosetthehostVLANtothedefaultsetting:
D2(su)->clear host vlan
7-18
Enabling/Disabling GVRP (GARP VLAN Registration Protocol)

About GARP VLAN Registration Protocol (GVRP)
Thefollowingsectionsdescribethedeviceoperationwhenitsportsareoperatingunderthe GenericAttributeRegistrationProtocol(GARP)applicationGARPVLANRegistrationProtocol (GVRP).
Overview
ThepurposeofGVRPistodynamicallycreateVLANsacrossaswitchednetwork.WhenaVLAN isdeclared,theinformationistransmittedoutGVRPconfiguredportsonthedeviceinaGARP formattedframeusingtheGVRPmulticastMACaddress.Aswitchthatreceivesthisframe, examinestheframe,andextractstheVLANIDs.GVRPthencreatestheVLANsandaddsthe receivingporttoitstaggedmemberlistfortheextractedVLANID(s).Theinformationisthen transmittedouttheotherGVRPconfiguredportsofthedevice.Figure 77showsanexampleof howVLANbluefromendstationAwouldbepropagatedacrossaswitchnetwork.
How It Works
InFigure 77onpage 720,Switch4,port1isregisteredasbeingamemberofVLANBlueand thendeclaresthisfactoutallitsports(2and3)toSwitch1andSwitch 2.Thesetwodevices registerthisintheportegresslistsoftheports(Switch1,port1andSwitch2,port1)thatreceived theframeswiththeinformation.Switch2,whichisconnectedtoSwitch3andSwitch5declares thesameinformationtothosetwodevicesandtheportegresslistofeachportisupdatedwiththe newinformation,accordingly. ConfiguringaVLANonan802.1QswitchcreatesastaticVLANentry.Theentrywillalways remainregisteredandwillnottimeout.However,dynamicentrieswilltimeoutandtheir registrationswillberemovedfromthememberlistiftheendstationAisremoved.Thisensures that,ifswitchesaredisconnectedorifendstationsareremoved,theregisteredinformation remainsaccurate. TheendresultisthattheportegresslistofaportisupdatedwithinformationaboutVLANsthat resideonthatport,eveniftheactualstationontheVLANisseveralhopsaway.
7-19
Figure 7-7
Example of VLAN Propagation via GVRP

Switch 2 Switch 3
1 Switch 1
R 2D
2 End Station A
D 3 D
Switch 4
R Switch 5
R D
= Port registered as a member of VLAN Blue = Port declaring VLAN Blue
Purpose
TodynamicallycreateVLANsacrossaswitchednetwork.TheGVRPcommandsetisusedto displayGVRPconfigurationinformation,thecurrentglobalGVRPstatesetting,individualport settings(enableordisable)andtimersettings.Bydefault,GVRPisenabledgloballyonthedevice, butdisabledonallports.
Commands
For information about... show gvrp show garp timer set gvrp clear gvrp set garp timer Refer to page... 7-21 7-21 7-22 7-23 7-23
7-20
show gvrp
show gvrp
UsethiscommandtodisplayGVRPconfigurationinformation.
Syntax
show gvrp [port-string]
Parameters
portstring (Optional)DisplaysGVRPconfigurationinformationforspecificport(s).For adetaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
Ifportstringisnotspecified,GVRPconfigurationinformationwillbedisplayedforallportsand thedevice.
Mode
Example
ThisexampleshowshowtodisplayGVRPstatusforthedeviceandforfw.2.1:
D2(su)->show gvrp ge.2.1 Global GVRP status is enabled. Port Number ----------ge.2.1 GVRP status ----------disabled
show garp timer

UsethiscommandtodisplayGARPtimervaluesforoneormoreports.
Syntax
show garp timer [port-string]
Parameters
portstring (Optional)DisplaysGARPtimerinformationforspecificport(s).Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
Ifportstringisnotspecified,GARPtimerinformationwillbedisplayedforallports.
Mode
7-21
set gvrp
Example
ThisexampleshowshowtodisplayGARPtimerinformationonports1through10inslot1:
Note: For a functional description of the terms join, leave, and leaveall timers, refer to the standard IEEE 802.1Q documentation, which is not supplied with this device. D2(su)->show garp timer ge.1.1-10 Port based GARP Configuration: (Timer units are centiseconds) Port Number Join Leave Leaveall ----------- ---------- ---------- ---------ge.1.1 20 60 1000 ge.1.2 20 60 1000 ge.1.3 20 60 1000 ge.1.4 20 60 1000 ge.1.5 20 60 1000 ge.1.6 20 60 1000 ge.1.7 20 60 1000 ge.1.8 20 60 1000 ge.1.9 20 60 1000 ge.1.10 20 60 1000
Table 731providesanexplanationofthecommandoutput.Fordetailsonusingthesetgvrp commandtoenableordisableGVRP,refertosetgvrponpage 722.Fordetailsonusingtheset garptimercommandtochangedefaulttimervalues,refertosetgarptimeronpage 723. Table 7-31

Output Field Port Number Join Leave Leaveall
show gvrp configuration Output Details

What It Displays... Port designation. For a detailed description of possible port-string values, refer to Port String Syntax Used in the CLI on page 4-1. Join timer setting. Leave timer setting. Leavall timer setting.
set gvrp
UsethiscommandtoenableordisableGVRPgloballyonthedeviceorononeormoreports.
Syntax
set gvrp {enable | disable} [port-string]
Parameters
disable| enable portstring DisablesorenablesGVRPonthedevice. (Optional)DisablesorenablesGVRPonspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsedin theCLIonpage 41.
Defaults
Ifportstringisnotspecified,GVRPwillbedisabledorenabledforallports.
7-22
clear gvrp
Mode
Examples
ThisexampleshowshowtoenableGVRPgloballyonthedevice:
D2(su)->set gvrp enable
ThisexampleshowshowtodisableGVRPgloballyonthedevice:
D2(su)->set gvrp disable
ThisexampleshowshowtoenableGVRPonge.1.3:
D2(su)->set gvrp enable ge.1.3
clear gvrp
UsethiscommandtoclearGVRPstatusorononeormoreports.
Syntax
clear gvrp [port-string]
Parameters
portstring (Optional)ClearsGVRPstatusonspecificport(s).Foradetaileddescriptionof possibleportstringvalues,refertoPortStringSyntaxUsedintheCLIon page 41.
Defaults
Ifportstringisnotspecified,GVRPstatuswillbeclearedforallports.
Mode
Example
ThisexampleshowshowtoclearGVRPstatusgloballyonthedevice:
D2(su)->clear gvrp
set garp timer

Usethiscommandtoadjustthevaluesofthejoin,leave,andleavealltimers.
Syntax
set garp timer {[join timer-value] [leave timer-value] [leaveall timer-value]} port-string
Parameters
jointimervalue leavetimervalue SetstheGARPjointimerincentiseconds(Referto802.1Qstandard.) SetstheGARPleavetimerincentiseconds(Referto802.1Qstandard.)
7-23
set garp timer
leavealltimer value portstring
SetstheGARPleavealltimerincentiseconds(Referto802.1Qstandard.) Specifiestheport(s)onwhichtoconfigureGARPtimersettings.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
None.
Mode
Usage
Thesettingofthesetimersiscriticalandshouldonlybechangedbypersonnelfamiliarwiththe 802.1Qstandardsdocumentation,whichisnotsuppliedwiththisdevice.
Examples
ThisexampleshowshowtosettheGARPjointimervalueto100centisecondsforallports:
D2(su)->set garp timer join 100 *.*.*
Thisexampleshowshowtosettheleavetimervalueto300centisecondsforallports:
D2(su)->set garp timer leave 300 *.*.*
Thisexampleshowshowtosettheleavealltimervalueto20000centisecondsforallports:
D2(su)->set garp timer leaveall 20000 *.*.*
7-24
8
Differentiated Services Configuration
ThischapterdescribestheDifferentiatedServices(Diffserv)setofcommandsandhowtouse them. DSeriesdevicessupportDiffservpolicybasedprovisioningofnetworkresourcesbyallowingIT administratorsto: Create,changeorremoveDiffservpoliciesbasedonbusinessspecificuseofnetworkservices. Prioritizeandpolicetrafficaccordingtoassignedpoliciesandconditions. AssignorunassignportstoDiffservpoliciessothatonlyportsactivatedforapolicywillbe allowedtotransmitframesaccordingly.
Refer to page ... 8-2 8-3 8-9 8-14 8-17
For information about ... Globally Enabling or Disabling Diffserv Creating Diffserv Classes and Matching Conditions Configuring Diffserv Policies and Assigning Classes Assigning Policies to Service Ports DiffServ Configuration Examples
Note: The configuration of DiffServ rules is contingent on the order in which they are configured. Please review this entire section of the D-Series CLI Reference for a thorough explanation of the steps required to correctly configure this functionality.
8-1
Globally Enabling or Disabling Diffserv
Globally Enabling or Disabling Diffserv

Purpose
TogloballyenableordisableDiffservonthedevice.
Command
ThecommandusedtogloballyenableordisableDiffservonthedeviceislistedbelowand describedintheassociatedsectionasshown.
For information about... set diffserv adminmode Refer to page...
82
set diffserv adminmode

UsethiscommandtogloballyenableordisableDiffservonthedevice.Bydefault,thisfunctionis disabledatdevicestartup.
Syntax
set diffserv adminmode {enable | disable}
Parameters
enable|disable EnablesordisablesDiffserv.
Defaults
None.
Mode
Example
ThisexampleshowshowtoenableDiffserv:
D2(rw)->set diffserv adminmode enable
8-2
Creating Diffserv Classes and Matching Conditions
Creating Diffserv Classes and Matching Conditions

Purpose
Toreview,create,andconfigureDiffservclassesandmatchingconditions.
Commands
Thecommandsusedtoreview,create,andconfigureDiffservclassesandmatchingconditionsare listedbelowanddescribedintheassociatedsectionasshown.
For information about... show diffserv info show diffserv class set diffserv class create set diffserv class delete set diffserv class match set diffserv class rename Refer to page... 8-3 8-4 8-4 8-5 8-5 8-8
show diffserv info

UsethiscommandtodisplaygeneralDiffservstatusinformation.
Syntax
show diffserv info
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaygeneralDiffservstatusinformation:
D2(rw)->show diffserv info DiffServ Admin Mode............................ Class Table Size Current/Max................... Class Rule Table Size Current/Max.............. Policy Table Size Current/Max.................. Policy Instance Table Size Current/Max......... Policy Attribute Table Size Current/Max........ Service Table Size Current/Max................. Enable 0 / 25 0 / 150 0 / 12 0 / 120 0 / 120 0 / 48
8-3
show diffserv class
show diffserv class

UsethiscommandtodisplayinformationaboutDiffservclasses.
Syntax
show diffserv class {summary | detailed classname}
Parameters
summary DisplaysasummaryofDiffservclassinformation. detailedclassname DisplaysdetailedDiffservinformationforaspecificclass.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplayasummaryofDiffservclassinformation.Inthiscase,there aretwoclassesconfigured,namedguestandadmin:
D2(rw)->show diffserv class summary Class Name Class Type Ref Class Name ----------------- ------------ ------------------------------guest All admin All
set class create

UsethiscommandtocreateanewDiffservclass.
Syntax
set diffserv class create {all classname}
Parameters
all classname Specifiesthatallmatchconditionsmustbemetbeforetheassociatedpolicy isexecuted. SpecifiesaclassnameforthisnewDiffservclass.
Defaults
None.
Mode
8-4
set diffserv class delete
Example
ThisexampleshowshowtocreateaDiffservclasscalledadmin:
D2(rw)->set diffserv class create all admin
set diffserv class delete

UsethiscommandtodeleteaDiffservclassandremoveanymatchassignedtotheclass.
Syntax
set diffserv class delete classname
Parameters
classname Specifiestheclassnametobedeleted.
Defaults
None.
Mode
Usage
Youcannotusethiscommandtodeleteaclassthathasbeenassignedtoapolicy.Beforedeletinga classwithanassignedpolicyandserviceport(s),youmustfirst: Removetheserviceport(s)assignedtothepolicyusingthesetdiffservserviceremove command(page 816),then Removethespecifiedclassusingthesetdiffservpolicyclassremovecommand(page 811).
Example
ThisexampleshowshowtodeletetheDiffservadminclass:
D2(rw)->set diffserv class delete admin
set diffserv class match

UsethiscommandtomatchaDiffservclasstoaserviceconditionbasedonlayer2,3,and4packet parameters.
set diffserv class match {[every classname] [dstmac | scrmac classname macaddr macmask] [dstip | srcip classname ipaddr ipmask] [dstl4port | srcl4port{keyword classname keyword | number classname portnumber}] [ipdscp classname dscpval] [ipprecedence classname precedencenumber] [iptos classname tosbits tosmask] [protocol {keyword classname protocol-name | number classname protocol-number}] [refclass {add | remove}{classname refclassname}] [vlan classname vlanid]}
Parameters
everyclassname Matchesallpacketstoaspecificclass. dstmac|scrmacclassname MatchestoaspecificclassbasedondestinationorsourceMAC macaddrmacmask address.
dstip|srcipclassname ipaddripmask dstl4port|srcl4port keywordclassname keyword|number classnameportnumber
MatchestoaspecificclassbasedondestinationorsourceIP address. Matchestoaspecificclassbasedondestinationorsourcelayer4 portnumberorkeyword.Validkeywordvaluesare: domain echo ftp ftpdata http smtp snmp telnet tftp www
Validportnumbervaluesare065535. ipdscpclassnamedscpval MatchestoaspecificclassbasedonthevalueoftheIPDiffserv CodePoint.Validnumericorkeywordvaluescanbeenteredas listedinTable 832below. MatchestoaspecificclassbasedonthevalueoftheIPprecedence field.Validprecedencenumbervaluesare:07. MatchestoaspecificclassbasedonthevalueoftheIPtypeof service(TOS)field.Validtosbitsvaluesare0255.Validtosmask valuesare18.
ipprecedenceclassname precedencenumber iptosclassnametosbits tosmask
protocolkeyword MatchestoaspecificclassbasedonnumberorkeywordintheIP protocolfield.Validprotocolnamekeywordare: classnameprotocolname| numberclassnameprotocol icmp number igmp ip tcp udp
Validprotocolnumbervaluesare0255. refclassadd|remove classnamerefclassname vlanclassnamevlanid Addsorremovesasetofalreadydefinedmatchconditionstoa specificclass. MatchestoaspecificclassbasedonVLANID.Validvaluesare1 4094.
Table 8-32
Valid IP DSCP Numeric and Keyword Values

Numeric Value 0 0,8,16,24,32,40,48,56 10,12,14 Keyword (Usage) be (best effort) cs0 - cs7 (Class Selector PHB) af11, af12, af13 (Assured Forwarding)
Code Point Map b'000000 b'xxx000 b'001xx0
8-6
Table 8-32
Valid IP DSCP Numeric and Keyword Values (Continued)

Numeric Value 18,20,22 26,28,30 34,36,38 46 Keyword (Usage) af21, af22, af23 (Assured Forwarding) af31, af32, af33 (Assured Forwarding) af41, af42, af43 (Assured Forwarding) ef (Expedited Forwarding)
Code Point Map b'010xx0 b'011xx0 b'100xx0 b'101110
Defaults
None.
Mode
Usage
Anypolicythatisappliedmustbecomposedofrulesthatcomefromonlyoneofthefollowing fourgroups. Layer3: DestinationIPaddress(dstip) DestinationLayer4port(dstl4port) IPDiffservCodePoint(ipdscp) IPprecedencefield(ipprecedence) IPtypeofservice(TOS)field(iptos) IPprotocolfield(protocol) SourceIPaddress(srcip) SourceLayer4port(srcl4port)
Layer2: DestinationMACaddress(dstmac) SourceMACaddress(scrmac) VLANID(vlan)
Layer2Layer3source: SourceMACaddress(scrmac) SourceIPaddress(srcip) VLANID(vlan)
Layer2Layer3destination: DestinationMACaddress(dstmac) DestinationIPaddress(dstip) VLANID(vlan)
8-7
set diffserv class rename
Note: The match type every will work with any group.
Youcannotcreateandaddaclasstoapolicybeforeaddinganyrules(matchconditions)tothe class.Onceaclassisaddedtoapolicy,youcannotaddanymorerules(matchconditions)tothe class.Youcannotcreateoutboundpolicies. Youcanonlyaddrulesthatfitintothesamecategory(showninthegroupingsabove)toaclass. Forexample,ifyoucreateaclassandaddthematchconditionsdstipanddstl4port,youwillonly beabletoaddotherrulesfromtheL3group. Classmatchesoflayer4destinationorsourcemustbesequencedbeforethecorresponding protocolmatch,asillustratedinthethirdexamplebelow. Youcanonlyaddclassesofthesamecategorytoapolicy.
Examples
ThisexampleshowshowtomatchtheadminclasstosourceIPaddress130.10.0.32andonly thatIPaddresstype:
D2(rw)->set diffserv class match srcip admin 130.10.0.32 255.255.255.255
ThisexampleshowshowtomatchtheadminclasstoVLAN10:
D2(rw)->set diffserv class match vlan admin 10
ThisexampleshowshowtomatchthehttpclasstoTCPpacketswithadestinationportof80 (HTTP).Thelayer4portmatchmustprecedetheprotocoltype.
D2(rw)->set diffserv class match dstl4port keyword http http D2(rw)->set diffserv class match protocol keyword http tcp
set diffserv class rename

UsethiscommandtochangethenameofaDiffservclass.
Syntax
set diffserv class rename classname newclassname
Parameters
classname newclassname SpecifiestheclassnamepreviouslysetforthisnewDiffservclass. Specifiesanewclassname.
Defaults
None.
Mode
Switchcommand,ReadWrite.
Example
ThisexampleshowshowtorenametheDiffservadminclasstosystem:
D2(rw)->set diffserv class rename admin system
8-8
Configuring Diffserv Policies and Assigning Classes
Configuring Diffserv Policies and Assigning Classes

Purpose
Toreview,create,andconfigureDiffservpoliciesandassignclasses.
Commands
Thecommandsusedtoreview,create,andconfigureDiffservpoliciesandassignclassesarelisted belowanddescribedintheassociatedsectionasshown.
For information about... show diffserv policy set diffserv policy create set diffserv policy delete set diffserv policy class set diffserv policy mark set diffserv policy police style simple set diffserv policy police action conform set diffserv policy police action nonconform set diffserv policy rename Refer to page... 8-9 8-10 8-10 8-11 8-11 8-12 8-13 8-13 8-14
show diffserv policy

UsethiscommandtodisplayinformationaboutDiffservpolicies.
Syntax
show diffserv policy {summary | detailed policyname}
Parameters
summary detailed policyname DisplaysDiffservpolicysummaryinformation. DisplaysdetailedDiffservinformationforaspecificpolicy.
Defaults
None.
Mode
Switchcommand.ReadOnly.
8-9
set diffserv policy create
Example
ThisexampleshowshowtodisplayasummaryofDiffservpolicyinformation.Inthiscase,there isonepolicynamedadmin,towhichmembersoftheadminclasshavebeenassigned.This policyisappliedtoincomingtrafficonitsassignedserviceports:
D2(rw)->show diffserv policy summary Policy Name Policy Type Class Members -------------------- ----------- ------------------------------admin In admin
set diffserv policy create

UsethiscommandtocreateanewDiffservpolicy.
Syntax
set diffserv policy create policyname {in}
Parameters
policyname in Specifiesapolicyname. Appliesthispolicytoincomingpackets.
Defaults
None.
Mode
Example
ThisexampleshowshowtocreateaDiffservpolicycalledadminandapplyittoincoming packets:
D2(rw)->set diffserv policy create admin in
set diffserv policy delete

UsethiscommandtodeleteaDiffservpolicy.
Syntax
set diffserv policy delete policyname
Parameters
policyname Specifiesapolicynametobedeleted.
Defaults
None.
8-10
set diffserv policy class
Mode
Usage
Inordertodeleteapolicyyoumustfirstremovetheserviceport(s)assignedtothepolicyusing thesetdiffservserviceremovecommandasdescribedinsetdiffservserviceonpage816.
Example
ThisexampleshowshowtodeletetheDiffservadminpolicy:
D2(rw)->set diffserv policy delete admin
set diffserv policy class

UsethiscommandtoaddorremoveaDiffservclasstoaspecifiedpolicy.Onceadded,policies willbeactiveforthespecifiedclass.
Syntax
set diffserv policy class {add | remove} policyname classname
Parameters
add|remove policyname classname Addsorremovesthespecifiedclass. Specifiesthepolicynametobeassociatedwiththeclass. Specifiesaclassnametoaddorremove.
Defaults
None.
Mode
Usage
Classmustbeaddedtoapolicyusingthiscommandbeforepolicyparameters,suchas bandwidth,marking,andpolicing,canbeconfigured.
Example
Thisexampleshowshowtoaddthesystemclasstotheadminpolicy:
D2(rw)->set diffserv policy class add admin system
set diffserv policy mark

UsethiscommandtomarkallpacketsfortheassociatedDiffservtrafficstreamwithaspecificIP DSCPorIPprecedencevalue.
Syntax
set diffserv policy mark {ipdscp | ipprecedence policyname classname value}
8-11
set diffserv policy police style simple
Parameters
ipdscp| ipprecedence policyname classname value SpecifiesthatpacketswillbemarkedwitheitheranIPDSCPorprecedence value. Specifiesthepolicynamebeingconfigured. SpecifiesaDiffservclasstoassociatetothispolicy. SpecifiesanIPDSCPorprecedencevalue.ValidnumericorkeywordDCSP valuescanbeenteredaslistedinSection 832.Validprecedencevaluesare: 07.
Defaults
None.
Mode
Example
Thisexampleshowshowtomarkpacketsmatchingtheadminpolicyinthesystemclassfor DSCPexpeditedforwardingprecedence:
D2(rw)->set diffserv policy mark ipdscp admin system ef
set diffserv policy police style simple

UsethiscommandtoestablishthepolicingstyleforaDiffservpolicybasedonlyonbandwidthfor thespecifiedclass.
Syntax
set diffserv policy police style simple policyname classname bandwidth burstsize
Parameters
policyname classname bandwidth burstsize Specifiesthepolicynamebeingconfigured. SpecifiesaDiffservclasstoassociatetothispolicy. SpecifiesabandwidthvalueinKbps.Validvaluesare14294967295. SpecifiesaburstsizevalueimKbytes.Validvaluesare1128.
Defaults
None.
Mode
Example
ThisexampleshowshowtoconfigureabandwidthbasedpolicingstylefortheadminDiffserv policy:
D2(rw)->set diffserv policy police style simple admin system 1000 128
8-12
set diffserv policy police action conform
set diffserv policy police action conform

Usethiscommandtoconfiguretrafficpolicingactionsforpacketsthatconformtoassociated Diffservclassifications.
Syntax
set diffserv policy police action conform {drop | send policyname classname} | {markdscp | markprec policyname classname value}
Parameters
drop|send policyname classname value Specifieswhetherthepolicingactionforpacketsconformingtothe classificationparameterswillbetodroporsendpackets. Specifiesthepolicynamebeingconfigured. SpecifiesaDiffservclasstoassociatetothispolicingaction. SpecifiesanIPDHCPorprecedencevaluesetwiththesetdiffserv policymarkcommand(page811).
markdscp|markprec SpecifiesapolicingactionbasedonIPDHCPorprecedence.
Defaults
None.
Mode
Usage
Ifyouconfigurethedeviceusingoptionbeorcs0withthecommandsetdiffservpolicypolice actionconformmarkdscppolicynameevery,thecommandwillexecuteproperly,butwillbe displayedintherunningconfigassetdiffservpolicypoliceactionconformmarkdscppolicyname every0.
Example
ThisexampleshowshowtosetthepolicingactiontosendforpacketsconformingtoDiffserv policyadmin,classsystem.
D2(rw)->set diffserv policy police action conform send admin system
set diffserv policy police action nonconform

Usethiscommandtoconfiguretrafficpolicingactionsforpacketsthatdonotconformto associatedDiffservclassifications.
Syntax
set diffserv policy police action nonconform {drop | send policyname classname} | {markdscp | markprec policyname classname value}
Parameters
drop|send Specifieswhetherthepolicingactionforpacketsnotconformingtothe classificationparameterswillbetodroporsendpackets.
set diffserv policy rename
policyname classname value
Specifiesthepolicynamebeingconfigured. SpecifiesaDiffservclasstoassociatetothispolicingaction. SpecifiesanIPDHCPorprecedencevaluesetwiththesetdiffserv policymarkcommand(page811).
markdscp|markprec SpecifiesapolicingactionbasedonIPDHCPorprecedence.
Defaults
None.
Mode
Example
Thisexampleshowshowtosetthepolicyingactiontodropforpacketsnotconformingtothe Diffservpolicyadmin,classsystem.
D2(rw)->set diffserv policy police action nonconform drop admin system
set diffserv policy rename

UsethiscommandtochangethenameofaDiffservpolicy.
Syntax
set diffserv policy rename policyname newpolicyname
Parameters
policyname newpolicyname SpecifiesthepolicynamepreviouslysetforthisnewDiffservclass. Specifiesanewpolicyname.
Defaults
None.
Mode
Example
ThisexampleshowshowtorenametheadminDiffservpolicytosystem:
D2(rw)->set diffserv policy rename admin system
Assigning Policies to Service Ports

Purpose
ToreviewandassignDiffservpoliciesandtheirassociatedclassestoserviceports.
8-14
show diffserv service info
Commands
ThecommandsusedtoreviewandassignDiffservpoliciestoserviceportsarelistedbelowand describedintheassociatedsectionasshown.
For information about... show diffserv service info show diffserv service stats set diffserv service Refer to page... 8-15 8-15 8-16
show diffserv service info

UsethiscommandtodisplayinformationaboutDiffservserviceports.
Syntax
show diffserv service info {summary | detailed port-string} {in}
Parameters
summary detailedportstring in DisplaysDiffservserviceportsummaryinformation. Displaysdetailedinformationforaspecificport(s). Displaysinformationaboutincomingtraffic.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplayasummaryofincomingDiffservserviceporttraffic:
D2(rw)->show diffserv service info summary in DiffServ Admin Mode............................ Enable Interface Direction ----------- ----------ge.1.1 In ge.1.2 In ge.1.3 In OperStatus ---------Up Up Up Policy Name ---------------------admin admin admin
show diffserv service stats

UsethiscommandtodisplayDiffservpolicyservicestatistics.
Syntax
show diffserv service stats {summary | detailed port-string} {in}
8-15
set diffserv service
Parameters
summary detailedportstring in DisplaysDiffservasummaryofservicestatistics. Displaysdetailedstatisticsforaspecificport. Displaysinformationaboutincomingtraffic.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplayadetailedincomingtrafficstatisticsaboutserviceportge.1.1:
D2(rw)->show diffserv service stats detailed ge.1.1 in Interface...................................... ge.1.1 Direction...................................... In Operational Status............................. Up Policy Name.................................... admin Class Name..................................... system In Discarded Packets........................... 0
set diffserv service

UsethiscommandtoaddorremoveaDiffservpolicytoincomingtrafficononeormoreports.
Syntax
set diffserv service {add | remove} {in} port-string policyname
Parameters
add|remove in portstring policyname Addsorremovesthespecifiedpolicy. Addsorremovesthespecifiedpolicytoincomingtraffic. Specifiestheport(s)towhichthispolicyconfigurationwillbeapplied. Specifiesthepolicynametobeaddedtoorremovedfromporttraffic.
Defaults
None.
Mode
Example
ThisexampleshowshowtoapplytheDiffservpolicynamedadmintoincomingtrafficonports ge1.110:
D2(rw)->set diffserv service add in ge.1.5 admin
8-16 Differentiated Services Configuration
DiffServ Configuration Examples

Typically,youwouldusetheDiffservcommandsettocompleteconfigurationtasksinthe followingorder: 1. 2. 3. 4. 5. 6. 7. EnableDiffServ. CreateaClass. CreateoneormoreclassificationruleswithintheClass. CreateaPolicy. AddoneormoreClassestothePolicy. AddPolicing(Conforming/Nonconforming,Drop/Forward,RateLimit,Precedence/DSCP Rewrite)actionsorjustMarking(Precedence/DSCPRewrite)actionstothePolicy. AssignthePolicytooneormoreports.
ThefollowingexamplesshowhowtoproceedthroughthesetaskstocreateDiffServpolicies. Thisexamplecreatestwoseparatepolicies: a. policyefratelimitsingressedtrafficonportfe.1.1toamaximumof100Mb/s,andon thesametraffi,calsorewritesthesixDSCPbitstoadecimalvalueof46forExpress Forwardingonlayer3. policyaf31ratelimitsingressedtrafficonportfe.1.2toamaximumof100Mb/s,andon thesametraffic,alsorewritesthesixDSCPbitstoadecimalvalueof26forFlash forwardingonlayer3.

diffserv diffserv diffserv diffserv diffserv diffserv diffserv diffserv diffserv diffserv diffserv adminmode enable class create all classevery class match every classevery policy create policyef in policy class add policyef classevery policy police style simple policyef classevery 100000 128 policy police action conform markdscp policyef classevery ef policy create policyaf31 in policy class add policyaf31 classevery policy police style simple policyaf31 classevery 100000 128 policy police action conform markdscp policyaf31 classevery
b.
D2(rw)->set D2(rw)->set D2(rw)->set D2(rw)->set D2(rw)->set D2(rw)->set D2(rw)->set D2(rw)->set D2(rw)->set D2(rw)->set D2(rw)->set af31 D2(rw)->set D2(rw)->set
diffserv service add in fe.1.1 policyef diffserv service add in fe.1.2 policyaf31
ThisexamplecreatesonepolicywhichidentifiesVOIPtraffic(DSCPvalue46or32)onportsge.1.1 throughge.1.10,anddropsallothertraffic.
D2(rw)->set diffserv adminmode enable D2(rw)->set diffserv class create all classVOIP D2(rw)->set diffserv class match ipdscp classVOIP ef D2(rw)->set diffserv class match ipdscp classVOIP cs4 D2(rw)-> set diffserv policy create policyQOS in D2(rw)-> set diffserv policy class add policyQOS classVOIP D2(rw)->set diffserv policy police style simple policyQOS classVOIP 1000000 128 D2(rw)->set diffserv policy police action nonconform drop policyQOS classVOIP D2(rw)-> set diffserv service add in ge.1.1-10 policyQOS
8-17
8-18
9
Policy Classification Configuration
ThischapterdescribesthePolicyClassificationsetofcommandsandhowtousethem.
For information about... Policy Classification Configuration Summary Configuring Policy Profiles Configuring Classification Rules Assigning Ports to Policy Profiles Configuring Policy Class of Service (CoS) Refer to page... 9-1 9-1 9-5 9-14 9-15
Policy Classification Configuration Summary

DSeriesdevicessupportpolicyprofilebasedprovisioningofnetworkresourcesbyallowingIT administratorsto: Create,changeorremovepolicyprofilesbasedonbusinessspecificuseofnetworkservices. Permitordenyaccesstospecificservicesbycreatingandassigningclassificationruleswhich mapuserprofilestoprotocolbasedframefilteringpoliciesconfiguredforaparticularVLAN orClassofService(CoS). Assignorunassignportstopolicyprofilessothatonlyportsactivatedforaprofilewillbe allowedtotransmitframesaccordingly.
Note: It is recommended that you use Enterasys Networks NetSight Policy Manager as an alternative to CLI for configuring policy classification on the D-Series devices.
Configuring Policy Profiles

Purpose
Toreview,create,changeandremoveuserprofilesthatrelatetobusinessdrivenpoliciesfor managingnetworkresources.
Note: B3, C3, and G3 devices support profile-based CoS traffic rate limiting only. Policy rules specifying CoS will only rate limit on D2, C2 and B2 devices.
9-1
show policy profile
Commands
For information about... show policy profile set policy profile clear policy profile Refer to page... 9-2 9-4 9-5
show policy profile

Usethiscommandtodisplaypolicyprofileinformation.
Syntax
show policy profile {all | profile-index [consecutive-pids] [-verbose]}
Parameters
all|profileindex consecutivepids verbose Displayspolicyinformationforallprofileindexesoraspecificprofileindex. (Optional)Displaysinformationforspecifiedconsecutiveprofileindexes. (Optional)Displaysdetailedinformation.
Defaults
Ifoptionalparametersarenotspecified,summaryinformationwillbedisplayedforthespecified indexorallindices.
Mode
9-2
show policy profile
Example
Thisexampleshowshowtodisplaypolicyinformationforprofile11:
D2(su)->show policy profile 11 Profile Index : 11 Profile Name : MacAuth1 Row Status : active Port VID Status : Enable Port VID Override : 11 CoS : 0 CoS Status : Disable Egress Vlans : none Forbidden Vlans : none Untagged Vlans : none Rule Precedence : 1-31 :MACSource(1),MACDest(2),Unknown(3), :Unknown(4),Unknown(5),Unknown(6), :Unknown(7),Unknown(8),Unknown(9), :Unknown(10),Unknown(11),IPSource(12), :IPDest(13),IPFrag(14),UDPSrcPort(15), :UDPDestPort(16),TCPSrcPort(17),TCPDestPort(18), :ICMPType(19),Unknown(20),IPTOS(21), :IPProto(22),Unknown(23),Unknown(24), :Ether(25),Unknown(26),VLANTag(27), :Unknown(28),Unknown(29),Unknown(30), :port(31) Admin Profile Usage : none Oper Profile Usage : none Dynamic Profile Usage : none

Output Field Profile Index Profile Name Row Status Port VID Status
show policy profile Output Details

What It Displays... Number of the profile. User-supplied name assigned to this policy profile. Whether or not the policy profile is enabled (active) or disabled. Whether or not PVID override is enabled or disabled for this profile. If all classification rules associated with this profile are missed, then this parameter, if specified, determines default behavior. The PVID assigned to packets, if PVID override is enabled. CoS priority value to assign to packets, if CoS override is enabled. Whether or not Class of Service override is enabled or disabled for this profile. If all classification rules associated with this profile are missed, then this parameter, if specified, determines default behavior. VLAN(s) that ports to which the policy profile is assigned can use for tagged egress. VLAN(s) forbidden to ports to which the policy profile is assigned. VLAN(s) that ports to which the policy profile is assigned can use for untagged egress. Displays the precedence of types of rules.
Port VID Override CoS CoS Status
Egress VLANs Forbidden VLANs Untagged VLANs Rule Precedence
Admin Profile Usage Ports administratively assigned to use this policy profile.
9-3
set policy profile
Table 9-33
Output Field
show policy profile Output Details (Continued)

What It Displays... Ports currently assigned to use this policy profile. Port dynamically assigned to use this policy profile.
Oper Profile Usage Dynamic Profile Usage
set policy profile

Usethiscommandtocreateapolicyprofileentry.
Syntax
set policy profile profile-index [name name] [pvid-status {enable | disable}] [pvid pvid] [cos-status {enable | disable}] [cos cos] [precedence precedence-list]
Parameters
profileindex namename pvidstatus enable|disable pvidpvid cosstatusenable |disable Specifiesanindexnumberforthepolicyprofile.Validvaluesare1255. (Optional)Specifiesanameforthepolicyprofile.Thisisastringfrom1to 64characters. (Optional)EnablesordisablesPVIDoverrideforthisprofile.Ifall classificationrulesassociatedwiththisprofilearemissed,thenthis parameter,ifspecified,determinesdefaultbehavior. (Optional)SpecifiesthePVIDtopackets,ifPVIDoverrideisenabledand invokedasdefaultbehavior. (Optional)EnablesordisablesClassofServiceoverrideforthisprofile.Ifall classificationrulesassociatedwiththisprofilearemissed,thenthis parameter,ifspecified,determinesdefaultbehavior.
Note: A maximum of 99 rules can be supported per policy profile for policy profiles that have cos-status enabled..
coscos precedence precedencelist
(Optional)SpecifiesaCoSvaluetoassigntopackets,ifCoSoverrideis enabledandinvokedasdefaultbehavior.Validvaluesare0to7. (Optional)Assignsaruleprecedencetothisprofile.Lowervalueswillbe givenhigherprecedence.Foralistofvalues,refertotheshowpolicy profilecommandoutput.
Ifoptionalparametersarenotspecified,nonewillbeapplied.
Mode
Example
Thisexampleshowshowtocreateapolicyprofile1namednetadminwithPVIDoverride enabledforPVID10,andClassofServiceoverrideenabledforCoS5:
D2(su)->set policy profile 1 name netadmin pvid-status enable pvid 10 cos-status enable cos 5
9-4
clear policy profile
clear policy profile

Usethiscommandtodeleteapolicyprofileentry.
Syntax
clear policy profile profile-index
Parameters
profileindex Specifiestheindexnumberoftheprofileentrytobedeleted.Validvalues are1to255.
Defaults
None.
Mode
Example
Thisexampleshowshowtodeletepolicyprofile8:
D2(su)->clear policy profile 8
Configuring Classification Rules

Purpose
Toreview,create,assign,andunassignclassificationrulestopolicyprofiles.Thismapsuser profilestoprotocolbasedframefilteringpolicies.
Commands
For information about... show policy rule show policy capability set policy rule clear policy rule clear policy all-rules Refer to page... 9-6 9-8 9-10 9-12 9-13
9-5
show policy rule
show policy rule

Usethiscommandtodisplaypolicyclassificationruleinformation.
Syntax
show policy rule [all | admin-profile | profile-index] [ether | ipproto | ipdestsocket | ipsourcesocket | iptos | macdest | macsource | tcpdestport | tcpsourceport | udpdestport | udpsourceport] [data] [mask mask] [port-string portstring] [rule-status {active | not-in-service | not-ready}] [storage-type {nonvolatile | volatile}] [vlan vlan] | [drop | forward] [dynamic-pid dynamic-pid] [cos cos] [admin-pid admin-pid] [-verbose] [usage-list] [display-if-used]
Parameters
all|admin profile|profile index ether ipproto ipdestsocket ipsourcesocket iptos macdest macsource tcpdestport tcpsourceport udpdestport udpsourceport data Displayspolicyclassificationrulesforallprofiles,profileID0(admin profile),orforaspecificprofileindexnumber.Validvaluesare11023. DisplaysEthernettypeIIrules. DisplaysIPprotocolfieldinIPpacketrules. DisplaysIPdestinationaddressrules. DisplaysIPsourceaddressrules. DisplaysTypeofServicerules. DisplaysMACdestinationaddressrules. DisplaysMACsourceaddressrules. DisplaysTCPdestinationportrules. DisplaysTCPsourceportrules. DisplaysUDPdestinationportrules. DisplaysUDPsourceportrules. Displaysrulesforapredefinedclassifier.Thisvalueisdependentonthe classificationtypeentered.RefertoTable 935forvalidvaluesforeach classificationtype. (Optional)Displaysrulesforaspecificdatamask.RefertoTable 935for validvaluesforeachclassificationtypeanddatavalue. (Optional)Displaysrulesrelatedtoaspecificingressport.
maskmask portstringport string
rulestatusactive (Optional)Displaysrulesrelatedtoaspecificrulesstatus. |notinservice| notready storagetypenon volatile|volatile vlanvlan drop|forward dynamicpid dynamicpid coscos (Optional)Displaysrulesconfiguredforeithernonvolatileorvolatile storage. (Optional)DisplaysrulesforaspecificVLANID. Displaysrulesbasedonwhethermatchingpacketswillbedroppedor forwarded. DisplaysrulesassociatedwithaspecificdynamicpolicyID. (Optional)DisplaysrulesforaClassofServicevalue.
9-6
show policy rule
adminpid adminpid verbose usagelist displayifused
DisplaysrulesassociatedwithaspecificadministrativepolicyID[1..1023]. (Optional)Displaysdetailedinformation. (Optional)Ifselected,eachrulesusagelistshallbecheckedandshall displayonlythoseportswhichhaveappliedthisrule. (Optional)Displaysrule(s)onlyiftheyareappliedtoatleastoneport.
Defaults
Ifverboseisnotspecified,summaryinformationwillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplaypolicyclassificationinformationforEthernettype2rules
D2(su)->show policy rule ether |PID |Rule Type |Rule Data |02 |Ether |2048 (0x0800) |02 |Ether |2049 (0x0801) |02 |Ether |2989 (0x0bad) |02 |Ether |33079 (0x8137) |Mk|PortStr |16|All |16|All |16|All |16|All |RS|ST|VLAN|CoS | A|NV|fwrd| | A|NV|drop| | A|NV|drop| | A|NV|drop| |U| |?| |?| |?| |?|
Thisexampleshowshowtodisplaypolicyclassificationinformationforadministrativerule1
D2(su)->show policy rule admin-pid 1 |Admin|Rule Type |Rule Data |admin|Port |ge.1.1 |admin|Port |ge.1.2 |admin|Port |ge.1.3 |admin|Port |ge.1.4 |admin|Port |ge.1.5 |admin|Port |ge.1.6 |admin|Port |ge.1.7 |admin|Port |ge.1.8 |admin|Port |ge.1.9 |admin|Port |ge.1.10 |admin|Port |ge.1.11 |admin|Port |ge.1.12 |Mk|PortStr |16|ge.1.1 |16|ge.1.2 |16|ge.1.3 |16|ge.1.4 |16|ge.1.5 |16|ge.1.6 |16|ge.1.7 |16|ge.1.8 |16|ge.1.9 |16|ge.1.10 |16|ge.1.11 |16|ge.1.12 |RS|ST|dPID|aPID|U| | A|NV| | 1|?| | A|NV| | 1|?| | A|NV| | 1|?| | A|NV| | 1|?| | A|NV| | 1|?| | A|NV| | 1|?| | A|NV| | 1|?| | A|NV| | 1|?| | A|NV| | 1|?| | A|NV| | 1|?| | A|NV| | 1|?| | A|NV| | 1|?|

Output Field PID Rule Type Rule Data Mk PortStr RS
show policy rule Output Details

What It Displays... Profile index number. Assigned to this classification rule with the set policy profile command (set policy profile on page 9-4). Type of classification rule. Refer to Table 9-35 for valid types. Rule data value. Refer to Table 9-35 for valid values for each classification type. Rule data mask. Refer to Table 9-35 for valid values for each classification data value. Ingress port(s) to which this rule applies. Whether or not the status of this rule is active (A), not in service or not ready.
9-7
show policy capability
Table 9-34
Output Field ST VLAN CoS U dPID aPID
show policy rule Output Details (Continued)

What It Displays... Whether or not this rules storage type is non-volatile (NV) or volatile (V). VLAN ID to which this rule applies and whether or not matching packets will be dropped or forwarded. If applicable, Class of Service value to which this rule applies. Whether or not this rule has been used. Whether or not this is a dynamic profile ID. Whether or not this is an administrative profile ID.

