Home
Allied Telesis
Switch
AT-9000/12PoE
Allied Telesis AT-9000/12PoE - User Manual
1482 pages
Manual
Specs
Ask a question
Save Page as PDF
To Next Page
To Next Page
Loading...
613-001823 Rev. B
AT-9000 Series
Gigabit Ethernet Switches
A
T
-9000/12P
oE
A
T
-9000/28
A
T
-9000/28P
oE
A
T
-9000/28SP
A
T
-9000/52
Management Software Command Line Interface User’s
Guide
AlliedWare Plus Version 2.1.8.0
2
Table of Contents
Main Page
Default Chapter
5
Table of Contents
5
Document Conventions
38
Where to Find Web-Based Guides
39
Contacting Allied Telesis
40
Section I: Getting Started
41
Chapter 1: Alliedware Plus Command Line Interface
43
Management Sessions
44
Local Management
44
Remote Management
44
Table 1. Remote Software Tool Settings
44
Management Interfaces
47
Local Manager Account
48
Alliedware Plus Command Modes
49
Figure 1: Command Modes
49
Table 2. Alliedware Plus Modes
50
Moving down the Hierarchy
52
ENABLE Command
52
CONFIGURE TERMINAL Command
52
LINE CONSOLE 0 Command
52
Figure 2: ENABLE Command
52
Figure 3: CONFIGURE TERMINAL Command
52
Figure 4: LINE CONSOLE Command
52
LINE VTY Command
53
INTERFACE Command - Dynamic Port Trunk
53
INTERFACE Command - Ports
53
Figure 5: LINE VTY Command
53
Figure 6: INTERFACE TRUNK Command
53
Figure 7: INTERFACE PORT Command - Single Port
53
INTERFACE Command - Static Port Trunk
54
INTERFACE VLAN Command
54
Figure 8: INTERFACE PORT Command - Multiple Ports
54
Figure 9: INTERFACE PORT Command - Moving between Port Interface Modes
54
Figure 10: INTERFACE TRUNK Command
54
Figure 11: INTERFACE VLAN Command
54
VLAN DATABASE Command
55
LOCATION CIVIC-LOCATION Command
55
LOCATION COORD-LOCATION Command
55
Figure 12: VLAN DATABASE Command
55
Figure 13: LLDP LOCATION CIVIC-LOCATION Command
55
Figure 14: LLDP LOCATION COORD-LOCATION Command
55
Moving up the Hierarchy
56
EXIT and QUIT Commands
56
END Command
56
Figure 15: Moving up One Mode with the EXIT and QUIT Command
56
DISABLE Command
57
Figure 16: Returning to the Privileged Exec Mode with the END Command
57
Figure 17: Returning to the User Exec Mode with the DISABLE Command
57
Port Numbers in Commands
58
Figure 18: PORT Parameter in the Command Line Interface
58
Combo Ports 25 to 28
60
Command Format
61
Command Line Interface Features
61
Command Formatting Conventions
61
Command Examples
61
Startup Messages
62
Figure 19: Startup Messages
62
Figure 20: Startup Messages (Continued)
63
Figure 21: Startup Messages (Continued)
64
Chapter 2: Starting a Management Session
65
Starting a Local Management Session
66
Figure 22: Connecting the Management Cable to the Console Port
66
Figure 23: Alliedware Plus Command Line Prompt
67
Starting a Remote Telnet or SSH Management Session
68
VTY Lines
69
What to Configure First
70
Creating a Boot Configuration File
70
Changing the Login Password
71
Assigning a Name to the Switch
71
Figure 24: SHOW BOOT Command
71
Adding a Management IP Address
72
Table 3. Adding a Management Address: Example 1
73
Table 4. Adding a Management IP Address: Example 2
73
Saving Your Changes
74
Ending a Management Session
75
Chapter 3: Basic Command Line Management
77
Clearing the Screen
78
Displaying the On-Line Help
79
Figure 25: Displaying the Keywords of a Mode
79
Figure 26: Displaying Subsequent Keywords of a Keyword
79
Figure 27: Displaying the Class of a Parameter
80
Saving Your Configuration Changes
81
Ending a Management Session
82
Chapter 4: Basic Command Line Management Commands
83
Table 5. Basic Command Line Commands
83
(Question Mark Key)
85
Clear Screen
87
Configure Terminal
88
Copy Running-Config Startup-Config
89
Disable
90
Enable
92
End
93
Exit
94
Length
95
Logout
97
Quit
98
Write
99
Chapter 5: Temperature and Fan Control Overview
101
Overview
102
Displaying the System Environmental Status
103
Figure 28: SHOW SYSTEM ENVIRONMENT Command
103
Controlling Eco-Mode LED
104
Chapter 6: Temperature and Fan Control Commands
105
Table 6. Temperature and Fan Control Commands
105
Ecofriendly Led
106
No Ecofriendly Led
107
Figure 29: SHOW ECOFRIENDLY Command
108
Show Ecofriendly
108
Figure 30: SHOW SYSTEM ENVIRONMENT Command
109
Show System Environment
109
Table 7. SHOW SYSTEM ENVIRONMENT Command
109
Section II: Basic Operations
111
Chapter 7: Basic Switch Management
113
Adding a Name to the Switch
114
Adding Contact and Location Information
115
Displaying Parameter Settings
116
Manually Setting the Date and Time
117
Pinging Network Devices
118
Resetting the Switch
119
Restoring the Default Settings to the Switch
120
Figure 31: SHOW BOOT Command
120
Setting the Baud Rate of the Console Port
122
Figure 32: SHOW BAUD-RATE Command
122
Configuring the Management Session Timers
124
Setting the Maximum Number of Manager Sessions
126
Configuring the Banners
127
Figure 33: Banner Messages
127
Chapter 8: Basic Switch Management Commands
131
Banner Exec
133
Table 8. Basic Switch Management Commands
134
Banner Login
135
Banner Motd
137
Baud-Rate Set
139
Clock Set
140
Erase Startup-Config
141
Exec-Timeout
142
Help
144
Figure 34: HELP Command
144
Hostname
145
Line Console
146
Line Vty
147
No Hostname
148
Ping
149
PING Ipv6
151
Reboot
152
Reload
153
Service Maxmanager
154
Show Banner Login
155
Figure 35: SHOW BANNER LOGIN Command
155
Show Baud-Rate
156
Figure 36: SHOW BAUD-RATE Command
156
Show Clock
157
Show Running-Config
158
Show Switch
159
Figure 37: SHOW SWITCH Command
159
Table 9. SHOW SWITCH Command
159
Show System
161
Figure 38: SHOW SYSTEM Command
161
Show System Serialnumber
162
Figure 39: SHOW SYSTEM SERIALNUMBER Command
162
Show Users
163
Figure 40: SHOW USERS Command
163
Table 10. SHOW USERS Command
163
Show Version
165
Figure 41: SHOW VERSION Command
165
Snmp-Server Contact
166
Snmp-Server Location
167
System Territory
168
Chapter 9: Port Parameters
171
Adding Descriptions
172
Setting the Speed and Duplex Mode
173
Setting the MDI/MDI-X Wiring Configuration
175
Enabling or Disabling Ports
176
Enabling or Disabling Backpressure
177
Enabling or Disabling Flow Control
178
Figure 42: SHOW FLOWCONTROL INTERFACE Command
179
Resetting Ports
181
Configuring Threshold Limits for Ingress Packets
182
Displaying Threshold Limit Settings on Ports
184
Figure 43: SHOW STORM-CONTROL Command
184
Figure 44: SHOW STORM-CONTROL Command
184
Reinitializing Auto-Negotiation
185
Restoring the Default Settings
186
Displaying Port Settings
187
Displaying Speed and Duplex Settings
187
Displaying Port Status
187
Figure 45: SHOW INTERFACE STATUS Command
187
Displaying Port Configuration
188
Figure 46: SHOW INTERFACE Command
188
Figure 47: SHOW RUNNING-CONFIG INTERFACE Command
