Allied Telesis AT-9000/28 - Chapter 76: Secure Shell (SSH) Server

To Next Page

To Previous Page

1129

Chapter 76

Secure Shell (SSH) Server

 “Overview” on page 1130

 “Support for SSH” on page 1131

 “SSH and Enhanced Stacking” on page 1133

 “Creating the Encryption Key Pair” on page 1135

 “Enabling the SSH Server” on page 1136

 “Disabling the SSH Server” on page 1137

 “Deleting Encryption Keys” on page 1138

 “Displaying the SSH Server” on page 1139

Main Page

Default Chapter1
- Command Line1
- Table of Contents5
Preface31
- Document Conventions32
- Where to Find Web-Based Guides33
- Contacting Allied Telesis34
Section I: Getting Started35
Chapter 1: Alliedware Plus™ Command Line Interface37
- Management Sessions38
  - Local Management38
  - Remote Management38
- Management Interfaces40
- Local Manager Account41
- Alliedware Plus™ Command Modes42
- Table 1. Alliedware Plus Modes43
- Moving down the Hierarchy45
- Moving up the Hierarchy50
- Port Numbers in Commands52
- Combo Ports 25 to 2853
- Command Format54
- Startup Messages55
Chapter 2: Starting a Management Session57
- Starting a Local Management Session58
- Starting a Remote Telnet or SSH Management Session60
  - VTY Lines60
- What to Configure First62
- Ending a Management Session67
Chapter 3: Basic Command Line Management69
- Clearing the Screen70
- Displaying the On-Line Help71
- Saving Your Configuration Changes73
- Ending a Management Session74
Chapter 4: Basic Command Line Management Commands75
- Table 2. Basic Command Line Commands75
- (Question Mark Key)77
- Clear Screen79
- Configure Terminal80
- Copy Running-Config Startup-Config81
- Disable82
- Enable84
- End85
- Exit86
- Length87
- Logout89
- Quit90
- Terminal Length91
- Write92
Section II: Basic Operations93
Chapter 5: Basic Switch Management95
- Adding a Name to the Switch96
- Adding Contact and Location Information97
- Displaying Parameter Settings98
- Manually Setting the Date and Time99
- Pinging Network Devices100
- Resetting the Switch101
- Restoring the Default Settings to the Switch102
- Setting the Baud Rate of the Console Port104
- Configuring the Management Session Timers105
- Setting the Maximum Number of Manager Sessions106
- Configuring the Banners107
Chapter 6: Basic Switch Management Commands109
- Banner Exec111
- Banner Login112
- Table 3. Basic Switch Management Commands112
- Banner Motd113
- Baud-Rate Set114
- Clock Set115
- Erase Startup-Config116
- Exec-Timeout117
- Hostname119
- Line Console120
- Line Vty121
- No Hostname122
- Ping123
- Reboot124
- Reload125
- Service Maxmanager126
- Show Baud-Rate127
- Show Clock128
- Show Running-Config129
- Show Switch130
- Table 4. SHOW SWITCH Command130
- Show System132
- Show Users133
- Table 5. SHOW USERS Command133
- Snmp-Server Contact135
- Snmp-Server Location136
- System Territory137
Chapter 7: Port Parameters139
- Adding Descriptions140
- Setting the Speed and Duplex Mode141
- Setting the MDI/MDI-X Wiring Configuration143
- Enabling or Disabling Ports144
- Enabling or Disabling Backpressure145
- Enabling or Disabling Flow Control146
- Resetting Ports149
- Configuring Threshold Limits for Ingress Packets150
- Reinitializing Auto-Negotiation152
- Restoring the Default Settings153
- Displaying Port Settings154
- Displaying or Clearing Port Statistics156
Chapter 8: Port Parameter Commands157
- Table 6. Port Parameter Commands157
- Backpressure159
- Bplimit161
- Clear Port Counter162
- Description163
- Duplex164
- Egress-Rate-Limit166
- Fctrllimit167
- Flowcontrol168
- Holbplimit171
- Linktrap173
- No Egress-Rate-Limit174
- No Flowcontrol175
- No Linktrap176
- No Shutdown177
- No Storm-Control178
- Polarity179
- Purge181
- Renegotiate182
- Reset183
- Show Flowcontrol Interface184
- Table 7. SHOW FLOWCONTROL INTERFACE Command184
- Show Interface186
- Table 8. SHOW INTERFACE Command187
- Show Interface Status189
- Table 9. SHOW INTERFACE STATUS Command189
- Show Platform Table Port191
- Table 10. SHOW PLATFORM TABLE PORT COUNTERS Command191
- Show System Pluggable194
- Show System Pluggable Detail195