UsethiscommandtodisplaydetailedpolicyclassificationcapabilitiessupportedbyyourDSeries device.
Syntax
Parameters
None.
Defaults
None.
Mode
Usage
UsethiscommandtodisplaydetailedpolicyclassificationcapabilitiessupportedbyyourDSeries device.Theoutputofthiscommandshowsatablelistingclassifiabletrafficattributesandthetype ofactions,byruletype,thatcanbeexecutedrelativetoeachattribute.Abovethetableisalistof alltheactionspossibleonthisdevice. Theleftmostcolumnofthetablelistsallpossibleclassifiabletrafficattributes.Thenexttwo columnsfromtheleftindicatehowpolicyprofilesmaybeassigned,eitheradministrativelyor dynamically.Thenextfourcolumnsfromtheleftindicatetheactionsthatmaybeperformed.The lastthreecolumnsindicateauditingoptions. Anxinanactioncolumnforatrafficattributerowindicatesthatyoursystemhasthecapabilityto performthatactionfortrafficclassifiedbythatattribute.
9-8
Example
Thisexampleshowshowtodisplaythedevicespolicyclassificationcapabilities.Refertoset policyruleonpage 910foradescriptionoftheparametersdisplayed:
D2(su)->show policy capability The following supports related to policy are supported in this device: VLAN Forwarding Priority Permit Deny Precedence Reordering Rules Table Rule-Use Notification Longest Prefix Rules ============================================================= | | D | | | | | F | | | D | | | Y | | | | | O | S | | I | | | N | A | | | | R | Y | | S | | | A | D | V | | D | W | S | T | A | | | M | M | L | C | R | A | L | R | B | | | I | I | A | O | O | R | O | A | L | | SUPPORTED RULE TYPES | C | N | N | S | P | D | G | P | E | ============================================================= |MAC source address | | | | X | X | X | | | | |MAC destination address | | | | X | X | X | | | | |IPX source address | | | | | | | | | | |IPX destination address | | | | | | | | | | |IPX source socket | | | | | | | | | | |IPX destination socket | | | | | | | | | | |IPX transmission control | | | | | | | | | | |IPX type field | | | | | | | | | | |IPv6 source address | | | | | | | | | | |IPv6 destination address | | | | | | | | | | |IPv6 flow label | | | | | | | | | | |IP source address | | | | X | X | X | | | | |IP destination address | | | | X | X | X | | | | |IP fragmentation | | | | | | | | | | |UDP port source | | | | X | X | X | | | | |UDP port destination | | | | X | X | X | | | | |TCP port source | | | | X | X | X | | | | |TCP port destination | | | | X | X | X | | | | |ICMP packet type | | | | | | | | | | |TTL | | | | | | | | | | |IP type of service | | | | X | X | X | | | | |IP proto | | | | X | X | X | | | | |Ether II packet type | | | X | X | X | X | | | | |LLC DSAP/SSAP/CTRL | | | | | | | | | | |VLAN tag | | | | | | | | | | |Replace tci | | | | | | | | | | |Port string | X | X | X | X | X | X | | | | =============================================================
9-9
set policy rule
set policy rule

UsethiscommandtoassignincominguntaggedframestoaspecificpolicyprofileandtoVLAN rules. Thiscommandhastwoformsofsyntaxonetocreateanadminrule(forpolicyID0),andthe othertocreateaclassificationruleandattachittoapolicyprofile.
set policy rule admin-profile {vlantag data [mask mask] admin-pid profile-index} [port-string port-string] set policy rule profile-index {ether | ipproto | ipdestsocket | ipsourcesocket | iptos | macdest | macsource |tcpdestport | tcpsourceport | udpdestport | udpsourceport} data [mask mask] [vlan vlan] [cos cos] | [drop | forward]
Note: Classification rules are automatically enabled when created.
Parameters
Thefollowingparametersapplytocreatinganadminrule. adminprofile vlantagdata maskmask SpecifiesthatthisisanadminruleforpolicyID0. ClassifiesbasedonVLANtagspecifiedbydata.Valueofdatacanrange from1to4094or0xFFF. (Optional)Specifiesthenumberofsignificantbitstomatch,dependent onthedatavalueentered.Valueofmaskcanrangefrom1to12. RefertoTable 935forvalidvaluesforeachclassificationtypeanddata value. adminpid profileindex Associatesthisadminrulewithapolicyprofile,identifiedbyitsindex number.Policyprofilesareconfiguredwiththesetpolicyprofile commandasdescribedinsetpolicyprofileonpage 94. Validprofileindexvaluesare1255. portstringportstring (Optional)Assignsthisruletothespecifiedpolicyprofileonspecific ingressport(s).Rulewouldnotbeuseduntilpolicyisassignedtothe specifiedport(s)usingthesetpolicyportcommandasdescribedinset policyportonpage 914.
Thefollowingparametersapplytocreatingaclassificationrule. profileindex Specifiesapolicyprofilenumbertowhichthisrulewillbeassigned. Policyprofilesareconfiguredwiththesetpolicyprofilecommandas describedinsetpolicyprofileonpage 94.Validprofileindexvaluesare 1255. ClassifiesbasedontypefieldinEthernetIIpacket. ClassifiesbasedonProtocolfieldinIPpacket. ClassifiesbasedondestinationIPaddresswithoptionalpostfixedport. ClassifiesbasedonsourceIPaddress,withoptionalpostfixedport. ClassifiesbasedonTypeofServicefieldinIPpacket. ClassifiesbasedonMACdestinationaddress.
ether ipproto ipdestsocket ipsourcesocket iptos macdest
9-10
set policy rule
macsource tcpdestport tcpsourceport udpdestport udpsourceport data
ClassifiesbasedonMACsourceaddress. ClassifiesbasedonTCPdestinationport. ClassifiesbasedonTCPsourceport. ClassifiesbasedonUDPdestinationport. ClassifiesbasedonUDPsourceport. Specifiesthecodeforapredefinedclassifier.Thisvalueisdependenton theclassificationtypeentered.RefertoTable 935forvalidvaluesforeach classificationtype. (Optional)Specifiesthenumberofsignificantbitstomatch,dependenton thedatavalueentered.RefertoTable 935forvalidvaluesforeach classificationtypeanddatavalue. ClassifiestoaVLANID. SpecifiesthatthisrulewillclassifytoaClassofServiceID.Validvalues are04095.Avalueof1indicatesthatnoCoSforwardingbehavior modificationisdesired.(NotsupportedonB3,C3,andG3.) Specifiesthatpacketswithinthisclassificationwillbedroppedor forwarded.
maskmask
vlanvlan coscos
drop|forward
Defaults
None.
Mode
Usage
Table 935providesthesetpolicyruledatavaluesthatcanbeenteredforaparticularclassification type,andthemaskbitsthatcanbeenteredforeachclassifierassociatedwiththatparameter. Table 9-35 Valid Values for Policy Classification Rules
data value Type field in Ethernet II packet: 1536 - 65535 or 0x600 - 0xFFFF Protocol field in IP packet: 0 - 255 or 0 - 0xFF IP Address in dotted decimal format: 000.000.000.000 and (Optional) post-fixed port: 0 65535 Type of Service field in IP packet: 0 - 252 or 0 - 0xFC MAC Address: 00-00-00-00-0000 TCP Port Number: 0 - 65535 or 0 - 0xFFFF mask bits 1- 16 1- 8 1 - 48
Classification Rule Parameter ether ipproto Destination or Source IP Address: ipdestsocket ipsourcesocket iptos Destination or Source MAC: macdest macsource Destination or Source TCP port: tcpdestport tcpsourceport
1- 8 1 - 48
1 - 16
9-11
clear policy rule
Table 9-35
Valid Values for Policy Classification Rules (Continued)

data value UDP Port Number: 0 - 65535 or 0 - 0xFFFF VLAN tag: 1- 4094 mask bits 1 - 16
Classification Rule Parameter Destination or Source UDP port: udpsourceport udpdestport vlantag
1 -12
Examples
ThisexampleshowshowtouseTable 935toassignaruletopolicyprofile3thatwillfilter EthernetIIType1526framestoVLAN7:
D2(su)->set policy rule 3 ether 1526 vlan 7
ThisexampleshowshowtouseTable 935toassignaruletopolicyprofile5thatwillforward UDPframesfromsourceport45:

D2(su)->set policy rule 5 udpportsource 45 forward
ThisexampleshowshowtouseTable 935toassignaruletopolicyprofile1thatwilldropIP sourcetrafficfromIPaddress1.2.3.4.Ifmask32isnotspecifiedasshown,adefaultmaskof48bits (IPaddress+port)wouldbeapplied:

D2(su)->set policy rule 1 ipsourcesocket 1.2.3.4 mask 32 drop
clear policy rule

Usethiscommandtodeletepolicyclassificationruleentries.
Syntax
Thiscommandhastwoformsofsyntaxonetoclearanadminrule(forpolicyID0),andthe othertoclearaclassificationrule.
clear policy rule admin-profile {vlantag data [mask mask] clear policy rule profile-index {all-pid-entries | {ether | ipproto| ipdestsocket| ipsourcesocket | iptos | macdest | macsource | tcpdestport | tcpsourceport | udpdestport | udpsourceport}}
Parameters
Thefollowingparametersapplytodeletinganadminrule. adminprofile vlantagdata maskmask SpecifiesthattheruletobedeletedisanadminruleforpolicyID0. DeletestherulebasedonVLANtagspecifiedbydata.Valueofdatacan rangefrom1to4094or0xFFF. (Optional)Specifiesthenumberofsignificantbitstomatch,dependent onthedatavalueentered.Valueofmaskcanrangefrom1to12. RefertoTable 935forvalidvaluesforeachclassificationtypeanddata value. Thefollowingparametersapplytodeletingaclassificationrule.
9-12
clear policy all-rules
profileindex allpidentries ether icmptype ipproto ipdestsocket ipsourcesocket iptos macdest macsource tcpdestport tcpsourceport udpdestport udpsourceport
Specifiesapolicyprofileforwhichtodeleteclassificationrules.Valid profileindexvaluesare1255. Deletesallentriesassociatedwiththespecifiedpolicyprofile. DeletesassociatedEthernetIIclassificationrule. DeletesassociatedICMPclassificationrule. DeletesassociatedIPprotocolclassificationrule. DeletesassociatedIPdestinationclassificationrule. DeletesassociatedIPsourceclassificationrule. DeletesassociatedIPTypeofServiceclassificationrule. DeletesassociatedMACdestinationaddressclassificationrule. DeletesassociatedMACsourceaddressclassificationrule. DeletesassociatedTCPdestinationportclassificationrule. DeletesassociatedTCPsourceportclassificationrule. DeletesassociatedUDPdestinationportclassificationrule. DeletesassociatedUDPsourceportclassificationrule.
Defaults
Whenapplicable,dataandmaskmustbespecifiedforindividualrulestobecleared.
Mode
Examples
ThisexampleshowshowtodeleteEthernetIIType1526classificationruleentriesassociatedwith policyprofile1fromallports
D2(su)->clear policy rule 1 ether 1526
Thisexampleshowshowtoremovearulefrompolicyprofile5thatwillforwardUDPframes fromsourceport45:
D2(su)->clear policy rule 5 udpportsource 45 forward

Usethiscommandtoremoveallpolicyclassificationrules.
Syntax
Parameters
None.
Defaults
None.
9-13
Assigning Ports to Policy Profiles
Mode
Example
Thisexampleshowshowtoremovealladministrativeandpolicyindexrules:
D2(su)->clear policy all-rules
Assigning Ports to Policy Profiles

Note: The D2 switch supports up to eight user policies per port.
Purpose
Toassignandunassignportstopolicyprofiles.
Commands
For information about... set policy port clear policy port Refer to page... 9-14 9-15
set policy port

Usethiscommandtoassignportstoapolicyprofile.
Syntax
set policy port port-string profile-index
Parameters
portstring Specifiestheport(s)toaddtothepolicyprofile.Foradetaileddescription ofpossibleportstringvalues,refertoPortStringSyntaxUsedintheCLI onpage 41. SpecifiestheIDofthepolicyprofile(role)towhichtheport(s)willbe added.Thisvaluemustmatchtheprofileindexvalueassignedusingthe setpolicyprofilecommand(setpolicyprofileonpage 94)inorderfor apolicyprofiletobeactiveonthespecifiedport.
profileindex
Defaults
None.
Mode
9-14
clear policy port
Example
ThisexampleshowshowtoallowGigabitEthernetports5through15inslot1totransmitframes accordingtopolicyprofile1:
D2(su)->set policy port ge.1.5-15 1
clear policy port

Usethiscommandtoremoveapolicyprofilefromoneormoreports.
Syntax
clear policy port port-string profile-index
Parameters
portstring Specifiestheport(s)fromwhichtoremovethepolicyprofile.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41. SpecifiestheIDofthepolicyprofile(role)towhichtheport(s)willbe added.Thisvaluemustmatchtheprofileindexvalueassignedusingthe setpolicyprofilecommand(setpolicyprofileonpage 94)inorderfor apolicyprofiletobeactiveonthespecifiedport.
profileindex
Defaults
None.
Mode
Example
Thisexampleshowshowtoremovepolicyprofile10fromport21inslot1:
D2(rw)->clear policy port ge.1.21 10
Configuring Policy Class of Service (CoS)

Note: It is recommended that you use Enterasys Networks NetSight Policy Manager as an alternative to CLI for configuring policy-based CoS on the switches.
TheDSeriessupportsClassofService(CoS),whichallowsyoutoassignmissioncriticaldatatoa higherprioritythroughthedevicebydelayinglesscriticaltrafficduringperiodsofcongestion. Thehigherprioritytrafficgoingthroughthedeviceisservicedfirst(beforelowerprioritytraffic). TheClassofServicecapabilityofthedeviceisimplementedbyapriorityqueueingmechanism. ClassofServiceisbasedontheIEEE802.1D(802.1p)standardspecification,andallowsyouto defineeightpriorities(07,with7grantedhighestpriority)andupto8transmitqueues(07)for eachport. Bydefault,policybasedCoSisdisabledonthedevice,anddefaultoruserassignedportbased 802.1D(802.1p)settingsareusedtodeterminetrafficratelimiting.WhenpolicybasedCoSis
9-15
enabled,thedefaultanduserassignedpolicybasedsettingswilloverrideportbasedsettings describedinChapter 10.
About Policy-Based CoS Configurations

Onceenabledusingthesetcosstatecommandasdescribedinsetcosstateonpage 918,you canaddtothepolicybasedCoSfunctionbydefiningnewportgroupings,andassigninginbound ratelimiters.TheprocessforuserdefinedCoSconfigurationinvolvesthefollowingstepsand associatedcommandslistedinProcedure 92.Anexamplefollowstheprocedure. Procedure 9-2
Step 1. 2. 3. 4. 5. Task Enable CoS Create CoS port groups Define physical rate limiters for groups Create virtual reference for the IRL resource (physical reference) for each port group Add IRL reference to CoS settings table
User-Defined CoS Configuration

Command(s) set cos state set cos port-config set cos port-resource set cos reference set cos settings
Example
Thisexamplecreatesdifferentinboundratelimitersfortwoportgroupsandthenassignsthemto trafficwithaCoSsettingof0. 1. Configuretwoportgroups,oneforuserportsandoneforuplinkportsandassignportstothe groups.Portgroup1.0willrepresentuserports,group2.0willrepresentuplinkports.
D2(su)->set cos port-config irl 1.0 name Users ports ge.1.1-46 D2(su)->set cos port-config irl 2.0 name Uplink ports ge.1.47-48 D2(su)->show cos port-config Inbound Rate Limiting Port Configuration Entries ---------------------------------------------------------------------Port Group Name :Default Port Group :0 Port Type :0 Assigned Ports :none ---------------------------------------------------------------------Port Group Name :Users Port Group :1 Port Type :0 Assigned Ports :ge.1.1-46 ---------------------------------------------------------------------Port Group Name :Uplink Port Group :2 Port Type :0 Assigned Ports :ge.1.47-48 ----------------------------------------------------------------------
2.
Configurephysicalinboundratelimitersforeachportgroup.Fortheuserportgroup(1.0), createanIRL(irlindexof1)for512kbps.Fortheuplinkportgroup(2.0),createanIRL(irl indexof1)for10megabitspersecond(10,000kbps).

D2(su)->set cos port-resource irl 1.0 1 unit kbps rate 512 D2(su)->set cos port-resource irl 2.0 1 unit kbps rate 10000
9-16
D2(su)->show cos port-resource irl 1.0 1 Group Index Resource Type Unit Rate ----------- -------- ---- ---- ---------1.0 1 irl kbps 512 D2(su)->show cos port-resource irl 2.0 1 Group Index Resource Type Unit Rate ----------- -------- ---- ---- ---------2.0 1 irl kbps 10000
Rate Limit Type Action --------------- -----drop none
Rate Limit Type Action --------------- -----drop none
3.
IntheCoSIRLreferencemappingtableforeachportgroup,createareferenceforeachIRL resourcecreatedinthepreviousstep.Wewillusereferencenumber1.
D2(su)->set cos reference irl 1.0 1 rate-limit 1 D2(su)->set cos reference irl 2.0 1 rate-limit 1 D2(su)->show cos reference irl 1.0 Group Index ----------1.0 1.0 1.0 1.0 ... 1.0 1.0 1.0 Reference --------0 1 2 3 97 98 99 Type ---irl irl irl irl irl irl irl Rate Limiter -----------none 1 none none none none none
D2(su)->show cos reference irl 2.0 Group Index ----------2.0 2.0 2.0 2.0 ... 2.0 2.0 2.0 Reference --------0 1 2 3 97 98 99 Type ---irl irl irl irl irl irl irl Rate Limiter -----------none 1 none none none none none
4.
IntheCoSsettingstable,configureaCoSsettingforCoSindex1,whichhasapriorityof0.We entertheIRLreference,createdinthepreviousstep.
D2(su)->set cos settings 0 irl-reference 1 D2(su)->show cos settings CoS Index Priority ToS IRL --------- ---------- ------- ----0 0 * 1 1 1 * * 2 2 * * 3 3 * * 4 4 * * 5 5 * * 6 6 * * 7 7 * *
9-17
set cos state
Commands
For information about... set cos state show cos state clear cos state set cos settings clear cos settings show cos settings set cos port-config show cos port-config clear cos port-config set cos port-resource show cos port-resource clear cos port-resource set cos reference show cos reference clear cos reference show cos unit clear cos all-entries show cos port-type Refer to page... 9-18 9-19 9-19 9-20 9-21 9-21 9-22 9-23 9-24 9-25 9-26 9-26 9-27 9-28 9-29 9-30 9-30 9-31
set cos state

UsethiscommandtoenableordisableClassofService.
Syntax
set cos state {enable | disable}
Parameters
enable|disable EnablesordisablesClassofServiceontheswitch.Defaultstateis disabled.
Defaults
None.
Mode
9-18
show cos state
Example
ThisexampleshowshowtoenableClassofService:
D2(rw)->set cos state enable
show cos state

UsethiscommandtodisplaytheClassofServiceenablestate.
Syntax
show cos state
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoshowtheClassofServiceenablestate:
D2(rw)->show cos state Class-of-Service application is enabled
clear cos state

UsethiscommandtosetCoSstatebacktoitsdefaultsettingofdisabled.
Syntax
clear cos state
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtocleartheCoSstatebacktoitsdefaultsettingofdisabled:
D2(su)->clear cos state
9-19
set cos settings
set cos settings

UsethiscommandtoconfigureaClassofServiceentryintheCoSsettingstable.
Syntax
set cos settings cos-index priority priority [tos-value tos-value] [irl-reference irl-reference]
Parameters
cosindex prioritypriority tosvaluetosvalue irlreference irlreference SpecifiesaClassofServiceentry.Validvaluesare0to255. Specifiesan802.1dpriorityvalue.Validvaluesare0to7,with0beingthe lowestpriority.SeeUsagesectionbelowformoreinformation. (Optional)SpecifiesaTypeofServicevalue. (Optional)Settheinboundratelimiterassociatedwiththisentry.Valid valuesare0to99.SeeUsagesectionbelowformoreinformation.
Defaults
Ifnooptionalparametersarespecified,nonewillbeapplied.
Mode
Usage
TheCoSsettingstabletakesindividualclassofservicefeaturesanddisplaysthemasbelongingto aCoSentry.Essentially,itisusedforCoSfeatureassignment.Eachclassofserviceentryconsists ofanindex,802.1ppriority,anoptionalToSvalue,andanIRLreference. CoSIndex IndexesareuniqueidentifiersforeachCoSsetting.CoSindexes0through7arecreatedby defaultandmappeddirectlyto802.1ppriorityforbackwardscompatibility.Theseentries cannotberemoved,and802.1ppriorityvaluescannotbechanged.WhenCoSisenabled, indexesareassigned.Upto256CoSindexesorentriescanbeconfigured. Priority 802.1pprioritycanbeappliedperCoSindex.ForeachnewCoSindexcreated,theuserhasthe optiontoassignan802.1ppriorityvalue0to7fortheclassofservice.CoSindexes0through7 mapdirectlyto802.1pprioritiesandcannotbechangedastheyexistforbackward compatibility. ToS Thisvaluecanbesetperclassofservice,butisnotrequired.Whenaframeisassignedtoa classofserviceforwhichthisvalueisconfigured,theToSfieldoftheincomingIPpacketwill beoverwrittentotheuserdefinedvalue.AllbutthelasttwobitsoftheToSfieldare rewritable.ToScanbesetforCoSindexes0through7. IRLReference TheCoSIRLreferencefieldisoptional,asratelimitsarenotrequired.TheIRLreferencedoes notassignaninboundratelimitbutpointstotheCoSIRLReferenceMappingTable.This referencemaybethoughtofasthevirtualratelimiterthatwillassignthephysicalratelimiter definedbytheIRLReferenceMappingTable,describedinsetcosreferenceonpage 927.
9-20
clear cos settings
Example
ThisexampleshowshowtocreateCoSentry8withapriorityvalueof3:
D2(rw)->set cos settings 8 priority 3
clear cos settings

UsethiscommandtoclearClassofServiceentrysettings.
Syntax
clear cos settings cos-list {[all] | [priority] [tos-value] [irl-reference]}
Parameters
coslist all priority tosvalue irlreference SpecifiesaClassofServiceentrytoclear. Clearsallsettingsassociatedwiththisentry. Clearsthepriorityvalueassociatedwiththisentry. ClearstheTypeofServicevalueassociatedwiththisentry. CleartheIRLreferenceassociatedwiththisentry.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearthepriorityforCoSentry8:
D2(rw)->clear cos settings 8 priority
show cos settings

UsethiscommandtodisplayClassofServiceparameters.
Syntax
show cos settings [cos-list]
Parameters
coslist (Optional)SpecifiesaClassofServiceentrytodisplay.
Defaults
Ifnotspecified,allCoSentrieswillbedisplayed.
Mode
9-21
set cos port-config
Example
ThisexampleshowshowtoshowallCoSsettings:
D2(su)->show cos settings CoS Index Priority ToS IRL --------- ---------- ------- ----0 0 * * 1 1 * * 2 2 * * 3 3 * * 4 4 * * 5 5 * * 6 6 * * 7 7 * *
set cos port-config

Usethiscommandtocreateaportgroupforinboundratelimitingandaddorremoveportsfrom thegroup.
Syntax
set cos port-config irl group-type-index [name name] [ports port-list] [append] | [clear]
Parameters
irl grouptypeindex Specifiesthatthisisaninboundratelimiting(IRL)portgroup. Specifiesaninboundratelimitingportgroup/typeindex.Validentries areintheformofgroup#.porttype. Validvaluesforgroup#canrangefrom0to7.Validvaluesforporttype canrangefrom0to1,althoughonlyporttype0iscurrentlysupported. Forexample,portgroup3wouldbespecifiedas3.0. namename portsportlist append clear (Optional)Userdefinednameforthegroup. (Optional)Portsassignedtothegroup.Allportsmustbeofthesameport type(FastEthernet,GigabitEthernet). (Optional)Append(add)theportstotheportsthatarealreadyinthe group. (Optional)Clearthegivenportsfromthoseassignedtothegroup.
Defaults
None.
Mode
Usage
CoSIRLportgroupsareidentifiedbygroupnumberandthetypeofportsinthegroup,inthe formofgroup#.porttype.TheIRLportgroup0.0existsbydefault.Thisdefaultportgroupcannot beremovedandallphysicalportsinthesystemareassignedtoit.Uptosevenadditionalport
9-22
show cos port-config
groups(1through7)canbeconfigured.Currently,onlyoneporttype(type0)issupported.This porttypesupports100limiters. Additionalportgroupsmaybecreatedforflexibility.Portsassignedtoanewportgroupmustbe mutuallyexclusivefromtheotherportgroupentriesportsareautomaticallyremovedfromthe defaultportgroupandmustbecomprisedofthesameporttypeasdefinedbytheportgroup. Thecreationofadditionalportgroupscouldbeusedtocombinesimilarportsbytheirfunctionfor flexibility.Forinstance,portsassociatedtouserscanbeaddedtoaportgroupcalledUsersand portsassociatedtouplinkportscanbeaddedtoaportgroupcalledUplink.Usingtheseport groups,asingleclassofservicecanassigndifferentratelimitstoeachportgroup.Userports canbeassignedoneratelimit,whileUplinkportscanbeassignedanother.DFEsupportsa maximumof8portgroupsperCoSfunction(IRL). ThecommandshowcosportconfigdisplayseachIRLportgroupconfiguredbygroupandtype, withthegroupnameandassociated(assigned)ports.Thecommandshowcosporttypedisplays theavailableinboundratelimitingresourcesfortheporttype.
Example
Thisexampleconfigurestwoportgroups,oneforuserportsandoneforuplinkportsandassign portstothegroups.Portgroup1.0willrepresentuserports,group2.0willrepresentuplinkports.
D2(su)->set cos port-config irl 1.0 name Users ports ge.1.1-46 D2(su)->set cos port-config irl 2.0 name Uplink ports ge.1.47-48
show cos port-config

Usethiscommandtoshowinboundratelimitinggroupsandtheassignedports.
Syntax
show cos port-config [irl group-type-index]
Parameters
irl grouptypeindex (Optional)Specifiesthatinboundratelimitingconfigurationinformation shouldbedisplayed. (Optional)Showassignedportsforaspecificportgroup.Validentriesare intheformofgroup#.porttype. Validvaluesforgroup#canrangefrom0to7.Validvaluesforporttype canrangefrom0to1,althoughonlyporttype0iscurrentlysupported. Forexample,portgroup3wouldbespecifiedas3.0.
Defaults
TheshowcosportconfigcommandbyitselfwillshowallPortGroups.
Mode
Example
Thisexampleshowsallinboundratelimitingportgroups.Notethatportsge.1.1throughge.1.48 wereremovedfromthedefaultportgroup0.0whentheywereaddedtoportgroups1.0and2.0.
D2(su)->show cos port-config
9-23
clear cos port-config
Inbound Rate Limiting Port Configuration Entries ---------------------------------------------------------------------Port Group Name :Default Port Group :0 Port Type :0 Assigned Ports :none ---------------------------------------------------------------------Port Group Name :Users Port Group :1 Port Type :0 Assigned Ports :ge.1.1-46 ---------------------------------------------------------------------Port Group Name :Uplink Port Group :2 Port Type :0 Assigned Ports :ge.1.47-48 ----------------------------------------------------------------------
clear cos port-config

Usethiscommandtoclearinboundratelimitinggroupsorassignedports.
Syntax
clear cos port-config irl {all | group-type-index {[entry] | [name] [ports]}}
Parameters
irl all grouptypeindex ClearanIRLportgroupconfiguration. Clearallinboundratelimitingportconfignondefaultentries. Deleteaspecificportgrouporgroupname,orcleartheportsfromthat group.Validentriesareintheformofgroup#.porttype. Validvaluesforgroup#canrangefrom0to7.Validvaluesforporttype canrangefrom0to1,althoughonlyporttype0iscurrentlysupported. Forexample,portgroup3wouldbespecifiedas3.0. entry name ports Deletethisnondefaultinboundratelimiterentry. Cleartheadministrativelyassignedtextualdescriptionofthisportgroup entrytoitsdefault. Cleartheportsassignedtothisgrouptoitsdefault.
Defaults
None.
Mode
Usage
Thedefaultportgroup0.0cannotbedeleted.
9-24
set cos port-resource
Example
ThisexampledeletesallPortGroupsexceptfortheDefaultgroup0.0:
D2(su)->clear cos port-config irl all
set cos port-resource

UsethiscommandtosettheinboundratelimitparametersforaspecificIRLresourceforaspecific portgroup.
Syntax
set cos port-resource irl group-type-index irl-index {[unit {kbps}] [rate rate] [type {drop}]}
Parameters
irl grouptypeindex SetanIRLportresource. Specifiesaninboundratelimitingportgroup/typeindex.Validentriesare intheformofgroup#.porttype. Validvaluesforgroup#canrangefrom0to7.Validvaluesforporttype canrangefrom0to1,althoughonlyporttype0iscurrentlysupported. Forexample,portgroup3wouldbespecifiedas3.0. irlindex unit kbps raterate typedrop Indexnumberoftheinboundratelimiterresourceassociatedwiththis entry.Validvaluesrangefrom0to99. Unitofmeasurefortheinboundratelimiter(onlyoptionisKbps). Kilobitspersecond. Datarateforthisinboundratelimiter.Thisistheactualratelimit.Valid valuesrangefrom512to1,000,000KbpsforaGigabitport. Actionfortheratelimiter.Theonlyactionoptionisdroptheframeifall limitersareexceeded.
Defaults
None.
Mode
Usage
CoSportresourcesarewhereactualphysicalratelimitersareconfigured.Resourcesmapdirectly tothenumberofratelimiterssupportedbytheporttype.(Porttype0supports100IRLresources.) Resourcesexistforeachportgroupandareindexedasgroup#.porttype.irlindex.Portresources arenotinitiallyconfiguredasratelimiting. Inboundratelimiting,orratepolicing,simplydropsorclipstrafficinboundifaconfiguredrateis exceeded.CoSinboundratelimitingallowstheusertoconfigureratelimitsbasedonkilobitsper second. Theshowcosportresourcecommanddisplaystheresourcesavailableforeachportgroup.By default,noIRLresourcesareconfigured.ThedefaultRateLimitingalgorithmisdropandcannot beconfiguredotherwise.
9-25
show cos port-resource
Example
Thisexamplesetstheinboundratelimitresourceindexnumber1forportgroup2.0to10000Kbps or1MB:
D2(su)->set cos port-resource irl 2.0 1 unit kbps rate 10000 type drop
show cos port-resource

UsethiscommandtodisplaytheIRLportresources.
Syntax
show cos port-resource [irl [group-type-index [irl-index]]]
Parameters
irl grouptypeindex (Optional)Specifiesthatinboundratelimitingportresourcesshouldbe displayed. (Optional)Specifiesaninboundratelimitingportgroup/typeindex.Valid entriesareintheformofgroup#.porttype. Validvaluesforgroup#canrangefrom0to7.Validvaluesforporttype canrangefrom0to1,althoughonlyporttype0iscurrentlysupported. Forexample,portgroup3wouldbespecifiedas3.0. irlindex (Optional)Inboundratelimiterresourceindexconfiguredforthe specifiedportgroup.Validvaluesrangefrom0to99.
Defaults
IfaportgroupandIRLindexarenotspecified,theIRLconfigurationforallresources(099)forall configuredportgroupswillbeshown.
Mode
Example
ThisexampledisplaystheIRLresourceindexnumber1configurationforgroup2.0.
D2(su)->show cos port-resource irl 2.0 1 '?' after the rate value indicates an invalid rate value Group Index Resource Type Unit Rate ----------- -------- ---- ---- ---------2.0 1 irl kbps 10000 Rate Limit Type Action --------------- -----drop none
clear cos port-resource

UsethiscommandtosettheinboundratelimitinKbps.
Syntax
clear cos port-resource irl {all | group-type-index [irl-index [unit] [rate] [type]]}
9-26
set cos reference
Parameters
irl all grouptypeindex SpecifiesthatanIRLresourceistobecleared. ClearallIRLresourcesforallportgroups. Specifiesaninboundratelimitingportgroup/typeindex.Validentriesare intheformofgroup#.porttype. Validvaluesforgroup#canrangefrom0to7.Validvaluesforporttype canrangefrom0to1,althoughonlyporttype0iscurrentlysupported. Forexample,portgroup3wouldbespecifiedas3.0. irlindex unit rate type (Optional)Inboundratelimiterresourceindexassociatedwiththe specifiedportgroup.Validvaluesrangefrom0to99. Cleartheunitofmeasurefortheinboundratelimiter. Clearthedatarateforthisinboundratelimiter. Cleartheactionfortheratelimiter.
Defaults
None.
Mode
Example
Thisexampleclearsthedatarateto0forIRLresourceindex1forgroup2.0.
D2(su)->clear cos port-resource irl 2.0 1 rate
set cos reference

UsethiscommandtosettheClassofServiceinboundratelimitingreferenceconfiguration.
Syntax
set cos reference irl group-type-index reference rate-limit irl-index
Parameters
irl grouptypeindex SpecifiesthatanIRLreferenceisbeingconfigured. Specifiesaninboundratelimitingportgroup/typeindex.Validentriesare intheformofgroup#.porttype. Validvaluesforgroup#canrangefrom0to7.Validvaluesforporttype canrangefrom0to1,althoughonlyporttype0iscurrentlysupported. Forexample,portgroup3wouldbespecifiedas3.0. reference ratelimitirlindex IRLreferencenumberassociatedwiththisentry. Ratelimiter(IRLresourceindex)tobindthisreferenceto.Validvalues rangefrom0to99.
Defaults
None.
show cos reference
Mode
Usage
TheCoSreferencetablemapstheuserdefinedIRLreferencesfoundintheCoSsettingstable(see setcossettingsonpage 920)toratelimiterscreatedintheportresourcetable(seesetcosport resourceonpage 925).TheCoSreferencetableindexescanbethoughtofasvirtualratelimiters. Thetableaccountsforthemaximumnumberofratelimiterssupportedbythedevice.Thevirtual limitersthenmaptothephysicalratelimiters.TheCoSIRLReferenceTableisnotconfiguredby default. TheCoSIRLreferencetableuses100indexesorvirtualratelimiters,andmapseachvirtuallimiter toaphysicallimiterorresource.AnIRLreferencetableexistsforeachportgroupconfigured,and isindexedsimilarlytoportresources,asportgroup#,porttype,reference.IRLreferencesarenot populatedwithlimiters(resources),butcanbeconfiguredbytheuser.TheIRLreferencetablecan bedisplayedusingtheshowcosreferencecommand.
Example
IntheCoSIRLreferencemappingtableforportgroups1.0and2.0,createareferencefortheIRL resourcenumber1createdforeachgroup.Thereferencenumber1isused.
D2(su)->set cos reference irl 1.0 1 rate-limit 1 D2(su)->set cos reference irl 2.0 1 rate-limit 1
show cos reference