188
Displaying or Clearing Port Statistics
189
Displaying SFP Information
190
Chapter 10: Port Parameter Commands
191
Table 11. Port Parameter Commands
191
Backpressure
194
Bplimit
196
Clear Port Counter
197
Description
198
Duplex
200
Egress-Rate-Limit
202
Fctrllimit
203
Flowcontrol
204
Holbplimit
207
Figure 48: Head of Line Blocking
208
No Egress-Rate-Limit
209
No Flowcontrol
210
No Shutdown
211
No Snmp Trap Link-Status
212
No Storm-Control
213
Polarity
214
Purge
216
Renegotiate
217
Reset
218
Figure 49: SHOW FLOWCONTROL INTERFACE Command
219
Show Flowcontrol Interface
219
Table 12. SHOW FLOWCONTROL INTERFACE Command
219
Show Interface
221
Figure 50: SHOW INTERFACE Command
222
Table 13. SHOW INTERFACE Command
222
Figure 51: SHOW INTERFACE BRIEF Command
225
Show Interface Brief
225
Table 14. SHOW INTERFACE BRIEF Command
225
Figure 52: SHOW INTERFACE STATUS Command
227
Show Interface Status
227
Table 15. SHOW INTERFACE STATUS Command
227
Show Platform Table Port Counters
229
Table 16. SHOW PLATFORM TABLE PORT COUNTERS Command
229
Figure 53: SHOW RUNNING-CONFIG INTERFACE Command
232
Show Running-Config Interface
232
Figure 54: SHOW STORM-CONTROL Command
233
Show Storm-Control
233
Table 17. SHOW STORM-CONTROL Command
233
Figure 55: SHOW SYSTEM PLUGGABLE Command
235
Show System Pluggable
235
Figure 56: SHOW SYSTEM PLUGGABLE DETAIL Command
236
Show System Pluggable Detail
236
Shutdown
237
Snmp Trap Link-Status
238
Speed
239
Storm-Control
241
Chapter 11: Power over Ethernet
243
Overview
244
Power Sourcing Equipment (PSE)
244
Powered Device (PD)
244
PD Classes
244
Power Budget
244
Table 18. IEEE Powered Device Classes
244
Port Prioritization
245
Table 19. Poe Port Priorities
245
Enabling and Disabling Poe
246
Adding PD Descriptions to Ports
248
Prioritizing Ports
249
Managing the Maximum Power Limit on Ports
250
Managing Legacy Pds
251
Monitoring Power Consumption
252
Table 20. Receiving Power Consumption Notification
252
Displaying Poe Information
253
Figure 57: SHOW POWER-INLINE Command
253
Table 21. Poe Show Commands
253
Figure 58: SHOW POWER-INLINE INTERFACE Command
254
Figure 59: SHOW POWER-INLINE INTERFACE DETAIL Command
254
Chapter 12: Power over Ethernet Commands
255
Table 22. Power over Ethernet Commands
255
Clear Power-Inline Counters Interface
257
No Power-Inline Allow-Legacy
258
No Power-Inline Description
259
No Power-Inline Enable
260
No Power-Inline Max
261
No Power-Inline Priority
262
No Power-Inline Usage-Threshold
263
No Service Power-Inline
264
No Snmp-Server Enable Trap Power-Inline
265
Power-Inline Allow-Legacy
266
Power-Inline Description
267
Power-Inline Enable
268
Power-Inline Max
269
Power-Inline Priority
270
Power-Inline Usage-Threshold
272
Service Power-Inline
273
Figure 60: SHOW POWER-INLINE Command
274
Show Power-Inline
274
Table 23. SHOW POWER-INLINE Command
275
Figure 61: SHOW POWER-INLINE COUNTERS INTERFACE Command
277
Show Power-Inline Counters Interface
277
Table 24. SHOW POWER-INLINE COUNTERS INTERFACE Command
277
Figure 62: SHOW POWER-INLINE INTERFACE Command
279
Show Power-Inline Interface
279
Figure 63: SHOW POWER-INLINE INTERFACE DETAIL Command
280
Show Power-Inline Interface Detail
280
Table 25. SHOW POWER-INLINE INTERFACE DETAIL Command
280
Snmp-Server Enable Trap Power-Inline
283
Chapter 13: Ipv4 and Ipv6 Management Addresses
285
Overview
286
Table 26. Features Requiring an IP Management Address on the Switch
286
Assigning an Ipv4 Management Address and Default Gateway
289
Adding an Ipv4 Management Address
289
Adding an Ipv4 Default Gateway Address
291
Deleting an Ipv4 Management Address and Default Gateway
292
Displaying an Ipv4 Management Address and Default Gateway
293
Figure 64: SHOW IP ROUTE Command
293
Figure 65: SHOW IP INTERFACE Command
293
Assigning an Ipv6 Management Address and Default Gateway
294
Adding an Ipv6 Management Address
294
Adding an Ipv6 Default Gateway Address
295
Deleting an Ipv6 Management Address and Default Gateway
296
Displaying an Ipv6 Management Address and Default Gateway
297
Figure 66: SHOW IPV6 ROUTE Command
297
Figure 67: SHOW IPV6 INTERFACE Command
297
Chapter 14: Ipv4 and Ipv6 Management Address Commands
299
Table 27. Management IP Address Commands
299
Clear Ipv6 Neighbors
301
Ip Address
302
Ip Address Dhcp
304
Ip Route
306
Ipv6 Address
308
Ipv6 Route
310
No Ip Address
312
No Ip Address Dhcp
313
No Ip Route
314
No Ipv6 Address
315
No Ipv6 Route
316
Figure 68: SHOW IP INTERFACE Command
317
Show Ip Interface
317
Figure 69: SHOW IP ROUTE Command
318
Show Ip Route
318
Table 28. SHOW IP ROUTE Command
318
Figure 70: SHOW IPV6 INTERFACE Command
320
Show Ipv6 Interface
320
Table 29. SHOW IPV6 INTERFACE Command
320
Figure 71: SHOW IPV6 ROUTE Command
321
Show Ipv6 Route
321
Chapter 15: Simple Network Time Protocol (SNTP) Client
323
Overview
324
Activating the SNTP Client and Specifying the IP Address of an NTP or SNTP Server
325
Configuring Daylight Savings Time and UTC Offset
326
Table 30. SNTP Daylight Savings Time and UTC Offset Commands
326
Disabling the SNTP Client
328
Displaying the SNTP Client
329
Figure 72: SHOW NTP ASSOCIATIONS Command
329
Figure 73: SHOW NTP STATUS Command
329
Displaying the Date and Time
330
Chapter 16: SNTP Client Commands
331
Table 31. Simple Network Time Protocol Commands
331
Clock Summer-Time
332
Clock Timezone
333
No Clock Summer-Time
334
No Ntp Peer
335
Ntp Peer
336
Purge Ntp
337
Show Clock
338
Figure 74: SHOW NTP ASSOCIATIONS Command
339
Show Ntp Associations
339
Table 32. SHOW NTP ASSOCIATIONS Command
339
Figure 75: SHOW NTP STATUS Command
341
Show Ntp Status
341
Chapter 17: MAC Address Table
343
Overview
344
Adding Static MAC Addresses
346
Deleting MAC Addresses
348
Setting the Aging Timer
350
Displaying the MAC Address Table
351
Figure 76: SHOW MAC ADDRESS-TABLE Command
351
Chapter 18: MAC Address Table Commands
353
Table 33. MAC Address Table Commands
353
Clear Mac Address-Table
354
Mac Address-Table Ageing-Time
356
Mac Address-Table Static
358
No Mac Address-Table Static
360
Show Mac Address-Table
362
Figure 77: SHOW MAC ADDRESS-TABLE Command
363
Table 34. SHOW MAC ADDRESS-TABLE Command - Unicast Addresses
363
Table 35. SHOW MAC ADDRESS-TABLE Command - Multicast Addresses
364
Chapter 19: Enhanced Stacking
365
Overview
366
Command and Member Switches
366
Common VLAN
366
Guidelines
367
General Steps
367
Configuring the Command Switch
369
Configuring a Member Switch
372
Managing the Member Switches of an Enhanced Stack
374
Figure 78: SHOW ESTACK REMOTELIST Command
374
Changing the Enhanced Stacking Mode
376