- Shutdown196
- Speed197
- Storm-Control198
Chapter 9: Ipv4 and Ipv6 Management Addresses201
- Overview202
- Table 11. Features that Require an IP Management Address202
- Ipv4 Management Address and Default Gateway205
- Ipv6 Management Address and Default Gateway210
Chapter 10: Ipv4 and Ipv6 Management Address Commands215
- Table 12. Management IP Address Commands215
- Ip Address217
- Ip Address Dhcp219
- Ip Route221
- Ipv6 Address223
- Ipv6 Route225
- No Ip Address227
- No Ip Address Dhcp228
- No Ip Route229
- No Ipv6 Address230
- No Ipv6 Route231
- Show Ip Interface232
- Table 13. SHOW IP INTERFACE Command232
- Show Ip Route233
- Table 14. SHOW IP ROUTE Command233
- Show Ipv6 Interface235
- Table 15. SHOW IPV6 INTERFACE Command235
- Show Ipv6 Route236
Chapter 11: Simple Network Time Protocol (SNTP) Client237
- Overview238
- Activating the SNTP Client and Specifying the IP Address of an NTP or SNTP Server239
- Configuring Daylight Savings Time and UTC Offset240
- Table 16. SNTP Daylight Savings Time and UTC Offset Commands240
- Disabling the SNTP Client242
- Displaying the SNTP Client243
- Displaying the Date and Time244
Chapter 12: SNTP Client Commands245
- Table 17. Simple Network Time Protocol Commands245
- Clock Summer-Time246
- Clock Timezone247
- No Clock Summer-Time248
- No Ntp Peer249
- Ntp Peer250
- Purge Ntp251
- Show Clock252
- Show Ntp Associations253
- Table 18. SHOW NTP ASSOCIATIONS Command253
- Show Ntp Status255
Chapter 13: MAC Address Table257
- Overview258
- Adding Static MAC Addresses260
- Deleting MAC Addresses261
- Setting the Aging Timer263
- Displaying the MAC Address Table264
Chapter 14: MAC Address Table Commands265
- Table 19. MAC Address Table Commands265
- Clear Mac Address-Table266
- Mac Address-Table Ageing-Time268
- Mac Address-Table Static270
- No Mac Address-Table Static272
- Show Mac Address-Table274
- Table 20. SHOW MAC ADDRESS-TABLE Command - Unicast Addresses275
- Table 21. SHOW MAC ADDRESS-TABLE Command - Multicast Addresses275
Chapter 15: Enhanced Stacking277
- Overview278
- Configuring the Command Switch281
- Configuring a Member Switch284
- Managing the Switches of an Enhanced Stack286
- Changing the Stack Mode288
Chapter 16: Enhanced Stacking Commands289
- Table 22. Enhanced Stacking Commands289
- Estack Command-Switch290
- Estack Run291
- No Estack Command-Switch292
- No Estack Run293
- Rcommand294
- Show Estack295
- Table 23. SHOW ESTACK Command296
- Show Estack Command-Switch297
- Show Estack Remotelist298
Chapter 17: Port Mirror299
- Overview300
- Creating the Port Mirror or Adding New Source Ports301
- Removing Source Ports or Deleting the Port Mirror302
- Displaying the Port Mirror303
Chapter 18: Port Mirror Commands305
- Table 24. Port Mirror Commands305
- Mirror Interface306
- No Mirror Interface307
- Show Mirror308
- Table 25. SHOW MIRROR Command308
Chapter 19: Internet Group Management Protocol (IGMP) Snooping311
- Overview312
- Host Node Topology314
  - Single-Host Per Port314
  - Multiple-Hosts Per Port314
- Configuring the IGMP Snooping Parameters315
- Table 26. IGMP Snooping Parameters315
- Enabling IGMP Snooping316
- Disabling IGMP Snooping317
- Displaying IGMP Snooping318
Chapter 20: IGMP Snooping Commands319
- Table 27. Internet Group Management Protocol Snooping Commands319
- Clear Ip Igmp320
- Ip Igmp Limit321
- Ip Igmp Querier-Timeout322
- Ip Igmp Snooping323
- Ip Igmp Snooping Mrouter324
- Ip Igmp Status325
- No Ip Igmp Snooping326
- No Ip Igmp Snooping Mrouter327
- Show Ip Igmp Snooping328
- Table 28. SHOW IP IGMP SNOOPING Command329
Chapter 21: Multicast Commands331
- Table 29. Multicast Commands331
- No Switchport Block Egress-Multicast332
- No Switchport Block Ingress-Multicast333
- Switchport Block Egress-Multicast334
- Switchport Block Ingress-Multicast335
Section III: File System337
Chapter 22: File System339
- Overview340
- Table 30. File Extensions and File Types340
- Copying Boot Configuration Files341
- Renaming Boot Configuration Files342
- Deleting Boot Configuration Files343