UsethiscommandtoshowtheClassofServiceinboundratelimitingreferenceconfiguration.
Syntax
show cos reference [irl [group-type-index]]
Parameters
irl grouptypeindex (Optional)Specifiesthatinboundratelimitingreferenceinformation shouldbedisplayed. (Optional)Specifiesaninboundratelimitingportgroup/typeindex. Validentriesareintheformofgroup#.porttype. Validvaluesforgroup#canrangefrom0to7.Validvaluesforporttype canrangefrom0to1,althoughonlyporttype0iscurrentlysupported. Forexample,portgroup3wouldbespecifiedas3.0.
Defaults
Ifirlisnotspecified,allCoSreferenceinformationisdisplayed. Ifaspecificportgroupisnotspecified,informationforallportgroupsisdisplayed.
Mode
9-28
clear cos reference
Example
ThisexampleshowstheClassofServiceIRLreferencesforportgroup1.0.Notethatnotallofthe 100possiblereferencesaredisplayedinthisoutputexample.
D2(su)->show cos reference irl 1.0 Group Index ----------1.0 1.0 1.0 1.0 ... 1.0 1.0 1.0 Reference --------0 1 2 3 97 98 99 Type ---irl irl irl irl irl irl irl Rate Limiter -----------none 1 none none none none none
clear cos reference

UsethiscommandtocleartheClassofServiceinboundratelimitingreferenceconfiguration.
Syntax
clear cos reference irl {all | group-type-index reference}
Parameters
irl all grouptypeindex SpecifiesthatIRLreferencesarebeingcleared. Clearallgroupsindexesandreferences. Specifiesaninboundratelimitingportgroup/typeindex.Validentries areintheformofgroup#.porttype. Validvaluesforgroup#canrangefrom0to7.Validvaluesforporttype canrangefrom0to1,althoughonlyporttype0iscurrentlysupported. Forexample,portgroup3wouldbespecifiedas3.0. reference Clearaspecificreferenceforthespecifiedportgroup.
Defaults
None.
Mode
Example
ThisexampleshowshowtocleartheCoSinboundratelimitingreferenceconfigurationforall groups:
D2(su)->clear cos reference irl all
9-29
show cos unit
show cos unit

UsethiscommandtoshowpossibleCoSunitentries.
Syntax
show cos unit
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowspossibleunitentriesforinboundratelimiting:
D2(su)->show cos unit Type: irl = inbound rate limiting Port Type --------0 Type ---irl Unit ---Kbps Unit: Kbps = Kilobits per second Minimum Rate -----------512 Granularity ----------1
Maximum Rate -----------1000000
clear cos all-entries

UsethiscommandtoclearallClassofServiceentriesexceptentries07.
Syntax
clear cos all-entries
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtocleartheCoSconfigurationforallentriesexceptentries07:
D2(su)->clear cos all-entries
9-30
show cos port-type
show cos port-type

UsethiscommandtodisplayClassofServiceporttypeconfigurations.
Syntax
show cos port-type [irl [port-type]]
Parameters
irl porttype (Optional)Displaysinboundratelimitinginformation. (Optional)Displaysinformationforaspecificporttype.
Defaults
Ifnoparametersarespecified,inboundratelimitinginformationforallporttypesisdisplayed.
Mode
Usage
TheD2implementationprovidesonedefaultporttype(0)fordesignatingavailableinboundrate limitingresources.Porttype0includesallports. Theporttype0descriptionisD2100IRL,whichindicatesthatthisporttypeprovidesa maximumof100inboundratelimitingresourcesperportgroup.
Example
Thisexampleshowsinboundratelimitinginformationforporttype0.
D2(su)->show cos port-type irl 0 Number of resources: irl = inbound rate limiter(s) Port type description -----------D2 100 IRL Number of limiters --------100 Supported rate types: Kbps = kilobits per second Supported rate type --------kbps Eligible ports ----------------ge.1.1-48 Unselected ports ----------------ge.1.1-4
Index ----0
9-31
show cos port-type
9-32
10
Port Priority and Rate Limiting Configuration
ThischapterdescribesthePortPriorityandRateLimitingsetofcommandsandhowtousethem.
For information about... Port Priority Configuration Summary Configuring Port Priority Configuring Priority to Transmit Queue Mapping Configuring Quality of Service (QoS) Configuring Port Traffic Rate Limiting Refer to page... 10-1 10-2 10-4 10-6 10-9
Port Priority Configuration Summary

TheDSeriesdevicesupportsClassofService(CoS),whichallowsyoutoassignmissioncritical datatohigherprioritythroughthedevicebydelayinglesscriticaltrafficduringperiodsof congestion.Thehigherprioritytrafficthroughthedeviceisservicedfirstbeforelowerpriority traffic.TheClassofServicecapabilityofthedeviceisimplementedbyapriorityqueueing mechanism.ClassofServiceisbasedontheIEEE802.1D(802.1p)standardspecification,and allowsyoutodefineeightpriorities(0 through 7)andassignthemtotransmitqueuesforeach port. Apriority0 through 7canbesetoneachport,with0beingthelowestpriority.Aportreceivinga framewithoutpriorityinformationinitstagheaderisassignedapriorityaccordingtothedefault prioritysettingontheport.Forexample,ifthepriorityofaportissetto4,theframesreceived throughthatportwithoutapriorityindicatedintheirtagheaderareclassifiedasapriority4and transmittedaccordingtothatpriority.Inaddition,thedevicesratelimitingcapabilitiesallowyou tofurtherprioritizetrafficbylimitingtherateofinboundtrafficonaperport/prioritybasis.
Note: When CoS override is enabled using the set policy profile command as described in set policy profile on page 9-4, CoS-based classification rules will take precedence over priority settings configured with the set port priority command described in this section.
10-1
Configuring Port Priority
Configuring Port Priority

Purpose
Tovieworconfigureportprioritycharacteristicsasfollows: DisplayorchangetheportdefaultClassofService(CoS)transmitpriority(0through7)of eachportforframesthatarereceived(ingress)withoutpriorityinformationintheirtag header. Displaythecurrenttrafficclassmappingtopriorityofeachport. Seteachporttotransmitframesaccordingto802.1D(802.1p)prioritysetintheframeheader.
Commands
For information about... show port priority set port priority clear port priority Refer to page... 10-4 10-3 10-3
show port priority

Usethiscommandtodisplaythe802.1Dpriorityforoneormoreports.
Syntax
show port priority [port-string]
Parameters
portstring (Optional)Displayspriorityinformationforaspecificport.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
If port-string is not specified, priority for all ports will be displayed.
Mode
Example
Thisexampleshowshowtodisplaytheportpriorityforthege.2.1through5.
D2(su)->show port priority ge.2.1-5 ge.2.1 is set to 0 ge.2.2 is set to 0 ge.2.3 is set to 0 ge.2.4 is set to 0 ge.2.5 is set to 0
10-2
set port priority
set port priority

Usethiscommandtosetthe802.1D(802.1p)ClassofServicetransmitpriority(0 through 7)on eachport.Aportreceivingaframewithoutpriorityinformationinitstagheaderisassigneda priorityaccordingtotheprioritysettingontheport.Forexample,ifthepriorityofaportissetto 5,theframesreceivedthroughthatportwithoutapriorityindicatedintheirtagheaderare classifiedasapriority5. Aframewithpriorityinformationinitstagheaderistransmittedaccordingtothatpriority.
Syntax
set port priority port-string priority
Parameters
portstring Specifiestheportforwhichtosetpriority.Foradetaileddescriptionof possibleportstringvalues,refertoPortStringSyntaxUsedintheCLIon page 41. Specifiesavalueof0to7tosettheCoSpriorityfortheportenteredinthe portstring.Priorityvalueof0isthelowestpriority.
priority
Defaults
None.
Mode
Usage
Thesetportprioritycommandwillnotchangethe802.1pprioritytagontaggedtrafficwitha defaultprioritytag.Thecommandonlyhasaneffectonhowuntaggedtrafficwillbeprioritized asitpassesinternallythroughthedevice.
Example
Thisexampleshowshowtosetadefaultpriorityof6onge.1.3.Framesreceivedbythisport withoutpriorityinformationintheirframeheaderaresettothedefaultsettingof6:
D2(su)->set port priority ge.1.3 6
clear port priority

UsethiscommandtoresetthecurrentCoSportprioritysettingto0.Thiswillcauseallframes receivedwithoutapriorityvalueinitsheadertobesettopriority0.
Syntax
clear port priority port-string
10-3
Configuring Priority to Transmit Queue Mapping
Parameters
portstring Specifiestheportforwhichtoclearpriority.Foradetaileddescriptionof possibleportstringvalues,refertoPortStringSyntaxUsedintheCLIon page 41.
Defaults
None.
Mode
Example
Thisexampleshowshowtoresetge.1.11tothedefaultpriority:
D2(rw)->clear port priority ge.1.11
Configuring Priority to Transmit Queue Mapping

Purpose
Toperformthefollowing: Viewthecurrentprioritytotransmitqueuemappingofeachphysicalport. Configureeachporttoeithertransmitframesaccordingtotheportpriority,setusingtheset portprioritycommanddescribedinsetportpriorityonpage 103,oraccordingtoapriority basedonapercentageofporttransmissioncapacity,assignedtotransmitqueuesusingtheset porttxqcommanddescribedinsetporttxqonpage 107. Clearcurrentportpriorityqueuesettingsforoneormoreports.
Commands
For information about... show port priority-queue set port priority-queue clear port priority-queue Refer to page... 10-4 10-5 10-6
show port priority-queue

Usethiscommandtodisplaytheportprioritylevels(0through7,with0asthelowestlevel) associatedwiththecurrenttransmitqueues(0beingthelowestpriority)foreachselectedport.A framewithacertainportpriorityistransmittedaccordingtothesettingsenteredusingtheset portpriorityqueuecommanddescribedinsetportpriorityqueueonpage 105.
Syntax
show port priority-queue [port-string]
10-4
set port priority-queue
Parameters
portstring (Optional)Displaysthemappingofprioritiestotransmitqueuesforone ormoreports.
Defaults
If port-string is not specified, priority queue information for all ports will be displayed.
Mode
Example
Thisexampleshowshowtodisplaypriorityqueueinformationforge.1.1.Inthiscase,frameswith apriorityof0areassociatedwithtransmitqueue1;frameswith1or2priority,areassociatedwith transmitqueue0;andsoforth:
D2(su)->show Port P0 --------- -ge.1.1 1 port priority-queue ge.1.1 P1 P2 P3 P4 P5 P6 P7 -- -- -- -- -- -- -0 0 2 3 4 5 5
set port priority-queue

Usethiscommandtomap802.1D(802.1p)prioritiestotransmitqueues.Thisenablesyouto changethetransmitqueue(0to7,with0beingthelowestpriorityqueue)foreachportpriorityof theselectedport.Youcanapplythenewsettingstooneormoreports.
Syntax
set port priority-queue port-string priority queue
Parameters
portstring Specifiestheport(s)forwhichtosetprioritytoqueuemappings.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41. Specifiesavalueof0through7(0isthelowestlevel)thatdetermines whatpriorityframeswillbetransmittedonthetransmitqueueenteredin thiscommand. Specifiesavalueof0through5(0isthelowestlevel)thatdeterminesthe queueonwhichtotransmittheframeswiththeportpriorityenteredin thiscommand.
priority
queue
Defaults
None.
Mode
10-5
clear port priority-queue
Usage
PrioritytotransmitqueuemappingonanindividualportbasiscanonlybeconfiguredonGigabit Ethernetports(ge.x.x).WhenyouusethesetportpriorityqueuecommandtoconfigureaFast Ethernetport(fe.x.x),themappingvaluesareappliedgloballytoallFastEthernetportsonthe system.
Example
Thisexampleshowshowtosetpriority5framesreceivedonge.2.12totransmitonqueue0.
D2(su)->set port priority-queue ge.2.12 5 0
clear port priority-queue

Usethiscommandtoresetportpriorityqueuesettingsbacktodefaultsforoneormoreports.
Syntax
clear port priority-queue port-string
Parameters
portstring Specifiestheportforwhichtoclearprioritytoqueuemappings.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
None.
Mode
Example
Thisexampleshowshowtoclearthepriorityqueuesettingsonge.2.12:
D2(su)->clear port priority-queue ge.2.12
Configuring Quality of Service (QoS)

Purpose
Eighttransmitqueuesareimplementedintheswitchhardwareforeachport.Thecommandsin thissectionallowyoutosettheprioritymodeandweightforeachoftheavailablequeues(0 through7)foreachphysicalportontheswitch.Prioritymodeandweightcannotbeconfiguredon LAGs,onlyonthephysicalportsthatmakeuptheLAG.
Commands
For information about... show port txq Refer to page... 10-7
10-6
show port txq
For information about... set port txq clear port txq
Refer to page... 10-7 10-8
show port txq

UsethiscommandtodisplayQoStransmitqueueinformationforoneormorephysicalports.
Syntax
show port txq [port-string]
Parameters
portstring (Optional)Specifiesport(s)forwhichtodisplayQoSsettings.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41. Onlyphysicalportswillbedisplayed.LAGportshavenotransmitqueue information.
Defaults
Iftheportstringisnotspecified,theQoSsettingofallphysicalportswillbedisplayed.
Mode
Example
Thisexampleshowshowtodisplaythecurrentalgorithmandtransmitqueueweightsconfigured onportge.1.10:
D2(su)->show port txq ge.1.10 Port Alg Q0 Q1 Q2 Q3 Q4 Q5 Q6 Q7 ------- --- --- --- --- --- --- --- --ge.1.10 WRR 10 10 15 20 25 20 0 0
set port txq

UsethiscommandtosetQoStransmitqueuearbitrationvaluesforphysicalports.
Syntax
set port txq port-string value0 value1 value2 value3 value4 value5 value6 value7
10-7
clear port txq
Parameters
portstring Specifiesport(s)onwhichtosetqueuearbitrationvalues.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41. Onlyphysicalportscanbeconfiguredwiththiscommand.LAGports cannotbeconfigured. value0value7 Specifiespercentagetoallocatetoaspecifictransmitqueue.Thevalues musttotal100percent.
Defaults
None.
Mode
Usage
Queuescanbesetforstrictpriority(SP)orweightedroundrobin(WRR).IfsetforWRRmode, weightsmaybeassignedtothosequeueswiththiscommand.Weightsarespecifiedintherange of0to100percent.Weightsspecifiedforqueues0through7onanyportmusttotal100percent.
Examples
Thisexampleshowshowtochangethearbitrationvaluesfortheeighttransmitqueuesbelonging toge.1.1:
D2(su)->set port txq ge.1.1 10 10 10 10 10 10 10 30
Thisexampleshowshowtochangethealgorithmtostrictpriorityfortheeighttransmitqueues belongingtoge.1.1:
D2(su)->set port txq ge.1.1 0 0 0 0 0 O O 100 D2(su)->show port txq ge.1.1 Port Alg Q0 Q1 Q2 Q3 Q4 Q5 Q6 Q7 ------- --- --- --- --- --- --- --- --ge.1.1 STR SP SP SP SP SP SP SP SP
clear port txq

Usethiscommandtoclearporttransmitqueuevaluesbacktotheirdefaultvalues.
Syntax
clear port txq port-string
10-8
clear port txq
Parameters
portstring Clearstransmitqueuevaluesonspecificport(s)backtotheirdefault values.Foradetaileddescriptionofpossibleportstringvalues,referto PortStringSyntaxUsedintheCLIonpage 41. Onlyphysicalportscanbeconfiguredwiththiscommand.LAGports cannotbeconfigured.
Defaults
Bydefault,transmitqueuesaredefinedasfollows:
Queue 0 1 2 3 Mode WRR WRR WRR WRR Weight 1 2 3 4 Queue 4 5 6 7 Mode WRR WRR WRR WRR Weight 5 6 7 8
Mode
Example
Thisexampleshowshowtocleartransmitqueuevaluesonge.1.1:
D2(su)->clear port txq ge.1.1
10-9
clear port txq
10-10
11
IGMP Configuration
ThischapterdescribestheIGMPConfigurationsetofcommandsandhowtousethem.
For information about... IGMP Overview Configuring IGMP at Layer 2 Refer to page... 11-1 11-2
IGMP Overview
About IP Multicast Group Management
TheInternetGroupManagementProtocol(IGMP)runsbetweenhostsandtheirimmediately neighboringmulticastdevice.Theprotocolsmechanismsallowahosttoinformitslocaldevice thatitwantstoreceivetransmissionsaddressedtoaspecificmulticastgroup. Amulticastenableddevicecanperiodicallyaskitshostsiftheywanttoreceivemulticasttraffic.If thereismorethanonedeviceontheLANperformingIPmulticasting,oneofthesedevicesis electedquerierandassumestheresponsibilityofqueryingtheLANforgroupmembers. BasedonthegroupmembershipinformationlearnedfromIGMP,adevicecandeterminewhich (ifany)multicasttrafficneedstobeforwardedtoeachofitsports.AtLayer3,multicastdevices usethisinformation,alongwithamulticastroutingprotocol,tosupportIPmulticastingacrossan IPnetwork. IGMPprovidesthefinalstepinanIPmulticastpacketdeliveryservice,sinceitisonlyconcerned withforwardingmulticasttrafficfromthelocaldevicetogroupmembersonadirectlyattached subnetworkorLANsegment. ThisdevicesupportsIPmulticastgroupmanagementbypassivelysnoopingontheIGMPquery andIGMPreportpacketstransferredbetweenIPmulticastdevicesandIPmulticasthostgroupsto learnIPmulticastgroupmembers. ThepurposeofIPmulticastgroupmanagementistooptimizeaswitchednetworksperformance somulticastpacketswillonlybeforwardedtothoseportscontainingmulticastgrouphostsor multicastdevicesinsteadoffloodingtoallportsinthesubnet(VLAN).
About Multicasting
Multicastingisusedtosupportrealtimeapplicationssuchasvideoconferencesorstreaming audio.Amulticastserverdoesnothavetoestablishaseparateconnectionwitheachclient.It merelybroadcastsitsservicetothenetwork,andanyhoststhatwanttoreceivethemulticast registerwiththeirlocalmulticastswitch/router.Althoughthisapproachreducesthenetwork overheadrequiredbyamulticastserver,thebroadcasttrafficmustbecarefullyprunedatevery
Configuring IGMP at Layer 2
multicastswitch/routeritpassesthroughtoensurethattrafficisonlypassedtothehoststhat subscribedtothisservice.
Configuring IGMP at Layer 2

Purpose
ToconfigureIGMPsnoopingfromtheswitchCLI.
Commands
For information about... show igmpsnooping set igmpsnooping adminmode set igmpsnooping interfacemode set igmpsnooping groupmembershipinterval set igmpsnooping maxresponse set igmpsnooping mcrtrexpiretime set igmpsnooping add-static set igmpsnooping remove-static show igmpsnooping static show igmpsnooping mfdb clear igmpsnooping Refer to page... 11-2 11-3 11-4 11-4 11-5 11-5 11-6 11-7 11-7 11-8 11-8
show igmpsnooping
UsethiscommandtodisplayIGMPsnoopinginformation.
Syntax
show igmpsnooping
Parameters
None.
Defaults
None.
Mode
11-2
IGMP Configuration
set igmpsnooping adminmode
Usage
ConfiguredinformationisdisplayedwhetherornotIGMPsnoopingisenabled.Status informationisdisplayedonlywhenthefunctionisenabled.ForinformationonenablingIGMPon thesystem,refertosetigmpsnoopingadminmodeonpage 113.Forinformationonenabling IGMPononeormoreports,refertosetigmpsnoopinginterfacemodeonpage 114.
Example
ThisexampleshowshowtodisplayIGMPsnoopinginformation:
D2(su)->show igmpsnooping Admin Mode..................................... Enable Group Membership Interval...................... 260 Max Response Time.............................. 100 Multicast Router Present Expiration Time....... 0 Interfaces Enabled for IGMP Snooping........... ge.1.1,ge.1.2,ge.1.3 Multicast Control Frame Count..................0 Data Frames Forwarded by the CPU...............0
set igmpsnooping adminmode

UsethiscommandtoenableordisableIGMPonthesystem.
Syntax
set igmpsnooping adminmode {enable | disable}
Parameters
enable|disable EnablesordisablesIGMPsnoopingonthesystem.
Defaults
None.
Mode
Usage
InorderforIGMPsnoopingtobeenabledononeorallports,itmustbegloballyenabledonthe devicewiththiscommand,andthenenabledonaport(s)usingthesetigmpsnoopinginterface modecommandasdescribedinsetigmpsnoopinginterfacemodeonpage 114.
Note: IGMP snooping cannot be controlled via WebView.
Example
ThisexampleshowshowtoenableIGMPonthesystem:
D2(su)->set igmpsnooping adminmode enable
11-3
set igmpsnooping interfacemode
set igmpsnooping interfacemode

UsethiscommandtoenableordisableIGMPononeorallports.
Syntax
set igmpsnooping interfacemode port-string {enable | disable}
Parameters
portstring enable|disable SpecifiesoneormoreportsonwhichtoenableordisableIGMP. EnablesordisablesIGMP.
Defaults
None.
Mode
Usage
InorderforIGMPsnoopingtobeenabledononeorallports,itmustbegloballyenabledonthe deviceusingthesetigmpsnoopingadminmodecommandasdescribedinsetigmpsnooping adminmodeonpage 113,andthenenabledonaport(s)usingthiscommand.
Example
ThisexampleshowshowtoenableIGMPonportge.1.10:
D2(su)->set igmpsnooping interfacemode ge.1.10 enable
set igmpsnooping groupmembershipinterval

UsethiscommandtoconfiguretheIGMPgroupmembershipintervaltimeforthesystem.
Syntax
set igmpsnooping groupmembershipinterval time
Parameters
time SpecifiestheIGMPgroupmembershipinterval.Validvaluesare23600 seconds. Thisvalueworkstogetherwiththesetigmpsnoopingmaxresponsetime commandtoremoveportsfromanIGMPgroupandmustbegreaterthan themaxresponsetimevalue.
Defaults
None.
Mode
11-4
IGMP Configuration
set igmpsnooping maxresponse
Usage
TheIGMPgroupmembershipintervaltimesetsthefrequencyofhostqueryframetransmissions andmustbegreaterthantheIGMPmaximumresponsetimeasdescribedinsetigmpsnooping maxresponseonpage 115.
Example
ThisexampleshowshowtosettheIGMPgroupmembershipintervalto250seconds:
D2(su)->set igmpsnooping groupmembershipinterval 250
set igmpsnooping maxresponse

UsethiscommandtoconfiguretheIGMPquerymaximumresponsetimeforthesystem.
Syntax
set igmpsnooping maxresponse time
Parameters
time SpecifiestheIGMPmaximumqueryresponsetime.Validvaluesare100 255seconds.Thedefaultvalueis100seconds. Thisvalueworkstogetherwiththesetigmpsnooping groupmembershipintervalcommandtoremoveportsfromanIGMPgroup andmustbelesserthanthegroupmembershipintervalvalue.
Defaults
None.
Mode
Usage
ThisvaluemustbelessthantheIGMPmaximumresponsetimedescribedinsetigmpsnooping groupmembershipintervalonpage 114.
Example
ThisexampleshowshowtosettheIGMPmaximumresponsetimeto100seconds:
D2(su)->set igmpsnooping maxresponse 100
set igmpsnooping mcrtrexpiretime

UsethiscommandtoconfiguretheIGMPmulticastrouterexpirationtimeforthesystem.
Syntax
set igmpsnooping mcrtrexpire time
11-5
set igmpsnooping add-static
Parameters
time SpecifiestheIGMPmulticastrouterexpirationtime.Validvaluesare0 3600seconds.Avalueof0willconfigurethesystemwithaninfinite expirationtime.Thedefaultvalueis0.
Defaults
None.
Mode
Usage
Thistimerisforexpiringtheswitchfromthemulticastdatabase.Ifthetimerexpires,andtheonly addressleftisthemulticastswitch,thentheentrywillberemoved.
Example
ThisexampleshowshowtosettheIGMPmulticastrouterexpirationtimetoinfinity:
D2(su)->set igmpsnooping mcrtrexpiretime 0
set igmpsnooping add-static

ThiscommandcreatesanewstaticIGMPentryoraddsoneormorenewportstoanexisting entry.
Syntax
set igmpsnooping add-static group vlan-list [modify] [port-string]
Parameters
group vlanlist modify portstring SpecifiesthemulticastgroupIPaddressfortheentry. SpecifiestheVLANsonwhichtoconfiguretheentry. (Optional)Addsthespecifiedportorportstoanexistingentry. (Optional)Specifiestheportorportstoaddtotheentry.
Defaults
Ifnoportsarespecified,allportsareaddedtotheentry. Ifmodifyisnotspecified,anewentryiscreated.
Mode
Usage
UsethiscommandtocreateandconfigureLayer2IGMPentries.
11-6
IGMP Configuration
set igmpsnooping remove-static
Example
ThisexamplecreatesanIGMPentryforthemulticastgroupwithIPaddressof233.11.22.33 configuredonVLAN20configuredwiththeportge.1.1.
D2(su)->set igmpsnooping add-static 233.11.22.33 20 ge.1.1
set igmpsnooping remove-static

ThiscommanddeletesastaticIGMPentryorremovesoneormorenewportsfromanexisting entry.
Syntax
set igmpsnooping remove-static group vlan-list [modify] [port-string]
Parameters
group vlanlist modify portstring SpecifiesthemulticastgroupIPaddressoftheentry. SpecifiestheVLANsonwhichtheentryisconfigured. (Optional)Removesthespecifiedportorportsfromanexistingentry. (Optional)Specifiestheportorportstoremovefromtheentry.
Defaults
Ifnoportsarespecified,allportsareremovedfromtheentry.
Mode
Example
Thisexampleremovesportge.1.1fromtheentryforthemulticastgroupwithIPaddressof 233.11.22.33configuredonVLAN20.
D2(su)->set igmpsnooping remove-static 233.11.22.33 20 ge.1.1
show igmpsnooping static

ThiscommanddisplaysstaticIGMPportsforoneormoreVLANsorIGMPgroups.
Syntax
show igmpsnooping static vlan-list [group group]
Parameters
vlanlist groupgroup SpecifiestheVLANforwhichtodisplaystaticIGMPports. (Optional)SpecifiestheIGMPgroupforwhichtodisplaystaticIGMP ports.
Defaults
Ifnogroupisspecified,informationforallgroupsisdisplayed.
11-7
show igmpsnooping mfdb
Mode
Example
ThisexampledisplaysthestaticIGMPportsforVLAN20.
D2(su)->show igmpsnooping static 20 -------------------------------------------------------------------------------Vlan Id = 20 Static Multicast Group Address = 233.11.22.33 Type = IGMP IGMP Port List = ge.1.1
show igmpsnooping mfdb

Usethiscommandtodisplaymulticastforwardingdatabase(MFDB)information.
Syntax
show igmpsnooping mfdb [stats]
Parameters
stats (Optional)DisplaysMFDBstatistics.
Defaults
Ifstatsisnotspecified,allMFDBtableentrieswillbedisplayed.
Mode
Examples
Thisexampleshowshowtodisplaymulticastforwardingdatabaseentries:
D2(su)->show igmpsnooping mfdb MAC Address Type Description ----------------------- ------- ---------------00:14:01:00:5E:02:CD:B0 Dynamic Network Assist 00:32:01:00:5E:37:96:D0 Dynamic Network Assist 00:32:01:00:5E:7F:FF:FA Dynamic Network Assist Interfaces ------------------------Fwd: ge.1.1,ge.3.1,ge.4.1 Fwd: ge.4.7 Fwd: ge.4.7
Thisexampleshowshowtodisplaymulticastforwardingdatabasestatistics:
D2(su)->show igmpsnooping mfdb stats Max MFDB Table Entries......................... 256 Most MFDB Entries Since Last Reset............. 1 Current Entries................................ 0
clear igmpsnooping
UsethiscommandtoclearallIGMPsnoopingentries.
Syntax
clear igmpsnooping
11-8
IGMP Configuration
clear igmpsnooping
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearallIGMPsnoopingentries:
D2(su)->clear igmpsnooping Are you sure you want to clear all IGMP snooping entries? (y/n) y IGMP Snooping Entries Cleared.
11-9
clear igmpsnooping
11-10
IGMP Configuration
12
Logging and Network Management
Thischapterdescribesswitchrelatedloggingandnetworkmanagementcommandsandhowto usethem.
Note: The commands in this chapter pertain to network management of the D-Series device from the switch CLI only. For information on router-related network management tasks, including reviewing router ARP tables and IP traffic, refer to Chapter 15. For information about... Configuring System Logging Monitoring Network Events and Status Managing Switch Network Addresses and Routes Configuring Simple Network Time Protocol (SNTP) Configuring Node Aliases Refer to page... 12-1 12-11 12-15 12-25 12-31
Configuring System Logging

Purpose
Todisplayandconfiguresystemlogging,includingSyslogserversettings,Syslogdefaultsettings, andtheloggingbuffer.
Commands
For information about... show logging server set logging server clear logging server show logging default set logging default clear logging default show logging application set logging application Refer to page... 12-2 12-3 12-4 12-4 12-5 12-5 12-6 12-7
12-1
show logging server
For information about... clear logging application show logging local set logging local clear logging local show logging buffer
Refer to page... 12-8 12-9 12-9 12-10 12-10
show logging server

UsethiscommandtodisplaytheSyslogconfigurationforaparticularserver.
Syntax
show logging server [index]
Parameters
index (Optional)DisplaysSysloginformationpertainingtoaspecificserver tableentry.Validvaluesare18.
Defaults
Ifindexisnotspecified,allSyslogserverinformationwillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplaySyslogserverconfigurationinformation:
D2(ro)->show logging server IP Address Facility Severity Description Port Status ------------------------------------------------------------------------1 132.140.82.111 local4 warning(5) default 514 enabled 2 132.140.90.84 local4 warning(5) default 514 enabled

Output Field IP Address Facility Severity Description Port Status
show logging server Output Details

What It Displays... Syslog servers IP address. For details on setting this using the set logging server command, refer to set logging server on page 12-3. Syslog facility that will be encoded in messages sent to this server. Valid values are: local0 to local7. Severity level at which the server is logging messages. Text string description of this facility/server. UDP port the client uses to send to the server. Whether or not this Syslog configuration is currently enabled or disabled.
12-2
set logging server
set logging server

UsethiscommandtoconfigureaSyslogserver.
Syntax
set logging server index [ip-addr ip-addr] [facility facility] [severity severity] [descr descr] [port port] [state {enable | disable}]
Parameters
index ipaddripaddr facilityfacility severityseverity Specifiestheservertableindexnumberforthisserver.Validvaluesare1 8. (Optional)SpecifiestheSyslogmessageserversIPaddress. (Optional)Specifiestheserversfacilityname.Validvaluesare:local0to local7. (Optional)Specifiestheseveritylevelatwhichtheserverwilllog messages.Validvaluesandcorrespondinglevelsare: 1emergencies(systemisunusable) 2alerts(immediateactionrequired) 3criticalconditions 4errorconditions 5warningconditions 6notifications(significantconditions) 7informationalmessages 8debuggingmessages descrdescr portport stateenable| disable (Optional)Specifiesatextualstringdescriptionofthisfacility/server. (Optional)SpecifiesthedefaultUDPporttheclientusestosendtothe server. (Optional)Enablesordisablesthisfacility/serverconfiguration.
Defaults
Ifipaddrisnotspecified,anentryintheSyslogservertablewillbecreatedwiththespecified indexnumberandamessagewilldisplayindicatingthatnoIPaddresshasbeenassigned. Ifnotspecified,facility,severityandportwillbesettodefaultsconfiguredwiththesetlogging defaultcommand(setloggingdefaultonpage 125). Ifstateisnotspecified,theserverwillnotbeenabledordisabled.
Mode
Example
ThiscommandshowshowtoenableaSyslogserverconfigurationforindex1,IPaddress 134.141.89.113,facilitylocal4,severitylevel3onport514:
D2(su)->set logging server 1 ip-addr 134.141.89.113 facility local4 severity 3 port 514 state enable
clear logging server
clear logging server

UsethiscommandtoremoveaserverfromtheSyslogservertable.
Syntax
clear logging server index
Parameters
index Specifiestheservertableindexnumberfortheservertoberemoved. Validvaluesare18.
Defaults
None.
Mode
Example
ThiscommandshowshowtoremovetheSyslogserverwithindex1fromtheservertable:
D2(su)->clear logging server 1
show logging default

UsethiscommandtodisplaytheSyslogserverdefaultvalues.
Syntax
show logging default
Parameters
None.
Defaults
None.
Mode
Example
ThiscommandshowshowtodisplaytheSyslogserverdefaultvalues.Foranexplanationofthe commandoutput,referbacktoTable 1236onpage 122.
D2(su)->show logging default Facility Severity Port ----------------------------------------local4 warning(5) 514
Defaults:
12-4
set logging default
set logging default

Usethiscommandtosetloggingdefaultvalues.
Syntax
set logging default {[facility facility] [severity severity] port port]}
Parameters
facilityfacility severityseverity Specifiesthedefaultfacilityname.Validvaluesare:local0tolocal7. Specifiesthedefaultloggingseveritylevel.Validvaluesand correspondinglevelsare: 1emergencies(systemisunusable) 2alerts(immediateactionrequired) 3criticalconditions 4errorconditions 5warningconditions 6notifications(significantconditions) 7informationalmessages 8debuggingmessages portport SpecifiesthedefaultUDPporttheclientusestosendtotheserver.
Defaults
None.
Mode
Example
ThisexampleshowshowtosettheSyslogdefaultfacilitynametolocal2andtheseveritylevelto4 (errorlogging):
D2(su)->set logging default facility local2 severity 4
clear logging default

Usethiscommandtoresetloggingdefaultvalues.
Syntax
clear logging default {[facility] [severity] [port]}
Parameters
facility severity (Optional)Resetsthedefaultfacilitynametolocal4. (Optional)Resetsthedefaultloggingseveritylevelto6(notificationsof significantconditions).
12-5
show logging application
port
(Optional)ResetsthedefaultUDPporttheclientusestosendtotheserver to514.
Defaults
Atleastoneoptionalparametermustbeentered. Allthreeoptionalkeywordsmustbeenteredtoresetallloggingvaluestodefaults.
Mode
Example
ThisexampleshowshowtoresettheSyslogdefaultseveritylevelto6:
D2(su)->clear logging default severity
show logging application

UsethiscommandtodisplaytheseveritylevelofSyslogmessagesforoneorallapplications configuredforloggingonyoursystem.
Syntax
show logging application [mnemonic | all]
Parameters
mnemonic (Optional)Displaysseveritylevelforoneapplicationconfiguredfor logging.Mnemonicswillvarydependingonthenumberandtypesof applicationsrunningonyoursystem.Samplemnemonicsandtheir correspondingapplicationsarelistedinTable 1238onpage 128.
Note: Mnemonic values are case sensitive and must be typed as they appear in Table 12-38.
all
(Optional)Displaysseveritylevelforallapplicationsconfiguredfor logging.
Defaults
Ifnoparameterisspecified,informationforallapplicationswillbedisplayed.
Mode
12-6
set logging application
Example
ThisexampleshowshowtodisplaysystemlogginginformationpertainingtotheSNMP application.
D2(ro)->show logging application SNMP Application Current Severity Level --------------------------------------------90 SNMP 6 1(emergencies) 4(errors) 7(information) 2(alerts) 5(warnings) 8(debugging) 3(critical) 6(notifications)

Output Field Application Current Severity Level
show logging application Output Details

What it displays... A mnemonic abbreviation of the textual description for applications being logged. Severity level at which the server is logging messages for the listed application. This range (from 1 to 8) and its associated severity list is shown in the CLI output. For a description of these entries, which are set using the set logging application command, refer to set logging application on page 12-7.
set logging application

Usethiscommandtosettheseverityleveloflogmessagesforoneorallapplications.
Syntax
set logging application {[mnemonic | all]} [level level]
Parameters
mnemonic Specifiesacasesensitivemnemonicabbreviationofanapplicationtobe logged.Thisparameterwillvarydependingonthenumberandtypesof applicationsrunningonyoursystem.Todisplayacompletelist,usethe showloggingapplicationcommandasdescribedinshowlogging applicationonpage 126.Samplemnemonicsandtheircorresponding applicationsarelistedinTable 1238onpage 128.
Note: Mnemonic values are case sensitive and must be typed as they appear in Table 12-38.
all
Setstheloggingseveritylevelforallapplications.
12-7
clear logging application
levellevel
(Optional)Specifiestheseveritylevelatwhichtheserverwilllog messagesforapplications.Validvaluesandcorrespondinglevelsare: 1emergencies(systemisunusable) 2alerts(immediateactionrequired) 3criticalconditions 4errorconditions 5warningconditions 6notifications(significantconditions) 7informationalmessages 8debuggingmessages
Table 12-38
Mnemonic CLIWEB SNMP STP Driver System Stacking UPN Router
Mnemonic Values for Logging Applications

Application Command Line Interface and Webview management Simple Network Management Protocol Spanning Tree Protocol Hardware drivers Non-application items such as general chassis management Stacking management (if applicable) User Personalized Networking Router
Defaults
Iflevelisnotspecified,nonewillbeapplied.
Mode
Example
ThisexampleshowshowtosettheseveritylevelforSNMPto4sothaterrorconditionswillbe loggedforthatapplication.
D2(rw)->set logging application SNMP level 4
clear logging application

Usethiscommandtoresettheloggingseveritylevelforoneorallapplicationstothedefaultvalue of6(notificationsofsignificantconditions).
Syntax
clear logging application {mnemonic | all}
12-8
show logging local
Parameters
mnemonic Resetstheseveritylevelforaspecificapplicationto6.Validmnemonic valuesandtheircorrespondingapplicationsarelistedinTable 1238on page 128. Resetstheseveritylevelforallapplicationsto6.
all
Defaults
None.
Mode
Example
Thisexampleshowshowtoresettheloggingseveritylevelto6forSNMP.
D2(rw)->clear logging application SNMP
show logging local

Usethiscommandtodisplaythestateofmessageloggingtotheconsoleandapersistentfile.
Syntax
show logging local
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaythestateofmessagelogging.Inthiscase,loggingtothe consoleisenabledandloggingtoapersistentfileisdisabled.
D2(su)->show logging local Syslog Console Logging enabled Syslog File Logging disabled
set logging local

Usethiscommandtoconfigurelogmessagestotheconsoleandapersistentfile.
Syntax
set logging local console {enable | disable} file {enable | disable}
12-9
clear logging local
Parameters
consoleenable|disable fileenable|disable Enablesordisablesloggingtotheconsole. Enablesordisablesloggingtoapersistentfile.
Defaults
None.
Mode
Example
Thiscommandshowshowtoenableloggingtotheconsoleanddisableloggingtoapersistentfile:
D2(su)->set logging local console enable file disable
clear logging local

Usethiscommandtocleartheconsoleandpersistentstoreloggingforthelocalsession.
Syntax
clear logging local
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtoclearlocallogging:
D2(su)->clear logging local
show logging buffer