Figure 79: SHOW ESTACK Command
376
Uploading Boot Configuration Files from the Command Switch to Member Switches
378
Uploading the Management Software from the Command Switch to Member Switches
385
Disabling Enhanced Stacking
387
Chapter 20: Enhanced Stacking Commands
389
Estack Command-Switch
391
Estack Run
392
Table 36. Enhanced Stacking Commands
392
No Estack Command-Switch
393
No Estack Run
394
Rcommand
395
Reboot Estack Member
396
Show Estack
398
Figure 80: SHOW ESTACK Command
398
Table 37. SHOW ESTACK Command
398
Show Estack Command-Switch
400
Figure 81: SHOW ESTACK COMMAND-SWITCH Command
400
Show Estack Remotelist
401
Figure 82: SHOW ESTACK REMOTELIST Command
401
Upload Config Remotelist
403
Upload Image Remotelist
404
Chapter 21: Port Mirror
407
Overview
408
Creating the Port Mirror or Adding New Source Ports
409
Removing Source Ports or Deleting the Port Mirror
410
Combining the Port Mirror with Access Control Lists
411
Displaying the Port Mirror
413
Figure 83: SHOW MIRROR Command
413
Figure 84: SHOW MIRROR Command and Access Control Lists
413
Chapter 22: Port Mirror Commands
415
Table 38. Port Mirror Commands
415
Mirror
416
Mirror Interface
417
No Mirror Interface
419
Figure 85: SHOW MIRROR Command
420
Show Mirror
420
Table 39. SHOW MIRROR Command
420
Figure 86: SHOW MIRROR Command and Access Control Lists
421
Chapter 23: Internet Group Management Protocol (IGMP) Snooping
423
Overview
424
Understanding Multicast Traffic Settings
425
Enabling the Suppression of Unknown Multicast Traffic
425
Host Node Topology
426
Single-Host Per Port
426
Multiple-Hosts Per Port
426
Enabling IGMP Snooping
427
Configuring the IGMP Snooping Commands
428
Table 40. IGMP Snooping Commands
428
Disabling IGMP Snooping
430
Displaying IGMP Snooping
431
Chapter 24: IGMP Snooping Commands
433
Table 41. Internet Group Management Protocol Snooping Commands
433
Clear Ip Igmp
434
Figure 87: SHOW IP IGMP SNOOPING
435
Ip Igmp Limit
435
Ip Igmp Querier-Timeout
436
Ip Igmp Snooping
437
Ip Igmp Snooping Flood-Unknown-Mcast
438
Ip Igmp Snooping Mrouter
440
Ip Igmp Status
441
No Ip Igmp Snooping
442
No Ip Igmp Snooping Mrouter
443
Figure 88: SHOW IP IGMP SNOOPING Command
444
Show Ip Igmp Snooping
444
Table 42. SHOW IP IGMP SNOOPING Command
445
Chapter 25: Multicast Commands
447
Table 43. Multicast Commands
447
No Switchport Block Egress-Multicast
448
No Switchport Block Ingress-Multicast
449
Switchport Block Egress-Multicast
450
Switchport Block Ingress-Multicast
451
Section III: File System
453
Chapter 26: File System
455
Overview
456
Table 44. File Extensions and File Types
456
Copying Boot Configuration Files
457
Renaming Boot Configuration Files
458
Deleting Boot Configuration Files
459
Displaying the Specifications of the File System
460
Figure 89: SHOW FILE SYSTEMS Command
460
Listing the Files in the File System
461
Chapter 27: File System Commands
463
Copy
464
Delete
465
Delete Force
466
Table 45. File System Commands
466
Dir
467
Move
468
Show File Systems
469
Figure 90: SHOW FILE SYSTEMS Command
469
Table 46. SHOW FILE SYSTEMS Command
469
Chapter 28: Boot Configuration Files
471
Overview
472
Specifying the Active Boot Configuration File
473
Creating a New Boot Configuration File
475
Displaying the Active Boot Configuration File
476
Figure 91: SHOW BOOT Command
476
Chapter 29: Boot Configuration File Commands
477
Boot Config-File
478
Copy Running-Config
480
Table 47. Boot Configuration File Commands
480
Copy Running-Config Startup-Config
481
Erase Startup-Config
482
No Boot Config-File
483
Show Boot
484
Figure 92: SHOW BOOT Command
484
Table 48. SHOW BOOT Command
484
Show Startup-Config
486
Write
487
Chapter 30: File Transfer
489
Overview
490
Uploading or Downloading Files with TFTP
491
Downloading New Management Software with TFTP
491
Downloading Files to the Switch with TFTP
492
Uploading Files from the Switch with TFTP
493
Uploading or Downloading Files with Zmodem
495
Downloading Files to the Switch with Zmodem
495
Uploading Files from the Switch with Zmodem
496
Downloading Files with Enhanced Stacking
498
Figure 93: SHOW ESTACK REMOTELIST
498
Chapter 31: File Transfer Commands
501
Copy Filename Zmodem
502
Copy Flash Tftp
503
Copy Tftp Flash
504
Table 49. File Transfer Commands
504
Copy Zmodem
506
Upload Image Remotelist
507
Section IV: Event Messages
509
Chapter 32: Event Log
511
Overview
512
Displaying the Event Log
513
Figure 94: SHOW LOG Command
513
Clearing the Event Log
514
Chapter 33: Event Log Commands
515
Table 50. Event Log Commands
515
Clear Log Buffered
516
Log Buffered
517
Table 51. Event Message Severity Levels
517
No Log Buffered
519
Figure 95: SHOW LOG Command
521
Show Log
521
Table 52. SHOW LOG Command
521
Table 53. Management Software Modules
522
Figure 96: SHOW LOG CONFIG Command
524
Show Log Config
524
Table 54. SHOW LOG CONFIG Command
524
Show Log Reverse
526
Show Log Tail
527
Chapter 34: Syslog Client
529
Overview
530
Creating Syslog Server Definitions
531
Table 55. Event Message Severity Levels
531
Table 56. Program Abbreviations
531
Deleting Syslog Server Definitions
534
Displaying the Syslog Server Definitions
535
Figure 97: SHOW LOG CONFIG Command with Syslog Server Entries
535
Chapter 35: Syslog Client Commands
537
Table 57. Syslog Client Commands
537
Log Host
538
No Log Host
540
Figure 98 SHOW LOG CONFIG Command with Syslog Server Entries
541
Show Log Config
541
Section V: Port Trunks
543
Chapter 36: Static Port Trunks
545
Overview
546
Load Distribution Methods
546
Figure 99: Static Port Trunk Example
546
Guidelines
548
Creating New Static Port Trunks or Adding Ports to Existing Trunks
550
Specifying the Load Distribution Method
551
Removing Ports from Static Port Trunks or Deleting Trunks
552
Displaying Static Port Trunks
553
Figure 100: SHOW STATIC-CHANNEL-GROUP Command
553
Chapter 37: Static Port Trunk Commands
555
No Static-Channel-Group
556
Port-Channel Load-Balance
557
Table 58. Static Port Trunk Commands
558
Show Static-Channel-Group
559
Figure 101: SHOW STATIC-CHANNEL-GROUP Command
559
Static-Channel-Group
560
Chapter 38: Link Aggregation Control Protocol (LACP)
563
Overview
564
LACP System Priority
564
Base Port
565
Load Distribution Methods
565
Guidelines
565
Creating New Aggregators
567
Setting the Load Distribution Method
568
Adding Ports to Aggregators
569
Removing Ports from Aggregators
570
Deleting Aggregators
571
Displaying Aggregators
572
Figure 102: SHOW ETHERCHANNEL DETAIL
572
Figure 103: SHOW LACP SYS-ID Command
573
Chapter 39: LACP Commands
575
Table 59. LACP Port Trunk Commands
575
Channel-Group
576