- Displaying the Specifications of the File System344
- Listing the Files in the File System345
Chapter 23: File System Commands347
- Copy348
- Delete349
- Delete Force350
- Table 31. File System Commands350
- Dir351
- Move352
- Show File Systems353
- Table 32. SHOW FILE SYSTEMS Command353
Chapter 24: Boot Configuration Files355
- Overview356
- Specifying the Active Boot Configuration File357
- Creating a New Boot Configuration File359
- Displaying the Active Boot Configuration File360
Chapter 25: Boot Configuration File Commands361
- Boot Config-File362
- Copy Running-Config364
- Table 33. Boot Configuration File Commands364
- Copy Running-Config Startup-Config365
- Erase Startup-Config366
- No Boot Config-File367
- Show Boot368
- Table 34. SHOW BOOT Command368
- Show Startup-Config370
- Write371
Chapter 26: File Transfers373
- Overview374
- Uploading or Downloading Files with TFTP375
- Uploading or Downloading Files with Zmodem379
  - Downloading Files to the Switch with Zmodem379
  - Uploading Files from the Switch with Zmodem380
- Downloading Files with Enhanced Stacking382
  - Downloading New Management Software with Enhanced Stacking382
Chapter 27: File Transfer Commands385
- Copy Filename Zmodem386
- Copy Flash Tftp387
- Copy Tftp Flash388
- Table 35. File Transfer Commands388
- Copy Zmodem390
- Upload Image Remotelist391
Section IV: Event Messages393
Chapter 28: Event Log395
- Overview396
- Displaying the Event Log397
- Clearing the Event Log398
Chapter 29: Event Log Commands399
- Table 36. Event Log Commands399
- Clear Log Buffered400
- Log Buffered401
- Table 37. Event Message Severity Levels401
- Show Log403
- Table 38. SHOW LOG Command403
- Table 39. Management Software Modules404
- Show Log Config406
- Table 40. SHOW LOG CONFIG Command406
- Show Log Reverse408
Chapter 30: Syslog Client409
- Overview410
- Creating Syslog Server Definitions411
- Table 41. Event Message Severity Levels411
- Table 42. Program Abbreviations411
- Deleting Syslog Server Definitions414
- Displaying the Syslog Server Definitions415
Chapter 31: Syslog Client Commands417
- Table 43. Syslog Client Commands417
- Log Host418
- No Log Host420
- Show Log Config421
- Table 44. SHOW LOG CONFIG Command421
Section V: Port Trunks423
Chapter 32: Static Port Trunks425
- Overview426
  - Load Distribution Methods426
  - Guidelines428
- Creating New Static Port Trunks or Adding Ports to Existing Trunks430
- Specifying the Load Distribution Method431
- Removing Ports from Static Port Trunks or Deleting Trunks432
- Displaying Static Port Trunks433
Chapter 33: Static Port Trunk Commands435
- Table 45. Static Port Trunk Commands435
- No Static-Channel-Group436
- Port-Channel Load-Balance437
- Show Static-Channel-Group438
- Static-Channel-Group439
Chapter 34: Link Aggregation Control Protocol (LACP)441
- Overview442
- Creating New Aggregators446
- Setting the Load Distribution Method447
- Adding Ports to Aggregators448
- Removing Ports from Aggregators449
- Deleting Aggregators450
- Displaying Aggregators451
Chapter 35: LACP Commands453
- Table 46. LACP Port Trunk Commands453
- Channel-Group454
- Lacp System-Priority456
- No Channel-Group457
- Port-Channel Load-Balance458
- Show Etherchannel460
- Show Etherchannel Detail461
- Show Etherchannel Summary462
- Show Lacp Sys-ID463
- Show Port Etherchannel464
Section VI: Spanning Tree Protocols465
Chapter 36: Spanning Tree and Rapid Spanning Tree Protocols467
- Overview468
- Bridge Priority and the Root Bridge469
- Table 47. Bridge Priority Value Increments469
- Path Costs and Port Costs470
- Port Priority471
- Table 48. Port Priority Value Increments471
- Forwarding Delay and Topology Changes472
- Hello Time and Bridge Protocol Data Units (BPDU)473
- Point-To-Point and Edge Ports474
- Mixed STP and RSTP Networks476
- Spanning Tree and Vlans477
- RSTP BPDU Guard478
- RSTP Loop Guard480
Chapter 37: Spanning Tree Protocol (STP)485
- Designating STP as the Active Spanning Tree Protocol486
- Enabling the Spanning Tree Protocol487
- Setting the Switch Parameters488