Usethiscommandtodisplaythelast256messageslogged.Bydefault,criticalfailuresanduser loginandlogouttimestampsaredisplayed.
Syntax
show logging buffer
Parameters
None.
12-10
Monitoring Network Events and Status
Defaults
None.
Mode
Example
Thisexampleshowsaportionoftheinformationdisplayedwiththeshowloggingbuffer command:
D2(su)->show logging buffer <165>Sep 4 07:43:09 10.42.71.13 CLI[5]User:rw logged in from 10.2.1.122 (telnet) <165>Sep 4 07:43:24 10.42.71.13 CLI[5]User: debug failed login from 10.4.1.100 (telnet)
Monitoring Network Events and Status

Purpose
Todisplayswitcheventsandcommandhistory,tosetthesizeofthehistorybuffer,andtodisplay anddisconnectcurrentusersessions.
Commands
For information about... history show history set history ping show users disconnect Refer to page... 12-11 12-12 12-12 12-13 12-13 12-14
history
Usethiscommandtodisplaythecontentsofthecommandhistorybuffer.Thecommandhistory bufferincludesalltheswitchcommandsentereduptoamaximumof100,asspecifiedintheset historycommand(sethistoryonpage 1212).
Syntax
history
Parameters
None.
Defaults
None.
show history
Mode
Example
Thisexampleshowshowtodisplaythecontentsofthecommandhistorybuffer.Itshowsthereare fivecommandsinthebuffer:
D2(su)->history 1 hist 2 show gvrp 3 show vlan 4 show igmp 5 show ip address
show history
Usethiscommandtodisplaythesize(inlines)ofthehistorybuffer.
Syntax
show history
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaythesizeofthehistorybuffer:
D2(su)->show history History buffer size: 20
set history
Usethiscommandtosetthesizeofthehistorybuffer.
Syntax
set history size [default]
Parameters
size default Specifiesthesizeofthehistorybufferinlines.Validvaluesare1to100. (Optional)Makesthissettingpersistentforallfuturesessions.
Defaults
None.
12-12 Logging and Network Management
ping
Mode
Example
Thisexampleshowshowtosetthesizeofthecommandhistorybufferto30lines:
D2(su)->set history 30
ping
UsethiscommandtosendICMPechorequestpacketstoanothernodeonthenetworkfromthe switchCLI.
Syntax
ping host
Parameters
host SpecifiestheIPaddressofthedevicetowhichthepingwillbesent.
Defaults
None.
Mode
Examples
ThisexampleshowshowtopingIPaddress134.141.89.29.Inthiscase,thishostisalive:
D2(su)->ping 134.141.89.29 134.141.89.29 is alive
Inthisexample,thehostatIPaddressisnotresponding:
D2(su)->ping 134.141.89.255 no answer from 134.141.89.255
show users
UsethiscommandtodisplayinformationabouttheactiveconsoleportorTelnetsession(s)logged intotheswitch.
Syntax
show users
Parameters
None.
Defaults
None.
12-13
disconnect
Mode
Example
Thisexampleshowshowtousetheshowuserscommand.Inthisoutput,therearetwoTelnet usersloggedinwithReadWriteaccessprivilegesfromIPaddresses134.141.192.119and 134.141.192.18:
D2(su)->show users Session User Location -------- ----- -------------------------* telnet rw 134.141.192.119 telnet rw 134.141.192.18
disconnect
UsethiscommandtocloseanactiveconsoleportorTelnetsessionfromtheswitchCLI.
Syntax
disconnect {ip-addr | console}
Parameters
ipaddr console SpecifiestheIPaddressoftheTelnetsessiontobedisconnected.This addressisdisplayedintheoutputshowninshowusersonpage 1215. Closesanactiveconsoleport.
Defaults
None.
Mode
Examples
ThisexampleshowshowtocloseaTelnetsessiontohost134.141.192.119:
D2(su)->disconnect 134.141.192.119
Thisexampleshowshowtoclosethecurrentconsolesession:
D2(su)->disconnect console
12-14
Managing Switch Network Addresses and Routes
Managing Switch Network Addresses and Routes

Purpose
TodisplayordeleteswitchARPtableentries,andtodisplayMACaddressinformation.
Commands
For information about... show arp set arp clear arp traceroute show mac show mac agetime set mac agetime clear mac agetime set mac algorithm show mac algorithm clear mac algorithm set mac multicast clear mac address show mac unreserved-flood set mac unreserved-flood Refer to page... 12-15 12-16 12-17 12-17 12-18 12-19 12-20 12-20 12-21 12-21 12-22 12-22 12-23 12-23 12-24
show arp
UsethiscommandtodisplaytheswitchsARPtable.
Syntax
show arp
Parameters
None.
Defaults
None.
Mode
12-15
set arp
Example
ThisexampleshowshowtodisplaytheARPtable:
D2(su)->show arp LINK LEVEL ARP TABLE IP Address Phys Address Flags Interface ----------------------------------------------------10.20.1.1 00-00-5e-00-01-1 S host 134.142.21.194 00-00-5e-00-01-1 S host 134.142.191.192 00-00-5e-00-01-1 S host 134.142.192.18 00-00-5e-00-01-1 S host 134.142.192.119 00-00-5e-00-01-1 S host -----------------------------------------------------

Output Field IP Address Phys Address Flags
show arp Output Details

What It Displays... IP address mapped to MAC address. MAC address mapped to IP address. Route status. Possible values and their definitions include: S - manually configured entry (static) P - respond to ARP requests for this entry
set arp
UsethiscommandtoaddmappingentriestotheswitchsARPtable.
Syntax
set arp ip-address mac-address
Parameters
ipaddress macaddress SpecifiestheIPaddresstomaptotheMACaddressandaddtotheARP table. SpecifiestheMACaddresstomaptotheIPaddressandaddtotheARP table.TheMACaddresscanbeformattedasxx:xx:xx:xx:xx:xxorxxxx xxxxxxxx.
Defaults
None.
Mode
Example
ThisexampleshowshowtomapIPaddress192.168.219.232toMACaddress00000c400fbc:
D2(su)->set arp 192.168.219.232 00-00-0c-40-0f-bc
12-16
clear arp
clear arp
UsethiscommandtodeleteaspecificentryorallentriesfromtheswitchsARPtable.
Syntax
clear arp {ip-address | all}
Parameters
ipaddress|all SpecifiestheIPaddressintheARPtabletobecleared,orclearsallARP entries.
Defaults
None.
Mode
Example
Thisexampleshowshowtodeleteentry10.1.10.10fromtheARPtable:
D2(su)->clear arp 10.1.10.10
traceroute
UsethiscommandtodisplayahopbyhoppaththroughanIPnetworkfromthedevicetoa specificdestinationhost.ThreeUDPorICMPprobeswillbetransmittedforeachhopbetweenthe sourceandthetraceroutedestination.
Syntax
traceroute [-w waittime] [-f first-ttl] [-m max-ttl] [-p port] [-q nqueries] [-r] [-d] [-n] [-v] host
Parameters
wwaittime ffirstttl mmaxttl pport qnqueries r d n v host (Optional)Specifiestimeinsecondstowaitforaresponsetoaprobe. (Optional)Specifiesthetimetolive(TTL)ofthefirstoutgoingprobe packet. (Optional)Specifiesthemaximumtimetolive(TTL)usedinoutgoing probepackets. (Optional)SpecifiesthebaseUDPportnumberusedinprobes. (Optional)Specifiesthenumberofprobeinquiries. (Optional)Bypassesthenormalhostroutingtables. (Optional)Setsthedebugsocketoption. (Optional)Displayshopaddressesnumerically.(Supportedinafuture release.) (Optional)Displaysverboseoutput,includingthesizeanddestinationof eachresponse. SpecifiesthehosttowhichtherouteofanIPpacketwillbetraced.
show mac
Defaults
Ifnotspecified,waittimewillbesetto5seconds. Ifnotspecified,firstttlwillbesetto1second. Ifnotspecified,maxttlwillbesetto30seconds. Ifnotspecified,portwillbesetto33434. Ifnotspecified,nquerieswillbesetto3. Ifrisnotspecified,normalhostroutingtableswillbeused. Ifdisnotspecified,thedebugsocketoptionwillnotbeused. Ifvisnotspecified,summaryoutputwillbedisplayed.
Mode
Example
Thisexampleshowshowtousetraceroutetodisplayaroundtrippathtohost192.167.252.17.In thiscase,hop1istheDSeriesswitch,hop2is14.1.0.45,andhop3isbacktothehostIPaddress. RoundtriptimesforeachofthethreeUDPprobesaredisplayednexttoeachhop:
D2(su)->traceroute 192.167.252.17 traceroute to 192.167.252.17 (192.167.252.17), 30 hops max, 40 byte packets 1 matrix.enterasys.com (192.167.201.40) 20.000 ms 20.000 ms 20.000 ms 2 14.1.0.45 (14.1.0.45) 40.000 ms 10.000 ms 20.000 ms 3 192.167.252.17 (192.167.252.17) 50.000 ms 0.000 ms 20.000 ms
show mac
UsethiscommandtodisplayMACaddressesintheswitchsfilteringdatabase.Theseare addresseslearnedonaportthroughtheswitchingprocess.
Syntax
show mac [address mac-address] [fid fid] [port port-string] [type {other | learned | self | mgmt}]
Parameters
addressmacaddress fidfid portportstring typeother|learned| self|mgmt (Optional)DisplaysaspecificMACaddress(ifitisknownbythe device). (Optional)DisplaysMACaddressesforaspecificfilterdatabase identifier. (Optional)DisplaysMACaddressesforspecificport(s). (Optional)Displaysinformationrelatedtoother,learned,selfor mgmt(management)addresstype.
Defaults
Ifnoparametersarespecified,allMACaddressesforthedevicewillbedisplayed.
12-18
show mac agetime
Mode
Example
ThisexampleshowshowtodisplayMACaddressinformationforge.3.1:
D2(su)->show mac port ge.3.1 MAC Address FID Port Type ----------------- ---- ------------- -------00-09-6B-0F-13-E6 15 ge.3.1 Learned MAC Address VLAN Port Type Status Egress Ports ----------------- ---- ------------- ------- ------- --------------------------01-01-23-34-45-56 20 any mcast perm ge.3.1

Output Field MAC Address FID Port Type
show mac Output Details

What It Displays... MAC addresses mapped to the port(s) shown. Filter database identifier. Port designation. Address type. Valid types are: Learned Self Management Other (this will include any static MAC locked addresses as described in Configuring MAC Locking on page 15-46). mcast (multicast)
VLAN Status Egress Ports
The VLAN ID configured for the multicast MAC address. The status of the multicast address. The ports which have been added to the egress ports list.
show mac agetime

UsethiscommandtodisplaythetimeoutperiodforaginglearnedMACentries.
Syntax
show mac agetime
Parameters
None.
Defaults
None.
12-19
set mac agetime
Mode
Example
ThisexampleshowshowtodisplaytheMACtimeoutperiod:
D2(su)->show mac agetime Aging time: 300 seconds
set mac agetime

UseThiscommandtosetthetimeoutperiodforaginglearnedMACentries.
Syntax
set mac agetime time
Parameters
time SpecifiesthetimeoutperiodinsecondsforaginglearnedMAC addresses.Validvaluesare10to1,000,000seconds.Defaultvalueis300 seconds.
Defaults
None.
Mode
Example
ThisexampleshowshowtosettheMACtimeoutperiod:
D2(su)->set mac agetime 250
clear mac agetime

UsethiscommandtoresetthetimeoutperiodforaginglearnedMACentriestothedefaultvalue of300seconds.
Syntax
clear mac agetime
Parameters
None.
Defaults
None.
Mode
set mac algorithm
Example
ThisexampleshowshowtoresettheMACtimeoutperiodtothedefaultvalueof300seconds.
D2(su)->clear mac agetime
set mac algorithm

UsethiscommandtosettheMACalgorithmmode,whichdeterminesthehasmechanismusedby thedevicewhenperformingLayer2lookupsonreceivedframes.
Syntax
set mac algorithm {mac-crc16-lowerbits | mac-crc16-upperbits | mac-crc32-lowerbits | mac-crc32-upperbits}
Parameters
maccrc16lowerbits maccrc16upperbits maccrc32lowerbits maccrc32upperbits SelecttheMACCRC16lowerbitsalgorithmforhashing. SelecttheMACCRC16upperbitsalgorithmforhashing. SelecttheMACCRC32lowerbitsalgorithmforhashing. SelecttheMACCRC32upperbitsalgorithmforhashing.
Defaults
ThedefaultMACalgorithmismaccrc16upperbits.
Mode
Usage
EachalgorithmisoptimizedforadifferentspreadofMACaddresses.Whenchangingthismode, theswitchwilldisplayawarningmessageandpromptyoutorestartthedevice. ThedefaultMACalgorithmismaccrc16upperbits.
Example
Thisexamplesetsthehashingalgorithmtomaccrc32upperbits.
D2(rw)->set mac algorithm mac-crc32-upperbits
show mac algorithm

ThiscommanddisplaysthecurrentlyselectedMACalgorithmmode.
Syntax
show mac algorithm
Parameters
None.
12-21
clear mac algorithm
Defaults
None.
Mode
Example
Thisexampleshowstheoutputofthiscommand.
D2(su)->show mac algorithm Mac hashing algorithm is mac-crc16-upperbits.
clear mac algorithm

UsethiscommandtoreturntheMAChashingalgorithmtothedefaultvalueofmaccrc16 upperbits.
Syntax
clear mac algorithm
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleresetstheMAChashingalgorithmtothedefaultvalue.
D2(su)->clear mac algorithm
set mac multicast

UsethiscommandtodefineonwhatportswithinaVLANamulticastaddresscanbedynamically learnedon,oronwhatportsaframewiththespecifiedMACaddresscanbeflooded.Also,use thiscommandtoappendportstoorclearportsfromtheegressportslist.
Syntax
set mac multicast mac-address vlan-id [port-string] [{append | clear} port-string]
Parameters
macaddress vlanid SpecifiesthemulticastMACaddress.TheMACaddresscanbe formattedasxx:xx:xx:xx:xx:xxorxxxxxxxxxxxx. SpecifiestheVLANIDcontainingtheports.
12-22
clear mac address
portstring append|clear
SpecifiestheportorrangeofportsthemulticastMACaddresscanbe learnedonorfloodedto. Appendsorclearstheportorrangeofportsfromtheegressportlist.
Defaults
Ifnoportstringisdefined,thecommandwillapplytoallports.
Mode
Example
ThisexampleconfiguresmulticastMACaddress010122334455forVLAN24.
D2(su)->set mac multicast 01-01-22-33-44-55 24
clear mac address

UsethiscommandtoremoveamulticastMACaddress.
Syntax
clear mac address mac-address [vlan-id]
Parameters
macaddress vlanid SpecifiesthemulticastMACaddresstobecleared.TheMACaddress canbeformattedasxx:xx:xx:xx:xx:xxorxxxxxxxxxxxx. (Optional)SpecifiestheVLANIDfromwhichtoclearthestatic multicastMACaddress.
Defaults
Ifnovlanidisspecified,themulticastMACaddressisclearedfromallVLANs.
Mode
Example
ThisexampleclearsmulticastMACaddress010122334455fromVLAN24.
D2(su)->clear mac multicast 01-01-22-33-44-55 24
show mac unreserved-flood

Usethiscommandtodisplaythestateofmulticastfloodprotection.
Syntax
show mac unreserved-flood
12-23
set mac unreserved-flood
Parameters
None.
Defaults
None.
Mode
Example
Thisexampledisplaysthestatusofmulticastfloodprotection.
D2(su)->show mac unreserved-flood mac unreserved flood is disabled.
set mac unreserved-flood

Usethiscommandtoenableordisablemulticastfloodprotection.Whenenabled,thisprevents policyprofilesrequiringafull10masksfrombeingloaded.
Syntax
set mac unreserved-flood {disable | enable}
Parameters
disable|enable Disablesorenablesmulticastfloodprotection.
Defaults
None.
Mode
Usage
Thefollowingaddresseswillbeforwardedwhenthisfunctionisenabled: 01:80:C2:00:00:11 01:80:C2:00:00:14 01:80:C2:00:00:15 Thedefaultstateisdisabled,andtheseaddresseswillnotbeforwarded.
Example
Thisexampleenablesmulticastfloodprotection.
D2(su)->set mac unreserved-flood enable
12-24
Configuring Simple Network Time Protocol (SNTP)
Configuring Simple Network Time Protocol (SNTP)

Purpose
ToconfiguretheSimpleNetworkTimeProtocol(SNTP),whichsynchronizesdeviceclocksina network.
Note: A host IP address must be configured on the D2 to support SNTP.
Commands
For information about... show sntp set sntp client clear sntp client set sntp server clear sntp server set sntp poll-interval clear sntp poll-interval set sntp poll-retry clear sntp poll-retry set sntp poll-timeout clear sntp poll-timeout Refer to page... 12-25 12-27 12-27 12-28 12-28 12-29 12-29 12-29 12-30 12-30 12-31
show sntp
UsethiscommandtodisplaySNTPclientsettings.
Syntax
show sntp
Parameters
None.
Defaults
None.
Mode
12-25
show sntp
Example
ThisexampleshowshowtodisplaySNTPclientsettings:
D2(su)->show sntp SNTP Version: 3 Current Time: TUE SEP 09 16:13:33 2003 Timezone: 'EST', offset from UTC is -4 hours and 0 minutes Client Mode: unicast Broadcast Count: 0 Poll Interval: 512 seconds Poll Retry: 1 Poll Timeout: 5 seconds SNTP Poll Requests: 1175 Last SNTP Update: TUE SEP 09 16:05:24 2003 Last SNTP Request: TUE SEP 09 16:05:24 2003 Last SNTP Status: Success SNTP-Server Precedence Status ------------------------------------------10.2.8.6 2 Active 144.111.29.19 1 Active

Output Field SNTP Version Current Time Timezone Client Mode Broadcast Count Poll Interval Poll Retry Poll Timeout
show sntp Output Details

What It Displays... SNTP version number. Current time on the system clock. Time zone name and amount it is offset from UTC (Universal Time). Whether SNTP client is operating in unicast or broadcast mode. Set using set sntp client command (set sntp client on page 12-27). Number of SNTP broadcast frames received. Interval between SNTP unicast requests. Default of 512 seconds can be reset using the set sntp poll-interval command (set sntp poll-interval on page 12-29). Number of poll retries to a unicast SNTP server. Default of 1 can be reset using the set sntp poll-retry command (set sntp poll-retry on page 12-29). Timeout for a response to a unicast SNTP request. Default of 5 seconds can be reset using set sntp poll-timeout command (set sntp poll-timeout on page 12-30).
SNTP Poll Requests Total number of SNTP poll requests. Last SNTP Update Last SNTP Request Last SNTP Status SNTP-Server Precedence Date and time of most recent SNTP update. Date and time of most recent SNTP request. Whether or not broadcast reception or unicast transmission and reception was successful. IP address(es) of SNTP server(s). Precedence level of SNTP server in relation to its peers. Highest precedence is 1 and lowest is 10. Default of 1 can be reset using the set sntp server command (set sntp server on page 12-28). Whether or not the SNTP server is active.
Status
12-26
set sntp client
set sntp client

UsethiscommandtosettheSNTPoperationmode.
Syntax
set sntp client {broadcast | unicast | disable}
Parameters
broadcast unicast disable EnablesSNTPinbroadcastclientmode. EnablesSNTPinunicast(pointtopoint)clientmode.Inthismode,the clientmustsupplytheIPaddressfromwhichtoretrievethecurrenttime. DisablesSNTP.
Defaults
None.
Mode
Example
ThisexampleshowshowtoenableSNTPinbroadcastmode:
D2(su)->set sntp client broadcast
clear sntp client

UsethiscommandtocleartheSNTPclientsoperationalmode.
Syntax
clear sntp client
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtocleartheSNTPclientsoperationalmode:
D2(su)->clear sntp client
12-27
set sntp server
set sntp server

UsethiscommandtoaddaserverfromwhichtheSNTPclientwillretrievethecurrenttimewhen operatinginunicastmode.Upto10serverscanbesetasSNTPservers.
Syntax
set sntp server ip-address [precedence]
Parameters
ipaddress precedence SpecifiestheSNTPserversIPaddress. (Optional)SpecifiesthisSNTPserversprecedenceinrelationtoitspeers. Validvaluesare1(highest)to10(lowest).
Defaults
Ifprecedenceisnotspecified,1willbeapplied.
Mode
Example
ThisexampleshowshowtosettheserveratIPaddress10.21.1.100 asan SNTPserver:
D2(su)->set sntp server 10.21.1.100
clear sntp server

UsethiscommandtoremoveoneorallserversfromtheSNTPserverlist.
Syntax
clear sntp server {ip-address | all}
Parameters
ipaddress all SpecifiestheIPaddressofaservertoremovefromtheSNTPserverlist. RemovesallserversfromtheSNTPserverlist.
Defaults
None.
Mode
Example
ThisexampleshowshowtoremovetheserveratIPaddress10.21.1.100 fromtheSNTPserverlist:
D2(su)->clear sntp server 10.21.1.100
12-28
set sntp poll-interval
set sntp poll-interval

UsethiscommandtosetthepollintervalbetweenSNTPunicastrequests.
Syntax
set sntp poll-interval interval
Parameters
interval Specifiesthepollintervalinseconds.Validvaluesare16to16284.
Defaults
None.
Mode
Example
ThisexampleshowshowtosettheSNTPpollintervalto30seconds:
D2(su)->set sntp poll-interval 30
clear sntp poll-interval

UsethiscommandtoclearthepollintervalbetweenunicastSNTPrequests.
Syntax
clear sntp poll-interval
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtocleartheSNTPpollinterval:
D2(su)->clear sntp poll-interval
set sntp poll-retry

UsethiscommandtosetthenumberofpollretriestoaunicastSNTPserver.
Syntax
set sntp poll-retry retry
12-29
clear sntp poll-retry
Parameters
retry Specifiesthenumberofretries.Validvaluesare0to10.
Defaults
None.
Mode
Example
ThisexampleshowshowtosetthenumberofSNTPpollretriesto5:
D2(su)->set sntp poll-retry 5

UsethiscommandtoclearthenumberofpollretriestoaunicastSNTPserver.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearthenumberofSNTPpollretries:
D2(su)->clear sntp poll-retry
set sntp poll-timeout

Usethiscommandtosetthepolltimeout(inseconds)foraresponsetoaunicastSNTPrequest.
Syntax
set sntp poll-timeout timeout
Parameters
timeout Specifiesthepolltimeoutinseconds.Validvaluesare1to30.
Defaults
None.
clear sntp poll-timeout
Mode
Example
ThisexampleshowshowtosettheSNTPpolltimeoutto10seconds:
D2(su)->set sntp poll-timeout 10

UsethiscommandtocleartheSNTPpolltimeout.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtocleartheSNTPpolltimeout:
D2(su)->clear sntp poll-timeout
Configuring Node Aliases

Purpose
Toreview,disable,andreenablenode(port)aliasfunctionality,which determineswhatnetwork protocolsarerunningononeormoreports.
Commands
For information about... show nodealias config set nodealias clear nodealias config Refer to page... 12-32 12-32 12-33
12-31
show nodealias config
show nodealias config

Usethiscommandtodisplaynodealiasconfigurationsettingsononeormoreports.
Syntax
show nodealias config [port-string]
Parameters
portstring (Optional)Displaysnodealiasconfigurationsettingsforspecificport(s).
Defaults
Ifportstringisnotspecified,nodealiasconfigurationswillbedisplayedforallports.
Mode
Example
Thisexampleshowshowtodisplaynodealiasconfigurationsettingsforportsge.2.1through9:
D2(rw)->show nodealias config ge.2.1-9 Port Number Max Entries --------------------ge.2.1 16 ge.2.2 47 ge.2.3 47 ge.2.4 47 ge.2.5 47 ge.2.6 47 ge.2.7 47 ge.2.8 47 ge.2.9 4000 Used Entries -----------0 0 2 0 0 2 0 0 1 Status -----Enable Enable Enable Enable Enable Enable Enable Enable Enable

Output Field Port Number Max Entries Used Entries Status
show nodealias config Output Details

What It Displays... Port designation. Maximum number of alias entries configured for this port. Number of alias entries (out of the maximum amount configured) already used by this port. Whether or not a node alias agent is enabled (default) or disabled on this port.
set nodealias
Usethiscommandtoenableordisableanodealiasagentononeormoreports,orsetthe maximumnumberofaliasentriesperport.
Syntax
set nodealias {enable | disable | maxentries maxentries} port-string
12-32
clear nodealias config
Parameters
enable|disable maxentriesmaxentries portstring Enablesordisablesanodealiasagent. Setthemaximumnumberofaliasentriesperports.Validrangeis0to 4096.Thedefaultvalueis32. Specifiestheport(s)onwhichtoenable/disablenodealiasagentorset amaximumnumberofentries.
Defaults
None.
Mode
Usage
Uponpacketreception,nodealiasesaredynamicallyassignedtoportsenabledwithanalias agent,whichisthedefaultsettingonDSeriesdevices.Nodealiasescannotbestaticallycreated, butcanbedeletedusingtheclearnodealiascommandasdescribedinclearnodealiasconfigon page 1233.
Example
Thisexampleshowshowtodisablethenodealiasagentonge.1.3:
D2(su)->set nodealias disable ge.1.3

Usethiscommandtoresetnodealiasstatetoenabledandclearthemaximumentriesvalue.
Syntax
clear nodealias config port-string
Parameters
portstring Specifiestheport(s)onwhichtoresetthenodealiasconfiguration.
Defaults
None.
Mode
Example
Thisexampleshowshowtoresetthenodealiasconfigurationonge.1.3:
D2(su)->clear nodealias config ge.1.3
12-33
12-34
13
RMON Configuration
ThischapterdescribesthecommandsusedtoconfigureRMONonaDSeriesswitch.
For information about... RMON Monitoring Group Functions Statistics Group Commands History Group Commands Alarm Group Commands Event Group Commands Filter Group Commands Packet Capture Commands Refer to page... 13-1 13-3 13-5 13-7 13-12 13-15 13-20
RMON Monitoring Group Functions

RMON(RemoteNetworkMonitoring)providescomprehensivenetworkfaultdiagnosis, planning,andperformancetuninginformationandallowsforinteroperabilitybetweenSNMP managementstationsandmonitoringagents.RMONextendstheSNMPMIBcapabilityby definingadditionalMIBsthatgenerateamuchrichersetofdataaboutnetworkusage.TheseMIB groupseachgatherspecificsetsofdatatomeetcommonnetworkmonitoringrequirements. Table 1343liststheRMONmonitoringgroupssupportedonDSeriesdevices,eachgroups functionandtheelementsitmonitors,andtheassociatedconfigurationcommandsneeded. Table 13-43
RMON Group Statistics
RMON Monitoring Group Functions and Commands

What It Does... Records statistics measured by the RMON probe for each monitored interface on the device. What It Monitors... Packets dropped, packets sent, bytes sent (octets), broadcast and multicast packets, CRC errors, oversized and undersized packets, fragments, jabbers, and counters for packets. CLI Command(s) show rmon stats on page 13-3 set rmon stats on page 13-4 clear rmon stats on page 13-5
13-1
RMON Monitoring Group Functions
Table 13-43
RMON Group History
RMON Monitoring Group Functions and Commands (Continued)

What It Does... Records periodic statistical samples from a network. What It Monitors... Sample period, number of samples and item(s) sampled. CLI Command(s) show rmon history on page 13-5 set rmon history on page 13-6 clear rmon history on page 13-7
Alarm
Periodically gathers statistical samples from variables in the probe and compares them with previously configured thresholds. If the monitored variable crosses a threshold, an event is generated. Controls the generation and notification of events from the device.
Alarm type, interval, starting threshold, stop threshold.
show rmon alarm on page 13-8 set rmon alarm properties on page 13-9 set rmon alarm status on page 13-10 clear rmon alarm on page 13-11
Event
Event type, description, last time event was sent.
show rmon event on page 13-12 set rmon event properties on page 13-13 set rmon event status on page 13-14 clear rmon event on page 13-14
Filter
Allows packets to be matched by a filter equation. These matched packets form a data stream or channel that may be captured.
Packets matching the filter configuration.
show rmon channel on page 13-16 set rmon channel on page 13-16 clear rmon channel on page 13-17 show rmon filter on page 13-17 set rmon filter on page 13-18 clear rmon filter on page 13-19
Packet Capture
Allows packets to be captured upon a filter match.
Packets matching the filter configuration.
show rmon capture on page 13-20 set rmon capture on page 13-21 clear rmon capture on page 13-22
13-2
RMON Configuration
Statistics Group Commands
Statistics Group Commands

Purpose
Todisplay,configure,andclearRMONstatistics.
Note: Due to hardware limitations, the only frame error counted is oversized frames.
Commands
For information about... show rmon stats set rmon stats clear rmon stats Refer to page... 13-3 13-4 13-5
show rmon stats

UsethiscommandtodisplayRMONstatisticsmeasuredforoneormoreports.
Syntax
show rmon stats [port-string]
Parameters
portstring (Optional)DisplaysRMONstatisticsforspecificport(s).
Defaults
Ifportstringisnotspecified,RMONstatswillbedisplayedforallports.
Mode
13-3
set rmon stats
Example
ThisexampleshowshowtodisplayRMONstatisticsforGigabitEthernetport1inswitch1.
D2(su)->show rmon stats ge.1.1
:
Port: ge.1.1 ------------------------------------Index = 1 Owner = monitor Data Source = ifIndex.1 Drop Events Collisions Jabbers Broadcast Pkts Multicast Pkts CRC Errors Undersize Pkts Oversize Pkts Fragments = = = = = = = = = 0 0 0 0 0 0 0 0 0 Packets Octets 0 64 65 - 127 128 - 255 256 - 511 512 - 1023 1024 - 1518 = = = = = = = = 0 0 0 0 0 0 0 0
Octets Octets Octets Octets Octets Octets
set rmon stats

UsethiscommandtoconfigureanRMONstatisticsentry.
Syntax
set rmon stats index port-string [owner]
Parameters
index portstring owner Specifiesanindexforthisstatisticsentry. Specifiesport(s)towhichthisentrywillbeassigned. (Optional)Assignsanownerforthisentry.
Defaults
Ifownerisnotspecified,monitorwillbeapplied.
Mode
Example
ThisexampleshowshowtoconfigureRMONstatisticsentry2forge.1.20:
D2(rw)->set rmon stats 2 ge.1.20
13-4
RMON Configuration
clear rmon stats
clear rmon stats

UsethiscommandtodeleteoneormoreRMONstatisticsentries.
Syntax
clear rmon stats {index-list | to-defaults}
Parameters
indexlist todefaults Specifiesoneormorestatsentriestobedeleted,causingthemtodisappear fromanyfutureRMONqueries. Resetsallhistoryentriestodefaultvalues.Thiswillcauseentriesto reappearinRMONqueries.
Defaults
None.
Mode
Example
ThisexampleshowshowtodeleteRMONstatisticsentry2:
D2(rw)->clear rmon stats 2
History Group Commands

Purpose
Todisplay,configure,andclearRMONhistorypropertiesandstatistics.
Commands
For information about... show rmon history set rmon history clear rmon history Refer to page... 13-5 13-6 13-7
show rmon history

UsethiscommandtodisplayRMONhistorypropertiesandstatistics.TheRMONhistorygroup recordsperiodicstatisticalsamplesfromanetwork.
Syntax
show rmon history [port-string]
13-5
set rmon history
Parameters
portstring (Optional)DisplaysRMONhistoryentriesforspecificport(s).
Defaults
Ifportstringisnotspecified,informationaboutallRMONhistoryentrieswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayRMONhistoryentriesforGigabitEthernetport1inswitch1. Acontrolentrydisplaysfirst,followedbyactualentriescorrespondingtothecontrolentry.Inthis case,thedefaultsettingsforentryowner,samplinginterval,andmaximumnumberofentries. (buckets)havenotbeenchangedfromtheirdefaultvalues.Foradescriptionofthetypesof statisticsshown,refertoTable 1344.
D2(su)->show rmon history ge.1.1
:
Port: ge.1.1 ------------------------------------Index 1 Owner = monitor Status = valid Data Source = ifIndex.1 Interval = 30 Buckets Requested = 50 Buckets Granted = 10 Sample 2779 Interval Start: 1 days 0 hours 2 minutes 22 seconds Drop Events = 0 Undersize Pkts = 0 Octets = 0 Oversize Pkts = 0 Packets = 0 Fragments = 0 Broadcast Pkts = 0 Jabbers = 0 Multicast Pkts = 0 Collisions = 0 CRC Align Errors = 0 Utilization(%) = 0
set rmon history

UsethiscommandtoconfigureanRMONhistoryentry.
Syntax
set rmon history index [port-string] [buckets buckets] [interval interval] [owner owner]
Parameters
indexlist portstring bucketsbuckets intervalinterval ownerowner Specifiesanindexnumberforthisentry. (Optional)Assignsthisentrytoaspecificport. (Optional)Specifiesthemaximumnumberofentriestomaintain. (Optional)Specifiesthesamplingintervalinseconds. (Optional)Specifiesanownerforthisentry.
13-6
RMON Configuration
clear rmon history
Defaults
Ifbucketsisnotspecified,themaximumnumberofentriesmaintainedwillbe50. Ifnotspecified,intervalwillbesetto30seconds. Ifownerisnotspecified,monitorwillbeapplied.
Mode
Example
ThisexampleshowshowconfigureRMONhistoryentry1onportge.2.1tosampleevery20 seconds:
D2(rw)->set rmon history 1 ge.2.1 interval 20
clear rmon history

UsethiscommandtodeleteoneormoreRMONhistoryentriesorresetoneormoreentriesto defaultvalues.Forspecificvalues,refertosetrmonhistoryonpage 136.
Syntax
clear rmon history {index-list | to-defaults}
Parameters
indexlist todefaults Specifiesoneormorehistoryentriestobedeleted,causingthemto disappearfromanyfutureRMONqueries. Resetsallhistoryentriestodefaultvalues.Thiswillcauseentriesto reappearinRMONqueries.
Defaults
None.
Mode
Example
ThisexampleshowshowtodeleteRMONhistoryentry1:
D2(rw)->clear rmon history 1
Alarm Group Commands

Purpose
Todisplay,configure,andclearRMONalarmentriesandproperties.
13-7
show rmon alarm
Commands
For information about... show rmon alarm set rmon alarm properties set rmon alarm status clear rmon alarm Refer to page... 13-8 13-9 13-10 13-11
show rmon alarm

UsethiscommandtodisplayRMONalarmentries.TheRMONalarmgroupperiodicallytakes statisticalsamplesfromRMONvariablesandcomparesthemwithpreviouslyconfigured thresholds.IfthemonitoredvariablecrossesathresholdanRMONeventisgenerated.
Syntax
show rmon alarm [index]
Parameters
index (Optional)DisplaysRMONalarmentriesforaspecificentryindexID.
Defaults
Ifindexisnotspecified,informationaboutallRMONalarmentrieswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayRMONalarmentry3:
D2(rw)->show rmon alarm 3 Index 3 --------------------Owner = Status = Variable = Sample Type = Interval = Rising Threshold = Rising Event Index =
Manager valid 1.3.6.1.4.1.5624.1.2.29.1.2.1.0 delta Startup Alarm 30 Value 1 Falling Threshold 2 Falling Event Index
= = = =
rising 0 0 0

Output Field Index Owner
show rmon alarm Output Details

What It Displays... Index number for this alarm entry. Text string identifying who configured this entry.
13-8
RMON Configuration
set rmon alarm properties
Table 13-44
Output Field Status Variable Sample Type Startup Alarm Interval
show rmon alarm Output Details (Continued)

What It Displays... Whether this event entry is enabled (valid) or disabled. MIB object to be monitored. Whether the monitoring method is an absolute or a delta sampling. Whether alarm generated when this entry is first enabled is rising, falling, or either. Interval in seconds at which RMON will conduct sample monitoring. Minimum threshold for causing a rising alarm. Maximum threshold for causing a falling alarm. Index number of the RMON event to be triggered when the rising threshold is crossed. Index number of the RMON event to be triggered when the falling threshold is crossed.
Rising Threshold Falling Threshold Rising Event Index Falling Event Index
set rmon alarm properties

UsethiscommandtoconfigureanRMONalarmentry,ortocreateanewalarmentrywithan unusedalarmindexnumber.
Syntax
set rmon alarm properties index [interval interval] [object object] [type {absolute | delta}] [startup {rising | falling | either}] [rthresh rthresh] [fthresh fthresh] [revent revent] [fevent fevent] [owner owner]
Parameters
index intervalinterval objectobject Specifiesanindexnumberforthisentry.Maximumnumberorentriesis 50.Maximumvalueis65535. (Optional)Specifiesaninterval(inseconds)forRMONtoconductsample monitoring. (Optional)SpecifiesaMIBobjecttobemonitored.
Note: This parameter is not mandatory for executing the command, but must be specified in order to enable the alarm entry configuration.
typeabsolute| delta
(Optional)Specifiesthemonitoringmethodas:samplingtheabsolute valueoftheobject,orthedifference(delta)betweenobjectsamples.
13-9
set rmon alarm status
startuprising| falling|either
(Optional)Specifiesthetypeofalarmgeneratedwhenthiseventisfirst enabledas: RisingSendsalarmwhenanRMONeventreachesamaximum thresholdconditionisreached,forexample,morethan30collisions persecond. FallingSendsalarmwhenRMONeventfallsbelowaminimum thresholdcondition,forexamplewhenthenetworkisbehaving normallyagain. EitherSendsalarmwheneitherarisingorfallingthresholdis reached.
rthreshrthresh fthreshfthresh reventrevent feventfevent ownerowner
(Optional)Specifiesaminimumthresholdforcausingarisingalarm. Specifiesamaximumthresholdforcausingafallingalarm. SpecifiestheindexnumberoftheRMONeventtobetriggeredwhenthe risingthresholdiscrossed. SpecifiestheindexnumberoftheRMONeventtobetriggeredwhenthe fallingthresholdiscrossed. (Optional)Specifiesthenameoftheentitythatconfiguredthisalarm entry.
Defaults
interval3600seconds typeabsolute startuprising rthresh0 fthresh0 revent0 fevent0 ownermonitor
Mode
Example
ThisexampleshowshowtoconfigurearisingRMONalarm.Thisentrywillconductmonitoring ofthedeltabetweensamplesevery30seconds:
D2(rw)->set rmon alarm properties 3 interval 30 object 1.3.6.1.4.1.5624.1.2.29.1.2.1.0 type delta rthresh 1 revent 2 owner Manager
set rmon alarm status