Lacp System-Priority
578
No Channel-Group
579
Port-Channel Load-Balance
580
Figure 104: SHOW ETHERCHANNEL Command
582
Show Etherchannel
582
Figure 105: SHOW ETHERCHANNEL DETAIL Command
583
Show Etherchannel Detail
583
Figure 106: SHOW ETHERCHANNEL SUMMARY Command
585
Show Etherchannel Summary
585
Figure 107: SHOW LACP SYS-ID Command
586
Show Lacp Sys-ID
586
Figure 108: SHOW PORT ETHERCHANNEL Command
587
Show Port Etherchannel
587
Section VI: Spanning Tree Protocols
589
Chapter 40: STP, RSTP and MSTP Protocols
591
Overview
592
Bridge Priority and the Root Bridge
593
Path Costs and Port Costs
594
Port Priority
595
Forwarding Delay and Topology Changes
596
Hello Time and Bridge Protocol Data Units (BPDU)
597
Point-To-Point and Edge Ports
598
Figure 109: Point-To-Point Ports
598
Figure 110: Edge Port
599
Figure 111: Point-To-Point and Edge Port
599
Mixed STP and RSTP Networks
600
Spanning Tree and Vlans
601
Figure 112: VLAN Fragmentation
601
RSTP and MSTP BPDU Guard
602
STP, RSTP, MSTP Loop Guard
604
Figure 113: Loop Guard Example 1
605
Figure 114: Loop Guard Example 2
606
Figure 115: Loop Guard Example 3
606
Figure 116: Loop Guard Example 4
607
Figure 117: Loop Guard Example 5
608
STP and RSTP Root Guard
609
Chapter 41: Spanning Tree Protocol (STP) Procedures
611
Designating STP as the Active Spanning Tree Protocol
612
Enabling the Spanning Tree Protocol
613
Setting the Switch Parameters
614
Table 60. STP Switch Parameter Commands
614
Setting the Port Parameters
616
Table 61. STP Port Parameter Commands
616
Disabling the Spanning Tree Protocol
617
Displaying STP Settings
618
Figure 118: SHOW SPANNING-TREE Command for STP
618
Chapter 42: STP Commands
619
Table 62. Spanning Tree Protocol Commands
619
No Spanning-Tree Stp Enable
621
Figure 119: SHOW SPANNING-TREE Command for STP
622
Show Spanning-Tree
622
Spanning-Tree Forward-Time
624
Spanning-Tree Guard Root
625
Spanning-Tree Hello-Time
626
Spanning-Tree Max-Age
627
Spanning-Tree Mode Stp
628
Spanning-Tree Path-Cost
629
Spanning-Tree Portfast
630
Spanning-Tree Portfast Bpdu-Guard
631
SPANNING-TREE PRIORITY (Bridge Priority)
632
SPANNING-TREE Priority (Port Priority)
633
Spanning-Tree Stp Enable
634
Chapter 43: Rapid Spanning Tree Protocol (RSTP) Procedures
635
Designating RSTP as the Active Spanning Tree Protocol
636
Enabling the Rapid Spanning Tree Protocol
637
Configuring the Switch Parameters
638
Setting the Forward Time, Hello Time, and Max Age
638
Table 63. RSTP Switch Parameters
638
Setting the Bridge Priority
639
Enabling or Disabling BPDU Guard
639
Configuring the Port Parameters
641
Configuring Port Costs
641
Table 64. RSTP Port Parameters
641
Configuring Port Priorities
642
Designating Point-To-Point and Shared Ports
642
Designating Edge Ports
642
Enabling or Disabling RSTP Loop-Guard
643
Enabling or Disabling BPDU Guard
643
Disabling the Rapid Spanning Tree Protocol
645
Displaying RSTP Settings
646
Figure 120: SHOW SPANNING-TREE Command for RSTP
646
Chapter 44: RSTP Commands
647
Table 65. Rapid Spanning Tree Protocol Commands
647
No Spanning-Tree Portfast
649
No Spanning-Tree Errdisable-Timeout Enable
650
No Spanning-Tree Loop-Guard
651
No Spanning-Tree Portfast Bpdu-Guard
652
No Spanning-Tree Rstp Enable
653
Figure 121: SHOW SPANNING-TREE Command for RSTP
654
Show Spanning-Tree
654
Spanning-Tree Errdisable-Timeout Enable
656
Spanning-Tree Errdisable-Timeout Interval
657
Spanning-Tree Forward-Time
658
Spanning-Tree Guard Root
659
Spanning-Tree Hello-Time
660
Spanning-Tree Link-Type
661
Spanning-Tree Loop-Guard
662
Spanning-Tree Max-Age
663
Spanning-Tree Mode Rstp
664
Spanning-Tree Path-Cost
665
Spanning-Tree Portfast
666
Spanning-Tree Portfast Bpdu-Guard
667
SPANNING-TREE PRIORITY (Bridge Priority)
668
SPANNING-TREE PRIORITY (Port Priority)
669
Spanning-Tree Rstp Enable
670
Chapter 45: Multiple Spanning Tree Protocol (MSTP)
671
Overview
672
Multiple Spanning Tree Instance (MSTI)
673
Figure 122: VLAN Fragmentation with STP or RSTP
673
Figure 123: MSTP Example of Two Spanning Tree Instances
674
Figure 124: Multiple Vlans in an MSTI
674
MSTI Guidelines
675
VLAN and MSTI Associations
676
Ports in Multiple Mstis
677
Multiple Spanning Tree Regions
678
Table 66. MSTP Region
679
Region Guidelines
680
Common and Internal Spanning Tree (CIST)
681
MSTP with STP and RSTP
681
Summary of Guidelines
683
Associating Vlans to Mstis
685
Figure 125: CIST and VLAN Guideline - Example 1
685
Figure 126: CIST and VLAN Guideline - Example 2
686
Connecting Vlans Across Different Regions
687
Figure 127: Spanning Regions - Example 1
687
Figure 128: Spanning Regions Without Blocking
688
Table 67. Two Region Examples
688
MSTP Root Guard
689
Chapter 46: MSTP Commands
691
Table 68. Multiple Spanning Tree Protocol Commands
691
Instance Msti-ID Priority
693
Table 69. MSTP Bridge Priority Value Increments
693
Instance Msti-ID Vlan
695
No Spanning-Tree Errdisable-Timeout Enable
696
No Spanning-Tree Portfast
697
No Spanning-Tree Mstp Enable
698
Figure 129: SHOW SPANNING-TREE Command for MSTP
699
Show Spanning-Tree
699
Figure 130: SHOW SPANNING-TREE MST CONFIG Command
700
Show Spanning-Tree Mst Config
700
Figure 131: SHOW SPANNING-TREE MST Command
701
Show Spanning-Tree Mst
701
Show Spanning-Tree Mst Instance
702
Spanning-Tree Errdisable-Timeout Enable
703
Spanning-Tree Errdisable-Timeout Interval
704
Spanning-Tree Guard Root
705
Spanning-Tree Mode Mstp
706
Spanning-Tree Mstp Enable
707
Spanning-Tree Mst Configuration
708
Spanning-Tree Mst Instance
709
Spanning-Tree Path-Cost
710
Spanning-Tree Portfast
711
Spanning-Tree Portfast Bpdu-Guard
712
Region
713
Revision
714
Section VII: Virtual Lans
715
Chapter 47: Port-Based and Tagged Vlans
717
Overview
718
Port-Based VLAN Overview
720
VLAN Name
720
VLAN Identifier
720
Port VLAN Identifier
721
Untagged Ports
721
Guidelines to Creating a Port-Based VLAN
722
Drawbacks of Port-Based Vlans
722
Port-Based Example 1
723
Figure 132: Port-Based VLAN - Example 1
723
Port-Based Example 2
724
Figure 133: Port-Based VLAN - Example 2
724
Tagged VLAN Overview
726
Tagged and Untagged Ports
727
Port VLAN Identifier
727
Guidelines to Creating a Tagged VLAN
727
Tagged VLAN Example
728
Figure 134: Example of a Tagged VLAN
728
Table 70. VLAN Port Assignments
729
Creating Vlans
731
Adding Untagged Ports to Vlans
732
Adding Tagged Ports to Vlans
734
Removing Untagged Ports from Vlans
736
Removing Tagged Ports from Vlans
737
Deleting Vlans
738
Displaying the Vlans
739
Figure 135: SHOW VLAN ALL Command
739
Chapter 48: Port-Based and Tagged VLAN Commands
741
Table 71. Port-Based and Tagged VLAN Commands