- Table 49. STP Switch Parameter Commands488
- Setting the Port Parameters490
- Table 50. STP Port Parameter Commands490
- Disabling the Spanning Tree Protocol491
- Restoring the Default Parameter Settings492
- Displaying STP Settings493
Chapter 38: STP Commands495
- Table 51. Spanning Tree Protocol Commands495
- No Spanning-Tree Stp Enable497
- Show Spanning-Tree498
- Spanning-Tree Forward-Time499
- Spanning-Tree Hello-Time500
- Spanning-Tree Max-Age501
- Spanning-Tree Mode Stp502
- Spanning-Tree Path-Cost503
- SPANNING-TREE PRIORITY (Bridge Priority)504
- Table 52. STP Bridge Priority Value Increments504
- SPANNING-TREE PRIORITY (Port Priority)506
- Table 53. STP Port Priority Value Increments506
- Spanning-Tree Stp Enable508
- Spanning-Tree Stp Purge509
Chapter 39: Rapid Spanning Tree Protocol (RSTP)511
- Designating RSTP as the Active Spanning Tree Protocol512
- Enabling the Rapid Spanning Tree Protocol513
- Configuring the Switch Parameters514
- Configuring the Port Parameters517
- Disabling the Rapid Spanning Tree Protocol521
- Restoring the Default RSTP Settings522
- Displaying RSTP Settings523
Chapter 40: RSTP Commands525
- Table 56. Rapid Spanning Tree Protocol Commands525
- No Spanning-Tree527
- No Spanning-Tree Errdisable-Timeout Enable528
- No Spanning-Tree Guard Root529
- No Spanning-Tree Loop-Guard530
- No Spanning-Tree Portfast531
- No Spanning-Tree Rstp Enable532
- Show Spanning-Tree533
- Spanning-Tree Errdisable-Timeout Enable535
- Spanning-Tree Errdisable-Timeout Interval536
- Spanning-Tree Forceversion537
- Spanning-Tree Forward-Time538
- Spanning-Tree Guard Root539
- Spanning-Tree Hello-Time540
- Spanning-Tree Link-Type541
- Spanning-Tree Loop-Guard542
- Spanning-Tree Max-Age543
- Spanning-Tree Mode Rstp544
- Spanning-Tree Path-Cost545
- Spanning-Tree Portfast546
- SPANNING-TREE PRIORITY (Bridge Priority)547
- Table 57. RSTP Bridge Priority Value Increments547
- SPANNING-TREE PRIORITY (Port Priority)549
- Table 58. Port Priority Value Increments549
- Spanning-Tree Rstp Enable551
- Spanning-Tree Rstp Purge552
Section VII: Virtual Lans553
Chapter 41: Port-Based and Tagged Vlans555
- Overview556
- Port-Based VLAN Overview558
- Tagged VLAN Overview564
- Creating Vlans568
- Adding Untagged Ports to Vlans569
- Adding Tagged Ports to Vlans571
- Removing Untagged Ports from Vlans573
- Removing Tagged Ports from Vlans574
- Deleting Vlans575
- Displaying the Vlans576
Chapter 42: Port-Based and Tagged VLAN Commands577
- Table 59. Port-Based and Tagged VLAN Commands577
- No Switchport Access Vlan578
- No Switchport Trunk579
- No Switchport Trunk Native Vlan580
- No Vlan581
- Show Vlan582
- Table 60. SHOW VLAN Command582
- Switchport Access Vlan584
- Switchport Mode Access586
- Switchport Mode Trunk587
- Switchport Trunk Allowed Vlan589
- Switchport Trunk Native Vlan592
- Vlan594
Chapter 43: GARP VLAN Registration Protocol597
- Overview598
- Guidelines601
- GVRP and Network Security602
- GVRP-Inactive Intermediate Switches603
- Enabling GVRP on the Switch604
- Enabling GIP on the Switch605
- Enabling GVRP on the Ports606
- Setting the GVRP Timers607
- Disabling GVRP on the Ports608
- Disabling GIP on the Switch609
- Disabling GVRP on the Switch610
- Restoring the GVRP Default Settings611
- Displaying GVRP612
Chapter 44: GARP VLAN Registration Protocol Commands613
- Table 61. GARP VLAN Registration Protocol Commands613
- Gvrp Applicant State Active615
- Gvrp Applicant State Normal616
- Gvrp Enable617
- Gvrp Registration618
- Gvrp Timer Join619
- Gvrp Timer Leave620
- Gvrp Timer Leaveall621
- No Gvrp Enable622
- Purge Gvrp623
- Show Gvrp Applicant624
- Show Gvrp Configuration625
- Show Gvrp Machine626
- Show Gvrp Statistics627
- Show Gvrp Timer629
Chapter 45: MAC Address-Based Vlans631
- Overview632
- Guidelines637
- General Steps638
- Creating MAC Address-Based Vlans639
- Adding MAC Addresses to Vlans and Designating Egress Ports640
- Removing MAC Addresses641
- Deleting Vlans642
- Displaying Vlans643
- Example of Creating a MAC Address-Based VLAN644
Chapter 46: MAC Address-Based VLAN Commands647