UsethiscommandtoenableanRMONalarmentry.Analarmisanotificationthatastatistical sampleofamonitoredvariablehascrossedaconfiguredthreshold.
Syntax
set rmon alarm status index enable
13-10 RMON Configuration
clear rmon alarm
Parameters
index enable Specifiesanindexnumberforthisentry.Maximumnumberorentriesis 50.Maximumvalueis65535. Enablesthisalarmentry.
Defaults
None.
Mode
Usage
AnRMONalarmentrycanbecreatedusingthiscommand,configuredusingthesetrmonalarm propertiescommand(setrmonalarmpropertiesonpage 139),thenenabledusingthis command.AnRMONalarmentrycanbecreatedandconfiguredatthesametimebyspecifying anunusedindexwiththesetrmonalarmpropertiescommand.
Example
ThisexampleshowshowtoenableRMONalarmentry3:
D2(rw)->set rmon alarm status 3 enable
clear rmon alarm

UsethiscommandtodeleteanRMONalarmentry.
Syntax
clear rmon alarm index
Parameters
index Specifiestheindexnumberofentrytobecleared.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearRMONalarmentry1:
D2(rw)->clear rmon alarm 1
13-11
Event Group Commands
Event Group Commands

Purpose
TodisplayandclearRMONevents,andtoconfigureRMONeventproperties.
Commands
For information about... show rmon event set rmon event properties set rmon event status clear rmon event Refer to page... 13-12 13-13 13-14 13-14
show rmon event

UsethiscommandtodisplayRMONevententryproperties.
Syntax
show rmon event [index]
Parameters
index (Optional)DisplaysRMONpropertiesandlogentriesforaspecificentry indexID.
Defaults
Ifindexisnotspecified,informationaboutallRMONentrieswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayRMONevententry3:
D2(rw)->show rmon event 3 Index 3 ---------------Owner = Status = Description = Type = Community = Last Time Sent =
Manager valid STP Topology change log-and-trap public 0 days 0 hours 0 minutes 37 seconds
13-12
RMON Configuration
set rmon event properties
Table 13-45
Output Field Index Owner Status Description Type Community
show rmon event Output Details

What It Displays... Index number for this event entry. Text string identifying who configured this entry. Whether this event entry is enabled (valid) or disabled. Text string description of this event. Whether the event notification will be a log entry, and SNMP trap, both, or none. SNMP community name if message type is set to trap. When an event notification matching this entry was sent.
Last Time Sent
set rmon event properties

UsethiscommandtoconfigureanRMONevententry,ortocreateanewevententrywithan unusedeventindexnumber.
Syntax
set rmon event properties index [description description] [type {none | log | trap | both}] [community community] [owner owner]
Parameters
index description description typenone|log| trap|both community community Specifiesanindexnumberforthisentry.Maximumnumberofentriesis 100.Maximumvalueis65535. (Optional)Specifiesatextstringdescriptionofthisevent. (Optional)SpecifiesthetypeofRMONeventnotificationas:none,alog tableentry,anSNMPtrap,orbothalogentryandatrapmessage. (Optional)SpecifiesanSNMPcommunitynametouseifthemessage typeissettotrap.FordetailsonsettingSNMPtrapsandcommunity names,refertoCreatingaBasicSNMPTrapConfigurationon page 537. (Optional)Specifiesthenameoftheentitythatconfiguredthisentry.
ownerowner
Defaults
Ifdescriptionisnotspecified,nonewillbeapplied. Ifnotspecified,typenonewillbeapplied. Ifownerisnotspecified,monitorwillbeapplied.
Mode
13-13
set rmon event status
Example
ThisexampleshowshowtocreateandenableanRMONevententrycalledSTPtopology changethatwillsendbothalogentryandanSNMPtrapmessagetothepubliccommunity:
D2(rw)->set rmon event properties 2 description "STP topology change" type both community public owner Manager
set rmon event status

UsethiscommandtoenableanRMONevententry.Anevententrydescribestheparametersofan RMONeventthatcanbetriggered.EventscanbefiredbyRMONalarmsandcanbeconfiguredto createalogentry,generateatrap,orboth.
Syntax
set rmon event status index enable
Parameters
index enable Specifiesanindexnumberforthisentry.Maximumnumberofentriesis 100.Maximumvalueis65535. Enablesthisevententry.
Defaults
None.
Mode
Usage
AnRMONevententrycanbecreatedusingthiscommand,configuredusingthesetrmonevent propertiescommand(setrmoneventpropertiesonpage 1313),thenenabledusingthis command.AnRMONevententrycanbecreatedandconfiguredatthesametimebyspecifyingan unusedindexwiththesetrmoneventpropertiescommand.
Example
ThisexampleshowshowtoenableRMONevententry1:
D2(rw)->set rmon event status 1 enable
clear rmon event

UsethiscommandtodeleteanRMONevententryandanyassociatedlogentries.
Syntax
clear rmon event index
Parameters
index Specifiestheindexnumberoftheentrytobecleared.
13-14
RMON Configuration
Filter Group Commands
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearRMONevent1:
D2(rw)->clear rmon event 1
Filter Group Commands

Thepacketcaptureandfilterfunctionisdisabledbydefault.Onlyoneinterfacecanbeconfigured forcapturingandfilteringatatime. Whenpacketcaptureisenabledonaninterface,theDSeriesswitchwillcapture100framesas closetosequentiallyaspossible.These100frameswillbeplacedintoabufferforinspection.If thereisdatainthebufferwhenthefunctionisstarted,thebufferwillbeoverwritten.Once100 frameshavebeencaptured,thecapturewillstop.Filteringwillbeperformedontheframes capturedinthebuffer.Therefore,onlyasubsetoftheframescapturedwillbeavailablefor display.
Note: Packet capture is sampling only and does not guarantee receipt of back to back packets.
Onechannelatatimecanbesupported,withuptothreefilters.Configuredchannel,filter,and buffercontrolinformationwillbesavedacrossresets,butcapturedframeswithinthebufferwill notbesaved. Thisfunctioncannotbeusedconcurrentlywithportmirroring.Thesystemwillchecktoprevent concurrentlyenablingbothfunctions,andawarningwillbegeneratedintheCLIifattempted.
Commands
For information about... show rmon channel set rmon channel clear rmon channel show rmon filter set rmon filter clear rmon filter Refer to page... 13-16 13-16 13-17 13-17 13-18 13-19
13-15
show rmon channel
show rmon channel

UsethiscommandtodisplayRMONchannelentriesforoneormoreports.
Syntax
show rmon channel [port-string]
Parameters
portstring (Optional)DisplaysRMONchannelentriesforaspecificport(s).
Defaults
Ifportstringisnotspecified,informationaboutallchannelswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayRMONchannelinformationforge.2.12:
D2(rw)->show rmon channel ge.2.12 Port ge.2.12 Channel index= 628 EntryStatus= valid ---------------------------------------------------------Control off AcceptType matched OnEventIndex 0 OffEventIndex 0 EventIndex 0 Status ready Matches 4498 Description Thu Dec 16 12:57:32 EST 2004 Owner NetSight smith
set rmon channel

UsethiscommandtoconfigureanRMONchannelentry.
Syntax
set rmon channel index port-string [accept {matched | failed}] [control {on | off}] [description description] [owner owner]
Parameters
index Specifiesanindexnumberforthisentry.Anentrywillautomaticallybe createdifanunusedindexnumberischosen.Maximumnumberof entriesis2.Maximumvalueis65535. Specifiestheportonwhichtrafficwillbemonitored. (Optional)Specifiestheactionofthefiltersonthischannelas: controlon|off matchedPacketswillbeacceptedonfiltermatches failedPacketswillbeacceptediftheyfailamatch
portstring acceptmatched| failed
(Optional)Enablesordisablescontroloftheflowofdatathroughthe channel.
13-16
RMON Configuration
clear rmon channel
description description ownerowner
(Optional)Specifiesadescriptionforthischannel. (Optional)Specifiesthenameoftheentitythatconfiguredthisentry.
Defaults
Ifanactionisnotspecified,packetswillbeacceptedonfiltermatches. Ifnotspecified,controlwillbesettooff. Ifadescriptionisnotspecified,nonewillbeapplied. Ifownerisnotspecified,itwillbesettomonitor.
Mode
Example
ThisexampleshowshowtocreateanRMONchannelentry:
D2(rw)->set rmon channel 54313 ge.2.12 accept failed control on description "capture all"
clear rmon channel

UsethiscommandtoclearanRMONchannelentry.
Syntax
clear rmon channel index
Parameters
index Specifiesthechannelentrytobecleared.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearRMONchannelentry2:
D2(rw)->clear rmon channel 2
show rmon filter

UsethiscommandtodisplayoneormoreRMONfilterentries.
Syntax
show rmon filter [index index | channel channel]
13-17
set rmon filter
Parameters
indexindex| channelchannel (Optional)Displaysinformationaboutaspecificfilterentry,oraboutall filterswhichbelongtoaspecificchannel.
Defaults
Ifnooptionsarespecified,informationforallfilterentrieswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayallRMONfilterentriesandchannelinformation:
D2(rw)->show rmon filter Index= 55508 Channel Index= 628 EntryStatus= valid ---------------------------------------------------------Data Offset 0 PktStatus 0 PktStatusMask 0 PktStatusNotMask 0 Owner ETS,NAC-D ----------------------------Data ff ff ff ff ff ff ----------------------------DataMask ff ff ff ff ff ff ----------------------------DataNotMask 00 00 00 00 00 00
set rmon filter

UsethiscommandtoconfigureanRMONfilterentry.
Syntax
set rmon filter index channel-index [offset offset] [status status] [smask smask] [snotmask snotmask] [data data] [dmask dmask] [dnotmask dnotmask] [owner owner]
Parameters
index Specifiesanindexnumberforthisentry.Anentrywillautomaticallybe createdifanunusedindexnumberischosen.Maximumnumberof entriesis10.Maximumvalueis65535. Specifiesthechanneltowhichthisfilterwillbeapplied. (Optional)Specifiesanoffsetfromthebeginningofthepackettolookfor matches. (Optional)Specifiespacketstatusbitsthataretobematched. (Optional)Specifiesthemaskappliedtostatustoindicatewhichbitsare significant. (Optional)Specifiestheinversionmaskthatindicateswhichbitsshould besetornotset (Optional)Specifiesthedatatobematched.
channelindex offsetoffset statusstatus smasksmask snotmasksnotmask datadata

13-18 RMON Configuration
clear rmon filter
dmaskdmask dnotmaskdnotmask owner
(Optional)Specifiesthemaskappliedtodatatoindicatewhichbitsare significant. (Optional)Specifiestheinversionmaskthatindicateswhichbitsshould besetornotset. (Optional)Specifiesthenameoftheentitythatconfiguredthisentry.
Defaults
Ifownerisnotspecified,itwillbesettomonitor. Ifnootheroptionsarespecified,none(0)willbeapplied.
Mode
Example
ThisexampleshowshowtocreateRMONfilter1andapplyittochannel9:
D2(rw)->set rmon filter 1 9 offset 30 data 0a154305 dmask ffffffff
clear rmon filter

UsethiscommandtoclearanRMONfilterentry.
Syntax
clear rmon filter {index index | channel channel}
Parameters
indexindex| channelchannel Clearsaspecificfilterentry,orallentriesbelongingtoaspecificchannel.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearRMONfilterentry1:
D2(rw)->clear rmon filter index 1
13-19
Packet Capture Commands
Packet Capture Commands

Notethatpacketcapturefilterissamplingonlyanddoesnotguaranteereceiptofbacktoback packets.
Purpose
TodisplayRMONcaptureentries,configure,enable,ordisablecaptureentries,andclearcapture entries.
Commands
For information about... show rmon capture set rmon capture clear rmon capture Refer to page... 13-20 13-21 13-22
show rmon capture

UsethiscommandtodisplayRMONcaptureentriesandassociatedbuffercontrolentries.
Syntax
show rmon capture [index [nodata]]
Parameters
index nodata (Optional)Displaysthespecifiedbuffercontrolentryandallcaptured packetsassociatedwiththatentry. (Optional)Displaysonlythebuffercontrolentryspecifiedbyindex.
Defaults
Ifnooptionsarespecified,allbuffercontrolentriesandassociatedcapturedpacketswillbe displayed.
Mode
13-20
RMON Configuration
set rmon capture
Example
ThisexampleshowshowtodisplayRMONcaptureentriesandassociatedbufferentries:
D2(rw)->show rmon capture Buf.control= 28062 Channel= 38283 EntryStatus= valid ---------------------------------------------------------FullStatus avail FullAction lock Captured packets 251 Capture slice 1518 Download size 100 Download offset 0 Max Octet Requested 50000 Max Octet Granted 50000 Start time 1 days 0 hours 51 minutes 15 seconds Owner monitor
captureEntry= 1 Buff.control= 28062 -------------------------------------------Pkt ID 9 Pkt time 1 days 0 hours 51 minutes 15 seconds Pkt Length 93 Pkt status 0 Data: 00 00 5e 00 01 01 00 01 f4 00 7d ce 08 00 45 00 00 4b b4 b9 00 00 40 11 32 5c 0a 15 43 05 86 8d bf e5 00 a1 0e 2b 00 37 cf ca 30 2d 02 01 00 04 06 70 75 62 6c 69 63 a2 20 02 02 0c 92 02 01 00 02 01 00 30 14 30 12 06 0d 2b 06 01 02 01 10 07 01 01 0b 81 fd 1c 02 01 01 00 11 0b 00
set rmon capture

UsethiscommandtoconfigureanRMONcaptureentry.
Syntax
set rmon capture index {channel [action {lock}] [slice slice] [loadsize loadsize] [offset offset] [asksize asksize] [owner owner]}
Parameters
index channel actionlock Specifiesabuffercontrolentry. Specifiesthechanneltowhichthiscaptureentrywillbeapplied. (Optional)Specifiestheactionofthebufferwhenitisfullas: sliceslice loadsizeloadsize offsetoffset asksizeasksize lockPacketswillceasetobeaccepted
(Optional)Specifiesthemaximumoctetsfromeachpackettobesavedin abuffer.Currently,theonlyvalueallowedis1518. (Optional)Specifiesthemaximumoctetsfromeachpackettobe downloadedfromthebuffer.Thedefaultis100. (Optional)Specifiesthefirstoctetfromeachpacketthatwillberetrieved. (Optional)Specifiestherequestedmaximumoctetstobesavedinthis buffer.Currently,theonlyvalueacceptedis1,whichrequestsasmany octetsaspossible. (Optional)Specifiesthenameoftheentitythatconfiguredthisentry.
owner
13-21
clear rmon capture
Defaults
Ifnotspecified,actiondefaultstolock. Ifnotspecified,offsetdefaultsto0. Ifnotspecified,asksizedefaultsto1(whichwillrequestasmanyoctetsaspossible). Ifsliceisnotspecified,1518willbeapplied. Ifloadsizeisnotspecified,100willbeapplied. Ifownerisnotspecified,itwillbesettomonitor.
Mode
Example
ThisexampleshowshowtocreateRMONcaptureentry1tolistenonchannel628:
D2(rw)->set rmon capture 1 628
clear rmon capture

UsethiscommandtoclearsanRMONcaptureentry.
Syntax
clear rmon capture index
Parameters
index Specifiesthecaptureentrytobecleared.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearRMONcaptureentry1:
D2(rw)->clear rmon capture 1
13-22
RMON Configuration
14
DHCP Server Configuration
ThischapterdescribesthecommandstoconfiguretheIPv4DHCPserverfunctionalityonaD Seriesswitch.
For information about... DHCP Overview Configuring General DHCP Server Parameters Configuring IP Address Pools Refer to page... 14-1 14-3 14-10
DHCP Overview
DynamicHostConfigurationProtocol(DHCP)forIPv4isanetworklayerprotocolthat implementsautomaticormanualassignmentofIPaddressesandotherconfigurationinformation toclientdevicesbyservers.ADHCPservermanagesauserconfiguredpoolofIPaddressesfrom whichitcanmakeassignmentsuponclientrequests.ArelayagentpassesDHCPmessages betweenclientsandserverswhichareondifferentphysicalsubnets.
DHCP Server
DHCPserverfunctionalityallowstheDSeriesswitchtoprovidebasicIPconfiguration informationtoaclientonthenetworkwhorequestssuchinformationusingtheDHCPprotocol. DHCPprovidesthefollowingmechanismsforIPaddressallocationbyaDHCPserver: AutomaticDHCPserverassignsanIPaddresstoaclientforalimitedperiodoftime(or untiltheclientexplicitlyrelinquishestheaddress)fromadefinedpoolofIPaddresses configuredontheserver. ManualAclientsIPaddressisassignedbythenetworkadministrator,andDHCPisused simplytoconveytheassignedaddresstotheclient.Thisismanagedbymeansofstatic addresspoolsconfiguredontheserver.
TheamountoftimethataparticularIPaddressisvalidforasystemiscalledalease.TheDSeries maintainsaleasedatabasewhichcontainsinformationabouteachassignedIPaddress,theMAC addresstowhichitisassigned,theleaseexpiration,andwhethertheaddressassignmentis dynamic(automatic)orstatic(manual).TheDHCPleasedatabaseisstoredinflashmemory. InadditiontoassigningIPaddresses,theDHCPservercanalsobeconfiguredtoassignthe followingtorequestingclients: Defaultrouter(s) DNSserver(s)anddomainname NetBIOSWINSserver(s)andnodename

DHCP Overview
Bootfile DHCPoptionsasdefinedbyRFC2132
Note: A total of 16 address pools, dynamic and/or static, can be configured on the D-Series.
Configuring a DHCP Server

ForDHCPtofunctiononDSeriessystems,thesystemhastoknowabouttheIPnetworkfor whichtheDHCPpoolistobecreated.ThisisdonebyassociatingtheDHCPaddresspoolwiththe switchshostportIPaddress. ThefollowingtasksprovidebasicDHCPserverfunctionalitywhentheDHCPpoolisassociated withthesystemshostIPaddress. 1. ConfigurethesystemhostportIPaddresswiththesetipaddresscommand.Oncethe systemsIPaddressisconfigured,thesystemthenknowsabouttheconfiguredsubnet.For example:
set ip address 192.0.0.50 mask 255.255.255.0
2. 3.
EnableDHCPserverfunctionalityonthesystemwiththesetdhcpenablecommand. ConfigureanIPaddresspoolfordynamicIPaddressassignment.Theonlyrequiredstepsare tonamethepoolanddefinethenetworknumberandmaskforthepool.Notethatthepool hastobeinthesamesubnetandusethesamemaskasthesystemhostportIPaddress.For example:

set dhcp pool auto-pool network 192.0.0.0 255.255.255.0
AllDHCPclientsservedbythisswitchmustbeinthesameVLANasthesystemshostport. OptionalDHCPservertasksinclude: Youcanlimitthescopeofaddressesassignedtoapoolfordynamicaddressassignmentwith thesetdhcpexcludecommand.Upto128nonoverlappingaddressrangescanbeexcluded ontheDSeries.Forexample:

set dhcp exclude 192.0.0.1 192.0.0.10 Note: The IP address of the systems host port is automatically excluded.
Configurestaticaddresspoolsformanualaddressassignment.Theonlyrequiredstepsareto namethepool,configureeitherthehardwareaddressoftheclientortheclientidentifier,and configuretheIPaddressandmaskforthemanualbinding.Forexample:

set dhcp pool static-pool hardware-address 0011.2233.4455 set dhcp pool static-pool host 192.0.0.200 255.255.255.0
SetotherDHCPserverparameterssuchasthenumberofpingpacketstobesentbefore assigninganIPaddress,orenablingconflictlogging.
14-2
Configuring General DHCP Server Parameters
Configuring General DHCP Server Parameters

Purpose
ToconfigureDHCPserverparameters,andtodisplayandclearaddressbindinginformation, serverstatistics,andconflictinformation.
Commands
For information about... set dhcp set dhcp bootp set dhcp conflict logging show dhcp conflict clear dhcp conflict set dhcp exclude clear dhcp exclude set dhcp ping clear dhcp ping show dhcp binding clear dhcp binding show dhcp server statistics clear dhcp server statistics Refer to page... 14-3 14-4 14-4 14-5 14-5 14-6 14-6 14-7 14-7 14-8 14-8 14-9 14-10
set dhcp
UsethiscommandtoenableordisabletheDHCPserverfunctionalityontheDSeries.
Syntax
set dhcp {enable | disable}
Parameters
enable|disable EnablesordisablesDHCPserverfunctionality.Bydefault,DHCPserver isdisabled.
Defaults
None.
Mode
14-3
set dhcp bootp
Example
ThisexampleenablesDHCPserverfunctionality.
D2(rw)->set dhcp enable
set dhcp bootp

UsethiscommandtoenableordisableautomaticaddressallocationforBOOTPclients.By default,addressallocationforBOOTPclientsisdisabled.RefertoRFC1534,Interoperation BetweenDHCPandBOOTP,formoreinformation.
Syntax
set dhcp bootp {enable | disable}
Parameters
enable|disable EnablesordisablesaddressallocationforBOOTPclients.
Defaults
None.
Mode
Example
ThisexampleenablesaddressallocationforBOOTPclients.
D2(rw)->set dhcp bootp enable
set dhcp conflict logging

Usethiscommandtoenableconflictlogging.Bydefault,conflictloggingisenabled.Usetheclear dhcpconflictloggingcommandtodisableconflictlogging.
Syntax
set dhcp conflict logging
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleenablesDHCPconflictlogging.
D2(rw)->set dhcp conflict logging
14-4 DHCP Server Configuration
show dhcp conflict
show dhcp conflict

Usethiscommandtodisplayconflictinformation,foroneaddressoralladdresses.
Syntax
show dhcp conflict [address]
Parameters
address [Optional]Specifiestheaddressforwhichtodisplayconflictinformation.
Defaults
Ifnoaddressisspecified,conflictinformationforalladdressesisdisplayed.
Mode
Readonly.
Example
Thisexampledisplaysconflictinformationforalladdresses.Notethatpingistheonlydetection methodused.
D2(ro)->show dhcp conflict IP address ----------192.0.0.2 192.0.0.3 192.0.0.4 192.0.0.12 Detection Method ----------------Ping Ping Ping Ping Detection Time --------------0 days 19h:01m:23s 0 days 19h:00m:46s 0 days 19h:01m:25s 0 days 19h:01m:26s
clear dhcp conflict

Usethiscommandtoclearconflictinformationforoneoralladdresses,ortodisableconflict logging.
Syntax
clear dhcp conflict {logging | ip-address| *}
Parameters
logging ipaddress * Disablesconflictlogging. ClearstheconflictinformationforthespecifiedIPaddress. ClearstheconflictinformationforallIPaddresses.
Defaults
None.
Mode
14-5
set dhcp exclude
Examples
ThisexampledisablesDHCPconflictlogging.
D2(rw)->clear dhcp conflict logging
ThisexampleclearstheconflictinformationfortheIPaddress192.0.0.2.
D2(rw)->clear dhcp conflict 192.0.0.2
set dhcp exclude

UsethiscommandtoconfiguretheIPaddressesthattheDHCPservershouldnotassigntoDHCP clients.Multipleaddressrangescanbeconfiguredbuttherangescannotoverlap.Upto128non overlappingaddressrangescanbeexcluded.
Syntax
set dhcp exclude low-ipaddr [high-ipaddr]
Parameters
lowipaddr highipaddr SpecifiesthefirstIPaddressintheaddressrangetobeexcludedfrom assignment. (Optional)SpecifiesthelastIPaddressintheaddressrangetobe excluded.
Defaults
None.
Mode
Example
Thisexamplefirstconfigurestheaddresspoolnamedauto1with255addressesfortheClassC network172,20.28.0,withthesetdhcppoolnetworkcommand.Then,theexamplelimitsthe scopeoftheaddressesthatcanbeassignedbyaDHCPserverbyexcludingaddresses172.20.28.80 100,withthesetdhcpexcludecommand.
D2(rw)->set dhcp pool auto1 network 172.20.28.0 24 D2(rw)->set dhcp exclude 172.20.28.80 172.20.28.100
clear dhcp exclude

UsethiscommandtocleartheconfiguredIPaddressesthattheDHCPservershouldnotassignto DHCPclients.
Syntax
clear dhcp exclude low-ipaddr [high-ipaddr]
Parameters
lowipaddr SpecifiesthefirstIPaddressintheaddressrangetobecleared.
14-6
set dhcp ping
highipaddr
(Optional)SpecifiesthelastIPaddressintheaddressrangetobecleared.
Defaults
None.
Mode
Example
ThisexampleclearsthepreviouslyexcludedrangeofIPaddressesbetween192.168.1.88through 192.168.1.100.
D2(rw)->clear dhcp exclude 192.168.1.88 192.168.1.100
set dhcp ping

UsethiscommandtoconfigurethenumberofpingpacketstheDHCPserversendstoanIP addressbeforeassigningtheaddresstoarequestingclient.
Syntax
set dhcp ping packets number
Parameters
packetsnumber Specifiesthenumberofpingpacketstobesent.Thevalueofnumbercan be0,orrangefrom2to10.Entering0disablesthisfunction.Thedefault valueis2packets.
Defaults
None.
Mode
Example
Thisexamplesetsthenumberofpingpacketssentto3.
D2(rw)->set dhcp ping packets 3
clear dhcp ping

UsethiscommandtoresetthenumberofpingpacketssentbytheDHCPserverbacktothe defaultvalueof2.
Syntax
clear dhcp ping packets
Parameters
None.
show dhcp binding
Defaults
None.
Mode
Example
Thisexampleresetsthenumberofpingpacketssentbacktothedefaultvalue.
D2(rw)->clear dhcp ping packets
show dhcp binding

UsethiscommandtodisplaybindinginformationforoneorallIPaddresses.
Syntax
show dhcp binding [ip-address]
Parameters
ipaddress (Optional)SpecifiestheIPaddressforwhichtodisplaybinding information.
Defaults
IfnoIPaddressisspecified,bindinginformationforalladdressesisdisplayed.
Mode
Readonly.
Example
Thisexampledisplaysbindinginformationaboutalladdresses.
D2(rw)->show dhcp binding IP address Hardware Address --------------------------192.0.0.6 00:33:44:56:22:39 192.0.0.8 00:33:44:56:22:33 192.0.0.10 00:33:44:56:22:34 192.0.0.11 00:33:44:56:22:35 192.0.0.12 00:33:44:56:22:36 192.0.0.13 00:33:44:56:22:37 192.0.0.1400:33:44:56:22:38 Lease Expiration ----------------00:11:02 00:10:22 00:09:11 00:10:05 00:10:30 infinite infinite Type ----Automatic Automatic Automatic Automatic Automatic Manual Manual
clear dhcp binding

Usethiscommandtoclear(delete)oneorallDHCPaddressbindings.
Syntax
clear dhcp binding {ip-addr | *}
14-8
show dhcp server statistics
Parameters
ipaddr * SpecifiestheIPaddressforwhichtoclear/deletetheDHCPbinding. Deletesalladdressbindings.
Defaults
None.
Mode
Example
ThisexampledeletestheDHCPaddressbindingforIPaddress192.168.1.1.
D2(rw)->clear dhcp binding 192.168.1.1

UsethiscommandtodisplayDHCPserverstatistics.
Syntax
Parameters
None.
Defaults
None.
Mode
Readonly.
Example
Thisexampledisplaysserverstatistics.
D2(ro)->show dhcp server statistics Automatic Bindings Expired Bindings Malformed Bindings Messages ---------DHCP DISCOVER DHCP REQUEST DHCP DECLINE DHCP RELEASE DHCP INFORM Messages ---------DHCP OFFER DHCP ACK DHCP NACK 36 6 0 Received ---------382 3855 0 67 1 Sent -----381 727 2
clear dhcp server statistics

UsethiscommandtoclearallDHCPservercounters.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleclearsallDHCPservercounters.
D2(rw)->clear dhcp server statistics
Configuring IP Address Pools

Manual Pool Configuration Considerations
ThesubnetoftheIPaddressbeingissuedshouldbeonthesamesubnetastheingress interface(thatis,thesubnetofthehostIPaddressoftheswitch,orifroutinginterfacesare configured,thesubnetoftheroutinginterface). Amanualpoolcanbeconfiguredusingeithertheclientshardwareaddress(setdhcppool hardwareaddress)ortheclientsclientidentifier(setdhcppoolclientidentifier),butusing bothisnotrecommended. IftheincomingDHCPrequestpacketcontainsaclientidentifier,thenamanualpool configuredwiththatclientidentifiermustexistontheswitchinorderfortherequesttobe processed.Thehardwareaddressisnotchecked. Ahardwareaddressandtype(EthernetorIEEE802)configuredinamanualpoolischecked onlywhenaclientidentifierisnotalsoconfiguredforthepoolandtheincomingDHCP requestpacketdoesnotincludeaclientidentifieroption.
Purpose
ToconfigureandclearDHCPaddresspoolparameters,andtodisplayaddresspoolconfiguration information.
Note: A total of 16 address pools, dynamic and/or static, can be configured on the D-Series.
14-10
Configuring IP Address Pools
Commands
For information about... set dhcp pool clear dhcp pool set dhcp pool network clear dhcp pool network set dhcp pool hardware-address clear dhcp pool hardware-address set dhcp pool host clear dhcp pool host set dhcp pool client-identifier clear dhcp pool client-identifier set dhcp pool client-name clear dhcp pool client-name set dhcp pool bootfile clear dhcp pool bootfile set dhcp pool next-server clear dhcp pool next-server set dhcp pool lease clear dhcp pool lease set dhcp pool default-router clear dhcp pool default-router set dhcp pool dns-server clear dhcp pool dns-server set dhcp pool domain-name clear dhcp pool domain-name set dhcp pool netbios-name-server clear dhcp pool netbios-name-server set dhcp pool netbios-node-type clear dhcp pool netbios-node-type set dhcp pool option clear dhcp pool option show dhcp pool configuration Refer to page... 14-12 14-12 14-13 14-13 14-14 14-14 14-15 14-16 14-16 14-17 14-17 14-18 14-18 14-19 14-19 14-20 14-20 14-21 14-21 14-22 14-22 14-23 14-23 14-24 14-24 14-25 14-26 14-26 14-27 14-27 14-28
14-11
set dhcp pool
set dhcp pool

UsethiscommandtocreateandassignanametoaDHCPserverpoolofaddresses.Upto16 addresspoolsmaybeconfiguredonaDSeries.Notethatenteringthiscommandisnotrequired tocreateanaddresspoolbeforeconfiguringotheraddresspoolparameters.
Syntax
set dhcp pool poolname
Parameters
poolname Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength.
Defaults
None.
Mode
Example
Thisexamplecreatesanaddresspoolnamedauto1.
D2(rw)->set dhcp pool auto1
clear dhcp pool

UsethiscommandtodeleteaDHCPserverpoolofaddresses.
Syntax
clear dhcp pool poolname
Parameters
Defaults
None.
Mode
Example
Thisexampledeletestheaddresspoolnamedauto1.
D2(rw)->clear dhcp pool auto1
14-12
set dhcp pool network
set dhcp pool network

UsethiscommandtoconfigurethesubnetnumberandmaskforanautomaticDHCPaddress pool.
Syntax
set dhcp pool poolname network number {mask | prefix-length}
Parameters
poolname number mask prefixlength Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. SpecifiesanIPsubnetfortheaddresspool. Specifiesthesubnetmaskindottedquadnotation. Specifiesthesubnetmaskasaninteger.
Defaults
None.
Mode
Usage
UsethiscommandtoconfigureasetofIPaddressestobeassignedbytheDHCPserverusingthe specifiedaddresspool.Inordertolimitthescopeoftheaddressesconfiguredwiththiscommand, usethesetdhcpexcludecommandonpage146.
Examples
ThisexampleconfigurestheIPsubnet172.20.28.0withaprefixlengthof24fortheautomatic DHCPpoolnamedauto1.Alternatively,themaskcouldhavebeenspecifiedas255.255.255.0.
D2(rw)->set dhcp pool auto1 network 172.20.28.0 24
Thisexamplelimitsthescopeof255addressescreatedfortheClassCnetwork172,20.28.0bythe previousexample,byexcludingaddresses172.20.28.80100.
D2(rw)->set dhcp exclude 172.20.28.80 172.20.28.100
clear dhcp pool network

UsethiscommandtoremovethenetworknumberandmaskofaDHCPserverpoolofaddresses.
Syntax
clear dhcp pool poolname network
Parameters
14-13
set dhcp pool hardware-address
Defaults
None.
Mode
Example
Thisexampledeletesthenetworkandmaskfromtheaddresspoolnamedauto1.
D2(rw)->clear dhcp pool auto1 network
set dhcp pool hardware-address

UsethiscommandtoconfiguretheMACaddressoftheDHCPclientandcreateanaddresspool formanualbinding.Youcanuseeitherthiscommandorthesetdhcppoolclientidentifier commandtocreateamanualbindingpool,butusingbothisnotrecommended.
Syntax
set dhcp pool poolname hardware-address hw-addr [type]
Parameters
poolname hwaddr type Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. SpecifiestheMACaddressoftheclientshardwareplatform.Thisvalue canbeenteredusingdottedhexadecimalnotationorcolons. (Optional)Specifiestheprotocolofthehardwareplatform.Validvalues are1forEthernetor6forIEEE802.Defaultvalueis1,Ethernet.
Defaults
Ifnotypeisspecified,Ethernetisassumed.
Mode
Example
Thisexamplespecifies0001.f401.2710astheEthernetMACaddressforthemanualaddresspool namedmanual1.Alternatively,theMACaddresscouldhavebeenteredas00:01:f4:01:27:10.
D2(rw)->set dhcp pool manual1 hardware-address 0001.f401.2710
clear dhcp pool hardware-address

UsethiscommandtoremovethehardwareaddressofaDHCPclientfromamanualbinding addresspool.
Syntax
clear dhcp pool poolname hardware-address
14-14
set dhcp pool host
Parameters
Defaults
None.
Mode
Example
Thisexampledeletestheclienthardwareaddressfromtheaddresspoolnamedmanual1.
D2(rw)->clear dhcp pool manual1 hardware-address
set dhcp pool host

UsethiscommandtoconfigureanIPaddressandnetworkmaskforamanualDHCPbinding.
Syntax
set dhcp pool poolname host ip-address [mask | prefix-length]
Parameters
poolname ipaddress mask prefixlength Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. SpecifiestheIPaddressformanualbinding. (Optional)Specifiesthesubnetmaskindottedquadnotation. (Optional)Specifiesthesubnetmaskasaninteger.
Defaults
Ifamaskorprefixisnotspecified,theclassA,B,orCnaturalmaskwillbeused.
Mode
Example
Thisexampleshowshowtoconfiguretheminimumrequirementsforamanualbindingaddress pool.First,thehardwareaddressoftheclientshardwareplatformisconfigured,followedby configurationoftheaddresstobeassignedtothatclientmanually.
D2(rw)->set dhcp pool manual1 hardware-address 0001.f401.2710 D2(rw)->set dhcp pool manual1 host 15.12.1.99 255.255.248.0
14-15
clear dhcp pool host
clear dhcp pool host

UsethiscommandtoremovethehostIPaddressfromamanualbindingaddresspool.
Syntax
clear dhcp pool poolname host
Parameters
Defaults
None.
Mode
Example
ThisexampledeletesthehostIPaddressfromtheaddresspoolnamedmanual1.
D2(rw)->clear dhcp pool manual1 host
set dhcp pool client-identifier

UsethiscommandtoconfiguretheclientidentifieroftheDHCPclientandcreateanaddresspool formanualbinding.Youcanuseeitherthiscommandorthesetdhcppoolhardwareaddress commandtocreateamanualbindingpool,butusingbothisnotrecommended.
Syntax
set dhcp pool poolname client-identifier id
Parameters
poolname id Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. Specifiestheuniqueclientidentifierforthisclient.Thevaluemustbe enteredinxx:xx:xx:xx:xx:xxformat.
Defaults
None.
Mode
Usage
TheclientidentifierisformedbyconcatenatingthemediatypeandtheMACaddress.For example,iftheclienthardwaretypeisEthernetandtheclientMACaddressis00:01:22:33:44:55, thentheclientidentifierconfiguredwiththiscommandmustbe01:00:01:22:33:44:55.
14-16
clear dhcp pool client-identifier
Example
Thisexampleshowshowtoconfiguretheminimumrequirementsforamanualbindingaddress pool,usingaclientidentifierratherthanthehardwareaddressoftheclientshardwareplatform.
D2(rw)->set dhcp pool manual2 client-identifier 01:00:01:22:33:44:55 D2(rw)->set dhcp pool manual2 host 10.12.1.10 255.255.255.0
clear dhcp pool client-identifier

UsethiscommandtoremovetheuniqueidentifierofaDHCPclientfromamanualbinding addresspool.
Syntax
clear dhcp pool poolname client-identifier
Parameters
Defaults
None.
Mode
Example
Thisexampledeletestheclientidentifierfromtheaddresspoolnamedmanual1.
D2(rw)->clear dhcp pool manual1 client-identifier
set dhcp pool client-name

UsethiscommandtoassignanametoaDHCPclientwhencreatinganaddresspoolformanual binding.
Syntax
set dhcp pool poolname client-name name
Parameters
poolname name Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. Specifiesthenametobeassignedtothisclient.Clientnamesmaybeupto 31charactersinlength.
Defaults
None.
14-17
clear dhcp pool client-name
Mode
Example
Thisexampleconfigurestheclientnameappsvr1tothemanualbindingpoolmanual2.
D2(rw)->set dhcp pool manual2 client-identifier 01:22:33:44:55:66 D2(rw)->set dhcp pool manual2 host 10.12.1.10 255.255.255.0 D2(rw)->set dhcp pool manual2 client-name appsvr1
clear dhcp pool client-name

UsethiscommandtodeleteaDHCPclientnamefromanaddresspoolformanualbinding.
Syntax
clear dhcp pool poolname client-name
Parameters
Defaults
None.
Mode
Example
Thisexampledeletestheclientnamefromthemanualbindingpoolmanual2.
D2(rw)->clear dhcp pool manual2 client-name
set dhcp pool bootfile

UsethiscommandtospecifyadefaultbootimagefortheDHCPclientswhowillbeservedbythe addresspoolbeingconfigured.
Syntax
set dhcp pool poolname bootfile filename
Parameters
poolname filename Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. Specifiesthebootimagefilename.
Defaults
None.
14-18
clear dhcp pool bootfile
Mode
Example
Thisexamplesetsthebootimagefilenameforaddresspoolnamedauto1.
D2(rw)->set dhcp pool auto1 bootfile image1.img
clear dhcp pool bootfile

Usethiscommandtoremoveadefaultbootimagefromtheaddresspoolbeingconfigured.
Syntax
clear dhcp pool poolname bootfile
Parameters
Defaults
None.
Mode
Example
Thisexampleremovesthebootimagefilenamefromaddresspoolnamedauto1.
D2(rw)->clear dhcp pool auto1 bootfile
set dhcp pool next-server