741
No Switchport Access Vlan
742
No Switchport Trunk
743
No Switchport Trunk Native Vlan
744
No Vlan
745
Figure 136: SHOW VLAN Command
746
Show Vlan
746
Table 72. SHOW VLAN Command
746
Switchport Access Vlan
748
Switchport Mode Access
750
Switchport Mode Trunk
751
Switchport Trunk Allowed Vlan
753
Switchport Trunk Native Vlan
756
Vlan
758
Chapter 49: GARP VLAN Registration Protocol
761
Overview
762
Figure 137: GVRP Example
763
Guidelines
765
GVRP and Network Security
766
GVRP-Inactive Intermediate Switches
767
Enabling GVRP on the Switch
768
Enabling GIP on the Switch
769
Enabling GVRP on the Ports
770
Setting the GVRP Timers
771
Disabling GVRP Timers on the Switch
772
Disabling GVRP on the Ports
773
Disabling GIP on the Switch
774
Disabling GVRP on the Switch
775
Restoring the GVRP Default Settings
776
Displaying GVRP
777
Figure 138: SHOW GVRP TIMER Command
777
Chapter 50: GARP VLAN Registration Protocol Commands
779
Table 73. GARP VLAN Registration Protocol Commands
779
Convert Dynamic Vlan
781
Gvrp Applicant State Active
782
Gvrp Applicant State Normal
783
Gvrp Enable
784
Gvrp Registration
785
Gvrp Timer Join
786
Gvrp Timer Leave
787
Gvrp Timer Leaveall
788
No Gvrp Enable
789
No Gvrp Timer Join
790
No Gvrp Timer Leave
791
No Gvrp Timer Leaveall
792
Purge Gvrp
793
Show Gvrp Applicant
794
Show Gvrp Configuration
795
Show Gvrp Machine
796
Show Gvrp Statistics
797
Show Gvrp Timer
799
Chapter 51: MAC Address-Based Vlans
801
Overview
802
Egress Ports
802
Table 74. Mappings of MAC Addresses to Egress Ports Example
803
Table 75. Revised Example of Mappings of MAC Addresses to Egress Ports
804
Vlans that Span Switches
805
Figure 139: Example of a MAC Address-Based VLAN that Spans Switches
805
VLAN Hierarchy
806
Table 76. Example of a MAC Address-Based VLAN Spanning Switches
806
Guidelines
807
General Steps
808
Creating MAC Address-Based Vlans
809
Adding MAC Addresses to Vlans and Designating Egress Ports
810
Removing MAC Addresses
811
Deleting Vlans
812
Displaying Vlans
813
Figure 140: SHOW VLAN MACADDRESS Command
813
Example of Creating a MAC Address-Based VLAN
814
Chapter 52: MAC Address-Based VLAN Commands
817
Table 77. MAC Address-Based VLAN Commands
817
No Vlan
818
NO VLAN MACADDRESS (Global Configuration Mode)
819
NO VLAN MACADDRESS (Port Interface Mode)
820
Figure 141: SHOW VLAN MACADDRESS Command
822
Show Vlan Macaddress
822
Table 78. SHOW VLAN MACADDRESS Command
823
Vlan Macaddress
824
VLAN SET MACADDRESS (Global Configuration Mode)
826
VLAN SET MACADDRESS (Port Interface Mode)
828
Chapter 53: Private Port Vlans
831
Overview
832
Host Ports
832
Uplink Port
832
Private VLAN Functionality
833
Guidelines
834
Creating Private Vlans
835
Adding Host and Uplink Ports
836
Deleting Vlans
837
Displaying Private Vlans
838
Figure 142: SHOW VLAN PRIVATE-VLAN Command
838
Chapter 54: Private Port VLAN Commands
839
Table 79. Private Port VLAN Commands
839
No Vlan
840
Private-Vlan
841
Figure 143: SHOW VLAN PRIVATE-VLAN Command
842
Show Vlan Private-Vlan
842
Switchport Mode Private-Vlan Host
843
Switchport Mode Private-Vlan Promiscuous
844
Chapter 55: Voice VLAN Commands
845
Table 80. Voice VLAN Commands
845
No Switchport Voice Vlan
846
Switchport Voice Dscp
847
Switchport Voice Vlan
848
Chapter 56: VLAN Stacking
851
Overview
852
Figure 144: Metro Provider 802.1Q Header in Tagged Packets
853
Figure 145: Metro Provider 802.1Q Header in Untagged Packets
853
Components
854
Vlan
854
Customer Ports
854
Provider Ports
854
Ethertype/Length
854
VLAN Stacking Process
855
Figure 146: VLAN Stacking Process
855
Table 81. VLAN Stacking Process
855
Example of VLAN Stacking
856
Chapter 57: VLAN Stacking Commands
861
Table 82. VLAN Stacking Commands
861
No Switchport Vlan-Stacking
862
Platform Vlan-Stacking-Tpid
863
Figure 147: SHOW VLAN VLAN-STACKING Command
864
Show Vlan Vlan-Stacking
864
Switchport Vlan-Stacking
865
Section VIII: Port Security
867
Chapter 58: MAC Address-Based Port Security
869
Overview
870
Static Versus Dynamic Addresses
870
Intrusion Actions
870
Guidelines
871
Configuring Ports
872
Table 83. MAC Address-Based Port Security Commands and Descriptions
872
Enabling MAC Address-Based Security on Ports
874
Disabling MAC Address-Based Security on Ports
875
Displaying Port Settings
876
Figure 148: SHOW PORT-SECURITY INTERFACE Command
876
Figure 149: Example of SHOW PORT-SECURITY INTRUSION INTERFACE Command
877
Chapter 59: MAC Address-Based Port Security Commands
879
Table 84. MAC Address-Based Port Security Commands
879
No Switchport Port-Security
880
No Switchport Port-Security Aging
881
Figure 150: SHOW PORT-SECURITY INTERFACE Command
882
Show Port-Security Interface
882
Table 85. SHOW PORT-SECURITY INTERFACE Command
882
Figure 151: SHOW PORT-SECURITY INTRUSION INTERFACE Command
885
Show Port-Security Intrusion Interface
885
Figure 152: Example of SHOW PORT-SECURITY INTRUSION INTERFACE Command
886
Switchport Port-Security
887
Switchport Port-Security Aging
888
Switchport Port-Security Maximum
889
Switchport Port-Security Violation
890
Chapter 60: 802.1X Port-Based Network Access Control
893
Overview
894
Authentication Process
895
Port Roles
896
None Role
896
Authenticator Role
896
Authentication Methods for Authenticator Ports
897
Operational Settings for Authenticator Ports
898
Operating Modes for Authenticator Ports
899
Single-Host Mode
899
Multi-Host Mode
899
Figure 153: Single-Host Mode
899
Figure 154: Multi-Host Operating Mode
900
Multi-Supplicant Mode
901
Figure 155: Multi-Supplicant Mode
902
Supplicant and VLAN Associations
903
Single-Host Mode
904
Multi-Host Mode
904
Multi-Supplicant Mode
904
Supplicant VLAN Attributes on the RADIUS Server
905
Guest VLAN
906
Guidelines
907
Enabling 802.1X Port-Based Network Access Control on the Switch
909
Configuring Authenticator Ports
910
Designating Authenticator Ports
910
Designating the Authentication Methods
910
Configuring the Operating Modes
911
Configuring Reauthentication
913
Table 86. Reauthentication Commands
913
Removing Ports from the Authenticator Role
914
Disabling 802.1X Port-Based Network Access Control on the Switch
915
Displaying Authenticator Ports
916
Figure 156: SHOW DOT1X INTERFACE Command
916
Displaying EAP Packet Statistics
917
Figure 157: SHOW DOT1X STATISTICS INTERFACE Command
917
Chapter 61: 802.1X Port-Based Network Access Control Commands
919
Table 87. 802.1X Port-Based Network Access Control Commands
919
Aaa Authentication Dot1X Default Group Radius
922
Auth Dynamic-Vlan-Creation
923
Auth Guest-Vlan
925
Auth Host-Mode
926
Auth Reauthentication
928