- Table 65. MAC Address-Based VLAN Commands647
- No Vlan648
- NO VLAN MACADDRESS (Global Configuration Mode)649
- NO VLAN MACADDRESS (Port Interface Mode)650
- Show Vlan Macaddress651
- Table 66. SHOW VLAN MACADDRESS Command652
- Vlan Macaddress653
- VLAN SET MACADDRESS (Global Configuration Mode)655
- VLAN SET MACADDRESS (Port Interface Mode)657
Chapter 47: Private Port Vlans659
- Overview660
  - Host Ports660
  - Uplink Port660
- Guidelines661
- Creating Private Vlans662
- Adding Host and Uplink Ports663
- Deleting Vlans664
- Displaying Private Vlans665
Chapter 48: Private Port VLAN Commands667
- Table 67. Private Port VLAN Commands667
- No Vlan668
- Private-Vlan669
- Show Vlan Private-Vlan670
- Switchport Mode Private-Vlan Host671
- Switchport Mode Private-Vlan Promiscuous672
Chapter 49: Voice VLAN Commands673
- Table 68. Voice VLAN Commands673
- No Switchport Voice Vlan674
- Switchport Voice Dscp675
- Switchport Voice Vlan676
- Switchport Voice Vlan Priority678
Chapter 50: VLAN Stacking679
- Overview680
- Components682
- VLAN Stacking Process683
- Table 69. VLAN Stacking Process683
- Example of VLAN Stacking684
Chapter 51: VLAN Stacking Commands689
- Table 70. VLAN Stacking Commands689
- No Switchport Vlan-Stacking690
- Platform Vlan-Stacking-Tpid691
- Show Vlan Vlan-Stacking692
- Switchport Vlan-Stacking693
Section VIII: Port Security695
Chapter 52: MAC Address-Based Port Security697
- Overview698
- Configuring Ports700
- Table 71. MAC Address-Based Port Security Commands700
- Enabling MAC Address-Based Security on Ports702
- Disabling MAC Address-Based Security on Ports703
- Displaying Port Settings704
Chapter 53: MAC Address-Based Port Security Commands705
- Table 72. MAC Address-Based Port Security Commands705
- No Switchport Port-Security706
- No Switchport Port-Security Aging707
- Show Port-Security Interface708
- Table 73. SHOW PORT-SECURITY INTERFACE Command708
- Show Port-Security Intrusion Interface711
- Switchport Port-Security712
- Switchport Port-Security Aging713
- Switchport Port-Security Maximum714
- Switchport Port-Security Violation715
Chapter 54: 802.1X Port-Based Network Access Control717
- Overview718
- Authentication Process719
- Authentication Methods720
- Operational Settings721
- Authenticator Port Operating Modes722
- Supplicant and VLAN Associations726
- Guest VLAN729
- RADIUS Accounting730
- General Steps731
- Guidelines733
- Enabling 802.1X Port-Based Network Access Control on the Switch735
- Configuring Authenticator Ports736
- Configuring Reauthentication739
- Table 74. Reauthentication Commands739
- Removing the Authenticator Role from Ports740
- Disabling 802.1X Port-Based Network Access Control on the Switch741
- Displaying Authenticator Ports742
- Displaying EAP Packet Statistics743
Chapter 55: 802.1X Port-Based Network Access Control Commands745
- Table 75. 802.1X Port-Based Network Access Control Commands745
- Aaa Authentication Dot1X Default Group Radius748
- Auth Dynamic-Vlan-Creation749
- Auth Guest-Vlan751
- Auth Host-Mode752
- Auth Reauthentication754
- Auth Timeout Quiet-Period755
- Auth Timeout Reauth-Period756
- Auth Timeout Server-Timeout757
- Auth Timeout Supp-Timeout758
- Auth-Mac Enable759
- Auth-Mac Reauth-Relearning760
- Dot1X Control-Direction761
- Dot1X Eap763
- Dot1X Initialize Interface765
- Dot1X Max-Reauth-Req766
- Dot1X Port-Control Auto767
- Dot1X Port-Control Force-Authorized768
- Dot1X Port-Control Force-Unauthorized769
- Dot1X Timeout Tx-Period770
- No Aaa Authentication Dot1X Default Group Radius771
- No Auth Dynamic-Vlan-Creation772
- No Auth Guest-Vlan773
- No Auth Reauthentication774
- No Auth-Mac Enable775
- No Dot1X Port-Control776
- Show Auth-Mac Interface777
- Show Auth-Mac Sessionstatistics Interface778
- Show Auth-Mac Statistics Interface779
- Show Auth-Mac Supplicant Interface780
- Show Dot1X781
- Show Dot1X Interface782
- Show Dot1X Sessionstatistics Interface783
- Show Dot1X Statistics Interface784
- Show Dot1X Supplicant Interface785
Section IX: Simple Network Management Protocols787