Usethiscommandtospecifythefileserverfromwhichthedefaultbootimageistobeloadedby theclient.
Syntax
set dhcp pool poolname next-server ip-address
Parameters
poolname ipaddress Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. SpecifiestheIPaddressofthefileservertheDHCPclientshouldcontact toloadthedefaultbootimage.
Defaults
None.
14-19
clear dhcp pool next-server
Mode
Example
Thisexamplespecifiesthefileserverfromwhichclientsbeingservedbyaddresspoolauto1 shoulddownloadthebootimagefileimage1.img.
D2(rw)->set dhcp pool auto1 bootfile image1.img D2(rw)->set dhcp pool auto1 next-server 10.1.1.10
clear dhcp pool next-server

Usethiscommandtoremovethebootimagefileserverfromtheaddresspoolbeingconfigured.
Syntax
clear dhcp pool poolname next-server
Parameters
Defaults
None.
Mode
Example
Thisexampleremovesthefileserverfromaddresspoolauto1.
D2(rw)->clear dhcp pool auto1 next-server
set dhcp pool lease

UsethiscommandtospecifythedurationoftheleaseforanIPaddressassignedbytheDHCP serverfromtheaddresspoolbeingconfigured.
Syntax
set dhcp pool poolname lease {days [hours [minutes]] | infinite}
Parameters
all poolname days (Optional)Clearsuserdefinedconfigurationparameters(andstackunit numbersandpriorities,ifapplicable). Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. Specifiesthenumberofdaysanaddressleasewillremainvalid.Valuecan rangefrom0to59.
14-20
clear dhcp pool lease
hours minutes
(Optional)Whenadaysvaluehasbeenassigned,specifiesthenumberof hoursanaddressleasewillremainvalid.Valuecanrangefrom0to1439. (Optional)Whenadaysvalueandanhoursvaluehavebeenassigned, specifiesthenumberofminuteanaddressleasewillremainvalid.Value canrangefrom0to86399. Specifiesthatthedurationoftheleasewillbeunlimited.
infinite
Defaults
Ifnoleasetimeisspecified,aleasedurationof1dayisconfigured.
Mode
Example
Thisexampleconfiguresaleasedurationof12hoursfortheaddresspoolbeingconfigured.Note thattoconfigurealeasetimelessthanoneday,enter0fordays,thenthenumberofhoursand minutes.
D2(rw)->set dhcp pool auto1 lease 0 12
clear dhcp pool lease

Usethiscommandtorestorethedefaultleasetimevalueofonedayfortheaddresspoolbeing configured.
Syntax
clear dhcp pool poolname lease
Parameters
Defaults
Clearstheleasetimeforthisaddresspooltothedefaultvalueofoneday.
Mode
Example
Thisexamplerestoresthedefaultleasedurationofonedayforaddresspoolauto1.
D2(rw)->clear dhcp pool auto1 lease
set dhcp pool default-router

UsethiscommandtospecifyadefaultrouterlistfortheDHCPclientsservedbytheaddresspool beingconfigured.Upto8defaultrouterscanbeconfigured.
14-21
clear dhcp pool default-router
Syntax
set dhcp pool poolname default-router address [address2 ... address8]
Parameters
poolname address address2...address8 Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. SpecifiestheIPaddressofadefaultrouter. (Optional)Specifies,inorderofpreference,upto7additionaldefault routeraddresses.
Defaults
None.
Mode
Example
Thisexampleassignsadefaultrouterat10.10.10.1totheaddresspoolnamedauto1.
D2(rw)->set dhcp pool auto1 default-router 10.10.10.1
clear dhcp pool default-router

Usethiscommandtodeletethedefaultroutersconfiguredforthisaddresspool.
Syntax
clear dhcp pool poolname default-router
Parameters
Defaults
None.
Mode
Example
Thisexampleremovesthedefaultrouterfromtheaddresspoolauto1.
D2(rw)->clear dhcp pool auto1 default-router
set dhcp pool dns-server

UsethiscommandtospecifyoneormoreDNSserversfortheDHCPclientsservedbytheaddress poolbeingconfigured.Upto8DNSserverscanbeconfigured.
14-22 DHCP Server Configuration
clear dhcp pool dns-server
Syntax
set dhcp pool poolname dns-server address [address2 ... address8]
Parameters
poolname address address2...address8 Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. SpecifiestheIPaddressofaDNSserver. (Optional)Specifies,inorderofpreference,upto7additionalDNS serveraddresses.
Defaults
None.
Mode
Example
ThisexampleassignsaDNSserverat10.14.10.1totheaddresspoolauto1.
D2(rw)->set dhcp pool auto1 dns-server 10.14.10.1
clear dhcp pool dns-server

UsethiscommandtoremovetheDNSserverlistfromtheaddresspoolbeingconfigured.
Syntax
clear dhcp pool poolname dns-server
Parameters
Defaults
None.
Mode
Example
ThisexampleremovestheDNSserverlistfromtheaddresspoolauto1.
D2(rw)->clear dhcp pool auto1 dns-server
set dhcp pool domain-name

UsethiscommandtospecifyadomainnametobeassignedtoDHCPclientsservedbythe addresspoolbeingconfigured.
clear dhcp pool domain-name
Syntax
set dhcp pool poolname domain-name domain
Parameters
poolname domain Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. Specifiesthedomainnamestring.Thedomainnamecanbeupto255 charactersinlength.
Defaults
None.
Mode
Example
Thisexampleassignsthemycompany.comdomainnametotheaddresspoolauto1.
D2(rw)->set dhcp pool auto1 domain-name mycompany.com
clear dhcp pool domain-name

Usethiscommandtoremovethedomainnamefromtheaddresspoolbeingconfigured.
Syntax
clear dhcp pool poolname domain-name
Parameters
Defaults
None.
Mode
Example
Thisexampleremovesthedomainnamefromtheaddresspoolauto1.
D2(rw)->clear dhcp pool auto1 domain-name
set dhcp pool netbios-name-server

UsethiscommandtoassignoneormoreNetBIOSnameserversfortheDHCPclientsservedby theaddresspoolbeingconfigured.Upto8NetBIOSnameserverscanbeconfigured.
14-24
clear dhcp pool netbios-name-server
Syntax
set dhcp pool poolname netbios-name-server address [address2 ... address8]
Parameters
poolname address address2...address8 Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. SpecifiestheIPaddressofaNetBIOSnameserver. (Optional)Specifies,inorderofpreference,upto7additionalNetBIOS nameserveraddresses.
Defaults
None.
Mode
Example
ThisexampleassignsaNetBIOSnameserverat10.15.10.1totheaddresspoolbeingconfigured.
D2(rw)->set dhcp pool auto1 netbios-name-server 10.15.10.1
clear dhcp pool netbios-name-server

UsethiscommandtoremovetheNetBIOSnamerserverlistfromtheaddresspoolbeing configured.
clear dhcp pool poolname netbios-name-server
Parameters
Defaults
None.
Mode
Example
ThisexampleremovestheNetBIOSnameserverlistfromtheaddresspoolauto1.
D2(rw)->clear dhcp pool auto1 netbios-name-server
14-25
set dhcp pool netbios-node-type
set dhcp pool netbios-node-type

UsethiscommandtospecifyaNetBIOSnode(server)typefortheDHCPclientsservedbythe addresspoolbeingconfigured.
Syntax
set dhcp pool poolname netbios-node-type {b-node | h-node | p-node | m-node}
Parameters
poolname bnode hnode pnode mnode Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. SpecifiestheNetBIOsnodetypetobebroadcast(noWINS). SpecifiestheNetBIOsnodetypetobehybrid(WINS,thenbroadcast). SpecifiestheNetBIOsnodetypetobepeer(WINSonly). SpecifiestheNetBIOsnodetypetobemixed(broadcast,thenWINS).
Defaults
None.
Mode
Example
ThisexamplespecifieshybridastheNetBIOSnodetypefortheaddresspoolauto1.
D2(rw)->set dhcp pool auto1 netbios-node-type h-node
clear dhcp pool netbios-node-type

UsethiscommandtoremovetheNetBIOSnodetypefromtheaddresspoolbeingconfigured.
Syntax
clear dhcp pool poolname netbios-node-type
Parameters
Defaults
None.
Mode
14-26
set dhcp pool option
Example
ThisexampleremovestheNetBIOSnodetypefromtheaddresspoolauto1.
D2(rw)->clear dhcp pool auto1 netbios-node-type
set dhcp pool option

UsethiscommandtoconfigureDHCPoptions,describedinRFC2132.
Syntax
set dhcp pool poolname option code {ascii string | hex string-list | ip addresslist}
Parameters
poolname code asciistring hexstringlist ipaddresslist Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. SpecifiestheDHCPoptioncode,asdefinedinRFC2132.Valuecanrange from1to254. SpecifiesthedatainASCIIformat.AnASCIIcharacterstringcontaininga spacemustbeenclosedinquotations. SpecifiesthedatainHEXformat.Upto8HEXstringscanbeentered. SpecifiesthedatainIPaddressformat.Upto8IPaddressescanbeentered.
Defaults
None.
Mode
Examples
ThisexampleconfiguresDHCPoption19,whichspecifieswhethertheclientshouldconfigureits IPlayerforpacketforwarding.Inthiscase,IPforwardingisenabledwiththe01value.
D2(rw)->set dhcp pool auto1 option 19 hex 01
ThisexampleconfiguresDHCPoption72,whichassignsoneormoreWebserversforDHCP clients.Inthiscase,twoWebserveraddressesareconfigured.
D2(rw)->set dhcp pool auto1 option 72 ip 168.24.3.252 168.24.3.253
clear dhcp pool option

UsethiscommandtoremoveaDHCPoptionfromtheaddresspoolbeingconfigured.
Syntax
clear dhcp pool poolname option code
14-27
show dhcp pool configuration
Parameters
poolname code Specifiesthenameoftheaddresspool.Poolnamesmaybeupto31 charactersinlength. SpecifiestheDHCPoptioncode,asdefinedinRFC2132.Valuecanrange from1to254.
Defaults
None.
Mode
Example
Thisexampleremovesoption19fromaddresspoolauto1.
D2(rw)->clear dhcp pool auto1 option 19

Usethiscommandtodisplayconfigurationinformationforoneoralladdresspools.
Syntax
show dhcp pool configuration {poolname | all}
Parameters
Defaults
None.
Mode
Readonly.
14-28
Example
Thisexampledisplaysconfigurationinformationforalladdresspools.
D2(rw)->show dhcp pool configuration all Pool: Atg_Pool Pool Type Network Lease Time Default Routers Pool: static1 Pool Type Client Name Client Identifier Host Lease Time Option Pool: static2 Pool Type Hardware Address Hardware Address Type Host Lease Time
Dynamic 192.0.0.0 255.255.255.0 1 days 0 hrs 0 mins 192.0.0.1
Manual appsvr1 01:00:01:f4:01:27:10 10.1.1.1 255.0.0.0 infinite 19 hex 01
Manual 00:01:f4:01:27:10 ieee802 192.168.10.1 255.255.255.0 infinite
14-29
14-30
15
Security Configuration
ThischapterdescribestheSecurityConfigurationsetofcommandsandhowtousethem.
For information about... Overview of Security Methods Configuring RADIUS Configuring 802.1X Authentication Configuring MAC Authentication Configuring Multiple Authentication Methods Configuring VLAN Authorization (RFC 3580) Configuring MAC Locking Configuring Port Web Authentication (PWA) Configuring Secure Shell (SSH) Refer to page... 15-1 15-3 15-9 15-19 15-30 15-41 15-46 15-57 15-68
Overview of Security Methods

Thefollowingsecuritymethodsareavailableforcontrollingwhichusersareallowedtoaccess, monitor,andmanagetheswitch. LoginuseraccountsandpasswordsusedtologintotheCLIviaaTelnetconnectionorlocal COMportconnection.Fordetails,refertoSettingUserAccountsandPasswordson page 22. HostAccessControlAuthentication(HACA)authenticatesuseraccessofTelnet management,consolelocalmanagementandWebViewviaacentralRADIUSClient/Server application.WhenRADIUSisenabled,thisessentiallyoverridesloginuseraccounts.When HACAisactiveperavalidRADIUSconfiguration,theusernamesandpasswordsusedto accesstheswitchviaTelnet,SSH,WebView,andCOMportswillbevalidatedagainstthe configuredRADIUSserver.OnlyinthecaseofaRADIUStimeoutwillthosecredentialsbe comparedagainstcredentialslocallyconfiguredontheswitch.Fordetails,referto ConfiguringRADIUSonpage 153. SNMPuserorcommunitynamesallowsaccesstotheDSeriesswitchviaanetworkSNMP managementapplication.Toaccesstheswitch,youmustenteranSNMPuserorcommunity namestring.Thelevelofmanagementaccessisdependentontheassociatedaccesspolicy.For details,refertoChapter 5. 802.1XPortBasedNetworkAccessControlusingEAPOL(ExtensibleAuthentication Protocol)providesamechanismviaaRADIUSserverforadministratorstosecurely authenticateandgrantappropriateaccesstoenduserdevicescommunicatingwithDSeries
15-1
Overview of Security Methods
ports.FordetailsonusingCLIcommandstoconfigure802.1X,refertoConfiguring802.1X Authenticationonpage 159.

Note: To configure EAP pass-through, which allows client authentication packets to be forwarded through the switch to an upstream device, 802.1X authentication must be globally disabled with the set dot1x command.
MACAuthenticationprovidesamechanismforadministratorstosecurelyauthenticate sourceMACaddressesandgrantappropriateaccesstoenduserdevicescommunicatingwith DSeriesports.Fordetails,refertoConfiguringMACAuthenticationonpage 1519. MultipleAuthenticationMethodsallowsuserstoauthenticateusingmultiplemethodsof authenticationonthesameport.Fordetails,refertoConfiguringMultipleAuthentication Methodsonpage 1530. RFC3580TunnelAttributesprovideamechanismtocontainan802.1XauthenticatedorMAC authenticatedusertoaVLANregardlessofthePVID.RefertoConfiguringVLAN Authorization(RFC3580)onpage 1541. MACLockinglocksaporttooneormoreMACaddresses,preventingtheuseof unauthorizeddevicesandMACspoofingontheportFordetails,refertoConfiguringMAC Lockingonpage 1546. PortWebAuthentication(PWA)passesalllogininformationfromtheendstationtoa RADIUSserverforauthenticationbeforeallowingausertoaccessthenetwork.PWAisan alternativeto802.1XandMACauthentication.Fordetails,refertoConfiguringPortWeb Authentication(PWA)onpage 1557. SecureShell(SSH)providessecureTelnet.Fordetails,refertoConfiguringSecureShell (SSH)onpage 1568.
RADIUS Filter-ID Attribute and Dynamic Policy Profile Assignment

IfyouconfigureanauthenticationmethodthatrequirescommunicationwithaRADIUSserver, youcanusetheRADIUSFilterIDattributetodynamicallyassignapolicyprofileand/or managementleveltoauthenticatingusersand/ordevices. TheRADIUSFilterIDattributeissimplyastringthatisformattedintheRADIUSAccessAccept packetsentbackfromtheRADIUSservertotheswitchduringtheauthenticationprocess. EachusercanbeconfiguredintheRADIUSserverdatabasewithaRADIUSFilterIDattribute thatspecifiesthenameofthepolicyprofileand/ormanagementleveltheusershouldbeassigned uponsuccessfulauthentication.Duringtheauthenticationprocess,whentheRADIUSserver returnsaRADIUSAccessAcceptmessagethatincludesaFilterIDmatchingapolicyprofilename configuredontheswitch,theswitchthendynamicallyappliesthepolicyprofiletothephysical porttheuser/deviceisauthenticatingon.
Filter-ID Attribute Formats

EnterasysNetworkssupportstwoFilterIDformatsdecoratedandundecorated.The decoratedformathasthreeforms: Tospecifythepolicyprofiletoassigntotheauthenticatinguser(networkaccess authentication): Enterasys:version=1:policy=string wherestringspecifiesthepolicyprofilename.Policyprofilenamesarecasesensitive.
15-2
Configuring RADIUS
Tospecifyamanagementlevel(managementaccessauthentication): Enterasys:version=1:mgmt=level wherelevelindicatesthemanagementlevel,eitherro,rw,orsu.
Tospecifybothmanagementlevelandpolicyprofile: Enterasys:version=1:mgmt=level:policy=string
Theundecoratedformatissimplyastringthatspecifiesapolicyprofilename.Theundecorated formatcannotbeusedformanagementaccessauthentication. DecoratedFilterIDsareprocessedfirstbytheswitch.IfnodecoratedFilterIDsarefound,then undecoratedFilterIDsareprocessed.IfmultipleFilterIDsarefoundthatcontainconflicting values,aSyslogmessageisgenerated.
Configuring RADIUS
Purpose
Toperformthefollowing: ReviewtheRADIUSclient/serverconfigurationontheswitch. EnableordisabletheRADIUSclient. Setlocalandremoteloginoptions. Setprimaryandsecondaryserverparameters,includingIPaddress,timeoutperiod, authenticationrealm,andnumberofuserloginattemptsallowed. ResetRADIUSserversettingstodefaultvalues. ConfigureaRADIUSaccountingserver.
Commands
For information about... show radius set radius clear radius show radius accounting set radius accounting clear radius accounting Refer to page... 15-3 15-5 15-6 15-7 15-8 15-9
show radius
UsethiscommandtodisplaythecurrentRADIUSclient/serverconfiguration.
Syntax
show radius [status | retries | timeout | server [index | all]]
15-3
show radius
Parameters
status retries timeout server index|all (Optional)DisplaystheRADIUSserversenablestatus. (Optional)DisplaysthenumberofretryattemptsbeforetheRADIUSserver timesout. (Optional)Displaysthemaximumamountoftime(inseconds)toestablish contactwiththeRADIUSserverbeforeretryattemptsbegin. (Optional)DisplaysRADIUSserverconfigurationinformation. Forusewiththeserverparametertoshowserverconfigurationforall serversoraspecificRADIUSserverasdefinedbyanindex.
Defaults
Ifnoparametersarespecified,allRADIUSconfigurationinformationwillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayRADIUSconfigurationinformation:
D2(rw)->show radius RADIUS status: Enabled RADIUS retries: 3 RADIUS timeout: 20 seconds RADIUS Server IP Address ----------------------10 172.16.20.10
Auth-Port --------1812
Realm-Type ----------------management-access

Output Field RADIUS status RADIUS retries
show radius Output Details

What It Displays... Whether RADIUS is enabled or disabled. Number of retry attempts before the RADIUS server times out. The default value of 3 can be reset using the set radius command as described in set radius on page 15-5. Maximum amount of time (in seconds) to establish contact with the RADIUS server before retry attempts begin. The default value of 20 can be reset using the set radius command as described in set radius on page 15-5. RADIUS servers index number, IP address, and UDP authentication port. Realm defines who has to go through the RADIUS server for authentication. Management-access: This means that anyone trying to access the switch (Telnet, SSH, Local Management) has to authenticate through the RADIUS server. Network-access: This means that all the users have to authenticate to a RADIUS server before they are allowed access to the network. Any-access: Means that both Management-access and Network-access have been enabled.
RADIUS timeout
RADIUS Server Realm-Type
15-4
set radius
set radius
Usethiscommandtoenable,disable,orconfigureRADIUSauthentication.
Syntax
set radius {enable | disable} | {retries number-of-retries} | {timeout timeout} | {server index ip-address port [secret-value] [realm {management-access | any | network-access}} | {realm {management-access | any | network-access} {index| all}}
Parameters
enable|disable retriesnumberof retries timeouttimeout EnablesordisablestheRADIUSclient. SpecifiesthenumberofretryattemptsbeforetheRADIUSservertimesout. Validvaluesarefrom0to10.Defaultis3. Specifiesthemaximumamountoftime(inseconds)toestablishcontact withtheRADIUSserverbeforeretryattemptsbegin.Validvaluesarefrom 1to30.Defaultis20seconds. Specifiestheindexnumber,IPaddressandtheUDPauthenticationportfor theRADIUSserver. (Optional)Specifiesanencryptionkeytobeusedforauthentication betweentheRADIUSclientandserver. RealmallowsyoutodefinewhohastogothroughtheRADIUSserverfor authentication. managementaccess:Thismeansthatanyonetryingtoaccesstheswitch (Telnet,SSH,LocalManagement)hastoauthenticatethroughthe RADIUSserver. networkaccess:Thismeansthatalltheusershavetoauthenticatetoa RADIUSserverbeforetheyareallowedaccesstothenetwork. any:Meansthatbothmanagementaccessandnetworkaccesshave beenenabled.
serverindex ip_addressport secretvalue realm management access|any| networkaccess
Note: If the management-access or any access realm has been configured, the local admin account is disabled for access to the switch using the console, Telnet, or Local Management. Only the network-access realm allows access to the local admin account.
index|all
Appliestherealmsettingtoaspecificserverortoallservers.
Defaults
Ifsecretvalueisnotspecified,nonewillbeapplied. Ifrealmisnotspecified,theanyaccessrealmwillbeused.
Mode
Usage
TheDSeriesdeviceallowsupto10RADIUSaccountingserverstobeconfigured,withuptotwo serversactiveatanygiventime. TheRADIUSclientcanonlybeenabledontheswitchonceaRADIUSserverisonline,anditsIP address(es)hasbeenconfiguredwiththesamepasswordtheRADIUSclientwilluse.
clear radius
Note: If RADIUS is configured with no host IP address on the device, it will use the loopback interface 0 IP address (if it has been configured) as its source for the NAS-IP attribute. For information about configuring loopback interfaces, refer to interface on page 15-3.
Examples
ThisexampleshowshowtoenabletheRADIUSclientforauthenticatingwithRADIUSserver1at IPaddress192.168.6.203,UDPauthenticationport1812,andanauthenticationpasswordof pwsecret.Aspreviouslynoted,theserversecretpasswordenteredheremustmatchthat alreadyconfiguredastheReadWrite(rw)passwordontheRADIUSserver:
D2(su)->set radius server 1 192.168.6.203 1812 pwsecret
ThisexampleshowshowtosettheRADIUStimeoutto5seconds:
D2(su)->set radius timeout 5
ThisexampleshowshowtosetRADIUSretriesto10:
D2(su)->set radius retries 10
Thisexampleshowshowtoforceanymanagementaccesstotheswitch(Telnet,web,SSH)to authenticatethroughaRADIUSserver.Theallparameterattheendofthecommandmeansthat anyofthedefinedRADIUSserverscanbeusedforthisAuthentication.

D2(rw)->set radius realm management-access all
clear radius
UsethiscommandtoclearRADIUSserversettings.
Syntax
clear radius [retries] | [timeout] | [server {index | all | realm {index | all}}]
Parameters
retries timeout server index|all realm ResetsthemaximumnumberofattemptsausercancontacttheRADIUS serverbeforetimingoutto3. ResetsthemaximumamountoftimetoestablishcontactwiththeRADIUS serverbeforetimingoutto20seconds. Deletesserversettings. Forusewiththeserverparametertocleartheserverconfigurationforall serversoraspecificRADIUSserverasdefinedbyanindex. ResetstherealmsettingforallserversoraspecificRADIUSserveras definedbyanindex.
Mode
Defaults
None.
15-6
show radius accounting
Examples
ThisexampleshowshowtoclearallsettingsonallRADIUSservers:
D2(su)->clear radius server all
ThisexampleshowshowtoresettheRADIUStimeouttothedefaultvalueof20seconds:
D2(su)->clear radius timeout
show radius accounting

UsethiscommandtodisplaytheRADIUSaccountingconfiguration.Thistransmitsaccounting informationbetweenanetworkaccessserverandasharedaccountingserver.
Syntax
show radius accounting [server] | [counter ip-address] | [retries] | [timeout]
Parameters
server counteripaddress retries timeout (Optional)DisplaysoneorallRADIUSaccountingserverconfigurations. (Optional)DisplayscountersforaRADIUSaccountingserver. (Optional)Displaysthemaximumnumberofattemptstocontactthe RADIUSaccountingserverbeforetimingout. (Optional)Displaysthemaximumamountoftimebeforetimingout.
Mode
Defaults
Ifnoparametersarespecified,allRADIUSaccountingconfigurationinformationwillbe displayed.
Example
ThisexampleshowshowtodisplayRADIUSaccountingconfigurationinformation.Inthiscase, RADIUSaccountingisnotcurrentlyenabledandglobaldefaultsettingshavenotbeenchanged. Oneserverhasbeenconfigured. FordetailsonenablingandconfiguringRADIUSaccounting,refertosetradiusaccountingon page 158:
D2(ro)->show radius accounting RADIUS accounting status: Disabled RADIUS Acct Server IP Address Acct-Port Retries Timeout Status ------------------ ---------- --------- ------- ------- -----1 172.16.2.10 1856 3 20 Disabled
15-7
set radius accounting
set radius accounting

UsethiscommandtoconfigureRADIUSaccounting.
Syntax
set radius accounting {[enable | disable] [retries retries] [timeout timeout] [server ip_address port [server-secret]
Parameters
enable|disable retriesretries timeouttimeout EnablesordisablestheRADIUSaccountingclient. SetsthemaximumnumberofattemptstocontactaspecifiedRADIUS accountingserverbeforetimingout.Validretryvaluesare010. Setsthemaximumamountoftime(inseconds)toestablishcontactwitha specifiedRADIUSaccountingserverbeforetimingout.Validtimeout valuesare130. Specifiestheaccountingservers: IPaddress UDPauthenticationport(065535) serversecret(ReadWritepasswordtoaccessthisaccountingserver. Devicewillpromptforthisentryuponcreatingaserverinstance,as shownintheexamplebelow.)
serverip_address portserversecret
Mode
Defaults
None.
Examples
ThisexampleshowshowtoenabletheRADIUSaccountingclientforauthenticatingwiththe accountingserveratIPaddress10.2.4.12,UDPauthenticationport1800.Aspreviouslynoted,the serversecretpasswordenteredheremustmatchthatalreadyconfiguredastheReadWrite(rw) passwordontheRADIUSaccountingserver:
D2(su)->set radius accounting server 10.2.4.12 1800 Enter secret: Re-enter secret:
ThisexampleshowshowtosettheRADIUSaccountingtimeoutto30seconds:
D2(su)->set radius accounting timeout 30
ThisexampleshowshowtosetRADIUSaccountingretriesto10:
D2(su)->set radius accounting retries 10
15-8
clear radius accounting
clear radius accounting

UsethiscommandtoclearRADIUSaccountingconfigurationsettings.
Syntax
clear radius accounting {server ip-address | retries | timeout | counter}
Parameters
serveripaddress retries timeout counter Clearstheconfigurationononeormoreaccountingservers. Resetstheretriestothedefaultvalueof3. Resetsthetimeoutto5seconds. Clearscounters.
Mode
Defaults
None.
Example
ThisexampleshowshowtoresettheRADIUSaccountingtimeoutto5seconds.
D2(su)->clear radius accounting timeout
Configuring 802.1X Authentication

Purpose
Toreviewandconfigure802.1XauthenticationforoneormoreportsusingEAPOL(Extensible AuthenticationProtocol).802.1Xcontrolsnetworkaccessbyenforcinguserauthorizationon selectedports,whichresultsinallowingordenyingnetworkaccessaccordingtoRADIUSserver configuration.
Note: To configure EAP pass-through, which allows client authentication packets to be forwarded through the switch to an upstream device, 802.1X authentication must be globally disabled with the set dot1x command (set dot1x on page 15-13).
Commands
For information about... show dot1x show dot1x auth-config set dot1x set dot1x auth-config clear dot1x auth-config Refer to page... 15-10 15-11 15-13 15-14 15-15
15-9
show dot1x
For information about... show eapol set eapol clear eapol
Refer to page... 15-16 15-17 15-18
show dot1x
Usethiscommandtodisplay802.1Xstatus,diagnostics,statistics,andreauthenticationor initializationcontrolinformationforoneormoreports.
Syntax
show dot1x [auth-diag] [auth-stats] [port [init | reauth]] [port-string]
Parameters
authdiag authstats portinit|reauth portstring (Optional)Displaysauthenticationdiagnosticsinformation. (Optional)Displaysauthenticationstatistics. (Optional)Displaysthestatusofportinitializationandreauthentication controlfortheport. (Optional)Displaysinformationforspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
Ifnoparametersarespecified,802.1Xstatuswillbedisplayed. Ifportstringisnotspecified,informationforallportswillbedisplayed.
Mode
15-10
show dot1x auth-config
Examples
Thisexampleshowshowtodisplay802.1Xstatus:
D2(su)->show dot1x DOT1X is disabled.
Thisexampleshowshowtodisplayauthenticationdiagnosticsinformationforge.1.1:
D2(su)->show dot1x auth-diag ge.1.1 Port : 1 Auth-Diag Enter Connecting: EAP Logoffs While Connecting: Enter Authenticating: Success While Authenticating Timeouts While Authenticating: Fails While Authenticating: ReAuths While Authenticating: EAP Starts While Authenticating: EAP logoff While Authenticating: Backend Responses: Backend Access Challenges: Backend Others Requests To Supp: Backend NonNak Responses From: Backend Auth Successes: Backend Auth Fails:
0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
Thisexampleshowshowtodisplayauthenticationstatisticsforge.1.1:
D2(su)->show dot1x auth-stats Port: 1 Auth-Stats EAPOL Frames Rx: EAPOL Frames Tx: EAPOL Start Frames Rx: EAPOL Logoff Frames Rx: EAPOL RespId Frames Rx: EAPOL Resp Frames Rx: EAPOL Req Frames Tx: EAP Length Error Frames Rx: Last EAPOL Frame Version: Last EAPOL Frame Source: ge.1.1 0 0 0 0 0 0 0 0 0 00:00:00:00:00:00
Thisexampleshowshowtodisplaythestatusofportreauthenticationcontrolforge.1.1through ge.1.6:
D2(su)->show dot1x port reauth ge.1.1-6 Port 1: Port reauthenticate: FALSE Port 2: Port reauthenticate: FALSE Port 3: Port reauthenticate: FALSE Port 4: Port reauthenticate: FALSE Port 5: Port reauthenticate: FALSE Port 6: Port reauthenticate: FALSE

Usethiscommandtodisplay802.1Xauthenticationconfigurationsettingsforoneormoreports.
Syntax
show dot1x auth-config [authcontrolled-portcontrol] [maxreq] [quietperiod] [reauthenabled] [reauthperiod] [servertimeout] [supptimeout] [txperiod] [port-string]
Parameters
authcontrolled portcontrol maxreq quietperiod reauthenabled reauthperiod servertimeout supptimeout txperiod portstring (Optional)DisplaysthecurrentvalueofthecontrolledPortcontrol parameterfortheport. (Optional)Displaysthevaluesetformaximumrequestscurrentlyinuseby thebackendauthenticationstatemachine. (Optional)Displaysthevaluesetforquietperiodcurrentlyinusebythe authenticatorPAEstatemachine. (Optional)Displaysthestateofreauthenticationcontrolusedbythe ReauthenticationTimerstatemachine. (Optional)Displaysthevalue,inseconds,setforthereauthentication periodusedbythereauthenticationtimerstatemachine. (Optional)Displaystheservertimeoutvalue,inseconds,currentlyinuse bythebackendauthenticationstatemachine. (Optional)Displaystheauthenticationsupplicanttimeoutvalue,in seconds,currentlyinusebythebackendauthenticationstatemachine. (Optional)Displaysthetransmissionperiodvalue,inseconds,currentlyin usebytheauthenticatorPAEstatemachine. (Optional)Limitsthedisplayofdesiredinformationinformationtospecific port(s).Foradetaileddescriptionofpossibleportstringvalues,referto PortStringSyntaxUsedintheCLIonpage 41.
Defaults
Ifnoparametersarespecified,all802.1Xsettingswillbedisplayed. Ifportstringisnotspecified,informationforallportswillbedisplayed.
Mode
Examples
ThisexampleshowshowtodisplaytheEAPOLportcontrolmodeforge.1.1:
D2(su)->show dot1x auth-config authcontrolled-portcontrol ge.1.1 Port 1: Auth controlled port control: Auto
Thisexampleshowshowtodisplaythe802.1Xquietperiodsettingsforge.1.1:
D2(su)->show dot1x auth-config quietperiod ge.1.1 Port 1: Quiet period: 30
15-12
set dot1x
Thisexampleshowshowtodisplayall802.1Xauthenticationconfigurationsettingsforge.1.1:
D2(ro)->show dot1x auth-config Port : 1 Auth-Config PAE state: Backend auth state: Admin controlled directions: Oper controlled directions: Auth controlled port status: Auth controlled port control: Quiet period: Transmission period: Supplicant timeout: Server timeout: Maximum requests: Reauthentication period: Reauthentication control: ge.1.1 Initialize Initialize Both Both Authorized Auto 60 30 30 30 2 3600 Disabled
set dot1x
Usethiscommandtoenableordisable802.1Xauthentication,toreauthenticateoneormoreaccess entities,ortoreinitializeoneormoresupplicants.
Syntax
set dot1x {enable | disable | port {init | reauth} {true | false} [port-string]}
Parameters
enable|disable port init|reauth true|false portstring Enablesordisables802.1X. Enableordisable802.1Xreauthenticationorinitializationcontrolononeor moreports. Configureinitializationorreauthenticationcontrol. Enable(true)ordisable(false)reinitialization/reauthentication. (Optional)Specifiestheport(s)toreinitializeorreauthenticate.
Defaults
Ifnoportsarespecified,thereinitializationorreauthenticationsettingwillbeappliedtoallports.
Mode
Usage
Disabling802.1Xauthenticationglobally,bynotenteringaspecificportstringvalue,willenable theEAPpassthroughfeature.EAPpassthroughallowsclientauthenticationpacketstobe forwardedunmodifiedthroughtheswitchtoanupstreamdevice.
Examples
Thisexampleshowshowtoenable802.1X:
D2(su)->set dot1x enable
Thisexampleshowshowtoreinitializege.1.2:
D2(rw)->set dot1x port init true ge.1.2
set dot1x auth-config
set dot1x auth-config

Usethiscommandtoconfigure802.1Xauthentication.
Syntax
set dot1x auth-config {[authcontrolled-portcontrol {auto | forced-auth | forced-unauth}] [maxreq value] [quietperiod value] [reauthenabled {false | true}] [reauthperiod value] [servertimeout timeout] [supptimeout timeout] [txperiod value]} [port-string]
Parameters
authcontrolled portcontrol auto|forcedauth| forcedunauth Specifiesthe802.1Xportcontrolmode. maxreqvalue autoSetportcontrolmodetoautocontrolledportcontrol.This isthedefaultvalue. forcedauthSetportcontrolmodetoForcedAuthorized controlledportcontrol. forcedunauthSetportcontrolmodetoForcedUnauthorized controlledportcontrol.
Specifiesthemaximumnumberofauthenticationrequestsallowed bythebackendauthenticationstatemachine.Validvaluesare110. Defaultvalueis2. Specifiesthetime(inseconds)followingafailedauthentication beforeanotherattemptcanbemadebytheauthenticatorPAEstate machine.Validvaluesare065535.Defaultvalueis60seconds. Enables(true)ordisables(false)reauthenticationcontrolofthe reauthenticationtimerstatemachine.Defaultvalueisfalse. Specifiesthetimelapse(inseconds)betweenattemptsbythe reauthenticationtimerstatemachinetoreauthenticateaport.Valid valuesare065535.Defaultvalueis3600seconds. Specifiesatimeoutperiod(inseconds)fortheauthenticationserver, usedbythebackendauthenticationstatemachine.Validvaluesare1 300.Defaultvalueis30seconds. Specifiesatimeoutperiod(inseconds)fortheauthentication supplicantusedbythebackendauthenticationstatemachine.Valid valuesare1300.Defaultvalueis30seconds. Specifiestheperiod(inseconds)whichpassesbetweenauthenticator PAEstatemachineEAPtransmissions.Validvaluesare065535. Defaultvalueis30seconds. (Optional)Limitstheconfigurationofdesiredsettingstospecified port(s).Foradetaileddescriptionofpossibleportstringvalues,refer toPortStringSyntaxUsedintheCLIonpage 41.
quietperiodvalue
reauthenabledfalse| true reauthperiodvalue
servertimeouttimeout
supptimeouttimeout
txperiodvalue
portstring
Defaults
Ifportstringisnotspecified,authenticationparameterswillbesetonallports.
Mode
15-14
clear dot1x auth-config
Examples
Thisexampleshowshowtoenablereauthenticationcontrolonportsge.1.13:
D2(su)->set dot1x auth-config reauthenabled true ge.1.1-3
Thisexampleshowshowtosetthe802.1Xquietperiodto120secondsonportsge.1.13:
D2(su)->set dot1x auth-config quietperiod 120 ge.1.1-3
clear dot1x auth-config

Usethiscommandtoreset802.1Xauthenticationparameterstodefaultvaluesononeormore ports.
Syntax
clear dot1x auth-config [authcontrolled-portcontrol] [maxreq] [quietperiod] [reauthenabled] [reauthperiod] [servertimeout] [supptimeout] [txperiod] [portstring]
Parameters
authcontrolled portcontrol maxreq quietperiod reauthenabled reauthperiod servertimeout supptimeout txperiod portstring (Optional)Resetsthe802.1Xportcontrolmodetoauto. (Optional)Resetsthemaximumrequestsvalueto2. (Optional)Resetsthequietperiodvalueto60seconds. (Optional)Resetsthereauthenticationcontrolstatetodisabled(false). (Optional)Resetsthereauthenticationperiodvalueto3600seconds. (Optional)Resetstheservertimeoutvalueto30seconds. (Optional)Resetstheauthenticationsupplicanttimeoutvalueto30 seconds. (Optional)Resetsthetransmissionperiodvalueto30seconds. (Optional)Resetssettingsonspecificport(s).Foradetaileddescriptionof possibleportstringvalues,refertoPortStringSyntaxUsedintheCLIon page 41.
Defaults
Ifnoparametersarespecified,allauthenticationparameterswillbereset. Ifportstringisnotspecified,parameterswillbesetonallports.
Mode
Examples
Thisexampleshowshowtoresetthe802.1Xportcontrolmodetoautoonallports:
D2(su)->clear dot1x auth-config authcontrolled-portcontrol
Thisexampleshowshowtoresetreauthenticationcontroltodisabledonportsge.1.13:
D2(su)->clear dot1x auth-config reauthenabled ge.1.1-3
15-15
show eapol
Thisexampleshowshowtoresetthe802.1Xquietperiodto60secondsonportsge.1.13:
D2(su)->clear dot1x auth-config quietperiod ge.1.1-3
show eapol
UsethiscommandtodisplayEAPOLstatusorsettingsforoneormoreports.
Syntax
show eapol [port-string]
Parameters
portstring (Optional)DisplaysEAPOLstatusforspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
Ifportstringisnotspecified,onlyEAPOLenablestatuswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayEAPOLstatusforportsge.1.13:
D2(su)->show eapol ge.1.1-3 EAPOL is disabled. Port -------ge.1.1 ge.1.2 ge.1.3 Authentication State -------------------Initialize Initialize Initialize Authentication Mode -------------------Auto Auto Auto
Table 1547providesanexplanationofthecommandoutput.Fordetailsonusingtheseteapol commandtoenabletheprotocolandassignanauthenticationmode,refertoseteapolon page 1517. Table 15-47