Auth Timeout Quiet-Period
929
Auth Timeout Reauth-Period
930
Auth Timeout Server-Timeout
931
Auth Timeout Supp-Timeout
932
Auth-Mac Enable
933
Auth-Mac Reauth-Relearning
934
Dot1X Control-Direction
935
Dot1X Eap
937
Dot1X Initialize Interface
939
Dot1X Max-Reauth-Req
940
Dot1X Port-Control Auto
941
Dot1X Port-Control Force-Authorized
942
Dot1X Port-Control Force-Unauthorized
943
Dot1X Timeout Tx-Period
944
No Aaa Authentication Dot1X Default Group Radius
945
No Auth Dynamic-Vlan-Creation
946
No Auth Guest-Vlan
947
No Auth Reauthentication
948
No Auth-Mac Enable
949
No Dot1X Port-Control
950
Figure 158: SHOW AUTH-MAC INTERFACE Command
951
Show Auth-Mac Interface
951
Figure 159: SHOW AUTH-MAC SESSIONSTATISTICS INTERFACE Command
952
Show Auth-Mac Sessionstatistics Interface
952
Figure 160: SHOW AUTH-MAC STATISTICS INTERFACE Command
953
Show Auth-Mac Statistics Interface
953
Figure 161: SHOW AUTH-MAC SUPPLICANT INTERFACE Command
954
Show Auth-Mac Supplicant Interface
954
Figure 162: SHOW DOT1X Command
955
Show Dot1X
955
Figure 163: SHOW DOT1X INTERFACE Command
956
Show Dot1X Interface
956
Figure 164: SHOW DOT1X STATISTICS INTERFACE Command
957
Show Dot1X Statistics Interface
957
Figure 165: SHOW DOT1X SUPPLICANT INTERFACE Command
958
Show Dot1X Supplicant Interface
958
Section IX: Simple Network Management Protocols
961
Chapter 62: Snmpv1 and Snmpv2C
963
Overview
964
Enabling Snmpv1 and Snmpv2C
966
Creating Community Strings
967
Adding or Removing IP Addresses of Trap or Inform Receivers
968
Deleting Community Strings
970
Disabling Snmpv1 and Snmpv2C
971
Displaying Snmpv1 and Snmpv2C
972
Figure 166: SHOW SNMP-SERVER Command
972
Figure 167: SHOW SNMP-SERVER COMMUNITY Command
972
Figure 168: SHOW RUNNING-CONFIG SNMP Command
973
Chapter 63: Snmpv1 and Snmpv2C Commands
975
Table 88. Snmpv1 and Snmpv2C Commands
975
No Snmp-Server
977
No Snmp-Server Community
978
No Snmp-Server Enable Trap
979
No Snmp-Server Enable Trap Auth
980
No Snmp-Server Host
981
No Snmp-Server View
983
No Snmp Trap Link-Status
984
Figure 169: SHOW RUNNING-CONFIG SNMP Command
985
Show Running-Config Snmp
985
Figure 170: SHOW SNMP-SERVER Command
986
Show Snmp-Server
986
Figure 171: SHOW SNMP-SERVER COMMUNITY Command
987
Show Snmp-Server Community
987
Table 89. SHOW SNMP-SERVER COMMUNITY Command
987
Figure 172: SHOW SNMP-SERVER VIEW Command
989
Show Snmp-Server View
989
Table 90. SHOW SNMP-SERVER VIEW Command
989
Snmp-Server
990
Snmp-Server Community
991
Snmp-Server Enable Trap
992
Snmp-Server Enable Trap Auth
993
Snmp-Server Host
994
Snmp-Server View
996
Snmp Trap Link-Status
998
Chapter 64: Snmpv3 Commands
999
Table 91. Snmpv3 Commands
999
No Snmp-Server
1001
No Snmp-Server Engineid Local
1002
No Snmp-Server Group
1003
No Snmp-Server Host
1004
No Snmp-Server User
1006
No Snmp-Server View
1007
Figure 173: SHOW SNMP-SERVER Command
1008
Show Snmp-Server
1008
Show Snmp-Server Group
1009
Show Snmp-Server Host
1010
Show Snmp-Server User
1011
Show Snmp-Server View
1012
Snmp-Server
1013
Snmp-Server Engineid Local
1014
Snmp-Server Group
1015
Snmp-Server Host
1017
Snmp-Server User
1019
Snmp-Server View
1021
Section X: Network Management
1023
Chapter 65: Sflow Agent
1025
Overview
1026
Ingress Packet Samples
1026
Packet Counters
1026
Guidelines
1027
Configuring the Sflow Agent
1028
Configuring the Ports
1029
Configuring the Sampling Rate
1029
Configuring the Polling Interval
1030
Enabling the Sflow Agent
1031
Disabling the Sflow Agent
1032
Displaying the Sflow Agent
1033
Figure 174: SHOW SFLOW Command
1033
Configuration Example
1034
Chapter 66: Sflow Agent Commands
1037
Table 92. Sflow Agent Commands
1037
No Sflow Collector Ip
1038
No Sflow Enable
1039
Sflow Collector Ip
1040
Sflow Enable
1041
Sflow Polling-Interval
1042
Sflow Sampling-Rate
1044
Figure 175: SHOW SFLOW Command
1046
Show Sflow
1046
Table 93. SHOW SFLOW Command
1047
Chapter 67: LLDP and LLDP-MED
1049
Overview
1050
Mandatory LLDP Tlvs
1051
Optional LLDP Tlvs
1051
Table 94. Mandatory LLDP Tlvs
1051
Table 95. Optional LLDP Tlvs
1051
Optional LLDP-MED Tlvs
1053
Table 96. Optional LLDP-MED Tlvs
1053
Enabling LLDP and LLDP-MED on the Switch
1055
Configuring Ports to Only Receive LLDP and LLDP-MED Tlvs
1056
Configuring Ports to Send Only Mandatory LLDP Tlvs
1057
Configuring Ports to Send Optional LLDP Tlvs
1058
Table 97. Optional LLDP Tlvs - Summary
1058
Configuring Ports to Send Optional LLDP-MED Tlvs
1060
Configuring Ports to Send LLDP-MED CIVIC Location Tlvs
1062
Table 98. Abbreviated List of LLDP-MED CIVIC Location Entry Parameters
1062
Configuring Ports to Send LLDP-MED Coordinate Location Tlvs
1065
Table 99. LLDP-MED Coordinate Location Entry Parameters
1065
Configuring Ports to Send LLDP-MED ELIN Location Tlvs
1069
Removing LLDP Tlvs from Ports
1071
Removing LLDP-MED Tlvs from Ports
1072
Deleting LLDP-MED Location Entries
1073
Disabling LLDP and LLDP-MED on the Switch
1074
Displaying General LLDP Settings
1075
Figure 176: SHOW LLDP Command
1075
Displaying Port Settings
1076
Figure 177: SHOW LLDP INTERFACE Command
1076
Displaying or Clearing Neighbor Information
1077
Displaying Port Tlvs
1079
Displaying and Clearing Statistics
1080
Figure 178: SHOW LLDP STATISTICS Command
1080
Chapter 68: LLDP and LLDP-MED Commands
1081
Table 100. LLDP and LLDP-MED Commands
1081
Clear Lldp Statistics
1084
Clear Lldp Table
1085
Lldp Holdtime-Multiplier
1086
Lldp Location
1087
Lldp Management-Address
1089
Lldp Med-Notifications
1091
Lldp Med-Tlv-Select
1092
Lldp Non-Strict-Med-Tlv-Order-Check
1094
Lldp Notifications
1095
Lldp Notification-Interval
1096
Lldp Reinit
1097
Lldp Run
1098
Lldp Timer
1099
Lldp Tlv-Select
1100
Table 101. Optional Tlvs
1100
Lldp Transmit Receive
1103
Lldp Tx-Delay
1104
Location CIVIC-Location
1105
Table 102. LLDP-MED CIVIC Location Entry Parameters
1105
Location Coord-Location
1108
Table 103. LLDP-MED Coordinate Location Entry Parameters
1108
Location Elin-Location
1111
No Lldp Med-Notifications
1112
No Lldp Med-Tlv-Select
1113
No Lldp Notifications
1115
No Lldp Run
1116
No Lldp Tlv-Select
1117
No Lldp Transmit Receive
1118
No Location
1119
Figure 179: SHOW LLDP Command
1121
Show Lldp
1121
Table 104. SHOW LLDP Command
1121
Figure 180: SHOW LLDP INTERFACE Command
1123
Show Lldp Interface
1123
Figure 181: SHOW LLDP LOCAL-INFO INTERFACE Command
1125
Show Lldp Local-Info Interface
1125
Figure 182: SHOW LLDP LOCAL-INFO INTERFACE Command (Continued)
1126
Figure 183: SHOW LLDP NEIGHBORS DETAIL Command
1127
Show Lldp Neighbors Detail
1127
Figure 184: SHOW LLDP NEIGHBORS DETAIL Command (Continued)
1128