Chapter 56: Snmpv1 and Snmpv2C789
- Overview790
- Enabling Snmpv1 and Snmpv2C792
- Creating Community Strings793
- Adding or Removing IP Addresses of Trap or Inform Receivers794
- Deleting Community Strings796
- Disabling Snmpv1 and Snmpv2C797
- Displaying Snmpv1 and Snmpv2C798
Chapter 57: Snmpv1 and Snmpv2C Commands801
- Table 76. Snmpv1 and Snmpv2C Commands801
- No Snmp-Server803
- No Snmp-Server Community804
- No Snmp-Server Enable Trap805
- No Snmp-Server Enable Trap Auth806
- No Snmp-Server Host807
- No Snmp-Server View809
- No Snmp Trap Link-Status810
- Show Running-Config Snmp811
- Show Snmp-Server812
- Show Snmp-Server Community813
- Table 77. SHOW SNMP-SERVER COMMUNITY Command813
- Show Snmp-Server View815
- Table 78. SHOW SNMP-SERVER VIEW Command815
- Snmp-Server816
- Snmp-Server Community817
- Snmp-Server Enable Trap818
- Snmp-Server Enable Trap Auth819
- Snmp-Server Host820
- Snmp-Server View822
- Snmp Trap Link-Status824
Chapter 58: Snmpv3 Commands825
- Table 79. Snmpv3 Commands825
- No Snmp-Server827
- No Snmp-Server Group828
- No Snmp-Server Host829
- No Snmp-Server User830
- No Snmp-Server View831
- Show Snmp-Server832
- Show Snmp-Server Group833
- Show Snmp-Server Host834
- Show Snmp-Server User835
- Show Snmp-Server View836
- Snmp-Server837
- Snmp-Server Engineid Local838
- Snmp-Server Group839
- Snmp-Server Host841
- Snmp-Server User842
- Snmp-Server View844
Section X: Network Management847
Chapter 59: Sflow Agent849
- Overview850
- Configuring the Sflow Agent852
- Configuring the Ports853
  - Configuring the Sampling Rate853
  - Configuring the Polling Interval854
- Enabling the Sflow Agent855
- Disabling the Sflow Agent856
- Displaying the Sflow Agent857
- Configuration Example858
Chapter 60: Sflow Agent Commands861
- Table 80. Sflow Agent Commands861
- No Sflow Collector Ip862
- No Sflow Enable863
- Sflow Collector Ip864
- Sflow Enable865
- Sflow Polling-Interval866
- Sflow Sampling-Rate868
- Show Sflow870
- Table 81. SHOW SFLOW Command870
- Show Sflow Database872
- Table 82. SHOW COLLECTOR DATABASE Command873
Chapter 61: LLDP and LLDP-MED875
- Overview876
  - Mandatory LLDP Tlvs877
  - Optional LLDP Tlvs877
  - Table 83. Mandatory LLDP Tlvs877
  - Table 84. Optional LLDP Tlvs877
  - Optional LLDP-MED Tlvs879
  - Table 85. Optional LLDP-MED Tlvs879
- Enabling LLDP and LLDP-MED on the Switch882
- Configuring Ports to Only Receive LLDP and LLDP-MED Tlvs883
- Configuring Ports to Send Only Mandatory LLDP Tlvs884
- Configuring Ports to Send Optional LLDP Tlvs885
- Table 86. Optional LLDP Tlvs885
- Configuring Ports to Send Optional LLDP-MED Tlvs887
- Configuring Ports to Send LLDP-MED CIVIC Location Tlvs889
- Table 87. Abbreviated List of LLDP-MED CIVIC Location Entry Parameters889
- Configuring Ports to Send LLDP-MED Coordinate Location Tlvs893
- Table 88. LLDP-MED Coordinate Location Entry Parameters893
- Configuring Ports to Send LLDP-MED ELIN Location Tlvs897
- Removing LLDP Tlvs from Ports899
- Removing LLDP-MED Tlvs from Ports900
- Deleting LLDP-MED Location Entries901
- Disabling LLDP and LLDP-MED on the Switch902
- Displaying General LLDP Settings903
- Displaying Port Settings904
- Displaying or Clearing Neighbor Information905
- Displaying Port Tlvs907
- Displaying and Clearing Statistics908
Chapter 62: LLDP and LLDP-MED Commands909
- Table 89. LLDP and LLDP-MED Commands909
- Clear Lldp Statistics912
- Clear Lldp Table913
- Lldp Holdtime-Multiplier914
- Lldp Location915
- Lldp Management-Address917
- Lldp Med-Notifications919
- Lldp Med-Tlv-Select920
- Lldp Non-Strict-Med-Tlv-Order-Check922
- Lldp Notifications923
- Lldp Notification-Interval924
- Lldp Reinit925
- Lldp Run926
- Lldp Timer927
- Lldp Tlv-Select928
- Table 90. Optional Tlvs928
- Lldp Transmit Receive931
- Lldp Tx-Delay932
- Location CIVIC-Location933
- Table 91. LLDP-MED CIVIC Location Entry Parameters933
- Location Coord-Location936
- Table 92. LLDP-MED Coordinate Location Entry Parameters936
- Location Elin-Location939
- No Lldp Med-Notifications940
- No Lldp Med-Tlv-Select941