Output Field Port
show eapol Output Details

What It Displays... Port designation. For a detailed description of possible port-string values, refer to Port String Syntax Used in the CLI on page 4-1.
15-16
set eapol
Table 15-47
Output Field
show eapol Output Details (Continued)

What It Displays... Current EAPOL authentication state for each port. Possible internal states for the authenticator (switch) are: initialize: A port is in the initialize state when:
Authentication State
authentication is disabled, authentication is enabled and the port is not linked, or authentication is enabled and the port is linked. (In this case very little time is spent in this state, it immediately transitions to the connecting state, via disconnected.
disconnected: The port passes through this state on its way to connected whenever the port is reinitialized, via link state change, reauthentication failure, or management intervention. connecting: While in this state, the authenticator sends request/ID messages to the end user. authenticating: The port enters this state from connecting after receiving a response/ID from the end user. It remains in this state until the entire authentication exchange between the end user and the authentication server completes. authenticated: The port enters this state from authenticating state after the exchange completes with a favorable result. It remains in this state until linkdown, logoff, or until a reauthentication begins. aborting: The port enters this state from authenticating when any event occurs that interrupts the login exchange. held: After any login failure the port remains in this state for the number of seconds equal to quietPeriod (can be set using MIB). forceAuth: Management is allowing normal, unsecured switching on this port. forceUnauth: Management is preventing any frames from being forwarded to or from this port. Authentication Mode Mode enabling network access for each port. Modes include: Auto: Frames are forwarded according to the authentication state of each port. Forced Authorized Mode: Meant to disable authentication on a port. It is intended for ports that support ISLs and devices that cannot authenticate, such as printers and file servers. If a default policy is applied to the port via the policy profile MIB, then frames are forwarded according to the configuration set by that policy, otherwise frames are forwarded according to the current configuration for that port. Authentication using 802.1X is not possible on a port in this mode. Forced Unauthorized Mode: All frames received on the port are discarded by a filter. Authentication using 802.1X is not possible on a port in this mode.
set eapol
UsethiscommandtoenableordisableEAPOLportbaseduserauthenticationwiththeRADIUS serverandtosettheauthenticationmodeforoneormoreports.
Syntax
set eapol [enable | disable] [auth-mode {auto | forced-auth | forced-unauth} port-string
15-17
clear eapol
Parameters
enable|disable authmode auto| forcedauth| forcedunauth EnablesordisablesEAPOL. Specifiestheauthenticationmodeas: autoAutoauthorizationmode.Thisisthedefaultmodeandwill forwardframesaccordingtotheauthenticationstateoftheport.For detailsonthismode,refertoTable 1547. forcedauthForcedauthorizedmode,whichdisablesauthentication ontheport. forcedunauthForcedunauthorizedmode,whichfiltersanddiscards allframesreceivedontheport.
portstring
Specifiestheport(s)onwhichtosetEAPOLparameters.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
None.
Mode
Examples
ThisexampleshowshowtoenableEAPOL:
D2(su)->set eapol enable
ThisexampleshowshowtoenableEAPOLwithforcedauthorizedmodeonportge.1.1:
D2(su)->set eapol auth-mode forced-auth ge.1.1
clear eapol
UsethiscommandtogloballycleartheEAPOLauthenticationmode,ortoclearsettingsforoneor moreports.
Syntax
clear eapol [auth-mode] [port-string]
Parameters
authmode portstring (Optional)GloballyclearstheEAPOLauthenticationmode. Specifiestheport(s)onwhichtoclearEAPOLparameters.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
Ifauthmodeisnotspecified,allEAPOLsettingswillbecleared. Ifportstringisnotspecified,settingswillbeclearedforallports.
15-18 Security Configuration
Configuring MAC Authentication
Mode
Example
ThisexampleshowshowtocleartheEAPOLauthenticationmodeforportge.1.3:
D2(su)->clear eapol auth-mode ge.1.3
Configuring MAC Authentication

Purpose
Toreview,disable,enableandconfigureMACauthentication.Thisauthenticationmethodallows thedevicetoauthenticatesourceMACaddressesinanexchangewithanauthenticationserver. Theauthenticator(switch)selectsasourceMACseenonaMACauthenticationenabledportand submitsittoabackendclientforauthentication.ThebackendclientusestheMACaddressstored password,ifrequired,ascredentialsforanauthenticationattempt.Ifaccepted,astring representinganaccesspolicymaybereturned.Ifpresent,theswitchappliestheassociatedpolicy rules. YoucanspecifyamasktoapplytoMACaddresseswhenauthenticatingusersthroughaRADIUS server(seesetmacauthenticationsignificantbitsonpage 1529).Themostcommonuseof significantbitmasksisforauthenticationofallMACaddressesforaspecificvendor.
Commands
For information about... show macauthentication show macauthentication session set macauthentication set macauthentication password clear macauthentication password set macauthentication port set macauthentication portinitialize set macauthentication portquietperiod clear macauthentication portquietperiod set macauthentication macinitialize set macauthentication reauthentication set macauthentication portreauthenticate set macauthentication macreauthenticate set macauthentication reauthperiod clear macauthentication reauthperiod set macauthentication significant-bits Refer to page... 15-20 15-21 15-22 15-23 15-23 15-23 15-24 15-25 15-25 15-26 15-26 15-27 15-27 15-28 15-28 15-29
15-19
show macauthentication
For information about... clear macauthentication significant-bits
Refer to page... 15-29
show macauthentication
UsethiscommandtodisplayMACauthenticationinformationforoneormoreports.
Syntax
show macauthentication [port-string]
Parameters
portstring (Optional)DisplaysMACauthenticationinformationforspecificport(s). Foradetaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
Ifportstringisnotspecified,MACauthenticationinformationwillbedisplayedforallports.
Mode
Example
ThisexampleshowshowtodisplayMACauthenticationinformationforge.2.1through8:
D2(su)->show macauthentication ge.2.1-8 MAC authentication: - enabled MAC user password: - NOPASSWORD Port username significant bits - 48 Port ------ge.2.1 ge.2.2 ge.2.3 ge.2.4 ge.2.5 ge.2.6 ge.2.7 ge.2.8 Port State -------disabled disabled disabled disabled disabled disabled disabled disabled Reauth Period ---------3600 3600 3600 3600 3600 3600 3600 3600 Auth Allowed -------1 1 1 1 1 1 1 1 Auth Allocated --------1 1 1 1 1 1 1 1 Reauthentications ----------------disabled disabled disabled disabled disabled disabled disabled disabled

Output Field MAC authentication
show macauthentication Output Details

What It Displays... Whether MAC authentication is globally enabled or disabled. Set using the set macauthentication command as described in set macauthentication on page 15-22. User password associated with MAC authentication on the device. Set using the set macauthentication password command as described in set macauthentication password on page 15-23.
MAC user password
15-20
show macauthentication session
Table 15-48
Output Field Port username significant bits
show macauthentication Output Details (Continued)

What It Displays... Number of significant bits in the MAC addresses to be used starting with the leftmost bit of the vendor portion of the MAC address. The significant portion of the MAC address is sent as a user-name credential when the primary attempt to authenticate the full MAC address fails. Any other failure to authenticate the full address, (i.e., authentication server timeout) causes the next attempt to start once again with a full MAC authentication. Default value of 48 can be changed with the set macauthentication significant-bits command. Port designation. For a detailed description of possible port-string values, refer to Port String Syntax Used in the CLI on page 4-1. Whether or not MAC authentication is enabled or disabled on this port. Reauthentication period for this port. Default value of 30 can be changed using the set macauthentication reauthperiod command (page 15-28). Number of concurrent authentications supported on this port. Default is 1 and cannot be reset. Maximum number of MAC authentications permitted on this port. Default is 1 and cannot be reset Whether or not reauthentication is enabled or disabled on this port. Set using the set macauthentication reauthentication command (page 15-26).
Port Port State Reauth Period Auth Allowed Auth Allocated Reauthentications

UsethiscommandtodisplaytheactiveMACauthenticatedsessions.
Syntax
Parameters
None.
Defaults
Ifportstringisnotspecified,MACsessioninformationwillbedisplayedforallMAC authenticationports.
Mode
Usage
ChangingtheReauthPeriodwiththesetmacauthenticationreauthperiodcommanddoesnot affectcurrentsessions.Newsessionsdisplaythecorrectperiod.
15-21
set macauthentication
Example
ThisexampleshowshowtodisplayMACsessioninformation:
D2(su)->show macauthentication session Port MAC Address Duration Reauth Period --------------------- ---------- ------------ge.1.2 00:60:97:b5:4c:07 0,00:52:31 3600 Reauthentications ----------------disabled

Output Field Port MAC Address Duration Reauth Period
show macauthentication session Output Details

What It Displays... Port designation. For a detailed description of possible port-string values, refer to Port String Syntax Used in the CLI on page 4-1. MAC address associated with the session. Time this session has been active. Reauthentication period for this port, set using the set macauthentication reauthperiod command described in set macauthentication reauthperiod on page 15-28. Whether or not reauthentication is enabled or disabled on this port. Set using the set macauthentication reauthentication command described in set macauthentication reauthentication on page 15-26.
Reauthentications
set macauthentication
UsethiscommandtogloballyenableordisableMACauthentication.
Syntax
set macauthentication {enable | disable}
Parameters
enable|disable GloballyenablesordisablesMACauthentication.
Mode
Defaults
None.
Example
ThisexampleshowshowtogloballyenableMACauthentication:
D2(su)->set macauthentication enable
15-22
set macauthentication password
set macauthentication password

UsethiscommandtosetaMACauthenticationpassword.
Syntax
set macauthentication password password
Parameters
password SpecifiesatextstringMACauthenticationpassword.
Defaults
None.
Mode
Example
ThisexampleshowshowtosettheMACauthenticationpasswordtomacauth:
D2(su)->set macauthentication password macauth
clear macauthentication password

UsethiscommandtocleartheMACauthenticationpassword.
Syntax
clear macauthentication password
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtocleartheMACauthenticationpassword:
D2(su)->clear macauthentication password
set macauthentication port

UsethiscommandtoenableordisableoneormoreportsforMACauthentication.
Syntax
set macauthentication port {enable | disable} port-string
15-23
set macauthentication portinitialize
Parameters
enable|disable portstring EnablesordisablesMACauthentication. Specifiesport(s)onwhichtoenableordisableMACauthentication.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
None.
Mode
Usage
Enablingport(s)forMACauthenticationrequiresgloballyenablingMACauthenticationonthe switchasdescribedinsetmacauthenticationonpage 1522,andthenenablingitonaportby portbasis.Bydefault,MACauthenticationisgloballydisabledanddisabledonallports.
Example
ThisexampleshowshowtoenableMACauthenticationonge.2.1though5:
D2(su)->set macauthentication port enable ge.2.1-5
set macauthentication portinitialize

UsethiscommandtoforceoneormoreMACauthenticationportstoreinitializeandremoveany currentlyactivesessionsonthoseports.
Syntax
set macauthentication portinitialize port-string
Parameters
portstring SpecifiestheMACauthenticationport(s)toreinitialize.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
None.
Mode
Example
Thisexampleshowshowtoforcege.2.1through5toinitialize:
D2(su)->set macauthentication portinitialize ge.2.1-5
15-24
set macauthentication portquietperiod
set macauthentication portquietperiod

Thissetsthenumberofsecondsfollowingafailedauthenticationbeforeanotherattemptmaybe madeontheport.
Syntax
set macauthentication portquietperiod time port-string
Parameters
time portstring Periodinsecondstowaitafterafailedauthentication.Bydefault,thisis30 seconds. Specifiestheportsforwhichthequitperiodistobeapplied.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
None.
Mode
Example
Thisexamplesetsport1towait5secondsafterafailedauthenticationattemptbeforeanew attemptcanbemade:
D2(su)->set macauthentication portquietperiod 5 ge.1.1
clear macauthentication portquietperiod

Thissetsthequietperiodbacktothedefaultvalueof30seconds.
Syntax
clear macauthentication portquietperiod [port-string]
Parameters
portstring (Optional)Specifiestheportsforwhichthequietperiodistobereset.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
Ifaportstringisnotspecifiedthenallportswillbesettothedefaultportquietperiod.
Mode
Example
Thisexampleresetsthedefaultquietperiodonport1:
D2(su)->clear macauthentication portquietperiod ge.1.1
set macauthentication macinitialize
set macauthentication macinitialize

UsethiscommandtoforceacurrentMACauthenticationsessiontoreinitializeandremovethe session.
Syntax
set macauthentication macinitialize mac-addr
Parameters
macaddr SpecifiestheMACaddressofthesessiontoreinitialize.
Mode
Defaults
None.
Example
ThisexampleshowshowtoforcetheMACauthenticationsessionforaddress006097b54c07 toreinitialize:
D2(su)->set macauthentication macinitialize 00-60-97-b5-4c-07
set macauthentication reauthentication

UsethiscommandtoenableordisablereauthenticationofallcurrentlyauthenticatedMAC addressesononeormoreports.
Syntax
set macauthentication reauthentication {enable | disable} port-string
Parameters
enable|disable portstring EnablesordisablesMACreauthentication. Specifiesport(s)onwhichtoenableordisableMACreauthentication.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
None.
Mode
Example
ThisexampleshowshowtoenableMACreauthenticationonge.4.1though5:
D2(su)->set macauthentication reauthentication enable ge.4.1-5
15-26
set macauthentication portreauthenticate
set macauthentication portreauthenticate

Usethiscommandtoforceanimmediatereauthenticationofthecurrentlyactivesessionsonone ormoreMACauthenticationports.
Syntax
set macauthentication portreauthenticate port-string
Parameters
portstring SpecifiesMACauthenticationport(s)tobereauthenticated.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
None.
Mode
Example
Thisexampleshowshowtoforcege.2.1though5toreauthenticate:
D2(su)->set macauthentication portreauthentication ge.2.1-5
set macauthentication macreauthenticate

UsethiscommandtoforceanimmediatereauthenticationofaMACaddress.
Syntax
set macauthentication macreauthenticate mac-addr
Parameters
macaddr SpecifiestheMACaddressofthesessiontoreauthenticate.
Defaults
None.
Mode
Example
ThisexampleshowshowtoforcetheMACauthenticationsessionforaddress006097b54c07 toreauthenticate:
D2(su)->set macauthentication macreauthenticate 00-60-97-b5-4c-07
15-27
set macauthentication reauthperiod
set macauthentication reauthperiod

UsethiscommandtosettheMACreauthenticationperiod(inseconds).Thisisthetimelapse betweenattemptstoreauthenticateanycurrentMACaddressauthenticatedtoaport.
Syntax
set macauthentication reauthperiod time port-string
Parameters
time portstring Specifiesthenumberofsecondsbetweenreauthenticationattempts.Valid valuesare14294967295. Specifiestheport(s)onwhichtosettheMACreauthenticationperiod.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
None.
Mode
Usage
ChangingtheReauthPeriodwiththesetmacauthenticationreauthperiodcommanddoesnot affectcurrentsessions.Newsessionswillusethecorrectperiod.
Example
ThisexampleshowshowtosettheMACreauthenticationperiodto7200seconds(2hours)on ge.2.1through5:
D2(su)->set macauthentication reauthperiod 7200 ge.2.1-5
clear macauthentication reauthperiod

UsethiscommandtocleartheMACreauthenticationperiodononeormoreports.
Syntax
clear macauthentication reauthperiod [port-string]
Parameters
portstring (Optional)ClearstheMACreauthenticationperiodonspecificport(s).Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
Ifportstringisnotspecified,thereauthenticationperiodwillbeclearedonallports.
Mode
15-28 Security Configuration
set macauthentication significant-bits
Example
ThisexampleshowshowtogloballycleartheMACreauthenticationperiod:
D2(su)->clear macauthentication reauthperiod
set macauthentication significant-bits

UsethiscommandtosetthenumberofsignificantbitsoftheMACaddresstousefor authentication.
Syntax
set macauthentication significant-bits number
Parameters
number Specifiesthenumberofsignificantbitstobeusedforauthentication.
Defaults
None.
Mode
Usage
ThiscommandallowsyoutospecifyamasktoapplytoMACaddresseswhenauthenticating usersthroughaRADIUSserver.Themostcommonuseofsignificantbitmasksisfor authenticationofallMACaddressesforaspecificvendor. OnswitchesusingMACauthentication,theMACaddressofauserattemptingtologinissentto theRADIUSserverastheusername.Ifaccessisdenied,andifasignificantbitmaskhasbeen configured(otherthan48)withthiscommand,theswitchwillapplythemaskandresendthe maskedaddresstotheRADIUSserver.Forexample,ifauserwithMACaddressof0016CF12 3456isdeniedaccess,anda32bitmaskhasbeenconfigured,theswitchwillapplythemaskand resendaMACaddressof0016CF120000totheRADIUSserver. Touseasignificantbitsmaskforauthenticationofdevicesbyaparticularvendor,specifya24bit mask,tomaskouteverythingexceptthevendorportionoftheMACaddress.
Example
ThisexamplesetstheMACauthenticationsignificantbitsmaskto24.
D2(su)->set macauthentication significant-bits 24
clear macauthentication significant-bits

UsethiscommandtoresetthenumberofsignificantbitsoftheMACaddresstousefor authenticationtothedefaultof48.
Syntax
clear macauthentication significant-bits
15-29
Configuring Multiple Authentication Methods
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleresetstheMACauthenticationsignificantbitsto48.
D2(su)->clear macauthentication significant-bits
Configuring Multiple Authentication Methods

Note: D2 devices support up to eight authenticated users per port.
About Multiple Authentication Types

Whenenabled,multipleauthenticationtypesallowuserstoauthenticateusingmorethanone methodonthesameport.Inorderformultipleauthenticationtofunctiononthedevice,each possiblemethodofauthentication(MACauthentication,802.1X,PWA)mustbeenabledglobally andconfiguredappropriatelyonthedesiredportswithitscorrespondingcommandsetdescribed inthischapter. Multipleauthenticationmodemustbegloballyenabledonthedeviceusingthesetmultiauth modecommand.
Commands
For information about... show multiauth set multiauth mode clear multiauth mode set multiauth precedence clear multiauth precedence show multiauth port set multiauth port clear multiauth port show multiauth station show multiauth session show multiauth idle-timeout Refer to page... 15-31 15-31 15-32 15-33 15-33 15-34 15-34 15-35 15-36 15-36 15-37
15-30
show multiauth
For information about... set multiauth idle-timeout clear multiauth idle-timeout show multiauth session-timeout set multiauth session-timeout clear multiauth session-timeout
Refer to page... 15-38 15-38 15-39 15-40 15-40
show multiauth
Usethiscommandtodisplaymultipleauthenticationsystemconfiguration.
Syntax
show multiauth
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaymultipleauthenticationsystemconfiguration:
D2(rw)->show multiauth Multiple authentication system configuration ------------------------------------------------Supported types : dot1x, pwa mac Maximum number of users : 768 Current number of users : 2 System mode : multi Default precedence : dot1x, pwa, mac Admin precedence : dot1x, pwa, mac Operational precedence : dot1x, pwa, mac
set multiauth mode

Usethiscommandtosetthesystemauthenticationmodetoallowmultipleauthenticators simultaneously(802.1xPWA,andMACAuthentication)onasingleport,ortostrictlyadhereto 802.1xauthentication.
Syntax
set multiauth mode {multi | strict}
15-31
clear multiauth mode
Parameters
multi strict Allowsthesystemtousemultipleauthenticatorssimultaneously(802.1x, PWA,andMACAuthentication)onaport.Thisisthedefaultmode. Usermustauthenticateusing802.1xauthenticationbeforenormaltraffic (anythingotherthanauthenticationtraffic)canbeforwarded.
Defaults
None.
Mode
Usage
MultiauthmultimoderequiresthatMAC,PWA,and802.1Xauthenticationbeenabledglobally, andconfiguredappropriatelyonthedesiredportsaccordingtotheircorrespondingcommand setsdescribedinthischapter.RefertoConfiguring802.1XAuthenticationonpage 159and ConfiguringMACAuthenticationonpage 1519andConfiguringPortWebAuthentication (PWA)onpage 1557.
Example
Thisexampleshowshowtoenablesimultaneousmultipleauthentications:
D2(rw)->set multiauth mode multi

Usethiscommandtoclearthesystemauthenticationmode.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtoclearthesystemauthenticationmode:
D2(rw)->clear multiauth mode
15-32
set multiauth precedence
set multiauth precedence

Usethiscommandtosetthesystemsmultipleauthenticationadministrativeprecedence.
Syntax
set multiauth precedence {[dot1x] [mac] }
Parameters
dot1x mac pwa Setsprecedencefor802.1Xauthentication. SetsprecedenceforMACauthentication. Setsprecedenceforportwebauthentication
Defaults
None.
Mode
Usage
Whenauserissuccessfullyauthenticatedbymorethanonemethodatthesametime,the precedenceoftheauthenticationmethodswilldeterminewhichRADIUSreturnedfilterIDwillbe processedandresultinanappliedtrafficpolicyprofile.
Example
ThisexampleshowshowtosetprecedenceforMACauthentication:
D2(rw)->set multiauth precedence mac dot1x
clear multiauth precedence

Usethiscommandtoclearthesystemsmultipleauthenticationadministrativeprecedence.
Syntax
clear multiauth precedence
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtoclearthemultipleauthenticationprecedence:
D2(rw)->clear multiauth precedence
show multiauth port
show multiauth port

Usethiscommandtodisplaymultipleauthenticationpropertiesforoneormoreports.
Syntax
show multiauth port [port-string]
Parameters
portstring (Optional)Displaysmultipleauthenticationinformationforspecificport(s).
Defaults
Ifportstringisnotspecified,multipleauthenticationinformationwillbedisplayedforallports.
Mode
Example
Thisexampleshowshowtodisplaymultipleauthenticationinformationforportsge.3.14:
D2(rw)->show multiauth port ge.3.1-4 Port Max Allowed Current users users users ------------ ------------ ---------- ---------- ---------ge.3.1 auth-opt 8 8 0 ge.3.2 auth-opt 8 8 0 ge.3.3 auth-opt 8 8 0 ge.3.4 auth-opt 8 8 0 Mode
set multiauth port

Usethiscommandtosetmultipleauthenticationpropertiesforoneormoreports.
Syntax
set multiauth port mode {auth-opt | auth-reqd | force-auth | force-unauth} | numusers numusers port-string
Parameters
mode authopt| authreqd| forceauth| forceunauth Specifiestheport(s)multipleauthenticationmodeas: authoptAuthenticationoptional(nonstrictbehavior).Ifauser doesnotattempttoauthenticateusing802.1x,orif802.1x authenticationfails,theportwillallowtraffictobeforwarded accordingtothedefineddefaultVLAN. authreqdAuthenticationisrequired. forceauthAuthenticationconsidered. forceunauthAuthenticationdisabled.
numusers numusers
Specifiesthenumberofusersallowedauthenticationonport(s).Valid valuesare0to8.
15-34
clear multiauth port
portstring
Specifiestheport(s)onwhichtosetmultipleauthenticationproperties.
Defaults
None.
Mode
Examples
Thisexampleshowshowtosettheportmultipleauthenticationmodetorequiredonge.3.14:
D2(rw)->set multiauth port mode auth-reqd ge.3.14
Thisexampleshowshowtosetthenumberofusersallowedtoauthenticateonportge.3.14to8:
D2(rw)->set multiauth port numusers 8 ge.3.14
clear multiauth port

Usethiscommandtoclearmultipleauthenticationpropertiesforoneormoreports.
Syntax
clear multiauth port {mode | numusers} port-string
Parameters
mode numusers portstring Clearsthespecifiedportsmultipleauthenticationmode. Clearsthevaluesetforthenumberofusersallowedauthenticationonthe specifiedport. Specifiestheportorportsonwhichtoclearmultipleauthentication properties.
Defaults
None.
Mode
Examples
Thisexampleshowshowtocleartheportmultipleauthenticationmodeonportge.3.14:
D2(rw)->clear multiauth port mode ge.3.14
Thisexampleshowshowtoclearthenumberofusersonportge.3.14:
D2(rw)->clear multiauth port numusers ge.3.14
15-35
show multiauth station
show multiauth station

Usethiscommandtodisplaymultipleauthenticationstation(enduser)entries.
Syntax
show multiauth station [mac address] [port port-string]
Parameters
macaddress portportstring (Optional)DisplaysmultipleauthenticationstationentriesforspecificMAC address(es). (Optional)Displaysmultipleauthenticationstationentriesforspecific port(s).
Mode
Defaults
Ifnooptionsarespecified,multipleauthenticationstationentrieswillbedisplayedforallMAC addressesandports.
Example
Thisexampleshowshowtodisplaymultipleauthenticationstationentries.Inthiscase,twoend userMACaddressesareshown:
D2(rw)->show Port -----------ge.1.20 ge.2.16 multiauth station Address type Address ------------ -----------------------mac 00-10-a4-9e-24-87 mac 00-b0-d0-e5-0c-d0
show multiauth session

Usethiscommandtodisplaymultipleauthenticationsessionentries.
Syntax
show multiauth session [all] [agent {dot1x | mac | pwa}] [mac address] [port port-string]
Parameters
all agentdot1x|mac| pwa macaddress portportstring (Optional)Displaysinformationaboutallsessions,includingthosewith terminatedstatus. (Optional)Displays802.1X,orMAC,orportwebauthenticationsession information. (Optional)Displaysmultipleauthenticationsessionentriesforspecific MACaddress(es). (Optional)Displaysmultipleauthenticationsessionentriesforthe specifiedportorports.
15-36
show multiauth idle-timeout
Defaults
Ifnooptionsarespecified,multipleauthenticationsessionentrieswillbedisplayedforall sessions,authenticationtypes,MACaddresses,andports.
Mode
Example
Thisexampleshowshowtodisplaymultipleauthenticationsessioninformationforportge.1.1.
D2(su)->show multiauth session port ge.1.1 __________________________________________ Port | ge.1.1 Station address Auth status | success Last attempt Agent type | dot1x Session applied Server type | radius VLAN-Tunnel-Attr Policy index | 0 Policy name Session timeout | 0 Session duration Idle timeout | 5 Idle time Termination time | Not Terminated
| | | | | | |
00-01-03-86-0A-87 FRI MAY 18 11:16:36 2007 true none Administrator 0,00:00:25 0,00:00:00

Usethiscommandtodisplaythetimeoutvalue,inseconds,foranidlesessionforall authenticationmethods.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaytimeoutvaluesforanidlesessionforallauthenticationtypes.
D2(su)->show multiauth idle-timeout Authentication type Timeout (sec) ------------------- ------------dot1x 0 pwa 0 mac 0
15-37
set multiauth idle-timeout
set multiauth idle-timeout

Usethiscommandtosetthemaximumnumberofconsecutivesecondsanauthenticatedsession maybeidlebeforeterminationofthesession.
Syntax
set multiauth idle-timeout [dot1x | mac | pwa] timeout
Parameters
dot1x mac pwa timeout (Optional)SpecifiestheIEEE802.1Xportbasednetworkaccesscontrol authenticationmethodforwhichtosetthetimeoutvalue. (Optional)SpecifiestheEnterasysMACauthenticationmethodfor whichtosetthetimeoutvalue. (Optional)SpecifiestheEnterasysPortWebAuthenticationmethodfor whichtosetthetimeoutvalue. Specifiesthetimeoutvalueinseconds.Thevaluecanrangefrom0to 65535.Avalueof0meansthatnoidletimeoutwillbeappliedunlessan idletimeoutvalueisprovidedbytheauthenticatingserver.
Defaults
Ifnoauthenticationmethodisspecified,theidletimeoutvalueissetforallauthentication methods.
Mode
Usage
Ifyousetanidletimeoutvalue,aMACuserwhoseMACaddresshasagedoutoftheforwarding databasewillbeunauthenticatedifnotraffichasbeenseenfromthataddressforthespecifiedidle timeoutperiod. Avalueofzeroindicatesthatnoidletimeoutwillbeappliedunlessanidletimeoutvalueis providedbytheauthenticatingserver.Forexample,ifasessionisauthenticatedbyaRADIUS server,thatservermayencodeaIdleTimeoutAttributeinitsauthenticationresponse.
Example
Thisexamplesetstheidletimeoutvalueforallauthenticationmethodsto300seconds.
D2(su)->set multiauth idle-timeout 300
clear multiauth idle-timeout

Usethiscommandtoresetthemaximumnumberofconsecutivesecondsanauthenticatedsession maybeidlebeforeterminationofthesessiontoitsdefaultvalueof0.
Syntax
clear multiauth idle-timeout [dot1x | mac | pwa]
15-38
show multiauth session-timeout
Parameters
dot1x (Optional)SpecifiestheIEEE802.1Xportbasednetworkaccesscontrol authenticationmethodforwhichtoresetthetimeoutvaluetoits default. (Optional)SpecifiestheEnterasysMACauthenticationmethodfor whichtoresetthetimeoutvaluetoitsdefault. (Optional)SpecifiestheEnterasysPortWebAuthenticationmethodfor whichtoresetthetimeoutvaluetoitsdefault.
mac pwa
Defaults
Ifnoauthenticationmethodisspecified,theidletimeoutvalueisresettoitsdefaultvalueof0for allauthenticationmethods.
Mode
Example
Thisexampleresetstheidletimeoutvalueforallauthenticationmethodsto0seconds.
D2(su)->clear multiauth idle-timeout

Usethiscommandtodisplaythesessiontimeoutvalue,inseconds,forallauthenticationmethods.
Syntax
Parameters
None.
Defaults
None.
Mode
Switchmode,readonly.
Example
Thisexampledisplaysthesessiontimeoutvaluesforallauthenticationmethods.
D2(su)->show multiauth session-timeout Authentication type Timeout (sec) ------------------- ------------dot1x 0 pwa 0 mac 0
15-39
set multiauth session-timeout
set multiauth session-timeout

Usethiscommandtosetthemaximumnumberofsecondsanauthenticatedsessionmaylast beforeterminationofthesession.
Syntax
set multiauth session-timeout [dot1x | mac | pwa] timeout
Parameters
dot1x mac pwa timeout (Optional)SpecifiestheIEEE802.1Xportbasednetworkaccesscontrol authenticationmethodforwhichtosetthesessiontimeoutvalue. (Optional)SpecifiestheEnterasysMACauthenticationmethodfor whichtosetthesessiontimeoutvalue. (Optional)SpecifiestheEnterasysPortWebAuthenticationmethodfor whichtosetthesessiontimeoutvalue. Specifiesthetimeoutvalueinseconds.Thevaluecanrangefrom0to 65535.Avalueof0meansthatnosessiontimeoutwillbeappliedunless asessiontimeoutvalueisprovidedbytheauthenticatingserver.
Defaults
Ifnoauthenticationmethodisspecified,thesessiontimeoutvalueissetforallauthentication methods.
Mode
Usage
Avalueofzeromaybesupersededbyasessiontimeoutvalueprovidedbytheauthenticating server.Forexample,ifasessionisauthenticatedbyaRADIUSserver,thatservermayencodea SessionTimeoutAttributeinitsauthenticationresponse.
Example
ThisexamplesetsthesessiontimeoutvaluefortheIEEE802.1Xauthenticationmethodto300 seconds.
D2(su)->set multiauth session-timeout dot1x 300
clear multiauth session-timeout

Usethiscommandtoresetthemaximumnumberofconsecutivesecondsanauthenticatedsession maylastbeforeterminationofthesessiontoitsdefaultvalueof0.
Syntax
clear multiauth session-timeout [dot1x | mac | pwa]
15-40
Configuring VLAN Authorization (RFC 3580)
Parameters
dot1x (Optional)SpecifiestheIEEE802.1Xportbasednetworkaccesscontrol authenticationmethodforwhichtoresetthetimeoutvaluetoits default. (Optional)SpecifiestheEnterasysMACauthenticationmethodfor whichtoresetthetimeoutvaluetoitsdefault. (Optional)SpecifiestheEnterasysPortWebAuthenticationmethodfor whichtoresetthetimeoutvaluetoitsdefault.
mac pwa
Defaults
Ifnoauthenticationmethodisspecified,thesessiontimeoutvalueisresettoitsdefaultvalueof0 forallauthenticationmethods.
Mode
Example
ThisexampleresetsthesessiontimeoutvaluefortheIEEE802.1Xauthenticationmethodto0 seconds.
D2(su)->clear multiauth session-timeout dot1x
Configuring VLAN Authorization (RFC 3580)

Purpose
RFC3580TunnelAttributesprovideamechanismtocontainan802.1XauthenticatedoraMAC authenticatedusertoaVLANregardlessofthePVID. Pleaseseesection331ofRFC3580fordetailsonconfiguringaRADIUSservertoreturnthe desiredtunnelattributes.AsstatedinRFC3580,...itmaybedesirabletoallowaporttobeplaced intoaparticularVirtualLAN(VLAN),definedin[IEEE8021Q],basedontheresultofthe authentication. TheRADIUSservertypicallyindicatesthedesiredVLANbyincludingtunnelattributeswithinits AccessAcceptparameters.However,theIEEE802.1XorMACauthenticatorcanalsobe configuredtoinstructtheVLANtobeassignedtothesupplicantbyincludingtunnelattributes withinAccessRequestparameters. ThefollowingtunnelattributesareusedinVLANauthorizationassignment,: TunnelTypeVLAN(13) TunnelMediumType802 TunnelPrivateGroupIDVLANID
InordertoauthenticatemultipleRFC3580users,policymaptableresponsemustbesettotunnel asdescribedinthissection.
Note: The D2 cannot simultaneously support Policy and RFC 3580 on the same port. If multiple users are configured to use a port, and the G3 is then switched from "policy" mode to (RFC-3580 "tunnel" mode, the total number of users supported to use a port will be reset to one.
15-41
show policy maptable response
Commands
For information about... show policy maptable response set policy maptable response set vlanauthorization set vlanauthorization egress clear vlanauthorization show vlanauthorization Refer to page... 15-42 15-42 15-43 15-44 15-44 15-45

Displaysthecurrentpolicymaptableresponsesetting.WhenVLANauthorizationisenabled(as describedinthissection)andthepolicymaptableresponseistunnel,youcanusetheset multiauthportcommand(page1534)tosetthenumberofRFC3580users(numusers)allowed perGigabitport.
Syntax
Parameters
None.
Defaults
None.
Mode
Example
Thisexampleshowshowtodisplaythecurrentpolicymaptableresponsesetting:
D2(rw)->show policy maptable response
policy
set policy maptable response

SetsthemaptableresponsefromthedefaultofpolicytotunneltoallowuptoVLANauthorized userstobeconfiguredperGigabitport.
Syntax
set policy maptable response {policy | tunnel}
15-42
set vlanauthorization
Parameters
policy tunnel Setsthemaptableresponsetopolicy.Thisisthedefaultsetting,which allowsauthenticationofupto8multiauthusersperport. Setsthemaptableresponsetotunnel,whichallowsauthenticationofup tomultiauthusersperport.ThissettingisrequiredtoconfigureVLAN authorizationformultipleusersperGigabitport.
Defaults
Settopolicy.
Mode
Examples
Thisexampleshowshowtosetthepolicymaptableresponsetotunnel:
D2(rw)-> set policy maptable response tunnel
set vlanauthorization
EnableordisabletheuseoftheRADIUSVLANtunnelattributetoputaportintoaparticular VLANbasedontheresultofauthentication.
Syntax
set vlanauthorization {enable | disable} [port-string]
Parameters
enable|disable portstring Enablesordisablesvlanauthorization/tunnelattributes. (Optional)SpecifieswhichportstoenableordisabletheuseofVLAN tunnelattributes/authorization.Foradetaileddescriptionofpossibleport stringvalues,refertoPortStringSyntaxUsedintheCLIonpage 41.
Defaults
VLANauthenticationisdisabledbydefault.
Mode
Examples
ThisexampleshowshowtoenableVLANauthenticationforallGigabitEthernetports:
D2(rw)-> set vlanauthorization enable ge.*.*
ThisexampleshowshowtodisableVLANauthenticationforallGigabitEthernetportsonswitch unit/module 3:
D2(rw)-> set vlanauthorization disable ge.3.*
15-43
set vlanauthorization egress
set vlanauthorization egress

ControlsthemodificationofthecurrentVLANegresslistof802.1xauthenticatedportsforthe VLANsreturnedintheRADIUSauthorizationfilteridstring.
Syntax
set vlanauthorization egress {none | tagged | untagged} port-string
Parameters
none tagged untagged portstring Specifiesthatnoegressmanipulationwillbemade. Specifiesthattheauthenticatingportwillbeaddedtothecurrenttagged egressfortheVLANIDreturned. Specifiesthattheauthenticatingportwillbeaddedtothecurrent untaggedegressfortheVLANIDreturned(default). Specifiesthattheportorlistofports.towhichthiscommandwillapply. Foradetaileddescriptionofpossibleportstringvalues,refertoPort StringSyntaxUsedintheCLIonpage 41.
Defaults
Bydefault,administrativeegressissettountagged.
Mode
Example
ThisexampleshowshowtoenabletheinsertionoftheRADIUSassignedVLANtoan802.1qtag foralloutboundframesforports10through15onunit/modulenumber3.
D2(rw)->set vlanauthorization egress tagged ge.3.10-15
clear vlanauthorization
Usethiscommandtoreturnport(s)tothedefaultconfigurationofVLANauthorizationdisabled, egressuntagged.
Syntax
clear vlanauthorization [port-string]
Parameters
portstring (Optional)Specifieswhichportsaretoberestoredtodefault configuration.Ifnoportstringisentered,theactionwillbeaglobal setting.Foradetaileddescriptionofpossibleportstringvalues,referto PortStringSyntaxUsedintheCLIonpage 41.
Defaults
Ifnoportstringisentered,allportsawillberesettodefaultconfigurationwithVLAN authorizationdisabledandegressframesuntagged.
15-44
show vlanauthorization
Mode
Example
ThisexampleshowhowtoclearVLANauthorizationforallportsonslots3,4,and5:
D2(rw)->clear vlanauthorization ge.3-5.*
show vlanauthorization
DisplaystheVLANauthenticationstatusandconfigurationinformationforthespecifiedports.
Syntax
show vlanauthorization [port-string]
Parameters
portstring (Optional)DisplaysVLANauthenticationstatusforthespecifiedports.If noportstringisentered,thentheglobalstatusofthesettingisdisplayed. Foradetaileddescriptionofpossibleportstringvalues,refertoPort StringSyntaxUsedintheCLIonpage 41.
Defaults
Ifnoportstringisentered,thestatusforallportswillbedisplayed.
Mode
Example
ThiscommandshowshowtodisplayVLANauthorizationstatusforge.1.1: G3(su)>showvlanauthorizationge.1.1 VlanAuthorization:enabled
port ------ge.1.1 status administrative egress -------- -------------enabled untagged operational egress ----------authenticated vlan id mac address ----------------- -------
Table 1550providesanexplanationofcommandoutput.Fordetailsonenablingandassigning protocolandegressattributes,refertosetvlanauthorizationonpage 1543andset vlanauthorizationegressonpage 1544. Table 15-50