Table 105. SHOW LLDP NEIGHBORS DETAIL Command
1128
Figure 185: SHOW LLDP NEIGHBORS INTERFACE Command
1132
Show Lldp Neighbors Interface
1132
Table 106. SHOW LLDP NEIGHBORS INTERFACE Command
1132
Figure 186: SHOW LLDP STATISTICS Command
1134
Show Lldp Statistics
1134
Table 107. SHOW LLDP STATISTICS Command
1134
Figure 187: SHOW LLDP STATISTICS INTERFACE Command
1136
Show Lldp Statistics Interface
1136
Table 108. SHOW LLDP STATISTICS INTERFACE Command
1136
Figure 188: SHOW LOCATION Command for a CIVIC Location
1138
Show Location
1138
Table 109. SHOW LLDP STATISTICS INTERFACE Command
1138
Chapter 69: Address Resolution Protocol (ARP)
1141
Overview
1142
ARP on the Switch
1142
Dynamic ARP Entries
1142
Static ARP Entries
1142
Adding Static ARP Entries
1143
Deleting Static and Dynamic ARP Entries
1144
Table 110. Deleting ARP Entries
1144
Displaying the ARP Table
1145
Figure 189: SHOW ARP Command
1145
Chapter 70: Address Resolution Protocol (ARP) Commands
1147
Table 111. ARP Commands
1147
Arp
1148
Clear Arp-Cache
1150
No Arp (Ip Address)
1151
Figure 190: SHOW ARP Command
1152
Show Arp
1152
Table 112. SHOW ARP Command
1152
Chapter 71: RMON
1155
Overview
1156
RMON Port Statistics
1157
Adding Statistics Groups
1157
Viewing Statistics Groups
1158
Deleting Statistics Groups
1158
Figure 191: SHOW RMON STATISTICS Command
1158
RMON Histories
1159
Adding History Groups
1159
Displaying History Groups
1160
Deleting History Groups
1161
Figure 192: SHOW RMON HISTORY Command
1161
RMON Alarms
1162
Creating RMON Statistics Groups
1163
Creating RMON Events
1163
Creating RMON Alarms
1164
Table 113. Abbreviated List of MIB Object Names and OID Numbers
1164
Creating an Alarm - Example 1
1165
Creating an Alarm - Example 2
1167
Chapter 72: RMON Commands
1171
Table 114. RMON Commands
1171
No Rmon Alarm
1173
No Rmon Collection History
1174
No Rmon Collection Stats
1175
No Rmon Event
1176
Rmon Alarm
1177
Table 115. MIB Object Names and ID Numbers
1178
Rmon Collection History
1180
Rmon Collection Stats
1182
Rmon Event Log
1183
Rmon Event Log Trap
1184
Rmon Event Trap
1186
Figure 193: SHOW RMON ALARM Command
1188
Show Rmon Alarm
1188
Table 116. SHOW RMON ALARM Command
1189
Figure 194: SHOW RMON EVENT Command
1190
Show Rmon Event
1190
Table 117. SHOW RMON EVENT Command
1190
Figure 195: SHOW RMON HISTORY Command
1192
Show Rmon History
1192
Table 118. SHOW RMON HISTORY Command
1192
Figure 196: SHOW RMON STATISTICS Command
1194
Show Rmon Statistics
1194
Table 119. SHOW RMON STATISTICS Command
1194
Chapter 73: Advanced Access Control Lists (Acls)
1195
Overview
1196
Filtering Criteria
1196
Actions
1197
ID Numbers
1197
How Ingress Packets Are Compared against Acls
1197
Table 120. Access Control List ID Number Ranges
1197
Guidelines
1198
Creating Acls
1199
Creating Numbered Ipv4 Acls
1199
Table 121. ACCESS-LIST Commands for Creating Numbered Ipv4 Acls
1199
Table 122. Blocking Ingress Packets Example
1201
Table 123. Blocking Traffic with Two Ipv4 Addresses
1201
Table 124. Creating a Permit ACL Followed by a Deny ACL Example
1202
Table 125. Permit Acls Ipv4 Packets Example
1203
Table 126. ACL Filters Tagged Ipv4 Packets Example
1204
Table 127. Numbered Ipv4 ACL with ICMP Packets Example
1205
Table 128. Numbered Ipv4 ACL with Protocol Example
1207
Table 129. Numbered Ipv4 ACL with TCP Port Packets Example
1209
Creating Numbered MAC Acls
1211
Table 130. Numbered Ipv4 ACL with UDP Port Example
1211
Table 131. Numbered MAC ACL Example
1213
Assigning Acls to Ports
1214
Assigning Numbered Ipv4 Acls to a Port
1214
Assigning MAC Address Acls to a Port
1215
Table 132. Assigning Numbered Ipv4 Acls
1215
Table 133. Assigning MAC Address Acls Example
1215
Removing Acls from Ports
1217
Removing Numbered Ipv4 Acls
1217
Removing MAC Address Acls
1217
Table 134. Removing Numbered IP Acls Example
1217
Table 135. Removing MAC Address Acls Example
1218
Restricting Remote Access
1219
Assigning Numbered IP Acls to VTY Lines
1219
Table 136. Assigning Numbered IP Acls to VTY Lines Example
1219
Assigning MAC Acls to VTY Lines
1220
Table 137. Assigning MAC Acls to VTY Lines Example
1220
Assigning Named Ipv4 and Ipv6 Acls to VTY Lines
1221
Table 138. Assigning Named Ipv4 Acls to VTY Lines Example
1221
Table 139. Assigning Named Ipv4 Acls to VTY Lines Example
1222
Unrestricting Remote Access
1224
Table 140. Removing Numbered IP Acls from VTY Lines Example
1224
Deleting Numbered IP and MAC Address Acls
1225
Table 141. Deleting Numbered IP Acls Example 1
1225
Table 142. Deleting Numbered IP Acls Example 2
1225
Displaying the Acls
1226
Displaying Ipv4 Acls
1226
Displaying IP ACL Port Assignments
1226
Figure 197: SHOW ACCESS-LIST Command
1226
Displaying Acls Assigned to VTY Lines
1227
Figure 198: SHOW INTERFACE ACCESS-GROUP Command
1227
Figure 199: SHOW RUNNING-CONFIG Command
1227
Chapter 74: ACL Commands
1229
Table 143. Access Control List Commands
1229
Access-Class
1231
Access-Group
1233
ACCESS-LIST (MAC Address)
1235
Access-List Icmp
1238
Access-List Ip
1241
Access-List Proto
1245
Table 144. Protocol Numbers
1246
Access-List Tcp
1250
Access-List Udp
1254
Mac Access-Group
1258
No Access-List
1259
No Access-Group
1260
No Mac Access-Group
1261
Show Access-List
1262
Figure 200: SHOW ACCESS-LIST Command
1263
Figure 201: SHOW INTERFACE ACCESS-GROUP Command
1264
Show Interface Access-Group
1264
Chapter 75: Quality of Service (QOS) Commands
1265
Table 145. Quality of Service Commands
1265
Mls Qos Enable
1267
Mls Qos Map Cos-Queue
1268
Mls Qos Map Dscp-Queue
1270
Mls Qos Queue
1272
Mls Qos Set Cos
1273
Mls Qos Set Dscp
1274
Mls Qos Trust Cos
1275
Mls Qos Trust Dscp
1276
No Mls Qos Enable
1277
No Wrr-Queue Weight
1278
Figure 202: SHOW MLS QOS INTERFACE Command - Strict Priority
1279
Show Mls Qos Interface
1279
Figure 203: SHOW MLS QOS INTERFACE Command - Strict Priority (Continued)
1280
Figure 204: SHOW MLS QOS INTERFACE Command - Weighted Round Robin
1280
Table 146. SHOW MLS QOS INTERFACE Command
1281
Figure 205: SHOW MLS QOS MAPS COS-QUEUE Command
1282
Show Mls Qos Maps Cos-Queue
1282
Show Mls Qos Maps Dscp-Queue
1283
Figure 206: SHOW MLS QOS MAPS DSCP-QUEUE Command
1284
Wrr-Queue Weight
1285
Section XI: Management Security
1287
Chapter 76: Local Manager Accounts
1289
Overview
1290
Privilege Levels
1290
Command Mode Restriction
1290
Password Encryption
1291
Figure 207: Password Prompt for Command Mode Restriction
1291
Figure 208: Command Mode Restriction Error Message
1291
Creating Local Manager Accounts
1293
Deleting Local Manager Accounts
1295
Activating Command Mode Restriction and Creating the Special Password
1296