- No Lldp Notifications943
- No Lldp Run944
- No Lldp Tlv-Select945
- No Lldp Transmit Receive946
- No Location947
- Show Lldp949
- Table 93. SHOW LLDP Command949
- Show Lldp Interface951
- Show Lldp Local-Info Interface953
- Show Lldp Neighbors Detail955
- Table 94. SHOW LLDP NEIGHBORS DETAIL Command956
- Show Lldp Neighbors Interface959
- Table 95. SHOW LLDP NEIGHBORS INTERFACE Command959
- Show Lldp Statistics961
- Table 96. SHOW LLDP STATISTICS Command961
- Show Lldp Statistics Interface963
- Table 97. SHOW LLDP STATISTICS INTERFACE Command963
- Show Location965
- Table 98. SHOW LLDP STATISTICS INTERFACE Command965
Chapter 63: Address Resolution Protocol (ARP)967
- Overview968
- Adding Static ARP Entries969
- Deleting Static or Dynamic ARP Entries970
- Clearing the ARP Table971
- Displaying the ARP Table972
Chapter 64: ARP Commands973
- Table 99. Address Resolution Protocol Commands973
- Arp974
- Clear Arp-Cache976
- No Arp977
- Show Arp978
- Table 100. SHOW ARP Command978
Chapter 65: RMON981
- Overview982
- RMON Port Statistics983
- RMON Histories985
- RMON Alarms988
Chapter 66: RMON Commands997
- Table 102. RMON Commands997
- No Rmon Alarm999
- No Rmon Collection History1000
- No Rmon Collection Stats1001
- No Rmon Event1002
- Rmon Alarm1003
- Table 103. MIB Object Names and ID Numbers1005
- Rmon Collection History1007
- Rmon Collection Stats1009
- Rmon Event Log1010
- Rmon Event Log Trap1011
- Rmon Event Trap1012
- Show Rmon Alarm1013
- Table 104. SHOW RMON ALARM Command1013
- Show Rmon Event1015
- Table 105. SHOW RMON EVENT Command1015
- Show Rmon History1017
- Table 106. SHOW RMON HISTORY Command1017
- Show Rmon Statistics1019
- Table 107. SHOW RMON STATISTICS Command1019
Chapter 67: Access Control Lists (Acls)1021
- Overview1022
- Creating Acls1025
- Table 109. ACCESS-LIST Commands for Creating Acls1025
- Adding Acls to Ports1031
- Removing Acls from Ports1032
- Deleting Acls from the Switch1033
- Displaying the Acls1034
Chapter 68: ACL Commands1035
- Table 110. Access Control List Commands1035
- ACCESS-LIST (MAC Address)1037
- Access-List Icmp1040
- Table 111. ICMP Types1041
- Access-List Ip1044
- Access-List Proto1048
- Table 112. Protocol Numbers1050
- Access-List Tcp1053
- Access-List Udp1057
- Access-Group1061
- Mac Access-Group1062
- No Access-List1063
- No Access-Group1064
- No Mac Access-Group1065
- Show Access-List1066
- Show Interface Access-Group1067
Chapter 69: Quality of Service (QOS) Commands1069
- Table 113. Quality of Service Commands1069
- Mls Qos Enable1071
- Mls Qos Map Cos-Queue1072
- Mls Qos Map Dscp-Queue1074
- Mls Qos Queue1076
- Mls Qos Set Cos1077
- Mls Qos Set Dscp1078
- Mls Qos Trust Cos1079
- Mls Qos Trust Dscp1080
- No Mls Qos Enable1081
- No Wrr-Queue Weight1082
- Show Mls Qos Interface1083
- Table 114. SHOW MLS QOS INTERFACE Command1085
- Show Mls Qos Maps Cos-Queue1086
- Show Mls Qos Maps Dscp-Queue1087
- Wrr-Queue Weight1089
Section XI: Management Security1091
Chapter 70: Local Manager Accounts1093
- Overview1094
  - Privilege Levels1094
  - Password Encryption1095
- Creating Local Manager Accounts1096
- Deleting Local Manager Accounts1098
- Creating the Special Password1099
- Deleting the Special Password1100
- Encrypting or Decrypting Local Manager Account Passwords1101
- Displaying the Local Manager Accounts1102
Chapter 71: Local Manager Account Commands1103
- Table 115. Local Manager Account Commands1103
- Enable Password1104
- No Enable Password1105
- No Service Password-Encryption1106
- No Username1107
- Service Password-Encryption1108
- Username1109
Chapter 72: Telnet Server1111
- Overview1112
- Enabling the Telnet Server1113
- Disabling the Telnet Server1114
- Displaying the Telnet Server1115
Chapter 73: Telnet Server Commands1117
- Table 116. Telnet Server Commands1117
- No Service Telnet1118
- Service Telnet1119
- Show Telnet1120
Chapter 74: Telnet Client1121
- Overview1122
- Starting a Remote Management Session with the Telnet Client1123
Chapter 75: Telnet Client Commands1125
- Table 117. Telnet Client Commands1125
- Telnet1126