Output Field port status administrative egress operational egress
show vlanauthorization Output Details

What It Displays... Port identification Port status as assigned by set vlanauthorization command Port status as assigned by the set vlanauthorization egress command Port operational status of vlanauthorization egress.
15-45
Configuring MAC Locking
Table 15-50
Output Field
show vlanauthorization Output Details (Continued)

What It Displays... If authentication has succeeded, displays the MAC address assigned for egress. If authentication has succeeded, displays the assigned VLAN id for ingress.
authenticated mac address vlan id
Configuring MAC Locking

ThisfeaturelocksaMACaddresstooneormoreports,preventingconnectionofunauthorized devicesthroughtheport(s).WhensourceMACaddressesarereceivedonspecifiedports,the switchdiscardsallsubsequentframesnotcontainingtheconfiguredsourceaddresses.Theonly framesforwardedonalockedportarethosewiththelockedMACaddress(es)forthatport. TherearetwomethodsoflockingaMACtoaport:firstarrivalandstatic.Thefirstarrivalmethod isdefinedtobelockingthefirstnnumberofMACswhicharriveonaportconfiguredwithMAC lockingenabled.Thevaluenisconfiguredwiththesetmaclockfirstarrivalcommand. ThestaticmethodisdefinedtobestaticallyprovisioningaMACportlockusingthesetmaclock command.ThemaximumnumberofstaticMACaddressesallowedforMAClockingonaport canbeconfiguredwiththesetmaclockstaticcommand. YoucanconfiguretheswitchtoissueaviolationtrapifapacketarriveswithasourceMAC addressdifferentfromanyofthecurrentlylockedMACaddressesforthatport. MACsareunlockedasaresultof: Alinkdownevent WhenMAClockingisdisabledonaport WhenaMACisagedoutoftheforwardingdatabasewhenFirstArrivalagingisenabled
Whenproperlyconfigured,MAClockingisanexcellentsecuritytoolasitpreventsMACspoofing onconfiguredports.AlsoifaMACweretobesecuredbysomethinglikeDragonDynamic IntrusionDetection,MAClockingwouldmakeitmoredifficultforahackertosendpacketsinto thenetworkbecausethehackerwouldhavetochangetheirMACaddressandmovetoanother port.Inthemeantimethesystemadministratorwouldbereceivingamaclocktrapnotification.
Purpose
Toreview,disable,enable,andconfigureMAClocking.
Commands
For information about... show maclock show maclock stations set maclock enable set maclock disable set maclock clear maclock Refer to page... 15-47 15-48 15-49 15-50 15-50 15-51
15-46
show maclock
For information about... set maclock static clear maclock static set maclock firstarrival clear maclock firstarrival set maclock agefirstarrival clear maclock agefirstarrival set maclock move set maclock trap
Refer to page... 15-52 15-52 15-53 15-54 15-54 15-55 15-55 15-56
show maclock
UsethiscommandtodisplaythestatusofMAClockingononeormoreports.
Syntax
show maclock [port-string]
Parameters
portstring (Optional)DisplaysMAClockingstatusforspecifiedport(s).Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
Ifportstringisnotspecified,MAClockingstatuswillbedisplayedforallports.
Mode
Example
ThisexampleshowshowtodisplayMAClockinginformationforge.1.1.
D2(su)->show maclock ge.1.1 MAC locking is globally enabled Port Number ------ge.1.1 Port Trap Status Status ------- -------enabled disabled Aging Status ------enabled Max Static Max FirstArrival Last Violating Allocated Allocated MAC Address ---------- --------------- --------------20 1 00:a0:c9:39:5c:b4

Output Field Port Number
show maclock Output Details

What It Displays... Port designation. For a detailed description of possible port-string values, refer to Port String Syntax Used in the CLI on page 4-1.
15-47
show maclock stations
Table 15-51
Output Field Port Status
show maclock Output Details (Continued)

What It Displays... Whether MAC locking is enabled or disabled on the port. MAC locking is globally disabled by default. For details on enabling MAC locking on the switch and on one or more ports, refer to set maclock enable on page 15-49 and set maclock on page 15-50. Whether MAC lock trap messaging is enabled or disabled on the port. For details on setting this status, refer to set maclock trap on page 15-56. Whether aging of FirstArrival MAC addresses is enabled or disabled on the port. Refer to set maclock agefirstarrival on page 15-54. The maximum static MAC addresses allowed locked to the port. For details on setting this value, refer to set maclock static on page 15-52. The maximum end station MAC addresses allowed locked to the port. For details on setting this value, refer to set maclock firstarrival on page 15-53. Most recent MAC address(es) violating the maximum static and first arrival value(s) set for the port.
Trap Status Aging Status Max Static Allocated Max FirstArrival Allocated Last Violating MAC Address
show maclock stations

UsethiscommandtodisplayMAClockinginformationaboutendstationsconnectedtothe switch.
Syntax
show maclock stations [firstarrival | static] [port-string]
Parameters
firstarrival static portstring (Optional)DisplaysMAClockinginformationaboutendstationsfirst connectedtoMAClockedports. (Optional)DisplaysMAClockinginformationaboutstatic(management defined)endstationsconnectedtoMAClockedports. (Optional)Displaysendstationinformationforspecifiedport(s).Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
Ifnoparametersarespecified,MAClockinginformationwillbedisplayedforallendstations.
Mode
15-48
set maclock enable
Example
ThisexampleshowshowtodisplayMAClockinginformationfortheendstationsconnectedtoall GigabitEthernetportsinunit/module2:
D2(su)->show maclock stations ge.2.* Port Number MAC Address Status ------------ -----------------------------ge.2.1 00:a0:c9:39:5c:b4 active ge.2.7 00:a0:c9:39:1f:11 active State -------------first arrival static Aging ----true false

Output Field Port Number MAC address Status State Aging
show maclock stations Output Details

What It Displays... Port designation. For a detailed description of possible port-string values, refer to Port String Syntax Used in the CLI on page 4-1. MAC address of the end station(s) locked to the port. Whether the end stations are active or inactive. Whether the end station locked to the port is a first arrival or static connection. When true, FirstArrival MACs that have aged out of the forwarding database will be removed for the associated port lock.
set maclock enable

UsethiscommandtoenableMAClockinggloballyorononeormoreports.
Note: MAC locking needs to be enabled globally and on appropriate ports for it to function.
Syntax
setmaclockenable[portstring]
Parameters
portstring (Optional)EnablesMAClockingonspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
Ifportstringisnotspecified,MAClockingwillbeenabledglobally.
Mode
15-49
set maclock disable
Usage
Whenenabledandconfigured,MAClockingdefineswhichMACaddresses,aswellashowmany MACaddressesarepermittedtousespecificport(s). MAClockingisdisabledbydefaultatdevicestartup.ConfiguringoneormoreportsforMAC lockingrequiresgloballyenablingitonthedeviceandthenenablingitonthedesiredports.
Example
ThisexampleshowshowtoenableMAClockingonge.2.3:
D2(su)->set maclock enable ge.2.3
set maclock disable

UsethiscommandtodisableMAClockinggloballyorononeormoreports.
Syntax
set maclock disable [port-string]
Parameters
portstring (Optional)DisablesMAClockingonspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
Ifportstringisnotspecified,MAClockingwillbedisabledgloballyonthestackorstandalone device.
Mode
Example
ThisexampleshowshowtodisableMAClockingonge.2.3:
D2(su)->set maclock disable ge.2.3
set maclock
UsethiscommandtocreateastaticMACaddresstoportlocking,andtoenableordisableMAC lockingforthespecifiedMACaddressandport.
Syntax
set maclock mac-address port-string {create | enable | disable}
Parameters
macaddress SpecifiestheMACaddressforwhichMAClockingwillbecreated, enabledordisabled.
15-50
clear maclock
portstring
Specifiestheportonwhichtocreate,enableordisableMAClockingfor thespecifiedMAC.Foradetaileddescriptionofpossibleportstring values,refertoPortStringSyntaxUsedintheCLIonpage 41. EstablishesaMAClockingassociationbetweenthespecifiedMAC addressandport.CreateautomaticallyenablesMAClockingbetweenthe specifiedMACaddressandport. EnablesordisablesMAClockingbetweenthespecifiedMACaddressand port.
create
enable|disable
Defaults
None.
Mode
Usage
ConfiguringaportforMAClockingrequiresgloballyenablingitontheswitchfirstusingtheset maclockenablecommandasdescribedinsetmaclockenableonpage 1549. StaticMAClockingauseronmultipleportsisnotsupported. StaticallyMAClockedaddresseswilldisplayintheshowmacoutput(asdescribedonpage1218) asaddresstypeotherandwillnotremovethemonlinkdown.
Example
ThisexampleshowshowtocreateaMAClockingassociationbetweenMACaddress0e03efd8 4455andportge.3.2:
D2(rw)->set maclock 0e-03-ef-d8-44-55 ge.3.2 create
clear maclock
UsethiscommandtoremoveastaticMACaddresstoportlockingentry.
Syntax
clear maclock mac-address port-string
Parameters
macaddress portstring SpecifiestheMACaddressthatwillberemovedfromthelistofstatic MACsallowedtocommunicateontheport. SpecifiestheportonwhichtocleartheMACaddress.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
None.
Mode
set maclock static
Usage
TheMACaddressthatisclearedwillnolongerbeabletocommunicateontheportunlessthefirst arrivallimithasbeensettoavaluegreaterthan0andthislimithasnotyetbeenmet. Forexample,ifuserBsMACisremovedfromthestaticMACaddresslistandthefirstarrival limithasbeensetto0,thenuserBwillnotbeabletocommunicateontheport.IfuserAsMACis removedfromthestaticMACaddresslistandthefirstarrivallimithasbeensetto10,butonlyhas 7entries,userAwillbecomethe8thentryandallowedtocommunicateontheport.
Example
ThisexampleshowshowtoremoveaMACfromthelistofstaticMACsallowedtocommunicate onportge.3.2:
D2(rw)->clear maclock 0e-03-ef-d8-44-55 ge.3.2
set maclock static

UsethiscommandtosetthemaximumnumberofstaticMACaddressesallowedperport.Static MACsareadministrativelydefined.
Syntax
set maclock static port-string value
Parameters
portstring SpecifiestheportonwhichtosetthemaximumnumberofstaticMACs allowed.Foradetaileddescriptionofpossibleportstringvalues,referto PortStringSyntaxUsedintheCLIonpage 41. SpecifiesthemaximumnumberofstaticMACaddressesallowedper port.Validvaluesare0to20.
value
Defaults
None.
Mode
Example
ThisexampleshowshowtosetthemaximumnumberofallowablestaticMACsto2onge.3.1:
D2(rw)->set maclock static ge.3.1 2
clear maclock static

UsethiscommandtoresetthenumberofstaticMACaddressesallowedperporttothedefault valueof20.
Syntax
clear maclock static port-string
15-52
set maclock firstarrival
Parameters
portstring SpecifiestheportonwhichtoresetnumberofstaticMACaddresses allowed.Foradetaileddescriptionofpossibleportstringvalues,referto PortStringSyntaxUsedintheCLIonpage 41.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresetthenumberofallowablestaticMACsonge.2.3:
D2(rw)->clear maclock static ge.2.3
set maclock firstarrival

UsethiscommandtorestrictMAClockingonaporttoamaximumnumberofendstation addressesfirstconnectedtothatport.
Syntax
set maclock firstarrival port-string value
Parameters
portstring SpecifiestheportonwhichtolimitMAClocking.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41. SpecifiesthenumberoffirstarrivalendstationMACaddressestobe allowedconnectionstotheport.Validvaluesare0to600.
value
Defaults
None.
Mode
Usage
Themaclockfirstarrivalcountresetswhenthelinkgoesdown.Thisfeatureisbeneficialifyou haveroamingusersthefirstarrivalcountwillbereseteverytimeausermovestoanotherport, butwillstillprotectagainstconnectingmultipledevicesonasingleportandwillprotectagainst MACaddressspoofing.
Note: Setting a ports first arrival limit to 0 does not deny the first MAC address learned on the port from passing traffic.
15-53
clear maclock firstarrival
Example
ThisexampleshowshowtorestrictMAClockingto6MACaddressesonge.2.3:
D2(su)->set maclock firstarrival ge.2.3 6
clear maclock firstarrival

UsethiscommandtoresetthenumberoffirstarrivalMACaddressesallowedperporttothe defaultvalueof600.
Syntax
clear maclock firstarrival port-string
Parameters
portstring Specifiestheportonwhichtoresetthefirstarrivalvalue.Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresetMACfirstarrivalsonge.2.3:
D2(su)->clear maclock firstarrival ge.2.3
set maclock agefirstarrival

UsethiscommandtoenableordisabletheagingoffirstarrivalMACaddresses.Whenenabled, firstarrivalMACaddressesthatareagedoutoftheforwardingdatabasewillberemovedfrom theassociatedportMAClock.
Syntax
set maclock agefirstarrival port-string {enable | disable}
Parameters
portstring Specifiestheport(s)onwhichtoenableordisablefirstarrivalaging.For adetaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41. Enableordisablefirstarrivalaging.Bydefault,firstarrivalagingis disabled.
enable|disable
Defaults
None.
15-54
clear maclock agefirstarrival
Mode
Example
Thisexampleenablesfirstarrivalagingonportge.1.1.
D2(su)-> set maclock agefirstarrival ge.1.1 enable
clear maclock agefirstarrival

Usethiscommandtoresetfirstarrivalagingononeormoreportstoitsdefaultstateofdisabled.
Syntax
clear maclock agefirstarrival port-string
Parameters
portstring Specifiestheport(s)onwhichtodisablefirstarrivalaging.Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
None.
Mode
Example
Thisexampledisablesfirstarrivalagingonportge.1.1.
D2(su)-> clear maclock agefirstarrival ge.1.1 enable
set maclock move

UsethiscommandtomoveallcurrentfirstarrivalMACstostaticentries.
Syntax
set maclock move port-string
Parameters
portstring SpecifiestheportonwhichMACwillbemovedfromfirstarrivalMACs tostaticentries.Foradetaileddescriptionofpossibleportstringvalues, refertoPortStringSyntaxUsedintheCLIonpage 41.
Defaults
None.
15-55
set maclock trap
Mode
Usage
IftherearemorefirstarrivalMACsthantheallowedmaximumstaticMACs,thenonlythelatest firstarrivalMACswillbemovedtostaticentries.Forexample,ifyousetthemaximumnumberof staticMACsto2withthesetmaclockstaticcommand,andthenexecutedthesetmaclockmove command,eventhoughtherewerefiveMACsinthefirstarrivaltable,onlythetwomostrecent MACentrieswouldbemovedtostaticentries.
Example
ThisexampleshowshowtomoveallcurrentfirstarrivalMACstostaticentriesonportsge.3.140:
D2(rw)->set maclock move ge.3.1-40
set maclock trap

UsethiscommandtoenableordisableMAClocktrapmessaging.
Syntax
set maclock trap port-string {enable | disable}
Parameters
portstring SpecifiestheportonwhichMAClocktrapmessagingwillbeenabledor disabled.Foradetaileddescriptionofpossibleportstringvalues,referto PortStringSyntaxUsedintheCLIonpage 41. EnablesordisablesMAClocktrapmessaging.
enable|disable
Defaults
None.
Mode
Usage
Whenenabled,thisfeatureauthorizestheswitchtosendanSNMPtrapmessageifanendstation isconnectedthatexceedsthemaximumvaluesconfiguredusingthesetmaclockfirstarrivaland setmaclockstaticcommands.ViolatingMACaddressesaredroppedfromthedevicesfiltering database.
Example
ThisexampleshowshowtoenableMAClocktrapmessagingonge.2.3:
D2(su)->set maclock trap ge.2.3 enable
15-56
Configuring Port Web Authentication (PWA)
Configuring Port Web Authentication (PWA)

About PWA
PWAprovidesawayofauthenticatingusersbeforeallowinggeneralaccesstothenetwork TologonusingPWA,theusermakesarequestthroughawebbrowserforthePWAwebpageor isautomaticallyredirectedtothisloginpageafterrequestingaURLinabrowser. Dependingupontheauthenticatedstateoftheuser,aloginpageoralogoutpagewilldisplay. Whenausersubmitsusernameandpassword,theswitchthenauthenticatestheuserviaa preconfiguredRADIUSserver.Iftheloginissuccessful,thentheuserwillbegrantedfullnetwork accessaccordingtotheuserspolicyconfigurationontheswitch.
PWA PWA
Note: One user per PWA-configured port can be authenticated on D-Series devices. PWA authentication does not support RFC-3580 VLAN authorization.
Purpose
Toreview,enable,disable,andconfigurePortWebAuthentication(PWA).
Commands
For information about... show pwa set pwa show pwa banner set pwa banner clear pwa banner set pwa displaylogo set pwa ipaddress set pwa protocol set pwa guestname clear pwa guestname set pwa guestpassword set pwa gueststatus set pwa initialize set pwa quietperiod set pwa maxrequest set pwa portcontrol show pwa session set pwa enhancedmode Refer to page... 15-58 15-58 15-60 15-60 15-61 15-61 15-62 15-62 15-63 15-63 15-64 15-64 15-65 15-65 15-66 15-66 15-67 15-68
15-57
show pwa
show pwa
Usethiscommandtodisplayportwebauthenticationinformationforoneormoreports.
Syntax
show pwa [port-string]
Parameters
portstring (Optional)DisplaysPWAinformationforspecificport(s).
Defaults
Ifportstringisnotspecified,PWAinformationwillbedisplayedforallports.
Mode
Example
ThisexampleshowshowtodisplayPWAinformationforge.2.1:
D2(su)->show pwa ge.2.1 PWA Status PWA IP Address PWA Protocol PWA Enhanced Mode PWA Logo PWA Guest Networking Status PWA Guest Name PWA Redirect Time Port Mode -------- ---------------ge.2.1 disabled enabled 192.168.62.99 PAP N/A enabled disabled guest N/A QuietPeriod ----------60 MaxReq --------16
AuthStatus -------------disconnected

Output Field PWA Status
show pwa Output Details

What It Displays... Whether or not port web authentication is enabled or disabled. Default state of disabled can be changed using the set pwa command as described in set pwa on page 15-59. IP address of the end station from which PWA will prevent network access until the user is authenticated. Set using the set pwa ipaddress command as described in set pwa ipaddress on page 15-62. Whether PWA protocol is CHAP or PAP. Default setting of PAP can be changed using the set pwa protocol command as described in set pwa protocol on page 15-62. Whether PWA enhanced mode is enabled or disabled. Default state of disabled can be changed using the set pwa enhancedmode command as described in set pwa enhancedmode on page 15-68.
PWA IP Address
PWA Protocol
PWA Enhanced Mode
15-58
set pwa
Table 15-53
Output Field PWA Logo
show pwa Output Details (Continued)

What It Displays... Whether the Enterasys Networks logo will be displayed or hidden at user login. Default state of enabled (displayed) can be changed using the set pwa displaylogo command as described in set pwa displaylogo on page 15-61. Whether PWA guest user status is disabled or enabled with RADIUS or no authentication. Default state of disabled can be changed using the set pwa gueststatus command as described in set pwa gueststatus on page 15-64. Guest user name for PWA enhanced mode networking. Default value of guest can be changed using the set pwa guestname command as described in set pwa guestname on page 15-63. Guest users password. Default value of an empty string can be changed using the set pwa guestpassword command as described in set pwa guestpassword on page 15-64. Time in seconds after login success before the user is redirected to the PWA home page. PWA port designation. Whether PWA is enabled or disabled on his port. Whether or not the port state is disconnected, authenticating, authenticated, or held (authentication has failed). Amount of time a port will be in the held state after a user unsuccessfully attempts to log on to the network. Default value of 60 can be changed using the set pwa quietperiod command as described in set pwa quietperiod on page 15-65. Maximum number of log on attempts allowed before transitioning the port to a held state. Default value of 2 can be changed using the set pwa maxrequests command as described in set pwa maxrequest on page 15-66.
PWA Guest Networking Status PWA Guest Name
PWA Guest Password PWA Redirect Time Port Mode Auth Status Quiet Period
MaxReq
set pwa
Usethiscommandtoenableordisableportwebauthentication.
Syntax
set pwa {enable | disable}
Parameters
enable|disable Enablesordisablesportwebauthentication.
Defaults
None.
Mode
15-59
show pwa banner
Example
Thisexampleshowshowtoenableportwebauthentication:
D2(su)->set pwa enable
show pwa banner

Usethiscommandtodisplaytheportwebauthenticationloginbannerstring.
Syntax
show pwa banner
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaythePWAloginbanner:
D2(su)->show pwa banner Welcome to Enterasys Networks
set pwa banner

UsethiscommandtoconfigureastringtobedisplayedasthePWAloginbanner.
Syntax
set pwa banner string
Parameters
string SpecifiesthePWAloginbanner.
Defaults
None.
Mode
Example
ThisexampleshowshowtosetthePWAloginbannertoWelcometoEnterasysNetworks:
D2(su)->set pwa banner Welcome to Enterasys Networks
15-60
clear pwa banner
clear pwa banner

UsethiscommandtoresetthePWAloginbannertoablankstring.
Syntax
clear pwa banner
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoresetthePWAloginbannertoablankstring
D2(su)->clear pwa banner
set pwa displaylogo

UsethiscommandtosetthedisplayoptionsfortheEnterasysNetworkslogo.
Syntax
set pwa displaylogo {display | hide}
Parameters
display|hide DisplaysorhidestheEnterasysNetworkslogowhenthePWAwebsite displays.
Defaults
None.
Mode
Example
ThisexampleshowshowtohidetheEnterasysNetworkslogo:
D2(su)->set pwa displaylogo hide
15-61
set pwa ipaddress
set pwa ipaddress

UsethiscommandtosetthePWAIPaddress.ThisistheIPaddressoftheendstationfromwhich PWAwillpreventnetworkaccessuntiltheuserisauthenticated.
Syntax
set pwa ipaddress ip-address
Parameters
ipaddress SpecifiesagloballyuniqueIPaddress.Thissamevaluemustbe configuredintoeveryauthenticatingswitchinthedomain.
Defaults
None.
Mode
Example
ThisexampleshowshowtosetaPWAIPaddressof1.2.3.4:
D2(su)->set pwa ipaddress 1.2.3.4
set pwa protocol

Usethiscommandtosettheportwebauthenticationprotocol.
Syntax
set pwa protocol {chap | pap}
Parameters
chap|pap SetsthePWAprotocolto: CHAP(PPPChallengeHandshakeProtocol)encryptstheusername andpasswordbetweentheendstationandtheswitchport. PAP(PasswordAuthenticationProtocoldoesnotprovideany encryptionbetweentheendstationtheswitchport.
Defaults
None.
Mode
Example
ThisexampleshowshowtosetathePWAprotocoltoCHAP:
D2(su)->set pwa protocol chap
15-62
set pwa guestname
set pwa guestname

UsethiscommandtosetaguestusernameforPWAnetworking.PWAwillusethisnametogrant networkaccesstoguestswithoutestablishedloginnamesandpasswords.
Syntax
set pwa guestname name
Parameters
name Specifiesaguestusername.
Defaults
None.
Mode
Example
ThisexampleshowshowtosetthePWAguestusernametoguestuser:
D2(su)->set pwa guestname guestuser
clear pwa guestname

UsethiscommandtoclearthePWAguestusername.
Syntax
clear pwa guestname
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtoclearthePWAguestusername
D2(su)->clear pwa guestname
15-63
set pwa guestpassword

UsethiscommandtosettheguestuserpasswordforPWAnetworking.
Syntax
Parameters
None.
Defaults
None.
Mode
Usage
PWAwillusethispasswordandtheguestusernametograntnetworkaccesstoguestswithout establishedloginnamesandpasswords.
Example
ThisexampleshowshowtosetthePWAguestuserpasswordname:
D2(su)->set pwa guestpassword Guest Password: ********* Retype Guest Password: *********
set pwa gueststatus

Usethiscommandtoenableordisableguestnetworkingforportwebauthentication.
Syntax
set pwa gueststatus {authnone | authradius | disable}
Parameters
authnone authradius Enablesguestnetworkingwithnoauthenticationmethod. EnablesguestnetworkingwithRADIUSauthentication.Uponsuccessful authenticationfromRADIUS,PWAwillapplythepolicyreturnedfrom RADIUStothePWAport. Disablesguestnetworking.
disable
Defaults
None.
Mode
15-64
set pwa initialize
Usage
PWAwilluseaguestpasswordandguestusernametograntnetworkaccesswithdefaultpolicy privilegestouserswithoutestablishedloginnamesandpasswords.
Example
ThisexampleshowshowtoenablePWAguestnetworkingwithRADIUSauthentication:
D2(su)->set pwa guestnetworking authradius
set pwa initialize

UsethiscommandtoinitializeaPWAporttoitsdefaultunauthenticatedstate.
Syntax
set pwa initialize [port-string]
Parameters
portstring (Optional)Initializesspecificport(s).Foradetaileddescriptionofpossible portstringvalues,refertoPortStringSyntaxUsedintheCLIon page 41.
Defaults
Ifportstringisnotspecified,allportswillbeinitialized.
Mode
Example
Thisexampleshowshowtoinitializeportsge.1.57:
D2(su)->set pwa initialize ge.1.5-7
set pwa quietperiod

Usethiscommandtosettheamountoftimeaportwillremainintheheldstateafterauser unsuccessfullyattemptstologontothenetwork.
Syntax
set pwa quietperiod time [port-string]
Parameters
time portstring Specifiesquiettimeinseconds. (Optional)Setsthequietperiodforspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
15-65
set pwa maxrequest
Defaults
Ifportstringisnotspecified,quietperiodwillbesetforallports.
Mode
Example
ThisexampleshowshowtosetthePWAquietperiodto30secondsforportsge.1.57:
D2(su)->set pwa quietperiod 30 ge.1.5-7
set pwa maxrequest

Usethiscommandtosetthemaximumnumberoflogonattemptsallowedbeforetransitioning thePWAporttoaheldstate.
Syntax
set pwa maxrequests requests [port-string]
Parameters
maxrequests portstring Specifiesthemaximumnumberoflogonattempts. (Optional)Setsthemaximumrequestsforspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
Ifportstringisnotspecified,maximumrequestswillbesetforallports.
Mode
Example
ThisexampleshowshowtosetthePWAmaximumrequeststo3forallports:
D2(su)->set pwa maxrequests 3
set pwa portcontrol

ThiscommandenablesordisablesPWAauthenticationonselectports.
Syntax
set pwa portcontrol {enable | disable} [port-string]
Parameters
enable|disable EnablesordisablesPWAonspecifiedports.
15-66
show pwa session
portstring
(Optional)Setsthecontrolmodeonspecificport(s).Foradetailed descriptionofpossibleportstringvalues,refertoPortStringSyntaxUsed intheCLIonpage 41.
Defaults
Ifportstringisnotspecified,PWAwillenabledonallports.
Mode
Example
ThisexampleshowshowtoenablePWAonports122:
D2(su)->set pwa portcontrol enable ge.1.1-22
show pwa session

UsethiscommandtodisplayinformationaboutcurrentPWAsessions.
Syntax
show pwa session [port-string]
Parameters
portstring (Optional)DisplaysPWAsessioninformationforspecificport(s).Fora detaileddescriptionofpossibleportstringvalues,refertoPortString SyntaxUsedintheCLIonpage 41.
Defaults
Ifportstringisnotspecified,sessioninformationforallportswillbedisplayed.
Mode
Example
ThisexampleshowshowtodisplayPWAsessioninformation:
D2(su)->show pwa session Port MAC -------- ----------------ge.2.19 00-c0-4f-20-05-4b ge.2.19 00-c0-4f-24-51-70 ge.2.19 00-00-f8-78-9c-a7 IP --------------172.50.15.121 172.50.15.120 172.50.15.61 User ------------pwachap10 pwachap1 pwachap11 Duration -----------0,14:46:55 0,15:43:30 0,14:47:58 Status --------active active active
15-67
set pwa enhancedmode
set pwa enhancedmode

ThiscommandenablesPWAURLredirection.TheswitchinterceptsallHTTPpacketsonport80 fromtheenduser,andsendstheenduserarefreshpagedestinedforthePWAIPAddress configured.
Syntax
set pwa enhancedmode {enable | disable}
Parameters
enable|disable EnablesordisablesPWAenhancedmode.
Defaults
None.
Mode
Example
ThisexampleshowshowtoenablePWAenhancedmode:
D2(su)->set pwa enhancedmode enable
Configuring Secure Shell (SSH)

Purpose
Toreview,enable,disable,andconfiguretheSecureShell(SSH)protocol,whichprovidessecure Telnet.
Commands
For information about... show ssh status set ssh set ssh hostkey Refer to page... 15-68 15-69 15-69
show ssh status

UsethiscommandtodisplaythecurrentstatusofSSHontheswitch.
Syntax
show ssh status
15-68
set ssh
Parameters
None.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisplaySSHstatusontheswitch:
D2(su)->show ssh status SSH Server status: Disabled
set ssh
Usethiscommandtoenable,disableorreinitializeSSHserverontheswitch.Bydefault,theSSH serverisdisabled.
Syntax
set ssh {enable | disable | reinitialize}
Parameters
enable|disable reinitialize EnablesordisablesSSH,orreinitializestheSSHserver. ReinitializestheSSHserver.
Defaults
None.
Mode
Example
ThisexampleshowshowtodisableSSH:
D2(su)->set ssh disable
set ssh hostkey

UsethiscommandtosetorreinitializenewSSHauthenticationkeys.
Syntax
set ssh hostkey [reinitialize]
Parameters
reinitialize (Optional)Reinitializestheserverhostauthenticationkeys.
15-69
set ssh hostkey
Defaults
Ifreinitializeisnotspecified,theusermustsupplySSHauthenticationkeyvalues.
Mode
Example
ThisexampleshowshowtoregenerateSSHkeys:
D2(su)->set ssh hostkey reinitialize
15-70
Index
Numerics
802.1D 6-1 802.1p 9-15, 10-1 802.1Q 7-1 802.1s 6-1 802.1w 6-1 802.1x 15-5, 15-17 DHCP server, configuring 14-1 Differentiated Services adding classes to policies 8-11 assigning policies to service ports 8-14 configuring policies 8-9 creating classes and matching conditions 8-3 deleting classes 8-5 deleting policies 8-10 displaying class information 8-4 displaying status information 8-3 globally enabling or disabling 8-2 marking packets 8-11 matching classes to conditions 8-5 setting policing styles for policies 8-12 Diffserv, see Differentiated Services Dynamic policy profile assignment 15-2
K
Keyword Lookups 1-7
L
licenses activating 2-27 license key field descriptions 2-28 Line Editing Commands 1-9 Lockout set system 2-7 Logging 12-1 Login administratively configured 1-6 default 1-6 setting accounts 2-2 via Telnet 1-5
A
Advertised Ability 4-14 Alias node 12-31 Authentication EAPOL 15-17 MAC 15-19 Port web 15-57 RADIUS server 15-5, 15-8 SSH 15-69 Auto-negotiation 4-14
M
MAC Addresses displaying 12-18 MAC Authentication 15-19 MAC Locking 15-46 maximum static entries 15-52 static 15-52 Management VLAN 7-1 motd 2-21 Multicast Filtering 11-1 Multiple Spanning Tree Protocol (MSTP) 6-1
B
banner motd 2-21 Baud Rate 2-27 Broadcast suppression, enabling on ports 4-28
E
EAP pass-through 15-2, 15-13 EAPOL 15-17
C
CDP Discovery Protocol 3-1 Cisco Discovery Protocol 3-6 Class of Service 9-6, 9-11, 9-15 to 9-21, 10-1 Classification Policies 9-1 Clearing NVRAM 2-51 CLI closing 2-49 scrolling screens 1-8 starting 1-5 Command History Buffer 12-11, 12-12 Command Line Interface. See also CLI Configuration clearing switch parameters 2-51 Configuration Files copying 2-45 deleting 2-46 displaying 2-44 executing 2-45 show running config 2-46 Contexts (SNMP) 5-3 Copying Configuration or Image Files 2-45 Cost Spanning Tree port 6-37
F
Flow Control 4-18 Forbidden VLAN port 7-13
G
Getting Help xxiii GVRP enabling and disabling 7-22 purpose of 7-19 timer 7-23
N
Name setting for a VLAN 7-5 setting for the system 2-23 Network Management addresses and routes 12-15 monitoring switch events and status 12-11 Node Alias 12-31 NVRAM clearing 2-51
H
Hardware show system 2-13, 2-22 Help keyword lookups 1-7 Host VLAN 7-17
I
ICMP 12-13 IGMP 11-1 enabling and disabling 11-2 Image File copying 2-45 downloading 2-33 Ingress Filtering 7-6, 7-10 IP routes, managing in switch mode 12-15
P
Password aging 2-6 history 2-6, 2-7 set new 2-5 setting the login 2-5 Ping 12-13 Policy Management assigning ports 9-14 classifying to a VLAN or Class of Service 9-6, 9-11 dynamic assignment of profiles 15-2 profiles 9-1, 9-15 Port Mirroring 4-31 Port Priority
D
Defaults CLI behavior, described 1-6 factory installed 1-2
J
Jumbo Frame Support 4-12
configuring 10-2 Port String syntax used in the CLI 4-1 Port Trunking 4-33 Port web authentication configuring 15-57 Port(s) alias 4-9 assignment scheme 4-1 auto-negotiation and advertised ability 4-14 broadcast suppression 4-28 counters, reviewing statistics 4-5 duplex mode, setting 4-9 flow control 4-18 link flap about 4-19 configuration defaults 4-22 configuring 4-21 link traps, configuring 4-19 MAC lock 15-49 priority, configuring 10-2 speed, setting 4-9 status, reviewing 4-3 Power over Ethernet (PoE), configuring 2-30 Priority to Transmit Queue Mapping 10-4 Prompt set 2-20 PWA 15-57
security models and levels 5-2 statistics 5-3 target addresses 5-25 target parameters 5-22 trap configuration example 5-37 users, groups and communities 5-7 SNTP 12-25 Spanning Tree 6-1 backup root 6-21 bridge parameters 6-3 features 6-2 port parameters 6-31 Rapid Spanning Tree Protocol (RSTP) 6-1 SSL WebView 2-53 Syslog 12-1 System Information displaying basic 2-12 setting basic 2-8
WebView SSL 2-53
T
Technical Support xxiii Telnet disconnecting 12-14 enabling in switch mode 2-38 Terminal Settings 2-24 TFTP downloading firmware upgrades via 2-33 Timeout CLI, system 2-26 RADIUS 15-5 Trap SNMP configuration example 5-37 Tunnel Attributes RFC 3580 RADIUS attributes 15-41
R
RADIUS 15-3 realm 15-5 RADIUS Filter-ID 15-2 attribute formats 15-2 RADIUS server 15-5, 15-8 Rapid Spanning Tree Protocol (RSTP) 6-1 Related Manuals xxii Reset 2-50 RFC 3580 15-41
U
User Accounts default 1-6 setting 2-2
V
Version Information 2-22 VLANs assigning ingress filtering 7-10 assigning port VLAN IDs 7-6 authentication 15-41, 15-45 classifying to 9-6, 9-11 creating static 7-4 dynamic egress 7-16 egress lists 7-12, 15-44 enabling GVRP 7-19 forbidden ports 7-13 host, setting 7-17 ingress filtering 7-6 naming 7-5 RADIUS 15-41 secure management, creating 7-1
S
Scrolling Screens 1-8 Secure Shell (SSH) 15-68 enabling 15-69 regenerating new keys 15-69 Security methods, overview of 15-1 Serial Port downloading upgrades via 2-33 show system utilization cpu 2-13 SNMP access rights 5-15 accessing in router mode 5-3 enabling on the switch 5-17 MIB views 5-19 notification parameters 5-28 notify filters 5-28
W
WebView 1-2, 2-51

Enterasys d2 d2g12412p

Hochgeladen von

Dokumentinformationen

Originalbeschreibung:

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

Enterasys d2 d2g12412p

Hochgeladen von

Copyright:

Verfügbare Formate

Enterasys D-Series

Downloaded from www.Manualslib.com manuals search engine

Downloaded from www.Manualslib.com manuals search engine

Information in this guide refers to D-Series firmware version 1.0.xx

Downloaded from www.Manualslib.com manuals search engine

ENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENT

Downloaded from www.Manualslib.com manuals search engine

Downloaded from www.Manualslib.com manuals search engine

Downloaded from www.Manualslib.com manuals search engine

Chapter 2: Basic Configuration

Downloaded from www.Manualslib.com manuals search engine

Downloaded from www.Manualslib.com manuals search engine

Chapter 3: Discovery Protocol Configuration

Chapter 4: Port Configuration

Downloaded from www.Manualslib.com manuals search engine

Downloaded from www.Manualslib.com manuals search engine

Chapter 5: SNMP Configuration

Downloaded from www.Manualslib.com manuals search engine

Chapter 6: Spanning Tree Configuration

Downloaded from www.Manualslib.com manuals search engine

Downloaded from www.Manualslib.com manuals search engine

Chapter 7: 802.1Q VLAN Configuration

Downloaded from www.Manualslib.com manuals search engine

Chapter 8: Differentiated Services Configuration

Downloaded from www.Manualslib.com manuals search engine

Chapter 9: Policy Classification Configuration

Chapter 10: Port Priority and Rate Limiting Configuration

Downloaded from www.Manualslib.com manuals search engine

Chapter 11: IGMP Configuration

Chapter 12: Logging and Network Management

Downloaded from www.Manualslib.com manuals search engine

Chapter 13: RMON Configuration

Downloaded from www.Manualslib.com manuals search engine

Chapter 14: DHCP Server Configuration

Downloaded from www.Manualslib.com manuals search engine

Chapter 15: Security Configuration

Downloaded from www.Manualslib.com manuals search engine

Downloaded from www.Manualslib.com manuals search engine

Downloaded from www.Manualslib.com manuals search engine

Downloaded from www.Manualslib.com manuals search engine

Downloaded from www.Manualslib.com manuals search engine

About This Guide

Using This Guide

Structure of This Guide

D-Series CLI Reference xxi

Downloaded from www.Manualslib.com manuals search engine

Documentslistedabove,canbeobtainedfromtheWorldWideWebinAdobeAcrobatPortable DocumentFormat(PDF)atthefollowingwebsite: http://www.enterasys.com/support/manuals/

xxii About This Guide

Downloaded from www.Manualslib.com manuals search engine

Conventions Used in This Guide

Conventions Used in This Guide

Caution: Contains information essential to avoid damage to the equipment.

D-Series CLI Reference xxiii

Downloaded from www.Manualslib.com manuals search engine

About This Guide

Downloaded from www.Manualslib.com manuals search engine

D-Series CLI Overview

Switch Management Methods

Downloaded from www.Manualslib.com manuals search engine

Factory Default Settings

Factory Default Settings

Default Settings for Basic Switch Operation