Deactivating Command Mode Restriction and Deleting the Special Password
1297
Activating or Deactivating Password Encryption
1298
Displaying the Local Manager Accounts
1299
Figure 209: Displaying the Local Manager Accounts in the Running Configuration
1299
Chapter 77: Local Manager Account Commands
1301
Table 147. Local Manager Account Commands
1301
Enable Password
1302
No Enable Password
1304
No Service Password-Encryption
1305
No Username
1306
Service Password-Encryption
1307
Username
1308
Chapter 78: Telnet Server
1311
Overview
1312
Enabling the Telnet Server
1313
Disabling the Telnet Server
1314
Displaying the Telnet Server
1315
Figure 210: SHOW TELNET Command
1315
Chapter 79: Telnet Server Commands
1317
Table 148. Telnet Server Commands
1317
No Service Telnet
1318
Service Telnet
1319
Figure 211: SHOW TELNET Command
1320
Show Telnet
1320
Chapter 80: Telnet Client
1321
Overview
1322
Starting a Remote Management Session with the Telnet Client
1323
Chapter 81: Telnet Client Commands
1325
Table 149. Telnet Client Commands
1325
Telnet
1326
Telnet Ipv6
1327
Chapter 82: Secure Shell (SSH) Server
1329
Overview
1330
Algorithms
1330
Support for SSH
1331
Guidelines
1331
SSH and Enhanced Stacking
1333
Figure 212: SSH Remote Management of a Member Switch
1333
Creating the Encryption Key Pair
1335
Enabling the SSH Server
1336
Disabling the SSH Server
1337
Deleting Encryption Keys
1338
Displaying the SSH Server
1339
Chapter 83: SSH Server Commands
1341
Table 150. Secure Shell Server Commands
1341
Crypto Key Destroy Hostkey
1342
Crypto Key Generate Hostkey
1344
No Service Ssh
1346
Service Ssh
1347
Figure 213: SHOW CRYPTO KEY HOSTKEY Command
1348
Show Crypto Key Hostkey
1348
Figure 214: SHOW SSH SERVER Command
1349
Show Ssh Server
1349
Chapter 84: Non-Secure HTTP Web Browser Server
1351
Overview
1352
Enabling the Web Browser Server
1353
Setting the Protocol Port Number
1354
Disabling the Web Browser Server
1355
Displaying the Web Browser Server
1356
Figure 215: SHOW IP HTTP Command
1356
Chapter 85: Non-Secure HTTP Web Browser Server Commands
1357
Table 151. Non-Secure HTTP Web Browser Server Commands
1357
Service Http
1358
Ip Http Port
1359
No Service Http
1360
Figure 216: SHOW IP HTTP Command
1361
Show Ip Http
1361
Chapter 86: Secure HTTPS Web Browser Server
1363
Overview
1364
Certificates
1364
Distinguished Name
1365
Guidelines
1366
Creating a Self-Signed Certificate
1367
Configuring the HTTPS Web Server for a Certificate Issued by a CA
1370
Enabling the Web Browser Server
1374
Disabling the Web Browser Server
1375
Displaying the Web Browser Server
1376
Figure 217: SHOW IP HTTPS Command
1376
Chapter 87: Secure HTTPS Web Browser Server Commands
1377
Table 152. Secure HTTPS Web Browser Server Commands
1377
Crypto Certificate Destroy
1378
Crypto Certificate Generate
1379
Crypto Certificate Import
1382
Crypto Certificate Request
1383
Service Https
1385
Ip Https Certificate
1386
No Service Https
1387
Show Crypto Certificate
1388
Figure 218: SHOW IP HTTPS Command
1389
Show Ip Https
1389
Table 153. SHOW IP HTTPS Command
1389
Chapter 88: RADIUS and TACACS+ Clients
1391
Overview
1392
Remote Manager Accounts
1393
Guidelines
1395
Managing the RADIUS Client
1396
Adding IP Addresses of RADIUS Servers
1396
Specifying a RADIUS Global Encryption Key
1397
Specifying the Server Timeout
1397
Specifying RADIUS Accounting
1398
Removing the Accounting Method List
1398
Deleting Server IP Addresses
1399
Displaying the RADIUS Client
1399
Figure 219: SHOW RADIUS Command
1399
Managing the TACACS+ Client
1400
Adding IP Addresses of TACACS+ Servers
1400
Specifying TACACS+ Accounting
1401
Removing the Accounting Method List
1401
Deleting IP Addresses of TACACS+ Servers
1402
Displaying the TACACS+ Client
1402
Figure 220: SHOW TACACS Command
1402
Configuring Remote Authentication of Manager Accounts
1403
Chapter 89: RADIUS and TACACS+ Client Commands
1407
Table 154. RADIUS and TACACS+ Client Commands
1407
Aaa Accounting Login
1409
Aaa Authentication Enable (Tacacs+)
1411
Aaa Authentication Login
1413
Ip Radius Source-Interface
1415
Login Authentication
1417
No Login Authentication
1419
No Radius-Server Host
1420
No Tacacs-Server Host
1421
Radius-Server Host
1422
Radius-Server Key
1424
Radius-Server Timeout
1425
Figure 221: SHOW RADIUS Command
1426
Show Radius
1426
Table 155. SHOW RADIUS Command
1426
Figure 222: SHOW TACACS Command
1428
Show Tacacs
1428
Table 156. SHOW TACACS Command
1428
Tacacs-Server Host
1430
Tacacs-Server Key
1431
Tacacs-Server Timeout
1432
Appendix A: System Monitoring Commands
1433
Table 157. System Monitoring Commands
1433
Show Cpu
1434
Show Cpu History
1435
Show Cpu User-Threads
1436
Show Memory
1437
Show Memory Allocation
1438
Show Memory History
1439
Show Memory Pools
1440
Show Process
1441
Show System Serialnumber
1442
Show System Interrupts
1443
Show Tech-Support
1444
Appendix B: Management Software Default Settings
1447
Boot Configuration File
1448
Class of Service
1449
Console Port
1450
802.1X Port-Based Network Access Control
1451
Enhanced Stacking
1453
Gvrp
1454
IGMP Snooping
1455
Link Layer Discovery Protocol (LLDP and LLDP-MED)
1456
MAC Address-Based Port Security
1457
MAC Address Table
1458
Management IP Address
1459
Manager Account
1460
Port Settings
1461
RADIUS Client
1462
Remote Manager Account Authentication
1463
Rmon
1464
Secure Shell Server
1465
Sflow Agent
1466
Simple Network Management Protocol (Snmpv1, Snmpv2C and Snmpv3)
1467
Simple Network Time Protocol
1468
Spanning Tree Protocols (STP, RSTP and MSTP)
1469
Spanning Tree Status
1469
Spanning Tree Protocol
1469
Rapid Spanning Tree Protocol
1469
Multiple Spanning Tree Protocol
1470
System Name
1471
TACACS+ Client
1472
Telnet Server
1473
Vlans
1474
Web Server
1475
Command Index
1477
Other manuals for Allied Telesis AT-9000/12PoE
Installation Guide
84 pages
Need help?
Do you have a question about the Allied Telesis AT-9000/12PoE and is the answer not in the manual?
Ask a question
Allied Telesis AT-9000/12PoE Specifications
General
Brand
Allied Telesis
Model
AT-9000/12PoE
Category
Switch
Language
English
Related product manuals
Allied Telesis AT-9000/28
1276 pages
Allied Telesis AT-9000/28SP
1482 pages
Allied Telesis AT-9000 Series
1526 pages
Allied Telesis AT-9028
1278 pages
Allied Telesis AT-9924T
65 pages
Allied Telesis AT-9924SP
65 pages
AT 9924SP AT-9924SP-30 AT-9924SP-30
56 pages
Allied Telesis AT-x210-9GT
1575 pages
Allied Telesis AT-FS980M/9
76 pages
Allied Telesis AT-8948
65 pages
Allied Telesis AT-8012M
116 pages
Allied Telesis AT-GS948MX
118 pages
Need help?
General
To Next Page