- Telnet61127
Chapter 76: Secure Shell (SSH) Server1129
- Overview1130
  - Algorithms1130
  - Active Encryption Key1130
- Support for SSH1131
  - Guidelines1131
- SSH and Enhanced Stacking1133
- Creating the Encryption Key Pair1135
- Enabling the SSH Server1136
- Disabling the SSH Server1137
- Deleting Encryption Keys1138
- Displaying the SSH Server1139
Chapter 77: SSH Server Commands1141
- Table 118. Secure Shell Server Commands1141
- Crypto Key Destroy Hostkey1142
- Crypto Key Generate Hostkey1143
- No Service Ssh1145
- Service Ssh1146
- Show Crypto Key Hostkey1147
- Show Ssh Server1148
Chapter 78: Non-Secure HTTP Web Browser Server1149
- Overview1150
- Enabling the Web Browser Server1151
- Setting the Protocol Port Number1152
- Disabling the Web Browser Server1153
- Displaying the Web Browser Server1154
Chapter 79: Non-Secure HTTP Web Browser Server Commands1155
- Table 119. Non-Secure HTTP Web Browser Server Commands1155
- Http Server1156
- Ip Http Port1157
- No Http Server1158
- Show Ip Http1159
Chapter 80: Secure HTTPS Web Browser Server1161
- Overview1162
- Creating a Self-Signed Certificate1165
- Configuring the HTTPS Web Server for a Certificate Issued by a CA1168
- Enabling the Web Browser Server1172
- Disabling the Web Browser Server1173
- Displaying the Web Browser Server1174
Chapter 81: Secure HTTPS Web Browser Server Commands1175
- Table 120. Secure HTTPS Web Browser Server Commands1175
- Crypto Certificate Destroy1176
- Crypto Certificate Generate1177
- Crypto Certificate Import1179
- Crypto Certificate Request1180
- Https Server1182
- Ip Https Certificate1183
- No Https Server1184
- Show Crypto Certificate1185
- Show Ip Https1186
- Table 121. SHOW IP HTTPS Command1186
Chapter 82: RADIUS and TACACS+ Clients1189
- Overview1190
- Remote Manager Accounts1191
  - Guidelines1193
- Managing the RADIUS Client1194
- Managing the TACACS+ Client1197
- Configuring Remote Authentication of Manager Accounts1199
Chapter 83: RADIUS and TACACS+ Client Commands1203
- Table 122. RADIUS and TACACS+ Client Commands1203
- Authentication Purge1205
- Login Authentication1206
- No Login Authentication1208
- No Radius-Acc Enable1209
- No Radius-Server Host1210
- No Server-Based Authentication Radius1211
- No Server-Based Authentication Tacacs1212
- No Tacacs-Server Host1213
- Radius-Acc Enable1214
- Radius-Server Host1215
- Radius-Server Host Acct-Port1217
- Radius-Server Key1219
- Radius-Server Timeout1220
- Server-Based Authentication Radius1221
- Server-Based Authentication Tacacs1222
- Show Radius1223
- Table 123. SHOW RADIUS Command1223
- Show Tacacs1225
- Table 124. SHOW TACACS Command1225
- Tacacs-Server Host1227
Appendix A: System Monitoring Commands1229
- Table 125. System Monitoring Commands1229
- Show Cpu1230
- Show Cpu History1231
- Show Cpu User-Threads1232
- Show Memory1233
- Show Memory Allocation1234
- Show Memory History1235
- Show Memory Pools1236
- Show Process1237
- Show Serialnumber1238
- Show System Interrupts1239
- Show Tech-Support1240
Appendix B: Management Software Default Settings1243
- Boot Configuration File1244
- Class of Service1245
- Console Port1246
- 802.1X Port-Based Network Access Control1247
- Enhanced Stacking1248
- Gvrp1249
- IGMP Snooping1250
- Link Layer Discovery Protocol (LLDP and LLDP-MED)1251
- MAC Address-Based Port Security1252
- MAC Address Table1253
- Management IP Address1254
- Manager Account1255
- Port Settings1256
- RADIUS Client1257
- Remote Manager Account Authentication1258
- Rmon1259
- Secure Shell Server1260
- Sflow Agent1261
- Simple Network Management Protocol (Snmpv1, Snmpv2C and Snmpv3)1262
- Simple Network Time Protocol1263
- Spanning Tree Protocols (STP and RSTP)1264
  - Spanning Tree Status1264
  - Spanning Tree Protocol1264
  - Rapid Spanning Tree Protocol1264
- System Name1266
- TACACS+ Client1267
- Telnet Server1268
- Vlans1269
- Web Server1270
Command Index1271

Allied Telesis AT-9000/28 - Chapter 76: Secure Shell (SSH) Server

Table of Contents

Other manuals for Allied Telesis AT-9000/28

Related product manuals